Create a private key to access a service

Private keys allow you to access and authenticate communication with some app services — such as APNs, DeviceCheck, MusicKit, and WeatherKit. You’ll use the private key in a JSON Web Token (JWT) in a request to that service.

Required role: Account Holder or Admin.

In Certificates, Identifiers & Profiles, click Keys in the sidebar, then click the add button (+) on the top left.
Under Key Name, enter a unique name for the key.
Select the checkbox next to the services you want to enable, then click Continue.
If the Media Services checkbox is disabled, you need to register a media identifier first.
- If you register more than one media identifier, click Configure next to the checkbox.
- On the next page, choose the media identifier you want to use from the pop-up menu, then click Continue.
Review the key configuration, then click Confirm.
Optionally, click Download to generate and download the key now.
If you download the key, it’s saved as a text file with a .p8 file extension in the Downloads folder.
Click Done.

WARNING: Save this file in a secure place because the key is not saved in your developer account and you won’t be able to download it again. If the Download button is disabled, you previously downloaded the key.