OnBoard™ IoT Security · Matter

Matter Devices,
Beyond DAC Issuance

As a CSA-certified Non-VID Scoped PAA, Snowball integrates DAC issuance, secure factory provisioning, and DCL publishing into a unified Matter trust chain through OnBoard™ IoT Security (OBIS), enabling secure, manageable, and traceable device identities.

✓

Direct Matter DAC issuance

✓

Unified certificate and factory provisioning management

✓

Secure delegation to global factories with controlled, revocable authorization

✓

Local offline execution after authorization, no continuous cloud connection required

20 M+

Matter Devices Provisioned

13 Years

Device Identity & PKI Expertise

Worldwide

Secure Factory, ODM & EMS Provisioning Coverage

Built for Matter

Everything your Matter device needs, provisioned in a single workflow.

Matter onboarding data, device identity, commissioning parameters, and OTA security credentials are generated, signed, and securely provisioned through one controlled process.

Identity

DAC & PAI Certificate Chain

Secure provisioning under either OEM or Snowball trust roots.

Commissioning

QR Codes & Manual Pairing Codes

Unique onboarding and pairing credentials for every device, mapped to its identity.

Factory Data

Matter Factory Data & Commissioning Parameters

Provisioned according to Matter specifications.

Firmware Security

OTA Security Credentials

Configured through a unified trust chain for secure and reliable updates.

Trusted at Scale

Trusted by 20M+ Matter Devices

OBIS powers secure identity issuance and factory provisioning for over 20 million Matter devices across:

Smart Bulbs

Smart Lock

Security Camera

Smart Speakers

Robot Vacuums

Smart Switches

Routers & Gateways

Smoke Detectors

Chain of Trust

Every Matter device is anchored to a trusted root.

Matter device identities are established through a certificate trust chain, allowing every device to be traced back to a trusted PAA.

PAA

Product Attestation Authority

The root of trust in the Matter certificate hierarchy, providing a trusted foundation across multiple Vendor IDs.

PAI

Product Attestation Intermediate

Bridges the root of trust and device certificates, enabling product-level certificate issuance and management.

DAC

Device Attestation Certificate

The unique identity credential for each device, used for authentication, commissioning, and identity verification.

Two PAA Operating Models

Use your own PAA or leverage Snowball's PAA.

Regardless of the trust model you choose, OBIS provides a unified platform for PKI management, DAC issuance, and secure factory provisioning.

Option A

Use Snowball's PAA

Fast-track your Matter deployment

Leverage Snowball’s Non-VID Scoped PAA as your root of trust. Snowball manages the PAI layer, DAC issuance, and PKI operations, enabling you to deliver Matter-compliant products without building your own PAA infrastructure.

Option B

Use Your Own PAA

Keep control of your root of trust

For OEMs that already operate a VID-Scoped PAA, Snowball can manage the PAI layer and DAC issuance while you retain ownership of the root of trust—extending PKI operational capabilities without the need for a dedicated in-house PKI team.

Why OBIS

More than Matter PAA issuance. A foundation for device trust.

While others focus on simplifying certificate issuance, OBIS focuses on the trusted management of device identities, keys, and certificates throughout their lifecycle. Through a unified trust framework and governance platform, organizations gain full visibility, control, traceability, and auditability over their device trust infrastructure.

End-to-End Trust Lifecycle

Build a unified chain of trust spanning Root CA, PAA/PAI hierarchies, factory provisioning, device commissioning, and OTA updates.

Unified Identity & Certificate Management

Manage device identities, certificates, keys, and authorization relationships from a single platform, providing complete visibility, control, and auditability.

Global Manufacturing Security

Enable secure provisioning across OEM, ODM, and EMS partners without exposing critical key material, while maintaining fine-grained access control at scale.

Compliance & Auditability

Deliver end-to-end traceability across device identities, certificates, and manufacturing processes to support Matter ecosystem requirements and regulations such as the CRA, helping build a trusted supply chain.

Who We Serve

Built for the global deployment of Matter devices

From manufacturing to worldwide deployment, and from certificate issuance to OTA updates, OBIS provides device identity management and secure provisioning capabilities across the entire device lifecycle.

➜

Matter Device Brands

➜

ODM, OEM & EMS Manufacturers

➜

Module & Solution Providers

➜

Smart Home & IoT Companies

➜

Device Identity & PKI Teams

➜

Secure Provisioning Partners

Matter Devices, Beyond DAC Issuance