Creating Apple Pay access data

If you use Apple Pay, generate the necessary data in your Apple developer account to upload it to Unzer in your OXID eShop.

You will need the data under Extensions ‣ Modules ‣ Unzer Payment for OXID ‣ Settings ‣ additional options for Apple Pay.

You use the same certificates and keys for sandbox operation as for live operation.

For more information, see

Prerequisites

You have access to the Unzer documentation for generating the Apple Pay certificates at docs.unzer.com/payment-methods/applepay/applepay-prerequisites.

Creating an Apple Pay merchant ID

Generate the merchant ID that you need to enter in the Merchant Identifier field.

Procedure

  1. To create an Apple developer account, create an Apple ID at appleid.apple.com.

  2. Log in to your Apple developer account.

  3. Choose Certificates, Identifiers & Profiles.

  4. Choose Identifiers from the menu and then choose the Add Identifiers icon (+).

  5. Under Register a new Identifier, choose Merchant IDs and confirm with Continue.

  6. Under Register a Merchant ID, enter the following:

    • Description: description of the application.
      Examples:

      • If you are using a dedicated test system to test Apple Pay features, enter Apple Pay Test, for example.

      • To better keep track of this in production operations, enter the name of the subshop in question, for example.

    • Identifier: Recommended: Enter a string close to the scheme merchant.<domain name>.<application name>.
      Example: merchant.myoxidshop.applepaytest.

  7. Choose Continue.

  8. To confirm your input, choose Register.

Result

Your merchant ID appears in the Identifier column under Identifiers.

Generating a payment certificate

Generate the payment certificate and the corresponding key that you will need to enter in the Payment Processing Certificate and Private key for payment processing fields.

Get the certificate signed by Apple.

Prerequisites

Procedure

  1. Follow step 1 of the instructions under Generate the Payment Processing Certificate.
    Result: You have the following files:

    • ECC key, in our example ecckey.key.

    • CSR, in our example ecccertreq.csr.

  2. In your Apple developer account, under Certificates, Identifiers & Profiles ‣ Identifiers, choose the merchant ID you created for your OXID eShop under Creating an Apple Pay merchant ID, in our example Apple Pay Test.

  3. To upload the ecccertreq.csr to Apple, under Apple Pay Payment Processing Certificates choose Create Certificate (see Step 2: Upload the Payment Processing Certificate CSR to Apple).
    The name, type and expiration date of the certificate are displayed.

  4. To download and save the Apple-signed certificate, under Apple Pay Payment Processing Certificates, choose Download (see Step 3: Download the Apple-signed Payment Processing Certificate).
    You have saved the csr certificate downloaded from Apple ecccertreq.csr.

  5. Convert the csr certificate to a pem file (see Step 4: Convert the certificate to a text file).
    In our example, you have apple_pay.pem.

  6. Convert the ECC key you generated in step 1 (in our example ecckey.key) to a non-encrypted PKCS#8 private key (see Step 5: Convert your ECC private key to a non-encrypted PKCS #8 private key).
    In our example you have the file privatekey.key.

Result

You have saved the following files:

  • the payment processing certificate, in our example the file apple_pay.pem.

  • the corresponding private key for payment processing in PKCS#8 format, in our example the file privatekey.key.

Generating a merchant certificate

Generate the merchant certificate and the associated key that you will need to enter in the Merchant Certificate and Merchant Certificate Private Key fields.

Get the certificate signed by Apple.

Prerequisites

Procedure

  1. Follow step 1 of the instructions in Generate a Merchant Identity Certificate.
    Result: You have the following files:

    • RSA key, in our example encrypted_merchant_id.key.

    • CSR, in our example merchant_id.csr.

  2. In your Apple developer account, under Certificates, Identifiers & Profiles ‣ Identifiers, choose the merchant ID you created for your OXID eShop under Creating an Apple Pay merchant ID, in our example Apple Pay Test #.

  3. To upload the merchant_id file to Apple, under Apple Pay Merchant ID Certificate choose Create Certificate (see Step 2: Upload the Merchant Identification Certificate CSR to Apple).
    The name, type and expiration date of the certificate are displayed.

  4. To download and save the Apple-signed certificate, under Apple Pay Merchant ID Certificate choose Download (see Step 3: Download the Apple-signed Merchant Identification Certificate).
    You have saved the csr certificate downloaded from Apple merchant_id.cer.

  5. Convert the csr certificate to a pem file (see Step 4a: Convert the certificate).
    In our example, you have the merchant_id.pem file.

  6. Convert the RSA key you generated in step 1 (in our example encrypted_merchant_id.key) to a non-encrypted private key in PKCS#8 format (see Step 4b: Convert your RSA private key).
    In our example, you have merchant_id.key.

Result

You have saved the following files:

  • the merchant certificate, in our example the file merchant_id.pem.

  • the private key corresponding to the merchant certificate, in PKCS#8 format, in our example the file merchant_id.key.