Page 1 of 1

MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Tue Dec 10, 2019 9:48 am
by pengo
I am researching modems to build my own LTE router.

While this is a Sierra forum, I understand you can change the Quectel EP06 modem IMEI via sending AT commands such as

Code: Select all

AT +EGMR=1,7 "New IMEI#"
Does anyone know if the Sierra modems have similar AT commands / capability to change the IMEI#? I have not been able to locate this information after some research.

Thank you!

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Thu Dec 19, 2019 6:21 am
by BillA
Qualcomm devices have a much more secure NVRAM than MTK based ones, so I doubt that there's any simple AT command to repair it in case it gets wiped out. Most likely there's a hidden engineering mode which requires a challenge/response mechanism. Your best option at this time is to go with a Quectel modem to be able to do it quickly.

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Sun Dec 29, 2019 9:18 pm
by Yipzy
It's possible now thanks to bkerler https://github.com/bkerler/SierraWirelessGen to unlock Engineer Mode and issue the enhanced commands meant for testing purposes. Do some more digging and I believe you will find the answer. Sierra has pretty good modems unless you are on Sprint then I advise you to not use the MC7455 variant due to a lot of disconnects for most people who have it.

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Mon Jan 13, 2020 12:51 pm
by jmmec
Yipzy wrote: Sun Dec 29, 2019 9:18 pm It's possible now thanks to bkerler https://github.com/bkerler/SierraWirelessGen to unlock Engineer Mode and issue the enhanced commands meant for testing purposes. Do some more digging and I believe you will find the answer. Sierra has pretty good modems unless you are on Sprint then I advise you to not use the MC7455 variant due to a lot of disconnects for most people who have it.
Interesting. I dug and dug and came up empty.

If development mode is entered (using SierraWirelessGen) then can you explain the AT command that would allow setting a custom IMEI for a EM7565 / EM7511 / MC7455?

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Mon Jan 13, 2020 11:27 pm
by BillA
Yipzy wrote: Sun Dec 29, 2019 9:18 pm It's possible now thanks to bkerler https://github.com/bkerler/SierraWirelessGen to unlock Engineer Mode and issue the enhanced commands meant for testing purposes. Do some more digging and I believe you will find the answer. Sierra has pretty good modems unless you are on Sprint then I advise you to not use the MC7455 variant due to a lot of disconnects for most people who have it.

Couldn't find any reference to imei repair for Sierra modems in those links.
However, if it gets wiped out during a bad flashing process, then it could be REPAIRED with the SAME IMEI as printed on the modem's label. I've read that a failed flash, or the proper test command can potentially wipe the NVM, or via a challenge/response:
AT!OPENLOCK?
The encryption key must be calculated based on the above challenge response, then entered via:
AT!OPENLOCK="xxxxxxxxxxxx"
AT!NVIMEIUNLOCK

For example, if the imei repair is 12345678901234+<check-digit + 0 padding>
The check-digit can be calculated using this LUHN calculator > https://planetcalc.com/2464/
So the repair command in this example with the calculated check digit 7 + 0 padding would be:
AT!NVENCRYPTIMEI=12,34,56,78,90,12,34,70

FYI. Changing imei in the US is illegal (there's a federal statute against it, and Big Bubba's waiting for ya in jail lol), however repairing it with the original imei should be ok, though it's a gray area. Just to be clear, the above is for information purposes only, I do not condone the use of it in any shape or form.

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Tue Feb 18, 2020 11:26 pm
by motoguy
Hmm. Interested as well. will go look.

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Mon Feb 24, 2020 11:17 pm
by 56387f
Hello guys,
pengo wrote: Tue Dec 10, 2019 9:48 am While this is a Sierra forum, I understand you can change the Quectel EP06 modem IMEI via sending AT commands such as

Code: Select all

AT +EGMR=1,7 "New IMEI#"
I wonder if it also works for Quectel EM12 because then it would be the main reason to choose Quectel over Sierra modem for a new router.

Thanks!

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Fri May 15, 2020 3:29 pm
by Garbage internet
So I need to repair a Quectel EP06 IEMI and need the steps if anyone knows how.

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Wed Aug 05, 2020 3:40 am
by mamen0330
Garbage internet wrote: Fri May 15, 2020 3:29 pm So I need to repair a Quectel EP06 IEMI and need the steps if anyone knows how.
Make sure you can access the serial port of the modem so that you can send AT commands to the modem. It varies from different operating systems.

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Thu Aug 13, 2020 3:51 am
by juicedupchaos
mamen0330 wrote: Wed Aug 05, 2020 3:40 am Make sure you can access the serial port of the modem so that you can send AT commands to the modem. It varies from different operating systems.
bumping this, i too at having troubles changing the imei with the above code provided. i’m trying to send the at commands to the router via Gl.inets interface at commands. same ep06a

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Mon Sep 21, 2020 10:51 am
by jasontang401
=================================================================
AT!OPENLOCK?
The encryption key must be calculated based on the above challenge response, then entered via:
AT!OPENLOCK="xxxxxxxxxxxx"
AT!NVIMEIUNLOCK
==================================================================
Anybody knows how to calculate the encryption key-xxxxxxxxxxxxxxx? thanks.

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Mon Sep 21, 2020 10:55 am
by jasontang401
BillA wrote: Mon Jan 13, 2020 11:27 pm Couldn't find any reference to imei repair for Sierra modems in those links.
However, if it gets wiped out during a bad flashing process, then it could be REPAIRED with the SAME IMEI as printed on the modem's label. I've read that a failed flash, or the proper test command can potentially wipe the NVM, or via a challenge/response:
AT!OPENLOCK?
The encryption key must be calculated based on the above challenge response, then entered via:
AT!OPENLOCK="xxxxxxxxxxxx"
AT!NVIMEIUNLOCK

For example, if the imei repair is 12345678901234+<check-digit + 0 padding>
The check-digit can be calculated using this LUHN calculator > https://planetcalc.com/2464/
So the repair command in this example with the calculated check digit 7 + 0 padding would be:
AT!NVENCRYPTIMEI=12,34,56,78,90,12,34,70

FYI. Changing imei in the US is illegal (there's a federal statute against it, and Big Bubba's waiting for ya in jail lol), however repairing it with the original imei should be ok, though it's a gray area. Just to be clear, the above is for information purposes only, I do not condone the use of it in any shape or form.

Thanks for your post. but how to calculate the encryption key-xxxxxxxxxxx? any tools?

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Mon Sep 21, 2020 10:08 pm
by Didneywhorl
The specific imei change commands cannot be posted on this site, but I think you will find what you need by searching for Daniel Woods SierraWirelessKeyGen on the interwebz

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Fri Sep 25, 2020 5:01 pm
by Adm1jtg
please ignore

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Sun Sep 12, 2021 2:36 am
by Earl_the_Pearl
Getting into the locked area of the modem where things can be "repaired" is possible using
https://github.com/bkerler/edl. Using that group of programs I was able to unlock the engineer section where one can change things that are not available in the open area.

Using the programs one can unlock modems up to the M5's Snapdragon X55. Bkerler is working on newer modems, he will take requests. Don't let the code scare you off, I got most of it to run using the included scripts. It helps of one is familiar with Linux and Python; I was not familiar with ether and got it to run.

If you run into trouble search the Wide World of the Web and you will find the answers, I did. :mrgreen:
I got this 4G speed using my "repaired" M5 on AT&T's iPad unlimited plan. This was after I used over 22 gig for the month too.
Image

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Sat Nov 06, 2021 10:52 pm
by joker88
I need help with a Netgear Orbi LTE

Re: MC7455 / EM7565 vs. Quectel EP06 IMEI Change

Posted: Sun Nov 07, 2021 8:19 am
by Didneywhorl
joker88 wrote: Sat Nov 06, 2021 10:52 pm I need help with a Netgear Orbi LTE
Head to this thread:
https://wirelessjoint.com/viewtopic.php?f=21&t=1876