Some Important Experiment Info About E63-2 (rm-449) & Nokia New Security Structure

[bluffmaster]

Hello To All,

I Got E63-2 (RM-449) With Keypad Problem.
Actually Phone Wrongly flashed with E63-1 (RM-437) with latest version i 200.21.012 Instead of E63-2 Rm-449


So I Made Backup of RPL and Pm File
After That I Erase Phone and Phone Goes To Dead
Then I Flash with ENO Firmware of RM-437 Because RM-449 No ENO Available.

After That I Flash Phone With RM-449 with version 100.21.110 Phone Power On But Its Stuck On Nokia But I am able To Read Info So I Restore My Original Back Up But after Write Back Up Super Dongle Key Invalid.

Here is the Log


Imei: XXXXXXX
Updating PRODUCTCODE (0568891)... OK
Updating PSN (SAR247791)... OK
Updating HWID (0890)... OK
Updating SIMLOCK...OK
Trying to update SUPERDONGLE_KEY ...OK
Updating WMDRM_PD...OK
Updating WARRANTY ...OK
Updating PROD ...OK
Updating BT ...OK
Restoring RF/BB DATA from backup ...
Updating RF ...OK
Updating BB ...OK
RAP Data :
SYSTEM ASIC ID: 000000010000022600010006400C192101031103 [RAPIDO3G ver: 1.x]
EM1 ID: 00000296
EM2 ID: 00000B22
PUBLIC ID: 1BE0000A5F7F0052BAA4F64066E507CC7D291B78
ASIC MODE ID: 00
ROOT KEY HASH: 9A28E119033B91D14D22838C86D0D53C
ROM ID: 4B9B75103E691FF8
SecondaryBoot: RAPIDOv11_2nd.fg [BB5] version: 1.30.0 revision: 0.0 size: 0x3AC0
Supported RAP Ids: 0003192101002003, 000C192101002003, 4003192101002003, 400C192101002003, 4003192101011103, 400C192101011103, 4003192101021103, 400C192101021103, 4003192101031103, 400C192101031103, 4003192101011105, 400C192101011105, 400C192101021105, 400C192101031105
FlashID0: 00EC 0040 - 0040 0121 [Samsung 2Gb DDP OneNAND,2 Gbits] type: ONENAND,RAP
ExtBUSC: 0000 0000 0000 0000 0000 0000 0000 0000
ExtDEVC: FFFF 0000 - 0000 0000
Algorithm: RAPIDOv11_algo.fg [XSR 1.5] version: 1.35.0 revision: 0.0 size: 0x272B0
Supported RAP Ids: 0003192101002003, 000C192101002003, 4003192101002003, 400C192101002003, 4003192101011103, 400C192101011103, 4003192101021103, 400C192101021103, 4003192101031103, 400C192101031103, 4003192101011105, 400C192101011105, 400C192101021105, 400C192101031105
RAP PAPUBKEYS HASH: D9C25399C696B8549EDCDB1497A950B3A20DDFB6
NPC verified Ok.
Updating CMT NPC ...OK
Updating CMT CCC ...OK
Updating CMT HWC ...OK
Certificate programmed successfully !
Phone Type: RM-437 (Nokia E63)
SW Version: V ICPR71_08w44.1 30-10-08 RM-437 (c) Nokia
Imei plain: 3XXXXXX
Product Code: 0568891
Language Pack:
- not available.

SIMLOCK invalid!
SUPERDONGLE_KEY invalid!
- WD timer enabled, phone will reboot itself after 3 min.
SECURITY_TEST passed

TimeStamp: 2009-06-26T08:18:59+00:00
SW Version: 200.21.012
Variant Version: 001
ProductProfile: RM495_0575326_06.94_010.spr
Simlock: Inactive_sim_bb5.bin

SIMLOCK_DATA corrupted!




So I Perform Restore Sim Lock after That Sim Lock Ok

Imei: 3xxxxxxxxxxxxxxxxxxxx
Version: SIMLOCK SERVER
Provider: Nokia Test, Country: Finland
Counter: 0/3, 0/10

CONFIG_DATA: 2440700000000000
PROFILE_BITS: 0000000000000000

BLOCK 1: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 2: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 3: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 4: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 5: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 6: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 7: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
Total time to process is 10 min 52.266 s[

But Still My Phone Restart in Around 2 to 3 min and Phone also Not able authorized For SX4.

I tried So Many Trick But Phone Still in Same Condition


But Today I again Flash With RM-437 (E63-1) with Version 200.21.012
After That I Restore My RPl But This Time All Goes To Well....Super Dongle Key Valid, Sim Lock key Valid & Phone Not Restart in 3 Minutes.


Here is The Log

Phone Type: RM-437 (Nokia E63)
SW Version: V ICPR71_09w22 29-05-09 RM-437 (c) Nokia
Imei plain: 35683802117298-9
Product Code: 0568891
ApeCoreSw: 200.21.012
VariantId: 200.21.012200.21.012_v33
Language Pack:
- not available.

SIMLOCK seems to be valid
SUPERDONGLE_KEY seems to be valid
SIMLOCK_TEST passed
SECURITY_TEST passed


Imei: 3xxxxxxxxxxx
Version: SIMLOCK SERVER
Provider: Nokia Test, Country: Finland
Counter: 0/3, 0/10

CONFIG_DATA: 2440700000000000
PROFILE_BITS: 0000000000000000

BLOCK 1: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 2: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 3: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 4: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 5: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 6: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
BLOCK 7: 1=OPEN 2=OPEN 3=OPEN 4=OPEN 5=OPEN, DATA=FFFFFF
Total time to process is 10 min 52.266 s




I Share This Experiment for all My Friend & Specially MX-key Supporter & Coder.

So Reason of Phone Restart in 3 min is Super Dongle key But Why I am Not able To Restore Super Dongle Key when Version is Rm-449 100.21.110. ???? Which Type of Protection in E63 or Rapido Phone & Where Super Dongle Key Store?


Rgds
Bluffmaster

[irfanamin2]

Mate! Thanks for you sharing.

[jr astigin]

Did anyone try to unlock e63 with mx-key!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!11

[bluffmaster]

Originally Posted by jr astigin

Did anyone try to unlock e63 with mx-key!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!11

Right now not supported By Mx-key


rgds
bluffmaster

[Mr.Ultimate]

Originally Posted by bluffmaster

Right now not supported By Mx-key


rgds
bluffmaster

try flashing MCU image file with E75 or E71 MCU flash file,
then erase NPC Cert and re-connect phone with 5 sec dellay(just in case).
then your phone should scan on local/test mode so you can write your original PM backup that was made before you touched phone(of course if phone was ok before that), once full PM file uploaded, flash it your way with ENO SW and with its original SW later, then Write RPL backup without simlock fields using MX-KEY, after this I will recommend write full PM again, and it should repair your superdongle_key fault. SUperdongle_key is like a checksum procedure which will pass if security fields are ok in PM structure/flash file, or will fail if single byte is wrong in security zone.
Try and post results. If will fail, second time try not to use different E63 ENO file just go with its original flash fie immediately and follow the rest steps.

Post results

BR

[Chevka]

@bluffmaster
The Difference betwen RM-437 and RM-449 is in the Variant only !
(all variant of E63 use RM-437 MCU file)

There' nothing New in E63 System Security, same as other RAPIDO Based phone.
and Yes, it's definitely SUPPORT for Unlocking. (as long the phone have valid/complete simlock data and simlock key data).
and almost all RAPIDO Based phone is showing NOKIA freeze when the phone had missing NPC data. (when you erase or do reset NPC operation)

Explaination about your case:
1. too bad you haven't backup the RPL when the phone in first state (RM-449).
2. The RPL File you had is containing RM-437 Variant Certificate.
3. When the phone already reflashed again wit RM-449 Firmware, you had restore the RPL Backup (which is containing Variant certificate of RM-437).


What I can suggest you to try is:
1. In your last condition phone (the Phone with RM-449 Firmware in it self), reflash with RM-437 Firmware with tick "downgrade".
2. Restore the first RPL File that you had already backup.

[Jiminay2000]

I need full pm of E63-2 RM-449.
Please read it from your phone.
Thanks in advance.

[JONGOI]

hi i also do need rm-449 full pm urgently
plize give a link or upload it here

[partapmobile]

Originally Posted by Chevka

@bluffmaster
The Difference betwen RM-437 and RM-449 is in the Variant only !
(all variant of E63 use RM-437 MCU file)

There' nothing New in E63 System Security, same as other RAPIDO Based phone.
and Yes, it's definitely SUPPORT for Unlocking. (as long the phone have valid/complete simlock data and simlock key data).
and almost all RAPIDO Based phone is showing NOKIA freeze when the phone had missing NPC data. (when you erase or do reset NPC operation)

Explaination about your case:
1. too bad you haven't backup the RPL when the phone in first state (RM-449).
2. The RPL File you had is containing RM-437 Variant Certificate.
3. When the phone already reflashed again wit RM-449 Firmware, you had restore the RPL Backup (which is containing Variant certificate of RM-437).


What I can suggest you to try is:
1. In your last condition phone (the Phone with RM-449 Firmware in it self), reflash with RM-437 Firmware with tick "downgrade".
2. Restore the first RPL File that you had already backup.

i have same prb with my phone some keys are not working, this phone is came to me in blue screen problem. i check on back of the phone there is nokia e63-1 rm437, then i download the latest version from the net e63-1 rm437 200.21.012 after full flash phone on same condition on blue screen, then i search on hosting solution about blue screen....here is link http://forum.gsmhosting.com/vbb/show...09&postcount=1 after try with this method my phone come start working properly again, but there is one more small problem that is some keypad keys are stop working, i flash the phone again with same version but same result....plz help me how i can solve my problem

[partapmobile]

problem solved successfully....flash again with same version

[murtaza_k]

hello sir, i need full pm file for nokia e-63 2 rm 449, plz help me