[GUIDE] biref guide to connect to diag port with QPST and QXDM for Nexus 6P

[tenfar]

here is the guide to how to connect to your phone with QPST. USE at your own risk

there is a diag lock with Nexus 6p,so with the production radio we can not connect to QPST. so we need to use the engineering radio firmware.

but the engineering radio will put our phone in FTM mode, makes our phone can not connect to mobile network. so we need to do some mod to disable the MBNOTA.

here is the step to connect to diag mode with QPST

1) you need to flash a twrp recovery. and backup your EFS.
2) boot in to twrp recovery , mount system partition,rename /system/bin/init.mcfg.sh to something else ,eg:
#mv /system/bin/init.mcfg.sh /system/bin/init.mcfg.sh.backup
3)reboot in to bootloader mode , flash the engineering radio
fastboot flash radio /path/to/engineering radio
4) in the bootloader choose BP Tools mode to boot your phone.
5) when the phone boots complete you can find a com port in your PC's device manager.
6) install the right driver,if the driver is not working you need to enter testmode with your PC.
7) install qpst or qxdm,and now you can connect to your phone in diag mode
8)for backup QCN you need SPC. the SPC for International version is 000000. the SPC for NA version is not 000000, PM me if you want to know your SPC(Only for NA version ,from Google Store).
9) you can change some nv values without SPC. eg nv 6828.



the above step can be to TWO steps :
1) rename /system/bin/init.mcfg.sh
2) flash engineer radio


the reason to rename init.mcfg.sh is that,this script will copy mcfg_sw.mbn from the /firmware/images wihch is the radio partition, to /data/misc/radio/ in every reboot . mcfg_sw.mbn is an OTA file for NV items. we don't want the engineer radio to screw our working nv items.

The engineer radio can be downloaded in this link http://d-h.st/GVid the version is 02.50L
the usb com port driver can be download in this link http://pan.baidu.com/s/1gfHbgn5

 

[DJBhardwaj]

Good exploration mate! :good:
Last I heard of QPST, was when I had the Nexus S and Galaxy Nexus. I wish I had a spare 6P for this. It's good to tinker around.

 

[zlebors]

do you have alternative link for usb com port driver?

 

[hotaru2k3]

the link for the com port driver is broken.

 

[AndroidSlave]

@tenfar what is a biref?

Sent from my Nexus 6P using XDA-Developers mobile app

 

[tr4nqui1i7y]

Any progress with QPST? I am trying to flash the eMMC of a bricked device. I'd love more insight @tenfar

 

[tenfar]

Any progress with QPST? I am trying to flash the eMMC of a bricked device. I'd love more insight @tenfar

when your brick your device you can not enter edl mode for Nexus 6p....that's sad.
we can only enter edl mode by adb reboot edl for now.
maybe there is a test point ,that we can short it.so we can enter edl mode.
i have post a link which is a factory image for nexus 6p. using that you can flash back to android 5.1.1 then flah to 6.0 .but it's useless if we cant enter edl mode

 

[Jongla]

backing up QCN works?
and how to get back to the original state?

 

[lehmancurtis]

when your brick your device you can not enter edl mode for Nexus 6p....that's sad.
we can only enter edl mode by adb reboot edl for now.
maybe there is a test point ,that we can short it.so we can enter edl mode.
i have post a link which is a factory image for nexus 6p. using that you can flash back to android 5.1.1 then flah to 6.0 .but it's useless if we cant enter edl mode

Edl mode can be used even if the device display remains dark. You should be able to get to edl with a deep flash cable (which can be homemade).

 

[mirzarajwan]

Need the link for the driver

Does anyone have the usb com port driver link for nexus 6p?

 

[nesan95]

Anyone please send Nexus 6p qcn file. Thank you

 

[nesan95]

Anyone please send Nexus 6p QCN file. Thank you

OK, I got a QCN backup file

 

[nesan95]

Anyone please send Nexus 6p QCN file. Thank you

OK, I got 2 nexus 6p QCN backup files. I restored it successfully. Still, I got unknown baseband and null IMEI number. I try to restore the same QCN file but I got an error. It says "Received an invalid command from the phone" (Image Attached). I tried it in QPST and QFIL. (one of the QCN file I restored unedited)
So, I wiped these partitions using ADB. These partitions are related to EFS.

dd if=/dev/zero of=/dev/block/mmcblk0p18 ------fsg
dd if=/dev/zero of=/dev/block/mmcblk0p20 -----modemst1
dd if=/dev/zero of=/dev/block/mmcblk0p21 -----modemst1

After that, I could able to restore the QCN file again. It gave the same result(No IMEI and baseband).

Note - I restore other brands QCN files to my nexus 6P
eg - Xiaomi 4s, 5 and 5s
- Lenovo A6000
These QCN files successfully restored and I got baseband version and IMEI Number but no signal

Sorry for my bad English. I hope you guys understand.
Any suggestions would be really appreciated

 

[eboy998]

radio

http://devhost.xda-developers.com/GVid link not working
please update radio.zip image files new link.

 

[joshyzacariya]

Hi,
Is there a new life for Nexus 6P shown as Qualcomm HS-USB QDLoader 9008
Thanks.

 

[eboy998]

OK
I found new link to radio.
But I need MSL/SPC CODE now. It's not 000,000. Can anyone help me?

 

[Sylvia999]

download link

I can't access the engineer radio and driver. Any help would be greatly appreciated!

 

[eboy998]

I can't access the engineer radio and driver. Any help would be greatly appreciated!

Radio linkhttp://www.trona-tech.net/wp-content/uploads/2016/12/radio0250l.zip