[WIP] Unlocking Note 2 modem for GSM/AWS - Sprint Samsung Galaxy Note II

This is NOT in relation to changing IMEI/ESN as that is ILLEGAL! This thread is about enabling our baseband/modems to operate on different frequencies/couriers.
Trying the VZW unlock thread first HERE
I'm flashing a VZW ROM right now to check APN menu, etc. Sprint even with hack doesn't show APN.
There are several threads on how to unlock Verizon/Tmobile/ATT modems to work on each other with varying levels of success. I feel that we have a iPhone 4s/5 like device that has the same chipset just different locks around the software to prevent unlocking. I was moved by the community's involvement in adding a SIM card slot to the Note 2 and want this mod to work on US couriers.
Basically put, I want to make any US variant S3/Note 2 an international version. The hardware is the same, it's the NVRAM/Firmware prohibiting us.
This is the SIM card mod for the SPR N2:
http://forum.xda-developers.com/showthread.php?t=1959005
Enabling AWS (T-Mobile) on ATT Note 2:
http://forum.xda-developers.com/showthread.php?p=35933247
Verizon S3 on T-Mobile:
http://forum.xda-developers.com/showthread.php?t=2013647
Verizon S3 on world GSM:
http://forum.xda-developers.com/showthread.php?t=1809314
The primary method of unlocking modem bands is flashing a QCN file that modifies NVRAM params. In the ATT T-Mobile thread the hack works by flashing over a ESN/IMEI stripped T-Mobile qcn backup file.
I tried following this process but was blocked by a "Roaming Lists could not be read" error at 16% when trying to backup my NVRAM using QPST. I attempted flashing the file anyway and received a "Could not Communicate in Diagnostic Mode" error. My modem then would not see any networks. I then flashed a ATT modem which bootlooped my device.
I feel the Roaming List could not be read is the main issue into how Sprint locked down this device for US GSM. In SIM tech, the courier provides a preferred list of up to 80 couriers the phone is to connect to first when roaming due to courier roaming agreements instead of the strongest signal first. As the Spr model uses a chip for a SIM it's possible that the "SIM" could not be read to provide roaming lists and GSM could be blacklisted in this chip as it is more sophisticated then a SIM smartcard. Now that I flashed a ATT modem I'm going to try to download the NVItems again using QPST.
I restored my TWRP backup and sideloaded a SPR modem, back at stock all working.
The alternative is to use the "IMEI/ESN" backup tool:
http://forum.xda-developers.com/showthread.php?t=1867442
I will continue experimenting and will report progress.
When writing back my NVRAM dump I get this list of readonly/locked items:
(NV Items http://forum.xda-developers.com/showthread.php?t=1954029)
Writing NV-items from a file:
Unsuccessfully written NV-items:
00000 (0x0000) - Password (16 digits) is required
0^"Electronic Serial Number"^"Security*"
00001 (0x0001) - Read only item
1^"Electronic Serial Number Checksum"^"Security*"
01943 (0x0797) - Password (16 digits) is required
797^"DCS TX Burst Ramp Down Index 11"^"GSM*"
05597 (0x15DD) - Read only item
05598 (0x15DE) - Read only item
These two are unknown but people get them when doing AWS unlocks:
http://forum.xda-developers.com/showpost.php?p=36078971&postcount=81
Found a AWS/ATT modified TXT file, I flashed it and reset
http://forum.xda-developers.com/showpost.php?p=36008901&postcount=49
Mobile networks show a previously unselectable item WCDMA only as selected which is not in the menu, the network status is unknown. I have a feeling the nv-item is trying to reference a menu item that is not in my ROM.
Next I'm going to ODIN the stock ATT rom over and see what happens.
FAIL! modem.bin won't flash.
Flashed Stock AIO modem+firmware+rom, etc odin to phone and flashed LJC modem manually. No data and was reporting WCDMA only from the last NV items hack. It seems NV-ITEMS are persistent across a complete and total stock restore+modem flash (twice) wipes and bricks. I restored my backup TXT for nv items and stock network has returned.
I'm flashing CM next for Sprint as it has "- Removed preset Network mode/selection (allows for more network modes)"
http://forum.xda-developers.com/showthread.php?t=2047667
Hopefully with the NV Items hack and a ROM without network modes locked w/ a SIM card board I should be gold.
Here is NV Items when flashing on stock ODIN:
Writing NV-items from a file:
Unsuccessfully written NV-items:
00000 (0x0000) - Password (16 digits) is required
00001 (0x0001) - Read only item
00005 (0x0005) - Command failed
00018 (0x0012) - Command failed
00031 (0x001F) - Command failed
00032 (0x0020) - Read only item
00033 (0x0021) - Read only item
00034 (0x0022) - Command failed
00035 (0x0023) - Command failed
00036 (0x0024) - Command failed
00037 (0x0025) - Read only item
00048 (0x0030) - Command failed
00049 (0x0031) - Command failed
00050 (0x0032) - Command failed
00176 (0x00B0) - Read only item
00177 (0x00B1) - Read only item
00178 (0x00B2) - Command failed
00209 (0x00D1) - Read only item
00210 (0x00D2) - Command failed
00211 (0x00D3) - Command failed
00212 (0x00D4) - Command failed
00213 (0x00D5) - Command failed
00215 (0x00D7) - Command failed
00258 (0x0102) - Command failed
00259 (0x0103) - Command failed
00260 (0x0104) - Command failed
00261 (0x0105) - Command failed
00262 (0x0106) - Read only item
00263 (0x0107) - Read only item
00264 (0x0108) - Read only item
00265 (0x0109) - Read only item
00266 (0x010A) - Read only item
00296 (0x0128) - Command failed
01943 (0x0797) - Password (16 digits) is required
05597 (0x15DD) - Read only item
05598 (0x15DE) - Read only item
Done.
1/10/13 6:17pm
http://forum.xda-developers.com/showthread.php?t=2016575
Trying new international ATT rom. CM10 didn't have what I needed for network selections.
I have successfully detected a GSM network type although it's going to need some work.. I got to go home and eat.
1/11/13 11:14am
Using the RF NV editor from QPST I can edit all NV-Items with no roaming lists error.

BY FOLLOWING THESE INSTRUCTIONS YOU ARE INTENTIONALLY BRICKING YOUR DEVICE. I HAVE TESTED RECOVERY BACK TO STOCK WITH A ODIN FLASH AND RESTORATION OF MY NV-ITEMS BACKUP. I TAKE NO RESPONSIBILITY FOR YOUR DEVICE AND THESE INSTRUCTIONS ARE PROVIDED AS-IS.
That being said I have ODIN flashshed ATT firmwares over, international firmwares over, changed numerous NVItems settings and have been successful in restoring my device to fully operational stock with working radio/service. At one point I had to go into download mode and odin TWRP and ADB sideload a modem due to a boot loop but I was still able to recover.
*DO NOT PROCEED UNLESS YOU ARE AWARE OF HOW TO UNBRICK YOUR DEVICE AND RESTORE IMEI/NV-ITEMS*
To enable USB file transfer at anytime dial *#7284# Qualcomm USB Settings and select MTP+ADB
Here is a howto/recap of what I have accomplished:
**YOU MUST BE ROOTED**
You need the SIM card board for this to work otherwise you are simply experimenting. Get one HERE
1. Get the Note 2 toolkit and drivers per your device HERE This is the easiest method of getting all required tools/software for a brick restore and other flashes.
2. Get the Samsung NV Items tool HERE
3. Get your MSL using the *root required* Get my MSL app HERE Write it down and keep it in a safe place!
4. Dial *#7284# go to Qualcomm USB Settings and select RNDIS+DM+MODEM
5. Plug or Replug your device and wait for drivers to install
6. Open Device Manager and expand Ports (COM & LPT) (windows xp/7/8), make a note of which COM SAMSUNG Mobile USB Serial Port (COM*) (If you do not see the port listed then you didn't install drivers, wait for driver install or you didn't enable Qualcomm diag properly)
7. Open NV-items_reader_writer.exe and select your COM* from Port: dropdown. Put your MSL # in where it says 000000. Make sure BOTH checkboxes are checked and click connect. Click Read. Should say in console "Log message: > SPC is correct. Phone unlocked".
If you get "Log message: > Phone does not accept SPC. SPC is not correct" then try 000000 as MSL
8. Click Read and wait 5-10 mins for your nvitems to be read. SAVE THE TEXT FILE somewhere where you won't loose it and MAKE A BACKUP. Email it to yourself and upload it to dropbox. If you loose this file then you could permabrick your device!
9. Download the AWS ATT NvItems unlock file HERE Click DOWNLOAD and save the txt file to your desktop or somewhere where you will remember.
10. Open or go to NV-items_reader_writer.exe. Do the connect, MSL, read and select com port if you closed the app. Click WRITE and select the text file you downloaded in step 9 "nv aftr qxdm removed imei.txt". After writing click on Mode and Reboot or simply reboot your phone.
At this point you are on a Sprint Rom/Kernel/Modem with a GSM compatible radio. Your Sprint software has no idea what is going on and most likely won't connect to GSM even with a SIM card inserted. If you go into Settings->Mobile networks you wont see options to set APN. This is because the Sprint ROM/Radio isn't setup to connect to GSM. Try THIS to "unlock" US GSM couriers on Sprint ROM
11. Flash this ATT ROM: (others may work, although you need a ROM with NO included Kernel/Modem)
HERE
This is the [ROM][4.1.2][XXDLL1] Asylum TJ v1ROM with no modem/kernel/etc. Wipe Dalvik, factory reset, cache. I also wiped system before installing but you may not need to.
12. Boot and verify the rom boots.
At this point you can experiment with the Mobile Networks settings and should see APN options. Change your Network mode and see if you can get any listings for "Network operators" when selecting manual. If you can see ATT/T-MOBILE then report your findings!
13. Next is to flash over a ATT modem/radio in TWRP. Download the modem HERE
THIS MODEM WILL CAUSE YOUR DEVICE TO BOOT LOOP. Although I found on my device it only rebooted every 5 mins or so.
14. After booting you should be able to see ATT/TMOBILE in your network operators settings. Make sure to play with Network mode. I don't have a SIM card and so my lockscreen said "Emergency Calls Only" and I couldn't get into the Mobile Networks menu as it told me to "Please insert SIM card"
At this step I'm fairly certian the GSM bands are unlocked as most people only see Emergency Calls Only when their device is not registered. Normally this is caused by invalid or unauthorized SIM/IMEI/APN settings on a normal GSM phone.
RECOVERY
1. Download Sprint firmware HERE
2. Extract the ZIP to your desktop so you have the "COMBINATION_L900VPLJ1_L900VPALJ1_CL265523_HWID04_HW-Rev0406_user_low_ship.tar.md5" file on your desktop
3. Go into download mode HOW TO
4. Open Odin from C:\Samsung Galaxy Note2 ToolKit\Odin3_v3.07.exe
5. Connect your device
6. Click PDA and select "COMBINATION_L900VPLJ1_L900VPALJ1_CL265523_HWID04_HW-Rev0406_user_low_ship.tar.md5"
It will check MD5 and it'll take a minute
7. Click Start and wait for your device to flash & reboot.
8. Dial *#7284# and go to Qualcomm USB Settings and select RNDIS+DM+MODEM.
9. Open NV-items_reader_writer.exe
10. Find your COM port from earlier in your device manager, same as last time
11. Connect, Read. IF YOU GET SPC ERROR TYPE YOUR MSL or TRY 000000
12. Click Write and select your NV-ITEMS BACKUP .txt FILE
13. After writing click on Mode and Reboot or simply reboot your phone.
14. Dial *#7284# Qualcomm USB Settings and select MTP+ADB
You should now have a fully operational Stock device.
To enable USB file transfer at anytime dial *#7284# Qualcomm USB Settings and select MTP+ADB
If you have issues past this point then you didn't follow instructions completely or you experienced something different then what I experienced. The most important step of unbricking is restoring your NV-ITEMS. Odin flashing of stock firmware/etc is normal procedures as per any unbrick. You are welcome to try modifying the ATT modem to not bootloop (most likely LTE issues as Sprint radio doesn't operate on ATT LTE frequencies) by following THIS post. You can also try the Sprint ROM/Modem by following the Verizon APN/Network hack HERE
Some roms won't let you do *#7284# for ADB/MTP. The way around this (if you need to transfer files and MTP isnt anabled) is to sideload files from TWRP or find the verizon method for dialer codes for Qualcomm USB settings menu. There was a dialer only instruction post but I can't find it now. If all else fails then simply ODIN to stock.

Impressive work you are attempting. It would def be cool to have the same radio functionality that Iphone 5 peeps have. I am on AT&T, but it would be cool to be able to load the CDMA and related stuff to a GSM phone as well. Good luck, I will be foloowing your thread, mostly out of curiosity.
Sent from my SAMSUNG-SGH-I317 using xda app-developers app

I can successfully see a ATT/T-Mobile GSM network type with the NV-Items hack. I need to do the sim card mod now. I'll order parts this weekend and until then there isn't too much I can do.

rockerrock said:
I can successfully see a ATT/T-Mobile GSM network type with the NV-Items hack. I need to do the sim card mod now. I'll order parts this weekend and until then there isn't too much I can do.
Click to expand...
Click to collapse
Great news! Excellent work by the way, would love to see this end up working!

I can now run a ATT flashed modem. When selecting Mobile Networks it tells me to insert a sim card. I'm getting reboots every 3-5 minutes but I think it's kernel related. The ROM is half the battle, ATT modem boot looped on SPR ROM. I should be able to connect to GSM once I do the SIM hack for proof of concept.
Recap:
NV-Items of the ATT to T-Mobile flashed (AWS/GSM unlock, use both ATT and Tmobile on ATT GN2)
Flashed ATT ROM
Failed flashing ATT Persues kernel (stuck at samsung logo)
Flashed Sprint Persues kernel
Flashed ATT modem
I desperately need the NV-ITEMS from an international phone in txt format.
http://forum.xda-developers.com/showthread.php?p=36559274

this may have nothing to do with what your doing but ill ask anyway I ported a verizon note 2 rom over to sprint galaxy note 2 and everything works but LTE is it possible to get it to work? Its the JellyBeans Rom in the sprint forum

From my understanding the customization of the chipset is in relation to LTE frequencies which are hawdware related. It's the same for the Nexus 4, it supports LTE unofficially on band 4 due to LG keeping in their Optimus LTE chip. Nexus 4 on LTE only works in certain areas in the country due to ATT only providing LTE band 4 in very limited areas.
I doubt I can "unlock" to the point where a Sprint/Verizon phone can see each other's LTE frequencies as LTE is a different chip in question (most frequently) as LTE courier customization is specific to the courier/device.
I may be wrong as it depends on the chip in question and how it's implemented. I need to find a photo of both Sprint/Verizon mainboards and compare. My work focuses on GSM/AWS bands for HSDPA+ and 3G as it is more likely to work as the chipset known supports these bands. Please feel free to post pics of the boards or chipset info and I'll look into it.

Due to my NV-Items trick I now can use QPST to dump a full nvitems+more. I cannot restore items though
When in GSM mode I'm getting an Emergency Calls Only/Enter SIM which means it should work with a SIM chip.
ATT modem + ATT/AWS nvitems unlock on ATT ROM; SPR Kernel.
Buying a cracked screen working ATT Note 2 sometime today for $325 for additional testing

rockerrock said:
Due to my NV-Items trick I now can use QPST to dump a full nvitems+more. I cannot restore items though
When in GSM mode I'm getting an Emergency Calls Only/Enter SIM which means it should work with a SIM chip.
ATT modem + ATT/AWS nvitems unlock on ATT ROM; SPR Kernel.
Buying a cracked screen working ATT Note 2 sometime today for $325 for additional testing
Click to expand...
Click to collapse
Seems like your making progress
Sent from my SPH-L900 using xda premium

I'm following your thread with a lot of enthusiasm.
Sent from SHV-E250/N7105 w/ SJKernel using XDA apps developers app premium.

Post #2 contains instructions.

I have just found a Verizon hack thread to get US GSM data/voice working without all this hacking. I'll try it out and report back
http://forum.xda-developers.com/showthread.php?t=2044449
Flashed Deodex Vzw ROM:
http://forum.xda-developers.com/showthread.php?t=2044351
Flashed APN editor:
http://forum.xda-developers.com/showthread.php?t=2044449
I can see verizon networks, no LTE. Trying GSM now.

Yeah, I really doubt you will get VZW LTE working as for one you will not Auth with their system. Second I am sure the transceiver in our version of the phone is not capable of that frequency on the LTE path.
-- "Sensorly or it didn't happen!"

digiblur said:
Yeah, I really doubt you will get VZW LTE working as for one you will not Auth with their system. Second I am sure the transceiver in our version of the phone is not capable of that frequency on the LTE path.
-- "Sensorly or it didn't happen!"
Click to expand...
Click to collapse
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.

rockerrock said:
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.
Click to expand...
Click to collapse
Side note... Altering an ESN isn't just caps illegal, it is caps/bold/underscored/red font illegal. A federal felony from what I've read.
Sent from my SPH-L900 using Tapatalk HD

Skripka said:
Side note... Altering an ESN isn't just caps illegal, it is caps/bold/underscored/red font illegal. A federal felony from what I've read.
Sent from my SPH-L900 using Tapatalk HD
Click to expand...
Click to collapse
Yup, modifying ESN has absolutely nothing to do with my research. My goal is to utilize a provider's SIM on GSM to connect to ATT/TMobile with stock IMEI/ESN. Verizon uses a SIM in their Note2/S3 in which if they accept your ESN/IMEI with their SIM is their discretion. ESN/IMEI, etc is stored in NV Items which is in the modem baseband, not the ASIC. Swapping SIM cards are perfectly legal so removal/replacement of the embedded SIM is legal. ESN/IMEI is like a car's VIN which is illegal to touch, SIM is more like a license plate on a car. I'm a firm believer in its your device do what you want but once you enable your modem to interact with the public infrastructure you are bound to it's rules, period.
On another note I have a ATT Note 2 now but I sold the Sprint Note 2 to get the Nexus 4. I can continue my research into GSM on my Sprint S3 and provide dumps for the ATT Note 2.
I'm fairly certain that I have accomplished a US GSM unlock on my Sprint Note 2 as it exhibits the same symptoms as a Unlocked phone without a SIM, Emergency Calls Only. However I do not see ATT/T-Mobile in my network operators menu which I'm sure the VZW APN hack will fix or it's because I don't have a SIM.
It's going to take someone with a Sprint S3/Note 2 with SIM mod and some tinkering around to get this to work. I'll get a SIM board for my S3 but it's going to take some time as I'm busy with work and my girlfriend. If anything was learned, it was that the S3/Note 2 is pretty much damn near unbrickable. I've flashed every firmware known to man, trashed my NV ITEMS, wiped my ESN/MSL and recovered to absolutely working activationable stock. Don't be afraid to experiment, just BACKUP and BACKUP your BACKUPS.

I am stuck at this step:
13. Next is to flash over a ATT modem/radio in TWRP. Download the modem HERE
THIS MODEM WILL CAUSE YOUR DEVICE TO BOOT LOOP. Although I found on my device it only rebooted every 5 mins or so.
It does cases boot loop, only it's not every 5 minutes, but instantenious, right after "Android is upgrading" Am i missing something?
Update: with ATT ROM, it does give me 2-3 minutes before reboot, however it won't see the Sprint SIM with ATT modem file. I've also tried few other modems from Verizon and some other GN2 carriers, same story. currently i have no SIM mode installed, but I think it should still see SPRINT chip/SIM because it is emmulating a LTE/GSM SIM. SIM manager says SIM state unknown.
Is this the same for you? how are you able to see the T-mobile and AT&T , if you can't get n to the mobile networks menu?

rockerrock said:
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.
Click to expand...
Click to collapse
Seeing PCS and CLR VZW is easy. I don't think you will auth on ehrpd though.
Did you ever get past the failure to read roaming list issue. Was curious if you found a way to read the PRL from the Note2.
-- "Sensorly or it didn't happen!"

Let me know if you would like me to test your theory.
sent from my phone using rocket fuel

Related

How to Unlock Vogue CDMA

Buy HTC Vogue Clean ESN CDMA Set to eaby.com . & how to Use This Phone In India in CDMA Network. pls tell
I m read another Indian forum. HTC 6800/6900 convert to tata CDMA
here is detail
SID, NID, Primay Channer A & B, Secondary Channel A & B loaded Nam 1 & Nam 2 PRL, SPC = 000000
I got all above Parameter from Tata Customer Care and they told any Foreign ESN Handset can work if you are able to change the above Parameters, After that I Get an GSK (Getting Started Kit) of Tata which have 14 Digit Activation Number, then Dialed *228 and followed the Instruction, After 2 Hours (Tipical 10 Minutes they say) Received a SMS to Restart the Phone. Voila my HTC Mogul is Working on TATA
Will load my QPST .qct file (Ready made Setting for TATA) so every buddy can easily Activate Mogul on TATA
Everybody now Welcome to World of Tata Indicom
( Attached TATA.rar contains Nam1 PRL, Nam2 PRL, and Ready made QCN file for QPST Service Programming, also have GetSPC [ Run in PPC6800 / Mogul Type the ESN in Capital and get the Service Programming Code] )
Pls Help me
Sounds interesting but I'm just wondering
OK.... can u explore more on that.
How does one go about creating/editing the PRL settings contained here if they want to use this thing on a different network than Tata?
thx
This method work on Cricket in USA and in TATA in India
Just follow the Process and Activate using *228 Loading TATA Prl is needed or else it will not catch TATA Tower range.
Go on and take it into TATA
I already have activated so many Phones
Both Cricket and TATA accept non Allocated ESN and Activate the OTA and INsert the new ESN against users Services, Here in India Reliance dont activate any phone which ESN is not pre Registered in Reliance Network
I was wondering if this will solve my issue. I have bought a touch with a bad ESN and is unable to put it on my account. Will this clear the ESN?
I used this ..so easy
so if you activated your phone for india service, would you be able to use it in the United States?
--James
I did this for my Sprint Touch. I am still using it in the USA but my phone has been modified to support other carriers with no problem.
The steps are simple:
Here is what you need to do:
1. Download GetSPC(attached below)
2. Unzip to desktop
3. Turn off phone and remove battery.
4. Write down your HEX ESN
5. Power your device back on
6. Connect via ActiveSync or WMDC
7. Copy entire folder to main memory on device.
8. Run GetSPC.exe
9. In the top box type in your HEX ESN(make sure caps is on)
10. Click generate or whatever the button is named
11. The resulting number should be a 6 digit number, your MSL, write it down.
12. Search for, download and install Qualcomm's QPST tool.(not freeware)
THE FOLLOWING STEPS ARE VERY DANGEROUS SO MAKE SURE YOU FOLLOW MY DIRECTIONS EXACTLY.
13. Run QPST Configuration(run as admin if Vista)
14. From the Dialpad, dial ##3424#(##diag#)
15. Connect device to computer via USB(this will install drivers)
16. In QPST Configuration, click ports.
17. Continue to add ports until the QPST Configuration detects your phone
18. Under active phones it should display your phone.
19. Click Start Clients/Service Programming
20. Select phone and click ok.
DO NOT LEAVE FIRST TAB, THE SETTINGS TAB. THIS IS THE ONLY TAB WE WILL NEED TO CHANGE ANY SETTINGS
21. Under the settings tab, click Read from phone.
22. Input your MSL you got from GetSPC earlier.
23. Under codes where it says Service Programming, change this to 000000
24. Click Write to Phone
25. Wait 1 minute
26. Close Qualcomm QPST one window at a time.
27. Disconnect the USB cable from your device
28. Perform Soft reset once
29. Test new MSL(##000000#)
30. If new code does not go through, hard reset.
31. Depending on what device you have, follow the necessary steps to unlock your phone so you can flash a new ROM to it.
32. Install OEM ROM from carrier of choice or build your own custom ROM using the new carrier's information.
33. Follow instructions to flash new OS to device.
34. Call service provider and do some sweet talking to get them to activate the phone on their network. You may need to do some serious sweet talking because Sprint ESNs are not in Verizon's database and vice versa. This goes for all CDMA carriers.
Good luck.
dharvey4651 said:
I did this for my Sprint Touch. I am still using it in the USA but my phone has been modified to support other carriers with no carriers.
Good luck.
Click to expand...
Click to collapse
are u then able to have both NAM1 & NAM2 on the phone?
NAM
You have to enable dual NAMs through the registry. And use QPST or CDMA Workshop to set them up.
Thanks a million time to Shadomite
He had Cracked and changed the ESN
I have POsted the Simplified Method Just have a look
http://www.mobile-files.com/forum/showpost.php?p=355534&postcount=82
Quick question. Is there any chance of doing something similar to a Verizon World Edition Blackberry? I live in Ghana and i have had a few of these on my table in the last few months. Any ideas?
''Originally Posted by dharvey4651''
32. Install OEM ROM from carrier of choice or build your own custom ROM using the new carrier's information.''
What information i need from my carrier to build my own rom and how can i make it. Is there a way to build a rom and make a CDMA phone to work in Europe?
I have an HTC TOUCH CDMA ver in Greece!
Help..
Having HTC P3050
you have given the file i have downloaded it but now how to use it and activate on tata can u help me
Need English Viva ROM for Vogue (MP6900SP)
Thank you for this great post. I followed the instructions without bricking my phone. I looked at the 'simpler' one linked to here, but found the one on this thread much easier to follow and use.
Now all I need is the ROM for Viva (North America or Carribbean). Where can I find this? Thanks,
WMT
Hey Hetal
can't find your post on mobile-files.com. Is there any other link.
Will this method work on reliance network too???
Thanks
puneet_july30 said:
Hey Hetal
can't find your post on mobile-files.com. Is there any other link.
Will this method work on reliance network too???
Thanks
Click to expand...
Click to collapse
Mobile-Files was taken down a few months ago.
dharvey4651 said:
I did this for my Sprint Touch. I am still using it in the USA but my phone has been modified to support other carriers with no problem.
The steps are simple:
Here is what you need to do:
1. Download GetSPC(attached below)
2. Unzip to desktop
3. Turn off phone and remove battery.
4. Write down your HEX ESN
5. Power your device back on
6. Connect via ActiveSync or WMDC
7. Copy entire folder to main memory on device.
8. Run GetSPC.exe
9. In the top box type in your HEX ESN(make sure caps is on)
10. Click generate or whatever the button is named
11. The resulting number should be a 6 digit number, your MSL, write it down.
12. Search for, download and install Qualcomm's QPST tool.(not freeware)
THE FOLLOWING STEPS ARE VERY DANGEROUS SO MAKE SURE YOU FOLLOW MY DIRECTIONS EXACTLY.
13. Run QPST Configuration(run as admin if Vista)
14. From the Dialpad, dial ##3424#(##diag#)
15. Connect device to computer via USB(this will install drivers)
16. In QPST Configuration, click ports.
17. Continue to add ports until the QPST Configuration detects your phone
18. Under active phones it should display your phone.
19. Click Start Clients/Service Programming
20. Select phone and click ok.
DO NOT LEAVE FIRST TAB, THE SETTINGS TAB. THIS IS THE ONLY TAB WE WILL NEED TO CHANGE ANY SETTINGS
21. Under the settings tab, click Read from phone.
22. Input your MSL you got from GetSPC earlier.
23. Under codes where it says Service Programming, change this to 000000
24. Click Write to Phone
25. Wait 1 minute
26. Close Qualcomm QPST one window at a time.
27. Disconnect the USB cable from your device
28. Perform Soft reset once
29. Test new MSL(##000000#)
30. If new code does not go through, hard reset.
31. Depending on what device you have, follow the necessary steps to unlock your phone so you can flash a new ROM to it.
32. Install OEM ROM from carrier of choice or build your own custom ROM using the new carrier's information.
33. Follow instructions to flash new OS to device.
34. Call service provider and do some sweet talking to get them to activate the phone on their network. You may need to do some serious sweet talking because Sprint ESNs are not in Verizon's database and vice versa. This goes for all CDMA carriers.
Good luck.
Click to expand...
Click to collapse
Thanks a ton, I have completed all the steps 30, now how can I run the other network on my phone.
Do I have fill all the network details in the QPST Config step..???
that's great thank you man
Thank you. it was more then easy.
Now it works.
help me
How can I use this file for my HTC Hero CDMA? this QCN file giving error.
help me.

[Q] Sprint TP2 on Tmobile (Android) Radio Problems

Alright, so I have a Sprint CDMA Touch Pro 2, security unlocked, and flashed with the world unlocked radio. Everything in windows mobile works great on tmobile, however when i boot into android (Froyo X) from SD card i am unable to access anything. I'm assuming android is using the CDMA radio, and I cannot find any options etc to change it to GSM, or enable world phone mode.
So, it this possible? When i search for the network, it will find Cingular and Voicestream Wire. It will only do this once, and if I attempt to search again at any time without rebooting first, the entire system will freeze, and requires a hard reset.
I do have a 3G indicator, and signal bars which change periodically, but I am unable to connect to anything.
I've done several forum searches, as well as looked through all the settings I could find.
Any help with this would be awesome!
You need to check two things in your Startup.txt file. The first is that you should have your model number in the following field instead of the "rhod100_uk."
Code:
physkeyboard=rhod100_uk
The second thing is that you need to set the following line based on whether you use your device on a GSM network or a CDMA one. If you use it with a CDMA network then change the "0" to a "1." If it is used on a GSM network then leave it as a "0."
Code:
force_cdma=0
Depending on how you installed Android, the startup.txt will normally be in either the root of the SD card or in the \andboot folder on the SD card.

Enable AWS band (3g/4g Tmobile) on ATT Note 2 stock baseband

Method 1:
Easiest method to enable AWS and DC HSPA (42Mbps) is to restore the attached qcn backup on ATT note 2. Use software download tool in QPST to restore the attached qcn file.
Restoring qcn will not change your imei, so be worry free and restore Thanks to TEKHD for sharing the T889 qcn backup.
If you face issues with data rate and stability, restore your device original qcn on top and change the value of 01877 to 115868544 in NV browser of QXDM or use 80 03 E8 06 in the text file and write it to device. DC HSPA or 42 Mbps will be disabled after this
Thanks to Arrio for helping me remove imei from qcn file. I have attached my note 2 qcn backup.
Now it should be piece of cake for all
How to posted by Joogle
1. Download and Install QPST, version 2.7 build 374 or higher
2. Go to hidden menu on phone, dial *#7284#
3. Once in Menu choose the option for USBSettingsMenu, then choose the option RNDIS+DM+MODEM.
4. Hook up the phone to the PC via USB at this time if you haven't already. This option works on STOCK TOUCHWIZ.
5. Go to your PC Control Panel. We need to get into the Device Manager to determine where your phone is being recognized as far as the COM ports. For this, go to System -> Device Manager (on the left) or System -> Hardware -> Device Manager (depends on your Control Panel setup). Anyways, scroll down to Ports (may say Ports & LTP, Serial, depends on version). Anyways, find your phone under it, and take note of the COM# (mine was COM9, yours can and probably will vary). If you have exclamation marks anywhere then install the Samsung drivers and try again.
6. Now go to Start Menu -> All Programs -> QPST -> QPST Configuration
7. Click on the Ports tab. Click on Add New Port, then add your Port# where it says Port and name it something you can remember. Hit OK.
8. Now click on Start Clients -> Software Download. Click on the Backup tab. Make sure your phone is listed under Port. If its not, hit Browse, choose the COM that is your phone, and hit OK. Now where it says QCN File, hit Browse, find a safe spot to store your backup on your PC, and name it. Hit OK. Now hit Start. Make sure backup gets to 100% with no errors.
9. Go back into QPST. Go to Start Clients -> Software Download. Click on the Restore tab. Make sure your phone is listed under Port. If not, browse to the appropriate COM port.
10. Choose the QCN backup in the first post of this thread. Click Start, let it finish. Phone should reboot. If it fails rebooting, just do a manual reboot. First boot will take a bit, let it do its thing.
Messing with NV parameters can brick your device.
sjravi said:
Once the NV's are enabled, it cannot be disabled so be careful.
Click to expand...
Click to collapse
Does that mean if we enable NV's (which basically enables AWS), we wont be able to disable AWS and go back to At&t GSM or ? Or once we enable NV we can use both at&t and T-Mobile Sims?
Also have you tested this method with T-Mobile SIM? High data speed, low data speed?
I would love to be able to use my Note with AWS band network (Wind mobile in Canada), but instructions are way beyond my understanding :laugh:. Will wait for easier instructions if they get posted.
Thanks for your work.
ruinkhan said:
Does that mean if we enable NV's (which basically enables AWS), we wont be able to disable AWS and go back to At&t GSM or ? Or once we enable NV we can use both at&t and T-Mobile Sims?
Also have you tested this method with T-Mobile SIM? High data speed, low data speed?
I would love to be able to use my Note with AWS band network (Wind mobile in Canada), but instructions are way beyond my understanding :laugh:. Will wait for easier instructions if they get posted.
Thanks for your work.
Click to expand...
Click to collapse
That's as easy as it gets, and yes it will unlock those bands permanently along side the AT&T bands.
Follow up Qs
1) Thank you so much for posting how to do this.
2) Yeah, I second ruinkhan; Do you know if AWS is still 21mbps or 42mbps like the T889?
3) Is enabling AWS on the N7100 or N7105 possible? How about on CDMA models with SIM slots and GSM support unlocked (such as Verizon i605 or US Cellular R950)?
ruinkhan said:
Does that mean if we enable NV's (which basically enables AWS), we wont be able to disable AWS and go back to At&t GSM or ? Or once we enable NV we can use both at&t and T-Mobile Sims?
Also have you tested this method with T-Mobile SIM? High data speed, low data speed?
I would love to be able to use my Note with AWS band network (Wind mobile in Canada), but instructions are way beyond my understanding :laugh:. Will wait for easier instructions if they get posted.
Thanks for your work.
Click to expand...
Click to collapse
Use of AWS can be disabled by changing one of the NV item, but all enabled parameters remain active. This does not cause any problem with the device working. It would work as any stock ATT note 2.
Yes you can use any SIM or network that support these radio bands (UMTS 1,2,4,5 and Quad band GSM)
I am using a T-Mobile sim and I do get around 8 Mbps download speed and 3 to 4 Mbps upload.
Ya I agree the instruction are bit complicated
cephasara said:
1) Thank you so much for posting how to do this.
2) Yeah, I second ruinkhan; Do you know if AWS is still 21mbps or 42mbps like the T889?
3) Is enabling AWS on the N7100 or N7105 possible? How about on CDMA models with SIM slots and GSM support unlocked (such as Verizon i605 or US Cellular R950)?
Click to expand...
Click to collapse
I am working on 42 Mbps, with the posted NV backup, even 42 Mbps NV items are included. My note 2 does inform network about 42 Mbps support when enabled but I dont see any change in download speed. I guess the network does not like something.
Yes it should be possible on N7100 or N7105, as all have the same Qualcomm 9215 baseband chip. But I am not sure if they have the right RF related hardware.
the instructions for nv backup says to select rmnet+dm+modem. i do not see that option in there. are you suppose to choose a different option for the note 2? any issues of doing this on a canadian i317m?
thanks
cbqfly said:
the instructions for nv backup says to select rmnet+dm+modem. i do not see that option in there. are you suppose to choose a different option for the note 2? any issues of doing this on a canadian i317m?
thanks
Click to expand...
Click to collapse
On my ATT Note 2 I can see that option, what options do you see?
I will do this tonight with my I317, can anyone post a more clear set of instructions? I already have the T-Mobile ROM posted on the AT&T dev section as well as the AT&T ROM on T-Mobile's dev section... This is a huge discovery... I mean huge... Please, anyone care to elaborate on this... Better instructions... I have both the T889 and the I317... And I will test this as soon as there is a better guide... Thank you
Sent from my SGH-T889 using XDA Premium HD app
sjravi said:
On my ATT Note 2 I can see that option, what options do you see?
Click to expand...
Click to collapse
the options i see are
mtp
mto+adb
ptp
ptp+adb
rndis+dm+modem
dm+modem+adb
just found out i can select any mode with DM
thanx
TEKHD said:
I will do this tonight with my I317, can anyone post a more clear set of instructions? I already have the T-Mobile ROM posted on the AT&T dev section as well as the AT&T ROM on T-Mobile's dev section... This is a huge discovery... I mean huge... Please, anyone care to elaborate on this... Better instructions... I have both the T889 and the I317... And I will test this as soon as there is a better guide... Thank you
Sent from my SGH-T889 using XDA Premium HD app
Click to expand...
Click to collapse
Indeed this a huge plus for our At&t Note. I wasnt expecting this to be done this early, but the man did it. My hands are now itching to try this and save $50 a month by switching to AWS network. I would really love to see easier instructions [not all of us hackers ]
cbqfly said:
the options i see are
mtp
mto+adb
ptp
ptp+adb
rndis+dm+modem
dm+modem+adb
just found out i can select any mode with DM
thanx
Click to expand...
Click to collapse
select rndis+dm+modem, sorry but that is the option on my ATT note 2 also
Yes you can select any mode with DM (Diag mode) which enables the diagnostic port to the baseband.
What is the use of this? I dont get it yet lol. Btw i seem when my note display 3g the internet dosnt work i need wait seconds to display h or h+ and then works. Is that normal?
Sent from my SGH-I317 using xda app-developers app
Okay I got home... any good instructions yet? ready to do this...
Bestplayer55 said:
What is the use of this? I dont get it yet lol. Btw i seem when my note display 3g the internet dosnt work i need wait seconds to display h or h+ and then works. Is that normal?
Sent from my SGH-I317 using xda app-developers app
Click to expand...
Click to collapse
It allows people that have At&t Note 2 to use their device with T-Mobile's 1700 frequency band (or 2100 if there is).
In Canada its a big big plus as it allows people like me to be:
1.Free from 3 year contract
2.Have a GSM phone that can be used with AWS network as well.
3.Get a $40 Unlimited Voice/Text/Unlimited Data (10 data cap lol) plan. Of course No LTE or 42mbps speeds.
sjravi, perhaps these NV backups would be of interest for comparison purposes. I got these in the course of trying to flash back the stock modem on my T889V, which it currently bootloops with.
My phone is currently stuck with the I317M modem, has 850, 1900 and AWS HSPA in addition to LTE. Barring any inaccuracies in the Ookla Speedtest app, it also has DC-HSPA. (The phone clocked at 26 Mbps on HSPA during one of my tests.)
There's a stock T-Mobile T889, stock Videotron T889V and my post-repair, I317M modem-running T889V backup in there.
is there list? as in what lines to change?
sjravi said:
Things needed:
1> NV back up tool from this post: http://forum.xda-developers.com/showthread.php?t=1804117
2> NV backup from my note 2 attached in this post (without IMEI: nv item 550)
3> NV backup of your device
Its also good to take NV backup using QPST tool before changing anything on the device.
First take a NV backup of your device using the tool mentioned above. NV parameters from 0 to 7225 are needed.
Compare NV param file in this post with your device's to find the needed NV parameters for AWS.( I do not have original NV backup of my device else I would have posted the list. If someone is interested to make a list, it can be added to the post.)
Before restoring nv backup, the AWS NV parameters should to be enabled/B]
The additional NV's that are needed, to enable AWS band are disable/not present and the nv tool does not write these even if the restore file has them. This is what I noticed when I tried to restore. So had to enable all the required parameters using NV browser in QXDM.
Once the NV's are enabled, it cannot be disabled so be careful.
To enable just select the NV item and click write in NV browser and this has to be done for all the needed nv parameters.
Does anybody know a work around to avoid this manual work?
Once all the parameters are enabled the NV file in this post can be restored on to your device to enable AWS.
Messing with NV parameters can brick your device.
Click to expand...
Click to collapse
Okay, From this point on... I am lost...
"So had to enable all the required parameters using NV browser in QXDM"
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
TEKHD said:
Okay, From this point on... I am lost...
"So had to enable all the required parameters using NV browser in QXDM"
Click to expand...
Click to collapse
NV manager is very old tool and not supported by note 2, so you cannot use it.
Use NV browser in QXDM (last version found online 3.12.724), which you can google to get it.
Once you have installed it. Run QXDM professional
Go to Options > Communications: Here you should see 2 ports for the phone one is modem port and the other diagnostic port.
Select diagnostic port. Check out the attached screenshots
After you have the NV browser open. Select the NV item that needs to be enabled and click "write" this will write the value "0". Hope this helps.
sjravi said:
NV manager is very old tool and not supported by note 2, so you cannot use it.
Use NV browser in QXDM (last version found online 3.12.724), which you can google to get it.
Once you have installed it. Run QXDM professional
Go to Options > Communications: Here you should see 2 ports for the phone one is modem port and the other diagnostic port.
Select diagnostic port. Check out the attached screenshots
After you have the NV browser open. Select the NV item that needs to be enabled and click "write" this will write the value "0". Hope this helps.
Click to expand...
Click to collapse
Man, don't make us suffer... post the tool and the whatever that needs to be enabled... lol
EDIT... got the tool... Attaching it here...
EDIT AGAIN... no, is not working on windows 7/8 ... is for xp... damn... any version for windows 7 or windows 8?
XP Version here:
http://tekhd.com/downloads/QXDM_3.12.714_winxp.rar
When installing it says requires Internet Explorer 6 or higher... lol...I have version 10
let me see if I can bypass that message... by extracting .msi file via command promp...
-> Update... Extracted the damn .msi... but the exe files don't run... So... I have to install XP now?
-> Update 2... got it running in compatibility XP mode... see picture... now what? lol
-> Select the NV item that needs to be enabled and click "write" this will write the value "0" ??????????????????????????????????????????

p607t lte/wcdma not working

I have received a p607t tablet, it was flashed by smb. to p905 firmare (with no imei). i re-flashed it with stock P607TUVUBOI2 firmware (4 files, so-called "service" firmare), imei is back (to what is printed at the back-side) but mobile networking *still* doesn't work: no connection. I'm using not t-mo sim-card, but looks like the tablet was already unlocked
From service menu *#0011#:
SERVICE : LIMITED
NETWORK : UNBLOCK
IMEI Certi: PASS, 1
From Advanced Signal Status:
Carrier:
Network Type: Unknown
Signal info: n/a
Neighboring CID: no neighboring cells --- wtf? >> other devices work ok with this sim in lte and 3g modes<<
GSM service: emergency calls only
GPRS service: disabled
Any ideas?
OK, so, what is done with p607t to the moment:
1) reflashed CP (modem/RF??) to latest stock (P607TUVUBOI2)
2) reflashed AP/PDA (core system??) and CSC (consumer stuff??) to P605XXU1EOI5 (from p605, have one right here - it never had network-lock from factory)
3) using qpst and qxdm changed nv parameters (extended lte bands, enabled gsm rf-bands - there were none in stock at all, only wcdma)
now the tablet sees my local gsm network with this sim-card, signal is 4/5 bars, but still no internet connection - WTF??
p.s. when trying manually to register in my local network - it fails with "try again later"
p.p.s.: what is i find weird, in service menu *#0011#:
NETWORK : UNBLOCK
- this line exists only on p607 - is this the key?
Then, i insert this sim into p605 (completely stock P605XXU1EOI5) - it works like a charm
need some help - where to dig next? point direction plz
UPDATE. i've been tweaking 607t nv items with qxdm, making it alike that ones 605 has. practically everything is alike now, but still it doesn't even try to establish data connection with cell...((
btw, 605 does not have "esf embedded file system", while 607t has one (can be seen through qpst-esf explorer)
also, some nv-items present in one model, some present in another
m4D2016 said:
UPDATE. i've been tweaking 607t nv items with qxdm, making it alike that ones 605 has. practically everything is alike now, but still it doesn't even try to establish data connection with cell...((
btw, 605 does not have "esf embedded file system", while 607t has one (can be seen through qpst-esf explorer)
also, some nv-items present in one model, some present in another
Click to expand...
Click to collapse
I had to flash back to the original kitkat firmware and take OTA to upgrade to lollipop. There is a known issue with the 607t losing data after roms are flashed. Some had luck with flashing the same rom twice but it never worked for me. Used Sam mobile to pull original and went from there. Good luck
I performed "device init and reflash" with Keis. The device is back to stock completely, except:
- nv items data
- esf embedded file system data
so... my guess - i need to restore these in order to have mobile networking working.
could someone post a qcn-file with factory esf-data?
ok, let's take another way: how can i get some gsm-module debug-output or log to understand, what's going on it?
i'm trying to write some custom modem.bin to /dev/block/mmcblk0p2, but after reboot data in there is reverted to stock modem.bin - how come?? is that bootloader doing? where is the stock-one stored?

cannot get LTE communication with S4mini plus (i9195i)

Hello
Here is my issue: I buy a second hand S4 mini plus (i9195i - serrannoveltexx) for its compact size and by considering the simple usage I make of my phone. So far I do not use so much data so I don't care about used network, but recently I start using more data and I notice I never get LTE. I change carrier because I was thinking LTE-cover was the problem, but not. I still have no LTE. So below, is more or less everything I tested:
at beginning, I was few months on stockrom. Then I go to LineageOs 14.1 (thank to dev for the work). In both case I'm almost sure I had no LTE (I checked APN and 4g/3g/2g enable in network menu. And I start to check LTE-cover of each carrier . And I very start to check band used by the different carrier).
I change carrier and I check APN once more : still no LTE.
I come back to stockrom (just in case) : still no LTE
I switch SIM card : my sim card in Oneplus One get LTE and sim-card of my friend do not get LTE with my phone. (So I try copying manually the exact same APN : not working)
I try to flash old stockrom and let OTA update make the work : no LTE
I make necessary to have CSC=XEF as I am in France.
I try flash with pit-file and re-partition.
At the end, the best thing I succes to get was H+ (and for some reason I have it when I clear and restore the NV in 'service menu'), so :
-I contact samsung and they recommend me to go to one of their after-sales office.
-I contact my seller and he tells me that LTE works in germany.
Does someone has an idea how to solve this issue ? something that could block LTE ?
Next step I have in mind :
-I read some topic where double-flash within wipe and clear factory could help (but I have the feeling that will not work because it is more or less what have done to change CSC)
-I would check the activated LTE bands (but in 'service menu', I find a LTE band hexa-value that meet with explanation of binary description (another thread in XDA - thanks to people who write this tuto))
-I am considering go back to LineageOS but 15.
-I am considering to change LTE antenna (this is part of middle frame - I notice if I enable Data when i have 'service menu' opened, the phone seems to looking for LTE first, so I am not sure this is only SW problem ... do you think it is possible that only LTE part of such a SystemOnChip could die ?)
Thank by advance for your help
Best regards
Fezrf said:
Hello
Here is my issue: I buy a second hand S4 mini plus (i9195i - serrannoveltexx) for its compact size and by considering the simple usage I make of my phone. So far I do not use so much data so I don't care about used network, but recently I start using more data and I notice I never get LTE. I change carrier because I was thinking LTE-cover was the problem, but not. I still have no LTE. So below, is more or less everything I tested:
at beginning, I was few months on stockrom. Then I go to LineageOs 14.1 (thank to dev for the work). In both case I'm almost sure I had no LTE (I checked APN and 4g/3g/2g enable in network menu. And I start to check LTE-cover of each carrier . And I very start to check band used by the different carrier).
I change carrier and I check APN once more : still no LTE.
I come back to stockrom (just in case) : still no LTE
I switch SIM card : my sim card in Oneplus One get LTE and sim-card of my friend do not get LTE with my phone. (So I try copying manually the exact same APN : not working)
I try to flash old stockrom and let OTA update make the work : no LTE
I make necessary to have CSC=XEF as I am in France.
I try flash with pit-file and re-partition.
At the end, the best thing I succes to get was H+ (and for some reason I have it when I clear and restore the NV in 'service menu'), so :
-I contact samsung and they recommend me to go to one of their after-sales office.
-I contact my seller and he tells me that LTE works in germany.
Does someone has an idea how to solve this issue ? something that could block LTE ?
Next step I have in mind :
-I read some topic where double-flash within wipe and clear factory could help (but I have the feeling that will not work because it is more or less what have done to change CSC)
-I would check the activated LTE bands (but in 'service menu', I find a LTE band hexa-value that meet with explanation of binary description (another thread in XDA - thanks to people who write this tuto))
-I am considering go back to LineageOS but 15.
-I am considering to change LTE antenna (this is part of middle frame - I notice if I enable Data when i have 'service menu' opened, the phone seems to looking for LTE first, so I am not sure this is only SW problem ... do you think it is possible that only LTE part of such a SystemOnChip could die ?)
Thank by advance for your help
Best regards
Click to expand...
Click to collapse
Some older Samsungs eg Note 1 had reception problems due to poor connection (possibly oxidised contacts) that could be fixed by simply tightening the screw a fraction that secures the pcb or antenna so it was grounded (from memory) properly, though of course it could be your actual antenna that has failed. (possible cleaning contacts might be worth a shot if tweaking screw doesn't fix)
(or modem/baseband issue if software, try flash again or try another version, backup your baseband radio settings first with twrp or an app)
edit: also try reset network settings before paying for new antenna (edit: though suppose flash with pit etc should have done this)
Hello,
Some news on the topic:
I try to tighten the screw and I also try to clean LTE antenna contacts : I use very very thin sandpaper (usually used to polish) to be sure there is no oxidation
I also make the mistake to erase all EFSs and EFS_Backup
Reminder : in service menu (*#0011#), then 'UE Setting & Info' / 'Setting' / 'System' / 'NV backup test' / 'Erase all EFS 1/2/3' => So never do this if you have no backup
After this, I lost my IMEI... no way to restore it with IMEI tool... What a pity because I was hoping to only set my IMEI in order to test with completely clear EFS. Finally I restore my IMEI thank to my very first TWRP backup (thank to TWRP team that it works for me because it seems not always the case)
I try 3 times consecutive reset factory : 2 in recovery and 1 in settings.
I try to activate new LTE band but it seems that as I am in StockRom, update is not properly done.
In fact just after the work with QSPT and QXDM, I can find the nez band in service menu (*#0011#), then 'UE Setting & Info' / 'Setting' / 'System' / 'LTE band & CA combination. but after reboot I lose it. Probably I'll make the work one more time after coming back to LineageOS.
One last thing I want to try is going in front of 4G antenna and check signal power seen by the phone but I'm thinking this is not the true problem. I explain:
service menu (*#0011#) start to show Basic network information and if I force LTE_only (in service menu), I can observe these information. strange thing I see are sometime state goes to 'TAU_init' (and also 'deregistr' or 'register'). Some other time MCC-MNC goes to 151515-1515. I have the feeling the phone is trying to connect but something goes wrong and I do not know what...
if someone has an idea, I am still looking for.
Best regards

Categories

Resources