Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error on commissioning step 'AttestationVerification': 'Error CHIP:0x000000AC' (CON-1473) #1205

Open
stefano055415 opened this issue Dec 13, 2024 · 3 comments

Comments

@stefano055415
Copy link

Hi, I'm trying to commission a matter device with the controller example.

I tried first using the light example as a device and everything works fine.

I then tried to commission a certified device and I get the error Error on commissioning step 'AttestationVerification': 'Error CHIP:0x000000AC'

I understood that the problem is the test certificate that I am using in the controller, but I wanted to ask if it was possible to bypass this check and still conclude the commissioning at least for this first test phase

@github-actions github-actions bot changed the title Error on commissioning step 'AttestationVerification': 'Error CHIP:0x000000AC' Error on commissioning step 'AttestationVerification': 'Error CHIP:0x000000AC' (CON-1473) Dec 13, 2024
@shripad621git
Copy link
Contributor

@stefano055415 , in case you want to bypass the attestation verification, you can use --bypass-attestation-verifier in chip-tool which intends to continue commissioning in case of attestation failure.
The command chip-tool pairing ble-wifi --help will provide you a description of the option as shown below:
--bypass-attestation-verifier: Bypass the attestation verifier. If not provided or false, the attestation verifier is not bypassed. If true, the commissioning will continue in case of attestation verification failure.

@stefano055415
Copy link
Author

@shripad621git

ok with chip-tool I can use the bypass, but with the example of the controller how do I do it?

The device is certified but the controller is not

@shripad621git
Copy link
Contributor

@stefano055415 , can you please follow the instructions here using the Attestation Trust Store - Spiffs and copying the
production certs from ${ESP_MATTER_PATH}/connectedhomeip/connectedhomeip/credentials/production/paa-root-certs/*.der to paa_cert directory.
We will implement the main net DCL PAA cert fetching logic in the controller.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants