How can I use my own PAI and DAC?

RE: How can I use my own PAI and DAC?

SunHuang — Thu, 24 Apr 2025 06:46:37 GMT

Hi,

Thanks for your help

RE: How can I use my own PAI and DAC?

Amanda Hsieh — Wed, 23 Apr 2025 15:36:50 GMT

You can follow the instructions in the Storing Certification Declaration in firmware documentation.

RE: How can I use my own PAI and DAC?

SunHuang — Wed, 23 Apr 2025 01:43:41 GMT

How do I compile CD into my application?

RE: How can I use my own PAI and DAC?

Amanda Hsieh — Tue, 22 Apr 2025 19:37:30 GMT

[quote user="SunHuang"] I encountered an error after adding CONFIG_CHIP_FACTORY_DATA_USER_CERTS_CD_CERT[/quote]

Do you mean "CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT"?

Enabling CONFIG_CHIP_FACTORY_DATA_CERT_SOURCE_USER only supports to set the path for

CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_KEY
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_PAI_CERT

RE: How can I use my own PAI and DAC?

SunHuang — Tue, 22 Apr 2025 03:52:18 GMT

Your suggestion is effective, but I encountered an error after adding CONFIG_CHIP_FACTORY_DATA_USER_CERTS_CD_CERT. I'm currently unable to commission successfully using --paa-trust-store-path, so I'm not sure if it's having any impact. Below is the compilation error message:

Parsing C:/nordic_prj/DL02_S2MB_KPD_Small/Kconfig
C:/nordic_prj/DL02_S2MB_KPD_Small/prj.conf:52: warning: attempt to assign the value '"C:/nordic_prj/DL02_S2MB_KPD_Small/chip-cert/Chip-Test-CD-0x1530-0x0201.der"' to the undefined symbol CHIP_FACTORY_DATA_USER_CERTS_CD_CERTLoaded configuration 'C:/nordic_prj/DL02_S2MB_KPD_Small/boards/sunion/dl02_s2mb_kpd_small/dl02_s2mb_kpd_small_nrf5340_cpuapp_defconfig'
Merged configuration 'C:/nordic_prj/DL02_S2MB_KPD_Small/prj.conf'
Merged configuration 'C:/nordic_prj/DL02_S2MB_KPD_Small/build/DL02_S2MB_KPD_Small/zephyr/.config.sysbuild'


error: Aborting due to Kconfig warnings

CMake Error at C:/ncs/v2.9.0/zephyr/cmake/modules/kconfig.cmake:396 (message):
  command failed with return code: 1
Call Stack (most recent call first):
  C:/ncs/v2.9.0/nrf/cmake/modules/kconfig.cmake:29 (include)
  C:/ncs/v2.9.0/zephyr/cmake/modules/zephyr_default.cmake:133 (include)
  C:/ncs/v2.9.0/zephyr/share/zephyr-package/cmake/ZephyrConfig.cmake:66 (include)
  C:/ncs/v2.9.0/zephyr/share/zephyr-package/cmake/ZephyrConfig.cmake:92 (include_boilerplate)
  CMakeLists.txt:12 (find_package)

-- Configuring incomplete, errors occurred!

CMake Error at cmake/modules/sysbuild_extensions.cmake:514 (message):
  CMake configure failed for Zephyr project: DL02_S2MB_KPD_Small

  Location: C:/nordic_prj/DL02_S2MB_KPD_Small
Call Stack (most recent call first):
  cmake/modules/sysbuild_images.cmake:20 (ExternalZephyrProject_Cmake)
  cmake/modules/sysbuild_default.cmake:20 (include)
  C:/ncs/v2.9.0/zephyr/share/zephyr-package/cmake/ZephyrConfig.cmake:75 (include)
  C:/ncs/v2.9.0/zephyr/share/zephyr-package/cmake/ZephyrConfig.cmake:92 (include_boilerplate)
  C:/ncs/v2.9.0/zephyr/share/sysbuild-package/cmake/SysbuildConfig.cmake:8 (include)
  C:/nordic_prj/DL02_S2MB_KPD_Small/sysbuild/CMakeLists.txt:3 (find_package)


-- Configuring incomplete, errors occurred!
See also "C:/nordic_prj/DL02_S2MB_KPD_Small/build/CMakeFiles/CMakeOutput.log".
[91mFATAL ERROR: command exited with status 1: 'C:\ncs\toolchains\b620d30767\opt\bin\cmake.EXE' -DWEST_PYTHON=C:/ncs/toolchains/b620d30767/opt/bin/python.exe '-BC:\nordic_prj\DL02_S2MB_KPD_Small\build' -GNinja -DCONF_FILE=prj.conf '-SC:\ncs\v2.9.0\zephyr\share\sysbuild' '-DAPP_DIR:PATH=C:\nordic_prj\DL02_S2MB_KPD_Small'

RE: How can I use my own PAI and DAC?

Amanda Hsieh — Mon, 21 Apr 2025 14:40:26 GMT

Hi,

Did you add CONFIG_CHIP_FACTORY_DATA_CERT_SOURCE_USER=y? See the certificates obtained during the certification process.

I added the following configs to the matter/template/prj.conf and got no build error.

CONFIG_CHIP_FACTORY_DATA_CERT_SOURCE_USER=y
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT="C:/nordic/Matter-Development-DAC-VID-PID-Cert.der"
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_KEY="C:/nordic/Matter-Development-DAC-VID-PID-Key.der"
CONFIG_CHIP_FACTORY_DATA_USER_CERTS_PAI_CERT="C:/nordic/Matter-Development-PAI-VID-noPID-Cert.der"

If the above cannot help, please provide the build log and build/app/zephyr/.config file.

Regards,
Amanda H.