New Xiaomi Security OP - doesn't work! - GSM-Forum

2hard4u · 06-19-2018, 05:54

Redmi 5A/Redmi 5 plus/Redmi m1a

Wipe Security Partitions
Erase : FSG
Erase : MODEMST1
Erase : MODEMST2

Done!
Elapsed: 00:00:45

And it doesn't affect at all - imei on board!

On some firmware\model imei become 0, but writing QCN doesn't help (no imei/or no network) - comming back to life only after rewrite original security backup.

Xiaomi pached security?

kamal_singla · 06-19-2018, 06:31

Quote:

Originally Posted by 2hard4u

Redmi 5A/Redmi 5 plus/Redmi m1a

Wipe Security Partitions
Erase : FSG
Erase : MODEMST1
Erase : MODEMST2

Done!
Elapsed: 00:00:45

And it doesn't affect at all - imei on board!

On some firmware\model imei become 0, but writing QCN doesn't help (no imei/or no network) - comming back to life only after rewrite original security backup.

Xiaomi pached security?

downgrade your handset and do repair security

sky73 · 06-19-2018, 09:54

do this steps

read qcn
read security
reset security
factory reset frp menu (phone)
repair imei

reboot phone

write back up qcn

factory reset from menu

tested and work

sky73 · 06-19-2018, 10:02

here steps

read qcn

Code:

Operation : Read QCN (NVM) [ v1.16 ]

1. Enable DiagInterface on device [ by Code, Root or other way ]
2. Make sure DiagDrivers installed and work correct

Wait for phone...
Device Found!
Initialize ... 
DiagMode initialized!

MSMHW : 000005F1
MODHW : 00001010
BUILD : MPSS.TH.2.0.c1.9-00078-M8996FAAAANAZM-1.76210.1.79676.1.80359.1.80172.1.80630.3
RTIME : Dec 27 201618:11:25
BTIME : Dec 02 201614:00:00
DEVST : 8996.gen

Reading NVRAM data in XQCN format ... 

Reading NV Items...
Reading NV Items SIM1...
Reading NV Items SIM2...
Reading RFNV...
Reading Provisioning Item Files...
Reading Feature_Mask...

Saved as : F:\InfinityBox\CM2QLM\Backup\QCN\000005F1__MPSS.TH.2.0.c1.9-00078-M8996FAAAANAZM-1.76210.1.79676.1.80359.1.80172.1.80630.3.xqcn
Read Done!

read security

Code:

Operation : EDL Security Operation [ v1.16 ]

1. Power Off Phone , Remove battery , Insert back
2. PRESS and HOLD BOTH VOLUME KEYS!
3. Insert USB cable. In some cases require use EDL cable or TP to force EDL mode!

Wait for phone...
Device Found!
Initialize ... 
Handshake passed!
ID_BLOCK_I : SnapDragon 821 [MSM8996 Pro]
ID_BLOCK_S : B4DB6A24
ID_BLOCK_L : 582F2D946093D8D24E20B37BBEB547B5
ID_BLOCK_L : 116DDAB770C72593D3426D07FEAFA15C
Use CM2 Internal Loader
Loader Sent! Initializing ... 
Running FireHose on BBID : MSM8996 , FLASH : UFS , mVER : 1
ExtInfo : 0x0001C000/0001C000/00001000/00001000/00001000
UFS Device   : TOSHIBA THGLF2G9J8LBATRH0101
UFS SectSize : 0x1000
UFS Size : 0x0000000EE6800000 : 59.60 GiB
--------------UFS Device Info--------------
INFO: {'storage_info': {'total_blocks':14448640, 'block_size':4096, 'page_size':4096, 'num_physical':6, 'manufacturer_id':408, 'serial_num':1212760641, 'fw_version':'101','mem_type':'UFS','prod_name':'THGLF2G9J8LBATRH0101'}}
UFS Total Active LU: 0x6
UFS wManufacturerID: 0x198
UFS Boot Partition Enabled: 0x1
UFS LU Write Protect: 0x0
UFS Boot LUN ID: = 0x0
UFS Memory Type: 0x0
UFS LU Total Blocks: 0x0
UFS Supported Memory Types: 0x801f
UFS LUN Enable Bitmask: 0x3f
UFS bConfigDescrLock: 0x0
Boot Ok!

Backup Security Partitions
Backup : FSG
Backup : MODEMST1
Backup : MODEMST2
Backup saved to : F:\InfinityBox\CM2QLM\Backup\MSM8996_[0005F0E1]_B4DB6A24_SEC\

reset security

Code:

Operation : EDL Security Operation [ v1.16 ]

1. Power Off Phone , Remove battery , Insert back
2. PRESS and HOLD BOTH VOLUME KEYS!
3. Insert USB cable. In some cases require use EDL cable or TP to force EDL mode!

Wait for phone...
Device Found!
Initialize ... 
Handshake passed!
ID_BLOCK_I : SnapDragon 821 [MSM8996 Pro]
ID_BLOCK_S : B4DB6A24
ID_BLOCK_L : 582F2D946093D8D24E20B37BBEB547B5
ID_BLOCK_L : 116DDAB770C72593D3426D07FEAFA15C
Use CM2 Internal Loader
Loader Sent! Initializing ... 
Running FireHose on BBID : MSM8996 , FLASH : UFS , mVER : 1
ExtInfo : 0x0001C000/0001C000/00001000/00001000/00001000
UFS Device   : TOSHIBA THGLF2G9J8LBATRH0101
UFS SectSize : 0x1000
UFS Size : 0x0000000EE6800000 : 59.60 GiB
--------------UFS Device Info--------------
INFO: {'storage_info': {'total_blocks':14448640, 'block_size':4096, 'page_size':4096, 'num_physical':6, 'manufacturer_id':408, 'serial_num':1212760641, 'fw_version':'101','mem_type':'UFS','prod_name':'THGLF2G9J8LBATRH0101'}}
UFS Total Active LU: 0x6
UFS wManufacturerID: 0x198
UFS Boot Partition Enabled: 0x1
UFS LU Write Protect: 0x0
UFS Boot LUN ID: = 0x0
UFS Memory Type: 0x0
UFS LU Total Blocks: 0x0
UFS Supported Memory Types: 0x801f
UFS LUN Enable Bitmask: 0x3f
UFS bConfigDescrLock: 0x0
Boot Ok!

Wipe Security Partitions
Erase : FSG
Erase : MODEMST1
Erase : MODEMST2

Done!
Elapsed: 00:00:22

Reconnect Power/Cable!

imei repair

Code:

Operation : Write Security [ v1.16 ]

1. Enable DiagInterface on device [ by Code, Root or other way ]
2. Make sure DiagDrivers installed and work correct

Wait for phone...
Device Found!
Initialize ... 
DiagMode initialized!

MSMHW : 000005F1
MODHW : 00001010
BUILD : MPSS.TH.2.0.c1.9-00078-M8996FAAAANAZM-1.76210.1.79676.1.80359.1.80172.1.80630.3
RTIME : Dec 27 201618:11:25
BTIME : Dec 02 201614:00:00
DEVST : 8996.gen

Update IMEI[1]  : xxxxxxxxxx
Record update Ok!
Update IMEI[2]  : xxxxxxxxxx
Record update Ok!

Write done! Reboot device, if it not restart!
Hint : QCN write and Factory Reset is required to finish process completely!

write back up qcn

Code:

Operation : Write QCN (NVM) [ v1.16 ]

1. Enable DiagInterface on device [ by Code, Root or other way ]
2. Make sure DiagDrivers installed and work correct

Wait for phone...
Device Found!
Initialize ... 
DiagMode initialized!

MSMHW : 000005F1
MODHW : 00001010
BUILD : MPSS.TH.2.0.c1.9-00078-M8996FAAAANAZM-1.76210.1.79676.1.80359.1.80172.1.80630.3
RTIME : Dec 27 201618:11:25
BTIME : Dec 02 201614:00:00
DEVST : 8996.gen

xQCN details : 
IMEI [1] : 863818035601583
IMEI [2] : 863818035601583
BTID : 9FB7D2F80278
WiFi : 7802F8F2B79F

Writing NVRAM data from XQCN image ... 

Writing NV Items...
Writing SIM1 NV Items...
Writing SIM2 NV Items...
Writing RFNV...
Writing Provisioning Item Files...

Write done! Reboot device, if it not restart!
Hint : Factory Reset is required to finish process completely!

this steps are important

read qcn
read security
reset security
factory reset frp menu (phone)
repair imei

reboot phone

write back up qcn

factory reset from menu

if you did not do one of this

rewrite original security and do steps from begining

06-19-2018, 05:54	#1 (permalink)
2hard4u Freak Poster Join Date: Oct 2007 Location: Ново&# Posts: 396 Member: 599694 Status: Offline Thanks Meter: 76	New Xiaomi Security OP - doesn't work! Redmi 5A/Redmi 5 plus/Redmi m1a Wipe Security Partitions Erase : FSG Erase : MODEMST1 Erase : MODEMST2 Done! Elapsed: 00:00:45 And it doesn't affect at all - imei on board! On some firmware\model imei become 0, but writing QCN doesn't help (no imei/or no network) - comming back to life only after rewrite original security backup. Xiaomi pached security?

06-19-2018, 09:54	#3 (permalink)
sky73 No Life Poster Join Date: Jan 2013 Location: gsmhosting Age: 29 Posts: 1,148 Member: 1876736 Status: Offline Thanks Meter: 735	do this steps read qcn read security reset security factory reset frp menu (phone) repair imei reboot phone write back up qcn factory reset from menu tested and work