Method for setting up a subscriber identity module for the agreement of one or several exchange keys, between a subscriber identity module and a provisioning server (OTA S), proceeding from asymmetric key data, the asymmetric key data comprising an individual static asymmetric key pair of the subscriber identity module, comprising a private key (PrivK) and a public key (PubK), and a static asymmetric key pair of the provisioning server (OTA S), comprising a private key (PrivK) and a public key (PubK), the method comprising the steps of: a) generating the asymmetric key pair individual for the subscriber identity module, comprising the public key (PubK) and the private key (PrivK); b) generating the asymmetric key pair of the provisioning server (OTA S), comprising the public key (PubK) and the private key (PrivK); c) generating the one or several exchange keys employing the private key (PrivK) of the subscriber identity module and the public key (PubK) of the provisioning server (OTA-S); characterized in that step a) and step c) are performed as additional production steps on a production server (Prod S) during a production of the subscriber identity module, and the method comprises the further step of: d) transmitting and storing the one or several exchange keys generated in step c) on the production server (Prod S) into the subscriber identity module, to program the subscriber identity module with additional data, which at a point in time after the delivery of the subscriber identity module when dialling into a communication network give the subscriber identity module the appearance that it is configured to perform calculations according to an asymmetric cryptography algorithm, wherein it is put into a state as though it had generated the exchange keys itself. the asymmetric key data comprising an individual static asymmetric key pair of the subscriber identity module, comprising a private key (PrivK) and a public key (PubK), and a static asymmetric key pair of the provisioning server (OTA S), comprising a private key (PrivK) and a public key (PubK), the method comprising the steps of: a) generating the asymmetric key pair individual for the subscriber identity module, comprising the public key (PubK) and the private key (PrivK); b) generating the asymmetric key pair of the provisioning server (OTA S), comprising the public key (PubK) and the private key (PrivK); c) generating the one or several exchange keys employing the private key (PrivK) of the subscriber identity module and the public key (PubK) of the provisioning server (OTA-S); a) generating the asymmetric key pair individual for the subscriber identity module, comprising the public key (PubK) and the private key (PrivK); b) generating the asymmetric key pair of the provisioning server (OTA S), comprising the public key (PubK) and the private key (PrivK); c) generating the one or several exchange keys employing the private key (PrivK) of the subscriber identity module and the public key (PubK) of the provisioning server (OTA-S); characterized in that step a) and step c) are performed as additional production steps on a production server (Prod S) during a production of the subscriber identity module, and the method comprises the further step of: d) transmitting and storing the one or several exchange keys generated in step c) on the production server (Prod S) into the subscriber identity module, to program the subscriber identity module with additional data, which at a point in time after the delivery of the subscriber identity module when dialling into a communication network give the subscriber identity module the appearance that it is configured to perform calculations according to an asymmetric cryptography algorithm, wherein it is put into a state as though it had generated the exchange keys itself.