6.3 5GS Steering of Roaming

38.523-13GPP5GSPart 1: ProtocolRelease 17TSUser Equipment (UE) conformance specification

6.3.1 Steering of Roaming

6.3.1.1 Steering of UE in roaming during registration/security check successful using List Type 1

6.3.1.1.1 Test Purpose (TP)

(1)

with {UE being in automatic PLMN selection mode, current VPLMN not part of “PLMNs where registration was aborted due to SOR” List and not part of "User Controlled PLMN Selector with Access Technology" list and UE’s USIM configured with indication that the UE is to receive Steering of Roaming information due to initial registration in a VPLMN}

ensure that {

when {SOR Transparent container indicates ACK has been requested & List Type indicates PLMN ID and Access technology list in REGISTRATION ACCEPT and security check is successful}

then {UE sends ACK in REGISTRATION COMPLETE, waits for network release of the NAS signalling connection and selects higher priority PLMN}

}

6.3.1.1.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clause C.2. Unless otherwise stated these are Rel-15 requirements.

[TS 23.122, clause C.2]

6) The VPLMN AMF to the UE: The VPLMN AMF shall transparently send the received steering of roaming information to the UE in the REGISTRATION ACCEPT message;

7) If the steering of roaming information is received and the security check is successful, then:

a) if the steering of roaming information contains a secured packet (see 3GPP TS 31.115 [67]):

– if the UDM has not requested an acknowledgement from the UE the UE shall send the REGISTRATION COMPLETE message;

– the ME shall upload the secured packet to the USIM using procedures in 3GPP TS 31.111 [41].

NOTE 1: How the ME handles UICC responses and failures in communication between the ME and UICC is implementation specific and out of scope of this release of the specification.

– if the UDM has not requested an acknowledgement from the UE and the ME receives a USAT REFRESH command qualifier (3GPP TS 31.111 [41]) of type "Steering of Roaming" it shall perform items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6 and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 to 10;

b) if the steering of roaming information contains the list of preferred PLMN/access technology combinations, the ME shall replace the highest priority entries in the "Operator Controlled PLMN Selector with Access Technology" list stored in the ME with the received list of preferred PLMN/access technology combinations. Additionally, if the UDM has not requested an acknowledgement from the UE and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container and then either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 and 10;

8) If:

a) the UE’s USIM is configured with indication that the UE is to receive the steering of roaming information due to initial registration in a VPLMN, but neither the list of preferred PLMN/access technology combinations nor the secured packet nor the HPLMN indication that ‘no change of the "Operator Controlled PLMN Selector with Access Technology" list stored in the UE is needed and thus no list of preferred PLMN/access technology combinations is provided’ is received in the REGISTRATION ACCEPT message, when the UE performs initial registration in a VPLMN or if the steering of roaming information is received but the security check is not successful; and

b) the current chosen VPLMN is not contained in the list of "PLMNs where registration was aborted due to SOR", not part of "User Controlled PLMN Selector with Access Technology" list, the UE is not in manual mode of operation and the PDU session for emergency services is not pending to be activated;

then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container, release the current N1 NAS signalling connection locally, store the PLMN identity in the list of "PLMNs where registration was aborted due to SOR" and attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired, with an exception that the current PLMN is considered as lowest priority, and skip steps 9 to 12;

NOTE 2: When the UE is in the manual mode of operation or the current chosen VPLMN is part of the "User Controlled PLMN Selector with Access Technology" list, the UE stays on the VPLMN.

9) The UE to the VPLMN AMF: If the UDM has requested an acknowledgement from the UE:

the UE verified that the steering of roaming information has been provided by the HPLMN in step 7, the UE sends the REGISTRATION COMPLETE message to the serving AMF with an SOR transparent container including the UE acknowledgement; and

if the steering of roaming information contained a secured packet and the security check was successful, then when the UE receives the USAT REFRESH command qualifier of type "Steering of Roaming", it performs items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6.

10) The AMF to the UDM: If an SOR transparent container is received in the REGISTRATION COMPLETE message, the AMF uses the Nudm_SDM_Info service operation to provide the received SOR transparent container to the UDM. If the HPLMN decided that the UE is to acknowledge the successful security check of the received steering of roaming information in step 4, the UDM verifies that the acknowledgement is provided by the UE as specified in 3GPP TS 33.501 [66];

11) If the UE has a list of available PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired after the release of the N1 NAS signalling connection. If the N1 NAS signaling connection is not released after implementation dependent time, the UE may locally release the N1 signaling connection except when the UE is registered for emergency services or the UE has an established emergency PDU session (see 3GPP TS 24.501 [64]); and

12) The UE deletes the list of "PLMNs where registration was aborted due to SOR".

The list of "PLMNs where registration was aborted due to SOR" is deleted when the UE is switched off or the USIM is removed.

6.3.1.1.3 Test Description

6.3.1.1.3.1 Pre-test conditions

System Simulator:

Three inter-frequency multi-PLMN NR Cells as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.1.3.1-1.

The PLMNs are identified in the test by the identifiers in Table 6.3.1.1.3.1-1. The MCC and MNC values corresponding to the PLMN identifier shall understood as those specified in TS 36.523-1 [42], Table 6.0.1-1.

Table 6.3.1.1.3.1–1: PLMN identifiers

NR Cell	PLMN names
NR Cell 11	PLMN2
NR Cell 12	PLMN13
NR Cell 13	PLMN14

NR Cell 11 is set to ”Serving Cell”;

NR Cell 12 is set to ”Serving Cell”;

NR Cell 13 is set to “Serving Cell”;

System Information Combination NR-1 as defined in TS 38.508-1 [4] clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Automatic PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-10 in TS 38.508-1 [4] will be used.

Preamble:

– The UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0.

6.3.1.1.4 Test procedure sequence

Table 6.3.1.1.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE	–		–	–
2-14	Steps 1 to 13 of the registration procedure described in TS 38.508-1 [4] subclause 4.5.2.2-2 are performed on NR Cell 13	–	–	–	–
15	The SS transmits an DLInformationTransfer message and an REGISTRATION ACCEPT message containing steering of roaming information indicating list of preferred PLMN/access technology combination provided with acknowledgment requested from the UE for successful reception	<–	NR RRC: DLInformationTransfer 5G MM: REGISTRATION ACCEPT	–	–
16	SS starts timer of tmax =(6 minutes + cell selection time) (Note 1, 2 and 3)
17	The UE transmits an ULInformationTransfer message and REGISTRATION COMPLETE message carrying acknowledgement of successful reception of the steering of roaming information	–>	NR RRC: ULInformationTransfer 5G MM: REGISTRATION COMPLETE	1	P
–	EXCEPTION: Step 18a1 is performed in pc_noOf_PDUsSameConnection > 0.	–	–	–	–
18a1	The generic procedure for UE-requested PDU session establishment, specified in subclause 4.5A.2, takes place performing establishment of UE-requested PDU session(s) with ExpectedNumberOfNewPDUSessions = pc_noOf_PDUsSameConnection.	–	–	–	–
18a2-18a5a1	Void.	–	–	–	–
18A	The SS transmits an RRCRelease message.	<-=	NR RRC: RRCRelease
–	EXCEPTION: Step 18Ba1 is performed if pc_noOf_PDUsNewConnection > 0 and the UE starts PDU session establishment automatically	–	–	–	–
18Ba1	The generic procedure for UE-requested PDU session establishment, specified in subclause 4.5.2.2-4, takes place from step 2 to 9a1 performing establishment of UE-requested PDU session(s) with ExpectedNumberOfNewPDUSessions = pc_noOf_PDUsNewConnection on NR Cell 13 and then release the RRC Connection.	–	–	–	–
19	Check: Does the UE transmits an RRCSetupRequest on NR Cell 11 before tmax expires? (Note 1, 2 and 3)	–>	NR RRC: RRCSetupRequest	1	P
20-21	Steps 3-4 of Table 4.5.2.2-2 of the generic procedure in TS 38.508-1 [4] are performed. (Note 4)	–	–	–	–
–	EXCEPTION: Steps 22a1 to 22b5a1 describe behaviours which depend on procedure parameters; the "lower case letter" identifies a step sequence that take place if a procedure parameter has a particular value.	–	–	–	–
22a1-22a16a1	IF 5GS registration type is set as Initial Registration in step 21, THEN steps 5 to 20a1 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 11.	–	–	–	–
22b1-22b2	Void	–	–	–	–
22b3-22b5a1	ELSE IF 5GS registration type is set as Mobility Registration in step 21, THEN steps 4 to 6a1 of the generic test procedure in TS 38.508-1 [4] Table 4.9.5.2.2-1 are performed on NR Cell 11.	–	–	–	–
Note 1: Timer tmax in step 16 and 19 are derived from the high priority PLMN search timer T defined by EFHPPLMN Note 2: Following attempts to access the HPLMN/EHPLMN/higher priority PLMN in VPLMN is operator specific setting (Refer to TS 23.122 Rel-12).Hence, window between 120s to T+Tolerance is being used , where the high priority PLMN search timer T defined by EFHPPLMN Note 3: Tolerance of 5min is added to allow time for the UE to find the proper PLMN Note 4: The 5GS registration type shall be only set as Mobility Registration for R16 UEs according to TS 24.501 [22] subclause 5.2.3.2.5 specified in Release 16. The EXCEPTION description applies only to R15 UEs.

6.3.1.1.5 Specific message contents

Table 6.3.1.1.5-1: REGISTRATION ACCEPT for NR Cell 13 (step 15, Table 6.3.1.1.4-1)

Derivation Path: 38.508-1 Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.
SoR-MAC-IAUS	Set to match the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	1	Acknowledgement requested
PLMN ID 1	PLMN2
Access Technology Identifier 1	NG-RAN

Table 6.3.1.1.5-2: Void

Table 6.3.1.1.5-3: REGISTRATION COMPLETE for NR Cell 13 (step 17, Table 6.3.1.1.4-1)

Derivation Path: 38.508-1 Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries acknowledgement of successful reception of the steering of roaming information.
SOR data type	1	The SOR transparent container carries acknowledgement of successful reception of the steering of roaming information.

Table 6.3.1.1.5-4: Void

Table 6.3.1.1.5-5: REGISTRATION ACCEPT for NR Cell 11 (step 22a10, Table 6.3.1.1.4-1)

Derivation Path: 38.508-1 Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.
SoR-MAC-IAUS	Set to match the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	1	Acknowledgement requested
PLMN ID 1	PLMN2
Access Technology Identifier 1	NG-RAN

Table 6.3.1.1.5-6: REGISTRATION COMPLETE for NR Cell 11 (step 22a11, Table 6.3.1.1.4-1)

Derivation Path: 38.508-1 Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries acknowledgement of successful reception of the steering of roaming information.
SOR data type	1	The SOR transparent container carries acknowledgement of successful reception of the steering of roaming information.

6.3.1.2 Steering of UE in roaming during registration/security check successful but SOR Transparent container indicates ACK has been NOT been requested

6.3.1.2.1 Test Purpose (TP)

(1)

with {UE being in automatic PLMN selection mode, current VPLMN not part of “PLMNs where registration was aborted due to SOR” List and not part of "User Controlled PLMN Selector with Access Technology" list and UE’s USIM configured with indication that the UE is to receive Steering of Roaming information due to initial registration in a VPLMN}

ensure that {

when {SOR Transparent container indicates ACK has NOT been requested & List Type indicates PLMN ID and Access technology list in REGISTRATION ACCEPT and security check is successful and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN}

then {the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container and then either  releases N1 NAS Signaling connection locally and then attempt to obtain service on a higher priority PLMN or optionally wait for network release of the NAS signalling connection and then selects higher priority PLMN}

}

6.3.1.2.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clause C.2, TS 24.501 clause 4.4.4.2 and 5.5.1.2.4. Unless otherwise stated these are Rel-15 requirements.

[TS 23.122, clause C.2]

6) The VPLMN AMF to the UE: The VPLMN AMF shall transparently send the received steering of roaming information to the UE in the REGISTRATION ACCEPT message;

7) If the steering of roaming information is received and the security check is successful, then:

a) if the steering of roaming information contains a secured packet (see 3GPP TS 31.115 [67]):

– if the UDM has not requested an acknowledgement from the UE the UE shall send the REGISTRATION COMPLETE message;

– the ME shall upload the secured packet to the USIM using procedures in 3GPP TS 31.111 [41].

NOTE 1: How the ME handles UICC responses and failures in communication between the ME and UICC is implementation specific and out of scope of this release of the specification.

– if the UDM has not requested an acknowledgement from the UE and the ME receives a USAT REFRESH command qualifier (3GPP TS 31.111 [41]) of type "Steering of Roaming" it shall perform items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6 and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 to 10;

b) if the steering of roaming information contains the list of preferred PLMN/access technology combinations, the ME shall replace the highest priority entries in the "Operator Controlled PLMN Selector with Access Technology" list stored in the ME with the received list of preferred PLMN/access technology combinations. Additionally, if the UDM has not requested an acknowledgement from the UE and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container and then either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 and 10;

8) If:

a) the UE’s USIM is configured with indication that the UE is to receive the steering of roaming information due to initial registration in a VPLMN, but neither the list of preferred PLMN/access technology combinations nor the secured packet nor the HPLMN indication that ‘no change of the "Operator Controlled PLMN Selector with Access Technology" list stored in the UE is needed and thus no list of preferred PLMN/access technology combinations is provided’ is received in the REGISTRATION ACCEPT message, when the UE performs initial registration in a VPLMN or if the steering of roaming information is received but the security check is not successful; and

b) the current chosen VPLMN is not contained in the list of "PLMNs where registration was aborted due to SOR", not part of "User Controlled PLMN Selector with Access Technology" list, the UE is not in manual mode of operation and the PDU session for emergency services is not pending to be activated;

then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container, release the current N1 NAS signalling connection locally, store the PLMN identity in the list of "PLMNs where registration was aborted due to SOR" and attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired, with an exception that the current PLMN is considered as lowest priority, and skip steps 9 to 12;

NOTE 2: When the UE is in the manual mode of operation or the current chosen VPLMN is part of the "User Controlled PLMN Selector with Access Technology" list, the UE stays on the VPLMN.

9) The UE to the VPLMN AMF: If the UDM has requested an acknowledgement from the UE:

the UE verified that the steering of roaming information has been provided by the HPLMN in step 7, the UE sends the REGISTRATION COMPLETE message to the serving AMF with an SOR transparent container including the UE acknowledgement; and

if the steering of roaming information contained a secured packet and the security check was successful, then when the UE receives the USAT REFRESH command qualifier of type "Steering of Roaming", it performs items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6.

10) The AMF to the UDM: If an SOR transparent container is received in the REGISTRATION COMPLETE message, the AMF uses the Nudm_SDM_Info service operation to provide the received SOR transparent container to the UDM. If the HPLMN decided that the UE is to acknowledge the successful security check of the received steering of roaming information in step 4, the UDM verifies that the acknowledgement is provided by the UE as specified in 3GPP TS 33.501 [66];

11) If the UE has a list of available PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired after the release of the N1 NAS signalling connection. If the N1 NAS signaling connection is not released after implementation dependent time, the UE may locally release the N1 signaling connection except when the UE is registered for emergency services or the UE has an established emergency PDU session (see 3GPP TS 24.501 [64]); and

12) The UE deletes the list of "PLMNs where registration was aborted due to SOR".

The list of "PLMNs where registration was aborted due to SOR" is deleted when the UE is switched off or the USIM is removed.

[TS 24.501 clause 4.4.4.2]

…

The network can provide the SOR transparent container IE during the registration procedure to the UE in the REGISTRATION ACCEPT message. The SOR transparent container IE is integrity protected by the HPLMN as specified in 3GPP TS 33.501 [24].

…

[TS 24.501 clause 5.5.1.2.4]

…

If the REGISTRATION ACCEPT message includes the SOR transparent container IE and the SOR transparent container IE successfully passes the integrity check (see 3GPP TS 33.501 [24]):

a) the UE shall proceed with the behaviour as specified in 3GPP TS 23.122 [5] annex C; and

b) if the registration procedure is performed over 3GPP access and the UE attempts obtaining service on another PLMNs as specified in 3GPP TS 23.122 [5] annex C, then the UE may locally release the established N1 NAS signalling connection after sending a REGISTRATION COMPLETE message. Otherwise the UE shall send a REGISTRATION COMPLETE message and not release the current N1 NAS signalling connection locally. If an acknowledgement is requested in the SOR transparent container IE of the REGISTRATION ACCEPT message, the UE acknowledgement is included in the SOR transparent container IE of the REGISTRATION COMPLETE message.

If the SOR transparent container IE successfully passes the integrity check (see 3GPP TS 33.501 [24]), indicates list of preferred PLMN/access technology combinations is provided and the list type indicates:

a) "PLMN ID and access technology list", then the ME shall replace the highest priority entries in the "Operator Controlled PLMN Selector with Access Technology" list stored in the ME and shall proceed with the behaviour as specified in 3GPP TS 23.122 [5] annex C; or

b) "secured packet", then the ME shall behave as if a SMS is received with protocol identifier set to SIM data download, data coding scheme set to class 2 message and SMS payload as secured packet contents of SOR transparent container IE. The SMS payload is forwarded to UICC as specified in 3GPP TS 23.040 [4A] and the ME shall proceed with the behaviour as specified in 3GPP TS 23.122 [5] annex C.

…

6.3.1.2.3 Test Description

6.3.1.2.3.1 Pre-test conditions

System Simulator:

– Three inter-frequency multi-PLMN NR Cells as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.2.3.1-1.

– The PLMNs are identified in the test by the identifiers in Table 6.3.1.2.3.1-1. The MCC and MNC values corresponding to the PLMN identifier shall understood as those specified in TS 36.523-1 [42], Table 6.0.1-1.

Table 6.3.1.2.3.1-1: PLMN identifiers

NR Cell	PLMN names
NR Cell 11	PLMN2
NR Cell 12	PLMN13
NR Cell 13	PLMN14

NR Cell 11 is set to ”Serving Cell”;

NR Cell 12 is set to ”Serving Cell”;

NR Cell 13 is set to “Serving Cell”;

System Information Combination NR-1 as defined in TS38.508-1 [4] clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Automatic PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-10 in TS 38.508-1 [4] will be used.

Preamble:

– The UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0.

6.3.1.2.4 Test procedure sequence

Table 6.3.1.2.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE.	–		–	–
2-14	Steps 1 to 13 of the registration procedure described in TS 38.508-1 [4] subclause 4.5.2.2-2 are performed on NR Cell 13.	–	–	–	–
15	The SS transmits an DLInformationTransfer message and a REGISTRATION ACCEPT message containing steering of roaming information indicating that acknowledgment is not requested from the UE for successful reception.	<–	NR RRC: DLInformationTransfer 5G MM: REGISTRATION ACCEPT	–	–
16	The SS also starts timer of tmax = (6 minutes + cell selection time) (Note 1, 2 and 3)	–	–	–	–
17	The UE transmits an ULInformationTransfer message and REGISTRATION COMPLETE message without Steering of Roaming Transparent container.	–>	NR RRC: ULInformationTransfer 5G MM: REGISTRATION COMPLETE	-1	–
–	EXCEPTION: Steps 18a1-18a5 are performed IF pc_SOR_ACKNotReqLocalRel is False, ELSE step 18b1 is performed.	–	–	–	–
–	EXCEPTION: Step 18a1a1 is performed in pc_noOf_PDUsSameConnection > 0.	–	–	–	–
18a1a1	The generic procedure for UE-requested PDU session establishment, specified in subclause 4.5A.2, takes place performing establishment of UE-requested PDU session(s) with ExpectedNumberOfNewPDUSessions = pc_noOf_PDUsSameConnection.	–	–	–	–
18a2	The SS transmits an RRCRelease message.	<-=	NR RRC: RRCRelease	–	–
–	EXCEPTION: Step 18a2a1 is performed if pc_noOf_PDUsNewConnection > 0 and the UE starts PDU session establishment automatically	–	–	–	–
18a3a1	The generic procedure for UE-requested PDU session establishment, specified in subclause 4.5.2.2-4, takes place from step 2 to 9a1 performing establishment of UE-requested PDU session(s) with ExpectedNumberOfNewPDUSessions = pc_noOf_PDUsNewConnection and then release the RRC Connection.	–	–	–	–
18a4-18a5a1	Void	–	–	–	–
18b1	The SS locally releases the RRC connection.	–	–	–	–
19	Void	–	–	–	–
20	Check: Does the UE transmits an RRCSetupRequest message on NR Cell 11 before tmax expires? (Note 1, 2 and 3)	–>	NR RRC: RRCSetupRequest	1	P
21	The SS transmits an RRCSetup message on NR Cell 11.	<–	NR RRC: RRCSetup	–	–
22	The UE transmits an RRCSetupComplete message and a REGISTRATION REQUEST message on NR Cell 11. (Note 4)	–>	NR RRC: RRCSetupComplete 5GMM: REGISTRATION REQUEST	–	–
–	EXCEPTION: Steps 23a1 to 23b5a1 describe behaviours which depend on procedure parameters; the "lower case letter" identifies a step sequence that take place if a procedure parameter has a particular value	–	–	–	–
23a1-23a15a1	IF 5GS registration type is set as Initial Registration in step 22, THEN steps 5 to 20a1 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 11.	–	–	–	–
23b1-23b2	Void	–	–	–	–
23b3-23b5a1	ELSE IF 5GS registration type is set as Mobility Registration in step 22, THEN steps 4 to 6a1 of the generic test procedure in TS 38.508-1 [4] Table 4.9.5.2.2-1 are performed on NR Cell 11.	–	–	–	–
24-26	Void	–	–	–	–
Note 1: Timer tmax in step 16 and 20 are derived from the high priority PLMN search timer T defined by EFHPPLMN Note 2: Following attempts to access the HPLMN/EHPLMN/higher priority PLMN in VPLMN is operator specific setting (Refer to TS 23.122 Rel-12). Hence, window between 120s to T+Tolerance is being used, where the high priority PLMN search timer T defined by EFHPPLMN Note 3: Tolerance of 5min is added to allow time for the UE to find the proper PLMN Note 4: The 5GS registration type shall be only set as Mobility Registration for Rel-16 UEs according to TS 24.501 subclause 5.2.3.2.5 specified in Release 16. The EXCEPTION description applies only to Rel-15 UEs.

6.3.1.2.5 Specific message contents

Table 6.3.1.2.5-1: REGISTRATION ACCEPT for NR Cell 12 (step 15, Table 6.3.1.2.4-1)

Derivation Path: 38.508-1 Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.
SoR-MAC-IAUS	Set to match the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	0	Acknowledgement is NOT requested
PLMN ID 1	PLMN2
Access Technology Identifier 1	NG-RAN
PLMN ID 2	PLMN13
Access Technology Identifier 2	NG-RAN
PLMN ID 3	PLMN14
Access Technology Identifier 3	NG-RAN

Table 6.3.1.2.5-2: Void

Table 6.3.1.2.5-3: REGISTRATION COMPLETE for NR Cell 13 (step 17, Table 6.3.1.2.4-1)

Derivation Path: 38.508-1 Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Not Present	The SOR transparent container should not be present when ACK is not requested by UDM.

Table 6.3.1.2.5-4: REGISTRATION ACCEPT for NR Cell 11 (step 23a10, Table 6.3.1.2.4-1)

Derivation Path: 38.508-1 Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.
SoR-MAC-IAUS	Set to match the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	0	Acknowledgement is NOT requested
PLMN ID 1	PLMN2
Access Technology Identifier 1	NG-RAN
PLMN ID 2	PLMN13
Access Technology Identifier 2	NG-RAN
PLMN ID 3	PLMN14
Access Technology Identifier 3	NG-RAN

6.3.1.3 Steering of UE in roaming during registration/security check unsuccessful/Automatic mode

6.3.1.3.1 Test Purpose (TP)

(1)

with {UE being in automatic PLMN selection mode and current VPLMN not part of “PLMNs where registration was aborted due to SOR” List and not part of "User Controlled PLMN Selector with Access Technology" list and UE’s USIM configured with indication that the UE is to receive Steering of Roaming information due to initial registration in a VPLMN}

ensure that {

when {Security check on the steering of roaming information SOR Transparent container is unsuccessful}

then {UE sends REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container and releases the current N1 NAS signalling connection locally and attempts to obtain service on a higher priority PLMN}

}

6.3.1.3.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clause C.2. Unless otherwise stated these are Rel-15 requirements.

[TS 23.122, clause C.2]

8) If:

a) the UE’s USIM is configured with indication that the UE is to receive the steering of roaming information due to initial registration in a VPLMN, but neither the list of preferred PLMN/access technology combinations nor the secured packet nor the HPLMN indication that ‘no change of the "Operator Controlled PLMN Selector with Access Technology" list stored in the UE is needed and thus no list of preferred PLMN/access technology combinations is provided’ is received in the REGISTRATION ACCEPT message, when the UE performs initial registration in a VPLMN or if the steering of roaming information is received but the security check is not successful; and

b) the current chosen VPLMN is not contained in the list of "PLMNs where registration was aborted due to SOR", not part of "User Controlled PLMN Selector with Access Technology" list, the UE is not in manual mode of operation and the PDU session for emergency services is not pending to be activated;

then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container, release the current N1 NAS signalling connection locally, store the PLMN identity in the list of "PLMNs where registration was aborted due to SOR" and attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired, with an exception that the current PLMN is considered as lowest priority, and skip steps 9 to 12;

NOTE 2: When the UE is in the manual mode of operation or the current chosen VPLMN is part of the "User Controlled PLMN Selector with Access Technology" list, the UE stays on the VPLMN.

6.3.1.3.3 Test Description

6.3.1.3.3.1 Pre-test conditions

System Simulator:

– Three inter-frequency multi-PLMN NR Cells as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.3.3.1-1.

– The PLMNs are identified in the test by the identifiers in Table 6.3.1.3.3.1-1. The MCC and MNC values corresponding to the PLMN identifier shall understood as those specified in TS 36.523-1 [42], Table 6.0.1-1.

Table 6.3.1.3.3.1-1: PLMN identifiers

NR Cell	PLMN names
NR Cell 11	PLMN2
NR Cell 12	PLMN13
NR Cell 13	PLMN14

NR Cell 11 is set to ”Serving Cell”;

NR Cell 12 is set to ”Serving Cell”;

NR Cell 13 is set to “Serving Cell”;

System Information Combination NR-1 as defined in TS 38.508-1 [4] clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Automatic PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-10 of TS 38.508-1 [4] will be used.

Preamble:

– The UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0.

6.3.1.3.4 Test procedure sequence

Table 6.3.1.3.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE	–	–	–	–
2-14	Steps 1 to 13 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 13	–	–	–	–
15	The SS transmits a DLInformationTransfer message and a REGISTRATION ACCEPT message containing steering of roaming information, includes unmatched SOR-MAC-IAUSF that will result in unsuccessful security check while on UE reception	<–	NR RRC: DLInformationTransfer 5G MM: REGISTRATION ACCEPT	–	–
16	SS starts timer of tmax =(6 minutes + cell selection time) (Note 1, 2 and 3)	–	–	–	–
17	The UE transmits an ULInformationTransfer message and REGISTRATION COMPLETE message without including an SOR transparent container	–>	NR RRC: ULInformationTransfer 5G MM: REGISTRATION COMPLETE	1	P
18-21a1	Void	–	–	–	–
22	The SS locally releases the RRC connection.	–	–	–	–
23	Check: Does the UE transmits an RRCSetupRequest message on NR Cell 12 before tmax expires? (Note 1, 2 and 3)	–>	NR RRC: RRCSetupRequest	1	P
24	The SS transmits an RRCSetup message on NR Cell 12.	<–	NR RRC: RRCSetup	–	–
25	The UE transmits an RRCSetupComplete message and a REGISTRATION REQUEST message on NR Cell 12. (Note 4)	–>	NR RRC: RRCSetupComplete 5GMM: REGISTRATION REQUEST	–	–
25A – 25F	Steps 4 to 9 of the generic test procedure in TS 38.508-1 [4] Table 4.9.8.2.2-1 are performed.	–	–	–	–
26 – 28a1	Void	–	–	–	–
Note 1: Timer tmax in step 16 is derived from the high priority PLMN search timer T defined by EFHPPLMN Note 2: Following attempts to access the HPLMN/EHPLMN/higher priority PLMN in VPLMN is operator specific setting (Refer to TS 23.122 Rel-12). Hence, window between 120s to T+Tolerance is being used , where the high priority PLMN search timer T defined by EFHPPLMN Note 3: Tolerance of 5min is added to allow time for the UE to find the proper PLMN Note 4: The 5GS registration type shall be only set as Mobility Registration for Rel-16 UEs according to TS 24.501 subclause 5.2.3.2.5 specified in Release 16. The EXCEPTION description applies only to Rel-15 UEs.

6.3.1.3.5 Specific message contents

Table 6.3.1.3.5-1: REGISTRATION ACCEPT for NR Cell 13 (step 15, Table 6.3.1.3.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.
SoR-MAC-IAUS	Set to mismatch the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	1	Acknowledgement requested
PLMN ID 1	PLMN2
Access Technology Identifier 1	NG-RAN

Table 6.3.1.3.5-2: Void

Table 6.3.1.3.5-3: REGISTRATION COMPLETE for NR Cell 13 (step 17, Table 6.3.1.3.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Not Present	The SOR transparent container is not included in REGISTRATION COMPLETE message

Table 6.3.1.3.5-4: Void

Table 6.3.1.3.5-5: Void

Table 6.3.1.3.5-6: REGISTRATION REJECT (step 25E, Table 6.3.1.3.4-1)

Derivation Path: TS 38.508-1 [4], Table 4.7.1-9
Information Element		Value/remark	Comment	Condition
5GMM cause		‘00010110’B	Cause #22 (Congestion)
T3346 Value		‘00100001’B	1 minute

6.3.1.4 Steering of UE in roaming during registration/security check unsuccessful/Manual mode

6.3.1.4.1 Test Purpose (TP)

(1)

with {UE being in manual PLMN selection mode and current VPLMN not part of “PLMNs where registration was aborted due to SOR” List and not part of "User Controlled PLMN Selector with Access Technology" list and UE’s USIM configured with indication that the UE is to receive Steering of Roaming information due to initial registration in a VPLMN}

ensure that {

when {Security check on the steering of roaming information SOR Transparent container is unsuccessful}

then {UE sends REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container and stays on this VPLMN}

}

6.3.1.4.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clause C.2. Unless otherwise stated these are Rel-15 requirements.

[TS 23.122, clause C.2]

6) The VPLMN AMF to the UE: The VPLMN AMF shall transparently send the received steering of roaming information to the UE in the REGISTRATION ACCEPT message;

7) If the steering of roaming information is received and the security check is successful, then:

a) if the steering of roaming information contains a secured packet (see 3GPP TS 31.115 [67]):

– if the UDM has not requested an acknowledgement from the UE the UE shall send the REGISTRATION COMPLETE message;

– the ME shall upload the secured packet to the USIM using procedures in 3GPP TS 31.111 [41];

NOTE 1: How the ME handles UICC responses and failures in communication between the ME and UICC is implementation specific and out of scope of this release of the specification.

– if the UDM has not requested an acknowledgement from the UE and the ME receives a USAT REFRESH command qualifier (3GPP TS 31.111 [41]) of type "Steering of Roaming" it shall perform items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6 and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 to 10;

b) if the steering of roaming information contains the list of preferred PLMN/access technology combinations, the ME shall replace the highest priority entries in the "Operator Controlled PLMN Selector with Access Technology" list stored in the ME with the received list of preferred PLMN/access technology combinations. Additionally, if the UDM has not requested an acknowledgement from the UE and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container and then either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 to 10;

8) If:

a) the UE’s USIM is configured with indication that the UE is to receive the steering of roaming information due to initial registration in a VPLMN, but neither the list of preferred PLMN/access technology combinations nor the secured packet nor the HPLMN indication that ‘no change of the "Operator Controlled PLMN Selector with Access Technology" list stored in the UE is needed and thus no list of preferred PLMN/access technology combinations is provided’ is received in the REGISTRATION ACCEPT message, when the UE performs initial registration in a VPLMN or if the steering of roaming information is received but the security check is not successful; and

b) the current chosen VPLMN is not contained in the list of "PLMNs where registration was aborted due to SOR", not part of "User Controlled PLMN Selector with Access Technology" list, the UE is not in manual mode of operation and the PDU session for emergency services is not pending to be activated;

then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container, release the current N1 NAS signalling connection locally, store the PLMN identity in the list of "PLMNs where registration was aborted due to SOR" and attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired, with an exception that the current PLMN is considered as lowest priority, and skip steps 9 to 12;

NOTE 2: When the UE is in the manual mode of operation or the current chosen VPLMN is part of the "User Controlled PLMN Selector with Access Technology" list, the UE stays on the VPLMN.

9) The UE to the VPLMN AMF: If the UDM has requested an acknowledgement from the UE:

the UE verified that the steering of roaming information has been provided by the HPLMN in step 7, the UE sends the REGISTRATION COMPLETE message to the serving AMF with an SOR transparent container including the UE acknowledgement; and

if the steering of roaming information contained a secured packet and the security check was successful, then when the UE receives the USAT REFRESH command qualifier of type "Steering of Roaming", it performs items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6.

10) The AMF to the UDM: If an SOR transparent container is received in the REGISTRATION COMPLETE message, the AMF uses the Nudm_SDM_Info service operation to provide the received SOR transparent container to the UDM. If the HPLMN decided that the UE is to acknowledge the successful security check of the received steering of roaming information in step 4, the UDM verifies that the acknowledgement is provided by the UE as specified in 3GPP TS 33.501 [66];

11) If the UE has a list of available PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired after the release of the N1 NAS signalling connection. If the N1 NAS signalling connection is not released after implementation dependent time, the UE may locally release the N1 signalling connection except when the UE is registered for emergency services or the UE has an established emergency PDU session (see 3GPP TS 24.501 [64]); and

12) The UE deletes the list of "PLMNs where registration was aborted due to SOR".

The list of "PLMNs where registration was aborted due to SOR" is deleted when the UE is switched off or the USIM is removed.

6.3.1.4.3 Test Description

6.3.1.4.3.1 Pre-test conditions

System Simulator:

– Two inter-frequency multi-PLMN NR Cells as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.4.3.1-1.

– The PLMNs are identified in the test by the identifiers in Table 6.3.1.4.3.1-1. The MCC and MNC values corresponding to the PLMN identifier shall understood as those specified in TS 36.523-1 [42], Table 6.0.1-1.

Table 6.3.1.4.3.1-1: PLMN identifiers

NR Cell	PLMN names
NR Cell 11	PLMN2
NR Cell 12	PLMN13

NR Cell 11 is set to "Serving Cell";

NR Cell 12 is set to "Serving Cell";

System Information Combination NR-1 as defined in TS 38.508 [4] clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Manual PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-10 in TS 38.508-1 [4] will be used.

Preamble:

– The UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0

6.3.1.4.4 Test procedure sequence

Table 6.3.1.4.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE	–	–	–	–
2	PLMN13 is manually selected	–	–	–	–
3-15	Steps 1 to 13 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 12	–	–	–	–
16	The SS transmits a DLInformationTransfer message and a REGISTRATION ACCEPT message containing steering of roaming information, includes unmatched SOR-MAC-IAUSF that will result in unsuccessful security check while on UE reception	<–	NR RRC: DLInformationTransfer 5G MM: REGISTRATION ACCEPT	–	–
17	The UE transmits an ULInformationTransfer message and REGISTRATION COMPLETE message without including an SOR transparent container	–>	NR RRC: ULInformationTransfer 5G MM: REGISTRATION COMPLETE	1	P
18-21a1	Steps 16 to 19a1 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2	–	–	–	–
22	The SS transmits an RRCRelease message	<–	NR RRC: RRCRelease	–	–
23	SS starts timer of 1 minute and waits this timer expires	–	–	–	–
24	Check: Does the UE is in state 5GC RRC_IDLE on NR Cell 12 as specified in TS 38.508-1 [4] Table 4.9.4.2.2-1?	–	–	1	P
25	The SS configures: – NR Cell 11 as a "Non-Suitable "off" cell ".	–	–	–	–
26	The user sets the UE in Automatic PLMN selection mode.	–	–	–	–
27	Wait for 300s to allow the UE to switch to automatic PLMN selection mode.	–	–	–	–

6.3.1.4.5 Specific message contents

Table 6.3.1.4.5-1: REGISTRATION ACCEPT for NR Cell 12 (step 16, Table 6.3.1.4.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.

Table 6.3.1.4.5-2: SOR Transparent Container in REGISTRATION ACCEPT for NR Cell 12 (step 16, Table 6.3.1.4.4-1)

Derivation Path: TS 24.501 [22] Figure 9.11.3.51.1
Information Element		Value/remark		Comment		Condition
SoR-MAC-IAUS		Set to mismatch the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR		Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type		0		The SOR transparent container carries steering of roaming information.
List indication value		1		List of preferred PLMN/access technology combinations is provided
List type		1		The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value		1		Acknowledgement requested
PLMN ID 1		PLMN2
Access Technology Identifier 1		NG-RAN

Table 6.3.1.4.5-3: REGISTRATION COMPLETE for NR Cell 12 (step 17, Table 6.3.1.4.4-1)

Derivation Path: 38.508-1 [4] Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Not Present	The SOR transparent container is not included in REGISTRATION COMPLETE message

6.3.1.5 Steering of UE in roaming during registration/UE configured to receive Steering of Roaming information but does not receive Steering of Roaming from Network

6.3.1.5.1 Test Purpose (TP)

(1)

with {the UE in Automatic PLMN Selection mode, VPLMN not part of “PLMNs where registration was aborted due to SOR” List and not part of “User Controlled PLMN Selector with Access Technology” & UE’s USIM configured with indication that the UE is to receive Steering of Roaming information due to initial registration in a VPLMN and the PDU session for emergency services is not pending to be activated}

ensure that {

when {neither the list of preferred PLMN/access technology combinations nor the HPLMN indication that “no change of the ‘Operator Controlled PLMN Selector with Access Technology’ list stored in the UE is needed and thus no list of preferred PLMN/access technology combinations is provided” is received in the REGISTRATION ACCEPT message}

then {UE releases N1 NAS Signalling connection locally, adds PLMN to “PLMNs where registration was aborted due to SOR” and performs PLMN selection with current VPLMN considered as lowest priority}

}

6.3.1.5.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clauses C.1 and C.2. Unless otherwise stated these are Rel-15 requirements.

[TS 23.122, clause C.1]

If:

– the UE’s USIM is configured to indicate that the UE shall expect to receive the steering of roaming information during initial registration procedure but did not receive it or security check on the steering of roaming information fails;

– the current chosen VPLMN is not contained in the list of "PLMNs where registration was aborted due to SOR";

– the current chosen VPLMN is not part of "User Controlled PLMN Selector with Access Technology" list; and

– the UE is not in manual mode of operation;

then the UE will perform PLMN selection with the current VPLMN considered as lowest priority.

[TS 23.122, clause C.2]

6) The VPLMN AMF to the UE: The VPLMN AMF shall transparently send the received steering of roaming information to the UE in the REGISTRATION ACCEPT message;

7) If the steering of roaming information is received and the security check is successful, then:

a) if the steering of roaming information contains a secured packet (see 3GPP TS 31.115 [67]):

– if the UDM has not requested an acknowledgement from the UE the UE shall send the REGISTRATION COMPLETE message;

– the ME shall upload the secured packet to the USIM using procedures in 3GPP TS 31.111 [41];

NOTE 1: How the ME handles UICC responses and failures in communication between the ME and UICC is implementation specific and out of scope of this release of the specification.

– if the UDM has not requested an acknowledgement from the UE and the ME receives a USAT REFRESH command qualifier (3GPP TS 31.111 [41]) of type "Steering of Roaming" it shall perform items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6 and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 to 10;

b) if the steering of roaming information contains the list of preferred PLMN/access technology combinations, the ME shall replace the highest priority entries in the "Operator Controlled PLMN Selector with Access Technology" list stored in the ME with the received list of preferred PLMN/access technology combinations. Additionally, if the UDM has not requested an acknowledgement from the UE and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container and then either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 to 10;

8) If:

a) the UE’s USIM is configured with indication that the UE is to receive the steering of roaming information due to initial registration in a VPLMN, but neither the list of preferred PLMN/access technology combinations nor the secured packet nor the HPLMN indication that ‘no change of the "Operator Controlled PLMN Selector with Access Technology" list stored in the UE is needed and thus no list of preferred PLMN/access technology combinations is provided’ is received in the REGISTRATION ACCEPT message, when the UE performs initial registration in a VPLMN or if the steering of roaming information is received but the security check is not successful; and

b) the current chosen VPLMN is not contained in the list of "PLMNs where registration was aborted due to SOR", not part of "User Controlled PLMN Selector with Access Technology" list, the UE is not in manual mode of operation and the PDU session for emergency services is not pending to be activated;

then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container, release the current N1 NAS signalling connection locally, store the PLMN identity in the list of "PLMNs where registration was aborted due to SOR" and attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired, with an exception that the current PLMN is considered as lowest priority, and skip steps 9 to 12;

NOTE 2: When the UE is in the manual mode of operation or the current chosen VPLMN is part of the "User Controlled PLMN Selector with Access Technology" list, the UE stays on the VPLMN.

9) The UE to the VPLMN AMF: If the UDM has requested an acknowledgement from the UE:

the UE verified that the steering of roaming information has been provided by the HPLMN in step 7, the UE sends the REGISTRATION COMPLETE message to the serving AMF with an SOR transparent container including the UE acknowledgement; and

if the steering of roaming information contained a secured packet and the security check was successful, then when the UE receives the USAT REFRESH command qualifier of type "Steering of Roaming", it performs items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6.

10) The AMF to the UDM: If an SOR transparent container is received in the REGISTRATION COMPLETE message, the AMF uses the Nudm_SDM_Info service operation to provide the received SOR transparent container to the UDM. If the HPLMN decided that the UE is to acknowledge the successful security check of the received steering of roaming information in step 4, the UDM verifies that the acknowledgement is provided by the UE as specified in 3GPP TS 33.501 [66];

11) If the UE has a list of available PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired after the release of the N1 NAS signalling connection. If the N1 NAS signalling connection is not released after implementation dependent time, the UE may locally release the N1 signalling connection except when the UE is registered for emergency services or the UE has an established emergency PDU session (see 3GPP TS 24.501 [64]); and

12) The UE deletes the list of "PLMNs where registration was aborted due to SOR".

The list of "PLMNs where registration was aborted due to SOR" is deleted when the UE is switched off or the USIM is removed.

6.3.1.5.3 Test Description

6.3.1.5.3.1 Pre-test conditions

System Simulator:

– Three inter-frequency multi-PLMN NR Cells as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.5.3.1-1.

– The PLMNs are identified in the test by the identifiers in Table 6.3.1.5.3.1-1. The MCC and MNC values corresponding to the PLMN identifier shall understood as those specified in TS 36.523-1 [42], Table 6.0.1-1.

Table 6.3.1.5.3.1-1: PLMN identifiers

NR Cell	PLMN names
NR Cell 11	PLMN2
NR Cell 12	PLMN13
NR Cell 13	PLMN14

NR Cell 11 is set to ”Serving Cell”;

NR Cell 12 is set to ”Serving Cell”;

NR Cell 13 is set to ”Serving Cell”;

System Information Combination NR-1 as defined in TS 38.508-1 [4] clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Automatic PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-10 of TS 38.508-1 [4] will be used.

Preamble:

– The UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0.

6.3.1.5.4 Test procedure sequence

Table 6.3.1.5.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE	–	–	–	–
2-15	Steps 1 to 14 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 13	–	–	–	–
16	SS starts timer of tmax =(6 minutes + cell selection time) (Note 1, 2 and 3)	–	–	–	–
17	The UE transmits an ULInformationTransfer message and REGISTRATION COMPLETE message without including an SOR transparent container	–>	NR RRC: ULInformationTransfer 5G MM: REGISTRATION COMPLETE	–	–
18	Void	–	–	–	–
19	Check: Does the UE transmits an RRCSetupRequest message on NR Cell 13 before tmax expires? (Note 1, 2 and 3)	–>	NR RRC: RRCSetupRequest	1	F
20	Check: Does the UE transmits an RRCSetupRequest message on NR Cell 12 before tmax expires? (Note 1, 2 and 3)	–>	NR RRC: RRCSetupRequest	1	P
21	The SS transmits an RRCSetup message on NR Cell 12.	<–	NR RRC: RRCSetup	–	–
22	The UE transmits an RRCSetupComplete message and a REGISTRATION REQUEST message on NR Cell 12. (Note 4)	–>	NR RRC: RRCSetupComplete 5GMM: REGISTRATION REQUEST	–	–
–	EXCEPTION: Steps 23a1 to 23b7 describe behaviours which depend on procedure parameters; the "lower case letter" identifies a step sequence that take place if a procedure parameter has a particular value	–	–	–	–
23a1-23a15a1	IF 5GS registration type is set as Initial Registration in step 22, THEN steps 5 to 20a1 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 12.	–	–	–	–
23b1-23b2	Void	–	–	–	–
23b3-23b5a1	ELSE IF 5GS registration type is set as Mobility Registration in step 22, THEN steps 4 to 6a1 of the generic test procedure in TS 38.508-1 [4] Table 4.9.5.2.2-1 with ‘connected without release‘ are performed on NR Cell 12.	–	–	–	–
–	EXCEPTION: Step 23b6a1 describes behaviour depending UE implementation; the "lower case letter" identifies a step sequence that take place if the UE performs a specific action.	–	–	–	–
23b6a1	The UE performs the generic procedure for UE-requested PDU session(s) establishment, specified in TS 38.508-1 [4] subclause 4.5A.2, performing establishment of UE-requested PDU session(s).	–	–	–	–
23b6a2	SS Releases RRC Connection	–	–	–	–
–	EXCEPTION: Step 23b6b1 describes behaviour depending UE implementation; the "lower case letter" identifies a step sequence that take place if the UE performs a specific action (pc_noOf_PDUsNewConnection > 0).	–	–	–	–
23b6b1	SS Releases RRC Connection	–	–	–	–
23b6b2 – 23b6b9a1	The generic procedure for UE-requested PDU session establishment, specified in TS 38.508-1 [4] subclause 4.5.2.2-4, takes place from step 2 to 9a1 performing establishment of UE-requested PDU session(s) with ExpectedNumberOfNewPDUSessions = pc_noOf_PDUsNewConnection and then release the RRC Connection.	–	–	–	–
23b7	Void	–	–	–	–
Note 1: Timer tmax in step 16, 19 and 20 are derived from the high priority PLMN search timer T defined by EFHPPLMN Note 2: Following attempts to access the HPLMN/EHPLMN/higher priority PLMN in VPLMN is operator specific setting (Refer to TS 23.122 Rel-12). Hence, window between 120s to T+Tolerance is being used , where the high priority PLMN search timer T defined by EFHPPLMN Note 3: Tolerance of 5min is added to allow time for the UE to find the proper PLMN Note 4: The 5GS registration type shall be only set as Mobility Registration for Rel-16 UEs according to TS 24.501 subclause 5.2.3.2.5 specified in Release 16. The EXCEPTION description applies only to Rel-15 UEs.

6.3.1.5.5 Specific message contents

Table 6.3.1.5.5-1: REGISTRATION COMPLETE for NR Cell 13 (step 17 Table 6.3.1.5.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Not Present	The SOR transparent container is not included in REGISTRATION COMPLETE message

Table 6.3.1.5.5-1A: REGISTRATION ACCEPT for NR Cell 13 (step 23a10 Table 6.3.1.5.4-1)

Derivation Path: 38.508-1 Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.
SoR-MAC-IAUS	Set to match the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	0	Acknowledgement is NOT requested
PLMN ID 1	PLMN13
Access Technology Identifier 1	NG-RAN
PLMN ID 2	PLMN14
Access Technology Identifier 2	NG-RAN
PLMN ID 3	PLMN2
Access Technology Identifier 3	NG-RAN

Table 6.3.1.5.5-2: Void

6.3.1.6 Void

6.3.1.7 Steering of UE in roaming during registration/security check unsuccessful but emergency service pending to be activated

6.3.1.7.1 Test Purpose (TP)

(1)

with {the UE in Automatic PLMN Selection mode and current VPLMN not part of “PLMNs where registration was aborted due to SOR” List and not part of "User Controlled PLMN Selector with Access Technology" list and UE’s USIM configured with indication that the UE is to receive Steering of Roaming information due to initial registration in a VPLMN and there is a PDU session for emergency services pending to be activated}

ensure that {

when {Steering of information is received but security check is unsuccessful}

then {UE will continue with the registration procedure on the VPLMN so as to be able to establish the emergency PDU session}

}

6.3.1.7.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clause C.2. Unless otherwise stated these are Rel-15 requirements.

[TS 23.122, clause C.2]

6) The VPLMN AMF to the UE: The VPLMN AMF shall transparently send the received steering of roaming information to the UE in the REGISTRATION ACCEPT message;

7) If the steering of roaming information is received and the security check is successful, then:

a) if the steering of roaming information contains a secured packet (see 3GPP TS 31.115 [67]):

– if the UDM has not requested an acknowledgement from the UE the UE shall send the REGISTRATION COMPLETE message;

– the ME shall upload the secured packet to the USIM using procedures in 3GPP TS 31.111 [41];

NOTE 1: How the ME handles UICC responses and failures in communication between the ME and UICC is implementation specific and out of scope of this release of the specification.

– if the UDM has not requested an acknowledgement from the UE and the ME receives a USAT REFRESH command qualifier (3GPP TS 31.111 [41]) of type "Steering of Roaming" it shall perform items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6 and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 to 10;

b) if the steering of roaming information contains the list of preferred PLMN/access technology combinations, the ME shall replace the highest priority entries in the "Operator Controlled PLMN Selector with Access Technology" list stored in the ME with the received list of preferred PLMN/access technology combinations. Additionally, if the UDM has not requested an acknowledgement from the UE and if the UE has a list of available and allowable PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container and then either:

i) release the current N1 NAS signalling connection locally and then attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired. In this case, steps 8 to 11 are skipped; or

ii) not release the current N1 NAS signalling connection locally and skip steps 8 to 10;

8) If:

a) the UE’s USIM is configured with indication that the UE is to receive the steering of roaming information due to initial registration in a VPLMN, but neither the list of preferred PLMN/access technology combinations nor the secured packet nor the HPLMN indication that ‘no change of the "Operator Controlled PLMN Selector with Access Technology" list stored in the UE is needed and thus no list of preferred PLMN/access technology combinations is provided’ is received in the REGISTRATION ACCEPT message, when the UE performs initial registration in a VPLMN or if the steering of roaming information is received but the security check is not successful; and

b) the current chosen VPLMN is not contained in the list of "PLMNs where registration was aborted due to SOR", not part of "User Controlled PLMN Selector with Access Technology" list, the UE is not in manual mode of operation and the PDU session for emergency services is not pending to be activated;

then the UE shall send the REGISTRATION COMPLETE message to the serving AMF without including an SOR transparent container, release the current N1 NAS signalling connection locally, store the PLMN identity in the list of "PLMNs where registration was aborted due to SOR" and attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired, with an exception that the current PLMN is considered as lowest priority, and skip steps 9 to 12;

NOTE 2: When the UE is in the manual mode of operation or the current chosen VPLMN is part of the "User Controlled PLMN Selector with Access Technology" list, the UE stays on the VPLMN.

9) The UE to the VPLMN AMF: If the UDM has requested an acknowledgement from the UE:

the UE verified that the steering of roaming information has been provided by the HPLMN in step 7, the UE sends the REGISTRATION COMPLETE message to the serving AMF with an SOR transparent container including the UE acknowledgement; and

if the steering of roaming information contained a secured packet and the security check was successful, then when the UE receives the USAT REFRESH command qualifier of type "Steering of Roaming", it performs items a), b) and c) of the procedure for steering of roaming in subclause 4.4.6.

10) The AMF to the UDM: If an SOR transparent container is received in the REGISTRATION COMPLETE message, the AMF uses the Nudm_SDM_Info service operation to provide the received SOR transparent container to the UDM. If the HPLMN decided that the UE is to acknowledge the successful security check of the received steering of roaming information in step 4, the UDM verifies that the acknowledgement is provided by the UE as specified in 3GPP TS 33.501 [66];

11) If the UE has a list of available PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the currently camped chosen VPLMN and the UE is in automatic network selection mode, then the UE shall attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired after the release of the N1 NAS signalling connection. If the N1 NAS signalling connection is not released after implementation dependent time, the UE may locally release the N1 signalling connection except when the UE is registered for emergency services or the UE has an established emergency PDU session (see 3GPP TS 24.501 [64]); and

12) The UE deletes the list of "PLMNs where registration was aborted due to SOR".

The list of "PLMNs where registration was aborted due to SOR" is deleted when the UE is switched off or the USIM is removed.

When the UE performs registration procedure for emergency services (see 3GPP TS 24.501 [64] and 3GPP TS 23.502 [63]) while the UE has a valid USIM and the AMF performs the authentication procedure, then based on HPLMN policy, the SOR procedure described in this subclause may apply.

NOTE 3: The HPLMN/UDM cannot distinguish between "initial registration" and "emergency registration" thus SOR implicitly applies for emergency registration.

6.3.1.7.3 Test Description

6.3.1.7.3.1 Pre-test conditions

System Simulator:

– One inter-frequency multi-PLMN NR Cell as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.7.3.1-1.

– The PLMNs are identified in the test by the identifiers in Table 6.3.1.7.3.1-1. The MCC and MNC values corresponding to the PLMN identifier shall understood as those specified in TS 36.523-1 [42], Table 6.0.1-1.

Table 6.3.1.7.3.1-1: PLMN identifiers

NR Cell	PLMN names
NR Cell 11	PLMN2

NR Cell 11 is set to ”Serving Cell”;

System Information Combination NR-1 as defined in TS 38.508-1 [4] clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Automatic PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-10 of TS 38.508-1 [4] will be used.

Preamble:

– The UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0.

6.3.1.7.4 Test procedure sequence

Table 6.3.1.7.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE	–	–	–	–
1A1-1A13	Steps 1 to 13 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 11.	–	–	–	–
1B	SS transmits a REGISTRATION REJECT message with cause #22 (Congestion) and T3346 set to 3 minutes. (Note 1)	<–	NR RRC: DLInformationTransfer 5GMM: REGISTRATION REJECT	–	–
1C	The SS releases the RRC connection.	–	–	–	–
2	Cause the UE to originate Emergency call. (Note 2)	–	–	–	–
3	The UE transmits an RRCSetupRequest message on NR Cell 11 with establishmentCause set to ’emergency’.	–>	NR RRC: RRCSetupRequest	–	–
4-5	Steps 3 to 4 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed.	–	–	–	–
6	The UE transmit a REGISTRATION REQUEST message with IE 5GS registration type set to "Emergency registration" or “Initial registration”. (Note 3)	–>	5G MM: REGISTRATION REQUEST	–	–
7-14	Steps 5 to 13 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 11	–	–	–	–
15	The SS transmits a DLInformationTransfer message and a REGISTRATION ACCEPT message containing steering of roaming information, includes unmatched SOR-MAC-IAUSF that will result in unsuccessful security check while on UE reception	<–	NR RRC: DLInformationTransfer 5G MM: REGISTRATION ACCEPT	–	–
16	The UE transmits an ULInformationTransfer message and REGISTRATION COMPLETE message without including an SOR transparent container	–>	NR RRC: ULInformationTransfer 5G MM: REGISTRATION COMPLETE	–	–
17	Check: Does the UE transmit an UL NAS TRANSPORT message with "Request type" set to "initial emergency request", and a PDU SESSION ESTABLISHMENT REQUEST message on NR Cell 11	–>	5GMM: UL NAS TRANSPORT 5GSM: PDU SESSION ESTABLISHMENT REQUEST	1	P
18-22	Steps 9 to 13 of the procedure of "IMS Emergency call establishment in 5GC with IMS emergency registration" described in TS 38.508-1 [4] Table 4.9.11.2.2-1 are performed.	–	–	–	–
23	Generic procedure of "Test Procedure for IMS MO Emergency call release" described in TS 38.508-1 [4] Table 4.9.12A.2.2-1 are performed.	–	–	–	–
24	The SS releases the RRC connection.	<–	NR RRC: RRCRelease	–	–
Note 1: T3346 is set to 3 minutes.This is checked for 3 minutes less tolerance. Note 2: This can be done by an AT/MMI command. Note 3: 5GS registration type can set to either "initial registration" according to TS 24.501 clause5.2.2.3.3 or "emergency registration" according to TS 24.501 clause 5.5.1.2.

6.3.1.7.5 Specific message contents

Table 6.3.1.7.5-0: REGISTRATION REJECT for NR Cell 11 (step 1B Table 6.3.1.7.4-1)

Derivation Path: TS 38.508-1 [4], Table 4.7.1-9
Information Element	Value/remark	Comment	Condition
5GMM cause	‘00010110’B	Cause #22 (Congestion)
T3346 value	‘00100011’B	3 minutes

Table 6.3.1.7.5-1: REGISTRATION REQUEST for NR Cell 11 (step 6 Table 6.3.1.7.4-1)

Derivation Path: TS 38.508-1 [4], Table 4.7.1-6, Condition EMERGENCY or INITIAL.

Table 6.3.1.7.5-2: REGISTRATION ACCEPT for NR Cell 11 11 (step 15, Table 6.3.1.7.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.

Table 6.3.1.7.5-3: SOR Transparent Container in REGISTRATION ACCEPT for NR Cell 13 (step 15, Table 6.3.1.7.4-1)

Derivation Path: TS 24.501 [22] Figure 9.11.3.51.1
Information Element	Value/remark	Comment	Condition
SoR-MAC-IAUS	Set to mismatch the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	1	Acknowledgement requested
PLMN ID 1	PLMN2
Access Technology Identifier 1	NG-RAN

Table 6.3.1.7.5-4: REGISTRATION COMPLETE for NR Cell 11 (step 16 Table 6.3.1.7.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Not Present	The SOR transparent container is not included in REGISTRATION COMPLETE message

Table 6.3.1.7.5-5: UL NAS TRANSPORT (step 17, Table 6.3.1.7.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-10, condition INITIAL_PDU_REQUEST.
Information Element	Value/remark	Comment	Condition
Request type	‘011’B	initial emergency request
S-NSSAI	Not Present
DNN	Not Present

Table 6.3.1.7.5-6: PDU SESSION ESTABLISHMENT REQUEST (step 17, Table 6.3.1.7.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.2-1.
Information Element	Value/remark	Comment	Condition
PDU session ID	A value that is not currently being used by another PDU session
PTI	A value currently not used
SSC mode	‘001’B	SSC mode 1

6.3.1.8 Steering of UE in roaming after registration/Automatic PLMN selection mode

6.3.1.8.1 Test Purpose (TP)

(1)

with {UE being in automatic PLMN selection mode and UE has registered onto a VPLMN}

ensure that {

when {SOR Transparent container included in DL NAS TRANSPORT message contains steering of roaming information and indicates ACK has been requested and security check is successful}

then {UE sends an SOR transparent container with ACK in UL NAS TRANSPORT message and waits until it moves to idle mode or 5GMM-CONNECTED mode with RRC inactive indication before attempting to obtain service on a higher priority PLMN

}

6.3.1.8.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clause C.3. Unless otherwise stated these are Rel-15 requirements

[TS 23.122, clause C.3]

2) The AMF to the UE: the AMF sends a DL NAS TRANSPORT message to the served UE. The AMF includes in the DL NAS TRANSPORT message the steering of roaming information received from the UDM.

3) Upon receiving the steering of roaming information, the UE shall perform a security check on the list of preferred PLMN/access technology combinations included in the DL NAS TRANSPORT message to verify that the list of preferred PLMN/access technology combinations is provided by HPLMN, and:

a) if the security check is successful and:

– if the steering of roaming information contains a secured packet (see 3GPP TS 31.115 [67]), the ME shall upload the secured packet to the USIM using procedures in 3GPP TS 31.111 [41];

NOTE 1: How the ME handles UICC responses and failures in communication between the ME and UICC is implementation specific and out of scope of this release of the specification.

When the ME receives a USAT REFRESH command qualifier (see 3GPP TS 31.111 [41]) of type "Steering of Roaming" it performs the procedure for steering of roaming in subclause 4.4.6 with an exception that if the UE is in automatic network selection mode, then the UE shall wait until it moves to idle mode or 5GMM-CONNECTED mode with RRC inactive indication (see 3GPP TS 24.501 [64]) before attempting to obtain service on a higher priority PLMN (specified in subclause 4.4.6 bullet d);

– otherwise, the ME shall replace the highest priority entries in the "Operator Controlled PLMN Selector with Access Technology" list stored in the ME with the received list of preferred PLMN/access technology combinations. If the UE is in automatic network selection mode, then the UE shall wait until it moves to idle mode or 5GMM-CONNECTED mode with RRC inactive indication (see 3GPP TS 24.501 [64]) before attempting to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired.

If the last established PDU session is an emergency PDU session then the UE shall attempt to perform the PLMN selection after the release of the emergency PDU session and expiration of timer T.

If the UDM has not requested an acknowledgement from the UE then steps 4 and 5 are skipped; and

b) if the security check is not successful and the UE is in automatic network selection mode, then the UE shall wait until it moves to idle mode or 5GMM-CONNECTED mode with RRC inactive indication (see 3GPP TS 24.501 [64]) before attempting to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired, with an exception that the current PLMN is considered as lowest priority. If the last established PDU session is an emergency PDU session then the UE shall attempt to perform the PLMN selection after the release of the emergency PDU session and expiration of timer T.

If the UDM has not requested an acknowledgement from the UE then steps 4 and 5 are skipped;

NOTE 2: When the UE is in the manual mode of operation or the current chosen VPLMN is part of the "User Controlled PLMN Selector with Access Technology" list, the UE stays on the VPLMN.

4) The UE to the AMF: if the UDM has requested an acknowledgement from the UE in the DL NAS TRANSPORT message and the security check in step 2 was successful, the UE sends an UL NAS TRANSPORT message to the serving AMF with an SOR transparent container including the UE acknowledgement;

6.3.1.8.3 Test Description

6.3.1.8.3.1 Pre-test conditions

System Simulator:

– Three inter-frequency multi-PLMN NR Cells as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.8.3.1-1.

– The PLMNs are identified in the test by the identifiers in Table 6.3.1.8.3.1-1. The MCC and MNC values of PLMN identifiers are specified in TS 36.523-1 [13], Table 6.0.1-1.

Table 6.3.1.8.3.1-1: PLMN identifiers

NR Cell	PLMN names
NR Cell 11	PLMN2
NR Cell 12	PLMN13
NR Cell 13	PLMN14

NR Cell 11 is set to "Serving Cell";

NR Cell 12 is set to "Serving Cell";

NR Cell 13 is set to "Serving Cell";

System Information Combination NR-1 as defined in TS 38.508-1 [4] clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Automatic PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-21 of TS 38.508-1 [4] will be used.

Preamble:

– The UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0.

6.3.1.8.4 Test procedure sequence

Table 6.3.1.8.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE	–	–	–	–
2	Whole registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 13, with “connected without release”	–	–	–	–
3	The SS transmits an DLInformationTransfer message containing steering of roaming information indicating list of preferred PLMN/access technology combination provided with acknowledgment requested from the UE for successful reception	<–	NR RRC: DLInformationTransfer 5GMM: DL NAS TRANSPORT	–	–
4	SS starts timer of tmax =(6 minutes + cell selection time) (Note 1, 2 and 3)	–	–	–	–
5	The UE transmits an ULInformationTransfer message carrying acknowledgement of successful reception of the steering of roaming information	–>	NR RRC: ULInformationTransfer 5GMM:UL NAS TRANSPORT	1	P
6	The SS transmits an RRCRelease message	<–	NR RRC: RRCRelease	–	–
7	Check: Does the UE transmits an RRCSetupRequest on NR Cell 11 before tmax expires? (Note 1, 2 and 3)	–>	NR RRC: RRCSetupRequest	1	P
8-9	Steps 3-4 of Table 4.5.2.2-2 of the generic procedure in TS 38.508-1 [4] are performed. (Note 4)	–	–	–	–
–	EXCEPTION: Steps 10a1 to 10b5a1 describe behaviours which depend on procedure parameters; the "lower case letter" identifies a step sequence that take place if a procedure parameter has a particular value	–	–	–	–
10a1-10a15a1	IF 5GS registration type is set as Initial Registration in step 9, THEN steps 5 to 20a1 of the registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 11.	–	–	–	–
10b1-10b2	Void.	–	–	–	–
10b3-10b5a1	ELSE IF 5GS registration type is set as Mobility Registration in step 9, THEN steps 4 to 6a1 of the generic test procedure in TS 38.508-1 [4] Table 4.9.5.2.2-1 are performed on NR Cell 11.	–	–	–	–
11-12a1	Void.	–	–	–	–
Note 1: Timer tmax in step 4 and 7 are derived from the high priority PLMN search timer T defined by EFHPPLMN Note 2: Following attempts to access the HPLMN/EHPLMN/higher priority PLMN in VPLMN is operator specific setting (Refer to TS 23.122 Rel-12). Hence, window between 120s to T+Tolerance is being used , where the high priority PLMN search timer T defined by EFHPPLMN Note 3: Tolerance of 5min is added to allow time for the UE to find the proper PLMN Note 4: The 5GS registration type shall be only set as Mobility Registration for R16 UEs according to TS 24.501 subclause 5.2.3.2.5 specified in Release 16. The EXCEPTION description applies only to R15 UEs.

6.3.1.8.5 Specific message contents

Table 6.3.1.8.5-1: DL NAS TRANSPORT Message for NR Cell 13 (step 3, Table 6.3.1.8.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-11
Information Element	Value/remark	Comment	Condition
Payload Container	Present	The SOR transparent container in the payload container IE carries steering of roaming information.
SoR-MAC-IAUS	Set to match the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	1	Acknowledgement requested
PLMN ID 1	PLMN2
Access Technology Identifier 1	NG-RAN

Table 6.3.1.8.5-2: Void

Table 6.3.1.8.5-3: UL NAS TRANSPORT Message for NR Cell 13 (step 5, Table 6.3.1.8.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-10
Information Element	Value/remark	Comment	Condition
Payload Container	Present	The SOR transparent container in the payload container IE carries acknowledgement of successful reception of the steering of roaming information.
SOR data type	1	The SOR transparent container carries acknowledgement of successful reception of the steering of roaming information.

Table 6.3.1.8.5-4: Void

6.3.1.9 Steering of UE in roaming after registration/Manual PLMN selection mode

6.3.1.9.1 Test Purpose (TP)

(1)

with {UE being in manual PLMN selection mode and UE has registered onto a VPLMN}

ensure that {

when {SOR Transparent container included in DL NAS TRANSPORT message contains steering of roaming information and indicates ACK has been requested and security check is successful}

then {UE sends an SOR transparent container with ACK in UL NAS TRANSPORT message and stays on the VPLMN

}

6.3.1.9.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clause C.3. Unless otherwise stated these are Rel-15 requirements.

[TS 23.122, clause C.3]

2) The AMF to the UE: the AMF sends a DL NAS TRANSPORT message to the served UE. The AMF includes in the DL NAS TRANSPORT message the steering of roaming information received from the UDM.

3) Upon receiving the steering of roaming information, the UE shall perform a security check on the list of preferred PLMN/access technology combinations included in the DL NAS TRANSPORT message to verify that the list of preferred PLMN/access technology combinations is provided by HPLMN, and:

a) if the security check is successful and:

– if the steering of roaming information contains a secured packet (see 3GPP TS 31.115 [67]), the ME shall upload the secured packet to the USIM using procedures in 3GPP TS 31.111 [41];

NOTE 1: How the ME handles UICC responses and failures in communication between the ME and UICC is implementation specific and out of scope of this release of the specification.

When the ME receives a USAT REFRESH command qualifier (see 3GPP TS 31.111 [41]) of type "Steering of Roaming" it performs the procedure for steering of roaming in subclause 4.4.6 with an exception that if the UE is in automatic network selection mode, then the UE shall wait until it moves to idle mode or 5GMM-CONNECTED mode with RRC inactive indication (see 3GPP TS 24.501 [64]) before attempting to obtain service on a higher priority PLMN (specified in subclause 4.4.6 bullet d);

– otherwise, the ME shall replace the highest priority entries in the "Operator Controlled PLMN Selector with Access Technology" list stored in the ME with the received list of preferred PLMN/access technology combinations. If the UE is in automatic network selection mode, then the UE shall wait until it moves to idle mode or 5GMM-CONNECTED mode with RRC inactive indication (see 3GPP TS 24.501 [64]) before attempting to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired.

If the last established PDU session is an emergency PDU session then the UE shall attempt to perform the PLMN selection after the release of the emergency PDU session and expiration of timer T.

If the UDM has not requested an acknowledgement from the UE then steps 4 and 5 are skipped; and

b) if the security check is not successful and the UE is in automatic network selection mode, then the UE shall wait until it moves to idle mode or 5GMM-CONNECTED mode with RRC inactive indication (see 3GPP TS 24.501 [64]) before attempting to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired, with an exception that the current PLMN is considered as lowest priority. If the last established PDU session is an emergency PDU session then the UE shall attempt to perform the PLMN selection after the release of the emergency PDU session and expiration of timer T.

If the UDM has not requested an acknowledgement from the UE then steps 4 and 5 are skipped;

NOTE 2: When the UE is in the manual mode of operation or the current chosen VPLMN is part of the "User Controlled PLMN Selector with Access Technology" list, the UE stays on the VPLMN.

4) The UE to the AMF: if the UDM has requested an acknowledgement from the UE in the DL NAS TRANSPORT message and the security check in step 2 was successful, the UE sends an UL NAS TRANSPORT message to the serving AMF with an SOR transparent container including the UE acknowledgement;

6.3.1.9.3 Test Description

6.3.1.9.3.1 Pre-test conditions

System Simulator:

– Two inter-frequency multi-PLMN NR Cells as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.9.3.1-1.

– The PLMNs are identified in the test by the identifiers in Table 6.3.1.9.3.1-1. The MCC and MNC values of PLMN identifiers are specified in TS 36.523-1 [13], Table 6.0.1-1.

Table 6.3.1.9.3.1-1: PLMN identifiers

NR Cell	PLMN names
NR Cell 11	PLMN2
NR Cell 12	PLMN13

NR Cell 11 is set to ”Serving Cell”;

NR Cell 12 is set to ”Serving Cell”;

System Information Combination NR-1 as defined in TS38.508 clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Manual PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-21 of TS 38.508-1 [4] will be used.

Preamble:

– The UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0.

6.3.1.9.4 Test procedure sequence

Table 6.3.1.9.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE.	–	–	–	–
2	PLMN13 is manually selected.	–	–	–	–
3	Whole registration procedure described in TS 38.508-1 [4] Table 4.5.2.2-2 are performed on NR Cell 12, with “connected without release”.	–	–	–	–
4	The SS transmits an DLInformationTransfer message containing steering of roaming information indicating list of preferred PLMN/access technology combination provided with acknowledgment requested from the UE for successful reception.	<–	NR RRC: DLInformationTransfer 5GMM: DL NAS TRANSPORT	–	–
5	The UE transmits an ULInformationTransfer message carrying acknowledgement of successful reception of the steering of roaming information.	–>	NR RRC: ULInformationTransfer 5GMM:UL NAS TRANSPORT	1	P
6	The SS transmits an RRCRelease message.	<–	NR RRC: RRCRelease	–	–
7	SS starts timer of 1 minute and waits this timer expires.	–	–	–	–
8	Check: Does the UE is in state 5GC RRC_IDLE on NR Cell 12 as specified in TS 38.508-1 [4] Table 4.9.4.2.2-1?	–	–	1	P
9	The SS configures: – NR Cell 11 as a "Non-Suitable "off" cell ".	–	–	–	–
10	The user sets the UE in Automatic PLMN selection mode.	–	–	–	–
11	Wait for 300s to allow the UE to switch to automatic PLMN selection mode.	–	–	–	–

6.3.1.9.5 Specific message contents

Table 6.3.1.9.5-1: DL NAS TRANSPORT Message for NR Cell 12 (step 4, Table 6.3.1.9.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-11
Information Element	Value/remark	Comment	Condition
Payload Container	Present	The SOR transparent container in the payload container IE carries steering of roaming information.

Table 6.3.1.9.5-2: SOR Transparent Container in Payload Container IE of DL NAS TRANSPORT Message for NR Cell 12 (step 4, Table 6.3.1.9.4-1)

Derivation Path: TS 24.501 [22] Figure 9.11.3.51.1
Information Element	Value/remark	Comment	Condition
SoR-MAC-IAUS	Set to match the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	1	Acknowledgement requested
PLMN ID 1	PLMN2
Access Technology Identifier 1	NG-RAN

Table 6.3.1.9.5-3: UL NAS TRANSPORT Message for NR Cell 12 (step 5, Table 6.3.1.9.4-1)

Derivation Path: TS 38.508-1 [4] Table 4.7.1-10
Information Element	Value/remark	Comment	Condition
Payload Container	Present	The SOR transparent container in the payload container IE carries acknowledgement of successful reception of the steering of roaming information.

Table 6.3.1.9.5-4: SOR Transparent Container in Payload Container IE of UL NAS TRANSPORT Message for NR Cell 12 (step 5, Table 6.3.1.9.4-1)

Derivation Path: TS 24.501 [22] Figure 9.11.3.51.4
Information Element	Value/remark	Comment	Condition
SOR data type	1	The SOR transparent container carries acknowledgement of successful reception of the steering of roaming information.

6.3.1.10 Steering of UE in roaming during mobility update registration

6.3.1.10.1 Test Purpose (TP)

(1)

with {UE being in automatic PLMN selection mode , current VPLMN not part of “PLMNs where registration was aborted due to SOR” List and not part of "User Controlled PLMN Selector with Access Technology" list and UE’s USIM configured with indication that the UE is to receive Steering of Roaming information due to initial registration in a VPLMN}

ensure that {

when {UE performs mobility update Registration Procedure to cell belonging to VPLMN and chosen VPLMN does not provide Steering of Roaming info}

then {UE continues to camp on the chosen VPLMN}

}

6.3.1.10.2 Conformance requirements

References: The conformance requirements covered in the present TC are specified in: TS 23.122, clause C.2. Unless otherwise stated these are Rel-15 requirements.

[TS 23.122, clause C.2]

2) Upon receiving REGISTRATION REQUEST message, the VPLMN AMF executes the registration procedure as defined in subclause 4.2.2.2.2 of 3GPP TS 23.502 [63]. As part of the registration procedure:

a) if the VPLMN AMF does not have subscription data for the UE, the VPLMN AMF invokes Nudm_SDM_Get service operation to the HPLMN UDM to get amongst other information the Access and Mobility Subscription data for the UE (see step 14b in subclause 4.2.2.2.2 of 3GPP TS 23.502 [63]); or

b) if the VPLMN AMF already has subscription data for the UE and:

i) the 5GS registration type IE in the received REGISTRATION REQUEST message indicates "initial registration" and the "SoR Update Indicator for Initial Registration" field in the UE context is set to ‘the UDM requests the AMF to retrieve SoR information when the UE performs NAS registration type "initial registration"’ as specified in table 5.2.2.2.2-1 of 3GPP TS 23.502 [63]); or

ii) the 5GS registration type IE in the received REGISTRATION REQUEST message indicates "emergency registration" and the "SoR Update Indicator for Emergency Registration" field in the UE context is set to ‘the UDM requests the AMF to retrieve SoR information when the UE performs NAS registration type "emergency registration"’ as specified in table 5.2.2.2.2-1 of 3GPP TS 23.502 [63]);

then the VPLMN AMF invokes Nudm_SDM_Get service operation message to the HPLMN UDM to retrieve the steering of roaming information (see step 14b in subclause 4.2.2.2.2 of 3GPP TS 23.502 [63]);

otherwise the VPLMN AMF sends a REGISTRATION ACCEPT message without the steering of roaming information to the UE and steps 3a, 3b, 3c, 3d, 4, 5, 6 are skipped;

…

11) If the UE has a list of available PLMNs in the area and based on this list the UE determines that there is a higher priority PLMN than the selected VPLMN and the UE is in automatic network selection mode, then the UE shall attempt to obtain service on a higher priority PLMN as specified in subclause 4.4.3.3 by acting as if timer T that controls periodic attempts has expired after the release of the N1 NAS signalling connection. If the N1 NAS signalling connection is not released after implementation dependent time, the UE may locally release the N1 signalling connection except when the UE has an established emergency PDU session (see 3GPP TS 24.501 [64]).

6.3.1.10.3 Test Description

6.3.1.10.3.1 Pre-test conditions

System Simulator:

– Three inter-frequency multi-PLMN NR Cells as specified in TS 38.508-1 [4] Table 4.4.2-1 are configured broadcasting PLMNs as indicated in Table 6.3.1.10.3.1-1.

– The PLMNs are identified in the test by the identifiers in Table 6.3.1.10.3.1-1. The MCC and MNC values of PLMN identifiers are specified in TS 36.523-1 [13], Table 6.0.1-1.

Table 6.3.1.10.3.1-1: PLMN identifiers

NR Cell	PLMN names
NR Cell 1	PLMN14
NR Cell 12	PLMN13
NR Cell 11	PLMN14

– NR Cell 1 is set to ”Serving Cell”;

– NR Cell 12 is set to ”Not-Suitable Cell”;

– NR Cell 11 is set to ”Not-Suitable Cell”;

– TAI of NR Cell 11 is set to ”TAI-2” and TAI of NR Cell 1 is set to ”TAI-1′;’

– System Information Combination NR-1 as defined in TS 38.508-1 [4] clause 4.4.3.1.3 is used in NR cells.

UE:

– The UE is in Automatic PLMN selection mode.

– USIM configuration as defined in Table 6.4.1-10 of TS 38.508-1 [4] will be used.

Preamble:

– Ensure that the UE has cleared the RPLMN. And the UE is in Switched OFF (State 0-A) as defined in TS 38.508-1 [4] Table 4.4A.2-0.

6.3.1.10.4 Test procedure sequence

Table 6.3.1.10.4-1: Main behaviour

St	Procedure	Message Sequence		TP	Verdict
		U – S	Message
1	Power on the UE.	–		–	–
2-14	Steps 1 to 13 of the registration procedure described in TS 38.508-1 [4] subclause 4.5.2.2-2 are performed on NR Cell 1.	–	–	–	–
15	The SS transmits an DLInformationTransfer message and a REGISTRATION ACCEPT message containing steering of roaming information indicating that acknowledgement is not requested from the UE for successful reception.	<–	NR RRC: DLInformationTransfer  5G MM: REGISTRATION ACCEPT	–	–
16	The UE transmits an ULInformationTransfer message and REGISTRATION COMPLETE message without SOR transparent container.	–>	NR RRC: ULInformationTransfer  5G MM: REGISTRATION COMPLETE	–	–
–	EXCEPTION: Step 16Aa1 is performed if pc_noOf_PDUsSameConnection > 0.	–	–	–	–
16Aa1	The generic procedure for UE-requested PDU session establishment, specified in subclause 4.5A.2, takes place performing establishment of UE-requested PDU session(s) with ExpectedNumberOfNewPDUSessions = pc_noOf_PDUsSameConnection.	–	–	–	–
17	The SS transmits an RRCRelease message.	<–	NR RRC: RRCRelease	–	–
–	EXCEPTION: Step 17Aa1 is performed if pc_noOf_PDUsNewConnection > 0.	–	–	–	–
17Aa1	The generic procedure for UE-requested PDU session establishment, specified in subclause 4.5.2.2-4, takes place performing establishment of UE-requested PDU session(s) with ExpectedNumberOfNewPDUSessions = pc_noOf_PDUsNewConnection and then release the RRC Connection.	–	–	–	–
18	The SS configures: – NR Cell 11 as "Serving cell" – NR Cell 1 as "Non-Suitable cell" – NR Cell 12 as "Non-Suitable cell".	–	–	–	–
19	The UE transmits an RRCSetupRequest message on NR Cell 11.	–>	NR RRC: RRCSetupRequest	–	–
20	SS transmits an RRCSetup message on NR Cell 11.	<–	NR RRC: RRCSetup	–	–
21	The UE transmits an RRCSetupComplete message to confirm the successful completion of the connection establishment and a REGISTRATION REQUEST message indicating "mobility registration updating" on NR Cell 11.	–>	NR RRC: RRCSetupComplete 5GMM: REGISTRATION REQUEST	–	–
22	SS sends a REGISTRATION ACCEPT message without including SOR transparent container on NR Cell 11.	<–	NR RRC: DLInformationTransfer 5GMM: REGISTRATION ACCEPT	–	–
23	Check: Does the UE send a REGISTRATION COMPLETE without including SOR transparent container on NR Cell 11?	–>	NR RRC: ULInformationTransfer 5GMM: REGISTRATION COMPLETE	1	P
24	The SS transmits an RRCRelease message on NR Cell 11.	<–	NR RRC: RRCRelease	–	–
25	The SS configures: – NR Cell 11 as "Serving cell" – NR Cell 1 as "Non-Suitable cell" – NR Cell 12 as "Serving cell".	–	–	–	–
26	Check: Does the UE transmit an RRCSetupRequest message on NR Cell 12 within timer T=6 minutes *(1+10% tolerance)? NOTE: The timer T shall be set to 396s (6 minutes *(1+10% tolerance)), where the high priority PLMN search timer is defined in EFHPPLMN.	–	–	1	F
27	Check: Does the test result of generic test procedure in TS 38.508-1 [4] Table 4.9.4.2.2-1 indicate that the UE is camped on NR Cell 11?	–	–	1	–

6.3.1.10.5 Specific message contents

Table 6.3.1.10.5-1: REGISTRATION ACCEPT for NR Cell 1 (step 15, Table 6.3.1.10.4-1)

Derivation Path: 38.508-1 Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Present	The SOR transparent container carries steering of roaming information.
SoR-MAC-IAUS	Set to match the calculated SoR-MAC-IAUS as the way defined in TS 33.501 A.17
CounterSOR	Value generated as per TS 33.501 Cl 6.14.2.3
SOR data type	0	The SOR transparent container carries steering of roaming information.
List indication value	1	List of preferred PLMN/access technology combinations is provided
List type	1	The list type is a PLMN ID and access technology list
Acknowledgement (ACK) value	0	Acknowledgement is not requested
PLMN ID 1	PLMN 14
Access Technology Identifier 1	NG-RAN
PLMN ID 2	PLMN 13
Access Technology Identifier 2	NG-RAN

Table 6.3.1.10.5-2: REGISTRATION COMPLETE for NR Cell 1 (step 16, Table 6.3.1.10.4-1)

Derivation Path: 38.508-1 Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Not Present

Table 6.3.1.10.5-3: REGISTRATION ACCEPT for NR Cell 11 (step 22, Table 6.3.1.10.4-1)

Derivation Path: 38.508-1 Table 4.7.1-7
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Not Present

Table 6.3.1.10.5-4: REGISTRATION COMPLETE for NR Cell 11 (step 23, Table 6.3.1.10.4-1)

Derivation Path: 38.508-1 Table 4.7.1-8
Information Element	Value/remark	Comment	Condition
SOR Transparent Container	Not Present