IoT eSIM standards explained: SGP.02, SGP.22 and SGP.32

An eSIM is a SIM chip soldered into a device, or built into its modem, that can have mobile network profiles downloaded to it instead of having a card swapped. How a profile reaches that chip is set out by the GSMA, the mobile industry's standards body, in three different specifications. Which one a device follows decides how you get it connected and how easily you can change provider later.

eSIM and eUICC

The eUICC is the chip: an embedded SIM that can hold downloadable profiles. The eSIM is the profile downloaded to it, though most people use “eSIM” for both. The specifications below set out how a profile reaches an eUICC. For the numbers on a SIM (ICCID, IMSI, MSISDN), see SIM numbers explained.

The short version

Specification	Written for	How a profile is installed	Who drives it
SGP.02	M2M devices	Pushed to the device by the operator's platform	The connectivity provider
SGP.22	Consumer devices	Downloaded by the device, usually by scanning a QR code	The user, through the device
SGP.32	IoT devices	Downloaded under the control of a remote manager chosen by the device owner	The device owner

SGP.02: the original M2M eSIM

SGP.02 was the first eSIM architecture, designed for machine-to-machine devices with no screen and no user. Profiles are pushed to the device by the connectivity provider's platform, which manages the eSIM remotely. That suits large fleets that will stay with one provider, but changing provider means integrating the old and new platforms, which in practice is difficult. Many earlier M2M eSIMs, such as those in vehicles and meters, follow SGP.02.

SGP.22: consumer eSIM

SGP.22 is the eSIM in phones, tablets and watches. The device itself downloads a profile, normally when the user scans a QR code or follows a link. Changing provider is simple: download a new profile. The catch for IoT is that SGP.22 assumes a device with a user and an interface, which a sensor or a tracker usually does not have. Many routers and gateways with a management interface support it all the same, and accept a profile by QR code or activation code.

SGP.32: the IoT eSIM standard

SGP.32, published by the GSMA in 2023, is written for IoT devices specifically. It keeps SGP.22's device-driven download, so changing provider no longer needs platform integration, but replaces the user with a remote manager (the eSIM IoT Remote Manager, or eIM) chosen by the device owner. Profiles can be downloaded and switched across a fleet without anyone touching the devices, and the design suits constrained devices on low-power networks such as LTE-M and NB-IoT. Devices and modules supporting it have been arriving since.

What it means when you choose an eSIM

Ask the device or module supplier which specification the device follows before choosing an eSIM:

SGP.22 devices, including most routers and gateways that offer eSIM, take a profile from a QR code or activation code.
SGP.02 devices usually need a profile from a provider that works with the platform they were built for.
SGP.32 devices take profiles through a remote manager, and are designed for fleets that may change provider over their life.

If a device has a SIM slot, a physical SIM avoids the question entirely.

ThingSIM eSIMs

ThingSIM delivers eSIM profiles as a QR code, which appears in the portal minutes after you order and can be fetched through the API. They cost the same £2.00 as a physical SIM. Check that your device can install a profile from a QR code or activation code before ordering; if it cannot, or you are not sure, a physical trio SIM is the safe choice. See IoT eSIM or physical SIM.

Common questions

What is the difference between SGP.22 and SGP.32?

SGP.22 is the consumer eSIM standard, where the device downloads a profile, usually from a QR code scanned by its user. SGP.32 is the IoT eSIM standard, where a remote manager chosen by the device owner controls profile downloads, so headless devices can be connected and switched without a user.

What is the difference between eUICC and eSIM?

The eUICC is the embedded chip that can hold downloadable SIM profiles; an eSIM is a profile on it. In everyday use the terms are interchangeable.

What is SGP.02?

The original M2M eSIM specification, in which the connectivity provider's platform pushes profiles to the device. Changing provider requires integration between platforms.

Which eSIM standard does an IoT device use?

It depends on the device. Older M2M eSIMs often follow SGP.02, many routers and gateways follow SGP.22, and newer IoT modules are adopting SGP.32. Ask the device supplier.

Can a ThingSIM eSIM be used in any eSIM device?

Only one that can install a profile from a QR code or activation code. Check with the device supplier first, or use a physical SIM.