Digital letter of approval (dloa) for device compliance

A method of provisioning an application to a device, the method comprising:

• by a subscription manager (SM) server:
• receiving a challenge from an embedded universal integrated circuit card (eUICC) via the device that includes the eUICC;
• signing the challenge with a key of the SM server;
• sending the signed challenge to the device;
• receiving a signed version of a device DLOA;
• performing a verification of the signed version of the device DLOA;
• when the verification indicates that the signed version of the device DLOA was signed with a key of the eUICC:
• proceeding with provisioning of the application from the SM server to the eUICC or to the device;
• and
• when the verification indicates that the signed version of the device DLOA was not signed with a key of the eUICC:
• not proceeding with provisioning of the application from the SM server to the eUICC.

A method of obtaining an application by a device from a subscription manager (SM) server, the method comprising:

• by the device, which includes an embedded universal integrated circuit card (eUICC):
• sending device information to the eUICC;
• receiving a signed version of the device information from the eUICC;
• sending the signed version of the device information to the SM server;
• and
• receiving, responsive to the sending the signed version of the device information, an application from the SM server to be provisioned to the eUICC or to the device.