Method of providing access to encrypted content to a consumer system, the consumer system being one of a plurality of consumer systems (2-4,6), the consumer system including at least one device having access to a secure content package and being provided with an agent function enabling the at least one device to retrieve a rights data object, the method comprising: obtaining the secure content package in the consumer system, the secure content package including the encrypted content and an indication of a location from which to request a rights data object; retrieving in the at least one device the rights data object from a further device issuing rights data objects from the indicated location, each rights data object being cryptographically bound to at least the device to which it is issued, such that only devices with an agent function to which the rights data object has been bound are able to obtain content key information, the rights data object including at least content key information; enabling by the agent function the at least one device to provide access to at least part of the encrypted content; providing access by the at least one device to the at least part of the encrypted content; and decrypting the at least part of the encrypted content using the content key information, characterised by: transferring a rights issuer module to a protected environment of the further device for incorporation in the consumer system, thereby enabling the further device, when operational in the consumer system, to generate the rights data object cryptographically bound to the at least one device in the consumer system provided with the agent function. obtaining the secure content package in the consumer system, the secure content package including the encrypted content and an indication of a location from which to request a rights data object; retrieving in the at least one device the rights data object from a further device issuing rights data objects from the indicated location, each rights data object being cryptographically bound to at least the device to which it is issued, such that only devices with an agent function to which the rights data object has been bound are able to obtain content key information, the rights data object including at least content key information; enabling by the agent function the at least one device to provide access to at least part of the encrypted content; providing access by the at least one device to the at least part of the encrypted content; and decrypting the at least part of the encrypted content using the content key information, characterised by: transferring a rights issuer module to a protected environment of the further device for incorporation in the consumer system, thereby enabling the further device, when operational in the consumer system, to generate the rights data object cryptographically bound to the at least one device in the consumer system provided with the agent function. transferring a rights issuer module to a protected environment of the further device for incorporation in the consumer system, thereby enabling the further device, when operational in the consumer system, to generate the rights data object cryptographically bound to the at least one device in the consumer system provided with the agent function.