This has now been resolved. The issue was that the encryption key payload and index did not match between the card provider and the push provisioning SDK provider we are using. After fixing the payload and index everything started working.