Apple Pay leverages a sophisticated cryptographic scheme for passing payment data securely from the Secure Element on the device to Braintree's Vault.

Before you can use Apple Pay, you'll need to coordinate a number of identifiers and certificates.

Apple Pay certificate request and provisioning

In order to use Apple Pay on a real device, you must configure an Apple Pay Merchant ID and an Apple Pay certificate in Apple's Developer Center. Because our sandbox and production environments are separate, you'll need to complete these steps twice: once for each environment.

Step 1

Sign in to your Developer Center in Safari

Step 2

Create an Apple Pay Merchant ID

  • Note: We recommend using separate Apple Pay Merchant IDs for sandbox and production to ensure that your sandbox app can't create production transactions.

Step 3

Download your CSR (certificate signing request) from the Control Panel

  1. Click the gear icon in the top right corner, select Processing from the drop-down menu
  2. Scroll to Apple Pay, and click the toggle to enable this payment method
  3. Select the Options link and click the +Add link to download the CSR from the certificate management page
    • Note: If you are unable to access this information, contact your Control Panel admin. You may need a different Control Panel role.

Step 4

Generate a new Apple Pay Certificate in Apple's developer portal

  1. Select Apple Pay Certificate and click Continue
    • Note: Although this option appears under Production in Apple's developer portal, you'll select it when generating your sandbox certificate as well as your production certificate.
  2. In the dropdown, choose the Merchant ID you created earlier and click Continue
  3. Under Payment Processing Certificate, click Create Certificate
  4. Answer the prompted question and click Continue
  5. Upload the CSR that you downloaded from the Control Panel in step 3
    • Note: You must use the CSR we provide. Do not create a CSR file yourself.

Step 5

Download the new Apple Pay Certificate and upload it in the Control Panel

  1. Click the gear icon in the top right corner
  2. Click Processing from the drop-down menu
  3. Scroll to the Payment Methods section
  4. Next to Apple Pay, click the Options link
  5. Next to Apple Merchant Certificates (iOS), click the +Add link

Step 6

Repeat for your production account

note

While you will need to generate and upload a Payment Processing Certificate, a Merchant Identity Certificate is not required to process Apple Pay in-app.

Certificate renewal

Apple Pay certificates expire after 25 months. To avoid any disruptions in processing, you'll need to generate a new certificate before your current one expires, and upload it to the Control Panel. As with the original request and provisioning, you'll need to complete this process for both sandbox and production.

Step 1

Download a new Certificate Signing Request (CSR) from the Control Panel

  1. Log into the Control Panel
  2. Click on the gear icon in the top right corner
  3. Click Processing from the drop-down menu
  4. Scroll to the Payment Methods section
  5. Next to Apple Pay, click the Options link
  6. Next to Apple Merchant Certificates (iOS), click the +Add link
  7. Click the Certificate Signing Request link to download the CSR file

Step 2

Generate a new certificate from Apple

  1. Log into the Apple Developer Portal
  2. Click on Certificates, IDs & Profiles, then Merchant IDs
  3. Select the appropriate Merchant ID and click Edit
  4. Under Payment Processing Certificate, click Create Certificate, then click Continue
  5. Upload the CSR file you downloaded from the Control Panel in step 1, and click Continue
  6. Download the new certificate

Step 3

Upload the new certificate to your Control Panel

  1. Return to the tab with your Control Panel
  2. Under the Upload Certificate section, click the Choose File button
  3. Select the new certificate, and click Upload

Step 4

Activate the new certificate with Apple

  1. Return to the Apple Developer Portal and click Edit under the same Merchant ID
  2. Click Activate next to the new certificate

Step 5

Repeat for your production account

Xcode setup

In Xcode, enable Apple Pay under Capabilities in your Project Settings.

Then enable both Apple Pay Merchant IDs.

It is important that you compile your app with a provisioning profile for the Apple development team with an Apple Pay Merchant ID. Apple Pay does not support enterprise provisioning.

Next Page: Client-side →

Still have questions?

If you can’t find an answer, contact us