---
title: "Create encrypted card data for Apple Pay"
method: POST
path: "/v1/cards/{cardId}/network-tokens/push-provisioning/wallets/applepay"
tags: ["Pre-digitalization"]
---

# Create encrypted card data for Apple Pay

`POST /v1/cards/{cardId}/network-tokens/push-provisioning/wallets/applepay`

Generate encrypted card data to provision a token via push-provisioning and the Apple SDK. Also returned is cardholder identifying information.

**Notes:** 
  * This is a PCI endpoint, use the https://gw-pci.pismolabs.io/cards-tokenization environment.
  * This endpoint takes an account token - an access token encoded with a Pismo account ID.

## Path parameters

- `cardId` string, required

## Request body

- ApplePayEncryptedDataRequest
  - `Apple_public_certificate_b64` string[], required — Apple SDK Base64 encoded certificate from Apple *You need to encode what you receive from Apple with Base64 and then send it here.
  - `device_type` 'MOBILE_PHONE' | 'WATCH', required — Device type that the token will be provisioned for.
  - `app_version` string, required — Application version from the provisioning request.
  - `Nonce` string, required — From Apple SDK. Nonce = "number used once", a one-time-use random generated value.
  - `product_type` string — From Apple SDK. Product type identifier. if a specific identifier needs to be passed, it **must** be entered in this field. if not passed, Pismo uses default values from the networks.
  - `Nonce_signature` string, required — From Apple SDK
  - `tav_version` 'TAV3' | 'TAV4' — The Token Authorization Value (TAV) version. The TAV value contains the issuer's digital signature that approves the token digitization for a Primary Account Number (PAN). **REQUIRED** for Mastercard if the issuer wants to use model `TAV4`.
  - `key_alias` string — Mastercard provided Key alias value used to generate the signature on a TAV body request. **REQUIRED** if Mastercard and `TAV4` version.
  - `authcode` string — An issuer-generated 6-character code specific to the current provisioning request. Issuer and Visa use this field to identify specific activation codes in problem resolution or authentication related questions. Format is alphanumeric. Allowed characters include 0-9 and A-Z. Characters must be in uppercase and not contain all zeros or all spaces. **REQUIRED** for Visa.

## Response `200`

Success

- ApplePayEncryptedDataResponse
  - `push_data` object
    - `ephemeralPublicKey` string — Key pair for Apple SDK
    - `encryptedData` string — Encrypted card data for Apple SDK
    - `activationData` string — Encrypted data for Apple SDK in base64 format
  - `additional_info` object
    - `name` string — Cardholder name
    - `address` string — Cardholder address
    - `country` string — Cardholder country
    - `city` string — Cardholder city
    - `state` string — Cardholder state
    - `phone` string — Cardholder phone number
    - `printed_name` string — Name printed on card
    - `last_4_digits` string — Last 4 PAN digits
    - `has_address_info` boolean — If `true`, cardholder address information exists on Pismo platform. If `false`, some fields inside `additional_info` are not returned.
    - `has_phone_info` boolean — If `true`, cardholder phone information exists on Pismo platform. If `false`, some fields inside `additional_info` are not returned.

## Other responses

- `400` — Bad request
- `401` — Access token is missing or invalid
- `500` — Internal server error

---

[API](https://skmtc.net/pismo/apis/platform-authentication.md) · [All operations](https://skmtc.net/pismo/apis/platform-authentication/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pismo/platform-authentication/versions/935b62e16de4/schema)