Cellular IoT device management: What it is & why it matters

The research firm Gartner views IoT as one of the top five game-changing technologies. By 2029, Gartner expects more than 15 billion IoT devices will connect to the enterprise infrastructure. The growth trajectory is remarkable. Industry analysts project tens of billions of connected devices worldwide in the coming years, with the majority connected to IoT platforms.

The data generated from IoT devices and sent over these platforms will be enormous. Companies must figure out how to store an incredible amount of data while also managing, monitoring, and securing every connected device.

This article covers what IoT device management is, how it works, and why choosing the right IoT device management platform is essential for your business success.

Key takeaways

• eSIM with eUICC stores multiple carrier profiles on a single chip and switches between them over the air, eliminating physical SIM swaps for devices deployed across 190+ countries
• GSMA's SGP.32 specification (version 1.2, June 2024) adds the eSIM IoT remote Manager (eIM) and IoT Profile Assistant (IPA) roles, enabling remote provisioning for constrained IoT devices that lack user interfaces or persistent connectivity
• Migrating between connectivity providers depends on your SIM type: eUICC with a Remote SIM Provisioning (RSP) platform supports over-the-air profile changes, while standard SIMs require physical swaps
• With 2G and 3G sunsets accelerating worldwide, LTE-M, NB-IoT, Cat-1, and 5G RedCap offer future-ready options for IoT connectivity at scale

What is IoT device management?

IoT device management is the process of remotely controlling, configuring, maintaining, monitoring, and securing connected devices throughout their lifecycle. It encompasses both hardware logistics and software operations from initial deployment to eventual decommissioning.

Unlike traditional software management, IoT devices are physical hardware requiring a different approach from logistics to connectivity. Effective management means understanding:

• Device status: Real-time operational health
• Digital representation: How the device appears in your system
• Configuration: Current settings and parameters
• Interaction capabilities: How you can control and communicate with it

In logistics, device management begins when a product is packed and ready for shipment. The first step: bringing the device online and onto your network. You need to understand its properties: connected databases, configuration settings, and server requirements.

Then you'll want to monitor how the device operates in the field as it moves from a warehouse to its final destination. With devices deployed nationally or globally, you need to manage them virtually. Connectivity will change as the device moves along the journey, and these connections need to be monitored so the fleet remains operational.

Recommended reading: What is Cellular IoT?

How does cellular IoT device management work?

Once devices connect to your network, cellular IoT device management involves several ongoing responsibilities:

• Configuring each device for use
• Maintaining and updating devices as needed
• Running diagnostics and preventing unauthorized access
• Managing replacements and migrating data

Let's examine each step in detail.

Onboarding devices

Onboarding starts with digital authentication and SIM provisioning: verifying the device's identity before it joins your network. Key onboarding tasks include:

• Authentication: Confirming device identity to distinguish it from rogue devices
• Network recognition: Ensuring the device connects and is visible to your system
• Property assessment: Identifying database connections, configuration, and server requirements

Hologram Dashboard streamlines onboarding by providing a centralized interface where you can activate SIMs, authenticate devices, and monitor their initial connection to your network all from a single view.

Recommended reading: How to understand the different LTE IoT device categories.

Configuring devices

After onboarding, devices typically arrive in default mode. Configuration tells each device what to do, what data to collect, and where to send it. Key configuration tasks include:

• Access controls: Setting restrictions to prevent unauthorized use
• Encryption: Programming passwords for secure data transmission across networks
• Update settings: Enabling automatic security patches
• Data management: Designating backup locations and log storage

Through Hologram’s dashboard, you can configure device settings, set data limits, establish routing rules, and manage access controls across your entire fleet whether you're managing ten devices or ten thousand.

Maintaining and updating devices

Your devices need to stay always-on with network redundancy , communicating using the right protocols for complex environments. Continuous remote monitoring ensures operational status, security, and timely updates. If one IoT device stops working, it can impact your entire project.

This is where Hologram Conductor becomes essential. While the dashboard handles connectivity and monitoring, Conductor is a SIM orchestration platform that manages firmware updates throughout your device lifecycle. Conductor enables you to push over-the-air firmware updates to devices in the field, schedule update campaigns, and roll back changes if needed all without physically touching a single device.

Running diagnostics for detection and prevention

Diagnostics reveal critical operational data:

• Data traffic volume through each device
• Device location tracking
• Network carrier usage

These features reduce downtime impact from unexpected issues. Predictive maintenance helps seal off security breaches before they harm your project, while analytics alert you to emerging problems.

The Hologram dashboard provides real-time diagnostics and analytics, showing you data usage patterns, connection quality, and device health metrics. You can set up alerts to notify you when devices behave unexpectedly or exceed usage thresholds.

Device replacement and data migrations

What happens if a device breaks and you need to replace it? What happens to the devices after you complete your project? How do you know you've decommissioned every one?

You will need a plan to replace devices as well as to phase out a project to help avoid data leaks or system downtime, and thwart any unapproved device access, if a device set for replacement or decommission is compromised.

Among the tasks in this step is migrating all device data, checking its status, and then wiping the device clean. You'll need a process to update information in a database or other record stating when and why the device was replaced or deactivated.

The Hologram dashboard simplifies device lifecycle management by letting you deactivate SIMs, transfer devices between accounts, and maintain complete audit trails of device status changes. This ensures you have full visibility from deployment through decommissioning.

What is eUICC and its benefits for IoT

eUICC stands for embedded Universal Integrated Circuit Card. It is the architecture that stores and switches multiple carrier profiles over the air on a single chip.

eUICC vs traditional UICC

A traditional UICC (the chip inside a standard SIM card) holds a single operator profile. These chips typically have 64KB or 128KB of memory, enough for one profile. An eUICC needs at least 512KB of storage to host multiple profiles and the software required to manage them remotely.

Form factors

eUICC is not limited to the soldered MFF2 (eSIM) form factor. The technology is available in all standard SIM sizes:

• 2FF (mini SIM)
• 3FF (micro SIM)
• 4FF (nano SIM)
• MFF2 (embedded/soldered eSIM)

This means you can use eUICC capabilities with removable SIM cards if your deployment requires physical access for other reasons.

Benefits of eUICC for IoT

• Simplified global deployment: Ship a single hardware SKU worldwide and activate the right carrier profile after devices reach their destination
• Flexible profile management: Switch carriers, add backup profiles, or update network settings remotely without sending technicians into the field
• Cost optimization: Negotiate regional pricing with local carriers and download those profiles over the air, reducing roaming costs
• Single SKU inventory: Maintain one SIM variant across your supply chain instead of stocking region-specific SIMs
• Streamlined carrier relationships: Work with a carrier-agnostic provider like Hologram to access 550+ carriers in 190+ countries through a single platform
• Faster scaling: Provision thousands of devices simultaneously through bulk RSP operations

Challenges for IoT

RSP is harder in IoT than in consumer devices. IoT devices often connect intermittently, lack user interfaces, and may need bulk provisioning during manufacturing. SGP.32 addresses these constraints, but not all providers or eUICC chips support the newest specification yet. Confirm RSP capabilities with your connectivity partner before committing.

Remote SIM provisioning standards

Remote SIM Provisioning (RSP) allows you to download, install, enable, disable, and delete carrier profiles on an eUICC without touching the device. GSMA has published three RSP specifications, each designed for different use cases.

SGP.02 (M2M specification)

SGP.02 addresses machine-to-machine devices where operators manage profiles remotely. The model uses an operator-push approach: the mobile network operator initiates profile downloads to the Subscription Manager (SM-SR and SM-DP), which then delivers them to the eUICC. This specification works well for deployments where a single operator controls the device fleet.

SGP.22 (consumer specification)

SGP.22 targets consumer devices like smartphones and tablets. In this model, the end user selects and downloads profiles, often by scanning a QR code. The architecture includes the SM-DP+ (Subscription Manager Data Preparation+) server. While flexible for consumers, SGP.22 assumes devices have screens, user interfaces, and persistent connectivity, making it less practical for resource-constrained IoT hardware.

SGP.32 (IoT specification)

SGP.32 was built specifically for IoT. Version 1.2 of the SGP.32 specification was published in June 2024. The specification introduces two new roles:

• eSIM IoT remote Manager (eIM): A platform that remotely initiates profile downloads, enables or disables profiles, and manages the device's connectivity lifecycle
• IoT Profile Assistant (IPA): A component that resides either in the device or in the eUICC itself and handles communication with the eIM and SM-DP+

SGP.32 works with the existing SM-DP+ infrastructure from the consumer specification but adds flexibility for devices that lack user interfaces or operate on constrained networks with limited bandwidth. Over half of active IoT eSIMs are expected to be SGP.32-compliant by 2028.

Coexistence of standards

Legacy SGP.02 M2M eSIMs, multi-IMSI solutions, and SGP.32 eSIMs will coexist for years. Interoperability testing among SGP.32 vendors started in 2024, and GSMA compliance programs became available in late 2024, with the first certified solutions launching in 2025. When evaluating an eSIM strategy, confirm which RSP standards your connectivity provider supports and whether their platform can manage profiles across different specification types.

Benefits of having an IoT device management platform

An IoT device management platform with industry standards helps you manage devices at scale. However, no one-size-fits-all solution exists. Most platforms focus on specific use cases or industries. Understanding key platform benefits helps you evaluate options and choose the right fit. A platform automates basic tasks through IoT APIs, making management far easier. Hologram's device management platform delivers:

• Over-the-air updates: Remote device updates without retrieval
• Automated security checks: Routine, hands-off protection
• Out-of-the-box functionality: Easy setup for business users
• Complete network visibility: Full view of all connected devices

Let's explore each benefit more closely.

Over-the-air updates

Early IoT projects required taking devices offline, retrieving them from the field, connecting to a computer, updating, and redeploying which can cause major disruptions and interrupted data collection. Over-the-air updates eliminate this headache entirely.

Many platforms use over-the-air updates to reliably update devices. Using this approach, you need a device management platform that can connect with microprocessors and install software to handle updates on your IoT devices. Scalable, automatic updates with no interruptions reduce the total cost of your IoT deployment.

Hologram Conductor delivers this capability by enabling you to deploy firmware updates across your entire fleet remotely. You can target specific device groups, schedule updates during maintenance windows, and monitor update progress in real time, ensuring your devices stay current without service interruptions.

Routine, automatic security checks

There have been many examples in the news about large companies having been hacked simply because they failed to install computer updates or to back data up. If you perform routine checks for your main company network, you should obviously understand the benefits of doing this for your IoT projects.

Many IoT sensors (like refrigerators, thermostats, and medical equipment) lack provisions for endpoint security. Device management platforms compensate by analyzing network traffic and monitoring for anomalous behavior. Some platforms deploy machine learning to automate these checks.

Dashboard continuously monitors your device network for unusual activity, providing alerts when devices exhibit suspicious behavior. Combined with Conductor's ability to quickly deploy security patches, you get comprehensive protection throughout your device lifecycle.

We know IoT security can be a daunting subject. If you are looking for the right IoT security solution, we detailed several IoT security options in this post.

Easy scalability for businesses

Ideally, you want to build an IoT application that can tap thousands or millions of devices with zero downtime no matter where those devices are located. Building such a system is complex and has many challenges, and you don't want to have to employ scores of developers just to make the application work. You want easy-to-use tools and services that are ready to go out of the box.

Hologram’s dashboard and Conductor scale effortlessly with your deployment. Whether you're managing 100 devices or 100,000, the same intuitive interface and API-driven workflows handle your fleet without requiring additional infrastructure or development resources.

A complete view of your entire network of devices

A device management platform should deliver both macro and micro visibility into your fleet. You're already analyzing project data. You don't have time to hunt for anomalies manually. The right platform surfaces the big picture for you.

Dashboard provides this comprehensive visibility, offering fleet-wide analytics alongside individual device details. You can quickly identify trends, spot outliers, and drill down into specific device behavior, all from a unified interface that presents the information you need, when you need it.

Migrating between IoT connectivity providers

Switching connectivity providers mid-deployment is possible, but the approach depends on your SIM technology.

eUICC with RSP platform

If your devices use eUICC and your current provider offers a Remote SIM Provisioning platform with API access, you can migrate profiles over the air. The new provider prepares profiles on their SM-DP+ server, and your eIM (or the new provider's platform) pushes those profiles to your devices remotely.

Standard SIMs (non-eUICC)

If your devices use traditional SIMs without eUICC, migration requires a physical swap. You will need to ship new SIM cards to each device location and either replace them yourself or coordinate field technicians.

Migration steps

1. Assess your current deployment: Document the number of devices, their locations, SIM types, and authentication methods (IMSI, IP addressing, APN configuration)
2. Verify partner compatibility: Confirm the new connectivity provider supports your authentication methods, coverage regions, and any device-specific requirements
3. Run a parallel pilot: Activate a small device group on the new provider while maintaining existing connectivity, then validate coverage, latency, and data throughput
4. Migrate in phases: Roll out by device group or region to contain risk, starting with non-critical devices before moving mission-critical hardware
5. Reconfigure firmware and connections: Update APN settings, security certificates, and any server endpoints pointing to the old provider
6. Verify and monitor: Confirm each device connects successfully and set up alerts for connectivity failures, unexpected data usage, or devices appearing outside expected locations

Avoiding vendor lock-in

Some connectivity providers use proprietary platforms that make migration difficult. Before signing a contract, ask whether your SIM profiles are portable and whether the provider offers white-glove migration support. A partner willing to help you switch away is usually confident you will want to stay.

Hologram's platform makes IoT device management simple

Hologram's IoT SIM card offers seamless, global coverage for IoT devices with access to LTE/4G/3G/2G technologies. With our Hyper eUICC-enabled SIMs, you'll gain access to new connectivity partnerships without any additional carrier negotiations, integrations, or hardware swaps.

Hologram provides two complementary tools that work together to manage your devices throughout their entire lifecycle:

The Hologram dashboard is your connectivity management hub. It handles device onboarding, SIM activation, real-time monitoring, data usage tracking, and network diagnostics. Dashboard gives you complete visibility into your fleet's connectivity status and lets you configure routing, set usage limits, and manage billing all through an intuitive web interface or comprehensive API.

Hologram Conductor focuses specifically on firmware management. It enables over-the-air updates, letting you deploy new firmware versions, security patches, and configuration changes to devices in the field. Conductor supports staged rollouts, automatic rollbacks, and detailed update reporting to ensure your devices stay current without manual intervention.

Together, dashboard and Conductor cover every aspect of IoT device management: Dashboard handles the "where and how" of connectivity, while Conductor manages the "what" running on your devices. This integrated approach means you can manage your entire device lifecycle from a single platform, from initial activation through ongoing updates to eventual decommissioning.