Placement of Certification Declaration (DC) - MATTER

[Jenzo]

Hi Nordic,

We have read about 'Storing Certification Declaration in firmware' and we have also read case ID: 309896.

However it is not clear to us where we need to store the certificate for production purposes.

We would prefer to store the certificate in Zephyr. 

Thanks.

[Maria Gilje]

Hello,

Like the Storing Certification Declaration in Zephyr section in the Storing Certification Declaration in firmware documentation states, the CD can be stored in the Zephyr Settings subsystem through CLI or through Zephyr's API in the firmware. Is the documentation not clear enough to answer where you should store the CD?

Best regards,

Maria

[Jenzo]

Hi Maria,

No, it is not clear.

We believe that we will receive a certificate in a PEM format from CSA, which we needs to store somewhere in SDK file directory and the PEM will be incorporated into the program firmware, right?

If so, where in the SDK file directory do we need to store it?

Regards

Jens

[Maria Gilje]

Jenzo said:

Yes, I get the error message from an Apple Homepod - using Apple Home on an iPhone.

Is your CD meant for testing at an Authorized Test Lab (ATL)? If so, your device will not show up as certified on commercial ecosystems. The device will only show up as certified on commercial ecosystems after passing ATL testing.

Do you have a production DAC which points to the Distibuted Compliance Ledger(DCL)?

[Maria Gilje]

Jenzo said:

Just checked one certificate and it is the right VID and PID.

Subject: CN = Mvid:141D Mpid:0111

And these are the same for the CD and the DAC?

[Jenzo]

Please note that we are MATTER certified!!!

The CD has been issued by CSA. 

And yes, these are the same for the CD and the DAC.

[Jenzo]

We are also listed in the DCL. You can check yourself.

[Maria Gilje]

Jenzo said:

We are also listed in the DCL. You can check yourself.

Jenzo said:

Subject: CN = Mvid:141D Mpid:0111

I checked your DCL listing and saw that the hex ID for PID is 0x6f and the decimal number is 0111. You list your VID in the hex format, so please ensure that the PID is also in a hex format.

Also, regarding testing with a Matter controller: we can help you most when you test your device with the chip-tool. Please test with the chip-tool and provide logs to us if you have any issues.

edit: I wrote VID for your PID, sorry about that. Fixed it.

[Jenzo]

My VID on DCL is not what you are saying. Please view attached picture from DCL.

Where should we use the PID in hex format? In the prj.conf file?

[Jenzo]

Sorry Maria, 

Jenzo said:

Subject: CN = Mvid:141D Mpid:0111

is a printout from the certificate which is created by Kudelski. Do you want me to tell Kudelski to re-create the certificates so that the PID is in hex format?

Regards

Jens

[Jenzo]

Hi Maria,

Ok. Now that you have corrected your previous answer, I understand. 

I am in talks with Kudelski in order for them to change the certificates. 

This must be the reason for the feedback from the controller (unauthorized device).

Thank you for your help.

Best regards

Jens

[Maria Gilje]

Hi Jens,

The developers has confirmed that the format needs to be hex. Good to hear that you have initiated the change with Kudelski.

Best regards,

Maria

[Jenzo]

Hi Maria,

We have testet with new certificates and it works perfectly!

Thank you for your help! It is much appreciated.

You can close this case now.

Thanks.

Jens