TEST mode on the T28s

[eric s0n]

After my last post seems to have caused a lot of attention and finally a correct pinout description of the T28s, I'll try to start a new thread: test mode programming on the T28

1) When I shortcut pin 9 and pin 11 as stated in the pinout description by probe1, I simply can't turn off my T28! I'll need to disconnect the cable and remove the battery to do so again... I tried this with a fully charged battery!

What do I need to do to have it enter test mode???

What serial port settings must be used to communicate with the T28 in test mode??

[Supergsm]

If you cannot turn off your phone. It is usually already into test mode. Send a command "kill”, it will exit test mode and restart the phone

[eric s0n]

No, the problem isn't that I can't turn it OFF, it is that I can't turn it ON!!

Anyways, thanks for the valuable info about the "kill" command, it might come in handy later...

[eric s0n]

Please, my friends, help me with this issue! Having a working cable ( I ****ing CAN talk to the phone in "normal" ( AT ) mode ) and having shortcutted the correct pins 9+11, having a fully charged battery and still not being able to switch on the phone, thus, no way to enter test mode... this makes me feel like the idiot I don't think I really am...

If anyone has ANY help on this issue and wants to share his knowledge with me, plz do so...

Thanks

[ALieN_CHeMiST]

Hi eric s0n,

I don't have a lot of experience in this bussiness, but whenever I put an Ericsson handset in to test mode, the phone doesn't switch on. The only way to exit test mode then is to remove the battery.

Hope this helps.

Also could you send me the digram for the cable you're using.

[eric s0n]

I use the Ericsson-manufactured datacable named "DRS-10" with small modifications: It was originally designed to have a computer communicate with an R320/R380 Ericsson mobile phone which has a built-in modem etc.. Since R3x0 and the T28 have exactly the same pinout, I can use this on my T28 ---> serial communication works perfectly when the phone is in normal mode i.e. AT commands can be sent and are responded. That's why I don't think the cable is faulty!

To put the phone into test mode I added a connector to connect to pin 9 and shortcutted it with pin 11 ( which is correct, according to the last thread I initiated ). In addition, the DRS-10 cable allows me to plug in the loading cable while the data cable is connected, thus, applying +5V DC to pin 11 which is then also applied to pin 9 ( due to the shortcut ).

Having an Ericsson-manufcatured cable and supplying 5V external DC to the flash pin should GUARANTEE smooth working of all software....

Unfortunately, when I push the "NO" button on the phone when the program ( Eserv32 ) prompts me to do so results in "No response from the phone"... also, nothing seems to happen on the phone's display or whereever... Also, when using a terminal program ( Hyperterminal Private edition ) running on the cable, 9600 baudbase 8N1, I don't get any response from the phone when pressing the "NO" button....

any ideas???

[ALieN_CHeMiST]

Erserv32 only works with older Ericssons.

I know this 'cause I've tried with T10s and a fully working cable (works with Saras, ER2000)

Bye

[eric s0n]

hmm.... yes, this might be true...

however, I trust myself much more than tools such as "Er2000" that are famous for killing phones at their will... that's why I am interested in how to communicate with the T28 in test mode myself!

If anyone knows what port settings ( 9600 8N1 ??) are required when using a terminal program such as HyperTerminal to communicate with a T28 in test mode??

Any experiences/advices on this topic are very welcome!

Thanks for your efforts!!

[eric s0n]

I don't want to stress anyone of you, but I really want to know how to communicate with the phone in testmode, using a terminal program...

please take my persistance as a sign for my huge interest in this topic!

What port settings are needed to communicate with the T28? 9600 8N1 seems to be reasonable as the phone uses this in normal mode... but there are also rumors 115200 was the correct setting... any help??

Are there any signs on the phone ( display messages, tone signals, etc... ) that it has entered testmode???

Does anyone have a list or know a link to a list with Ericsson test mode commands???

Thanks to all people that take the time to help me...

eric s0n

[FlipO]

On all the other ericssons, if you use a terminal program connected at 115200, with the test pin enabled (shorted, call it what you want), after turning the phone on, data is output from the phone (readable, network/phone/simcard details, not garbage)

[eric s0n]

hmmm.... yes, 115200 sounds reasonable...

but what other terminal settings do you use? parity? stopbits? etc...

oh, and WHAT strings does the phone send when it enters testmode or what command can I send to the phone to check if it has entered testmode??

thanks again!

[elari]

hi,
maybe you don't need to shortcut the two pins since you apply external dc5v to the test mode pin.
with shortcut from +5v from the phone and +5v from power supply maybe you have power supply down with electrical shortcut.
try to apply only +5v dc to test mode pin...
let me know

------------------

[El viejo Rimsky]

Excuse me. Maybe I are wrong, but to put an Ericsson phone
into test mode, it is not enough with connecting the TEST
pin to a high level voltage. Also, it is necessary to follow
a protocol of communications.

- Connect the unit to the port of comms in use.
(Parameters are: 9600-8N1) and run the program of coms.
(Hyperterminal, ZOC, etc.).

- Press NO key (in the phone) for short time. Phone should
answer with a symbol. This symbol is exclusive (ex. S868="H").
At this moment, phone is connected. It follows a sequence,
sending to, and receiving from phone some characters.

- If all is O.K. you must send the "bootstrap loader file"
(bootstrap.bin) to the phone and wait for the symbol "<"
from phone.

- Then, you must send to phone the chain "C27", switch to
115200-8N1 and send again 0xOD and wait for 0x3E. Then send
the testmode.bin file ... And so on ...

There are some scripts by Alexey Gerasimov <ag@unibest.ru>,
written on REXX language, to be used with ZOC terminal program
(www.emtec.com). Be careful!! Using these scripts, you can
damage permanently your phone.

Of course, you MUST have the rights "bootstrap" and "testmode"
bin files. Eserv32 fails to enter into test mode (in new models),
because it has inside, an old version of those files.

[eric s0n]

hmm...

I tried what you are saying but it didn't work for me... here's what I did:

First, I connected my modified DRS-10 Ericsson cable to my T28 and sent a few AT commands to test the connection which where responded properly...

Second, I switched off the phone normally and shortcutted pin 9 with pin 11...

Third, I started up "Hyperterminal", listening on com1 ( where the cable was connected to ), settings 9600-8N1...

Fourth, I pressed the "NO" button on the T28 shortly... nothing happened, neither on com1 nor does the phone show any reaction when pressing "NO"... I tried pressing it for a long time, for a short time and so on... However, when disconnecting all plugs from the phone I need to remove the battery one time before I can switch it on again....

hmm... what could be the problem? Does anyone have any idea??? What should I use as an external power supply? A battery? What battery? etc...


Also, I have a small tip for people that have problems with their T28 after a failed flash attempt: When I was once shortcutting pin 9 and pin 11 when the phone was switched on... it immediately switched off and couldn't be switched on... It seemed dead... However, after a little trying, I could "revive" it by hooking up the battery recharge cable to it, removing the sim card, then switching on ( which took some more time than usually ), switch off again, put in the sim card again and use it normally again...

maybe this helps someone...


Plz try to help me with my issue if you have the time and the knowledge... Thanks to everyone you donates me some of his knowledge about and experience with T28 phones...

[eric s0n]

I still can't enter test mode on my T28...

I use an original Ericsson data cable for T28/R320/R380, but I soldered on two wires and a switch so that I can shortcut pin 9 and 11 when I want...

if my switch is "on" i.e. pin 9 and 11 are shortcutted, and if I press "NO" for a short time then ( as saras 2.2 tells me to do ) the display on the cellphone flashes for a second but then, everything keeps quiet and saras says "No response from the phone"...

how should I connect an external power supply to the test pin... simply hook up a battery's + pole to that pin???

What would YOU recommend me to do?

Thanks in advance!

[Fox34]

Ericsson phones basically need one thing when entering test mode:
Battery fully charged... (I mean best for you to init your experiences just after recharging it.)
If so, for entering test mode, just short pins 9&11 of the phone connector.
Adicional and also important: Use a fast computer, like PIII 400 or better.
It must work this way, because I believe your cable is OK.
Good luck.

[kao]

Originally posted by Fox34:
Ericsson phones basically need one thing when entering test mode:
Battery fully charged... (I mean best for you to init your experiences just after recharging it.)
If so, for entering test mode, just short pins 9&11 of the phone connector.
Adicional and also important: Use a fast computer, like PIII 400 or better.
It must work this way, because I believe your cable is OK.
Good luck.

[kao]

sorry for the last message...

i have the same problem
i have the original ericsson cable (drs-10), i've try to short cut pin 9&11 but no response too

any personn tell me than use a +3.3v (apparently +5v can destroy the phone)

but if i connect a battery, i must connect the pole + on pin9 but where i must connect the pole - ?

is there a person who have already make a flashing of T28 with this cable and with SARAS 2.2 ?

thanks for advance

[eric s0n]

Now that you say the modified drs-10 cable doesn't work for you either, I assume that there might be some hardware check to prevent people using this cable from entering test mode... hmmm....

for this reason, I'll attempt to build a cable myself and found the following plan on the web...

http://www.mobileworld.org/tech_info/gsm/ericsson_cable_1.gif

For me, it looks as if this cable WILL work and probably better than any other cable since it steadily draws power from the serial port rather than from the battery... also, you can use the cheaper MAX232 IC than the MAX3232 since enough voltage will be supplied by the serial port... To my mind, this is a very reliable cable....

Does anyone have experiences with this cable or did use it with a T28? Did it work? Or may any hobby electrician have a quick look on this plan and reply to us if this cable is good/safe for the T28?

Thanks!

Also, if someone could be so nice to send me the 000113 bin file 1354 prgCXC125115, West European version to insane.jester@gmx.net??

Also thanks, if you can help...

Laters...

[Robby]

Hello to everybody.
I have modified and tested T28 Cable Interfase and now is working 1000000 %
If anybody is interesting email me.
Robby

[John GSM]

How can unlock T28 ?

I can flash 00w09, with Zulea or Saras software 100% with older Flash or newer

[nightxyz]

Hi !

i saw here somebody has said erserv32 cable
doesn't work with new phones.
i builded my own cable and i am unlocking
6xx,7xx,8xx,a1018,t10,t18 with same cable.
only t-28 has different pin-outs but i will
make a cable connection to my simlock device.
i am using erserv32 also.
bye...