A story of invisible buttons, three magical phases, and keys that obey from across the world
Before v3.x, most eSIM actions happened on your phone: you tapped buttons to enable or disable profiles. But with v3.x's Remote Profile Management (RPM), your mobile carrier can manage your keys from across the world. They send signed commands through your phone's Assistant (LPA), and the Vault obeys: instantly, securely!
The remote control has three main buttons: Enable turns a downloaded key on so your phone can use it. Disable turns it off without deleting the key: it stays in the Vault for later. Delete removes the key forever from the Vault. All three can be triggered remotely by your carrier!
It all starts with the carrier telling SM-DP+ (the Key Maker): "I want to manage this user's profiles remotely." SM-DP+ checks if the carrier has permission, then sends a notification to your phone. Your phone's Assistant (LPA) asks for your permission: only after you say "Allow" does the real magic begin!
Once permission is granted, SM-DP+ prepares a special key package encrypted exclusively for your phone's Vault. It travels through the secure ES9+ tunnel: nobody can peek inside! Your phone downloads the package and stores it in the Vault as a disabled profile. The key is in your device, but not yet turned on!
The final phase: the carrier sends a signed ENABLE command to your phone. The Vault verifies the signature, flips the switch, and: click!: the key is now active and ready to use. Your carrier can send this command from anywhere on the planet. Tokyo, London, or New York: the magic remote control works across the world!
With RPM, a carrier could manage millions of eSIM keys simultaneously: pushing updates, enabling new plans, or deactivating old ones: all without a single customer needing to visit a store. It's like having a magic remote control that can reach every phone on Earth!
đ âĄī¸đ Next: Moving to a New Vault â