A method comprising: receiving a portable device (116; 200A; 200B; 306; 610), comprising a secure element and a biometric device (204, 210, 308), and an enrollment device (114; 300; 400) in a first communication (108, 110); receiving an enrollment identifier in a second communication; coupling the portable device with the enrollment device; inputting the enrollment identifier into the enrollment device while the portable device is coupled to the enrollment device, wherein the enrollment device provides the enrollment identifier to the portable device, the portable device verifies that the enrollment identifier is valid, and the portable device thereafter allows a user to input a biometric of the user into the portable device; inputting the biometric into the biometric device (204, 210, 308) of the portable device; uncoupling the enrollment device and the portable device; subsequently recoupling the portable device with the enrollment device; inputting the enrollment identifier into the enrollment device while the portable device is recoupled to the enrollment device, wherein the enrollment device provides the enrollment identifier to the portable device, the portable device verifies that the enrollment identifier is valid, and wherein the portable device thereafter allows the user to input a further additional biometric of the user into the portable device; receiving an indication at the enrollment device to delete the one or more biometrics stored at the portable device, wherein receiving the indication causes the portable device to delete the one or more biometrics stored at the portable device; and subsequently uncoupling the enrollment device and the portable device. receiving a portable device (116; 200A; 200B; 306; 610), comprising a secure element and a biometric device (204, 210, 308), and an enrollment device (114; 300; 400) in a first communication (108, 110); receiving an enrollment identifier in a second communication; coupling the portable device with the enrollment device; inputting the enrollment identifier into the enrollment device while the portable device is coupled to the enrollment device, wherein the enrollment device provides the enrollment identifier to the portable device, the portable device verifies that the enrollment identifier is valid, and the portable device thereafter allows a user to input a biometric of the user into the portable device; inputting the biometric into the biometric device (204, 210, 308) of the portable device; uncoupling the enrollment device and the portable device; subsequently recoupling the portable device with the enrollment device; inputting the enrollment identifier into the enrollment device while the portable device is recoupled to the enrollment device, wherein the enrollment device provides the enrollment identifier to the portable device, the portable device verifies that the enrollment identifier is valid, and wherein the portable device thereafter allows the user to input a further additional biometric of the user into the portable device; receiving an indication at the enrollment device to delete the one or more biometrics stored at the portable device, wherein receiving the indication causes the portable device to delete the one or more biometrics stored at the portable device; and subsequently uncoupling the enrollment device and the portable device.