LT18i unlock done by setool using testpoint
 

DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE

PROCEDURE WAS STOPPED BY USER
FAILED TO SETUP PHONE
Unlock FAILED
Elapsed: 64 secs.
SIGNED MODE (USING SERVER)
ALTERNATIVE SECURITY BYPASS ENABLED
CFG:110010000010

DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE

PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"

PLEASE ATTACH TURNED OFF PHONE NOW
PRESS AND HOLD "BACK" OR "VOLUME DOWN" BUTTON ...

RUNNING S1_LOADER VER "R4A069"
LOADER AID: 0001
FLASH ID: "002C/00B3"
LOADER VERSION: "r4A069"

PHONE IMEI : 35850604242826
Checking for signature ...
Waiting for calculation process ...
RESPONSE: "SUCCESS" [1256]
WRITING SEMCBOOT ...
Unlock DONE

Procedure:
1.
prepare for testpoint operation.
check testpoints location for your phone model in dist\docs\s1_qualcomm_uart_cables or use GPG cable set
open testpoints for access
if you do not have GPG cable set, get some needle with wire, connect it to phone gnd ( battery minus ) or to usb cable shield, etc.

2.
select proper phone model.
select COM as interface.
on settings check signed mode, use alternative security bypass, do full unlock instead usercode reset, use testpoint (gnd type)
fill login/password and check if account valid.

press unlock

when prompted, execute steps in EXACT order:

1. remove cable from phone,
2. remove battery from phone,
3. attach testpoint ( turn on switch on cable set )
4. insert cable to phone, HOLDING TESTPOINT ( cable set switch in "on" position )
5. press "ready"
6. when prompted detach testpoint
7. press "ready"
8. install drivers from dist\drivers\USBFlash_driver\ ( if asked )

phone will be unlocked.

how to unlock without setol sony ericsson KT18i

SIGNED MODE (USING SERVER)
ALTERNATIVE SECURITY BYPASS ENABLED
CFG:110010000010

DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE

PROCESSING ...
llbug: write error: "The device does not recognize the command"
llbug: blk write fail.fatal
qcSendPacket: can't send packet.
FAILED TO SETUP PHONE
Unlock FAILED
Elapsed: 64 secs.
SIGNED MODE (USING SERVER)
ALTERNATIVE SECURITY BYPASS ENABLED
CFG:110010000010

DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE

PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"

qcReceivePacket: can't get packet start.
FAILED TO SETUP PHONE
Unlock FAILED
Elapsed: 180 secs.

where can find s1_qualcomm_uart_cables or use GPG cable??i only have E20.X10.E16.E10 GPG cable,but not use in LT18i

Because the cable is not needed, go to youtube and find how to unlock phone via SETool.

can you show us the picture with the test point please, and i hear that this model LT18i can´t be unlocked, models made in 2012 can not be unlock. thx for some aclarations pls

CARD COUNTERS: FLASH 174, UNLOCK 54
Elapsed: 2 secs.
SIGNED MODE (USING SERVER)
ALTERNATIVE SECURITY BYPASS ENABLED
CFG:110010000010

DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE

PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"

qcReceivePacket: can't get packet start.
FAILED TO SETUP PHONE
Unlock FAILED
Elapsed: 107 secs.


how can solve this error?

new security (99.99%) if erom >=r9xxxx and YearwWeek >=12w14

read post #12 HOW TO WORK WITH SEMC PDA PHONES - Page 2

this log is misleading and its not for LT18i

28/05/2016 17:20:21 RUNNING v 1.1404/01.15/UNI
28/05/2016 17:20:21 CARD SERIAL 00236xxx
28/05/2016 17:20:21 USBFLASH DRIVER VERSION 03.00.00.00
28/05/2016 17:26:12 SIGNED MODE (USING SERVER)
28/05/2016 17:26:12 ALTERNATIVE SECURITY BYPASS ENABLED
28/05/2016 17:26:12 CFG:110010000000
28/05/2016 17:26:12
28/05/2016 17:26:12 DETACH USB CABLE FROM PHONE
28/05/2016 17:26:12 REMOVE BATTERY FROM PHONE
28/05/2016 17:26:12 ATTACH TESTPOINT
28/05/2016 17:26:12 PRESS "READY", THEN ATTACH USB CABLE TO PHONE
28/05/2016 17:26:12
28/05/2016 17:28:03 PROCESSING ...
28/05/2016 17:28:04 REMOVE TESTPOINT NOW, THEN PRESS "READY"
28/05/2016 17:28:04
28/05/2016 17:28:12 PLEASE ATTACH TURNED OFF PHONE NOW
28/05/2016 17:28:12 PRESS AND HOLD "BACK" OR "VOLUME DOWN" BUTTON ...
28/05/2016 17:28:14
28/05/2016 17:28:14 RUNNING S1_LOADER VER "R4A069"
28/05/2016 17:28:14
28/05/2016 17:28:14 EROM_AID : 0001
28/05/2016 17:28:14 LOADER_AID : 0001
28/05/2016 17:28:14 HWCONF_AID : 0001
28/05/2016 17:28:14 ACTIVE_LOADER_AID : 0001
28/05/2016 17:28:14
28/05/2016 17:28:18 DEVICE ID: 18A5E74DCEEED365ED81393AC49DBCD1B171D1F7
28/05/2016 17:28:18 FLASH ID: "002C/00B3"
28/05/2016 17:28:18 LOADER VERSION: "r4A069"
28/05/2016 17:28:18
28/05/2016 17:28:18 PHONE IMEI : 35850604218325
28/05/2016 17:28:20 Checking for signature ...
28/05/2016 17:28:21 WRITING SEMCBOOT ...
28/05/2016 17:28:22 Unlock DONE
28/05/2016 17:28:22 Elapsed: 130 secs.

how to connect the test point , please diagram

DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE

will use DLOAD protocol ...
0806010100900000
0D1450424C5F446F776E6C6F6164657256455231
030006
030006
030006
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"

qcReceivePacket: can't get packet start
IF TESTPOINT DONE OK,THIS IS NOT SUPPORTED MCU REVISION
FAILED TO SETUP PHONE
Unlock FAILED
Elapsed: 30 seconds

Not done