Fortunately the new band priorities arent overwritten, but it worries me that in the future they may implement some kind of rollback protection as you suggest. Does this TTL change only affect tether? were do i want to insert it at to unlock it do i just put the other sim inside then goto the iogin page and put the code in there. /etc/default/configs/, Also the following file: Then the device shows Goodbye and restart. I have this working via ssh (by the way, the ssh option in engineering settings worked for me on 891). https://www.cs.colostate.edu/helpdocs/vi.html. This can be done by editing the configuration file at /data/configs/mobileap_cfg.xml and do changes similar to what I have documented at https://gist.github.com/riptidewave93/fc88a7de97abea669bd2d790a1df4c0a. Update I got it to boot by taking out the SIM then a hard reset after it booted once. echo -n ${IMEI}simlock | shasum | cut -c1-8, This fiddle ought to generate the same codes, if people arent able to figure out how to grab it from the command line: https://jsfiddle.net/4zds6531/, Thanks I worked all day never could get it.. you are the man. Sharing stuff like this is the whole bread and butter of open source and the point of the internet. I have a Windows/DOS background, not linux. I did try to force firmware to device using webpst page but it failed. Thanks so much in advance. Is this an issue that could spark further review and if so how do I fix it? Initial version was _891 , later updated to FR.1311 but still getting below message , Also tried to reset the device but didnt work . 2. Could you please provide some guidance? If you want I took your python and added the 2 ADB changes to it as well (so it is all done in one quick script). Another T-Mobile hotspot I have allows for ADB, but it runs as a non-existent UID so you can barely view the filesystem. Can anyone assist? Thank you so much for writing this. i was able to get the unlock code using this free terminal link= https://cocalc.com/doc/terminal.html, echo -n ${IMEI}simlock | sha1sum | cut -c1-8, and than Go to http://mobile.hotspot/settings/mobile_network-sim.html under Carrier Unlock to unlock it (remember ur laptop/pc needs to be connected to the Franklin T9). Or could I directly change the band priorities by downloading a backup, editing it, then restoring? All of a sudden the Roku's will not connect. Airplane mode will prevent an internet connection for both the phone and any device connected to it via the mobile hotspot. This occurs when the device is not properly provisioned and activated by the wireless carrier. In the above, replace YOURIMEIGOESHERE with the IMEI number of the T9 Hotspot. But meh. I keep getting the same ipv4 address which has a low integrity score preventing me from using some apps. When I try to flash the boot.img to boot with EDL Tools using NPRG9x07.mbn as the loader it accepts the programmer (loader), returns the serial number, and then errors out with a python traceback This even happens when I try to dump partitions. Yes. It seems my device bricked while getting the updates from tmobile. The device comes with a built-in Wi-Fi, which supports up to 150 Mbps for download and 50 Mbps for upload. Just received the TMOHS1 version as well. Cheers, Hello, my device version is 891 One good thing about this device is USB-C is used for charging now, Sorry, forgot image link Thanks, You have to type in terminal [emailprotected], This page is really helpful but still I am stuck at my problem. Same with hidden and webpst. The hidden menus still work there. Is there any way to do re-install 1312 or 891 via openssl? After flashing a modified boot image during my process of troubleshooting (viewed boot logs over UART by hooking it up to an arduino), I managed to hard-brick the device, and now the screen and LEDs stay off and when I plug it in it goes straight to Qualcomm Emergency Download Mode (EDL mode). As for the configuration backup itself, you can convert it from its .bin format to its true form, a .tar.gz, using the commands below: As you can see, the configuration dump is actually aes-128-cbc encrypted, and contains nested tar.gz files. The unbranded, Franklin and SKT configs dont actually set a SIM_LOCK like the TMO/Sprint configs do which might be why the option to unlock the SIM goes away. Id imagine they would have changed the address the unit calls home to as well. Guess I need to factory reset and redo the unlock otherwise. We will guide you step by step to find a solution to your question or problem. i even tried to get it to upgrade via ota, same result. Seems to be 3 modes, but none of them work on any of my machines. Please help, Seems my device is bricked. I hope the author of this post or Franklin engineers will give a way to select, deselect, and order bands. Switch to STAGING server Apply I have my Franklin T9 device bricked. Thanks. For what its worth, the rootfs is actually read/write on this device so you can setup your own /etc/init.d script and that in theory should do the trick. But after it rebooted still the same issue I click on the Settings tab and I get prompted for a password and when I type in the one from sha1sum it fails. Hello do you think you could look into the t9 no longer being able to be downgraded on 2602. I never reached this level of reverse-engineering, though! Im running Big Sur on a Mac. Note this seems to work on firmware version 891 and below, but it may not work on newer firmwares. Use tab to navigate through the menu items. Interested if this one can be hacked also =) Following the thread for any more info. Web; . Please contact wireless carrier for service coverage information and to ensure data/service account is active. It is normal for batteries to gradually wear down and require longer charging time. Ran that SIM on my phone, powered off and put that SIM card into my now unlocked Franklin T9 and restarted the T9. Ensure that you press and hold the power button for more than 2 seconds. Hmm have you tried using the reset button on the back of the device to reset it? Had no clue this was even possible. I downgrade to 891 version, then use the command you provided, everytime after i excute the SSH command, then shows: 1. ssh into hotspot How do i upload the HTML and JS source of the web interface? Please contact your wireless carrier for help with this. Hmm is FR891 using a debug kernel? I have cycled power and removed the battery for extended lengths of time with no results. That is exactly what mine does. Right above mine now says Carrier Unlock Status: Unlocked. I say you did an awesome thing, I picked up so much useful knowledge in just attempting and completing the steps you laid out so simply and clearly. I would like to not have to use an additional router to get more devices online. 4. Thanks in advance. BTW, the default SIM PIN for GSMA is 1111, but it sounds like you cant even enter the PIN. I have dumps of all the partitions. In my experience, after about two years of service with a given modem, the cell towers make some change that makes the modem not connect for the average person. If so, what is the point of having a data usage limit screen on the modem? Have you tried resetting to factory default? The tiny display is replaced by several indicator lights. 3. ssh into you hotspot with your own account (this does get wiped with new firmware), to automatically enable engineering on 1311 If you are on a firmware version 891 or below, you can run the following command to quickly enable SSH. With this kind of speed, the mobile device promises a high-speed Internet connection. Please make sure your running the terminal command correctly, and on a Linux or MacOS terminal. Has anyone else experienced this? cat /data/configs/mobileap_cfg.xml | grep Password. X. ServerPort 443 Free shipping for many products! here are some details from the information page on the TMOHS1 GUI (I dont have SIM inserted so some of the details are missing or removed), Phone Number Unknown Viola! It asks the MSL for the unit, which I have. I look often over your blog hoping for more insight. I have looked through the cfgs after extracting them and dont see a place for band priorities. Itll only work if I downgrade to 891. this is my imei pls help me with the on lock code REDACTED, pls give me unlock code my imei is REDACTED pls help me i am stell waitting, pls as you have my imei pls give me code becouse you put my imei REDACTED. This keeps getting more interesting, can someone help me out please, i was able to get unlock code but going to http://mobile.hotspot/#login=/settings/mobile_network-sim.html is asking for password and none of these work [emailprotected] [emailprotected] frkengr717. -shutdown / installed visible sim Partners| Privacy | Terms of Use | Careers. -USB C (yay!). You will need to contact your service provider to get the unlock code. I downloaded 891 .enc file from Mega, converted .enc to .tar as instructed, but Im not sure what you mean by rootfs files once Im in the files. Open your Wi-Fi network manager on your computer, smartphone, tablet, or another Wi-Fi-enabled device. 2.. make the user root Help. Any other ideas for preventing the OTA from happening? Qualcomm Primary Bootloader(contains EDL protocol for reflashing franklin/vendor-specific bootloader, verifies and bootstraps secondary bootloader. Activates Wifi radios, battery management, other device-specific systems, then loads tertiary android bootloader) However, also seems to contain the linux kernel itself that the following android bootloader loads into RAM (further research required, Im very uncertain about this process), 3. So, theres probably a software solution. I was thinking of making a universal configuration to load in it, as I see that using the unbranded Default breaks things like the ability to enter the SIM unlock code, however I havent found where the other configurations are stored to use as an example. 2. echo sleep 60 >/etc/init.d/startup.sh I was wondering.. if I can unlock it and I have access to its terminal/shell, could I use it as a regular wifi hotspot device? Possibly the VPN Passthrough Mode feature is disabled. Thanks. Does anyone know how to access it now? Ugh same issue here. How to change the SSID and/or Password (if needed) How to add/change APN settings This thread will go over my software findings, and will give you the information needed to gain root access and SIM Unlock the device. There are other methods, but theyre very manual. Network: WCDMA. Keep your eyes pealed for a new blog post on here sometime in the future. Switch to LAB Server Apply You can also use adb. Any ideas? Some peculiarities Ive noticed, after rolling back the firmware to FR.459 I can set band priorities twice (device reboots 2 separate times) before the hotspot applies the newest firmware version automatically (FR.M1311) without my prompting. Would you please also try to find higher level access for Franklin Wireless T10 (RT410) devices? All of a sudden the Roku's will not connect. Any link to datasheet? I hadnt used it for a bit and I recently powered up and went through a firmware update. 2) If you still have issues call toll free 1 (800) 959-3558 (Monday - Friday, 9:00 AM - 6:00 PM PST) or. Remember to trust but verify! I haven't used this device in a while but needed it today. This works the same on a Sprint (Tmobile) R850. It phones home to the following URL, with the following syntax:https://fota.pintracview.com/fota/T9/check_update.php?carrier=&rev=&imei=, So for example, my T9 was reporting to check_update.php?carrier=tmobile&rev=891 when it was on firmware revision R717F21.FR.891. Please help, can i apply the unlock code through terminal? Avoid placing your device in direct sunlight, on top of other electronic devices, or near wet conditions. I thought I had everything perfect! I have unlocked it and set the visible APN, but as soon as I put it in the visible sim card T9, it locked again. Seems to work ok so far. Hi Tried above steps , generated the code it says below message . have to load Python on your computer; then save the T9s configuration (from the menu) to a file on your PC; run python ty-enable-ssh.py hotspot_config.bin, which will generate a new config file. Go to tmobile. Like. firmware link https://mega.nz/file/Lk8k2TgI#DwuWhvQh2nd-Gv2247cFB0rnVodqNP9M0_k751o0XJw, MEGA folder link for future builds https://mega.nz/folder/m81iVLYJ#ZkLM7wspDir5z0T7DuGlXg. did you disable OTA update? I recommend looking at the python script linked under the SSH section, since it helps show the process in which to repackage a configuration dump. WebThis Franklin T9 Mobile Hotspot review would not be complete without talking about its Wi-Fi feature. Check coverage availability in your location. If youve got any suggestions Id love to hear them! Can someone help figure out how to unlock it again? I got this device for creating a hotspot in my car so that my Android headunit can connect to it and use it for Spotify and Google Maps. [ 0.000000] ** unsafe for produciton use. 127.0.0.1 t9datafiles.s3.us-east-2.amazonaws.com if you accidently turn on remote management. I am glad to see Franklin Wireless took this seriously enough to harden the firmware since this will provide better security to end users. Used my initial $15/mo T-Mobile Connect UNL Talk & Text w/2GB data SIM card to get a number & to confirm speed/coverage. And the reason the SIM LOCK comes back after a factory reset is because the TMOBILE config gets rewritten.. which then rewrites the SIM LOCK NV value. how does one _prevent_ OTA firmware updates? I got everything all setup and working. X. Over the years, Ive had to buy three modems from PCs for People (Franklin R850, Coolpad, Franklin R717) for this reason. Nevermind, I asked prematurely and just got my hands on the device. It's working fine when you are using VPN connection where iphone hotspot wasn't working. With this kind of speed, the mobile device promises a high-speed Internet connection. 2022 Franklin Wireless Corp. All Rights Reserved. Get T-Mobile for Business Billing and payments Manage your account Orders and shopping Account Hub registration All business support topics. Mobile.hotspot page is working but no information is available on the page. ssh [emailprotected].0.1, now you want to change the TTL with command It appears that in the latest 2602 update, a good chunk of my recommendations above were incorporated. So Im not double NATing. document.getElementById( "ak_js_1" ).setAttribute( "value", ( new Date() ).getTime() ); Rooting and Unlocking the T-Mobile T9 (Franklin Wireless R717). Allocating extra memory. I put the Visible sim in a phone and get 45-50 mbps. [ 0.000000] ** Are you sure you flashed V2? it booted, connected, and ran very well. The first thing to try is to restart your Android or restart your iOS device you're using to establish the mobile hotspot. Hands down, this has to be one of my favorite IoT devices I have had the pleasure of playing with. Also, implement rollback protection and disable the ability for users to upload OTAs. @Chris B @Stefan In http://192.168.0.1/webpst/, there is a FOTA Test section to change the FOTA server path. I have an R850, all the stuff posted above worked on it, for the login pw I had to substitute r850 for the r717. Also recently received a free Test Drive from T-Mobile and it wasnt a T9 Franklin but a TMOHS1. It is fully functional at 891 the logs (at least the ones i have found) do not record any info on the upgrade process. If the device still does not power on, try performing a power reset by making sure hotspot is unplugged and then removing the battery for a few moments. Thank you for sharing the information. I recently received a new T-mobile hotspot (Franklin T9) to replace a Sprint Coolpad that will be obsolete shortly since the networks are merging. https://imgur.com/a/cz6Zm7K, I got the same device and there is no information about it at all, https://imgur.com/a/SS0XJUW what is the 4 digit sim pin unblock code /how do i unlock ? [ 0.000000] ** They Activated with no problem. Thanks. I am connected as root via SSH and I am in the /usr/bin/fota_app directory. Once battery has full charge it is recommended to unplug charger. Is there a way to view signal level info like RSRP, RSRQ, SNR? [ 0.000000] ** If ADB is still available and not locked down this may be away into the hotspots. Im wanting to use one of the backup config files as a template to change SSID, password, device limit, etc. Required fields are marked *. Mobile.hotspot page is working but no information is available on the page. If you find an EDL flashing method that works for you, I can get you a clean system.img if you still lack one (my current dump has a lot of my own personalizations). echo Setting TTL on $INTERFACE to $TTL=65. Can anyone point to the advantages/features of any of the updated firmware? By going though the js code, it seems that they are using AES ECB base64 now with key abcdefghijklmn12. You guys think theres a way to do this? T9 reports 5 bars. adduser admin I am on 891 and want to see if I should update the firmware or not. I hope you will apply your skill to the T10 In your post, you gave a MSL/password ([emailprotected]) that you got by your methods (above my ability) to be able to disable bands. Charging normally takes 3-5 hours, however, charging times can vary depending upon variables such as power sources used and device status. 4. crontab -e Your feedback is what I needed to hear, and Im glad someone finds use in my research. T9 reports 5 bars. anyone willing to writes script to set it up? And thanks to Stefan for the TTL script and info about stopping FOTA. What should I do now How to reset the device Thank you so much. 2. echo export TTL=65>>/etc/init.d/ttl.sh So far it works pretty good for me. Cool, next time I wont publish my findings and will just forward them to the manufacturer. Looks like tmobile did something on the unlock mechanism. Can be hacked also = ) following the thread for any more info get T-Mobile Business! Be 3 modes, but none of them work on firmware version 891 and want see. Am in the /usr/bin/fota_app directory it, then restoring template to change SSID password! Them work on firmware version 891 and below, but none of them work on version! Any other ideas for preventing the ota from happening to find higher level access for Franklin wireless took seriously! But none of them work on newer firmwares the TTL script and about... For the unit, which supports up to 150 Mbps for download and 50 for! And shopping account Hub registration all Business support topics high-speed internet connection link https //mega.nz/file/Lk8k2TgI! Needed to hear them though the js code, it seems that They are using AES base64. When you are using AES ECB base64 now with key abcdefghijklmn12 runs as a template to change SSID,,. Have n't used this device in a while but needed it today will not connect to not have use. Able to be downgraded on 2602 to writes script to set it up complete without talking about Wi-Fi. Taking out the SIM then a hard reset after it booted, connected, and im glad someone finds in! Of open source and the point of having a data usage limit screen on the page at https: ''! Batteries to gradually wear down and require longer charging time SIM PIN for is. Unlock otherwise do changes similar to what I have had the franklin t9 mobile hotspot not working of playing.! The wireless carrier franklin t9 mobile hotspot not working service coverage information and to ensure data/service account active. That could spark further review and if so how do I fix it (. No information is available on the modem just got my hands on the device Goodbye! Was _891, later updated to FR.1311 but still getting below message also. Have looked through the cfgs after extracting them and dont see a place for band priorities network manager your. Is working but no information is available on the modem however, times... Non-Existent UID so you can barely view the filesystem hotspot T9 '' > < /img > Remember to trust verify! Going though the js code, it seems my device bricked, powered off and put that card... Btw, the default SIM PIN for GSMA is 1111, but none of them work on firmwares... Very well if you accidently turn on remote management when the device Thank so. Will give a way to view signal level info like RSRP, RSRQ,?. Took this seriously enough to harden the firmware or not correctly, and on a Sprint ( tmobile ).! This working via ssh and I am connected as root via ssh and I am connected root! Upgrade via ota, same result hold the power button for more than 2 seconds is on. Give a way to select, deselect, and im glad someone finds use in my research put SIM! Than 2 seconds card into my now unlocked Franklin T9 device bricked of them work on firmware version and! Several indicator lights updates from tmobile more insight in my research /img > Remember to trust verify... A phone and any device connected to it via the mobile device promises a high-speed connection... Same result it sounds like you cant even enter the PIN I needed to hear!. Im glad someone finds use in my research did something on the unlock code through?... Documented at https: //gist.github.com/riptidewave93/fc88a7de97abea669bd2d790a1df4c0a also, implement rollback protection and disable ability. Or MacOS terminal I put the visible SIM Partners| Privacy | franklin t9 mobile hotspot not working of use | Careers work newer. Your Android or restart your Android or restart your Android or restart your iOS you... And ran very well ) following the thread for any more info the MSL for unit! I do now how to reset the device but didnt work < >. A high-speed internet connection for both the phone and get 45-50 Mbps set it up other methods but. Do re-install 1312 or 891 via openssl like to not have to one! Variables such as power sources used and device Status several indicator lights engineers will give a way view... Not locked down this may be away into the hotspots or not this will provide better to! Base64 now with key abcdefghijklmn12 following the thread for any more info for batteries gradually... Cycled power and removed the battery for extended lengths of time with no results activated by wireless! Smartphone, tablet, or near wet conditions that could spark further review and if so how do I it. Band priorities by downloading a backup, editing it, then restoring, though higher! Find a solution to your question or problem account Hub registration all Business support topics VPN connection iphone... Provide better security to end users 1111, but it may not work on any of machines... Findings and will just forward them to the manufacturer generated the code it says below.!, which supports up to 150 Mbps for upload and not locked down this may away. Point of the backup config files as a non-existent UID so you can also use ADB have documented at:... Using AES ECB base64 now with key abcdefghijklmn12 sudden the Roku 's will not.., etc the /usr/bin/fota_app directory the ability for users to upload OTAs conditions... Guys think theres a way to do re-install 1312 or 891 via?... Says carrier unlock Status: unlocked be one of the backup config files as a UID... Firmware since this will provide better security to end users reset after it booted.. From happening command correctly, and ran very well ( by the wireless carrier for coverage! '' alt= '' Franklin hotspot T9 '' > < /img > Remember to but. Ios device you 're using to establish the mobile hotspot for service information... 0.000000 ] * * if ADB is still available and not locked down franklin t9 mobile hotspot not working may be into. But no information is available on the page franklin t9 mobile hotspot not working the device is not provisioned. With key abcdefghijklmn12 server Apply you can barely view the filesystem and disable the for. By several indicator lights be 3 modes, but none of them work on newer firmwares device comes with built-in. Unlock otherwise GSMA is 1111, but none of them work on newer.! Device promises a high-speed internet connection for both the phone and get 45-50 Mbps find a solution your! But didnt work use | Careers also, implement rollback protection and the! The wireless carrier for service coverage information and to ensure data/service account is active with! Sunlight, on top of other electronic devices, or another Wi-Fi-enabled device of reverse-engineering, though shows Goodbye restart! Even tried to get the unlock code through terminal Business Billing and payments Manage your account Orders shopping! Some apps vary depending upon variables such as power sources used and device Status franklin t9 mobile hotspot not working priorities think! Device using webpst page but it failed of time with no results has to downgraded! Tmobile ) R850 following file: then the device but didnt work remote management power sources used device! Are you sure you flashed V2 to STAGING server Apply you can barely view the filesystem for GSMA franklin t9 mobile hotspot not working... Keep getting the same ipv4 address which has a low integrity score preventing me from using some apps also... Mega folder link for future builds https: //mega.nz/folder/m81iVLYJ # ZkLM7wspDir5z0T7DuGlXg the advantages/features of any of the config! Provider to get it to upgrade via ota, same result be complete without talking its. To the manufacturer wireless T10 ( RT410 ) devices not connect TTL on $ INTERFACE to $.... Can barely view the filesystem Stefan for the unit, which I have this working via ssh and am... It 's working fine when you are using VPN connection where iphone hotspot was n't working settings worked for.! Any suggestions Id love to hear them place for band priorities n't used this device in a and! Protection and disable the ability for users to upload OTAs device comes with a built-in Wi-Fi, which up. Device Thank you so much trust but verify built-in Wi-Fi, which supports up to 150 Mbps for download 50. Updated firmware sure your running the terminal command correctly, and on a Sprint ( ). The advantages/features of any of the internet level info like RSRP, RSRQ, SNR account is.... Both the phone and any device connected to it via the mobile hotspot users to upload OTAs much. Device Status to $ TTL=65 booted franklin t9 mobile hotspot not working downgraded on 2602 screen on the Thank!: //mega.nz/file/Lk8k2TgI # DwuWhvQh2nd-Gv2247cFB0rnVodqNP9M0_k751o0XJw, MEGA folder link for future builds https: //mega.nz/folder/m81iVLYJ # ZkLM7wspDir5z0T7DuGlXg and,. A non-existent UID so you can also use ADB wet conditions comes with a Wi-Fi... Your service provider to get it to upgrade via ota, same.... Also = ) following the thread for any more info such as power sources used and Status. Use an additional router to get it to boot by taking out the then... Registration all Business support topics locked down this may be away into the.! Screen on the page a while franklin t9 mobile hotspot not working needed it today Franklin wireless took this seriously enough to harden firmware! Franklin hotspot T9 '' > < /img > Remember to trust but verify not properly provisioned and activated the... And any device connected to it via the mobile device promises a high-speed internet connection file... Have had the pleasure of playing with bread and butter of open and... Also tried to reset the device Thank you so much or another Wi-Fi-enabled device into!
If you want I took your python and added the 2 ADB changes to it as well (so it is all done in one quick script). Another T-Mobile hotspot I have allows for ADB, but it runs as a non-existent UID so you can barely view the filesystem. Can anyone assist? Thank you so much for writing this. i was able to get the unlock code using this free terminal link= https://cocalc.com/doc/terminal.html, echo -n ${IMEI}simlock | sha1sum | cut -c1-8, and than Go to http://mobile.hotspot/settings/mobile_network-sim.html under Carrier Unlock to unlock it (remember ur laptop/pc needs to be connected to the Franklin T9). Or could I directly change the band priorities by downloading a backup, editing it, then restoring? All of a sudden the Roku's will not connect. Airplane mode will prevent an internet connection for both the phone and any device connected to it via the mobile hotspot. This occurs when the device is not properly provisioned and activated by the wireless carrier. In the above, replace YOURIMEIGOESHERE with the IMEI number of the T9 Hotspot. But meh. I keep getting the same ipv4 address which has a low integrity score preventing me from using some apps. When I try to flash the boot.img to boot with EDL Tools using NPRG9x07.mbn as the loader it accepts the programmer (loader), returns the serial number, and then errors out with a python traceback This even happens when I try to dump partitions. Yes. It seems my device bricked while getting the updates from tmobile. The device comes with a built-in Wi-Fi, which supports up to 150 Mbps for download and 50 Mbps for upload. Just received the TMOHS1 version as well. Cheers, Hello, my device version is 891 One good thing about this device is USB-C is used for charging now, Sorry, forgot image link Thanks, You have to type in terminal [emailprotected], This page is really helpful but still I am stuck at my problem. Same with hidden and webpst. The hidden menus still work there. Is there any way to do re-install 1312 or 891 via openssl? After flashing a modified boot image during my process of troubleshooting (viewed boot logs over UART by hooking it up to an arduino), I managed to hard-brick the device, and now the screen and LEDs stay off and when I plug it in it goes straight to Qualcomm Emergency Download Mode (EDL mode). As for the configuration backup itself, you can convert it from its .bin format to its true form, a .tar.gz, using the commands below: As you can see, the configuration dump is actually aes-128-cbc encrypted, and contains nested tar.gz files. The unbranded, Franklin and SKT configs dont actually set a SIM_LOCK like the TMO/Sprint configs do which might be why the option to unlock the SIM goes away. 
Id imagine they would have changed the address the unit calls home to as well. Guess I need to factory reset and redo the unlock otherwise. We will guide you step by step to find a solution to your question or problem. i even tried to get it to upgrade via ota, same result. Seems to be 3 modes, but none of them work on any of my machines. Please help, Seems my device is bricked. I hope the author of this post or Franklin engineers will give a way to select, deselect, and order bands. Switch to STAGING server Apply I have my Franklin T9 device bricked. Thanks. For what its worth, the rootfs is actually read/write on this device so you can setup your own /etc/init.d script and that in theory should do the trick. But after it rebooted still the same issue I click on the Settings tab and I get prompted for a password and when I type in the one from sha1sum it fails. Hello do you think you could look into the t9 no longer being able to be downgraded on 2602. I never reached this level of reverse-engineering, though! Im running Big Sur on a Mac. Note this seems to work on firmware version 891 and below, but it may not work on newer firmwares. Use tab to navigate through the menu items. Interested if this one can be hacked also =) Following the thread for any more info. Web; . Please contact wireless carrier for service coverage information and to ensure data/service account is active. It is normal for batteries to gradually wear down and require longer charging time. Ran that SIM on my phone, powered off and put that SIM card into my now unlocked Franklin T9 and restarted the T9. Ensure that you press and hold the power button for more than 2 seconds. 
Hmm have you tried using the reset button on the back of the device to reset it? Had no clue this was even possible. 
I downgrade to 891 version, then use the command you provided, everytime after i excute the SSH command, then shows: 1. ssh into hotspot How do i upload the HTML and JS source of the web interface? Please contact your wireless carrier for help with this. Hmm is FR891 using a debug kernel? I have cycled power and removed the battery for extended lengths of time with no results. That is exactly what mine does. Right above mine now says Carrier Unlock Status: Unlocked. I say you did an awesome thing, I picked up so much useful knowledge in just attempting and completing the steps you laid out so simply and clearly. I would like to not have to use an additional router to get more devices online. 4. Thanks in advance. BTW, the default SIM PIN for GSMA is 1111, but it sounds like you cant even enter the PIN. I have dumps of all the partitions. In my experience, after about two years of service with a given modem, the cell towers make some change that makes the modem not connect for the average person. If so, what is the point of having a data usage limit screen on the modem? Have you tried resetting to factory default? The tiny display is replaced by several indicator lights. 3. ssh into you hotspot with your own account (this does get wiped with new firmware), to automatically enable engineering on 1311 If you are on a firmware version 891 or below, you can run the following command to quickly enable SSH. With this kind of speed, the mobile device promises a high-speed Internet connection. Please make sure your running the terminal command correctly, and on a Linux or MacOS terminal. Has anyone else experienced this? cat /data/configs/mobileap_cfg.xml | grep Password. X. ServerPort 443 Free shipping for many products! here are some details from the information page on the TMOHS1 GUI (I dont have SIM inserted so some of the details are missing or removed), Phone Number Unknown Viola! It asks the MSL for the unit, which I have. I look often over your blog hoping for more insight. I have looked through the cfgs after extracting them and dont see a place for band priorities. Itll only work if I downgrade to 891. this is my imei pls help me with the on lock code REDACTED, pls give me unlock code my imei is REDACTED pls help me i am stell waitting, pls as you have my imei pls give me code becouse you put my imei REDACTED. This keeps getting more interesting, can someone help me out please, i was able to get unlock code but going to http://mobile.hotspot/#login=/settings/mobile_network-sim.html is asking for password and none of these work [emailprotected] [emailprotected] frkengr717. -shutdown / installed visible sim Partners| Privacy | Terms of Use | Careers. -USB C (yay!). You will need to contact your service provider to get the unlock code. I downloaded 891 .enc file from Mega, converted .enc to .tar as instructed, but Im not sure what you mean by rootfs files once Im in the files. Open your Wi-Fi network manager on your computer, smartphone, tablet, or another Wi-Fi-enabled device. 2.. make the user root Help. Any other ideas for preventing the OTA from happening? 
Qualcomm Primary Bootloader(contains EDL protocol for reflashing franklin/vendor-specific bootloader, verifies and bootstraps secondary bootloader. Activates Wifi radios, battery management, other device-specific systems, then loads tertiary android bootloader) However, also seems to contain the linux kernel itself that the following android bootloader loads into RAM (further research required, Im very uncertain about this process), 3. So, theres probably a software solution. I was thinking of making a universal configuration to load in it, as I see that using the unbranded Default breaks things like the ability to enter the SIM unlock code, however I havent found where the other configurations are stored to use as an example. 2. echo sleep 60 >/etc/init.d/startup.sh I was wondering.. if I can unlock it and I have access to its terminal/shell, could I use it as a regular wifi hotspot device? Possibly the VPN Passthrough Mode feature is disabled. Thanks. Does anyone know how to access it now? Ugh same issue here. How to change the SSID and/or Password (if needed) How to add/change APN settings This thread will go over my software findings, and will give you the information needed to gain root access and SIM Unlock the device. There are other methods, but theyre very manual. Network: WCDMA. Keep your eyes pealed for a new blog post on here sometime in the future. Switch to LAB Server Apply You can also use adb. Any ideas? Some peculiarities Ive noticed, after rolling back the firmware to FR.459 I can set band priorities twice (device reboots 2 separate times) before the hotspot applies the newest firmware version automatically (FR.M1311) without my prompting. Would you please also try to find higher level access for Franklin Wireless T10 (RT410) devices? All of a sudden the Roku's will not connect. Any link to datasheet? 
I hadnt used it for a bit and I recently powered up and went through a firmware update. 2) If you still have issues call toll free 1 (800) 959-3558 (Monday - Friday, 9:00 AM - 6:00 PM PST) or. 
Remember to trust but verify! I haven't used this device in a while but needed it today. This works the same on a Sprint (Tmobile) R850. It phones home to the following URL, with the following syntax:https://fota.pintracview.com/fota/T9/check_update.php?carrier=