LogoLogo
ProductsDevelopersAPI ReferenceContact Us
Super SIM
Super SIM
  • Super SIM
  • Super SIM's Available Networks
  • Super SIM’s Multi-IMSI Applet
  • Over-the-Air Updates
  • Get Started with Super SIM
    • Overview
    • Get Started with Super SIM, the Raspberry Pi 4 and the Waveshare 4G Hat
    • Get Started with Super SIM, the Raspberry Pi 4 and the Sixfab Base Hat
    • Get Started with Data Comms and the Raspberry Pi Pico
    • Get Started with Super SIM SMS Commands and the Raspberry Pi 4
    • Get Started with Super SIM SMS Commands and the Raspberry Pi Pico
    • Get Started with Super SIM IP Commands and the Raspberry Pi
    • Get Started with Super SIM IP Commands and the Raspberry Pi Pico
    • Get Started with Super SIM eSIM Profiles for eUICCs
    • Get Started with Super SIM Connection Events
  • How To
    • How to Set a Device’s APN for Super SIM
    • How to Enable Device Roaming for Super SIM
    • How to Determine Whether a Device Contains a Super SIM
    • How to Set up iPhones for Super SIM
    • How to Determine a Super SIM’s Status
    • How to Use Console Bulk Actions to Update Multiple Super SIMs
    • How to Download Bulk Super SIM Data
    • How to Use Super SIM Fleets and Network Access Profiles
    • How to Understand the Settings on your SIM
      • Base Settings Package
    • How and Why You Can Set Super SIM’s Network Attach Priority List
    • How to Set Up and Use a Super SIM VPN
    • How to Configure AWS for a Super SIM VPN
    • How to Make and Take IoT VoIP Calls via Super SIM
    • How to Use Super SIM Connection Events
    • How to use Super SIM eSIM Profiles
    • How to Monitor Super SIM Connection Events using AWS ElasticSearch and Kibana
    • How to Use OpenAPI Clients with Super SIM
  • Into Production
    • Prepare for Production Deployments with Super SIM
    • Super SIM Datasheet
    • Super SIM Network Timeouts
  • Works with Super SIM
    • Works with Super SIM: Quectel BG95
    • Works with Super SIM: Quectel EG21-G
    • Works with Super SIM: Quectel EG25-G
    • Works with Super SIM: Thales Cinterion EXS62-W
    • Works with Super SIM: u-blox SARA-R5
  • Cellular Module Knowledgebase
    • Overview
    • About AT Commands
    • Nordic Modules with Super SIM
    • Quectel Modules with Super SIM
    • Quectel Modules with the KORE Narrowband SIM
    • Simcom Modules with Super SIM
    • Telit Modules with Super SIM
    • Thales Cinterion Modules with Super SIM
    • U-blox Modules with Super SIM
    • Cellular IoT Terminology
    • Low-power Optimization for Cellular Modules
    • Four Best Practices for Cellular Module Registration
    • How to Determine Good Cellular Signal Strength
    • How Super SIM Devices Connect to Cell Networks
  • Super SIM API
On this page
  • What is an IMSI?
  • Single IMSI SIMs
  • Super SIM's multi-IMSI approach
  • IMSI switching with Super SIM
  • The REFRESH proactive command
  • Example
  • Advanced: Using local AT commands to control applet
  • Query SIM status responses
  • Advanced example: Using manual AT commands

Was this helpful?

Super SIM’s Multi-IMSI Applet

Super SIM's multi-IMSI technology enables access to the best networks with redundant backup access to keep your devices connected

PreviousSuper SIM's Available NetworksNextOver-the-Air Updates

Last updated 1 month ago

Was this helpful?

Believe it or not, SIMs (Subscriber Identity Modules) are able to run small applications, called applets. Every Super SIM contains an applet which can switch the IMSI used in order to give you access to the widest selection of networks and redundant paths over which your data can be sent. To have the best experience with Super SIM, it's important to understand how this applet interacts with your device.

What is an IMSI?

An International Mobile Subscriber Identity (IMSI) identifies a single user of the cellular network. When a device connects to a cellular network, that network uses the IMSI to check with the SIM's home network to query what privileges the network should allow the SIM: whether it can use data, whether it can use SMS — and even whether it's allowed to attach to that network at all.

Single IMSI SIMs

A SIM generally contains only one IMSI. If that IMSI's home network doesn't have a roaming agreement with the network to which one of your devices is trying to attach, then the device will not be able to connect to that network. Neither will any of your other devices.

There's another problem inherent in having just one IMSIs: the operator of your home network is a single point of failure. All of your data has to be transmitted through its infrastructure. If anything goes wrong there, your devices will not be able to connect to your backend even if the local network that your device is attached to is performing perfectly.

Super SIM's multi-IMSI approach

To bypass these limitations, each Super SIM holds multiple IMSIs. The SIM uses the multi-IMSI applet to switch between these IMSIs in order to give you access to the best selection of networks at the best rates in whatever country your device is currently located. Super SIM might therefore use one IMSI in the United States and a completely different IMSI when the device is moved to Australia because of either better network availability or better pricing.

IMSI switching with Super SIM

There are a number of different situations that will cause a Super SIM to switch its IMSI. When an IMSI switch occurs, the applet will communicate with your device using "proactive commands" — instructions sent by the SIM to the device — offered by the , a component of the standard system.

When a Super SIM changes its IMSI, the applet sends a REFRESH proactive command to the host device. This instructs the device to re-read the data on the SIM, including the new IMSI. Take a look at , below, for more details on how this works.

Scenario 1: the device is in a new location

Each Super SIM has a table that indicates which IMSI it should use in a given country. If the applet detects a Location Status event, a Status command, or an update to the LOCI (LOCation Information) files on your device, it will use the location data and the table to determine if it is using the preferred IMSI for that country. If it is not, the applet will switch to the preferred IMSI.

Scenario 2: the device is unable to connect to all visible networks

Many devices record the networks they have attempted to attach to but were not able to do so. This ensures they don't waste time attempting to connect to those networks in future. The record is called a forbidden networks (FPLMN) list. When all of the networks currently visible to the device are listed as forbidden networks, the applet on the SIM will switch IMSI to try to attach again with a different IMSI.

On each IMSI switch, the FPLMN list will be cleared just before the REFRESH proactive command is sent.

Scenario 3: The SIM's onboard timer expires

Super SIMs are able to handle host devices that don't support either of the IMSI switching mechanisms outlined above. If the Super SIM enters Limited Service mode — because the device has not been unable to attach to any networks — it starts a timer. If the timer expires and the SIM is still in Limited Service, the applet now switches the IMSI and sends a REFRESH proactive command to the device.

The duration of the timer is approximately 180 seconds (three minutes).

If your device automatically restarts after a specified period of time during which it wasn't able to establish a data connection, make sure that the period is greater than the Super SIM's IMSI switching timer duration, or the applet's timer will not fire and the IMSI will not change accordingly. This is because your device may reset the onboard timer when it restarts.

The REFRESH proactive command

When a Super SIM's multi-IMSI applet switches the IMSI, a REFRESH proactive command is sent to the host device. This instruction informs the device that the contents or structure of the Elementary Files (EFs) on the SIM have been changed. This command instructs the device to refresh the information it holds about the SIM and is therefore expected to reload the EFs and other data, including the IMSI, from the SIM.

Later releases of ETSI TS 102 223 discourage the use of command qualifier 00. However, using the suggested alternative command qualifier, 04 - UICC Reset, can result in the device resetting and prompting the user for the SIM PIN, leaving the device disconnected from the network. To avoid this, the multi-IMSI applet continues to use command qualifier 00.

Example

Here is an example of Super SIM's multi-IMSI applet in action.

  1. The SIM is initially provisioned with IMSI 1 as the active IMSI.

  2. The SIM attaches to a German network (MCC 262).

  3. Later, the SIM travels to Argentina (MCC 722).

  4. The SIM tries to attach to a network in Argentina using the active IMSI, IMSI 1. However, no roaming agreement is in place, so IMSI 1 is rejected by the visited network.

  5. The SIM applet finds Argentina (MCC 722) as the new location.

  6. The SIM applet overwrites the active IMSI: IMSI 1 is replaced with IMSI 3 according to IMSI Selection Table.

  7. The SIM sends the REFRESH proactive command to the device and a new network attach is performed using IMSI 3 .

  8. The SIM is connected with IMSI 3 on an Argentine network partner.

Advanced: Using local AT commands to control applet

You can use local AT commands issued to the SIM via your modem to control the multi-IMSI applet. Each AT+CSIM command can be used to trigger some action within the SIM. It instructs the module to relay to the SIM an embedded Application Protocol Data Unit (APDU) ENVELOPE command. This, in turn, contains proprietary instructions for the SIM.

As of April 2025, we are in the process of updating our SIM applets. Later in 2025, we will begin producing SIM hardware and SIM profiles with new applets. Additionally, we intend to over-the-air (OTA) update existing SIMs with the new applets. The new applets will have different AT commands. Be sure to take this into consideration before implementing any regular use of these AT commands in your device's firmware.

The table below documents both the current SIM applet command and new command that will be needed to trigger the action in the new applet to be released later in 2025.

Command Name
Description
Current SIM Applets
New SIM Applets

Query SIM Status

Request details about the multi-IMSI applet such as whether or not the applet is in automatic switching mode.

Request:

AT+CSIM=26,"80C2000008CF06020282814C00"

Response:

Request: AT+CSIM=28,"80C2000009CF0702028281B30100"

Response:

Force IMSI Switch

Switch to the next IMSI. If the IMSI you switch to is not the Preferred IMSI for the current location, this will be a temporary change. Will return to automatic mode at Return to Priority Timer or the device is rebooted.

Request: AT+CSIM=28,"80C2000009CF07020282814E0101"

Response:

+CSIM: 4, "910B"

Request:

AT+CSIM=28,"80C2000009CF0702028281A001AA"

Responses:

+CSIM: 4,"9000"

or

+CSIM: 4,"6109" if there is a response with 9 byte

Return to Automatic Switching

Set the SIM to automatic switching mode.

Request: AT+CSIM=36,"80C200000DCF0B020282814F050190000000"

Response:

+CSIM: 4, "9000

Request: AT+CSIM=28,"80C2000009CF0702028281A001EE"

Responses:

+CSIM: 4,"9000"

or

+CSIM: 4,"6109" if there is a response with 9 bytes

Lock IMSI

Disables automatic switching so the SIM will only use the current IMSI.

Warning: this persists through device/modem reboots.

To restore Super SIM’s normal behavior, you must use the Return to Automatic Switching command.

Not available

Request: AT+CSIM=28,"80C2000009CF0702028281A001BB"

Responses:

+CSIM: 4,"9000"

or

+CSIM: 4,"6109" if there is a response with 9 byte

Switch to Last Working IMSI

Will return to automatic mode at Return to Priority Timer or the device is rebooted.

Not available

Request: AT+CSIM=28,"80C2000009CF0702028281A001CC"

Responses:

+CSIM: 4,"9000"

or

+CSIM: 4,"6109" if there is a response with 9 bytes

Switch to Preferred IMSI

Switches to the Preferred IMSI for the current location.

Will return to automatic mode at Return to Priority Timer or the device is rebooted.

Not available

Request: AT+CSIM=28,"80C2000009CF0702028281A001DD"

Responses:

+CSIM: 4,"9000"

or

+CSIM: 4,"6109" if there is a response with 9 bytes

Query SIM status responses

Current Applet

The crucial point is that you can use the returned data to check applet status. Look at the first hexadecimal byte of the response. This should be 80, which indicates that the SIM is set to switch IMSIs automatically. The value is a bitfield. Bit 7 should always be set; bit 0 indicates the applet's current operation mode: if it is clear, the applet will switch IMSIs automatically.

AT+CSIM=26,"80C2000008CF06020282814C00"

+CSIM: 24,"80FF200000000F00009000"

Some modems may require a second command to read the response you're after. If your modem returns +CSIM: 4, "6109" you will need to issue a second command to read the response.

AT+CSIM=26,"80C2000008CF06020282814C00"
+CSIM: 4, "6109"

AT+CSIM=10,"00C0000009"
+CSIM: 24,"80FF200000000F00009000"

If you get the SIM status after forcing the SIM to switch to the next IMSI, the first byte of the response should no longer be 80. Common values are A1 and 82 depending on the point in the process at which you complete the query, but other values may be seen.

A1 means that the applet's timer is in operation (bit 6 is set) and the applet is in Default IMSI mode (bit 0 is set). When the timer fires, the applet will switch to Automatic mode.

82 indicates that the applet has switched from Default IMSI mode to Automatic mode. Bit 1 is set when the applet mode changes.

If you query the SIM's status again after running the command to put it back into automatic IMSI switching mode, the first byte of the response will once more be 80 — IMSI switching will take place automatically.

New Applet

If you run the query SIM status command, you will get a response from which you can decode various settings on the SIM. Note that the response below is an example.

AT+CSIM=28,"80C2000009CF0702028281B30100"
+CSIM: 4,"6109" #Command Executed and there is a response data of 9 bytes

AT+CSIM=10,"00C0000009"
+CSIM: 22,"010403029500FF95759000" #Example repsonse. Yours will be different.

Use the table below to understand what different bytes of the response convey:

Byte
Description
Values

1

Automatic switch mode status

00= Disabled 01= Enabled

2

Current active IMSI. Indicates the position of the IMSI in the IMSI list starting from 01.

01, 02, 03, ...

3

Last working IMSI. Indicates the position of the IMSI in the IMSI list starting from 01.

01, 02, 03, ...

4-6

Timer left for switch back to preferred IMSI. 3 bytes in swap format.

Example: 029500

7-9

First network latch time from TP.

Example: FF9575

Advanced example: Using manual AT commands

The example below shows how to use the AT Commands to combine multiple local commands to understand the status of the multi-IMSI applet and force the SIM to switch to the next IMSI.

This example uses the AT Commands of the current multi-IMSI applet as of April 2025. Later in 2025, we will begin producing SIM hardware and SIM profiles with new applets. Additionally, we intend to over-the-air (OTA) update existing SIMs with the new applets. The new applets will have different AT commands. Be sure to take this into consideration before implementing any regular use of these AT commands in your device's firmware.

Query SIM status

The following AT+CSIM command can be used to read the status of the multi-IMSI applet. It instructs the module to relay to the SIM an embedded Application Protocol Data Unit (APDU) ENVELOPE command. This, in turn, contains proprietary instructions for the SIM.

The crucial point is that you can use the returned data to check applet status. Look at the first hexadecimal byte of the response. This should be 80, which indicates that the SIM is set to switch IMSIs automatically. The value is a bitfield. Bit 7 should always be set; bit 0 indicates the applet's current operation mode: if it is clear, the applet will switch IMSIs automatically.

AT+CSIM=26,"80C2000008CF06020282814C00"

+CSIM: 24,"80FF200000000F00009000"

Some modems may require a second command to read the response you're after. If your modem returns +CSIM: 4, "6109" you will need to issue a second command to read the response.

AT+CSIM=26,"80C2000008CF06020282814C00"
+CSIM: 4, "6109"

AT+CSIM=10,"00C0000009"
+CSIM: 24,"80FF200000000F00009000"

Force a switch to the next IMSI

The following command causes the SIM to provide a new IMSI to the module. It will be the next IMSI in its list. This may not be usable in the device's current location, in which case the module will fail to connect, ultimately triggering a further IMSI switch.

AT+CSIM=28,"80C2000009CF07020282814E0101"

+CSIM: 4,"910B"

If you query the SIM's status again, the first byte of the response should no longer be 80. Common values are A1 and 82 depending on the point in the process at which you complete the query, but other values may be seen.

A1 means that the applet's timer is in operation (bit 6 is set) and the applet is in Default IMSI mode (bit 0 is set). When the timer fires, the applet will switch to Automatic mode.

82 indicates that the applet has switched from Default IMSI mode to Automatic mode. Bit 1 is set when the applet mode changes.

Return to automatic IMSI switching

As long as the SIM is not already using the preferred IMSI for its location, the following command will cause the SIM to provide a new IMSI to the module. Either way, the multi-IMSI applet will once again be in automatic mode.

AT+CSIM=36,"80C200000DCF0B020282814F050190000000"

+CSIM: 4,"9000"

If you query the SIM's status again, the first byte of the response will once more be 80 — IMSI switching will take place automatically.

The Super SIM multi-IMSI applet follows the . The REFRESH proactive command sent by the applet uses command qualifier 00 - NAA Initialization and Full File Change Notification.

To learn about other planned changes to the SIM hardware and applets as part of this initiative, see our .

See below

See below

To learn about other planned changes to the SIM hardware and applets as part of this initiative, see our .

You can find full information on the structure of APDU commands and the responses they may yield by consulting .

ETSI Technical Specification 102 223 Release 6
migration guide
ETSI Technical Specification 102 221
Card Application Toolkit
GSM
The REFRESH Proactive Command
Query SIM Status Responses
Query SIM Status Responses
migration guide