Documentation Index
Fetch the complete documentation index at: https://docs.y.uno/llms.txt
Use this file to discover all available pages before exploring further.
Apple Pay supports third-party browsers such as Google Chrome for users with iOS 18 or higher.
- Apple Developer prerequisites: Create a merchant ID, generate and convert the required certificates/keys, and verify your merchant domains.
- Yuno Dashboard setup: Add the Apple Pay connection, set up routing, and enable Apple Pay in Checkout Builder.
Apple Pay certificate options
In the Yuno Dashboard, you will find three options for Apple Pay certificates:- Yuno: This option is for merchants who do not have an Apple Developer account or a mobile app (i.e., they are web-only). In these cases, you must register your domain via the API in order to use Yuno’s certificates. Use the following endpoints to manage your domain registration:
- Own: This option is for merchants who have an Apple Developer account and prefer to manage their own private keys. You generate and convert the certificates manually using Keychain Access and OpenSSL (Steps 2–9), then paste the PEM values into the Yuno Dashboard.
- Own — Yuno generates the CSRs: This option is for merchants who have an Apple Developer account but don’t want to generate private keys or run OpenSSL commands. Yuno generates the Certificate Signing Requests for you — you upload them to Apple and return the signed certificates.
Step 1: Register a merchant identifier
If you’re using VTEX as your e-commerce platform, you’ll need to configure your Apple Pay Merchant ID. For detailed instructions, check out the official VTEX documentation.
- Log in to Apple Developer, go to Certificates, Identifiers & Profiles, then select Register a new identifier.
- Choose Merchant IDs.
- Enter a Description (e.g.,
Apple Pay Integration) and an Identifier in the formatmerchant.com.y.uno.YourBusinessName.
Own certificates (manual)
The following steps (2–9) apply if you selected the Own option and want to generate and manage your certificates manually using Keychain Access and OpenSSL.Step 2: Generate a payment processing certificate
- Create a new directory (e.g.,
Downloads/ApplePayFiles) to store the certificate files. - Open Keychain Access on your Mac.
- Go to Keychain Access > Certificate Assistant > Request a Certificate From a Certificate Authority.

- Fill out the form:
- Email Address: your email address
- Common Name: a name for the certificate (e.g.,
John Doe ProcessingCertificate) - CA Email Address: leave blank
- Select Saved to disk
- Check Let me specify key pair information
- Click Continue, then save the file as
CertificateSigningRequestPaymentProcessingCertificate.certSigningRequestin your working directory. - When prompted for key pair settings, use:
- Key Type: Elliptic Curve (EC)
- Key Size: 256-bit
- Algorithm: ECDSA
Step 3: Retrieve and convert the payment processing certificate
- Go to the Apple Developer Merchant ID list.
- Select your Merchant ID and click Create Certificate under Apple Pay Payment Processing Certificate.
- When prompted, answer No to “Will payments… be processed exclusively in China mainland?”
- Upload the file
CertificateSigningRequestPaymentProcessingCertificate.certSigningRequest. - Download the signed certificate as
apple_pay.cerand save it to your directory. - Convert the certificate to PEM format:
Step 4: Export the private key
- In Keychain Access, find the key you created (e.g.,
John Doe ProcessingCertificate). - Right-click and choose Export.
- Export the key as a
.p12file (e.g.,JohnDoeProcessingCertificate.p12) and save it to your working directory. - Set a strong password (you’ll use it in the next step).
- Convert the
.p12to a PEM-format private key:
ProcessingCertificatePrivateKey.pem.
Step 5: Upload the certificate and key to Yuno
- Open the Yuno Dashboard > Connections > Apple Pay > Connect
- Enter the contents of
ProcessingCertificatePrivateKey.pemto the Payment processing key field. - Enter the contents of
apple_pay.peminto the Payment processing certificate field.

Step 6: Generate a merchant identity certificate
- Open Keychain Access, navigate to Certificate Assistant > Request a Certificate From a Certificate Authority, and enter:
- Email Address: your email
- Common Name: e.g.,
John Doe MerchantIdentityCertificate - Leave CA Email Address blank
- Select Saved to disk
- Save as
CertificateSigningRequestMerchantIdentityCertificate.certSigningRequest.
Step 7: Retrieve and convert the merchant identity certificate
- Go to the Apple Developer Merchant ID list.
- Select your Merchant ID and click Create Certificate under Apple Pay Merchant Identity Certificate.
- Upload the
CertificateSigningRequestMerchantIdentityCertificate.certSigningRequestfile. - Download the signed certificate as
merchant_id.cerand save it. - Convert it to PEM:
Step 8: Export the merchant identity private key
- In Keychain Access, find the certificate created in step 6, e.g.
John Doe MerchantIdentityCertificate. - Right-click and export as
JohnDoeMerchantIdentityCertificate.p12. - Set a strong password.
- Convert the private key to PEM:
MerchantIdentityCertificatePrivateKey.pem.
Step 9: Upload the merchant identity certificate and key
- Return to your Apple Pay connection in the Yuno Dashboard.
- Copy the contents of
MerchantIdentityCertificatePrivateKey.pemand paste them into the Merchant Identity key field. - Paste the contents of
merchant_id.peminto the Merchant Identity certificate field.

Own certificates with Yuno-generated CSRs
This option is for merchants who have an Apple Developer account but don’t want to generate private keys, run OpenSSL commands, or paste PEM values into the Dashboard. Yuno generates both Certificate Signing Requests (Payment Processing and Merchant Identity) for you. You upload them to Apple, download the signed .cer files Apple returns, and upload those .cer files back to Yuno from the Apple Pay connection form. Where to find it: In the Yuno Dashboard, open Connections → Certificates & Domains → Apple Pay → Certificate Signing Request.Step 1: Enter your Apple Merchant ID
In the Your Apple Merchant ID field, enter the Merchant ID you registered in the Apple Developer Portal (for example,merchant.com.example.app).
Find your Apple Merchant ID in your Apple Developer Portal → Certificates, Identifiers & Profiles → Merchant IDs.
Step 2: Generate the Payment Processing CSR
Apple Pay requires two separate certificates. The Payment Processing Certificate is an ECC P-256 certificate used by Apple to encrypt the payment token your store receives.Apple allows only one active Payment Processing certificate per Merchant ID.
Step 3: Generate the Merchant Identity CSR
The Merchant Identity Certificate is an RSA 2048 certificate used to authenticate your server to Apple via mTLS when starting an Apple Pay session on the Web.Multiple active Merchant Identity certificates per Merchant ID are allowed.
Step 4: Upload each .csr to Apple
Repeat these steps twice — once for the Payment Processing CSR, and once for the Merchant Identity CSR.- Go to developer.apple.com → Certificates, Identifiers & Profiles.
- Select your Merchant ID.
- Under Apple Pay Payment Processing Certificate (first pass) or Apple Pay Merchant Identity Certificate (second pass), click Create Certificate.
- When prompted, answer No to “Will payments… be processed exclusively in China mainland?”
- Upload the .csr file when prompted.
- Download the .cer file Apple gives you.
Step 5: Set up the Apple Pay connection
- In Use certificates, select Own — Yuno generates the CSRs.
- Pick your Merchant Identifier from the dropdown — pre-populated with the CSRs you generated.
- Fill in Display Name and Domain Name.
- Under Payment Processing Certificate → Apple-issued .cer file, click Choose file and select the .cer Apple issued for Payment Processing.
- Under Merchant Identity Certificate → Apple-issued .cer file, click Choose file and select the .cer Apple issued for Merchant Identity.

Step 10: Register your merchant domains
- Go to Apple Developer Merchant ID list.
- Select your Merchant ID and click Add Domain under Merchant Domains.
- Enter the domain (e.g.,
demo.y.uno) and click Save.
NoteYou must also host Apple’s Replace
apple-developer-merchantid-domain-association file at:example.com with your actual domain name.The file must be served as a static asset so that accessing the URL displays the file contents directly in the browser, rather than triggering a download.Step 11: Apple Pay Dashboard connection
- Log in to your Yuno Dashboard.
- Navigate to the Connections section.
- Locate and select the Apple Pay option and click Connect.
- Provide a Name for the connection, select Apple Pay as Payment method, and in the Use certificates dropdown, select the option that matches your setup:
- Yuno or Own (manual): paste the PEM values you generated in the previous steps.
- Own — Yuno generates the CSRs: select this option and upload the
.cerfiles issued by Apple as described in the Own certificates with Yuno-generated CSRs section.
- Click Next, configure set up costs (optional) and accounts in the following two steps.
- Click Save. Apple Pay will be added to your connections.

Step 12: Configure Dashboard routing
Set up a new route to control how payments are processed through Apple Pay.Visit the Routing page for additional information on this step.
- In the Yuno Dashboard, navigate to the Routing section.
- Find the Apple Pay connection. If you have not created a route for Apple Pay yet, it will be on the Not published tab.
- Set up a new route by pressing Setup on your Apple Pay module (or View if the route is published) and then clicking on Create new route. Give the connection a name and click Save.
- Add conditions to specify how payments should be routed through Apple Pay.
- Add Apple Pay as the payment processor for this route to ensure that payments meeting the defined conditions are processed through Apple Pay.
- Publish the route once all configurations are defined.

Step 13: Enable Apple Pay in Checkout Builder
Visit the Checkout Builder page for additional information on this step.
- In the Yuno Dashboard, navigate to the Checkout Builder section.
- Locate the available Payment methods and enable Apple Pay. Click the three dots next to each method for additional options.
- Click Publish settings to make Apple Pay available as a payment option for all transactions that meet the defined routing criteria.

If you plan to implement recurring payments, you will need to configure an additional URL in your Apple Pay connection where customers can manage their subscriptions (cancel, modify, etc.). This URL must be created and hosted by your merchant platform.