SGP.32: The Future of Remote SIM Provisioning for IoT Devices

There’s a lot of excitement around the latest Remote SIM Provisioning standard, named after its specification published by the GSMA mid 2024: SGP.32. This article walks you through the standard and provides an update on its market adoption.

Can you remind me again about SGP.32?

It all starts with embedded SIMs, or eSIMs, which are soldered directly onto IoT devices. eSIMs are becoming increasingly popular due to their compact size, enhanced security and improved efficiency as they can be integrated into the manufacturer’s production line. However, the most significant advantage is the freedom to switch providers. Replacing plastic SIMs across a deployed fleet of devices is highly impractical. While traditional SIM cards do not create vendor lock-in, the threshold to migrate devices to a different provider usually results in companies sticking to one vendor, forever. Although an eSIM itself cannot be swapped, its profile or identity on this eSIM can be remotely updated. This process for remote SIM provisioning of IoT devices is standardized under the SGP.32 specifications.

It already works on my phone, what’s the big deal?

Phones use a similar process to update the profiles of eSIMs (as defined in GSMA’s SGP.22 specification). eSIMs on phones are managed one at a time, with user-friendly interfaces (like QR codes or SMS verification). IoT devices usually don’t have such luxury. They are often deployed in remote locations, with minimal bandwidth, memory, and power. 

To address these challenges, industry experts developed an updated process designed for resource-constrained devices. This process requires minimal data throughput, no physical interactions with the devices, and enables management of multiple devices simultaneously.

How does it work, really?

The SGP.32 specification revolves around three key components that enable efficient and secure profile management, the IPA, eIM and SM-DP+.

IPA (IoT Profile Assistant)

The IPA is a piece of software that operates on the IoT devices to manage their profiles. When embedded directly into the SIM, it is known as IPAe (embedded IPA). When installed on the device, typically within the cellular module, it is called IPAd (device-based IPA). Acting as a local agent, the IPA interacts with one or more eIM instances to facilitate profile management.

eIM (eSIM IoT Remote Manager)

The eIM is a cloud-based solution that communicates with IPAs to manage SIM profile management. It connects with backend systems that handle SIM provisioning (SM-DP+) and can direct the IPA to enable, disable, delete, or download profiles.

SM-DP+ (Subscription Manager Data Preparation Plus)

The SM-DP+ is a cloud-based service which stores, encrypts, and delivers SIM profiles. Once requested by the eIM, the IPA downloads a new SIM profile from the SM-DP+ and provisions it to the eUICC.

Let’s be honest, does everything work?

As of early 2025, the technology is still in its infancy. The specifications have only recently been solidified and the market is only starting to implement them. Initial testing environments have been established, allowing experimentation and early-stage validation.

Currently, several industry players are working on integrating SGP.32. SIM vendors like Kigen and G+D have initial versions of the IPAe running on their SIMs, and provide corresponding eIM solutions. As of early February 2025, module makers have yet to release modules containing the IPAd. Connectivity providers like Monogoto are collaborating with both module manufacturers and SIM vendors to integrate the SGP.32 process into their connectivity cloud platforms.

Is it ready for large-scale production? Not yet. However, the market is gearing up to test and refine the process, offering developers an opportunity to explore its potential. 

Conclusion

While the potential is enormous, widespread adoption will take time. The industry needs to prepare eSIMs for certification and module makes need to release new firmware which embeds the IPA. 

Despite these challenges, now is the perfect time to get started. Early adopters can gain a competitive edge by exploring the technology and preparing for future market demands.