A story of software updates for your chip, new master keys, and vaults that never stop learning
Your phone's magic vault chip isn't frozen in time. With v3.x, it can learn new tricks: security updates, new key types, even entirely new capabilities: delivered over the air. No need to rip out the old chip and solder in a new one!
Three things can be updated: the Master Key (the vault's root of trust), Profile Content (add or remove applets without deleting the whole key), and Metadata (rename profiles, change carrier names or icons). All delivered securely, signed by trusted authorities!
Updates flow just like profile downloads: the Key Maker signs the update package, it travels through an encrypted tunnel nobody can peek into, your Assistant carries it to the vault, and the vault verifies the signature before installing. Even the assistant can't tamper with the contents!
Not just anyone can teach the vault new tricks! Every update must be digitally signed by a trusted authority. The vault checks the signature against its master key: if it doesn't match, the update is rejected immediately. Even a rogue IT admin can't push a fake update!
With Profile Content Management (PCM), you can add, remove, update, lock, or unlock individual features without deleting the whole profile. It's like renovating one room in your house instead of rebuilding the whole thing: much faster and safer!
These update mechanisms mean an eSIM chip made today could stay secure for 10, 15, or even 20 years: adapting to new cryptographic standards as they're invented. Your phone's vault is no longer frozen in time: it can learn and grow with the future!
📦 Next: The Great Key Delivery →