Demystifying Technology: Embedded SIM (eSIM)

Reviewed and updated in October 2026.

Virtual servers, virtual desktops, virtual meetings: plenty has gone virtual, and the SIM card is no exception. An embedded SIM, or eSIM, is built into the hardware of a mobile device, so nobody has to insert a plastic card into a slot anymore.

An eSIM (embedded SIM, technically an eUICC) is a chip soldered into a smartphone, tablet, laptop or IoT device that stores one or more mobile operator profiles in software. Instead of shipping and inserting a physical SIM card, the operator profile is downloaded over the air, and it can be added, switched or removed remotely. For enterprises, that means mobile connectivity can be provisioned and withdrawn together with the device, through the same device management.

What is an eSIM?

The eSIM is the next step for the SIM card, the small piece of plastic that has let mobile devices authenticate securely on GSM networks for decades, first for calls and later for data over 2G, 3G, 4G and 5G.

Earlier evolutions only made the card smaller: mini-SIM, micro-SIM, nano-SIM. The eSIM is different. It is a hardware chip in the device that can store several operator profiles at the same time.

More than dual SIM

Having more than one line on a device is nothing new. Dual SIM phones took two physical cards, but for a long time they were limited to a small number of models, and often only one slot supported 4G and data while the second was restricted to calls. That explains the modest success with consumers and the near absence in enterprises.

eSIM removes these limits. Apple, Samsung, Google and other major manufacturers support it, it holds several profiles, and it suits enterprise scenarios where work and personal use need to be separated. Since the iPhone 13, iPhones can run two eSIMs at the same time, according to Apple's Dual SIM documentation. Android supports multiple enabled profiles on a single eSIM chip from Android 13, provided the manufacturer implements it. Apple has also sold eSIM-only iPhones since the iPhone 14 in the US, and further markets and models have followed.

How does eSIM help separate work and personal use?

Separating work and personal life is a key goal wherever BYOD (Bring Your Own Device) or COPE (Corporate-Owned, Personally Enabled) programs are in place. In practice, separating calls and data usage has been harder than separating apps. With eSIM, both scenarios are covered: whether the device is personal or corporate-owned, the company can provision a work line for business calls and approved work apps, while the user keeps a personal line for private calls and apps. Both are managed through a UEM (Unified Endpoint Management) solution. How ownership models compare is covered in Why Ownership Model Matters.

During the COVID-19 pandemic, millions of employees moved to working from home, whether or not their organizations were ready. Most connected through their home Wi-Fi. Unlike a corporate network, home Wi-Fi is not managed by the company, so there is no way to enforce a security level such as WPA3, and it is shared with other devices and users. The same applies on the road, in hotels, airports or at a customer's site. eSIM gives corporate devices a secure alternative: a 4G or 5G connection from anywhere, on smartphones and tablets as well as on laptops. More on the risks in Everyday Security Risks: Wi-Fi.

eSIM is also flexible for business travel. For a stay of a few days or weeks in another country, a third, data-only line can be added for that trip, so neither the personal nor the work line incurs roaming charges. How many profiles can be active at the same time depends on the device, as described above.

How do enterprises deploy eSIM at scale?

eSIM has changed how voice and data subscriptions reach mobile devices. Previously, companies waited for the operator to send physical SIM cards by mail and then inserted each card into the right device. For a few devices that is manageable; for 100 or 1,000 it means many repetitive, error-prone manual steps.

With eSIM, a user scans a QR code or signs in to the operator's app, and the new line is ready within seconds. When a device is replaced, the eSIM profile can be transferred to the new one if both the manufacturer and the operator support it. Operators no longer need large physical SIM inventories either.

On-demand activation

QR codes work for individual users or a small service desk team, but they do not scale to large rollouts. Through an operator's entitlement server or an MDM solution, a new device can be fully onboarded, eSIM activation included, in one process. On Apple devices, Apple's deployment guide describes how eSIMs can be installed automatically during setup on iPhone with iOS 16 or later and iPad with iPadOS 16.1 or later, how device management can trigger an eSIM installation remotely, and how a restriction prevents users from adding or removing eSIMs. Android 15 lets IT administrators download, activate and delete eSIM profiles on company-owned devices; on personal devices, users can delete the managed eSIM at any time.

Lifecycle management

The same tools let companies deprovision or deactivate an eSIM remotely when a device is lost, stolen, retired or wiped. Devices and their connectivity are managed together instead of separately, which fits naturally into endpoint lifecycle management.

Cost savings

The logistics of physical SIM cards, from assigning each card to a subscription to shipping it to retailers and customers, are considerable for operators. eSIM replaces physical items with a service. Physical SIM cards are also made of plastic, usually PVC, so using fewer of them reduces environmental impact.

Companies save as well: on logistics, as described above, and on mobile budgets, because many operators offer multi-SIM plans that combine a user's voice and data usage across several devices in one contract, which is usually cheaper than one plan per device.

Frequently asked questions

What is the difference between a SIM card and an eSIM?

A SIM card is a removable plastic card with a chip. An eSIM is a chip built into the device that stores operator profiles as software. Profiles are downloaded over the air and can be changed without touching the device.

Can a device use more than one eSIM at a time?

Yes, depending on the device. iPhone 13 and later support Dual SIM with two active eSIMs. Android 13 and later support multiple enabled profiles on one eSIM chip if the manufacturer implements the feature.

Can IT manage eSIMs through UEM?

Yes. On Apple devices, device management can install eSIMs remotely and stop users from removing them. Android 15 gives administrators of company-owned devices control over downloading, activating and deleting managed eSIM profiles. Support also depends on the operator and the UEM solution.

Is eSIM useful for IoT devices?

Yes, especially for cellular IoT devices such as asset trackers using NB-IoT or LTE-M, where swapping physical cards in the field is impractical. See IoT Communications, Long Range for the technologies involved.

Conclusion

eSIM simplifies deployment, adds flexibility between corporate and personal use, supports more than one line per device, removes the need to track physical cards and can lower costs. Whether it is worth deploying depends on your use cases and on what your devices, operators and UEM support. Device-side differences between platforms are covered in Demystifying Apple, Android Enterprise and Samsung Knox.

Planning to bring eSIM into your digital workplace? Our team supports endpoint management projects from planning to rollout. Contact us with any questions.