description |
---|
Requirements to setup Apple Pay direct integration |
Follow the instructions on this page to learn how to setup Apple Pay on your merchantID.
-
Sign up for an Apple developer account
Please make sure to use an email address which is linked to a generic group inbox when creating an Apple account so you get notified in case of a certificate expiration. The assigned account role should be either Account Holder or Admin role. \ -
Create a merchant identifier
A merchant identifier uniquely identifies you as a merchant to accept and process Apple Pay.
We recommend to setup Apple Pay merchantIDs, domains and certificates for each, test and productive environment with unique and clearly identifiable names to avoid mismatches between the environments. \ -
Create a payment processing certificate
A payment processing certificate is associated with your merchant identifier and used to encrypt payment information. The payment processing certificate expires every 25 months.- Instead of creating a
.csr
file with the KeyChain Access tool as described in the Apple tutorial, you should navigate to theApple Pay Settings
tab located in theDevelopers
menu of your project section in the PCI Proxy dashboard to download the file there. - Click the button
Download CSR file
- Login to your Apple developer account and create a
Certificate
(Apple Pay Payment Processing Certificate). Select the Merchant identifier created in step 1, upload the CSR file provided by us and finally click Download to get your.cer
file. - Go back to
Apple Pay Settings
screen in the PCI Proxy dashboard and upload yourApple Payment Processing Certificate
\
- Instead of creating a
-
Register and verify domain
Register all domains and subdomains where you plan to call the Apple Pay API from. \ -
Create a merchant identity certificate
Use the merchant identity certificate to authenticate your communication with the Apple Pay servers.- Instead of creating a
.csr
file with the KeyChain Access tool as described in the Apple tutorial we recommend to use openssl. Issue the following command to create a certificate signing request for the Apple Pay Merchant Identity:
openssl req -sha256 -nodes -newkey rsa:2048 -keyout applepaytls.key -out applepaytls.csr
- Login to your Apple Developer account, in Certificates, Identifiers & Profiles, click Identifiers in the sidebar, then select Merchant IDs from the pop-up menu on the top right and select the merchant identified created in step 1.
- Navigate to the Apple Pay Merchant Identity Certificate section and select Create Certificate
- Upload the
applepaytls.csr
file you just created in your terminal, select Continue and then Download to get your.cer
file - Convert the
.cer
certificate to a.pem
certificate using the following command:
openssl x509 -inform der -in certFromApple.cer -out applepaytls.pem
- Instead of creating a
Next steps
When you have successfully completed the Apple Pay setup continue with step 2 here to finish the Apple Pay integration.