Acceleronix, IDEMIA Secure Transactions and Orange announce flexible, single-SKU manufacturing with quantum-safe IFPP. Orange, one of the world's leading telecom operators, has joined the global quantum-safe In-Factory Profile Provisioning (IFPP) program, jointly launched by Acceleronix and IDEMIA Secure Transactions at MWC Barcelona in February. Posted on 11.04.26 One SKU. Every market. Connectivity decided at the end of production. Live at electronica 2026. The program enables device makers to build a single product for every market and connect it to the Orange network before it leaves the factory. Acceleronix and IDEMIA Secure Transactions will demonstrate the solution live at electronica 2026, the international electronics trade fair, at Messe München, Hall C2, Stand 601, from 10 to 13 November. Most connected devices share the same weak spot: provisioning and testing on the production line. In-Factory Profile Provisioning (IFPP) addresses this challenge by enabling connectivity provisioning at scale, including in air-gapped manufacturing facilities. With IFPP, OEMs can load the operator profile onto the eSIM at the end of their own production line, so every device leaves the factory tested, provisioned and ready to connect. Quantum-safe binding protects operator credentials throughout production, and IFPP works across all eSIM form factors. One SKU. Every market. Today, connectivity is decided at the design stage and locked in through SIM variants, regional SKUs and separate stock. IFPP moves that decision to the very end of production. Manufacturers build one hardware platform and assign the operator profile on the line, order by order. Fewer SKUs. Less stock tied up in regional variants. Faster entry into new markets. With IFPP, connectivity becomes a production setting, made on the line, as late as the order allows. Multiple SIM SKUs are the next thing manufacturers get to stop managing. Sharing the same vision of manufacturing and IoT connectivity with its partners in the IFPP Early Access Program allows IDEMIA Group to transform the IoT landscape, Gal Olshinka, Director, Acceleronix Why MFF4 needs IFPP Compact eSIM form factors such as MFF4 are attracting growing interest from OEMs seeking to build smaller, more integrated connected devices. At just 2 x 2 mm, MFF4 is the smallest standardised eSIM, around 87% smaller than the widely used MFF2. As manufacturers explore these new form factors, provisioning flexibility becomes a key consideration. The smallest devices, such as trackers, sensors and wearables, have the least room for error. Limited power and battery space make in-field profile downloads harder in certain use cases. IFPP addresses this need by enabling secure operator profile provisioning directly on the production line. By allowing connectivity selection later in the manufacturing process, IFPP helps OEMs adopt form factors such as MFF4 while reducing inventory complexity and supporting a common hardware platform across markets. As connected devices become smaller and more power-constrained, avoiding unnecessary in-field profile downloads becomes increasingly important. With IFPP, IDEMIA Secure Transactions brings its eSIM security expertise to both MNOs and device manufacturers: its quantum-safe profile management solution protects MNO credentials beyond their secure environment, while giving manufacturers greater flexibility in how they provision connected devices, across eSIM form factors. Philippe De Oliveira, SVP Auto/IoT Connectivity Services, IDEMIA Secure Transactions Built on the GSMA framework, ready today The program follows GSMA SGP.41, the industry's common architecture and requirements for in-factory profile provisioning. It runs on existing eSIM IoT (SGP.32) infrastructure, so OEMs can deploy now and upgrade to SGP.42 once the detailed technical specification is published. How the partners work together IDEMIA Secure Transactions delivers an IFPP-ready eSIM with quantum-safe profile binding and secure delivery. Acceleronix provides the IFPP Loader and factory orchestration tools that plug into existing production lines, with full traceability per device, and manages connectivity and devices once they are in the field. Orange supplies the operator profiles and managed IoT global connectivity through its own network and roaming partners, so devices join the network from first power-on. IFPP makes cellular connectivity simpler for its customers. The operator profile is provisioned in the factory, so the device is ready to connect from day one. That removes a real barrier for IoT manufacturers and opens cellular to many more devices and use cases. Together with IDEMIA Secure Transactions and Acceleronix, Orange is making IoT simpler to deploy, easier to scale and secure by design. The solution is already quantum safe. Philippe Lucas, EVP Partnerships Content and Devices, Orange Availability With Orange, the program brings together a leading global operator, a trusted eSIM security provider and an end-to-end IoT platform. IFPP trial kits are available for OEMs and device makers who want to evaluate factory provisioning with Orange profiles on their own production lines. First live demonstration at electronica Visitors can see IFPP live at electronica 2026, Messe München, 10 to 13 November, Hall C2, Stand 601, and sign up for an IFPP trial kit to test it on their own production line. Book a meeting: https://www.linkedin.com/events/7521139497112342529/ PDF version * About IDEMIA Group - IDEMIA Group is a global technology leader with more than 10,700 employees worldwide. Its two market-leading divisions deliver mission-critical solutions that simplify and secure interactions in the physical and digital realms: - IDEMIA Secure Transactions (IST) is the leading technology provider making it safer and easier to pay and connect. With unmatched expertise in cryptography and credential issuance, IST is trusted by over 2000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. Every day, IST secures billions of essential transactions, ensuring the highest levels of data protection and convenience. - IDEMIA Public Security (IPS) is a trusted provider of government-grade and secure biometric-based solutions for 600 government, state and federal agencies. With decades of experience in biometric technologies, IPS enables safer, frictionless and fairer ways to secure travel, access and citizen protection. Separately, two other government-related activities are conducted by the IDEMIA Group: civilian identity issuance in North America and road safety. For more information, please visit www.idemia.com. * About Acceleronix - Acceleronix is the end-to-end IoT partner trusted by global innovators to move faster with less complexity. From concept to global deployment, IDEMIA Group handle design, connectivity, SIM/eSIM lifecycle, AI, cloud, and compliance so you launch faster and scale smarter. www.acceleronix.io * About Orange - Orange is one of the world's leading telecommunications operators. As of the end of 2025, Orange connects 340 million customers (including MasOrange) across 26 countries and generated 40.4 billion euros in revenues. Orange is listed on the Euronext Paris (ORA). your press contact(s).

IDEMIA Secure Transactions enables banks to prepare cards for the quantum era with industry-first certification. IDEMIA Secure Transactions becomes the first company to achieve EMVCo certification for a payment card platform providing access to post-quantum cryptography (PQC) and crypto-agility services. This milestone enables banks to prepare their payment cards today for tomorrow's quantum threats. Posted on 10.29.26 As quantum computing advances, industries are preparing for a future in which today's cryptographic methods may no longer provide the same level of protection. For banks and issuers, the challenge is clear: ensuring that the payment cards issued today can continue to meet tomorrow's security requirements while remaining fully compatible with the existing payment ecosystem. With this certification, IDEMIA Secure Transactions (IST), a global leader in payment, connectivity and cybersecurity solutions, is providing a practical foundation for that transition. Built specifically for the unique constraints of payment cards, IST's platform combines post-quantum cryptography (PQC) and crypto-agility capabilities in a certified, payment-ready solution. Unlike centrally managed IT systems, cards operate for several years in a highly constrained hardware environment and must remain compatible with a vast, heterogeneous acceptance infrastructure. IST's platform has been designed to provide the processing capabilities and cryptographic flexibility required to prepare for this transition without disrupting existing payment applications. Preparing today's payment cards for tomorrow's threats. Certified by EMVCo, the global body setting standards for secure and interoperable card payments, IST's Java Card platform runs on a secure chip designed by IST and features a hardware post-quantum accelerator. In addition to current cryptographic algorithms, it gives applications access to the IDEMIA Sphere PQC library, a post-quantum algorithm library optimized for the constrained environment of a payment card, as well as crypto-agility services. The platform runs today's payment applications while providing access to these new algorithms, which can be leveraged as payment standards evolve. This allows banks to protect their existing card programs while paving the way for quantum-resistant offline payments. Its crypto-agility capabilities also enable the card's security mechanisms to adapt to changing standards, threats and regulatory requirements, reducing the risk of technology lock-in. One card for the services of today and tomorrow. The solution also extends post-quantum security to use cases beyond payments. The same certified platform can host complementary secure services, such as FIDO authentication, digital identity credentials or loyalty programs. These can be loaded at issuance or added later in the card's lifecycle. Banks can therefore consolidate multiple services on a single certified platform, get more value from their investment and offer consumers new services, including ones yet to be imagined. Post-quantum security is not a challenge banks can afford to address only when quantum computers become capable of breaking today's cryptography. The decisions they make today will determine how prepared their payment infrastructure will be in the years ahead. Its role at IDEMIA Secure Transactions is to make this transition both secure and seamless for consumers, while providing financial institutions the flexibility to prepare for it without disrupting the payment experiences their customers rely on today. Marc BERTIN, CTO of IDEMIA Secure Transactions. This certification marks another important step in IST's work on post-quantum cryptography for payments. By combining advanced post-quantum capabilities with deep expertise in payment technologies IST is helping the payment industry prepare for the post-quantum transition and strengthen its long-term resilience against emerging cyber threats. Key facts. * Industry first: First EMVCo-certified payment card platform providing access to post-quantum cryptography and crypto-agility capabilities. * Advanced security: Powered by a secure chip with a dedicated post-quantum hardware accelerator designed by IDEMIA Secure Transactions. * Quantum-ready technology: Integrates IST's Sphere PQC library, supporting NIST-standardized algorithms, including ML-KEM (key establishment) and ML-DSA (digital signatures) * Crypto-agility: Enables banks to prepare for evolving cryptographic standards while maintaining compatibility with existing EMV payment applications. * Beyond payments: Supports additional secure applications, including digital identity and authentication services, with the flexibility to add new capabilities throughout the card's lifecycle. PDF version * About IDEMIA Group - - IDEMIA Group is a global technology leader with more than 10,700 employees worldwide. Its two market-leading divisions deliver mission-critical solutions that simplify and secure interactions in the physical and digital realms: - IDEMIA Secure Transactions (IST) is the leading technology provider making it safer and easier to pay and connect. With unmatched expertise in cryptography and credential issuance, IST is trusted by over 2000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. Every day, IST secures billions of essential transactions, ensuring the highest levels of data protection and convenience. - IDEMIA Public Security (IPS) is a trusted provider of government-grade and secure biometric-based solutions for 600 government, state and federal agencies. With decades of experience in biometric technologies, IPS enables safer, frictionless and fairer ways to secure travel, access and citizen protection. Separately, two other government-related activities are conducted by the IDEMIA Group: civilian identity issuance in North America and road safety. For more information, please visit www.idemia.com your press contact(s).

U.S. Federal mandate establishes post-quantum cryptography compliance. Executive summary. * U.S. federal PQC mandate: establishes non-negotiable compliance timelines, requiring immediate strategic planning. * Significant capital expenditure: is now required for enterprise-wide cryptographic infrastructure and software upgrades. * A new, defined market: for PQC-compliant solutions has been created, altering cybersecurity procurement and vendor selection. * Inaction: exposes organizations to long-term 'harvest-now, decrypt-later' data breach risks with severe financial and reputational consequences. * Parallel PQC adoption: by international entities and in critical sectors signals a global standards shift, not just a U.S. federal issue. Context & rationale. NIST published its comprehensive guidelines on October 27, 2026, formalizing the transition from theoretical risk modeling to mandated implementation. The core rationale is to preempt "harvest-now, decrypt-later" (HNDL) attacks, where adversaries collect currently encrypted data with the intent to decrypt it once fault-tolerant quantum computers become available arXiv. Federal agencies are now required to inventory their cryptographic systems and develop specific migration plans to mitigate this long-term national security and financial risk. The U.S. government's move reflects a broader international trend. In South Korea, IDEMIA and KT initiated tests of Quantum-Resistant SIM technology on October 26, 2026, as part of a national project to secure defense communications Quantum Zeitgeist. This parallel activity in critical infrastructure outside the U.S. indicates a growing global consensus on the necessity of near-term PQC deployment. Financial implications. The NIST mandate is projected to create a substantial market for cybersecurity vendors and service providers specializing in quantum-safe technologies. Federal agencies must now allocate budget for extensive cryptographic inventories, procurement of PQC-compliant hardware and software, and complex systems integration. These costs represent a direct investment in long-term data security to avoid future financial liabilities from data breaches, which could include regulatory penalties, remediation expenses, and severe reputational damage. Conversely, organizations that fail to align with the PQC transition face escalating financial and operational risks. The existence of a formal federal migration plan establishes a new benchmark for cybersecurity diligence. A failure to act could be viewed as negligence in the event of a future quantum-enabled data breach, potentially increasing liability. The market for legacy cryptographic solutions will diminish, while demand for services that support migration, such as those mapping quantum-readiness stages, is expected to increase Quantum Zeitgeist. Strategic imperatives. Executive leadership must direct an immediate and comprehensive audit of all cryptographic assets and data classification policies to assess exposure to quantum threats. This inventory is the foundational step required by the new NIST guidelines NIST. Based on the audit, a phased migration strategy should be developed, prioritizing the most sensitive and long-lived data. Budgeting cycles must be adjusted to accommodate this multi-year technological shift. Strategic engagement with PQC solution providers is now critical to evaluate technology readiness and integration pathways. For companies within the federal supply chain, compliance with the PQC mandate will become a prerequisite for securing and retaining government contracts, making proactive adoption a competitive necessity. What to watch (12-18 months). Over the next 12 to 18 months, the primary activity will be internal assessments and strategy development within federal agencies, as detailed in NISTIR 8547. The first procurement cycles for PQC-enabled security solutions are expected to commence, with initial tenders and pilot programs emerging from high-priority departments like Defense and Treasury. The progress of international PQC projects, such as the KT and IDEMIA collaboration in South Korea, will provide valuable data on implementation challenges and performance in live environments Quantum Zeitgeist. The cybersecurity market will see an influx of new products and services specifically marketed for NIST compliance, requiring careful due diligence from buyers. October 12th, 2026 September 9th, 2026 August 24th, 2026 October 12th, 2026 September 9th, 2026