Creating a Pass Type ID & Pass Signing Certificate
A pass certificate will allow you to digitally sign your Apple Wallet Passes. In addition, the certificate owner is required to add contact info on the back of each Pass. The contact info may include a physical contact address, email address and/or phone number. If the certificate owner is different from the brand then the contact info of both is required on the back of the Pass. The following information should be used to generate your Apple Pass Signing Certificate.
Instructions on creating a Pass Type ID & Pass Certificate:
1. Go to https://developer.apple.com and click on “Account” in the top right corner.
2. Login with your credentials and then click on “Certificates, Identifiers & Profiles” in the left-hand column under “Program Resources.” (If you do not already have an Apple Developer Account, you will need to register for one.)
3. Under “Identifiers” in the left-hand column, click on “Pass Type IDs.” You will see all of the Pass Type IDs listed on the right. Click on the [+] in the top right corner to add a new Pass Type ID and start registering for it.
4. Under “Pass Type ID description” type in the description which will describe what this Pass Type ID represents. Keep it brief and enough details to distinguish this Pass Type ID from your other IDs. Under, “Identifier”, type in the unique identifier for your Pass Type ID starting with the word “pass.” The identifier should use a “reverse-domain” name style (pass.com.example.appName). Click ‘Continue’.
5. Confirm that your Pass Type ID information is correct then click “Register.” After clicking “Done” on the “Registration Complete” page, you will be redirected back to the Pass Type IDs page where you will be able to view the newly created Pass Type ID.
6. Click on the newly created Pass Type ID then click “Edit” to start configuring a Client SSL Certificate for this iOS Pass Type ID. Under the Production Certificates section click on the “Create Certificate…” button. Read through the instructions under “About Creating a Certificate Signing Request.”
7. Locate the Applications folder on your Mac, click on Utilities, then double click on “Keychain Access.”
8. Click on “Keychain Access” in the top left corner of your screen. From there, choose Certificate Assistant → Request a Certificate from a Certificate Authority.
9. After clicking “Request a Certificate From a Certificate Authority” an application called “Certificate Assistant” will open. Fill in the “User Email Address” and “Common Name”fields. We suggest that you use your Apple ID for the “User Email Address” the description you used on the Apple developer portal for the “Common Name” field. The “CA Email Address” field should be left empty. For the “Request is” option, select “Saved to disk.” Click Continue, and choose where you would like to save the Certificate file and click Save. You will see a “Conclusion” message confirming that the Certificate has been created on disk. Click Done.
10. Switch back to your browser and click Continue on the ‘About Creating a Certificate Signing Request Page. Under Upload CSR file, click ‘Choose File’ and select the .certSigningRequest file that you just saved to your Mac earlier and click on “Continue” and wait for your certificate to be ready for download.
11. Click the “Download” button to download the certificate to your Mac. Save the file to your desktop as pass.cer. The Certificate creation process is completed now and you can close the browser.
12. Go to http://developer.apple.com/certificationauthority/AppleWWDRCA.cer to download Apple World Developer Intermediate Certificate and save it your Desktop as WWDR.cer and close the browser. Locate the downloaded WWDR.cer file and double click to open it in the Keychain Access. Select the login Keychain and the Certificates Category, you’ll find this certificate. Click on File, then Export Items, and save the WWDR.pem file to your desktop.
13. Locate the downloaded pass.cer file and double click on it. Keychain Access will then open. Select the login Keychain and the Certificates Category and find the certificate with a prefix of Pass Type ID followed by the identifier you chose. Click on the little gray triangle to expand the certificate and unveil the private key. Select both the certificate and the private key. Choose File → Export Items.
14. Choose a location and a file name. Choose File Format Personal Information Exchange (.p12) and click “Save.” Insert a password and verify it (Tip: This password is important and required for signing passes. Please save it with all the certificate and Pass Type ID information you gather at the end of the certificate creation process).
15. You’ll be asked to insert the Password of your current account on your Mac. Click “Allow” or “Always Allow.”
16. Repeat steps 13-15 to save an additional copy of the Pass Certificate file as a .pem file. We will need a .pem file in addition to a .p12 file to set up the account.
Please provide the following information to Skycore to set up your account:
1. Pass Type ID (From Step 4): Identifier and Description
2. Team ID: Account → Membership → Team ID
3. .p12 Certificate (From Step 14): Export certificate as .p12 from keychain access on MAC
4. WWDR.pem Certificate (From Step 12): Export WWDR.cer as WWDR.pem from keychain access on MAC
5. Pass Certificate .pem (From Step 16): Export certificate as .pem from keychain access on MAC
6. Certificate Password (From Step 14): Password that you set when trying to Export/Save p12 certificate on MAC
7. Certificate Expiration Date: https://developer.apple.com → Account → Certificates, Identifiers & Profiles → Certificates → All
8. Contact Information that will go on the back of passes: Can be Contact Address, Email Address or Phone or all three
9. Email address: Pass Certificate expiration warning will be sent to this email 7 days before the signing certificate expires