Failed to store thread credential in keychain | Home Assistant | Page 1

turbid jacinth Sep 27, 2024, 7:27 PM

#

When I try to send Thread credentials to iphone I get a "Failed to store thread credential in keychain. I have tried deleting and reloading thread add-on and companion app. Any suggestions?

sudden rose Sep 27, 2024, 9:36 PM

#

What’s your border router? Are you nearby it?

#

You can only save credentials when iOS can find the border router nearby to ask for more information

turbid jacinth Sep 28, 2024, 10:03 AM

#

I am using the add-on Open Border router and I am only a couple of feet away.

sudden rose Sep 28, 2024, 12:43 PM

#

Same network? No complex VLAN setups?

#

What app version are you using?

turbid jacinth Sep 28, 2024, 2:22 PM

#

I do have VLAN’s but both my phone and HA ate both on the same default lan. HA is the most up to date and app is 24.9.3.

sudden rose Sep 28, 2024, 4:03 PM

#

Please export your logs and send to me (preferably after you try to send the credentials again)

turbid jacinth Sep 28, 2024, 5:07 PM

#

Which log should I send you?

sudden rose Sep 28, 2024, 5:45 PM

#

Companion app settings >> debugging >> export logs

#

Drop me a DM since it contains sensitive data

sudden rose Sep 29, 2024, 11:18 PM

#

I see in your logs Failed to store thread credential in keychain: Thread network credentials does not match with any of the active thread networks around, so for some reason iOS can't find your border router nearby or the credentials are incorrect.

Is this related to what we were investigating @elfin pier ? I know resetting the OTBR can fix the issue but it will also make you lose all paired devices

turbid jacinth Sep 30, 2024, 2:17 AM

#

I tried resetting the OTBR and it didn’t fix the issue.
One thing I should may mention not sure if it makes a difference. I had this running on my HA Blue I recently moved everything to a more powerful machine. The thread devices didn’t come back after the restore. I removed OTBR add on and the integrations and started fresh. I have tried an android device and iOS. Not sure if there’s a leftover file somewhere?

oak spear Sep 30, 2024, 2:20 AM

#

So it does not work for you on Android either? For me it does work on Android, it was a fresh install of the companion app on android, however, it never had been installed on Android previously.

turbid jacinth Sep 30, 2024, 2:24 AM

#

Correct doesn’t work on either device. That’s what makes me think there is a some config file somewhere that needs to be deleted.

oak spear Sep 30, 2024, 2:25 AM

#

Ah, interesting. Since Bruno is looking into both of our bugs, I'll leave it to him.

elfin pier Sep 30, 2024, 6:58 AM

#

sudden rose I see in your logs `Failed to store thread credential in keychain: Thread networ...

Yes, this is the same issue as we're investigating

sudden rose Sep 30, 2024, 8:15 AM

#

hm curious, your logs @oak spear show a different error message Failed to store thread credential in keychain: Can not store frozen credentials, I need to find out what is a "frozen credential", I never had this issue

oak spear Sep 30, 2024, 8:16 AM

#

sudden rose hm curious, your logs <@885773727646748695> show a different error message `Fail...

Is there a particular low level status code or trigger that results in that english message?

sudden rose Sep 30, 2024, 8:19 AM

#

Im checking the docs now and apparently it is just a generic Error object, I'll let you know if I find more

#

In case you want to dig as well: https://developer.apple.com/documentation/threadnetwork/thclient/storecredentials(forborderagent:activeoperationaldataset:completion:)

oak spear Sep 30, 2024, 8:22 AM

#

I see nothing there that mentions "frozen". 😦 My guess is this is coming from the error argument in the callback?

If so... I wonder...

I had been trying to, unsuccessfully, add another device to Apple Home. I wonder if it's plausible that Apple Home might be interferring?

Let me delete that "home" and try again...

#

Hmm, that did not change anything.

sudden rose Sep 30, 2024, 8:24 AM

#

Whats you final goal if all works? just so I understand

oak spear Sep 30, 2024, 8:24 AM

#

I want to be able to use my phone to commission new devices to the Home Assistant network.

#

(The iPhone, that is.)

sudden rose Sep 30, 2024, 8:26 AM

#

Ok, so tweaking Apple Home won't help, we need to find out why your credential is not saved.
Do you have apple border routers as well in your network? (HomePod/AppleTV)

oak spear Sep 30, 2024, 8:28 AM

#

No, the only border router I have at the moment is the ZBT-1 and the Open Thread Router. This is my first entry into Home Automation, and I got Home Assistant on the 27th.

#

I did just now notice this entry in the docs you've linked:

If a person changes the SSID of a Thread-capable Wi-Fi router, confirm that the credentials match the preferred network credentials. If not, read the preferred network credentials and store them in iCloud Keychain.

#

I have setup a particular network with a particular SSID for 2.4GHz, however, my phone has been configured to use multiple networks and could easily have changed to a different one without me noticing... Is that potentially a contributing factor?

sudden rose Sep 30, 2024, 8:30 AM

#

Can you try again making sure your iPhone + home assistant are in the same network?

oak spear Sep 30, 2024, 8:32 AM

#

They are in the same network. However, the HA is plugged in physically - it is not using an SSID because it is not using wifi. I don't think HA Green has wifi?

however, it's possible that the SSID may have changed on the thread border router without me noticing...

I've just changed the phone's network, killed and restarted HA... (To clarify: HA Companion app, I'm not restarting the HA Green)

#

and noticing I now get a permission popup which I've accepted "this once", but still fails to store thread credentials.

sudden rose Sep 30, 2024, 8:33 AM

#

Yeah, having it wired is not a problem, mine is as well, they just need to be configured to be on the same network/vlan, if you havent make advanced configurations in your router then this should be the default

sudden rose Sep 30, 2024, 8:34 AM

#

oak spear and noticing I now get a permission popup which I've accepted "this once", but s...

Which popup exactly?

oak spear Sep 30, 2024, 8:34 AM

#

Then that's the case.

#

sudden rose Sep 30, 2024, 8:35 AM

#

OK got it, btw, unrelated to that but if you use internal and external URLs based on SSID, you need to enable location permission always otherwise it may fail to detect which URL to use in background.

#

Please go to companion app settings >> debugging >> thread and send me a screenshot

oak spear Sep 30, 2024, 8:36 AM

#

I’ll set that now in settings.

As for that screen, that was entirely empty, let me grab it today (probably same)

#

My permissions are now as follows (previously location was not set to always)

#

sudden rose Sep 30, 2024, 8:40 AM

#

Now try to send credentials to your phone once more and then if it fails, share the logs with me https://forms.gle/Uoqz127Phx4mMTpS6

Google Docs

Submit logs to iOS Engineer

oak spear Sep 30, 2024, 8:40 AM

#

Can i dm instead in discord? (Its easier)

sudden rose Sep 30, 2024, 8:40 AM

#

sure

oak spear Sep 30, 2024, 8:42 AM

#

I forgot where to get those logs. (Thread device has “download logs” but they don’t do anything)

sudden rose Sep 30, 2024, 8:42 AM

#

Companion app settings >> debugging >> export logs

oak spear Sep 30, 2024, 8:43 AM

#

Perfect

#

You should have those. Unfortunately i have to get going (our timezones are terrible! 😫), is this everything you need for today?

sudden rose Sep 30, 2024, 8:45 AM

#

oak spear You should have those. Unfortunately i have to get going (our timezones are terr...

For now yes, I'll keep messaging here in case I have news

#

Have a good rest!

oak spear Sep 30, 2024, 8:45 AM

#

Perfect!

#

Thanks 🙂

sudden rose Oct 1, 2024, 8:24 AM

#

@turbid jacinth and @oak spear even with this credentials failing to save, if you try to comission a NEW matter over thread device, what error do you get?

oak spear Oct 1, 2024, 8:28 AM

#

From memory, I would get the no thread bridge found "Thread Border Router Required", and commission would fail, let me see if I have any screenshots that I might have kept...

Looks like I didn't keep screenshots, I think the app responded with "Thread Border Router Required".

Would you like me to test? I do have one last thread device I have not yet commissioned...

#

(My memory is not great, if you'd like me to test this device that's fine, it just potentially means I don't have new devices moving forward for testing. 🙂 )

sudden rose Oct 1, 2024, 8:32 AM

#

Sure, give it a try, but what you reported makes sense as well, if it fails you will still have 1 device not configured 😄

oak spear Oct 1, 2024, 8:35 AM

#

Just got an interesting popup, I might have seen it before but... Allow "Home Assistant" to find Bluetooth devices?" Used to scan for Improv devices", this is notable because it's telling me that there are more than 50 devices found.

sudden rose Oct 1, 2024, 8:35 AM

#

Nah, this is unrelated, it was introduced to setup Improv-BLE devices

#

unfortunately :/

oak spear Oct 1, 2024, 8:35 AM

#

It's now setting up! Ah, but still failed.

sudden rose Oct 1, 2024, 8:36 AM

#

oh :/ what do you see now?

oak spear Oct 1, 2024, 8:36 AM

#

sudden rose Oct 1, 2024, 8:36 AM

#

Can you send me your logs again? DM of course

oak spear Oct 1, 2024, 8:37 AM

#

SUre thing.

#

Sent

sudden rose Oct 1, 2024, 8:43 AM

#

Good news is that Apple can see your network:

threadScanResults: ["Network name: ha-thread-5daf"]

So if somehow we find a way to save those credentials it will succeed

#

In your case I still need an answer from Apple because thats the first time I see "frozen credentials" error

oak spear Oct 1, 2024, 8:44 AM

#

Great!

#

And yeah, forgot to mention that the phone is clearly interacting with the device as I add it. (It just fails as you saw)

#

I know because it's an Aqara Motion and Light sensor, and the blue blinking it has suddenly changes when doing this.

sudden rose Oct 1, 2024, 8:49 AM

#

Probably the iPhone can put the device in pairing mode but then fails to proceed due to lack of BR

oak spear Oct 1, 2024, 8:51 AM

#

Looks like it.

#

Oh, the phone was on a 5GHz network just then, I forgot to change it. Same outcome, though.

#

Been paranoid lately in keeping the phone on 2.4GHz while doing the home assistant stuff.

sudden rose Oct 1, 2024, 8:55 AM

#

Yeah, well, in your case I dont think your setup is the problem, we just need to find out what frozen credentials means. btw I will check your logs again, maybe the message has changed

#

Can you try to send your credentials again and share the logs with me once more?

#

Which Core version are you using?

oak spear Oct 1, 2024, 8:58 AM

#

Should be the latest: 2024.9.3 (The issue started when updating to it, along with the update to the OpenThreadBorderRouter.)

#

Taking a while to sync credentials. Oh, and different error.

#

Tried it again, back to the same error.

sudden rose Oct 1, 2024, 8:59 AM

#

How do you know it started on this version? Was it working before? Because your keychain looks empty

oak spear Oct 1, 2024, 8:59 AM

#

It was working before, I have a bunch of thread devices I already commissioned.

#

I did struggle though, until we decided to use the testflight version.

(The testflight version gives a confirmation that you've successfully sync'ed, that the released version does not)

#

Meant to send the screenshots here, not in DM, but oh well. 🙂

#

Logs sent

sudden rose Oct 1, 2024, 9:03 AM

#

Ok, sorry Im a bit confuse now. correct me if I am wrong:

So before you were able to save credentials in keychains successfully using the testflight app version but not AppStore app version.
Then you comissioned those thread devices using the HA app
Then you updated Core(?) and it stopped working?

oak spear Oct 1, 2024, 9:06 AM

#

Correct. As for the first point I'm not sure, we were debugging several things and this was my first time. The app store version does not confirm that you are able to save credentials. The testflight version does confirm it, with a nice tick.
I then comissioned... 6 thread devices (or thereabouts), using the HA app.
I then updated core (and also openthreadborderrouter), and the next day noticed I can no-longer commission new devices.

#

Unlike @turbid jacinth here, it seems I can commission them anyway using an Android phone, so I'm being somewhat fussy and stubborn in wanting to use the iPhone as I normally do not use the android phone at all.

#

I do actually have another iPhone on the same system I could use to try commissioning them, actually, I could try that? (Different model and different iOS version)

#

(That one is my wife's)

sudden rose Oct 1, 2024, 9:09 AM

#

That would be a nice test

oak spear Oct 1, 2024, 9:09 AM

#

I'll do that.

#

It's in french, so bear with me a bit. 😆

#

Oh, and using the app store version.

#

Looks different, I can't seem to sync using it.

#

#

(She's logged in as a different user, but still 'admin' in HA)

#

Mine's an iPhone 14 Pro, hers is an iPhone 7.

sudden rose Oct 1, 2024, 9:17 AM

#

Let me check the conditions for thread, one sec

#

which iOS it is?

oak spear Oct 1, 2024, 9:17 AM

#

Wow, quite old: 15.8.3, I should upgrade it a bit later.

#

(Mine is 18.1, actually there's a pending update for 18.1 beta 5, I should install that tonight)

sudden rose Oct 1, 2024, 9:18 AM

#

iOS 16.4 is the minimum... and it only works well on 17+ to be honest

oak spear Oct 1, 2024, 9:19 AM

#

I'll upgrade hers a bit later then.

sudden rose Oct 1, 2024, 9:19 AM

#

in DM you sent me 2 screenshots with 2 different error messages? they both show up now when you tested?

oak spear Oct 1, 2024, 9:20 AM

#

The two screenshots were two different attempts I had tried just at that point. The first one was the first attempt today, and then when I hit "retry", I got the second one.

#

I now only get the second one.

#

(Also, to be clear, it's the "Send credentials to phone" I'm tapping on today)

#

Maybe there was a transient network error causing the first one to appear? 🤷‍♂️

sudden rose Oct 1, 2024, 9:23 AM

#

Check the last matter over thread device you comissioned and send me a screenshot like this please

#

you can find it in the device page

oak spear Oct 1, 2024, 9:24 AM

#

The one I was able to successfully add using Android, or one of the ones I did previously? (I do not remember the previous one)

sudden rose Oct 1, 2024, 9:25 AM

#

last one that succeeded via iOS

oak spear Oct 1, 2024, 9:27 AM

#

I don't know if those serial numbers are sensitive, actually. The IP addresses are not sensitive though, not in my case.

sudden rose Oct 1, 2024, 9:28 AM

#

I dont think so, but feel free to delete now

oak spear Oct 1, 2024, 9:28 AM

#

Done. 🙂

sudden rose Oct 1, 2024, 9:29 AM

#

Then its REALLY weird that you have nothing in your keychain... those devices were comissioned through the native matter comissioning flow? (the same one that is failing now)

oak spear Oct 1, 2024, 9:29 AM

#

They were indeed.

sudden rose Oct 1, 2024, 9:30 AM

#

Ok, give it a try after you have updated to beta 5, I am also running beta 5 and it is working for me.
Just so we are sure the problem is not the beta

oak spear Oct 1, 2024, 9:31 AM

#

Might just update it now.

sudden rose Oct 1, 2024, 9:32 AM

#

@turbid jacinth When you see this, please also drop me your device model and iOS version as well

oak spear Oct 1, 2024, 9:37 AM

#

No change on beta 5.

#

I must go for dinner now.

sudden rose Oct 1, 2024, 9:38 AM

#

Enjoy!

#

@wet atlas

turbid jacinth Oct 1, 2024, 6:24 PM

#

Just to give you an update. I was finally able to figure out why I couldn’t get my phone to update its credentials. I changed to a IOT ssd on my network, different vlan and it updated iOS credentials. So I went back to my UniFi settings and compared the two different wifi settings and noticed that “multicast and Broadcast Control” was selected. I unselected and now phone will receive the thread credentials. Now I can’t seem to add a thread device so it’s half way fixed.

#

I am using iPhone 13 Pro software 18

sudden rose Oct 1, 2024, 10:51 PM

#

Please try to pair a device again recording your screen and after it fails, send me the logs

turbid jacinth Oct 2, 2024, 12:24 AM

#

I had a new beta update come in today for the Companion app. This seems to have fixed the issue I was now able to pair my matter device.

#Failed to store thread credential in keychain