View Single Post
  #17 (permalink)  
Old 12-24-2010, 04:30 PM
sdwyz74's Avatar
sdwyz74
Lurker
Offline
Location: washington state
 
Join Date: Jun 2009
Posts: 15
Reputation: 0
sdwyz74 is a n00b
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Send a message via Yahoo to sdwyz74
Re: Backing up HA & AAA secret keys.

Quote:
Originally Posted by Ultima View Post
Here it is guys, how to back up your HA & AAA shared secret keys in case you break your evdo through flashing roms or *228 or something similar.

Requirements:
QPST 2.7 Build 301
QXDM 3.11.36

Put your phone in DMR mode.
##3424 (send) if you use a Verizon ROM
##3424# for Sprint
I am not sure which is used by Alltel, Telus, etc. Please post if you know and I will update this post.

Run the QPST config and plug in your phone, make sure your phone is detected in the COM port list. If not click Add New Port and add the one that it has detected your phone on. What it says may vary but USB will often be in the description.

Run QXDM click Options -> Communications and set the Target Port for the same one QPST config listed for your phone.

In the command box at the top type "spc 000000"
Note: If your SPC is not 000000 then you need to use the correct number instead!

If successful you will see a window titled "Command Output" that will output some text with the final line reading "SPC Result = Correct"

Next in the command box type "requestnvitemread ds_mip_ss_user_prof"

This will get you a lot of stuff in the Command Output window. It will start with the "DIAG TX item" section, ignore this one, we are interested in the "DIAG RX item" part.

The actual keys are 16 lines and marked in the output as 0-15. You will notice that quite handily both HA and AAA are both there. Take the part after the "0x" and that is actual key data. Just write down (or use word, notepad, whatever) to record this for safe keeping.

If you are doing this right then you have a long string of 30 characters all strung together for each key. DOUBLE CHECK YOUR COPYING! A single mistake will cause this to fail.


Putting the keys back into the phone:

Load QPST service programming, go to the M.IP tab. Double click profile 0 (in the white box) and use "Enter hex value" to enter your backups of your HA and AAA keys.

Write to phone.

Soft reset. (may not be required but I do it for good measure)

Enjoy data again without another call to support for a DMU reset or multiple ESN changes.

Please leave feedback to let me know about your experience and any issues you may have!

Good QXDM information is pretty rare so please contribute if you have anything to add!

Thanks to aarondeep from the original thread http://forum.ppcgeeks.com/showthread.php?t=52727 for pointing me in the right direction.

well i have a big problem as i have moved my evo to boost and it was hell as i did not know what the FUUUU i was doing but i am boosted confirmed only problem is that no 3g i have evrything right except the 16 digit password and i cant get it as i boght the donor TP2 for 40 bucks and it's teaked i figured it was good but the USB port wont read so when i plug it in it only gives the charging symbol ??? i'm screwed as i need to access the active sync to read the values in my QXDM and write to phone using the QPST i'm desperat it's a brand new WHITE EVO ROOTED AND CUSTOM no 3g please advise thanks to all and merry X-mas
Reply With Quote