[GUIDE][UPDATED] Unlocking JioFi 3 JMR540 & JMR541 for all networks

Search This thread

abhimortal6

Senior Member
Mar 6, 2014
174
228
Gwalior
Hi,
Today I have flash the patched firmware on my JIOFI 3 which was running the version "JMR 540 - FXN_JMR540_R6.10"
- I have Flash both - system and recoveryfs
I am able to use other sim card in this (Thanks alot for this)
My major concern is that:
Will my device gets auto-updated (which will lock the bootloader)?
Should I continue using it or stop, will it get autoupdate even on latest unlocked patched firmware?
If you've flashed patched version then no, it will not auto update
 

Rajan06

New member
Jun 12, 2022
2
0
Thanks for reply, means if I left device online for 24/7 even if not connected with any device, jiofi will not get updated automatically?
 

vrj.exe

New member
Jul 6, 2022
1
0
Unlocked Firmware for JioFi 3 JMR540 & JMR541

Disclaimer
I am not responsible for any kind of damage to your device.
Use this firmware at your own risk
Post is for educational purpose only.


ONLY FOR JMR 540 & JMR 541


I was able to dump and reverse engineer JioFi 3's firmware to see if I can unlock the SIM restrictions. JioFi 3 is designed by Foxconn it uses generic firmware. Unlocking took time though. Tested with Vi, Airtel.

UPDATE 17-10-21: Jio pushed a firmware update which is locking boot loader. If your device is not updated yet it is advised to re-flash your firmware with patched image given below which basically disables auto updates. If you're already locked out, currently there's no easy fix for that.

If you haven't used your device from a long time or you're still on lower or equal version than below it is advised not to use JioFi with SIM, flash this firmware first if you want to test SIM unlock.




Guide

Make sure you're on same or lower firmware version
  • JMR 540 - FXN_JMR540_R6.16
  • JMR 541 - FXN_JMR541_R3.10



1. Locate your device model and download the respective Firmware and extract it to a known location

2. Install drivers and tools (skip if already installed)

  • Install Fastboot drivers ( google it for mac and linux it's easy to find)
  • Install Fastboot ( google it for mac and linux it's easy to find)

3. Prepare device

  • Remove battery from JioFi 3
  • Locate reset pin hole button
  • Lay down JioFi 3
  • Use Paper Clip / SIM Ejector Tool to press button inside (using sharp object is not recommended)
  • Keep pressing button down and insert USB cable
  • Release button as soon as all the LEDs in Display turns RED. This means device is in boot loader mode

4. Flashing Unlocked Firmware

  • Open adb and fastboot tools terminal
  • Enter following to check if device is connected

  • fastboot devices

  • It will return something like this
  • baxxxxx fastboot

  • This means device is connected. If your device doesn't show up here please check drivers in Device manager
  • Now first erase the system partition

  • fastboot erase system

  • It will return something like this
  • erasing 'system'... OKAY [ 1.104s] finished. total time: 1.105s

  • Now flash the firmware
  • fastboot flash system "D:\system.img" ( replace path )

  • It should return something like this
  • sending 'system' (34306 KB)... OKAY [ 1.276s] writing 'system'... OKAY [ 9.462s] finished. total time: 10.741s

  • Now send reboot command to device
  • fastboot reboot

  • You'll notice device will reboot normally now you can unplug the cable.

Congratulations your device is now unlocked and you can reinsert battery and another SIM for testing.

Firmware will take long time than usual to boot do not panic.

4. Changing APN
  • Insert SIM connect with JioFi 3 wait it to intialize
  • Open Web UI from browser (http://jiofi.local.html/)
  • Now login (default username/pwd is administrator/administrator)
  • In Network Tab you'll find setting for changing APN
  • Put it on manual and enter "internet" as APN (without quotes)
  • Hit apply/save device will reboot again automatically and it'll auto connect
  • Just wait patience is the key here it'll connect.

If something goes WRONG or you want to UNDO you can re flash original firmware which is provided in this post.


Original backup




FAQs

  1. Q. My device is not visible in fastboot devices
    A. Confirm driver installation a faulty cable can also be the issue.
    .
  2. Q. Everything went well but still no changes in dashboard
    A. After successful flash if you still don't see the changes your device is probably booting from recovery partition. Try flashing recovery partition by
    fastboot erase recoveryfs
    fastboot flash recoveryfs "D:\system.img"
    .


  3. Q. After resetting device from pin hole button it shows INVALID SIM.
    A. This is supposed to happen just reboot the device it'll work again.
    .
  4. Q. Can I undo all this and get back to original firmware
    A. Yes just flash the original firmware provided in post and reset the device.
    .
  5. Q. I 'accidentally' flashed my recovery and boot partition
    A. Well accidentally I've backed up recovery and boot download from below

    1.
    JMR540_boot_recovery.rar
    2. JMR541_boot_recovery.rar
    .
  6. Q. FAILED: (remote: Image is locked) issue while erasing/flashing image
    A. Jio recently pushed an firmware update which re-locks simlock and bootloader which basically means you can't flash unsigned/custom firmware. Currently there is no fix.







Mentions:
Thanks to
Karuppusamy for testing it on JMR541.


What about JioFi 2, 4, 5, 6?
Reverse Engineering takes lot of time and coffee. Until I get physical access to device I won't be able to unlock it. I'm constantly searching them on OLX as soon as I get hands on I'll surely try to RE and unlock it. I'll update the same here if there is no update here at the time of your reading then I haven't got the device yet so please don't spam for update hope you understand that I don't get anything by doing these things, I do it for liberation of locked hardware to meet it's real destiny and of course for the people. I also have a day job so no I cannot guide or teach you, hope you understand why.



can you help me to unlock jiofi jmr815? or just give link of the firmware.
 

gautammaji

New member
Jul 6, 2022
2
1
Thanks for this great post.
Few day ago I have flash the patched firmware on my JIOFI 3 which was running the version "JMR 540
(Hardware Version: FXN_JMR540_V055)- FXN_JMR540_R6.10"
Except Vi (vodafone) I am unable to use Airtel and BSNL sim card in this.
Can you please suggest what should I do to resolve the above issue.
Thanks a lot for this.
 

vinitrathi

New member
Jul 7, 2022
2
1
after the completing the entire process successfully, when I insert the Airtel SIM and try to reset the APN to airtelgprs.com it gives this "The input character is invalid. Only alphabetic characters (A-Z and a-z), digits (0-9), and the hyphen (-) are valid for APN name."

please resolve this

Screenshot 2022-07-08 074658.png
 
  • Like
Reactions: attari13

gautammaji

New member
Jul 6, 2022
2
1
after the completing the entire process successfully, when I insert the Airtel SIM and try to reset the APN to airtelgprs.com it gives this "The input character is invalid. Only alphabetic characters (A-Z and a-z), digits (0-9), and the hyphen (-) are valid for APN name."

please resolve this

View attachment 5654809
For Airtel SIM: can you please provide the "JMR540" image file link.
It will helpful.
Thanks
 
  • Like
Reactions: attari13
Sep 20, 2015
12
0
Barara
my fast boot not recognising⚠️ my jiofi 3 jmr541. R3.16. jiofi is in fastboot mode as i can see all icons red on it but my fastboot saying waiting ..... i hv installed driver attached in this fourm plz hlp. i want to use Airtel sim in it
 

Attachments

  • Screenshot_20220726-143504_Gallery.jpg
    Screenshot_20220726-143504_Gallery.jpg
    439.4 KB · Views: 11

PROsenGt

Member
Aug 4, 2021
5
1
Sad soul here. I am one of those unfortunate people whose JioFi got updated on very first day when jio pushed new update and locked bootloader. After checking for several weeks for any chance of revival I reached out to @abhimortal6 and he was welcoming and kind. This was his reply then -

"Hi, it can be unlocked but there is no easy way to do it, it basically requires shorting JioFi into unsecure EDL and re-flashing old bootloader"

He also mentioned that he is busy right now to focus on this device may be in future he will find a simple way and make guide out of it.
But right now there is nothing a generic or advance user can do and due to shortage of self taught devs.
I am hopeful we'll see another unlock 🤞
 
  • Like
Reactions: abhimortal6

bhupatib

Senior Member
Nov 28, 2011
395
434
Motorola Defy
LG V20
works great!

few issues i faced and managed to fix 👇

1. "fastboot devices" not showing anything
what fixed it: make sure you have installed the adb driver (which contains the generic google android usb driver) linked in the first post. then with the jiofi connected, go to device manager and find something similar to "android device" "unknown usb" etc with a yellow warning icon. right click and click update driver, manually select the google usb driver and jiofi will now show up in command line.

2. even with successful flashing the dashboard didn't show the "this is a hacked firmware..." message at the top meaning that somehow the flash didn't work"
what fixed it: as mentioned in the FAQ, you have do both "fastboot flash system" and "fastboot flash recoveryfs" with the same hacked system.img

rest went smoothly :)
 
  • Like
Reactions: abhimortal6

subhash_india

Member
Jul 1, 2021
38
5
@abhimortal6
Can you share where is the testpoint located on JMR540 board to short and boot EDL mode and which tool can be use to flash old bootloader.
Uart pins Tp701 tp702 to703 find gnd pin using digital volt meter and remaining pins are rx and TX , connect using TTL to usb , don't connect VCC of TTL converter, give power from adaptor to jiofi , use putty in serial. Get adb shell. Backup jiofi , flash later.
 

Attachments

  • Screenshot_20220803-084716.png
    Screenshot_20220803-084716.png
    744.1 KB · Views: 21

jithinvp4

Member
Aug 5, 2022
5
0
Uart pins Tp701 tp702 to703 find gnd pin using digital volt meter and remaining pins are rx and TX , connect using TTL to usb , don't connect VCC of TTL converter, give power from adaptor to jiofi , use putty in serial. Get adb shell. Backup jiofi , flash later.
Thanks for your response

But since bootloader is locked ,only way to flash old bootloader is via EDL ,but not sure what is the exact process.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Sad soul here. I am one of those unfortunate people whose JioFi got updated on very first day when jio pushed new update and locked bootloader. After checking for several weeks for any chance of revival I reached out to @abhimortal6 and he was welcoming and kind. This was his reply then -

    "Hi, it can be unlocked but there is no easy way to do it, it basically requires shorting JioFi into unsecure EDL and re-flashing old bootloader"

    He also mentioned that he is busy right now to focus on this device may be in future he will find a simple way and make guide out of it.
    But right now there is nothing a generic or advance user can do and due to shortage of self taught devs.
    I am hopeful we'll see another unlock 🤞
    1
    works great!

    few issues i faced and managed to fix 👇

    1. "fastboot devices" not showing anything
    what fixed it: make sure you have installed the adb driver (which contains the generic google android usb driver) linked in the first post. then with the jiofi connected, go to device manager and find something similar to "android device" "unknown usb" etc with a yellow warning icon. right click and click update driver, manually select the google usb driver and jiofi will now show up in command line.

    2. even with successful flashing the dashboard didn't show the "this is a hacked firmware..." message at the top meaning that somehow the flash didn't work"
    what fixed it: as mentioned in the FAQ, you have do both "fastboot flash system" and "fastboot flash recoveryfs" with the same hacked system.img

    rest went smoothly :)
  • 45
    Unlocked Firmware for JioFi 3 JMR540 & JMR541

    Disclaimer
    I am not responsible for any kind of damage to your device.
    Use this firmware at your own risk
    Post is for educational purpose only.


    ONLY FOR JMR 540 & JMR 541


    I was able to dump and reverse engineer JioFi 3's firmware to see if I can unlock the SIM restrictions. JioFi 3 is designed by Foxconn it uses generic firmware. Unlocking took time though. Tested with Vi, Airtel.

    UPDATE 17-10-21: Jio pushed a firmware update which is locking boot loader. If your device is not updated yet it is advised to re-flash your firmware with patched image given below which basically disables auto updates. If you're already locked out, currently there's no easy fix for that.

    If you haven't used your device from a long time or you're still on lower or equal version than below it is advised not to use JioFi with SIM, flash this firmware first if you want to test SIM unlock.




    Guide

    Make sure you're on same or lower firmware version
    • JMR 540 - FXN_JMR540_R6.16
    • JMR 541 - FXN_JMR541_R3.10



    1. Locate your device model and download the respective Firmware and extract it to a known location

    2. Install drivers and tools (skip if already installed)

    • Install Fastboot drivers ( google it for mac and linux it's easy to find)
    • Install Fastboot ( google it for mac and linux it's easy to find)

    3. Prepare device

    • Remove battery from JioFi 3
    • Locate reset pin hole button
    • Lay down JioFi 3
    • Use Paper Clip / SIM Ejector Tool to press button inside (using sharp object is not recommended)
    • Keep pressing button down and insert USB cable
    • Release button as soon as all the LEDs in Display turns RED. This means device is in boot loader mode

    4. Flashing Unlocked Firmware

    • Open adb and fastboot tools terminal
    • Enter following to check if device is connected

    • fastboot devices

    • It will return something like this
    • baxxxxx fastboot

    • This means device is connected. If your device doesn't show up here please check drivers in Device manager
    • Now first erase the system partition

    • fastboot erase system

    • It will return something like this
    • erasing 'system'... OKAY [ 1.104s] finished. total time: 1.105s

    • Now flash the firmware
    • fastboot flash system "D:\system.img" ( replace path )

    • It should return something like this
    • sending 'system' (34306 KB)... OKAY [ 1.276s] writing 'system'... OKAY [ 9.462s] finished. total time: 10.741s

    • Now send reboot command to device
    • fastboot reboot

    • You'll notice device will reboot normally now you can unplug the cable.

    Congratulations your device is now unlocked and you can reinsert battery and another SIM for testing.

    Firmware will take long time than usual to boot do not panic.

    4. Changing APN
    • Insert SIM connect with JioFi 3 wait it to intialize
    • Open Web UI from browser (http://jiofi.local.html/)
    • Now login (default username/pwd is administrator/administrator)
    • In Network Tab you'll find setting for changing APN
    • Put it on manual and enter "internet" as APN (without quotes)
    • Hit apply/save device will reboot again automatically and it'll auto connect
    • Just wait patience is the key here it'll connect.

    If something goes WRONG or you want to UNDO you can re flash original firmware which is provided in this post.


    Original backup




    FAQs

    1. Q. My device is not visible in fastboot devices
      A. Confirm driver installation a faulty cable can also be the issue.
      .
    2. Q. Everything went well but still no changes in dashboard
      A. After successful flash if you still don't see the changes your device is probably booting from recovery partition. Try flashing recovery partition by
      fastboot erase recoveryfs
      fastboot flash recoveryfs "D:\system.img"
      .


    3. Q. After resetting device from pin hole button it shows INVALID SIM.
      A. This is supposed to happen just reboot the device it'll work again.
      .
    4. Q. Can I undo all this and get back to original firmware
      A. Yes just flash the original firmware provided in post and reset the device.
      .
    5. Q. I 'accidentally' flashed my recovery and boot partition
      A. Well accidentally I've backed up recovery and boot download from below

      1.
      JMR540_boot_recovery.rar
      2. JMR541_boot_recovery.rar
      .
    6. Q. FAILED: (remote: Image is locked) issue while erasing/flashing image
      A. Jio recently pushed an firmware update which re-locks simlock and bootloader which basically means you can't flash unsigned/custom firmware. Currently there is no fix.







    Mentions:
    Thanks to
    Karuppusamy for testing it on JMR541.


    What about JioFi 2, 4, 5, 6?
    Reverse Engineering takes lot of time and coffee. Until I get physical access to device I won't be able to unlock it. I'm constantly searching them on OLX as soon as I get hands on I'll surely try to RE and unlock it. I'll update the same here if there is no update here at the time of your reading then I haven't got the device yet so please don't spam for update hope you understand that I don't get anything by doing these things, I do it for liberation of locked hardware to meet it's real destiny and of course for the people. I also have a day job so no I cannot guide or teach you, hope you understand why.



    5
    bro is unlocking more 4g bands or manual selection of bands can be done ?
    Totally possible even 3G but it can't be done through WebUI it'll requires shell access.
    3
    successfully unlocked my jiofi 3 JMR541. tested with voda and its working well and good. Thanks a ton for this bro.
    I was late in checking this thread and got shipped airtel unlocked mifi from home.
    Can you show us dashboard screenshot. This will help other users to verify
    3
    after knowing from u guys about recent update pushed by jio my device wasn't updated so i instantly removed the sim and waiting for update from abhi
    For Jio --- guys u have stopped selling this or selling in 5k -6k like black marketing and nor your devices are built well, if someone has unlocked it what's the problem you have not pushed any update to other models which were previously unlocked now those devices are being sold at higher prices. I am happy that airtel and vi are here otherwise your greediness to capture everything would have led us to ______ no words to describe'
    You can install and test patched firmware auto updates are patched and disabled now, link is in original post. Devices which are already updated, there is no easy fix for them right now. Jio loves their users aww ( throws JioFi in space ).