A Matter device is more than a DAC.


Snowball Technology is a CSA-certified Non-VID Scoped PAA. OnBoard™ IoT Security (OBIS) governs Matter device identity, provisioning, OTA operations, and DCL publishing through the same operational trust chain. More than 10 million Matter devices have been provisioned on the platform.

Everything a Matter device needs. One provisioning run.

Matter onboarding payloads, device identities, commissioning parameters, and OTA security credentials are generated, signed, and provisioned through the same governed provisioning workflow.

Identity

DAC and PAI certificate chain

Matter device identity provisioned under the OEM or Snowball trust root.
Onboarding

QR onboarding code and manual pairing code

Per-device onboarding payloads and pairing codes linked to the provisioned device identity.
Factory data

Matter-spec factory data block and commissioning parameters

Matter commissioning parameters and factory data provisioned through the governed provisioning workflow.
Firmware security

OTA firmware decryption key

OTA firmware decryption credentials provisioned under the same operational trust chain.

The trust chain behind every Matter device.

Matter device identity is established through a certificate trust chain linking each device back to a trusted Product Attestation Authority (PAA).

PAA

Product Attestation Authority

Trust root for the Matter certificate hierarchy. A Non-VID Scoped PAA can issue certificates across multiple Vendor IDs.
PAI

Product Attestation Intermediate

Intermediate certificate linking the Matter trust root to device identities across a governed product family.
DAC

Device Attestation Certificate

Per-device Matter identity provisioned through the governed provisioning workflow and verified during commissioning.

Your PAA. Or ours.

The same operational trust platform governs PKI, DAC issuance, and provisioning operations regardless of which trust root model you choose.

Option A

Snowball PAA

Fast entry into Matter
Use Snowball's Non-VID Scoped PAA as your trust root. Snowball manages the PAI layer, DAC issuance, and PKI operations on your behalf. No need to operate your own PAA infrastructure to begin shipping certified Matter products.
Option B

Your own PAA

Keep your trust root
Large OEMs with an existing VID-Scoped PAA retain full control of their trust root. Snowball hosts the PAI layer and manages DAC issuance on your behalf — extending operational PKI support without requiring an in-house PKI operations team.

Built for governed Matter provisioning and lifecycle operations at scale.

Discuss your Matter provisioning architecture, PAA operating model, firmware lifecycle strategy, and manufacturing deployment requirements with the OBIS engineering team.