A Matter device is more than a DAC.


Snowball Technology is a CSA-certified Non-VID Scoped PAA. OnBoardTM IoT Security (OBIS) is built for Matter end-to-end — from DAC issuance and factory provisioning to firmware updates and publishing to the Matter Distributed Compliance Ledger (DCL). More than 10 million Matter devices have been provisioned on the platform.

The Matter PKI in 30 seconds.

Every Matter device proves its authenticity through a three-level certificate chain.

PAA

Product Attestation Authority

Trust root. A Non-VID Scoped PAA can issue certificates across Vendor IDs, not locked to a single OEM.
PAI

Product Attestation Intermediate

Product intermediate. Issued by the PAA, one per product line. The bridge between the trust root and individual devices.
DAC

Device Attestation Certificate

Device identity is unique per device, provisioned in manufacturing, and cryptographically proves it is a genuine Matter-certified product.

Your PAA. Or ours.

Use your own PAA or Snowball's — the same platform manages PKI, certificate issuance, and factory provisioning regardless of which trust root you choose.

Option A

Snowball PAA

Fast entry into Matter
Use Snowball's Non-VID Scoped PAA as your trust root. Snowball creates your PAI, manages the PKI hierarchy, and signs DACs for every device. No need to become a PAA yourself — start shipping Matter devices immediately.
Option B

Your own PAA

Keep your trust root
Large OEMs with an existing VID-Scoped PAA retain full control of their trust root. Snowball hosts the PAI layer and manages DAC issuance on your behalf — professional PKI operations without building an in-house team.

Everything a Matter device needs. One provisioning run.

A production-ready Matter device carries more than a DAC. Onboarding payloads, commissioning parameters, and the keys that protect future firmware updates all have to be generated, signed, and written to the device on the same line — and they are.

Identity

DAC and PAI certificate chain

The device's Matter identity, signed under Snowball's PAA or the OEM's own PAA.
Onboarding

QR onboarding code and manual pairing code

The entry points for Matter commissioning, generated per device and linked to its identity record.
Factory data

Matter-spec factory data block and commissioning parameters

The structured payload the Matter spec requires to be present at first boot.
Firmware security

OTA firmware decryption key

Injected into the device at production so that encrypted firmware updates can be applied in the field. The key never exists outside the provisioning boundary.

Plan your Matter device program with our team.

A 30-minute demo walks through PAA model selection, factory provisioning, and firmware lifecycle management for your Matter devices.