Apple just released a Universal Link making the install of eSIMs on iOS devices much faster and easy to do. Essentially what is happening here is the Apple link passes the LPA (Local Profile Assistant) string directly to the iOS eSIM install process, rather than needing to use the device camera to scan a QR Code and read the LPA string.
While this link method may seem obvious after trying it, Apple is notoriously cautious when dealing with their Core Telephony framework. In fact Apple removed support for their previously attempted “Open Photos” method for eSIM install, so hopefully they have settled on this new eSIM installation standard.
That makes four eSIM install methods
We now have a total of four methods for eSIM installation:
- QR code scan – LPA string contained in QR code
- Manual entry – LPA string manually entered
- In-app provisioning – LPA details passed from app to Core Telephony framework (Apple approval required )
- 🆕 Universal link – LPA details passed from link
How the Universal Link works
Firstly, here is the Apple Universal Link:
https://esimsetup.apple.com/esim_qrcode_provisioning?carddata=LPA:1$GSMA_SMDP_Address$activation_code
By clicking this link while on an iOS 17.4 or newer device, the user will be taken straight to the eSIM install screen, skipping the need for the QR code. No results are currently give in clicking from a non iOS device.
Click this link on an iOS device to test it:
https://esimsetup.apple.com/esim_qrcode_provisioning?carddata=LPA:1$TEST$link_test
Or from a button:
After the link is clicked you should see the following:
The “Universal” link method for installation is a huge improvement in simplification as opening the camera app is no longer needed.
Take the LPA data string found in any commercially available eSIM QR code and append to the Universal Link to create an install link.
Connecting with eSIM Access API
When using the eSIM Access API for resellers, part of the eSIM payload in JSON contains the LPA string that can be used to make up the eSIM install link:
"ac": "LPA:1$rsp-eu.redteamobile.com$0DDF3444B0B349B3AEADCDC6D6290D9B",You would compose a link using the ac variable that looks like:
https://esimsetup.apple.com/esim_qrcode_provisioning?carddata={{ac}}A more complete link that could be placed into an order email or in an application:
<a href="https://esimsetup.apple.com/esim_qrcode_provisioning?carddata={{ac}}" title="iOS 17.4 and later eSIM install link">iOS install link</a>The details as posted by Apple are:
Universal Links should be all lower case. Only the GSMA activation code (QR code), passed in as
carddata, is customized for the carrier’s SM-DP+ and eSIM profile. Use the iOS user agent in web requests to determine when to offer Universal Links for eSIM, which are only be enabled on iOS 17.4 and later. (92405493)
Adding a link shortener
Additionally, the Universal link works in link shortener services like t.ly which could be useful for tracking.
Example: https://t.ly/YTZ8-
(https://esimsetup.apple.com/esim_qrcode_provisioning?carddata=LPA:1$TEST$link_test)
eSIM Access Shareable Link
eSIM Access has implemented the iOS install link into our shareable link. If using the shareable link to deliver eSIMs, iOS users now have the Quick Install option.
Android Universal Install Link
We expect Android would quickly be able to copy this functionality, and offer their own version of a Universal install link.
With both major OSs, the links could likely be combined into a single “Double Universal” install link that has OS detection and presents the user the correct link for their respective device.
Security Concerns
Clicking unknown links is always a cause for concern. The link activity here, however, would be no different than the QR code scanning. LPA servers are highly secured by cryptographic master keys and chance of compromise is highly unlikely. Apple has presumably sandboxed usage of the install link to a narrow case for valid LPA servers.
Criminals may one day disguise malicious links in emails offering “Free eSIMs”, but the solution here is no different than previous guidance – do not click on links from untrusted sources.
Summary
With the new Apple Link, it is easy to add click to install functionality for your eSIM Access eSIM install process.
