eSIM Profile Download Sequence

GSMA SGP.22 — Three-Phase Flow: Initiation → Mutual Authentication → Installation

End User Operator SM-DP+ LPA + eUICC SM-DS Phase 1: Initiation 1. Subscribe, provide EID 2. ES2+.DownloadOrder 3. ICCID reserved 4. ES2+.ConfirmOrder 5. ES12.RegisterEvent (optional) 6. Activation Code (LPA:1$...) Phase 2: Mutual Auth Gen Ch 7. eUICCChallenge 8. ES9+.InitiateAuthentication Sign 9. serverSigned1 + signature + CERT.DPauth 10. ES10b.AuthenticateServer Verify Sign 11. euiccSigned1 + CERT.EUICC Verify ✓ Mutual Authentication Complete Phase 3: Install 12. ES8+.InitialiseSecureChannel (ECDH key agree) 13. ES8+.ConfigureISDP (create ISD-P) 14. ES8+.StoreMetadata → LoadProfileElements… Profile Installed

Based on GSMA SGP.22 v2.2.2 — Section 3.1 Profile Download and Installation