---
title: "Push Provisioning for Apple Pay"
method: POST
path: "/twcard-data/v1/push-provisioning/encrypted-payload/apple-pay"
tags: ["digital-wallet"]
---

# Push Provisioning for Apple Pay

`POST /twcard-data/v1/push-provisioning/encrypted-payload/apple-pay`

Returns encrypted cardholder information and other metadata needed for Apple Pay push provisioning.

{% admonition type="warning" %}
This API is not available for sandbox testing.
{% /admonition %}

## Headers

- `x-tw-twcard-card-token` string, uuid, required
- `X-External-Correlation-Id` string, uuid

## Request body

- object
  - `certificates` string[], required — DER encoded X.509 ECC leaf and sub CA certificates, each encoded in Base64.
  - `nonce` string, required — One time use nonce generated by Apple Servers and HEX encoded on iOS app.
  - `nonceSignature` string, required — The device and account specific signature of the nonce generated by Apple and HEX encoded on iOS app.

## Response `200`

Encrypted cardholder information for Apple Pay.

- object
  - `encryptedPassData` string — Encrypted authentication data following card scheme and wallet provider specifications. The response is encoded in Base64.
  - `activationData` string — Encrypted activation data following card scheme and wallet provider specifications. The response is encoded in Base64.
  - `ephemeralKey` string — Ephemeral key used to encrypt authentication data. The response is encoded in Base64.

## Other responses

- `429` — Rate limit exceeded. Retry after the number of seconds specified in the `Retry-After` header.

---

[API](https://skmtc.net/wise/apis/platform-api.md) · [All operations](https://skmtc.net/wise/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wise/platform-api/revisions/4907a1d269ab/schema)