How To: Use another carriers HTC on VZW

[Getitnowmarketing]

deleted

[pzztgotbagz]

Originally Posted by drellisdee

1) check your esn is it higher than 05401114111 call customer service at 800-922-0204 and ask them to check if it can be activated also ask them to check it in the dacc esn database. If lower read below

Verizon does have a lower esn range if the 6700's esn falls below 05401114111 it is not in verizons esn database. Tech support will have to manually add it which is rather difficult to do. It requires persistence and catching the right knowledgeable tech in the right mood pretty much. There is a way for auth agents to force a foreign esn in using a glitch in the system but this can only be done on a brand new activation (cannot do on esn swaps) but if you ever change phones the phone will have to be added into the esn database by a tech to use it again. However, the latter method would give you a pretty valid arguement to get it added in as they can see that you were using that esn prior on the network and tell them it was changed in error.

2) Break that spc code. If you have altell disregard as their spc code is 000000 along with vzw.

Put your phone in dm mode its ##diag talk or ##diag# talk on most phones (carrier dependant search the boards here). Press start (left soft key) and plug in usb cord to both phone and pc if you have vista the drivers will auto install. If you have xp you will need to download the diagnostics drivers attached in this post and manually direct the install to where they were downloaded in your pc.

Place your diagnostic port for the phone on com 2 and run the se47 program it will set the spc to all 0's in less than 2 seconds. Press stop and disconnect phone from usb.

3) supercid phone's bootloader so any carriers rom will take (not necessary if using no id ruu with windows xp and helmi's wm6)

You will need bitpim (free program) and qpst (dont ask for a link)

Place the phone in dm mode again ##diag talk or your carriers version of it. Load bitpim and select other cdma phone on port 2 and save the nvm_htc file to desktop. Load xvi32 (hex editor) and change the carrier wording ie. vzw__001 or your carrier's wording (will be 8 spaces) to "SUPERCID" and save file. Use qpst and overwrite the nvm_htc with the supercid nvm_htc file.

4) flash with either helmiwm6 with verizon selected in all carrier spots or the stock vzw rom from http://www.utstar.com/pcd/Downloads/XV6700%20AKU3.zip. Please read bootloader note for helmi's wm6 and comply. Beware stock vzw rom will change bootloader so you cannot use helmiwm6 without having to downgrade bootloader if you ever wanted to go wm6 and stock vzw rom also requires supercid bootloader from step #3.

upload prl via ##prl and load off memory card or use active sync to add it to my docs then do ##prl to load it. After prl load dial a *228 option 1 after the esn change has been done on your account. Do a ##eri to update eri the same way as prl update from memory card or active sync on phone then load it off of phone from ##eri. PRL & ERI are attached to bottom of post.


5) edit data settings to vzw dial ##778 and enter your new msl of 000000

MIP Profile
Number of profiles: 6
Active user profile index: 0
MIP_MODE: Mobile IP Prefered
MIP Reg Retries: 2
MIP Reg Retry: 1750 ms
MIP Pre-Reg Timeout: 0
Mobile Node-HA: Enable
Send A Reg: Disable
Dormant Handoff Opt: Enable

MIP Default Profile
Enable Profile: Enable
NAI: mynumber@vzw3g.com (MDN@vzw3g.com)
MN HA SPI Set: Enable
MN HA SPI Value: 12C
MN AAA SPI Set: Enable
MN AAA SPI Value: 0 (may require a "2" here for 6800 and 6900)
Reverse Tunneling: Enable
Home Address: 0.0.0.0
HA Shared Secret:
AAA Shared Secret:
Primary HA Address: 255.255.255.255
Secondary HA Address: 255.255.255.255
DMU Pub Key: 10
MN Authenticator: 0

6) extract and upload a dmu key

Take a non activated vzw phone(not currently in use) and connect it to bitpim efs read and save the file in the dmu folder which should be 10.key to your desktop. Put 6700 in dm mode ##diag talk and load bitpim and load that dmu key into the dmu folder on the 6700. **UPDATE** added a dmu key a few post down so u guys that don't have any extra vzw phones can get on the network.

7) when you attempt a internet connection it will write your shared secret keys and if you followed this correctly data should be working.

THESE DATA SETTINGS WILL WORK ON OTHER CARRIERS 6800's and 6900's IF YOU CAN GET A TECH TO LOAD THE ESN OR WAIT FOR OPEN NETWORK LATER ON THIS YEAR. YOU STILL HAVE TO LOAD A VZW DMU KEY AS WELL. Open network will provide no tech support beyond voice and sms for non-native vzw phones.

Have you actually tried this method on a 6800/6900? Or is this just a theory.

[internationalistic]

I'm trying to use a Sprint Mogul on the Verizon Network. When i put it in Diag Mode and run se47.exe I get an error which reads, "Error in reading security". Has anyone else experienced this error? Any solutions?

[Getitnowmarketing]

never had an se47 error. Make sure it is diag mode and on com port 2 with com port 2 selected in se47. And yes I have done this on 3 alltel, 2 sprint, 2 qwest, 2 midwest wireless, and one bluegrass. Every last one was fully 100% working.

[Getitnowmarketing]

Originally Posted by drellisdee

Have you actually tried this method on a 6800/6900? Or is this just a theory.

I have an xv6800 and yes it worked on converting a bad esn sprint 6800 over to vzw which my brother is now using. The vzw dmu key is the secret to getting data live. I had to get tech support to load the sprint 6800 into the device database however. On the 6900 its just a theory but the phones are so similar it should work as well.

[internationalistic]

I have a sprint 6800 that i'm trying to convert to vzw. I put it in diag mode, Set the Qualcomm Diagnostics Interface Driver to COM2, started se47.exe, set it to COM2 and pressed connect. I still get the same error in reading security. I tried it on a vista computer and an XP and the result is the same. Did I miss something???

This worked for me on a Quest 6700 but not the Sprint 6800... Did you do something different than this to convert your Sprint 6800 to vzw?

UPDATE: The QPST route worked great! I still don't know why se47 didn't... I just followed the directions in this post: http://forum.ppcgeeks.com/showthread...hlight=ppc6800

Thanks Everyone....I've wanted to do this for a year!

[Getitnowmarketing]

You should be able to use getspc and qpst to get and break msl.

[klindoug]

drellisdee,

What do you say to the Verizon service person when you are trying to get them to add a bad Sprint ESN in their database? Do you usually get a lot of flack from them, or are they easy going? Please let me know. Thanks.

[Perplexer]

Originally Posted by heartisall

I am getting a country code error when I try to flash to the verizon rom, I changed the esn, prl, msl, SUPERCID. what should I do?

I'm getting the same. Trying to flash Sprint PPC-6700 with Verizon ROM. I've changed MSL and overwritten nvm_htc with the supercid version. With either Standard or NoID RUU, still getting Error 120: Country ID Error. Any ideas?

[Getitnowmarketing]

Originally Posted by klindoug

drellisdee,

What do you say to the Verizon service person when you are trying to get them to add a bad Sprint ESN in their database? Do you usually get a lot of flack from them, or are they easy going? Please let me know. Thanks.

Just tell them you have an altell 6700 that needs to be added to the esn/ device management database. Don't mention bad esn as they don't check and no need to raise any flags. It usually takes about 3-5 business days to get a device added in.