Create Merchant Identity Certificate in Apple Developer Account

  1. You will need to generate a new Certificate Signing Request (CSR) and Private Key before continuing. This is easiest done using a terminal command as follows:

    openssl req -new -newkey rsa:2048 -nodes -keyout applepay.key -out applepay.csr -subj '/O=Subscribe Pro/C=US'

    • Important: The CSR should be generated using your company's details. In the above example, O=Subscribe Pro should be replaced with your company name, and C=US should be replaced with your company's country.

    • There are additional pieces of data that can be included as well, such as state, city, email, etc. See here for the full list

    • This will generate two files:

      • applepay.key
      • applepay.csr

      Store these files in a place where you can reference them again later, as you will need to copy the contents of these files into Subscribe Pro as well.

  2. Login at the Apple Developer website with your Apple ID and click on the Account navigation link.

    Apple Developer Overview

  3. Navigate back to the Apple Developer website and click on the Account navigation link. Then, click on Certificates, IDs & Profiles. Click Identifiers and then select Merchant IDs from the dropdown menu on the right. Click on your Merchant ID in the table.

    Merchant IDs

  4. At the bottom of the page, click Create Certificate under the Apple Pay Merchant Identity Certificate heading.

    Create Merchant ID Certificate

  5. Upload the applepay.csr file generated at the start of this page and click Continue.

    Create Merchant ID Certificate

  6. Click Download to download a file called merchant_id.cer

    Merchant IDs

  7. You will need to convert the .cer file to a .pem file using the following terminal command:

    openssl x509 -inform der -in merchant_id.cer -out merchant_id.pem

    Be sure to save these two files with the other files generated at the beginning of this page.