You need to install the certificate in your keychain (just double-click on the file downloaded from Apple). You also need the Apple WWDR certificate installed in your keychain. You must also make sure that you set the teamIdentifier field in your pass.json to the correct value, not just the passTypeIdentifier field.
source share