On This Page

Part 2: Creating an Apple Pay Payment Processing Certificate

The topics in this section describe how to create a payment processing certificate for Apple Pay. Apple Pay servers use this certificate to encrypt payment data.
You create an Apple Pay payment processing certificate in two phases:
  • You generate a certificate signing request (CSR). The sequence of steps you follow depends on whether you are integrating
    Cybersource
     decryption and merchant decryption.
  • You use the CSR to create an Apple Pay payment processing certificate.

Generating a CSR at Your Apple Device (for Merchant Decryption)

IMPORTANT
These steps apply to setting up merchant decryption only.
If you are integrating the
Cybersource
 decryption model of Apple Pay into your system, follow the steps in Generating a CSR in the Business Center (for Cybersource Decryption) instead.
For merchant decryption, you will use your Apple device to generate a certificate signing request (CSR).
Follow these steps to generate a CSR on your Apple device:
  1. Sign in to your Apple Developer account.
  2. In Certificates, Identifiers & Profiles, click
    Identifiers
     in the sidebar.
  3. Select
    Merchant IDs
     and click
    Continue
    .
  4. Under Identifiers, select
    Merchant IDs
     using the filter on the top right.
  5. On the right, select your merchant identifier.
  6. Under Apple Pay Payment Processing Certificate, click
    Create Certificate
    .

Generating a CSR in the
Business Center
 (for 
Cybersource
 Decryption)

IMPORTANT
These steps apply to setting up
Cybersource
 decryption only.
If you are integrating the merchant decryption model of Apple Pay into your system, follow the steps in Generating a CSR at Your Apple Device (for Merchant Decryption) instead.
For
Cybersource
 decryption, you will use your
Cybersource
 account in the
Business Center
 to generate a certificate signing request (CSR). You will use the Apple Pay Registration page to generate the CSR.
IMPORTANT
If you do not have an Admin account or an account with write access, contact your Account Admin,
Cybersource
 sales engineer, alliance partner, or technical account manager.
Follow these steps to generate a CSR from the
Business Center
:
  1. Log in to your
    Cybersource
     merchant account in the
    Business Center
    .
  2. In the left navigation panel, select
    Payment Configuration
    .
  3. Choose
    Digital Payment Solutions
    .

    ADDITIONAL INFORMATION

    The Digital Payment Solutions page appears.
  4. Click
    Configure
     for Apple Pay.

    ADDITIONAL INFORMATION

    The Apple Pay Registration page appears.

    ADDITIONAL INFORMATION

    This image shows the Apple Pay Registration page in the
    Cybersource
    Business Center
    .

    Figure:

    Apple Pay Registration Page in the
    Cybersource
    Business Center
     Interface
    Business Center UI : Payment Configuration : Digital Payment Solutions : Apple Pay Registration (aem pdf)
  5. Enter the Apple merchant ID that you created and registered in your Apple Developer account.

    ADDITIONAL INFORMATION

    These steps are described in Registering a New Merchant ID in Your Apple Developer Account. This value should match the id you set up with Apple including the "merchant" prefix.
  6. Click
    Generate new certificate signing request
    .
  7. Click the download icon next to the key.
  8. Download the certificate request file (a file with a
    .certSigningRequest
     file extension) to your local machine.
  9. Use your browser controls to save the file to your local machine.

    ADDITIONAL INFORMATION

    In the next task, you will upload the CSR file to your Apple Developer account.

Creating a Payment Processing Certificate

The Apple payment processing certificate is associated with your Apple merchant ID, and Apple Pay uses the cert to encrypt payment information. The payment processing certificate expires every 25 months. If the certificate is revoked, you can recreate it.
Follow these steps to create a payment processing certificate for your Apple Pay merchant ID:
IMPORTANT
When you perform tasks at the Apple Developer portal, always refer to official Apple documentation for the most up-to-date information
.
  1. Log in to your Apple Developer merchant account as an Account Holder or Admin.
  2. Upload the CSR file and associate the CSR with your merchant ID.

    ADDITIONAL INFORMATION

    The CSR contains your Apple merchant ID and a public key that Apple Pay uses to encrypt sensitive payment data.
    1. In the left navigation panel, select
      Certificates, Identifiers & Profiles
      .
    2. Click
      Identifiers
      .
    3. Under Identifiers, select
      Merchant IDs
       using the filter on the top right.
    4. On the right, select your merchant ID.

      Step Result

      If a banner at the top of the page prompts you, you need to accept an agreement. Click
      Review Agreement
       and follow the instructions that appear.
    5. Under Apple Pay Payment Processing Certificate, click
      Create Certificate
      .
  3. Create a payment processing certificate and download the certificate to your local machine.
    1. Click
      Choose File
       and select the CSR file that you uploaded.

      ADDITIONAL INFORMATION

      The CSR file has the filename extension
      .certSigningRequest
      .
    2. Click
      Choose
      .
    3. Click
      Continue
      .
    4. Click
      Download
      .

      Step Result

      The payment processing certificate (a file with the filename extension
      .cert
      ) appears in your Downloads folder.