Basic Terms used in nokia flashing.docx

7/27/2019 Basic Terms used in nokia flashing.docx

1/16

Basic Terms used in nokia flashing

Flash files to download and installexample:

RM-38_v 11.00 (mcusw 4.14) Emea Apac China LTAthis called major version, must be installed first before you can install minor version.contains MCU, PPM, and CNT.

RM-38_v 11.01 (mcusw 4.14) Emea Apac China LTAcalled minor version, can be installed after major version installed, usually contains only PPM and CNT (no

MCU, but for some other type, maybe contains MCU newer version also)

another example:RM-36_v 8.00 (mcusw 5.050407) Euro

for EURO countries

RM-36_v 9.00 (mcusw 5.050440) Apac

for Asia Pacific countries

================================================== ==============

DCT4 tab

1. Checking phone, cables, software version etc.

Flash settings tab

MCU : Micro Control Unit

PPM : Post Programming Memory, contains language

CNT : Content Pack, contains tones, games, etcADSP : Advance Digital Signal Processor, flash file for DSP chips

APE : Application Processor Engine

Use INI :

When you thick this, software will detect phone connected type, and Use INI files setting when exist in

Product Directory for choosing flash files.INI : (*.ini)

This file contains flash files setting for each Product Code, including MCU, PPM, CNT, PP (Product

Profile), etc.(Even in 3250, different product code may have different MCU to be flashed).

These files are extracted from firmware/data package that we have installed.

Use this option in order to avoid choosing wrong flash files, example :- If you dont know for sure which MCU, PPM, or CNT.

- Choose right PPM for language that you want

- How to choose right CNT that suitable with your PPM


2/16

After a Product Code has been chosen automatically, you can change it manually with other Product Code

that you want to flash.

Run INI :

After flashing completed, software will upload also Product Profile according INI that has been chosen andflashed.

Product Profile :

This file contains customization for each Product Code, example : GPRS settings, WAP bookmarks, etc..

For Communicator Phone, this file also contains keyboard layout.

Load NFP:

NFP: Nokia File Protected

Data package (MCU, PPM, and CNT) for nokia CDMA phone was compressed as a file :*.NFP, and it is protected by password.

Thick this option, choose *.NFP, software will extracted it automatically as MCU, PPM, and CNT.

Easy Cable :

Its a special cable, suitable with pop-up connector for few type phone, ex : 1600, which can be use for

flashing. Thick this if you use this kind of cable.

RPL 208 :

PM field number 208 was copied from DATA1/ IMEI flash data.

Software will back up this area as RPL(DATA1 only), that useful for recover flash IMEI if something happenafter flash (IMEI ????), or you changed flash IC, you no need to change UEM also if you have back up for

this phone. Some type dont have this field, like 1100, 2300, etc. Make sure your phone can enter Local Mode

for this option.

FTD ON:

FTD : Field Test Display / Net Monitor : special menu for DCT4 and DCT4 TIKU that can be activated withflashing, it contains many feature for testing phone and network.

Product Code :

Every Nokia phone has 7digit number that written in the back sticker.This Product Code will differ phone that sold to one country and another, also phone that sold with

customization for an operator, will have different Product Code also.

This number also saved somewhere in PM area.

Thick Change Product Code will change Product Code number in PM area after flashing completed.

Factory Set :

Reset all settings to factory default after flash completed.


3/16

Manual Flash:

this option will disable software detect the phone model and open his folder when you click on MCU,

PPM, etc, or thick on Use INI

Warranty :

When you press *#warranty# or *#92702689#, phone will display some hidden information like SerialNumber, Made, etc, including Life Timer.This option after flash will reset Life Timer back to zero after flashed.

Unlock:Initialize sim lock after flash

Erase :

normally, software will erase first some area according Flash Files needed before writing them. If you thickthis option, without erase first, software will write the Flash Files that have been chosen. Use this option only

if you already have fully erased the phone manually.

Skip AFP :

AFP : After Flash Processing

After flashing completed, software will try to put the phone into Local Mode and read some info about it. This

option will disable that process.Use this only if you know why this process should be skip, example you flash an Erase

File that make the phone dead/ fully erase.Not all Erase File erase whole part of flash IC, some Erase File only erase some part of flash IC and phone

still alives.

Skip MCU ID :MCU ID is UPP (Universal Phone Processor) recognition, inside flash file, theres recognition for MCU ID

that supported (by that flash file).

Use this option only if you sure that you flash the phone with right flash file, but software give warning thatMCU ID is not supported by flash file that have you choose.

Note : usually warning about MCU ID is not supported but right Flash Files has been chosen is caused by bad

cable connection. Try restart software, reconnect F-Bus cable from phone, and try again.

For dead phone suspected / possibility hardware problem, if MCU flashing has been completed, continue

flashing with PPM only usually will solve.

BT :

Bluetooth IC have own firmware including in MCU file.

You may skip this if you flash the phone with same version, this will save flashing time a little.

But you have to skip this if BT IC is damage, its indicated with when you flash a phone and software error inthe middle with warning : Error loading additional loader..


4/16

INF : INFOMake sure your phone can enter Local or Test mode for this operation.

At the end of this operation, software will detect phones Product Code and load Flash Files according it.

If no suitable product code found, you must thick Manual Flash and then Use INI,software will ask you toSelect Phone Model.

You can sort it by Type or by Name, or you can type phone code like RH-12, and all INI settings forthis phone will be loaded, and can be chosen.

Note : if you dont find your phone type or name in the list, but you have Data Package installed for thisphone, open nok4models.ini with Notepad and add it like this

[RM-307]

CHK : Check

Will check phone hardware condition like

- Relation between UEM (Universal Energy Management - power IC) and UPP (Universal Phone Processor)- MCU ID / UPP

- Flash IC

- RAM IC- First 16 bytes

- FAID Calculation

Remember, bad F-Bus cable also make this operation failed !!!Service:

This button related with Service Operations tab

Erase Flash:Software will try to back up RPL 208 if your phone can enter Local Mode or IMEI Flash Data not corrupted,

or RP 208 exist, and then check phone hardware like MCU ID, etc and display Erase Flash Manager.

Flash Chip List:

Below this tab you can choose which IC that you want to erase, and you can modify Erase Address.

Start Address always 0000000 and End Address always 0xxFFFFF, depends on Flash IC size.

FULL Erase :

Full Erase will erase all Flash IC, including PM (Permanent Memory), & will make SIM Lock Data

corrupted.Make sure that you have back up PM to be uploaded after flash and unlock after this operation.


5/16

Click Start Erase to execute this operation.

PM : Permanent Memory, an area in flash IC that wasnt reached by flash files, means normal flashing

shouldnt change its value.

It contains data of RF, EM, Product Code, Security Code, and so many more.

For some type it also contains backup IMEI Flash Data, even phone book and gallery content. PM file can beopened with Notepad or Wordpad.

PM area indicates with :Field Number 0 - xxx (some type has field numbers


6/16

Load JAVA :

Upload JAVA application to the phone

MMC Rst:

with special cable adapter, this will reset locked Memory Card

Make INI:

If you have chosen your flash file manually or USE INI, this operation will create your own INI file for that type. After

this, software will automatically load that flash files after INF pressed.

IMEI tool:

There are 2 IMEI in DCT4 phone:

First is in UEM, also called DATA2, OTP (one time programmable).

Second in flash IC, also called DATA1, not OTP.

If DATA1 get corrupted or not synchronize with DATA2, Watchdog timer will be enabled, phone will be restart after +/

30 seconds. You will see software says IMEI ?????????

Make ASK: make ask file to be calculated become RPL.

This operation is used after you change UEM and want same IMEI number with your phone previously (IMEI at back

cover sticker), or you have change flash IC but dont have back up for this.

Thick UEM Changed in order to get DATA2 calculation also,

otherwise ASK will be calculated only for Flash IC / DATA1.

Write RPL (reply) :

Because there are 2 IMEI in DCT4 phone, RPL may contains DATA1 only or DATA1 & DATA2. You can open it with

Notepad/Wordpad.

RPL from back up RPL 208 contains only DATA1, will be uploaded to flash IC.

RPL from ASK calculation can be contains 2 data (remember about thick UEM changed when make ASK), one will be

uploaded to flash IC : DATA1, and the other one will be uploaded to UEM: DATA2.

If you changed UEM, DATA2 will be wrote and become OTP IMEI. No problem if RPL contains 2 data but you did not

change UEM, as long as DATA1 and DATA2 are synchronized, phone will be normal.

ASIC : Application Specific Integrated Circuit

class of DCT4 phone:

ASIC 2

ASIC 5 - WD2

ASIC 6 - TIKU BT

ASIC 7

ASIC 11

If you changed UEM and do not want to calculated RPL, you can use free supplied rpl that come with software


7/16

installation, but you have to write RPL with same ASIC to your phone.

IMEI Patch:

this will patched IMEI Plain, IMEI that showed by pressing *#06#, with desired IMEI thatyou want. Patch options

only work for DCT4 ASIC2.

And this only work for normal phone, means patch WILL NOT SOLVE problem IMEI ????????? that caused by DATA1

corrupted.

If you try this with phone that have problem IMEI ?????????, Watchdog timer will be enabled, and your phone will

restart after +/- 30 seconds.

IMEI Save: back up PM 208 as RPL

Unlock : Initialize SIM Lock , needed after write RPL

Read UEM : Read UEM IMEI

If you have phone with IMEI ?????????, check also whether UEM IMEI still good.

If yes, read ASK, calculate ASK to RPL, and write RPL.

But if UEM IMEI also damage, you have to Change UEM.

Service Operations tab: (use Service button to execute)

Make sure you phone able to enter local and test mode for this service.

If not, check the cable or maybe phone have hardware problem.

Read, Write, and erase PM : look above about PM.

Self Test : test some phone conditions via software.

Always use this feature if your phone has Contact Service problem that can not be solve with erasing and flashing.

Disp Test : LCD test.

Upload TUN : RF value for CDMA phone was saved with file named *.tun.

Factory Setting: reset the phone to factory settings

Prod. Manager :

Read or change/write some value that saved in PM area:

- Product code

- HW version : Hardware Version : please be careful edit this for RM-72 -6230i, cause PPM and CNT flash file was

different between old and new HW version.

- Order Number

- Production SN

- Manufacture Month : in phone showed by typing *#warranty#


8/16

File System Format:

Format User Area of the phone, user data will be lost.

Remember that WD2 have different File System with DCT4 TIKU as example.

WD2 = Symbian EPOC, Drive for User Area : C

DCT4 TIKU : FILE2 , use Format Type : Low Level Format, and type : NAND

So, if software can not detect File System correctly, try making Full Factory before execute this again.

User Code Edit:

Read Security Code which saved at PM filed number 35.

Upload and Read PP:

please look above Product Profile

ADC Read :

Analog to Digital Converter : some Self Test about phone battery, charger, etc

Fun Explorer :

About exploring JAVA application in DCT4 phone.

Warranty Reset :

look above about Warranty.

Phone Mode:

(?) read phone status

change phone mode to

Local Mode

Test Mode

Normal Mode

Communication Mode:

F-Bus cable : flasher cable

USB: DKU-2/CA-53, when you connect DCT4 TIKU with this cable, you will be able to make some operation like : make

Full factory, Init SIM Lock, etc, but not for flashing.

Flashing DCT4 APE phone : 9300, 9500, and 7710:

connect both F-Bus cable and USB cable (DKU-2 CA-53) to phone.

when you make CHK for this phone, System Tray in Windows will give warning about USB DEVICE NOT RECOGNIZE,

this is normal, and this must be happen.

If you dont get this warning, you need to check again USB connection to phone, otherwise phone may have hardware

problem.

During flashing process windows will install drivers needed for flashing this phone.

================================================== =================


9/16

BB5 tab

BB5 phone :

BB : Base Band

Single chip : have only CMT processor. example : 6270, 62880, etc

Dual chip : have two processor, CMT (cellular Mobile telephone) and APE (Application Processor Engine) example :

6630, 6680, N70, etc.

Communication Mode:

F-BUS cable : use only 7 pins cable for flashing with JAF box.

Make sure your phone can enter Local or Test Mode !!!

If not, maybe you need to check your cable, and then modified it, if not suitable with box specification.

1. NEVER EVER try putting 9v battery in F-BUS cable though your cable has this connector !!!

2. Resistance between BSI-GND must be 68k ohms, if less than it, maybe you will find error sync the phone when

make CHK

3. Resistance in BSI serial must be 5,1k(5k1) or 7,5k(7k5) ohms. Otherwise your phone can not enter Local / Test

Mode.

4. Make sure VPP line from RJ45 connected to RX2 in phone.

Never use cable that connected VPP line in RJ45 with VPP in phone, you will get error something like Error APE get id

I dont give explanation about P-KEY and UFS Box, because newer BB5 phone with RAPIDO processor doesnt

supported by UFS Box.

USB : all (alive) BB5 phone supported by USB flashing, you may use DKU-2 or CA-53, but some types needs DKE-2/mini

USB for this operation. make sure your battery fully charged, or charge it with an original charger before start flashing.

When you flash phone and software give error warning error getting flash id,

put sim card inside, do not select offline mode, and flash the phone.

Note : make sure you disable all connection in PC Suite (if you installed Nokia PC Suite software in your PC) when using

this service.

Dead USB :

Few types of BB5 with single chips supported by Dead USB flashing.

Choose flash file manually, connect USB cable to phone, and when software give command to press the power now,

press switch on/off briefly. In windows systems try, will show Nokia USB ROM, and windows will install the driver

automatically.

For some types, successfully dead USB flashing will revive the phone, but gallery content will be empty, so you need to

flash again with USB as normally.


10/16

Downgrade :

This option based on Dejans trick to be able to flash a working/normal BB5 phone with lower version.

Maybe not all BB5 supported by this option. So, if you try downgrade and the phone become dead, flash again with

latest/highest firmware version.

CRT 308:

PM field number 308 contains SIM Lock data, make sure your phone can enter Local Mode before flash, in order to

make successful back up.

If something wrong after flashing process and SIM Lock Data become corrupted, use Write PM and choose this back

up to be written to the phone. Your sim lock state will back like before flashing.

CRT BKP: Certificate Back Up, saved as *.RPL.

Skip APE: skip APE flashing.

SX4 Authority :

BB5 phones have protection for writing RF(1 ) and Energy(309, 0135 in hex) settings in EPROM. Not having those

settings in phone, is known as Contact Retailer Problem, or Security Error in Self Test. In order to write those

settings phone requires an authorization that only SX4 Smart Card can perform.

As those cards are hard to get, software can use server support for this authorization.

To authorize, connect BB5 phone, and power it on.

Press SX4 AUTH. If you have SX4 card connectedto PC, software will use it to compute the authorization password

and send it to phone.

If you dont have card, software will connect to server to compute authorization password.

If this process have sucessfuly done, Write PM to the phone without field number 308.

================================================== =============

Update Loaders:

FIA = Flash Identification Address are files that needed for flashing, to identify MCU ID and Flash Files which suitable

with phones. If you press this, software will check whether new version from support site exist and replace your flash

loaders with new one if you download it.

================================================== =============

Phone phone terminals

VBat - Battery Voltage

BSI - Battery size Indicator

GND - Ground, conductive mass


11/16


12/16


13/16


14/16


15/16


16/16

Basic Terms used in nokia flashing.docx

Documents

Transcript of Basic Terms used in nokia flashing.docx