A method comprising: receiving (S502) a portable device (116; 200A; 200B; 306; 610), comprising a secure element and a biometric device , and an enrollment device (114; 300; 400) in a first communication ; receiving (S504) an enrollment identifier in a second communication ; coupling (S506) the portable device with the enrollment device; inputting (S508) the enrollment identifier into the enrollment device while the portable device is coupled to the enrollment device, wherein the enrollment device provides the enrollment identifier to the portable device, the portable device verifies that the enrollment identifier is valid, and the portable device thereafter allows a user to input a biometric of the user into the portable device; inputting (S510) the biometric into the biometric device of the portable device; uncoupling (S512) the enrollment device and the portable device; subsequently recoupling the portable device with the enrollment device; inputting the enrollment identifier into the enrollment device while the portable device is recoupled to the enrollment device, wherein the enrollment device provides the enrollment identifier to the portable device, the portable device verifies that the enrollment identifier is valid, and wherein the portable device thereafter allows the user to input a further additional biometric of the user into the portable device; receiving an indication at the enrollment device to delete the one or more biometrics stored at the portable device, wherein receiving the indication causes the portable device to delete the one or more biometrics stored at the portable device; and subsequently uncoupling the enrollment device and the portable device. receiving (S502) a portable device (116; 200A; 200B; 306; 610), comprising a secure element and a biometric device , and an enrollment device (114; 300; 400) in a first communication ; receiving (S504) an enrollment identifier in a second communication ; coupling (S506) the portable device with the enrollment device; inputting (S508) the enrollment identifier into the enrollment device while the portable device is coupled to the enrollment device, wherein the enrollment device provides the enrollment identifier to the portable device, the portable device verifies that the enrollment identifier is valid, and the portable device thereafter allows a user to input a biometric of the user into the portable device; inputting (S510) the biometric into the biometric device of the portable device; uncoupling (S512) the enrollment device and the portable device; subsequently recoupling the portable device with the enrollment device; inputting the enrollment identifier into the enrollment device while the portable device is recoupled to the enrollment device, wherein the enrollment device provides the enrollment identifier to the portable device, the portable device verifies that the enrollment identifier is valid, and wherein the portable device thereafter allows the user to input a further additional biometric of the user into the portable device; receiving an indication at the enrollment device to delete the one or more biometrics stored at the portable device, wherein receiving the indication causes the portable device to delete the one or more biometrics stored at the portable device; and subsequently uncoupling the enrollment device and the portable device. <EOS>