A computer implemented method for protecting data, the method comprising: retrieving an encrypted version of a cryptographic key from an augmented authentication code module of a processing system into a processing unit (30,32) of the processing system, wherein: the augmented authentication code module is stored in a nonvolatile storage of the processing system; the augmented authentication code module comprises instructions for installing the cryptographic key, said instructions to be executed by the processing unit (30,32), and the encrypted version of the cryptographic key comprises a cryptographic key encrypted with a private processor manufacture key; using a processing unit key to decrypt the encrypted version of the cryptographic key, wherein the processing unit key is a public key corresponding to the private processor manufacture key and is permanently burned into the processing unit (30,32); storing the decrypted cryptographic key in protected storage in the processing unit (30,32), wherein the protected storage cannot be accessed by snooping a processing system bus communicatively coupled to the processing unit (30,32); characterised by using the decrypted cryptographic key to create a session key wherein the session key is different from the decrypted cryptographic key; installing the decrypted cryptographic key into a security coprocessor of the processing system; creating a corresponding session key with the security coprocessor of the processing system with the decrypted cryptographic key installed into the security coprocessor; and using the session key and the corresponding session key to establish a protected communication channel between the processing unit (30,32) and the security coprocessor of the processing system. retrieving an encrypted version of a cryptographic key from an augmented authentication code module of a processing system into a processing unit (30,32) of the processing system, wherein: the augmented authentication code module is stored in a nonvolatile storage of the processing system; the augmented authentication code module comprises instructions for installing the cryptographic key, said instructions to be executed by the processing unit (30,32), and the encrypted version of the cryptographic key comprises a cryptographic key encrypted with a private processor manufacture key; the augmented authentication code module is stored in a nonvolatile storage of the processing system; the augmented authentication code module comprises instructions for installing the cryptographic key, said instructions to be executed by the processing unit (30,32), and the encrypted version of the cryptographic key comprises a cryptographic key encrypted with a private processor manufacture key; using a processing unit key to decrypt the encrypted version of the cryptographic key, wherein the processing unit key is a public key corresponding to the private processor manufacture key and is permanently burned into the processing unit (30,32); storing the decrypted cryptographic key in protected storage in the processing unit (30,32), wherein the protected storage cannot be accessed by snooping a processing system bus communicatively coupled to the processing unit (30,32); characterised by using the decrypted cryptographic key to create a session key wherein the session key is different from the decrypted cryptographic key; installing the decrypted cryptographic key into a security coprocessor of the processing system; creating a corresponding session key with the security coprocessor of the processing system with the decrypted cryptographic key installed into the security coprocessor; and installing the decrypted cryptographic key into a security coprocessor of the processing system; creating a corresponding session key with the security coprocessor of the processing system with the decrypted cryptographic key installed into the security coprocessor; and using the session key and the corresponding session key to establish a protected communication channel between the processing unit (30,32) and the security coprocessor of the processing system.