need to help(urgent)

[parsa_dig]

hi
i try to downgrade RM-596 (Nokia N8)
i pass all Steps Successfuly

Before downgrade

MCU Version V 92PS1_10w46.9
MCU Date 01-03-11
Product RM-596 (Nokia N8)
Manufacturer (c) Nokia
IMEI 355944046461323
Mastercode 767473623
IMEI Spare 3A55490464643102
IMEI SV 3355490464643112F0000000
PSN COM567479
Product Code 0599756
Basic Product Code 059D1H5
PSD 0000000000000000
LPSN 0
WLAN MAC A071A96436C4
APE SW 014.002
APE Variant 014.002.00.01014.002.14.01
APE Test rm596_ENO_2010wk46v141
APE HW 256
APE ADSP 256
APE BT HCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.
RETU 35
TAHVO 00
AHNE 11
HW 7100
UEM 256qHDHCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.n256i014.002j 014.002.00.01014.002.14.01krm596_ENO_2010wk46v141¥011.012.U01.01
UPP 256qHDHCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.n256i014.002j 014.002.00.01014.002.14.01krm596_ENO_2010wk46v141¥011.012.U01.01
RFIC |Alli_4.3.4
DSP TB92PS1_10w46.4
LCD 256qHDHCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.n256i014.002j 014.002.00.01014.002.14.01krm596_ENO_2010wk46v141
BT 256qHDHCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.n256i014.002j 014.002.00.01014.002.14.01krm596_ENO_2010wk46v141
ADSP RevID 256qHDHCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.n256i014.002j 014.002.00.01014.002.14.01krm596_ENO_2010wk46v141¥011.012.U01.01
AEM 256qHDHCI Version 4 (rev. 0). LMP Version 4 (rev. 7455). Manufacturer 13.n256i014.002j 014.002.00.01014.002.14.01krm596_ENO_2010wk46v141¥011.012.U01.01
Simlock Server SIMLOCK SERVER
Simlock Key 2440700000000000
Simlock Profile 0000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [1,2] State: OPENED Type: GID Data: FFFF
Simlock [1,3] State: OPENED Type: GID Data: FFFF
Simlock [1,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [1,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [2,2] State: OPENED Type: GID Data: FFFF
Simlock [2,3] State: OPENED Type: GID Data: FFFF
Simlock [2,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [3,2] State: OPENED Type: GID Data: FFFF
Simlock [3,3] State: OPENED Type: GID Data: FFFF
Simlock [3,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [4,2] State: OPENED Type: GID Data: FFFF
Simlock [4,3] State: OPENED Type: GID Data: FFFF
Simlock [4,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [5,2] State: OPENED Type: GID Data: FFFF
Simlock [5,3] State: OPENED Type: GID Data: FFFF
Simlock [5,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [6,2] State: OPENED Type: GID Data: FFFF
Simlock [6,3] State: OPENED Type: GID Data: FFFF
Simlock [6,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [7,2] State: OPENED Type: GID Data: FFFF
Simlock [7,3] State: OPENED Type: GID Data: FFFF
Simlock [7,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF

after downgrade

MCU Version V 92PS1_10w34.3
MCU Date 10-09-10
Product RM-596 (Nokia N8)
Manufacturer (c) Nokia
IMEI 355944046461323
Mastercode 767473623
IMEI Spare 3A55490464643102
IMEI SV 3355490464643102F4000000
PSN COM567479
Basic Product Code 059D1H5
PSD 0000000000000000
LPSN 0
WLAN MAC A071A96436C4
RETU 35
TAHVO 00
AHNE 11
HW 7100
RFIC |Alli_4.3.4
DSP TB92PS1_10w34.1
Simlock Server SIMLOCK SERVER
Simlock Key 2440700000000000
Simlock Profile 0000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [1,2] State: OPENED Type: GID Data: FFFF
Simlock [1,3] State: OPENED Type: GID Data: FFFF
Simlock [1,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [1,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [2,2] State: OPENED Type: GID Data: FFFF
Simlock [2,3] State: OPENED Type: GID Data: FFFF
Simlock [2,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [2,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [3,2] State: OPENED Type: GID Data: FFFF
Simlock [3,3] State: OPENED Type: GID Data: FFFF
Simlock [3,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [3,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [4,2] State: OPENED Type: GID Data: FFFF
Simlock [4,3] State: OPENED Type: GID Data: FFFF
Simlock [4,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [4,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [5,2] State: OPENED Type: GID Data: FFFF
Simlock [5,3] State: OPENED Type: GID Data: FFFF
Simlock [5,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [5,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [6,2] State: OPENED Type: GID Data: FFFF
Simlock [6,3] State: OPENED Type: GID Data: FFFF
Simlock [6,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [6,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,1] State: OPENED Type: MCC-MNC Data: FFFFFF
Simlock [7,2] State: OPENED Type: GID Data: FFFF
Simlock [7,3] State: OPENED Type: GID Data: FFFF
Simlock [7,4] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF
Simlock [7,5] State: OPENED Type: IMSI Data: FFFFFFFFFFFFFFFF

Security Analysis

MCU Version V 92PS1_10w34.3
MCU Date 10-09-10
Product RM-596 (Nokia N8)
Manufacturer (c) Nokia
IMEI 355944046461323
Mastercode 767473623
Reading Security Block...
Security block OK and saved to "RM-596_355944046461323_6302011_111636 PM.SecurityBlock.PM"
Step 1 : Testing SIMLOCK
SIMLOCK SEFLTEST PASSED OK!
Step 2 : Testing SECURITY
-- SECURITY PROBLEM --
 
Phone have failed SECURITY Test, that means Superdongle Area is DAMAGED!
To repair it, simply slick "SX4 Authorization / SD Repair" button.
After SX4/SD Repair, don't forget to write PM file with fields 1,309 (if SW don't do this automatically)
 
Additionaly, Checking HWC/CCC Certs...
Booting CMT...
CMT_SYSTEM_ASIC_ID: 000000030000022600010007600C192102031104
CMT_EM_ASIC_ID: 00000C35
CMT_EM_ASIC_ID: 00000C30
CMT_PUBLIC_ID: 1020000ABBA403447630CE39AB3F969EE4AD84F2
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: 916F75217F32081248B15C38DFC8E81B
CMT_BOOT_ROM_CRC: E693EF0D
CMT_SECURE_ROM_CRC: AC22615B
CMT Ready!
Searching for BootCode: DualLine 32Bit
RAPUv11_2nd.fg, Type: 2nd Boot Loader, Rev: 768.11.16.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Using NEW BB5 FLASHING PROTOCOL
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
If software STUCK HERE with box TX LED lit, that means:
1. You have not attached yellow TX2 Adapter (IT IS REQUIRED FOR BB5 PHONES WHEN USING JAF/UFS CABLES!)
2. Your cable is not TX2 Enabled!
3. Transmission error occured, try again
In either cases, you need to reconnect your box from USB.
FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
FlashChip[0,CMT]: 0x0000000000000000, Unknown, NOR
FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR
FlashChip[0,CMT]: 0x00EC005000000031, Samsung, ONENAND
Requested Algorithm: XSR 1.6 (CMT)
Searching for BootCode: DualLine 32Bit
FlashChip 0x00EC0050 (Samsung), Size: 512MBytes, VPP: Not Supported
RAPUv11_XSR17_alg.fg, Type: Algorithm, Rev: 768.11.16.0, Algo: XSR 1.6
Initializing TurboCache...
TurboCache Loaded!
Writing CMT PASUBTOC Certificate...
Writing CMT ALG Certificate...
CMT Algorithm Ready!
Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Adding FUR Client (CMT, State: Ready)...
CMT FUR Ready!
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: D172C32473AE199B213465ABB3853246F9631231
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
!!!!! HWC IS CORRUPTED, ANOTHER REASON OF SECURITY TEST FAILED !!!!!
!!!!! CCC IS CORRUPTED, ANOTHER REASON OF SECURITY TEST FAILED !!!!!
Restarting MCU...
-- SECURITY PROBLEM --
Step 3 : Analyzing Security Block
"1020000ABBA403447630CE39AB3F969EE4AD84F2.C0004FA7" Exists, That is good...
Checking SUPERDONGLE...
SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!
Checking SIMLOCK...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking MCU&DSP TIMESTAMPS...
MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!
Checking CMLA KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking ECC KEYS...
Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)
Checking DIV KEYS...
DIV KEYS FOUND AND CHECKSUM OK! PASSED!
Analyze finished!
Warning: At least one Certificate Test failed, but no Local Generic RPL File found, Put it in SX4 folder.
 
 

i need rpl without npc(hwc-ccc)
its very urgent

[Mr.3.]

Did u backup rpl and full pm before downgrade?

[parsa_dig]

Of cours
but i use recover imei.maybe this Switch restore only npc
i try to write cer back up Manuely

[parsa_dig]

pm was Successfuly Wrote Except filed 308

[moulnisky]

This is normal as the PM308 is on all the last bb5 models write protected.

BR

Alex