What Is an Embedded Universal Integrated Circuit Card?

An Embedded Universal Integrated Circuit Card (eUICC) is a reprogrammable SIM architecture that allows a device to store multiple operator subscription profiles and switch between them over the air, without requiring physical removal or replacement of a SIM card. The eUICC is a software specification, not a distinct physical form factor: it defines the logical architecture running on a UICC chip that enables remote profile management, distinguishing it from traditional SIM cards that bind a device permanently to a single operator's credentials at the time of manufacture. The specification is governed by the GSM Association (GSMA) and underpins the consumer and industrial eSIM technologies deployed in smartphones, tablets, and connected devices.

The eUICC specification emerged from the need to simplify cellular connectivity for machine-to-machine (M2M) and Internet of Things devices that are deployed in large volumes across multiple geographic regions, where manually provisioning individual SIM cards is logistically impractical. By enabling operators to provision and manage subscriptions remotely, eUICC reduces the operational cost of managing device connectivity at scale.

eUICC Architecture and Profile Management

The eUICC logical architecture consists of a primary platform layer, which provides cryptographic credentials and a secure execution environment, and a profile layer, which contains the operator-specific data including network authentication keys, international mobile subscriber identity (IMSI), and service configuration. Each profile behaves identically to a traditional SIM from the network's perspective, but the eUICC can hold multiple profiles simultaneously and activate or deactivate them on command. KORE Wireless provides a practical overview of eUICC and its distinction from physical eSIM form factors, explaining how the profile management layer interacts with the underlying secure hardware.

Remote SIM Provisioning

Remote SIM provisioning (RSP) is the mechanism by which operator profiles are downloaded, activated, and deleted on an eUICC without physical access to the device. GSMA defines two separate RSP architectures: SGP.02 for M2M devices, which uses a push model controlled by the network operator, and SGP.22 for consumer devices, where the end user initiates profile downloads through a local user interface. Emnify's technical description of eUICC and remote provisioning outlines how the subscription manager roles, specifically the Subscription Manager Data Preparation (SM-DP+) server and the Subscription Manager Discovery Service (SM-DS), coordinate to deliver profile data securely to the device. The RSP infrastructure relies on asymmetric cryptography and certificate chains rooted in the GSMA's Certificate Issuer authority.

Security and Standards

Security is central to the eUICC specification because the credential material stored on the card is the basis for network authentication. The secure element on which the eUICC logical architecture runs must resist physical and logical attacks, including side-channel analysis and fault injection. GSMA's SGP.21 and SGP.22 specifications, along with the associated security guidelines, define the cryptographic algorithms, key management procedures, and audit requirements that eUICC implementations must satisfy. Eseye's overview of eUICC importance for IoT describes how compliance with these specifications, verified through GSMA-accredited security evaluation laboratories, is required before operators can use an eUICC platform for commercial deployment.

Applications

The Embedded Universal Integrated Circuit Card has applications in a wide range of connected-device categories, including:

• Consumer smartphones and tablets, where users switch carrier subscriptions without a physical SIM swap
• IoT and industrial M2M devices, deployed globally and provisioned remotely after installation
• Connected vehicles, where in-vehicle cellular modules receive over-the-air operator updates
• Wearables and smartwatches, which use compact eUICC-enabled chips where traditional SIM slots are impractical
• Enterprise device management platforms, using bulk eUICC provisioning to deploy cellular connectivity at scale