What is LTE-M?
LTE-M (Long Term Evolution for Machines), also known as LTE Cat-M1, is a low-power cellular communication technology standardised by 3GPP in Release 13 (2016) that delivers energy-efficient, bidirectional machine communication over existing 4G networks, with support for mobility, voice and relatively low latency. LTE-M is one of the two cellular LPWA technologies alongside NB-IoT and is recognised by the ITU as part of 5G for massive machine-type communication. Within the Industrial Internet of Things and OT convergence, LTE-M is mainly the choice for mobile and distributed assets: vehicles, containers, remote pumps and battery-powered sensors that need more data or a faster response than NB-IoT can offer.
π§ How does LTE-M work technically?
LTE-M is not a separate network but a simplified device profile within LTE. The operator enables LTE-M through a software update on existing base stations (eNodeB), so it runs alongside ordinary 4G traffic. An LTE-M device uses at most 1.4 MHz of an LTE carrier of up to 20 MHz and needs only one receive antenna. According to Ericsson, this makes an LTE-M modem 75 to 80% less complex than a classic Cat-1 modem.
| Property | Cat-M1 (Release 13) | Cat-M2 (Release 14) |
|---|---|---|
| Channel bandwidth | 1.4 MHz | 5 MHz |
| Peak data rate | approx. 1 Mbps (full duplex); a few hundred kbps in half duplex | approx. 4 Mbps downlink |
| Latency | typically 10-15 ms in good coverage | comparable |
| Duplex | FDD (full or half duplex) and TDD | FDD and TDD |
| Coverage (MCL) | 155.7 dB as the 3GPP target, about 15 dB better than regular LTE | comparable |
| Voice | VoLTE possible | VoLTE possible |
The extra coverage comes from Coverage Enhancement: the device repeats transmissions. In CE Mode A, the default mode, this happens up to 32 times while higher data rates, voice and mobility are retained. The optional CE Mode B repeats up to 2,048 times and reaches basements and meter cupboards, but at the expense of throughput and real-time behaviour; it is intended for stationary or slow-moving devices.
In the architecture, traffic flows from the device via the eNodeB to the operatorβs Evolved Packet Core (EPC) and from there through a (preferably private) APN to your platform. Later 3GPP releases allow connection to a 5G Core, but that depends on what the operator offers.
π How does LTE-M achieve a long battery life?
Two mechanisms determine power consumption:
- Power Saving Mode (PSM) - the device switches its radio off while remaining registered. With the extended periodic update timer (T3412), this sleep can last up to roughly 413 days, so the device does not have to attach to the network again.
- extended Discontinuous Reception (eDRX) - the device listens to the network only periodically; for LTE-M this cycle can extend to about 43 minutes. The device therefore stays reachable for commands without listening continuously.
According to the GSMA, PSM and eDRX can be combined. With a good design, a sensor that reports a few times a day can run for five to ten years on a single battery. A tracker that sends a position every few minutes will last months to a few years instead. Consumption is generally higher than with NB-IoT or LoRaWAN, because LTE-M uses a wider channel and faster connections. Messages for a sleeping device are buffered by the network through High Latency Communication (3GPP TS 23.682) until the device wakes up.
π What is the difference between LTE-M, NB-IoT and LoRaWAN?
The choice between the LPWA technologies shapes much of the architecture of an IoT solution.
| Property | LTE-M | NB-IoT | LoRaWAN |
|---|---|---|---|
| Spectrum | Licensed (operator) | Licensed (operator) | Unlicensed (868 MHz in Europe) |
| Bandwidth | 1.4 MHz | 180 kHz | 125 kHz typical |
| Data rate | approx. 1 Mbps | tens of kbps to approx. 250 kbps | 0.3 to 50 kbps |
| Latency | 10-15 ms | 1.5 to 10 seconds | seconds, depending on class |
| Mobility | Handover during a connection | Limited (no handover in Release 13) | Limited |
| Voice | Yes (VoLTE) | No | No |
| Firmware updates | Practical | Slow | Hardly practical |
| Infrastructure | Operator | Operator | Own or public gateways |
LTE-M therefore wins where devices move, where firmware must be updated over the air, or where fast bidirectional commands are needed. NB-IoT wins for stationary meters deep inside buildings with very little data. LoRaWAN wins where you want to manage the infrastructure yourself or avoid a subscription per device. For regular broadband or very low latency, full 5G is the logical next step; the QoS of LTE-M is designed for telemetry, not for control.
π Where is LTE-M used in industry and infrastructure?
LTE-M suits applications with distributed or moving devices and moderate data flows:
- Asset tracking and logistics - containers, roll cages, trailers and rental equipment report position and status, also across borders thanks to roaming.
- Condition Monitoring and Predictive Maintenance - vibration and temperature sensors on compressors, pumps and mobile machines send features rather than raw waveforms.
- Mobile production equipment - status information from AGVs or forklifts outside the reach of the plant Wi-Fi.
- Water and energy - telemetry from pumping stations, overflow points, cathodic protection and distribution substations, replacing old GPRS modems in RTUs.
- Buildings and cities - lift alarms (VoLTE allows a voice connection), smart lighting, waste containers and access control.
LTE-M is not intended for motion control, safety functions or fast closed-loop control: there is no deterministic latency and no availability guarantee. Use LTE-M for monitoring, alarms, acknowledged setpoint changes and maintenance, not for the control loop itself.
π§ How do you connect LTE-M data to OT systems?
An LTE-M device usually sends small messages via MQTT or CoAP to a broker or cloud platform, secured with TLS or DTLS. From there the data reaches the OT environment:
- Reception - a broker or IoT platform (for example AWS IoT Core or Azure IoT Hub) in the cloud or in a DMZ collects the messages.
- Translation - a gateway at the edge or in the data centre converts the data to OPC UA or to the data model of the historian.
- Use - SCADA, maintenance systems and analytics tools read the values and send commands back where needed.
What matters is that the LTE-M path never terminates directly in the control network. Reception belongs in a separate zone, separated by an industrial firewall, in line with network segmentation and the zones and conduits model of IEC 62443.
π How secure is LTE-M and which measures are needed?
LTE-M inherits the security of LTE (3GPP TS 33.401): mutual authentication between SIM and network via AKA, and 128-bit encryption and integrity protection on the radio link. That is stronger than many unlicensed LPWAN technologies. But this protection ends inside the operatorβs network; after that, data travels over the internet or a private interconnect.
| Risk | Consequence | Measure |
|---|---|---|
| Stolen or misused SIM | Costs, unauthorised access | SIM binding to IMEI, private APN, usage alerts |
| Compromised device | False telemetry, pivot point | Device certificates, secure boot, signed firmware |
| Downgrade to 2G | Weaker encryption | LTE-only modules, 2G disabled in configuration |
| Vulnerable backend | Data breach, manipulated commands | hardening, Zero Trust, logging |
| Operator dependency | Outages beyond your control | Local buffering, fallback, SLA agreements, SIM lifecycle management |
Practical measures: use a private APN or VPN into your own environment, manage device certificates with certificate management, include the devices in your asset inventory and configuration management, plan patch management for modem and application firmware, and track anomalies with security monitoring. NIST SP 800-82 gives comparable recommendations for wireless access in industrial systems.
π§ How do you select and deploy LTE-M in the Netherlands?
The Dutch context is strongly shaped by the shutdown of legacy networks. KPN activated LTE-M in The Hague and Rotterdam at the end of 2017, and KPN and Vodafone rolled it out nationwide from 2018. According to the Dutch regulator ACM (December 2024), Odido has already switched off 2G, KPN switches off 2G on 1 December 2027 and VodafoneZiggo will not switch off 2G before the end of 2026; KPN and VodafoneZiggo have already stopped 3G. Many GPRS modems in pumping stations, metering cabinets and alarm systems therefore need replacing, and LTE-M is an obvious successor. For the water sector this is a concrete concern within OT security in the water sector.
A practical step-by-step plan:
- Inventory all 2G/3G modems and their function.
- Define the profile per application: data volume, reporting frequency, mobility, battery or mains power, indoor or outdoor.
- Test coverage at the actual location, including basements and metal cabinets; ask which CE mode the operator supports.
- Check roaming: not every country supports LTE-M, and PSM sometimes behaves differently when roaming.
- Choose multi-mode modules (LTE-M and NB-IoT) for flexibility over a life cycle of ten years or more.
- Design the chain securely according to IEC 62443 and bring the devices under management.
Regulation also plays a role. For organisations covered by NIS2 and the Dutch Cybersecurity Act (Cyberbeveiligingswet, in force since 15 August 2026), wireless telemetry links fall within the duty of care. Manufacturers of LTE-M devices face the Cyber Resilience Act, with reporting obligations from 11 September 2026 and full application from 11 December 2027.
β Frequently asked questions
Is LTE-M the same as 4G?
LTE-M runs on the 4G network, but it is a simplified device category (Cat-M1) with a maximum bandwidth of 1.4 MHz, extra coverage and power-saving features. An ordinary 4G phone uses much wider channels and higher speeds. LTE-M is therefore 4G technology tailored to machines rather than people.
Is LTE-M part of 5G?
Yes, LTE-M and NB-IoT were submitted by 3GPP and recognised by the ITU as 5G technologies for massive machine-type communication (mMTC). LTE-M therefore continues to exist alongside 5G networks, and an investment in LTE-M equipment is future-proof. For heavier IoT devices, 5G RedCap offers a middle segment.
How long does an LTE-M battery last?
An LTE-M device that uses PSM and eDRX to send small messages a few times a day can run for five to ten years on a single battery. Frequent position updates, poor coverage or many firmware updates reduce this sharply. Always measure consumption at the actual location.
What is the difference between LTE-M and NB-IoT?
LTE-M offers higher speeds (about 1 Mbps), lower latency (10-15 ms), handover while moving and voice via VoLTE. NB-IoT uses a narrower 180 kHz channel, consumes less energy and penetrates deeper into buildings, but is slower and less suited to moving devices. Rule of thumb: LTE-M for mobile and interactive, NB-IoT for stationary and ultra-low power.
Is LTE-M suitable for process control?
LTE-M is suitable for monitoring, alarms and acknowledged remote commands, but not for real-time control or safety functions. The network offers no deterministic latency and is managed by an operator. The control loop should stay local in a PLC or RTU.
Is LTE-M a good replacement for 2G modems?
Yes, for most telemetry applications LTE-M is a logical successor to GPRS, because it supports similar data volumes with better coverage and stronger security. In the Netherlands this is urgent because Odido has already switched off 2G and KPN follows on 1 December 2027. Do test coverage, and preferably choose a module that also supports NB-IoT.
π In summary
LTE-M is the 3GPP-standardised 4G variant for machines that provides energy-efficient, mobile and bidirectional communication at about 1 Mbps and 10-15 ms latency over existing operator networks. It is the natural choice for mobile assets, remote telemetry and the replacement of 2G modems, provided the connection terminates in a separate zone, devices are centrally managed and the control loop itself stays local.
In industrial automation, LTE-M combines the reach of public networks with the scalability and cybersecurity foundation of LTE, forming a reliable wireless layer for IoT and OT wherever cables and Wi-Fi cannot reach.
