This section offers a comprehensive guide to Consumer eSIM provisioning, following the GSMA SGP.22 specification.
It is intended for:
Remote SIM Provisioning (RSP) enables devices to download and manage SIM profiles digitally instead of relying on physical SIM cards. It allows seamless activation, switching, and lifecycle management through secure over-the-air (OTA) systems.
In the consumer ecosystem, RSP follows the GSMA SGP.22 architecture, used in:
RSP was created to solve three main problems:
It also enables:
SGP.22 defines three major components:
A secure backend system that:
The SM-DP+ is the heart of Consumer RSP.
A directory-like service that:
The component inside the device that:
On iOS, the LPA is system-managed.
On Android, the LPA may be:
Each eSIM profile is protected using a secure certificate chain defined by the GSMA. The SM-DP+ encrypts each profile with keys bound to the target eUICC’s EID, ensuring that only that specific secure element can decrypt and install the profile. Mutual authentication is performed using ECASD certificates and secure channels, preventing interception, tampering, or unauthorized reuse of the profile.
Consumer eSIM activation can occur through different mechanisms depending on device type, operator preference, and channel (retail, web, app).
Customer scans a QR code containing:
Steps:
Advantages:
Limitations:
Operators may embed activation logic inside their mobile app using:
Typical flow:
Advantages:
Profile availability is automatically “pushed” to the device via SM-DS.
Used when:
Used for:
Entitlement Server validates:
Profile is downloaded automatically.
Profiles undergo several lifecycle stages defined by GSMA.
Profile is delivered from SM-DP+ to device via secure channel.
Profile is decrypted and written into eUICC.
Profile becomes active; device attaches to the network.
Profile is kept on device but cannot connect.
Profile is permanently removed from eUICC.
Disabled profiles can be re-enabled without re-downloading.
Multi-Profile Behavior
Modern smartphones support:
This is one of the most important aspects for operators.
Different device manufacturers behave differently in activation, storage, and LPA logic.
Characteristics:
Apple-Specific Behavior:
Characteristics:
Limitations:
Characteristics:
Characteristics:
Below is a fully written troubleshooting section operators and OEMs can use.
Possible causes:
Resolution:
Causes:
Resolution:
Common root causes:
Resolution:
Causes:
Resolution:
Causes:
Resolution:
Symptoms:
Resolution:
Causes:
Resolution:
In order to make a significant difference and bring a real benefit to our environment and planet, Valid decided to create, together with Plastic Bank, an environmental compensation program.
Plastic Bank is a social enterprise empowering a regenerative society. They build ethical recycling ecosystems in coastal communities and reprocess the materials for reintroduction into the global supply chain as Social PlasticTM.
Their collectors receive a compensation for the materials they collect which helps them to provide basic family necessities such as groceries, cooking fuel, school tuition, and health insurance.
Their certified blockchain platform secures the entire transaction and provides real-time data visualization – allowing for transparency, traceability, and rapid scalability.
With this goal, Plastic Bank is relying on companies like Valid to support the collection process of the plastic in order to:
Mitigate the impact of many corporations and potentially reduce, offset or decrease the plastic footprint of their operations.
Improve the social and economic situations in different regions of the world by creating job opportunities through plastic waste collection.
Supports environmental stewardship and circular economy.
Avenida de Manoteras, 20
Edificio Tokyo – Planta Baja
28050
Madrid, Spain
67 Ubi Avenue 1,
Starhub Green #06-01
Singapore 408942
Avenida de Manoteras, 20
Edificio Tokyo – Planta Baja
28050
Madrid, Spain
67 Ubi Avenue 1,
Starhub Green #06-01
Singapore 408942