A mobile communication device comprising: a hardware platform comprising a processor and a storage medium; a software architecture including a virtualization software layer adapted to virtualize a first persona comprising a first operating system (OS, 112) and a first trusted execution environment (TEE, 114) and a second persona comprising a second operating system (OS, 122) and a second trusted execution environment (TEE, 124); a first trusted platform module (TPM, 60) assigned to first persona such that the first trusted execution environment (TEE, 114) has direct access to the first trusted platform module (TPM; 60) and controls the first trusted platform module (TPM, 60); and a second trusted platform module (TPM, 62) assigned to second persona such that the second trusted execution environment (TEE, 124) has direct access to the second trusted platform module (TPM; 60) and controls the second trusted platform (TPM, 62); the storage medium comprising instructions that cause said processor to: establish a first root of trust for the first persona; establish a second root of trust for the second persona, wherein the first root of trust is separate from the second root of trust; store measurements defining the first root of trust for the first persona in the first trusted platform module; store measurements defining the second root of trust for the second persona in the second trusted platform module; load the first persona and the second persona using the roots of trust for the first and second personas; and establish mutual trust between the first trusted execution environment and the second trusted execution environment such that the first persona is coupled in communication with the second persona. a hardware platform comprising a processor and a storage medium; a software architecture including a virtualization software layer adapted to virtualize a first persona comprising a first operating system (OS, 112) and a first trusted execution environment (TEE, 114) and a second persona comprising a second operating system (OS, 122) and a second trusted execution environment (TEE, 124); a first trusted platform module (TPM, 60) assigned to first persona such that the first trusted execution environment (TEE, 114) has direct access to the first trusted platform module (TPM; 60) and controls the first trusted platform module (TPM, 60); and a second trusted platform module (TPM, 62) assigned to second persona such that the second trusted execution environment (TEE, 124) has direct access to the second trusted platform module (TPM; 60) and controls the second trusted platform (TPM, 62); the storage medium comprising instructions that cause said processor to: establish a first root of trust for the first persona; establish a second root of trust for the second persona, wherein the first root of trust is separate from the second root of trust; store measurements defining the first root of trust for the first persona in the first trusted platform module; store measurements defining the second root of trust for the second persona in the second trusted platform module; load the first persona and the second persona using the roots of trust for the first and second personas; and establish mutual trust between the first trusted execution environment and the second trusted execution environment such that the first persona is coupled in communication with the second persona. establish a first root of trust for the first persona; establish a second root of trust for the second persona, wherein the first root of trust is separate from the second root of trust; store measurements defining the first root of trust for the first persona in the first trusted platform module; store measurements defining the second root of trust for the second persona in the second trusted platform module; load the first persona and the second persona using the roots of trust for the first and second personas; and establish mutual trust between the first trusted execution environment and the second trusted execution environment such that the first persona is coupled in communication with the second persona.