An encryption capable communication device (10) can include a transceiver (38 and 44) and a processor (12) coupled to the transceiver. The processor can be programmed to receive notification of a secure call alert indicative of a desire for secure communications between an alerting device and the encryption capable communication device serving as a recipient device and further cause the recipient device to switch (64) to a secure mode in response to receipt of the notification. The processor can be further programmed to initiate a key exchange (67) between the alerting device and the recipient device if needed and automatically respond (70) to the secure call alert by the recipient device in the secure mode when a user of the recipient device selectively responds to the secure call alert. The processor can also establish a symmetric traffic key during the key exchange using Automatic Public Key exchange techniques.