IPAe

IPAe (IoT Profile Assistant in the eUICC) is the variant of the SGP.32 IPA that runs inside the eUICC rather than in device software. It gives the chip its own ability to work with an eIM and download profiles, so a device can support remote eSIM management with little or no IPA logic of its own. SGP.32 v1.2 makes IPAe optional and leaves its implementation to the eUICC manufacturer.

How IPAe works

Because implementations are manufacturer-specific, details vary, but one constraint applies to all of them: an eUICC cannot open network connections on its own. An IPAe therefore depends on the device’s modem to provide a data channel — for example through card application toolkit commands such as Bearer Independent Protocol (BIP), which ask the modem to open a connection on the card’s behalf. Over that channel the IPAe exchanges ESipa messages with the eIM, retrieves profiles from the SM-DP+, and applies operations internally.

When IPAe makes sense

• Minimal or legacy devices whose module firmware has no IPA and cannot easily be updated.
• Fleets that mix module vendors, where putting the IPA in the eUICC gives more consistent behavior across modules.
• Retrofits, where an SGP.32 eUICC goes into an existing hardware design.

IPAe vs. IPAd

	IPAe	IPAd
Location	Inside the eUICC	Module firmware or host application
Status in SGP.32	Optional	Default
Device dependency	Modem must support the toolkit features the IPAe relies on	Device must implement the IPA
Updates	Through the eUICC vendor	Through device firmware
Debugging visibility	Lower — logic runs inside the secure element	Higher — logs available on the device

Why it matters for testing

Because an IPAe keeps its logic inside the chip, failures often appear only as symptoms: a profile that never downloads, or a toolkit session the modem silently refuses. GSMA conformance testing covers the IPAe as part of the eUICC under SGP.33-1 (see SGP.33), but against simulated devices; in practice the eUICC and modem have to be tested together, on a live network, to confirm the data channel opens and the eIM exchange completes. SimCheck.ai can install profiles through a cloud eIM on real modems and then run attach and data tests with logs and decoded signaling — see SGP.32 IoT eSIM testing.