Unlocking the Future of IoT with SGP.32

Introduction

The GSMA's new SGP.32 specification addresses crucial market challenges, offering a streamlined and secure approach for managing IoT eSIMs, particularly for network-constrained and UI-constrained devices.

It has introduced some key features like the eSIM IoT Manager (eIM) and IoT Profile Assistant (IPA) to simplify profile management and enable interoperability.

In this article we’ll explore the progression of eSIM standards, take a look at the benefits of SGP.32 for key IoT use-cases, consider some of the most important new features, and give some insights into how best to prepare your business to leverage those advantages.  

As the industry readies itself for SGP.32, we will provide an overview of how 1GLOBAL is already leveraging many of its advancements, offering a robust and cost-effective global IoT connectivity solution with flexible plans, real-time monitoring, and a user-friendly management platform.

The eSIM bottleneck

With their technological and commercial benefits, and the speed with which the technology is changing the market, it’s easy to assume that embedded SIMs (eSIM) are already the default connectivity option for all Internet of Things (IoT) traffic.

By the start of 2025 there’s still a long way to go before it’s even in the majority. Industrial Internet of Things research shows that there were 650 million eSIM-capable IoT connectivity modules installed into new devices in 2024. Objectively that’s still a lot, but also only represents 33% of all cellular-capable IoT devices shipped in the year.

The essential advantage that eSIM tech offers the IoT industry is its capability for remote SIM provisioning (RSP).

However, its adoption has been hindered by challenges including complex integrational dependencies and the number of stakeholders and cooperating parties required to run any one project. 

To address these issues, the GSMA introduced the SGP.32 spec, designed to simplify the IoT eSIM framework for both manufacturers and users by replacing the complexities of required pre-integrations with interoperability and open use, thus paving the way for wider eSIM adoption. 

What are the GSMA standards for eSIM?

There are currently three eSIM options provided by the GSMA for IoT professionals, each built to answer growing specificity in use-cases, deployment plans and network architecture.

SGP.02

First released in 2016, the .02 spec was designed to meet the acceleration in fully machine-to-machine (M2M) IoT networks, where devices might go through their whole operational lifecycle without a human interacting with it. 

It remains the default industrial IoT standard, with robust simplicity its chief strength, but became increasingly limited under demands for more sophisticated features such as low-power wide area network (LP-WAN) tech.

SGP.22

Introduced a year later, this standard was made for eSIMs in consumer devices that would expect to see a lot more human interaction and novel features, such as smartphones, wearables, point-of-sale devices, etc.

As such, it is set up to make remote provisioning as simple for network operators and smartphone users as possible.

SGP.32

The most recent eSIM spec, SGP.32 was first introduced in 2023 with its technical details being progressively released over the following months. 

Despite its rocketing popularity, eSIM tech for IoT is still evolving, and this new spec has been designed to provide a happy medium between the industrial robustness of .02 and the consumer convenience of the .22 spec. 

Why is SGP.32 needed?

As the IoT ecosystem grows to encompass new verticals and use-cases, there are an increasing number of IoT devices deployed that have limited bandwidth (network constrained), limited or no User Interface (UI constrained), and limited power (power constrained).

In particular, network constrained and UI constrained devices across the IoT ecosystem present significant challenges as they cannot be optimally managed using the existing GSMA Consumer and M2M Specifications.

For example, the M2M Specification requires an SMS or HTTPS connection for profile downloads and management, which network constrained devices cannot support.

Integration complexity

A challenge associated with the M2M Specification is that it requires complex bilateral integration processes between service providers and the different operators (as secure links must be established between the SM-SR and SM-DP), which makes it difficult to switch profiles between providers.

While this model is highly resilient and works for verticals such as automotive, it is unsuited for multiple IoT use-cases. 

The Consumer Specification offers a more streamlined and scalable approach, lifting the previous version's constraints on integration and network access, and eliminating the need for pre-established links between the device and the SM-DP+.

New features in SGP.32

The GSMA developed the new eSIM specifications to tackle known, real world connectivity issues. At its core, the role of SGP.31/32 is to transition from rigid integrations to interoperable use-of-service, eliminating the over-dependency between industry players.

Industry experts have characterized SGP.32 as an evolution of the consumer specification, incorporating proven elements and adding features specifically designed for large-scale IoT deployments.

There’s a long list of new features available direct from the GSMA, but two are of particular significance: The eSIM IoT Manager and IoT Profile Assistant.

eSIM IoT Manager (eIM)

The eSIM IoT Manager (eIM) is essentially a command and coordination hub between systems managing network identities, such as the Device Management Platform, eSIM profile storage SM-DP+, and the IoT eSIM itself.

IoT Profile Assistant (IPA)

The IoT Profile Assistant (IPA) enables transport layer between the eSIM and server-side platforms. OEMs can choose to embed the IPA directly on the eSIM (IPAe) for out-of-the-box functionality, or run it on the device (IPAd) for greater control.  The IPA mediates between eIM, SM-DP+ and IoT eSIM embedded in the device, to securely download and activate profiles.

SGP.32 IoT use cases

Transport & logistics

Via the eIM, the deployment and remote management of large fleets of IoT devices is made possible across different regions and networks. A logistics operator deploying asset trackers in shipping containers across multiple routes can flexibly connect to different network providers across jurisdictions.

Automotive

Flexibility to choose service provider, reliability and resiliency and fallback / rollback mechanisms allows connectivity in emergency situations. An automotive manufacturer can access a wider number of connectivity options with less bilateral integration efforts compared to deployments using the M2M Specification. 

Smart metering

SGP.32 network constrained capabilities mean devices like electricity and water meters can use CoAP /User Datagram Protocol (UDP) between themselves and the eIM. Utilities providers deploying smart meters across offshore windfarms can ensure connectivity over the full device lifespan.

Smart Cities

The new spec reuses all the secure communications defined in the Consumer Specification, plus new protocols to secure the communication between the eIM and IPA/eUICC in terms of integrity, authenticity, and confidentiality. A municipality deploying IoT sensors for critical infrastructure such as a traffic management system can ensure that data is not compromised.

Device manufacture

Streamlined device production and accelerated time-to-market with options such as the eUICC being provided without eSIM profile for maximum deployment flexibility, to be later added in the field. The manufacturer doesn't have to select operators during production, removing the need for multiple production lines.

Energy

Enhanced operational efficiency through wireless connectivity in challenging terrains. A network of physical objects integrated with remote sensors, surveillance systems, machine learning, and cloud connectivity is deployed across all operational stages, including devices in difficult areas such as oil fields.

Healthcare

SGP.32 ensures the seamless connectivity provider swap, if needed, for instant feedback and timely intervention. Provides real-time data, enabling timely interventions and improved patient outcomes, alleviating the strain on healthcare practitioners and facilities.

SGP.32 security

Multiple surveys of IoT professionals or connected device manufacturers over the last few years have repeated the finding that the biggest obstacle to wider IoT eSIM adoption is concern about security. 

As IoT networks have grown in scale and sophistication, this concern has grown, since every device connected to an IoT network represents a possible cyberattack entry point.

This is what’s known as the ‘perception layer’ of an IoT ecosystem, and it’s a surface that is indeed highly vulnerable to breach.

This could come in the form or device spoofing, signal jamming, node capturing or just good old-fashioned physical tampering with intent to steal data, install malware, wholesale device theft or even complete system takeover.

The best IoT devices are often very good at their job by being very simple, which doesn’t leave a lot of spare processing power and memory for running sophisticated security or anti-intrusion features like firewalls or encryption.

The SGP.32 spec is being presented as a significant security upgrade for a diverse range of IoT ecosystems.

With greater capacity for RSP and profile management, manufacturers have more reasons than ever to use eSIM technology, which mitigates many of the risks inherent to physical SIM cards.

SGP.32 security features include cryptographic authentication processes to ensure only genuinely authorized users can manage device profiles.

This establishes a secure link between the eSIM IoT Remote Manager and the eUICC within the IoT device, effectively preventing unauthorized access, even if someone attempts to physically interfere.

SGP.32 & eSIM adoption

It’s been solidly established that all IoT use-cases benefit from the agility and adaptability of eSIM technology. Some features are arguably more sector specific, such as the roaming benefits that favor travel and logistics use-cases.

Most of the other features, such as enhanced security, are of clear advantage to all industries.

Regardless, eSIM adoption in IoT levelled out after a meteoritic start, with the rate of new adoption plateauing over the last two years.

This has been attributed to the sectors that could easily switch or adopt the tech having already done so, and the remaining majority of the market being either unconvinced or simply not served by the previous GSMA protocols. 

With the introduction of SGP.32, industry-wide adoption is expected to accelerate again throughout 2025, although probably not until the second half of this year.  

 SGP.32’s advanced features will require significant strategy review, testing, integration, and compliance by manufacturers and operators before it can be usefully deployed.

Getting ready for SGP.32 with 1GLOBAL

SGP.32 is set to accelerate IoT eSIM technology, delivering enhanced flexibility, scalability, and energy efficiency for deployments worldwide.

While the full potential of its features will continue to be demonstrated over time, 1GLOBAL's cutting-edge IoT eSIM solutions already leverage many of these advancements. 

Your business can immediately gain all the benefits of dynamic network switching, regulatory compliance, and uninterrupted connectivity.

1GLOBAL IoT technology reliably connects your fleet, while having the agility and scalability to innovate and ramp up to whatever and wherever the next industry paradigm takes you. 

Global scope

1GLOBAL offers the world’s only truly global IoT network, eliminating the inefficiencies and unpredictability of regional solutions, plus:

Streamlined global service
Unified under a single contract, delivering economies of scale and simplified management.

Predictable costs
Shared, dynamic plans reduce spend volatility and eliminate bill shock.

Improved productivity
Seamless connectivity empowers even the most mobile fleets to communicate effortlessly, regardless of location.

 Enhanced control
A centralized platform provides simplified management, data provision and cost- awareness across all regions.