---
title: "Fetch wallet payload for Apple Pay in-app provisioning"
method: POST
path: "/v1/cards/{card_id}/sca_push_provision/apple_encrypted"
tags: ["Push provisioning"]
---

# Fetch wallet payload for Apple Pay in-app provisioning

`POST /v1/cards/{card_id}/sca_push_provision/apple_encrypted`

Returns a wallet payload for adding the customer's card to their Apple Pay wallet via request to the Apple Pay API.  <br>**Note:** This endpoint will trigger the **change request** process. The customer will receive a 2FA challenge to confirm the request.

## Path parameters

- `card_id` string, required

## Request body

- PayloadApiRequest
  - `certificates` string[] — An array of leaf and sub-CA certificates provided by Apple. Each object contains a DER-encoded X.509 certificate, starting with the leaf and followed by the sub-CA. You must encode this value in Base64 format before providing it to the API.
  - `nonce` string — A single-use nonce provided by Apple. You must hex-encode this value before providing it to the API.
  - `nonce_signature` string — Nonce signature provided by Apple. You must hex-encode this value before providing it to the API.

## Response `200`

The request was accepted, and now the customer must confirm the change request.

- PushProvisionChangeRequestResponse
  - `id` string — ID of the change request.
  - `status` 'ACCEPTED' | 'AUTHORIZATION_REQUIRED' | 'CONFIRMATION_REQUIRED' | 'COMPLETED' | 'FAILED' — The current status of the change request.
  - `updated_at` string, date-time — UTC timestamp from the last time the change request was updated.
  - `url` string — URL to use to authorize the change request.

## Other responses

- `201` — The change request was successfully confirmed, and the card can now be added to the customer's Apple Pay wallet.
- `400` — Bad Request. The request was invalid or malformed.
- `401` — Unauthorized. Authentication is missing or invalid.
- `403` — Forbidden
- `404` — The card could not be found.
- `500` — Internal server error.

---

[API](https://skmtc.net/solarisgroup/apis/cards-tokenization.md) · [All operations](https://skmtc.net/solarisgroup/apis/cards-tokenization/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/solarisgroup/cards-tokenization/revisions/15f03804be72/schema)