How SGP.32 Enables Scalable, Secure IoT Connectivity

The Internet of Things (IoT) has moved beyond early-stage pilots and proof-of-concept deployments. Today, connected devices support critical infrastructure across energy, logistics, mobility, and healthcare. In these and other sectors, IoT devices can operate for 10 to 20 years, often in remote locations or sealed environments where physical access is difficult or impossible.

Yet traditional connectivity models weren’t designed for this longevity, scale, or operational complexity. That’s especially true when tied to fixed Subscriber Identity Module (SIM) profiles. Earlier Embedded SIM (eSIM) standards helped, but traditional SIM provisioning locks devices into a single mobile network operator, creating:

• Vendor lock-in

• High maintenance costs

• Limited flexibility

• Exposure to long-term risks as networks evolve

The industry needed a standard that’s built specifically for the  operational realities of the IoT. SIM Group Protocol 32 (SGP.32), a global eSIM specification for IoT devices, is that standard. Developed by the GSM Association (GSMA), SGP.32 represents a foundational shift in how devices are connected, provisioned, and managed.

SGP.32 isn’t just a technical upgrade. It enables IoT devices to be managed like modern cloud infrastructure—remotely, securely, and at scale, even across global fleets. For organizations that are seeking a partner to implement it, Giesecke+Devrient (G+D) delivers a full‑stack, SGP.32‑native ecosystem and consolidates device management into a single pane of glass. 

IoT Has Outgrown Legacy Connectivity Models

As IoT deployments scale, legacy SIM provisioning creates friction at every stage of the device lifecycle. Manual provisioning incurs high operational costs. Vendor lock-ins limit flexibility and negotiating power. There’s an inability to adapt to provider coverage changes, pricing shifts, and regulatory requirements. There are also long-term risks as networks sunset and new technologies emerge.

Earlier standards like SGP.02 allowed cellular network profiles to be securely downloaded and managed on embedded Universal Integrated Circuit Cards (eUICCs) without requiring physical SIM swaps. Yet they required costly onboarding and Short Message Service (SMS) integration. Consumer eSIM standards assume user interaction and short device lifespans, but neither applies to IoT.

As a result, many IoT deployments were static, rigid, and expensive to maintain. That’s changing because SGP.32 enables scalable, secure IoT connectivity, and G+D simplifies its management.

SGP.32: A Purpose‑Built GSMA Standard for IoT

As the GSMA’s IoT-optimized eSIM Remote SIM Provisioning (RSP) Standard, SGP.32 is engineered specifically for IoT’s operational realities. It’s the first standard designed for IoT devices without a user interface, or that depend upon constrained, low-power hardware. SGP.32 also supports long operational lifetimes and large, globally distributed fleets.     

SGP.32’s key capabilities include:

• Secure remote profile download

• Remote activation and deactivation

• Operator switching without physical access

• Lightweight protocols that work even with intermittent connectivity

This makes SGP.32 fundamentally different from earlier approaches. SGP.32 removes the assumptions of user interaction, high bandwidth, or short device life. Instead, it enables zero‑touch provisioning and remote lifecycle control across millions of devices. For engineering teams, this means simpler integration, lower overhead, and a more predictable operational model.

Why SGP.32 Matters: From Static to Dynamic Connectivity

SGP.32 transforms connectivity from a one‑time static decision into a dynamic, remotely managed capability. It also reduces operational burdens, provides flexibility across global deployments, and supports future-proofing. There are benefits for IoT manufacturers, service providers, and end users.

Remote Lifecycle Management

SGP.32 lets organizations update connectivity profiles throughout the device lifecycle. It adapts to coverage changes or pricing shifts, responds to regulatory changes like roaming restrictions, and supports long-term deployments without hardware redesigns. Remote lifecycle management is especially critical for IoT devices in sealed enclosures, underground vaults, or remote industrial sites.

Reduced Operational Burdens

SGP.32 reduces the operational burden of field visits, manual maintenance, and downtime caused by connectivity issues. By reducing truck rolls, the dispatch of field technicians to customer locations, device manufacturers and service providers can reduce labor costs. Across large fleets, these savings can compound dramatically over time.

Flexibility Across Global Deployments

SGP.32 enables IoT devices to switch to the best local operator and avoid region-specific hardware variants. The benefits include more consistent behavior across markets and simpler manufacturing and logistics. This flexibility is essential as deployments scale globally and to millions of devices.  

Futureproofing

As networks evolve, SGP.32 ensures that IoT devices remain viable despite 2G and 3G sunsets, 5G rollouts, and shifting regulatory landscapes. Instead of replacing hardware, organizations can update connectivity profiles remotely. This extends device life and reduces total cost of ownership.

The Architecture Behind SGP.32: eIM and IPA

SGP.32 introduces a modern, cloud-aligned architecture built around two core components: the eSIM IoT Manager (eIM) and the IoT Profile Assistant (IPA). Together, they provide a secure, lightweight architecture that’s optimized for constrained IoT hardware with limited processing power, memory, or power. It also enables zero-touch provisioning and reduces integration complexity.  

eIM (eSIM IoT Manager)

The eIM acts as the central control for IoT connectivity and serves as the cloud orchestrator. It manages bootstrap connectivity, profile downloads, operating switching, and activations and deactivations. The eIM is designed for large-scale deployments of thousands or even millions of devices and enables centralized, over-the-air provisioning.  

IPA (IoT Profile Assistant)

The IPA is the on‑device or on‑SIM agent that executes commands from the eIM. It ensures secure communication and acts as the local executor. There are two IPA models: IPA on Device (IPAd) and IPA embedded in the eSIM (IPAe).

• IPAd runs in the device operating system and offers greater control over how connectivity is managed. It’s ideal for devices with more capable processors or custom connectivity stacks.

• IPAe runs inside the eSIM or eUICC. It’s pre-certified for standard behavior and is ideal for constrained devices or simple architectures.

SGP.32 Use Cases

SGP.32 is not theoretical. It directly addresses real‑world challenges across utilities and smart metering, automotive and telematics, logistics and asset tracking, and industrial IoT and smart infrastructure.

Utilities and Smart Metering

Utility meters operate for 10 to 20 years in sealed or inaccessible locations. SGP.32 enables remote changes, long-term lifecycle management, and compliance with evolving regulations. Built-in fallback and switchback capabilities ensure meters automatically maintain connectivity by switching to backup networks when needed and returning to the primary network when available. This reduces maintenance costs and ensures meters remain connected throughout their lifespan.

Automotive and Telematics

Vehicles cross borders, roam across networks, and require consistent connectivity. SGP.32 supports seamless operator switching, global fleet consistency, and reduced warranty and service costs. Manufacturers can avoid in-person updates while maintaining control over connectivity.

Logistics and Asset Tracking

Like vehicles, assets move across regions and among operators. SGP.32 enables dynamic, location-aware profile management. It also supports lower operational overhead, which is essential for global supply chains and high-value asset tracking.

Industrial IoT and Smart Infrastructure

Industrial IoT devices often operate in harsh environments with strict uptime requirements. SGP.32 ensures reliable long-term connectivity, remote lifecycle control, and reduced downtime. This supports factories, substations, and remote industrial sites.

Why G+D Is the Partner of Choice for SGP.32 Deployments

SGP.32 is powerful, but even more so when it’s implemented by a partner that can deliver the full stack. G+D is uniquely positioned to help organizations realize the standard’s full value. In addition to eSIM hardware and eSIM management platforms, G+D offers connectivity services and SGP.32-native orchestration. All layers are aligned, ensuring predictable behavior and seamless integration.

A Single Pane of Glass for IoT Connectivity

G+D provides a unified interface for profile management, operator switching, fleet-wide monitoring, and security oversight. This single pane of glass for connectivity consolidates management for globally deployed connected devices. The benefits include reduced complexity, accelerated deployment, and simplified operations for engineering teams.

The eSIM IoT Manager (eIM) becomes the central interface for device identity, profile status, operator assignments, and lifecycle events. Devices ship with a bootstrap profile that provides minimal connectivity, and eIM uses that link to push the correct production profile once the device is deployed. Everyone works for the same interface instead of juggling multiple portals. 

End‑to‑End Ownership

Hardware, software, and connectivity from a single provider means fewer integration points, clear accountability, and consistent performance across the entire stack. G+D’s approach is especially valuable for global deployments with strict reliability requirements.

Future‑Proof Architecture

In addition, G+D supports capability‑aware SIMs, next‑generation IoT deployments, and both IPAd and IPAe models. This ensures customers can adopt SGP.32 today while still preparing for tomorrow’s connectivity landscape.

SGP.32 Is the Foundation for Scalable, Secure IoT Connectivity

SGP.32 transforms IoT connectivity from a static, hardware‑bound decision into a dynamic, remotely managed lifecycle capability. It reduces operational costs, increases flexibility, and supports long‑lived deployments across industries. With G+D’s full‑stack, SGP.32‑native ecosystem, organizations gain a scalable, secure, future‑proof foundation for global IoT.

By partnering with G+D to implement SGP.32, organizations can make connectivity an enabler instead of a constraint.