CHANGING Matter PKI Security Solution: Accelerate Compliance & Ensure IoT Device Security

CHANGING is dedicated to helping manufacturers comply with Matter standards by offering scalable PKI solutions and services that simplify compliance processes, accelerate time to market, and provide flexible deployment options to ensure devices pass Matter certification. By integrating CHANGING’s Matter security module (SE/Thread) with Certificate Lifecycle Management (CLM) into your devices, you gain access to a leading global digital trust platform and a comprehensive end-to-end IoT security solution. With CHANGING CLM, you can swiftly bring high-trust devices to market without the burden and risks of building your own PKI system.

Key Features of Our Solution

• Efficiency – Establishes a trusted Root of Trust (RoT) to shorten CA issuance preparation time while managing security throughout the entire IoT device lifecycle, reducing compliance and audit burdens.
• Supportability – CHANGING CLM can be deployed on-premises, within enterprises, or in the cloud, meeting high-security demands, customized integrations, and isolation requirements.
• Scalability – CHANGING CLM supports large-scale certificate management, ensuring DAC certificate issuance and delivery. With global operational advantages, we help manufacturers quickly deploy Matter-compliant devices.
• Simplicity – Provides comprehensive device lifecycle management, including key storage, key pair generation, device updates, and decommissioning, ensuring Matter compliance without requiring an in-house PKI setup.

Core Functionalities

• Certificate Lifecycle Management (CLM) – End-to-end DAC certificate management (issuance, renewal, revocation) ensuring secure device identities, VID/PID management, and flexible certificate configurations.
• Key & Certificate Management (KMS & HSM) – Securely generates and manages keys with hardware-based encryption (HSM) to prevent unauthorized access and attacks.
• Device Attestation Certificate (DAC) Architecture (DAC/PAI/PAA) – Ensures device identity trustworthiness, simplifies certificate management, and builds a complete chain of trust via PAA.
• Multi-Mode Support – Integrates with AWS Private CA or CSA-certified CAs, offering flexible VID/DAC configuration solutions.
• DAC Pre-Burning Service – Enables pre-loading DAC certificates during manufacturing to enhance supply chain security and accelerate time to market.
• Security Enhancements – Meets CSA Certificate Policy requirements, ensuring real-time and accurate certificate revocation, reducing risks associated with DAC burning and revocation.

Our Mission

Our mission is to let you focus on smart device innovation while CHANGING delivers a Matter security solution that ensures your devices comply with Matter standards—helping to build a trusted and secure smart home ecosystem.