[GUIDE][PARTIAL] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3

Search This thread

benzoxerxi

Member
Oct 27, 2016
33
9
Tbilisi
Hi, I'm trying to unlock band 3 (1800) on OnePlus 3T North American (A3000), tried fbrx_3Tcn with 231 and 225 values for rf_hw_config, all went smooth, but no bad 3, I used patched_static_nvbk_LTE_UNLOCK_OP3-T in TWRP

Then I tried Unlock_LTE_CA_B3B7B8 with same result, it is showing many other bands but no band 3. After reading your post I tried 25 for rf_hw_config with fbrx_3Tcn, still same, showing many unsupported bands but no band 3. Can you please help with it. I"m on OOS 5.0.8

Hi there,
First make sure you do everything step by step. For me (oneplus 3 us version):
1. patch patched_static_nvbk_LTE_UNLOCK_OP3-T.zip in twrp.
2. Boot up the phone and go to dialer and type *#801# and put Full port switch - on. (Put your phone on airplane mode)
3. Go to qpst and patch OP3CNCLEANOOS.qcn wait for few seconds/minutes and patch fbrx_cn.qcn.
4. Go to qxdm and on line 1878 hit read button, then type the value from 225-237 and hit write.
5. Reboot your phone and that should be done.

But this is for oneplus 3 not 3t.
Do you do this step by step?
 

mnsiw

Senior Member
Oct 2, 2009
1,199
384
Redmi Note 10 Pro
Bro I mentioned in my post, it is OnePlus 3T North America
Here are my steps:
1. Rebooted to TWRP and flashed patched_static_nvbk_LTE_UNLOCK_OP3-T.zip
2. Rebooted system and dialed *#801# and enabled Full port switch
3. Connected to PC and set the device to usb diag
4. In QPST restored OP3T_EU.qcn and then fbrx_cn.qcn (port and connection already configured and working)
5. In QXDM set 1878 as 231, then tried 255 and 237, reboot after setting each

No band 3, Network Signal Guru shows different bands on different rf_hw_config values but not band 3


Hi there,
First make sure you do everything step by step. For me (oneplus 3 us version):
1. patch patched_static_nvbk_LTE_UNLOCK_OP3-T.zip in twrp.
2. Boot up the phone and go to dialer and type *#801# and put Full port switch - on. (Put your phone on airplane mode)
3. Go to qpst and patch OP3CNCLEANOOS.qcn wait for few seconds/minutes and patch fbrx_cn.qcn.
4. Go to qxdm and on line 1878 hit read button, then type the value from 225-237 and hit write.
5. Reboot your phone and that should be done.

But this is for oneplus 3 not 3t.
Do you do this step by step?
 

lordvj

Senior Member
May 6, 2012
149
21
Hi there,
First make sure you do everything step by step. For me (oneplus 3 us version):
1. patch patched_static_nvbk_LTE_UNLOCK_OP3-T.zip in twrp.
2. Boot up the phone and go to dialer and type *#801# and put Full port switch - on. (Put your phone on airplane mode)
3. Go to qpst and patch OP3CNCLEANOOS.qcn wait for few seconds/minutes and patch fbrx_cn.qcn.
4. Go to qxdm and on line 1878 hit read button, then type the value from 225-237 and hit write.
5. Reboot your phone and that should be done.

But this is for oneplus 3 not 3t.
Do you do this step by step?

Hey thanks for the reply. Yes I have performed similar steps. The difference is I used the US qcn and fbrx and corresponding value 232. I used the setprop command from adb to get the diagnostic access. I have a op3 A3003. I know everyone here has said it's not possible to unlock band 2 and 4 on this variant, but I thought I'll just give it a try. I even tried editing the Hex values from static_nvbk but that didn't help.
 

mnsiw

Senior Member
Oct 2, 2009
1,199
384
Redmi Note 10 Pro
I tried this on OnePlus 3T A3000, Network Signal Guru showing B1, B2, B4, B7, B12, B17 and B30 but no B3. Any idea about it?

To unlock LTE CA is easier than unlock bands on OnePlus 3/3T.
If you only need B3+B7, you can flash Unlock_LTE_CA_B3B7B8.qcn via QPST.
This qcn file will enable B3+B7, B3+B8, B7+B8 on your OnePlus 3/3T.

1. Backup your EFS and modem in TWRP
2. Enable Qualcomm diagnostic mode
3. Enable airplane mode
4. Using QPST to backup your QCN file
5. Flash rmt storage patch for 4.1.x
6. Using QPST to flash Unlock_LTE_CA_B3B7B8.qcn
7. Disable airplane mode
8. Run Network Signal Guru, choose "Clear Forcing" from the menu on upper right
 

qhsusb_bulk

Senior Member
Oct 29, 2014
166
138
I have heard the term "CA" here for the first time. What is it? What does it stand for and what does it do?

CA stands for Carrier Aggregation. This tech combines 2+ LTE bands from different or same base station and improves connection speed and quality.

I have some good news about CA combinations for US version (unlocked EU bands). Stay tuned.
 

weeka89

Senior Member
Apr 15, 2012
209
54
Cairo
I'm having trouble getting my phone detected as a phone on QPST it's appearing under the active phone tab but no ESN and unknown

HTC modded drivers are setup and reflecting on device manager under modem

That's on latest havoc os along with Stable 9.0.3_Firmware_Modem_OnePlus3 and tried OB40 too same result
 
Last edited:

pxrave

Senior Member
I'm having trouble getting my phone detected as a phone on QPST it's appearing under the active phone tab but no ESN and unknown

HTC modded drivers are setup and reflecting on device manager under modem

That's on latest havoc os along with Stable 9.0.3_Firmware_Modem_OnePlus3 and tried OB40 too same result

how did you try'd

install rtm patch? or only unlock? iam also on havoc and 9.0.4 and latest havoc and want to unlock band 28 or other bands to have a eu model (and cn and us bands) should be working 100%
 

weeka89

Senior Member
Apr 15, 2012
209
54
Cairo
how did you try'd

install rtm patch? or only unlock? iam also on havoc and 9.0.4 and latest havoc and want to unlock band 28 or other bands to have a eu model (and cn and us bands) should be working 100%
You should move to OOS for the phone to be detected properly on QPST flash the rmt patch then the qcns and whatever u need to then move back to Havoc-OS should work fine for you.

Sent from my ONEPLUS A3000 using Tapatalk
 

xXRapToRiXx

Senior Member
Nov 15, 2014
547
159
Does anyone have the QCN and fbrx files of the US OP3T? I have european 3T and will fly to the US in a week and would like to try out Google Fi... I can only find OP3 US files in main post but not for 3T.
 

mnsiw

Senior Member
Oct 2, 2009
1,199
384
Redmi Note 10 Pro
I can confirm my LTE band 3 is working after flashing the new QCN, BUT after flashing the QCN you must reboot and then open QXDM and write 225 to NV item 1878, or else it won't work.

Here are my steps:

First I flashed this: (other/older QCN files posted by @otonieru will probably work too)
https://yadi.sk/d/dKAKorWd3FGTXB

Then I rebooted, and flashed this: (Baskaflyfer's QCN)
https://drive.google.com/file/d/0B1R5J1eC0B7HRVhSZVl5TTV6U0E/view?usp=sharing

Then I rebooted again, and flashed this: (Baskflyfer's fbrx file)
https://drive.google.com/file/d/0B1R5J1eC0B7HUXd5eEEtVllMV3c/view?usp=sharing

Then I rebooted, wrote 225 in NV item 1878 in QXDM, and finally got LTE signal on band 3 working here in Pakistan on my A3000US.

Can anyone please confirm if this thing is still working? Thinking about flashing Nougat and trying this workaround for LTE Band 3 on North America OnePlus 3T
 

KingCrowUtsuro

New member
Sep 25, 2018
4
0
Help with EU Model

So Ive done all the steps, but because its an eu model 3t, its not naturally compatible with Tmobile lte. Is there a way to fix it?
 

sony108

Member
Apr 18, 2011
47
9
Jaipur
Can someone please share working Static NVBK Patch for the latest OOS Pie Firmware (9.0.6) ? Oreo one isn't working given in the post #1
 

qhsusb_bulk

Senior Member
Oct 29, 2014
166
138
Hello! I am glad to introduce the new static_nvbk patch.

_small info: this patch makes your LTE band modifications stick in your phone._
@sony108 kindly reached me and said that static_nvbk patch is not working for his European 3T. I started digging again to solving that. After various testing, i think new patch is stable and does not cause any problem.

3's and 3T's static_nvbk files all the same. So we are confirmed that this patch works on :
North American OP3/T(confirmed by myself)
European OP3/T(confirmed by @sony108 )
Probably it will work with Chinese version but i can't confirm it. You can reach me for confirmation.

This zip file includes,

1-HEX patched OOS 9.0.6 static_nvbk (HEX values are given by some Japanese guy which found by @otonieru) . Actually otonieru gave HEX values in his another post but he forgot EU versions' HEX values. More info below.

2-Scripts from OnePlus official flashable zip. I have changed these scrips for our needs.


Credits and Details:
@sony108 : for kindly informing me that patch is not working and testing new patches.
@otonieru : he is one of the gurus in this topic. i don't need to talk :) found the Japanese guy .

Japanese guy: he probably found HEX values hack. Sadly his blog is not online anymore.

https://forum.xda-developers.com/on...ck-additional-lte-bands-t3519563/post74808153 : first patch is based on this post but this post has some wrong information. All variants have different HEX values.

https://forum.xda-developers.com/on...ck-additional-lte-bands-t3519563/post70148482 i followed this post.

URL given in post is not online anymore. Thanks to archive.org i found it.

https://web.archive.org/web/20161223093500/https://logicalmemo.net/2016/10/19/post-300/

it works :)
@otonieru , can you update OP again with this file? So more people will use correct patch.

If cloud link needed: https://drive.google.com/file/d/1EOsiG1N-DsJWTi0ulofDAywFVUDnR6Xc/view?usp=drivesdk
 

Attachments

  • patched-static-nvbk-OOS9.0.6-OP3-3T.zip
    1.2 MB · Views: 67
  • Screenshot_20200519-234323.jpg
    Screenshot_20200519-234323.jpg
    187.3 KB · Views: 132
  • Like
Reactions: mnsiw and sony108

Top Liked Posts

  • There are no posts matching your filters.
  • 63
    [GUIDE][PARTIAL] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3

    [GUIDE] [How To] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3 (Band 5 confirmed WORK)

    UPDATE 9 : Please use this static nvbk patch for oreo instead, it give more stable results. Credit to : @qhsusb_bulk

    UPDATE 8 : : PATCH for OREO is now available https://yadi.sk/d/bQhvMaY23REaXZ]here - credit to BlackzAfiqz

    UPDATE 7 :

    i gonna try to clean up this thread a bit and give a better instruction, since there are lot of changes since the initial post was created - all previous method and steps now moved to second post

    So basically with latest situation, there r few steps you can try to unlock your band.

    but before doing so, please READ few sidenotes/conclusion that we manage to gather so far :
    1. This step was MADE for and TESTED on MARSHMALLOW, and MARSHMALLOW ONLY
    2. The Rmt Storage Patch will still working up to an official N ROM version of 4.0.3
    3. This step/trick WONT WORK on OB12 or 4.1.0 - doing so will result in UNUSABLE RADIO or BOOTLOOP - Updated, PATCH for 4.1.x is NOW AVAILABLE in courtesy of @SnowWolf75
    4. We only able to (partially) unlock bands THAT ARE AVAILABLE in one or another OP3/OP3T models. If the band is NEVER APPEAR on any of the available models, then currently it's NOT DOABLE. Example : Band 13 is nowhere to be found on any model of OP3, so there will be no support for B13, since there's not enough resources to do so
    5. Up to today, there are some SUCCESS STORIES while using the method. Some of them are :
    Myself, & @baskaflyfer of course - CN MODEL - B5 B8 UNLOCKED - B3+B7 CA UNLOCKED

    @allluke - US MODEL - B3 UNLOCKED post #640
    B3 working IMEI intact. Thank you so much

    @dapsyra - US MODEL - B3 UNLOCKED post #558
    After following the guide, I was able to unlock band 3 in my US model OnePlus3 A3000. See attached images
    I did all the steps. My IMEI is intact.
    It takes some time for the signal to show up in Network Guru, so be patient.
    In Network Guru->Band Locking->LTE, uncheck all the other LTE bands leaving only band 3 checked
    Then go to RAT Locking and select LTE. Wait for the signal to show up.
    If Network Guru goes to WCDMA, repeat last step.

    @band3pls - US MODEL - B3 UNLOCKED post #846
    I can confirm my LTE band 3 is working after flashing the new QCN, BUT after flashing the QCN you must reboot and then open QXDM and write 225 to NV item 1878, or else it won't work.

    Here are my steps:

    First I flashed this: (other/older QCN files posted by @otonieru will probably work too)
    https://yadi.sk/d/dKAKorWd3FGTXB

    Then I rebooted, and flashed this: (Baskaflyfer's QCN)
    https://drive.google.com/file/d/0B1R...ew?usp=sharing

    Then I rebooted again, and flashed this: (Baskflyfer's fbrx file)
    https://drive.google.com/file/d/0B1R...ew?usp=sharing

    Then I rebooted, wrote 225 in NV item 1878 in QXDM, and finally got LTE signal on band 3 working here in Pakistan on my A3000US.

    @kaiserreich - US MODEL - B3 UNLOCKED post #921
    I managed to get it to work.
    Now I have EU bands on my A3000CN

    1. flash rmt_storage via twrp. (first page)
    2. restore europe qcn. (first page)
    3.restore A3003_eu from post #334 (third step)
    4.run qxdm -> nv browser -> find id 1878 and change it to 237 (write).
    5.reboot your phone.

    Thanks

    So here's what you gonna need :

    1. Qualcomm USB DIAG Driver - Find it from post#2
    2. QPST & QXDM - sorry but i can't redistribute it here, please look for it yourself
    3. Main QCN for base, here : https://yadi.sk/d/E0y_4Ka63GNUdt
    4. Extra QCN for fbrx_cal :
    5. Rmt Storage Patch - find it from post #2 - For OOS 4.1.x download it from Here
    6. Network Signal Guru App from PlayStore

    Additional file for OP3T users :
    1. OP3T EU QCN - Here
    2. OP3T fbrx - Here

    Now do the PRE-STEP,
    1. Boot into TWRP
    2. Flash the RMT Storage Patch according to your OS version, 4.1.x use Snowwolf version, bellow that, use Baskaflyfer version

    Next, step is :

    1. Opening DIAG - Assuming you got your phone rooted, run this command from ADB
    adb shell
    su
    setprop sys.usb.config diag,adb
    2. Now your devices wil either detected as unknown device (or Qualcomm Diag Port/USB Modem if you already have the diag driver) on Device Manager
    3. Install the driver from requirement list number one, and you will have "HTC USB Modem" listed in your device manager (skip this step, if you already have your own qualcomm usb diag driver installed)-(remember to disable signature enforcement if you use WIN8/10)
    4. Now fire up QPST and go to "Port" tab, and choose "Add New Port" ,
    5. On "Serial/USB Port" tab, unchecked the option of "Show Serial & USB...bl bla bla" option, you will see your phone listed there as a "COM#" (# is a number depending on your PC) choose it, and click "OK"
    6. Now choose "Start Clients" from the Menu tab above, and choose "Software Download"
    7. Airplane Mode your Phone
    8. Choose "Restore" Tab, and click browse for QCN file, and look for the QCN you have downloaded from requirement list Number 3 (if you need B3 on your US, use CN QCN, if you need B5 or B8 on your CN Model, use EU QCN. US QCN is still experimental)
    9. Check "Allow phone/ESN mismatch"
    10. Click "Start" and wait for the process to complete
    11. After complete, wait 30 Seconds (for curing time), close QPST and reboot your phone
    12. Once it fully boot, open back your CMD and re-run command from step number 1 to re-open your DIAG port
    13. Use the "Software Download" function again, and restore the supporting QCN from requirement list Number 4 (choose one according to your needs)
    14. Click "Start" and wait for the process to complete
    15. After complete, wait 30 Seconds (for curing time), and reboot your phone
    16. Once it fully boot, open back your CMD and re-run command from step number 1 to re-open your DIAG port, and make sure it detected on QPST
    17. Now Open your "QXDM", choose options tab - "Communications", and choose the port according to your DIAG Port, and hit OK
    18. Now choose "View" - "New" - "Common" - "NV Browser"
    19. Go to NV ID 1878, and click "Read"
    20. According to your needs, change the value. (If you need B3, B5, B8 on CN Model, use 237. If you need B3 on US Model, use 231 or 225)
    21. Click "Write"
    22. After complete, wait 30 Seconds (for curing time), close QXDM and reboot your phone
    23. Run Network Signal Guru, choose "Clear Forcing" from the Tri-dot menu on top right
    23. Continue with choosing "Band Locking" and choose only your new unlocked LTE Band. Hit OK, if warning about powercycle appear, just hit OK as well
    24. Wait for a while until your phone picking up signal. To make it faster, you might want to lock your network mode to LTE ONLY through *#*#4636#*#* or through Network Signal Guru

    That's it, if everything is well, you should have your new LTE BAND working now.
    18
    Hi everybody. It's all for testing.
    I'm sorry it took so long. I was a little busy.
    1. Here are archives which include separate QCNs for each LTE Bands from those versions of the phones:
    A3000_cn
    A3000_us
    A3003_eu
    A3010_cn_3T
    2. Use QXDM and NV Calculator for unlocking LTE Bands, if it needed.
    3. Here are archives which include one QCN with frbx_cal for the seven working modes with values from those versions of the phones:
    A3000_cn
    A3000_us
    A3003_eu
    A3010_cn_3T
    4. The most important thing that you need to do is to change the value in id1878, it's hardware config, in QXDM.
    I know 7 working modes:
    225 - ???
    226 - A3003eu
    228 - ???
    229 - ???
    231 - A3000cn
    232 - A3000us
    237 - A3010cn
    5. It's patched_rmt_storage, tested on A3000cn OOS 4.0.1
    I know that it will work on A3010cn_3T Marshmallow, but, just in case, copy rmt_storage from the phone on the PC (path: root/system/bin)
    and if you will have a problem after flashing patched_rmt_storage via TWRP, just replace your rmt_storage in archive, don't extract, only replace!!! And flash it again via TWRP.

    Anybody can share the backup QCN from 3T_eu and 3T_us, please in PM???

    And about B20 i still didn't test nothing. I have almost no free time:(
    And sorry for English
    12
    Share the assistant app please;):good:

    Sorry I forgot to attach the apk in previous post.
    It require root permission to patch system file.
    Use it at your own risk.
    Besides, you can download the source code from Github, and compile it by yourself.
    https://github.com/snowwolf725/Unlock-LTE-Bands-App
    10
    I have china model(a3010). in my country combination of b3 & b7 works for LTE CA(4G+), therefore i should only combine them and i don't need unlock any bands.
    I hope there is an easier method for this(?) :D

    To unlock LTE CA is easier than unlock bands on OnePlus 3/3T.
    If you only need B3+B7, you can flash Unlock_LTE_CA_B3B7B8.qcn via QPST.
    This qcn file will enable B3+B7, B3+B8, B7+B8 on your OnePlus 3/3T.

    1. Backup your EFS and modem in TWRP
    2. Enable Qualcomm diagnostic mode
    3. Enable airplane mode
    4. Using QPST to backup your QCN file
    5. Flash rmt storage patch for 4.1.x
    6. Using QPST to flash Unlock_LTE_CA_B3B7B8.qcn
    7. Disable airplane mode
    8. Run Network Signal Guru, choose "Clear Forcing" from the menu on upper right
    10
    Happy New Year
    yahoo.gif
    party.gif
    yahoo.gif


    Smile and be happy!!!
    good_luck.gif
    drinks.gif

    Hello from Russia, Saint-Petersburg
    russian.gif
    russian_garmoshka.gif