Skip to main content

Renewing Better Bankside Digital Buzz Card certificate

Harrison Fletcher
Updated

YYYY refers to the present year throughout the article.

Better Bankside are using a digital wallet pass. This needs a certificate provided by apple. The digital wallet pass service is hosted in uluru, in short you need to: 



  1. Create a CSR 
  2. Generate the Certificate through the apple developer portal
  3. Upload this to Google Cloud Storage
  4. Test

 

  1. Log in at https://developer.apple.com
    • If you don't have an account, register one and contact Better Bankside to add you to their organisation.
  2. Open Certificates, IDs & Profiles.
  3. Select Identifiers.
  4. In the drop down to the right open Pass Type IDs.
  5. Open Buzz Card.
  6. Click Create Certificate.
  7. Generate a key (password: buzz) bb_key.pem & Create a CSR (you can use openssl to do this). Copy the subject from the previous certificate (i.e. pass.com.betterbankside.buzzcard) . Check the latest recomendations from apple on the key / csr as these change. 
  8. Upload the CSR and Generate the certificate.
    • Store the generated files in in Team Drives > Clients > Better Bankside > YYYY.
  9. Reformat the certificate as PEM: openssl pkcs12 -in pass.cer -out bb_certificate.pem
  10. In GCP open the BetterBankside Storage Bucket in yreceipts-dev
  11. Copy the newly generated bb*pem files into the bucket.
  12. Go to the backend on yreceipts-prod.
  13. Select the Better Bankside account (yReceipts Admin should be OK, too).
  14. Open /consumers/identification/passbook_template?key=ahBzfnlyZWNlaXB0cy1wcm9kchkLEhBQYXNzYm9va1RlbXBsYXRlGIrmsA4M&action=download&email=test%2bYYYY@yreceipts.com
  15. Import the pass on your iOS device to ensure the new certificate is operational
    • As third-party Passbook clients, such as Android ones, don't verify the certificate, this test must be carried out on an iOS device.
    • The test is successful if the pass is shown on your iOS Wallet after trying to import it.
  16. Notify the client of the new certificate's expiry date and advise them that they have to request us to renew it again at least 2 weeks beforehand.