Apple certificates for Wallet expire periodically and need to be extended to ensure your wallet cards continue to work properly. This guide explains how to extend your Apple certificate.

Before you start

• You need access to your Apple Developer account.
• You need a Mac computer with Keychain Access.
• Ensure you know which Pass Type ID identifier your certificate is associated with.

Good to know

Why extend a certificate:

• Apple certificates have an expiration date.
• Expired certificates prevent wallet cards from functioning properly.
• Extending your certificate before it expires ensures uninterrupted service.

Important reminders:

• Always use the same Pass Type ID identifier when extending a certificate.
• Do not create a new identifier.
• Keep your .p12 certificate file secure as it contains important credentials.

❓ When should you renew the Apple certificate?

You must renew the Apple certificate when it is approaching its expiration date. A notification banner appears at the top of your Wallet space one month before the certificate expires to remind you to renew it in time.

🔄 Renew your Apple certificate

Step 1: Create a certificate signing request

1. On your Mac, from Applications > Utilities, open Keychain Access.
2. Select Keychain Access > Certificate Assistant > Request a Certificate from a Certificate Authority.
   
3. Enter an email address in the User Email Address field and in the Common Name field, enter your brand's name. Leave the CA Email Address field empty.
4. Select Saved to disk.
   
5. Click Continue.
6. Choose where to save the certificate signing request file.
7. Click Save.

Step 2: Find your existing identifier in Apple Developer

1. Log in to your Apple Developer account at developer.apple.com.
2. Go to Certificates, Identifiers & Profiles.
3. Select Identifiers from the left menu.
4. Search for your existing Pass Type ID identifier.
❗️ Important
Do not create a new identifier. You must use the existing one.
5. Click your identifier to open it.
6. Click Create certificate.

Step 3: Upload the certificate signing request

1. Select Pass Type IDs and click Continue.
2. Add a description and an identifier and click Continue.
   💡 Good to know

   "pass" is automatically added

   

3. Click Choose File and select the certificate signing request file you created in Step 1.
4. Click Continue.

   

5. Click Download to download your certificate.

   

Step 4: Install the certificate in Keychain Access

1. On your Mac, locate the downloaded certificate file.
2. Double-click the certificate file to open it in Keychain Access.

The certificate will be automatically added to your keychain.

Step 5: Export the certificate

1. In Keychain Access, find the newly installed certificate.
2. Right-click the certificate.
   
3. Select Export.
   
4. In the window that appears, ensure the file format is set to .p12.
   
5. Click Save.
6. Set a password or leave it blank.
   
7. Click OK.
8. Enter your computer password when prompted.
   
9. Click Allow.

Your extended certificate is now saved and ready to be uploaded to your Brevo Wallet account.

Step 6: Add it to the wallet platform

1. Access to the project settings.
2. Go to the Apple Wallet tab and click Add a certificate.
   
3. Upload the certificate file in .p12 format you've just downloaded.
   
4. (Optional) If a pass phrase was set, enter it in the corresponding field.
5. Click Create.

Your Apple certificate will then be successfully added.

↗️ Extend your Apple certificate

Step 1: Generate a .p12 file

1. Repeat Step 1: Create a certificate signing request.
2. Repeat Step 2: Find your existing identifier in Apple Developer.
   
3. Repeat Step 3: Upload the certificate signing request.

Step 2: Upload the file to extend your certificate

On the wallet platform:

1. Access your platform settings.
2. Click the three-dot menu > Extend.
   
3. Upload the certificate file in .p12 format you've just downloaded.
   
4. (Optional) If a pass phrase was set, enter it in the corresponding field.
5. Click Extend again to confirm.

Your Apple certificate will then be successfully extended.