[Q] XT1058 SIM lock mystery

[ChadFM]

I am baffled by my XT1058. I got it from ebay (clearlya mistake), so I don't know its history. The phone works fine with TMobile SIM cards; this should imply that the phone has no SIM locks. However, h2o and AT&T SIM cards ask for a network unlock PIN!

I've tried going through TMobile to get a network unlock PIN, but they say that the phone didn't originate with them (obviously) so they can't provide a PIN. Motorola has told me that the phone should already be SIM unlocked, so no help there.

Anyone have any thoughts on this? Could it be some kind of software issue? (I've tried flashing the stock AT&T sbf; didn't resolve the issue.)

 

[ChrisAG]

Go through a 3rd party online unlocking company like cell unlocker net. Only costs like $8.99 or something.

I did this for my XT1058 in Canada, purchased at Fido. I'm now using on Bell.

 

[ChadFM]

Thanks for the advice.. I'm not very confident that they'll be able to produce a working code, but I've submitted an order to one of the unlocking services.

 

[Darth]

I bought an unlock code for my rogers 1058 no problem. On telus since day one.

 

[ChrisAG]

Thanks for the advice.. I'm not very confident that they'll be able to produce a working code, but I've submitted an order to one of the unlocking services.

If their code has several groups of 8 numbers, read the instructions carefully, e.g., you may be required to enter the 2nd group of 8 numbers and ignore the rest.

 

[ChadFM]

I tried an unlocking service "Motorola unlock code All Models/Networks", and they told me that they couldn't unlock it. (I was quickly refunded, thankfully.) Any other thoughts/suggestions..?

 

[Steve-x]

Is the bootloader unlocked and what firmware was installed when you received it?

 

[KidJoe]

@ChadFM are you sure its an XT1058? Does it have the ATT logo on its back?

Can you see any model number on its back (near the bottom edge, by the little hole)? Its often small and difficult to read.

 

[ChadFM]

@ChadFM are you sure its an XT1058? Does it have the ATT logo on its back?

Can you see any model number on its back (near the bottom edge, by the little hole)? Its often small and difficult to read.

The case says it's an XT1058, yeah - no AT&T branding, FCC ID IHDT56PA1, assembled in the USA.

 

[Steve-x]

There is no XT-1058 that should be locked to t-mobile, well there is no Moto X period that should be locked to t-mobile. I am wondering if it is really even a XT-1058 or if it has had the back cover swapped out. For sure it is an odd ball phone that someone messed with or was some sort of demo/sample phone early in its life.

 

[ChadFM]

There is no XT-1058 that should be locked to t-mobile, well there is no Moto X period that should be locked to t-mobile. I am wondering if it is really even a XT-1058 or if it has had the back cover swapped out. For sure it is an odd ball phone that someone messed with or was some sort of demo/sample phone early in its life.

It's crossed my mind that the back might have been swapped out. To make matters more complicated, the phone was running an XT1053 custom rom when I got it.. Interesting idea that it might have been some kind of demo/sample.

 

[Steve-x]

Hmm, Any chance it is maybe some CDMA(Verizon, Sprint, or a smaller regional carrier) variant of the phone that happens to allow t-mobile but not AT&T and the seller slapped some other rom on to it along with a new back cover.

You might want to try the following command at the fastboot screen "fastboot getvar all" which will give detailed information regarding the hardware in the phone. Post the output if you can, removing all of your unique information. I'd really like to know which radio it has installed - that should tell us the actual hardware model you have.

 

[ChadFM]

Hmm, Any chance it is maybe some CDMA(Verizon, Sprint, or a smaller regional carrier) variant of the phone that happens to allow t-mobile but not AT&T and the seller slapped some other rom on to it along with a new back cover.

You might want to try the following command at the fastboot screen "fastboot getvar all" which will give detailed information regarding the hardware in the phone. Post the output if you can, removing all of your unique information. I'd really like to know which radio it has installed - that should tell us the actual hardware model you have.

Now that would be very interesting, if this is actually a CDMA variant. I've combed through the getvar info before, when previously trying to figure out if the phone's actually an XT1058 - I didn't notice any interesting radio info, but I wasn't looking for it specifically. I'll post a dump of that info later this evening!

 

[ChadFM]

Here's the getvar output; note that I've got an XT1053 rom running currently. (I get the same SIM behavior on the stock AT&T rom.)

Do the radio/hwrev codes here have any significance?

(bootloader) version-bootloader: 30B4
(bootloader) version: 0.5
(bootloader) cpu: MSM8960 Pro CS
(bootloader) ram: 2048MB Hynix S4 SDRAM DIE=4Gb
(bootloader) emmc: 16GB Toshiba REV=06 PRV=01 TYPE=17
(bootloader) product: ghost
(bootloader) revision-hardware: 0x82B0
(bootloader) radio: 0x6
(bootloader) secure: yes
(bootloader) mid: 026b
(bootloader) serialno: LXTU2K0005
(bootloader) qe: qe 1/1
(bootloader) unlocked: yes
(bootloader) iswarrantyvoid: yes
(bootloader) max-download-size: 805306368
(bootloader) uid: <snip>
(bootloader) imei: <snip>
(bootloader) meid:
(bootloader) sku: XT1053
(bootloader) cid: 0x00
(bootloader) iccid:
(bootloader) date: 06-15-2013
(bootloader) cust_md5:
(bootloader) reason: Reboot to bootloader
(bootloader) ro.build.date: Fri Jan 10 22:11:02 CST 2014
(bootloader) ro.build.id: KXA20.16-1.25
(bootloader) ro.build.tags: release-keys
(bootloader) ro.build.type: user
(bootloader) ro.build.user: hudsoncm
(bootloader) ro.build.version.codename: REL
(bootloader) ro.build.version.incremental: 31
(bootloader) ro.build.version.release: 4.4.2
(bootloader) ro.mot.build.customerid: Retail
(bootloader) ro.product.name: ghost_retail
(bootloader) ro.build.fingerprint[0]: motorola/ghost_retail/ghost:4.4.
(bootloader) ro.build.fingerprint[1]: 2/KXA20.16-1.25/31:user/release-
(bootloader) ro.build.fingerprint[2]: keys
(bootloader) ro.build.version.full[0]: Blur_Version.161.44.25.ghost_row
(bootloader) ro.build.version.full[1]: .Retail.en.US
(bootloader) kernel.version[0]: Linux version 3.4.42-g8ee710a (h
(bootloader) kernel.version[1]: [email protected]) (gcc version
(bootloader) kernel.version[2]: 4.7 (GCC) ) #1 SMP PREEMPT Fri J
(bootloader) kernel.version[3]: an 10 22:24:43 CST 2014

 

[Steve-x]

This line should indicate which version it is - (bootloader) radio: 0x6
I am not at home to verify but am 99% sure that an XT-1058 will report radio 0x1.
I am also pretty sure that the XT-1053 has radio 0x6 - hopefully someone can verify.

 

[ChadFM]

This line should indicate which version it is - (bootloader) radio: 0x6
I am not at home to verify but am 99% sure that an XT-1058 will report radio 0x1.
I am also pretty sure that the XT-1053 has radio 0x6 - hopefully someone can verify.

Another thread seems to support those values: http://forum.xda-developers.com/moto-x/general/moto-x-cyanognmod-11-nightlies-to-start-t2627812

If there is a definite correlation between that value and the model number (the value is HW based), then this situation is even more complicated.. Does a sim-locked XT1053 even exist?

 

[KidJoe]

Here's the getvar output; note that I've got an XT1053 rom running currently. (I get the same SIM behavior on the stock AT&T rom.)

Do the radio/hwrev codes here have any significance?

<SNIP>
(bootloader) unlocked: yes
(bootloader) iswarrantyvoid: yes
(bootloader) max-download-size: 805306368
(bootloader) uid: <snip>
(bootloader) imei: <snip>
(bootloader) meid:
(bootloader) sku: XT1053
<SNIP>

So it appears its an XT1053 and has its bootloader unlocked.

The iswarrantyvoid being yes, makes me question if its the "unlocked GSM (comes with T-Mobile SIM)" version, or does the GSM Dev Edition say that too?

 

[ChadFM]

Taking a step back, are these getvar all values hardware based, or could they have been modified by flashing different firmwares..?

 

[KidJoe]

Taking a step back, are these getvar all values hardware based, or could they have been modified by flashing different firmwares..?

it is my understanding that the uid, imei, meid, sku, cid, iccid, and a few others are hardware based. Those that start with ro.build, and kernel are based on the rom flashed on the device.

In the OP you mention you tried flashing the stock XT1058 SBF... what was the last SBF you flashed to this phone? If it was the ATT XT1058 sbf, and the phone still reports XT1053 for SKU, then at least that field is hardware based.

And to answer your earlier question, No I haven't seen an XT1053 that is SIM-Locked. Moto sells the XT1053 as the "GSM Unlocked (ships with T-Mobile SIM)" version, and the GSM Dev Edition, both are sim unlocked out of the box.

 

[ChadFM]

I did last flash an AT&T XT1058 SBF.. so you're right, that supports that at least some of the fields are HW-based.

Maybe there's some international carrier that locks the XT1053, and it just happens to work on TMobile?