Placement of Certification Declaration (DC) - MATTER

[Jenzo]

Hi Nordic,

We have read about 'Storing Certification Declaration in firmware' and we have also read case ID: 309896.

However it is not clear to us where we need to store the certificate for production purposes.

We would prefer to store the certificate in Zephyr. 

Thanks.

[Maria Gilje]

This log compiles successfully. Which method is it from? Method 1 or Method 2 from your description below?

Jenzo said:

Method 1: 

Changed the chip_project_config.h with the following entry:

 

CHIP_DEVICE_CONFIG_CERTIFICATION_DECLARATION=[’Secuyou CD’]

 

The Secuyou CD array was derived from the DER format (DER received from CSA) command: 

xxd -i credentials ’Secuyou_csaMatter.der’  (name is not the original)

But that didn’t work either. It does not compile. 

Yesterday we tried the following:

Method 2:

Copied the Secuyou CD array and inserted it into src/credentials/examples/DeviceAttestationCredsExample.cpp  (we can verify that the inserted array is used during compilation)

And changed the prj.conf to include:

CONFIG_CHIP_CERTIFICATION_DECLARATION_STORAGE=y

 

The code compiles fine.

[Jenzo]

Method 1.

[Maria Gilje]

So do I understand correctly that the compilation issue was fixed with the following adjustment?

Jenzo said:

We have now adjusted the format in chip_project_config.h. according to your point 1.

[Jenzo]

correct!

[Maria Gilje]

Good that Method 1 is now building successfully. This is the recommended method, so please revert the changes related to Method 2.

Regarding the unauthorized device issue:

Please check that the Vendor ID and Product ID in the CD matches the VID and PID in your Device Attestation Certification (DAC).

Also, where do you get the error message? From a commercial Matter ecosystem controller?