Comprehensive technical knowledge base covering 12 GSMA eSIM specifications. 84+ articles on Remote SIM Provisioning — SGP.02, SGP.22, SGP.32, SGP.41, SGP.29, SGP.23, SGP.25, SGP.26 and more.
You open a brand new toy, flip the switch, and it just works. No need to find batteries, no trip to the store: they were already inside when it left the factory. That’s exactly what SGP.41 IFPP does for eSIM chips: it loads the magic internet keys right on the assembly line, before the device ever reaches your hands!
IFPP stands for In-Factory Profile Provisioning. It means: pre-loading magic keys at the factory: like a toy that comes with batteries already inside.
The normal eSIM download (SGP.22) needs the device to be online: it calls a Key Maker over the internet and does a whole secret handshake. That’s fine when you’re sitting at home with Wi-Fi. But on a factory floor?
| Factory Problem | Why It Matters |
|---|---|
| No internet on the assembly line | Factories are often disconnected for security |
| Too slow: multiple back-and-forth steps | At 1 million devices per month, seconds add up to days! |
| Factory workers aren’t security experts | They shouldn’t need to manage encryption keys |
| No end user to tap “OK” | There’s nobody to confirm a download |
SGP.41 solves all of these at once. The magic trick? Do all the heavy cryptographic work before the key ever reaches the factory.
In the normal eSIM world, the Key Maker creates a locked package custom-made for your phone during the download. That’s like a locksmith making a key while you wait at the counter.
With IFPP, the Key Maker creates the locked package in advance and ships it to the factory. When your device rolls down the assembly line, the package is already waiting: just push it in, snap, done!
| Aspect | Normal Way (SGP.22) | Factory Way (SGP.41) |
|---|---|---|
| When is the key created? | During download, live | In advance, pre-made |
| Internet needed? | Yes | No: offline loading |
| How many steps? | Multiple back-and-forth | Single push |
| End user involved? | Yes (scan, confirm) | No |
What it does:
What it does NOT do:
Think of them as two stages in a device’s life:
Your laptop might leave the factory with a pre-loaded key (thanks to SGP.41), and later you might add a travel eSIM from a different carrier (thanks to SGP.22). Same chip, two different chapters of its life!
Without SGP.41, every eSIM device would need to connect to the internet before it could get its first key. That means: no out-of-the-box connectivity for laptops, no day-zero telematics for cars rolling off the line, and no bulk provisioning for millions of smart meters.
SGP.41 makes eSIM work at the scale and speed of a real factory floor.
The IFPP specification (SGP.41 v1.0) was published on 28 February 2025 : it’s one of the newest members of the GSMA eSIM family! It reuses security tricks from older eSIM specs, so it doesn’t reinvent the wheel: it just makes those wheels turn on the factory floor.
Kid-friendly version of GSMA SGP.41 v1.0: eSIM In-Factory Profile Provisioning