Apple device support for private 5G and LTE networks

Connecting to a private cellular network

To connect an iPhone or iPad to a private cellular network, an eSIM or physical SIM that has been specifically provisioned for that network must be used. The SIM and private cellular network must use a supported Mobile Country Code (MCC) and a Mobile Network Code (MNC) that are both designated for private network use.

In iOS 18 and iPadOS 18, or later, an iPhone or iPad can be configured to support multiple Private Cellular Network payloads, enabling configuration for up to five private 5G or LTE networks, however it can connect to only one private cellular network at a time.

Private network identifiers

iOS 17 and iPadOS 17, or later, support Mobile Country Code 999, the International Telecommunication Union (ITU) standard for identifying private cellular networks. All Mobile Network Codes are supported for Mobile Country Code 999 private networks. The following network identifiers are supported worldwide for private cellular networks:

• Mobile Country Code 999: For example 999-01 or 999-123

In some countries private network identifier assignments are administered by a national authority. For example, the following regulatory network identifiers for private cellular networks are supported:

• Germany: 262-98

• Norway: 242-71, 242-72, 242-73, 242-74, 242-75

• Portugal: 268-92

• Sweden: 240-65, 240-66

• United States: 315-010 (Citizens Broadband Radio Service-CBRS)

Device compatibility with private networks

Connections from an iPhone or cellular iPad to a private 5G or LTE network use a supported frequency band approved by the regulatory authority of the country where the device is being used. Compatibility will vary by iPhone and iPad model and country or region where the device is being sold.

MDM with private cellular networks

Some device settings for an organization’s private 5G and LTE network can be configured using an MDM solution or a configuration profile containing a Private Cellular Network payload. eSIMs or a physical SIM must be installed first before they can be managed.

• Multiple private cellular networks: In iOS 18 and iPadOS 18, multiple Private Cellular Network payloads are supported, enabling configuration for up to five private 5G or LTE networks. By defining a geofence for each network, the appropriate SIM can automatically be turned on or off as the user moves in and out of private network coverage.

  To associate a SIM to a specific private cellular network, each network must be uniquely identified on the SIM and in the Private Cellular Network payload. Use the appropriate keys in the Private Cellular Network payload for your network type:

  • 5G Standalone networks: Use the NetworkIdentifier key formatted in accordance with the Coordinated Network Identifier (NID) value for Option 1 or Option 2 as defined in 3GPP 23.501 § 5.30.2. The NID value consists of 10 hexadecimal digits that represent a 40-bit value following the 3GPP specification. For example:

    <key>NetworkIdentifier</key>

    <string>AB9876543C</string>

  • 5G Non-Standalone and LTE networks: Use the CsgNetworkIdentifier key formatted in accordance with the definition of Closed Subscriber Group Identity (CSG-ID) in 3GPP 23.003 §4.7. The value consists of 8 hexadecimal digits that represent a 27-bit value following the 3GPP specification. For example:

    <key>CsgNetworkIdentifier</key>

    <string>000005DF</string>

  These identifiers are read-only from the SIM and Private Cellular Network payload and used solely for on-device matching. Each combination of Network Identifier (NID) and Closed Subscriber Group Identity (CSG) must be unique across all configuration payloads and SIMs installed on the same device.

• 5G Standalone networks: 5G SA is turned off by default, and users can manually turn it on in Settings > Cellular. Additionally, organizations can use the new EnableNRStandalone key in their Private Cellular Network payload.

• Geofence activation: A private network eSIM or physical SIM can automatically be turned on when entering cellular network coverage defined by a geofence, using the new Geofences dictionary with the GeofenceId, Latitude, Longitude and Radius keys.

  By creating one or more geofences, the iPhone can seamlessly switch between any combination of private network SIMs and carrier SIMs as the user moves in and out of private network coverage. When they enter the geofence, the private network SIM is enabled, and it’s automatically disabled when they exit the geofence and leave private network coverage. When entering or exiting a geofence, it takes a few minutes for the SIM switch to occur. Both the private network SIM and carrier SIM should be installed before assigning a Private Cellular Network with a geofence.

  The Private Cellular Network payload allows defining up to 1000 geofences, each with a radius ranging from 100 meters to 6.5 kilometers. Radii should be set slightly greater than the private cellular network coverage area.

  When using Dual SIM on iPhone with a carrier SIM and one or more private network SIMs, always have “Allow Cellular Data Switching” turned on. This helps ensure iPhone doesn’t lose access to cellular data when exiting the geofence.

• Prefer Cellular over Wi-Fi: With the CellularDataPreferred key, organizations with private 5G and LTE networks have the option to prefer using cellular over Wi-Fi when both are available. With this setting, supported devices can be set to prefer the private cellular network, while still allowing Wi-Fi for services such as AirDrop and AirPlay.

Installing eSIMs

You can download and install the eSIMs from your infrastructure vendor’s eSIM server (SM-DP+) using the following methods:

• Manual entry

• QR code

• Mobile device management (MDM)

• Universal eSIM link

  For more information, see Apple Developer website: iOS 17.5 and iPadOS 17.5 Release Notes.

Cellular network configuration

This section provides guidance on the recommended settings and configurations that your infrastructure vendor should use for deploying a private 5G or LTE network, ensuring optimal compatibility with the iPhone.

Data-only network

iOS 17 and iPadOS 17, or later, support data-only private cellular networks. The following data-only attach methods are recommended:

• 5G SA: Registration Accept (REG-Accept) for Data (without voice activation)

• 5G NSA and LTE: Attach-Accept (EPS-only)

With Dual SIM on iPhone, users can make and receive calls and text messages using a public carriers network, while remaining connected to your organization’s private, data-only cellular network.

Naming the network

Multiple methods are supported for displaying the network name on an iPhone and iPad. These include:

• Network Identity and Time Zone (NITZ)

• Operator PLMN list (OPL)

• PLMN network name (PNN)

• Service provider name (SPN)

Roaming and multiple network use

iPhone and cellular iPad devices are designed to comply with the roaming guidance outlined in ITU’s E.212 documentation. As a result, if a device has a SIM with MCC 999 for a private network, that SIM can’t roam onto public cellular networks or other private networks broadcasting national PLMNs.

Private network SIMs can be used on multiple cellular networks by configuring the SIMs Equivalent Home Public Land Mobile Network (EHPLMN) list. Ensure the user’s home network’s PLMN and any additional PLMNs are listed in the EHPLMN file on the SIM.

iOS 18 and iPadOS 18 support configurations for up to five private 5G or LTE networks on the same device. Geofences must be used to automatically switch the appropriate SIM on or off as the user moves in and out of private network coverage. In cases where geofences of multiple private cellular networks overlap, the system operates on a first come, first served basis. The SIM for the first network whose geofence is activated will be turned on. When networks overlap, deactivating one SIM will automatically activate the SIM for the other network.

Always use unique identifiers for each private cellular network. Using multiple SIMs with the same NetworkIdentifier or CsgNetworkIdentifier value will prevent activation of the Private Cellular Network payload. Additionally, attempting to install a Private Cellular Network payload with the same identifier as an existing payload will cause the installation to fail.

System Information Block 24

On a mixed network with both 5G SA and LTE, System Information Block 24 (SIB24) should be broadcast by the LTE network. This broadcast message helps ensure that the iPhone or iPad receive the necessary network information to scan for the 5G SA network.

Manually changing wireless settings

Users can manually disable private network SIMs in Settings > Cellular. The SIM stays disabled until it’s manually reenabled.

If a user manually switches to a public carrier’s SIM for Cellular Data, the device automatically reverts to the private network SIM the following morning.

If a user manually changes Wi-Fi settings, the ability to prefer using the private cellular network over Wi-Fi is disabled until the following morning.

Using your carrier’s voice subscription

With Dual SIM on iPhone, you can use one SIM to make and receive calls and texts on a public carrier's network, while the other SIM is connected to your private, data-only cellular network. If Wi-Fi Calling is available, calls and messages using the public carrier’s subscription can be made over the private cellular network when neither Wi-Fi or the carrier’s public network are available.

For more information on Wi-Fi Calling over Cellular see Use Dual SIM on iPhone in the iPhone User Guide.

5G Standalone security and privacy requirements

To help ensure compatibility of iPhone and cellular iPad devices on private 5G SA networks, infrastructure vendors must adhere to the following security and privacy requirements:

• Privacy concealment: The Subscription Concealed Identifier (SUCI) must use a non-null protection scheme. This can be achieved through either an on-SIM SUCI calculation or an ME SUCI calculation, as outlined in TCA 2.3.1 and 3.1 specifications. For detailed information, refer to the 3GPP Technical Specification 33.501.

• User data confidentiality: To safeguard user data from unauthorized access, the use of null-ciphering isn’t supported.

• Non Access Stratum/Radio Resource Control signaling confidentiality and integrity: To prevent unauthorized access and interception, and prevent unauthorized tampering or modifications during transmission.

5G Standalone is supported on the following devices: