Blog Post

Surface IT Pro Blog
2 MIN READ

eSIM: Full manageability for mobile data on PC

John_Kaiser's avatar
John_Kaiser
Former Employee
Feb 04, 2019

For frontline workers struggling with potentially insecure Wi-Fi hotspots, the convenience and security of always connected LTE are compelling. But perhaps less immediately obvious are the benefits of embedded SIM (eSIM) in LTE devices, not only for large enterprise customers but for smaller and medium-sized business too.

 

eSIM provides the same experience as a physical SIM card — such as access point and IMEI numbers to connect and validate your device — but without the compromises of a standalone card. When you hand out physical SIM cards to employees, you essentially give up control over how the data gets used. You can't tell whether they’re used in devices provisioned by the enterprise, gifted to a family member, or simply sold to the highest bidder.

 

eSIM in Surface Pro LTE

Embedded SIM, where the SIM component is built into a chip on the motherboard, enables IT cost centers to fully manage mobile data usage for the first time.

 

Managing eSIM devices in the Enterprise

Many enterprise customers are already using System Center Configuration Manager for desktop and a mobile device management solution (MDM) for mobile phones. Now with remote eSIM provisioning, IT admins and procurement managers can manage all their corporate devices and data subscriptions directly from familiar MDM tools like Intune. Intune replaces physical SIM cards with metadata — typically contained in a CSV file — that then can be distributed to target users or used to manage profiles customized for a specific geographic region or functional role.  For detailed guidance, see Enable eSIM data connections in Microsoft Intune - Azure.

 

Surface Pro LTE incentivizes foundational ecosystem

The overall industry ecosystem that enables remote eSIM provisioning has only recently become available. Just two years ago, eSIM was still nascent technology in consumer minds. Then came the launch of Surface Pro LTE, leading the engineering development to introduce integrated eSIM in the Windows ecosystem.

 

Since then, investments by operators, infrastructure, silicon and product companies have converged to make eSIM fully viable. As the market evolves further with 5G, unlicensed spectrum, carrier aggregation and other innovations, Surface will continue to make step changes to ensure our products are market-relevant, providing the best possible mobile computing experience possible. This technology is critical to empower all customers to dynamically choose their service providers and enjoy an always connected experience.  In late 2018 and going into 2019, eSIM is becoming more accepted and Surface is proud to have had the courage to commit to this technology early on and partner with service providers to offer connectivity out of the box in more than 100 countries.

 

Getting started with eSIM provisioning

Microsoft is collaborating with global carriers on implementation of enterprise eSIM support. To get started, get help from Intune or reach out to your mobile provider.

 

Learn more

 

Updated Feb 03, 2020
Version 18.0

3 Comments

  • CroxTech's avatar
    CroxTech
    Copper Contributor

    Microsoft can you suggest a way to bulk configure iOS devices with a data cellular eSim plan using Intune without having to go through enrolment. I see this can be done with individual phones but I need another method after enrolment. is there a new profile being created for this or have you used a Powershell script with any other customers I may be able to use ? Any help with this would be appreciated.

    Thanks

    Andy Jones

  • CroxTech's avatar
    CroxTech
    Copper Contributor

    Hi I am looking for guidance specifically from Microsoft in how to successfully deploy eSim's to Android and iOS devices. I beleive the eSim cellular profiles (still in preview at time of writing ) is only for Windows devices ?

    When It comes to applying eSim for iOS/IPads I have seen the MDS article here https://learn.microsoft.com/en-US/mem/intune/remote-actions/update-cellular-data-plan but this is very basic. I am working with my Cellular company EE in the UK to try and get this working and would appreciate some more detailed information in how this should work. For example it says enter a cellular activation URL for the individual mobile but does this assume the eSim is already activated for the device. Does Intune just send the url to the device and then expect the device to process this and if so what does or need to happen on the device, can you share the what service the url needs to link to. As you see a full detailed example or description of the mechanics would be great. Many thanks in advance.

  • JonasBack's avatar
    JonasBack
    Iron Contributor

    Now we just need more devices with LTE. Surface Book? Laptop? Pro 6?