A method in a user equipment configured to communicate with two cell groups including a first cell group and a second cell group, communication with the two cell groups comprising establishment of a first medium access control (MAC) entity and a second MAC entity, the first MAC entity associated with the first cell group and the second MAC entity associated with the second cell group, the method comprising:
- receiving a first connection reconfiguration message to configure at least one split bearer with a first logicalchannelidentity, terminated in the second cell group;
- applying a first security key for communication with the first cell group and a second security key for communication with the second cell group;
- receiving a second connection reconfiguration message, the second connection reconfiguration message including a counter having a count value for deriving a third security key for communication with the second cell group, wherein the third security key that was derived for communication with the second cell group is based on the count value of the received counter;
- and
- applying the third security key for communication with the second cell group, while continuing to use the first security key and the first MAC entity for communication with the first cell group, where continuing to use the first MAC entity includes not resetting the first MAC entity.