1. A method, comprising: receiving at a personal identification device a public key before biometric data associated with enrollment is received; sending an identifier from the personal identification device to a party based on the public key before biometric data associated with enrollment is received, the identifier being uniquely associated with the personal identification device; receiving at the personal identification device a digital certificate from the party based on the identifier before biometric data associated with enrollment is received; and disabling functionality within the personal identification device except that the personal identification device is in a wait state associated with future enrollment.