E5-00 RM-632 после даунгрейта - CMLA key Not exist

[Калюня]

Собственно - пришел на русежку, стояла 102.002, кдиент согласился на даунгрейт.
Сначала попытлся отделно пролить ППМ от 101.003 - Бест оветил, что это уже даунгрейт, и апарат умрет =), отказался, сделал бекап фулл ПМ, бекап сим лока, и бекап CRT.rpl
Далее полный ерайс, проливка версии 101.003, запуск в нормал мод, востановление NPC, потом рипейр SD, и SL, далее віборочная SX4

PA_SimLock Version : 
PA_SL3 phone ,  SP_CODE_LEN : 15

Done!

Local SX4 procedure started...

Check SD : Key is Ok
Phone Imei: 353277054526527
Use custom key...
Step 1...
Step 2...
Step 3...
SX4 Auth - Ok
Done!

Получил

-----------------------
SDD Key status : SDData is Ok
CMLA Key status : CMLA key Not exist
SimLock status : SimLock is Ok

Security status : Security Damaged!!!!! :(
 - > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )

-----------------------

Лог стирания, прошивки:

User ACCEPTED FULL ERASE
Dead Mode is Selected
Waiting for USB device...
--- Insert cable and charger or press phone's power button! ---
Connection opened successfully
Waiting for communication response...
BootRom : 1st boot ok
ASIC ID:       000000030000022600010007600C192102031104
CPU ID :       RAPU v11 , Features : Dead-Test , USBRPL , FullUSB
EM0 ID:        00001040
EM1 ID:        00001060
PUBLIC ID:     0D60021025495D4025B8DD17D2E565FC5C549768
ASIC MODE ID:  00
ROOT KEY HASH: 916F75217F32081248B15C38DFC8E81B
ROM ID:        E693EF0DAC22615B
Use RAPUv11_2nd.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing RAWLOADER...
FLIC : 00500020
Req : XSR 1.6
Use RAPUv11_XSR17_alg.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing PASUBTOC ...
Processing ALG ...
Boot Done! :)
TIME : Boot time : 00:00:02 

- > Backup check skipped by user

Reopening the connection...
Waiting for response: 30
ADL: Check mode
Select ASIC [C900]
PAPUBkeys : CCD9F80559BA50D9B3E274F9E7120BE1EE4EEA7C

Reading NPC certificate...
IMEI : 000000000000000
Reading CCC certificate...
Reading HWC certificate...
Reading R&D certificate...
Reading VARIANT certificate...
Reading PARTNERC certificate...
Reading MDM_KEYS certificate...

ADL: Preparing for erase...

Full Erase started...
Asic : CMT , Sub : NAND
Erase Area 0x00000000-0x1FFFFFFF
Erasing Ok , [0F]
Erase done , time : 00:00:07 

ADL: Erase done

Selected FlashSettings : Manual
Check FlashFiles, Please, wait...

Files Set for Flashing :
MCU : rm632_101.003_prd.core.fpsx
PPM : rm632_101.003_20.01_Russian_QW1_prd.rofs2.fpsx
PPM2 : rm632_101.003_C00.01_DEFAULT_prd.rofs3.fpsx
CNT : rm632_101.003_U003.000_prd.uda.fpsx
Flashing phone now...
Check files done...
-> SWversion check skipped : Dead mode selected
Dead Mode is Selected
Waiting for USB device...
--- Insert cable and charger or press phone's power button! ---
Connection opened successfully
Waiting for communication response...
BootRom : 1st boot ok
ASIC ID:       000000030000022600010007600C192102031104
CPU ID :       RAPU v11 , Features : Dead-Test , USBRPL , FullUSB
EM0 ID:        00001040
EM1 ID:        00001060
PUBLIC ID:     0D60021025495D4025B8DD17D2E565FC5C549768
ASIC MODE ID:  00
ROOT KEY HASH: 916F75217F32081248B15C38DFC8E81B
ROM ID:        E693EF0DAC22615B
Use RAPUv11_2nd.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing RAWLOADER...
FLIC : 00500020
Req : XSR 1.6
Use RAPUv11_XSR17_alg.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing PASUBTOC ...
Processing ALG ...
Boot Done! :)
TIME : Boot time : 00:00:02 
Reopening the connection...
Waiting for response: 30
ADL: Check mode
Select ASIC [C900]
PAPUBkeys : blank (Erased or HW failure)
ADL: phone is in flash mode

 === SW Version Check === 
- > Can not collect initial info, continue flashing...
- > Hope, this version will be ok
 === SW Version Check === 

   ===Flashing [MCU]===
Erase : Processing rm632_101.003_prd.core.fpsx
Partitioning....
Partitioning Ok...
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:02 
Write : Processing rm632_101.003_prd.core.fpsx
CMT: Writing Hash CERT [ADA]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [RAP3NAND]
CMT: Writing Hash CERT [SOS+PMML]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
CMT: Writing Hash CERT [GENIO_INIT]
CMT: Writing Hash CERT [SOS*UPDAPP]
CMT: Writing Hash CERT [SOS*DSP0]
CMT: Writing Hash CERT [LDSP]
CMT: Writing Hash CERT [SOS*ISASW]
CMT: Writing Hash CERT [SOS+CORE]
CMT: Writing Hash CERT [SOS+ROFS1]
Total writen 433 blocks
TIME : Write time : 00:00:15 
MCU Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [PPM]===
Erase : Processing rm632_101.003_20.01_Russian_QW1_prd.rofs2.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:00 
Write : Processing rm632_101.003_20.01_Russian_QW1_prd.rofs2.fpsx
CMT: Writing Hash CERT [SOS+ROFS2]
Total writen 223 blocks
TIME : Write time : 00:00:08 
PPM Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [PPM2]===
Erase : Processing rm632_101.003_C00.01_DEFAULT_prd.rofs3.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:00 
Write : Processing rm632_101.003_C00.01_DEFAULT_prd.rofs3.fpsx
CMT: Writing Hash CERT [SOS+ROFS3]
Total writen 35 blocks
TIME : Write time : 00:00:01 
PPM Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [CNT]===
Erase : Processing rm632_101.003_U003.000_prd.uda.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:02 
Write : Processing rm632_101.003_U003.000_prd.uda.fpsx
Total writen 97 blocks
TIME : Write time : 00:00:05 
CNT Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

ADL: Close_Session
Content: 0003000000001C0000001C00000000
ADL: Reboot

Flashing done!
Total flash time : 00:00:36
Reboot phone now...

Afterflash not selected, skip
Done!

Phone disconected!

Connect phone on selected interface...

Elapsed: 00:00:55

Возможно ли востановить апарат, без заводского РПЛЬ ?

Вот бекапЫ

[kiv6666]

ATF нужен что бы CMLA востановить

[Калюня]

Это уже хорошая новость что АТФ мне может помочь.
Почитал по форумах, на момет написания постов еще ни один программатор CMLA не востанавливал.

Прошивка ENO, в моем случае бесполезна ?

[kiv6666]

прошей на более раннею прошивку

[Калюня]

ПРошил версию ниже, 042.007, ошибка CMLA, осталась, авторизацию пока пройти не могу, локала нет ...


Лог операции:

card found: S/N 2695:0122
registered to: Николай

Connect phone on selected interface...

Core : v1.61 , BB5XG FlashEngine : v4.0

Selected FlashSettings : Manual
Check FlashFiles, Please, wait...

Files Set for Flashing :
MCU : rm632_042.007_prd.core.fpsx
PPM : rm632_042.007_20.01_Russian_QW1_prd.rofs2.fpsx
PPM2 : rm632_042.007_C00.01_DEFAULT_prd.rofs3.fpsx
CNT : rm632_042.007_U003.000_prd.uda.fpsx
Flashing phone now...
Check files done...
-> SWversion check skipped : Dead mode selected
Dead Mode is Selected
Waiting for USB device...
--- Insert cable and charger or press phone's power button! ---
Connection opened successfully
Waiting for communication response...
BootRom : 1st boot ok
ASIC ID:       000000030000022600010007600C192102031104
CPU ID :       RAPU v11 , Features : Dead-Test , USBRPL , FullUSB
EM0 ID:        00001040
EM1 ID:        00001060
PUBLIC ID:     0D60021025495D4025B8DD17D2E565FC5C549768
ASIC MODE ID:  00
ROOT KEY HASH: 916F75217F32081248B15C38DFC8E81B
ROM ID:        E693EF0DAC22615B
Use RAPUv11_2nd.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing RAWLOADER...
FLIC : 00500020
Req : XSR 1.6
Use RAPUv11_XSR17_alg.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing PASUBTOC ...
Processing ALG ...
Boot Done! :)
TIME : Boot time : 00:00:02 
Reopening the connection...
Waiting for response: 30
ADL: Check mode
Select ASIC [C900]
PAPUBkeys : blank (Erased or HW failure)
ADL: phone is in flash mode

 === SW Version Check === 
- > Can not collect initial info, continue flashing...
- > Hope, this version will be ok
 === SW Version Check === 

   ===Flashing [MCU]===
Erase : Processing rm632_042.007_prd.core.fpsx
Partitioning....
Partitioning Ok...
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:02 
Write : Processing rm632_042.007_prd.core.fpsx
CMT: Writing Hash CERT [ADA]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [RAP3NAND]
CMT: Writing Hash CERT [SOS+PMML]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
CMT: Writing Hash CERT [GENIO_INIT]
CMT: Writing Hash CERT [SOS*UPDAPP]
CMT: Writing Hash CERT [SOS*DSP0]
CMT: Writing Hash CERT [LDSP]
CMT: Writing Hash CERT [SOS*ISASW]
CMT: Writing Hash CERT [SOS+CORE]
CMT: Writing Hash CERT [SOS+ROFS1]
Total writen 424 blocks
TIME : Write time : 00:00:15 
MCU Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [PPM]===
Erase : Processing rm632_042.007_20.01_Russian_QW1_prd.rofs2.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:00 
Write : Processing rm632_042.007_20.01_Russian_QW1_prd.rofs2.fpsx
CMT: Writing Hash CERT [SOS+ROFS2]
Total writen 242 blocks
TIME : Write time : 00:00:09 
PPM Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [PPM2]===
Erase : Processing rm632_042.007_C00.01_DEFAULT_prd.rofs3.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:00 
Write : Processing rm632_042.007_C00.01_DEFAULT_prd.rofs3.fpsx
CMT: Writing Hash CERT [SOS+ROFS3]
Total writen 32 blocks
TIME : Write time : 00:00:01 
PPM Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [CNT]===
Erase : Processing rm632_042.007_U003.000_prd.uda.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:02 
Write : Processing rm632_042.007_U003.000_prd.uda.fpsx
Total writen 83 blocks
TIME : Write time : 00:00:05 
CNT Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

ADL: Close_Session
Content: 0003000000001C0000001C00000000
ADL: Reboot

Flashing done!
Total flash time : 00:00:37
Reboot phone now...

 - > AfterFlash Failed! :( Reason : Downgrade try or HW Error
     Anyway - try reinsert battery and PowerUp phone manualy

Connect phone on selected interface...

Done!

Elapsed: 00:02:47
Connect phone on selected interface...

***************************************************************

Will Write RPL keys now...
Check RPL file...
NPC Data found! (CMT)
CCC Data found! (CMT)
HWC Data found! (CMT)
SimLock Data found!
SimLock key found!
WMDRM key found!
Dead Mode is Selected

***************************************************************

Local SX4 procedure started...

Check SD : Key is Ok
Phone Imei: 353277054526527
Use custom key...
Step 1...
Step 2...
SX4 Auth fail...
 - > "Custom Keys" disabled, try again now
 - > If SDD original - "Use Server Sx4"

***************************************************************


Waiting for USB device...
--- Insert cable and charger or press phone's power button! ---
Connection opened successfully
Waiting for communication response...
BootRom : 1st boot ok
ASIC ID:       000000030000022600010007600C192102031104
CPU ID :       RAPU v11 , Features : Dead-Test , USBRPL , FullUSB
EM0 ID:        00001040
EM1 ID:        00001060
PUBLIC ID:     0D60021025495D4025B8DD17D2E565FC5C549768
ASIC MODE ID:  00
ROOT KEY HASH: 916F75217F32081248B15C38DFC8E81B
ROM ID:        E693EF0DAC22615B
Use RAPUv11_2nd.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing RAWLOADER...
FLIC : 00500020
Req : XSR 1.6
Use RAPUv11_XSR17_alg.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing PASUBTOC ...
Processing ALG ...
Boot Done! :)
TIME : Boot time : 00:00:03 
Reopening the connection...
Waiting for response: 30
ADL: Check mode
Select ASIC [C900]
PAPUBkeys : CCD9F80559BA50D9B3E274F9E7120BE1EE4EEA7C
ADL: Preparing for write certificates...

Erase NPC... Ok
Writing NPC... Ok

ADL: Writing Flash certs done! :)

ADL: Close_Session
Content: 0003000000001C0000001C00000000
ADL: Reboot

-> No any Flex keys selected, skip flex part

Done!

*************************************************************

Will Write RPL keys now...
Check RPL file...
SimLock Data found!
SimLock key found!
No any FLASH keys detected, Skip FLASH part

Writing SimLock Key...   Ok!
Writing SimLock Data...  Ok!

SDD Key status : SDData Damaged!!!!! :(
SimLock status : SimLock is Ok
Security status : Security Damaged!!!!! :(


Done!


***********************************************************
-----------------------

SDD Key status : SDData Damaged!!!!! :(
 - > Do REPAIR SDD , Local SX4 if needed 

CMLA Key status : read data error
SimLock status : SimLock is Ok

Security status : Security Damaged!!!!! :(
 - > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )

-----------------------


***********************************************************


Repair SD procedure started...

Phone Imei: 353277054526527
Key file exists, no need to read...
Check phone mode...
Phone in Error mode
Seting Test mode... wait...
Test mode set
Writing Super Dongle Key...   Ok
Done!

**************************************************************************

Connect phone on selected interface...

Phone found!
Series 60 Device detected!
read info...  - Ok

Checking StartUp data ...
-----------------------
SDD Key status : SDData is Ok
CMLA Key status : read data error
SimLock status : SimLock is Ok

Security status : Security Damaged!!!!! :(
 - > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )

-----------------------

PA_SimLock Version : 
PA_SL3 phone ,  SP_CODE_LEN : 15

Done!

*******************************************************************************

[kiv6666]

вот тут поможет ENO а CMLA на этой версии и не нужен. Судя по логу локал есть

[Калюня]

Все удалось пройти выборчную авторизацию, но суть это не поменяло :

Phone found!
Series 60 Device detected!
read info...  - Ok

Local SX4 procedure started...

Check SD : Key is Ok
Phone Imei: 353277054526527
Use custom key...
Step 1...
Step 2...
Step 3...
SX4 Auth - Ok
Done!

Checking StartUp data ...
-----------------------
SDD Key status : SDData is Ok
CMLA Key status : CMLA key Not exist
SimLock status : SimLock is Ok

Security status : Security Damaged!!!!! :(
 - > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )

-----------------------

PA_SimLock Version : 
PA_SL3 phone ,  SP_CODE_LEN : 15

Done!

Вот такой вопрос, как пролить ENO криптованый под бест им-же ?
Ставил и вместо МЦУ и ППМ и ЦНТ - программа ругается на не корректный тип файла, хотя качал специально под бест ...

Connect phone on selected interface...

Core : v1.61 , BB5XG FlashEngine : v4.0

Selected FlashSettings : Manual
FlashFile verify disabled

Files Set for Flashing :
MCU : E5_ENO_WK2012_v034.fpx_cry
Flashing phone now...
Check files done...
-> SWversion check skipped : Dead mode selected
Dead Mode is Selected
Waiting for USB device...
--- Insert cable and charger or press phone's power button! ---
Connection opened successfully
Waiting for communication response...
BootRom : 1st boot ok
ASIC ID:       000000030000022600010007600C192102031104
CPU ID :       RAPU v11 , Features : Dead-Test , USBRPL , FullUSB
EM0 ID:        00001040
EM1 ID:        00001060
PUBLIC ID:     0D60021025495D4025B8DD17D2E565FC5C549768
ASIC MODE ID:  00
ROOT KEY HASH: 916F75217F32081248B15C38DFC8E81B
ROM ID:        E693EF0DAC22615B
Use RAPUv11_2nd.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing RAWLOADER...
FLIC : 00500020
Req : XSR 1.6
Use RAPUv11_XSR17_alg.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing PASUBTOC ...
Processing ALG ...
Boot Done! :)
TIME : Boot time : 00:00:02 
Reopening the connection...
Waiting for response: 30
ADL: Check mode
Select ASIC [C900]
PAPUBkeys : CCD9F80559BA50D9B3E274F9E7120BE1EE4EEA7C
ADL: phone is in flash mode

   ===Flashing [MCU]===
Erase : Processing E5_ENO_WK2012_v034.fpx_cry
Checking flash content , please wait...
Checking flash done
Error: Erase/Write : Bad image file
Connect phone on selected interface...


Elapsed: 00:00:30
Connect phone on selected interface...

[kiv6666]

если есть локал то ENO не нужен. Тебе надо востановить секьюрити.Делай то что пишит BEST
Security status : Security Damaged!!!!! - > Do Local SX4 or Server SX4 , Upload Tune

[Калюня]

Локально не делает по сути авторизацию, на этом апарате а серваки у беста лежат =(


Свршилось, пришел после прогулки, опять попробовал Локальную авторизацию - прошла, как дети в школу!!!!!!!!!!!

Local SX4 procedure started...

Check SD : Key is Ok
Phone Imei: 353277054526527
Use custom key...
Step 1...
Step 2...
Step 3...
SX4 Auth - Ok
Upload PM checked
Uploading RF/Battery tune to phone...
Using : RM-632.pm
Check phone mode...
Phone in SelftestFail mode
Seting Local mode... wait...
Local mode set


Check ST_SECURITY now...
Security status : ST_SECURITY => OK

Done!

Elapsed: 00:00:11

Upload done

Checking StartUp data ...
-----------------------
SDD Key status : SDData is Ok
CMLA Key status : CMLA key Not exist
SimLock status : SimLock is Ok
Security status : Security is Ok
-----------------------

PA_SimLock Version : 
PA_SL3 phone ,  SP_CODE_LEN : 15

Done!

Спасибо большое !