- Merchant admin<\/strong><\/li>
- Manage API Credentials<\/strong><\/li><\/ul><\/td>\n<\/tr>\n
\n Setup steps<\/strong><\/td>\n Before you begin: - Make sure that you have an Apple Developer account<\/a> that is associated with either the Apple Developer Program<\/a>, or the Apple Developer Enterprise Program<\/a>.<\/li>
- To get notifications when your Apple Pay certificate is about to expire, create a user with an email address that is linked to a group inbox or distribution list and has the Account Holder<\/strong> or Admin<\/strong> role.<\/li><\/ul><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
How it works<\/h2>\n
To add Apple Pay to your website with your own Apple Pay certificate, you must:<\/p>\n
- \n
- Create merchant identifiers<\/a> in your Apple developer account, and enter them in your Customer Area. You must create separate merchant identifiers for test transactions and live transactions.<\/li>\n
- Create a payment processing certificate<\/a> for each merchant identifier, and add each certificate to the correct user in your Customer Area. Apple Pay uses this certificate to encrypt payment information, and we need to have this certificate to be able to decrypt and process the payment.<\/li>\n
- Register and validate your merchant domain with Apple<\/a>.<\/li>\n
- Create a merchant identity certificate<\/a>, convert it to a PEM file, and upload it to your server. This certificate is used to authenticate communication with the Apple Pay servers.<\/li>\n
- Add Apple Pay as a payment method in your Customer Area<\/a>.<\/li>\n<\/ol>\n
For information about server requirements for Apple Pay on the web, refer to the\u00a0Apple Developer portal<\/a>.<\/p>\n
Create merchant identifiers<\/h2>\n
A merchant identifier uniquely identifies you as a merchant who is able to accept Apple Pay payments.<\/p>\n
You can use the same merchant identifier for multiple websites and iOS apps.<\/p>\n
To create merchant identifiers:<\/p>\n
- \n
- \n
Log in to your Apple Developer account at\u00a0https:\/\/developer.apple.com<\/a>.<\/p>\n<\/li>\n
- \n
Follow the Apple Developer Account Help instructions to create a merchant identifier<\/a>. Your merchant identifier must include the prefix merchant.<\/strong><\/span>. We recommend to use the prefix merchant.com.adyen<\/strong><\/span>. For example: merchant.com.adyen.merchantAccount<\/strong><\/span>.
\nFor test transactions, we recommend creating a merchant identifier with .test<\/strong><\/span> at the end. For example: merchant.com.adyen.merchantAccount.test<\/strong><\/span><\/p>\n<\/li>\n- \n
Log in to your Adyen Customer Area<\/a> and go to Developers<\/strong> > API credentials<\/strong>. Select the web service user that will execute your Apple Pay transactions (ws@Company.<\/strong><\/span>[YourCompanyAccount]<\/strong>).<\/p>\n<\/li>\n
- \n
In Wallet payment methods<\/strong> > Apple Pay<\/strong>, select + Add<\/strong>.<\/p>\n<\/li>\n
- \n
Select Use your own certificate<\/strong> > Continue<\/strong>.<\/p>\n<\/li>\n
- \n
Enter the merchant identifier and select Download CSR<\/strong> > Continue<\/strong>.<\/p>\n<\/li>\n
- \n
Save the CSR. You will need it to create the payment processing certificate.<\/p>\n<\/li>\n<\/ol>\n
Create payment processing certificate<\/h2>\n
- \n
- \n
Log in to your Apple Developer account at\u00a0https:\/\/developer.apple.com<\/a>.<\/p>\n<\/li>\n
- \n
Follow the Apple Developer Account Help instructions to create a payment processing certificate for a website<\/a>:<\/p>\n
- \n
- Select a merchant identifier that you created when you created your merchant identifiers<\/a>.<\/li>\n
- Skip the step to create a certificate signing request.<\/li>\n
- In the step to select the certificate signing request file, select the CSR you created when you created your merchant identifiers<\/a>.<\/li>\n
- If at any time a question Will payments associated with this Merchant ID be processed exclusively in China?<\/strong><\/span>\u00a0or similar appears, answer No<\/strong><\/span> and continue.<\/li>\n
- Download and save the generated payment processing certificate (CER or .cer<\/strong><\/span> file).<\/li>\n<\/ul>\n<\/li>\n
- \n
When you have completed the instructions from Apple, return to your Adyen Customer Area and go to Developers<\/strong> > API credentials<\/strong>. Select the web service user that will execute your Apple Pay transactions (ws@Company.<\/strong><\/span>[YourCompanyAccount]<\/strong>).<\/p>\n<\/li>\n
- \n
Select the merchant identifier.<\/p>\n<\/li>\n
- \n
Upload the payment processing certificate and select Continue<\/strong>.<\/p>\n<\/li>\n<\/ol>\n
Renew a payment processing certificate<\/h3>\n
When your certificate expires, you have to renew it. Apple Pay requires time to fully activate your new payment processing certificate. During that time period, transactions may still use the old certificate.<\/p>\n
To renew a certificate:<\/p>\n
- \n
- \n
Log in to your Adyen Customer Area<\/a> and go to Developers<\/strong> > API credentials<\/strong>.<\/p>\n<\/li>\n
- \n
Select the relevant web service user.<\/p>\n<\/li>\n
- \n
Under Apple Pay Certificates<\/strong> select Add<\/strong>.<\/p>\n<\/li>\n
- \n
Enter the merchant identifier and download the CSR. Write down the start of the
KeyID<\/code> to help you locate it in step 6.<\/p>\n<\/li>\n- \n
Go to the Apple development environment and follow the steps described there to get the CER.<\/p>\n<\/li>\n
- \n
In the Apple Pay Certificates<\/strong> section, select the certificate with the
KeyID<\/code> you noted in step 4. This will have the Input needed<\/strong> status.<\/p>\n<\/li>\n- \n
Select the eye icon<\/strong>
![](\"\/user\/themes\/adyen\/images\/illustrations\/eye.svg\")
.<\/p>\n<\/li>\n- \n
In the dialog that pops up, click Continue<\/strong>, and upload the certificate.<\/p>\n<\/li>\n
- \n
Activate the new certificate on Apple's Developer Portal. Until this is completed, the old certificate will still be used.<\/p>\n
After the activation of the new certificate, the old certificate will continue to be used for about 4 hours after the activation of the new certificate.<\/p>\n<\/li>\n
- \n
Verify that the new certificate is in use for payments (see steps below).<\/p>\n<\/li>\n<\/ol>\n
Verify which certificate is in use<\/h3>\n
Apple gradually rolls out new certificates. This means that the old certificate remains active and might be used while the new certificate is being rolled out.<\/p>\n
To see which certificate is in use for a payment, follow these steps:<\/p>\n
- \n
- \n
In the \/payments<\/a> request, find the Base64-encoded JSON object
paymentMethod.applePayToken<\/code>:<\/p>\n\n<\/code-sample>\n<\/div>\n<\/li>\n - \n
Decode the
paymentMethod.applePayToken<\/code> object:<\/p>\n\n<\/code-sample>\n<\/div>\n The
publicKeyHash<\/code> contains theKeyID<\/code> value of the certificate that was used for the payment.<\/p>\n<\/li>\n- \n
In your Customer Area<\/a>, go to Developers<\/strong> > API credentials<\/strong>, and find the relevant web service user that made the payments. Under wallet payment methods, go to Apple Pay Certificates<\/strong>, and check the
KeyID<\/code>.<\/p>\n<\/li>\n<\/ol>\nIf you see the
KeyID<\/code> for your old certificate, this may be due to the gradual rollout of Apple Certificates, and it does not mean that your setup is not successful. Four hours after the activation the rollout should be completed and you will no longer see payments using the old certificate. When you see the new certificate for an authorized payment, this confirms that all steps have been completed successfully.<\/p>\nTo remove the old certificate from the Customer Area<\/a>, go to Apple Pay Certificates<\/strong>, select the certificate with the applicable
KeyID<\/code>, and click the bin icon <\/i>.<\/p>\nRegister and validate your merchant domain<\/h2>\n
\nThis step doesn't apply when you are using our Salesforce Commerce Cloud plugin. Refer to our Apple Pay documentation for the plugin<\/a> instead.<\/p>\n<\/div><\/div>\n
- \n
- \n
Log in to your Apple Developer account at\u00a0https:\/\/developer.apple.com<\/a>.<\/p>\n<\/li>\n
- \n
Follow the Apple Developer Account Help instructions to register a merchant domain<\/a>, but note the following:<\/p>\n
- \n
- In the step to select a merchant identifier, make sure you select the merchant identifier you created in Step 1<\/a>.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
Create a merchant identity certificate<\/h2>\n
\nThis step doesn't apply when you are using our Salesforce Commerce Cloud plugin. Refer to our Apple Pay documentation for the plugin<\/a> instead.<\/p>\n<\/div><\/div>\n
For each transaction, you need to request an Apple Pay payment session<\/a> using your Merchant Identity Certificate. In this step, you will create that certificate.<\/p>\n
- \n
- \n
Log in to your Apple Developer account at\u00a0https:\/\/developer.apple.com<\/a>.<\/p>\n<\/li>\n
- \n
Follow the Apple Developer Account Help instructions to create a merchant identity certificate<\/a>, but note the following:<\/p>\n
- \n
- In the step to select a merchant identifier, make sure you select the merchant identifier you created in Step 1<\/a>.<\/li>\n
- Follow the instructions from Apple to create a CSR yourself. The CSR you received from us cannot be used for creating a merchant identity certificate.<\/li>\n
- Download and save the generated merchant identity certificate (.cer<\/strong><\/span> file).<\/li>\n<\/ul>\n<\/li>\n
- \n
When you have completed the instructions from Apple, add the merchant identity certificate to your keychain.<\/p>\n<\/li>\n
- \n
Export the certificate from your keychain as a p12 file.<\/p>\n<\/li>\n
- \n
Convert the p12 file to a PEM file using the following command:<\/p>\n
openssl pkcs12 -in your-file.p12 -out apple-pay-cert.pem -nodes -clcerts<\/code><\/pre>\n<\/li>\n- \n
Upload the\u00a0apple-pay-cert.pem<\/strong><\/span>\u00a0file to your server.<\/p>\n<\/li>\n<\/ol>\n
\nWhen requesting an Apple Pay payment session, use the full path to the\u00a0apple-pay-cert.pem<\/strong><\/span>\u00a0file.<\/p>\n<\/div><\/div>\n
Add Apple Pay in your Customer Area<\/h2>\n
Add Apple Pay in your Customer Area<\/a>. You need to provide your:<\/p>\n
- \n
- Merchant name<\/strong>: the merchant account for which you want to set up Apple Pay.<\/li>\n
- Merchant identifier<\/strong>: the merchant identifier you created<\/a>.<\/li>\n<\/ul>\n
See also<\/h2>\n
\n- \n Apple Pay\n <\/a><\/li>
- \n Apple Pay for Web\n <\/a><\/li><\/ul><\/div>\n","url":"https:\/\/docs.adyen.com\/pt\/payment-methods\/apple-pay\/apple-pay-certificate\/web","articleFields":{"description":"Enable Apple Pay for your web integration with your own Apple Pay certificate.","feedback_component":true,"id":"36182671","type":"page","_expandable":{"operations":""},"status":"current","last_edit_on":"24-11-2023 15:52","filters_component":false,"page_id":"a0b63645-c190-4ab0-af75-49a61f2c9f65","decision_tree":"[]"},"algolia":{"url":"https:\/\/docs.adyen.com\/pt\/payment-methods\/apple-pay\/apple-pay-certificate\/web","title":"Use your own certificate for web","content":"This page explains how to enable Apple Pay on your website with your own Apple Pay certificate.\nRequirements\nBefore you begin, take into account the following requirements, limitations, and preparations.\n\n\n\nRequirement\nDescription\n\n\n\n\nIntegration type\nMake sure that you have built a Web Drop-in\/Components integration using the Advanced or Sessions flow.\n\n\nCustomer Area roles\nMake sure that you have one of the following roles: Merchant admin Manage API Credentials\n\n\nSetup steps\nBefore you begin: Make sure that you have an Apple Developer account that is associated with either the Apple Developer Program, or the Apple Developer Enterprise Program.To get notifications when your Apple Pay certificate is about to expire, create a user with an email address that is linked to a group inbox or distribution list and has the Account Holder or Admin role.\n\n\n\nHow it works\nTo add Apple Pay to your website with your own Apple Pay certificate, you must:\n\nCreate merchant identifiers in your Apple developer account, and enter them in your Customer Area. You must create separate merchant identifiers for test transactions and live transactions.\nCreate a payment processing certificate for each merchant identifier, and add each certificate to the correct user in your Customer Area. Apple Pay uses this certificate to encrypt payment information, and we need to have this certificate to be able to decrypt and process the payment.\nRegister and validate your merchant domain with Apple.\nCreate a merchant identity certificate, convert it to a PEM file, and upload it to your server. This certificate is used to authenticate communication with the Apple Pay servers.\nAdd Apple Pay as a payment method in your Customer Area.\n\nFor information about server requirements for Apple Pay on the web, refer to the\u00a0Apple Developer portal.\nCreate merchant identifiers\nA merchant identifier uniquely identifies you as a merchant who is able to accept Apple Pay payments.\nYou can use the same merchant identifier for multiple websites and iOS apps.\nTo create merchant identifiers:\n\n\nLog in to your Apple Developer account at\u00a0https:\/\/developer.apple.com.\n\n\nFollow the Apple Developer Account Help instructions to create a merchant identifier. Your merchant identifier must include the prefix merchant.. We recommend to use the prefix merchant.com.adyen. For example: merchant.com.adyen.merchantAccount.\nFor test transactions, we recommend creating a merchant identifier with .test at the end. For example: merchant.com.adyen.merchantAccount.test\n\n\nLog in to your Adyen Customer Area and go to Developers > API credentials. Select the web service user that will execute your Apple Pay transactions (ws@Company.[YourCompanyAccount]).\n\n\nIn Wallet payment methods > Apple Pay, select + Add.\n\n\nSelect Use your own certificate > Continue.\n\n\nEnter the merchant identifier and select Download CSR > Continue.\n\n\nSave the CSR. You will need it to create the payment processing certificate.\n\n\nCreate payment processing certificate\n\n\nLog in to your Apple Developer account at\u00a0https:\/\/developer.apple.com.\n\n\nFollow the Apple Developer Account Help instructions to create a payment processing certificate for a website:\n\nSelect a merchant identifier that you created when you created your merchant identifiers.\nSkip the step to create a certificate signing request.\nIn the step to select the certificate signing request file, select the CSR you created when you created your merchant identifiers.\nIf at any time a question Will payments associated with this Merchant ID be processed exclusively in China?\u00a0or similar appears, answer No and continue.\nDownload and save the generated payment processing certificate (CER or .cer file).\n\n\n\nWhen you have completed the instructions from Apple, return to your Adyen Customer Area and go to Developers > API credentials. Select the web service user that will execute your Apple Pay transactions (ws@Company.[YourCompanyAccount]).\n\n\nSelect the merchant identifier.\n\n\nUpload the payment processing certificate and select Continue.\n\n\nRenew a payment processing certificate\nWhen your certificate expires, you have to renew it. Apple Pay requires time to fully activate your new payment processing certificate. During that time period, transactions may still use the old certificate.\nTo renew a certificate:\n\n\nLog in to your Adyen Customer Area and go to Developers > API credentials.\n\n\nSelect the relevant web service user.\n\n\nUnder Apple Pay Certificates select Add.\n\n\nEnter the merchant identifier and download the CSR. Write down the start of the KeyID to help you locate it in step 6.\n\n\nGo to the Apple development environment and follow the steps described there to get the CER.\n\n\nIn the Apple Pay Certificates section, select the certificate with the KeyID you noted in step 4. This will have the Input needed status.\n\n\nSelect the eye icon .\n\n\nIn the dialog that pops up, click Continue, and upload the certificate.\n\n\nActivate the new certificate on Apple's Developer Portal. Until this is completed, the old certificate will still be used.\nAfter the activation of the new certificate, the old certificate will continue to be used for about 4 hours after the activation of the new certificate.\n\n\nVerify that the new certificate is in use for payments (see steps below).\n\n\nVerify which certificate is in use\nApple gradually rolls out new certificates. This means that the old certificate remains active and might be used while the new certificate is being rolled out.\nTo see which certificate is in use for a payment, follow these steps:\n\n\nIn the \/payments request, find the Base64-encoded JSON object paymentMethod.applePayToken:\n\n\n\n\n\nDecode the paymentMethod.applePayToken object:\n\n\n\nThe publicKeyHash contains the KeyID value of the certificate that was used for the payment.\n\n\nIn your Customer Area, go to Developers > API credentials, and find the relevant web service user that made the payments. Under wallet payment methods, go to Apple Pay Certificates, and check the KeyID.\n\n\nIf you see the KeyID for your old certificate, this may be due to the gradual rollout of Apple Certificates, and it does not mean that your setup is not successful. Four hours after the activation the rollout should be completed and you will no longer see payments using the old certificate. When you see the new certificate for an authorized payment, this confirms that all steps have been completed successfully.\nTo remove the old certificate from the Customer Area, go to Apple Pay Certificates, select the certificate with the applicable KeyID, and click the bin icon .\nRegister and validate your merchant domain\n\nThis step doesn't apply when you are using our Salesforce Commerce Cloud plugin. Refer to our Apple Pay documentation for the plugin instead.\n\n\n\nLog in to your Apple Developer account at\u00a0https:\/\/developer.apple.com.\n\n\nFollow the Apple Developer Account Help instructions to register a merchant domain, but note the following:\n\nIn the step to select a merchant identifier, make sure you select the merchant identifier you created in Step 1.\n\n\n\nCreate a merchant identity certificate\n\nThis step doesn't apply when you are using our Salesforce Commerce Cloud plugin. Refer to our Apple Pay documentation for the plugin instead.\n\nFor each transaction, you need to request an Apple Pay payment session using your Merchant Identity Certificate. In this step, you will create that certificate.\n\n\nLog in to your Apple Developer account at\u00a0https:\/\/developer.apple.com.\n\n\nFollow the Apple Developer Account Help instructions to create a merchant identity certificate, but note the following:\n\nIn the step to select a merchant identifier, make sure you select the merchant identifier you created in Step 1.\nFollow the instructions from Apple to create a CSR yourself. The CSR you received from us cannot be used for creating a merchant identity certificate.\nDownload and save the generated merchant identity certificate (.cer file).\n\n\n\nWhen you have completed the instructions from Apple, add the merchant identity certificate to your keychain.\n\n\nExport the certificate from your keychain as a p12 file.\n\n\nConvert the p12 file to a PEM file using the following command:\nopenssl pkcs12 -in your-file.p12 -out apple-pay-cert.pem -nodes -clcerts\n\n\nUpload the\u00a0apple-pay-cert.pem\u00a0file to your server.\n\n\n\nWhen requesting an Apple Pay payment session, use the full path to the\u00a0apple-pay-cert.pem\u00a0file.\n\nAdd Apple Pay in your Customer Area\nAdd Apple Pay in your Customer Area. You need to provide your:\n\nMerchant name: the merchant account for which you want to set up Apple Pay.\nMerchant identifier: the merchant identifier you created.\n\nSee also\n\n\n Apple Pay\n \n Apple Pay for Web\n \n","type":"page","locale":"pt","boost":16,"hierarchy":{"lvl0":"Home","lvl1":"Payment methods","lvl2":"Apple Pay","lvl3":"Apple Pay certificate","lvl4":"Use your own certificate for web"},"hierarchy_url":{"lvl0":"https:\/\/docs.adyen.com\/pt","lvl1":"https:\/\/docs.adyen.com\/pt\/payment-methods","lvl2":"https:\/\/docs.adyen.com\/pt\/payment-methods\/apple-pay","lvl3":"https:\/\/docs.adyen.com\/pt\/payment-methods\/apple-pay\/apple-pay-certificate","lvl4":"\/pt\/payment-methods\/apple-pay\/apple-pay-certificate\/web"},"levels":5,"category":"Payment method","category_color":"green","tags":["certificate"]}}
- Merchant identifier<\/strong>: the merchant identifier you created<\/a>.<\/li>\n<\/ul>\n
- \n
- \n
- \n
- \n
- \n
- \n
- \n
- Create a payment processing certificate<\/a> for each merchant identifier, and add each certificate to the correct user in your Customer Area. Apple Pay uses this certificate to encrypt payment information, and we need to have this certificate to be able to decrypt and process the payment.<\/li>\n
- To get notifications when your Apple Pay certificate is about to expire, create a user with an email address that is linked to a group inbox or distribution list and has the Account Holder<\/strong> or Admin<\/strong> role.<\/li><\/ul><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
- Manage API Credentials<\/strong><\/li><\/ul><\/td>\n<\/tr>\n