Glossary · IoT

IPAd

IoT Profile Assistant in the IoT Device

Also known as: IPA in the device, device-based IPA

IPAd (IoT Profile Assistant in the IoT Device) is the variant of the SGP.32 IPA that runs as software in the device — typically in the cellular module’s firmware or in an application on the host processor — rather than inside the eUICC. It talks to the eIM and SM-DP+ over the network, and to the eUICC through the standard ES10 interfaces.

How IPAd works

The IPAd sits between the network and the chip:

  • Network side: it reaches the eIM over ESipa (for example HTTPS or CoAP/DTLS) and, for direct profile download, the SM-DP+ over ES9+.
  • Card side: it sends commands to the eUICC over ES10a and ES10b — the same style of interface the consumer LPA uses — to read eUICC information, load a Bound Profile Package and forward eUICC Packages.

Because it is ordinary device software, the IPAd can use the device’s full IP stack, TLS libraries and storage, and it can be updated with firmware releases.

IPAd in modules and hosts

Implementation Typical owner Considerations
In the cellular module firmware Module vendor Exposed to the host through AT commands; host software stays simple
In the host application Device maker More control, but must reach the eUICC through the modem, for example via logical-channel AT commands

IPAd vs. IPAe

The alternative, IPAe, places the IPA inside the eUICC itself, which lets a device without IPA software support remote management. SGP.32 makes IPAe optional, so most designs implement IPAd. The choice determines which component you must certify, update and debug.

Why it matters for testing

An IPAd inherits every quirk of the device it runs on: its data connection, DNS, clock (used for certificate checks), card-access handling and power-saving behavior. A module that sleeps for hours in power saving mode may not contact the eIM when you expect. The GSMA’s IPA test specification, SGP.33-2 (part of SGP.33), covers conformance, but field behavior still needs testing on live networks. SimCheck.ai lets you choose, per modem, whether profiles install through a cloud eIM (SGP.32) or an SGP.22-style LPA — see how to test SGP.32 devices.

Last updated · SimCheck.ai team

See it on your own eSIMs

Start a free trial with test tokens included, or book a demo to test your profiles across your target markets.