---
title: "PUT /config/borderRouter/revokeKeys"
method: PUT
path: "/config/borderRouter/revokeKeys"
---

# PUT /config/borderRouter/revokeKeys

`PUT /config/borderRouter/revokeKeys`

This method may only be issued to a Border Router (supporting the operation described in Step 3 of [FANTPS] section 6.5.2.5 Revocation of Node Access). The Border Router destroys all group keys (GTKs or LGTKs) except the currently active group key, modifies the lifetime of the currently active group key to be (lifetime / REVOCATION_LIFETIME_REDUCTION), and installs the new group key provided by this API method. The GroupTransientKey object indicates the type of group keys (GTK or LGTK) upon which this method acts.

## Request body

- GroupTransientKey — A single Group Transient Key (GTK or LGTK) populated on the BR.
  - `gtk` string, required — Group Transient Key
  - `isLgtk` boolean — If omitted or set to false, key is a GTK. If included and set to true, key is an LGTK.

## Response `200`

Border Router successfully configured.

## Other responses

- `400` — Device is not a Border Router.
- `default` — Unknown error occurred

---

[API](https://skmtc.net/siliconlabs/apis/tbu-api.md) · [All operations](https://skmtc.net/siliconlabs/apis/tbu-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/siliconlabs/tbu-api/versions/8475de394ee2/schema)