eSIM · eUICC

Ship a sensor. Power it on. It joins your fleet.

Beacons owns the eUICC orchestration capability for the L1fe ecosystem. GSMA Remote SIM Provisioning. Hardware-rooted key storage. The internal API that Locks consumes when a Locks customer wants hardware-bound identity.

What eUICC orchestration is

The GSMA Remote SIM Provisioning (RSP) specification defines how programmable SIMs — eUICCs — can be provisioned over the air. A device ships with a blank eUICC. When it powers on and contacts an SM-DP+ server, it downloads a cellular profile and becomes operational on a specific cellular network.

In Beacons Mesh, this is the magic that makes "ship a sensor box anywhere in the world, plug it in, it joins your private mesh" work — without manual SIM swaps or a technician on site.

The internal Locks API

Locks calls Beacons over a private network API (not a library import — see the Locks PRD for the rationale on clean separation). The contract surface:

POST   /internal/v1/euicc/profiles
GET    /internal/v1/euicc/profiles/:eid
POST   /internal/v1/euicc/profiles/:eid/install
DELETE /internal/v1/euicc/profiles/:eid
GET    /internal/v1/euicc/devices
POST   /internal/v1/euicc/devices/:eid/bind

This API is not exposed to customers. Customers interact with Locks; Locks internally calls Beacons. The contract is versioned and the two products evolve their releases independently.

Hardware-rooted key storage

When Locks creates a hardware-bound identity, it asks Beacons to bind a Locks-issued did:oas to a specific eUICC. The eUICC's secure element stores the private key and signs operations. The signed operations are verifiable by anyone resolving the DID — and remain verifiable even if every other component is replaced.

Back to cellular overview →

Where this is going

Phase 4 work, owned by Beacons.

eUICC orchestration ships in Phase 4 of the Beacons build plan, alongside the cellular provider plugins for Telnyx, Twilio, Soracom, Hologram, 1NCE and Particle. The exit criterion for Phase 4 is that a fleet operator can order 100 SIMs through the Beacons console, ship them, have devices power on in the field, and have those devices auto-join their fleet — without further intervention.

Open a fleet

The mesh that fits agents and humans.

A `did:oas`-rooted private mesh that ships peer configurations to any device, anywhere, by policy — not by hand.

Open consoleRead the quickstart