(TUTORIAL) SEMC ODM Unlock (Locosto, Arima, Calypso)

HOW TO UNLOCK SEMC ODM

CALYPSO PHONES (K200, k220, J110, J120

I - Important:

- SEtool2 supports only normal (eeprom MUST be INTACT), working, not tampered, with remained unlock attempts J120/J110 phones
- "Unauthorized phone" and other eeprom errors for j110/j120 can not be repaired by SEtool2 (use other tools for that)
- Create backup of eeprom area before unlocking (connect phone, press 'Read GDFS') - it may save you a big headache

II - Unlock J110/J120 phone:

1. Select phone model

2. Be sure you have latest J110/J120 firmware patch files in '%setool2%\rest' directory (check on support area)

3. Press 'Unlock/Repair'

Code:

Loaded 51 flash descriptors Connecting to UFS... Found 1 FTDI device(s). UFS #xxxxx READY PLEASE ATTACH TURNED OFF PHONE NOW CHIP ID:B4FB FLASH CHIP SIZE:4 MB PHONE IMEI:35837201XXXXXX DETECTED FIRMWARE:R1B003_CXC1250845 FLASHING SIMLOCK PATCH... preparing file.. Processing part 1 [000D0000/00010000].. Processing part 2 [00010000/00010000].. POWER ON PHONE,PRESS <**< AND ENTER ANY CODE... USERLOCK RESET TO "0000" Elapsed:23 secs.

4. Power on phone (with SIM card), type <**<, select CLOSED lock, enter any 8 digit code to unlock the phone.
If there is more than one closed lock level, enter code for every and each one.

Note: Some (older) SIM cards have no capability to shows all lock levels (SPCK and CCK in particular) -- in that case try different SIM cards

If after pressing 'Unlock/Repair' you get this:

Code:

Loaded 51 flash descriptors PLEASE ATTACH TURNED OFF PHONE NOW CHIP ID:B4FB FLASH CHIP SIZE:4 MB PHONE IMEI:35959901XXXXXX DETECTED FIRMWARE:R1D002_CXC1250845 FIRMWARE VERSION NOT SUPPORTED USERLOCK RESET TO "0000" Elapsed:29 secs.

simply flash phone with any firmware from support area, then do unlock again.

III - Unlock K200/K220 phone:

1. Select phone model

2. Press 'Unlock/Repair'

Code:

Loaded 51 flash descriptors PLEASE ATTACH TURNED OFF PHONE NOW CHIP ID:B496 FLASH CHIP SIZE:16 MB PHONE IMEI:00460102XXXXXX SECURITY CHECKSUM VALID SIMLOCK REMOVAL PROCEDURE FINISHED Elapsed:15 secs.

3. Done.

Possible errors

You are trying to unlock phone but get:

Code:

PLEASE ATTACH TURNED OFF PHONE NOW IF PROCESS NOT STARTING,UNPLUG/PLUG CABLE/BATTERY FEW TIMES... CHIP ID:B4FB FLASH CHIP mfgID: BAE7, devID: BAE7, devEXT: 00,00 Can't query flash chip Can't load ID loader ! Elapsed:2 secs.

There is no solution for this error; SEtool2 supports ONLY fully working J110/J120 phones

LOCOSTO PHONES (T250, Z250, Z320)

Note:

- Supported interface: COM/UFS only
- Booting of LOCOSTO-based phones is tricky process - perhaps, you will need to disconnect/connect cable/battery several times before phone will start booting
- Always select correct model (Z320 for Z320 phones, T250 for T250 phones)
- SEtool2 auto-create TA (eeprom) backup after each phone boot. Keep TA backups! If you somehow damage TA area and have no backup - you'll get a dead phone.

1. Select phone model

2. Press 'Unlock/Repair'

Code:

PLEASE ATTACH TURNED OFF PHONE NOW IF PROCESS NOT STARTING,UNPLUG/PLUG CABLE/BATTERY FEW TIMES... bootROM version: 0502 Locosto HS detected, booting... FLASH ID: 0089/8809 SECURITY AREA BACKUP CREATED. PHONE IMEI:35791301****** USERLOCK RESET TO "0000" TOTAL CALL TIME RESET Updating TA... Firmware lock check determined. Elapsed:53 secs.

3. Done.

Possible errors

You are trying to unlock LOCOSTO phone and get:

Code:

Connecting to UFS... Found 1 FTDI device(s). UFS #91XXX READY PLEASE ATTACH TURNED OFF PHONE NOW IF PROCESS NOT STARTING,UNPLUG/PLUG CABLE/BATTERY FEW TIMES... Abort all operations. supported phone was not detected phone pre-boot failed,possible RECOVERY needed. Elapsed:63 secs. PLEASE ATTACH TURNED OFF PHONE NOW IF PROCESS NOT STARTING,UNPLUG/PLUG CABLE/BATTERY FEW TIMES... bootROM version: 0502 Locosto HS detected, booting... FLASH ID: 0020/882E readfls tmo at 06FF0000 Can't create TA ! phone pre-boot failed,possible RECOVERY needed. Elapsed:79 secs.

Problem is in PC motherboard and UFS combination. On some motherboards UFS can not read data at high speed.

Solution: Use COM cable or external powered USB hub.

ARIMA PHONES (J220, J230, Z300)

1. Select phone model

2. Press 'Unlock/Repair'

3. NCK, NSCK, SPCK, CCK lock/unlock codes will be shown in the log window:

Open COM port OK

ChipID:9004,EMP protocol:0300

RAMLOADER: $Revision: 1.2 $

PHONE IMEI:35907800XXXXXXX

FLASHLOADER READY

FLID MFG:89 DEV:8854

NCK lock 52328412

NCK unlock 52328412

NSCK lock 72872547

NSCK unlock 72872547

SPCK lock 24650877

SPCK unlock 24650877

CCK lock 83435672

CCK unlock 83435672

USERCODE: 0000

Elapsed:19 secs.

4. Power on phone (with SIM card), type <**<, select CLOSED lock, enter appropriate unlock code.
If there is more than one closed lock level, enter code for every and each one.
If you get "NOT ALLOWED" while you're trying to enter code, that means there is no unlock tries left (counter reached "0"); reflash phone and enter codes again.

Note: Some (older) SIM cards have no capability to shows all lock levels (SPCK and CCK in particular) -- in that case try different SIM cards

This is from the Official SETool box Help.