Virtual subscriber identity module

In a mobile trusted platform (MTP) residing on a wireless transmit/receive unit (WTRU), wherein the MTP comprises at least a first and a second trusted subsystem, a method comprising:

• establishing, by the first trusted subsystem that is configured to store and provide credentials related to a manufacturer of the MTP or the WTRU, a second trusted subsystem controlled by a remote stakeholder, the second trusted subsystem being separate and insulated from the first trusted subsystem such that the credentials related to the manufacturer cannot be accessed by the second trusted subsystem;
• receiving, at the second trusted subsystem, a message from a point of sale (POS), the message having been digitally signed by the POS and the message comprising a certificate of the POS digitally signed by the remote stakeholder;
• and
• verifying, by the second trusted subsystem, the digital signature of the POS on the message and verifying the digital signature of the remote stakeholder on the certificate, whereby a trustworthiness of the POS is certified by the remote stakeholder.