How SGP.32 unlocks next-generation IoT deployments

Every time a smart utility meter transmits consumption data, a connected vehicle updates its telemetry, or a fleet of logistics trackers crosses international borders, seamless and uninterrupted connectivity is vital. Yet for years, managing Internet of Things (IoT) devices at scale has been constrained by physical SIM logistics, operator lock-in and remote SIM provisioning standards that were simply never built for autonomous, resource-constrained hardware.

As enterprise operations expand globally, relying on traditional SIM cards or legacy Machine-to-Machine (M2M) frameworks creates significant operational overhead. SGP.32, the GSMA’s latest eSIM specification designed explicitly for IoT, fundamentally transforms how enterprises deploy, manage and adapt connected devices worldwide.

What is SGP.32, why is it critical for the future of global IoT, and how can organisations leverage it to streamline their international operations?

What is SGP.32?

SGP.32 is the GSMA's global eSIM standard engineered specifically for remote SIM provisioning (RSP) and lifecycle management across IoT and M2M environments.

When eSIM technology emerged roughly a decade ago, remote SIM provisioning promised to eliminate physical SIM swaps. However, early specifications were split between consumer devices (SGP.22), which required a human interface to scan QR codes or approve profile changes, and traditional M2M architectures (SGP.02), which relied on complex, operator-led integrations. Neither framework suited mass-market, "headless" IoT devices with minimal interfaces, restricted power budgets or intermittent network access.

SGP.32 solves this by uniting the strengths of consumer and M2M specifications into a single, purpose-built standard for IoT. It introduces a unified mechanism for zero-touch connectivity management, enabling enterprises to deploy globally distributed fleets without physical interaction.

Key technical capabilities of SGP.32:

• Direct eUICC integration: Incorporates an embedded Universal Integrated Circuit Card (eUICC) directly onto the device in any physical form factor, whether soldered permanently or inserted via a standard hardware slot.

• Mass remote profile switching: Enables organisations to switch network operator profiles over-the-air, securely and en masse, across tens of thousands of deployed units simultaneously.

• Bi-directional triggers: Unlike older standards limited to server-driven "push" commands (SGP.02) or user-driven "pull" requests (SGP.22), SGP.32 supports both device-initiated and cloud-initiated profile interactions.

• IP-Native, SMS-free communication: Replaces legacy, heavy SMS-dependent management commands with modern, lightweight IP protocols such as CoAP and DTLS, allowing profile management over IP while retaining SMS primarily as an optional wake-up mechanism.

• Modular infrastructure: By combining an on-device IoT Profile Assistant (IPA) with a backend eSIM IoT Remote Manager (eIM), SGP.32 replaces complex operator-led integrations and manual user interactions with centralised, zero-touch fleet orchestration. This enables enterprises to securely trigger and receive encrypted profile payloads directly from SM-DP+ servers without adding operational overhead or compromising device security.

Why is SGP.32 important for IoT?

For global IoT deployments, connectivity is no longer just about getting devices online, it is about keeping them connected, secure and adaptable throughout their entire operational life.

Long-life assets, including smart utility meters, industrial equipment, environmental sensors and connected transport fleets, often remain in the field for a decade or more. Over such extended lifecycles, coverage quality shifts, commercial agreements evolve, regional roaming regulations change and hardware moves across borders. SGP.32 removes technical lock-in by making the SIM profile a fluid, manageable software resource rather than a static manufacturing decision.

1. Mass scalability across fleets
   Managing a handful of devices manually is straightforward, but orchestrating tens of thousands of units globally is a massive logistical hurdle. SGP.32 enables bulk over-the-air profile management, allowing network changes, updates and provisioning policies to be applied across entire device fleets in moments without needing field technicians.
2. Optimised for low-power and constrained hardware
   Many modern IoT sensors run on batteries and operate in deep-sleep cycles to conserve power. SGP.32 replaces resource-heavy HTTP/TLS protocols with lightweight IP transports like CoAP and DTLS, while relying on backend eIM orchestration to streamline device-side operations. This dramatically reduces memory overhead, minimises network wake-up times and extends overall battery life for devices operating on LPWAN networks like NB-IoT and LTE-M.
3. Centralised management for remote assets
   From agricultural monitoring systems in isolated rural areas to industrial sensors in hazardous facilities, accessing devices physically is often dangerous or cost-prohibitive. Centralised eIM orchestration allows technical teams to issue lifecycle commands remotely, dramatically reducing operational expenditure and maintenance downtime.
4. Enhanced security and regional compliance
   Security remains a primary vulnerability for distributed devices. Built on rigorous GSMA cryptographic standards, SGP.32 provides end-to-end encryption for profile delivery over-the-air. This robust architecture helps enterprises maintain compliance with changing regional data protection rules and permanent roaming restrictions without replacing hardware.
5. Future-proofed deployments
   By adopting a unified GSMA standard, enterprises safeguard their hardware investments against vendor lock-in, ensuring ongoing compatibility with emerging mobile networks, multi-carrier strategies and evolving digital infrastructure.

How PCCW Global supports you with SGP.32

Realising the benefits of the GSMA SGP.32 standard requires a partner that pairs advanced remote SIM orchestration with reliable, worldwide network coverage. PCCW Global empowers enterprise IoT deployments by adopting the SGP.32 standard across its global connectivity ecosystem.

By combining advanced eSIM IoT Remote Manager (eIM) capabilities with enterprise-grade networking, PCCW Global simplifies global connectivity management while eliminating expensive physical hardware changes.

• Centralised eIM profile orchestration: Effortlessly manage SGP.32 eIM profile lifecycles, provisioning routines and policy controls across both commercial and rugged industrial device fleets from a single interface.

• Flexible multi-profile support: Deploy bootstrap, operational and fallback profiles from both PCCW Global and third-party connectivity providers to guarantee continuous connectivity under any operating condition.

• Multi-IMSI technology integration: Optimise global network coverage and roaming performance by combining SGP.32 over-the-air provisioning with multiple International Mobile Subscriber Identities (IMSIs) embedded on a single eSIM.

• Converged networking and security: Seamlessly integrate Edge SIM architecture with CloudRouter® and enterprise networking options, ensuring secure, encrypted traffic routing directly from edge devices to enterprise applications.

• Complete dynamic control: Adjust connectivity profiles on demand over-the-air to respond flexibly to shifting coverage needs, business agreements or local regulatory mandates throughout the lifetime of your assets.

With fully compliant SGP.32 capabilities backed by our high-performance global network, PCCW Global delivers a secure, flexible and future-proof connectivity solution designed to help you seamlessly deploy and scale your IoT operations.

Is your IoT deployment expanding globally? Reach out to our team to discover how our IoT connectivity solutions can support your global operations.