A provisioning system, comprising: a provisioning control apparatus; a provisioning equipment server; and one or more electronic components; wherein the provisioning control apparatus is configured to be coupled to the provisioning equipment server, the provisioning equipment server being electrically connectable with the one or more electronic components for provisioning the one or more electronic components with security sensitive provisioning data, each electronic component comprising a security enclave and a non-volatile memory, wherein the provisioning control apparatus comprises: a processor configured to encrypt the security sensitive provisioning data using a secure vault encryption key for obtaining encrypted security sensitive provisioning data; and a communication interface configured to securely provide the secure vault encryption key to the provisioning equipment server for storing the secure vault encryption key in the security enclave of the electronic component, wherein the communication interface is further configured to provide the encrypted security sensitive provisioning data to the provisioning equipment server for storing the encrypted security sensitive provisioning data in the non-volatile memory of the electronic component and thereby creating a secure vault in the non-volatile memory of the electronic component for securely storing the encrypted security sensitive provisioning data, wherein the secure vault is unique for the electronic component, and wherein the communication interface is further configured to provide a secure vault API to the provisioning equipment server for storing the secure vault API in the non-volatile memory of the electronic component, wherein the secure vault API is configured to decrypt the encrypted provisioning data stored in the secure vault based on the secure vault encryption key stored in the security enclave to provide access to the secure vault, wherein the secure vault API is executed by a secure boot software. a provisioning control apparatus; a provisioning equipment server; and one or more electronic components; wherein the provisioning control apparatus is configured to be coupled to the provisioning equipment server, the provisioning equipment server being electrically connectable with the one or more electronic components for provisioning the one or more electronic components with security sensitive provisioning data, each electronic component comprising a security enclave and a non-volatile memory, wherein the provisioning control apparatus comprises: a processor configured to encrypt the security sensitive provisioning data using a secure vault encryption key for obtaining encrypted security sensitive provisioning data; and a communication interface configured to securely provide the secure vault encryption key to the provisioning equipment server for storing the secure vault encryption key in the security enclave of the electronic component, wherein the communication interface is further configured to provide the encrypted security sensitive provisioning data to the provisioning equipment server for storing the encrypted security sensitive provisioning data in the non-volatile memory of the electronic component and thereby creating a secure vault in the non-volatile memory of the electronic component for securely storing the encrypted security sensitive provisioning data, wherein the secure vault is unique for the electronic component, and wherein the communication interface is further configured to provide a secure vault API to the provisioning equipment server for storing the secure vault API in the non-volatile memory of the electronic component, wherein the secure vault API is configured to decrypt the encrypted provisioning data stored in the secure vault based on the secure vault encryption key stored in the security enclave to provide access to the secure vault, wherein the secure vault API is executed by a secure boot software. a processor configured to encrypt the security sensitive provisioning data using a secure vault encryption key for obtaining encrypted security sensitive provisioning data; and a communication interface configured to securely provide the secure vault encryption key to the provisioning equipment server for storing the secure vault encryption key in the security enclave of the electronic component, wherein the communication interface is further configured to provide the encrypted security sensitive provisioning data to the provisioning equipment server for storing the encrypted security sensitive provisioning data in the non-volatile memory of the electronic component and thereby creating a secure vault in the non-volatile memory of the electronic component for securely storing the encrypted security sensitive provisioning data, wherein the secure vault is unique for the electronic component, and wherein the communication interface is further configured to provide a secure vault API to the provisioning equipment server for storing the secure vault API in the non-volatile memory of the electronic component, wherein the secure vault API is configured to decrypt the encrypted provisioning data stored in the secure vault based on the secure vault encryption key stored in the security enclave to provide access to the secure vault, wherein the secure vault API is executed by a secure boot software.