MC7455 / EM7565 vs. Quectel EP06 IMEI Change

[pengo]

I am researching modems to build my own LTE router.

While this is a Sierra forum, I understand you can change the Quectel EP06 modem IMEI via sending AT commands such as

Code: Select all

AT +EGMR=1,7 "New IMEI#"

Does anyone know if the Sierra modems have similar AT commands / capability to change the IMEI#? I have not been able to locate this information after some research.

Thank you!

[BillA]

Qualcomm devices have a much more secure NVRAM than MTK based ones, so I doubt that there's any simple AT command to repair it in case it gets wiped out. Most likely there's a hidden engineering mode which requires a challenge/response mechanism. Your best option at this time is to go with a Quectel modem to be able to do it quickly.

[Yipzy]

It's possible now thanks to bkerler https://github.com/bkerler/SierraWirelessGen to unlock Engineer Mode and issue the enhanced commands meant for testing purposes. Do some more digging and I believe you will find the answer. Sierra has pretty good modems unless you are on Sprint then I advise you to not use the MC7455 variant due to a lot of disconnects for most people who have it.

[jmmec]

It's possible now thanks to bkerler https://github.com/bkerler/SierraWirelessGen to unlock Engineer Mode and issue the enhanced commands meant for testing purposes. Do some more digging and I believe you will find the answer. Sierra has pretty good modems unless you are on Sprint then I advise you to not use the MC7455 variant due to a lot of disconnects for most people who have it.

Interesting. I dug and dug and came up empty.

If development mode is entered (using SierraWirelessGen) then can you explain the AT command that would allow setting a custom IMEI for a EM7565 / EM7511 / MC7455?

[BillA]

It's possible now thanks to bkerler https://github.com/bkerler/SierraWirelessGen to unlock Engineer Mode and issue the enhanced commands meant for testing purposes. Do some more digging and I believe you will find the answer. Sierra has pretty good modems unless you are on Sprint then I advise you to not use the MC7455 variant due to a lot of disconnects for most people who have it.

Couldn't find any reference to imei repair for Sierra modems in those links.
However, if it gets wiped out during a bad flashing process, then it could be REPAIRED with the SAME IMEI as printed on the modem's label. I've read that a failed flash, or the proper test command can potentially wipe the NVM, or via a challenge/response:
AT!OPENLOCK?
The encryption key must be calculated based on the above challenge response, then entered via:
AT!OPENLOCK="xxxxxxxxxxxx"
AT!NVIMEIUNLOCK

For example, if the imei repair is 12345678901234+<check-digit + 0 padding>
The check-digit can be calculated using this LUHN calculator > https://planetcalc.com/2464/
So the repair command in this example with the calculated check digit 7 + 0 padding would be:
AT!NVENCRYPTIMEI=12,34,56,78,90,12,34,70

FYI. Changing imei in the US is illegal (there's a federal statute against it, and Big Bubba's waiting for ya in jail lol), however repairing it with the original imei should be ok, though it's a gray area. Just to be clear, the above is for information purposes only, I do not condone the use of it in any shape or form.

[motoguy]

Hmm. Interested as well. will go look.

[56387f]

Hello guys,

While this is a Sierra forum, I understand you can change the Quectel EP06 modem IMEI via sending AT commands such as

Code: Select all

AT +EGMR=1,7 "New IMEI#"

I wonder if it also works for Quectel EM12 because then it would be the main reason to choose Quectel over Sierra modem for a new router.

Thanks!

[Garbage internet]

So I need to repair a Quectel EP06 IEMI and need the steps if anyone knows how.

[mamen0330]

So I need to repair a Quectel EP06 IEMI and need the steps if anyone knows how.

Make sure you can access the serial port of the modem so that you can send AT commands to the modem. It varies from different operating systems.

[juicedupchaos]

Make sure you can access the serial port of the modem so that you can send AT commands to the modem. It varies from different operating systems.

bumping this, i too at having troubles changing the imei with the above code provided. i’m trying to send the at commands to the router via Gl.inets interface at commands. same ep06a

[jasontang401]

=================================================================
AT!OPENLOCK?
The encryption key must be calculated based on the above challenge response, then entered via:
AT!OPENLOCK="xxxxxxxxxxxx"
AT!NVIMEIUNLOCK
==================================================================
Anybody knows how to calculate the encryption key-xxxxxxxxxxxxxxx? thanks.

[jasontang401]

Couldn't find any reference to imei repair for Sierra modems in those links.
However, if it gets wiped out during a bad flashing process, then it could be REPAIRED with the SAME IMEI as printed on the modem's label. I've read that a failed flash, or the proper test command can potentially wipe the NVM, or via a challenge/response:
AT!OPENLOCK?
The encryption key must be calculated based on the above challenge response, then entered via:
AT!OPENLOCK="xxxxxxxxxxxx"
AT!NVIMEIUNLOCK

For example, if the imei repair is 12345678901234+<check-digit + 0 padding>
The check-digit can be calculated using this LUHN calculator > https://planetcalc.com/2464/
So the repair command in this example with the calculated check digit 7 + 0 padding would be:
AT!NVENCRYPTIMEI=12,34,56,78,90,12,34,70

FYI. Changing imei in the US is illegal (there's a federal statute against it, and Big Bubba's waiting for ya in jail lol), however repairing it with the original imei should be ok, though it's a gray area. Just to be clear, the above is for information purposes only, I do not condone the use of it in any shape or form.

Thanks for your post. but how to calculate the encryption key-xxxxxxxxxxx? any tools?

[Didneywhorl]

The specific imei change commands cannot be posted on this site, but I think you will find what you need by searching for Daniel Woods SierraWirelessKeyGen on the interwebz

[Adm1jtg]

please ignore

[Earl_the_Pearl]

Getting into the locked area of the modem where things can be "repaired" is possible using
https://github.com/bkerler/edl. Using that group of programs I was able to unlock the engineer section where one can change things that are not available in the open area.

Using the programs one can unlock modems up to the M5's Snapdragon X55. Bkerler is working on newer modems, he will take requests. Don't let the code scare you off, I got most of it to run using the included scripts. It helps of one is familiar with Linux and Python; I was not familiar with ether and got it to run.

If you run into trouble search the Wide World of the Web and you will find the answers, I did.
I got this 4G speed using my "repaired" M5 on AT&T's iPad unlimited plan. This was after I used over 22 gig for the month too.

[joker88]

I need help with a Netgear Orbi LTE

[Didneywhorl]

I need help with a Netgear Orbi LTE

Head to this thread:
https://wirelessjoint.com/viewtopic.php?f=21&t=1876

[Sudoroyal]

everytime i try to repair my imei the sierra card powersdown and kills my serial connection to it.
how can i stop it from powering down?

[Didneywhorl]

I've never seen this. Either the card already has an inherent issue, or you are issuing a command to reboot it? OR your router has a watchdog feature that is rebooting the modem in an attempt to get online. You'll need to disable that annoying bit of software.

[Rich Hathaway]

everytime i try to repair my imei the sierra card powersdown and kills my serial connection to it.
how can i stop it from powering down?

This is the modem telling you that you are not privy to change this secure item the way you are trying to change it is tripping
the security fuze thus the reboot, in short you need to find another way to change it, be careful some fuzes have a counter that will put the modem into download mode loop if tripped enough times.