---
title: "Activate Certificate"
method: POST
path: "/apple-pay/certificates/{id}/activate"
tags: ["Apple Pay Certificate"]
---

# Activate Certificate

`POST /apple-pay/certificates/{id}/activate`

Activates an Apple Pay certificate by uploading the signed certificate from Apple.

After creating a certificate in the Apple Developer Portal using your CSR, download
the signed certificate and upload it here to activate payment processing.

## Activation process

1. Ensure you have downloaded the signed certificate (`.cer` file) from Apple Developer Portal.

2. Convert the certificate to base64:

   ```bash
   base64 -i apple_pay.cer
   ```

3. Call this endpoint with the base64-encoded certificate in the `cert` field.

## Validation

The certificate is validated to ensure:

- It matches the private key generated when creating the CSR
- It has a valid expiration date

Once activated, the certificate becomes available for decrypting Apple Pay payment tokens
in your iOS app.

## Notes

- A certificate can only be activated once.
- After successful activation, the CSR is no longer returned in responses.
- The certificate's expiration date is returned in the `expireAt` field once activated.

## Path parameters

- `id` string, required

## Request body

- ActivateApplePayCertificateRequest
  - `cert` string, required — The signed certificate from Apple in base64 format. Download this from Apple Developer Portal after creating the certificate with your CSR.

## Response `200`

A certificate object

- ApplePayCertificate — An Apple Pay certificate for iOS app integration.
  - `id` string, required — Unique identifier of the certificate.
  - `accountId` string, required — The account ID this certificate belongs to.
  - `csr` string — The Certificate Signing Request in base64 format. Only present before activation. Use this to create a certificate in Apple Developer Portal.
  - `cert` string — The certificate body in base64 format. Only present after activation.
  - `active` boolean, required — Whether the certificate is active for payment processing.
  - `expireAt` string, date-time — The certificate expiration date in ISO 8601 format. Only present after activation.
  - `createdAt` string, date-time, required — The certificate creation date in ISO 8601 format.

## Other responses

- `400` — The request is incorrect or could not be processed
- `401` — Unauthorized error. Please check your auth credentials
- `404` — The specified resource was not found
- `422` — The request was well-formed but could not be processed due to semantic errors
- `500` — Unexpected server error
- `503` — The service is temporarily unavailable

---

[API](https://skmtc.net/monei/apis/monei-api-v1.md) · [All operations](https://skmtc.net/monei/apis/monei-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/monei/monei-api-v1/revisions/23554d4fb9e5/schema)