fix bug - after provisioning there is step up, need rsa level