Yes it is service mode. It's an option under
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> SYSTEM -> Next page 2 times -> QUALCOMM FET ON/OFF
my question is what does this option do?
-
We are moving to xdaforums.com!
Posts made between now and when the migration is complete will not be carried over.
You will be automatically redirected once the migration is complete.
How To Guide How to Enable All Bands Through Service Menu on US/CA S22 series (including Sub-6 and mmWave)
- Thread starter peacey8
- Start date
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> SYSTEM -> Next page 2 times -> QUALCOMM FET ON/OFF
my question is what does this option do?
I searched this thread for 908B and got no results. S908E has some results, but I don't think any relating to my question...
I'm trying to find out if the International versions (SM-S908B, SM-S908E) support ALL of Verizon's 5G bands, including UWB. (Obviously I want root and 5G).
I can't find a straight answer online from a reliable source that I also understand (some sources have a lot of technical info that I can't process).
Many sources just say something like:
Bonus points if you can comment on the S23 as well.
Thanks!
I'm trying to find out if the International versions (SM-S908B, SM-S908E) support ALL of Verizon's 5G bands, including UWB. (Obviously I want root and 5G).
I can't find a straight answer online from a reliable source that I also understand (some sources have a lot of technical info that I can't process).
Many sources just say something like:
- SA/NSA/Sub6/mmWave
Bonus points if you can comment on the S23 as well.
Thanks!
Last edited:
wr3cckl3ss1
Senior Member
Kernel is r/w on S22 Ultra carrying firmware of AVF1 but not limited to this exact firmware. Any firmware before OCT 2022, should be vulnerable. Gives S22 Ultra kernel r/w and full root on Pixel 6. Not my exploit. Look here for more info.
GitHub - 0xkol/badspin: Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)
Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421) - GitHub - 0xkol/badspin: Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)
github.com
Kernel is r/w on S22 Ultra carrying firmware of AVF1 but not limited to this exact firmware. Any firmware before OCT 2022, should be vulnerable. Gives S22 Ultra kernel r/w and full root on Pixel 6. Not my exploit. Look here for more info.
GitHub - 0xkol/badspin: Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)
Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421) - GitHub - 0xkol/badspin: Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)
Is this an emerging exploit for the S22 series, including the US "U" versions? I just checked the "development" filter for this device, and didn't see any other mention of it yet - just the typical TWRP and ROM posts that assume you have unlocked BL and/or root already.
What can be achieved? Just root or bootloader unlock as well? Would either/both be permanent?
Thanks for the info! (I just don't understand all the technical details...)
saw this error on my end when trying to enable secret codes, changed the usb mode to "DM + MODEM + ADB" by following the instructions on the first post and on trying again, the secret codes unlock worked.
massive thanks to @peacey8 for their work on this guide, it has been of enormous help to me.
I wonder if the S22, maybe even the S23 might be exploitable to thisView attachment 5917391View attachment 5917393View attachment 5917395
Kernel is r/w on S22 Ultra carrying firmware of AVF1 but not limited to this exact firmware. Any firmware before OCT 2022, should be vulnerable. Gives S22 Ultra kernel r/w and full root on Pixel 6. Not my exploit. Look here for more info.
GitHub - 0xkol/badspin: Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)
Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421) - GitHub - 0xkol/badspin: Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)
CVE-2023-21489
CVE-2023-21489: Samsung Smart Phone Bootloader out-of-bounds write
A vulnerability classified as critical was found in Samsung Smart Phone. This vulnerability is known as CVE-2023-21489. It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-21489: Samsung Smart Phone Bootloader out-of-bounds write
A vulnerability classified as critical was found in Samsung Smart Phone. This vulnerability is known as CVE-2023-21489. It is recommended to upgrade the affected component.
I have a Rogers S908W, never flashed any firmware on it. I've dabbed in flashing firmwares a loooooong time ago (last time on a 1st gen Pixel XL) and just haven't had the need to do it again until now. Tried searching the forums but haven't found a clear answer.
- Will doing this enable Dual SIM, Dual Standby (DSDS)?
- Should I go with the XAA firmware, as I understand XAA is the US Unbranded one?
- Will doing this enable Dual SIM, Dual Standby (DSDS)?
- Should I go with the XAA firmware, as I understand XAA is the US Unbranded one?
There is no dual-SIM on US models. There is one pSIM and one eSIM for DSDS but you can't enable dual pSIM.
bingblop
Senior Member
Hello, I followed all the settings for enabling the 5G bands on my Samsung S-S908U1 (S22 ULTRA), and in band selection i see all the bands are showing active, but i still dont see 5G on the phone , it always stay to LTE but yes the speed of internet has improved and i get high speed many times but then after a while the internet again gets stuck
Hi, what carrier (operator) are you using and in which country? If you did all the steps correctly your phone should be able to connect to 5G without issues, unless the network explicitly does not allow your device to do so.
Only the U / U1 models have the mmWave antenna, I don't even think the W models (Canada) have it. This also applies for the S23. Also, no guarantee that international models work with Sub6 5G on Verizon.
I have S22 ultra Koren S908N and 5g is not working in india . kindly guide how to enable all 5g bands in india.i am using JIO sim
Did you manage to fix the issue? Happens a lot when driving.
Tried disabling SA still didn't work.
Would Be Great if anyone can help
How can I restore all these settings to default original settings?
How can I restore all these settings to default original settings?
You can reset all of your network settings by following this Reset Network S22 Ultra. After you have done that go to Settings>Connections>Mobile Networks>Access Point Names, click on top right 3 dots, then select Reset to default. **Note** if you have a custom AP configuration, it will be lost so I recommend screen shots so you can rebuild it. Also you will lose all your connected devices and have to re-pair/reconnect them after the Network Reset.
Hope this helps.
@peacey8 recommend adding this to your OP so others have it. You can re-write it however you feel. Great post/writeup BTW.
Hi - Why will anyone enable bands if they are staying in US/CA? People are looking at this option only when they move out of their respective geography and devices refuse to work in other regions. Samsung Customer care has been pathetic in addressing the concerns of their consumers for devices they sold for $1000+. Have experienced that personally. Samsung is not giving any options to customers - either throw their mobiles or resort to ways like this. Thanks
Top Liked Posts
-
There are no posts matching your filters.
-
2
Know your carrier 5G band and lock it one by one then speedtest if what is the best. Just uncheck other 5G bands on the band selection menu except the band you want to check the speed.1
@Romeo Nickolas i Just searched that S20U G988U does have a 5g Antenna IC Which is QPM5677 PAM Which i not in the Mother Board Which Supports N77& N78 Bands.1
You're on the wrong thread
How to Enable All Bands Through Service Menu on US/CA S23 series (including Sub-6 and mmWave)
What is this? This is a guide on how to...
forum.xda-developers.com
1
Thanks. I still have my S22 Ultra for another week until I send it back and will in the mean time start looking at the S23 ultra forum and namely the thread that you so kindly linked..You're on the wrong thread
How to Enable All Bands Through Service Menu on US/CA S23 series (including Sub-6 and mmWave)
What is this? This is a guide on how to...
forum.xda-developers.com
1I'm on one ui 6 beta 1 now and the code still works without doing the steps again.
-
39What is this?
This is a guide on how to enable all LTE and 5G bands on the US or Canadian S22 series phones by going through the service menu. This guide is mostly based on this S20U guide by mellojosh, but has been adapted for the S22U phone with more information added.
Which bands can be enabled this way?
All bands the phone supports in hardware can be enabled through the service menu. For the S22 Ultra, that includes all Sub-6 bands like n78, and mmWave bands, as well as 5G SA bands, as shown in this screenshot below.
Which phones does this method support?
This method has been confirmed to work on:
- Samsung S22 Ultra (S908U, S908U1, S908W).
- Galaxy Z Fold 4. Thanks @Abaddon.
This method requires your device be on the US firmware (XAA or other US CSC), so as long as you can Odin flash XAA firmware on your device (such as Canadian variant), you should be able to do this.
If you get this method working on your phone that isn't in the known list, post it here and I will add it to the list above.
How To Guide
You will need a Windows computer (or VM) and the Samsung USB Driver installed to do the following steps. Install the USB driver from here before proceeding if you do not have it installed.
A. Flash US Firmware
First, your device must be on US firmware (XAA or other CSC). You can skip this step and go to B if your device is already on US firmware.
If you're not on a US firmware because you have another Snapdragon variant (like Canadian), follow the steps below to flash XAA firmware. Note this will WIPE and FACTORY RESET your device. ALL DATA WILL BE LOST. So backup if you need to.
- Download Odin 3.14.4 or latest version.
- Download US XAA U1 firmware for your device from SamMobile.com or SamFw.com. For example, for the S22 Ultra, download the XAA firmware for S908U1. Extract the contents of the firmware to somewhere on your computer. You should have 5 files (BL, AP, CP, CSC, HOME_CSC). We won't use HOME_CSC.
- Restart your phone and go into download mode. On the S22 Ultra, hold all three power and up + down volume at the same time until the phone starts, then press the up volume key to get into download mode.
- Open Odin and connect your phone to your computer with a USB. Odin should say your phone was added.
- Click each of the BL, AP, CP, CSC buttons and select the corresponding files from the firmware zip you extracted. For CSC, use the file that starts with CSC and not HOME_CSC (we won't be using HOME_CSC). Do not load anything into USERDATA.
- Click start and let it flash the firmware (see the picture below). If it flashed correctly, your phone will be on XAA firmware after it restarts and you will have to set it up again from scratch.
- Set up your phone and verify it is on XAA firmware by going to Settings -> About Phone -> Software information -> check that it says XAA/XAA,XAA/OOO under "Software provider software version". OOO here will be your phone's original CSC like XAC which you cannot change and do not need to.
B. Unlock Service Menu Secret Codes
The next step is we need to unlock access to the service menu. Usually this is locked by default, but it might already be unlocked for you.
First check if you can access the service menu by trying each of these ways:
- Open dialer and enter *#27663368378# to try to get directly into the service mode main menu. The menu should open after you press the last # character, you shouldn't have to press call.
- Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
- If either of the above ways works for you to get to the service mode main menu, then you can skip the below steps to unlock the menu and go directly to instructions C.
- Enable USB Debugging in Developer menu.
- Download SamFW FRP tool 3.1 or latest version from here.
- Open SamFW FRP tool and connect your phone to the computer with a USB.
- Using SamFW FRP tool, go to MTP tab and click on "Enable Secret Code for Verizon". See the picture below. Note it works on any US CSC even though it says "for Verizon".
- If in the program output you see it's getting stuck on "Waiting for DIAG", then dial *#0808# on your phone to open USB settings and select "DM + MODEM + ADB" then press OK. The program should then complete the step and then get stuck on "Disabling DIAG". When it does, using the *#0808# menu again, select "MTP + ADB" this time and press OK. Now the program should complete the step and say that secret codes was unlocked.
- Now you should be able to use *#73# for RF test, *#27663368378#* to go directly to service menu. Test it to make sure the codes work and the service menu is opening.
C. METHOD 1: Use the Service Menu to Unlock All Bands
- Enter the service menu using either way.
- Open dialer and enter *#27663368378# to get directly into the service mode main menu.
- Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
- Use the service mode to set the following options. Note you can go back between screens with three dots -> back for quicker navigation, but I am just starting each option below from the main menu so it's easy to read.
- Enable all LTE and 5G bands.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> SYSTEM -> Next page 4 times -> SET LTE BAND CONFIG -> SET DEFAULT LTE BAND.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G PRUNE STATUS -> REMOVE NR5G PRUNE.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> GCF -> REMOVE ONLY NR WHITELIST.
- Optional if you need to enable mmWave bands: Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> Sub6/mmWave -> ALL ENABLE.
- Optional if you have issues going from LTE to LTE+ (carrier aggregation not working properly): Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page -> DISABLE CA COMBO CHECK -> DISABLE ON.
- Enable 5G NR features (DSS & CDRX) if needed. These options might already be enabled for you by default.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page -> NR CDRX CONTROL -> NR CDRX ENABLE. NR CDRX is 5G power saving mode.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page 2 times -> NR DSS CONTROL -> NR DSS ENABLE. NR DSS is 5G Dynamic Spectrum Sharing.
- Enable 5G SA if you're lucky enough to have a carrier with standalone 5G networks. This option might be enabled by default already.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> SA/NSA ENABLE.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> Remove SA permit list.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> Next Page -> NR5G NRDC -> NRDC ENABLE. NRDC is for dual connectivity with Sub6 + mmWave bands in parallel. Only applies to 5G SA networks and only if your carrier uses it.
- Restart your phone, then dial *#73# to get into RF Test Mode. Click Band Selection -> Sim 1 or Sim 2 (whichever you use). On this screen if you scroll down, you'll see a list of enabled NR5G bands. Make sure all bands are enabled. See my picture below.
- NOTE: Band selection won't be reset with a reboot, but might be reset after a CSC update (or a software update that includes a CSC update). You will have to re-do the service menu settings every update or re-flash of a CSC.
- NOTE: If you use an eSIM or a dual-SIM phone with a 2nd SIM, you need to change the NR5G stack before changing the NR5G related options above. Change the NR5G stack to Stack 2 with the following setting first.
- Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G STACK SELECTION -> Select STACK 2.
- OPTIONAL: Now that all bands are enabled and usable, you can use the Band Selection menu under *#73# to selectively disable certain bands if you need to. This is not covered here but that menu is self-explanatory.
- If this method isn't working, try METHOD 2 below. You do not need to try METHOD 2 if this method ended up working for you.
- Enable all LTE and 5G bands.
- If METHOD 1 above didn't work or not all bands were unlocked, you can try to unlock all bands by simulating a change in your CSC to GCF (Global Certification Forum). This won't actually change your CSC to GCF, but will change the options in the service menu as if you were on GCF CSC, which should give you access to all SA and NSA bands. Credits to @wr3cckl3ss1 for figuring out this method.
- To do this method, first enter the service mode main menu using either of the following ways.
- Open dialer and enter *#27663368378# to get directly into the service mode main menu.
- Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
- Using the service menu, change the following options
- Go to: Service Mode Main Menu -> PROTOCOL STATE -> PROTOCOL SIMULATION -> IMEI PRE CFG SIMULATION.
- In this menu, click [1] AP, then click GCF (last option). Then click [2] NET1 and change it to GCF as well. Do the same for [3] NET2. All GCF.
- Press [4] Write. Then restart phone.
- Check if all SA bands were unlocked. If not, repeat the band unlocking instructions from METHOD 1 above and then restart the phone and check again.
Enjoy your unlocked LTE and 5G bands!
FYI, I have personally tested this on a Canadian S908W on XAA firmware to enable 5G in Canada. In fact, I was even able to update to One UI 5.0 using the adb sideload method since I was on XAA firmware, and then I repeated the steps above to enable all 5G bands on the beta (service menu was still unlocked). So now I have 5G on One UI 5.0 beta in Canada! The trifecta!
CREDITS
@mellojosh for his guide on service menu band options on the S20U1.
@wr3cckl3ss1 for his guide on selecting bands from the dialer for the S22 series phones, and for instructions on protocol simulation.
@bigdave79 for reminding me about needing the Samsung USB Driver for this to work.7COMING SOON....THE RETURN OF CSC CHANGE WITHOUT ANY COMPUTERS.....still under heavy testing right now but coming soon, as well as other tricks.
@peacey8 @PapaDocta @Abaddon4Good news everyone! This method still works on US/Canadian S23 series and One UI 5.1. I've copied this guide over to the S23 forum.
Just tested it with my Canadian S23 Ultra by flashing US firmware first. The service menu will only unlock on US firmware (though stays unlocked after re-flashing Canadian firmware).33Good morning, I confirm the method works on the SM-G998U1 with android 13 beta 2, YES IT WORKS
