GSM Association Non-confidential

Official Document SGP.23 - RSP Test Specification

V1.2 Page 1 of 764

RSP Test Specification

Version 1.2

03 January 2018

This is a Non-binding Permanent Reference Document of the GSMA

Security Classification: Non-confidential

Access to and distribution of this document is restricted to the persons permitted by the security classification. This document is confidential to the

Association and is subject to copyright protection. This document is to be used only for the purposes for which it has been supplied and

information contained in it must not be disclosed or in any other way made available, in whole or in part, to persons other than those permitted

under the security classification without the prior written approval of the Association.

Copyright Notice Copyright 2018 GSM Association

Disclaimer

The GSM Association (Association) makes no representation, warranty or undertaking (express or implied) with respect to and does not accept

any responsibility for, and hereby disclaims liability for the accuracy or completeness or timeliness of the information contained in this document.

The information contained in this document may be subject to change without prior notice.

Antitrust Notice

The information contain herein is in full compliance with the GSM Associations antitrust compliance policy.

GSM Association Non-confidential

Official Document SGP.23 - RSP Test Specification

V1.2 Page 2 of 764

Table of Contents

RSP Test Specification 1

Security Classification: Non-confidential 1

Introduction 7

1.1 Overview 7

1.2 Scope 7

1.3 Definition of Terms 8

1.4 Abbreviations 12

1.5 Document Cross-references 15

1.6 Conventions 16

Testing Rules 16

2.1 Applicability 16

2.1.1 Format of the Optional Features Table 16

2.1.2 Format of the Applicability Table 16

2.1.3 Applicability and Notations 17

2.1.4 Optional Features Table 17

2.1.5 Applicability Table 19

2.2 General Consideration 26

2.2.1 Test Case Definition 26

2.2.2 Test Cases Format 27

2.2.3 General Rules for eUICC Testing 31

2.2.4 General Rules for Device Testing 32

2.2.5 Pass Criteria 34

2.2.6 Future Study 34

Testing Architecture 34

3.1 Testing Scope 34

Figure 1: Scope of the Tests 35

3.2 Testing Execution 36

3.2.1 eUICC - Test Environment 37

3.2.2 SM-DP+ and SM-DS - Test Environment 37

3.2.3 Device/LPAd - Test Environment 39

3.2.4 End-to-End Testing 41

4 Interface Compliance Testing 41

4.1 General Overview 41

4.2 eUICC Interfaces 42

4.2.1 ATR and ISD-R Selection 42

4.2.2 ES6 (Operator -- eUICC): UpdateMetadata 42

4.2.3 ES8+ (SM-DP+ -- eUICC): InitialiseSecureChannel 51

4.2.4 ES8+ (SM-DP+ -- eUICC): ConfigureISDP 54

4.2.5 ES8+ (SM-DP+ -- eUICC): StoreMetadata 57

4.2.6 ES8+ (SM-DP+ -- eUICC): ReplaceSessionKeys 67

4.2.7 ES8+ (SM-DP+ -- eUICC): LoadProfileElements 69

4.2.8 ES10a (LPA -- eUICC): GetEuiccConfiguredAddresses 79

GSM Association Non-confidential

Official Document SGP.23 - RSP Test Specification

V1.2 Page 3 of 764

4.2.9 ES10a (LPA -- eUICC): SetDefaultDpAddress 80

4.2.10 ES10b (LPA -- eUICC): PrepareDownload 82

4.2.11 ES10b (LPA -- eUICC): LoadBoundProfilePackage 88

4.2.12 ES10b (LPA -- eUICC): GetEUICCChallenge 99

4.2.13 ES10b (LPA -- eUICC): GetEUICCInfo 100

4.2.14 ES10b (LPA -- eUICC): ListNotification 104

4.2.15 ES10b (LPA -- eUICC): RetrieveNotificationsList 118

4.2.16 ES10b (LPA -- eUICC): RemoveNotificationFromList 146

4.2.17 ES10b (LPA -- eUICC): LoadCRL 152

4.2.18 ES10b (LPA -- eUICC): AuthenticateServer 152

4.2.19 ES10b (LPA -- eUICC): CancelSession 174

4.2.20 ES10c (LPA -- eUICC): GetProfilesInfo 182

4.2.21 ES10c (LPA -- eUICC): EnableProfile 191

4.2.22 ES10c (LPA -- eUICC): DisableProfile 213

4.2.23 ES10c (LPA -- eUICC): DeleteProfile 235

4.2.24 ES10c (LPA -- eUICC): eUICCMemoryReset 247

4.2.25 ES10c (LPA -- eUICC): GetEID 252

4.2.26 ES10c (LPA -- eUICC): SetNickname 253

4.2.27 ES10b (LPA -- eUICC): GetRAT 257

4.3 SM-DP+ interfaces 259

4.3.1 ES2+ (Operator -- SM-DP+): DownloadOrder 259

4.3.2 ES2+ (Operator -- SM-DP+): ConfirmOrder 259

4.3.3 ES2+ (Operator -- SM-DP+): CancelOrder 259

4.3.4 ES2+ (Operator -- SM-DP+): ReleaseProfile 259

4.3.5 ES2+ (Operator -- SM-DP+): HandleDownloadProgressInfo 259

4.3.6 ES2+ (Operator -- SM-DP+): TLS, Mutual Authentication, Server, Session Establishment 259

4.3.7 ES8+ (SM-DP+ -- eUICC): InitialiseSecureChannel 259

4.3.8 ES8+ (SM-DP+ -- eUICC): ConfigureISDP 259

4.3.9 ES8+ (SM-DP+ -- eUICC): StoreMetadata 260

4.3.10 ES8+ (SM-DP+ -- eUICC): ReplaceSessionKeys 260

4.3.11 ES8+ (SM-DP+ -- eUICC): LoadProfileElements 260

4.3.12 ES9+ (LPA -- SM-DP+): InitiateAuthentication 260

4.3.13 ES9+ (LPA -- SM-DP+): GetBoundProfilePackage 266

4.3.14 ES9+ (LPA -- SM-DP+): AuthenticateClient 305

4.3.15 ES9+ (LPA -- SM-DP+): HandleNotification 337

4.3.16 ES9+ (LPA -- SM-DP+): CancelSession 354

4.3.17 ES9+ (LPA -- SM-DP+): TLS, Server Authentication, Session Establishment 374

4.3.18 ES12 (SM-DP+ -- SM-DS): RegisterEvent 374

4.3.19 ES12 (SM-DP+ -- SM-DS): DeleteEvent 374

4.3.20 ES12 (SM-DP+ -- SM-DS): TLS, Mutual Authentication, Client, Session Establishment 375

4.4 LPAd Interfaces 375

4.4.1 ES10a (LPA -- eUICC): GetEuiccConfiguredAddresses 375

GSM Association Non-confidential

Official Document SGP.23 - RSP Test Specification

V1.2 Page 4 of 764

4.4.2 ES10a (LPA -- eUICC): SetDefaultDpAddress 375

4.4.3 ES10b (LPA -- eUICC): PrepareDownload 375

4.4.4 ES10b (LPA -- eUICC): LoadBoundProfilePackage 375

4.4.5 ES10b (LPA -- eUICC): GetEUICCChallenge 375

4.4.6 ES10b (LPA -- eUICC): GetEUICCInfo 375

4.4.7 ES10b (LPA -- eUICC): ListNotification 376

4.4.8 ES10b (LPA -- eUICC): RetrieveNotificationsList 376

4.4.9 ES10b (LPA -- eUICC): RemoveNotificationFromList 376

4.4.10 ES10b (LPA -- eUICC): LoadCRL 376

4.4.11 ES10b (LPA -- eUICC): AuthenticateServer 376

4.4.12 ES10b (LPA -- eUICC): CancelSession 376

4.4.13 ES10c (LPA -- eUICC): GetProfilesInfo 376

4.4.14 ES10c (LPA -- eUICC): EnableProfile 376

4.4.15 ES10c (LPA -- eUICC): DisableProfile 376

4.4.16 ES10c (LPA -- eUICC): DeleteProfile 376

4.4.17 ES10c (LPA -- eUICC): eUICCMemoryReset 376

4.4.18 ES10c (LPA -- eUICC): GetEID 376

4.4.19 ES10c (LPA -- eUICC): SetNickname 376

4.4.20 ES10b (LPA -- eUICC): GetRAT 376

4.4.21 ES9+ (LPA -- SM-DP+): InitiateAuthentication 376

4.4.22 ES9+ (LPA -- SM-DP+): GetBoundProfilePackage 382

4.4.23 ES9+ (LPA -- SM-DP+): AuthenticateClient 390

4.4.24 ES9+ (LPA SM-DP+): HandleNotification 405

4.4.25 ES9+ (LPA SM-DP+): CancelSession 413

4.4.26 ES9+ (LPA SM-DP+): HTTPS 427

4.4.27 ES11 (LPA SM-DS): InitiateAuthentication 432

4.4.28 ES11 (LPA SM-DS): AuthenticateClient 437

4.4.29 ES11 (LPA -- SM-DS): HTTPS 445

4.5 SM-DS Interfaces 450

4.5.1 ES12 (SM-DP+ -- SM-DS): RegisterEvent 450

4.5.2 ES12 (SM-DS -- SM-DP+): DeleteEvent 459

4.5.3 ES15 (SM-DS -- SM-DS): RegisterEvent 467

4.5.4 ES15 (SM-DS -- SM-DS): DeleteEvent 469

4.5.5 ES11 (LPA -- SM-DS): InitiateAuthentication 471

4.5.6 ES11 (LPA -- SM-DS): Authenticate Client 472

4.5.7 ES15 (SM-DS -- SM-DS): TLS, Mutual Authentication, Client, Session Establishment 494

4.5.8 ES12 (SM-DS -- SM-DP+): TLS, Mutual Authentication, Server, Session Establishment 495

4.5.9 ES15 (SM-DS -- SM-DS): TLS, Mutual Authentication, Server, Session Establishment 495

4.5.10 ES11 (LPA -- SM-DS): TLS, Server Authentication, Session Establishment 496

4.6 TLS Interface 496

4.6.1 TLS, Mutual Authentication, Client, TLS Establishment 496

GSM Association Non-confidential

Official Document SGP.23 - RSP Test Specification

V1.2 Page 5 of 764

4.6.2 TLS, Mutual Authentication, Server, TLS Establishment 505

4.6.3 TLS, Server Authentication, TLS Establishment 514

4.7 LPAe Interfaces 518

Procedure - Behaviour Testing 519

5.1 General Overview 519

5.2 eUICC Behaviour 519

5.2.1 Retry mechanism 519

5.2.2 Forbidden PPRs 525

5.2.3 eUICC's RAT 526

5.2.4 eUICC File Structure 528

5.2.5 eUICC Delete Profile Process 529

5.2.6 eUICC Enable Profile Process 530

5.2.7 eUICC Disable Profile Process 532

5.2.8 eUICC Notifications 533

5.3 Platform Procedures 534

5.3.1 Profile Download and Installation Procedure 534

5.3.2 Common Mutual Authentication Process 534

5.3.3 Profile Download and Installation Process 534

5.4 Device Procedures 538

5.4.1 Local Profile Management - Add Profile 538

5.4.2 Local Profile Management - ListProfiles 550

5.4.3 Local Profile Management - SetNickname 550

5.4.4 Local Profile Management - Delete Profile 554

5.4.5 Local Profile Management - Enable Profile 560

5.4.6 Local Profile Management - Disable Profile 565

5.4.7 Local eUICC Management - Retrieve EID Process 568

5.4.8 Local eUICC Management - eUICC Memory Reset Process 569

5.4.9 Local eUICC Management - eUICC Test Memory Reset Process 574

5.4.10 L