Gsma Fs.38 May 2026
The GSMA FS.38 (SIMalliance Embedded UICC Profile Package Specification) is a foundational technical standard for the eSIM (embedded SIM) ecosystem.
Adoption tips
- Start with a narrow pilot: share a limited set of event types with a small number of trusted partners.
- Iterate on action thresholds and confidence mappings based on pilot feedback.
- Automate telemetry enrichment to improve confidence scores before escalating actions.
- Document playbooks for common event types to reduce decision latency.
The Core Feature: Standardized Profile Package Format (Interoperability)
Before GSMA FS.38, SIM profiles were largely proprietary. A profile built by one vendor might only work on chips from that same vendor. FS.38 changed this by defining a generic, neutral format for how a SIM profile is described, packaged, and loaded onto an eUICC (embedded Universal Integrated Circuit Card). gsma fs.38
- What is a Store? Any discrete location with compute, storage, and network resources (e.g., a telco edge node, a retail micro data center, a factory floor gateway).
- Federation: Stores communicate peer-to-peer (P2P) or via a lightweight orchestration layer to share state, offload tasks, and authenticate users.
Firewall Implementation: It suggests deploying signaling firewalls that can perform deep packet inspection (DPI) of SIP headers and SDP payloads to detect anomalies. The GSMA FS
- Device authentication: The specification defines a framework for authenticating mobile devices, including smartphones, tablets, and other mobile equipment.
- User authentication: FS.38 also covers user authentication, including support for various authentication methods, such as passwords, PINs, and biometric authentication.
- Secure authentication protocols: The specification mandates the use of secure authentication protocols, such as Transport Layer Security (TLS) and Authentication and Authorization for Constrained Networks (ACE).
- Interoperability: FS.38 ensures interoperability between different mobile devices, networks, and services, enabling seamless authentication and access to mobile services.