Skip to main content

Apple Pay Using Developer Account

This guide walks you through the steps necessary to start accepting Apple Pay payments using Moyasar and your Apple developer account.

Who is this guide for?​

Follow this guide if you intend on using Apple Pay natively within your iOS application or using a web platform that does not support Moyasar Web Registration.

Before Starting​

  • Register for a free account in Moyasar Dashboard
  • You must have an Apple Developer Account with an active subscription.
  • Create a Merchant ID by following this guide this guide..

Configure Payment Processing Certificate​

The Payment Processing Certificate (PPC for short) is used during the payment authorization process where an Apple device will encrypt the Card details using the active certificate.

After the encryption, the merchant will receive a token object that they should pass to Moyasar in the payment request as follows:

{
  "type": "applepay",
  "source": "<encrypted_token>"
}

Once received, Moyasar will use the certificate to decrypt the token and then perform the payment.

Start a New Certificate Request​

From Moyasar Dashboard, navigate through Settings to Apple Pay - Certificate.

The page lists all your certificates. Click Add Certificate to start a new certificate request — this opens the New Certificate page with a CSR file ready for you. Click Download CSR.

New Certificate page with the CSR file ready to download

tip

You can safely leave this page at any time using Back to Certificates — your request is saved, and you can resume it later by clicking Continue Setup. To discard the request instead, click Cancel Request.

Upload and Sign the CSR with Apple Developer Account​

Assuming you have followed the steps in Before Starting you should have your Merchant ID ready within your Apple Developer Account.

Navigate to the Merchant ID you have created then locate the Apple Pay Payment Processing Certificate section where you will find a button called Create Certificate.

Payment Processing Certificate Creation

warning

You will be presented with a question asking you if the merchant is within China Mainland, make sure to to select No.

If you select Yes, Apple Pay payments will not work with you as we do not support the RSA algorithm.

Select the CSR file and upload it.​

Upload CSR

Download the signed certificate.​

Upload CSR

Upload Signed Certificate to Moyasar Dashboard​

Navigate back to the New Certificate page then click the Upload File box at the end of the page. Select apple_pay.cer from your computer and click Upload.

If the certificate matches the private key on Moyasar API, you will be returned to the certificates list with your new certificate showing as Activated.

Managing Multiple Certificates​

Your account can hold more than one Apple Pay certificate at the same time, and every Activated certificate can process payments. This is useful for:

  • Renewing a certificate: Apple Pay payment processing certificates expire every 25 months. You can set up the replacement while the current certificate keeps processing payments.
  • Multiple merchant IDs: you can keep a separate certificate for each Apple merchant ID you operate.

Certificates are managed from the Apple Pay - Certificate page: each certificate in the list shows its status along with its creation and activation dates, and can be deleted using the trash icon. Once deleted, payments encrypted with that certificate can no longer be processed.

Certificates list showing an activated certificate and a pending request

Renewing a Certificate​

To renew a certificate for the same merchant ID, follow these steps in order — uploading to Moyasar always comes before activating at Apple:

  1. Follow the steps above to request, sign, and upload a new certificate. Your current certificate keeps processing payments the whole time — do not revoke it in the Apple Developer portal, as revoking stops Apple Pay payments immediately.
  2. Once the new certificate shows as Activated in your Moyasar dashboard, go to the Apple Developer portal and click Activate on the new certificate. Apple starts encrypting new transactions with it immediately, and your previous certificate is deactivated on Apple's side.
  3. Keep the previous certificate in your Moyasar dashboard for a while — some transactions may still arrive encrypted with it shortly after the switch.
  4. Once the new certificate has been active for a while, delete the old certificate from the list using the trash icon.
Last updated on