Follow the instructions on this page if you want to enable Apple Pay using your own Apple Pay certificate.
If you do not have an iOS app, Apple Pay is enabled using Adyen's certificate by default. Follow the Apple Pay guide for your integration (Web Drop-in, Web Components, or API-only) to use Adyen's certificate.
Before you begin
To enable Apple Pay using your own certificate, you need to have:
- An Apple Developer account that is associated with either the Apple Developer Program, or the Apple Developer Enterprise Program. To make sure you get notifications when your Apple Pay certificate is about to expire, create a user with an email address that is linked to a group inbox or distribution list and has the Account Holder or Admin role.
- You must have the role Merchant admin or Manage API Credentials for your Adyen Customer Area.
Your shoppers can only see Apple Pay as a payment method option if they:
- Use an Apple Pay-compatible device.
- Use Safari if they are paying on the web.
- Are located in a country or region where Apple Pay is available.
- Have an existing card added to their Apple Pay wallet.
If you are using one of our plugins, refer to the specific documentation for enabling Apple Pay:
Process overview
To add Apple Pay to your website:
- Create merchant identifiers in your Apple developer account, and enter them in your Customer Area. You must create separate merchant identifiers for test transactions and live transactions.
- Create a payment processing certificate for each merchant identifier, and add each certificate to the correct user in your Customer Area. Apple Pay uses this certificate to encrypt payment information, and we need to have this certificate to be able to decrypt and process the payment.
- Register and validate your merchant domain with Apple.
- Create a merchant identity certificate, convert it to a PEM file, and upload it to your server. This certificate is used to authenticate communication with the Apple Pay servers.
- Add Apple Pay as a payment method in your Customer Area.
For information about server requirements for Apple Pay on the web, refer to the Apple Developer portal.
Step 1: Create merchant identifiers
A merchant identifier uniquely identifies you as a merchant who is able to accept Apple Pay payments.
You can use the same merchant identifier for multiple websites and iOS apps.
To create merchant identifiers:
-
Log in to your Apple Developer account at https://developer.apple.com.
-
Follow the Apple Developer Account Help instructions to create a merchant identifier. Your merchant identifier must include the prefix merchant.com.adyen. For example: merchant.com.adyen.merchantAccount.
For test transactions, we recommend creating a merchant identifier with .test at the end. For example: merchant.com.adyen.merchantAccount.test -
Log in to your Adyen Customer Area and go to Developers > API credentials. Select the web service user that will execute your Apple Pay transactions (ws@Company.[YourCompanyAccount]).
-
In Wallet payment methods > Apple Pay, select + Add.
-
Select Use your own certificate > Continue.
-
Enter the merchant identifier and select Download CSR > Continue.
-
Save the CSR. You will need it to create the payment processing certificate.
Step 2: Create payment processing certificate
-
Log in to your Apple Developer account at https://developer.apple.com.
-
Follow the Apple Developer Account Help instructions to create a payment processing certificate for a website:
- Select a merchant identifier that you created in Step 1
- Skip the step to create a certificate signing request.
- In the step to select the certificate signing request file, select the CSR you created in Step 1.
- If at any time a question Will payments associated with this Merchant ID be processed exclusively in China? or similar appears, answer No and continue.
- Download and save the generated payment processing certificate (.cer file).
-
When you have completed the instructions from Apple, return to your Adyen Customer Area and go to Developers > API credentials. Select the web service user that will execute your Apple Pay transactions (ws@Company.[YourCompanyAccount]).
-
Select the merchant identifier.
-
Upload the payment processing certificate and select Continue.
Step 3: Register and validate your merchant domain
This step doesn't apply when you are using our Salesforce Commerce Cloud plugin.
-
Log in to your Apple Developer account at https://developer.apple.com.
-
Follow the Apple Developer Account Help instructions to register a merchant domain, but note the following:
- In the step to select a merchant identifier, make sure you select the merchant identifier you created in Step 1.
Step 4: Create a merchant identity certificate
This step doesn't apply when you are using our Salesforce Commerce Cloud plugin.
For each transaction, you need to request an Apple Pay payment session using your Merchant Identity Certificate. In this step, you will create that certificate.
-
Log in to your Apple Developer account at https://developer.apple.com.
-
Follow the Apple Developer Account Help instructions to create a merchant identity certificate, but note the following:
- In the step to select a merchant identifier, make sure you select the merchant identifier you created in Step 1.
- Follow the instructions from Apple to create a CSR yourself. The CSR you received from us can't be used for creating a merchant identity certificate.
- Download and save the generated merchant identity certificate (.cer file).
-
When you have completed the instructions from Apple, add the merchant identity certificate to your keychain.
-
Export the certificate from your keychain as a p12 file.
-
Convert the p12 file to a PEM file using the following command:
openssl pkcs12 -in your-file.p12 -out apple-pay-cert.pem -nodes -clcerts -
Upload the apple-pay-cert.pem file to your server.
When requesting an Apple Pay payment session, use the full path to the apple-pay-cert.pem file.
Step 5: Add Apple Pay as a payment method
Add Apple Pay as a payment method in your Customer Area, including the merchant identifier you created.