A pass certificate will allow you to digitally sign your Apple Wallet Passes. In addition, the certificate owner is required to add contact info on the back of each Pass. The contact info may include a physical contact address, email address, and/or phone number. If the certificate owner is different from the brand then the contact info of both is required on the back of the Pass. The following information should be used to generate your Apple Pass Signing Certificate. Pass Certificates need to be renewed each year. Please follow the section on ‘Instructions for Renewing A Pass Certificate’ below if you need to renew your certificate. A Pass Certificate expires the following year at the exact time the Certificate was created the previous year.
Instructions for Creating a Pass Type ID & Pass Certificate: #
1. Go to https://developer.apple.com and click on “Account” in the top right corner.
2. Login with your credentials and locate the “Certificates, IDs & Profiles” section under “Program Resources.” (If you do not already have an Apple Developer Account, you will need to register for one.) Click the “Identifiers” link.
3. Click on the [+] next to ‘Identifiers’ to add a new Pass Type ID. Select the option ‘Pass Type IDs’ on the ‘Register a New Identifier’ page.
4. Under “Pass Type ID description” type in the description which will describe what this Pass Type ID represents. Keep it brief and enough details to distinguish this Pass Type ID from your other IDs. Under, “Identifier”, type in the unique identifier for your Pass Type ID starting with the word “pass”. The identifier should use a “reverse-domain” name style (pass.com.example.appName). Click ‘Continue’.
5. Confirm that your Pass Type ID information is correct then click “Register”. After clicking “Done” on the “Registration Complete” page, you will be redirected back to the Pass Type IDs page where you will be able to view the newly created Pass Type ID.
6. Click on the newly created Pass Type ID then click “Edit” to start configuring a Client SSL Certificate for this iOS Pass Type ID. Under the Production Certificates section click “Create Certificate”. Read through the instructions by clicking ‘Learn More’.
7. Locate the Applications folder on your Mac, click on Utilities, then double click on “Keychain Access.”
8. Click on “Keychain Access” in the top left corner of your screen. From there, choose Certificate Assistant → Request a Certificate from a Certificate Authority.
9. After clicking “Request a Certificate From a Certificate Authority” an application called “Certificate Assistant” will open. Fill in the “User Email Address” and “Common Name” fields. We suggest that you use your Apple ID for the “User Email Address” the description you used on the Apple developer portal for the “Common Name” field. The “CA Email Address” field should be left empty. For the “Request is” option, select “Saved to disk.” Click Continue, and choose where you would like to save the certificate file and click Save. You will see a “Conclusion” message confirming that the Certificate has been created on disk. Click Done.
10. Switch back to your browser and click Continue on the ‘Create a New Certificate’ page. Under Upload a Certificate Signing Request, click ‘Choose File’ and select the .certSigningRequest file that you just saved to your Mac earlier and click on “Continue” and wait for your certificate to be ready for download.
11. Click the “Download” button to download the certificate to your Mac. Save the file to your desktop as pass.cer. The Certificate creation process is completed now and you can close the browser.
12. Go to https://www.apple.com/certificateauthority/ and download the “Worldwide Developer Relations – G4 (Expiring 12/10/2030 00:00:00 UTC)” certificate under the Apple Intermediate Certificates column. Save the G4 WWDR certificate to your Desktop as WWDR.cer and close the browser. Locate the downloaded WWDR.cer file and double click to open it in the Keychain Access. Select the login Keychain and the Certificates Category, you’ll find this certificate. Click on the Apple Worldwide Developer Relations Certification Authority in your keychain app to highlight it and click File, then Export Items. Choose .pem as the file format and save the WWDR.pem file to your desktop.
13. Locate the downloaded pass.cer file and double click on it. Keychain Access will then open. Select the login Keychain and the Certificates Category and find the certificate with a prefix of Pass Type ID followed by the identifier you chose. Click on the little gray triangle to expand the certificate and unveil the private key. Select both the certificate and the private key. Choose File → Export Items.
14. Choose a location and a file name. Choose File Format Personal Information Exchange (.p12) and click “Save.” Insert a password and verify it (Tip: This password is important and required for signing passes. Please save it with all the certificate and Pass Type ID information you gather at the end of the certificate creation process).
15. You’ll be asked to insert the Password of your current account on your Mac. Click “Allow” or “Always Allow.”
Please provide the following information to WalletThat to set up your account: #
1. Pass Type ID (From Step 4): Identifier and Description
2. Team ID: Account → Membership → Team ID
3. .p12 Certificate (From Step 14): Export certificate as .p12 from keychain access on MAC
4. WWDR.pem Certificate (From Step 12): Export WWDR.cer as WWDR.pem from keychain access on MAC
5. Certificate Password (From Step 14): Password that you set when trying to Export/Save p12 certificate on MAC
6.. Certificate Expiration Date: https://developer.apple.com → Account → Certificates, Identifiers & Profiles → Certificates
7. Contact Information that will go on the back of passes: Can be Contact Address, Email Address or Phone or all three
8. Email address: Pass Certificate expiration warning will be sent to this email 7 days before the signing certificate expires
Instructions for Renewing a Pass Certificate: #
1. Go to https://developer.apple.com and click on “Account” in the top right corner.
2. Login with your credentials and locate the “Certificates, IDs & Profiles” section under “Program Resources.” Click the “Identifiers” link.
3. Click on the name of the Pass Type ID that you need to renew the certificate for.
4. Under the Production Certificates section click “Create Certificate”.
5. Locate the Applications folder on your Mac, click on Utilities, then double click on “Keychain Access.”
6. Click on “Keychain Access” in the top left corner of your screen. From there, choose Certificate Assistant → Request a Certificate from a Certificate Authority.
7. After clicking “Request a Certificate From a Certificate Authority” an application called “Certificate Assistant” will open. Fill in the “User Email Address” and “Common Name” fields. We suggest that you use your Apple ID for the “User Email Address” the description you used on the Apple developer portal for the “Common Name” field. The “CA Email Address” field should be left empty. For the “Request is” option, select “Saved to disk.” Click Continue, and choose where you would like to save the certificate file, and click Save. You will see a “Conclusion” message confirming that the Certificate has been created on disk. Click Done.
8. Switch back to your browser and click Continue on the ‘Create a New Certificate’ page. Under Upload a Certificate Signing Request, click ‘Choose File’ and select the .certSigningRequest file that you just saved to your Mac earlier and click on “Continue” and wait for your certificate to be ready for download.
9. Click the “Download” button to download the certificate to your Mac. Save the file to your desktop as pass.cer. The Certificate creation process is completed now and you can close the browser.
10. Locate the downloaded pass.cer file and double click on it. Keychain Access will then open. Select the login Keychain and the Certificates Category and find the certificate with a prefix of Pass Type ID followed by the identifier you chose. Click on the little gray triangle to expand the certificate and unveil the private key. Select both the certificate and the private key. Choose File → Export Items.
11. Choose a location and a file name. Choose File Format Personal Information Exchange (.p12) and click “Save.” Insert a password and verify it (Tip: This password is important and required for signing passes. Please save it with all the certificate and Pass Type ID information you gather at the end of the certificate creation process).
12. You’ll be asked to insert the Password of your current account on your Mac. Click “Allow” or “Always Allow.”
Please provide the following information to WalletThat to renew your Pass Certificate: #
1. .p12 Certificate (From Step 11): Export certificate as .p12 from keychain access on MAC
2. Certificate Password (From Step 11): Password that you set when trying to Export/Save p12 certificate on MAC
3. Certificate Expiration Date: https://developer.apple.com → Account → Certificates, Identifiers & Profiles → Certificates