GSMA certifies Thales eSIM for security

  • July 9, 2025
  • Steve Rogerson
  • Thales

Thales has achieved an essential security certification for its eSIM, reinforcing its position in trusted connectivity management for the IoT.

The certification, granted by the GSMA under the eSIM Security Assurance (eSA) scheme, marks a milestone in enabling large-scale, secure and efficient IoT deployments across industries including smart metering, healthcare and automotive.

This positions Thales as a trusted partner capable of providing full protection against cyber threats, delivering end-to-end security, from chip to cloud, and ensuring compliance with emerging security standards such as the EU Cyber Resilience Act.

With more than 5.8 billion IoT cellular connections expected globally by 2030 according to GSMA Intelligence, businesses and industries face growing pressure to deploy connected devices at scale, securely and efficiently. The SGP.32 IoT specification has been designed to meet the needs of IoT devices by simplifying remote connectivity activation while maintaining high levels of trust. And more specifically, the GSMA eSA certification (www.gsma.com/solutions-and-impact/industry-services/assurance-services/euicc-security-assurance-esa/esa-certified-products) ensures the eSIM product (www.thalesgroup.com/en/markets/digital-identity-and-security/mobile/connectivity/esim/adaptative-connect), such as hardware, firmware, OS and cryptographic libraries, complies with strict security and functional requirements, recognised across the global mobile ecosystem.

In other words, obtaining this certification marks a key security milestone for Thales, as it serves as a globally recognised seal of trust that helps IoT service providers, device makers and car manufacturers, select products that are secure, future-proof and ready for rapid deployment. Indeed, this certification brings concrete benefits for ecosystem players:

  • Operational efficiency: enables mass remote activation of eSIM-enabled IoT devices, reducing logistics, physical SIM handling and field interventions.
  • Security by design: ensures robust protection of credentials and connectivity data throughout the device lifecycle.
  • User trust and privacy: builds confidence among end users by securing device identities and communication, essential for sensitive use cases such as smart meters, medical devices, track-and-trace systems, security cameras or connected vehicles.

“In an IoT world that’s growing fast and moving even faster, trust and simplicity are key” said Eva Rudin, vice president at Thales (www.thalesgroup.com). “With this certification, Thales continues to pave the way for secure, large-scale deployments of connected devices that are easy to manage and future-ready. It’s about removing friction, increasing security and enabling innovation at the speed the market demands. With dozens of projects already underway with industrial and automotive players, we are confident that this move will further accelerate the adoption of eSIM technology among more than 100 of our customers, including mobile network operators, IoT service providers, automotive companies and device manufacturers.”