For the RainMaker + Matter solution connecting to public RainMaker, how are device certificates generated?

In the RainMaker + Matter solution, RainMaker reuses the Matter DAC (Device Attestation Certificate) as its device certificate.

For public RainMaker, use esp-rainmaker-cli to generate, register, and flash the certificate in one step:

esp-rainmaker-cli claim --matter <your_device_port>

This flashes to address 0xd000 by default. Confirm this matches the esp_secure_cert partition in your project's partition table.

To generate the fctry partition binary separately, use esp-matter-mfg-tool:

# Generate fctry binary ($RMAKER_PATH is the esp-rainmaker repo directory)
esp-matter-mfg-tool --vendor-id 0x131B --product-id 0x2 \
    --vendor-name "Espressif" --product-name "RainMaker-Matter-Light" \
    --hw-ver-str "DevKitM1" \
    -cd $RMAKER_PATH/examples/matter/mfg/cd_131B_0002.der \
    --csv $RMAKER_PATH/examples/matter/mfg/keys.csv \
    --mcsv $RMAKER_PATH/examples/matter/mfg/master.csv

# Flash to the fctry partition (verify the address in your partition table)
esptool.py write_flash 0x3e0000 out/131b_2/<node-id>/<node-id>-partition.bin