Matter Certificates

Matter Certificates

Matter certification starts with a DAC from an authorized CA

The Matter smart home standard requires every certified device to carry a Device Attestation Certificate (DAC) issued under a CSA-accredited Product Attestation Authority (PAA). SSL.com is CSA-authorized, providing both per-device DACs and per-product-line PAIs for device manufacturers.

Get your DAC or PAI Talk to an expert

Compare Matter certificates

Matter DAC

Device Attestation Certificate: per-device cryptographic identity required for every Matter-certified device. One DAC per manufactured unit, issued via SSL.com SWS REST API at manufacturing-line scale. SSL.com is a Connectivity Standards Alliance (CSA) authorized Product Attestation Authority.
Explore Matter DAC

Matter PAI

Product Attestation Intermediate: your own branded intermediate CA operating under SSL.com’s CSA-authorized PAA. Issue DACs under your company name in the certificate chain, segmented by product line if needed. Enterprise engagement for device manufacturers launching multi-product Matter programs.
Explore Matter PAI

Which do you need?

I manufacture devices and need Matter certification

Start with Matter DAC certificates: one per device unit, issued during manufacturing via SSL.com's REST API.

I want my own branded intermediate CA

Add a Matter PAI: SSL.com issues your PAI under its authorized PAA. Your DACs carry your organization's name.

How Matter device attestation works

1

Manufacturing

Each device receives a unique DAC during production: issued via REST API.

2

First setup

When the device is added to a Matter controller, the controller requests the device's DAC.

3

Attestation

The controller verifies the DAC chain back to the CSA Device Attestation Root.

4

Acceptance or rejection

Valid DAC: device joins. Missing or invalid DAC: device rejected.

Compliance & standards

Matter (CSA)

Matter Device Attestation Certificates are mandatory under CSA policy for every Matter-certified device. SSL.com’s PAA authorization is the required credential path for device certification on Apple Home, Google Home, Amazon Alexa, and SmartThings ecosystems.

Matter Device Attestation

DAC and PAI certificates conform precisely to the Matter Device Attestation specification, including the required x.509 extensions, key usage flags, and attestation format required by Matter controllers during device commissioning.

FIPS 140-2

CA root and intermediate private keys are generated and stored in FIPS 140-2 Level 3 validated hardware security modules. Keys never leave the HSM in plaintext: the protection profile required by CSA attestation program policies.

Frequently asked questions

A Matter DAC is a unique X.509 certificate provisioned into each IoT device during manufacturing. It encodes the device's identity (manufacturer, product type, and unique serial number) in a cryptographic credential that any Matter controller can verify. When a user adds a device to their smart home, the controller verifies the DAC against the CSA's device registry to confirm the device is genuine and certified.
Yes. SSL.com is a CSA (Connectivity Standards Alliance) authorized Product Attestation Authority: one of a limited number of Certificate Authorities globally authorized to issue Matter DACs and Product Attestation Intermediates (PAIs). PAIs and DACs issued by SSL.com are accepted by all Matter controllers and all Matter-certified platforms including Apple Home, Google Home, Amazon Alexa, and Samsung SmartThings.
A Product Attestation Intermediate (PAI) is a certificate issued to a specific product family. Individual device DACs are issued under the PAI, creating a chain: CSA Root → PAI (product family) → DAC (individual device). The PAI allows manufacturers to issue DACs at scale for a product line while maintaining a clear cryptographic chain of custody.
SSL.com's SWS REST API supports high-throughput automated DAC issuance integrated with manufacturing execution systems. A PAI is issued per product family; individual DACs are then issued per device serial number through API calls that integrate directly into the production line, with each certificate injected into the device during manufacturing.
A device without a valid DAC cannot join a Matter network: meaning it cannot work with Apple Home, Google Home, Amazon Alexa, or Samsung SmartThings out of the box. This makes the DAC a functional prerequisite for product operation, not an optional security enhancement.

Get your Matter certificates

SSL.com is a CSA-authorized Product Attestation Authority
Get Matter DAC certificates

We’d love your feedback

Take our survey and let us know your thoughts on your recent purchase.

Take Survey
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognizing you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

For more information read our Cookie and privacy statement.

3rd Party Cookies

This website uses Google Analytics & Statcounter to collect anonymous information such as the number of visitors to the site, and the most popular pages.

Keeping these cookies enabled helps us to improve our website.

Show details
Powered by  GDPR Cookie Compliance