8330 Life Timers - GSM-Forum

techsign · 07-12-2012, 18:46

I am attempting to reset the life timers on some Verizon Blackberry 8330's with ESN. The timers that I need to clear are the voice and data usage timer that is displayed in the status menu after pressing 'BUYR'. The handsets that I am working with do not have any IT policy on them. So far I have tried the following

1. Reset factory using JL cmder, BBSAK, Crakutil have all failed to reset these timers. I have seen many references to this working for these older models, but have not been able to duplicate it myself. Is it possible that the phone must have an IT policy installed on it for the life timers to clear? If so is there a method other than a BES Server to load an IT policy to a handset.

2. Using MFI 1.8 and 2.0 I have tried to use clear mep but I receive the following error "Command Unsupported 65326 Cant get confirmation. Cannot set MEP data. Cannot load MEP file.". I have tried this several software versions such as 4.5.0.77 and 4.5.0.175 as well as the engineering OS loaded by MFI with the same results.

If anyone has any information regarding the issue that I am seeing I would greatly appreciate any help that you could provide. I would also be willing to pay for any ready made solution that could accomplish this task.

techsign · 07-23-2012, 21:49

I have been working on this a bit more and have been able to find a 8330 which I have been able to reset the lifetimers on. This is an ESN 8330 that had an IT policy on it originally. Since the timers were reset I have updated the OS and to many different versions and the timers will always clear. I still several other ESN 8330s that the timers will not clear and I can not see any noticeable difference between the 2 other than 1 having an IT policy originally and the other not. Does anyone have any information on where life timers are stored in CDMA RIM phones? I have read that they are stored in the appstore NV section of memory, but that section is secure on this phone so i have been unable to verify, any truth to this?

techsign · 08-15-2012, 21:36

Im still looking into this issue and figured I would post some addition things that I have looked into. Most recently I have been working with doing memory dumps with CFP. Since these are secure models I have had to do cread , rather than read which gives me an encrypted file. I also monitored this process with a USB monitor to see if the stream was unencrypted, with no success(stream was encrypted). Has anyone been able to read unencrypted memory from secure blackberry models without using Jtag?

Also as always if anyone has a solution for clearing life timers on secure blackberry devices I would be willing to pay for it.

07-12-2012, 18:46	#1 (permalink)
techsign Major Poster Join Date: Jul 2006 Posts: 40 Member: 311174 Status: Offline Thanks Meter: 5	8330 Life Timers I am attempting to reset the life timers on some Verizon Blackberry 8330's with ESN. The timers that I need to clear are the voice and data usage timer that is displayed in the status menu after pressing 'BUYR'. The handsets that I am working with do not have any IT policy on them. So far I have tried the following 1. Reset factory using JL cmder, BBSAK, Crakutil have all failed to reset these timers. I have seen many references to this working for these older models, but have not been able to duplicate it myself. Is it possible that the phone must have an IT policy installed on it for the life timers to clear? If so is there a method other than a BES Server to load an IT policy to a handset. 2. Using MFI 1.8 and 2.0 I have tried to use clear mep but I receive the following error "Command Unsupported 65326 Cant get confirmation. Cannot set MEP data. Cannot load MEP file.". I have tried this several software versions such as 4.5.0.77 and 4.5.0.175 as well as the engineering OS loaded by MFI with the same results. If anyone has any information regarding the issue that I am seeing I would greatly appreciate any help that you could provide. I would also be willing to pay for any ready made solution that could accomplish this task. Last edited by techsign; 07-12-2012 at 18:55.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
NEW FORUM PLEASE BRING LIFE TO IT	::.::HITGSM::.::	GSM Mobile Links	2	09-22-2001 19:34
how can you reset the life timer without using a data cable for a 5125 TDMA phone?	PiNoY_bOy204	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	2	08-23-2001 12:46
call timer	mrENigma	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	1	08-21-2001 19:37
Is it posible 2 reset life-timer in 3210	rango	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	0	06-02-2001 09:34
WinTesla and life timer?	branek	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	0	07-13-2000 19:49

07-23-2012, 21:49	#2 (permalink)
techsign Major Poster Join Date: Jul 2006 Posts: 40 Member: 311174 Status: Offline Thanks Meter: 5	I have been working on this a bit more and have been able to find a 8330 which I have been able to reset the lifetimers on. This is an ESN 8330 that had an IT policy on it originally. Since the timers were reset I have updated the OS and to many different versions and the timers will always clear. I still several other ESN 8330s that the timers will not clear and I can not see any noticeable difference between the 2 other than 1 having an IT policy originally and the other not. Does anyone have any information on where life timers are stored in CDMA RIM phones? I have read that they are stored in the appstore NV section of memory, but that section is secure on this phone so i have been unable to verify, any truth to this?

08-15-2012, 21:36	#3 (permalink)
techsign Major Poster Join Date: Jul 2006 Posts: 40 Member: 311174 Status: Offline Thanks Meter: 5	Im still looking into this issue and figured I would post some addition things that I have looked into. Most recently I have been working with doing memory dumps with CFP. Since these are secure models I have had to do cread , rather than read which gives me an encrypted file. I also monitored this process with a USB monitor to see if the stream was unencrypted, with no success(stream was encrypted). Has anyone been able to read unencrypted memory from secure blackberry models without using Jtag? Also as always if anyone has a solution for clearing life timers on secure blackberry devices I would be willing to pay for it.