[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-160548-en":3,"doc-seo-160548-105":30,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":4,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":14,"update_tm":28,"read_time":29},160548,962085662650,"Dozel","https://ap-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0",6,"Technology","Matter PKI Compliance Guide - AWS Private Certificate Authority","Guidance on using AWS Private Certificate Authority to set up and manage a Matter-aligned certificate authority that issues and controls certificates required by the Connectivity Standards Alliance Matter PKI certificate policy. The guide explains AWS’s private CA capabilities in the context of Matter PKI requirements, including shared responsibility, Matter CA establishment, publication and repository duties, identification and authentication, certificate lifecycle operations, and security controls. It also covers CRL/OCSP profiles and compliance audit considerations, defining key terms and the document’s approach and governance.","Matter PKI Compliance Guide  \nAWS Private Certificate Authority  \nFirst published December 20, 2022  \nLast updated October 7, 2024  \nNotices  \nCustomers are responsible for making their own independent assessment of the information in this document. This document: (a) is for informational purposes only,(b) represents current AWS product offerings and practices, which are subject to change without notice, and (c) does not create any commitments or assurances from AWS and its affiliates, suppliers, or licensors. AWS products or services are provided“as is” without warranties, representations, or conditions of any kind, whether express or implied. The responsibilities and liabilities of AWS to its customers are controlled by AWS agreements, and this document is not part of, nor does it modify, any agreement between AWS and its customers.  \nThe Matter brand is developed by the Connectivity Standards Alliance. This brand, related logos, and marks are trademarks of the Alliance, all rights reserved.  \n© 2023 Amazon Web Services, Inc. or its affiliates. All rights reserved.  \nContents  \nNotices ............................................................................................................................ 1  \nAbstract........................................................................................................................... 1  \nKey terms ........................................................................................................................ 1  \nIntroduction .................................................................................................................... 2  \nUsing AWS Private CA to help meet Matter PKI CP requirements ................................. 2  \nAWS Shared Responsibility Model.................................................................................. 3  \nUsing AWS Private CA to help establish a Matter CA ..................................................... 5  \nRequirement 1: Establishing a Matter CA.................................................................... 5  \nRequirement 2: Publication and repository responsibilities ....................................... 6  \nRequirement 3: Identification and authentication ...................................................... 6  \nRequirement 4: Certificate lifecycle operational requirements .................................. 6  \nRequirement 5: Facility, management, and operational controls............................... 7  \nRequirement 6: Technical security controls ................................................................ 9  \nRequirement 7: Certificate, CRL, and OCSP profiles ................................................. 11  \nRequirement 8: Compliance audit and other assessments ....................................... 11  \nRequirement 9: Other business and legal matters.................................................... 12  \nConclusion .................................................................................................................... 12  \nContributors.................................................................................................................. 12  \nFurther reading ............................................................................................................. 12  \nDocument revisions ...................................................................................................... 13  \nAppendix A.................................................................................................................... 14  \nAppendix B .................................................................................................................... 16  \nAppendix C .................................................................................................................... 22  \nAbstract  \nAmazon is a founding member and a key contributor to the Matter initiative, an effort managed by the Connectivity Standards Alliance to develop an open standard","cbCaikoak5Lci44o","https://ap.wps.com/l/cbCaikoak5Lci44o","pdf",424296,1,26,"English","en",105,"# Notices\n# Abstract\n# Key terms\n# Introduction\n# Using AWS Private CA to help meet Matter PKI CP requirements\n# AWS Shared Responsibility Model\n# Using AWS Private CA to help establish a Matter CA\n## Requirement 1: Establishing a Matter CA\n## Requirement 2: Publication and repository responsibilities\n## Requirement 3: Identification and authentication\n## Requirement 4: Certificate lifecycle operational requirements\n## Requirement 5: Facility, management, and operational controls\n## Requirement 6: Technical security controls\n## Requirement 7: Certificate, CRL, and OCSP profiles\n## Requirement 8: Compliance audit and other assessments\n## Requirement 9: Other business and legal matters\n# Conclusion\n# Contributors\n# Further reading","[{\"question\":\"What is the purpose of the Matter PKI Compliance Guide?\",\"answer\":\"It provides guidance on using AWS Private Certificate Authority to set up and manage a certificate authority aligned with the Matter PKI certificate policy from the Connectivity Standards Alliance.\"},{\"question\":\"How does Matter use certificates to support device interoperability and security?\",\"answer\":\"Matter uses device attestation certificates (DACs) to verify that devices on a smart home network are Matter certified and to support secure operation across vendors.\"},{\"question\":\"What requirements does the guide cover for establishing and operating a Matter CA?\",\"answer\":\"It covers Matter CA establishment, publication and repository responsibilities, identification and authentication, certificate lifecycle operations, facility/management/operational controls, technical security controls, and certificate/CRL/OCSP profiles, plus compliance audit and other legal matters.\"}]","Matter PKI Compliance Guide - AWS Private Certificate Authority | PDF",1788068850,66,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":28},"matter-pki-compliance-guide-aws-private-certificate-authority","",{"@graph":36,"@context":85},[37,54,68],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/technology/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/matter-pki-compliance-guide-aws-private-certificate-authority/160548/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":23,"description":14,"dateModified":62,"datePublished":62,"encodingFormat":61,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-08-30",true,{"@type":65,"interactionType":66,"userInteractionCount":4},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"What is the purpose of the Matter PKI Compliance Guide?","Question",{"text":75,"@type":76},"It provides guidance on using AWS Private Certificate Authority to set up and manage a certificate authority aligned with the Matter PKI certificate policy from the Connectivity Standards Alliance.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"How does Matter use certificates to support device interoperability and security?",{"text":80,"@type":76},"Matter uses device attestation certificates (DACs) to verify that devices on a smart home network are Matter certified and to support secure operation across vendors.",{"name":82,"@type":73,"acceptedAnswer":83},"What requirements does the guide cover for establishing and operating a Matter CA?",{"text":84,"@type":76},"It covers Matter CA establishment, publication and repository responsibilities, identification and authentication, certificate lifecycle operations, facility/management/operational controls, technical security controls, and certificate/CRL/OCSP profiles, plus compliance audit and other legal matters.","https://schema.org",{"og:url":52,"og:type":87,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":89,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,113,118,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":111,"slug":112},50,"technology",{"id":114,"doc_module":4,"doc_module_name":46,"category_name":115,"show_sort_weight":116,"slug":117},7,"Healthcare",40,"healthcare",{"id":119,"doc_module":4,"doc_module_name":46,"category_name":120,"show_sort_weight":121,"slug":122},8,"Research & Report",30,"research-report",{"id":124,"doc_module":4,"doc_module_name":46,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":46,"category_name":137,"show_sort_weight":106,"slug":138},19,"General","general"]