Telecom NZ - Upgrade Issues (and fixs)

ginnie · #1 (**permalink**) 05-29-2008, 07:21 PM

Has anybody tried to flash the original ROM, it won't go back to the old radio so may not work.

Apparently the HDR password is generated from the AKEY and ESN, it is the first 14 (or perhaps 16) digits of the md5sum of the hex ESN followed by the hex AKEY. The only problem is we can't find the AKEY, it is shown as blank on the EPST screen but is actually stored in the device in an unreadable part of nvram. I have tried lots of things to read the AKEY (qpst, qxdm, cdmaworkshop, supercid.. etc.) but got nowhere. Any ideas?

ColdKiwi · #2 (**permalink**) 06-02-2008, 11:59 PM

Hey,

Another TCNZ user here, I have the exact same problem, a Firmware / Radio upgrade wiped out the HDR AN AUTH Password(Long) on my HTC Titan.

It also wiped out my MDN and NMSI, but I fixed that by calling TCNZ Business.

I'm now awaiting a call back from a "mobile data specialist" this afternoon; who I'm sure wont be able to help me.

I'm loving DCD's Win Mob 6.1 Kitchen ROM, but no data kinda defeats the purpose of the device.

Anyway I’ll let you know the results.

phillfone · #3 (**permalink**) 08-04-2008, 02:52 AM

Quote:

Originally Posted by ColdKiwi

Hey,

Another TCNZ user here, I have the exact same problem, a Firmware / Radio upgrade wiped out the HDR AN AUTH Password(Long) on my HTC Titan.

It also wiped out my MDN and NMSI, but I fixed that by calling TCNZ Business.

I'm now awaiting a call back from a "mobile data specialist" this afternoon; who I'm sure wont be able to help me.

I'm loving DCD's Win Mob 6.1 Kitchen ROM, but no data kinda defeats the purpose of the device.

Anyway I’ll let you know the results.

Hi I am in the same boat got the phone up and going but no EVDO only 1X I have dropped it into Leading edge and asked if they can get the evdo fixed, I haven't told them of my upgrades so I'll wait and see what happens, wether they will re flash it with wm 5.0 or just update my passwords?

njakobs · #4 (**permalink**) 06-03-2008, 01:17 AM

Quote:

Originally Posted by ginnie

Has anybody tried to flash the original ROM, it won't go back to the old radio so may not work.

Apparently the HDR password is generated from the AKEY and ESN, it is the first 14 (or perhaps 16) digits of the md5sum of the hex ESN followed by the hex AKEY. The only problem is we can't find the AKEY, it is shown as blank on the EPST screen but is actually stored in the device in an unreadable part of nvram. I have tried lots of things to read the AKEY (qpst, qxdm, cdmaworkshop, supercid.. etc.) but got nowhere. Any ideas?

Hey ginnie what version of CDMA Workshop did you try?

After reading this http://forum.xda-developers.com/show...50#post1986950 are you sure that we have an Akey?

cogent · #5 (**permalink**) 06-04-2008, 06:52 PM

Yet another kiwi with a touch with no ev-do. ev-doh, you might say. ahurr.

Have been watching this thread, any one have any updates on this?

Cheers!

cogent · #6 (**permalink**) 06-04-2008, 07:29 PM

Also to add:
I have taken the hex of my ESN and put it into this site to generate an MD5sum from it
http://md5-hash-online.waraxe.us/

I used my ESN@evdo.jamamobile.co.nz for the HDR Auth U/N
and the first 16 chars from the MD5 generated as the P/W with no luck.
This is using a MD5 generated from my ESN with letters capitalized and non-caps also.

you can gen a MD5 with no data also, as we have no a-key, I wonder if you use the details from a MD5 generated from no data for the a-key part.

up2no6ood · #7 (**permalink**) 06-05-2008, 08:10 AM

It seems as if getspc dosnt work on the leaked rom. I know I cant get it to work. Anybody else having this problem?

Damager · #8 (**permalink**) 08-17-2008, 06:31 AM

Quote:

Originally Posted by cogent

Also to add:
I have taken the hex of my ESN and put it into this site to generate an MD5sum from it
http://md5-hash-online.waraxe.us/

I used my ESN@evdo.jamamobile.co.nz for the HDR Auth U/N
and the first 16 chars from the MD5 generated as the P/W with no luck.
This is using a MD5 generated from my ESN with letters capitalized and non-caps also.

you can gen a MD5 with no data also, as we have no a-key, I wonder if you use the details from a MD5 generated from no data for the a-key part.

Would someone like to check their hdr password on their touch/titan and see how it compares with the result from entering their esn into the generator? i tried entering my esn into it and taking the first 16 digits.. no go.

deepsouthster · #9 (**permalink**) 08-20-2008, 06:21 AM

Damager,

I tried what you asked with my ESN - tried HEX and DEC - From an Okta Touch. No match to the NDR on the device.
I have a Titan that I copied the EPST from, but missed the HDR AUTh, and I'm in the same boat.
I actually found the QUALCOM HDR algo on the net, but can't see anyway around how this is calculated, as it states peices that can't be obtained.

If I could re-flash a WM5 Titan I would be so much better off with the knowledge I have gained.

PS: Did this for an Apache last year, and this issue never reared its head!
Apache with WM6 is great bar the fact you can't do GPS nor REV-a due to the chipset.