To integrate IOS Wallet with your account, follow these steps.
Create a pass type identifier
Open your Apple Developer account, then by Identifiers, click the add
icon.
Add a new Pass Type ID and start registering for it.
On the Register a New Identifier page, select the option Pass Type IDs.
Under Pass Type ID description, type in the description which will describe what this Pass Type ID represents.
đ¤Tip: Keep it brief and enough details to distinguish this Pass Type ID from your other IDs.
Under, Identifier, which will be the Pass Type Identifier, type in the unique identifier for your Pass Type ID starting with the word âpassâ. The identifier should use a âreverse-domainâ name style (pass.com.example.appName) then click Continue.
Confirm that your Pass Type ID information is correct then click Register.
On the Registration Complete page, click Done, you will be redirected back to the Pass Type IDs page where you will be able to view the newly created Pass Type ID.
â
Generate a signing certificate
â ď¸Important: Signing a pass requires a signing certificate for the pass type identifier. Before you can generate a signing certificate you need a certificate signing request (CSR).
Select Certificates, and then click Add
icon.On the next screen, choose Pass Type ID Certificate and click Continue.
Enter a name for the certificate and select the pass type ID from the dropdown menu.
Generate Apple iOS certificate using Windows.
Generate (CSR) on Windows with OpenSSL then set this code:
OPENSSL_CONF=c:\OpenSSL-Win64\bin\openssl.cfg (set your OpenSSL config path)
Generate private key
To generate a private key, open ssl genrsa -out mykey.key 2048
Generate certificate signing request
To generate a certificate signing request, open:
ssl req -new -key mykey.key -out ActeolPassbook.csr -subj
"/[email protected], CN=Your Name, C=US"
The two previous steps can be run using one command:
openssl req -new -newkey rsa:2048 -nodes -keyout mykey.key -out ActeolPassbook.csr -subj
"/emailAddress= [email protected], CN=Acteol Passbook Demo Certificate, C= US "
openssl: activates the OpenSSL software
req: indicates that we want a CSR
ânew ânewkey: generate a new key
rsa:2048: generate a 2048-bit RSA mathematical key
ânodes: no DES, meaning do not encrypt the private key in a PKCS#12 file
âkeyout: indicates the domain youâre generating a key for
âout: specifies the name of the file your CSR will be saved as
You should now have two new files:
passbook.key contains your private signing key.
passbook.csr contains your certificate signing request.
Now, upload the certificate signing request (CSR).
After uploading the CSR, generate the certificate and download it to the machine used for signing the pass.
Next step is to convert downloaded certificate file into a PEM certificate. PEM file format is a container that can also contain the public certificate or the entire certificate chain (private and public keys, root certificates) in the same file openssl x509 -inform der -in pass.cer -out pass.pemo Now using the PEM file and your private key, generate a valid P12 (need Apple Root Certificate installed)
pkcs12 -export -out pass.p12 -inkey mykey.key -in pass.pem
You'll need to enter the pass phrase for your private signing key, and then specify an Export
Password (twice)
The p12 file will be the Pass Certificate and the password provided will be the Pass Certificate Password.
Generate Apple iOS certificate using Mac
Locate the Applications folder on your Mac, click on Utilities, then double-click Keychain Access.
Click Keychain Access in the top left corner of your screen, then choose Certificate Assistant then select Request a Certificate from a Certificate Authority.
From the opened application Certificate Assistant, fill in the user email address and common name fields. We suggest that you use your Apple ID for the âUser Email Addressâ the description you used on the Apple developer portal for the âCommon Nameâ field. The âCA Email Addressâ field should be left empty. For the Request is option, select Saved to disk. Click Continue and choose where you would like to save the certificate file and click Save. You will see a Conclusion message confirming that the Certificate has been created on disk.
Click Done
Switch back to your browser and click Continue on the Create a New Certificate page.
Under Upload a Certificate Signing Request, click Choose File and select the .certSigningRequest file that you just saved to your Mac earlier and click Continue and wait for your certificate to be ready for download.
To download the certificate to your Mac, click Download then save the file to your desktop as pass.cer.
The certificate creation process is completed now, and you can close the browser.
Now, locate the downloaded pass.cer file and double click on it. Keychain Access will then open.
Select the login Keychain and the Certificates Category and find the certificate with a prefix of Pass Type ID followed by the identifier you chose.
Click on the little gray triangle to expand the certificate and unveil the private key.
Select both the certificate and the private key. Choose File â Export
Items.
Choose a location and a file name. Choose File Format Personal Information Exchange (.p12) and click Save.
Insert a password and verify it.
đ¤Tip: This password is important and required for signing passes. Please save it with all the certificate and Pass Type ID information you gather at the end of the certificate creation process.
Youâll be asked to insert the Password of your current account on your Mac.
Click Allow or Always Allow.
Generate Apple push notification service (Apns) key
Log in to your Paid Apple Developer Account and navigate to Certificates, Identifiers & Profiles > Keys and select the Blue + button.
Select Apple Push Notifications service (APNs) and enter a name for the key.
Select Continue and on the next page, select Register.
Download your new key and save it in a secure place. You can only download it once, so don't lose it. Then, click Done and you will have a new key.
After you download this file, you need to open your p8 file with a text editor, and extract the private key you will find something like this:
-----BEGIN PRIVATE KEY-----
MIIDBjCCAm8CAQAwcTERMA8GA1UEAxMIcXV1eC5jb20xDzANBgNVBAsTBkJyYWluCmHFqMOvXaFlT/BBBB
BBBBBBBBBBBBBBBBBBBBBDAQehRANCAACCCCCCCRnZHgbzkA1DPsDBQPDhm76d6lgaGUC9M+AAAAAAAAAA
AAAAAAAAAAAAAAAAsAnAZ14noyVWSBV/nsIM
-----END PRIVATE KEY-----
Please provide the following information to Atreemo:
Pass Type Id.
Team Identifier.
p12 Certificate.
Certificate Password.
P8 private key.
P8 key ID.