iPad eSIM deployment fails when using full LPA activation codeSolved

Participant
Discussion
3 weeks ago Sep 03, 2026

Trying to deploy eSIMs to a fleet of managed iPads through Hexnode without user interaction.

The carrier activation code is in this format: LPA:1$$

When I enter the full activation string, or try to append the matching ID/token to the eSIM server URL field, the iPad does not receive the eSIM profile. The only method that worked was entering just the base SM-DP+ server URL, such as: https://<smdp-server>

Then the eSIM profile had to be pre-staged or pre-bound to the device EID on the carrier side before pushing the command from Hexnode.

Is this expected behavior for iPadOS eSIM deployment through MDM, or should Hexnode be able to pass the full LPA activation code?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
3 weeks ago Sep 03, 2026
Marked SolutionPending Review

Hi @remi,

This is expected behavior for iOS/iPadOS eSIM deployment through UEM.

Apple’s MDM workflow for refreshing cellular plans uses the RefreshCellularPlans command. This command accepts only the bare SM-DP+ server address in the eSIMServerURL field. It does not support passing the full GSMA LPA activation string or a separate matching ID/token through the MDM payload.

For example, this type of value should not be used in the eSIM server URL field: LPA:1$<smdp-server>$<matching-id>

Instead, use only the base SM-DP+ server URL: https://<smdp-server>

The standard zero-touch flow is:

  1. Collect the required device identifiers, especially the EID.
  2. Pre-stage or pre-bind the eSIM profile to that EID with the carrier or eSIM provider.
  3. Deploy the eSIM refresh action from Hexnode using only the base SM-DP+ server URL.
  4. The iPad contacts the SM-DP+ server, presents its EID, and downloads the profile assigned to that device.

If the full activation code, matching ID, path, or token is included in the server URL field, the activation can fail because the device expects to establish the connection directly with the SM-DP+ server.

Regards,
Sienna Carter
Hexnode UEM

Save