GSM-Forum - Nokia 5800d RM-428 in SECURITY

GSM-Forum (https://forum.gsmhosting.com/vbb/)

- Cyclonebox (https://forum.gsmhosting.com/vbb/f528/)

- - Nokia 5800d RM-428 in SECURITY_TEST is FAILED! [Solved] (https://forum.gsmhosting.com/vbb/f528/nokia-5800d-rm-428-security_test-failed-solved-1498293/)

Nokia 5800d RM-428 in SECURITY_TEST is FAILED! [Solved]

good friends ..

This time I have a Nokia 5800d RM-428 with the problem of SECURITY_TEST is FAILED!

I present here the log of "Read info".....

Code:

MCU Version    V ICPR72_08w47

MCU Date    24-11-08

Product        RM-428 (Nokia 5800 XpressMusic)

Manufacturer    (c) Nokia

IMEI        xxxxxxxxxxxxxxx

Mastercode    47407142

IMEI Spare    3A95430802210402

IMEI SV        3395430802210402F2000000

PSN        CZB781641

Product Code    0577218

Basic Product Code    0559231

PSD        0000000000000000

LPSN        0

WLAN MAC    00247C1D9206

RETU        16

TAHVO        22

AHNE        11

HW        1101

RFIC        17141715

DSP        sangalo_wmps.ICPR72_08w47

Simlock Server    SIMLOCK SERVER

Simlock Key    2440700000000000

Simlock Profile    0000000000000000

Simlock Key Cnt    0

Simlock FBUS Cnt    0

Simlock [1,1]    State: OPENED    Type: MCC-MNC    Data: FFFFFF

Simlock [1,2]    State: OPENED    Type: GID    Data: FFFF

Simlock [1,3]    State: OPENED    Type: GID    Data: FFFF

Simlock [1,4]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [1,5]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [2,1]    State: OPENED    Type: MCC-MNC    Data: FFFFFF

Simlock [2,2]    State: OPENED    Type: GID    Data: FFFF

Simlock [2,3]    State: OPENED    Type: GID    Data: FFFF

Simlock [2,4]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [2,5]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [3,1]    State: OPENED    Type: MCC-MNC    Data: FFFFFF

Simlock [3,2]    State: OPENED    Type: GID    Data: FFFF

Simlock [3,3]    State: OPENED    Type: GID    Data: FFFF

Simlock [3,4]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [3,5]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [4,1]    State: OPENED    Type: MCC-MNC    Data: FFFFFF

Simlock [4,2]    State: OPENED    Type: GID    Data: FFFF

Simlock [4,3]    State: OPENED    Type: GID    Data: FFFF

Simlock [4,4]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [4,5]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [5,1]    State: OPENED    Type: MCC-MNC    Data: FFFFFF

Simlock [5,2]    State: OPENED    Type: GID    Data: FFFF

Simlock [5,3]    State: OPENED    Type: GID    Data: FFFF

Simlock [5,4]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [5,5]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [6,1]    State: OPENED    Type: MCC-MNC    Data: FFFFFF

Simlock [6,2]    State: OPENED    Type: GID    Data: FFFF

Simlock [6,3]    State: OPENED    Type: GID    Data: FFFF

Simlock [6,4]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [6,5]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [7,1]    State: OPENED    Type: MCC-MNC    Data: FFFFFF

Simlock [7,2]    State: OPENED    Type: GID    Data: FFFF

Simlock [7,3]    State: OPENED    Type: GID    Data: FFFF

Simlock [7,4]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

Simlock [7,5]    State: OPENED    Type: IMSI    Data: FFFFFFFFFFFFFFFF

searching the web tell me a PM is solved turnin 'it up ... but I miss with distindos PM and the problem persists ...

I can do to solve the problem? since I've written about 3 PM and nothing .....

I can do ... thanks ...

Just Go to "BB5 / Security" use the "Analize Security" function and FOLLOW the Instructions given by the soft.

You can get te Needed PM (with 1&309 Fields) & RPL (with HWC & CCC) from here:

http://ptt.4mg.com/Gsmforum/PM/

Just Download the RM-428.zip and extract the Contents to Cyclone Box\SX4 folder

BR

Quote:

Originally Posted by ptt (Post 8546874)

Just Go to "BB5 / Security" use the "Analize Security" function and FOLLOW the Instructions given by the soft.

BR

below the log of "Analyze Security"

Code:

Started Phone Security Analysis...

MCU Version    V ICPR72_08w47

MCU Date    24-11-08

Product        RM-428 (Nokia 5800 XpressMusic)

Manufacturer    (c) Nokia

IMEI        xxxxxxxxxxxxxxxx

Mastercode    47407142

Reading Security Block...

Security block OK and saved to "RM-428_359348020124020_29062012_053321 p.m..SecurityBlock.PM"

Step 1 : Testing SIMLOCK

SIMLOCK SEFLTEST PASSED OK!

Step 2 : Testing SECURITY

-- SECURITY PROBLEM --
 

Phone have failed SECURITY Test, that means Superdongle Area is DAMAGED!

To repair it, simply slick "SX4 Authorization / SD Repair" button.

After SX4/SD Repair, don't forget to write PM file with fields 1,309 (if SW don't do this automatically)
 

Additionaly, Checking HWC/CCC Certs...

Booting CMT...

CMT_SYSTEM_ASIC_ID:    000000010000022600010006400C192101031103

CMT_EM_ASIC_ID:        00000296

CMT_EM_ASIC_ID:        00000B22

CMT_PUBLIC_ID:        0B500105E2740052EA8B036B43EFEE3299D8A586

CMT_ASIC_MODE_ID:    00

CMT_ROOT_KEY_HASH:    CAEEBB65D3C48E6DC73B49DC5063A2EE

CMT_BOOT_ROM_CRC:    4B9B7510

CMT_SECURE_ROM_CRC:    3E691FF8

CMT Ready!

Searching for BootCode: DualLine 32Bit

RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 512.12.8.0, Algo: BB5

Flashbus Write baud set to 1.0Mbits

Flashbus Read baud set to 98Kbits

Using NEW BB5 FLASHING PROTOCOL

Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding

Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit

Box TX2 Data Pin set to: Service Pin 3

If software STUCK HERE with box TX LED lit, that means:

1. You have not attached yellow TX2 Adapter (IT IS REQUIRED FOR BB5 PHONES WHEN USING JAF/UFS CABLES!)

2. Your cable is not TX2 Enabled!

3. Transmission error occured, try again

In either cases, you need to reconnect your box from USB.

FlashChip[0,CMT]: 0x0000000000000000, Unknown, RAM

FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC

FlashChip[0,CMT]: 0x0400000000000000, Unknown, NOR

FlashChip[1,CMT]: 0x0000000100000000, Unknown, NOR

FlashChip[0,CMT]: 0x00EC004000000121, Samsung, ONENAND

Requested Algorithm: XSR 1.5 (CMT)

Searching for BootCode: DualLine 32Bit

FlashChip 0x00EC0040 (Samsung), Size: 256MBytes, VPP: Not Supported

RAPIDOv11_XSR15_alg.fg, Type: Algorithm, Rev: 512.12.8.0, Algo: XSR 1.5

Initializing TurboCache...

TurboCache Loaded!

Writing CMT PASUBTOC Certificate...

Writing CMT ALG Certificate...

CMT Algorithm Ready!

Default Transmission Mode Requested by Loader: Dual Line, 32 bit, Overriding

Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit

Box TX2 Data Pin set to: Service Pin 3

Adding FUR Client (CMT, State: Ready)...

CMT FUR Ready!

Box VPP disabled

Internal CMT Phone VPP Enabled

PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61

APE Subsystem Not Found

Flashbus Write baud set to 5.0Mbits

HWC Looks OK!

CCC Looks OK!

Restarting MCU...

-- SECURITY PROBLEM --

Step 3 : Analyzing Security Block

"0B500105E2740052EA8B036B43EFEE3299D8A586.C0006FA2" Exists, That is good...

Checking SUPERDONGLE...

SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!

Checking SIMLOCK...

SIMLOCK FOUND AND CHECKSUM OK! PASSED!

Checking MCU&DSP TIMESTAMPS...

MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!

Checking CMLA KEYS...

Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)

Checking ECC KEYS...

Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)

Checking DIV KEYS...

Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)

Analyze finished!

I should do? sorry, I'm newbie to this box

Do as indicated:

Quote:

Phone have failed SECURITY Test, that means Superdongle Area is DAMAGED!

To repair it, simply slick "SX4 Authorization / SD Repair" button.

After SX4/SD Repair, don't forget to write PM file with fields 1,309 (if SW don't do this automatically)

In my previous post you have the Needed Files

BR

I think the solution is as follows .....

Phone have failed SECURITY Test, that means Superdongle Area is DAMAGED!
To repair it, simply slick "SX4 Authorization / SD Repair" button.
After SX4/SD Repair, don't forget to write PM file with fields 1,309 (if SW don't do this automatically)

but in the folder C: \ Program Files \ Cyclone Box \ SX4 is not that of my model is RM-482 ...

I can do?

ok try and comment friend ... thanks

Download the RM-428.zip and extract the Needed files in Your SX4 folder

Link in Post #2

Quote:

Originally Posted by ptt (Post 8546874)

Just Go to "BB5 / Security" use the "Analize Security" function and FOLLOW the Instructions given by the soft.

You can get te Needed PM (with 1&309 Fields) & RPL (with HWC & CCC) from here:

Index of /Gsmforum/PM

Just Download the RM-428.zip and extract the Contents to Cyclone Box\SX4 folder

BR

here gave me the error when trying to write the PM.......

Code:

SX4 Authorization / SD Repair Procedure Started....

"0B500105E2740052EA8B036B43EFEE3299D8A586.C0006FA2" Exists, That is good...

MCU Version    V ICPR72_08w47

MCU Date    24-11-08

Product        RM-428 (Nokia 5800 XpressMusic)

Manufacturer    (c) Nokia

IMEI        xxxxxxxxxxxxxxxx

Mastercode    47407142

Reading Security Block...

Security block OK and saved to "RM-428_359348020124020_29062012_054604 p.m..SecurityBlock.PM"

SX4 Status: Not authorized (74)

Started mutual authenthication with card...

Receiving Phone Seed 1...

Phone Seed 1 Received

Sending calculated Data 1, and expecting Seed 2...

Calculated Data 1 accepted, Phone Seed 2 Received

Sending calculated Data 2

Calculated Data 2 sent, Checking Authorization Status again

Authorization successfully finished!

Looking for Virgin PM In Database...

Found, writing...

[1,0] Written, Length: 114 bytes, Status: OK

[1,2] Written, Length: 98 bytes, Status: OK

[1,4] Written, Length: 110 bytes, Status: OK

[1,6] Written, Length: 98 bytes, Status: OK

[1,8] Written, Length: 110 bytes, Status: OK

[1,13] Written, Length: 98 bytes, Status: OK

[1,16] Written, Length: 98 bytes, Status: OK

[1,18] Written, Length: 98 bytes, Status: OK

[1,20] Written, Length: 98 bytes, Status: OK

[1,24] Written, Length: 84 bytes, Status: OK

[1,25] Written, Length: 4 bytes, Status: OK

[1,26] Written, Length: 110 bytes, Status: OK

[1,28] Written, Length: 98 bytes, Status: OK

[1,29] Written, Length: 10 bytes, Status: OK

[1,31] Written, Length: 98 bytes, Status: OK

[1,34] Written, Length: 80 bytes, Status: OK

[1,35] Written, Length: 16 bytes, Status: OK

[1,37] Written, Length: 4 bytes, Status: OK

[1,39] Written, Length: 36 bytes, Status: OK

[1,40] Written, Length: 16 bytes, Status: OK

[1,41] Written, Length: 182 bytes, Status: OK

[1,42] Written, Length: 4 bytes, Status: Not accepted, Code: 20

[1,43] Written, Length: 36 bytes, Status: Not accepted, Code: 20

[1,45] Written, Length: 182 bytes, Status: Not accepted, Code: 20

[309,0] Written, Length: 4 bytes, Status: Not accepted, Code: 20

[309,1] Written, Length: 2 bytes, Status: Not accepted, Code: 20

[309,2] Written, Length: 12 bytes, Status: Not accepted, Code: 20

Failed to Write PM -> [309,4] Critical Error -1 occured

is due to this error?

Strange :confused:

that PM is from a working 5800, and the only one from an RM-428 that i have :confused:

Quote:

Originally Posted by ptt (Post 8546911)

Strange :confused:

that PM is from a working 5800, and the only one from an RM-428 that i have :confused:

I could do? the model behind the phone says .... 5800d-1b RM-482

I recommend?

Close the Soft, download the Zip file again, extract the contents to SX4 folder (overwrite / delete the 2 previously downloaded files, RM-428.pm & RM-428.rpl)

repeat the process

nothing the same error ....... if you do a full erase and up the software version and try again?

Quote:

Originally Posted by ptt (Post 8546931)

Close the Soft, download the Zip file again, extract the contents to SX4 folder (overwrite / delete the 2 previously downloaded files, RM-428.pm & RM-428.rpl)

repeat the process

I dont think so....

Check this post from Alex: http://forum.gsmhosting.com/vbb/4832326-post3.html

Quote:

error 20, it happens when the PM doesn't belong to the same mobile model

You need to make sure which RM is / was the phone

achieved and friends solve the problem!!

I explain ...

the trick was to place a backup of the RPL of the cell and replace it on the. rar you sent me and copy the folder with the name SX4 RM-408

and I am super good ... and on and normal ...

thank you very much for the help mates ..

experience and stay there hehehehe

Code:

SX4 Authorization / SD Repair Procedure Started....

"0B500105E2740052EA8B036B43EFEE3299D8A586.C0006FA2" Exists, That is good...

MCU Version        V ICPR72_08w47

MCU Date        24-11-08

Product                RM-428 (Nokia 5800 XpressMusic)

Manufacturer        (c) Nokia

IMEI                xxxxxxxxxxxxxxxxxxxxxx

Mastercode        47407142

Reading Security Block...

p.m..SecurityBlock.PM"

SX4 Status: Not authorized (74)

Started mutual authenthication with card...

Receiving Phone Seed 1...

Phone Seed 1 Received

Sending calculated Data 1, and expecting Seed 2...

Calculated Data 1 accepted, Phone Seed 2 Received

Sending calculated Data 2

Calculated Data 2 sent, Checking Authorization Status again

Authorization successfully finished!

Looking for Virgin PM In Database...

Found, writing...

[1,0] Written, Length: 114 bytes, Status: OK

[1,2] Written, Length: 98 bytes, Status: OK

[1,4] Written, Length: 110 bytes, Status: OK

[1,6] Written, Length: 98 bytes, Status: OK

[1,8] Written, Length: 110 bytes, Status: OK

[1,13] Written, Length: 98 bytes, Status: OK

[1,16] Written, Length: 98 bytes, Status: OK

[1,18] Written, Length: 98 bytes, Status: OK

[1,20] Written, Length: 98 bytes, Status: OK

[1,24] Written, Length: 84 bytes, Status: OK

[1,25] Written, Length: 4 bytes, Status: OK

[1,26] Written, Length: 110 bytes, Status: OK

[1,28] Written, Length: 98 bytes, Status: OK

[1,29] Written, Length: 10 bytes, Status: OK

[1,31] Written, Length: 98 bytes, Status: OK

[1,34] Written, Length: 80 bytes, Status: OK

[1,35] Written, Length: 16 bytes, Status: OK

[1,37] Written, Length: 4 bytes, Status: OK

[1,39] Written, Length: 36 bytes, Status: OK

[1,40] Written, Length: 16 bytes, Status: OK

[1,41] Written, Length: 182 bytes, Status: OK

[1,42] Written, Length: 4 bytes, Status: OK

[1,43] Written, Length: 36 bytes, Status: OK

[1,45] Written, Length: 182 bytes, Status: OK

[309,0] Written, Length: 4 bytes, Status: OK

[309,1] Written, Length: 2 bytes, Status: OK

[309,2] Written, Length: 12 bytes, Status: OK

[309,4] Written, Length: 12 bytes, Status: OK

[309,5] Written, Length: 12 bytes, Status: OK

[309,7] Written, Length: 12 bytes, Status: OK

[309,8] Written, Length: 12 bytes, Status: OK

[309,17] Written, Length: 12 bytes, Status: OK

Write PM Finished, Record written OK: 32, Record written NOT OK: 0

Started Phone Security Analysis...

MCU Version        V ICPR72_08w47

MCU Date        24-11-08

Product                RM-428 (Nokia 5800 XpressMusic)

Manufacturer        (c) Nokia

IMEI                xxxxxxxxxxxxxx

Mastercode        47407142

Reading Security Block...

p.m..SecurityBlock.PM"

Step 1 : Testing SIMLOCK

SIMLOCK SEFLTEST PASSED OK!

Step 2 : Testing SECURITY

SECURITY SEFLTEST PASSED OK!

Step 3 : Analyzing Security Block

"0B500105E2740052EA8B036B43EFEE3299D8A586.C0006FA2" Exists, That is good...

Checking SUPERDONGLE...

SUPERDONGLE FOUND AND CHECKSUM OK! PASSED!

Checking SIMLOCK...

SIMLOCK FOUND AND CHECKSUM OK! PASSED!

Checking MCU&DSP TIMESTAMPS...

MCU&DSP TIMESTAMPS FOUND AND CHECKSUM OK! PASSED!

Checking CMLA KEYS...

Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)

Checking ECC KEYS...

Failed to decode Security Section, Box Reported: Security Section Not Found (SL3 phone?)

Checking DIV KEYS...

DIV KEYS FOUND AND CHECKSUM OK! PASSED!

Analyze finished!