G925T Write Cert: Unknown BaseBand / NV Data Security Error / Security Error HELPPP!! - GSM-Forum

GalaxyVibe · 03-26-2019, 23:39

I am trying to write a cert file on a Galaxy S6 Edge SM-G925T for T-Mobile with Nougat 7.0 G925TUVS6FRA3. When I try to write the Cert file, Z3X gives me 1. Security damaged (4 13); 2. The NV_Data writing is successful but then I get UNKNOWN BASEBAND, 3. I have to reset EFS to get the Baseband back; 4. When I try to write the EFS I also get UNKNOWN BASEBAND . When I get the Baseband back, I get a Security Error that says, "This phone has been flashed with unauthorized software & is locked. Call your mobile operator to additional support. Please note that repair/return for this issue may have additional cost. REBOOT". It seems like a endless circle! Please Help!!!!

1. Security damaged (4 13);

Operation: Write CERT
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version:
Product code:
CSC country code: USA
CSC sales code: TMB
Phone SN: R58G31M6JRE
IMEI:
HW version:
RF cal date:
Chip name: EXYNOS7420
Modem board:
Security patch: 2018-01-01
Boot Warranty bit: 1
SIM State: NOT_READY
Checking Super user right... true
Reading NV data... OK
Checking NV data... OK
Reading data... error
Security damaged (4 13)
Initialization zTool... OK
Running zTool, please wait... OK
Reading data from phone... error (0)
Try downgrade modem if possible

Operation: Repair
Selected model: SM-G925T
Software version: 35.2

2. The NV_Data writing is successful but then I get UNKNOWN BASEBAND:

Operation: Write NV DATA
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version: G925TUVS6FRA3
Product code:
CSC country code: USA
CSC sales code: TMB
Phone SN:
IMEI: 350000000000006
HW version:
RF cal date:
Chip name: EXYNOS7420
Modem board: SHANNON333
Security patch: 2018-01-01
Boot Warranty bit: 1
Checking Super user right... true
Writing NV Data... OK
Recalculating MD5... OK
Deleting backup... OK
Write NV Data done

3. I have to reset EFS to get the Baseband back:

Operation: Reset EFS
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version:
Product code:
CSC country code: USA
CSC sales code: TMB
Phone SN: R58G31M6JRE
IMEI:
HW version:
RF cal date:
Chip name: EXYNOS7420
Modem board:
Security patch: 2018-01-01
Boot Warranty bit: 1
Checking Super user right... true
Backuping EFS... OK
Reseting EFS... OK
Rebooting phone... OK

4. When I try to write the EFS I also get UNKNOWN BASEBAND

Operation: Write EFS
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version: G925TUVU6ARA1
Product code:
CSC country code: USA
CSC sales code: TMB
Phone SN:
IMEI: 350000000000006
HW version:
RF cal date:
Chip name: EXYNOS7420
Modem board: SHANNON333
Security patch: 2018-01-01
Boot Warranty bit: 1
Checking Super user right... true
Extracting EFS file... OK
Converting Img to Ext4... OK
Writing EFS to phone... OK

When I get the Baseband back, I get a Security Error that says, "This phone has been flashed with unauthorized software & is locked. Call your mobile operator to additional support. Please note that repair/return for this issue may have additional cost. REBOOT

HELLLLPPPPPPP!!!

yonic69 · 03-27-2019, 00:17

Did you flash it with signed stock firmware? If not, flash it without CSC, let me know what happens and maybe you're gonna need reset EFS to default.

GalaxyVibe · 03-27-2019, 00:33

Quote:

Originally Posted by yonic69

Did you flash it with signed stock firmware? If not, flash it without CSC, let me know what happens and maybe you're gonna need reset EFS to default.

Hi Bro, I did that but the IMEI became 350000000000006. I have already reset EFS to get the Baseband back:

Operation: Reset EFS
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version:
Product code:
CSC country code: USA
CSC sales code: TMB
Phone SN: R58G31M6JRE
IMEI:
HW version:
RF cal date:
Chip name: EXYNOS7420
Modem board:
Security patch: 2018-01-01
Boot Warranty bit: 1
Checking Super user right... true
Backuping EFS... OK
Reseting EFS... OK
Rebooting phone... OK

yonic69 · 03-27-2019, 03:47

Ok, this a suggestion from a friend:
Root phone/knox void
Write cert with octopus, just select Usb

Other suggestion
With octopus:

Flash stock fw latest version
Root
Reset efs with Z3x
Repair reset and wipe security octopus
Write cert with octopus.
Restore last backup with octopus then unlock with z3x.

Enviado desde mi iPhone utilizando Tapatalk

GalaxyVibe · 03-31-2019, 15:40

SOLVED!! This is how I fixed the problem using only Z3X:

1. Root the phone with CF Auto Root (Not with the Engineering Root). keep in mind the Knox is going to be trigged to 1 warranty void: CF Auto Root for SM-G925T

2. With Z3X box in the Repair Tab, use the "Reset EFS".

Operation: Reset EFS
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version: G925TUVU6ARA1
Product code:
CSC country code: USA
CSC sales code: TMB
Phone SN:
IMEI: 350000000000006
HW version:
RF cal date:
Chip name: EXYNOS7420
Modem board: SHANNON333
Security patch: 2018-01-01
Boot Warranty bit: 1
Checking Super user right... true
Backuping EFS... OK
Reseting EFS... OK
Rebooting phone... OK

3. After the phone reboots, with Z3X go to the Backup tab and use the "Write the NV Data" (Here is the G925T NV_Data.rar).

Operation: Write NV DATA
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version: G925TUVU6ARA1
Product code:
CSC country code: USA
CSC sales code: TMB
Phone SN:
IMEI: 350000000000006
HW version:
RF cal date:
Chip name: EXYNOS7420
Modem board: SHANNON333
Security patch: 2018-01-01
Boot Warranty bit: 1
Checking Super user right... true
Writing NV Data... OK
Recalculating MD5... OK
Deleting backup... OK
Write NV Data done

4. And immediately, without powering the phone off, with Z3X go to the Repair tab and enter the IMEI number that you need to write in the phone and click "Repair" (I wrote the original IMEI of the phone that was in the back of the phone).

Operation: Repair
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version: G925TUVU6ARA1
Product code:
CSC country code: USA
CSC sales code: TMB
Phone SN:
IMEI: 350000000000006
HW version:
RF cal date:
Chip name: EXYNOS7420
Modem board: SHANNON333
Security patch: 2018-01-01
Boot Warranty bit: 1
SIM State: ABSENT
Checking Super user right... true
Reading NV data... OK
Checking NV data... OK
Initialization zTool... OK
Running zTool, please wait... OK
HWID: 88 B8 BD B7 75 05 00 00 00 00 00 00 00 00 00 00
Calculating...
hmac mismatch, this can damage phone continue? Yes OK
Repairing... OK
Writing NV data... OK
Rebooting phone... OK
Repair done

5. Then, using the Z3X, go to the unlock tab and click on "Unlock" the phone.

Operation: Unlock
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version: G925TUVU6ARA1
Product code: SM-G925TZWATMB
CSC country code: USA
CSC sales code: TMB
Phone SN:
IMEI: 35XXXXXXXXXXXXX
HW version: REV0.2
RF cal date: 20150506
Chip name: EXYNOS7420
Modem board: SHANNON333
Security patch: 2018-01-01
Boot Warranty bit: 1
SIM State: ABSENT
Checking Super user right... true
Reading NV data... OK
Checking NV data... OK
Initialization zTool... OK
Running zTool, please wait... OK
HWID: 88 B8 BD B7 75 05 00 00 00 00 00 00 00 00 00 00
Calculating... OK
Unlocking... OK
Writing NV data... OK
Rebooting phone... OK
Unlock done

6. Finally, using the Z3X, got to the Repair tab and click on "Patch Certificate".

Operation: Patch Certificate
Selected model: SM-G925T
Software version: 35.2

Waiting ADB device... OK
Reading phone info...
Model: SM-G925T
Android version: 7.0
PDA version: G925TUVS6FRA3
CSC version: G925TTMB6FRA3
Phone version: G925TUVU6ARA1
Product code: SM-G925TZWATMB
CSC country code: USA
CSC sales code: TMB
Phone SN:
IMEI: 35XXXXXXXXXXXXX
HW version: REV0.2
RF cal date: 20150506
Chip name: EXYNOS7420
Modem board: SHANNON333
Security patch: 2018-01-01
Boot Warranty bit: 1
SIM State: ABSENT
Checking Super user right... true
Initialization zTool... OK
Running zTool, please wait... OK
Reading modem... OK
Patching modem... OK
Writing modem... OK
Rebooting phone... OK
Patching CERT check... done

This is permanent solution for me. The phone worked perfectly even after resetting the phone two times. Thanks for reading!

PLEASE CLICK THANKS IF THE POST IS HELPFUL => => =>

Diamant3 · 11-13-2019, 15:41

did you unlock for all carriers?

swat2 · 12-24-2022, 13:43

Thanks ,GalaxyVibe
Your the great , i have solved my problem with your instructions

03-26-2019, 23:39	#1 (permalink)
GalaxyVibe No Life Poster Join Date: May 2016 Posts: 1,164 Member: 2577670 Status: Offline Thanks Meter: 883	G925T Write Cert: Unknown BaseBand / NV Data Security Error / Security Error HELPPP!! I am trying to write a cert file on a Galaxy S6 Edge SM-G925T for T-Mobile with Nougat 7.0 G925TUVS6FRA3. When I try to write the Cert file, Z3X gives me 1. Security damaged (4 13); 2. The NV_Data writing is successful but then I get UNKNOWN BASEBAND, 3. I have to reset EFS to get the Baseband back; 4. When I try to write the EFS I also get UNKNOWN BASEBAND . When I get the Baseband back, I get a Security Error that says, "This phone has been flashed with unauthorized software & is locked. Call your mobile operator to additional support. Please note that repair/return for this issue may have additional cost. REBOOT". It seems like a endless circle! Please Help!!!! 1. Security damaged (4 13); Operation: Write CERT Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: Product code: CSC country code: USA CSC sales code: TMB Phone SN: R58G31M6JRE IMEI: HW version: RF cal date: Chip name: EXYNOS7420 Modem board: Security patch: 2018-01-01 Boot Warranty bit: 1 SIM State: NOT_READY Checking Super user right... true Reading NV data... OK Checking NV data... OK Reading data... error Security damaged (4 13) Initialization zTool... OK Running zTool, please wait... OK Reading data from phone... error (0) Try downgrade modem if possible Operation: Repair Selected model: SM-G925T Software version: 35.2 2. The NV_Data writing is successful but then I get UNKNOWN BASEBAND: Operation: Write NV DATA Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: G925TUVS6FRA3 Product code: CSC country code: USA CSC sales code: TMB Phone SN: IMEI: 350000000000006 HW version: RF cal date: Chip name: EXYNOS7420 Modem board: SHANNON333 Security patch: 2018-01-01 Boot Warranty bit: 1 Checking Super user right... true Writing NV Data... OK Recalculating MD5... OK Deleting backup... OK Write NV Data done 3. I have to reset EFS to get the Baseband back: Operation: Reset EFS Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: Product code: CSC country code: USA CSC sales code: TMB Phone SN: R58G31M6JRE IMEI: HW version: RF cal date: Chip name: EXYNOS7420 Modem board: Security patch: 2018-01-01 Boot Warranty bit: 1 Checking Super user right... true Backuping EFS... OK Reseting EFS... OK Rebooting phone... OK 4. When I try to write the EFS I also get UNKNOWN BASEBAND Operation: Write EFS Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: G925TUVU6ARA1 Product code: CSC country code: USA CSC sales code: TMB Phone SN: IMEI: 350000000000006 HW version: RF cal date: Chip name: EXYNOS7420 Modem board: SHANNON333 Security patch: 2018-01-01 Boot Warranty bit: 1 Checking Super user right... true Extracting EFS file... OK Converting Img to Ext4... OK Writing EFS to phone... OK When I get the Baseband back, I get a Security Error that says, "This phone has been flashed with unauthorized software & is locked. Call your mobile operator to additional support. Please note that repair/return for this issue may have additional cost. REBOOT HELLLLPPPPPPP!!!

03-27-2019, 00:17	#2 (permalink)
yonic69 Freak Poster Join Date: Jun 2016 Location: New **** U.S.A Posts: 479 Member: 2590666 Status: Offline** Thanks Meter: 130	Did you flash it with signed stock firmware? If not, flash it without CSC, let me know what happens and maybe you're gonna need reset EFS to default. Last edited by yonic69; 03-27-2019 at 00:23.

11-13-2019, 15:41	#6 (permalink)
Diamant3 Junior Member Join Date: Jan 2016 Location: Lagrange, Georgia USA Posts: 17 Member: 2519556 Status: Offline Thanks Meter: 2	did it factory unlock? did you unlock for all carriers?

12-24-2022, 13:43	#7 (permalink)
swat2 Insane Poster Join Date: Dec 2013 Location: Swat Pakistan Age: 41 Posts: 83 Member: 2089757 Status: Offline Thanks Meter: 8	G925T Unknown basedband done Thanks ,GalaxyVibe Your the great , i have solved my problem with your instructions

03-27-2019, 03:47	#4 (permalink)
yonic69 Freak Poster Join Date: Jun 2016 Location: New **** U.S.A Posts: 479 Member: 2590666 Status: Offline** Thanks Meter: 130	Ok, this a suggestion from a friend: Root phone/knox void Write cert with octopus, just select Usb Other suggestion With octopus: Flash stock fw latest version Root Reset efs with Z3x Repair reset and wipe security octopus Write cert with octopus. Restore last backup with octopus then unlock with z3x. Enviado desde mi iPhone utilizando Tapatalk

03-31-2019, 15:40	#5 (permalink)
GalaxyVibe No Life Poster Join Date: May 2016 Posts: 1,164 Member: 2577670 Status: Offline Thanks Meter: 883	SOLVED!! This is how I fixed the problem using only Z3X: 1. Root the phone with CF Auto Root (Not with the Engineering Root). keep in mind the Knox is going to be trigged to 1 warranty void: CF Auto Root for SM-G925T 2. With Z3X box in the Repair Tab, use the "Reset EFS". Operation: Reset EFS Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: G925TUVU6ARA1 Product code: CSC country code: USA CSC sales code: TMB Phone SN: IMEI: 350000000000006 HW version: RF cal date: Chip name: EXYNOS7420 Modem board: SHANNON333 Security patch: 2018-01-01 Boot Warranty bit: 1 Checking Super user right... true Backuping EFS... OK Reseting EFS... OK Rebooting phone... OK 3. After the phone reboots, with Z3X go to the Backup tab and use the "Write the NV Data" (Here is the G925T NV_Data.rar). Operation: Write NV DATA Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: G925TUVU6ARA1 Product code: CSC country code: USA CSC sales code: TMB Phone SN: IMEI: 350000000000006 HW version: RF cal date: Chip name: EXYNOS7420 Modem board: SHANNON333 Security patch: 2018-01-01 Boot Warranty bit: 1 Checking Super user right... true Writing NV Data... OK Recalculating MD5... OK Deleting backup... OK Write NV Data done 4. And immediately, without powering the phone off, with Z3X go to the Repair tab and enter the IMEI number that you need to write in the phone and click "Repair" (I wrote the original IMEI of the phone that was in the back of the phone). Operation: Repair Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: G925TUVU6ARA1 Product code: CSC country code: USA CSC sales code: TMB Phone SN: IMEI: 350000000000006 HW version: RF cal date: Chip name: EXYNOS7420 Modem board: SHANNON333 Security patch: 2018-01-01 Boot Warranty bit: 1 SIM State: ABSENT Checking Super user right... true Reading NV data... OK Checking NV data... OK Initialization zTool... OK Running zTool, please wait... OK HWID: 88 B8 BD B7 75 05 00 00 00 00 00 00 00 00 00 00 Calculating... hmac mismatch, this can damage phone continue? Yes OK Repairing... OK Writing NV data... OK Rebooting phone... OK Repair done 5. Then, using the Z3X, go to the unlock tab and click on "Unlock" the phone. Operation: Unlock Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: G925TUVU6ARA1 Product code: SM-G925TZWATMB CSC country code: USA CSC sales code: TMB Phone SN: IMEI: 35XXXXXXXXXXXXX HW version: REV0.2 RF cal date: 20150506 Chip name: EXYNOS7420 Modem board: SHANNON333 Security patch: 2018-01-01 Boot Warranty bit: 1 SIM State: ABSENT Checking Super user right... true Reading NV data... OK Checking NV data... OK Initialization zTool... OK Running zTool, please wait... OK HWID: 88 B8 BD B7 75 05 00 00 00 00 00 00 00 00 00 00 Calculating... OK Unlocking... OK Writing NV data... OK Rebooting phone... OK Unlock done 6. Finally, using the Z3X, got to the Repair tab and click on "Patch Certificate". Operation: Patch Certificate Selected model: SM-G925T Software version: 35.2 Waiting ADB device... OK Reading phone info... Model: SM-G925T Android version: 7.0 PDA version: G925TUVS6FRA3 CSC version: G925TTMB6FRA3 Phone version: G925TUVU6ARA1 Product code: SM-G925TZWATMB CSC country code: USA CSC sales code: TMB Phone SN: IMEI: 35XXXXXXXXXXXXX HW version: REV0.2 RF cal date: 20150506 Chip name: EXYNOS7420 Modem board: SHANNON333 Security patch: 2018-01-01 Boot Warranty bit: 1 SIM State: ABSENT Checking Super user right... true Initialization zTool... OK Running zTool, please wait... OK Reading modem... OK Patching modem... OK Writing modem... OK Rebooting phone... OK Patching CERT check... done This is permanent solution for me. The phone worked perfectly even after resetting the phone two times. Thanks for reading! PLEASE CLICK THANKS IF THE POST IS HELPFUL => => =>