Related
I know I'm a noob, but I've been struggleing with this for a while now. I put in probibly 6 hours last night and haven't any clue if I'm even close to being complete.
I bought an HTC Touch MP6900SP (Sprint) and was told it had a clean ESN. Turns out it didn't and I'm up the creek because I paid cash. I bought it to replace my motor razr which has a clean ESN, but is quickly dieing. I'm trying to clone my ESN but can't get mtty to work properly. Once the ESN is swapped, the RAZR will go in my junk drawr.
I've tried to follow the steps here:
http://www.mobile-files.com/forum/showpost.php?p=355768&postcount=1
but when I go to fire up mtty I can only enter the rtask a command then the program or phone won't allow me to do anything else, even type the next command.
In the boot loader I have the following info:
VOGU100 MFG
SPL-2.31.CoKe
CPLD-3
Can someone please walk a noob through this. I'm totally new to this whole unlocking thing and could really use some help. The phone is locked to the account of the previous seller who refuses to release it. I've got the 2.31.coke on there now and when I boot it normally I also have the Alltel rom that fires up. HELP!!! PLEASE!
Edit: In MTTY when I run rtask a this is what I see, but I can't type anything after that.
rtask a
Enter Radio Bootloader
POWER ON PMIC VREG_USB : SUCCESS!
This has been covered...
SEARCH!!! MTTY is actually working, you just can't see the text you are typing... Just be careful typing everything in and you will be good to go...
Alright, I got through MTTY, and am not onto working in CDMA workshop.
I put the phone into DM mode, Active sync disconnects, but CDMA shows it is connected to Com1 port successfully, but fails when I attempt to read the ESN.
I can't seem to find the diagnostic modem drivers that I need and think the lack of the drivers is what is causing me grief now.
Believe me, I'm looking everywhere I can to get information. I've got tons of hours into this now.
Edit: Got the drivers installed and working properly. Still having problems reading from the phone with CDMA.
Edit 2: Had to figure out the proper com port in CDMA, getting warmer.
scanning and finding esn addresses right now! If this thing works I'll be so damn happy!
im still reading up on this, but seeing information that has been corrected over time, then finding some old posts that may be outdated.
using MTTY with all of the steps to superCID... is that actually changing the ESN in one failed, fast swoop? Is it actually doing what CDMA does when scanning/writing?
ESN
cox abele said:
im still reading up on this, but seeing information that has been corrected over time, then finding some old posts that may be outdated.
using MTTY with all of the steps to superCID... is that actually changing the ESN in one failed, fast swoop? Is it actually doing what CDMA does when scanning/writing?
Click to expand...
Click to collapse
Hey did you get this to work? I changed my esn last night and the phone works. Can make and receive calls. Only prob is that I can't connect to the internet. I think it is a problem with the user name/password but not sure. I keep getting the 67 error when trying to connect. I only changed the esn and nothing else.
Did you have any luck? If so what about the internet thing? Any help would be much appreciated. Been reading and trying to figure this out for a while now.
Thanks,
-T
Hey man, welcome to XDA
What Airline do you fly for? It's good too see another fellow Pilot on here.
As you can see from my sigpic, I'm with Air Canada Jazz.
b727pilot said:
Hey did you get this to work? I changed my esn last night and the phone works. Can make and receive calls. Only prob is that I can't connect to the internet. I think it is a problem with the user name/password but not sure. I keep getting the 67 error when trying to connect. I only changed the esn and nothing else.
Did you have any luck? If so what about the internet thing? Any help would be much appreciated. Been reading and trying to figure this out for a while now.
Thanks,
-T
Click to expand...
Click to collapse
Have you tried installing the DCD carrier cab. I think this is the link. Just double check.
http://dcd1182.n715dp.com/index.php?dir=carriers/
Help with ESN Change. Phone works just not internet
Csquared said:
Have you tried installing the DCD carrier cab. I think this is the link. Just double check.
http://dcd1182.n715dp.com/index.php?dir=carriers/
Click to expand...
Click to collapse
Thanks for the reply. No I had not tried the DCD carrier cab. First of all let me get this out of the way. NOOB here.
I tried researching the DCD cab because someone else suggested it and then tried it and it didn't work. I think it might be something with the user name and password for vision service. This is what I did:
Flashed the Touch (it is a sprint touch) to the 6.1 wm latest rom (sprint). Then did the esn swap from my razr (also sprint). After the esn swap I flashed again using the 6.1 sprint rom (just wanted to make sure nothing changed after I did a rom flash). Phone works fine on sprint and I even called them on it and they think it is a razr. I can make and receive calls, voicemail etc. Just can't get the internet working. Just get the 67 error. Any ideas?
-T
jmitr said:
Hey man, welcome to XDA
What Airline do you fly for? It's good too see another fellow Pilot on here.
As you can see from my sigpic, I'm with Air Canada Jazz.
Click to expand...
Click to collapse
SWA! Ever in MDW?
-T
b727pilot said:
Thanks for the reply. No I had not tried the DCD carrier cab. First of all let me get this out of the way. NOOB here.
I tried researching the DCD cab because someone else suggested it and then tried it and it didn't work. I think it might be something with the user name and password for vision service. This is what I did:
Flashed the Touch (it is a sprint touch) to the 6.1 wm latest rom (sprint). Then did the esn swap from my razr (also sprint). After the esn swap I flashed again using the 6.1 sprint rom (just wanted to make sure nothing changed after I did a rom flash). Phone works fine on sprint and I even called them on it and they think it is a razr. I can make and receive calls, voicemail etc. Just can't get the internet working. Just get the 67 error. Any ideas?
-T
Click to expand...
Click to collapse
Do you have a data plan setup with Sprint on your Razr?
Csquared said:
Do you have a data plan setup with Sprint on your Razr?
Click to expand...
Click to collapse
Yea I have the old sero plan. It includes unlimited data. I think that is what you mean. I can run opera on it so it is working.
-T
This might be trivial but lets check.
Goto:
Settings/Connections/Connections/Advanced/Select Networks
It should show Sprint in top and Work network in bottom.
Click edit under Sprint and make sure its set to #777
Then try this:
Settings/Personal/Phone/Services/Internet/Get settings
Then have IOTA done by pressing start.
No Internet Still......
Csquared said:
Then try this:
Settings/Personal/Phone/Services/Internet/Get settings
Then have IOTA done by pressing start.
Click to expand...
Click to collapse
Thanks Csquared. I tried this and this is what I got. I also have posted this at http://forum.xda-developers.com/showthread.php?p=3413006#post3413006 . Not trying to double post but was getting some help over there also.
Phone is working great using the donor ESN but no internet. Here is what I've got:
- Sprint Razr (donor ESN phone) and Sprint Touch (Had bad ESN now has Razr ESN).
- Have Data plan on my Account.
- Did the changes from the original post and phone works fine (can make and receive calls)
- When I try and connect to the internet it gives me error 67, can not connect #777 and 1012 error.
What I have tried:
- Start/settings/services/internet/get settings/ and start IOTA.
- Tried making a new connection under start/settings/connections/connections and setup a new #777 connection.
- Changed Active Profile from 0 to 1 in ##3282#
None of this worked. Under ##3282# my settings are:
User Name:
Active Profile - 1
MIP_MODE - Mobile IP Only
User Name - (My Username)@sprintpcs.com
SPI MN-HA - 4D2
SPI MN-AAA - 4D2
ReverseTunnel Pref - Enable
Home Agent IP Address - 0.0.0.0 (for some reason it will not let me edit this setting)
Primary Home Agent - 0.0.0.0
Second Home Agent - 0.0.0.0
HA Shared Secret (HEX) – Blank
AAA Shared Secret (HEX) – Bunch of characters
Advanced:
ESN - Donor ESN (From Razr)
MSID - My Phone number
Not sure if any of this makes sense. I am just trying to get the internet working. Please let me know if anyone has any ideas. It does say "Preparing vision services" when I try to connect to the internet but always fails with error 67 Username and/or Password incorrect. Also get Cannot Connect Dialed #777. Also get error code 1012 could not prepare Vision services please try again later.
Thanks very much in advance for the help!
-Tony
Well I know this is prolly not the right thread to put this under however I am not sure which is and the person who started this thread is doing what I wanted to know was possible to do. And second I was wondering how to do it. I am completely noob on this. I did as he did and bought a new phone which ended up having a bad ESN.
I have a Nokia with Verizon and it broke. They wont replace it for me so I went and bought an LGVX9100M. I have been researching for around 4 hours now and cant find a thing if I can take the ESN from my Nokia which is clean and working and put it to the LG to make it work. I am not familiar with any thing that has to do with programming cell phones or using the programs. I am however a pretty quick learner.
Is there a way to do this? Is there a program I need or a way to just do it in the phone? IF I can do this with a program how do I do it and what stuff do I have to replace the numbers with?
Bad ESN's= Unrecovered lost or stolen property, or property with a bill due over its usage.
Helping with Bad ESN's, is like helping repaint a stolen car.
WR
Hello all, I have a tilt 2 with energy rom, if that matters, and my slideout keyboard number is off, 1 through 9 and 0 is on the top row instead of where they are suppose to be, where 456 suppose to be on Y U I, and 789 suppose to be on H J K and 0 suppose to be on N. Please help. Thank you in advance!
It for sure matters. You need the rhodium ATT keyboard cab to change it.
http://forum.xda-developers.com/showpost.php?p=4713623&postcount=27
I think that will do it for you.
Thank you! Will try it out soon and let you know
Just got done installing it in, thanks Thresher. Would you by any chance know if there was a solution for the sms sent lag?
Try reading the FAQ for the Energy ROM. All you need to do go to Start>Tools and run Carrier Provisioning. Select AT&T, and then soft reset. The keyboard will be configured correctly.
The keyboard cab that Thresher suggested work great. I don't have at&t, its unlocked for t-mobile. The keyboard is fine now but theres a lag in sms sent and going back to the inbox option.
EDIT: for a quick answer on how to get data working go to post # 222 of this thread!
Hey Guys,
I have been following the thread about the Evo 4G working on boostmobile. I hope someone would be able to help me, I am a bit stuck. First off, I won't bother anyone with any "n00b-ness", as I do know how to use google to find my own information. Here's where I am right now:
I have a "new" EVO 4G that had its MEID marked bad because the previous owner did not pay ETF to sprint. I also had a BlackBerry tour that I managed to connect with BoostMobile using a bit of social engineering (insisting to the relatively naive CSR that it's NOT a blackberry, as its MEID would indicate). I went through all the QXDM and Hexeditor fun to zero out the ESN, and finally the elusive MEID. **I will not mention what I did next, please use your imagination. I do not want to cause any trouble on the forum for talking about (you know what). I then switched the BlackBerry tour into GSM mode, to prevent it from causing a conflict, but at the same time to allow the phone to power up so I could continue to retrieve data or settings off it. Once I changed the programming info (MDN/MSID), I was able to make and receive calls. SMS worked inbound and outbound. Then, I changed the MMS url to mm_myboostmobile_com. Now I was able to send and receive MMS messages. After rooting my Froyo 2.2, I installed the 2.1 EPST app to be able to update PRL via ##775# / ##PRL#. Now, I have been trying various different PRL files from different forums as well as corolada_com. I also copied NV items 465, 466, 1192, and 1194 from my BlackBerry. I still cannot get data working, not EVDO, not even 1x. I would be most grateful to anyone who will contribute to this thread in a positive, constructive way. And if you're a Python, C# .NET, Perl, or Java programmer, or an SQL Server admin, I would gladly share the plethora of information I have in these areas with you. Thank You.
Ok, I have data working now. In the spirit of giving back to the community, here is what I did: I connected to the phone using Qualcomm QPST Service Programming, clicked Read and entered my MSL/SPC code. Then, under the M.IP tab, (you will only have this tab in a more recent build of QPST, I had to upgrade to build 348) I selected "profile 0" and clicked edit. Here, I unchecked the first checkbox which enables the profile. I wrote the changes to the device, and data began working. My rate is very pathetic, 100-200kbps. With previous device (blackberry tour 9630) this was over 5x faster. Maybe I am not getting EVDO? I will try several different PRL files and report results. I also heard that the HA and AAA secrets, stored in NV items 1192 and 1194 must be copied to authenticate for EVDO speeds. I am having trouble reading these from the (previous device) blackberry, particularly 1192. The resulting read in CDMA workshop produces an access denied error in the output file. QPST and QXDM don't even show these items in the nv items list at all, even if you click "File menu> read supported RF NV Items". All other items seem to show, but not these. Of course, you must send the MSL/SPC code before you attempt any nv item reading or writing. Has anyone else managed to transfer their boostmobile-specific HA secret and AAA shared secret from a blackberry onto an android device? What transfer rates are other boostmobile users getting on android devices in large metropolitan areas? (i'm in nyc).. I have heard some far-fetched solutions including "change your SPC to the old phone's SPC", is there any truth to this? Sorry if my thoughts are a bit disorganized. I will try to write a proper tutorial when I have time. Again, thanks to everyone that contributed to make my google searching a success, in this forum as well as others. Please feel free to put in your .02 as maybe I have overlooked something.
The only thing I can offer is on the tour. You don't need GSM mode to have it on. Simply turn off the radio.
I had the same issue or rather kind of similar. I am getting an Error (NV_READONLY_S) in QPST while trying to write to the EVO. Any help on why its doing that? I have surpassed the meid/pesn zero thingy and txt talk just as you have but to get data wkng proves to be difficult. Please advise.
unique, the problem with BB OS 5.0 and higher is that after a dead battery shutdown, it has the mobile network enabled on initial boot. Bosstalk, the NV_READONLY_S error can be ignored, the changes will stick anyway. What phone are you switching from? Did you try disabling the 0 profile under M.IP tab in QPST? Which PRL are you using?
uniquenameevo,
Do u have any assistance you could offer? I have been searching like crazy and its killing me.
gsxrmonkey said:
unique, the problem with BB OS 5.0 and higher is that after a dead battery shutdown, it has the mobile network enabled on initial boot.
Click to expand...
Click to collapse
True, my 9700 does this also. I did not know about the dead battery shutdown on yours
I am switching from an htc tp2 to an evo.
Firstly, When I do the requestnvitemread ds_mip_ss_user_prof in QXDM I get the ha shared hex passwd but all zeros for the AAA shared hex passwd. Isnt it suppose to be a combo of letters and numbers? Please advise.
Talk and Txt EVO but no Data
Can someone please lend a helping hand here. I am up to my wits with this one. Ive got txt and talk working on boost but somehow cannot get data.
(Error code 67)
My donor phone: HTC TP2 with boost
Evo: Rooted(unrevoked 3.2) with 2.2 Froyo update
Installed EPST.apk using Root explorer.
PRL used is 60660
Things Ive done so far:
1.Used QPST to match NV Items 465,466,1192 and 1194 from donor to evo using NV browser.
2. Used Qpst in the Mip tab and matched settings of the donor with the Evo
The only rough end that may be prohibiting my access is the fact that I cannot get an accurate AAA shared reading. I followed the SPC "msl" thingy then did the requestnvitemread ds_mip_ss_user_prof command that gave me good ha shared numbers after the 0x. However the AAA yield 0x00 all the way thru. Im not getting a long string of characters as others have gotten. Please advise!!! I would greatly appreciate it.
I am at the same point.
I think the HA is "secret" in plaintext
the AAA I managed to get was very long and qpst service programming app refused to accept any key in hex over 32 chars. I believe the one I have is 64 chars.
Do I have to send 'mode offline-d' if the radio is disabled anyway?
If anyone knows a way around this please advise.
Donor phone is BlackBerry Tour 9630
Target phone is HTC Evo 4G with 2.2 Froyo rooted
bosstalk said:
Can someone please lend a helping hand here. I am up to my wits with this one. Ive got txt and talk working on boost but somehow cannot get data.
(Error code 67)
My donor phone: HTC TP2 with boost
Evo: Rooted(unrevoked 3.2) with 2.2 Froyo update
Installed EPST.apk using Root explorer.
PRL used is 60660
Things Ive done so far:
1.Used QPST to match NV Items 465,466,1192 and 1194 from donor to evo using NV browser.
2. Used Qpst in the Mip tab and matched settings of the donor with the Evo
The only rough end that may be prohibiting my access is the fact that I cannot get an accurate AAA shared reading. I followed the SPC "msl" thingy then did the requestnvitemread ds_mip_ss_user_prof command that gave me good ha shared numbers after the 0x. However the AAA yield 0x00 all the way thru. Im not getting a long string of characters as others have gotten. Please advise!!! I would greatly appreciate it.
Click to expand...
Click to collapse
i just got my EVO and i was wondering if you could help me in the right direction to make the switch i have 7 BOOST CDMA LINES and plenty of donor's also i have about 9 boost cdma c290 would one of them work or does it need to be a higher end HS thanks to all
sdwyz74 said:
i just got my EVO and i was wondering if you could help me in the right direction to make the switch i have 7 BOOST CDMA LINES and plenty of donor's also i have about 9 boost cdma c290 would one of them work or does it need to be a higher end HS thanks to all
Click to expand...
Click to collapse
I am in the same boat as this guy, but have read and got to the point of making calls, txt, and mms. I just need data!!! I am so close...so close. CDMA WS will not read the c290. I get that it fails to answer. I used BITPIM to get the NVM settings of the c290, but I need to know how to take the key information to place into the EVO. Error 67 is driving me nuts!!!
Please someone help with getting data on my boost evo. I have managed to get talk and text working but cannot get data. Any assistance in this matter would be greatly appreciated.
I have read several forums and none of those methods are working for me.
Thanks in advance.
bosstalk said:
Firstly, When I do the requestnvitemread ds_mip_ss_user_prof in QXDM I get the ha shared hex passwd but all zeros for the AAA shared hex passwd. Isnt it suppose to be a combo of letters and numbers? Please advise.
Click to expand...
Click to collapse
For profile 0 aaa password you need to send this:
requestnvitemread hdr_an_auth_passwd_long
Good luck.
i have a tp2 on a cdma account.
what i did is use a cdma info from a NON activated boost phone. (use you imagination) no more detail on that.
once i was done i simple activated the phone and it activated and downloaded the ha and aaa.
let me know if this works as i am trying to get this to work
For ##DATA# is ##3282# and to pull the hex value use QXDM (you can find it on the net) and you will need QPST for the port server. In QXDM on most phones you send the MSL of the phone then request to read the password:
spc (your 6 digit msl)
requestnvitemread hdr_an_auth_passwd_long
On some phones you can get it with:
requestnvitemread ds_mip_ss_user_prof
And to get the dial-up 6-digit AAA password of profile 1 just add a 1 at the end:
requestnvitemread ds_mip_ss_user_prof 1
Ok I finally got my data icon to show up and my 1x data to work and the way I did it is I got my 6 digit AAA password from the donor rant phone straight from the device itself than I entered under profile 0 and profile 1 in my epic in QPST service programming secret as my ha user name and the 6 character password with text string selected. I used the same user name and password for both profiles because its the only way I get any data. But I can only get 1x. I tried changing primary & secondary servers but makes no difference. Any ideas why Im not getting 3g?
edit: n/m i figured it out
savior02 said:
Ok I finally got my data icon to show up and my 1x data to work and the way I did it is I got my 6 digit AAA password from the donor rant phone straight from the device itself than I entered under profile 0 and profile 1 in my epic in QPST service programming secret as my ha user name and the 6 character password with text string selected. I used the same user name and password for both profiles because its the only way I get any data. But I can only get 1x. I tried changing primary & secondary servers but makes no difference. Any ideas why Im not getting 3g?
edit: n/m i figured it out
Click to expand...
Click to collapse
If your donor is 1x that's all you're getting. And you don't use the same password. Provisioning is 16 hexadecimal digits and your account password is 6
Both use HA password "secret" (without quotes, of course)
m4f1050 said:
If your donor is 1x that's all you're getting. And you don't use the same password. Provisioning is 16 hexadecimal digits and your account password is 6
Both use HA password "secret" (without quotes, of course)
Click to expand...
Click to collapse
Ok I finally got it working on 3g the thing is my donor is a rant and is very difficult to extract the 16 hex from it. Everything is working now but my voicemail doesnt notify me of new ones.
Okay so I have flashed many evo's before by rooting, downgrading radio, etc, etc. But this one I have wrote the MEID, Nam1, Nam2, all that information HA AAA keys etc. But it gives me Error 5 switch 877 whenever I try to call. Any information on this one?
Possible ESN not written? I followed this guide and all went well except when trying to make a call.
QXDM shows the same MEID/ESN as the incognito. All information in the phone matches. I am using prof 0 which is [email protected] or whatever. Should I switch the profile?
PRL I used the one from the incognito. I never tried switching around profiles though but I will now, and will fill you in.
Any help is appreciated!
DJLarBear said:
Okay so I have flashed many evo's before by rooting, downgrading radio, etc, etc. But this one I have wrote the MEID, Nam1, Nam2, all that information HA AAA keys etc. But it gives me Error 5 switch 877 whenever I try to call. Any information on this one?
Possible ESN not written? I followed this guide and all went well except when trying to make a call.
QXDM shows the same MEID/ESN as the incognito. All information in the phone matches. I am using prof 0 which is [email protected] or whatever. Should I switch the profile?
PRL I used the one from the incognito. I never tried switching around profiles though but I will now, and will fill you in.
Any help is appreciated!
Click to expand...
Click to collapse
It appears to be a stack error(Error Code 5: Database locked).Cant find anything on the switch 877,yet.
Diablo67 said:
It appears to be a stack error(Error Code 5: Database locked).Cant find anything on the switch 877,yet.
Click to expand...
Click to collapse
Could you explain that to me a little bit, what is a Database lock?
Also, I noticed that on phones that are not activated, it says the same thing Error Code 5, different switch though.
The phone shows the Incognito's MEID, ESN, MIN#, MDN#, etc... Idk why its acting up.
Diablo67 said:
It appears to be a stack error(Error Code 5: Database locked).Cant find anything on the switch 877,yet.
Click to expand...
Click to collapse
Okay so I was wrong about the switch 877 part, it is switch 787. I have tried many things and still nothing is working... It seems to be stuck on profile 1 and I can't switch it to prof 0 for some reason. I am getting data and such but no calls/texts
Still having this problem if anyone cal help. Error Code 5... Every time I call idk why I have double even triple or maybe even quadruple checked everything that I have written to the phone!
I just flashed a custom ROM to my phone for the first time. It took a little figuring out, as it was my first time flashing, but it works! And, I'm over my fear factor, so I'll probably try some other ones and not afraid to tweak anymore.
So, the only thing I'm really having trouble with now is setting up my Voicemail. I'm on the Boost Mobile network, and I presume there is a short code that we are supposed to dial to get into Voicemail or something like that, and I presume this changes depending on the carrier.
I thought we just dialed "1" from the dialpad to access and setup, but I just get a recording that says "The number you are accessing is invalid, please hang up and try again." That was what I saw under Boost's instructions online.
http://www.boostmobile.com/shop/phones/mobile-guides/htc-one-sv/Content/20130109_HTC_One_SV_Boost_User_Guide_WWE/Set%20Up%20Voicemail.htm
But, even beyond that, I'd like to set up Visual Voicemail... So, not sure if this is where I'll need an app or something.
If anyone has any hints or can point me in the right direction, that would be great!
Okay, I just flashed to a new ROM and everything is working well, but still looking to figure out how to properly set up my Voicemail on the Boost Mobile network....
And, I'd like to use a visual voicemail service. If there's any quick links or videos on how I can easily set this up on my Android phone, please pass along!!!
Thanks.