A method for re-provisioning a user equipment, UE, with a second digital security certificate provisioned by a controller after a first digital security certificate has expired, the method comprising: during an initial setup between the controller and the UE performing the acts of: establishing a first secure channel between the UE and the controller using a first public/private key pair, providing the first digital security certificate by the controller to the UE over the first secure channel, and storing a rescue-secret private key at the controller and storing a rescue-secret public key at the UE, the rescue-secret private key and the rescue-secret public key being a rescue-secret public/private key pair that is different than the first public/private key pair, the rescue-secret public key being provided by the controller to the UE over the first secure channel; the method further comprising: determining by the UE that the first digital security certificate has expired; sending by the UE a certificate provisioning request message over an unsecure channel to the controller as a request to the controller to provision the UE with the second digital security certificate, the certificate provisioning request message being signed by a private key of the first public/private key pair; using a public key of the first public/private key pair at the controller to verify the certificate provisioning request message, and once verified, accessing at the controller the rescue-secret private key stored in secure memory at the controller via entry of access information by the controller; signing at the controller the second digital security certificate with the rescue-secret private key and sending the signed second digital security certificate from the controller to the UE; and after verifying the signed second digital security certificate at the UE using the rescue-secret public key, the UE resumes communication with the controller over another secure communication channel using the second digital security certificate. during an initial setup between the controller and the UE performing the acts of: establishing a first secure channel between the UE and the controller using a first public/private key pair, providing the first digital security certificate by the controller to the UE over the first secure channel, and storing a rescue-secret private key at the controller and storing a rescue-secret public key at the UE, the rescue-secret private key and the rescue-secret public key being a rescue-secret public/private key pair that is different than the first public/private key pair, the rescue-secret public key being provided by the controller to the UE over the first secure channel; establishing a first secure channel between the UE and the controller using a first public/private key pair, providing the first digital security certificate by the controller to the UE over the first secure channel, and storing a rescue-secret private key at the controller and storing a rescue-secret public key at the UE, the rescue-secret private key and the rescue-secret public key being a rescue-secret public/private key pair that is different than the first public/private key pair, the rescue-secret public key being provided by the controller to the UE over the first secure channel; the method further comprising: determining by the UE that the first digital security certificate has expired; sending by the UE a certificate provisioning request message over an unsecure channel to the controller as a request to the controller to provision the UE with the second digital security certificate, the certificate provisioning request message being signed by a private key of the first public/private key pair; using a public key of the first public/private key pair at the controller to verify the certificate provisioning request message, and once verified, accessing at the controller the rescue-secret private key stored in secure memory at the controller via entry of access information by the controller; signing at the controller the second digital security certificate with the rescue-secret private key and sending the signed second digital security certificate from the controller to the UE; and after verifying the signed second digital security certificate at the UE using the rescue-secret public key, the UE resumes communication with the controller over another secure communication channel using the second digital security certificate. determining by the UE that the first digital security certificate has expired; sending by the UE a certificate provisioning request message over an unsecure channel to the controller as a request to the controller to provision the UE with the second digital security certificate, the certificate provisioning request message being signed by a private key of the first public/private key pair; using a public key of the first public/private key pair at the controller to verify the certificate provisioning request message, and once verified, accessing at the controller the rescue-secret private key stored in secure memory at the controller via entry of access information by the controller; signing at the controller the second digital security certificate with the rescue-secret private key and sending the signed second digital security certificate from the controller to the UE; and after verifying the signed second digital security certificate at the UE using the rescue-secret public key, the UE resumes communication with the controller over another secure communication channel using the second digital security certificate.