Apple device support for private 5G and LTE networks

Connecting to a private mobile network

To connect an iPhone or iPad to a private mobile network, an eSIM or physical SIM that has been specifically provisioned for that network must be used. The SIM and private mobile network must use a supported Mobile Country Code (MCC) and a Mobile Network Code (MNC) that are both designated for private network use.

In iOS 18 and iPadOS 18, or later, an iPhone or iPad can be configured to support multiple Private Mobile Network payloads, enabling configuration for up to five private 5G or LTE networks, however it can connect to only one private mobile network at a time.

Private network identifiers

iOS 17 and iPadOS 17, or later, support Mobile Country Code 999, the International Telecommunication Union (ITU) standard for identifying private mobile networks. All Mobile Network Codes are supported for Mobile Country Code 999 private networks. The following network identifiers are supported worldwide for private mobile networks:

• Mobile Country Code 999: For example, 999-01 or 999-123

In some countries, private network identifier assignments are administered by a national authority. For example, the following regulatory network identifiers for private mobile networks are supported:

• Germany: 262-98

• Norway: 242-71, 242-72, 242-73, 242-74, 242-75

• Portugal: 268-92

• Sweden: 240-65, 240-66

• United States: 315-010 (Citizens Broadband Radio Service-CBRS)

Device compatibility with private networks

Connections from an iPhone or iPad with Wi-Fi + Cellular to a private 5G or LTE network use a supported frequency band approved by the regulatory authority of the country where the device is being used. Compatibility will vary by iPhone and iPad model and country or region where the device is being sold.

MDM with private mobile networks

Some device settings for an organisation’s private 5G and LTE network can be configured using an MDM solution or a configuration profile containing a Private Mobile Network payload. eSIMs or a physical SIM must be installed first before they can be managed.

• Multiple private mobile networks: In iOS 18 and iPadOS 18, multiple Private Mobile Network payloads are supported, enabling configuration for up to five private 5G or LTE networks. By defining a geofence for each network, the appropriate SIM can automatically be turned on or off as the user moves in and out of private network coverage.

  To associate a SIM to a specific private mobile network, each network must be uniquely identified on the SIM and in the Private Mobile Network payload. Use the appropriate keys in the Private Mobile Network payload for your network type:

  • 5G Standalone networks: Use the NetworkIdentifier key formatted in accordance with the Coordinated Network Identifier (NID) value for Option 1 or Option 2 as defined in 3GPP 23.501 § 5.30.2. The NID value consists of 10 hexadecimal digits that represent a 40-bit value following the 3GPP specification. For example:

    <key>NetworkIdentifier</key>

    <string>AB9876543C</string>

  • 5G Non-Standalone and LTE networks: Use the CsgNetworkIdentifier key formatted in accordance with the definition of Closed Subscriber Group Identity (CSG-ID) in 3GPP 23.003 §4.7. The value consists of 8 hexadecimal digits that represent a 27-bit value following the 3GPP specification. For example:

    <key>CsgNetworkIdentifier</key>

    <string>000005DF</string>

  These identifiers are read-only from the SIM and Private Mobile Network payload and used solely for on-device matching. Each combination of Network Identifier (NID) and Closed Subscriber Group Identity (CSG) must be unique across all configuration payloads and SIMs installed on the same device.

• 5G Standalone networks: 5G SA is turned off by default, and users can manually turn it on in Settings > Mobile Service. Additionally, organisations can use the new EnableNRStandalone key in their Private Mobile Network payload.

• Geofence activation: A private network eSIM or physical SIM can automatically be turned on when entering mobile network coverage defined by a geofence, using the new Geofences dictionary with the GeofenceId, Latitude, Longitude and Radius keys.

  By creating one or more geofences, the iPhone can seamlessly switch between any combination of private network SIMs and network provider SIMs as the user moves in and out of private network coverage. When they enter the geofence, the private network SIM is enabled, and it’s automatically disabled when they exit the geofence and leave private network coverage. When entering or exiting a geofence, it takes a few minutes for the SIM switch to occur. Both the private network SIM and carrier SIM should be installed before assigning a Private Mobile Network with a geofence.

  The Private Mobile Network payload allows defining up to 1,000 geofences, each with a radius ranging from 100 metres to 6.5 kilometres. Radiuses should be set slightly greater than the private mobile network coverage area.

  When using Dual SIM on iPhone with a network provider SIM and one or more private network SIMs, always have Allow Mobile Data Switching turned on. This helps ensure iPhone doesn’t lose access to mobile data when exiting the geofence.

• Prefer Mobile Data over Wi-Fi: With the CellularDataPreferred key, organisations with private 5G and LTE networks have the option to prefer using mobile data over Wi-Fi when both are available. With this setting, supported devices can be set to prefer the private mobile network, while still allowing Wi-Fi for services such as AirDrop and AirPlay.

Installing eSIMs

You can download and install the eSIMs from your infrastructure vendor’s eSIM server (SM-DP+) using the following methods:

• Manual entry

• QR code

• Mobile device management (MDM)

• Universal eSIM link

  For more information, see Apple Developer website: iOS 17.5 and iPadOS 17.5 Release Notes.

Mobile network configuration

This section provides guidance on the recommended settings and configurations that your infrastructure vendor should use for deploying a private 5G or LTE network, ensuring optimal compatibility with iPhone.

Data-only network

iOS 17 and iPadOS 17 or later, support data-only private mobile networks. The following data-only attach methods are recommended:

• 5G SA: Registration Accept (REG-Accept) for Data (without voice activation)

• 5G NSA and LTE: Attach-Accept (EPS-only)

With Dual SIM on iPhone, users can make and receive calls and text messages using a public network, while remaining connected to your organisation’s private, data-only network.

Naming the network

Multiple methods are supported for displaying the network name on an iPhone and iPad. These include:

• Network Identity and Time Zone (NITZ)

• Operator PLMN list (OPL)

• PLMN network name (PNN)

• Service provider name (SPN)

Roaming and multiple network use

iPhone and iPad with Wi-Fi + Cellular devices are designed to comply with the roaming guidance outlined in ITU’s E.212 documentation. As a result, if a device has a SIM with MCC 999 for a private network, that SIM can’t roam onto public mobile networks or other private networks broadcasting national PLMNs.

Private network SIMs can be used on multiple mobile networks by configuring the SIMs Equivalent Home Public Land Mobile Network (EHPLMN) list. Ensure the user’s home network’s PLMN and any additional PLMNs are listed in the EHPLMN file on the SIM.

iOS 18 and iPadOS 18 support configurations for up to five private 5G or LTE networks on the same device. Geofences must be used to automatically switch the appropriate SIM on or off as the user moves in and out of private network coverage. In cases where geofences of multiple private mobile networks overlap, the system operates on a first come, first served basis. The SIM for the first network whose geofence is activated will be turned on. When networks overlap, deactivating one SIM will automatically activate the SIM for the other network.

Always use unique identifiers for each private mobile network. Using multiple SIMs with the same NetworkIdentifier or CsgNetworkIdentifier value will prevent activation of the Private Mobile Network payload. Additionally, attempting to install a Private Mobile Network payload with the same identifier as an existing payload will cause the installation to fail.

System Information Block 24

On a mixed network with both 5G SA and LTE, System Information Block 24 (SIB24) should be broadcast by the LTE network. This broadcast message helps ensure that the iPhone or iPad receive the necessary network information to scan for the 5G SA network.

Manually changing wireless settings

Users can manually disable private network SIMs in Settings > Mobile Service. The SIM stays disabled until it’s manually reenabled.

If a user manually switches to a public network provider’s SIM for Mobile Data, the device automatically reverts to the private network SIM the following morning.

If a user manually changes Wi-Fi settings, the ability to prefer using the private mobile network over Wi-Fi is disabled until the following morning.

Using your network provider’s voice subscription

With Dual SIM on iPhone, you can use one SIM to make and receive calls and texts on a public network provider’s network, while the other SIM is connected to your private, data-only mobile network. If Wi-Fi Calling is available, calls and messages using the public network provider’s subscription can be made over the private mobile network when neither Wi-Fi nor the network provider’s public network are available.

For more information on Wi-Fi Calling over Mobile Data, see Use Dual SIM on iPhone in the iPhone User Guide.

5G Standalone security and privacy requirements

To help ensure compatibility of iPhone and cellular iPad devices on private 5G SA networks, infrastructure vendors must adhere to the following security and privacy requirements:

• Privacy concealment: The Subscription Concealed Identifier (SUCI) must use a non-null protection scheme. This can be achieved through either an on-SIM SUCI calculation or an ME SUCI calculation, as outlined in TCA 2.3.1 and 3.1 specifications. For detailed information, refer to the 3GPP Technical Specification 33.501.

• User data confidentiality: To safeguard user data from unauthorised access, the use of null-ciphering isn’t supported.

• Non Access Stratum/Radio Resource Control signalling confidentiality and integrity: To prevent unauthorised access and interception, and prevent unauthorised tampering or modifications during transmission.

5G Standalone is supported on the following devices: