Tap-to-Pair Matter Is Getting Easier to Build. Here's the Plumbing Behind It.

You'll never buy anything from this announcement directly. It's still one of the more useful Matter stories this month, because it's about why setup is going to get easier, and why a device you add is actually what it claims to be.

On October 20, STMicroelectronics, one of the big chipmakers, launched a service called ST MatterConnect. The short version: device makers can buy ST's NFC tags and security chips with Matter's required certificates already loaded at ST's factory.

The problem it solves

Every certified Matter device has to prove it's genuine during setup. It carries a Device Attestation Certificate, or DAC, unique to that unit. The DAC is signed by an intermediate authority (a PAI), which is signed by a root authority (a PAA). When you add the device, your Matter controller checks that chain. If it doesn't check out, a well-behaved controller refuses the device or warns you.

That's great for you. It's a pain for a company making smart plugs. Somebody has to generate a unique certificate and key for every single unit, inject them securely on the production line, and do it under the rules for running or using an attestation authority. ST's pitch, in its own words: "Equipment makers can leverage ST's status as an approved Product Attestation Authority (PAA) and Product Attestation Intermediate (PAI) to ensure trust and compliance without the expense of building secure provisioning infrastructure internally."

In plain terms: ST becomes the certificate shop, puts the DAC and keys into the chip before it ships, and the device maker just solders it on.

The two chips

ST25DA-C, an NFC tag. ST says it's "designed to support the Matter device NFC commissioning flow, which helps end users quickly connect devices from different ecosystems." Its examples: lightbulbs, plugs, smoke alarms, cameras, presence sensors.
STSAFE-A120, a secure element that connects to the device's main chip and handles authentication and other security jobs. ST says it "runs on a CC EAL5+ certified platform," a Common Criteria security certification level.

Both store the DAC plus "other data such as cryptographic keys, product/version information, and customer personalization."

Why NFC is the interesting part

Today, most Matter setup means scanning a QR code with your phone and then waiting while the phone finds the device over Bluetooth. It works, but it's the part of Matter people complain about.

NFC setup is the fix everyone is circling. The Connectivity Standards Alliance's Matter 1.6, released in June, added full NFC-based commissioning, the whole setup exchange over NFC. And Apple says its upcoming Home Collection accessories "can be set up starting with a single tap with iPhone." Whether Apple's tap is Matter's standard NFC flow or its own thing is still unclear. I went through what's confirmed and what's a guess when Apple announced it.

What ST is selling is a piece of the hardware that makes standard NFC setup cheap to add. A device maker who wants tap-to-pair gets a tag built for the Matter NFC flow with the certificates already inside. That lowers the bar for the smaller brands, the ones making the inexpensive plugs and sensors most of us actually buy.

Why the security part matters to you

The DAC is how your controller knows a "Matter smart plug" from a random marketplace seller is a certified device and not a knockoff wearing the logo. Storing the private key in a secure element, instead of in ordinary flash memory, makes it much harder to pull out and clone.

Controllers are getting stricter on their side, too. The Matter Server that runs Matter in Home Assistant just added options to load revocation lists and import vendor root certificates, and it now names the exact reason when attestation refuses a device. Better-protected certificates in the chip, better checking in the controller. That's the system working the way it's supposed to.

When will you see it?

ST didn't name any customers or products, and a new chip service takes a while to show up in finished devices. A company has to design a product around the tag, get it certified, build it and ship it. I wouldn't expect anything with "ST25DA-C inside" on store shelves this holiday season.

What I'd watch for instead:

"Tap to set up" on Matter device boxes from brands other than Apple's partners. That's the sign NFC commissioning is going mainstream.
Whether your controller supports it. A tag on the device is half the story. Your phone and your ecosystem's app have to support Matter's NFC flow too.
Cheap devices that skip the secure element. Matter attestation doesn't require one, but a key stored in ordinary memory is easier to copy.

If NFC setup becomes normal, the QR-code-and-wait step goes away for most devices. Announcements like this one are how that happens: not a big launch, just the parts getting cheaper and easier to use.