IN Brief:
- ST MatterConnect generates and injects Matter Device Attestation Certificates, cryptographic keys and product personalisation data at ST's secure manufacturing facilities.
- The service initially covers the ST25DA-C dynamic NFC tag and STSAFE-A120 secure element, which provide different commissioning and authentication capabilities.
- ST acts as an authorised Matter Product Attestation Authority and Product Attestation Intermediate, while completed-device certification remains a separate requirement.
STMicroelectronics has introduced MatterConnect, a secure factory provisioning service for authentication credentials used in Matter-compatible connected devices. The service allows manufacturers to obtain supported ST25DA-C NFC tags and STSAFE-A120 secure elements with certificates, cryptographic keys and product personalisation data already installed, removing the need to perform equivalent credential injection operations on their own assembly lines.
Announced on 20 October, MatterConnect combines credential generation with provisioning at ST’s certified secure manufacturing facilities. The service covers Matter Device Attestation Certificates, associated cryptographic material and product information used within the device identity framework. ST also provides certificate authority functions and management of relevant Distributed Compliance Ledger information.
Device attestation is part of the process used to establish the identity and certification status of a Matter product during commissioning. It relies on a chain of certificates through which the credentials installed in a device can be checked against authorised issuing organisations. The Device Attestation Certificate identifies the device within that framework, while its associated private key is required to perform the corresponding cryptographic proof of identity.
Provisioning such information is different from programming ordinary application data. The manufacturer must maintain an appropriate relationship between each device’s credentials, protect private keys from unauthorised disclosure and preserve sufficient records to manage the production process. A failure during these operations can affect the integrity of the device identity before the product reaches its installer.
ST is an authorised Matter Product Attestation Authority and Product Attestation Intermediate. These roles allow the company to participate in the certificate hierarchy used to establish trust in compatible products. MatterConnect supplies the associated credential services together with eligible secure components rather than requiring equipment manufacturers to reproduce the complete infrastructure independently.
The two supported component families have different roles within an electronics design. ST25DA-C is a dynamic NFC tag intended to support Matter commissioning through a short-range wireless interface. It combines NFC communication and secure functions to help a compatible device exchange commissioning information with equipment such as a smartphone.
ST identifies support for the developing Matter commissioning flow over NFC, including communication using an NFC Forum Type 4 tag interface. The component can operate through its electrical supply or obtain power from the contactless field for appropriate functions. This arrangement can support commissioning interactions without requiring the main product to power every part of its normal user interface.
Its connection to the rest of the device remains part of the system architecture. The host microcontroller, software and network interface must be compatible with the intended commissioning process, and suitable security controls are still required after credentials have been installed. The ST25DA-C product listing identifies the component as being under characterisation with limited engineering samples available, rather than establishing unrestricted volume availability for every application.
The STSAFE-A120 serves a different purpose. Connected to a host processor through an I²C interface, it provides secure storage and cryptographic functions intended to support authentication and protected connections. Sensitive key material can remain inside the secure element while the host requests permitted operations through its interface.
Separating these functions from application firmware can reduce the need for general-purpose software to handle private keys directly. A host may request a digital signature or authentication operation without obtaining the underlying secret itself. This arrangement depends on the correct configuration of the secure element and the software that communicates with it, and does not remove vulnerabilities elsewhere in the finished product.
The STSAFE-A120 runs on a Common Criteria EAL5+ certified platform. That certification concerns the specified security platform and its evaluated properties; it does not automatically establish the security, interoperability or regulatory compliance of every device into which the component is integrated.
Factory provisioning changes the sequence of electronics manufacture. Under a conventional approach, an equipment maker may need dedicated credential-loading equipment, controlled access to certificate services and procedures for associating issued credentials with individual components or completed assemblies. Each location undertaking those operations must maintain suitable security and production controls.
With MatterConnect, designated credentials are installed before the component reaches the customer’s manufacturing facility. The receiving company can integrate the personalised device into its printed circuit board assembly without performing the same sensitive injection operation locally. This may simplify production arrangements involving multiple contract manufacturers, although procurement, component traceability and final-product testing remain necessary.
ST’s service also includes management of information associated with Matter’s Distributed Compliance Ledger. The ledger provides a means of maintaining relevant product compliance and certification data within the Matter ecosystem. Credential provisioning and ledger management are connected activities, but the presence of an entry does not eliminate the product manufacturer’s responsibility to complete the applicable certification procedures.
Authentication likewise addresses only one part of connected-device security. A product can contain correctly provisioned keys and still expose weaknesses through its firmware, communications implementation, update mechanism or application interfaces. Secure boot, software maintenance, access control and lifecycle management must be assessed according to the requirements of the complete device.
ST has not disclosed a universal MatterConnect price, ordering lead time or production minimum applying to every eligible component. Commercial arrangements and individual device availability will therefore need to be established for the intended manufacturing programme.
The launch provides a defined route for purchasing secure components with their Matter identity information prepared at the semiconductor supplier’s facilities. Further integration work remains necessary to complete the host electronics, commissioning flow, product certification and security validation of the equipment in which those components are used.
