[GUIDE][PARTIAL] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3

[meiax93]

If you need B5 use 1. A3000_us 2. Unlock B5 3. A3000_us 4. Set HW =226 or you can try another, maybe will work 237. and i'm on OOS 4.0.1


I'm sorry, i don't have US version
You need to test all of this for yourself

As i said that's all for testing.

now im on Beta 11, and i want test it.
But i'm still blur your instruction
Im testing now. wish me luck. thanks for your hard work!
your first post say using DFS and QPST, and this one using QXDM and NV Calculator? Little bit confuse. Sorry

 

[Benrap]

I'm sorry, i don't have US version
You need to test all of this for yourself

As i said that's all for testing.

Could you guide me how to test? Just in points.
For example:
1. flash patched rmt storage
2. Install diag drivers
3. Cmd diag mode
4. Use qpst to restotre qcn

etc

Thanks!

 

[baskaflyfer]

If I will have time, I will try to make the guide simpler, but i don't know where else easier.

 

[ishtangli]

Hi everybody. It's all for testing.
I'm sorry it took so long. I was a little busy.
1. Here are archives which include separate QCNs for each LTE Bands from those versions of the phones:
A3000_cn
A3000_us
A3003_eu
A3010_cn_3T
2. Use QXDM and NV Calculator for unlocking LTE Bands, if it needed.
3. Here are archives which include one QCN with frbx_cal for the seven working modes with values from those versions of the phones:
A3000_cn
A3000_us
A3003_eu
A3010_cn_3T
4. The most important thing that you need to do is to change the value in id1878, it's hardware config, in QXDM.
I know 7 working modes:
225 - ???
226 - A3003eu
228 - ???
229 - ???
231 - A3000cn
232 - A3000us
237 - A3010cn
5. It's patched_rmt_storage, tested on A3000cn OOS 4.0.1
I know that it will work on A3010cn_3T Marshmallow, but, just in case, copy rmt_storage from the phone on the PC (path: root/system/bin)
and if you will have a problem after flashing patched_rmt_storage via TWRP, just replace your rmt_storage in archive, don't extract, only replace!!! And flash it again via TWRP.

Anybody can share the backup QCN from 3T_eu and 3T_us, please in PM???

And about B20 i still didn't test nothing. I have almost no free time
And sorry for English

Let me see if I understand these instructions correctly:

The files on step 1 would essentially turn your phone into one from that region (i.e. the A3000_cn will change your phone into a China region phone - at least the LTE bands). If you want to unlock more bands not available to the QCN you flashed, follow step 2 which can unlock them individually.

I'm not sure what step 3-4 are meant to do.

Step 5 says that you need a patched RMT for this method to work and that it's best to back yours up before flashing?

 

[otonieru]

i understand what baska mean in his post, as well as the step,

problem is i currently dont have pc around to do all the test,

basically

1st file is the QCN of specified bands,

3rd file is the QCN with supporting parameters for related bands to make it work

the hardware id is the one you need to make your phone believe it work as

so,

Theoritically,

if US user need bands 3,

flash A3000cn from list 1 & 3 (because CN model has band 3, and from our ealier test A3000 qcn can be used to open band 3 in US)

in hardware id, try with A3003 model or A3000 (i believe using A3000 has higher chance of success)

for one who need band 5, can use either US or EU QCN from list 1 & 3 (i suggest EU) and use id of A3003

the unlocking process is optional, only if you need to make sure the band config is opened.

 

[hamilton2130]

i understand what baska mean in his post, as well as the step,

problem is i currently dont have pc around to do all the test,

basically

1st file is the QCN of specified bands,

3rd file is the QCN with supporting parameters for related bands to make it work

the hardware id is the one you need to make your phone believe it work as

so,

Theoritically,

if US user need bands 3,

flash A3000cn from list 1 & 3 (because CN model has band 3, and from our ealier test A3000 qcn can be used to open band 3 in US)

in hardware id, try with A3003 model or A3000 (i believe using A3000 has higher chance of success)

for one who need band 5, can use either US or EU QCN from list 1 & 3 (i suggest EU) and use id of A3003

the unlocking process is optional, only if you need to make sure the band config is opened.

Just restore the qcn? Should I go through step 16-step 27?

 

[otonieru]

Just restore the qcn? Should I go through step 16-step 27?

steps from baska is different method from 1st post,

so, yes, you only need to restore QCN,

but Network Signal Guru steps is still useful for testing and comparison

 

[baskaflyfer]

i understand what baska mean in his post, as well as the step,

problem is i currently dont have pc around to do all the test,

basically

1st file is the QCN of specified bands,

3rd file is the QCN with supporting parameters for related bands to make it work

the hardware id is the one you need to make your phone believe it work as

so,

Theoritically,

if US user need bands 3,

flash A3000cn from list 1 & 3 (because CN model has band 3, and from our ealier test A3000 qcn can be used to open band 3 in US)

in hardware id, try with A3003 model or A3000 (i believe using A3000 has higher chance of success)

for one who need band 5, can use either US or EU QCN from list 1 & 3 (i suggest EU) and use id of A3003

the unlocking process is optional, only if you need to make sure the band config is opened.

Thanks @otonieru, you are right!!!
I'm not explained everything in detail, because i thought that everyone can do it without problems.

 

[hamilton2130]

Thanks @otonieru, you are right!!!
I'm not explained everything in detail, because i thought that everyone can do it without problems.

But I still failed to test band 4. should I flash all the QCNs in A3000_us from step 1? After each QCN is restored, should I reboot the device?

 

[baskaflyfer]

But I still failed to test band 4. should I flash all the QCNs in A3000_us from step 1? After each QCN is restored, should I reboot the device?

You need to flash only b4.qcn, then unlock b4, select and flash any fbrx_cal, set hwid on 232 (it's hw id from us version) and after this reboot your phone.
And try to set other values in hw id.

 

[hamilton2130]

You need to flash only b4.qcn, then unlock b4, select and flash any fbrx_cal, set hwid on 232 (it's hw id from us version) and after this reboot your phone.
And try to set other values in hw id.

Seems I have followed your instructions. But after rebooting the phone has no signal, and in signal guru band 4 didn't show up. By the way, what is "hw"? Since my original value is 231, so I just replaced it to 232. Thank you so much anyway!

 

[baskaflyfer]

Seems I have followed your instructions. But after rebooting the phone has no signal, and in signal guru band 4 didn't show up. By the way, what is "hw"? Since my original value is 231, so I just replaced it to 232. Thank you so much anyway!

It's strange, for me all seven modes for hwid works fine. I think, it need a more simple guide. And qcn which is on first page for B5 & B8, it is made by analogy of the guide which i shared.

 

[band3pls]

Im a little confused, I want to unlock band 3 for my US version but I dont understand @baskaflyfer 's Step #4. how do I change hardware ID in QXDM?

also, do I flash Step #1 QCN and then flash Step #3 QCN ?

Thanks!

edit: also im using dual sim, do I need to check dual sim in QXDM?

 

[kqueenc]

I am using A3000. Everything is smooth until step 29. Phone got into power loop. Fortunately I could still get into recovery and restored my EFS backup. Everything is back.
Wonder why it happened. I am using RR Rom 7.1.1 Nougat. Could that be the reason?

Also I got few power cycle warnings from Network Signal Guru before I started all the steps.

 

[nikexv2]

I am using A3000. Everything is smooth until step 29. Phone got into power loop. Fortunately I could still get into recovery and restored my EFS backup. Everything is back.
Wonder why it happened. I am using RR Rom 7.1.1 Nougat. Could that be the reason?

Also I got few power cycle warnings from Network Signal Guru before I started all the steps.

EFS can get corrupt when doing such modification, just try again and it'll work.
I had tried these steps in RR some time ago and it worked so the rom is not the issue

 

[kqueenc]

EFS can get corrupt when doing such modification, just try again and it'll work.
I had tried these steps in RR some time ago and it worked so the rom is not the issue

Thanks, I will give it a try again.

But my expectation is to somehow activate VoLTE after enabling the additional LTE bands, though band and VoLTE are probably not even related.

And it seems that my carrier is not even using band 5 & 8 after all, so maybe I am just wasting my time.

 

[allluke]

Thanks, I will give it a try again.

But my expectation is to somehow activate VoLTE after enabling the additional LTE bands, though band and VoLTE are probably not even related.

And it seems that my carrier is not even using band 5 & 8 after all, so maybe I am just wasting my time.

Are you able to explain how to edit the Hardware ID in QXDM

 

[kqueenc]

Are you able to explain how to edit the Hardware ID in QXDM

All the steps in OP don't involve an usage of QXDM. So I don't have any idea.

 

[allluke]

All the steps in OP don't involve an usage of QXDM. So I don't have any idea.

Bugger, I think I've followed all steps apart from that, network signal guru says I've unlocked band 3 now, but no LTE sadly. So its just the Hardware ID change I guess that I'm missing.

 

[nikexv2]

Are you able to explain how to edit the Hardware ID in QXDM

go to ID1878 in qxdm and there you will be able to edit the HW id