On This Page

Part 2: Create an Apple Pay Payment Processing Certificate

Complete the tasks in this section to create an Apple Pay payment processing certificate. Apple Pay servers use this certificate to encrypt payment data. Creation of an Apple Pay payment processing certificate consists of two tasks:
  • Generating a certificate signing request (CSR).
  • Using the CSR to create an Apple Pay payment processing certificate.
IMPORTANT
When you generate a CSR, the sequence of steps you will perform depends on whether you are integrating
Cybersource
 decryption and merchant decryption.

Generating a CSR for
Cybersource
 Decryption

IMPORTANT
These steps apply to setting up
Cybersource
 decryption only. If you are integrating the merchant decryption model of Apple Pay into your system, follow the steps in Generating a CSR for Merchant Decryption instead.
For
Cybersource
 decryption, you will use your
Cybersource
 account in the
Business Center
 to generate a certificate signing request (CSR). You will use the Apple Pay Registration page within the
Business Center
.
If you do not have an Admin account or an account with write access, contact your Account Admin,
Cybersource
 sales engineer, alliance partner, or technical account manager.
  1. Follow these steps at the
    Cybersource
    Business Center
     to generate a CSR:
  2. Log in to your
    Cybersource
     merchant account in the
    Business Center
    .

    ADDITIONAL INFORMATION

    ADDITIONAL INFORMATION

    ADDITIONAL INFORMATION

  3. In the left navigation panel, select
    Payment Configuration
    .
  4. Choose
    Digital Payment Solutions
    .

    ADDITIONAL INFORMATION

    The Digital Payment Solutions page appears.
  5. Click
    Configure
     for Apple Pay.

    ADDITIONAL INFORMATION

    The Apple Pay Registration page appears.

    ADDITIONAL INFORMATION

    This image shows the Apple Pay Registration page in the
    Cybersource
    Business Center
    .

    Figure:

    Apple Pay Registration Page in the
    Cybersource
    Business Center
     Interface
    Business Center UI : Payment Configuration : Digital Payment Solutions : Apple Pay Registration (aem pdf)
  6. Enter the Apple merchant ID that you created and registered in your Apple Developer account.

    ADDITIONAL INFORMATION

    These steps are described in Registering a New Merchant ID in Your Apple Developer Account. This value should match the id you set up with Apple including the "merchant" prefix.
  7. Click
    Generate new certificate signing request
    .
  8. Click the download icon next to the key.
  9. Download the certificate request file (a file with a
    .certSigningRequest
     file extension) to your local machine.
  10. Use your browser controls to save the file to your local machine.

    ADDITIONAL INFORMATION

    In the next task, you will upload the CSR file to your Apple Developer account.

Generating a CSR for Merchant Decryption

IMPORTANT
These steps apply to setting up merchant decryption only. If you are integrating the
Cybersource
 decryption model of Apple Pay into your system, follow the steps in Generating a CSR for Cybersource Decryption instead.
For merchant decryption, you will use your Apple device to generate a certificate signing request (CSR).
IMPORTANT
When you perform tasks at the Apple Developer portal, always refer to official Apple documentation for the most up-to-date information
.
  1. Follow these steps at your Apple device to generate a CSR:
  2. Sign in to your Apple Developer account as the Account Holder or as an Admin and select
    Certificates, Identifiers & Profiles
    .
  3. Click
    Identifiers
     in the sidebar.
  4. Select
    Merchant IDs
     and click
    Continue
    .
  5. Under Identifiers, select
    Merchant IDs
     using the filter on the top right.
  6. On the right, select your merchant identifier.
  7. Under Apple Pay Payment Processing Certificate, click
    Create Certificate
    .

Creating a Payment Processing Certificate for Your Merchant ID

Using the certificate signing request that you just created, you will create an Apple payment processing certificate and associate the certificate with your Apple merchant ID that you created before that. Those earlier tasks are described in these topics:
Apple Pay uses the payment processing certificate to encrypt the customer's payment information. This certificate expires every 25 months. If the certificate expires or is revoked, you can recreate it.
IMPORTANT
When you perform tasks at the Apple Developer portal, always refer to official Apple documentation for the most up-to-date information
.
  1. Follow these steps to create a payment processing certificate for your Apple Pay merchant ID:
  2. Sign in to your Apple Developer account as the Account Holder or as an Admin and select
    Certificates, Identifiers & Profiles
    .
  3. Upload the CSR file and associate the CSR with your merchant ID.

    ADDITIONAL INFORMATION

    The CSR contains your Apple merchant ID and a public key that Apple Pay uses to encrypt sensitive payment data.
    1. Click
      Identifiers
       in the sidebar.
    2. Select
      Merchant IDs
       using the filter on the top right.
    3. On the right, select your merchant ID.

      Step Result

      If a banner at the top of the page prompts you, you need to accept an agreement. Click
      Review Agreement
       and follow the instructions that appear.
    4. Under Apple Pay Payment Processing Certificate, click
      Create Certificate
      .
  4. Create a payment processing certificate and download the certificate to your local machine.
    1. Click
      Choose File
       and select the CSR file that you uploaded.

      ADDITIONAL INFORMATION

      The CSR file has the filename extension
      .certSigningRequest
      .
    2. Click
      Choose
      .
    3. Click
      Continue
      .
    4. Click
      Download
      .

      Step Result

      The payment processing certificate (a file with the filename extension
      .cert
      ) appears in your Downloads folder.
  5. Go to the next task.