[GUIDE] How to restore IMEI, Baseband, MAC, fix NVRAM WARNING and fix NVDATA CORRUPTED on MERLIN ? (Redmi Note 9 / Redmi 10X 4G)

[VD171]

Warnings:

- This guide requires the backup be done when the IMEI was present!
- NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI.
- Keep your backup files safe and secure ! If you can, encrypt them.
- Never try to share your backups or your security and privacy will be compromised.
- USE AT YOUR OWN RISK. I AM NOT RESPONSIBLE FOR YOUR ACTIONS.

What this guide does ?
- Restores IMEI.
- Restores Baseband/RADIO/Modem.
- Restores Wi-Fi MAC.
- Restores Bluetooth MAC.
- Fixes "NVRAM WARNING: ERR 0x10" error.
- Fixes NV Data corrupted error.
- Fixes unknown baseband.
- Fixes null IMEI.

How to backup ?
You can backup the listed partitions using TWRP, PBRP, DD, SP Flash Tool or anyway you want.
I suggest you to use your favorite tool.

How to restore ?
You can restore the listed partitions using TWRP, PBRP, DD, SP Flash Tool or anyway you want.
I suggest you to use same tool of backup.

Partition: nvcfg​

Description: This partition stores variable configs of NVDATA and NVRAM.​

Size: 32.768 KiB (32 MiB)​

Block: /dev/block/mmcblk0p11​

Start address: 0xa4a2000​

Length: 0x2000000​

Partition: nvdata​

Description: This partition stores variable data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​

Size: 65.536 KiB (64 MiB)​

Block: /dev/block/mmcblk0p12​

Start address: 0xc4a2000​

Length: 0x4000000​

Partition: nvram​

Description: This partition stores persistent data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​

Size: 65.536 KiB (64 MiB)​

Block: /dev/block/mmcblk0p21​

Start address: 0x19f00000​

Length: 0x4000000​

Partition: persist​

Description: This partition stores persistent data for factory reset protection. Like google account and miaccount/micloud.​

Size: 49.152 KiB (48 MiB)​

Block: /dev/block/mmcblk0p13​

Start address: 0x104a2000​

Length: 0x3000000​

Partition: proinfo​

Description: This partitions stores persistent data of default structure for NVRAM/RADIO/MODEM/BASEBAND.​

Size: 3.072 KiB (3 MiB)​

Block: /dev/block/mmcblk0p19​

Start address: 0x18200000​

Length: 0x300000​

Partition: protect1 (or protect_f)​

Description: This partition stores variable data of SIM/RADIO/MODEM/BASEBAND settings and infos.​

Size: 8.192 KiB (8 MiB)​

Block: /dev/block/mmcblk0p15​

Start address: 0x164a2000​

Length: 0x800000​

Partition: protect2 (or protect_s)​

Description: This partition stores variable data of SIM/RADIO/MODEM/BASEBAND settings and infos.​

Size: 11.640 KiB (11,36 MiB)​

Block: /dev/block/mmcblk0p16​

Start address: 0x16ca2000​

Length: 0xb5e000​

Do you need help with your MERLIN device ?
Read this FAQ: https://xdaforums.com/t/faq-guide-h...for-merlin-redmi-note-9-redmi-10x-4g.4225163/

 

[dhawi13]

Warnings:

- This guide requires the backup be done when the IMEI was present!
- NEVER try to flash in "format all" mode ! Otherwise, you will LOSE all secure and identifying infos for your device. Like IMEI.
- Keep your backup files safe and secure ! If you can, encrypt them.
- Never try to share your backups or your security and privacy will be compromised.
- USE AT YOUR OWN RISK. I AM NOT RESPONSIBLE FOR YOUR ACTIONS.

Partition: nvram​

Description: This partition stores persistent data of secure and identifying infos for your device. Like IMEI, WiFi MAC, Bluetooth MAC, calibration data and others.​

Size: 65.536 KiB (64 MiB)​

Block: /dev/block/mmcblk0p21​

Start address: 0x19f00000​

Length: 0x4000000​

​

in my case nvram location in /dev/block/mmcblk0p22

 

[VD171]

in my case nvram location in /dev/block/mmcblk0p22
View attachment 5213735

Are you using engineering rom ?
Engineering rom has "efuse" partition (mmcblk0p20).
So, all partitions higher than 20, will be incremented by 1.
So, nvram is mmcblk0p21 on global and mmcblk0p22 on engineering rom.
See attached scatter here: https://xdaforums.com/t/engineering...for-merlin-redmi-note-9-redmi-10x-4g.4227933/

 

[dhawi13]

Are you using engineering rom ?
Engineering rom has "efuse" partition (mmcblk0p20).
So, all partitions higher than 20, will be incremented by 1.
So, nvram is mmcblk0p21 on global and mmcblk0p22 on engineering rom.
See attached scatter here: https://xdaforums.com/t/engineering...for-merlin-redmi-note-9-redmi-10x-4g.4227933/

Rom
Miui 12.0.3 Indonesia

 

[VD171]

Rom
Miui 12.0.3 Indonesia

Interesting.
This means global and indonesia doesn't have the exactly same partitioning table.
For adjusting, you need to read the SCATTER file to get the correct values for start address for the mentioned partitions.

 

[Shah65367]

HOW TO TAKE BACK UP REPAIRED IMEI VIA METAMOD ON ENGINEERING ROMNOW I WANNA FLASH LATEST ROM CAN UH TELL ME HOW TAKE BACK UP...? ND RESTORE IN OFFICIAL ROM?

 

[VD171]

HOW TO TAKE BACK UP REPAIRED IMEI VIA METAMOD ON ENGINEERING ROMNOW I WANNA FLASH LATEST ROM CAN UH TELL ME HOW TAKE BACK UP...? ND RESTORE IN OFFICIAL ROM?

You can backup the listed partitions using TWRP, PBRP, DD, SP Flash Tool or any tool you want.
The thread is not specific for how to use any tool.
You need to google about it or watch any video in youtube.
Good luck

 

[kcranky]

I am getting a "checksum invalid" error.
I flashed the engineering ROM to restore my IMEI information. Using the scatter file from the engineering ROM, I used SP flash tool to extract nvcfg, nvdata, nvram, persist, proinfo, pretect1 and protect2. I do this using the "readback" option in SP Flash
I then edit the scatter file of stock global 12.0.6, and load it back into SP flash tool, but it tells me the checksums are invalid. Am I doing something incorrectly?

EDIT: I've just read in another post that trying to set IMEI 1 will cause this error. I'll try the process again and update this if I learn anything else.

EDIT2: Same issue when just doing IMEI2 on the partition. Pulling the above mentioned partitions from the device still results in files that give a failing checksum. Flashing a the stock 12.0.6 ends up in the recovery menu with the "NV data is corrupted" message

 

[VD171]

I am getting a "checksum invalid" error.
I flashed the engineering ROM to restore my IMEI information. Using the scatter file from the engineering ROM, I used SP flash tool to extract nvcfg, nvdata, nvram, persist, proinfo, pretect1 and protect2. I do this using the "readback" option in SP Flash
I then edit the scatter file of stock global 12.0.6, and load it back into SP flash tool, but it tells me the checksums are invalid. Am I doing something incorrectly?

EDIT: I've just read in another post that trying to set IMEI 1 will cause this error. I'll try the process again and update this if I learn anything else.

EDIT2: Same issue when just doing IMEI2 on the partition. Pulling the above mentioned partitions from the device still results in files that give a failing checksum. Flashing a the stock 12.0.6 ends up in the recovery menu with the "NV data is corrupted" message

Try to delete the file "Checksum.ini".

 

[kcranky]

Try to delete the file "Checksum.ini".

That allowed it to pass!
When I plug the device in, the chip on the right hand side (when the screen is facing you) gets very warm, and the screen flashes (seems to turn on/off constantly).
Unfortunately I think must have shorted something, so I think that ends my learning on this one.

 

[VD171]

That allowed it to pass!
When I plug the device in, the chip on the right hand side (when the screen is facing you) gets very warm, and the screen flashes (seems to turn on/off constantly).
Unfortunately I think must have shorted something, so I think that ends my learning on this one.

Did you change something on the hardware?

 

[xwwz44wnn]

I accidentally selected formate all option and deleted all my partitions
I maneged to restore my imel
But i have nvram problem in wifi ( it's okay)
And i have a periodic problem in making calls , it seems that phone doesn't reconize the 2G or 3G connections
Any help with that please , and thanks in advance

 

[VD171]

I accidentally selected formate all option and deleted all my partitions
I maneged to restore my imel
But i have nvram problem in wifi ( it's okay)
And i have a periodic problem in making calls , it seems that phone doesn't reconize the 2G or 3G connections
Any help with that please , and thanks in advance

Try to write wifi mac exactly as you write imei.

 

[MyXelf]

By doing the system change I was able to fix the 'NVRAM WARNING: ERR 0x10' but after that it just changed to 0x01 error... And wasn't able to fix it...

 

[VD171]

By doing the system change I was able to fix the 'NVRAM WARNING: ERR 0x10' but after that it just changed to 0x01 error... And wasn't able to fix it...

You need engineering rom to write MAC again

https://xdaforums.com/t/v1-engineer...for-merlin-redmi-note-9-redmi-10x-4g.4227933/

 

[MyXelf]

Didn't know that... I'll try it next time...
Thanks a lot... You are so kind...

 

[VD171]

Didn't know that... I'll try it next time...
Thanks a lot... You are so kind...

You are welcome, my friend.
Enjoy

 

[Rlucifer.01]

i have already lost my imei after do format all with sp flash tool ,is there anything i can do to restore my imei ?

i stiil had info of my imei phone thats writed in my phone box

 

[VD171]

i have already lost my imei after do format all with sp flash tool ,is there anything i can do to restore my imei ?

i stiil had info of my imei phone thats writed in my phone box

You can restore imei2 only using engineering rom.

 

[Rlucifer.01]

You can restore imei2 only using engineering rom.

What is the different about ENG rom with the other Rom?