eSIM PKI for GSMA

A one-line description of the project

WELCOME TO

SIGN UP FOR OUR CHANNEL PARTNER PROGRAM

...UPCOMING AS SOON AS...

eSIM Business Platform Solution Partners

SIGN UP FOR OUR CHANNEL PARTNER PROGRAM

...UPCOMING AS SOON AS...

A brief description of the project's mission

GSMA Certificate Issuer (CI)

Digital public key certificates play an essential role within the GSMA eSIM and M2M remote provisioning solutions.

Specific requirements for mutual authentication make internet-focussed certificates unsuitable for the GSMA remote provisioning solutions. Instead, specific Public Key Infrastructure (PKIs) are defined for eSIM and M2M remote provisioning. GSMA PKIs enable eUICC and Subscription Management entities to identify and authenticate within the GSMA remote provisioning ecosystems, facilitating security and interoperability.

GSMA PKIs are managed by GSMA Certificate Issuers (CI); organisations recognised by GSMA as Certificate Authorities. GSMA CIs meet defined criteria (GSMA PRD SGP.28) and operate GSMA recognised certificate roots for certificate issuance, in line with the GSMA eUICC PKI Certificate Policy, GSMA PRD SGP.14.

GSMA PKI certificates can be used in eSIM and M2M product that:

Meet the requirements of GSMA’s technical specifications for remote provisioning and
have demonstrated both functional and security compliance to the GSMA specifications.

The GSMA eSIM and M2M compliance processes provide the common means to demonstrate compliance to the specifications and thereby eligibility for a GSMA CI issued certificate.

Click here for more detail on the GSMA eSIM and M2M compliance processes.

Mission of the project

A brief description of the project's mission

Listed GSMA CIs

For further information, or to register an interest in providing PKI infrastructure for Remote SIM Provisioning, please contact the GSMA by sending email to RootCAs@gsma.com.

Test Certificates operated by GSMA CI

In addition to operating Live Certificate roots for commercial product, the GSMA CIs also operate Test Certificate roots. These enabling product developers to request Test Certificates for interoperability testing with pre-compliant product.

Consumer: Test Certificate Issuer Declaration

For Consumer, GSMA maintains the Test Certificate Issuer Declarations that consists:

A list of providers which support the test root certificate operated by GSMA CI, along with a list of the services they support using the test root certificate issuer.

A list of alternate self-signed root test certificate issuers, along with SM-DP+ servers that support them.

Process to declare the supported Test Certificates

If your company is interested to declare the Test Certificates that are supported. Please complete the Test Certificate Issuer Submission Form and send it to TestCICertificates@gsma.com