PKI as a service

certificate service

Kudelski IoT’s Matter Product Attestation Certificate Service enables companies to get scalable access to Device Attestation Certificates, letting them join the Matter ecosystem with confidence and ease. We can also be your strategic security partner throughout your entire product lifecycle.


What is a Matter Certificate?

Matter certificates create trust and guard consumers against counterfeit devices that might claim to have Matter certification but don’t, or that claim to be from that brand but are not. They enable secure device-to-device and device-to-cloud communications so that consumer data and privacy are protected. Matter 1.0 specifically requires the use of Device Attestation Certificates (DACs).

The illustration for Kudelski Matter services

Complexity managed

Putting a Certificate Authority in place yourself is costly and time consuming

Kudelski IoT, as a well-established Public Key Infrastructure (PKI) provider, offers its Non-VID Scoped PAA to Matter member companies. We have passed an exhaustive audit against the Alliance PKI Certificate Policy’s requirements. We provide guaranteed compliance with the Alliance PKI Certificate Policy so you don't need to implement, submit, and maintain your own Certification Authority.


– Easy to generate and deploy certificates


– All root secrets stored in HSMs online and offline


– 30+ years of experience securely provisioning more than 500 million devices

Full-Service Partner

– A wide range of security services and technologies


We generate the certificates you need to be part of the Matter ecosystem

Using Kudelski IoT keySTREAM PKI-as-a-Service, we deliver Matter-compliant certificates that will identify your device as officially certified by Matter and part of the trusted ecosystem, enabling security, interoperability and ease of use for end users.

An icon for a PAA certificate

Trusted certificates from a company that has been creating device credentials for more than 30 years.

An icon for a cloud setup

Cloud setup of your vendor-specific Product Attestation Intermediate (PAI)

An icon for secured managed generation

Managed generation and delivery of Matter Device Attestation Certificates (DAC)

AN icon for batch delivery

Secure batch delivery for offline factories


Account setup

First week
Start of your Matter journey
CSA membership
If you are already a CSA member, you can start the setup of your account on our web service. Per CSA requirements, we will conduct some manual background checks.

New Product Family setup

Next few weeks
Designing a new family
CSA Product certification
Your Product Family is successfully certified by CSA. We can now do the setup of your vendor-specific Product Attestation Intermediate (PAI) on our web service for this Product Family.

Certificate request

In a few hours
Manufacturing devices
By using our online ordering portal, you can now request a batch of certificates and private keys for your devices.

Certificate delivery

In a few minutes
Onboarding devices
Receive the certificate and private key batches, program them into the devices. Your device can now be onboarded into the Matter ecosystem.

Our expertise

Providing technology and services for Matter OEMs to build secure products

Kudelski Group companies have worked with device manufacturers to enable and protect their devices and associated services for more than 30 years.

set-top boxes deployed and provisioned every year, protected by the Kudelski Group’s security solutions.
devices successfully provisioned with secure credentials globally over the past 30 years.

Kudelski IoT keySTREAM

Securely connect, manage & update your IoT devices

A device-to-cloud solution for securing all the key assets of your IoT ecosystem, end-to-end and during its entire lifecycle.

Scalable platform

A scalable platform with APIs that allow you to issue and deliver Device Attestation Certificates.

PKI as a service

keySTREAM is a Kudelski IoT managed platform that takes care of security processes for you. No need to be a security expert or invest in specialized equipment for managing your PAI.

Device security management

A Device Security Management Platform, which you can use to manage your entire product security lifecycle.

Chip-to-cloud capabilities

Kudelski integrates with chipsets and devices, enabling secure and easy to use services such as secure factory programming and in-field provisioning.

Matter-compliant certificate service


Matter-compliant certificate service

Kudelski IoT’s Matter Product Attestation Certificate Service enables companies to get scalable access to Device Attestation Certificates, letting them join the Matter ecosystem with confidence and ease. We can also be your strategic security partner throughout your entire product lifecycle.

Get the PDF

Fact Sheet

Over-the-Air Update Service

Kudelski IoT Secure FOTA empowers you to manage your product’s entire lifecycle.

Get the PDF
Semiconductor Manufacturers Fact Sheet

Fact Sheet

Semiconductor Manufacturer Services & Solutions

Learn more about how we can help you build and validate secure IoT SoCs

Get the PDF


Contact us to learn more

For more information about our Matter-compliant certificate service, contact us….


Articles related to Matter

Read more Insights


Answers about Matter certificates

What devices are subject to Matter certification? What is a Matter x.509 Certificate? Who is part of the Matter protocol? Learn more about Matter with our Q&A below!

Why are connected devices better with a Matter certification?

Devices that are certified by Matter means they are part ofa trusted ecosystem that ensures they are secure, reliable and seamless to use.Matter devices recognize one another as inherently trustworthy because theyhave been through a certification process that ensures they are safe, at Matterprotocols also ensure interoperability by allowing devices and personalassistants like Amazon Alexa, Apple Siri and the Google Personal Assistant canall communicate with each other, making life for consumers much easier.

What is the new Matter smart home certification?

Matter certification’s goal is to make devices easier and safer to use by getting rid of fragmentation across different companies, and to create interoperability among smart home devices and Internet of things (IoT) platforms from different providers.

The Connectivity Standards Alliance (CSA) announced Version 1.0 of the specification on October 4, 2022. The Matter specification is provided at no charge upon request after registering with CSA. The Matter SDK is open source under the Apache license.

After completing the steps described by CSA, device manufacturers will receive an Certified Product Logo they can use on their product. These steps include reading the CSA Policies and Governing Documents, becoming a member of CSA, obtaining a Manufacturer ID or Vendor ID, selecting a compliant platform or network transport, choosing a CSA-authorized testing provider, sending products to be tested, completing and submitting a certification application, and waiting on formal approval from CSA.

What devices are subject to Matter certification?

Matter certification allows any connected device manufacturer to show their commitment to interoperability and quality. Matter-certified devices will include lights, home appliances, security systems, security cameras, and a wide variety of other consumer electronics devices.

What are Device Attestation Certificates for Matter IoT Device Manufacturers?

Matter certificates create trust and guard consumers against counterfeit devices that might claim to have Matter certification but don’t, or that claim to be from that brand but are not. They enable secure device-to-device and device-to-cloud communications so that consumer data and privacy are protected.

Certificates must comply with the Matter standard and must be issued by a Matter-approved certificate authority. There are multiple certificate authorities, including Kudelski IoT, providing such certificates. Kudelski IoT also provides a wide variety of other services including IoT security architecture and design, IoT security technologies, IoT

Matter 1.0 specifically requires the use of Device Attestation Certificates (DACs). This ensures that the authenticity and integrity of connected home devices are attested (proven) before they are allowed to join and be used within a network.

What is a Matter x.509 Certificate?

The X.509 certificate is defined by the International Telecommunication Union's Telecommunication Standardization Sector (ITU-T). It is a digital certificate that uses the widely accepted international X.509 public key infrastructure (PKI) standard to verify that a public key belongs to the user, computer or service identity contained within the certificate.

A public key is a large numerical value used to encrypt data or check the legitimacy of a digital signature. A PKI, moreover, is the underlying framework that enables entities like users and servers to securely exchange information using digital certificates.

The Matter DAC X.509 certificate protects against malicious device and network impersonators. When a certificate is signed by a Device Attestation Authority, the device holding the certificate can be trusted by the entire ecosystem by using a public key certificate to secure and authenticate communications with a second party.

Why are IoT Device Manufacturers Adopting the Matter Protocol?

Curious to know whether the effort and investment of making your devices complaint to the Matter IoT standard is worth it for you as a device manufacturer? For most consumer electronics manufacturers, the answer is likely to be yes. Here are the reasons why:

  • Create effortless inoperability for you and consumers. Adopting matter enables your device to work seamlessly with your customers’ other devices and ecosystems, and gives you a competitive advantage over competitors that don’t support Matter.
  • Reduce complexity and deliver a better user experience. Consumers electronics can be complex for many consumers, and many can’t handle complex set-up instructions. Matter provides a true “plug-and-play” set up and for home electronics and enables consumers to start enjoying your devices as quickly and as effortlessly as possible.
  • Reduce custom development. So many devices come with their own custom app and consumer experience, requiring customers to learn unfamiliar new interfaces to enjoy their purchase. By connecting devices to existing applications and personal assistants, manufacturers can sometimes avoid expensive and complex app development while still satisfying consumers.
  • Take advantage of a large community of developers. By leveraging open-source resources and a strong community of people continuously monitoring and improving the security and robustness of the Matter ecosystem, the whole ecosystem benefits.
  • Protect your reputation long-term. By leveraging the security provided by the Matter standard, you’ll ensure you’re part of a strong ecosystem that consumers come to trust. And by trusting Matter, they will in turn trust you.

Who is part of the Matter protocol?

Initially, Matter was developed by some of the leading companies in technology, including Amazon, Apple, Google, Samsung and Comcast. There are over 400 companies in the Connectivity StandardsAlliance, representing some of the most well-known players in IoT. Membership is divided between Promoters, Participants, Adopters and Associates.

What are the benefits of the Matter protocol?

The main goals of Matter are simplicity, interoperability, reliability and security. All Matter-compliant devices will work together no matter which brand makes them. Matter also promises three major benefits for consumers: greater choice in the products and ecosystems they can use, a simplified user experience (in terms of setup, security, and more), and lower costs (because of greater efficiencies in engineering, manufacturing, and more by not having to support multiple “works with” programs).

What are the benefits of Matter testing, assessment and certification services?

Matter’s authorized testing laboratories follow standardized testing plans and criteria and provide consistent, trustworthy results across all companies they work with. This way, device manufacturers get quick certification on well-made devices and good, clear advice on how to achieve compliance for devices that require improvement.

What role do Matter Working Groups play in the development of the standard?

Matter Working Groups are made up of industry experts who collaborate to develop technical specifications and guidelines for the Matter standard. They play a crucial role in shaping the standard and ensuring its ongoing evolution.

Can devices that are not certified by Matter still work with Matter-certified devices?

Yes, Matter devices are designed to work with non-Matter devices using existing communication protocols. However, non-certified devices may not provide the same level of interoperability, security, or reliability as Matter-certified devices.

How does Matter ensure the privacy of user data?

Matter uses end-to-end encryption to protect user data, ensuring that only authorized devices can access it. It also requires devices to follow strict privacy guidelines, such as obtaining user consent before sharing data.

Can Matter-certified devices be controlled using multiple smart home apps?

Yes, Matter devices can be controlled using any app that supports the Matter protocol. This means that users can choose the app that works best for them, without being locked into a single ecosystem.

What is the role of the Matter certification program in ensuring device interoperability?

The Matter certification program ensures that devices meet strict interoperability standards, allowing them to work seamlessly with other Matter-certified devices. This helps to reduce the complexity of smart home ecosystems and improve the user experience.

How does Matter handle firmware updates for certified devices?

Matter requires devices to support over-the-air (OTA) firmware updates, which allows manufacturers to update their devices with new features and security patches over the air. This ensures that devices remain up-to-date and secure over time.

How does Matter ensure the security of devices that are not connected to the internet?

Matter uses device attestation certificates to ensure the security of devices, even when they are not connected to the internet. This helps to prevent unauthorized access and maintain the integrity of the smart home ecosystem.

Does Matter support devices that use multiple communication protocols?

Yes, Matter is designed to support devices that use multiple communication protocols, such as Wi-Fi and Thread. This allows devices to communicate with each other using the most appropriate protocol for their specific use case.

What are the requirements for becoming a Matter-certified device manufacturer?

To become a Matter-certified device manufacturer, companies must follow strict guidelines for interoperability, security, and reliability. They must also pass rigorous testing and certification processes to ensure that their devices meet these standards.

What is the role of the Matter Advisory Council?

The Matter Advisory Council is made up of industry leaders who provide strategic guidance and feedback on the direction of the Matter standard. They play an important role in ensuring that the standard remains relevant and effective over time.