eSIM vs Physical SIM for Enterprise Phone Fleets: SM-DP+ Remote Provisioning, Dual-SIM Failover, and Device Swap

Compare eSIM and physical SIM architecture, SM-DP+ remote provisioning, MDM anti-tamper policies, Dual-SIM Dual-Standby routing, and broken-phone swap workflows.

The eUICC chip used to host the eSIM is installed via surface-mount technology at the factory and uses the same electrical interface as a physical SIM as defined in ISO/IEC 7816 in a 6 mm × 5 mm format; once an eSIM carrier profile has been installed on an eUICC, it operates in the same way as a physical SIM, complete with a unique ICCID and network authentication key generated by the carrier. Compare the remote provisioning architecture, anti-tamper restrictions, and field replacement workflows below alongside the enterprise mobile security guide to prevent unplanned fleet downtime when handsets fail. One common physical form factor of an eUICC chip is Machine-to-Machine Form Factor 2 (MFF2), and all eUICCs are programmed at the factory with a permanent eUICC ID (EID) used by the provisioning service to associate the device with a carrier subscription and negotiate a secure programming channel. By design, eSIMs cannot be cloned or modified, are designed to operate only on a specific device, and the GSMA eSIM specification SGP.21 restricts eSIM profiles from being exported from one eUICC to another.

Balance anti-theft binding against emergency field swap recovery

With a physical SIM, someone can quickly steal a user’s SIM containing the user’s phone number to receive SMS communication such as one-time passcodes or personal identification numbers, whereas with an eSIM this is not possible. When an Apple device management service sends the Refresh Cellular Plans command with the address of the carrier’s eSIM (SM-DP+) server, the device downloads, installs, and activates its eSIM, which may take up to three minutes. If an eSIM profile assigned to a device on the carrier’s server has already been downloaded once, it is deleted and will not be available for further retries.

Removable SIM card next to an ejected smartphone SIM tray and a ruler on a workbench
The Nano-SIM (4FF) format, introduced in early 2012 under ETSI TS 102 221 V11.0.0, measures 12.3 mm (0.48 in) in length, 8.8 mm (0.35 in) in width, and 0.67 mm (0.026 in) in thickness.

What Is eSIM vs Physical SIM: Form Factors, Hardware Identity, and Remote Provisioning

Compare the published physical dimensions and governing specifications across removable SIM generations and embedded eSIM hardware below:

Form FactorPublished Dimensions and Governing Specification
Full-size (1FF) SIMThe Full-size (1FF) SIM card format, introduced in 1991 under ISO/IEC 7810:2003 (ID-1), measures 85.6 mm (3.37 in) in length, 53.98 mm (2.125 in) in width, and 0.76 mm (0.030 in) in thickness.
Mini-SIM (2FF)The Mini-SIM (2FF) format, introduced in 1996 under ISO/IEC 7810:2003 (ID-000), measures 25 mm (0.98 in) in length, 15 mm (0.59 in) in width, and 0.76 mm (0.030 in) in thickness.
Micro-SIM (3FF)The Micro-SIM (3FF) format, introduced in 2003 under ETSI TS 102 221 V9.0.0 (Mini-UICC), measures 15 mm (0.59 in) in length, 12 mm (0.47 in) in width, and 0.76 mm (0.030 in) in thickness.
Embedded-SIM (eSIM)The Embedded-SIM (eSIM) format, introduced in 2016 under ETSI TS 102.671 V9.0.0, JEDEC Design Guide 4.8 (SON-8), and GSMA SGP.22 V1.0, measures 6 mm (0.23622 in) in length by 5 mm (0.19685 in) in width.
Three removable SIM card sizes placed side by side showing their gold contact pads
All versions of the non-embedded SIM cards share the same ISO/IEC 7816 pin arrangement.

On GSM SIM cards, the packed BCD ICCID data field has room for 20 digits (using hexadecimal digit ‘F’ as filler when necessary), resulting in 20-digit (19+1) and 19-digit (18+1) ICCIDs in practice depending on the issuer. The GSMA maintains three versions of the eSIM standard: SGP.22 for consumer devices, SGP.02 for machine-to-machine (M2M) devices, and SGP.32 (published in May 2023) for server-driven remote profile management in unattended, large-scale IoT deployments. An eSIM can be a physical eSIM in a SIM card form factor or a soldered eUICC chip on the modem, and requires connectivity to the eSIM profile provider’s SM-DP provisioning server during both provisioning and deletion of SIM profiles on the eSIM chip. On the Teltonika RUT986 LTE Cat 4 router for industrial IoT applications, the eSIM uses a bootstrap initial profile download for demanding deployments, offering zero-touch deployment and centralized management.

SM-DP+ Remote Provisioning, Local Profile Assistant, and Baseband Requirements

Starting with Android 9, the Android framework provides standard eUICC APIs, while the Local Profile Assistant (LPA) standalone system app serves as a bridge between the SM-DP+ (remote service that prepares, stores, and delivers profile packages to devices) and the eUICC chip. In Android, EuiccManager provides downloadSubscription(), switchToSubscription(), and deleteSubscription(), while EuiccCardManager provides ES10x functions based on GSMA RSP v2.0 including prepareDownload(), loadBoundProfilePackage(), retrieveNotificationList(), and resetMemory(). When making a custom LPA, developers should work with their modem vendor, eUICC chip or eSIM OS vendor, SM-DP+ vendors, and carriers to ensure interoperability within the RSP architecture, and should follow the GSMA SGP.23 RSP Test Plan for best test coverage.

On power-up, an eSIM modem must send terminal capabilities encoding support for Local Profile Management and Profile Download per ETSI TS 102 221 Section 11.1.19.2.4, where Bytes [1-3] must be 83 (Tag), 01 (Length), 07 (eUICC capabilities). Devices launching with Android 10 must support IRadioConfig HAL v1.2 (where SimSlotStatus includes Embedded Identity Document, EID) and IRadio HAL v1.4 (where CardStatus includes ATR in v1.2 and EID in v1.4). LPA profile provisioning uses the SM-DP server hostname (sm-dp-plus), activation code token (matching-id), and optional one-time password (confirmation-code), decoded from a QR string such as ‘lpa 1 server example io abcd10efghi5kl6m’, while querying esim-id returns an EID such as ‘8903302342630000000004181fffffff’. For bench-level cellular and power fault isolation on enterprise handsets, see the smartphone hardware diagnostics overview.

Broken-Screen and Dead-Motherboard Device Swap: Physical Tray vs eSIM Re-Provisioning

If a cellular carrier supports eSIM Carrier Activation, eSIMs can be automatically installed on an iPhone (with iOS 16 or later) or iPad (with iPadOS 16.1 or later) with no device management service required, or during device setup using Automated Device Enrollment with Apple School Manager or Apple Business. Transferring a SIM from a previous iPhone to a new iPhone using eSIM Quick Transfer without contacting the carrier requires both devices to be signed in with the Apple Account, nearby with Bluetooth turned on, running iOS 18.4 or later, and the previous iPhone to be unlocked with its device passcode to confirm the transfer onscreen. Users should not erase an eSIM as a troubleshooting step unless directed by their carrier because erasing an eSIM requires contacting the carrier to get a new one.

Smartphone displaying the SIM installation screen with its side SIM tray ejected
When erasing a managed Apple device, administrators can initiate a Remote Wipe command with the Preserve Data Plan option enabled to retain the eSIM or turned off to remove it; additionally, eSIMs are not removed when using “Erase All Contents and Settings” in Apple Configurator or using DFU restore mode.

When a field handset cannot power on or unlock for device-to-device transfer due to a board fault, review the diagnostic steps in the phone motherboard repair and PMIC short-circuit guide before authorizing hardware replacement.

MDM Anti-Tamper and Wipe Policies for Apple Supervised and Android Enterprise Fleets

NIST SP 800-124 Rev. 2 (published May 2023) provides recommendations for deployment, use, and disposal of devices throughout the mobile-device lifecycle, covering centralized device management (MDM and EMM) across both organization-provided and personally owned deployment scenarios. Apple’s cellular payload documentation covers managed cellular settings, while carrier activation and plan availability remain separate requirements, and a Work Profile alone does not provision a corporate phone number. Compare the platform cellular restrictions below alongside the small-business MDM and BYOD Work Profile setup guide when configuring fleet profiles:

Policy RestrictionPlatform Scope and Enforcement Behavior
Modify eSIM settingsOn supervised devices running iOS 12.1 and iPadOS 13.1, the Modify eSIM settings restriction means users cannot add or remove an eSIM plan for an iPhone that supports eSIM.
AllowESIMModificationWhen the AllowESIMModification restriction is enabled, device management service administrators can still use the Refresh Cellular Plans command to install eSIMs, while users are prevented from installing an eSIM even if a ‘Cellular Plan is Ready to be Installed’ notification appears.
forcePreserveESIMOnEraseThe forcePreserveESIMOnErase restriction on a supervised device prevents deletion of an eSIM when the user selects Erase All Contents and Settings or when the device erases after a certain number of incorrect passcode attempts, maintaining connectivity without a Wi-Fi connection; however, the operating system doesn’t preserve an eSIM if Find My initiates erasing the device.
Allow ESIM Outgoing TransfersOn an iPhone or iPad with iOS 18 and iPadOS 18 or later, the Allow ESIM Outgoing Transfers restriction prevents eSIMs from being transferred to a newly set up device using eSIM Quick Transfer.
Modify cellular plan settingsOn supervised devices running iOS 11 and iPadOS 13.1, the Modify cellular plan settings restriction means users cannot change any settings for the cellular plan.
DISALLOW_CONFIG_MOBILE_NETWORKSAdded in Android API level 21, DISALLOW_CONFIG_MOBILE_NETWORKS (constant ‘no_config_mobile_networks’) disallows a user from configuring mobile networks and can only be set by a device owner, a profile owner on the main user, or a profile owner of an organization-owned managed profile on the parent profile.
DISALLOW_SIM_GLOBALLYAdded in Android API level 35, DISALLOW_SIM_GLOBALLY (constant ‘no_sim_globally’) blocks the download of embedded SIMs on the device and can only be set by a device owner or a profile owner of an organization-owned managed profile.
DISALLOW_CELLULAR_2GAdded in Android API level 34, DISALLOW_CELLULAR_2G specifies if a user is not allowed to use 2g networks (since 2g has no mutual authentication between a device and a cellular base station) and can only be set by a device owner or a profile owner of an organization-owned managed profile on the parent profile.

Dual-SIM Failover, Multiple Enabled Profiles, and Hardware Compatibility Matrices

On an iPhone XS, iPhone XS Max, iPhone XR, or later, an eSIM enables users to manage up to eight or more eSIMs on the device and activate new plans digitally. On an iPhone using Dual SIM Dual Standby (DSDS), both phone numbers can make and receive voice and FaceTime calls and send and receive messages using iMessage, SMS, and MMS, but the iPhone can use only one cellular data network at a time. On a Dual SIM iPhone, if Allow Cellular Data Switching is turned off and the user is on a voice call using a number that is not the designated cellular-data number, cellular data will not work during the call; turning on Allow Cellular Data Switching automatically switches that line to use both voice and data during the call.

Hardware or OS GenerationPublished eSIM, Physical SIM, and Dual-SIM Support
iPhone Dual eSIM vs Single eSIMAll iPhone 13 models and iPhone SE (3rd generation) support Dual eSIM, whereas all iPhone 12 models, iPhone SE (2nd generation), all iPhone 11 models, and all iPhone X models support Single eSIM.
U.S. eSIM-Only Apple iPhone and iPad ModelsAll iPhone 14 or later models sold in the United States, and all iPad Pro (M4) and iPad Air (M2) models, are eSIM only and cannot have a physical SIM removed or replaced.
China Mainland, Hong Kong, and Macao iPhone ModelsIn China mainland, only iPhone 18 Pro, iPhone 18 Pro Max, iPhone Duo, iPhone 17e, and iPhone Air support eSIM, whereas in Hong Kong and Macao certain iPhone models feature Dual SIM with two nano-SIM cards.
Google Pixel Dual-SIM and eSIM-Only MatrixGoogle Pixel 3a and later phones support Dual SIM Dual Standby (DSDS) with one physical SIM and one eSIM (except Pixel 3a bought in Japan), Pixel 4a (5G) and later connect to 5G in dual SIM mode, Pixel 7 and Pixel 7 Pro or later can use 2 eSIM profiles at once, and US Pixel 10 or later phones (except Pixel 10 Pro Fold) can only use an eSIM.
Aluminum smartphone back panel next to an ejected dual-slot SIM card holder
On devices running Android 12 and lower without MEP, an eSIM slot supports only a single enabled profile at one time and cannot support DSDS on a single eUICC, forcing OEMs to pack two eSIM elements into an eSIM-only device to provide dual SIM support.

For devices running Android 13 or higher (declaring feature flags android.hardware.telephony.euicc and android.hardware.telephony.euicc.mep), Android supports Multiple Enabled Profiles (MEPs) so a single eUICC chip can host multiple eUICC ports linked to modem basebands for Dual SIM Dual Standby (DSDS) across two different carriers at the same time. For devices running Android 14 or higher, Android supports GSMA SGP V22 3.0 MEP-A1 (where ISD-R is selected on port 0, ES10 commands are sent to port 0, and profiles are selected on eSIM ports 1 and higher) and MEP-B (where ISD-R and profiles are selected on any port and the command port and target port are always the same).

Enterprise Phone Fleet eSIM and Physical SIM Evaluation Checklist

Work through this operational sequence before migrating a company handset fleet between physical cards and remote eSIM provisioning:

  • Record hardware identity alongside asset serials. Capture each handset’s embedded chip identifier in the management inventory before assigning carrier subscriptions or staging zero-touch enrollment.
  • Lock profile modification and outgoing transfer controls. Enable supervised or device-owner cellular restrictions so end users cannot delete corporate profiles or transfer lines to unmanaged personal phones.
  • Document the dead-handset recovery path. Maintain a carrier portal procedure for re-binding lines to spare devices when a damaged screen or logic board prevents onscreen transfer confirmation.
  • Verify dual-line data switching behavior. Test voice and data routing on dual-standby handsets so field staff do not lose mobile data connectivity while taking calls on a secondary line.
  • Align wipe flags with asset disposition. Keep data plan preservation enabled when reprovisioning active fleet phones, and disable preservation when retiring hardware under the enterprise mobile security lifecycle.

Sources

  • Wikipedia — SIM card and eSIM Technical References.
  • Apple Platform Deployment — Prepare to Use eSIMs, Deploy Devices with Cellular Connections, and Restrictions for iPhone and iPad.
  • Apple Support — Set Up eSIM on iPhone, Using Dual SIM with an eSIM, and How to Erase an eSIM.
  • Android Open Source Project — Implementing eSIM, Modem Requirements for eSIM Support, and Multiple Enabled Profiles.
  • Android Developers — UserManager API Reference.
  • Google Pixel Help — How to Use Dual SIMs on Your Google Pixel Phone.
  • National Institute of Standards and Technology — Guidelines for Managing the Security of Mobile Devices in the Enterprise.
  • MikroTik RouterOS Documentation — Cellular eSIM Management.
  • Electronic Design — Teltonika Cellular Router eSIM Bootstrap Architecture.