Create P12 File for Apple Pay

Limio requires a .p12 file containing a certificate and its corresponding private key to enable to . Follow this step-by-step guide to generate the .p12 file and securely share it with us for storage in a secure secrets manager.

Prerequisites

Certificate Signing Request (CSR): Ensure the certificate (e.g. Apple Pay Merchant Identity Certificate) was created via a CSR process by the same individual who will download it. This guarantees access to the private key linked to the certificate.

OpenSSL Installed (Windows specific): Ensure OpenSSL is installed on your machine. It is required for combining the certificate and private key into a .p12 file. OpenSSL can be downloaded from .

Steps for Mac OS

Download the Certificate

1. Log in to the relevant portal (e.g. Apple Developer).

2. Download the certificate file to your Mac.

Create the .p12 File

1. Import the Certificate into Keychain Access:

   • Locate the downloaded certificate in Finder.

   • Double-click the certificate file to open it. This action will import the certificate and its associated private key into Keychain Access.

2. Locate the Certificate in Keychain Access:

   • Open Keychain Access

   • Search for the certificate by name in the search bar.

3. Export the Certificate and Private Key:

   • In Keychain Access, expand the certificate to reveal its private key.

   • Select both the certificate and its private key (use Cmd or Shift to select both items).

   • Right-click on the selected items and choose "Export 2 Items..."

4. Save as a .p12 File

   • When prompted, save the file in .p12 format. Choose a secure and easily retrievable location for the file.

5. Secure the File with a Password

   • During the export process, you will be prompted to secure the .p12 file with a password. Important: Choose a strong password and store it safely.

6. Locate the .p12 File

   • Navigate to the location specified during the export process to verify the .p12 file was successfully created.

Once the file is created, you can share the .p12 file with the Limio Support Team.

Important: The password for the .p12 file should never be shared as plain text in an email. It should be shared through a secure side channel (e.g., a secure messaging platform) using the secure method specified by Limio Support.

---

Steps for Windows

Download the Certificate

1. Log in to the relevant portal (e.g., Apple Developer).

2. Download the certificate file to your Windows machine.

3. Ensure you have the Private Key

   • Ensure the private key generated during the CSR process is stored securely on your machine (typically as a .key file). You will need this file for the .p12 creation process.

Install OpenSSL

1. Install OpenSSL on your Windows machine if it is not already installed

2. Open a command prompt

   • search for cmd in the Start menu, and navigate to the directory where OpenSSL is installed (e.g., C:\OpenSSL-Win64\bin).

Create the .p12 File

Prepare the Certificate and Private Key

1. Ensure the downloaded certificate file (e.g. .cer or .crt) and the private key file (e.g. .key) are in the same directory for easier access

   • Open a command prompt in the directory containing your certificate and private key files.Run the following OpenSSL command to combine the certificate and private key into a .p12 file:openssl pkcs12 -export -inkey private_key.key -in certificate.crt -out output_file.p12 _(Replace placeholder names with the actual file names.)

     _

2. **Create the .p12 File Using OpenSSL

   **

3. Secure the File with a Password

   • During the process, OpenSSL will prompt you to set a password for the .p12 file.

   • Choose a strong password and store it securely.

4. Locate the .p12 File

   • The .p12 file will be saved in the directory where you ran the command. Verify the file was created successfully.

Share the .p12 File

Once the file is created, you can share the .p12 file with the Limio Support Team.

Important: The password for the .p12 file should never be shared as plain text in an email. It should be shared through a secure side channel (e.g., a secure messaging platform) using the secure method specified by Limio Support.