UNLOCKING OF SEMC S1-BASED ODM PHONES ( Se tool FAQ )
UNLOCKING OF SEMC S1-BASED ODM PHONES
server-based full signature method
1. select correct model
2. on settings, check "signed mode", "do full unlock instead of usercode reset"
3. back to odm tab
4. press unlock
that method can fix damaged security zone.
that method depends of external service, so it can be offline any time.
standalone patch method
1. select correct model
2. uncheck all settings
3. back to odm tab
4. press unlock
note, that such method will work only for old security locosto-based phones.
if you will get error while attempting to do that method - you have new security phone and should try other methods.
server-based patch method
1. select correct model
2. on settings, check "signed mode", "use alternative security bypass"
3. back to odm tab
4. press unlock
that method can not fix security zone.
user code reset
1. select correct model
2. on settings, check "signed mode"
3. back to odm tab
4. press unlock
note,that some old firmware not support usercode reset, so if standart code will not work after reset, reflash phone with latest firmware.
POSSIBLE PROBLEMS WITH S1 PHONES
damaged trim area , imei could not be read, simlocks state "tampered" or "0"
first, we need to restore trim area, for that
1. select correct model
2. on settings, check "signed mode","enable alternative security bypass"
3. add to firmware area
if you have neptune-based phone - W302_TA.SSW
if you have t280,t303,r306,r300,k330,w205,Tilde phone - R300_TA.SSW
if you have t250 phone - t250_ta.ssw
if you have Z250,z320,t270 phone - z320_ta.ssw
if you hace j132 phone - j132_ta.ssw
4. press flashif you have t280,t303,r306,r300,k330,w205,Tilde phone - R300_TA.SSW
if you have t250 phone - t250_ta.ssw
if you have Z250,z320,t270 phone - z320_ta.ssw
if you hace j132 phone - j132_ta.ssw
now trim area structure restored and phone should be signed with s1 signature server.
it is recommended,though restore phone original imei first, for that:
1. create text file with contents:
taread:000107D1
3. press "write script", file will be created in form %imei%.txt
4. looks at file in notepad, you will see imei inside in very simple form, change imei to original and save file
5. select changed file in misc. field and again press write script
6. check with identify if you set correct imei, repeat 4,5 until success
now you need unlock phone using signature server, consult corresponding faq post for that.
note, that alternative security bypass not available for phones with aid 0004, you can not fix aid004 phone with damaged trim area.
phone simlock okay, not tampered, but phone stucked,slow,rebooting. flashing not help.
most probably, internal fs gone to winds. you need write fullflash from working phone or write clean file system, then reflash phone
check support area for that files.
please note, that all neptune-based phones can be cured with w302_fullflash,etc (check trim area repair case)
in most cases, alternative security bypass needed for writing fullflash.
note, that alternative security bypass not available for phones with aid 0004.
phone can't be detected at all
semcboot somehow got damaged, while it is never touched by any process.
procedure to fix:
1. select correct model
2. on settings check "signed mode"
3. add erom to firmware tab.
if you have neptune based phone: 1207-7713_EROM_S1_NEPTUN_HS_SEMC_SIMLOCK_R7A024.sin
if you have locosto based phone, then select situable from:
J132_EROM_S1_LOCOSTO_HS_USB_R5A038_64k.sin
K330_T280_T270_EROM_S1_LOCOSTO_HS_R5A028.sin
R300_R306_T303_S1_LOCOSTO_HS_R5A031_128.SIN
T250_CXC1250616_EROM_S1_LOCOSTO_HS_R5A022.sin
Z250_Z320_EROM_S1_LOCOSTO_HS_R5A023.sin
4.press recovery
check if phone trim area/simlock are okay by doing identify.
repair simlock or trim area if needed.
note, that semcboot repair not available for phones with aid 0004.
0 comments:
Post a Comment