LTE band unlocking

[Luxferre]

Hi people,

I don't exactly know the physical capability of the radiomodule used in 8110 but this shell script (you must run it as root from ADB shell) should unlock all LTE bands up to 44 worldwide:

#!/system/bin/busybox sh

OPDIR=$(mktemp -d)

BLKPREF=/dev/block/bootdevice/by-name

TARGETNAME=nvm/num/6828

TARGETNAME2=nvm/num/6829

PREP="\xff\x3f\xff\xff\xff\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

cd $OPDIR

echo "Reading tunning partition..."

busybox tar xf $BLKPREF/tunning

echo -ne "$PREP" > $TARGETNAME 

echo -ne "$PREP" > $TARGETNAME2

echo "Writing tunning partition..."

busybox tar cf - . > $BLKPREF/tunning

echo "Formatting modemst1 and modemst2..."

dd if=/dev/zero of=$BLKPREF/modemst1

dd if=/dev/zero of=$BLKPREF/modemst2

echo "Bands unlocked, reboot to apply"

So, essentially we're setting each available bit for each available band number (minus 1) in the 16-byte-long EFS items 6828 and 6829.

If anyone in USA/Canada/Mexico happens to own 8110 and has rooted it, pls verify if your carrier's LTE can now be used.

[Hossain Mohammed Shoaib]

i have done exactly that 

is anything wrong ?

--
You received this message because you are subscribed to the Google Groups "comp.mobile.nokia.8110" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bananahacker...@googlegroups.com.
To post to this group, send email to banana...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bananahackers/f3343a92-fdd6-4647-82fe-2369420d3a41%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Luxferre]

May be fine but you should put it into the file and then adb push it into device and then run it with sh file.sh.

But how are you going to test this with non-European and non-Asian LTE bands?

[Hossain Mohammed Shoaib]

I think i've misunderstood sorry😧

--

You received this message because you are subscribed to the Google Groups "comp.mobile.nokia.8110" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bananahacker...@googlegroups.com.
To post to this group, send email to banana...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/bananahackers/816208ab-9439-438b-bd06-01b00b403078%40googlegroups.com.

[speeduploop]

Woukdn't it be needed to also add some configs to the modem/module?
Or is this 'instead of'?

My 'western-european' modem lists following predefined configs:

at$qcmrue=?

$QCMRUE: (0-11),

(0-CDMA,1-HDR,2-GSM,3-WCDMA,4-LTE),

"CDMA/HDR",

"0.BC0",

"1.BC1",

"3.BC3",

"4.BC4",

"5.BC5",

"6.BC6",

"7.BC7",

"8.BC8",

"9.BC9",

"10.BC10",

"11.BC11",

"12.BC12",

"13.BC13",

"14.BC14",

"15.BC15",

"16.BC16",

"17.BC17",

"18.BC18",

"19.BC19",

"GSM",

"0.GSM_450",

"1.GSM_480",

"2.GSM_750",

"3.GSM_850",

"4.GSM_EGSM_900",

"5.GSM_PGSM_900",

"6.GSM_RGSM_900",

"7.GSM_DCS_1800",

"8.GSM_PCS_1900",

"WCDMA",

"0.WCDMA_I_IMT_2000",

"1.WCDMA_II_PCS_1900",

"2.WCDMA_III_1700 ",

"3.WCDMA_IV_1700",

"4.WCDMA_V_850",

"5.WCDMA_VI_800 ",

"6.WCDMA_VII_2600",

"7.WCDMA_VIII_900",

"8.WCDMA_IX_1700",

"9.WCDMA_XI_1500",

"LTE",

"0.EUTRAN_BAND1",

"1.EUTRAN_BAND2",

"2.EUTRAN_BAND3 ",

"3.EUTRAN_BAND4 ",

"4.EUTRAN_BAND5",

"5.EUTRAN_BAND6",

"6.EUTRAN_BAND7 ",

"7.EUTRAN_BAND8",

"8.EUTRAN_BAND9",

"9.EUTRAN_BAND10 ",

"10.EUTRAN_BAND11",

"11.EUTRAN_BAND12",

"12.EUTRAN_BAND13 ",

"13.EUTRAN_BAND14 ",

"14.EUTRAN_BAND17 ",

"15.EUTRAN_BAND18 ",

"16.EUTRAN_BAND19",

"17.EUTRAN_BAND20 ",

"18.EUTRAN_BAND21",

"19.EUTRAN_BAND33 ",

"20.EUTRAN_BAND34 ",

"21.EUTRAN_BAND35",

"22.EUTRAN_BAND36",

"23.EUTRAN_BAND37 ",

"24.EUTRAN_BAND38",

"25.EUTRAN_BAND39",

"26.EUTRAN_BAND40 ",

"(0 - 2047)"

OK

[Luxferre]

This NV items define selectable LTE bands. So that when you insert a supported carrier's SIM, the modem would load the support for these bands. Your AT command output just confirms that programmatically they are supported anyway. My question is whether these frequencies are physically supported by the 8110's radiomodule and whether they are visible when using, for instance, American networks...

P.S. And vice versa, when I return with Alcatel Go Flip, will I be able to make it work with our European LTE bands or not is also a question...

[speeduploop]

It just reminded me of my LTE-Bridge - where I had to first add a config (index, name, bitmask) and then enable it.

All this worked with AT only - with the small problem that those commands were password-protected.

(but Netgear was helpfull and gave me the password after asked nicely...)

[Luxferre]

I managed to do the same band unlocking on CAT B35 with just a diag port, see the ending of this blog post for details. The trick was to switch the phone to the offline mode and to provide SP/SPC passwords (both are zeroes, one is 00000000, another is 000000) before running the write command.

But I still can't verify whether it's working for American bands, until May 5 at least...

I think I'll create some kind of WebUSB-based utility for this someday.

[kevi...@gmail.com]

Good Afternoon,

I have attempted to run the script. I was able to run it properly, but I was not able to use the 8110 LTE on Tmobile US. I would be happy to provide any troubleshooting information you would like. 

[Luxferre]

So, I finally was able to verify this myself.

I had to change IMEI to an already registered one (from Alcatel OT-4044O aka Cingular Flip 2 in my case) to get the data services, but it worked on AT&T. I just swapped the SIM and IMEI from the Alcatel into 8110 and it worked!

So, it's definitely coming in the next GerdaOS build. Now we can make 8110 a true worldphone.

[Luxferre]

You also need to change IMEI to the one your T-Mobile SIM was registered to.

[speeduploop]

Doesn't AT&T use at least in some us-regions frequencies which even a stock 8110 supports?

(so this could also be a coincidence...)

[Luxferre]

Nope, there are no 3/7/20 LTE bands in US AFAIK, at least here in Texas.

[Kevin Kays]

I think the test was done with the B35 and not the 8110.

[speeduploop]

Yeah I forgot -- the stock-supported bands weren't LTE...

[PuriShnit]

@LuxFerre, AT&T also works on 3g - 850 Mhz.

Did you verify it was using LTE not UMTS?

[Luxferre]

The indicator is showing LTE, not H or H+ which is showing up when using UMTS.

[PuriShnit]

Great!

Did you try searching for manually selecting network carrier, to see which other carriers show up?

It may be useful to disable most LTE bands, and only enable one at a time & see the results, so you can confirm if/which bands are really working... (iirc, AT&T uses 2,4,5,17).

[Sean Carolan]

Hey folks, just thought I'd report in on my results with a Google Fi SIM card.  Google Fi uses T-Mobile's network as an MVNO.

The results were a bit disappointing.  I ran the band unlock script, and even tried spoofing my IMEI the same as my Pixel XL.  Neither SIM card slot ever recognized the SIM card.  I just got unknown error messages each time.  

So maybe this will save someone else some time if they're thinking about using this phone with Google Fi, it doesn't seem to be compatible.

[Sean Carolan]

Here's another data point for folks trying to get an 8110 4g working with T-mobile MVNOs.  I tried again this morning with a Mint Mobile SIM card.  I've cloned the IMEI number from another KaiOS Phone (Alcatel Flip 2) that is confirmed working with Mint Mobile.  This time I sporadically get connected to the mint carrier but it still ends up saying "No Service".  I suspect T-mobile has got some way of blocking this phone from connecting to their network, even if your IMEI number matches that of a working phone.

I'd be interested to hear if anyone else has gotten the 8110 4g working with T-mobile or one of its MVNOs. I suspect they are blacklisting these phones somehow.  Or whitelisting the ones they want to service.

[Sean Carolan]

Also tried this with the stock IMEI numbers on the phone and same result.  I have ordered a prepaid SIM card from an AT&T reseller and will report back once I've tested that.

[Kevin Kays]

I have tried with T-Mobile proper and Verizon SIM cards. I was not successful with any. 

[emmeka]

Anyway to do the same for 3G? My carrier doesn't support VoLTE or 2G, and instead does voicecalls over 3G band 2... which the 8110 doesn't support :(

[Sean Carolan]

Happy to report that H2O Wireless prepaid SIM cards work fine after running this unlock script.  H2O Wireless is an AT&T reseller.