Can someone help me activate an eSIM on GrapheneOS? I followed the documentation for the following steps but I had issues on activation.

  1. Install Sandbox Google Play in Apps ➔ Install Google Play Services.

  2. For privacy, disable sensors and network permissions for Google Play Services.
    Settings ➔ All Apps ➔ Google Play services ➔ Permissions ➔ Network ➔ Don't allow. Sensors ➔ Don't allow.

  3. Enable privileged eSIM management in Settings ➔ Network & Internet ➔ Privileged eSIM management.

  4. Enable DSDS in the Dialer ➔ Call *#*#4636#*#* ➔ Phone information ➔ Enable DSDS

  5. Add the eSIM via QR code using Settings ➔ Network & Internet ➔ "+" symbol by SIMs ➔ Download a SIM instead? ➔ Scan QR Code (THIS IS THE STEP THAT FAILS).

  6. After the eSIM has been added and tested, disable privileged eSIM management in Settings ➔ Network & Internet ➔ Privileged eSIM management.

  7. Uninstall Sandbox Google Play.

    sirfartsalot

    1. For privacy, disable sensors and network permissions for Google Play Services.
      Settings ➔ All Apps ➔ Google Play services ➔ Permissions ➔ Network ➔ Don't allow. Sensors ➔ Don't allow.

    You're step 5 will fail if you disable network permissions to Google Play services in your step 2.

    I tried with enabling network permission for Google Play Services in step 2 and it still doesn't work. To clarify, I am able to add the eSIM, but I get "No connection" when connected and using that eSIM for mobile data. Are there any other permissions that are needed?

      Wild guess: If you have a prepaid eSIM in roaming mode (such as you'd get from silent.link) chances are that it doesn't work with some networks in your current roaming profile. I have this issue sometimes and here's what I need to do:

      1. Try connecting to a different network (in your eSIM settings, disable "Automatically select network" and try connecting to another provider). Be aware that you pay different prices on each network.

      2. If no provider let's you connect, try changing your roaming profile. Open the SIM Toolkit App (via Settings -> Apps -> All Apps) and find the profile settings. I have 3 different profiles available (the active one is marked with a *). After changing the profile, restart the phone, wait 10 minutes and repeat step 1.

      Hope this helps you, when I activated my first roaming eSIM it took some time and I was nervous it wouldn't work. In the end it always worked out though.

        sirfartsalot Just had a quick look - Google Play Store and Google Services Framework likely need the network permission enabled, as well as Google Play Services.

        N1b
        This is the most promising comment, but unfortunately it didn't work. For step 1, no provider let me connect. Using step 2, I tried both profiles listed and they both didn't work. I tried automatically select and manually trying each provider for both profiles.

        5 months later

        N1b

        Do you know how to open the SIM toolkit app? I see it when I follow your instructions but it cannot be opened/launched, seems like it’s just there.

        I’m having similar issues with esim, but I can connect to T-Mobile via silent.link but it disconnects every 10ish minutes and says no network

        • N1b replied to this.

          applesbana restart the phone if the sim toolkit app can not launch. It should work then. As for the disconnect, I'd try to change roaming profiles and see if you get a better connection then. I have 3 profiles and usually one works great non multiple networks, one works mediocre at best and one doesn't work at all. But it depends on your location.

            N1b

            Thanks, gave the restart a shot, but I simply don’t have an “open” option for that app. Seems like it’s just there for background tasks but I have no way to open it…

              5 months later

              applesbana hey there just wondering if you ever got resolution to your issue. I have the same thing where I get no connection even if I tried to connect to the local provider and everything appears to be set up right. And that app I can't 'open' (there is no option) it nor do I see any roaming profiles to even change. Thank you

                Dannyt

                I deleted the esim and reinstalled it recently and it works fine thus far. I think the graphene team changed how you enable esim from how it used to work. You no longer need play services installed to activate an esim. Perhaps try to start from scratch?

                a month later

                I am unable to download/activate the eSIM.
                I followed all the steps:

                eSIM support
                By default, GrapheneOS has always shipped with baseline support for eSIM, where users can use any eSIMs installed previously on the device. However, in order to manage and add eSIMs, proprietary Google functionality is needed. This is fully disabled by default.

                eSIM support on GrapheneOS doesn't require any dependency on Google Play, and never shares data to Google Play even when installed.

                eSIM support can be enabled in Settings ➔ Network & Internet ➔ eSIM support. The toggle is persistent across every boot.

                By enabling the toggle, the proprietary Google functionality is enabled and will be used by the OS to provision and manage eSIMs.

                Note that if the eSIM installation process does not progress past the "Checking network info..." stage despite having a stable Internet connection, you may need to call the USSD code ##4636## and then enable DSDS in the menu that is presented.

                If an eSIM locked with a PIN is used, it is recommended to leave the eSIM support toggle enabled even after activating the eSIM. This will allow you to disable the eSIM on the lockscreen in case the PIN is forgotten. If the eSIM support toggle is disabled and the PIN is forgotten, there is no way to access the device unless the PUK is provided.

                I have Google play Services Installed with the permissions for Network and Sensors allowed. I have the eSIM support toggled on. I checked and the DSDS is enabled.
                However, I do not have a QR code. This is a pre-paid Tmobile eSIM. They said there is no QR code. It should just download. So what should I do?

                  • [deleted]

                  • Edited

                  [deleted]
                  Couldn't edit should read
                  What a load of a marlarkey to install an esim
                  Google is simpler order an sim from your provider, go to settings Network and Interview, Sims, Add sim and follow instructions.
                  Your provider should be able to supply a physical sim, my old supplier O2 did and installed and did a sim swap via a text.
                  I thought Graphene was be similar , enable sim, restart , Network and Interview, Sims, Add sim and follow instructions. Not sure what the purpose of Graphene requiring esim activation button has.

                  noplanetB did you managed to install it? I have been trying but when i press download, it can't be activated

                  So the proprietary blob is only required for provisioning and management, and the phone continues to have esim functionality if the "esim support" toggle is set to off, after initial provisioning has occurred?

                    Chipper Turns out yes, it just breaks a few things, which a handy warning informs you about prior to doing.

                    From a privacy standpoint, are there any downsides to esims vs standard physical sim chips?

                    16 days later

                    OK I'm staring at Settings > Network & internet

                    and there is no > eSIM support

                    Its just internet, airplane mode, hotspot & tethering, data saver, and VPN.
                    ...
                    Oh wait let me go check the owner profile. Hold on...

                      GlytchMeister

                      Yep, that was it. My bad! Got it working and never had to download any google nonsense. I guess GOS has the proprietary google stuff needed to make esims work kinda... containerized inside itself?