AN-2025-07 – Preventing misuse of an eUICC Profile and installation of malicious Java Card Application v1.0

The purpose of this Application Note is to provide guidance for the industry in order to avoid the misuse of Remote Application Management (RAM) keys to install, within Profiles, a malicious Java Card Applications in an eUICC supporting Java Card technology.

This Application Note is a first set of recommendations to be used for products based on existing versions of the eSIM specifications.

Other actions including the update of the eSIM specifications and other GSMA related documents are ongoing.