6. Espressif Matter Services

Beyond the SDK, Espressif offers production services that help you take a Matter product from prototype to mass production. This page summarizes what is available and how to engage.

6.1. Matter Pre-Provisioning Service

Every Matter device needs a unique, CSA-anchored identity:

  • Device Attestation Certificate (DAC) and its private key

  • Product Attestation Intermediate (PAI) certificate

  • Unique commissioning data (discriminator, setup passcode, QR code)

Provisioning these securely at scale involves two challenges:

  • You need a CSA-authorized CA vendor, known as Product Attestation Authority (PAA), that can issue certificates for every device you manufacture.

  • Each certificate must be programmed uniquely onto each device. Programming something unique per device at scale on the factory line can be a hassle for some customers.

Espressif’s Pre-Provisioning Service handles both of these for you.

What you get:

  • Device Attestation Authority: Espressif is a CSA-authorized PAA who can issue unique DACs for each module

  • Device Attestation: each module is provisioned with a unique DAC and its PAI, so it can prove authenticity to any Matter commissioner.

  • Uniqueness: per-device credentials (discriminator, passcode, QR code), generated by the esp-matter-mfg-tool command you provide for Espressif to run. A manifest of the per-device data your command generates (e.g. MAC address, common name, DAC, and more) is available on request.

  • Security: modules ship with Secure Boot and Flash Encryption enabled, and the DAC private key never leaves the module.

6.1.1. Matter Data Provisioning Options

The service supports three flows:

1. Espressif factory pre-provisioning

Espressif programs the Matter Provisioning Data onto the modules in Espressif’s factory; along with your signed bootloader and firmware and ships modules that are ready to use. No Matter-specific tooling is required on your side. These modules will have flash encryption and secure boot enabled to prevent tampering in-transit when shipped.

2. Customer factory provisioning

You program Matter Provisioning Data at your own manufacturing line using Espressif’s factory tool, which fetches DACs securely from Espressif’s DAC Service cloud during production. It provisions the DAC, DAC private key, and PAI into the esp_secure_cert partition; you flash your own firmware afterwards.

3. In-field provisioning

Devices already deployed in the field can be upgraded to Matter. The DAC is delivered over a mutually authenticated cloud connection (with your cloud acting as a trust broker) and applied via an OTA update, so pre-Matter devices can gain Matter support.

6.2. Certification Assistance Service

Espressif’s Matter Certification Assistance Service helps you carry your product through certification, drawing on Espressif’s own experience with Matter Certification:

  • Espressif can provide guidance on application documentation, certification workflows, and implementation best practices to help you prepare for certification.

  • Espressif can run pre-certification test runs in its own lab to ensure your product passes all tests before formal submission.

  • Espressif can work with the Authorized Test Laboratory (ATL) to assist and complete certification for your product.

  • If certification issues are identified, Espressif can help debug the failure cases and provide recommendations for resolving firmware issues to achieve certification successfully.

See Matter Certification for the certification workflow with the SDK.

6.3. Getting Started

To get started or learn more, reach out to:

6.4. Further Reading