What is the Matter?
Matter is the universal, open-source smart home standard developed by Connectivity Standards Alliance (CSA) and supported by giants like Apple, Google, Amazon, and Samsung. It promises interoperability, reliability, and security, allowing devices from different ecosystems to communicate seamlessly.
With Matter, setting up a smart lightbulb, thermostat, or any related Internet of Things (IoT) devices across different ecosystems—like Apple HomeKit, Google Home, or Alexa is simpler and more secure than ever before.
Why Commissioning Matters
Commissioning in Matter is the process of securely adding a device (called the commissionee) to a home network (Fabric) via a commissioner (like your smartphone or hub). It is the main part of the Matter protocol.
- The Commissioning Process Ensures:
- Device authenticity
- Encrypted Communication
- Fabric-specific access control
In short, it’s the secure handshake that lets your new device join your trusted smart home family.
Core Components of Matter Commissioning
Authentication Session Establishment – ASE
At the heart of Matter security is the ASE that has two major needs:
- Password-Authenticated Session Establishment (PASE): Used during onboarding with the setup code (like from a QR code).
- Certificate-Authenticated Session Establishment (CASE): Used for operational communication after commissioning.
These protocols ensure data confidentiality and mutual authentication.
Device Attestation Certificate – DAC
Every Matter-certified device comes with a DAC, a cryptographic certificate issued by a Product Attestation Authority (PAA) through an intermediate Product Attestation Intermediate (PAI).
The DAC Proves:
- The device is authentic and verified
- It hasn’t been tampered with
This is checked during commissioning via digital signature verification.
Distributed Compliance Ledger – DCL
The DCL is a publicly accessible, decentralized registry that stores metadata about certified Matter devices. During commissioning, controllers can verify the device’s Vendor ID, Product ID, and certification status against the DCL (optional but increasingly recommended).
In the future, DCL is expected to become a cornerstone for automating trust evaluation.
Matter Commissioning Flow (Step-by-Step)
Step 1: Discovery
The commissioner discovers devices already connected to the same IP network using mDNS(DNS-SD) device advertisements.
Step 2: PASE Session (ASE)
Using the eight-digit setup passcode, the commissioner and commissionee establish a secure PASE session using the SPAKE2+ protocol.
Step 3: Device Attestation
The commissioner requests the device’s DAC and verifies:
- The signature on the attestation challenge.
- The vendor ID/product ID.
- The chain of trust to a known PAA.
This may be cross-checked with the DCL.
Step 4: Certificate Provisioning
- The device sends a Certificate Signing Request (CSR) to the commissioner.
- The controller installs secure operational certificates, such as the Node Operational Certificate (NOC), enabling the device to operate within the trusted fabric.
- A trusted root certificate is also delivered if not previously present.
Step 5: CASE Session (ASE)
After NOC provisioning, the device and the controller establish a CASE session for operational communication using their certificates.
Step 6: Commissioning Complete
The failsafe timer is disabled, and the device is now a trusted and secure member of the Fabric.
Real-World Example: Wi-Fi Commissioning via Apple Home
Using Apple Home (or Similar Apps), Wi-Fi Commissioning Proceeds As:
- The device is pre-provisioned with Wi-Fi credentials (e.g., via SoftAP or vendor-specific app)
- The controller discovers it on the local network via mDNS
- PASE session is initiated
- DAC is verified
- Certificates are provisioned
- CASE session is established
- Done! The device is now operational
This onboarding workflow is designed to be efficient, encrypted, and easy to follow.
Final Thoughts
Matter is the future of smart homes—and commissioning is its secure gateway. With PASE, DAC, CASE, and DCL, Matter ensures that only verified devices join your home, communicating securely and reliably.
Whether you’re a developer, integrator, or enthusiast, understanding this flow gives you the key to build, test, and deploy truly interoperable smart devices. We as a company are providing support for all the steps described above.
Ready to Matter? Start Commissioning Today. Contact Us!