How To Guide How to Enable All Bands Through Service Menu on US/CA S22 series (including Sub-6 and mmWave)

Search This thread

lexcyn

Senior Member
Apr 4, 2010
780
761
Sudbury
Thanks for this! Flashing the U1 actually changed my CSC from BMC to XAA, and now I am showing XAC as my current home CSC which is fine with me!

And now I'm on Android 13 beta 3 which is running MUCH better than Android 12 was for me - plus 5G working great even though we only have NSA here.
 
  • Like
Reactions: peacey8

warriorvibhu

Inactive Recognized Developer
Aug 28, 2007
1,494
376
Somewhere Amazing
HTC One (m7)
LG V10
What is this?

This is a guide on how to enable all LTE and 5G bands on the US or Canadian S22 series phones by going through the service menu. This guide is mostly based on this S20U guide by mellojosh, but has been adapted for the S22U phone with more information added
@mellojosh also has written this guide for Note20 Ultra.
Josh haven't seen you in a while buddy. Sending you best wishes. Hope you are doing well.
Also thank you OP for sharing this information along with your own updates.
 

peacey8

Senior Member
Jul 28, 2013
246
177
Thanks for this! Flashing the U1 actually changed my CSC from BMC to XAA, and now I am showing XAC as my current home CSC which is fine with me!

And now I'm on Android 13 beta 3 which is running MUCH better than Android 12 was for me - plus 5G working great even though we only have NSA here.
Yes it's so nice to have n78 on Android 13 in Canada! I clocked in at 1.3 Gbps on Bell's network.

Bell_Speedtest_n78.jpg
 

lexcyn

Senior Member
Apr 4, 2010
780
761
Sudbury
Yes it's so nice to have n78 on Android 13 in Canada! I clocked in at 1.3 Gbps on Bell's network.

View attachment 5722577
I don't have it at my location yet but I seem to have 5G icon all the time now vs before it would come and go (due to carrier aggregation). That's a plus too since that's how all other OEMs display it.

Also isn't n78 standard in the Canadian version anyways?
 

peacey8

Senior Member
Jul 28, 2013
246
177
After all the steps, bands are showing like this. Can anyone confirm whether I have unlocked all bands or not?
Yes all LTE and 5G NSA bands seem to be unlocked from your picture. SA bands are still disabled since you didn't enable them, but SA bands aren't needed unless your carrier uses standalone 5G networks (very rare right now). So everything looks good.
 
  • Like
Reactions: Paradox

thenormal1

New member
Oct 6, 2022
3
2
First, thanks for the great Guide 👍 all bands are enabled on my U1 XAA (both sims), but have still some issues...

Note: Its an eSim with 5G (o2 Germany)

1.Band 78-NSA-SA is enabled for Sim2 (I think only NSA is supported) eSim connects only to LTE5G (no solid 5G icon) what could be wrong?

Screenshot_20221006_194632.jpeg



2. still struggeling with Network switch (while driving) it switches to N/A no network. Need to set FlightMode to enable it again. did already this, too:

  • Optional if you have issues going from LTE to LTE+ (carrier aggregation not working properly): Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page -> DISABLE CA COMBO CHECK -> DISABLE ON.

Screenshot_20221006_194553.jpeg


Thx for help
 
Last edited:

nnighthawk

Member
Oct 6, 2022
7
4
Hi, thanks for the guide. Extremely useful.
Screenshot_20221006_115505_Service mode RIL.jpg


I'm on SM-S908U (locked) TMB firmware, One UI 5 beta 3, but had the same issue as Paradox above. All LTE and 5G NSA bands are enabled, but 5G SA bands are not. Only n41, n66, and n71 SA are enabled, as is default on Android 13 [edit: for TMB of course]. I've tried messing around a little more in the service menu to no avail, I can enable NRDC but not SA on all other bands.

Not sure what I can do, could the TMB firmware have something to do with it? Thanks again though, I was still able to enable other bands which is very useful, was just hoping I could do the same with SA. Specifically I want to enable n25 SA.
 
  • Like
Reactions: Paradox

peacey8

Senior Member
Jul 28, 2013
246
177
First, thanks for the great Guide 👍 all bands are enabled on my U1 XAA (both sims), but have still some issues...

Note: Its an eSim with 5G (o2 Germany)

1.Band 78-NSA-SA is enabled for Sim2 (I think only NSA is supported) eSim connects only to LTE5G (no solid 5G icon) what could be wrong?

View attachment 5728733


2. still struggeling with Network switch (while driving) it switches to N/A no network. Need to set FlightMode to enable it again. did already this, too:

  • Optional if you have issues going from LTE to LTE+ (carrier aggregation not working properly): Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page -> DISABLE CA COMBO CHECK -> DISABLE ON.

View attachment 5728735

Thx for help
I would try to disable SA bands if you don't use them, having them on can cause issues if your carrier is testing them but not using them.

So disable SA from the service menu and see if it helps connect to 5G. Also, are you sure you're in an area with 5G coverage? Have you tried to go around town to different areas?
 

Paradox

Senior Member
Hi, thanks for the guide. Extremely useful.View attachment 5728759

I'm on SM-S908U (locked) TMB firmware, One UI 5 beta 3, but had the same issue as Paradox above. All LTE and 5G NSA bands are enabled, but 5G SA bands are not. Only n41, n66, and n71 SA are enabled, as is default on Android 13 [edit: for TMB of course]. I've tried messing around a little more in the service menu to no avail, I can enable NRDC but not SA on all other bands.

Not sure what I can do, could the TMB firmware have something to do with it? Thanks again though, I was still able to enable other bands which is very useful, was just hoping I could do the same with SA. Specifically I want to enable n25 SA.
esim has more SA enabled by default.
 

Attachments

  • Screenshot_20221006-210623_Service mode RIL.jpg
    Screenshot_20221006-210623_Service mode RIL.jpg
    290 KB · Views: 43

peacey8

Senior Member
Jul 28, 2013
246
177
Hi, thanks for the guide. Extremely useful.View attachment 5728759

I'm on SM-S908U (locked) TMB firmware, One UI 5 beta 3, but had the same issue as Paradox above. All LTE and 5G NSA bands are enabled, but 5G SA bands are not. Only n41, n66, and n71 SA are enabled, as is default on Android 13 [edit: for TMB of course]. I've tried messing around a little more in the service menu to no avail, I can enable NRDC but not SA on all other bands.

Not sure what I can do, could the TMB firmware have something to do with it? Thanks again though, I was still able to enable other bands which is very useful, was just hoping I could do the same with SA. Specifically I want to enable n25 SA.
Oh it's weird some SA bands are not enabled. All of them should be if you enabled SA.

Did you change both of the following options in the service menu? Also since you're using eSIM, please be sure to change NR5G stack selection to Stack 2 first, or they will only apply to Sim 1.

  • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G STACK SELECTION -> Select STACK 2.
  • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> SA/NSA ENABLE.
  • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> Remove SA permit list.
After that restart, then dial *#73# and go to Band selection. Select SIM2. Then press [8] Select all bands. Then press [9] Apply band configuration. Then exit the menu and go back to it again to check that all SA bands were enabled.

Please see if the above helps.
 

fsmeurinne

Member
Mar 23, 2020
25
4
Samsung Galaxy S22 Ultra
Thank you! It worked now I have 5G in my country with my US phone. Brilliant! I think I opened everything just in case. Just a question at least where I am now it is a bit intermittent connects to 5G and then changes to LTE+ not sure if it's the antenna of the place I am in?
 

Attachments

  • Screenshot_20221007-001623_Service mode RIL.jpg
    Screenshot_20221007-001623_Service mode RIL.jpg
    877.2 KB · Views: 60
  • Screenshot_20221007-000423_NetMonster.jpg
    Screenshot_20221007-000423_NetMonster.jpg
    489.5 KB · Views: 60
  • Screenshot_20221007-004249_NetMonster.jpg
    Screenshot_20221007-004249_NetMonster.jpg
    488.9 KB · Views: 62

peacey8

Senior Member
Jul 28, 2013
246
177
Thank you! It worked now I have 5G in my country with my US phone. Brilliant! I think I opened everything just in case. Just a question at least where I am now it is a bit intermittent connects to 5G and then changes to LTE+ not sure if it's the antenna of the place I am in?
If you scroll down in your NetMonster app, you should find 5G NSA signal stats (RSRP and SNR), see picture below. What you're showing here is only LTE signal stats. How stable 5G is will depend on 5G signal level in your location.

Check to see what the 5G RSRP and SNR are when connected to 5G. If the 5G RSRP is very low (close to -100 or less) or SNR is very low (like < 5 dB), the signal to the 5G cell is not very good and it will switch to LTE+ intermittently when the signal drops. If the RSRP is high (-60, -70 for example) and SNR is high, then 5G should be very stable.
Screenshot_20221007_090508_NetMonster.jpg
 

nnighthawk

Member
Oct 6, 2022
7
4
Oh it's weird some SA bands are not enabled. All of them should be if you enabled SA.

Did you change both of the following options in the service menu? Also since you're using eSIM, please be sure to change NR5G stack selection to Stack 2 first, or they will only apply to Sim 1.

  • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G STACK SELECTION -> Select STACK 2.
  • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> SA/NSA ENABLE.
  • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> Remove SA permit list.
After that restart, then dial *#73# and go to Band selection. Select SIM2. Then press [8] Select all bands. Then press [9] Apply band configuration. Then exit the menu and go back to it again to check that all SA bands were enabled.

Please see if the above helps.
Hi, I've done these steps in that order multiple times to no avail :(
 

Top Liked Posts

  • There are no posts matching your filters.
  • 7
    COMING SOON....THE RETURN OF CSC CHANGE WITHOUT ANY COMPUTERS.....still under heavy testing right now but coming soon, as well as other tricks. 😁😁😁

    @peacey8 @PapaDocta @Abaddon
    2
    Can you please share how to access this menu.
    Maybe in a few weeks. This method is not for the average user and requires a very clear understanding of how to input certain things. I'm looking at making it more user friendly.
    1
    I have not change the drivers since I have the S21 ultra . Do you think that I have to update the drivers ? Do you have the correct ones?

    I changed cables . Maybe is the windows 11?
    I did it on windows 11 as well, so should be fine. I would try to uninstall all Samsung/Android drivers and reinstall the latest ones from the link in the OP. Sorry, not sure what else you can try if it doesn't work other than flashing U1 XAA.
    1
    using what though? like I said, any activites with ServiceMode in them just give me an error in Shortcut Maker, but as of right now I made a shortcut to open up the dialer but idk the exact syntax needed to make it dial *#73#

    I hardly ever use the app but I just brought up the app's main menu, went to Intents > Dial > and I'm not sure what to change the "android.intent.action.DIAL" section to, should be something like tel:*%2373%23
    I couldn't get shortcut maker to work either, but you might be able to make a shortcut with terminal emulator.. I was able to start activities with that when shortcut maker didn't work
    1
    I have the F396W Canadian Fold 4 1TB from Samsung. I did use the XAA VII); I can get the *#73# and was able to verify all bands enabled using the *#2263#. Previously, Telus would only show LTE+ but now is showing 5G.

    Next up, the SM-S908W s22 Ultra and using the U1 XAA VHL software (I want to have it do one update before Android 13 hits XAA)

    Thank you so much for this post!
  • 22
    What is this?

    This is a guide on how to enable all LTE and 5G bands on the US or Canadian S22 series phones by going through the service menu. This guide is mostly based on this S20U guide by mellojosh, but has been adapted for the S22U phone with more information added.

    Which bands can be enabled this way?

    All bands the phone supports in hardware can be enabled through the service menu. For the S22 Ultra, that includes all Sub-6 bands like n78, and mmWave bands, as well as 5G SA bands, as shown in this screenshot below.

    Bands List.jpeg

    Which phones does this method support?

    This method has been confirmed to work on:
    • Samsung S22 Ultra (S908U, S908U1, S908W).
    • Galaxy Z Fold 4. Thanks @Abaddon.
    This method works on both Android 12 (One UI 4.1) or Android 13 (One UI 5.0 beta).

    This method requires your device be on the US firmware (XAA or other US CSC), so as long as you can Odin flash XAA firmware on your device (such as Canadian variant), you should be able to do this.

    If you get this method working on your phone that isn't in the known list, post it here and I will add it to the list above.

    How To Guide

    You will need a Windows computer (or VM) and the Samsung USB Driver installed to do the following steps. Install the USB driver from here before proceeding if you do not have it installed.

    A. Flash US Firmware

    First, your device must be on US firmware (XAA or other CSC). You can skip this step and go to B if your device is already on US firmware.

    If you're not on a US firmware because you have another Snapdragon variant (like Canadian), follow the steps below to flash XAA firmware. Note this will WIPE and FACTORY RESET your device. ALL DATA WILL BE LOST. So backup if you need to.
    1. Download Odin 3.14.4 or latest version.
    2. Download US XAA U1 firmware for your device from SamMobile.com or SamFw.com. For example, for the S22 Ultra, download the XAA firmware for S908U1. Extract the contents of the firmware to somewhere on your computer. You should have 5 files (BL, AP, CP, CSC, HOME_CSC). We won't use HOME_CSC.
    3. Restart your phone and go into download mode. On the S22 Ultra, hold all three power and up + down volume at the same time until the phone starts, then press the up volume key to get into download mode.
    4. Open Odin and connect your phone to your computer with a USB. Odin should say your phone was added.
    5. Click each of the BL, AP, CP, CSC buttons and select the corresponding files from the firmware zip you extracted. For CSC, use the file that starts with CSC and not HOME_CSC (we won't be using HOME_CSC). Do not load anything into USERDATA.
    6. Click start and let it flash the firmware (see the picture below). If it flashed correctly, your phone will be on XAA firmware after it restarts and you will have to set it up again from scratch.
    7. Set up your phone and verify it is on XAA firmware by going to Settings -> About Phone -> Software information -> check that it says XAA/XAA,XAA/OOO under "Software provider software version". OOO here will be your phone's original CSC like XAC which you cannot change and do not need to.
    A - Odin Flash.png

    B. Unlock Service Menu Secret Codes

    The next step is we need to unlock access to the service menu. Usually this is locked by default, but it might already be unlocked for you.

    First check if you can access the service menu by trying each of these ways:
    1. Open dialer and enter *#27663368378# to try to get directly into the service mode main menu. The menu should open after you press the last # character, you shouldn't have to press call.
    2. Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
    3. If either of the above ways works for you to get to the service mode main menu, then you can skip the below steps to unlock the menu and go directly to instructions C.
    If you cannot access the menu with the above codes, then follow these instructions to unlock the secret codes.
    1. Enable USB Debugging in Developer menu.
    2. Download SamFW FRP tool 3.1 or latest version from here.
    3. Open SamFW FRP tool and connect your phone to the computer with a USB.
    4. Using SamFW FRP tool, go to MTP tab and click on "Enable Secret Code for Verizon". See the picture below. Note it works on any US CSC even though it says "for Verizon".
      • If in the program output you see it's getting stuck on "Waiting for DIAG", then dial *#0808# on your phone to open USB settings and select "DM + MODEM + ADB" then press OK. The program should then complete the step and then get stuck on "Disabling DIAG". When it does, using the *#0808# menu again, select "MTP + ADB" this time and press OK. Now the program should complete the step and say that secret codes was unlocked.
    5. Now you should be able to use *#73# for RF test, *#27663368378#* to go directly to service menu. Test it to make sure the codes work and the service menu is opening.
    B - SamFW FRP Tool.png

    C. METHOD 1: Use the Service Menu to Unlock All Bands
    • Enter the service menu using either way.
      • Open dialer and enter *#27663368378# to get directly into the service mode main menu.
      • Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
    • Use the service mode to set the following options. Note you can go back between screens with three dots -> back for quicker navigation, but I am just starting each option below from the main menu so it's easy to read.
      1. Enable all LTE and 5G bands.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> SYSTEM -> Next page 4 times -> SET LTE BAND CONFIG -> SET DEFAULT LTE BAND.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G PRUNE STATUS -> REMOVE NR5G PRUNE.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> GCF -> REMOVE ONLY NR WHITELIST.
        • Optional if you need to enable mmWave bands: Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> Sub6/mmWave -> ALL ENABLE.
        • Optional if you have issues going from LTE to LTE+ (carrier aggregation not working properly): Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page -> DISABLE CA COMBO CHECK -> DISABLE ON.
      2. Enable 5G NR features (DSS & CDRX) if needed. These options might already be enabled for you by default.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page -> NR CDRX CONTROL -> NR CDRX ENABLE. NR CDRX is 5G power saving mode.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page 2 times -> NR DSS CONTROL -> NR DSS ENABLE. NR DSS is 5G Dynamic Spectrum Sharing.
      3. Enable 5G SA if you're lucky enough to have a carrier with standalone 5G networks. This option might be enabled by default already.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> SA/NSA ENABLE.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> Remove SA permit list.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> Next Page -> NR5G NRDC -> NRDC ENABLE. NRDC is for dual connectivity with Sub6 + mmWave bands in parallel. Only applies to 5G SA networks and only if your carrier uses it.
      4. Restart your phone, then dial *#73# to get into RF Test Mode. Click Band Selection -> Sim 1 or Sim 2 (whichever you use). On this screen if you scroll down, you'll see a list of enabled NR5G bands. Make sure all bands are enabled. See my picture below.
      5. NOTE: Band selection won't be reset with a reboot, but might be reset after a CSC update (or a software update that includes a CSC update). You will have to re-do the service menu settings every update or re-flash of a CSC.
      6. NOTE: If you use an eSIM or a dual-SIM phone with a 2nd SIM, you need to change the NR5G stack before changing the NR5G related options above. Change the NR5G stack to Stack 2 with the following setting first.
        • Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G STACK SELECTION -> Select STACK 2.
      7. OPTIONAL: Now that all bands are enabled and usable, you can use the Band Selection menu under *#73# to selectively disable certain bands if you need to. This is not covered here but that menu is self-explanatory.
      8. If this method isn't working, try METHOD 2 below. You do not need to try METHOD 2 if this method ended up working for you.
    D. METHOD 2: Unlock all bands via Protocol Simulation menu.
    • If METHOD 1 above didn't work or not all bands were unlocked, you can try to unlock all bands by simulating a change in your CSC to GCF (Global Certification Forum). This won't actually change your CSC to GCF, but will change the options in the service menu as if you were on GCF CSC, which should give you access to all SA and NSA bands. Credits to @wr3cckl3ss1 for figuring out this method.
    • To do this method, first enter the service mode main menu using either of the following ways.
      • Open dialer and enter *#27663368378# to get directly into the service mode main menu.
      • Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
    • Using the service menu, change the following options
    1. Go to: Service Mode Main Menu -> PROTOCOL STATE -> PROTOCOL SIMULATION -> IMEI PRE CFG SIMULATION.
    2. In this menu, click [1] AP, then click GCF (last option). Then click [2] NET1 and change it to GCF as well. Do the same for [3] NET2. All GCF.
    3. Press [4] Write. Then restart phone.
    4. Check if all SA bands were unlocked. If not, repeat the band unlocking instructions from METHOD 1 above and then restart the phone and check again.

    Enjoy your unlocked LTE and 5G bands!

    FYI, I have personally tested this on a Canadian S908W on XAA firmware to enable 5G in Canada. In fact, I was even able to update to One UI 5.0 using the adb sideload method since I was on XAA firmware, and then I repeated the steps above to enable all 5G bands on the beta (service menu was still unlocked). So now I have 5G on One UI 5.0 beta in Canada! The trifecta!

    CREDITS

    @mellojosh for his guide on service menu band options on the S20U1.
    @wr3cckl3ss1 for his guide on selecting bands from the dialer for the S22 series phones, and for instructions on protocol simulation.
    @bigdave79 for reminding me about needing the Samsung USB Driver for this to work.
    7
    COMING SOON....THE RETURN OF CSC CHANGE WITHOUT ANY COMPUTERS.....still under heavy testing right now but coming soon, as well as other tricks. 😁😁😁

    @peacey8 @PapaDocta @Abaddon
    3
    Excellent job sir.
    3
    Good morning, I confirm the method works on the SM-G998U1 with android 13 beta 2, YES IT WORKS
    3
    Anyone that is updating the S22 Ultra to Android 13 and One UI 5, does it keeps the setting or you need to re do the whole process? Also does this method still work? I'm affraid of losing 5G after I update it.
    You might have to re-do the process since the CSC is updated. Yes this method still works on One UI 5. I am on One UI 5 stable and it is working fine on S908U1 (XAA).