A method for switching a subscription manager-secure routing device, comprising: acquiring, by a second subscription manager-secure routing device SM-SR from a first SM-SR, a profile installer credential corresponding to an embedded universal integrated circuit card eUICC; transmitting, by the second SM-SR, the profile installer credential to a subscription manager-data preparing device SM-DP, and sending a provisioning profile PP generation request, wherein the PP generation request is used for instructing the second SM-DP to generate a second PP corresponding to the second SM-SR and encrypt the second PP by using the profile installer credential; after receiving an encrypted second PP sent by the second SM-DP, generating, by the second SM-SR, a key pair comprising a first key and a second key; sending, by the second SM-SR, a third request message to the first SM-SR, wherein the third request message comprises: the encrypted second PP and the first key, and the third request message is used for instructing the first SM-SR to send the encrypted second PP and the first key to the eUICC, so that the eUICC replaces an internally preset first SM-SR according to an SM-SR replacement message sent by the first SM-SR; receiving, by the second SM-SR, an access request message sent by the eUICC, wherein the access request message is sent by the eUICC after the eUICC receives the encrypted second PP and the first key, deactivates or deletes a preset first PP corresponding to the first SM-SR, deletes a first profile management credential corresponding to the first SM-SR, and activates the second PP; and encrypting, by the second SM-SR by using the second key, a second profile management credential corresponding to the second SM-SR, and sending an encrypted second profile management credential to the eUICC, so that the eUICC interacts with the second SM-SR after receiving the second profile management credential, so as to obtain an operational profile OP profile used for accessing a mobile network, and access the mobile network according to the OP profile. acquiring, by a second subscription manager-secure routing device SM-SR from a first SM-SR, a profile installer credential corresponding to an embedded universal integrated circuit card eUICC; transmitting, by the second SM-SR, the profile installer credential to a subscription manager-data preparing device SM-DP, and sending a provisioning profile PP generation request, wherein the PP generation request is used for instructing the second SM-DP to generate a second PP corresponding to the second SM-SR and encrypt the second PP by using the profile installer credential; after receiving an encrypted second PP sent by the second SM-DP, generating, by the second SM-SR, a key pair comprising a first key and a second key; sending, by the second SM-SR, a third request message to the first SM-SR, wherein the third request message comprises: the encrypted second PP and the first key, and the third request message is used for instructing the first SM-SR to send the encrypted second PP and the first key to the eUICC, so that the eUICC replaces an internally preset first SM-SR according to an SM-SR replacement message sent by the first SM-SR; receiving, by the second SM-SR, an access request message sent by the eUICC, wherein the access request message is sent by the eUICC after the eUICC receives the encrypted second PP and the first key, deactivates or deletes a preset first PP corresponding to the first SM-SR, deletes a first profile management credential corresponding to the first SM-SR, and activates the second PP; and encrypting, by the second SM-SR by using the second key, a second profile management credential corresponding to the second SM-SR, and sending an encrypted second profile management credential to the eUICC, so that the eUICC interacts with the second SM-SR after receiving the second profile management credential, so as to obtain an operational profile OP profile used for accessing a mobile network, and access the mobile network according to the OP profile.