[GUIDE][PARTIAL] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3

[GUIDE][PARTIAL] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3

[GUIDE] [How To] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3 (Band 5 confirmed WORK)

UPDATE 9 : Please use this static nvbk patch for oreo instead, it give more stable results. Credit to : @qhsusb_bulk

UPDATE 8 : : PATCH for OREO is now available https://yadi.sk/d/bQhvMaY23REaXZ]here - credit to BlackzAfiqz

UPDATE 7 :

i gonna try to clean up this thread a bit and give a better instruction, since there are lot of changes since the initial post was created - all previous method and steps now moved to second post

So basically with latest situation, there r few steps you can try to unlock your band.

but before doing so, please READ few sidenotes/conclusion that we manage to gather so far :
1. This step was MADE for and TESTED on MARSHMALLOW, and MARSHMALLOW ONLY
2. The Rmt Storage Patch will still working up to an official N ROM version of 4.0.3
3. This step/trick WONT WORK on OB12 or 4.1.0 - doing so will result in UNUSABLE RADIO or BOOTLOOP - Updated, PATCH for 4.1.x is NOW AVAILABLE in courtesy of @SnowWolf75
4. We only able to (partially) unlock bands THAT ARE AVAILABLE in one or another OP3/OP3T models. If the band is NEVER APPEAR on any of the available models, then currently it's NOT DOABLE. Example : Band 13 is nowhere to be found on any model of OP3, so there will be no support for B13, since there's not enough resources to do so
5. Up to today, there are some SUCCESS STORIES while using the method. Some of them are :

Myself, & @baskaflyfer of course - CN MODEL - B5 B8 UNLOCKED - B3+B7 CA UNLOCKED

@allluke - US MODEL - B3 UNLOCKED post #640

B3 working IMEI intact. Thank you so much

Click to expand...

Click to collapse

@dapsyra - US MODEL - B3 UNLOCKED post #558

After following the guide, I was able to unlock band 3 in my US model OnePlus3 A3000. See attached images
I did all the steps. My IMEI is intact.
It takes some time for the signal to show up in Network Guru, so be patient.
In Network Guru->Band Locking->LTE, uncheck all the other LTE bands leaving only band 3 checked
Then go to RAT Locking and select LTE. Wait for the signal to show up.
If Network Guru goes to WCDMA, repeat last step.

Click to expand...

Click to collapse

@band3pls - US MODEL - B3 UNLOCKED post #846

I can confirm my LTE band 3 is working after flashing the new QCN, BUT after flashing the QCN you must reboot and then open QXDM and write 225 to NV item 1878, or else it won't work.

Here are my steps:

First I flashed this: (other/older QCN files posted by @otonieru will probably work too)
https://yadi.sk/d/dKAKorWd3FGTXB

Then I rebooted, and flashed this: (Baskaflyfer's QCN)
https://drive.google.com/file/d/0B1R...ew?usp=sharing

Then I rebooted again, and flashed this: (Baskflyfer's fbrx file)
https://drive.google.com/file/d/0B1R...ew?usp=sharing

Then I rebooted, wrote 225 in NV item 1878 in QXDM, and finally got LTE signal on band 3 working here in Pakistan on my A3000US.

Click to expand...

Click to collapse

@kaiserreich - US MODEL - B3 UNLOCKED post #921

I managed to get it to work.
Now I have EU bands on my A3000CN

1. flash rmt_storage via twrp. (first page)
2. restore europe qcn. (first page)
3.restore A3003_eu from post #334 (third step)
4.run qxdm -> nv browser -> find id 1878 and change it to 237 (write).
5.reboot your phone.

Thanks

Click to expand...

Click to collapse

Click to expand...

Click to collapse

So here's what you gonna need :

1. Qualcomm USB DIAG Driver - Find it from post#2
2. QPST & QXDM - sorry but i can't redistribute it here, please look for it yourself
3. Main QCN for base, here : https://yadi.sk/d/E0y_4Ka63GNUdt
4. Extra QCN for fbrx_cal :
5. Rmt Storage Patch - find it from post #2 - For OOS 4.1.x download it from Here
6. Network Signal Guru App from PlayStore

Additional file for OP3T users :
1. OP3T EU QCN - Here
2. OP3T fbrx - Here

Now do the PRE-STEP,
1. Boot into TWRP
2. Flash the RMT Storage Patch according to your OS version, 4.1.x use Snowwolf version, bellow that, use Baskaflyfer version

Next, step is :

1. Opening DIAG - Assuming you got your phone rooted, run this command from ADB

adb shell
su
setprop sys.usb.config diag,adb​

Click to expand...

Click to collapse

2. Now your devices wil either detected as unknown device (or Qualcomm Diag Port/USB Modem if you already have the diag driver) on Device Manager
3. Install the driver from requirement list number one, and you will have "HTC USB Modem" listed in your device manager (skip this step, if you already have your own qualcomm usb diag driver installed)-(remember to disable signature enforcement if you use WIN8/10)
4. Now fire up QPST and go to "Port" tab, and choose "Add New Port" ,
5. On "Serial/USB Port" tab, unchecked the option of "Show Serial & USB...bl bla bla" option, you will see your phone listed there as a "COM#" (# is a number depending on your PC) choose it, and click "OK"
6. Now choose "Start Clients" from the Menu tab above, and choose "Software Download"
7. Airplane Mode your Phone
8. Choose "Restore" Tab, and click browse for QCN file, and look for the QCN you have downloaded from requirement list Number 3 (if you need B3 on your US, use CN QCN, if you need B5 or B8 on your CN Model, use EU QCN. US QCN is still experimental)
9. Check "Allow phone/ESN mismatch"
10. Click "Start" and wait for the process to complete
11. After complete, wait 30 Seconds (for curing time), close QPST and reboot your phone
12. Once it fully boot, open back your CMD and re-run command from step number 1 to re-open your DIAG port
13. Use the "Software Download" function again, and restore the supporting QCN from requirement list Number 4 (choose one according to your needs)
14. Click "Start" and wait for the process to complete
15. After complete, wait 30 Seconds (for curing time), and reboot your phone
16. Once it fully boot, open back your CMD and re-run command from step number 1 to re-open your DIAG port, and make sure it detected on QPST
17. Now Open your "QXDM", choose options tab - "Communications", and choose the port according to your DIAG Port, and hit OK
18. Now choose "View" - "New" - "Common" - "NV Browser"
19. Go to NV ID 1878, and click "Read"
20. According to your needs, change the value. (If you need B3, B5, B8 on CN Model, use 237. If you need B3 on US Model, use 231 or 225)
21. Click "Write"
22. After complete, wait 30 Seconds (for curing time), close QXDM and reboot your phone
23. Run Network Signal Guru, choose "Clear Forcing" from the Tri-dot menu on top right
23. Continue with choosing "Band Locking" and choose only your new unlocked LTE Band. Hit OK, if warning about powercycle appear, just hit OK as well
24. Wait for a while until your phone picking up signal. To make it faster, you might want to lock your network mode to LTE ONLY through *#*#4636#*#* or through Network Signal Guru

That's it, if everything is well, you should have your new LTE BAND working now.

Hi everybody. It's all for testing.
I'm sorry it took so long. I was a little busy.
1. Here are archives which include separate QCNs for each LTE Bands from those versions of the phones:
A3000_cn
A3000_us
A3003_eu
A3010_cn_3T
2. Use QXDM and NV Calculator for unlocking LTE Bands, if it needed.
3. Here are archives which include one QCN with frbx_cal for the seven working modes with values from those versions of the phones:
A3000_cn
A3000_us
A3003_eu
A3010_cn_3T
4. The most important thing that you need to do is to change the value in id1878, it's hardware config, in QXDM.
I know 7 working modes:
225 - ???
226 - A3003eu
228 - ???
229 - ???
231 - A3000cn
232 - A3000us
237 - A3010cn
5. It's patched_rmt_storage, tested on A3000cn OOS 4.0.1
I know that it will work on A3010cn_3T Marshmallow, but, just in case, copy rmt_storage from the phone on the PC (path: root/system/bin)
and if you will have a problem after flashing patched_rmt_storage via TWRP, just replace your rmt_storage in archive, don't extract, only replace!!! And flash it again via TWRP.

Anybody can share the backup QCN from 3T_eu and 3T_us, please in PM???

And about B20 i still didn't test nothing. I have almost no free time
And sorry for English

Scorpion70 said:

Share the assistant app please:good:

Click to expand...

Click to collapse

Sorry I forgot to attach the apk in previous post.
It require root permission to patch system file.
Use it at your own risk.
Besides, you can download the source code from Github, and compile it by yourself.
https://github.com/snowwolf725/Unlock-LTE-Bands-App

Scorpion70 said:

I have china model(a3010). in my country combination of b3 & b7 works for LTE CA(4G+), therefore i should only combine them and i don't need unlock any bands.
I hope there is an easier method for this(?)

Click to expand...

Click to collapse

To unlock LTE CA is easier than unlock bands on OnePlus 3/3T.
If you only need B3+B7, you can flash Unlock_LTE_CA_B3B7B8.qcn via QPST.
This qcn file will enable B3+B7, B3+B8, B7+B8 on your OnePlus 3/3T.

1. Backup your EFS and modem in TWRP
2. Enable Qualcomm diagnostic mode
3. Enable airplane mode
4. Using QPST to backup your QCN file
5. Flash rmt storage patch for 4.1.x
6. Using QPST to flash Unlock_LTE_CA_B3B7B8.qcn
7. Disable airplane mode
8. Run Network Signal Guru, choose "Clear Forcing" from the menu on upper right

Happy New Year

Smile and be happy!!!
Hello from Russia, Saint-Petersburg