Abstract: A communication system is provided that securely provisions configuration information to a mobile device without requiring that a shared key (that is, shared with a radio programming device) be pre-loaded on the mobile device. In various embodiments, the mobile device provides a radio programming device with access point connection information via a scanning tool. The radio programming device then uses the access point connection information to access the mobile device when the mobile device is operating as an access point and to provide the mobile device with information for accessing the radio programming device and with an encryption key. The mobile device converts to operation as a client device and then uses the access information and the encryption key to obtain configuration information from the radio programming device.