Create certificates
Generate the certificate signing requests (CSRs) Guardian needs for Apple Pay. Guardian creates both an EC payment processing CSR and an RSA merchant identity CSR and keeps the private keys inside its PCI boundary. Submit each csr_pem to Apple in the Apple Developer portal, then return the signed certificates with Upload an Apple Pay certificate.
Available only on self_managed instances. On Starfish-operated (sf_operated) instances certificates are managed by Starfish, and this endpoint returns 409 with the classifier APPLE_PAY_CERT_MANAGEMENT_UNAVAILABLE.
Authorizations
Response
Success response
Both Apple Pay CSRs to submit to Apple: the EC payment-processing certificate and the RSA merchant-identity certificate. The CSR flow is self_managed-only; on Starfish-operated (sf_operated) instances the same RSA certificate is surfaced as a platform integrator identity and is managed by Starfish.