A method comprising: at an electronic device: receiving program provider credential data from a program provider subsystem; determining (515, 804) if the program provider credential data comprises first program provider credential information indicative of a generic program provider credential and second program provider credential information indicative of the customizability of the generic program provider credential; when the program provider credential data is determined to comprise the first program provider credential information and the second program provider credential information, transmitting validation request data to an administration entity subsystem, wherein the validation request data comprises program provider information indicative of the program provider subsystem; characterized by after transmitting the validation request data, receiving (520, 808) validation response data from the administration entity subsystem, wherein the validation response data comprises administration tracking data; determining if the validation response data is indicative of a successful validation; when the validation response data is determined to be indicative of a successful validation, transmitting (524, 812) registration request data to the program provider subsystem, wherein the registration request data comprises user personalization data and the administration tracking data; receiving signed tracking data and personalized program provider credential data as at least a portion of program provider registration response data; provisioning a personalized program provider credential using the personalized program provider credential data; receiving device registration response data from the administration entity subsystem confirming validation of the tracking data or indicating that no validation of the tracking data was achieved; processing the received device registration response data to confirm or complete or cancel a potential provisioning of the program provider credential. receiving program provider credential data from a program provider subsystem; determining (515, 804) if the program provider credential data comprises first program provider credential information indicative of a generic program provider credential and second program provider credential information indicative of the customizability of the generic program provider credential; when the program provider credential data is determined to comprise the first program provider credential information and the second program provider credential information, transmitting validation request data to an administration entity subsystem, wherein the validation request data comprises program provider information indicative of the program provider subsystem; characterized by after transmitting the validation request data, receiving (520, 808) validation response data from the administration entity subsystem, wherein the validation response data comprises administration tracking data; determining if the validation response data is indicative of a successful validation; when the validation response data is determined to be indicative of a successful validation, transmitting (524, 812) registration request data to the program provider subsystem, wherein the registration request data comprises user personalization data and the administration tracking data; receiving signed tracking data and personalized program provider credential data as at least a portion of program provider registration response data; provisioning a personalized program provider credential using the personalized program provider credential data; receiving device registration response data from the administration entity subsystem confirming validation of the tracking data or indicating that no validation of the tracking data was achieved; processing the received device registration response data to confirm or complete or cancel a potential provisioning of the program provider credential.