General Knowledge & Standards
This section provides the foundational educational content for the Knowledge Hub. This is a reference library that helps customers, analysts, and internal users understand the technologies behind Valid’s solutions.
It brings together:
- High-level tutorials
- Technical deep dives
- GSMA standards
- Architecture diagrams (text-based)
- Troubleshooting guides
- Terminology definitions
This section is the “encyclopedia” of the Knowledge Hub.
9.1
QUICK GUIDES
Quick Guide 1 — What is eSIM?
An eSIM (embedded SIM) is a programmable SIM built into a device that can download and manage operator profiles remotely. It replaces the need to insert or swap a physical SIM card.
Key concepts:
- Fully remote activation
- Multiple operator profiles
- Same security as physical SIM
- Works across consumer and IoT devices
Benefits:
- Faster onboarding
- Seamless operator switching
- Global IoT deployment
- Better security and durability
Quick Guide 2 — SGP.22 vs SGP.32 (Consumer vs IoT eSIM)
SGP.22 — Consumer eSIM Standard
Used for:
- Smartphones
- Tablets
- Laptops
- Wearables (in combination with entitlement)
Highlights:
- User-driven activation
- Works with QR codes, apps, and SM-DS
- Compatible with Apple/Google ecosystems
SGP.32 — IoT eSIM Standard
Used for:
- IoT devices with no user interface
- Smart meters, CPEs, POS, routers, trackers
Highlights:
- Fully automated
- No QR codes
- Uses lightweight agents (IPAe/IPAd)
- Orchestrated by eIM (IoT Manager)
| Area | SGP.22 | SGP.32 |
|---|---|---|
| Activation | User-driven | Fully automated |
| Devices | UI devices | No User Interface |
| Discovery | SM-DS | Direct orchestration |
| Architecture | Consumer flows | IoT-optimized |
| Bootstrap | Optional | Essential |
Note
Other GSMA specifications such as SGP.01/02, SGP.24, SGP.28, and SGP.29 are fully described in the GSMA Standards Library section.
Quick Guide 3 — Multi-IMSI Explained
A multi-IMSI solution allows the SIM to store multiple IMSIs from different mobile networks. It switches between them based on:
- Coverage
- Quality of Service
- Roaming restrictions
- Regional policies
Use cases:
- IoT roaming optimization
- Travel eSIM apps
- Devices crossing borders
- Network redundancy
Quick Guide 4 — What is SM-DP+?
SM-DP+ is the GSMA-defined server that:
- Stores operator profiles
- Prepares secure download packages
- Delivers profiles to devices
- Manages enable/disable/delete lifecycle
Essential for both SGP.22 and SGP.32.
Quick Guide 5 — Bootstrap, Operational & Fallback profiles (backup subscription)
Bootstrap Profile
Used only for initial provisioning.
Operational Profile
Main subscription used for production.
Fallback Profile (backup subscription)
Alternative network used when primary fails:
- Coverage issues
- Network maintenance
- Regional restrictions
9.2
eSIM FUNDAMENTALS
What is a SIM Profile?
A SIM/eSIM profile contains:
- IMSI
- Authentication keys (Ki)
- Operator network parameters
- Security algorithms
It enables registration on a mobile network.
What is an EID?
EID = eUICC Identifier, a 32-digit number uniquely identifying an eSIM chip.
Used for:
- Activations
- RSP server routing
- Diagnostics
eUICC vs SIM vs eSIM
| Term | Meaning | Notes |
|---|---|---|
| SIM | The subscription identity | Can be physical or digital |
| eSIM | Remote provisioning capability | Not a physical object |
| eUICC | The chip that holds profiles | Can be embedded or removable |
Profile Lifecycle
Profiles have stages:
- Downloaded
- Installed
- Enabled
- Disabled
- Deleted
Each lifecycle event is tracked by SM-DP+ and operator systems.
The Role of OEMs
Device manufacturers (Apple, Samsung, Google):
- Control UI workflows
- Provide LPAs
- Enforce entitlement requirements
- Influence customer experience
9.3
GSMA STANDARDS LIBRARY
GSMA standards provide the essential architectural, security, and compliance framework that makes global eSIM interoperability possible.
SGP.01 / SGP.02 — eSIM Architecture
SGP.01 and SGP.02 define the global architecture, compliance rules, security models, and operational foundations of the eSIM ecosystem.
They describe:
Architecture
- Roles: eUICC, SM-DP, SM-SR, SM-DP+
- Interactions between components
- Trust relationships
Security
- Cryptographic models
- Key ladder and secure channels
- Certificate hierarchies
Data Models & Interfaces
- Profile structure
- Secure packet formats
- APDU exchanges
Compliance
- Interoperability requirements
- Operational rules
- Vendor certification
Relationship With Other Standards
- SGP.22 and SGP.32 extend these architectural foundations.
- SGP.28 and SGP.29 refine certain processes but still rely on SGP.01/02.
These documents form the basis of the entire eSIM ecosystem.
SGP.22 — Consumer eSIM
Defines:
- LPA flows
- QR code method
- SM-DS discovery
- Profile download & installation
- Device UI behaviors
Describes:
- REST APIs
- Data formats
- Server-to-server communication
Used by vendors integrating SM-DP+.
SGP.24 — RSP Compliance Process
Defines:
- Test cases
- Compliance sequences
- eUICC/eUICC-server interoperability validation
- Certification requirements
SGP.29 — EID Ranges
Standard defining:
- Valid eUICC EID formats
- Updated range for new devices
- Handling of temporary EIDs
Now required by OEMs such as Apple.
SGP.32 — IoT eSIM Provisioning
Defines:
- IPAe / IPAd
- eIM
- IoT orchestration flows
- Fallback rules
- Device integration requirements
Additional relevant GSMA standards include:
- SGP.31eSIMIoT Architecture and Requirements
- SGP.41 –eSIMIFPP Architecture and Requirements
- TS.48 –GenericeUICC Test Profile for Device Testing
- FS.31 –GSMA Baseline Security Controls Version
9.4
eSIM ACTIVATION: END-TO-END
Activation Methods
QR Code
User scans QR → LPA activates → SM-DP+ download.
Manual Code Entry
User enters activation code → LPA validates → profile downloads.
In-App Activation
- Carrier app or OEM app triggers activation
- Profile downloaded automatically
SM-DS Discovery
Device checks SM-DS → receives SM-DP+ address → downloads profile.
9.5
eSIM TROUBLESHOOTING GUIDE (CONSUMER + IoT)
Comprehensive troubleshooting for all stakeholders.
Profile Download Fails (Consumer)
Likely causes:
- Wrong activation code
- No data connection
- SM-DP+ certificate missing
- SM-DS unreachable
Steps:
- Switch Wi-Fi to mobile data
- Restart device
- Reset network settings
- Retry activation
IoT Profile Download Fails (SGP.32)
Causes:
- Bootstrap network unavailable
- BIP not supported
- Firmware misconfiguration
- SM-DP+ not reachable
Steps:
- Validate bootstrap profile
- Debug modem logs
- Retry after network scan
No Signal After Activation
Causes:
- Operator provisioning pending
- APN mismatch
- LTE-only SIM with 3G-only area
Resolution:
- Verify APN
- Force RAT selection
- Retry attach
Device Shows “Plan Not Eligible”
Entitlement error.
Steps:
- Validate subscriber plan
- Refresh operator database
- Retry entitlement request
Repeated Attach Failures
Indicates:
- Profile corruption
- Network reject codes
- Roaming restriction
Resolution:
- Reset eSIM
- Assign fallback IMSI
- Escalate to operator core team
9.6
CONNECTIVITY FUNDAMENTALS
- Radio Access Technologies
- 2G
- 3G
- 4G
- 5G
- LTE-M
- NB-IoT
Each has different:
- Bandwidth
- Latency
- Power behavior
- APN (Access Point Name)
Defines how a device connects to the internet.
Misconfigured APN = PDP context failure.
- Authentication Types
- PAP
- CHAP
- EAP
IoT modems must match operator settings.
- Roaming
Concepts:
- HPLMN
- VPLMN
- Steering
- Permanent vs forbidden roaming
Multi-IMSI enhances roaming resilience.
9.7
TERMINOLOGY GLOSSARY
A complete list of the essential industry definitions.
eUICC — Embedded Universal Integrated Circuit Card
The chip enabling multiple profiles.
SM-DP+ — Subscription Manager Data Preparation
Server that downloads profiles.
SM-DS — Discovery Service
Routes devices to the correct SM-DP+.
IMSI — International Mobile Subscriber Identity
Primary identity used for network registration.
EID — eSIM Identifier
Unique identifier of eUICC.
IPAd / IPAe — IoT Profile Assistants
Device-side agents in SGP.32.
eIM — eSIM IoT Remote Manager
Orchestrates IoT provisioning.
APN — Access Point Name
Defines IP connection setup.
RAT — Radio Access Technology
(2G/3G/4G/5G/LTE-M/NB-IoT)
Entitlement
Device authorization layer for advanced features.
QoS – Quality of Service
Network performance evaluation.
SGP Standards
GSMA specifications for eSIM ecosystem.
Environmental compensation
In order to make a significant difference and bring a real benefit to our environment and planet, Valid decided to create, together with Plastic Bank, an environmental compensation program.
Plastic Bank is a social enterprise empowering a regenerative society. They build ethical recycling ecosystems in coastal communities and reprocess the materials for reintroduction into the global supply chain as Social PlasticTM.
Their collectors receive a compensation for the materials they collect which helps them to provide basic family necessities such as groceries, cooking fuel, school tuition, and health insurance.
Their certified blockchain platform secures the entire transaction and provides real-time data visualization – allowing for transparency, traceability, and rapid scalability.
Compensation Program
With this goal, Plastic Bank is relying on companies like Valid to support the collection process of the plastic in order to:
Mitigate the impact of many corporations and potentially reduce, offset or decrease the plastic footprint of their operations.
Improve the social and economic situations in different regions of the world by creating job opportunities through plastic waste collection.
Supports environmental stewardship and circular economy.
For every SIM card that our customers sell to their consumers under this program, Valid will collect one plastic bottle from the environment.
Download our "The Future of PoS Devices" White Paper
We inform you that the data you provide will be included in files owned by Valid Soluciones Tecnológicas, S.A.U. (“Valid”) for the purpose of sending you our publications and other information. The legal basis for this data processing is your explicit consent to receive such information by completing and submitting this form. Your data will be retained until you unsubscribe from this service using the methods indicated below.
At any time, you may unsubscribe from this free service by clicking the link provided at the bottom of each information email. Additionally, you can exercise your rights to access, rectify, delete, object, restrict processing, and request data portability, where applicable under the relevant regulations, by contacting Valid at trustedconnectivity@valid.com.
At any time, you may unsubscribe from this free service by clicking the link provided at the bottom of each information email. Additionally, you can exercise your rights to access, rectify, delete, object, restrict processing, and request data portability, where applicable under the relevant regulations, by contacting Valid at trustedconnectivity@valid.com.
Our locations
Spain
Avenida de Manoteras, 20
Edificio Tokyo – Planta Baja
28050
Madrid, Spain
Singapore
67 Ubi Avenue 1,
Starhub Green #06-01
Singapore 408942
Present in more than 15 countries
Talk to our experts
We inform you that the data you provide will be included in files owned by Valid Soluciones Tecnológicas, S.A.U. (“Valid”) for the purpose of sending you our publications and other information. The legal basis for this data processing is your explicit consent to receive such information by completing and submitting this form. Your data will be retained until you unsubscribe from this service using the methods indicated below.
At any time, you may unsubscribe from this free service by clicking the link provided at the bottom of each information email. Additionally, you can exercise your rights to access, rectify, delete, object, restrict processing, and request data portability, where applicable under the relevant regulations, by contacting Valid at trustedconnectivity@valid.com.
At any time, you may unsubscribe from this free service by clicking the link provided at the bottom of each information email. Additionally, you can exercise your rights to access, rectify, delete, object, restrict processing, and request data portability, where applicable under the relevant regulations, by contacting Valid at trustedconnectivity@valid.com.
Talk to our experts
We inform you that the data you provide will be included in files owned by Valid Soluciones Tecnológicas, S.A.U. (“Valid”) for the purpose of sending you our publications and other information. The legal basis for this data processing is your explicit consent to receive such information by completing and submitting this form. Your data will be retained until you unsubscribe from this service using the methods indicated below.
At any time, you may unsubscribe from this free service by clicking the link provided at the bottom of each information email. Additionally, you can exercise your rights to access, rectify, delete, object, restrict processing, and request data portability, where applicable under the relevant regulations, by contacting Valid at trustedconnectivity@valid.com.
At any time, you may unsubscribe from this free service by clicking the link provided at the bottom of each information email. Additionally, you can exercise your rights to access, rectify, delete, object, restrict processing, and request data portability, where applicable under the relevant regulations, by contacting Valid at trustedconnectivity@valid.com.
Our locations
Spain
Avenida de Manoteras, 20
Edificio Tokyo – Planta Baja
28050
Madrid, Spain
Singapore
67 Ubi Avenue 1,
Starhub Green #06-01
Singapore 408942
Present in more than 15 countries