Abstract: A method and apparatus for securely writing confidential data from an issuerer to a customer smart card at a remote location includes, establishing a communication link between a retailer data terminal device at the remote location and the issuer's secure computer. A communication link is established between a secure terminal device, which includes a smart card reader/writer, and the data terminal device. The retailer is authenticated to the issuer and the issuer to the retailer by means of a retailer smart card presented to the secure terminal device. A session key is established for enciphering data traffic between the secure terminal device and the issuer's computer using the retailer smart card. The customer smart card is presented to the secure terminal device. Confidential customer data is enciphered using the session key and it is written from the issuer's computer to the customer smart card.