Enabling factory service mode in S68

[Cataglyphis]

Hi friends. I've just got an USB cable for my S68 and have successfully updated the firmware version to 52.

Now I want to play with the phone. I just want to change FlexMenu icons and do stuff like that. Nothing big (no unlocking, no debranding, etc). I've learned that I need to access to some hidden folders on the flash memory of the phone and I *think* that I need to send my phone's SKEY to it in order to enable factory service mode and finally be able to see those hidden folder.

OK. I've got PapuaUtils and got IMEI, ESN and HASH values with some nice Java program I've put into the phone. Now PapuaUtils might be able to calculate my SKEY and BKEY with those codes, but it fails to so so. This is the log (using PapuaUtils 1.0.5). PapuaUtils take some minutes "thinking" in "Calculation of keys" and then say that no keys were found:

Getting Codes from phone...
Getting Information:
Model: SIEMENS S68 52 lg1
Phone is in "Normal Mode"
IMEI: 35843900XXXXXXX
SecurityStatus: CustomerMode
HWID: 404
Accumulator Voltage: 4147 mV.
Error switching to mode BFB!
Reading keys is supported till version 36 x65!
For correct work use "Enter SKEY in phone"!
Calculation of keys...
Keys not found!

Need I to enter any other data for PapuaUtils? What am I doing wrong?

TIA

[dagos]

Originally Posted by Cataglyphis

Hi friends. I've just got an USB cable for my S68 and have successfully updated the firmware version to 52.

Now I want to play with the phone. I just want to change FlexMenu icons and do stuff like that. Nothing big (no unlocking, no debranding, etc). I've learned that I need to access to some hidden folders on the flash memory of the phone and I *think* that I need to send my phone's SKEY to it in order to enable factory service mode and finally be able to see those hidden folder.

OK. I've got PapuaUtils and got IMEI, ESN and HASH values with some nice Java program I've put into the phone. Now PapuaUtils might be able to calculate my SKEY and BKEY with those codes, but it fails to so so. This is the log (using PapuaUtils 1.0.5). PapuaUtils take some minutes "thinking" in "Calculation of keys" and then say that no keys were found:

Getting Codes from phone...
Getting Information:
Model: SIEMENS S68 52 lg1
Phone is in "Normal Mode"
IMEI: 35843900XXXXXXX
SecurityStatus: CustomerMode
HWID: 404
Accumulator Voltage: 4147 mV.
Error switching to mode BFB!
Reading keys is supported till version 36 x65!
For correct work use "Enter SKEY in phone"!
Calculation of keys...
Keys not found!

Need I to enter any other data for PapuaUtils? What am I doing wrong?

TIA

Hi,
You have firmware 52 and language pack1. In your log file apair message ..till version 36 x65 (read directly code working bellow firmware 36).
You need to use the papuasoft version 0.97, upload (using phone manager) java midlet on Aplication->Viper-javax75, activate SIMSIM function from the papua, enter (in the phone) to Menu->Application->Viper-javax75, wait 5-10 minutes and write your code in the "Code" row (from the papuasoft).
Calculate SKEY + Bkey,Send Skey and to the papua display apair "Security Status: Factory mode".
Br,
dagos

[Cataglyphis]

Originally Posted by dagos

Hi,
You have firmware 52 and language pack1. In your log file apair message ..till version 36 x65 (read directly code working bellow firmware 36).
You need to use the papuasoft version 0.97, upload (using phone manager) java midlet on Aplication->Viper-javax75, activate SIMSIM function from the papua, enter (in the phone) to Menu->Application->Viper-javax75, wait 5-10 minutes and write your code in the "Code" row (from the papuasoft).
Calculate SKEY + Bkey,Send Skey and to the papua display apair "Security Status: Factory mode".
Br,
dagos

Thanks for the answer and the software, dagos. I have a problem, though: the Viper-javax75 app just crashes in my phone. It asks for memory access permission (which I allow) and then displays the following error:

java.lang.NoClassDef Found error: com/siemens/mp/io/file

and then a "Connection error" pops ups.

I've given the app the needed permissions. Should I adjust anything else related to Java apps on the phone?

We`re closer!

[Cataglyphis]

OK, I've got my SKEY and BKEY and PapuaUtils display now "Security Status: Factory mode".

Nice. Problem is that I can't see now the hidden folders in the flex memory of the phone. I tried to enable "Service Mode" with PapuaUtils, but I'm doing something wrong.

Question is: How can I access the hidden folders now that I know the SKEY and BKEY of my phone?

I'm really close this time!

[dagos]

Originally Posted by Cataglyphis

Thanks for the answer and the software, dagos. I have a problem, though: the Viper-javax75 app just crashes in my phone. It asks for memory access permission (which I allow) and then displays the following error:

java.lang.NoClassDef Found error: com/siemens/mp/io/file

and then a "Connection error" pops ups.

I've given the app the needed permissions. Should I adjust anything else related to Java apps on the phone?

We`re closer!

Ok,
in this case try to use the px75v1 midlet (used for X65-new and X75). If not working, try with px65v5 (used for C65) or bsReader midlet (used for X75).
Br,
dagos

[dagos]

Originally Posted by Cataglyphis

OK, I've got my SKEY and BKEY and PapuaUtils display now "Security Status: Factory mode".

Nice. Problem is that I can't see now the hidden folders in the flex memory of the phone. I tried to enable "Service Mode" with PapuaUtils, but I'm doing something wrong.

Question is: How can I access the hidden folders now that I know the SKEY and BKEY of my phone?

I'm really close this time!

Ok,
I write response in the same times with you. I try to respond to your question. Before, restart your phone, read all codes with papua and see in the log if your phone it is in the Factory mode ( because if you don't click on the "Send SKEY", after restart, your phone enter again in the Customer mode).
To modify menu, icons, ... in your phone you don't need to entrer SKEY (if your phone is in Factory mode). Just use the Phone Manager software.
Br,
dagos

[Cataglyphis]

Originally Posted by dagos

Ok,
I write response in the same times with you. I try to respond to your question. Before, restart your phone, read all codes with papua and see in the log if your phone it is in the Factory mode ( because if you don't click on the "Send SKEY", after restart, your phone enter again in the Customer mode).
To modify menu, icons, ... in your phone you don't need to entrer SKEY (if your phone is in Factory mode). Just use the Phone Manager software.
Br,
dagos

Wow thanks dagos! This works ultra nicely! I've got a very nice iCandy FlexMenu in no time. Thanks!

[janar_jk]

Very big thanks from me too. All day i tried to handle phone with testpoint, but using these aplications and calculatind skey all is ok!

BR Janar