For OEMs and product developers, in general, interested in exploring PKI and Certificate Authority solutions for implementing support for Matter IoT-compliant certificates, EJBCA will offer a hassle-free option to initiate the journey.

In the Matter IoT specification, certificates are used to implement unique identities to ensure that only authenticated and certified devices are allowed to join the network.
With EJBCA, you can issue Matter IoT-compliant certificates for your smart home products, and it will scale as your solution grows in complexity.
By setting up an EJBCA PKI to issue Matter-compliant certificates, vendors can ensure their IoT devices adhere to industry standards, communicate securely, and establish trust within the Matter IoT ecosystem. As an engineer, you can use our how-to guide and a tutorial video to start testing today and configuring EJBCA PKI for issuing certificates at various levels within the hierarchy. Follow our video tutorial or How to Guides, and you'll have an EJBCA instance and Matter IoT certificates for your test devices in no time.
In this tutorial, we will show you how to create a complete Matter IoT PKI and issue a certificate for the device:
Before you begin, you need the following:
Remember to keep up with the latest Matter specifications and policies to maintain compliance and stay up to date.
Check out the supplementary documentation that goes hand-in-hand with our tutorial video.
Get your hands on the EJBCA Docker container by downloading it now from Docker Hub.
Take a peek at our tutorial video on YouTube, and browse through some of our other videos as well.
Learn more about Keyfactor's approach to Consumer IoT and Smart Home Security.
You can ask your questions and learn from PKI specialists in the EJBCA forum on GitHub Discussions.


Bouncy Castle is one of the most widely used FIPS-certified open-source cryptographic APIs for Java and C#, allowing developers to integrate PKI security into their applications easily.