THIS IS FOR EDUCATIONAL PURPOSE ONLY
Guide on Flashing HTC Droid Incredible to Boost Mobile
What you NEED
QPST
QXDM 3.11 (Google is your friend)
CDMA Tools 2.7 (Demo is good too)
Patience
HTC Diagnostic or HTC USB MODEM Drivers (I will include Win7 x64 Driver)
Donor Phone Driver (Google is your friend)
Winhex (Again, Google )
Boost Mobile Account [seems difficult for those without it]
What you DONT NEED
Wife
Kids
*Install all drivers and programs**
If you do not know how to manually install a driver, I suggest you stop where you are now.
Step 1: Donor Phone MSL/SPC
This one is really simple, call Boost Mobile Customer Rep. (To get directly to them after the guy says "For espanol press 5", just press 5, then press 2, and wait for it to ask you "To chat with a Boost Customer Rep press 0") and tell them your phone needs to be programmed and they will tell you to dial ##MSL#. SAVE THAT NUMBER and then just hang up on them.
Step 1.5:
Incase you are scared to talk with boost mobile, or you don't know your 6 digit MSL/SPC code you will have to find it manually. *Sigh*
Open QPST, click [Add New Port] on the bottom right, then uncheck [Show serial...] on the bottom left corner and on the screen to the left you should see your Donor's Port number, add it and make note of it.
Next open CDMA workshop, connect to your phones Port (COM) number, click read and your phone information will be displayed on the left.
Click on the memory tab, under memory/Eeprom put start Address: 0363:0000 leave the size at 65536 bytes, now click read and save the .bin files on your desktop.
FINALLY, open up Win Hex, open the memory file you just saved, click on specialist- Gather Text; Recognize text by "6" uncheck everything expect for " Numbers" press "OK", save the file anywhere you like. You should end up with a .txt document with 1 or more 6 digit numbers; one of them is the SPC for your phone, write it or them down.
Step 2: NV Items
Open CDMA Workshop again, go to Security under SPC write your MSL code and click SPC -> Send. It should say phone is unlocked.
Now go to Memory tab, and click Read NV_Items, and you will read NV_Items 455, 466, 1192, and 1194. Save them all.
Step 3: NAM 1 & 2
Stay in CDMA Workshop, and click the NAM Tab. Click “Read” this will display all your phones information inside of “NAM 1” Save the filename as NAM 1 and do the same for NAM 2.
Step 4: M.IP
Close Cdma Workshop. Open Service Programming and enter your Donor phones SPC. Click Read and navigate to the “MIP” Tab, we need your Donor phones NAI. Click on Profile 1 and copy down everything just to be safe. Do the same for Profile 0 if available.
Step 5: HA & AAA Passwords
HA Password for both Profiles will be "secret" in text formatClose Service Programming and open QXDM. Now in the Command Prompt on the top screen type in "SPC [MSL]" Then type in “Requestnvitemread ds_mip_ss_user_prof 1” to retrieve your Profile 1 AAA 6 Digit password. It will be the first 6 Digits in DIAG RX, which is written in HEX mode. For Profile 0, simply open NV_Item 466 all numbers after the number 10 and before the last pair of 0's will be your Profile 0 AAA. Or you can type in QXDM Requestnvitemread ds_mip_ss_user_prof and it will be all the Digits in AAA SHared DIAG RX.
If it says Access Denied it means you do not have a Profile 0. *Dont worry about it*
DONT EVER TURN ON THE DONOR PHONE'S RADIO AGAIN, PUT IT ON AIRPLANE MODE OR SOMETHING
Step 6: Root your HTC DROID INREDIBLE
Follow directions --> http://androidforums.com/incredible...ked-3-rooting-stock-incredible-evo-2-2-a.html
Step 7: Writing NAM and NV Items
Plug in your Droid Incredible to the PC. Open QPST and add its port number. Open CDMA and connect then read the Incredible, next go to Security Tab and under SPC write 000000 and send SPC.
Next go to the "Memory" tab, NV Items and write the 4 NV Items we saved from your donor phone earlier.465, 466, 1192, and 1194. Then navigate to the “NAM” TAB and Write the Nam 1 and Nam 2 Files we saved earlier by clicking Load before each on of them. If done correctly it should display your donor’s phone number and other information.
TYPE IN ##DIAG# IN YOUR DROID TO GO INTO MODEM MODE
Step 8: Zero'ing ESN & MEID
Close CDMA Workshop and open QXDM, Options- Communications- Target Port/ select your Droid Incredible's Port, click OK. You should now be connected to your phone. (if you have any trouble connecting to QXDM make sure you set your com port in QPST Configuration and use the same in Qxdm's communications, So you can actually see what's going on from the View drop down screen, select Command Output. Press F4 to get to the memory view, Change Rows from 8 to 16, Find you HEX MEID and ESN by calling ##786# it will look something like this...
MEID: A1000009C57FQZ
ESN: 8373B5C5
They might have an "0x" in front of them, just ignore that, Now pay close attention, following the example MEID and ESN I provided above you are going to separate every 2 characters and then you are going to flip a few to make it backwards just follow my model and do the same to your numbers.
Original: Separated: Flipped:
MEID A1000009C57FQZ MEID A1 00 00 09 C5 7F QZ MEID QZ 7F C5 09 00 00 A1
ESN 8373B5C5 ESN 83 73 B5 C5 ESN C5 B5 73 83
*Note* Your Meid and Esn will differ from the one used in this guide please find your own and use the same method you will need this to find you Meid and Esn in the memory.
Now the tricky part, you may have to Zero them out several times so it will stick (I would consider zero'ing them several times before restarting the phone)
These are all possible ESN and MEID Locations, [ATTACHED]
At each location, find your Meid or ESN and replace it with Zeros (0) then click Write and goto the next Meid or ESN. Do not alter anything but meids or ESNS. After you Zero'ed them out type the command "Requestnvitemread MEID" and "Requestnvitemread ESN". If its Zero'ed restart the phone, if its not, you missed a spot.
To make sure its been Zero'ed out FOR SURE restart the phone and when is back on dial ##778# click View, then Display and make sure your MEID and ESN is all 0. If its not, then try again.
Step 9: Writing MEID
After you get a message that it's zero than u can proceed to write your ESN or MEID which ever you prefer.
Commands are
requestnvitemwrite scm 0x3a
requestnvitemwrite meid 0x0(Your MEID)
MEID = actual 14 digit meid (not in reverse)
If u are writing MEID no need to write the ESN.
requestnvitemwrite esn 0x(Your ESN)
esn= actual 8 digit esn (not in reverse)
Step 10: Configuring Data
Close QXDM, open Service Programming. Navigate to the M.IP tab.
3G Donor PHONES ONLY: Click profile 0 and click edit. Check and make sure your “NAI” is the correct one for boost mobile. Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s. (it may be different for your area)
NAI:[email protected]
Home address: 0.0.0.0
Primary HA address: 68.28.15.12
Secondary HA address: 68.28.31.12
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok.
Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s
NAI:[email protected] (May varie)
Home address: 0.0.0.0
Primary HA address: 255.255.255.255
Secondary HA address: 68.28.89.76
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok
Make Active User 1.
Write to phone, and restart the Droid Incredible.
Now give yourself a pat in the back because you just Fully Flashed your Droid Incredible to Boost Mobile
I have yet to Know how to configure the USE of MMS, but if you know how to drop it in here .
***THIS GUIDE WAS TAKEN FROM A GUIDE I BOUGHT ON EBAY FOR FLASHING HTC EVO TO BOOST MOBILE, AND MODIFIED TO FIT THE HTC DROID INCREDIBLE***
Any questions?
EDIT** Incase your Data isnt working try this and MAKE SURE, you have this.
1. Make sure your ACTIVE USER is 1.
2. Make sure your HTC INCREDIBLE has the same PRL as your donor phone! (THIS IS HIGHLY IMPORTANT) To extract the PRL from your donor phone simply:
Connect your donor phone, Open 'Service Programming' click 'Read from Phone' enter your MSL, and then click 'Save to File' save it anywhere. You will get a qcn file, and a rl0 file. The 'rl0' file will be the PRL.
Also this happened to me before, lol, MAKE SURE MOBILE NETWORK in 'Menu -> Settings -> Wireless and Networks is TURNED ON !!
Any more questions let me know
UPDATE: Try this by igotanmp3 to get MMS working. NOTE* It does not work with Custom Themes http://forum.xda-developers.com/showpost.php?p=16440594&postcount=69
UPDATE: For Droid Incredible S & 2 FOLLOW --> http://forum.xda-developers.com/showpost.php?p=21668680&postcount=145
So did you ever figure out the mms settings? I've seen some guy in New Jersey doing full flashes on HTC Incredibles on Boost Mobile. I tried to contact him, but it seems like he is somewhat of a prick. I've been racking my brains trying to get the mms working. So far my Dinc has talk, text, internet and Sprint TV working.
I have not yet. How did you get Sprint TV running on the Incredible though?
And i think the guide to flash a HTC Hero to alltel i believe might help... changing the APN username adress and whatnot with APN Manager apk, havent gotten around it though been too busy will try tomorrow.
Sent from my ADR6300 using XDA App
eljean said:
I have not yet. How did you get Sprint TV running on the Incredible though?
And i think the guide to flash a HTC Hero to alltel i believe might help... changing the APN username adress and whatnot with APN Manager apk, havent gotten around it though been too busy will try tomorrow.
Sent from my ADR6300 using XDA App
Click to expand...
Click to collapse
I downloaded the Sprint TV Apk file and that was pretty much it
TRY THIS FOR MMS
MMS
************************************************** *******************************
(My original work)
After making sure web works,
1. Download APN Backup & Restore(Android Market)
2. Click Backup APNs
3. Goto your sdcard/ApnBackupRestore
4. Click the apn file and edit under windows or on your phone.
5. Look for the line that says Production and edit.....
<apn name="Production" numeric="00000" mcc="310" mnc="00" apn="1"
user="[email protected]"(may varie) server="null" password="null proxy="null"
port="" mmsproxy="" mmsport="" mmsprotocol="2.0"
mmsc="http://mm.myboostmobile.com" type="mms" />
6. Save the file(make sure you save it)
7. Open the APN Backup & Restore program
8. Click delete APNs(Very important)
9. Click Restore APNs
10. Close the program
11. Goto messages>menu>settings>connection settings. Make sure everything is as you edited. You should see Name(Production), MMSC(http://mm.myboostmobile.com), MMS proxy(not set), MMS port(not set), MMS protocol(WAP 2.0).
12. If everything is just as it is, viola you are all set...
Taken from http://www.howardforums.com/showthr...lashed-to-Revol-with-working-Internet-and-MMS and fixed to the Boost Mobile apn settings... correct it if its wonrg, Im not 100% sure on the settings...
I haven't tried it yet im still waiting for my MicroSD Card from Ebay :\... lol you be the guinnea pig let me know how it goes
this would go a lot better in the dev section
JoelZ9614 said:
this would go a lot better in the dev section
Click to expand...
Click to collapse
Ahh, I didnt know where else to put it
this is awesome.. what about PTT? does it work?
remy2501 said:
this is awesome.. what about PTT? does it work?
Click to expand...
Click to collapse
Yeah it should
DRIVERS
FORGOT to attach the DRIVERS sorry
Any possible way to go back to verizon MEID?
mttmelton said:
Any possible way to go back to verizon MEID?
Click to expand...
Click to collapse
Just write the original MEID and the phone would provision itself IF it has a clean esn
Sent from my ADR6300 using XDA App
Still no mms on the HTC Droid Incredible on Boost
Just wonder if anyone has figured out the mms settings for the HTC Droid Incredible on Boost Mobile. I paid some guy on Ebay and he emailed me back "here sorry all you do is this:
##3282#
change mms "hxxp;//mm . myboostmobile . com
reboot your phone and test the pics"
I was like WTF ##3282# does not even work on the Incredible, but I already knew the mmsc url. So has anyone figured this little speed bump? I have talk, text, internet & sprint TV working now I just need mms working.
roclikewhat said:
Just wonder if anyone has figured out the mms settings for the HTC Droid Incredible on Boost Mobile. I paid some guy on Ebay and he emailed me back "here sorry all you do is this:
##3282#
change mms "hxxp;//mm . myboostmobile . com
reboot your phone and test the pics"
I was like WTF ##3282# does not even work on the Incredible, but I already knew the mmsc url. So has anyone figured this little speed bump? I have talk, text, internet & sprint TV working now I just need mms working.
Click to expand...
Click to collapse
Same here. I used APN Manager and changed the mmsc url but then it would just give me access denied.
Sent from my ADR6300 using XDA App
Hello,
I read all posts above, but I couldn't understand completely. It is possible use htc incredible 2 on boost mobile?
I can buy one from ebay with clean esn and use it on Boost mobile?
thank you
idk
mttmelton said:
Any possible way to go back to verizon MEID?
Click to expand...
Click to collapse
to be honest with you, I am not entirely sure, theoretically it should be possible but at this moment I do not know since it is a new phone with new software etc etc. And I heard HTC is starting to lock their esn locations with some type of encryption so u cant read it.
Google around u might be able to and if u find someone who says and has backup that is possible come back to this guide and follow it .
for example. Can I activate this on boost mobile?
hxxp://xpressphones.vstore.ca/product_info.php?products_id=379
armars said:
for example. Can I activate this on boost mobile?
hxxp://xpressphones.vstore.ca/product_info.php?products_id=379
Click to expand...
Click to collapse
I did a little bit of research and so far I can conclude that it is not possible. I may be wrong though. I am 90% positive it is not posible YET lol
***THIS GUIDE WAS TAKEN FROM A GUIDE I BOUGHT ON EBAY FOR FLASHING HTC EVO TO BOOST MOBILE, AND MODIFIED TO FIT THE HTC DROID INCREDIBLE***
Click to expand...
Click to collapse
So you could flash it to boost mobile, but couldn't activate?
armars said:
So you could flash it to boost mobile, but couldn't activate?
Click to expand...
Click to collapse
Yeah if your donor phone is already activated
I Know There Are Lots Of How To's On This But I Follow The Steps And I Just Cant Get It To Work Properly. Iv'e Done The Voice & Text Correctly. But The Data Just Doesn't Work
Im Using My Epic 4G 2.2.1
&
As The Donor Phone Im Using A Samsung Rant (Boostmobile)
If You Have Possible Help Please Post
I Guess The 1192 1194 NV items Don't Read Correctly From The Rant, Because When I Try To Write Them To The Epic, It Says 0 Nv Item Successfully Copied :/
Results For 1192:
[NV Items]
[Complete items - 0]
1192 (0x04A8) - Access denied
Results For 1194:
[NV Items]
[Complete items - 0]
1194 (0x04AA) - Inactive item
Seems As If It Is Still Locked Or Something Like That. It Shouldn't Be, If I Entered The SPC Correctly
the rant is known as a bad phone to get that info from...
I have gotten this to work using DFS cdmatool. this is the only program i found that can easily show the ha aaa passwords correctly. you can use the demo for this to work. DO NOT edit the ha and aaa passwords with this tool - only use it to see them.
1. connect your donor phone and open dfs.
2. click manager in the top left
3. double click on your phone
4. type in your spc and click the button directly to the left
5. navigate to the programming->mobile ip tab
6. click read
this will enable you to see exactly what your passwords are. copy these values or use print screen to save the images. make sure you get the passwords for prof 0 and prof 1. close dfs.
7. disconnect your donor and connect to your epic using qpst.
8. click read and enter your spc/msl.
9. navigate to the m.ip tab and double click prof 0
you will now click the "enter hex value" circles which will enable you to enter the ha and aaa passwords from your donor. it is CRITICAL that you click these circles even if one of your donor passwords came back blank in dfs as this will write it blank. then click ok and change the passwords for prof 1. now click write to phone.
10. unplug usb. reboot phone.
i hope this helps
Did you by any chance follow re-Odin your phone with "Phone EFS Clear" checked?
k guys, this thread is coming about after respectfully moving the discussion from kalaker's s-off thread.
i've been looking for a while about how to back up my nv keys for data, just in case anything happens to my one v. this is thanks to New Optimus (for steps 8-10) and jmztaylor, who informed me the open sesame door trick works. I AM NOT RESPONSIBLE FOR HOW SOME MAY USE THIS. open sesame door trick has the potential to screw your phone up if you dont do it right, or delete an nv item.
CDMA ONLY (i dont think gsm works the same way anyway)
YOU ARE NOT MODIFYING ANYTHING. All you are doing is backing up your AAA and HA keys. they are used to identify and register your device's data on the VM network. IF YOU MODIFY ANYTHING, ITS YOUR FAULT IF YOU SCREW IT UP.
step 1:
download and install qpst. im not linking to the file, you should be able to find it easily enough by googling it.
step 2:
open up qpst configuration, and let it sit in the background for a minute. install the htc diag drivers for one v from here: http://www.htc.com/www/support/
look for the one v, and download and install the HTC Sync program which will install all the drivers you need.
step 3:
close out of htc sync once its installed, its an annoying program anyway. connect your phone, make sure adb debugging is enabled in developer options in settings. open the dialer, type in ##3424# (##diag#) and a screen will come up that says on and off, with select at the bottom. click on, then select, and it will ask you for your msl code.
note: your msl code can be obtained by a app in market called MSL Reader, you need root for this. follow the prompts in the app, its easy enough to do.
step 4:
after entering your msl code and entering diag mode, go back into qpst configuration. click on "add new port" toward the bottom right, and make sure when the window opens "COMx- USB/QC Diagnostic" is selected and click ok. qpst configuration should now recognize your phone as SURF-MSM7830. if it doesnt, update your version of qpst.
step 5:
in qpst configuration, click on "Start Clients- EFS Explorer". make sure you put your msl in the box that says spc, and click ok. a please wait window will pop up, it will only take a few seconds.
from New Optimus's post: http://forum.xda-developers.com/showpost.php?p=29951978&postcount=796
8. Once the phone reads completely make a new directory named (open sesame door) without the parentheses and all lower case
9. After making the new folder locate abd.exe from the android sdk install folder and press: start, run and type cmd then press enter you will get a command prompt window that opens up navigate to the android sdk directory and type; adb reboot, the phone should then reboot if you’ve done as you were supposed to.
10. After the phone reboots read it again with QPST EFS Explorer which still should be opened, you will notice that the red no access circle has been removed from the nvm directory so expand it and go to the num directory,
Click to expand...
Click to collapse
(note: edited New Optimus's post to remove links to esn/meid changing which is frowned upon in the forums, also i already had the open sesame door folder created upon making the pictures.)
left click and drag 465, 466, 1192 and 1194 to your desktop.
keep 465,466, 1192 and 1194 in a safe spot, they are how you have data on your phone. if something happens to your HOV and those are gone, good luck getting data back.
Quick noob question, do these files get generated by the carrier when you activate the phone?
whoshotjr2006
Do AKEY, SSDA and SSDB files need to be saved? if so, where are the files?
reachforthesky said:
whoshotjr2006
I know the content of file 0 and 1943. Could you briefly describe the contents of these 4 files (465, 466, 1192 and 1194)? Which one is HA, AAA, SSDA and SSDB? Are there any more important NVM files need to be saved?
Click to expand...
Click to collapse
465^"Data Services Mobile IP General User Profile"^"Data*"
466^"Data Services Mobile IP Shared Secret User Profile"^"Data*"
1192 is the AAA secret
1194^"HDR Access Network Stream CHAP Authentication User ID"^"Data*"
The reference is here: http://forum.xda-developers.com/showthread.php?t=1954029
Got sooo excited when I saw this. Used to switch firmware's on my optimus v with the firmware of the optimus s, and use optimus s roms. Had all of my nv data and everything else backed up. Forgot you have to have be on an aosp rom for this to work because you need a port. -_- I don't have a stock backup and right now I'm tethering, so it'd take awhile to download a stock backup. Guess I'll have to wait a week or so.
nvm, I found a backup. I tried it out, and i got to the qpst efs explorer. I did the open sesame door, and it unlocked the nvs, but I only had a couple of the files from the list. I did not have 465 or 466. Also, I had an issue when I tried to recognize the phone. It did recognize the phone in diag mode with the port, but not as surfmsm7830. I have the most updated version of qpst.
I'll have to check what version I'm running of qpst, I know its close to the newest if not the newest. It wouldn't recognize my phone correctly until I had a new enough copy.
Also the first time I tried the open sesame door trick, I too had the limited nv items. I used the ruu to go back to stock, and once I did that the open sesame folder dir survived the ruu and unlocked the rest of the nv items.
Hope that helps.
Sent from my One V using xda app-developers app
What version of QPST are you using for this? I get an error "Online connection failure: Unspecified error" when trying to connect.
I think my phone isn't getting read properly by QPST because under phone it says "(unknown)" even though the other fields fill in correctly.
CDMA Workshop reads my phone no problem, but this thing no luck.
EDIT: Found an updated build and it displays the specified info under phone. Not sure what the lowest working version is, but v2.7 build 323 will not read it, build 366 will though.
I need help flashing my LGOG to P+!!! If you or know someone that has done it successfully with wireless workshop, please PM me or reply to my post. I'm willing to compensate ($20?) for a remote flash. Thank you!
alibabakazam said:
I need help flashing my LGOG to P+!!! If you or know someone that has done it successfully with wireless workshop, please PM me or reply to my post. I'm willing to compensate ($20?) for a remote flash. Thank you!
Click to expand...
Click to collapse
I'm not sure if this is what you need but I ran across it a long time ago......hope it helps
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Sprint Phone To PagePlus 3G MVDO Programming
Software Requirements:
Cheap/Free - New QPST & QXDM Pro or DFS CDMA Tool Donor/Demo
Premium - CDMA Workshop ( FOR THIS PHONE YOU WILL NEED THE PAID VERSION --- NO OTHER OPTION WILL WORK )
ESN Change - not required for Verizon clean non-blacklisted phones
(Signed Keys Required):
To get 3G Data a Phone must obtain Verizon/PagePlus unique ID/Keys after activation that is delivered to each phone.
Each unique HAA/AA password key is tied to the account phone number.
Activation is network new number/port setup, phone to phone ESN/MEID swap, or phone number change.
QPST will write to my HTC EVO. For non-data programming once you do the above just allow the phone to self-activation. It completes but it doesn't program the 3G data.
Requirements:
1. Sprint 3G Cellphone (prefer clean ESN)
2. Either the latest QPST & QXDM Pro (recommended) , CDMA Workshop, or DFS Tool (recommended)
3. Modified Sprint PRL for Verizon Network
4. Verizon DMU Key ( THIS IS THE "10 KEY" IN EFS )
First you must program the Phone to Verizon/PagePlus.
A. Change MSL from Sprint MSL unlock,
ehow Sprint MSL or MSL Reader = marketplace download {require root}
B. Next Program Verizon format contained within documents if not porting with a preexisting phone number use [email protected] and [email protected] for phone provisioning.
C. Copy/Push the DMU Key to Phone’s DMU folder
D. Program the Verizon PRL
E. You must Disable mobile network data before you Dial *228 Activation
F. Activate the Phone with *228 which will update most data information then reboot
G. Within 10 – 15 mins of Activation do the following
H. Verify and correct your [email protected] in phone provisioning to final phone number
I. Program the phone with the following:
Program all Verizon phone passwords and HA Shared passwords to "vzw" without quotes. Click profile 0 and click edit.
Check and make sure your “NAI” is the correct one for Verizon/PagePlus network:
MCC 310 and MNC 00
NAI: [email protected]
MN HA SPI Set: Enable
MN HA SPI Value: 12C
MN AAA SPI Set: Enable
MN AAA SPI Value: 2
Reverse Tunneling: Enable
Home Address: 0.0.0.0
Primary HA Address: 255.255.255.255
Secondary HA Address: 0.0.0.0
DMU Pub Key: 10
MN Authenticator: 0
Rev Tunnel Preferred: Checked now with both passwords hit ok.
Now Profile 1 information below must retain the same data details as profile 0.
Your AAA is [email protected]
Your initial HA Shared is vzw
Rev Tunnel Preferred: Checked now with both passwords hit ok
J. The 3G DATA Sprint trick.
On Sprint a Phone without activation will have its Active Mip profile defaulted to 0. After any type of programming the default Active Profile becomes 1 but you’ll NEED it to be set to 0 for the initial data Verizon programming connection only.
Generally changing the Phone’s Active Mip Profile by ESPT Dialer or by programming software will auto reboot the Phone.
Warning, by all means necessary AVOID the Phone reboot as it will initialize your Phone’s Active Mip Profile back to 1. There is a critical reason for this!
* You’ll need a root experimental ESPT Dialer to change the Phone’s active data profile setting which will fail to reboot.
OR
* You'll need to use CDMA or DFL Tool and change the Active Mip Profile to 0 without rebooting the active Phone. {Not sure reread I}
K. After changing Mip Profile to 0 be sure to view the changed Dialer ESPT ##DATA# “Date Profile” settings at least two as this could crash. At crash view again until the ##DATA# reloads resolves any crashing.
L. After changing the profile above your Phone’s voice and data transmission will be inactive. Toggle “Airplane” mode first ON then OFF. Now your signal bar will show an active broadcast transmission again.
M. Change network to CDMA PRL or do whatever you need to do for the Phone to maintain a stable data connection.
N. Enable the mobile data network, preferably outside. Maintain data connection for at least 10 minutes
O. Before you Reboot / Power off the Phone Disable the mobile data network again.
P. Use DFS TOOL or QXDM Pro and copy all of Mip Profile 0 data to Profile 1. Clone both your HA Shared & AAA passwords then enter all information that was programmed OTA earlier and clone to profile 1.
HA Shared Secret: shouldn't be garbled characters (OTA programming has assigned your phone unique keys)
AAA Shared Secret: shouldn't be garbled characters (OTA programming has assigned your phone unique keys)
Now you’re done!
You will get:
A. Voice
B. Text
C. 3G Data Locked
MMS Setup:
Requires you change the Phone’s APN Settings:
A. Dial ##DATA or Voice Dialer speak “Open APN”
B. Change to:
Port delete {Not Set}
Proxy delete {Not Set}
MMS http://mms.vtext.com/servlets/mms
press menu button then Save
Thanks bud!
Wow, thank you for taking the time to post all that information. It seems to be a lot more work than I thought, especially with the money I'll have to spend to get the right versions of the required software for this job. I'm seriously thinking of letting someone else just help me. Thank you again for your help!
How to fix "ERROR 16 - Switch ???" on gs3 flashed to boost mobile.
This is what I did. Hope it works for you
Might work in other cases.
Take battery out of flashed phone.
Connect Donor Phone
test donor phone and see if you can connect (make a test call, try to get onlne)
if not <contact boost mobile>
if it does, then connect it to pc and get PRL form it.
Load QPST, under Start Clients menu, select Service Programming.
Click Read from Phone and enter MSL (000000).
Then Save to file. This will save a .qcn and .rl0 file.
In QPST, under Start Clients menu, select RL Editor.
In RL Editor, load your .rl0 file. Go to File, Save As..., make sure type is *.prl and enter a file name. Save file.
Turn off Donor and remove battery
Connect Flashed Phone
What You Will Need
The DFS CDMA Tool
Your MSL number (Sprint) or SPC number (Verizon, this is usually "oooooo").
Obtaining your MSL/SPC number is as easy as calling up your carrier and asking for it. They will freely give it to you. Other options include using the MSL Finder app. If that does not work, you are probably on Jelly Bean, so you will need to make a quick call to your carrier.
Step 1: Enable Use of DFS CDMA Tool
The use of this tool requires a non-standard USB connection (i.e. Download Mode, or just DM).
Open the Dialer and type in ##DIAG# (##3424#).
Click on "Qualcomm USB Settings" and select "DM + Modem + ADB" then press "OK".
Plug your device into your PC and go to Device Manager.
Locate "SAMSUNG Mobile USB Serial Port" and remember the COM number (in this case, COM5).
Step 2: Load Device into DFS CDMA Tool
Open DFS CDMA Tool. If you are using the Demo version, there will be a small countdown and the app will launch.
In the upper left-hand corner, hit the "Ports" button and select the port you found in Device Manger.
Double-click the port, and double-click it on the bottom to load your device into the software.
Enter your MSL/SPC number where it says "SPC" and hit the blue arrow. You should see the log show "Device Unlocked".
Step 3: Write New PRL
Hit the programming tab, then the NAM sub tab.
On the right-side, load the PRL that you want, then hit "Write".
Disconnect your device, go back to Step 1 and put your device back to "MTP + ADB". Back out of the menu and reboot your device.
Confirming PRL Change
Go to Settings -> About Device -> Status. Scroll down to "PRL" and confirm that it has been changed.
Take battery out of flashed phone. Again
go to "boostmobile" and login/create your account.
goto update handset
enter info for another boost phone (not donor, not flashed phone)
turn on 2nd boost mobile phone
go through the steps and test it for connection (calls, internet)
turn off and take out battery.
goto update handset again
enter info for Donor Phone (not 2nd Boost phone, or Flashed Phone)
turn on Flashed phone
go through steps, reboot
nJoy.......