Installing self-signed PAA Certificates [RESOLVED]

Hello HA Community!

My setup is running HAOS as a virtual machine running on virtualbox. Everything is running smoothly. I have zwave radio and ZBT-1 radio (thread).

This question is related to Matter Server and getting it to import my custom PAA certificate that I’ve created.

The documentation for CHIP says that you can place the certificates in /data/credentials.

I’m pulling my hair out because I have placed the certificates in this directory and matter server does not seem to be honoring my certificates. Additionally, I have found in the logs that the following flag is set:

–paa-root-cert-dir /data/credentials

I’ve also tried creating this folder structure in core_matter_server folder in addons_config folder but am not having any luck either.

All the references to this on the internet is based on people using HA running a docker container, so it doesn’t really apply to me.

Something intertesting in the startup logs for Matter Server is that CHIP loads a chip.json file from /data/chip.json successfully. Looking in the /data directory I see no such file in this directory. Chasing the CHIP documentation, it suggests that the default folder for CHIP is /tmp — as you would expect, nothing in /tmp after startup of addon.

Reaching out to the community here in hopes of someone being able to help me install my PAA certificates so that I can test my devices.

Thanks!

It sounds like your might be looking in the wrong Docker container.
HA is a container with its own file system.
Your CLI/SSH connection might also be a container with its own file system and Matter is another container with its own file system.

Each Home Assistant add-on has its own /data directory, so that is why you don’t see it when you check the same location of your Terminal/SSH add-on.

The /data directory is really HA managed, it is part of the backup and usually people are not meant to modify files in there. We do have a addon config directory which is meant for that, but currently the Matter Server is not picking up PAA from there. In general, custom PAA is more seen as a developer use case, so we don’t have a good solution for that with the Matter Server add-on :cry:

So at this point you have two variants:

  • Use a separate system and deploy the Matter Server container. You can still connect to that Server from your HAOS installation
  • Use the Home Assistant OS debug SSH access (which connects you to the underlying Linux system) and place the credentials to /mnt/data/supervisor/addons/data/core_matter_server/credentials/ using scp (this is the location which is mounted to /mnt/data inside the Matter Server add-on)

OMG! Thank you!

I have been pulling my hair trying to figure this out. Finally got this working!

Edit: I went with the second method. Setting up debug SSH and SCP’ing the files to the path mentioned above.

1 Like