thank you manole, 3110c security test passed
 

just did security used your new solution,

We solved some bugs on server side at first SX4 Auth when phones had bad PM uploaded (e.g. PM308 from another phone, empty PM308, ...)
Now all SD repair should work well.

Here is general repair procedure.
It will repair any phone (SL1, SL2) with any kind of damaged PM, except phones with RPL NPC damaged (IMEI 123456....).
It will repair ONLY SD (not Simlock) for supported hashes "pure SL3" based phones.

1. write full PM from SAME phone model (not care if contains fields 1, 120, 308, 309)
2. make Simlock RPL repair
3. make SD RPL repair
4. make SUPER SX4 Auth then write PM1 and PM309 from SAME phone model
5. eventualy (if phone had bad RPL written by other people) write RPL CCC, HWC, VARIANT from SAME phone model, can get from here

and it was perfect. see the log on 3110c