Scaling Up – How SGP.32 and Remote SIM Provisioning are the future of global IoT

As of mid-2025, the widespread availability and full commercial deployment of SGP.32 is well underway. This latest spec from the GSMA is a dedicated eSIM remote provisioning model, specifically designed for Internet of Things (IoT) devices, and represents a hybrid approach combining the strongest features of all its predecessors.  

It’s the best of both worlds – the M2M automation of SGP.22 but without the vendor lock-in and lack of UI, and the SGP.02 consumer-style interoperability but without the need for constant admin intervention.  This is the flexibility that the IoT sector has needed since it started suffering from an industry-wide bottleneck.   

 This article will take a look at the connectivity issues that were impacting the industry, the root causes behind the slowdown, and how the flexibility of the GSMA’s SGP.32 is optimizing costs and elevating performance for the world’s leading IoT businesses.  SGP.32 breaks through the limitations that currently inhibit global IoT deployments due to physical SIM-based vendor lock-in and operational rigidity. Instead, SGP,32 delivers a flexible, interoperable, and software-driven provisioning model that gives full control back to fleet operators. 

The dangers of scaling  

For the last several years, the IoT space has seen diminishing returns from traditional connectivity models, even as the sector continues to experience explosive growth. Analyst projections suggest that the number of online devices will already surpass 75 billion units by the end of 2025.  

For a little context: the UN estimates there are currently around 8.2 billion humans, so that’s over nine IoT devices each.  

Both the growing scale and sophistication of IoT tech has revolutionized industries by enabling streamlined operations and new data-driven services.  

However, this expansion generates the same challenges faced by both individual businesses and whole industries when rapidly scaling: As your size increases, so does the complexity and cost of managing your connectivity.  

To make matters worse, this issue is not a linear one, where twice the scale simply means twice the costs. It’s more likely to be an exponential increase, where twice the scale can mean many times the cost. This creates a formidable barrier to realizing a massively connected fleet, which has caused many otherwise promising industry players to falter in taking the next step in their success.  

The core of this challenge is the limitations of traditional connectivity models, still essentially designed for consumer mobile phones rather than vast, autonomous fleets of networked machines that lack a user interface.  

Many businesses underestimate the true scope of IoT, viewing connectivity as a simple, one-time setup overhead.  

In reality, managing IoT at scale is a multi-phase process demanding robust, scalable infrastructure and strategic telco partnerships.  

Without this foresight, initial success with a few hundred devices unravels when trying to duplicate the process for thousands or millions, as systems become overwhelmed by the sheer volume of devices and data.  

Difficulties can also arise when IoT operators attempt remote updates to their fleets.  Machine-to-Machine (M2M) SIM provisioning for IoT is well-established and delivers a set of sophisticated capabilities for remote management, but the inherent lack of user interfaces at the hardware side can leave operators with little choice but to manually intervene – often at great cost. 

Limitations of traditional SIMs 

While also the backbone of the whole sector, the SIM’s traditional physical construction was increasingly causing logistical bottlenecks for large-scale IoT.  

While a tried and tested technology, with decades left to run in terms of its deployment value, scaling with physical SIM cards necessarily involves sourcing, stocking, and manually installing cards into each device in the line.    

This reliance on a physical component led to significant Stock-Keeping Unit (SKU) complexity. To sell a ‘smart’ product on the global market, a manufacturer had to create and manage multiple SKUs for that product, each tied to a specific carrier and region.  

This single-SKU-per-region model inflates production costs and inefficiencies in the supply chain, a problem redoubling as the number of deployment countries grows.  

While robust, easy to replace (once onsite) and ubiquitous in less developed regions, SIM cards are less than ideal for devices that are environmentally sealed or deployed in edge locations.  

Due to issues of reliability, obsolescence, and compliance, equipping a device with a physical SIM card crammed with hundreds of worldwide cellular profiles proved ineffective. ‘Permanent roaming’ is unreliable due to complex connections creating multiple failure points, and regional regulations now often disconnect roaming devices after 90-180 days to protect local carriers, making it unviable for long-term IoT deployments. 

From physical to digital eSIM connectivity 

The solution to these physical limitations is by going digital with an embedded SIM (eSIM). This secure, programmable chip can store multiple network operator profiles, and is typically formatted as a small, soldered chip integrated into a device's internal components. As well as being a physical space-saver and enhancing robustness, its key innovation is the ability to be reprogrammed remotely.    

This distance reprogramming is enabled by Remote SIM Provisioning (RSP), the secure, over-the-air (OTA) mechanism used to download, install, and manage network profiles on an eSIM without physical intervention. Together, eSIM and RSP have enabled a fundamental shift in the telco space, decoupling hardware from network credentials, and transforming connectivity into a flexible, software-defined service that yields a great deal of benefits for the IoT operator.    

The evolution of GSMA standards 

The Global System for Mobile Communications Association (GSMA) is the authority that ensures interoperability, security, and efficiency within the global mobile communications industry, and its standards refer to the technical specs it develops and approves to achieve this.  

The development of scalable IoT connectivity has already involved two earlier GSMA standards, each of which advanced the state-of-the-art but ultimately possessed limitations that necessitated that latest and IoT-specific specs. 

• SGP.02  
  Released in 2016, SGP.02 was designed for "headless" devices like industrial sensors. It operates on a server-driven push model, where a central server pushes profile changes to the device. However, SGP.02 was hindered by its dependence on the old SMS network to deliver updates. It created vendor lock-in as changing providers required complex system integrations between operators, making it difficult for businesses to switch.    

• SGP.22  
  Released in 2017 for consumer devices, SGP.22 introduced a client-driven pull model. The user initiates a profile download, often simply by scanning a QR code. This spec solved interoperability problems by creating a more open ecosystem where any compliant device could pull a profile from any compliant operator. However, SGP.22’s reliance on a user interface and human prompting made it unsuitable for managing massive fleets of autonomous, geographically disperse IoT devices.    

• SGP.32 - the breakthrough for IoT 
  SGP.32 for IoT, released in 2023, is essentially a combination of the best parts of the two previous specs. It preserves the open, interoperable back-end from the consumer world but replaces the human-driven local assistant with a newer machine-driven, remotely-controlled equivalent. This hybrid approach is now delivering the best of both worlds: the automation required for M2M without the vendor lock-in of SGP.02, and the interoperability of the consumer model without the need for prompting.    

SGP.32 core principles 

The GSMA SGP.32 spec is the first to be purpose-built for the unique requirements of massive, network-constrained IoT deployments. Its design philosophy centers on simplifying the eSIM architecture, reducing operational costs, and enabling no lock-in provisioning and hyper-scalability for the massive fleets that characterize the modern IoT ecosystem. The stable, deployment-ready version, SGP.32 v1.2, was published in mid 2024, with commercial solutions hitting the market now and already gaining traction.  

With SGP.32, IoT operators are no longer chained to a single vendor or static carrier agreement. They can switch providers fleetwide, instantly, without touching a single device. 

The power couple of IoT 

A core feature of SGP.32 is new architecture that splits functionality into two dedicated components: the eSIM IoT remote Manager (eIM) and the IoT Profile Assistant (IPA). This separation is key to enabling remote, automated control over device fleets, and injecting a greater level of operator flexibility than ever before.    

eSIM IoT remote Manager (eIM)

The eSIM IoT remote Manager (eIM) is the server-side, cloud-native ‘brain’ of SGP.32 architecture. It functions as a standardized remote fleet manager, providing a central point of control for all management operations across potentially millions of devices via a secure, API-driven interface.  More than just a monitoring system to check that devices are alive and online, this level of over-the-air administration gives IoT operators the flexibility to continually optimize costs through the best possible connectivity provider agreements. No more lock-in, and eIM can even automate fleetwide carrier-switching to instantly take advantage of every completive deal and cost advantage.   

IoT Profile Assistant

The IoT Profile Assistant (IPA) is software run on the IoT device itself, actioning commands sent by the eIM, and communicates with the eSIM to perform the requested operations securely. The GSMA defined two flavors of IPA models for situational flexibility – IPAe, which is embedded in the SIM, and IPAd, which runs on the device's own operating system.    

Key benefits 

SGP.32 architecture introduced a suite of technical advancements to address the previous generation’s IoT bottlenecks. These include… 

• Zero-Touch Provisioning 

  The eIM-IPA model enables fully zero-touch provisioning by allowing manufacturers to ship devices with a universal bootstrap profile. When powered on, the device uses this basic profile to contact its eIM, which automatically pushes the correct profile based on location or business requirements, automating the entire deployment process.    

• IP-Based Comms & Lightweight Protocols

   SGP.32 moves away from the legacy SMS channels of SGP.02 and is built instead on IP-based communication. As well as just being more stable, this also enables support for lightweight protocols like MQTT, CoAP over UDP, which are optimized for low-power, low-bandwidth networks like LTE-M.    

• Secure & interoperable 

  SGP.32 is the most secure spec yet, with end-to-end encryption as default and cryptographic authentication for all actions. Another strong selling point of the new spec is its interoperability, with open interfaces ensuring virtually any compliant eIM can communicate with any compliant IPA, and any IPA can in turn download a profile from any compliant SM-DP+. This avoids the vendor lock-in from the SGP.02 spec.

Single-SKU Manufacturing 

The .32 feature that has had the most dramatic impact on business models is likely the ability to implement a single-SKU manufacturing model. Previously, businesses were forced to produce distinct hardware versions for each target region, introducing enormous cost and complexity. With packet of code that typically weighs in at less than 1MB, entire device manufacturing facilities have had their productivity multiplied and cost-efficiency radically streamlined. 

With an SGP.32-compliant eSIM, a manufacturer can simply produce one universal version of their IoT device. The device can be shipped anywhere and, wherever it wakes up, the eIM remotely provisions the appropriate local connectivity profile. This hugely reduces the overheads of managing multiple SKUs, simplifies inventory, reduces production costs, and accelerates time-to-market.    

SGP.32 enables true device agnosticism, eliminating SKU silos and letting manufacturers deploy globally with a single hardware design.Risk, compliance and future-proofing 

SGP.32 provides a powerful framework for managing risk in IoT deployments by addressing regulatory compliance and technological obsolescence. 

Compliance 

The flexibility and current-ness of RSP is the best-practice solution for permanent roaming restrictions and adherence to data sovereignty laws. A business can use its eIM to distribute a compliant local MNO profile to a device and its fleet, ensuring adherence to local jurisdictional regulations without needing physical intervention. This transforms compliance from a static hurdle into periodic housekeeping.    

Future Proofing

 An IoT devices can have a long lifespan, relative to hardware. Many fleets are designed for operational terms of up to 20 years, during which whole cellular technologies can come and go, such as the sunsetting of both 2G and 3G. For devices with fixed SIMs, such a network shutdown could be the end of the whole fleet  – or at least necessitate complete physical overhauls. SGP.32 future-proofs an operator's investment, as when a provider or a whole network is phased out, devices can be remotely updated with new eSIM profiles that support the latest standards, maintaining their useful life.    

Reduced costs and time-to-market 

The benefits of SGP.32 aren’t just in technical superiority, but in solid bottom-line-boosting business applications, empowered by dramatic reductions in Total Cost of Ownership (TCO) and accelerated revenue generation. The zero-touch model eliminates expensive technician callouts, the single-SKU strategy slashes logistics costs, and dynamic compliance mitigates the risk of fines. Meanwhile, by simplifying the deployment process, SGP.32 also significantly shortens the time-to-market, allowing businesses to respond to the market faster, generate revenue sooner, and maintain competitiveness.     

SGP.32 and the 1GLOBAL advantage  

To properly realize and leverage the potential of SGP.32, businesses require a telco partner with foundational expertise and comprehensive solutions. 1GLOBAL, as an eSIM pioneer and global mobile network operator, is uniquely able to provide the global core network and enablement platform for large-scale IoT. 

The bedrock of any global IoT solution is a resilient network. 1GLOBAL operates a global mobile network with a presence in over 190 countries, underpinned by direct agreements with more than 600 MNO partners. 

This ‘network-of-networks’ provides genuine multi-carrier redundancy in each region, ensuring high availability. 1GLOBAL bootstrap profiles, pre-loaded on to every 1GLOBAL eSIM, provide instant out-of-the-box connectivity anywhere in the world, making the zero-touch, single-SKU model a reality.  

The 1GLOBAL IoT Management Platform 

At the heart of the 1GLOBAL solution is its IoT Connectivity Management Platform, a centralized ‘single pane of glass’ for complete control over global fleets of devices. 

The platform moves beyond simple monitoring to provide whole-lifecycle connectivity management, allowing users to activate, suspend, or retire SIMs, as well as monitor data usage and control billing. Its true power lies in intuitive automation, enabling dynamic rules based on triggers like volume usage, data costs, and location. Crucially, the platform is built on a comprehensive REST-based API, allowing for deep integration into any enterprise's own backend systems for full automation of connectivity management.    

The 1GLOBAL Core solution 

1GLOBAL provides a mature, secure, and fully certified Remote SIM Provisioning platform that serves as the core engine for its dynamic connectivity services. The platform is unified, supporting both legacy SGP.02 M2M and current SGP.22 consumer RSP models, allowing enterprises to manage mixed fleets from a single point of control. The platform is fully certified under the GSMA's rigorous Security Accreditation Scheme (SAS-SM) and is hosted in geo-redundant, certified data centers, ensuring the highest standards for security and availability.    

The comprehensive nature of the 1GLOBAL ecosystem positions it perfectly to lead in the SGP.32 era. The company's existing infrastructure and stated strategy demonstrate a clear path for its customers to transition to the new standard. Their mature, GSMA-certified SM-DP+ platform is the exact backend infrastructure required to support SGP.32.  

Even now, 1GLOBAL’s existing IoT Management Platform already functions as a powerful precursor to the SGP.32 eIM, providing the centralized, API-driven control that is the core philosophy of the new standard.    

Next steps 

The legacy models of cellular connectivity, built around the physical SIM card, are by no means extinct. Physical SIMs still deliver tried-and-tested performance and reliability in markets that value maximum hardware lifecycles.  

However, the trends for massive fleet growth, logistical friction, and a tightening regulatory environment create challenges that legacy systems simply can’t handle.  

In this context, the SGP.32 spec is not just an update, but the essential foundation required for secure, compliant, and truly scalable global IoT deployment. By providing a purpose-built, automated, and interoperable framework for remote connectivity management, SGP.32 provides an entirely necessary paradigm shift.    

The next IoT market leaders will be those who can leverage intelligent RSP platforms capable of dynamically selecting and deploying the best network for any SGP.32 device, in any location, at any time.