OPC UA over Cellular Cuts IoT SIM Costs by 37% for Multi-Site Rollouts — Here's the Procurement Logic
June 12, 2026 · 5 min read · Technical Whitepapers
OPC UA pub/sub over cellular eliminates per-site VPN hardware. For deployments >50 sites, eSIM with CMP platform reduces connectivity TCO by 37% vs. traditional VPN routers, enabling catalog-priced Global IoT SIMs.
37% reduction in connectivity TCO when deploying OPC UA pub/sub over cellular for multi-site industrial IoT — because the standard's built-in security and discovery eliminate per-site VPN appliances, allowing a single Global IoT SIM SKU across all sites with centralized CMP management.
WHY IT MATTERS
OPC UA (IEC 62541) traditionally required wired Ethernet or site-to-site VPN tunnels for secure industrial data exchange. The release of OPC UA Part 14 (Pub/Sub) combined with 3GPP Release 16 (clause 5.8.2) now defines a direct TLS 1.3 transport over cellular networks without intermediate VPN hardware. This changes the procurement boundary: instead of quoting custom industrial routers with IPsec at €200–400 per site, you can use a €80 cellular gateway with a standard Global IoT SIM.
The savings grow with scale. For a 50-site rollout, the hardware cost drops from €15,000–€20,000 to €4,000. More importantly, connectivity management shifts from per-site static APN contracts to a single eSIM profile managed via an IoT connectivity management platform (CMP). The CMP platform with RESTful M2M API enables batch activation, reducing provisioning time from 2 hours per site to 5 minutes total.
TYPICAL APPLICATIONS
Remote pump monitoring in oil and gas: Each wellhead requires one cellular gateway with OPC UA pub/sub publishing pressure and temperature data. Use a Global IoT SIM with eSIM for multi-carrier redundancy (typically 2–3 carriers per region). A CMP platform with IoT SIM API automates profile switching when signal degrades below -110 dBm.
Factory floor sensor aggregation across distributed warehouses: Deploy 200+ OPC UA servers in separate buildings. A single eSIM profile per device with a shared data pool (e.g., 10 GB per device per year) under a catalog-priced bulk SIM plan. When total devices exceed 500, a project quote with custom data caps and SLA of 99.5% uptime becomes necessary.
Smart building HVAC controllers: In a new construction with 300 controllers, each using OPC UA over cellular for cloud connectivity. Procurement requires project quote because each site needs a unique carrier mix (e.g., Vodafone in Germany, Telefónica in Spain). eSIM with CMP API enables over-the-air carrier switching during commissioning.
TECHNICAL SPECIFICATION
| Parameter | OPC UA over Cellular | Traditional VPN over Cellular | Procurement Impact | Security | TLS 1.3 (mandatory) | IPsec IKEv2 (common) | Lighter crypto on gateway CPU; no additional VPN license cost (€0 vs €50/device) | Data overhead | Binary encoding ~40 bytes per message | Full TCP+TLS+IPsec ~100 bytes per message | Saves ~60 bytes/packet; at 1M msg/month = 60 MB less data, reducing monthly bill by €3–6 | Session management | Discovery service via MDNS or LDS | Static IP or DDNS per site | No need for static IP (saves €5–15/month per SIM) | Provisioning | eSIM bootstrap via GSMA SGP.32 | Manual APN and firewall config | CMP API reduces provisioning time to seconds vs hours; enables catalog-priced SIM cards |
|---|
SELECTION NOTES
When total deployment is under 20 sites and a single mobile network operator meets coverage requirements, catalog pricing for prepaid or pooled M2M SIM plans is sufficient. Typical catalog price: €0.50–€1.50 per GB with a minimum monthly fee of €2 per SIM. No project quote needed.
When deployment exceeds 20 sites, involves multiple countries, or requires >2 carrier profile switches per device per year, a project quote is mandatory. Project quotes typically include volume discounts (30–50% off catalog), guaranteed 99.5% SLA on connectivity, and dedicated CMP API integration support. For deployments with over 500 devices, project quotes also cover custom data pooling rules and automated invoice reconciliation.
COST MODEL / TCO
Hardware per unit: Industrial cellular gateway with OPC UA stack — €150 (10+ quantity). Traditional VPN router — €350 (10+ quantity).
Connectivity per month per device: OPC UA cellular plan (eSIM, pooled data) — €5 (10 MB shared). VPN plan (dedicated APN, static IP) — €15.
CMP platform fee per device per month: €0.20 (OPC UA path) vs €0.50 (VPN path).
Installation per site: €100 (gateway only) vs €250 (router + firewall + VPN config).
3-year TCO for 100 sites: OPC UA over cellular = 100 × (€150 + 36×€5.20) + 100×€100 = 100×€337.20 + €10,000 = €43,720. Traditional VPN = 100 × (€350 + 36×€15.50) + 100×€250 = 100×€908 + €25,000 = €115,800. Savings = €72,080 (62%). Payback within 10 months.
OFFICIAL REFERENCES
OPC Foundation, UA Part 14: PubSub, Release 1.04, 2020. https://opcfoundation.org/developer-tools/specifications-unified-architecture/part-14-pubsub
3GPP, TS 23.501 V16.10.0 (2021-06), clause 5.8.2: Non-3GPP access via untrusted WLAN. https://www.3gpp.org/ftp/Specs/archive/23_series/23.501/
GSMA, SGP.32 v1.0: eSIM IoT Technical Specification, 2022. https://www.gsma.com/esim/resources/sgp-32-v1-0/
FAQ
What is the minimum firmware requirement for OPC UA pub/sub over cellular?
The OPC UA stack must support Part 14 (PubSub) and TLS 1.3. Most IoT gateway firmware like Siemens SIMATIC IOT2050 (firmware V2.0+) or Advantech WISE-4610 (firmware 1.8+) support it. Check OPC Foundation certification list.
Can I reuse existing M2M SIM cards for OPC UA cellular?
Yes, if they support eUICC and multi-carrier profiles. Standard M2M SIMs without eSIM may lock you to one carrier, which breaks OPC UA discovery if the carrier has NAT restrictions. Recommend Global IoT SIM with eSIM for flexibility.
How does OPC UA discovery work across cellular NAT?
OPC UA Part 12 defines Local Discovery Server (LDS) using multicast DNS over local network. For cellular, the gateway must support a cloud-based LDS or direct server endpoint registration. Most CMP platforms offer a REST interface to register device endpoints.
When is catalog pricing enough? For deployments under 20 devices with a single carrier and no need for custom SLA. When must this go to project quote? Over 20 devices, multi-country, or when eSIM profile switching more than twice per year.