GSMA overview

The Global System for Mobile Communications Association (GSMA) is an industry organization that "represents the interests of mobile operators worldwide, uniting more than 750 operators with almost 400 companies in the broader mobile ecosystem, including handset and device makers, software companies, equipment providers and internet companies, as well as organizations in adjacent industry sectors." The GSMA established the Security Accreditation Scheme (SAS) to enable mobile operators to assess the security of their Universal Integrated Circuit Card (UICC) and embedded UICC (eUICC) suppliers, as well as their eUICC subscription management service providers. Two schemes operate under SAS:

  • SAS for UICC Production (SAS-UP) is a well-established scheme through which UICC and eUICC manufacturers subject their production sites and processes to a comprehensive security audit.
  • SAS for Subscription Management (SAS-SM) is a related security auditing and accreditation scheme for the providers of eUICC subscription management services, intended to ensure industry confidence in the security of remote provisioning for eUICCs.

The GSMA’s established Security Accreditation Scheme (SAS) is the required security accreditation for embedded subscriber identity module (eSIM) entities handling sensitive assets, including mobile network operator (MNO) profile information and digital certificates. SAS-SM audits the robustness of processes for secure data management at the subscription management service location.

Azure and GSMA

Azure has obtained the GSMA SAS-SM accreditation for data center operations and management across the following regions:

  • Central US (Iowa)
  • East US (Virginia)
  • East US 2 (Virginia)
  • France Central (Paris)
  • France South (Marseille)

The GSMA accreditation of Azure France and US regions as SAS-SM accredited sites with more than 100 available Azure services is the first for any hyper-scale cloud provider. The independent standalone accreditation enables any telecom operator to use Azure to support a massive global increase in the volume of embedded mobile subscriptions with the right level of security assurance. This capability will be critical to the implementation of 5G networks and the cellular network connectivity of billions of IoT devices worldwide.

Microsoft solutions for telecommunications let you use AI and automation to increase telecommunication network efficiency, scalability, and reliability. These solutions help you capitalize on new service opportunities enabled by 5G. Azure is set to play a key role in helping telecommunications providers build 5G networks with Azure Edge Zones, connecting Azure services directly to 5G networks in the carrier’s data center.

Audit reports and certificates

The Azure GSMA SAS-SM certificates are available directly from the GSMA list of SAS-SM accredited sites where Microsoft Corporation is listed as a supplier.