• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[Tutorial] Unlock VZW Razr M/M HD (XT907/XT926) for U.S. Carriers *CDMA WS METHOD*

Search This thread

dragonhart6505

Senior Member
Jun 20, 2010
832
311
Reading, PA
THIS WORKS WITH THE LATEST UPDATE!!!! THANK YOU dreamliner2012 FOR RUNNING IT THROUGH AND CLARIFYING!

THE ORIGINAL METHODS STILL WORK FOR ANYONE WHO WANTS TO USE RADIOCOMM AND DFS INSTEAD!

ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST

GIVE THEM YOUR PROPER THANKS!!!

this was done with stock bootloader, rom, no root, official EVERYTHING

video tutorial HERE
heres the quick rundown -
1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
3: connect to your computer *duh*
4: open CDMA WS 2.7 or higher (google)
5: connect to your COM Port and press CONNECT
6: click the SECURITY tab and enter 000000 as SPC and click SEND
7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
12: find the .txt file you just edited and click OK
13: reboot the phone and put in your preferred Sim
14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
15: SUCK IT VERIZON :cool:

happy days ahead for all!

don't forget that THANKS button :victory:

***DISCLAIMER***
NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!

originally posted this in the Motorola Droid RAZR M Q&A section but as I had originally used an XT926 to make this tutorial I thought I had better put this here >_<

---from cellzealot on how to load Win7 x64 drivers---

Here is a screenshot of Device Manager on my PC on WIN7 64 bit with the latest 6.2 Motorola USB drivers and my XT907 connected in BP Tools mode with all of the interfaces highlighted.
There are 3 modems, 1 network device and 1 COM port that should be present and installed.
The 6.2 driver set has signed versions for these device interfaces so no force loading should be required and they should install automatically when the phone is connected in BP Tools mode with USB debugging enabled.

Make note of the port number assigned to the COM Port as that is the port you will use for CDMA WS or DFS or any other QC based NV access tool.




The QC Interface is the Motorola QC Diag Port.

Right click and choose Update Drivers then choose Do not load drivers automatically. Allow me to choose from a list of available devices.

Scroll down to Ports: COM/LPT and then Motorola and then Motorola QC Diag Port.

It will warn about unsigned drivers, just click Install anyway and it will load the driver and show up with a COM port number assigned.

Use that COM port for CDMA WS to edit the NV.

If you continue to have problems, I suggest reflashing the firmware or just the modem and fsg.mbn in fastboot, and starting over.
 
Last edited:

koftheworld

Senior Member
Jun 9, 2010
1,509
518
Central NJ
ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST

GIVE THEM YOUR PROPER THANKS!!!

this was done with stock bootloader, rom, no root, official EVERYTHING

video tutorial HERE
heres the quick rundown -
1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
3: connect to your computer *duh*
4: open CDMA WS 2.7 or higher (google)
5: connect to your COM Port and press CONNECT
6: click the SECURITY tab and enter 000000 as SPC and click SEND
7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
12: find the .txt file you just edited and click OK
13: reboot the phone and put in your preferred Sim
14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
15: SUCK IT VERIZON :cool:

happy days ahead for all!

don't forget that THANKS button :victory:

***DISCLAIMER***
NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!

originally posted this in the Motorola Droid RAZR M Q&A section but as I had originally used an XT926 to make this tutorial I thought I had better put this here >_<

I NEED CONFIRMATION FROM ANYONE WITH AN XT907 ON THE LATEST UPDATE TO CONFIRM WHETHER OR NOT THIS STILL WORKS!! PLEASE LET ME KNOW SO I CAN UPDATE THE OP ACCORDINGLY!

If you do this can you use the phone on Verizon still or do you need to revert the changes?

sent from my xt926 RAZR maxx hd
 
  • Like
Reactions: bamx2

Cpudan80

Senior Member
Nov 9, 2012
102
18
This is the same method that has been posted for a long time. The only difference is that the old method used RadioComm.
 

dragonhart6505

Senior Member
Jun 20, 2010
832
311
Reading, PA
This is the same method that has been posted for a long time. The only difference is that the old method used RadioComm.

Edit: I have been informed that the RadioComm and DFS methods still work with the latest updates as well. I just thought I would post a different method for anyone who wanted an easier interface to work with.

if this isnt helpful to anyone, fine. then ill send a request to remove it. not gonna step on anyone elses tutorial-territory
 
Last edited:

Cpudan80

Senior Member
Nov 9, 2012
102
18
Edit: I have been informed that the RadioComm and DFS methods still work with the latest updates as well. I just thought I would post a different method for anyone who wanted an easier interface to work with.

if this isnt helpful to anyone, fine. then ill send a request to remove it. not gonna step on anyone elses tutorial-territory

Yeah this method is a bit easier, given RadioComm's daunting interface. What version of CDMA WS did you use? The website lists Free/Lite/Ultimate, but it's not clear if that's just determined by the key that you enter.
 

Sensivity

Member
Jun 10, 2012
14
1
Its already a World Phone, there's no need to do this for any carrier outside of U.S, but yes it will
Yes, my GSM SIM worked fine on stock and based on stock roms, but when I tried CM 10.2 for xt926 (Android 4.3) it just couldn't find my mobile network. CM 10.2 for xt925 finds network but can't connect to them automaticly or manually, so I want to try this tutorial for CM10.2 for xt926.
 
  • Like
Reactions: Sus27

dragonhart6505

Senior Member
Jun 20, 2010
832
311
Reading, PA
Yes, my GSM SIM worked fine on stock and based on stock roms, but when I tried CM 10.2 for xt926 (Android 4.3) it just couldn't find my mobile network. CM 10.2 for xt925 finds network but can't connect to them automaticly or manually, so I want to try this tutorial for CM10.2 for xt926.

There's a patch for the gsm but people are reporting no luck so far with CM 10.2 4.3 based ROMs on the Razr M. This method does not help that but if you find out otherwise id like to know
 

brownrt

Senior Member
Dec 1, 2008
159
21
Washington, DC
My phone xt926 is working on PacMans ROM. I followed these instructions. Did a full wipe including system. Installed the PacMan Gsm ROM. Everything but UMTS works. Edge data works fine.


UMTS works fine with the stock ROM. I wonder if of is a seem edit or build prop issue to get it working on AOSP ROMs
Sent from my EPAD using xda app-developers app
 

brownrt

Senior Member
Dec 1, 2008
159
21
Washington, DC
Flash Me, maybe?

I now have HSPA+ working on my phone with PacMan.

In case anyone is interested in either thanking me for being brilliant or roast me for sucking at searching for pre existing solutions, I'll post my steps here.

1. Flash to stock using RSD Lite and the newest Verizon files from here http://sbf.droid-developers.org/vanquish/list.php

2. Follow the instructions from either this thread http://forum.xda-developers.com/showthread.php?t=2389740 or this one http://forum.xda-developers.com/showthread.php?t=2166542 I used the RadioComm method because screw drivers

3. Ensure the new gsm sim is registered and working on the network.

4. Download the your favorite ROM. I am using the PacMan 4.3

5. In recovery wipe everything including the system, cache and dalvik cache

6. Install Rom and wipe cache again

7. Boot, login, and download Viaero 4g toggle or press *#*#4636#*#* and change the phone to GSM/wcdma (prl).

8. Add this to your bulid.prop thanks to mattwheat at droidrzr.com. http://www.droidrzr.com/index.php/t...et-data-and-smsmms-working-on-xt926-422-roms/

Edit build props to reflect this :

ro.carrier= T-Mobile (or your carrier)

ro.telephony.default_network = 9

telephony.rilV7NeedCDMALTEPhone = false

8. ????????

9. Profit


I hope this helps.
 
Last edited:

Pizzoro

New member
Nov 20, 2013
1
0
Problems!!!

I am using Win7 32b and I already installed everything moto drivers, the CDMA and put my phone on BP mode, but for some reason the program does not detect the port, why? What can I do?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 28
    THIS WORKS WITH THE LATEST UPDATE!!!! THANK YOU dreamliner2012 FOR RUNNING IT THROUGH AND CLARIFYING!

    THE ORIGINAL METHODS STILL WORK FOR ANYONE WHO WANTS TO USE RADIOCOMM AND DFS INSTEAD!

    ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST

    GIVE THEM YOUR PROPER THANKS!!!

    this was done with stock bootloader, rom, no root, official EVERYTHING

    video tutorial HERE
    heres the quick rundown -
    1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
    2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
    3: connect to your computer *duh*
    4: open CDMA WS 2.7 or higher (google)
    5: connect to your COM Port and press CONNECT
    6: click the SECURITY tab and enter 000000 as SPC and click SEND
    7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
    8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
    9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
    10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
    11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
    12: find the .txt file you just edited and click OK
    13: reboot the phone and put in your preferred Sim
    14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
    15: SUCK IT VERIZON :cool:

    happy days ahead for all!

    don't forget that THANKS button :victory:

    ***DISCLAIMER***
    NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!

    originally posted this in the Motorola Droid RAZR M Q&A section but as I had originally used an XT926 to make this tutorial I thought I had better put this here >_<

    ---from cellzealot on how to load Win7 x64 drivers---

    Here is a screenshot of Device Manager on my PC on WIN7 64 bit with the latest 6.2 Motorola USB drivers and my XT907 connected in BP Tools mode with all of the interfaces highlighted.
    There are 3 modems, 1 network device and 1 COM port that should be present and installed.
    The 6.2 driver set has signed versions for these device interfaces so no force loading should be required and they should install automatically when the phone is connected in BP Tools mode with USB debugging enabled.

    Make note of the port number assigned to the COM Port as that is the port you will use for CDMA WS or DFS or any other QC based NV access tool.




    The QC Interface is the Motorola QC Diag Port.

    Right click and choose Update Drivers then choose Do not load drivers automatically. Allow me to choose from a list of available devices.

    Scroll down to Ports: COM/LPT and then Motorola and then Motorola QC Diag Port.

    It will warn about unsigned drivers, just click Install anyway and it will load the driver and show up with a COM port number assigned.

    Use that COM port for CDMA WS to edit the NV.

    If you continue to have problems, I suggest reflashing the firmware or just the modem and fsg.mbn in fastboot, and starting over.
    3
    I have done this hack on several RAZR HDs in the past week, and for best results:

    First READ 8322, change from 01 to 00,
    Then WRITE 8322, and WRITE 8322 again.
    Wait five minutes, then reboot.

    At first, I was reverting to to 01 constantly. Following these steps exactly worked well.
    2
    Just a notice:

    There's Stargo's command line utility unlock-us-gsm newly included in CM12 builds for xt907, xt926 and xt897.

    All you have to do to unlock US GSM with it is:
    Code:
    su
    unlock-us-gsm
    in terminal emulator app or adb shell.

    http://review.cyanogenmod.org/89520
    http://review.cyanogenmod.org/90141
    1
    ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST

    GIVE THEM YOUR PROPER THANKS!!!

    this was done with stock bootloader, rom, no root, official EVERYTHING

    video tutorial HERE
    heres the quick rundown -
    1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
    2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
    3: connect to your computer *duh*
    4: open CDMA WS 2.7 or higher (google)
    5: connect to your COM Port and press CONNECT
    6: click the SECURITY tab and enter 000000 as SPC and click SEND
    7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
    8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
    9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
    10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
    11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
    12: find the .txt file you just edited and click OK
    13: reboot the phone and put in your preferred Sim
    14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
    15: SUCK IT VERIZON :cool:

    happy days ahead for all!

    don't forget that THANKS button :victory:

    ***DISCLAIMER***
    NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!

    originally posted this in the Motorola Droid RAZR M Q&A section but as I had originally used an XT926 to make this tutorial I thought I had better put this here >_<

    I NEED CONFIRMATION FROM ANYONE WITH AN XT907 ON THE LATEST UPDATE TO CONFIRM WHETHER OR NOT THIS STILL WORKS!! PLEASE LET ME KNOW SO I CAN UPDATE THE OP ACCORDINGLY!

    If you do this can you use the phone on Verizon still or do you need to revert the changes?

    sent from my xt926 RAZR maxx hd
    1
    Nope the GPS is not working. Would I be able to pickup GPS over Wifi with it set to device only?

    I will flash back into CM12.1 and unlock the GSM again and see if the phone works, if so I may try and delete them again but in CM12.1.

    It takes some time to get GPS signal lock, use GPS Status & toolbox to donwload AGPS data and see satellites.