A method of bootstrapping a device by a bootstrap server, the method comprising: receiving, at the bootstrap server from the device, bootstrap data to enable the bootstrap server to determine that the device is to be provisioned with a device account identifier; verifying, at the bootstrap server, that the device is eligible to obtain a device account identifier based on or in response to the bootstrap data; obtaining, at the bootstrap server, a device account identifier assigned to the device based on or in response to the determination that the device is eligible; provisioning, from the bootstrap server to the device, first credential data comprising the device account identifier assigned to the device.