[primoc]method to gain your nv keys for backup - HTC One V

k guys, this thread is coming about after respectfully moving the discussion from kalaker's s-off thread.
i've been looking for a while about how to back up my nv keys for data, just in case anything happens to my one v. this is thanks to New Optimus (for steps 8-10) and jmztaylor, who informed me the open sesame door trick works. I AM NOT RESPONSIBLE FOR HOW SOME MAY USE THIS. open sesame door trick has the potential to screw your phone up if you dont do it right, or delete an nv item.
CDMA ONLY (i dont think gsm works the same way anyway)
YOU ARE NOT MODIFYING ANYTHING. All you are doing is backing up your AAA and HA keys. they are used to identify and register your device's data on the VM network. IF YOU MODIFY ANYTHING, ITS YOUR FAULT IF YOU SCREW IT UP.
step 1:
download and install qpst. im not linking to the file, you should be able to find it easily enough by googling it.
step 2:
open up qpst configuration, and let it sit in the background for a minute. install the htc diag drivers for one v from here: http://www.htc.com/www/support/
look for the one v, and download and install the HTC Sync program which will install all the drivers you need.
step 3:
close out of htc sync once its installed, its an annoying program anyway. connect your phone, make sure adb debugging is enabled in developer options in settings. open the dialer, type in ##3424# (##diag#) and a screen will come up that says on and off, with select at the bottom. click on, then select, and it will ask you for your msl code.
note: your msl code can be obtained by a app in market called MSL Reader, you need root for this. follow the prompts in the app, its easy enough to do.
step 4:
after entering your msl code and entering diag mode, go back into qpst configuration. click on "add new port" toward the bottom right, and make sure when the window opens "COMx- USB/QC Diagnostic" is selected and click ok. qpst configuration should now recognize your phone as SURF-MSM7830. if it doesnt, update your version of qpst.
step 5:
in qpst configuration, click on "Start Clients- EFS Explorer". make sure you put your msl in the box that says spc, and click ok. a please wait window will pop up, it will only take a few seconds.
from New Optimus's post: http://forum.xda-developers.com/showpost.php?p=29951978&postcount=796
8. Once the phone reads completely make a new directory named (open sesame door) without the parentheses and all lower case
9. After making the new folder locate abd.exe from the android sdk install folder and press: start, run and type cmd then press enter you will get a command prompt window that opens up navigate to the android sdk directory and type; adb reboot, the phone should then reboot if you’ve done as you were supposed to.
10. After the phone reboots read it again with QPST EFS Explorer which still should be opened, you will notice that the red no access circle has been removed from the nvm directory so expand it and go to the num directory,
Click to expand...
Click to collapse
(note: edited New Optimus's post to remove links to esn/meid changing which is frowned upon in the forums, also i already had the open sesame door folder created upon making the pictures.)
left click and drag 465, 466, 1192 and 1194 to your desktop.
keep 465,466, 1192 and 1194 in a safe spot, they are how you have data on your phone. if something happens to your HOV and those are gone, good luck getting data back.

Quick noob question, do these files get generated by the carrier when you activate the phone?

whoshotjr2006
Do AKEY, SSDA and SSDB files need to be saved? if so, where are the files?

reachforthesky said:
whoshotjr2006
I know the content of file 0 and 1943. Could you briefly describe the contents of these 4 files (465, 466, 1192 and 1194)? Which one is HA, AAA, SSDA and SSDB? Are there any more important NVM files need to be saved?
Click to expand...
Click to collapse
465^"Data Services Mobile IP General User Profile"^"Data*"
466^"Data Services Mobile IP Shared Secret User Profile"^"Data*"
1192 is the AAA secret
1194^"HDR Access Network Stream CHAP Authentication User ID"^"Data*"
The reference is here: http://forum.xda-developers.com/showthread.php?t=1954029

Got sooo excited when I saw this. Used to switch firmware's on my optimus v with the firmware of the optimus s, and use optimus s roms. Had all of my nv data and everything else backed up. Forgot you have to have be on an aosp rom for this to work because you need a port. -_- I don't have a stock backup and right now I'm tethering, so it'd take awhile to download a stock backup. Guess I'll have to wait a week or so.

nvm, I found a backup. I tried it out, and i got to the qpst efs explorer. I did the open sesame door, and it unlocked the nvs, but I only had a couple of the files from the list. I did not have 465 or 466. Also, I had an issue when I tried to recognize the phone. It did recognize the phone in diag mode with the port, but not as surfmsm7830. I have the most updated version of qpst.

I'll have to check what version I'm running of qpst, I know its close to the newest if not the newest. It wouldn't recognize my phone correctly until I had a new enough copy.
Also the first time I tried the open sesame door trick, I too had the limited nv items. I used the ruu to go back to stock, and once I did that the open sesame folder dir survived the ruu and unlocked the rest of the nv items.
Hope that helps.
Sent from my One V using xda app-developers app

What version of QPST are you using for this? I get an error "Online connection failure: Unspecified error" when trying to connect.
I think my phone isn't getting read properly by QPST because under phone it says "(unknown)" even though the other fields fill in correctly.
CDMA Workshop reads my phone no problem, but this thing no luck.
EDIT: Found an updated build and it displays the specified info under phone. Not sure what the lowest working version is, but v2.7 build 323 will not read it, build 366 will though.

Related

Internet now working on Sprint Touch w/new ROM

I hope starting a new thread is the way to go on this...
I just updated to the new Sprint Official WM 6.1 ROM, and immediately could not connect to the internet.
I tried running the IOTA automatic data provisioning update (Start->Settings->Personal Tab->Phone->Services Tab->Internet->Get Settings->Start) and it failed repeatedly with a 1012 error. As was posted by others, I noticed that there was a "CurrentUserName" setting in Start->Settings->System->Device Information that had [email protected] where I would have expected to see [email protected] instead. (that would have been my Sprint provided email address) The first thing I tried was to go to the phone dialpad and dial ##3282# to start the EPST program and check my data provisioning settings (this requires that you know your MSL - Master Service Lock Code - if you are going to edit). UserName was blank there, so I tapped the blank setting and held down until an "EDIT" menu popped up. I tapped "EDIT" and changed it to the previously correct [email protected] value. After saving changes and another reboot, I still could not connect to the internet, run IOTA, and the "CurrentUserName" was still wrong. After searching through various settings looking for a way to change the currentusername, I installed PHM Registry Editor and searched again.
In HKEY_LOCAL_MACHINE/Software/OEM/DIM there is a key "EnableCurrentUserName" and it was set to 1. I edited that and set it to 0, exited the Registry Editor, and restarted the device by holding the power button until it warned me about shutting down. I tapped "Yes" and it shut down and restarted. The "CurrentUserName" setting no longer appeared in the Device Information page. At this point I was able to run IOTA successfully and imediately after that I could use the internet and other data services.
I hope this helps someone. Sorry to be so long winded, but I was trying to answer as many "How? Where?" questions as I could as I went.
Briefly:
1. Using WM Registry Editor software, change HKLM/Software/OEM/DIM/"EnableCurrentUserName" from 1 to 0 then save changes and exit editor.
2. Dial ##3282# and edit UserName to correct [email protected] address. Device will reboot when you exit and save changes.
3. Run IOTA by going to Start->Settings->Personal Tab->Phone->Services Tab->Internet->Get Settings->Start
Thanks to all the others here who have helped me along the way,
Scruffy
anyone else know if this works?
i just flashed the new sprint rom and now the data connection does not work.. no internet.. ? I was just wondering if anyone else had this problem and does this fix it?
After some more time with this ROM installed I have found that it is not neccessary to change the ##DATA# (##3282#) user name settings. Just change the HKEY_LOCAL_MACHINE/Software/OEM/DIM/EnableCurrentUserName value to zero, save changes and then you can run the IOTA update successfully (or at least I can).
I have found that I need to do this every time I do a hard reset of my device. I hope this helps someone else.
Scruffy
this did not work for me.. I Get error code 67
i started a new thread here........ http://forum.xda-developers.com/showthread.php?t=415666
so maybe someone will chime in... the ##3282# does not work for me at all.. you hit that on the dial pad and nothing happens... so i can not access that menu...
For now i went back to a OEM rom and called sprint and they got me working by doing a MASTER RESET... also ##3282# works on OEM roms but i think the file EPST.EXE is missing from the CUSTOM roms... any input would be great..
Not working for me.
i'm sure a master reset from within #778 or whatever would work but i don't feel like
putting in the data again.
Scruffy said:
I hope starting a new thread is the way to go on this...
I just updated to the new Sprint Official WM 6.1 ROM, and immediately could not connect to the internet.
I tried running the IOTA automatic data provisioning update (Start->Settings->Personal Tab->Phone->Services Tab->Internet->Get Settings->Start) and it failed repeatedly with a 1012 error. As was posted by others, I noticed that there was a "CurrentUserName" setting in Start->Settings->System->Device Information that had [email protected] where I would have expected to see [email protected] instead. (that would have been my Sprint provided email address) The first thing I tried was to go to the phone dialpad and dial ##3282# to start the EPST program and check my data provisioning settings (this requires that you know your MSL - Master Service Lock Code - if you are going to edit). UserName was blank there, so I tapped the blank setting and held down until an "EDIT" menu popped up. I tapped "EDIT" and changed it to the previously correct [email protected] value. After saving changes and another reboot, I still could not connect to the internet, run IOTA, and the "CurrentUserName" was still wrong. After searching through various settings looking for a way to change the currentusername, I installed PHM Registry Editor and searched again.
In HKEY_LOCAL_MACHINE/Software/OEM/DIM there is a key "EnableCurrentUserName" and it was set to 1. I edited that and set it to 0, exited the Registry Editor, and restarted the device by holding the power button until it warned me about shutting down. I tapped "Yes" and it shut down and restarted. The "CurrentUserName" setting no longer appeared in the Device Information page. At this point I was able to run IOTA successfully and imediately after that I could use the internet and other data services.
I hope this helps someone. Sorry to be so long winded, but I was trying to answer as many "How? Where?" questions as I could as I went.
Briefly:
1. Using WM Registry Editor software, change HKLM/Software/OEM/DIM/"EnableCurrentUserName" from 1 to 0 then save changes and exit editor.
2. Dial ##3282# and edit UserName to correct [email protected] address. Device will reboot when you exit and save changes.
3. Run IOTA by going to Start->Settings->Personal Tab->Phone->Services Tab->Internet->Get Settings->Start
Thanks to all the others here who have helped me along the way,
Scruffy
Click to expand...
Click to collapse
how do i find [email protected] where would that be?
Scruffy said:
3. Run IOTA by going to Start->Settings->Personal Tab->Phone->Services Tab->Internet->Get Settings->Start
Click to expand...
Click to collapse
I just upgraded to NFSFAN's latest ROM, everything went well but I can not get my internet to work. The one thing I did notice is under the services tab, internet is not an option. I loaded the dcd sprint carrier 20090714 cab am I missing something else?
Thank you for any help you can provide.
Update:
Well I went back and flashed to the HTC 6.1 rom, then back to the 6.5 rom. That fixed my internet issues, but that option is still missing for me. Then after all of that my MSID was really screwed up. Everything seems to be good now.
please please help me clear the instructions
i have a horribly vague idea of what i need to do, to get the internet working again.
i already got the IOTA_1120 zip file in my cell but when i even try to open it up it says that there is no application that is related to to it, so i must start this application and open up the file from within. How do i do this? am I even doing what im supposed to??
Where exactly is HKEY_LOCAL_MACHINE/Software/OEM/DIM and how do i get there???
if you could please instruct me with simple stieps i would greatly appreciate it, simple being like start>program files> etc.
please help i am one step away from smashing this damm cell into the wall
electricfeel_2012 said:
i have a horribly vague idea of what i need to do, to get the internet working again.
i already got the IOTA_1120 zip file in my cell but when i even try to open it up it says that there is no application that is related to to it, so i must start this application and open up the file from within. How do i do this? am I even doing what im supposed to??
Where exactly is HKEY_LOCAL_MACHINE/Software/OEM/DIM and how do i get there???
if you could please instruct me with simple stieps i would greatly appreciate it, simple being like start>program files> etc.
please help i am one step away from smashing this damm cell into the wall
Click to expand...
Click to collapse
The path of HKEY.... is actually on the registry. You need to use a registry editor (like PHM Regedit) to make the necessary changes to the registry. I would recommend you to re-read those instructions as they will not get any easier than that. Alternatively, if you are on Sprint's official rom and have absolutely no clue what you are doing, you can always call them and ask them for help.
As far as the IOTA zip file, if you cannot open it, that means that you do not have any program to extract from compressed files in your device. Your best bet is to transfer the file to the desktop and extract it there. Once you are done, place the extracted contents back in the device and run it in there.

Dell Venue Pro Registry Editor

Thanks to Dave Amenta, i got around to the Registry Editor in the Dell Venue Pro. I am able to read values, but not able to set them..May be i am doing something wrong. I am giving it to the community to crack it open.
Here is what you need to do to get to the registry editor:
1. Go to the EM App in the DVP.
2. Choose RD Test. It will prompt for a textbox to enter something (its basically asking for password). Enter *#6336# . Now voila, you are in MFC Test.
3. Scroll to the bottom of the list and choose About EM.
4. Now it will say sorry..bla,.bla.. It will also have a textbox for another password. Enter *#734#
5. Voila you are in Registry Editor.
6.To read a value, go to the 'Path' prompt. While in, choose L M/C R/C U, etc..they are nothing but HKEY_LOCAL_MACHINE\HKEY_CURRENT_USER,etc.. Then enter the remaining path name. In the Key field, enter the key you want to query. In the Type, press the down arrow and choose the type. Now hit the 'Get' button on top, you will see the result (If you enter all right). If you want to set data, i think you enter the value in Data field and hit set. But, so far no luck. Iam still researching.
IMPORTANT: DO not do this as this is super advanced user mode. You might end up brick'ng ur DVP if you do not know what your are doing.
This sounds awfully similar to the LG registry editor on the phone. I do not have a DVP in my possession, but I know a friend who does. I shall try this and let you know how it goes. (BTW, Dell Venue Pro works on Wind and Mobilicity in Canada)
I am trying to do a AT Hyperterminal command to unlock the phone.,Will see how it goes.
notebookgrail said:
Thanks to Dave Amenta, i got around to the Registry Editor in the Dell Venue Pro. I am able to read values, but not able to set them..May be i am doing something wrong. I am giving it to the community to crack it open.
Here is what you need to do to get to the registry editor:
1. Go to the EM App in the DVP.
2. Choose RD Test. It will prompt for a textbox to enter something (its basically asking for password). Enter *#6336# . Now voila, you are in MFC Test.
3. Scroll to the bottom of the list and choose About EM.
4. Now it will say sorry..bla,.bla.. It will also have a textbox for another password. Enter *#734#
5. Voila you are in Registry Editor.
6.To read a value, go to the 'Path' prompt. While in, choose L M/C R/C U, etc..they are nothing but HKEY_LOCAL_MACHINE\HKEY_CURRENT_USER,etc.. Then enter the remaining path name. In the Key field, enter the key you want to query. In the Type, press the down arrow and choose the type. Now hit the 'Get' button on top, you will see the result (If you enter all right). If you want to set data, i think you enter the value in Data field and hit set. But, so far no luck. Iam still researching.
IMPORTANT: DO not do this as this is super advanced user mode. You might end up brick'ng ur DVP if you do not know what your are doing.
Click to expand...
Click to collapse
It looks like the button isn't wired up to perform the SET command - the event handler is there, the button is there, but clicking it even without entering any data should return "1", but it's not doing anything...
What do you mean by AT unlock? What commands are you going to send to the modem? Do you have the modem drivers? If not, take a look here: http://forum.xda-developers.com/showthread.php?t=929468
kltye said:
It looks like the button isn't wired up to perform the SET command - the event handler is there, the button is there, but clicking it even without entering any data should return "1", but it's not doing anything...
What do you mean by AT unlock? What commands are you going to send to the modem? Do you have the modem drivers? If not, take a look here: http://forum.xda-developers.com/showthread.php?t=929468
Click to expand...
Click to collapse
When i get home, i will post the Registry Set Command CS code.
AT command - Yes, the command to the modem. And yes, i used the HTC Modem driver you linked for the DVP. I am able to query the modem from the modem properties - but i can't enter any commands in that properties window. So i am going to do a hyperterminal to send AT commands for SIM Locking and try to unlock it.
I also came across a test called 'SIM Lock' in Protocol, which returns what is its locked to.
notebookgrail said:
When i get home, i will post the Registry Set Command CS code.
AT command - Yes, the command to the modem. And yes, i used the HTC Modem driver you linked for the DVP. I am able to query the modem from the modem properties - but i can't enter any commands in that properties window. So i am going to do a hyperterminal to send AT commands for SIM Locking and try to unlock it.
I also came across a test called 'SIM Lock' in Protocol, which returns what is its locked to.
Click to expand...
Click to collapse
The registry set command is:
IEmToCom.sync("EM:REGISTRY_SET:" + <path> + "," + <key> + "," + <data type, e.g. DWORD> + "," + <data> + "," + <path_type expressed as int> + ";", 1, false);
I was working with Dave over the weekend, but it looks like whatever value we insert is not being accepted - quite possibly because Dell hasn't implemented the interface yet.
this should surprise me and yet...
THIS IS DELL!
kltye said:
What do you mean by AT unlock? What commands are you going to send to the modem? Do you have the modem drivers? If not, take a look here: http://forum.xda-developers.com/showthread.php?t=929468
Click to expand...
Click to collapse
For the AT unlock, go to protocol, then TMO, then AT Command - Here you can pass various AT Commands. Unfortunately, we need the Password to reset any setting here. The password is 8 char long. And the DVP is 'ph-net pin' locked.
damn.....i think it probably means that we need to get the modem rom somehow in order to figure out how to generate the unlock PIN
I'm probably missing something really obvious here, but what does SIM unlocking have to do with registry write access?
kltye said:
I'm probably missing something really obvious here, but what does SIM unlocking have to do with registry write access?
Click to expand...
Click to collapse
It was a off topic discussion. I should have started a new thread for it. My mistake.
Is there anyone volunteering to reset their phone (cold boot)? I think i might have found the way to edit the registry. There are 2 modes for the EM App. One is Driver and another is socket. Not sure which one is by default. But i know how to change them. It requires a reset of the phone (cold boot) to take effect. I have too much of data on my phone to try it and reload everything. I can PM them the details and see if they are able to edit the registry.
notebookgrail said:
Is there anyone volunteering to reset their phone (cold boot)? I think i might have found the way to edit the registry. There are 2 modes for the EM App. One is Driver and another is socket. Not sure which one is by default. But i know how to change them. It requires a reset of the phone (cold boot) to take effect. I have too much of data on my phone to try it and reload everything. I can PM them the details and see if they are able to edit the registry.
Click to expand...
Click to collapse
You could try calling new EMToCom() rather than EMToComByDriver() when you initialize the connection, and see if that works. I've tried it and it seems that it fails to execute the command, with the debug window printing:
A first chance exception of type 'System.Runtime.InteropServices.COMException' occurred in EM.dll
calling COM receive error(socket) : 0xffffffff
I tried calling the turn on LED command via my flashlight app that works fine with the driver connection, but I'm getting the same exception when I connect via socket. Do you know if there's a special way to send commands if you connect via socket?
notebookgrail said:
Is there anyone volunteering to reset their phone (cold boot)? I think i might have found the way to edit the registry. There are 2 modes for the EM App. One is Driver and another is socket. Not sure which one is by default. But i know how to change them. It requires a reset of the phone (cold boot) to take effect. I have too much of data on my phone to try it and reload everything. I can PM them the details and see if they are able to edit the registry.
Click to expand...
Click to collapse
I'll be a guinea pig
domineus said:
I'll be a guinea pig
Click to expand...
Click to collapse
Sent you a PM.
Shoot me the details and I may be able to help out sometime this week.
it didn't work for me...doubt it will work for anyone else =/
domineus said:
it didn't work for me...doubt it will work for anyone else =/
Click to expand...
Click to collapse
Was it doing the same blank result box? Any difference did you notice with either the Driver or Socket option? - i mean not just registry editor, but overall.
blank result no changes =/
I hope we all find some progress on this because I believe that this is what is holding us back from a lot of customization on this phone....

How to read HA/AAA Keys on Galaxy S3??

I need a way to read my the HA/AAA Secret keys off my Sprint Galaxy S3..
I tried (DFS, CDMA WorkShop, QPST,QXDM, LGPNST) Non worked at reading the Keys.. they would read the other Info fine but not the HA/AAA.
I need to use my phone on Ting Mobile but I need to save the HA/AAA Keys first.
Thank you.
http://forum.xda-developers.com/showthread.php?p=48747260
gedster314 said:
Try logcat.
Put your phone in developer mode.
Connect to the computer
Run; adb logcat > log.txt
On your phone dial ##data#
Enter SPC/MSl
Select edit
Touch HA password (don't change it), exit it
Touch AAA password (don't change it), exit it.
ctrl c to kill adb
open log.txt and scroll through the long list for ha and aaa passwords.
I know kind of a pain to find but that's how I got them on my E4GT and Nexus S 4G.
Somewhere there is thread about doing this on XDA but at the moment I can not find it.
Click to expand...
Click to collapse
------------------------------------------------------------------------
any help reading this? i have the log listed below. how do you convert the symbols for the aaa keys? what is it actually called and then what does it need to be converted to? thanks
I/Dataprofile_Edit( 943): MN_AAA_length :16
E/SharedPreferencesImpl( 943): Couldn't create directory for SharedPreferences file /data/data/com.android.hiddenmenu/shared_prefs/com.android.hiddenmenu_preferences.xml
I/Dataprofile_Edit( 943): aaa_pw:/￲4ルCᄄHᅧᄌpᄅᄅ
ハ3
---------------------------------------------------------------------------
update: I converted it using notepad++ from ascII to hex but it is returning to many characters? it gave me 2 - 32 character lines and 1- 5 character line
jdrogers84 said:
------------------------------------------------------------------------
any help reading this? i have the log listed below. how do you convert the symbols for the aaa keys? what is it actually called and then what does it need to be converted to? thanks
I/Dataprofile_Edit( 943): MN_AAA_length :16
E/SharedPreferencesImpl( 943): Couldn't create directory for SharedPreferences file /data/data/com.android.hiddenmenu/shared_prefs/com.android.hiddenmenu_preferences.xml
I/Dataprofile_Edit( 943): aaa_pw:/￲4ルCᄄHᅧᄌpᄅᄅ
ハ3
---------------------------------------------------------------------------
update: I converted it using notepad++ from ascII to hex but it is returning to many characters? it gave me 2 - 32 character lines and 1- 5 character line
Click to expand...
Click to collapse
Any luck?
I believe these keys are created and/or registered when the phone is initially paired with the account. Removing the phone/esn from the account and adding it back on will fix 3g/4g in the case of a board swap, but that doesn't really help your particular situation. I have swapped a motherboard successfully before this twice, without using the logcat method, but I can't for the life of me recall how. I'd prefer figuring out how to do it manually again, its bugging the crap out of me. That, and just for the sake of learning.
Edit: I got it. It's a pain in the ass now because of updates since then. I was just able to retrieve NV item 1192 using the EFS tab in DFS while running the LJ7 rom with the LG2 modem. NV reader will still say access denied, but once you read the EFS, the "nvm" folder isn't red and locked like it is on newer roms and modems. I remember the LJ7+LG2 combo was necessary to get the spc/msl a while back as well.
nvan7891 said:
Any luck?
I believe these keys are created and/or registered when the phone is initially paired with the account. Removing the phone/esn from the account and adding it back on will fix 3g/4g in the case of a board swap, but that doesn't really help your particular situation. I have swapped a motherboard successfully before this twice, without using the logcat method, but I can't for the life of me recall how. I'd prefer figuring out how to do it manually again, its bugging the crap out of me. That, and just for the sake of learning.
Edit: I got it. It's a pain in the ass now because of updates since then. I was just able to retrieve NV item 1192 using the EFS tab in DFS while running the LJ7 rom with the LG2 modem. NV reader will still say access denied, but once you read the EFS, the "nvm" folder isn't red and locked like it is on newer roms and modems. I remember the LJ7+LG2 combo was necessary to get the spc/msl a while back as well.
Click to expand...
Click to collapse
@nvan7891 Could you help me to get AAA/HA password? I'm stuck at 1xRTT and nv_item was block. I'n in full stock rom NJ2. I was not able to downgrade to other stock rom except NDC or ND8

[HOW-TO] Flash Sprint Galaxy S3 to metropcs with 3G speeds..

Hi there every one I have been flashing phones to metro PCS for a while now But this is my first How to. I'm going to show you how to flash your sprint/Verizon Galaxy S3 to metropcs or cricket, with 3g data working.
What you'll need:
DFS demo mode will do. But if you can, make a small donation.
Samsung drivers. Just download keys from http://www.samsung.com/us/kies/
metropcs Prl 3032 from here http://metroprl.blogspot.com/
WARNING!! YOUR PHONE MUST BE IN METROPCS INVENTORY IN ORDER TO GET SERVICE, YOU CAN FLASH YOUR PHONE ALL DAY BUT IF YOU DO NOT HAVE YOUR ESN IN METROPCS DATA BASE THEN YOU WON'T GET SERVICE NO MATER WHAT YOU DO. UNDERSTOOD?
One of the first things you'll need is to get your phones MSL number, this is the number you'll need to get access to your phones secret menu. The method i am about to show you was discovered by billard412 this post, http://metroprl.blogspot.com/ if you have a verizon your MSL is 000000
Now lets get that MSl (you must be rooted) download terminal emulator or the, Get my msl app from market. Now on your dial pad type ##3282# now you'll have a screen with vie or edit click on edit, now open terminal emulator or the app, if you are using terminal type: su then enter---now type-- getprop ril.MSL then enter you might get a nothing back or you might get the number.
ps: if you are on JL13 you won't be able to get it downgrade your base-band.
if you didn't get nothing back go the the screen that asks for your msl and type any 6 digit number when it sais wrong code go back to the terminal and re type the comand and wala. If you use the app same steps just whith the app.
Now that you have your MSL open DFS, now go to your phones dial pad and dial *#7284# and select qualcome USB Setting, now select the last option DM+MODEM+ADB and plug in your usb to your pc. I normally open device manager to see what port my phone is, I sugest you do the same.
Now that you know what port your phone is on DFS click on the port tab and select your port now find the MSL or SPC space and enter your MSL then hit the play button to the left, now that your phone is unlocked we are ready to make changes.look at my images so you can compare.
Click on the programming Tab
Now hit the read button and change the MIN number MIN D , SPC, and MND number for the one provided by metropcs.
Now look to the right is the PRL section click on the load button look for the prl the click on the write button, now on the reset button and your phone will reset, I like to do it one step at a time. Now test out the PRL by going to settings about. or just dial *611 from phone and you should get metropcs. If you didn't, make sure that the mid has changed.
Onece you have that Down re hook up your phone to DFS like before click on te program tab and now on the Data tab. Change settings to match my pics and to get your password use this http://www.whiterabbit.org/android/ to calculate your metropcs MSL just type in your ESN . Once you have it hit write.
Now click on the mobile ip tab and hit read change setting to match pic in the AAA and the HA put in your metropcs MSL ,then hit both of the write buttons, and then the reset button, wala your almost done.
next step set data setting within the phone to stream youtube, Pandora and other multimedia apps that need streaming with in cricket or metropcs
dial ##data# press on edit and enter the spc code you wrote down press on others press on multimedia rtsp proxy port to 0 then press on back.
MMS: follow this guide by Max_pain: http://forum.xda-developers.com/showthread.php?t=1875760 you will need a file from there make sure to thank him.
This is the biggest hurdle, which very few people have successfully gotten to work. It is not a perfect solution but it works very well for us.
Download the following Zip file (not flashable):
Follow these instructions carefully:
1. Download and install Titanium Backup. You will also need the PRO version, so you'll need to shell out a couple of bucks if you don't already own it. It's well worth it anyways.
2. Download and install APN Backup & Restore from the Market.
3. Open APN Backup & Restore, ignore the ICS warning, and click on "Backup APNs". Exit out of APN Backup & Restore.
4. Place this folder in your SD Card.
5. Copy MetroPCS_MMS_Send_APN.xml from this folder to the APN Backup folder in the root of the SD Card.
6. Open Titanium Backup, go under Backup/Restore, and find APN Backup & Restore, press and select "Make system app."
7. Open APN Backup & Restore, ignore the ICS warning, press menu, and disable ICS check. Exit APN Backup & Restore.
8. Open APN Backup & Restore again, and now there should not be an ICS warning!
9. Click on "Delete APNs."
10. Click on Restore APNs and select "MetroPCS_MMS_Send.APN.xml".
10a. Press Ok after selecting the above.
10b. Press No when you get the message asking Yes or No.
11. Using Root Explorer or a similar app, copy the SecMMS.apk file from this folder to your /system/app/ folder.
11a. Make sure you are in R/W mode and click Yes to overwrite existing file if you get the message.
11b. Make sure to delete/overwrite any existing SecMms.apk from the /system/app directory. You should only have one SecMms.apk file.
11c. Make sure to delete any SecMms.odex if you're on the stock or an odexed rom.
12. Set permissions to RW-R--R--
13. Reboot.
14. Open the Messaging app and under Settings make sure to check (enable) "SMS split".
Help
kipster3001 said:
Hi there every one I have been flashing phones to metro PCS for a while now But this is my first How to. I'm going to show you how to flash your sprint/Verizon Galaxy S3 to metropcs or cricket, with 3g data working.
What you'll need:
DFS demo mode will do. But if you can, make a small donation.
Samsung drivers. Just download keys from http://www.samsung.com/us/kies/
metropcs Prl 3032 from here http://metroprl.blogspot.com/
WARNING!! YOUR PHONE MUST BE IN METROPCS INVENTORY IN ORDER TO GET SERVICE, YOU CAN FLASH YOUR PHONE ALL DAY BUT IF YOU DO NOT HAVE YOUR ESN IN METROPCS DATA BASE THEN YOU WON'T GET SERVICE NO MATER WHAT YOU DO. UNDERSTOOD?
One of the first things you'll need is to get your phones MSL number, this is the number you'll need to get access to your phones secret menu. The method i am about to show you was discovered by billard412 this post, http://metroprl.blogspot.com/ if you have a verizon your MSL is 000000
Now lets get that MSl (you must be rooted) download terminal emulator or the, Get my msl app from market. Now on your dial pad type ##3282# now you'll have a screen with vie or edit click on edit, now open terminal emulator or the app, if you are using terminal type: su then enter---now type-- getprop ril.MSL then enter you might get a nothing back or you might get the number.
ps: if you are on JL13 you won't be able to get it downgrade your base-band.
if you didn't get nothing back go the the screen that asks for your msl and type any 6 digit number when it sais wrong code go back to the terminal and re type the comand and wala. If you use the app same steps just whith the app.
Now that you have your MSL open DFS, now go to your phones dial pad and dial *#7284# and select qualcome USB Setting, now select the last option DM+MODEM+ADB and plug in your usb to your pc. I normally open device manager to see what port my phone is, I sugest you do the same.
Now that you know what port your phone is on DFS click on the port tab and select your port now find the MSL or SPC space and enter your MSL then hit the play button to the left, now that your phone is unlocked we are ready to make changes.look at my images so you can compare.
Click on the programming Tab
Now hit the read button and change the MIN number MIN D , SPC, and MND number for the one provided by metropcs.
Now look to the right is the PRL section click on the load button look for the prl the click on the write button, now on the reset button and your phone will reset, I like to do it one step at a time. Now test out the PRL by going to settings about. or just dial *611 from phone and you should get metropcs. If you didn't, make sure that the mid has changed.
Onece you have that Down re hook up your phone to DFS like before click on te program tab and now on the Data tab. Change settings to match my pics and to get your password use this http://www.whiterabbit.org/android/ to calculate your metropcs MSL just type in your ESN . Once you have it hit write.
Now click on the mobile ip tab and hit read change setting to match pic in the AAA and the HA put in your metropcs MSL ,then hit both of the write buttons, and then the reset button, wala your almost done.
next step set data setting within the phone to stream youtube, Pandora and other multimedia apps that need streaming with in cricket or metropcs
dial ##data# press on edit and enter the spc code you wrote down press on others press on multimedia rtsp proxy port to 0 then press on back.
MMS: follow this guide by Max_pain: http://forum.xda-developers.com/showthread.php?t=1875760 you will need a file from there make sure to thank him.
This is the biggest hurdle, which very few people have successfully gotten to work. It is not a perfect solution but it works very well for us.
Download the following Zip file (not flashable):
Follow these instructions carefully:
1. Download and install Titanium Backup. You will also need the PRO version, so you'll need to shell out a couple of bucks if you don't already own it. It's well worth it anyways.
2. Download and install APN Backup & Restore from the Market.
3. Open APN Backup & Restore, ignore the ICS warning, and click on "Backup APNs". Exit out of APN Backup & Restore.
4. Place this folder in your SD Card.
5. Copy MetroPCS_MMS_Send_APN.xml from this folder to the APN Backup folder in the root of the SD Card.
6. Open Titanium Backup, go under Backup/Restore, and find APN Backup & Restore, press and select "Make system app."
7. Open APN Backup & Restore, ignore the ICS warning, press menu, and disable ICS check. Exit APN Backup & Restore.
8. Open APN Backup & Restore again, and now there should not be an ICS warning!
9. Click on "Delete APNs."
10. Click on Restore APNs and select "MetroPCS_MMS_Send.APN.xml".
10a. Press Ok after selecting the above.
10b. Press No when you get the message asking Yes or No.
11. Using Root Explorer or a similar app, copy the SecMMS.apk file from this folder to your /system/app/ folder.
11a. Make sure you are in R/W mode and click Yes to overwrite existing file if you get the message.
11b. Make sure to delete/overwrite any existing SecMms.apk from the /system/app directory. You should only have one SecMms.apk file.
11c. Make sure to delete any SecMms.odex if you're on the stock or an odexed rom.
12. Set permissions to RW-R--R--
13. Reboot.
14. Open the Messaging app and under Settings make sure to check (enable) "SMS split".
Click to expand...
Click to collapse
i tried this and dont know why my s3 keep saying Sprint and it dosent receive calls o text...
Can you please please help me if i do something wrong
Working Talk Text and Data
I literally got my talk text and data working 2 min ago. I have a Verizon Samsung Galaxy S3 that I now am using on Metro PCS.
What I did,
Step 1.
Install Samsung Drivers
Install Kies (To update: I was on 4.1.1 now I'm running 4.1.2)
Step 2.
Root Samsung Galaxy S3. I used Casual one click (It's literally one click)
- Google search key phrase 'root verizon samsung galaxy s3 casual one click'
Step 3.
Now you should have SuperSU
Download
1. APN Manager- I have APN Manager Pro
2. Titanium Backup
Step 4.
I used Titanium Backup to uninstall all the Verizon bloatware, and overall junk I don't use. With removing bloatware click on backup/restore then select and hold APN Manager Pro (or whatever) and select convert to system app.
Step 5.
If not updated to 4.1.2, do so. - You'll need to have the ability to add an APN, only possible with 4.1.2.
I bypassed setting the language etc. with the four corners technique. Google Keyword: 'android four corners trick'
Step 6.
I went out and activated a MetroPCS plan, and got a simcard. At this point I could make and receive calls and text, but no data or mms.
Step 7.
From APN Manager Pro I clicked insert new APN. this can also be done from settings -> More settings -> Mobile Networks -> Access Point Names -> More options soft key: Add new access point. (Updating from phone settings in my opinion is simpler)
Step 8.
New APN
Name: "fast.t-mobile.com" (You can put whatever you want)(without quotes)
APN : "fast.t-mobile.com" (without quotes)
MMSC: "htetep:mms.msg.eng.t-mobile.com/mms/wapenc" (without quotes.Sorry i think you understand what i mean, please put in the letters and not htetep)
MCC: 310
MNC: 260
make sure APN is enabled is checked
Everything else has 'Not set', my APN protocol also says IPv4
Step 9.
Close settings completely
Go back to settings --> Access Point Names to make sure it is still there. Select it if not selected already.
Step 10.
Power off
pull out battery and sim card
wait 10 sec
power on
Step 11.
Enjoy data and mms.
Thank you guys for the instructions, I think I'm about to do the same for my Verizon S3.
But before I do, can you guys post what kind of speed you're getting on the new Metro(GSM)/T-Mobile 3G network?
I remember MetroPCS original 3G on CDMA was horrible and I just want to make sure the Verizon S3 won't suffer the same faith.
Thanks again in advance for you input!
Has anyone tried this with either JB? My phone is on the 4.3 update and I was wondering if it will work.
trinibmw said:
I literally got my talk text and data working 2 min ago. I have a Verizon Samsung Galaxy S3 that I now am using on Metro PCS.
Click to expand...
Click to collapse
Your post is very promising to me since I'm looking to do the exact same thing and not looking forward to the complicated process detailed in the OP. I have a few clarifying questions I hope you don't mind answering for me:
1) Are you limited to 2G and 3G only, or are you able to have 4G/LTE connections?
2) Sorry to oversimplify your method, but boiled down, it sounds like you accomplished exactly what I want to do more or less by simply rooting, debloating, and changing the APN settings. Is this accurate? (Yes I've read your post all the way through five times+, I get there are certain important details to follow, but is my summary correct?)
3) I get the feeling you won't be able to answer this one, but worth a shot: Do you have any idea if this will work if the Verizon S3 came with KitKat (4.4.2) installed? Exhaustive research tells me it's impossible to downgrade android versions from this version.
Thanks for sharing this, and hopefully any answers you can give me. I'll be updating my post on whether or not it works for me when I try later
You are correct, root + debloat, change APN settings. When I had the phone I was limited to 3g speeds. I was still able to use maps, and surf without pulling my hair out. Although, most everywhere I went had wifi so I just ended up using that. As far as number 3, I am not sure. I no longer have the phone. Does the APN show up in network settings now? Could you just try the settings above? You could check if casual one click supports 4.4.2. If it does, you could give it a shot. I didn't have to use it, but if anything goes wrong use ODIN to restore your phone.
My sprint Samsung s3 has no card slot, and I'm with metro, can I use this method and get my metro plan on my s3??? Please need help!!!

Stopping Hands Free Activation!

My friend Jeremy helped me with getting rid of the "Hands Free Activation" pop-up and I thought I would share it. It especially comes in handy when you are flashed to another carrier. If you are on one of the new custom ZVB Roms you probably don't have to worry about it. All you have to do is:
1) Get a Root File Browser .... I like Rom Tool Box
2) Go to "System" folder
3) Go to "App" folder .... (not Apps)
4) Scroll down and find "OmaDmclient.apk" and rename it to "OmaDmclient.bak"
5) Reboot and you should not get that aggravating ass pop up any more
:silly::laugh:
I hope I've helped someone because a lot of people have damn sure helped me!
Just Showing Off
Since this thread is my posting I wanted to show off my Speedtest results of 3g being "legally" flashed to Page Plus
http://i43.tinypic.com/ezg6l3.jpg
I could use some help through this process
devo3d said:
Since this thread is my posting I wanted to show off my Speedtest results of 3g being "legally" flashed to Page Plus
Honestly, I'd like to start with getting any data (non-wifi) working on this phone...
What I have tools wise? CDMA Workshop
LGNPST (not working) frustrated as heck about this
My LS970 - updated to Page Plus PRL and making and recieving calls...
Can someone point me in the right direction?
Click to expand...
Click to collapse
eagleveteran said:
devo3d said:
Since this thread is my posting I wanted to show off my Speedtest results of 3g being "legally" flashed to Page Plus
Honestly, I'd like to start with getting any data (non-wifi) working on this phone...
What I have tools wise? CDMA Workshop
LGNPST (not working) frustrated as heck about this
My LS970 - updated to Page Plus PRL and making and recieving calls...
Can someone point me in the right direction?
Click to expand...
Click to collapse
have you try DFS Tools? I always use this tools flashing from sprint to smartfren (Indonesian provider)
Click to expand...
Click to collapse
eagleveteran said:
devo3d said:
Since this thread is my posting I wanted to show off my Speedtest results of 3g being "legally" flashed to Page Plus
Honestly, I'd like to start with getting any data (non-wifi) working on this phone...
What I have tools wise? CDMA Workshop
LGNPST (not working) frustrated as heck about this
My LS970 - updated to Page Plus PRL and making and recieving calls...
Can someone point me in the right direction?
Click to expand...
Click to collapse
I know I'm late responding to this but what service provider are you flashed to? ( if you haven't found a solution yet )
Click to expand...
Click to collapse
Page Plus
devo3d said:
eagleveteran said:
I know I'm late responding to this but what service provider are you flashed to? ( if you haven't found a solution yet )
Click to expand...
Click to collapse
Page Plus
Click to expand...
Click to collapse
Thank You
I was really annoyed with the popup.
Thanks for the solution :good::good:
lnxnubie said:
I was really annoyed with the popup.
Thanks for the solution :good::good:
Click to expand...
Click to collapse
No Probelem....The guy I use to use to flash phones figured it out....he was the only one (entire USA) that knew how to flash the OG to Verizon and get full data (3G). He quit flashing phones from where he was living so now I can't get in touch with him...he could flash any freakin phone..
eagleveteran said:
devo3d said:
Page Plus
Click to expand...
Click to collapse
With Page Plus and Straight Talk you have to have certain APN's set. Is your APN correctly set for Page Plus?
EDIT: ( I don't even know if I can post this but I sure admin will let me know...LOL)
I found this in my files, used it long ago and am not sure if it still is applicable but there may some information in it that may be able to lead you in the right direction......
PP
3G data speeds (HOW TO)
This guide is to get evdo data or 3g data speeds on phones flashed to page plus cellular this is not a beginers guide by no means this guide is assuming both spc codes are set to 000000.
things you will need:
1.A donor phone of your own that will ota program and one that you can swap the esn number to that of the target phone. I used a samsung i500
2.Target phone that you own
3.qpst and dfs 4.0.0.4 demo
4.drivers for both phones
Pre-Setup:
1.pull battery out of the target phone and LEAVE it out
2.place that esn number on the donor phone
3.Deactivate then reactivate the target phones esn number
4.OTA program the donor phone that has the swapped esn number on it.
5.Verify that 3g speeds are working on the donor phone
Phase 1:
1.Place donor phone in diagnostic mode and plug into computer
2.Open qpst configuration add the port
3.Go to start clients then efs explorer
4.Open the DMU folder and copy the 10.key file to your computer then exit qpst
Phase 2:
1.Open DFS and select the port that the phone is on
2.Send the spc you should see a device unlocked message in the log.
3.Go to the programming tab then the nam tab and read that page.
4.Read the Data tab and Mobile IP tab as well.
5.Do not close the dfs tab
6.Revert esn back to normal or smash the donor phone into a lot of pieces
Final Phase: (Non-Verizon and Sprint)
1.Power on target phone and place in diagnostic mode and plug into computer
2.Open qpst configuration add the port
3.Go to start clients then efs explorer
4.Now on the Left side of the efs explorer right click the screen go to new and directory
5.Name the directory "DMU" without the quotation marks then place the 10.key file into that directory by drag and drop then exit qpst
6.Now go back into dfs do not add the target phone yet and go to mobile ip nothing else on the screen should change
7.Now select the port the target phone is on in dfs and send the spc code
8.Write the nam tab to target phone after verifing it doesnt say home only then go to data tab and check the box next to pwd on the ppp section only which will change the pwd to hex format then write the data tab
9.Go to the mobile ip tab and right click the red stop sign looking thing on the second bubble and enable it and set active profile to 1 then click "write current profile settings" and click the write button on the left side of the screen
10.Now go back to the Nam tab and load the prl file I prefer using 00002 but you can experiment
Final Phase: (Verizon 4gLTE)
1.Power on target phone and place in diagnostic mode and plug into computer
2.Open qpst configuration add the port
3.Go to start clients then efs explorer
4.Now on the Left side of the efs explorer right click the screen go to new and directory
5.Name the directory "DMU" without the quotation marks then place the 10.key file into that directory by drag and drop then exit qpst
6.Now go back into dfs do not add the target phone yet
7.Now select the port the target phone is on in dfs and send the spc code
8.Write the nam tab to target phone after verifying it doesn't say home only then go to data tab and check the box next to pwd on the ppp section only which will change the pwd to hex format then write the data tab
9.Go to the mobile ip tab click "write current profile settings" and click the write button on the left side of the screen
10.Now go back to the Nam tab and load the prl file i recommend 00002 but experiment with what you want and reboot phone and enjoy
Having issues try getting 1x first on lte phones you will need a sim card unactivated by verizon and it should pop up after a minute or two should never take longer than 15 minutes the first time
make sure you have it set to nv only on lte handsets.
Need a guide for a specific model name it I'll write it for you step by step for a small fee.
Note I have not tested this on any apple product so cannot support them.
Between getting 1x and then going to target phone must be on airplane mode after esn on account is switched back
Read more: http://www.cricketusers.com/page-plus-cellular/38824-page-plus-3g-data-speeds-how.html#ixzz2VLa0LfsP
ANOTHER EDIT : SOMETHING I FORGOT ABOUT YOUR MMS
Steps to MMS (picture mail) configuration: This is only one way, but it works...
1. Open the messaging app and press menu and select settings.
2. Uncheck EVERY item in the settings and exit the app with the back button.
3. Open your browser and go to the URL "mms.ihavegreat.info" and download
4. Pull down the top of your screen and wait for the app to finish downloading
5. Tap the app to install and let it authorize and setup
6. Remove the stock messaging app from homescreen and replace with this new one.....(may also disable the original message app)
7. Reboot the phone and you should have working MMS
Click to expand...
Click to collapse

Categories

Resources