A method performed by a mobile device (206, 306), comprising: identifying a home device (202, 302) using a first wireless protocol; enabling a secure channel between the home device (202, 302) and the mobile device (206, 306) via a second wireless protocol; authenticating access for the mobile device (206, 306) using an identification code; after the secure channel is established, receiving a home device certificate from the home device (202, 302); validating the home device certificate of the home device via a secure server by: transmitting the home device certificate to the secure server; and receiving, from the secure server, a message identifying the home device certificate as being validated; in response to receiving the message identifying the home device certificate as being validated, sending a mobile device certificate of the mobile device to the home device (202, 302) via the secure channel, wherein the home device (202, 302) is configured to sign the mobile device certificate to create a signed mobile device certificate, and wherein the signed mobile device certificate expires after a predetermined length of time; receiving the signed mobile device certificate from the home device (202, 302) via the secure channel; receiving accessory information corresponding to one or more accessory devices (308-1, 308-2, 308-3) from the home device (202, 302) via the secure channel; connecting to the one or more accessory devices (308-1, 308-2, 308-3) based at least in part on the accessory information; and authorizing, using the signed mobile device certificate, the one or more accessory devices (308-1, 308-2, 308-3) to operate in a home ecosystem. identifying a home device (202, 302) using a first wireless protocol; enabling a secure channel between the home device (202, 302) and the mobile device (206, 306) via a second wireless protocol; authenticating access for the mobile device (206, 306) using an identification code; after the secure channel is established, receiving a home device certificate from the home device (202, 302); validating the home device certificate of the home device via a secure server by: transmitting the home device certificate to the secure server; and receiving, from the secure server, a message identifying the home device certificate as being validated; transmitting the home device certificate to the secure server; and receiving, from the secure server, a message identifying the home device certificate as being validated; in response to receiving the message identifying the home device certificate as being validated, sending a mobile device certificate of the mobile device to the home device (202, 302) via the secure channel, wherein the home device (202, 302) is configured to sign the mobile device certificate to create a signed mobile device certificate, and wherein the signed mobile device certificate expires after a predetermined length of time; receiving the signed mobile device certificate from the home device (202, 302) via the secure channel; receiving accessory information corresponding to one or more accessory devices (308-1, 308-2, 308-3) from the home device (202, 302) via the secure channel; connecting to the one or more accessory devices (308-1, 308-2, 308-3) based at least in part on the accessory information; and authorizing, using the signed mobile device certificate, the one or more accessory devices (308-1, 308-2, 308-3) to operate in a home ecosystem.