How can I use my own PAI and DAC?

[SunHuang]

I'm currently using NCS 2.9.0.

However, the default certificate path is C:\ncs\v2.9.0\modules\lib\matter\credentials\development\attestation.

I used the parameters below, but encountered a compilation error. How should I implement this?

CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT="C:/nordic/Matter-Development-DAC-VID-PID-Cert.der"
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_KEY="C:/nordic/Matter-Development-DAC-VID-PID-Key.der"
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_PAI_CERT="C:/nordic/Matter-Development-PAI-VID-noPID-Cert.der"

[Amanda Hsieh]

Hi, 

Did you add CONFIG_CHIP_FACTORY_DATA_CERT_SOURCE_USER=y? See the certificates obtained during the certification process. 

I added the following configs to the matter/template/prj.conf and got no build error. 

CONFIG_CHIP_FACTORY_DATA_CERT_SOURCE_USER=y
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT="C:/nordic/Matter-Development-DAC-VID-PID-Cert.der"
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_KEY="C:/nordic/Matter-Development-DAC-VID-PID-Key.der"
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_PAI_CERT="C:/nordic/Matter-Development-PAI-VID-noPID-Cert.der"

If the above cannot help, please provide the build log and build/app/zephyr/.config file. 

Regards,
Amanda H.

[SunHuang]

Hi

Your suggestion is effective, but I encountered an error after adding CONFIG_CHIP_FACTORY_DATA_USER_CERTS_CD_CERT. I'm currently unable to commission successfully using --paa-trust-store-path, so I'm not sure if it's having any impact. Below is the compilation error message:

Parsing C:/nordic_prj/DL02_S2MB_KPD_Small/Kconfig
C:/nordic_prj/DL02_S2MB_KPD_Small/prj.conf:52: warning: attempt to assign the value '"C:/nordic_prj/DL02_S2MB_KPD_Small/chip-cert/Chip-Test-CD-0x1530-0x0201.der"' to the undefined symbol CHIP_FACTORY_DATA_USER_CERTS_CD_CERTLoaded configuration 'C:/nordic_prj/DL02_S2MB_KPD_Small/boards/sunion/dl02_s2mb_kpd_small/dl02_s2mb_kpd_small_nrf5340_cpuapp_defconfig'
Merged configuration 'C:/nordic_prj/DL02_S2MB_KPD_Small/prj.conf'
Merged configuration 'C:/nordic_prj/DL02_S2MB_KPD_Small/build/DL02_S2MB_KPD_Small/zephyr/.config.sysbuild'


error: Aborting due to Kconfig warnings

CMake Error at C:/ncs/v2.9.0/zephyr/cmake/modules/kconfig.cmake:396 (message):
  command failed with return code: 1
Call Stack (most recent call first):
  C:/ncs/v2.9.0/nrf/cmake/modules/kconfig.cmake:29 (include)
  C:/ncs/v2.9.0/zephyr/cmake/modules/zephyr_default.cmake:133 (include)
  C:/ncs/v2.9.0/zephyr/share/zephyr-package/cmake/ZephyrConfig.cmake:66 (include)
  C:/ncs/v2.9.0/zephyr/share/zephyr-package/cmake/ZephyrConfig.cmake:92 (include_boilerplate)
  CMakeLists.txt:12 (find_package)

-- Configuring incomplete, errors occurred!

CMake Error at cmake/modules/sysbuild_extensions.cmake:514 (message):
  CMake configure failed for Zephyr project: DL02_S2MB_KPD_Small

  Location: C:/nordic_prj/DL02_S2MB_KPD_Small
Call Stack (most recent call first):
  cmake/modules/sysbuild_images.cmake:20 (ExternalZephyrProject_Cmake)
  cmake/modules/sysbuild_default.cmake:20 (include)
  C:/ncs/v2.9.0/zephyr/share/zephyr-package/cmake/ZephyrConfig.cmake:75 (include)
  C:/ncs/v2.9.0/zephyr/share/zephyr-package/cmake/ZephyrConfig.cmake:92 (include_boilerplate)
  C:/ncs/v2.9.0/zephyr/share/sysbuild-package/cmake/SysbuildConfig.cmake:8 (include)
  C:/nordic_prj/DL02_S2MB_KPD_Small/sysbuild/CMakeLists.txt:3 (find_package)


-- Configuring incomplete, errors occurred!
See also "C:/nordic_prj/DL02_S2MB_KPD_Small/build/CMakeFiles/CMakeOutput.log".
FATAL ERROR: command exited with status 1: 'C:\ncs\toolchains\b620d30767\opt\bin\cmake.EXE' -DWEST_PYTHON=C:/ncs/toolchains/b620d30767/opt/bin/python.exe '-BC:\nordic_prj\DL02_S2MB_KPD_Small\build' -GNinja -DCONF_FILE=prj.conf '-SC:\ncs\v2.9.0\zephyr\share\sysbuild' '-DAPP_DIR:PATH=C:\nordic_prj\DL02_S2MB_KPD_Small'

[Amanda Hsieh]

SunHuang said:

I encountered an error after adding CONFIG_CHIP_FACTORY_DATA_USER_CERTS_CD_CERT

Do you mean "CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT"?

Enabling CONFIG_CHIP_FACTORY_DATA_CERT_SOURCE_USER only supports to set the path for 

• CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT

• CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_KEY

• CONFIG_CHIP_FACTORY_DATA_USER_CERTS_PAI_CERT

[SunHuang]

Hi

How do I compile CD into my application?

[Amanda Hsieh]

You can follow the instructions in the Storing Certification Declaration in firmware documentation.

[SunHuang]

Hi,

Thanks for your help