FORUMS

How to Lock and Protect Your Apps – XDA Xposed Tuesday

The smartphone revolution has passed. Everybody has mobile apps. Some of … more

Which OEM Would You Like to Help?

Most manufacturers have moments of greatness and moments of decadence, and in the past few years … more

Root T-Mobile S6/Edge on 5.1.1 Without Tripping Knox

If you purchase phones from a carrier, you may be no stranger to the difficulties … more

IonVR Coming Soon, HTC M9 Dev Edition Gets Android 5.1 – XDA TV

The HTC M9 Developer Edition has received Android 5.1. That and … more

[GUIDE] [HOW TO] Enable unlock edit add GSM LTE bands to Samsung Galaxy S5 QualComm

571 posts
Thanks Meter: 151
 
By botwa2000, Senior Member on 21st November 2014, 11:00 PM
Post Reply Subscribe to Thread Email Thread
I'm going to try and summarise the steps to play around with 3G and 4G bands on Samsung Galaxy S5 devices.

I didn't come to it on my own, all thanks and contributors are listed below.

Happy to close any gaps in the guide - just shout.

The process might help add extra 3G or 4G/LTE bands if the hardware of your device allows it.
So far there have been found a lot of limitations on Sammy devices so the success is by no means guaranteed.

Use everything at your own risk, I'm not going to be responsible for any damage to your phone as a result of you trying to follow the steps.

The steps worked for me, I was able to disable and then enable some GSM bands.
So if nothing else the guide should be useful for those who accidentally delete default bands on their phones.

Additional LTE bands have been successfully unlocked on some brands already.

Thanks for providing inspiration, guidance and working assumptions to following threads and folks:

http://forum.xda-developers.com/gala...ds-to-t2886059
http://forum.xda-developers.com/cros...ating-t2871269

@fffft
@olokos
@BlackSoulxxx
@Isriam
@dl12345

Original Quick Guide as compiled by @fffft quoted here:


The Mod:

Step by step guide

1. You need a phone with a Qualcomm processor that has been rooted.
2. If you need to root your phone, click on the button below for guidance. Otherwise skip to step 3.

3. If you are running a custom ROM and kernel that were compiled from source code, well done. Skip to Step 4.
Otherwise click on the button below for more information.

4. Download and install QPST. We will use this program to edit your phone settings. This runs best on Windows XP. But you can use Windows 7 (and probably Win 8, if you must). Right click on setup.exe (not the .msi file) and choose run as adminstrator.

5. Download and install QXDM. We will use this program to "write enable" your phone settings. QXDM won't work unless QPST is also installed, so you need both programs. Right click on setup.exe and choose run as administrator to install.
6. Open the USB settings screen on your phone. Change USB from AP to CP. And USB settings from MTP + ADB to RNDIS + DM + Modem mode (after you have finished making edits in your phone's memory, remember to revert the original settings in this screen).

This is the hardest part of this mod as the USB setting menu is usually hidden and the method to access it is slightly different on some brands. For the S5, you can open it by dialing *#0808# . Other phones may use *#7284# , *#8778# , *#*#8778#*#* , ##3424# or something else entirely. If those codes don't work on your phone, try a Google search for keywords like those below to find out how to open the USB settings menu for your phone:

Google: USB settings xda
Google: how to use QPST xda

6a. If you have enabled RNDIS + DM + Modem mode already, skip to step 7.
For Sony, the following CLI commands have been reported to work. These may or may not work for other brands.
You can enter these using a terminal emulator app or from an adb shell.

From terminal emulator:
Code:
su
setprop persist.usb.eng 1
setprop usb.rndis.enable 1
echo 1 > /sys/class/usb_composite/modem/enable

Or using adb:
Code:
adb start-server
adb shell
su
setprop persist.usb.eng 1
setprop usb.rndis.enable 1
echo 1 > /sys/class/usb_composite/modem/enable
exit

If you use either of these, remember to revert the USB settings after you finish your phone edits. e.g.
Code:
su
setprop persist.usb.eng 0
setprop usb.rndis.enable 0
echo 0 > /sys/class/usb_composite/modem/enable

6b. If you have enabled RNDIS + DM + Modem mode already, skip to step 7.
If you have an LGE phone, try the dialer codes here and change the USB mode from AP to CP (Modem mode). If that doesn't work, then it has been reported that the following commands will also enable diagnostic mode for you:
Code:
su
echo 1 > /sys/devices/platform/lg_diag_cmd/diag_enable
setprop sys.usb.config acm,diag,mtp,adb

6c. If you have enabled RNDIS + DM + Modem mode already, skip to step 7.
If you have an HTC phone, this diagnostic driver may work for your phone.

6d. If you have enabled RNDIS + DM + Modem mode already, skip to step 7.
If you have an Opo phone, it been reported that the following commands will enable diagnostic mode for your phone.

Code:
su
setprop sys.usb.config diag,adb

6e. If you have enabled RNDIS + DM + Modem mode already, skip to step 7.
If you have a custom kernel installed (which has permissive permissions) then you can probably enable diagnostic USB mode from the EFS Professional program menu.

6f. If you have enabled RNDIS + DM + Modem mode already, skip to step 7.
If you cannot find out how to access the USB settings on your phone anywhere, you may be able to force diagnostic mode by installing the Windows USB drivers for your phone in advance. You can download Motorola /Sony/ LG/ HTC/ ASUS/ Huawei /Google, etc drivers here. Otherwise do a Google /XDA search to find USB drivers for your phone. Install the USB driver.

7. Enable USB debugging on your phone. This is a hidden menu. Look for Settings menu > System > About Device > Developer. If you don't see a Developer option, then tap on the firmware build number about ten times to unhide it.
8. Connect your phone to your phone to an USB port on your PC. Do not use an USB hub, connect directly to your computer. Windows will install a diagnostic driver.
9. Open the Windows (Control panel) Device Manager and confirm that you see something like "Samsung Mobile USB Serial Port" listed there. If you see a yellow triangle there > right click and update the driver.

10. Open the "QPST Configuration" program > Ports > Add new port > choose the port labeled diagnostic > OK.
If you do not see a diagnostic port listed and you were not able to explictly able to set USB diagnostic mode earlier, then right click on the driver that Windows has assigned to your phone in the Windows (Control panel) Device Manager > Update Driver Software > Browse. Choose the folder where you extracted the USB driver that you downloaded for your phone. This forces Windows to use the downloaded driver.
11. Now select the QPST Start Clients > Software download > Backup > Start. This saves a backup copy of your phone's stock NV memory to your computer in case you need it later.
12. Navigate to the C:/Program Files/Qualcomm/QPST/bin folder.
13. Right click on ServiceProg.exe > run as administrator.
14. Choose Phone > Read from phone > UMTS System. This will show which 3G bands are currently enabled. Add checkmarks to the additional 3G bands that you would like to add. Resist the temptation to check everything unless you are prepared to troubleshoot possible issues with non-existant bands, slow boot times and other issues. Just add specific bands that you need for another carrier or are missing in the areas you travel. If you aren't sure what to add, then don't check any extra bands for now - you can always come back later after you find out which 3G bands you can actually make use of.

Either way, do not click write to phone yet. And do not close the Service Programming window either.

15. Before we write anything to your phone, we need to write enable the locations we are going to edit. Navigate to the C:/Program Files/Qualcomm/QXDM/bin folder.
16. Right click on QXDM.exe > run as administrator. If you are not adding any new 3G bands at this time, skip to step 21.
17. In the NV Browser window, scroll down to ID 01877 (aka NV 1877) > Read.
Then write "0" to NV 01877 with QXDM. This initializes (write enables) the item for QPST. We need to do the same for several more NV items.
18. Select ID 00441 > Read. > Write "0" to NV 00441 with QXDM. This initializes (write enables) the item for QPST.
19. Select ID 00946 > Read. > Write "0" to NV 00946 with QXDM. This initializes (write enables) the item for QPST.

20. Select ID 02954 > Read. > Write "0" to NV 02954 with QXDM. This initializes (write enables) the item for QPST.
21. If you do not intend to add any new LTE bands, skip to step 24. Otherwise,
Select ID 06828 > Read. > Write "0" to NV 06828 with QXDM. This initializes (write enables) the item for QPST.
22. Select ID 06829 > Read. > Write "0" to NV 06829 with QXDM. This initializes (write enables) the item for QPST.
23. If you wish to add LTE bands and have already calculated a custom value from the instructions in the thread, then use QXDM to write that value to both ID 06829 and ID 06829, writing one item at a time.
Otherwise, write (decimal) "17592185995263" to both ID 06828 and ID 06829, writing one item at a time. This will enable all LTE bands.
Note that LTE edits will only work if your firmware has an LTE modem. If you already have at least one LTE band active, then you are OK. If your current firmware is from a carrier that does not use LTE at all, then you'll also need to update your modem to an LTE capable version as well.
24. Now go back to the Service Programming window that you left open. If you added any new 3G bands, click on write to phone to write the current selection of 3G bands to your phone. Otherwise do not click write, simply continue on to the next step.

25. You are now finished editing the NV values in your phone.
26. Reboot your phone.
27 In the Service Programming screen, choose Phone > Read from phone > UMTS System to confirm that your new 3G band selection are persistent. If they revert and you don't have a custom kernel installed, this confirms that you will need a custom kernel for this mod to work.
28. In the QXDM NV Browser screen, scroll down to ID 06828 > Read. Note the value.
29. In the QXDM NV Browser screen, scroll down to ID 06829 > Read. Note the value.
ID 06828 and ID 06829 should both show the custom value that you wrote. i.e. "17592185995263" (or hex "0xFFFFFFF3FFF") or the custom value, if you had used one.

30. Remember to change your USB settings back to normal mode, e.g. on the S5, dial *#0808# again and choose USB = AP and USB Settings = MTP + ADB > Click OK.
31. Celebrate! And let us know about your success (or sticking points).
32. You can test your results by checking whether your phone uses the new bands when you roam onto other systems that use them. Or if you have a SIM card for an alternate carrier. To tell if your phone is using the new bands, you can look at the current band being used in the Service menu or with various apps, e.g. LTE Discovery.


Your device should be rooted.

1. Enter into diag mode from *#0808# dial pad command. If a direct dial doesn't get you to the menu then use any Secret Code explorer app from Google Market, e.g. Phone Info Samsung by @vndnguyen.

AP
RMDIS + DM + MODEM

2. Enter into USB debug mode,
3. In Terminal Emulator ran
su
setenforce 0

4. Connect to PC
5. In device manager enable hidden devices.
You should see your Sammy in ports like COMxx

6. Run QPST
7. In QPST, add the COM port where you see your device. If one port won't work, try the next one.

Now you should be able to run NV manager or QXDM.

NV values responsible for GSM are 00441, 00946, 02954 and 01877

NV values responsible for LTE bands are 06828 and 06829.

The correct values that you would write in these NV can be derived by using Qualcomm NV Calculator app by @vndnguyen.
Further details on the values are in this thread http://forum.xda-developers.com/andr...lcomm-t2950491 courtesy of @yakapa40

---------------
Another important aspect of controlling the phone network behaviour is through the hidden menu.
Use with extreme care & do this at your own risk.

Here's how you can check you existing LTE bands:

Open the dial pad
Type: *#0011# to enter Service Mode (Be very careful with what you do here)
Note: You need to be rooted for this to work
Once in Service Mode, do the following:
Tap the menu button and tap Back
Tap the menu button again and select "Key Input" and enter an upper case Q and press OK
Tap the menu button again and select "Key Input" and enter 4 zeroes (0000) and press OK
Wait 5 - 15 seconds. You'll see the Main Menu
Choose option [2]: UE SETTING & INFO
Choose option [1]: SETTING
Choose option [1]: PROTOCOL
Choose option [2]: NAS
Choose option [1]: NETWORK CONTROL
Choose option [4]: BAND SELECTION
Choose option [4]: LTE Band Preference
Choose option [7]: LTE ALL (Or you can choose any band instead)
If you want to go back then tap the menu button and choose Back (Don't press the back key)

Press the back key to exit
Attached Files
File Type: zip EFS_Professional_2.1.73_Release.zip - [Click for QR Code] (957.1 KB, 890 views)
File Type: zip QPST v2.7 Build 4.11.zip - [Click for QR Code] (16.16 MB, 1190 views)
Last edited by botwa2000; 21st February 2015 at 11:02 AM.
The Following 11 Users Say Thank You to botwa2000 For This Useful Post: [ View ]
 
 
23rd November 2014, 01:56 AM |#2  
Senior Member
Thanks Meter: 115
 
More
seems most have lost interest because its not capabile with the basic instructions provided previously. good luck though, let me know if you ever need a g900f nv list.
The Following User Says Thank You to Isriam For This Useful Post: [ View ]
23rd November 2014, 08:32 AM |#3  
botwa2000's Avatar
OP Senior Member
Thanks Meter: 151
 
More
Quote:
Originally Posted by Isriam

seems most have lost interest because its not capabile with the basic instructions provided previously. good luck though, let me know if you ever need a g900f nv list.

True. Just hoping one day someone with specific knowledge will be able to move it forward.

My motivation for reviving the topic was as someone destroyed their LTE bands through service menu and I believe our method can help restore it.
The Following 2 Users Say Thank You to botwa2000 For This Useful Post: [ View ]
23rd November 2014, 10:06 AM |#4  
juDGEY2k10's Avatar
Senior Member
Flag Liverpool
Thanks Meter: 106
 
More
3rd time lucky for this topic

Just dont let ffff spoil it again.
23rd November 2014, 12:12 PM |#5  
botwa2000's Avatar
OP Senior Member
Thanks Meter: 151
 
More
Quote:
Originally Posted by juDGEY2k10

3rd time lucky for this topic

Just dont let ffff spoil it again.

Far from that. Need to get it in motion first
The Following User Says Thank You to botwa2000 For This Useful Post: [ View ]
23rd November 2014, 02:17 PM |#6  
botwa2000's Avatar
OP Senior Member
Thanks Meter: 151
 
More
@Hongdae since the latest samsung rom update I also reach *#0808# through hidden menu app only, not via dial pad.

I'll update the OP accordingly.

I had the issue of QPST connection dropping but was able to reestablishe after several attempts.

Try to launch nv manager, you should be able to select the 3g bands from the check boxes without the need of edit nv values manually.

Also check if your phone shows a valid IMEI number that also equals the one printed on the back of your device.
Last edited by botwa2000; 23rd November 2014 at 02:45 PM.
23rd November 2014, 03:12 PM |#7  
Junior Member
Thanks Meter: 6
 
More
Quote:
Originally Posted by botwa2000

@Hongdae since the latest samsung rom update I also reach *#0808# through hidden menu app only, not via dial pad.

I'll update the OP accordingly.

I had the issue of QPST connection dropping but was able to reestablishe after several attempts.

Try to launch nv manager, you should be able to select the 3g bands from the check boxes without the need of edit nv values manually.

Also check if your phone shows a valid IMEI number that also equals the one printed on the back of your device.

Okay. Yeah the IMEI is the same as the one printed on the back, so I guess it is valid. By now I'm trying to fix the QPST connection but it is not working yet.

Maybe KIES recovery could fix my phone, but I think this problem comes from EFS folder and I don't know if KIES reinstalls that content.
Last edited by Hongdae; 23rd November 2014 at 03:16 PM.
23rd November 2014, 03:30 PM |#8  
botwa2000's Avatar
OP Senior Member
Thanks Meter: 151
 
More
Quote:
Originally Posted by Hongdae

Okay. Yeah the IMEI is the same as the one printed on the back, so I guess it is valid. By now I'm trying to fix the QPST connection but it is not working yet.

Maybe KIES recovery could fix my phone, but I think this problem comes from EFS folder and I don't know if KIES reinstalls that content.

Yeah maybe a good idea to do a full format and then use kies recovery.

I can upload my EFS folder backup for you if you want to check against your existing folder and see if there're any major differences.

Though mine is a G906K model if it makes any difference.
The Following User Says Thank You to botwa2000 For This Useful Post: [ View ]
23rd November 2014, 03:46 PM |#9  
botwa2000's Avatar
OP Senior Member
Thanks Meter: 151
 
More
....
Last edited by botwa2000; 23rd November 2014 at 03:48 PM.
23rd November 2014, 03:49 PM |#10  
Junior Member
Thanks Meter: 6
 
More
Quote:
Originally Posted by botwa2000

Yeah maybe a good idea to do a full format and then use kies recovery.

I can upload my EFS folder backup for you if you want to check against your existing folder and see if there're any major differences.

Though mine is a G906K model if it makes any difference.

That would be awesome, thanks! I made a backup of my NV values with QPST but the restore is not working, so I have no backup of mine.

Actually, what I modified are these values, following the procedure on:

http://forum.xda-developers.com/gala...ds-to-t2886059

17. In the NV Browser window, scroll down to ID 01877 (aka NV 1877) > Read.
Then write "0" to NV 01877 with QXDM. This initializes (write enables) the item for QPST. We need to do the same for several more NV items.
18. Select ID 00441 > Read. > Write "0" to NV 00441 with QXDM. This initializes (write enables) the item for QPST.
19. Select ID 00946 > Read. > Write "0" to NV 00946 with QXDM. This initializes (write enables) the item for QPST.

20. Select ID 02954 > Read. > Write "0" to NV 02954 with QXDM. This initializes (write enables) the item for QPST.
21. If you do not intend to add any new LTE bands, skip to step 24. Otherwise,
Select ID 06828 > Read. > Write "0" to NV 06828 with QXDM. This initializes (write enables) the item for QPST.
22. Select ID 06829 > Read. > Write "0" to NV 06829 with QXDM. This initializes (write enables) the item for QPST.
23. If you wish to add LTE bands and have already calculated a custom value from the instructions in the thread, then use QXDM to write that value to both ID 06829 and ID 06829, writing one item at a time.
Otherwise, write (decimal) "17592185995263" to both ID 06828 and ID 06829, writing one item at a time. This will enable all LTE bands.

Maybe I made a mistake when changing them.
Post Reply Subscribe to Thread

Tags
bands, gsm, lte, samsung, sgs5
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes