Matter DAC
Give every device its own cryptographic identity — required for Matter certification
The Matter Device Attestation Certificate (DAC) is a per-device identity certificate mandatory for every device seeking Matter certification. Issued by SSL.com — a CSA-authorized Product Attestation Authority (PAA).
What is a Matter DAC?
The Matter standard requires every certified device to carry a Device Attestation Certificate — a unique X.509 certificate issued during manufacturing that cryptographically identifies the device unit.
When a consumer sets up a Matter device (Apple Home, Google Home, Amazon Alexa, SmartThings), the controller requests the device's DAC and verifies its chain of trust back to the CSA Device Attestation Root. Devices without a valid DAC are rejected.
SSL.com is a CSA-authorized Product Attestation Authority — SSL-issued DACs are recognized by all Matter-compatible controllers.
How Matter DAC issuance works
Manufacturing integration
Manufacturer integrates SSL.com REST API into the production line.
Per-device DAC issued
Each device receives a unique DAC, signed by SSL.com's PAI under the CSA-authorized PAA root.
DAC stored in device
The DAC and private key are provisioned into the device's secure element.
Consumer setup
When added to a Matter controller, the device presents its DAC for attestation.
Attestation verified
Controller verifies DAC chain — device is authenticated and allowed to join.
Key benefits
Request Matter DAC access
Contact our IoT certificate team to discuss your device volumes, manufacturing-line integration, and pricing. Our team will confirm your eligibility as a Matter device manufacturer and set up REST API access for DAC issuance at production scale.
Compliance & standards
Matter (CSA)
Matter Device Attestation
DAC and PAI certificates conform to the Matter Device Attestation specification.
FIPS 140-2
Keys generated in FIPS 140-2 validated HSMs.
Frequently asked questions
Matter PAI
Get your own branded intermediate CA under SSL.com's PAA.
Client Authentication
Machine-to-machine network access control.
OV Code Signing
Sign device firmware and OTA update packages.
