Hi,
Is it possible to download a travel eSIM from an SM-DP+ server using pysim or lpac and then provision it through another SM-DP+ server, like Simlessly or osmo-smdpp?
Assuming the eSIM allows multiple downloads and isn’t bound to a specific EID after the first download.
As I understand it, IMSI/KI/OPC/ICCID are required for the provisioning of an eSIM profile?
I would really appreciate any insights!
No, as the download is actually made to the eUICC and not to the LPA software. A profile is cryptographically bound to one singe eUICC, using its ECDSA public key. So unless you can break the GSMA security scheme and extract a ECDSA private key from an eUICC, you cannot decrypt and re-bind that profile to another eUICC.
production eSIM profiles that allwo multiple downloads (like thoes listed at Known Test Profiles | eUICC and eSIM Developer Manual) are in realtity different eSIM profiles. Each one will have a different ICCID, etc. They’re basically creating a new eSIM profile each time the same matchingID (activation code) is provided by the LPA.
Hi,
Thank you very much for the explanation. Does the same apply to physical sim cards? Or is there a way to provision them as via a sm-dp+ server?
physical SIM (UICC, USIM, ISIM) cards have no involvement with a SM-DP+.
I understand that.
But would it be possible to “convert” a physical SIM to an esim profile and provision it via a SM-DP+ Server?
So I would be able to use physical SIMs on esim only devices.
But I would probably have the same problem here with the OPC and AI, right?
If you are the operator (MNO/MVNO) that has issued that physical SIM, then yes, of course you can do that. If you are not the issuer of the card, then you do not know the key material. That’s the entire purpose of SIM cards: To have a hardware securty token for authentication that cannot be cloned by the user.