Kigen outlines 5 checks for SGP.32 IoT eSIM deployments

Kigen said in its SGP.32 Reality Check follow-up that enterprises should assess implementation details, not certification alone, when selecting IoT eSIM suppliers.

Kigen said the IoT Stars SGP.32 test used the same tools, support paths, eSIM software configuration, and remote management capabilities available to customers through standard commercial channels. The setup included Kigen eSIMs, Kigen eIM, Kigen Pulse, Kigen APIs, Secure with Kigen hardware, and live MVNO (mobile virtual network operator) profiles from Onomondo, Soracom, and ZARIOT. Kigen said this showed that SGP.32, the GSMA remote SIM provisioning standard for IoT, can be used across real hardware, connectivity profiles, and remote management workflows.

Kigen said enterprises should examine implementation choices that sit beyond certification. The company identified indirect profile download for devices behind gateways or in restricted networks, transport support such as HTTPS/TCP and CoAP/UDP/DTLS for different network conditions, and auditability of profile operations as practical evaluation points. Kigen also said security-sensitive lifecycle events include downloading, enabling, disabling, and deleting profiles, and noted that its eSIMs are certified under the GSMA eSA scheme and that it has declared its approach to security updates to ENISA in the context of the Cyber Resilience Act.

Kigen also pointed to interoperability and device integration as selection criteria. The company said a strong eIM, or eSIM IoT remote manager, should work with different SM-DP services, including legacy SM-DP+ environments through binding and transport protocol translation. Kigen said its eIM has been tested with eUICCs, or embedded universal integrated circuit cards, from other vendors, and that Kigen eUICCs have been tested with five other eIMs, including publicly referenced work with Simplex Wireless. Kigen also said the location of the IoT Profile Assistant, or IPA, matters: the device-side provisioning function can sit in the eUICC as IPAe or in device or modem firmware as IPAd.