A method for remote provision of a subscriber entity, the method being performed by the subscriber entity, the method comprising: providing a request for download of a profile for remote provisioning of the subscriber entity to a subscription management entity; verifying, using a profile handling unit (250, 260), of the subscriber entity, that the subscription management entity possesses a valid certificate for downloading the profile on the subscribed entity, wherein the subscription management entity is associated with at least two mobile network operators, MNOs (400a, 400b), wherein verifying comprises obtaining a certificate from the subscription management entity and verifying that the certificate provided by the subscription management entity is stored in the profile handling unit (250, 260) that stores multiple accepted certificates, wherein the certificate is specific for less than all of said at least two MNOs (400a, 400b) and the subscriber entity performs said verifying as a consequence of an eUICC of the profile handling unit (250, 260) being locked to a particular set of said at least two mobile network operators, MNOs (400a, 400b), and/or subscription management entities, the method further comprising: providing to the subscription management entity information that the eUICC is locked to a particular set of said at least two mobile network operators, MNOs, and/or subscription management entities, wherein said information is defined by a boot-lock variable having value True and is provided to the subscription management entity in said request for download; and allowing (S106a) download of the profile for remote provisioning of the subscriber entity only when the subscription management entity possesses said valid certificate. providing a request for download of a profile for remote provisioning of the subscriber entity to a subscription management entity; verifying, using a profile handling unit (250, 260), of the subscriber entity, that the subscription management entity possesses a valid certificate for downloading the profile on the subscribed entity, wherein the subscription management entity is associated with at least two mobile network operators, MNOs (400a, 400b), wherein verifying comprises obtaining a certificate from the subscription management entity and verifying that the certificate provided by the subscription management entity is stored in the profile handling unit (250, 260) that stores multiple accepted certificates, wherein the certificate is specific for less than all of said at least two MNOs (400a, 400b) and the subscriber entity performs said verifying as a consequence of an eUICC of the profile handling unit (250, 260) being locked to a particular set of said at least two mobile network operators, MNOs (400a, 400b), and/or subscription management entities, the method further comprising: providing to the subscription management entity information that the eUICC is locked to a particular set of said at least two mobile network operators, MNOs, and/or subscription management entities, wherein said information is defined by a boot-lock variable having value True and is provided to the subscription management entity in said request for download; and allowing (S106a) download of the profile for remote provisioning of the subscriber entity only when the subscription management entity possesses said valid certificate. providing to the subscription management entity information that the eUICC is locked to a particular set of said at least two mobile network operators, MNOs, and/or subscription management entities, wherein said information is defined by a boot-lock variable having value True and is provided to the subscription management entity in said request for download; and allowing (S106a) download of the profile for remote provisioning of the subscriber entity only when the subscription management entity possesses said valid certificate.