What is the SGP.02?
SGP.02 is the GSMA’s technical specification for Remote SIM Provisioning (RSP) for M2M/IoT devices, defining how operator profiles are securely prepared, routed and managed on an embedded UICC (eUICC). It establishes the full backend architecture and all OTA communication interfaces required for large‑scale, industrial‑grade cellular IoT deployments.SGP.02 is the GSMA’s technical specification for Remote SIM Provisioning (RSP) for M2M/IoT devices, defining how operator profiles are securely prepared, routed and managed on an embedded UICC (eUICC). It establishes the full backend architecture and all OTA communication interfaces required for large‑scale, industrial‑grade cellular IoT deployments.
Core components defined by the SGP.02
SGP.02 defines a two-server Subscription Management architecture dedicated to M2M:
SM DP (Subscription Manager – Data Preparation)
Prepares, encrypts and packages operator profiles (IMSI, keys, credentials) before they are downloaded to the eUICC.
SM SR (Subscription Manager – Secure Routing)
Serves as the secure control point that delivers profiles to devices, manages eUICC lifecycle, and handles enable/disable/delete operations for each profile.
eUICC (Embedded UICC)
A tamper-resistant secure element capable of hosting multiple operator profiles and receiving OTA commands.
SM‑DP / SM‑SR Integration in SGP.02
SGP.02 clearly defines how SM‑DP and SM‑SR must interoperate to enable remote provisioning:
1. Secure Link Establishment Between SM‑DP and SM‑SR (ES3 Interface)
SM‑DP and SM‑SR mutually authenticate and establish a secure channel (ES3) used to transfer encrypted profile data from SM‑DP to SM‑SR.
2. SM‑SR as the Orchestrator of OTA Delivery (ES5 Interface)
The SM‑SR uses the ES5 interface to communicate with the eUICC via SMS or HTTPS OTA channels, depending on device capabilities.
ES5 is responsible for routing management commands, triggering downloads, switching profiles, and applying business rules. [gsma.com]
3. SM‑DP Delivers Encrypted Profiles to SM‑SR (ES8 Interface)
After preparing and encrypting the operator profile, the SM‑DP exposes it through the ES8 interface for the device targeted by the SM‑SR.
4. SM‑SR Pushes the Profile to the Device (Push Model)
Unlike consumer eSIM (SGP.22), SGP.02 uses a server‑driven “push” mechanism:
SM‑SR initiates the action
- Device authenticates
- SM‑SR triggers installation via ES5
- SM‑DP profile is then pushed onto the eUICC
5. Lifecycle Management
After installation, the SM‑SR remains the authoritative controller for:
- Activating / deactivating a profile
- Deleting profiles
- Handling errors and fallback
Partner
Providing best-in-class cellular connectivity with Kerlink
Enjoy Kerlink’s products (Wirnet™ iZeptoCell Cellular, Wirnet™ iStation, Wirnet™ iFemtoCell-evolution, Wirnet™ iBTS/Compact/64 Highway) with the best-in-class cellular connectivity offered by Avnet Silica, powered by BICS.
Avnet Silica's advanced remote SIM provisioning services
Avnet Silica's advanced remote SIM provisioning offering provides a turnkey plug-and-play solution with the most flexible and open cellular connectivity option on the market. This solution is a combination of a unique product and many innovative services:
- A GSMA 3.2 eUICC/UICC manufactured by IDEMIA
- Pre-installed with a BICS global multi-IMSI profile
- An initial pre-paid cellular connectivity allowance on BICS networks (2G/3G/4G/Cat-M/Cat-NB)
- Enables cellular connectivity just like a classic SIM
- Provisioned for life on Avnet’s Subscription Management Platform (SMP)
- Remotely reprogrammable from Avnet’s SMP, enabling secure management of MNO profiles
- Local management and low-power management applets enhancing device battery life
- Able to host several MNO profiles concurrently
- Transferable on request to the SMP of your choice
Ready to jump on board? Test our Cellular Connectivity Solution.
- HalfSIM (2FF/3FF/4FF), MFF2, WLCSP (on-demand)
- Cellular connectivity services:
- Standard cellular networks: 2G, 3G, 4G & 5G
- LPWAN cellular network: LTE-M & NB-IoT
- NTN (Non-Terrestrial Network) - not available for demo
- 50MB of Data (Rechargeable on request)
- Global Coverage: Over 200 countries and 400 networks