Method to manage subscriptions in a provisioning server able to communicate with a Hardware Security Module having an HSM key, said method comprising the preliminary steps of: - storing, in the provisioning server, scripts (Scr) corresponding to the creation of subscriptions, said scripts being encrypted using a storage key (Ks), said scripts ((Scr)Ks) being intended to be loaded in secure devices (SEi), each of these secure devices (SEi) being associated with a secure device key (Kei), - storing said storage key (Ks) and said secure device keys (Kei) encrypted using the HSM key in the provisioning server, said method further comprising a load subscription phase comprising the following steps of, when the provisioning server is requested to load a given script (ScrA) on a secure device: - checking if the given script (ScrA) has been loaded on any secure device, - in the case such a previous loading is not appearing, providing the secure device key ( K) and the storage key ((Ks)K) as encrypted and stored to a load function of the Hardware Security Module in a load request, - retrieving, from the load function of said Hardware Security Module, the storage key ((Ks)Ke1)K) encrypted using the provided secure device key and the HSM key K, and an APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1), encrypted using the provided secure device key, to put the retrieved storage key ((Ks)Ke1) also encrypted using the provided secure device key, - overwriting the storage key as stored ((Ks)K), with the storage key (((Ks)Ke1)K) encrypted using the secure device key and the HSM key returned by the Hardware Security Module in the previous step, - forwarding the APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1) to the secure device, and sending the script (ScrA) as stored to the secure device, said method further comprising a reload subscription phase comprising the following steps of, in the case a previous loading is appearing during the checking step: - providing the secure device key ( K) and the storage key (((Ks))Ke1)K) as encrypted and stored to a reload function of the hardware security module in a reload request, - retrieving, from the reload function of said Hardware Security module, the storage key (((Ks)Ke1)K) encrypted using the provided secure device key and the HSM key and an APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1), encrypted using the provided secure device key, to put the retrieved storage key ((Ks)Ke1) also encrypted using the provided secure device key, - forwarding the APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1) to the secure device and sending the script ((ScrA)Ks) as stored to the secure device. - storing, in the provisioning server, scripts (Scr) corresponding to the creation of subscriptions, said scripts being encrypted using a storage key (Ks), said scripts ((Scr)Ks) being intended to be loaded in secure devices (SEi), each of these secure devices (SEi) being associated with a secure device key (Kei), - storing said storage key (Ks) and said secure device keys (Kei) encrypted using the HSM key in the provisioning server, - checking if the given script (ScrA) has been loaded on any secure device, - in the case such a previous loading is not appearing, providing the secure device key ( K) and the storage key ((Ks)K) as encrypted and stored to a load function of the Hardware Security Module in a load request, - retrieving, from the load function of said Hardware Security Module, the storage key ((Ks)Ke1)K) encrypted using the provided secure device key and the HSM key K, and an APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1), encrypted using the provided secure device key, to put the retrieved storage key ((Ks)Ke1) also encrypted using the provided secure device key, - overwriting the storage key as stored ((Ks)K), with the storage key (((Ks)Ke1)K) encrypted using the secure device key and the HSM key returned by the Hardware Security Module in the previous step, - forwarding the APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1) to the secure device, and sending the script (ScrA) as stored to the secure device, - providing the secure device key ( K) and the storage key (((Ks))Ke1)K) as encrypted and stored to a reload function of the hardware security module in a reload request, - retrieving, from the reload function of said Hardware Security module, the storage key (((Ks)Ke1)K) encrypted using the provided secure device key and the HSM key and an APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1), encrypted using the provided secure device key, to put the retrieved storage key ((Ks)Ke1) also encrypted using the provided secure device key, - forwarding the APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1) to the secure device and sending the script ((ScrA)Ks) as stored to the secure device.