A method for a module with an embedded universal integrated circuit card, eUICC, to receive and decrypt an encrypted profile, the method comprising the steps of: a) recording, by the eUICC, a first private key, wherein the first private key is associated with a first public key; b) sending, by the module, a module identity to a server, receiving a nonce from the server, and calculating a first digital signature for the nonce using the first private key; c) receiving the encrypted profile for the eUICC from a subscription manager, wherein the encrypted profile is ciphered with a symmetric ciphering key, and wherein the eUICC decrypts the encrypted profile in order to record a set of network access credentials; wherein the method is characterized by: 1) prior to step a), performing at least the additional step of generating by the eUICC, the first private key and the first public key by using external noise of a configuration unit, wherein the first public key is received by the configuration unit; 2) receiving, by the eUICC after step b) and before step c), a signal to derive a second private key, wherein the signal includes a second set of parameters; 3) collecting, by the eUICC after step a) and before step c), a noise value from a sensor in the eUICC for input into a random number generator, wherein the random number generator generates a random number; 4) generating, by the eUICC, the second private key and a second public key using the second set of parameters and the random number; 5) generating, by the module, a second digital signature for the second public key using the first private key; 6) sending, by the module, the second digital signature and the second public key, wherein the second digital signature is verified using the first public key; and 7) deriving, by the eUICC, the symmetric ciphering key from (i) an elliptic curve Diffie Hellman (ECDH) key exchange, using at least the second private key, and (ii) a key derivation function. a) recording, by the eUICC, a first private key, wherein the first private key is associated with a first public key; b) sending, by the module, a module identity to a server, receiving a nonce from the server, and calculating a first digital signature for the nonce using the first private key; c) receiving the encrypted profile for the eUICC from a subscription manager, wherein the encrypted profile is ciphered with a symmetric ciphering key, and wherein the eUICC decrypts the encrypted profile in order to record a set of network access credentials; wherein the method is characterized by: 1) prior to step a), performing at least the additional step of generating by the eUICC, the first private key and the first public key by using external noise of a configuration unit, wherein the first public key is received by the configuration unit; 2) receiving, by the eUICC after step b) and before step c), a signal to derive a second private key, wherein the signal includes a second set of parameters; 3) collecting, by the eUICC after step a) and before step c), a noise value from a sensor in the eUICC for input into a random number generator, wherein the random number generator generates a random number; 4) generating, by the eUICC, the second private key and a second public key using the second set of parameters and the random number; 5) generating, by the module, a second digital signature for the second public key using the first private key; 6) sending, by the module, the second digital signature and the second public key, wherein the second digital signature is verified using the first public key; and 7) deriving, by the eUICC, the symmetric ciphering key from (i) an elliptic curve Diffie Hellman (ECDH) key exchange, using at least the second private key, and (ii) a key derivation function. 1) prior to step a), performing at least the additional step of generating by the eUICC, the first private key and the first public key by using external noise of a configuration unit, wherein the first public key is received by the configuration unit; 2) receiving, by the eUICC after step b) and before step c), a signal to derive a second private key, wherein the signal includes a second set of parameters; 3) collecting, by the eUICC after step a) and before step c), a noise value from a sensor in the eUICC for input into a random number generator, wherein the random number generator generates a random number; 4) generating, by the eUICC, the second private key and a second public key using the second set of parameters and the random number; 5) generating, by the module, a second digital signature for the second public key using the first private key; 6) sending, by the module, the second digital signature and the second public key, wherein the second digital signature is verified using the first public key; and 7) deriving, by the eUICC, the symmetric ciphering key from (i) an elliptic curve Diffie Hellman (ECDH) key exchange, using at least the second private key, and (ii) a key derivation function.