How the SGP.32 standard enables the next generation of IoT management

  • Enterprise
  • Mobile communications

© Leo Wolfert

  • Type Insight
  • Published

Deploying and managing IoT projects at scale involves a range of cybersecurity and connectivity considerations. Learn about how enterprises can overcome common issues - as well as what the SGP.32 GSMA standard enables for IoT – in this Q&A with Stephane Quetglas, Marketing Director.

How do IoT failures typically emerge, and how can they be addressed?

The very nature of IoT networks means they are an ecosystem comprised of a huge array of different software, devices and eSIMs. Each could have slight variations in standards, configurations and levels of interoperability. It means that maintaining compatibility between all these aspects, and keeping devices online and visible, can be challenging.  

Scaling these networks – and resolving common issues – requires simplicity, and here dynamic connectivity management becomes the cornerstone of resilience and business continuity. Single Pane of Glass (SPOG) solutions are emerging as convergence points to bring device, network and data management within one interface. Linking closely with Mobile Network Operators’ APIs, they give provisioning and lifecycle control all in real-time. These tools let enterprises automate workforce across entire regions and make management policies consistent, all while adapting connectivity and security where it’s needed.  

Thales Adaptive Connect enables resilient and flexible eSIM-based connectivity for IoT service providers, making global device deployments of hundreds or even thousands possible across the full lifecycle.  

How do eSIMs enable more seamless IoT provisioning?

For OEMs developing IoT devices, eSIMs allow their customers a great deal of flexibility. Once installed, they enable remote provision and can hold several mobile subscriptions at the same time. Thanks to the SGP.32 standard, organisations can manage network profile changes and other management tasks over the air, eliminating the need for physical SIM swaps.  

With robust built-in security features like, tamper-resistant hardware, , eSIMs help ensure valuable data always remains protected.  

Thales has been working on eSIM solutions of its own, with a partnership with AT&T for a next-generation eSIM solution powered by the latest GSMA SGP.32 IoT specification, and designed specifically for large-scale IoT deployments. OEMs can ship connected devices anywhere in the world with one single, pre-integrated eSIM courtesy of Thales.  

Remote SIM Provisioning

© Scope

What changes does the SGP.32 standard enable for IoT?

The SGP.32 eSIM IoT technology aims to simplify integration, ensure seamless switching between providers, as well as accelerate time to market. It is designed specifically to target remotely deployed devices, and those without keyboards or screens, delivering on the promise of flexibility and scalability in IoT connectivity.   

An industry standard alone, however, doesn’t guarantee success for OEMs. The full IoT lifecycle still applies, from design and testing through to manufacturing, deployment and operations. Even if all devices meet the latest standard, real-world challenges can remain. This can range from initial connectivity challenges, through to fleet management, monitoring, QoS, and resilience over time. What changes, thanks to SGP.32, is level of automation or interoperability for massive IoT. It’s therefore important that any IoT operator has robust management tools in place to ensure devices connect, stay connected, and recover from any issues.  

Beyond the standard, what more should businesses consider for successful IoT deployment projects?

Success starts with visibility. To meet compliance and fully protect data, it is essential that you have a clear view of operations – and that’s where Single Pane of Glass (SPOG) solutions come in. They’re not a new concept, having existed within SIM management for several years, but for operational purposes, having visibility of current status across all devices is important for efficiency and response time. 

With SGP.32 standards offering the promise of simpler connectivity with cellular IoT devices, it’s likely we’ll see greater diversity in the array of connectivity providers used across a device base, making a SPOG combined with SGP.32 solutions an invaluable means of operating.  

It’s also crucial that any IoT deployment of significance embraces a ‘Security by Design’ approach. Security measures must be integrated from the very start of a system’s development. Connected devices typically have a long service life, which means security provisions need to endure, and a Root of Trust (RoT) established in every IoT device.  

This Root of Trust is an immutable identity, meaning only authorised devices interact with sensitive data, applications or services. Any digital IDs or encryption keys used must be securely generated and stored in hardware security containers, while an efficient and automated patch management process will ensure updates are made within a reasonable time from when they’re issued. 

One of the ways Thales is working to help support more simplified IoT deployments is through its strategic collaboration with T-Mobile and SIMPL IoT. All eSIM-equipped devices managed by SIMPL IoT come pre-loaded with a T-Mobile bootstrap profile, letting devices immediately connect to the most suitable cellular network through Thales Adaptive Connect when out in the field – eliminating the logistical and operational hurdles of updating devices manually, or swapping SIM cards. 

How can businesses use the SGP.32 standard to drive value?

From Mobile Network Operators (MNOs), through to IoT Service Providers and IoT OEMS, the IoT ecosystem is made up of a diverse range of players, all with their own connectivity challenges and demands. The GSMA SGP.32 standard takes advantage of consumer eSIM provisioning specifications and expands them to work for streamlined large-scale IoT.  

For MNOs, this lets them manage subscriptions more flexibly and reliably, and for IoT Service Providers responsible for installing and maintaining devices, lets them switch between providers very quickly.  

SGP.32, in combination with single pane of glass management and orchestration, is a critical foundation for businesses to drive greater value from IoT operations. Managing devices all along their lifecycle – from factory provisioning, initial connectivity, monitoring, through to business rules and orchestration and security – is made possible thanks to SPOG that are designed to simplify deployment and operations for customers.  

From a security perspective, SGP.32 includes robust security measures, addressing global cybersecurity concerns when it comes to IoT.  

For OEMs, it provides standards to meet when it comes to the likes of device safeguarding and post-manufacturing customisation. Operationally, the more simplified provisioning processes enable swift growth in IoT deployments, allowing Service Providers to deploy devices rapidly to meet market demands, without compromising on quality or reliability.   

Finally, the SGP.32 standard is a step forward when it comes to reliable connectivity. Uninterrupted service is critical for applications like healthcare, agriculture and utilities – and SGP.32 supports resilient connectivity across multiple carriers and private networks. With broad service options, IoT Service Providers benefit from this greater choice which in turn they can pass on to their customers – fostering growth and innovation across emerging markets.  

Related Articles

  • Enterprise

6G and the rise of intelligent networks

Insight
  • Enterprise

What the EU Cyber Resilience Act means for IoT

Insight
  • Enterprise

Bureau Veritas validates Thales assessment of Cloud OTA environmental impact

Insight
  • IoT & connectivity

The Quantum Clock is ticking - Securing eSIM device communications for the future

Insight
  • Enterprise

Will quantum computing attacks undermine the promise of AI-native telco networks?

Insight
  • Enterprise

How to cut down your email pollution and why digital cleanup day matters

Insight
man holding smartphone
  • Enterprise

eSIM at Scale: Unlocking Opportunities & Preparing for the Next Phase

Insight
  • Enterprise

5G, AI, and dedicated chipsets: the factors powering IoT's second wave

Insight
  • Enterprise

Why CES 2026 was a showcase for a new and more secure IoT

Insight

Receive the latest Cyber and Digital insights straight to your mailbox