Related
Long road almost there, error 67 :( calls & text ) but no data :( [evo on boost]
THE GOOD AND BAD NEWS... THE GOOD NEWS FIRST! i got my evo4g over to boost mobile with my boost account i already had open i can outgoing text and recieve text (no mms right now) i can call out and get calls in, works great shows my boost cell phone number on my evo and everything..
NOW THE PROBLEM...
my DATA doesn't work at all... i get the error 67
I TRIED THESE INSTRUCTIONS AFTER SEEING MY DATA DIDNT WORK..
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
If data is not working move on to the next steps...
(Note: These are steps not verified by me as I still dont have neither 1x nor Evdo working but some people say 1 or 2 or all of these following steps combined worked for them, so i guess it depends on the network you are trying to get on)
1. First attempt to update your profile if it can or update PRL
Menu>Settings>About Phone>System Updates>Update Profile
Reboot and see if data works....
2. If still no Data, plug in your Hero to the computer, dial ##3424#, go to QPST folder and open QPST Configuration app.
Under the Ports Tab if the active COM port your phone is on is not in that list Click Add Port and add it.
Then go to Active Phones Tab, select the phone and then go to Start Clients>Service Programming
A new window opens, hit ok, then click Read From Phone on the bottom left, its gonna ask you for your MSL type it in
Then go to the M.IP Tab and under user profiles click on profile 0, click edit, and then deselect Profile Enabled, hit ok, then click Write to Phone.
Close the program unplug your hero, reboot it, and try your data again.
3. If still no data, plug in your old phone to the computer, open up QXDM
check Connections and make sure your COM port is being read.
Go to View>New>Common>NV Browser , in the Category Filter drop down menu, filter only Data
Then scroll down to ID numbers 1192 and 1194
Click read and copy down all the values in there until u reach 0x00
Then unplug your old phone and plug in your hero, dial in ##3424# and go to NV Browser
navigate to the same ID numbers 1192 and 1194, (just to be safe copy all the values here so you can revert back to the originals)
Then double click each value under the input column and it becomes changeable and change all the values to the ones from your old phone and hit write
Close QXDM unplug and reboot your hero, test Data again
4. If still no data, plug in your old phone to the computer, open up QXDM
check Connections and make sure your COM port is being read.
Go to View>New>Common>NV Browser , in the Category Filter drop down menu, filter only Data
Then scroll down to ID numbers 465 and 466
Click read and copy down all the values in there until u reach 0x00
Then unplug your old phone and plug in your hero, dial in ##3424# and go to NV Browser
navigate to the same ID numbers 465 and 466, (just to be safe copy all the values here so you can revert back to the originals)
Then double click each value under the input column and it becomes changeable and change all the values to the ones from your old phone and hit write
Close QXDM unplug and reboot your hero, test Data again
NONE OF IT WORKED.... SO I WENT TO THE SECOND SET OF INSTRUCTIONS.
Run the QPST config and plug in your phone, make sure your phone is detected in the COM port list. If not click Add New Port and add the one that it has detected your phone on. What it says may vary but USB will often be in the description.
Run QXDM click Options -> Communications and set the Target Port for the same one QPST config listed for your phone.
In the command box at the top type "spc 000000"
Note: If your SPC is not 000000 then you need to use the correct number instead!
If successful you will see a window titled "Command Output" that will output some text with the final line reading "SPC Result = Correct"
Next in the command box type "requestnvitemread ds_mip_ss_user_prof"
This will get you a lot of stuff in the Command Output window. It will start with the "DIAG TX item" section, ignore this one, we are interested in the "DIAG RX item" part.
The actual keys are 16 lines and marked in the output as 0-15. You will notice that quite handily both HA and AAA are both there. Take the part after the "0x" and that is actual key data. Just write down (or use word, notepad, whatever) to record this for safe keeping.
If you are doing this right then you have a long string of 30 characters all strung together for each key. DOUBLE CHECK YOUR COPYING! A single mistake will cause this to fail.
Putting the keys back into the phone:
Load QPST service programming, go to the M.IP tab. Double click profile 0 (in the white box) and use "Enter hex value" to enter your backups of your HA and AAA keys.
Write to phone.
Soft reset. (may not be required but I do it for good measure)
do "requestnvitemread ds_mip_ss_user_prof" for the sprint info and "requestnvitemread ds_mip_ss_user_prof 1" for the boost info
I'm telling you.. If you're getting the error 67, the following these steps above will fix it.. I'm on the Sprint network and the problem i was having was, in "Profile 0" The username which began with A000000 (this is actually your ESN #) Was from the original phone, not the donar phone... So i took the battery out the donor phone and looked at the ESN (not DEC) and began to type A00000 etc.
Then i used the steps above to get AAA Shared Secret from the Donor phone.. My AAA Shared Secret was 32 Alpha numeric characters...
i did that and still no dice.... i got the AAA key and the HA key .. both were 32 characters...
i even went as far as to get the profile info from the incognito phone, for profile 0 and 1, and made it exactly the same on my evo and addresses for the HA and alternate HA ADDRESS... still no dice.. i went into debug mode on my evo and even hit the restore to start fresh , and let it download the data via the servers... still didnt work...
i even re-entered the profile info and etc, for profile 0 and 1, and still not working
i know im close i just need to finish the puzzle please help.
oh yea, and when i go into debug mode it shows the authentication as failed.. i dont know how thats even possible I've triple checked the HA AND AAA keys via QXDM and they are the correct keys from the incognito boost phone.
THIS IS FOR EDUCATIONAL PURPOSE ONLY
Guide on Flashing HTC Droid Incredible to Boost Mobile
What you NEED
QPST
QXDM 3.11 (Google is your friend)
CDMA Tools 2.7 (Demo is good too)
Patience
HTC Diagnostic or HTC USB MODEM Drivers (I will include Win7 x64 Driver)
Donor Phone Driver (Google is your friend)
Winhex (Again, Google )
Boost Mobile Account [seems difficult for those without it]
What you DONT NEED
Wife
Kids
*Install all drivers and programs**
If you do not know how to manually install a driver, I suggest you stop where you are now.
Step 1: Donor Phone MSL/SPC
This one is really simple, call Boost Mobile Customer Rep. (To get directly to them after the guy says "For espanol press 5", just press 5, then press 2, and wait for it to ask you "To chat with a Boost Customer Rep press 0") and tell them your phone needs to be programmed and they will tell you to dial ##MSL#. SAVE THAT NUMBER and then just hang up on them.
Step 1.5:
Incase you are scared to talk with boost mobile, or you don't know your 6 digit MSL/SPC code you will have to find it manually. *Sigh*
Open QPST, click [Add New Port] on the bottom right, then uncheck [Show serial...] on the bottom left corner and on the screen to the left you should see your Donor's Port number, add it and make note of it.
Next open CDMA workshop, connect to your phones Port (COM) number, click read and your phone information will be displayed on the left.
Click on the memory tab, under memory/Eeprom put start Address: 0363:0000 leave the size at 65536 bytes, now click read and save the .bin files on your desktop.
FINALLY, open up Win Hex, open the memory file you just saved, click on specialist- Gather Text; Recognize text by "6" uncheck everything expect for " Numbers" press "OK", save the file anywhere you like. You should end up with a .txt document with 1 or more 6 digit numbers; one of them is the SPC for your phone, write it or them down.
Step 2: NV Items
Open CDMA Workshop again, go to Security under SPC write your MSL code and click SPC -> Send. It should say phone is unlocked.
Now go to Memory tab, and click Read NV_Items, and you will read NV_Items 455, 466, 1192, and 1194. Save them all.
Step 3: NAM 1 & 2
Stay in CDMA Workshop, and click the NAM Tab. Click “Read” this will display all your phones information inside of “NAM 1” Save the filename as NAM 1 and do the same for NAM 2.
Step 4: M.IP
Close Cdma Workshop. Open Service Programming and enter your Donor phones SPC. Click Read and navigate to the “MIP” Tab, we need your Donor phones NAI. Click on Profile 1 and copy down everything just to be safe. Do the same for Profile 0 if available.
Step 5: HA & AAA Passwords
HA Password for both Profiles will be "secret" in text formatClose Service Programming and open QXDM. Now in the Command Prompt on the top screen type in "SPC [MSL]" Then type in “Requestnvitemread ds_mip_ss_user_prof 1” to retrieve your Profile 1 AAA 6 Digit password. It will be the first 6 Digits in DIAG RX, which is written in HEX mode. For Profile 0, simply open NV_Item 466 all numbers after the number 10 and before the last pair of 0's will be your Profile 0 AAA. Or you can type in QXDM Requestnvitemread ds_mip_ss_user_prof and it will be all the Digits in AAA SHared DIAG RX.
If it says Access Denied it means you do not have a Profile 0. *Dont worry about it*
DONT EVER TURN ON THE DONOR PHONE'S RADIO AGAIN, PUT IT ON AIRPLANE MODE OR SOMETHING
Step 6: Root your HTC DROID INREDIBLE
Follow directions --> http://androidforums.com/incredible...ked-3-rooting-stock-incredible-evo-2-2-a.html
Step 7: Writing NAM and NV Items
Plug in your Droid Incredible to the PC. Open QPST and add its port number. Open CDMA and connect then read the Incredible, next go to Security Tab and under SPC write 000000 and send SPC.
Next go to the "Memory" tab, NV Items and write the 4 NV Items we saved from your donor phone earlier.465, 466, 1192, and 1194. Then navigate to the “NAM” TAB and Write the Nam 1 and Nam 2 Files we saved earlier by clicking Load before each on of them. If done correctly it should display your donor’s phone number and other information.
TYPE IN ##DIAG# IN YOUR DROID TO GO INTO MODEM MODE
Step 8: Zero'ing ESN & MEID
Close CDMA Workshop and open QXDM, Options- Communications- Target Port/ select your Droid Incredible's Port, click OK. You should now be connected to your phone. (if you have any trouble connecting to QXDM make sure you set your com port in QPST Configuration and use the same in Qxdm's communications, So you can actually see what's going on from the View drop down screen, select Command Output. Press F4 to get to the memory view, Change Rows from 8 to 16, Find you HEX MEID and ESN by calling ##786# it will look something like this...
MEID: A1000009C57FQZ
ESN: 8373B5C5
They might have an "0x" in front of them, just ignore that, Now pay close attention, following the example MEID and ESN I provided above you are going to separate every 2 characters and then you are going to flip a few to make it backwards just follow my model and do the same to your numbers.
Original: Separated: Flipped:
MEID A1000009C57FQZ MEID A1 00 00 09 C5 7F QZ MEID QZ 7F C5 09 00 00 A1
ESN 8373B5C5 ESN 83 73 B5 C5 ESN C5 B5 73 83
*Note* Your Meid and Esn will differ from the one used in this guide please find your own and use the same method you will need this to find you Meid and Esn in the memory.
Now the tricky part, you may have to Zero them out several times so it will stick (I would consider zero'ing them several times before restarting the phone)
These are all possible ESN and MEID Locations, [ATTACHED]
At each location, find your Meid or ESN and replace it with Zeros (0) then click Write and goto the next Meid or ESN. Do not alter anything but meids or ESNS. After you Zero'ed them out type the command "Requestnvitemread MEID" and "Requestnvitemread ESN". If its Zero'ed restart the phone, if its not, you missed a spot.
To make sure its been Zero'ed out FOR SURE restart the phone and when is back on dial ##778# click View, then Display and make sure your MEID and ESN is all 0. If its not, then try again.
Step 9: Writing MEID
After you get a message that it's zero than u can proceed to write your ESN or MEID which ever you prefer.
Commands are
requestnvitemwrite scm 0x3a
requestnvitemwrite meid 0x0(Your MEID)
MEID = actual 14 digit meid (not in reverse)
If u are writing MEID no need to write the ESN.
requestnvitemwrite esn 0x(Your ESN)
esn= actual 8 digit esn (not in reverse)
Step 10: Configuring Data
Close QXDM, open Service Programming. Navigate to the M.IP tab.
3G Donor PHONES ONLY: Click profile 0 and click edit. Check and make sure your “NAI” is the correct one for boost mobile. Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s. (it may be different for your area)
NAI:[email protected]
Home address: 0.0.0.0
Primary HA address: 68.28.15.12
Secondary HA address: 68.28.31.12
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok.
Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s
NAI:[email protected] (May varie)
Home address: 0.0.0.0
Primary HA address: 255.255.255.255
Secondary HA address: 68.28.89.76
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok
Make Active User 1.
Write to phone, and restart the Droid Incredible.
Now give yourself a pat in the back because you just Fully Flashed your Droid Incredible to Boost Mobile
I have yet to Know how to configure the USE of MMS, but if you know how to drop it in here .
***THIS GUIDE WAS TAKEN FROM A GUIDE I BOUGHT ON EBAY FOR FLASHING HTC EVO TO BOOST MOBILE, AND MODIFIED TO FIT THE HTC DROID INCREDIBLE***
Any questions?
EDIT** Incase your Data isnt working try this and MAKE SURE, you have this.
1. Make sure your ACTIVE USER is 1.
2. Make sure your HTC INCREDIBLE has the same PRL as your donor phone! (THIS IS HIGHLY IMPORTANT) To extract the PRL from your donor phone simply:
Connect your donor phone, Open 'Service Programming' click 'Read from Phone' enter your MSL, and then click 'Save to File' save it anywhere. You will get a qcn file, and a rl0 file. The 'rl0' file will be the PRL.
Also this happened to me before, lol, MAKE SURE MOBILE NETWORK in 'Menu -> Settings -> Wireless and Networks is TURNED ON !!
Any more questions let me know
UPDATE: Try this by igotanmp3 to get MMS working. NOTE* It does not work with Custom Themes http://forum.xda-developers.com/showpost.php?p=16440594&postcount=69
UPDATE: For Droid Incredible S & 2 FOLLOW --> http://forum.xda-developers.com/showpost.php?p=21668680&postcount=145
So did you ever figure out the mms settings? I've seen some guy in New Jersey doing full flashes on HTC Incredibles on Boost Mobile. I tried to contact him, but it seems like he is somewhat of a prick. I've been racking my brains trying to get the mms working. So far my Dinc has talk, text, internet and Sprint TV working.
I have not yet. How did you get Sprint TV running on the Incredible though?
And i think the guide to flash a HTC Hero to alltel i believe might help... changing the APN username adress and whatnot with APN Manager apk, havent gotten around it though been too busy will try tomorrow.
Sent from my ADR6300 using XDA App
eljean said:
I have not yet. How did you get Sprint TV running on the Incredible though?
And i think the guide to flash a HTC Hero to alltel i believe might help... changing the APN username adress and whatnot with APN Manager apk, havent gotten around it though been too busy will try tomorrow.
Sent from my ADR6300 using XDA App
Click to expand...
Click to collapse
I downloaded the Sprint TV Apk file and that was pretty much it
TRY THIS FOR MMS
MMS
************************************************** *******************************
(My original work)
After making sure web works,
1. Download APN Backup & Restore(Android Market)
2. Click Backup APNs
3. Goto your sdcard/ApnBackupRestore
4. Click the apn file and edit under windows or on your phone.
5. Look for the line that says Production and edit.....
<apn name="Production" numeric="00000" mcc="310" mnc="00" apn="1"
user="[email protected]"(may varie) server="null" password="null proxy="null"
port="" mmsproxy="" mmsport="" mmsprotocol="2.0"
mmsc="http://mm.myboostmobile.com" type="mms" />
6. Save the file(make sure you save it)
7. Open the APN Backup & Restore program
8. Click delete APNs(Very important)
9. Click Restore APNs
10. Close the program
11. Goto messages>menu>settings>connection settings. Make sure everything is as you edited. You should see Name(Production), MMSC(http://mm.myboostmobile.com), MMS proxy(not set), MMS port(not set), MMS protocol(WAP 2.0).
12. If everything is just as it is, viola you are all set...
Taken from http://www.howardforums.com/showthr...lashed-to-Revol-with-working-Internet-and-MMS and fixed to the Boost Mobile apn settings... correct it if its wonrg, Im not 100% sure on the settings...
I haven't tried it yet im still waiting for my MicroSD Card from Ebay :\... lol you be the guinnea pig let me know how it goes
this would go a lot better in the dev section
JoelZ9614 said:
this would go a lot better in the dev section
Click to expand...
Click to collapse
Ahh, I didnt know where else to put it
this is awesome.. what about PTT? does it work?
remy2501 said:
this is awesome.. what about PTT? does it work?
Click to expand...
Click to collapse
Yeah it should
DRIVERS
FORGOT to attach the DRIVERS sorry
Any possible way to go back to verizon MEID?
mttmelton said:
Any possible way to go back to verizon MEID?
Click to expand...
Click to collapse
Just write the original MEID and the phone would provision itself IF it has a clean esn
Sent from my ADR6300 using XDA App
Still no mms on the HTC Droid Incredible on Boost
Just wonder if anyone has figured out the mms settings for the HTC Droid Incredible on Boost Mobile. I paid some guy on Ebay and he emailed me back "here sorry all you do is this:
##3282#
change mms "hxxp;//mm . myboostmobile . com
reboot your phone and test the pics"
I was like WTF ##3282# does not even work on the Incredible, but I already knew the mmsc url. So has anyone figured this little speed bump? I have talk, text, internet & sprint TV working now I just need mms working.
roclikewhat said:
Just wonder if anyone has figured out the mms settings for the HTC Droid Incredible on Boost Mobile. I paid some guy on Ebay and he emailed me back "here sorry all you do is this:
##3282#
change mms "hxxp;//mm . myboostmobile . com
reboot your phone and test the pics"
I was like WTF ##3282# does not even work on the Incredible, but I already knew the mmsc url. So has anyone figured this little speed bump? I have talk, text, internet & sprint TV working now I just need mms working.
Click to expand...
Click to collapse
Same here. I used APN Manager and changed the mmsc url but then it would just give me access denied.
Sent from my ADR6300 using XDA App
Hello,
I read all posts above, but I couldn't understand completely. It is possible use htc incredible 2 on boost mobile?
I can buy one from ebay with clean esn and use it on Boost mobile?
thank you
idk
mttmelton said:
Any possible way to go back to verizon MEID?
Click to expand...
Click to collapse
to be honest with you, I am not entirely sure, theoretically it should be possible but at this moment I do not know since it is a new phone with new software etc etc. And I heard HTC is starting to lock their esn locations with some type of encryption so u cant read it.
Google around u might be able to and if u find someone who says and has backup that is possible come back to this guide and follow it .
for example. Can I activate this on boost mobile?
hxxp://xpressphones.vstore.ca/product_info.php?products_id=379
armars said:
for example. Can I activate this on boost mobile?
hxxp://xpressphones.vstore.ca/product_info.php?products_id=379
Click to expand...
Click to collapse
I did a little bit of research and so far I can conclude that it is not possible. I may be wrong though. I am 90% positive it is not posible YET lol
***THIS GUIDE WAS TAKEN FROM A GUIDE I BOUGHT ON EBAY FOR FLASHING HTC EVO TO BOOST MOBILE, AND MODIFIED TO FIT THE HTC DROID INCREDIBLE***
Click to expand...
Click to collapse
So you could flash it to boost mobile, but couldn't activate?
armars said:
So you could flash it to boost mobile, but couldn't activate?
Click to expand...
Click to collapse
Yeah if your donor phone is already activated
I've searched around for the past couple days trying to figure out how to pull the AAA key from profile 1 on my OG EVO and I didn't have any luck finding what I need.
I've tried using QXDM:
I unlocked the phone using "spc 'msl'"
It confirms that the phone is unlocked
I entered "requestnvitemread ds_mip_ss_user_prof 1"
the result is all 0's
I've tried running "adb logcat > c:\dump.txt" and ##DATA# in edit mode.
I edited the user and the aaa shared secret and pressed cancel
Looked through the log and I'm not seeing anything jumping out at me.
I did a search for what I already know as the HA key in hex and ascii and I'm not seeing it in the log either.
I've heard you can pull the profile 1 aaa key from nv item 466.
I took a look at the one that came off my phone and it's all 00'd out.
I downloaded the DFS demo and I can read almost everything on that phone except the keys.
My question is how can I pull the proflie1 - 6-digit Sprint key from an EVO?
edit: I originally said I was looking for profile 0 key - I already have that - I'm looking for the profile 1 aaa key.
-thanks Klown80 for pointing that out.
xdapark said:
I've searched around for the past couple days trying to figure out how to pull the AAA key from profile 0 on my OG EVO and I didn't have any luck finding what I need.
I've tried using QXDM:
I unlocked the phone using "spc 'msl'"
It confirms that the phone is unlocked
I entered "requestnvitemread ds_mip_ss_user_prof"
the result is all 0's
I've tried running "adb logcat > c:\dump.txt" and ##DATA# in edit mode.
I edited the user and the aaa shared secret and pressed cancel
Looked through the log and I'm not seeing anything jumping out at me.
I did a search for what I already know as the HA key in hex and ascii and I'm not seeing it in the log either.
I've heard you can pull the profile 0 aaa key from nv item 466.
I took a look at the one that came off my phone and it's all 00'd out.
I downloaded the DFS demo and I can read almost everything on that phone except the keys.
My question is how can I pull the proflie0 - 6-digit Sprint key from an EVO?
Click to expand...
Click to collapse
Profile 0 will be a 32 digit key, pro 1 is a 12 digit key. Does data work on the Evo currently? If so try going to settings, system updates, update profile.then try reading the profile 0 again.
Klown80 said:
Profile 0 will be a 32 digit key, pro 1 is a 12 digit key. Does data work on the Evo currently? If so try going to settings, system updates, update profile.then try reading the profile 0 again.
Click to expand...
Click to collapse
you're right - it's the profile 1 key im looking for.
I updated my post and title to reflect that.
I just did a profile update and it shows all 00's
then i tried this:
factory reset and a ##RTN# reset - reboot - OTA activated - updated profile and ran "requestnvitemread ds_mip_ss_user_prof 1"
still shows all 00's
for what it's worth profile 0 and profile 1 ha and aaa keys show up as 00's in QXDM
I restored back to the original factory image (baseband 2.15.00.11.19) I made before I ever rooted the phone to see if that makes a difference.
it didn't
Can anybody confirm that QXDM 3.11.36 can read the profile keys from an EVO?
Im using some HTC Diag drivers that only seem to work with XP even though a 32 and 64 bit driver was included in the zip.
Is there any way I can do some kind of memory dump to locate it?
xdapark said:
you're right - it's the profile 1 key im looking for.
I updated my post and title to reflect that.
I just did a profile update and it shows all 00's
then i tried this:
factory reset and a ##RTN# reset - reboot - OTA activated - updated profile and ran "requestnvitemread ds_mip_ss_user_prof 1"
still shows all 00's
for what it's worth profile 0 and profile 1 ha and aaa keys show up as 00's in QXDM
I restored back to the original factory image (baseband 2.15.00.11.19) I made before I ever rooted the phone to see if that makes a difference.
it didn't
Can anybody confirm that QXDM 3.11.36 can read the profile keys from an EVO?
Im using some HTC Diag drivers that only seem to work with XP even though a 32 and 64 bit driver was included in the zip.
Is there any way I can do some kind of memory dump to locate it?
Click to expand...
Click to collapse
As long as you have a working profile 0, you can get the phone to OTA and write your profile 1 for you completely. Are you on Boost or Sprint? Unfortunately it sounds like your keys may have got erased somehow, if it does not read in QXDM, DFS, or NV items (Item 466 or 1192 should have it). Does your data work right now? Try just using "requestnvitemread ds_mip_ss_user_prof" that should read your profile 0 key, if we can get at least the profile 0 info the phone will take care of the rest. I have another idea we can try if you can not read profile 0 info. I also have htc drivers that work just fine for me on Win 7 32 bit if you want them, I have a 64 bit Win 7 driver too but have not used it yet so cant confirm it works. I have QXDM 3.09.19 and I know for sure it reads the profile keys, looks like you have a newer version so I assume it would work too.
Klown80 said:
As long as you have a working profile 0, you can get the phone to OTA and write your profile 1 for you completely. Are you on Boost or Sprint? Unfortunately it sounds like your keys may have got erased somehow, if it does not read in QXDM, DFS, or NV items (Item 466 or 1192 should have it). Does your data work right now? Try just using "requestnvitemread ds_mip_ss_user_prof" that should read your profile 0 key, if we can get at least the profile 0 info the phone will take care of the rest. I have another idea we can try if you can not read profile 0 info. I also have htc drivers that work just fine for me on Win 7 32 bit if you want them, I have a 64 bit Win 7 driver too but have not used it yet so cant confirm it works. I have QXDM 3.09.19 and I know for sure it reads the profile keys, looks like you have a newer version so I assume it would work too.
Click to expand...
Click to collapse
I had a working profile 0 - I couldnt' pull the key using "requestnvitemread ds_mip_ss_user_prof"
FWIW - I could retrieve it from 1192 and by running "requestnvitemread hdr_an_auth_passwd_long"
Out of curiosity - is there a similar command that pulls from 1?
my 466 was completely 00'd out.
I'm not too worried about it anymore - my issue is resolved now.
My problem was I couldn't get 3g working on my gnex.
You let me know the aaa key would be written as long as I had a working profile 0 so I looked for the key on my gnex.
I ran logcat on the gnex and I was able to see the key I was looking for.
I ran around for a few days with no 3g.
After I pulled the key from the gnex and re-wrote it to that same gnex - 3g started working.
Then I made a test call and got error 16.
After I talked to the sprint rep and rebooted - everything worked fine.
thanks for everything - looks like I'm good to go now.:victory:
AAA Help
xdapark said:
I had a working profile 0 - I couldnt' pull the key using "requestnvitemread ds_mip_ss_user_prof"
FWIW - I could retrieve it from 1192 and by running "requestnvitemread hdr_an_auth_passwd_long"
Out of curiosity - is there a similar command that pulls from 1?
my 466 was completely 00'd out.
I'm not too worried about it anymore - my issue is resolved now.
My problem was I couldn't get 3g working on my gnex.
You let me know the aaa key would be written as long as I had a working profile 0 so I looked for the key on my gnex.
I ran logcat on the gnex and I was able to see the key I was looking for.
I ran around for a few days with no 3g.
After I pulled the key from the gnex and re-wrote it to that same gnex - 3g started working.
Then I made a test call and got error 16.
After I talked to the sprint rep and rebooted - everything worked fine.
thanks for everything - looks like I'm good to go now.:victory:
Click to expand...
Click to collapse
Maybe you can help me out, everything on the phone works except for 3g in debug under evdo protocol it says an-aaa fail and i tried:
requestnvitemread hdr_an_auth_passwd_long and requestnvitemread ds_mip_ss_user_prof both give me:
Request:
0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015407E
Response:
004F6374203136203230313232333A31343A34384F637420303120323031324C3731302E31340041414141414E415A3A06FF70000206B1EE307E
where do i go from here any ideas?
thewire1o1 said:
Maybe you can help me out, everything on the phone works except for 3g in debug under evdo protocol it says an-aaa fail and i tried:
requestnvitemread hdr_an_auth_passwd_long and requestnvitemread ds_mip_ss_user_prof both give me:
Request:
0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015407E
Response:
004F6374203136203230313232333A31343A34384F637420303120323031324C3731302E31340041414141414E415A3A06FF70000206B1EE307E
where do i go from here any ideas?
Click to expand...
Click to collapse
If it says AN-AAA = fail then your profile 0 info is not correct. Make sure username and AAA is correct HA will be 736563726574. Look in NV item 466 or 1192 to see if your pro 0 32 digit AAA is in there, it will start after the "10"
Same boat
xdapark said:
I had a working profile 0 - I couldnt' pull the key using "requestnvitemread ds_mip_ss_user_prof"
FWIW - I could retrieve it from 1192 and by running "requestnvitemread hdr_an_auth_passwd_long"
Out of curiosity - is there a similar command that pulls from 1?
my 466 was completely 00'd out.
I'm not too worried about it anymore - my issue is resolved now.
My problem was I couldn't get 3g working on my gnex.
You let me know the aaa key would be written as long as I had a working profile 0 so I looked for the key on my gnex.
I ran logcat on the gnex and I was able to see the key I was looking for.
I ran around for a few days with no 3g.
After I pulled the key from the gnex and re-wrote it to that same gnex - 3g started working.
Then I made a test call and got error 16.
After I talked to the sprint rep and rebooted - everything worked fine.
thanks for everything - looks like I'm good to go now.:victory:
Click to expand...
Click to collapse
hello I'm on the same step you were, could you please post how did you pulled the key from the Gnex? was it with ETS? Thanks a bunch!!
k guys, this thread is coming about after respectfully moving the discussion from kalaker's s-off thread.
i've been looking for a while about how to back up my nv keys for data, just in case anything happens to my one v. this is thanks to New Optimus (for steps 8-10) and jmztaylor, who informed me the open sesame door trick works. I AM NOT RESPONSIBLE FOR HOW SOME MAY USE THIS. open sesame door trick has the potential to screw your phone up if you dont do it right, or delete an nv item.
CDMA ONLY (i dont think gsm works the same way anyway)
YOU ARE NOT MODIFYING ANYTHING. All you are doing is backing up your AAA and HA keys. they are used to identify and register your device's data on the VM network. IF YOU MODIFY ANYTHING, ITS YOUR FAULT IF YOU SCREW IT UP.
step 1:
download and install qpst. im not linking to the file, you should be able to find it easily enough by googling it.
step 2:
open up qpst configuration, and let it sit in the background for a minute. install the htc diag drivers for one v from here: http://www.htc.com/www/support/
look for the one v, and download and install the HTC Sync program which will install all the drivers you need.
step 3:
close out of htc sync once its installed, its an annoying program anyway. connect your phone, make sure adb debugging is enabled in developer options in settings. open the dialer, type in ##3424# (##diag#) and a screen will come up that says on and off, with select at the bottom. click on, then select, and it will ask you for your msl code.
note: your msl code can be obtained by a app in market called MSL Reader, you need root for this. follow the prompts in the app, its easy enough to do.
step 4:
after entering your msl code and entering diag mode, go back into qpst configuration. click on "add new port" toward the bottom right, and make sure when the window opens "COMx- USB/QC Diagnostic" is selected and click ok. qpst configuration should now recognize your phone as SURF-MSM7830. if it doesnt, update your version of qpst.
step 5:
in qpst configuration, click on "Start Clients- EFS Explorer". make sure you put your msl in the box that says spc, and click ok. a please wait window will pop up, it will only take a few seconds.
from New Optimus's post: http://forum.xda-developers.com/showpost.php?p=29951978&postcount=796
8. Once the phone reads completely make a new directory named (open sesame door) without the parentheses and all lower case
9. After making the new folder locate abd.exe from the android sdk install folder and press: start, run and type cmd then press enter you will get a command prompt window that opens up navigate to the android sdk directory and type; adb reboot, the phone should then reboot if you’ve done as you were supposed to.
10. After the phone reboots read it again with QPST EFS Explorer which still should be opened, you will notice that the red no access circle has been removed from the nvm directory so expand it and go to the num directory,
Click to expand...
Click to collapse
(note: edited New Optimus's post to remove links to esn/meid changing which is frowned upon in the forums, also i already had the open sesame door folder created upon making the pictures.)
left click and drag 465, 466, 1192 and 1194 to your desktop.
keep 465,466, 1192 and 1194 in a safe spot, they are how you have data on your phone. if something happens to your HOV and those are gone, good luck getting data back.
Quick noob question, do these files get generated by the carrier when you activate the phone?
whoshotjr2006
Do AKEY, SSDA and SSDB files need to be saved? if so, where are the files?
reachforthesky said:
whoshotjr2006
I know the content of file 0 and 1943. Could you briefly describe the contents of these 4 files (465, 466, 1192 and 1194)? Which one is HA, AAA, SSDA and SSDB? Are there any more important NVM files need to be saved?
Click to expand...
Click to collapse
465^"Data Services Mobile IP General User Profile"^"Data*"
466^"Data Services Mobile IP Shared Secret User Profile"^"Data*"
1192 is the AAA secret
1194^"HDR Access Network Stream CHAP Authentication User ID"^"Data*"
The reference is here: http://forum.xda-developers.com/showthread.php?t=1954029
Got sooo excited when I saw this. Used to switch firmware's on my optimus v with the firmware of the optimus s, and use optimus s roms. Had all of my nv data and everything else backed up. Forgot you have to have be on an aosp rom for this to work because you need a port. -_- I don't have a stock backup and right now I'm tethering, so it'd take awhile to download a stock backup. Guess I'll have to wait a week or so.
nvm, I found a backup. I tried it out, and i got to the qpst efs explorer. I did the open sesame door, and it unlocked the nvs, but I only had a couple of the files from the list. I did not have 465 or 466. Also, I had an issue when I tried to recognize the phone. It did recognize the phone in diag mode with the port, but not as surfmsm7830. I have the most updated version of qpst.
I'll have to check what version I'm running of qpst, I know its close to the newest if not the newest. It wouldn't recognize my phone correctly until I had a new enough copy.
Also the first time I tried the open sesame door trick, I too had the limited nv items. I used the ruu to go back to stock, and once I did that the open sesame folder dir survived the ruu and unlocked the rest of the nv items.
Hope that helps.
Sent from my One V using xda app-developers app
What version of QPST are you using for this? I get an error "Online connection failure: Unspecified error" when trying to connect.
I think my phone isn't getting read properly by QPST because under phone it says "(unknown)" even though the other fields fill in correctly.
CDMA Workshop reads my phone no problem, but this thing no luck.
EDIT: Found an updated build and it displays the specified info under phone. Not sure what the lowest working version is, but v2.7 build 323 will not read it, build 366 will though.
Hi i recently flashed my sprint gs3 to boost on my own and am having some difficulties with the getting the 3g to work and the mss to send. I tried a guide for mms but it wouldnt let me change the first setting described and im not able to link it as im a new member. As for the 3g i bought my donor info off of ebay and I cant figure out how to get the ha and aaa keys from the files i received. They were 5 text files with numbers in titled 465 466 1192 and 1194 also another file i used. Any help at all would be much apprreciated
nigpeen said:
Hi i recently flashed my sprint gs3 to boost on my own and am having some difficulties with the getting the 3g to work and the mss to send. I tried a guide for mms but it wouldnt let me change the first setting described and im not able to link it as im a new member. As for the 3g i bought my donor info off of ebay and I cant figure out how to get the ha and aaa keys from the files i received. They were 5 text files with numbers in titled 465 466 1192 and 1194 also another file i used. Any help at all would be much apprreciated
Click to expand...
Click to collapse
Add the link to the guide you used (put spaces between the different sections)
Like this: www DOT boost guide site DOT com / guide DOT html
CNexus said:
Add the link to the guide you used (put spaces between the different sections)
Like this: www DOT boost guide site DOT com / guide DOT html
Click to expand...
Click to collapse
I got the phone ready and set up an account and then over the air activated and updated the prls and such then rooted it to try this guide for the mms but the first setting it says to change would not change on my phone it just reverted back to the way it was.
http :/ /forums .androidcentral.com/sprint-galaxy-s-iii/203833 -how-get-mms-pictures- samsung-galaxy-s3-flash-boost-mobile.html
As for the 3G It displays the 3G logo but in the settings it says 1xRTT:6 under mobile network type. To get the 3g to work i need to figure out how to get the ha and aaa keys from the donor info i purchased. And again any info would be very much appreciated
first, which doner are you using?
the HA key is "secret" without the quotes
1192 is where you'll find the AAA key, it should be the 10 digits after the 0's
all you need is your user name & that should fix your 3g.
for MMS
replace the apn-config.xml file in
root/system/etc
reboot into recovery & fix permissions
remember to do this EVERYTIME you flash a new rom
reboot system
then ##DATA#
edit
enter your msl
other
then lte apn
& select the new apn file
also, dont forget to fix the mmsc url
J_apa_n said:
first, which doner are you using?
the HA key is "secret" without the quotes
1192 is where you'll find the AAA key, it should be the 10 digits after the 0's
all you need is your user name & that should fix your 3g.
for MMS
replace the apn- config . xml file in
root/system/etc
reboot into recovery & fix permissions
remember to do this EVERYTIME you flash a new rom
reboot system
then ##DATA#
edit
enter your msl
other
then lte apn
& select the new apn file
also, dont forget to fix the mmsc url
Click to expand...
Click to collapse
The donor info ii have is either from an incognito or a rant they didnt specify. The guide im using says to do this "3G working using DFS 4.0.0.4 or 4.0.0.5
14. Click on the ports button and connect to the proper port
put in your SPC code and click on the send spc button
15. Go to the Programming tab.
16 Click on the Data sub tab.
17. Click on Read button.
18. Under PAP:
UID: samsung01 @ sprintpcs dot com
Pwd: samsung
19. Under HDR AN:
NAI: MEID @ hcm.sprintpcs dot com
Pwd: (checked) enter your 32 digit HEX AAA password
20. Under HDR AN Long:
UID: MEID @ hcm.sprintpcs dot com
Pwd: (checked) enter your 32 digit HEX AAA password
21. Put a check mark on "Authentication require password encryption"
22. Click on the Write button
23. Goto the Mobile IP sub tab.
24. Click on Read button.
25. Right click on the first Profile radio button (that's Profile 0), and enable it.
26 Click on the Write button
27. On the Selected Profile settings section:
NAI: use the sprint NAI you saved to your text file
Home address: 0.0.0.0
Prim HA address: 68.28.15.12
Sec HA address: 68.28.31.12
AAA Shared Secret: enter your 32 digit sprint HEX AAA password you saved in your text file (put check mark on "Enter value in HEX")
HA Shared Secret: the word secret (remove check mark on "Enter value in HEX"
28. Click on Write current profile settings.
this next boost section may not be necessary however this is how I did mine and it worked well so you decide if you want to put in the boost stuff
left Click on the second profile button
On the Selected Profile settings section:
NAI: use the Boost NAI you saved to your text file
Home address: 0.0.0.0
Prim HA address: 255.255.255.255
Sec HA address: 68.28.89.76
AAA Shared Secret: enter your 12 digit sboost HEX AAA password you saved in your text file (put check mark on "Enter value in HEX")
HA Shared Secret: the word secret (remove check mark on "Enter value in HEX"
29. Click on Write current profile settings.
30. Reboot the phone. Then run the Update Profile and Update PRL on your Galaxy S3.
31. go to phone dialer ##3282# then edit and put in your 6 digit SPC/MSL code go to others amd mmsc URL change it to h t t p mm. myboos tmobile . com"
My nv files 456 466 1152 and 1154 are in this format
1192 (0x04A8)
XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX and there are 8 lines like that
As for the mms i dont have a boost .xml file to use and couldnt find one in any forum
Questions go in Q&A
Thread moved
Friendly Neighborhood Moderator
J_apa_n said:
first, which doner are you using?
the HA key is "secret" without the quotes
1192 is where you'll find the AAA key, it should be the 10 digits after the 0's
all you need is your user name & that should fix your 3g.
for MMS
replace the apn-config.xml file in
root/system/etc
reboot into recovery & fix permissions
remember to do this EVERYTIME you flash a new rom
reboot system
then ##DATA#
edit
enter your msl
other
then lte apn
& select the new apn file
also, dont forget to fix the mmsc url
Click to expand...
Click to collapse
Hi. I'm having a problem getting my Spring GS3's 3g and MMS to work.
I used a guide to change the MEID to that of an old Boost HTC Design.
I flashed CM10 on the phone, but was having some signal issues.
After flashing to Wicked Sensations I couldn't connect to the network until I used ##72786#. Now voice and texts work, but I can only get 1x data and I can't edit the APNs.
I use Google Gesture search to get into APN settings, but all the options in the Edit Access Point screen are grayed out and it won't let me edit anything.
This is my first flashing job and I have been searching for days trying to solve this issue. Any help will be greatly appreciated.
I think what you said about the user name might help me, but I don't know where to go to change that or what to change it to.
I'm currently on Wicked Sensations if that helps at all.
Thanks!
Edit: Here's the link to the guide I used: http: dashdash z4cellforums dot webs dot com/apps/forums/topics/show/8667356
U get mms to work yet if not I'll help u pm me
Sent from my SPH-L900 using Tapatalk 2