new optimus
Android Expert
I could help you using team viewer if you want, I am in florida, eastern time zone so if you want to set up a time that would work let me know.
-
After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.
Root Evo 4G to Boost Mobile Guide/Evo 3D
- Thread starter solbadguy89
- Start date
-
- Tags
- htc evo 4g
Thanks for the offer! I'll give it ONE more shot today! I already put 4 nights into this thing! Feel like I'm almost there though...
Doing some reading, I found one thread about the HA and AAA keys, and the writeup said to enter in Service Programming, M.IP for the HA and AAA keys:
"In HA shared secret and AAA shared secret click on "enter text string" and type "metropcs" without the quotes"
That confuses me, I thought the HA and AAA keys were all cryptic. This was from a thread on XDA (http://forum.xda-developers.com/showthread.php?t=796257 , step #23). What gives?
Or can you also enter those keys in HEX, but it just so happens that MetroPCS uses their company name as the PW, so you can just convert "metropcs" to HEX and enter it in that way?
Hello I just wanted to send a THANK YOU to all the people who take the time to help.
It takes lots of time and work for all great help the people give.
Also would like to Thank the people who ask all the questions they have.
It took about a week for me to figure all the programs out making 1 step
forward then 3 steps back. After lots of reading and experimenting I got my
Sprint Evo 4G Boostd'. I finished up with calling Boost asking them to change
from prevail ( working great rooted and happy) to my old original incognito.
They were very happy to help and were more then happy to reduce my payment
From 40 a month to 35 a month. They were so nice LOL.
THANK YOU ALL THAT HELP US NORMAL PEOPLE DO GOOD THINGS.
It takes lots of time and work for all great help the people give.
Also would like to Thank the people who ask all the questions they have.
It took about a week for me to figure all the programs out making 1 step
forward then 3 steps back. After lots of reading and experimenting I got my
Sprint Evo 4G Boostd'. I finished up with calling Boost asking them to change
from prevail ( working great rooted and happy) to my old original incognito.
They were very happy to help and were more then happy to reduce my payment
From 40 a month to 35 a month. They were so nice LOL.
THANK YOU ALL THAT HELP US NORMAL PEOPLE DO GOOD THINGS.
new optimus
Android Expert
I would not say those keys are cryptic, the HA is like the user name and sprint uses the word "secret" as there username apparently metro uses "metropcs"
but in the phone those are converted to hex so "secret" becomes 736563726574
Got it! i used QXDM to get the HA and AAA from the old EVO 4G that was activated on MobiPCS, and they are both "mobipcs", so i entered that text string for the keys.
Still nothing works (same errors) after doing that and following this guide (of course changed things to @mobipcs.com where appropriate) :
HTC Evo 4G MetroPCS HOW TO! - xda-developers
I never changed my SPC to 000000, does that matter?
I also am confused about step #26 on this guide, where you go to a site to calculate a code from your MEID, which he calls the "MetroPCS MSL". I just used my known MSL (from MSL reader App) and entered it into the password field in the UM and AN tabs of the PPP config.
whew! but still not working.
kolosus
Android Expert
jivenene
I've been around but very busy past few days.
Here's what you need to do. First thing is clone the esn. Done? Without that do not proceed.
Next you need to plug in the 4g and plug it into CDMA ws. You need to copy the information for Nam1 and Nam2 as outlined in Round 4. Copied? Then close ws and pull up Service Programming. You need to look at how many profiles you have ACTIVE on the 4g. The 4g has I think 8 profiles, dont quote me. But the active ones are the ones that have stuff in it.
Since I cannot help you directly on this, as I do not know, I'll fill you in on what I do know. Sprint phones has two profiles 0 & 1. Verizon phones have one profile. Sprint's first profile (0) is the profile of the phone itself. The next profile (1) is the profile of the user of the phone. Profile 0 is static and goes with the phone. Profile 1 changes as the user of the phone changes. Verizon phones do not have a set profile, the user of the phone has the only profile (0).
You'll need to clone each and every profile that your carrier uses. To do that you'll need 465 and 466 of each profile. How do you do that? You look into the 4gs efs partition. Under /num/num (or some slight variation) you'll see a bunch of files all numerical. 465 and 466 are a set.
465 and 466= profile 0
465_1 and 466_1= profile 1
465_2 and 466_2= profile 2
465_3 and 466_3= profile 3 and so on.
Those are only part of the profile cloning process. You also have to clone the ip addresses etc on each profile.
So here is my suggestion on the things to copy.
First you need to write in Nam1 and Nam2 on your 3d. When you close ws after that it'll ask if you want to reset the phone... you dont. Next open up the efs on the 3d and (do this exactly) right click on the list of files and select to "copy from computer to here" and bring in one file at a time. It might look like explorer and given the bunch of files that you have to copy you might want to just drag and drop but refrain from that. One at a time. Done? Close efs explorer.
Copy over the rest of each profile by hand. One by one and make sure to make the profile active. Exactly.
Then write it to phone. This is where your phone automatically reboots after being written to. Keep your fingers crossed.
Nam1 and 2 should give you voice and text. The profiles should give you data. You will not get data without the Nams. But you should get voice without all the profiles properly setup. Good luck.
I've been around but very busy past few days.
Here's what you need to do. First thing is clone the esn. Done? Without that do not proceed.
Next you need to plug in the 4g and plug it into CDMA ws. You need to copy the information for Nam1 and Nam2 as outlined in Round 4. Copied? Then close ws and pull up Service Programming. You need to look at how many profiles you have ACTIVE on the 4g. The 4g has I think 8 profiles, dont quote me. But the active ones are the ones that have stuff in it.
Since I cannot help you directly on this, as I do not know, I'll fill you in on what I do know. Sprint phones has two profiles 0 & 1. Verizon phones have one profile. Sprint's first profile (0) is the profile of the phone itself. The next profile (1) is the profile of the user of the phone. Profile 0 is static and goes with the phone. Profile 1 changes as the user of the phone changes. Verizon phones do not have a set profile, the user of the phone has the only profile (0).
You'll need to clone each and every profile that your carrier uses. To do that you'll need 465 and 466 of each profile. How do you do that? You look into the 4gs efs partition. Under /num/num (or some slight variation) you'll see a bunch of files all numerical. 465 and 466 are a set.
465 and 466= profile 0
465_1 and 466_1= profile 1
465_2 and 466_2= profile 2
465_3 and 466_3= profile 3 and so on.
Those are only part of the profile cloning process. You also have to clone the ip addresses etc on each profile.
So here is my suggestion on the things to copy.
First you need to write in Nam1 and Nam2 on your 3d. When you close ws after that it'll ask if you want to reset the phone... you dont. Next open up the efs on the 3d and (do this exactly) right click on the list of files and select to "copy from computer to here" and bring in one file at a time. It might look like explorer and given the bunch of files that you have to copy you might want to just drag and drop but refrain from that. One at a time. Done? Close efs explorer.
Copy over the rest of each profile by hand. One by one and make sure to make the profile active. Exactly.
Then write it to phone. This is where your phone automatically reboots after being written to. Keep your fingers crossed.
Nam1 and 2 should give you voice and text. The profiles should give you data. You will not get data without the Nams. But you should get voice without all the profiles properly setup. Good luck.
changed my SPC to 00000, still no work. What about the "one time subsidy unlock" and "field programming code" ? They are not set to 0.
Also for the HA and AAA keys, when i read the 466 file, there is HEX that matches "mobipcs", and a 07 infront, I assume signifying that it is 7 characters long. does this need to be entered into the HA key in M.IP in HEX mode with the mobipcs following it (also in HEX) ?
new optimus
Android Expert
Dont follow a metropcs guide, Your not using metro and you may change carrier information that will block your phone from being usable on mobipcs.
No you only use the hex characters that make mobipcs, assuming that is the correct HA key.
As to your previous post about generating a metro msl and the subsidy unlock that has nothing to do with your carrier and changing all those values will make that phone unusable on your network.
alexandroid5
Android Enthusiast
Kolosus, followed your suggestions to the T. phone rebooted.
I get "error code 67" (seen it before, and even had this on the previous EVO 4G when it was still alive and running fine on MobiPCS system)
Unfortunately, still the same old "your account could not be validated" when I try to dial my own # to reach VM. Also no 3G icon.
I am at a loss. Seems like all the profile matches that in the old phone. Weird thing is that it will give me notifications of texts that come in to google voice. But i have the Wifi OFF and it seems like the data is not working (no 3G or 1x), so I don't know how it gets my notifications.
Do I need to do a "Activate This Device" in settings? That is supposed to update stuff i think....
What does *228 do?
Don't I need the right PRL files for MobiPCS since this was a sprint phone from a different state? how do I get those?
my brain is starting to ooze out of my ears.
new optimus
Android Expert
Prl is a great thought and very relevant to pull the prl from the evo 4g open cdma ws enter the spc then go to the other tab on the upper right you should see prl click read it will save it to your computer then to put it to the 3d connect the 3d enter the spc go to the other tab click write and choose that saved file
kolosus
Android Expert
I'm at a loss here. It should work. At the very least you should have voice working without a hitch.
Did you copy over the meid of the device correctly? Would it be possible to do some screen shots on both devices? Something is off here and we're not able to come up with what it is...
BTW, the prl is a great idea. Pull it off the 4g and put it on the 3d. Might not help but it'll certainly need it.
Did you copy over the meid of the device correctly? Would it be possible to do some screen shots on both devices? Something is off here and we're not able to come up with what it is...
BTW, the prl is a great idea. Pull it off the 4g and put it on the 3d. Might not help but it'll certainly need it.
YES! after copying over the PRL, voice works!!!!!!!!! Thanks 1000x!
I am getting SMS, but 3G no data though! What setting affect data? the M.IP? Why is it in some guides the IPs are set to 0.0.0.0, and other guides they are populated with actual IP adresses? seems like there should be something there, but my old 4G had 0.0.0.0.
In the M.IP the Home, Primary, and Secondary HA are all 0's.
In the PPP the Primary and Secondary DNS are all 0's.
Also another question is, in the PPP Authentication, what password goes in there? Do i need anything in there? Also when I enter in the HA and AAA keys in MIP->Mobile IP Profile, I click "Enter text string" and type in "mobipcs". Then I just write it to phone. Next time I open that, the "Retain last value" radio button is selected, as if I did nothing.
Jive
Forgot to mention, the second time around, I copied extra files I did not the 1st time, because the guide did not mention them:
465_2, 465_3, 465_4, 465_5
Also, after I copied the PRL, it went from 61008 to 10602.
Does that mean the PRL in there was from California (where the phone came from), and is now from HI (which i copied from my EVO 4G that was working on Maui) ?
Also when I go to Activate This Device in settings, I get green circle for voice, red for data. Do i need to "update profile"?
I think I may need some local specific setting somewhere in the profiles? Too bad info about MobiPCS is so sparse.
kolosus
Android Expert
Awesome news my friend! :smokingsomb: 
:smokingsomb:
So. Now it is just a matter of getting the profiles correctly.
Do you have a screen shot app on your computer? Use Irfanview if you dont. Plug in the 4g and start taking screen shots of all the tabs. Make sure to get into each profile on the MIP tab and take screen shots of each profile's details. Dont forget one of the tab itself.
Start cloning the tabs on your 3d. Do not get trigger happy. First just clone each of the profiles and then the contents of the MIP tab itself. Once that's done give it a whirl. Not sure which profile you should set to active when you write to the phone but we can keep trying.
The IP addresses you have to write in by hand. Whatever is written into your 4g is what you should write into the 3d. That's only part of the cloning process. What you just did was clone the SETTINGS of the profile.
The profile also contains a NAI and passwords for ha and aaa. Might even contain a tethered NAI. Those you can clone by simply pulling the right files off the efs of the 4g and placing them on the 3d. 465 for the usernames on the profile. 466 for the passwords on the profile.
Depending on how many active profiles you find on the 4g you need to pull the necessary files off of it and write them into the 3d.
465 (usernames) and 466 (passwords) for profile 0
465_1 (usernames) and 466_1 (passwords) for profile 1
465_2 (usernames) and 466_2 (passwords) for profile 2 and so on.
The settings and the passwords have to match. Without the passwords the settings are of no use. Without the settings the passwords will never reach the right destination.
Hopefully this will get you going and on their 3g network.
BTW. The prl has nothing to do with zip codes. Each company has their own internal naming scheme for their prls. Higher numbers do not mean better and lower numbers do not mean worse. Or vice versa either. Nothing to do with zips either.
:smokingsomb: So. Now it is just a matter of getting the profiles correctly.
Do you have a screen shot app on your computer? Use Irfanview if you dont. Plug in the 4g and start taking screen shots of all the tabs. Make sure to get into each profile on the MIP tab and take screen shots of each profile's details. Dont forget one of the tab itself.
Start cloning the tabs on your 3d. Do not get trigger happy. First just clone each of the profiles and then the contents of the MIP tab itself. Once that's done give it a whirl. Not sure which profile you should set to active when you write to the phone but we can keep trying.
The IP addresses you have to write in by hand. Whatever is written into your 4g is what you should write into the 3d. That's only part of the cloning process. What you just did was clone the SETTINGS of the profile.
The profile also contains a NAI and passwords for ha and aaa. Might even contain a tethered NAI. Those you can clone by simply pulling the right files off the efs of the 4g and placing them on the 3d. 465 for the usernames on the profile. 466 for the passwords on the profile.
Depending on how many active profiles you find on the 4g you need to pull the necessary files off of it and write them into the 3d.
465 (usernames) and 466 (passwords) for profile 0
465_1 (usernames) and 466_1 (passwords) for profile 1
465_2 (usernames) and 466_2 (passwords) for profile 2 and so on.
The settings and the passwords have to match. Without the passwords the settings are of no use. Without the settings the passwords will never reach the right destination.
Hopefully this will get you going and on their 3g network.
BTW. The prl has nothing to do with zip codes. Each company has their own internal naming scheme for their prls. Higher numbers do not mean better and lower numbers do not mean worse. Or vice versa either. Nothing to do with zips either.
I already went through the 4G with Service Programming and did screen captures and copied it over to the 3D, but it's possible I made a mistake. Will go over it with a fine tooth comb again.
in the 4G there were only 2 enabled profiles 0 and 1. 1 is the "Active User"
Are you saying that if i copy:
465 (usernames) and 466 (passwords) for profile 0
465_1 (usernames) and 466_1 (passwords) for profile 1
I don't have to put anything in the password fields in the PPP Authentication because they would be copied over with those files? I believe I did that already, but will try again. Actually, I think after i copied I went into the MIP and typed in "mobipcs" for the HA and AAA keys. Should I copy those 465 and 466 files over again and not mess with any more setting like yes and passwords?
Jive
in the 4G there were only 2 enabled profiles 0 and 1. 1 is the "Active User"
Are you saying that if i copy:
465 (usernames) and 466 (passwords) for profile 0
465_1 (usernames) and 466_1 (passwords) for profile 1
I don't have to put anything in the password fields in the PPP Authentication because they would be copied over with those files? I believe I did that already, but will try again. Actually, I think after i copied I went into the MIP and typed in "mobipcs" for the HA and AAA keys. Should I copy those 465 and 466 files over again and not mess with any more setting like yes and passwords?
Jive
new optimus
Android Expert
If you used "mobipcs" for both HA and AAA KEY that very well could be why you do not have 3g.
"mobipcs" could be, not saying it is but your research leads us to think it is the HA key AND IF they use sprints style the HA KEY for profile 0 and the HA key for profile 1 would be the same BUT AND THIS IS BIG the AAA key will NOT be "mobipcs" on sprint and boost phones the profile 0 AAA key is 32 alphanumeric digits and the profile 1 AAA key is 12
What you say makes sense, but when I do:
Requestnvitemread ds_mip_ss_user_prof
Requestnvitemread ds_mip_ss_user_prof 1
I get the same keys in all 4 places, which is "mobipcs" or in HEX "6D6F6269706373"
Well I am getting on a plane in 4 hours and have not slept yet, so i'm throwing in the towel for now. Thanks again everyone for the help.
kolosus
Android Expert
If you have 2 profiles only then just copy over the profiles as in the guide. Both procedures work. I'd say first match the profiles (passwords and settings) next match the contents of the MIP tab. Simple IP or Simple IP+ etc.
Good luck buddy. You're so close.
PG: Hope you have a good trip.
Good luck buddy. You're so close.
PG: Hope you have a good trip.
I'm so lost. I tried to contact the company that flashed my phone remotely but they haven't answered my email. My evo was flashed to boost last week and I am on Deck reloaded Rom. My problem is that when I not on wiif I don't have 3g and I don't receive phone calls, texts or anything and I can't connect to the internet. I went to settings about phone and I saw that my network is still showing Sprint not boost and Mobile Network State is disconnected. I really don't know what to do but this problem has to be corrected ASAP.
new optimus
Android Expert
No I don't have the donor phone the company flashed my phone remotely and used a donor phone where they were. I just plugged in my phone and they did their thing. One thing is that I flashed a stock rom for them to be able to flash to boot and then I put my Deck reloaded back on the phone. I wonder if I have to stay with the stock rom in order for the phone to work correctly.
new optimus
Android Expert
new optimus
Android Expert
You may want to buy a cheap incognito for your own donor phone and if you can get your money back from them, one problem with not having the donor in your possession maybe they used that donor as someone elses donor as well, by mistake or something.