Generate Identity Certificate

In order to process payments using Apple Pay, you will need to follow the next steps to provide us your
Apple Pay Identity Certificate.

Step 1: Generate CSR

1. Open Keychain Access on your Mac.
2. Menu bar → Keychain Access > Certificate Assistant > Request a Certificate from a
   Certificate Authority.
3. Fill in:
   a. User Email Address: your Apple ID b. Common Name: anything like merchant.com.yourcompany.appname c. Leave "CA Email Address" blank
4. Select "Saved to disk", not "Email to CA"
5. Save the .csr file locally — you’ll upload this to Apple next

Step 2: Create the Merchant Identity Certificate

1. Go to: https://developer.apple.com/ > Certificates > Identifiers
2. Filter by “Merchant IDs” and find your merchant id crated for Apple Pay.
3. In the section "Apple Pay Merchant Identity Certificate", click: “Create Certificate”
4. Upload the .csr file you created in Step 1
5. Click Continue and Download the resulting .cer file
6. Double-click the .cer to add it to Keychain Access
7. In Keychain Access, go to My Certificates and locate the one you just added (it will have a
   disclosure arrow ▶️ showing the linked private key)
8. Right-click > Export it as a .p12 file (contains both cert + private key)

Step 3: Convert .p12 to .pem

In Terminal, run:

openssl pkcs12 -in Certificates.p12 -out apple_pay_identity_certificate.pem -nodes

This will generate a .pem file, please provide this file to SoftPoint in order to configure your Apple Pay
Account in SoftPoint.