SGP32 eSIM for IoT: Hype or Reality?

The eSIM landscape is evolving rapidly, with GSMA’s upcoming SGP32 specification generating significant buzz, particularly in the IoT domain. Rather than rehashing the technical details that many in the industry are already discussing, let’s focus on why SGP32 matters, the opportunities it brings, and how businesses can prepare. At the end, we’ll explore what MobileFi brings to the table in navigating this next-gen IoT eSIM standard, its unique cross-domain expertise, and its synergy with ecosystem players to unlock new value for enterprises.

SGP32: A Game Changer for IoT eSIM

First, it’s essential to understand why SGP32 is considered a game-changer. Unlike its predecessors (SGP.02 eSIM for M2M and SGP.22 eSIM for Consumer), SGP32 is designed specifically with IoT in mind, addressing the needs of diverse IoT devices, from simple sensors to complex robotics.

A complete SGP32-based system comprises several key components, each playing a vital role in a holistic solution:

• eUICC (Embedded Universal Integrated Circuit Card): The eUICC is an embedded chip that supports remote SIM provisioning, allowing multiple operator profiles to be stored and managed without physical SIM changes. It's worth noting that eUICC can also have removable form factors.
• eIM (eSIM IoT Remote Manager): The eIM manages remote operations for eSIM profiles, enabling tasks like downloading, , enabling, disabling, switching, and deleting profiles on IoT devices, either individually or in bulk.
• IPA (IoT Profile Assistant): The IPA facilitates communication between the eSIM and the eIM for profile management, available as either an on-device application (IPAd) or integrated within the eUICC (IPAe).
• SM-DP+ (Subscription Manager - Data Preparation), responsible for securely preparing and delivering operator profiles to the eUICC.
• SM-DS (Subscription Manager - Discovery Service), aiding in the discovery and selection of available profiles on the network.

The SGP32 standard fosters flexible interoperability between components from various vendors, ensuring that organizations can mix and match solutions without being locked into a single provider, ultimately driving innovation and scalability in IoT deployments.

Key benefits of SGP32 include:

1. Preventing Vendor Lock-in: SGP32 introduces mechanisms that foster interoperability with a more open eSIM ecosystem, allowing businesses to avoid long-term dependence on a single vendor. This ensures businesses can switch providers or scale operations more flexibly without getting locked in.
2. Broad Device Support: SGP32 supports a wide range of devices, from resource-constrained devices that do not have a UI and rely on lightweight UDP protocols to more sophisticated devices needing TCP support. This makes it highly adaptable across various industries and use cases.
3. Reduced CapEx and OpEx: With streamlined eSIM provisioning and management, enterprises can significantly reduce both upfront capital expenses (CapEx) and ongoing operational expenses (OpEx). The simplified management of multiple subscriptions and vendors lowers the cost of IoT deployments at scale.

In our view, SGP32 is well positioned to replace the legacy SGP.02 standard in the future, offering a more modern and scalable solution for M2M and IoT devices.

Where We Stand: SGP32's Current Status

Despite its promise, SGP32 is not yet fully commercially ready. The test and compliance frameworks, such as SGP.33 (eSIM IoT Test Specification), have not been finalized. Without these, SGP32-based solution providers cannot guarantee full compliance, which is critical for large-scale, secure deployments. A realistic timeline for fully compliant SGP32 solutions is expected to be mid-2025 or beyond.

Below are the snapshots of the current status of SGP.32 eSIM IoT Technical Specification and SGP.33 eSIM IoT Test Specification as of September 25, 2024:

As it shows, the updated SGP.33 spec, with the associated eUICC GlobalPlatform Test Suite, is still unavailable, meaning vendors won’t be able to fully certify their products until those test suites are in place.

If so, why are some vendors claiming they are SGP32 ready?

There are several possible explanations for this, including:

• They may not fully understand the sophistication of the eSIM tech stack and the ecosystem.
• They have a pre-standard implementation of SGP32 but are exaggerating its readiness.
• They are using SGP.22 (eSIM for Consumer) or proprietary technologies which mimic certain functionalities of SGP32 but claim full compliance.

What Should Businesses Do Now?

Given this, what can businesses do while waiting for fully compliant SGP32 solutions?

1. Choose Vendors Carefully: Select vendors that are transparent about their current capabilities and are actively working toward SGP32 compliance. They should be willing to share a clear roadmap and demonstrate their approach to ensuring future compatibility.
2. Engage in PoCs (Proof of Concepts): Now is the perfect time to engage in pilot projects. PoCs will give your organization practical experience with eSIM technologies, helping you identify potential challenges and opportunities before committing to large-scale rollouts.
3. Leverage Comprehensive Expertise: Partner with advisors who have deep cross-domain expertise across the entire IoT ecosystem—from eUICC, RSP (Remote SIM Provisioning), devices, and networks to security and cloud. Given the complexity of the tech stack, an ideal partner is one who understands the entire landscape, from chip-to-cloud.

MobileFi’s Unique Role in SGP32 Adoption

This is where MobileFi steps in. MobileFi is not just another eSIM provider or consultant. Our ecosystem-oriented business model positions us uniquely to help businesses succeed with SGP32.

MobileFi's specialities include:

• Chip and Device Expertise: We offer in-depth expertise in eUICCs, SIM profiles, eSIM/iSIM RSP, applets, SIM OS, and device-level integration.
• Connectivity and Networks: Our knowledge spans a range of network technologies, including 5G/LTE, LPWAN, satellite/NTN, Wi-Fi, and private networks, along with expertise in Connectivity Management Platforms (CMPs).
• Chip-to-Cloud Security: We utilize advanced security technologies across SIM, device, network, and cloud layers, including APN, VPN, and IoT SAFE. By addressing region-wide regulations (such as GDPR and CCPA), industry-specific standards (like HIPAA and PCI DSS), and broader cybersecurity frameworks and best practices (including NIST CSF 2.0 and Zero Trust), we ensure security and compliance at every stage—from the chip to the cloud.
• Cross-Domain Expertise: With extensive experience in Information Technology (IT), Communication Technology (CT), Internet of Things (IoT), and a forward-looking approach to the convergence with Operational Technology (OT), we continuously embrace the latest advancements such as AI, blockchain, and more to stay at the forefront of innovation. Notably, we were honored as one of the top 3 award winners at the recent AI Agent Hackathon hosted at Microsoft HQ, standing out among 21 participating teams.

In addition to our cloud-native Connectivity-as-a-Service platform, MobileFi leverages deep domain expertise and strategic partnerships across the ecosystem to deliver comprehensive, collaborative, and mutually beneficial solutions:

• eUICC and eSIM RSP Vendors: We collaborate with leading hardware and software providers, including SGP32 vendors, to deliver optimized, complementary solutions tailored to the specific needs of each client.
• Device OEMs and ODMs: For device manufacturers, we provide expert service on adopting the right IoT Profile Assistant (IPA), whether IPAd (in the device) or IPAe (embedded in the eUICC), to maximize flexibility and efficiency.
• MNOs, MVNOs, and CMPs: We help connectivity providers expand their IoT offerings and modernize technology platforms by integrating eIM, along with SM-DP+ and SM-DS, as part of next-generation RSP orchestration.
• Private Network Operators: We specialize in creating custom SIM profiles tailored to private 5G and LTE networks, ensuring they meet your network's unique requirements and remain compatible with evolving technical standards.
• Cloud, Edge, IoT Platforms, and VAS Providers: We work closely with cloud and edge platforms, IoT systems, and value-added service providers to enable seamless integration of eSIM RSP with cloud applications, device management, and security services.

Why MobileFi is the Right Partner

With the complexity of SGP32 and the broader IoT landscape, businesses need more than just a provider—they need a partner who understands the full spectrum of chip-to-cloud solutions. At MobileFi, in collaboration with our sister consulting firm, RecV Group LLC, and an extensive network of value-added partners, we deliver innovative, tailor-made services that help businesses plan, select, customize, and optimize their SGP32 solutions for scalable, secure, and future-proof IoT deployments.

Whether you’re a device OEM looking to integrate eSIM solutions, an MNO building new IoT services, or an enterprise seeking to scale globally, MobileFi’s comprehensive expertise can guide you through the process.

By partnering with MobileFi, your business will be well-positioned to fully leverage SGP32 and IoT connectivity, ensuring you stay ahead in a rapidly evolving technological landscape.

Conclusion

SGP32 will undoubtedly transform the eSIM landscape for IoT, but businesses need to approach its adoption with both enthusiasm and caution. The standard is still maturing, and fully compliant solutions won’t be available until 2025 or later. However, by starting PoCs now, choosing the right partners, and engaging with experts like MobileFi, you can be well-positioned to take advantage of SGP32’s potential when the time is right.

MobileFi’s cross-domain expertise, strong ecosystem relationships, and commitment to providing scalable, secure solutions make us the ideal partner to navigate this exciting yet complex journey toward seamless SGP32 adoption.