A method of providing a secure element of a mobile terminal with a subscription profile, wherein the mobile terminal is configured to communicate with a cellular communications network and wherein the subscription profile comprises a network specific portion related to the cellular communications network or a different cellular communications network as well as a hardware specific portion related to the hardware of the secure element and/or the mobile terminal, wherein the method comprises the steps of: identifying the secure element by means of an identification element (ID se) for determining a configuration key (K conf) and a secure element key (K se) associated with the secure element, wherein the step of identifying the secure element comprises; transmitting the identification element (ID se) from the secure element to the first server; forwarding the identification element (ID se) of the secure element to the second server; and transmitting the configuration key (K conf) determined on the basis of the identification element (ID se) from the second server to the first server, wherein the identification element (ID se) is transmitted from the secure element to the first server by means of a message including the identification element (ID se) in the clear and an encrypted version of the identification element (ID se) encrypted by using the configuration key (K conf) stored on the secure element, wherein the message further comprises an encrypted version of a session key (K ses) created by the secure element and an encrypted version of a hardware configuration (HW conf) of the secure element and/or the mobile terminal both encrypted using the configuration key (K conf); assembling the subscription profile, wherein the network specific portion of the subscription profile is provided by a first server and the hardware specific portion of the subscription profile is provided by a second server; and providing the assembled subscription profile over-the-air to the secure element. identifying the secure element by means of an identification element (ID se) for determining a configuration key (K conf) and a secure element key (K se) associated with the secure element, wherein the step of identifying the secure element comprises; transmitting the identification element (ID se) from the secure element to the first server; forwarding the identification element (ID se) of the secure element to the second server; and transmitting the configuration key (K conf) determined on the basis of the identification element (ID se) from the second server to the first server, wherein the identification element (ID se) is transmitted from the secure element to the first server by means of a message including the identification element (ID se) in the clear and an encrypted version of the identification element (ID se) encrypted by using the configuration key (K conf) stored on the secure element, wherein the message further comprises an encrypted version of a session key (K ses) created by the secure element and an encrypted version of a hardware configuration (HW conf) of the secure element and/or the mobile terminal both encrypted using the configuration key (K conf); assembling the subscription profile, wherein the network specific portion of the subscription profile is provided by a first server and the hardware specific portion of the subscription profile is provided by a second server; and providing the assembled subscription profile over-the-air to the secure element.