Before using the Apple Pay payment method, it is essential to configure its settings on our end. Thus, this guide explains how to enable Apple Pay on Corefy, covering the required setup steps, integration specifics, and verification process. By completing our setup checklist, you ensure that your Customers can seamlessly finalise payments via Apple Pay in compliance with Apple's security standards.

Apple Pay setup checklist

✓ Generate a Merchant Identifier

1. Go to the Apple Developer account and sign in. If you have not worked with the Apple Developer account before, go to the Configure Apple Developer account guide.
2. Navigate to the Certificates, Identifiers & Profiles section.
3. Click Register a New Identifier.
4. Select Merchant IDs.
5. Enter a Description and an Identifier in the respective fields.

✓ Request a Payment Processing Certificate

1. Create a new Directory.
2. Open Keychain Access on your Mac.
3. In the Keychain Access, go to the Certificate Assistant. Then, click Request a Certificate From a Certificate Authority.
4. Enter the following data in the form:

• Email Address
• Common Name (it refers to the certificate name)
• CA Email Address → leave it empty

5. Choose Saved to disk.
6. Click Let me specify key pair information.
7. After filling in the form, click Continue.
8. Then, save the file CertificateSigningRequestPaymentProcessingCertificate.certSigningRequest to your current Directory.
9. When creating a cryptographic Key pair, choose specific technical parameters:

• Key Type: Elliptic Curve (EC) – Elliptic Curve Cryptography
• Key Size: 256-bit
• Algorithm: ECDSA – Elliptic Curve Digital Signature Algorithm

✓ Extract and convert the Payment Processing Certificate

1. Navigate to the Apple Developer Merchant ID list.
2. Select your Merchant ID and click Create Certificate.
3. When the system shows the question Will payments... be processed exclusively in China mainland?, answer No.
4. Upload the file CertificateSigningRequestPaymentProcessingCertificate.certSigningRequest.
5. Download the signed certificate as apple_pay.cer and save it to your current Directory.
6. Convert the certificate to PEM format:

openssl x509 -inform DER -in apple_pay.cer -out apple_pay.pem

✓ Retrieve a Private Key

1. Open Keychain Access and choose the Key you previously generated PetroPetrenkoProcessingCertificate.
2. Right-click the Key and select Export.
3. Save the exported Key as a .p12 file PetroPetrenkoProcessingCertificate.p12 in your current Directory.
4. Create a password for the file.
5. Convert the .p12 file into a PEM-formatted Private Key:

openssl pkcs12 -in PetroPetrenkoProcessingCertificate.p12 -nocerts -nodes | sed -ne '/-BEGIN PRIVATE KEY-/,/-END
PRIVATE KEY-/p' > ProcessingCertificatePrivateKey.pem

6. The Private Key should be located in ProcessingCertificatePrivateKey.pem.

✓ Create a Merchant Identity Certificate

1. Open Keychain Access on your Mac.
2. In the Keychain Access, go to the Certificate Assistant. Then, click Request a Certificate From a Certificate Authority.
3. Enter the following data in the form:

• Email Address
• Common Name
• CA Email Address → leave it empty

4. Choose Saved to disk.
5. Then, save the file as CertificateSigningRequestMerchantIdentityCertificate.certSigningRequest.

✓ Extract and convert the Merchant Identity Certificate

1. Navigate to the Apple Developer Merchant ID list.
2. Select your Merchant ID and click Create Certificate.
3. Upload the CertificateSigningRequestMerchantIdentityCertificate.certSigningRequest file.
4. Download the signed certificate as merchant_id.cer and save it to your current Directory.
5. Convert it to PEM format:

openssl x509 -inform DER -in merchant_id.cer -out merchant_id.pem

✓ Export the Merchant Identity Private Key

1. Go to Keychain Access and find the Merchant Identity Certificate you previously created.
2. Right-click the certificate and export as PetroPetrenkoMerchantIdentityCertificate.p12.
3. Create a password.
4. Convert the Private key to PEM format:

openssl pkcs12 -in PetroPetrenkoMerchantIdentityCertificate.p12 -nocerts -nodes | sed -ne '/-BEGIN 
PRIVATE KEY-/,/-END PRIVATE KEY-/p' > MerchantIdentityCertificatePrivateKey.pem

✓ Register Merchant Domains

1. Open the Merchant IDs section in your Apple Developer account.
2. Choose your Merchant ID, then select Add Domain.
3. Enter your Domain and click Save.
4. You must host Apple's verification file, apple-developer-merchantid-domain-association, at the following location:

https://yourdomain.com/.well-known/apple-developer-merchantid-domain-association

✓ Activate the Certificates and Keys on our platform

1. Navigate to a Payment Hub and click New connection.
2. The system redirects you to the catalogue of available Providers. From the list of Providers, choose the one that supports the Apple Pay payment method.
3. Click Connect. To learn more about adding Providers, go to the Connect a Provider guide.
4. After adding a Provider, go to its Payments tab.
5. Click Add Payment methods and select Apple Pay.
6. After adding the Method to the grid, click Apple Pay > More options > Activate.
7. The system opens a respective drawer.
8. Enter the Merchant identifier in the corresponding field.
9. Then, upload a Merchant certificate and Private key.
10. Click Activate.

11. Go to Processing and add an Apple Pay method to the Payment scheme. To learn the details, go to the Add a New method guide.
12. Then, establish Routing for the future Apple Pay payments. To learn the details, go to the Apply Routing rules guide.

✓ Switch on the Apple Pay method for Checkout

1. Go to Merchants and choose the Merchant account on the grid.
2. Navigate to the Checkouts tab and select the Checkout you want to proceed with.
3. Then, go to the Methods tab.
4. To enable Express methods, go to the Methods settings and toggle the corresponding option on.
5. Then, switch on the Apple Pay toggle in the Methods list. After that, the Apple Pay button should be displayed at Checkout.