HSS Emulator

Emulates the HSS over Diameter S6a interface to the MME
HSS Emulator

Emulates the HSS over Diameter S6a interface to the MME


Valid8's HSS emulator is a software-based solution that mimics a real HSS to test the rest of the core and user equipment.

What It Can Do For You

Cost effective solution to turn up eNBs, EPCs and test UEs

Why It’s Different

  • Scalable software-based architecture can run on a range of hardware from COTS and high-end customer provided hardware to Virtual Machines and the Cloud (e.g. Amazon AWS) for maximum versatility and performance
  • Web-based UI is easy to learn
  • HTTP API enable integration with automation test systems and other equipment
  • Stateful modeling provides accurate emulation of network elements


  • Emulates the S6a interface
  • True stateful simulation 
  • Supports authentication and location update and other scenarios
  • Report on messages received, response time, session duration
  • Generate valid and invalid/negative messages and call-scenarios (fully editable scenarios) 
  • Supports sending invalid messages including malformed, dropped, and misordered packets 
  • Check parameters in messages from SUT and flag errors
  • 3GPP-compliant interface
  • Core network 5G ready


  • Release 14 compliant
  • Category M1 UE support
  • TM6 and TM9 support
  • FDD only (FDD and HD-FDD UEs are supported)
  • Support of multiple CE levels (only CE-Mode A is supported)
  • Support of message repetition for MPDCCH, PDSCH and PUSCH in full duplex (only MPDCCH, PDSCH and PUSCH supported)
  • Support of localized MPDCCH transmission
  • EPDCCH support for Category M1
  • No frequency hopping
  • Bandwidth must be >= 5 MHz for cells that also need to support Category 0 and above UEs


  • Release 14 compliant
  • Single-tone and multi-tone category NB1 and NB2 UE support
  • 15 kHz and 3.75 kHz subcarrier spacing are supported
  • All operation modes (in-band, guard band and standalone) are supported
  • Multiple NB-IoT and LTE cells can be used at the same time in the same eNodeB
  • Support of multiple coverage levels
  • Support of all NPDCCH, NPDSCH, NPUSCH and NPRACH configurations
  • Support of control plane CIoT optimization
  • Support of multi-DRB mode


  • Base station (femto or emulated)
  • AMF
  • SMF
  • PCF
  • AUSF
  • UDM
  • UDR
  • N3IWF
  • EIR
  • MME
  • SGW
  • PGW
  • OCS
  • HSS
  • PCRF
  • ePDG
  • S6a Authentication Request Response Time 
  • S6a Update Location Request Response Time
  • Successful and Unsuccessful answers
Configurable Parameters
  • PLMN Mobile Country Code (MCC), Mobile Network Code (MNC)
  • IMSIs list
  • Integrity Algorithm 
  • APN list
  • K
  • OPC

Automation API

User commands can be fully automated using REST API. This includes performing all test control functions as well as collecting results and metrics. It can be integrated into virtually any CI system via the HTTP API, including Jenkins, CircleCI, Gitlab and others


The application’s subsystems can be edited directly in the browser using TDL or by using the graphical tools. The Message Workshop allows for creating of test scenarios directly from the hex stream of a remote capture, while the Graphical Editor (on the feature roadmap for 2019) will allow for creating customized call scenarios by dragging and dropping the call flow to meet your test needs.

This is some text inside of a div block.

Use Cases

eNodeB Under Test

In the scenario where the eNodeB is to be tested, it can be tested by the Valid8 4G Network Emulator emulating the core network. Additionally, load and conformance tests are available for interfaces S1-MME and S1-U. In the case where the eNodeB needs to be tested on the RF side, it can be tested by the Valid8 4G UE Emulator.

Supported Scenarios:
  • ‍Power on / Start up
  • Attach
  • TAU
  • Attach
  • eRAB Setup
  • Detach
  • X2 handover
  • Emulates MME (for S1-MME) and SGW (for S1-U) along with all other needed core network elements, exposing all internal interfaces
  • Conformance tests available for S1-MME, S1-U, and X2

UE Under Test

For testing UE or IoT devices, the 5G, 4G or 3G Network Emulators can provide the entire core network as well as an emulated or real base station depending on your test needs.

Supported Scenarios:
  • ‍Power on
  • Attach
  • Detach
  • TAU
  • Data Connection
  • VoLTE Call
  • ‍End to end VoLTE test capability
  • Includes real femto, pico, or microcell eNodeB
  • Emulates all core network nodes and allows for data connection to external networks


For testing MME, the HSS emulator can provide a realistic, stateful emulation of the subscriber DB for testing purposes

Supported Scenarios:
  • Attach
  • Detach
  • Location Update
HSS Emulator
HSS Emulator

Summary of Specifications


3GPP TS 29.272 (S6a)

IETF RFC 6733, IETF RFC 3588, IETF RFC5516 (Diameter)



Product Details

Emulates HSS to test the MME, eNB & UE

All Solutions

Valid8 exports its products strictly in accordance with all US Export Control laws and regulations which shall apply to any purchase or order. Specifications are subject to change without notice.

500 West Cummings Park, Suite 6550 Woburn, MA 01801
p: +1-855-482-5438
f: +1-781-996-3708

Ordering Information

HSS Emulator

Load Options:
lte-hss-emulator-10 - 10 sessions, basic call
lte-hss-emulator-100 - 100 sessions, basic call
lte-hss-emulator-1,000 - 1,000 sessions, basic call
lte-hss-emulator-10,000 - 10,000 sessions, basic call
(others on request)

Protocol Interface Options:
(others on request)

Miscellaneous Options:
Security, fuzzing, penetration test
Network emulator internal impairments module

Datasheet Page

Related Video

Related Solutions

5G Core and RAN Network Emulator
  • Product Name: 5G Network Emulator 
  • Product Code: 5g-network-emulator
Datasheet Page
4G UE Emulator
  • Product Name: 4G UE Emulator 
  • Product Code: 4g-ue-emulator
Datasheet Page
MCX Load Tester

Product Name: MCPTT Load Tester 

Product Code: mcptt-load-tester

Datasheet Page
LTE EPC Emulator

Product Name: LTE Core Network Emulator 

Product Code: lte-core-network-emulator

Datasheet Page
  • Product Name: SIP Conformance
  • Product Code: sip-conformance-base-suite, sip-conformance-protos-suite, sip-conformance-torture-suite, sip-conformance-extensions-suite
Datasheet Page

Navigate through All Solutions