Enable Apple Pay for Payment Service

  • Updated
Apple Pay provides a biometric-authenticated payment option for shoppers on Apple devices. Face ID or Touch ID replaces card entry at checkout. Customers on non-Apple devices scan a QR code with an iPhone to complete payment. Apple Pay is available through Payment Service in Optimizely Configured Commerce.

Prerequisites

Confirm the following before you start the Apple Pay configuration. 

Create an Apple Merchant ID

The Apple Merchant ID identifies your business to Apple Pay. Register it in the Apple Developer Portal before you generate certificates or the domain verification file. Every later phase references this identifier.
  1. Sign in to your Apple Developer account.
  2. Go to Certificates, Identifiers & Profiles > Identifiers.
  3. Click Add to register an identifier.
  4. Select Merchant IDs.
  5. Enter a description in the Description field (for example, *My Store Apple Pay*).
  6. Enter an identifier in the Identifier field in reverse-domain format (for example, `merchant.com.yourcompany.store`).
  7. Click Continue.
  8. Click Register.
  9. Copy the Merchant ID. You need it for the Admin Console settings in the final phase.

Generate the payment processing certificate

The payment processing certificate lets the Spreedly payment-gateway integration decrypt Apple Pay tokens on behalf of your storefront. Spreedly is the gateway that Payment Service uses to handle card and wallet payments.
  1. Go to Payment Service > Apple Pay Setup in the Admin Console.
  2. Click Generate CSR on the Payment Processing Certificate tab. The system generates a Certificate Signing Request (CSR) through the Spreedly Certificates API.
  3. Click Download CSR to save the .csr file.
  4. Sign in to the Apple Developer Portal.
  5. Go to Certificates, Identifiers & Profiles.
  6. Create an Apple Pay Payment Processing Certificate with the downloaded CSR.
  7. Download the signed .cer file from Apple.
  8. Upload the signed .cer file in the Upload Signed Certificate step of the Admin Console.
  9. Click Complete to finalize the payment processing certificate configuration.

Generate the merchant identity certificate

The merchant identity certificate authenticates your server when it creates Apple Pay sessions.
  1. Click Generate CSR on the Merchant Identity Certificate tab. The system generates a 2048-bit RSA key pair and CSR.
  2. Click Download CSR to save the .csr file.
  3. Create an Apple Pay Merchant Identity Certificate in the Apple Developer Portal, using the downloaded CSR.
  4. Download the signed .cer file from Apple.
  5. Upload the signed .cer file in the Admin Console.
  6. Enter a password for the .p12 file when prompted. The system packages the signed certificate and private key into a password-protected .p12 file.
  7. Copy the Base64-encoded .p12 output. Keep this value for the Admin Console settings in the final phase.

Prepare the domain verification file

Apple requires a domain verification file to confirm you control the domain where Apple Pay is offered.
  1. Download the domain verification file from the Apple Developer Portal (under your Merchant ID's domain settings).
  2. Convert the verification file with the file-to-Base64 converter on the Domain Verification tab.
  3. Click Copy to copy the Base64 value to the clipboard.
  4. Paste this value into the Apple Pay Domain Verification File setting under Settings > Order Management.

Configure Apple Pay in the Admin Console

Connect Payment Service to the certificates and verification file you prepared, so the storefront can present Apple Pay at checkout.
  1. Go to Settings > Order Management in the Admin Console.
  2. Set Enable Apple Pay to Yes in the Payment section.
  3. Provide the following settings in the Apple Pay section: 
    1. Merchant ID – Your Apple merchant ID from the Apple Developer Portal.
    2. Merchant Name – Your business name, shown on the Apple Pay payment sheet.
    3. Test Mode – Controls whether Apple Pay runs in sandbox mode. Set the toggle to *No* before going live.
    4. Merchant Certificate – The Base64-encoded .p12 from the merchant identity certificate. 
    5. Domain Verification File – The Base64-encoded domain verification file from the previous phase.
  4. Click Save.

What customers see at checkout

When you finish the configuration, customers on Apple devices see an Apple Pay button at checkout. Customers on non-Apple devices see a QR code they can scan with an iPhone to complete payment.
 

Verify Apple Pay at checkout

Run the following checks before going live, so you can confirm the configuration works end to end.
  • The Apple Pay button renders at checkout on a supported Apple device (Safari on iOS or macOS, with a card in Apple Wallet).
  • The QR code displays on a non-Apple device and resolves on an iPhone with Apple Wallet.
  • The Test Mode toggle is set to No before live transactions.
  • The storefront's payment-method logs are reachable from the Admin Console, so you can diagnose certificate, domain, or gateway issues.