You can set it up before or after install.

Note certain features like duress password will erase your eSIM if triggered, if you ever plan to use it