A device initialization method comprising: providing a license request for a personal media device to a media distribution system, the license request comprising credentials that identify both the personal media device and a user of the personal media device, the credentials also defining a valid subscription to allow access by the user and the personal media device to media content of the media distribution system, the credentials comprising a user ID, random number, and a device digital certificate for the personal media device, the device digital certificate including a device public key, the license request being signed by the personal media device using a device private key; receiving a device license for the personal media device from the media distribution system responsive to transmitting the license request, the media distribution system generating the device license for the personal media device by combining the license request, a timeout indicator, and a digital signature, the timeout indicator indicating an expiration date of the subscription, the digital signature being associated with the media distribution system, the device license including the user ID, the random number, and the device digital certificate from the license request, the device license also including a user encryption key that is encrypted with the device public key, the user encryption key being for use in encrypting a content encryption key; verifying integrity of the device license using the digital signature; using the timeout indicator to determine whether the subscription associated with the personal media device has expired; and rendering, using the content encryption key, the media content of the media distribution system on the personal media device after verifying the integrity of the device license and determining that the subscription has not expired. providing a license request for a personal media device to a media distribution system, the license request comprising credentials that identify both the personal media device and a user of the personal media device, the credentials also defining a valid subscription to allow access by the user and the personal media device to media content of the media distribution system, the credentials comprising a user ID, random number, and a device digital certificate for the personal media device, the device digital certificate including a device public key, the license request being signed by the personal media device using a device private key; receiving a device license for the personal media device from the media distribution system responsive to transmitting the license request, the media distribution system generating the device license for the personal media device by combining the license request, a timeout indicator, and a digital signature, the timeout indicator indicating an expiration date of the subscription, the digital signature being associated with the media distribution system, the device license including the user ID, the random number, and the device digital certificate from the license request, the device license also including a user encryption key that is encrypted with the device public key, the user encryption key being for use in encrypting a content encryption key; verifying integrity of the device license using the digital signature; using the timeout indicator to determine whether the subscription associated with the personal media device has expired; and rendering, using the content encryption key, the media content of the media distribution system on the personal media device after verifying the integrity of the device license and determining that the subscription has not expired.