The iPhone Wiki - User contributions [en]

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T20:05:15Z

Amoamare: /* Hidden Dialer Codes */

=== Prerequisites ===

You need:
* Jailbroken iPhone 4 CDMA with OpenSSH installed.
* SSH client.
* pList Editor
* In order to obtain EVDO/MMS on the CDMA iPhone, the Carrier and PRI Signatures must be bypassed either by patching the commcenter or in other methods. As of right now the 4.2.6 Firmware for iPhone CDMA Commcenter has been patched to bypass Carrier Signatures. Still looking/figuring out how to bypass the PRI Signature.
* To BE clear Re-provisioning your iPhone is in NO WAY illegal. Sense you do NOT have to rewrite/modify/change the MEID on the phone because carriers such as, Cricket, MetroPCS, Pageplus, Pocket and a few other carriers. AGAIN TO BE CLEAR IT IS 100% LEGAL TO RE-PROVISION YOUR CDMA iPhone TO OTHER CARRIERS AS LONG AS YOUR CARRIER IS WILLING TO ACCEPT THE iPhone's MEID.
* I '''DO NOT''' condone illegal rewriting/modifying/changing of any ESN/MEID on any phone, this post '''WILL NOT''' teach you how to do that, and '''WILL NOT''' ever get you close to doing anything of the sort. If that is your intentions then you have come to the wrong place. This posting is 100% for legal unlocking of the CDMA iPhone for carrier's willing to accept the iPhone's ESN/MEID into their database.
----

=== Setting UP Windows ===

1. Download Tunnelier, WINSCP, or PUTTY. In this guide we will be using Tunnelier.
Download Tunnelier [http://www.bitvise.com/download-area Here]

2. In order to connect via SSH you must have a Wi-Fi connection setup. Turn on your phone and your phone's Wi-Fi by going to Settings, Wi-Fi, and connect to your networks Wi-Fi connection.
 [[Image:Example.jpg]]

3. In this example will connect to linksys. Once connected you will have the Wi-Fi icon in the status bar at the top. Click on the blue > icon to show details about the connection. Write down or remember the "IP Address". In this example mine is 192.168.1.103, yours might be similar.
 [[Image:Example.jpg]]

4. Install Tunnelier and launch it. Setup your settings similar to this, remember to use your "IP Address" and not mine, this was just an example. See screen shoot.
Username: root
Password: alpine
 [[Image:Example.jpg]]

5. Press the login button, and you will be presented with two new windows. A "Shell" window and an "Explorer" window.
 [[Image:Example.jpg]]

6. You are now connected to the iPhone4 CDMA using Tunnelier and SSH.
----

=== Manually Updating PRL ===

1. Using the explorer window in Tunnelier browse to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle".
File Contents / Size
310VZW.dmu 260bytes
310VZW.pri ***bytes
310VZW.prl ***bytes
carrier.plist ***bytes
ERI.plist ***bytes
info.plist ***bytes

2. Backup all the files to your HDD and make another backup of them. This is so you don't have to restore the phone in case something goes wrong.

3. To manually update the PRL to your new carrier's PRL. Get or obtain your carriers PRL from google. In this example I will be using the Cricket_42500.prl

4. Rename your PRL to 310VZW.prl and upload it to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle" making sure to overwrite the original 310VZW.prl

5. Open carrier.plist in a pList editor. For Windows I use "pList Editor" Look for "PRL Push Flag" and enable "True".
Normally
<key>PrlPushFlag</key>
<false/>

Switch to True
<key>PrlPushFlag</key>
<true/>

6. Save the newly edited "carrier.plist" MAKE SURE NOT TO CHANGE ANYTHING ELSE. You will break the sign if you do. After you save upload and overwrite the old "carrier.plist" found in "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle". Reboot your phone.

7. Once the phone completes rebooting you "WILL NOT" have service. Thats normal. You will now need to "SSH" back into the phone and edit the "carrier.plist" boolean to say "false" like it originally was.

8. After you have uploaded the new "carrier.plist" with the boolean as "false" this time. Reboot the phone again.

9. Once your phone powers on check the PRL version by dailing *#5005*4357#, send. Your carriers new PRL should now be installed.
 [[Image:NewPRL.jpg]]

10. After the new PRL is loaded you must contact your carrier to add the phone to your account. As of right now there is no know method to manually program the MDN, MIN or SYSID into the phone like most other CDMA phones. So you must do a OTA activation to program these features. Please NOTE: if OTA does not work in your area even after manually loading the PRL you will not be able to currently program the iPhone onto your plan until a method for writing the MDN and MIN at least has been found.
----

=== Modifying The PRI ===
First thing's first. As of right now the PRI''' needs to be signed'''. There is no way of getting the phone to write the PRI back to the phone until the signature is either figured out or bypassed.

You can open the PRI using a "pList" editor. In my case for windows I use "pList Editor".
The PRI contains information about the carriers, ERI, EVDO, NAM, OTA Features, and Other Misc stuff.

1. Will write more.

2. For those wondering after they edit the PRI you need to incremint it in "carrier.plist" by 1. Where it shows "PRI Version".
Original
<key>PriVersion</key>
<string>00.01.023</string>

New
<key>PriVersion</key>
<string>00.01.024</string>

3. Once you change file version to 1 number higher, just restart the phone. You check that it tries to write by enabling "syslog". Problem is because it needs to be signed. It just currently crashes the baseband untill you revert the PRI version back to the 00.01.023.
----

=== Modifying The ERI ===

Reserved...

----

=== Hidden Dialer Codes ===

1. *#5005*4357#, Send [4357 = help]
Displays the PRL and PRI verison

2. *#5005*74663#, Send [74663 = phone]
Displays your current MDN

3. *#5005*25327#, Send [Unknown]
Just flashes the screen

4. *#5005*274#, Send [Unknown]
Displays nothing but has a dismiss button.

5. *#5005*7828#, Send [Unknown]
Just flashes the screen

6. *#5005*78283#, Send [Unknown]
Looks like debugging log.

7. ##2539, Send [2539 = Akey]
SPC Password = 0's. Allows you to enter a new Akey.

8. *#5005*342444#, Send [342444 = Diag mybe]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

9. *#5005*3424255#, Send [3424255 = Diag All]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

10. *#5005*3424#, Send [3424 = Diag]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

11. *#5005*5667#, Send [5667 = Loop]
Displays LoopBack Call UI Enabled=false

Possible other codes, unable to figure out how to get them to work.
74663*
62255*
62*
22*
7672*
86*
75337278#
7533762#
778#
2267#
5264#
22#
7672#
86#
2673#
27844#
278255#
278#
6244#
62255#
62#

----

--[[User:Amoamare|Amoamare]] 20:05, 25 February 2011 (UTC)

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T08:03:24Z

Amoamare: /* Prerequisites */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:51:59Z

Amoamare: /* Hidden Dialer Codes */

=== Prerequisites ===

You need:
* Jailbroken iPhone 4G CDMA with OpenSSH installed.
* SSH client.
* pList Editor
* In order to obtain 3G(EVDO)/MMS on the CDMA iPhone, the Carrier and PRI Signatures must be bypassed either by patching the commcenter or in other methods. As of right now the 4.2.6 Firmware for iPhone CDMA Commcenter has been patched to bypass Carrier Signatures. Still looking/figuring out how to bypass the PRI Signature.
* To BE clear Re-provisioning your iPhone is in NO WAY illegal. Sense you do NOT have to rewrite/modify/change the MEID on the phone because carriers such as, Cricket, MetroPCS, Pageplus, Pocket and a few other carriers. AGAIN TO BE CLEAR IT IS 100% LEGAL TO RE-PROVISION YOUR CDMA iPhone TO OTHER CARRIERS AS LONG AS YOUR CARRIER IS WILLING TO ACCEPT THE iPhone's MEID.
* I '''DO NOT''' condone illegal rewriting/modifying/changing of any ESN/MEID on any phone, this post '''WILL NOT''' teach you how to do that, and '''WILL NOT''' ever get you close to doing anything of the sort. If that is your intentions then you have come to the wrong place. This posting is 100% for legal unlocking of the CDMA iPhone for carrier's willing to accept the iPhone's ESN/MEID into their database.
----

=== Setting UP Windows ===

1. Download Tunnelier, WINSCP, or PUTTY. In this guide we will be using Tunnelier.
Download Tunnelier [http://www.bitvise.com/download-area Here]

2. In order to connect via SSH you must have a Wi-Fi connection setup. Turn on your phone and your phone's Wi-Fi by going to Settings, Wi-Fi, and connect to your networks Wi-Fi connection.
 [[Image:Example.jpg]]

3. In this example will connect to linksys. Once connected you will have the Wi-Fi icon in the status bar at the top. Click on the blue > icon to show details about the connection. Write down or remember the "IP Address". In this example mine is 192.168.1.103, yours might be similar.
 [[Image:Example.jpg]]

4. Install Tunnelier and launch it. Setup your settings similar to this, remember to use your "IP Address" and not mine, this was just an example. See screen shoot.
Username: root
Password: alpine
 [[Image:Example.jpg]]

5. Press the login button, and you will be presented with two new windows. A "Shell" window and an "Explorer" window.
 [[Image:Example.jpg]]

6. You are now connected to the iPhone4 CDMA using Tunnelier and SSH.
----

=== Manually Updating PRL ===

1. Using the explorer window in Tunnelier browse to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle".
File Contents / Size
310VZW.dmu 260bytes
310VZW.pri ***bytes
310VZW.prl ***bytes
carrier.plist ***bytes
ERI.plist ***bytes
info.plist ***bytes

2. Backup all the files to your HDD and make another backup of them. This is so you don't have to restore the phone in case something goes wrong.

3. To manually update the PRL to your new carrier's PRL. Get or obtain your carriers PRL from google. In this example I will be using the Cricket_42500.prl

4. Rename your PRL to 310VZW.prl and upload it to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle" making sure to overwrite the original 310VZW.prl

5. Open carrier.plist in a pList editor. For Windows I use "pList Editor" Look for "PRL Push Flag" and enable "True".
Normally
<key>PrlPushFlag</key>
<false/>

Switch to True
<key>PrlPushFlag</key>
<true/>

6. Save the newly edited "carrier.plist" MAKE SURE NOT TO CHANGE ANYTHING ELSE. You will break the sign if you do. After you save upload and overwrite the old "carrier.plist" found in "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle". Reboot your phone.

7. Once the phone completes rebooting you "WILL NOT" have service. Thats normal. You will now need to "SSH" back into the phone and edit the "carrier.plist" boolean to say "false" like it originally was.

8. After you have uploaded the new "carrier.plist" with the boolean as "false" this time. Reboot the phone again.

9. Once your phone powers on check the PRL version by dailing *#5005*4357#, send. Your carriers new PRL should now be installed.
 [[Image:NewPRL.jpg]]

10. After the new PRL is loaded you must contact your carrier to add the phone to your account. As of right now there is no know method to manually program the MDN, MIN or SYSID into the phone like most other CDMA phones. So you must do a OTA activation to program these features. Please NOTE: if OTA does not work in your area even after manually loading the PRL you will not be able to currently program the iPhone onto your plan until a method for writing the MDN and MIN at least has been found.
----

=== Modifying The PRI ===
First thing's first. As of right now the PRI''' needs to be signed'''. There is no way of getting the phone to write the PRI back to the phone until the signature is either figured out or bypassed.

You can open the PRI using a "pList" editor. In my case for windows I use "pList Editor".
The PRI contains information about the carriers, ERI, EVDO, NAM, OTA Features, and Other Misc stuff.

1. Will write more.

2. For those wondering after they edit the PRI you need to incremint it in "carrier.plist" by 1. Where it shows "PRI Version".
Original
<key>PriVersion</key>
<string>00.01.023</string>

New
<key>PriVersion</key>
<string>00.01.024</string>

3. Once you change file version to 1 number higher, just restart the phone. You check that it tries to write by enabling "syslog". Problem is because it needs to be signed. It just currently crashes the baseband untill you revert the PRI version back to the 00.01.023.
----

=== Modifying The ERI ===

Reserved...

----

=== Hidden Dialer Codes ===

1. *#5005*4357#, Send [4357 = help]
Displays the PRL and PRI verison

2. *#5005*74663#, Send [74663 = phone]
Displays your current MDN

3. *#5005*25327#, Send [Unknown]
Just flashes the screen

4. *#5005*274#, Send [Unknown]
Displays nothing but has a dismiss button.

5. *#5005*7828#, Send [Unknown]
Just flashes the screen

6. *#5005*78283#, Send [Unknown]
Looks like debugging log.

7. ##2539, Send [2539 = Akey]
SPC Password = 0's. Allows you to enter a new Akey.

8. *#5005*342444#, Send [342444 = Diag mybe]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

9. *#5005*3424255#, Send [3424255 = Diag All]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

10. *#5005*3424#, Send [3424 = Diag]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

11. *#5005*5667#, Send [5667 = Loop]
Displays LoopBack Call UI Enabled=false

Possible other codes, unable to figure out how to get them to work.
74663*
62255*
62*
22*
7672*
86*
75337278#
7533762#
778#
2267#
5264#
22#
7672#
86#
2673#
27844#
278255#
278#
6244#
62255#
62#

----

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:51:01Z

Amoamare: /* Hidden Dialer Codes */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:49:39Z

Amoamare: /* Modifying The ERI */

=== Prerequisites ===

You need:
* Jailbroken iPhone 4G CDMA with OpenSSH installed.
* SSH client.
* pList Editor
* In order to obtain 3G(EVDO)/MMS on the CDMA iPhone, the Carrier and PRI Signatures must be bypassed either by patching the commcenter or in other methods. As of right now the 4.2.6 Firmware for iPhone CDMA Commcenter has been patched to bypass Carrier Signatures. Still looking/figuring out how to bypass the PRI Signature.
* To BE clear Re-provisioning your iPhone is in NO WAY illegal. Sense you do NOT have to rewrite/modify/change the MEID on the phone because carriers such as, Cricket, MetroPCS, Pageplus, Pocket and a few other carriers. AGAIN TO BE CLEAR IT IS 100% LEGAL TO RE-PROVISION YOUR CDMA iPhone TO OTHER CARRIERS AS LONG AS YOUR CARRIER IS WILLING TO ACCEPT THE iPhone's MEID.
* I '''DO NOT''' condone illegal rewriting/modifying/changing of any ESN/MEID on any phone, this post '''WILL NOT''' teach you how to do that, and '''WILL NOT''' ever get you close to doing anything of the sort. If that is your intentions then you have come to the wrong place. This posting is 100% for legal unlocking of the CDMA iPhone for carrier's willing to accept the iPhone's ESN/MEID into their database.
----

=== Setting UP Windows ===

1. Download Tunnelier, WINSCP, or PUTTY. In this guide we will be using Tunnelier.
Download Tunnelier [http://www.bitvise.com/download-area Here]

2. In order to connect via SSH you must have a Wi-Fi connection setup. Turn on your phone and your phone's Wi-Fi by going to Settings, Wi-Fi, and connect to your networks Wi-Fi connection.
 [[Image:Example.jpg]]

3. In this example will connect to linksys. Once connected you will have the Wi-Fi icon in the status bar at the top. Click on the blue > icon to show details about the connection. Write down or remember the "IP Address". In this example mine is 192.168.1.103, yours might be similar.
 [[Image:Example.jpg]]

4. Install Tunnelier and launch it. Setup your settings similar to this, remember to use your "IP Address" and not mine, this was just an example. See screen shoot.
Username: root
Password: alpine
 [[Image:Example.jpg]]

5. Press the login button, and you will be presented with two new windows. A "Shell" window and an "Explorer" window.
 [[Image:Example.jpg]]

6. You are now connected to the iPhone4 CDMA using Tunnelier and SSH.
----

=== Manually Updating PRL ===

1. Using the explorer window in Tunnelier browse to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle".
File Contents / Size
310VZW.dmu 260bytes
310VZW.pri ***bytes
310VZW.prl ***bytes
carrier.plist ***bytes
ERI.plist ***bytes
info.plist ***bytes

2. Backup all the files to your HDD and make another backup of them. This is so you don't have to restore the phone in case something goes wrong.

3. To manually update the PRL to your new carrier's PRL. Get or obtain your carriers PRL from google. In this example I will be using the Cricket_42500.prl

4. Rename your PRL to 310VZW.prl and upload it to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle" making sure to overwrite the original 310VZW.prl

5. Open carrier.plist in a pList editor. For Windows I use "pList Editor" Look for "PRL Push Flag" and enable "True".
Normally
<key>PrlPushFlag</key>
<false/>

Switch to True
<key>PrlPushFlag</key>
<true/>

6. Save the newly edited "carrier.plist" MAKE SURE NOT TO CHANGE ANYTHING ELSE. You will break the sign if you do. After you save upload and overwrite the old "carrier.plist" found in "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle". Reboot your phone.

7. Once the phone completes rebooting you "WILL NOT" have service. Thats normal. You will now need to "SSH" back into the phone and edit the "carrier.plist" boolean to say "false" like it originally was.

8. After you have uploaded the new "carrier.plist" with the boolean as "false" this time. Reboot the phone again.

9. Once your phone powers on check the PRL version by dailing *#5005*4357#, send. Your carriers new PRL should now be installed.
 [[Image:NewPRL.jpg]]

10. After the new PRL is loaded you must contact your carrier to add the phone to your account. As of right now there is no know method to manually program the MDN, MIN or SYSID into the phone like most other CDMA phones. So you must do a OTA activation to program these features. Please NOTE: if OTA does not work in your area even after manually loading the PRL you will not be able to currently program the iPhone onto your plan until a method for writing the MDN and MIN at least has been found.
----

=== Modifying The PRI ===
First thing's first. As of right now the PRI''' needs to be signed'''. There is no way of getting the phone to write the PRI back to the phone until the signature is either figured out or bypassed.

You can open the PRI using a "pList" editor. In my case for windows I use "pList Editor".
The PRI contains information about the carriers, ERI, EVDO, NAM, OTA Features, and Other Misc stuff.

1. Will write more.

2. For those wondering after they edit the PRI you need to incremint it in "carrier.plist" by 1. Where it shows "PRI Version".
Original
<key>PriVersion</key>
<string>00.01.023</string>

New
<key>PriVersion</key>
<string>00.01.024</string>

3. Once you change file version to 1 number higher, just restart the phone. You check that it tries to write by enabling "syslog". Problem is because it needs to be signed. It just currently crashes the baseband untill you revert the PRI version back to the 00.01.023.
----

=== Modifying The ERI ===

Reserved...

----

=== Hidden Dialer Codes ===

*#5005*4357#, Send [4357 = help]
Displays the PRL and PRI verison

*#5005*74663#, Send [74663 = phone]
Displays your current MDN

*#5005*25327#, Send [Unknown]
Just flashes the screen

*#5005*274#, Send [Unknown]
Displays nothing but has a dismiss button.

*#5005*7828#, Send [Unknown]
Just flashes the screen

*#5005*78283#, Send [Unknown]
Looks like debugging log.

##2539, Send [2539 = Akey]
SPC Password = 0's. Allows you to enter a new Akey.

*#5005*342444#, Send [342444 = Diag mybe]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

*#5005*3424255#, Send [3424255 = Diag All]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

*#5005*3424#, Send [3424 = Diag]
Displays, Enabled: Flase, Enabled During Sleep: Flase, History: 131072KB

*#5005*5667#, Send [5667 = Loop]
Displays LoopBack Call UI Enabled=false

Possible other codes, unable to figure out how to get them to work.
74663*
62255*
62*
22*
7672*
86*
75337278#
7533762#
778#
2267#
5264#
22#
7672#
86#
2673#
27844#
278255#
278#
6244#
62255#
62#

----

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:43:39Z

Amoamare: /* Manually Updating PRL */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:41:03Z

Amoamare: /* Prerequisites */

=== Prerequisites ===

You need:
* Jailbroken iPhone 4G CDMA with OpenSSH installed.
* SSH client.
* pList Editor
* In order to obtain 3G(EVDO)/MMS on the CDMA iPhone, the Carrier and PRI Signatures must be bypassed either by patching the commcenter or in other methods. As of right now the 4.2.6 Firmware for iPhone CDMA Commcenter has been patched to bypass Carrier Signatures. Still looking/figuring out how to bypass the PRI Signature.
* To BE clear Re-provisioning your iPhone is in NO WAY illegal. Sense you do NOT have to rewrite/modify/change the MEID on the phone because carriers such as, Cricket, MetroPCS, Pageplus, Pocket and a few other carriers. AGAIN TO BE CLEAR IT IS 100% LEGAL TO RE-PROVISION YOUR CDMA iPhone TO OTHER CARRIERS AS LONG AS YOUR CARRIER IS WILLING TO ACCEPT THE iPhone's MEID.
* I '''DO NOT''' condone illegal rewriting/modifying/changing of any ESN/MEID on any phone, this post '''WILL NOT''' teach you how to do that, and '''WILL NOT''' ever get you close to doing anything of the sort. If that is your intentions then you have come to the wrong place. This posting is 100% for legal unlocking of the CDMA iPhone for carrier's willing to accept the iPhone's ESN/MEID into their database.
----

=== Setting UP Windows ===

1. Download Tunnelier, WINSCP, or PUTTY. In this guide we will be using Tunnelier.
Download Tunnelier [http://www.bitvise.com/download-area Here]

2. In order to connect via SSH you must have a Wi-Fi connection setup. Turn on your phone and your phone's Wi-Fi by going to Settings, Wi-Fi, and connect to your networks Wi-Fi connection.
 [[Image:Example.jpg]]

3. In this example will connect to linksys. Once connected you will have the Wi-Fi icon in the status bar at the top. Click on the blue > icon to show details about the connection. Write down or remember the "IP Address". In this example mine is 192.168.1.103, yours might be similar.
 [[Image:Example.jpg]]

4. Install Tunnelier and launch it. Setup your settings similar to this, remember to use your "IP Address" and not mine, this was just an example. See screen shoot.
Username: root
Password: alpine
 [[Image:Example.jpg]]

5. Press the login button, and you will be presented with two new windows. A "Shell" window and an "Explorer" window.
 [[Image:Example.jpg]]

6. You are now connected to the iPhone4 CDMA using Tunnelier and SSH.
----

=== Manually Updating PRL ===

1. Using the explorer window in Tunnelier browse to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle".
File Contents / Size
310VZW.dmu 260bytes
310VZW.pri ***bytes
310VZW.prl ***bytes
carrier.plist ***bytes
ERI.plist ***bytes
info.plist ***bytes

2. Backup all the files to your HDD and make another backup of them. This is so you don't have to restore the phone in case something goes wrong.

3. To manually update the PRL to your new carrier's PRL. Get or obtain your carriers PRL from google. In this example I will be using the Cricket_42500.prl

4. Rename your PRL to 310VZW.prl and upload it to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle" making sure to overwrite the original 310VZW.prl

5. Open carrier.plist in a pList editor. For Windows I use "pList Editor" Look for "PRL Push Flag" and enable "True".
Normally
<key>PrlPushFlag</key>
<false/>

Switch to True
<key>PrlPushFlag</key>
<true/>

6. Save the newly edited "carrier.plist" MAKE SURE NOT TO CHANGE ANYTHING ELSE. You will break the sign if you do. After you save upload and overwrite the old "carrier.plist" found in "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle". Reboot your phone.

7. Once the phone completes rebooting you "WILL NOT" have service. Thats normal. You will now need to "SSH" back into the phone and edit the "carrier.plist" boolean to say "false" like it originally was.

8. After you have uploaded the new "carrier.plist" with the boolean as "false" this time. Reboot the phone again.

9. Once your phone powers on check the PRL version by dailing *#5005*4357#, send. Your carriers new PRL should now be installed.
 [[Image:NewPRL.jpg]]
----

=== Modifying The PRI ===
First thing's first. As of right now the PRI''' needs to be signed'''. There is no way of getting the phone to write the PRI back to the phone until the signature is either figured out or bypassed.

You can open the PRI using a "pList" editor. In my case for windows I use "pList Editor".
The PRI contains information about the carriers, ERI, EVDO, NAM, OTA Features, and Other Misc stuff.

1. Will write more.

2. For those wondering after they edit the PRI you need to incremint it in "carrier.plist" by 1. Where it shows "PRI Version".
Original
<key>PriVersion</key>
<string>00.01.023</string>

New
<key>PriVersion</key>
<string>00.01.024</string>

3. Once you change file version to 1 number higher, just restart the phone. You check that it tries to write by enabling "syslog". Problem is because it needs to be signed. It just currently crashes the baseband untill you revert the PRI version back to the 00.01.023.
----

=== Modifying The ERI ===

Reserved...

----

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:38:49Z

Amoamare: /* Prerequisites */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:37:19Z

Amoamare: /* Prerequisites */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:31:25Z

Amoamare: /* Prerequisites */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:25:35Z

Amoamare: /* Modifying The PRI */

=== Prerequisites ===

You need:
* Jailbroken iPhone 4G CDMA with OpenSSH installed.
* SSH client.
* pList Editor

----

=== Setting UP Windows ===

1. Download Tunnelier, WINSCP, or PUTTY. In this guide we will be using Tunnelier.
Download Tunnelier [http://www.bitvise.com/download-area Here]

2. In order to connect via SSH you must have a Wi-Fi connection setup. Turn on your phone and your phone's Wi-Fi by going to Settings, Wi-Fi, and connect to your networks Wi-Fi connection.
 [[Image:Example.jpg]]

3. In this example will connect to linksys. Once connected you will have the Wi-Fi icon in the status bar at the top. Click on the blue > icon to show details about the connection. Write down or remember the "IP Address". In this example mine is 192.168.1.103, yours might be similar.
 [[Image:Example.jpg]]

4. Install Tunnelier and launch it. Setup your settings similar to this, remember to use your "IP Address" and not mine, this was just an example. See screen shoot.
Username: root
Password: alpine
 [[Image:Example.jpg]]

5. Press the login button, and you will be presented with two new windows. A "Shell" window and an "Explorer" window.
 [[Image:Example.jpg]]

6. You are now connected to the iPhone4 CDMA using Tunnelier and SSH.
----

=== Manually Updating PRL ===

1. Using the explorer window in Tunnelier browse to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle".
File Contents / Size
310VZW.dmu 260bytes
310VZW.pri ***bytes
310VZW.prl ***bytes
carrier.plist ***bytes
ERI.plist ***bytes
info.plist ***bytes

2. Backup all the files to your HDD and make another backup of them. This is so you don't have to restore the phone in case something goes wrong.

3. To manually update the PRL to your new carrier's PRL. Get or obtain your carriers PRL from google. In this example I will be using the Cricket_42500.prl

4. Rename your PRL to 310VZW.prl and upload it to "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle" making sure to overwrite the original 310VZW.prl

5. Open carrier.plist in a pList editor. For Windows I use "pList Editor" Look for "PRL Push Flag" and enable "True".
Normally
<key>PrlPushFlag</key>
<false/>

Switch to True
<key>PrlPushFlag</key>
<true/>

6. Save the newly edited "carrier.plist" MAKE SURE NOT TO CHANGE ANYTHING ELSE. You will break the sign if you do. After you save upload and overwrite the old "carrier.plist" found in "/System/Library/Carrier Bundles/iPhone/Zeppelin_US.bundle". Reboot your phone.

7. Once the phone completes rebooting you "WILL NOT" have service. Thats normal. You will now need to "SSH" back into the phone and edit the "carrier.plist" boolean to say "false" like it originally was.

8. After you have uploaded the new "carrier.plist" with the boolean as "false" this time. Reboot the phone again.

9. Once your phone powers on check the PRL version by dailing *#5005*4357#, send. Your carriers new PRL should now be installed.
 [[Image:NewPRL.jpg]]
----

=== Modifying The PRI ===
First thing's first. As of right now the PRI''' needs to be signed'''. There is no way of getting the phone to write the PRI back to the phone until the signature is either figured out or bypassed.

You can open the PRI using a "pList" editor. In my case for windows I use "pList Editor".
The PRI contains information about the carriers, ERI, EVDO, NAM, OTA Features, and Other Misc stuff.

1. Will write more.

2. For those wondering after they edit the PRI you need to incremint it in "carrier.plist" by 1. Where it shows "PRI Version".
Original
<key>PriVersion</key>
<string>00.01.023</string>

New
<key>PriVersion</key>
<string>00.01.024</string>

3. Once you change file version to 1 number higher, just restart the phone. You check that it tries to write by enabling "syslog". Problem is because it needs to be signed. It just currently crashes the baseband untill you revert the PRI version back to the 00.01.023.
----

=== Modifying The ERI ===

Reserved...

----

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:24:09Z

Amoamare: /* Modifying PRI */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:17:52Z

Amoamare: /* Manually Updating PRL */

File:NewPRL.jpg

2011-02-25T07:14:23Z

Amoamare: uploaded a new version of "Image:NewPRL.jpg": New PRL loaded on CDMA iPhone

New PRL loaded on the CDMA iPhone.

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:12:47Z

Amoamare: /* Manually Updating PRL */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:11:52Z

Amoamare: /* Manually Updating PRL */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T07:11:16Z

Amoamare: /* Manually Updating PRL */

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-25T06:59:51Z

Amoamare: /* Setting UP */

Tutorial:Unlocking iPhone 4 (iPhone3,3) model with OTA

2011-02-25T06:35:44Z

Amoamare: /* OTA Programming */

=== OTA Programming ===

*Note the only known method for getting the CDMA iPhone to another carrier is by using the OTA feature to update your PRL, MDN and MIN.
If the OTA is not working in your area, then this will not work for you at the moment.

1. You must be using a carrier who will accept the phones MEID.

2. Add the phone to your account by calling in 611 from your current phone or calling your carriers number.
Phone Numbers
Cricket 1-800-274-2538

3. If you are using Cricket, Please make sure you are on the $45.00 plan and Android CPE (Customer Provided Equipment) as your phone model.
MetroPCS owners the plan shouldn't matter.

4. Once you have the phone on your plan, its time to find out the correct OTA number for you to dial in order for you to provision your phone.
Start with *22800, *22801, *22802 etc until you receive your carriers OTA message.
Known OTA Numbers for areas
Salt Lake City Utah, *22804

5. Follow the OTA instructions, making sure to select update equipment or update roaming agreements.

6. Once the OTA has succesfully updated your iPhone4 with the correct PRL, MDN, MIN and SYSID you should be ready for basic Talk and Text.

7. You can check the current PRL you are using by dailing.
*#5005*help#(4357), Send.

[[Image:NewPRL.jpg]]

8. That's it for now more to come!!

----

File:NewPRL.jpg

2011-02-25T06:34:48Z

Amoamare: New PRL loaded on the CDMA iPhone.

New PRL loaded on the CDMA iPhone.

Tutorial:Unlocking iPhone 4 (iPhone3,3) model with OTA

2011-02-24T06:21:05Z

Amoamare: New page: === OTA Programming === *Note the only known method for getting the CDMA iPhone to another carrier is by using the OTA feature to update your PRL, MDN and MIN. If the OTA is not working i...

=== OTA Programming ===

*Note the only known method for getting the CDMA iPhone to another carrier is by using the OTA feature to update your PRL, MDN and MIN.
If the OTA is not working in your area, then this will not work for you at the moment.

1. You must be using a carrier who will accept the phones MEID.

2. Add the phone to your account by calling in 611 from your current phone or calling your carriers number.
Phone Numbers
Cricket 1-800-274-2538

3. If you are using Cricket, Please make sure you are on the $45.00 plan and Android CPE (Customer Provided Equipment) as your phone model.
MetroPCS owners the plan shouldn't matter.

4. Once you have the phone on your plan, its time to find out the correct OTA number for you to dial in order for you to provision your phone.
Start with *22800, *22801, *22802 etc until you receive your carriers OTA message.
Known OTA Numbers for areas
Salt Lake City Utah, *22804

5. Follow the OTA instructions, making sure to select update equipment or update roaming agreements.

6. Once the OTA has succesfully updated your iPhone4 with the correct PRL, MDN, MIN and SYSID you should be ready for basic Talk and Text.

7. You can check the current PRL you are using by dailing.
*#5005*help#(4357), Send.

[[Image:iPhonePRL]]

8. That's it for now more to come!!

----

Tutorials

2011-02-24T03:19:06Z

Amoamare: /* Jailbreaking */

[http://helpmejailbreak.com/ Help Me Jailbreak] is a relatively new and simple website that tells if a specific device can be jailbroken (and unlocked) or not. After answering a series of questions about a device and the user's preferences, an answer will be presented along with an updated and complete list of the currently avaliable options.

== Jailbreaking ==

You can read lots of tutorials on [[Useful Links#Websites|iClarified]]. Also have a look on the [[Ground Rules#A_note_on_tutorials|ground rules]] concerning tutorials.

* [[Tutorial:Jailbreaking 2.2.1|Jailbreak 2.2.1 (For beginners)]]
* [[Tutorial:Jailbreaking 3.2.x|Jailbreaking 3.2.x]]
* [[Tutorial:Jailbreaking 4.0 and 4.0.1|Jailbreaking 4.0 and 4.0.1]]

==Unlocking==
* [[Unlock iPhone 3G with TurboSim|TurboSIM Unlock, for iPhone 3G]]
* [[Unlock iPhone with WinPwn 2.0|Unlock firmware version 2.0 with WinPwn 2.0, for original iPhone]]

==Re-Provisioning (Unlocking CDMA)==
* [[Re-Provisioning iPhone 4G from Verizon Wireless for other CDMA Carriers using OTA (Over The Air)]]
* [[Re-Provisioning iPhone 4G using file system (Incomplete)]]

==Troubleshooting==
* [[Recovery Mode|Entering Recovery Mode]]
* [[DFU Mode#How to Enter True Hardware DFU|Entering DFU Mode]]

==Semi-Technical==
* [[Mounting ramdisk of ipsw beta 4-7]]
* [[Understanding iphone backup files]]

==Reversing==
* [[IDA Pro Setup|Setting up IDA Pro Advanced to reverse the baseband]]

==Resources==
Check also the [[Useful Links|link section]].

Tutorials

2011-02-24T03:17:36Z

Amoamare: /* Jailbreaking */

[http://helpmejailbreak.com/ Help Me Jailbreak] is a relatively new and simple website that tells if a specific device can be jailbroken (and unlocked) or not. After answering a series of questions about a device and the user's preferences, an answer will be presented along with an updated and complete list of the currently avaliable options.

== Jailbreaking ==

You can read lots of tutorials on [[Useful Links#Websites|iClarified]]. Also have a look on the [[Ground Rules#A_note_on_tutorials|ground rules]] concerning tutorials.

* [[Tutorial:Jailbreaking 2.2.1|Jailbreak 2.2.1 (For beginners)]]
* [[Tutorial:Jailbreaking 3.2.x|Jailbreaking 3.2.x]]
* [[Tutorial:Jailbreaking 4.0 and 4.0.1|Jailbreaking 4.0 and 4.0.1]]
* [[Tutorial:Jailbreaking 4.2.6 CDMA |Jailbreaking 4.2.6 CDMA]]

==Unlocking==
* [[Unlock iPhone 3G with TurboSim|TurboSIM Unlock, for iPhone 3G]]
* [[Unlock iPhone with WinPwn 2.0|Unlock firmware version 2.0 with WinPwn 2.0, for original iPhone]]

==Re-Provisioning (Unlocking CDMA)==
* [[Re-Provisioning iPhone 4G from Verizon Wireless for other CDMA Carriers using OTA (Over The Air)]]
* [[Re-Provisioning iPhone 4G using file system (Incomplete)]]

==Troubleshooting==
* [[Recovery Mode|Entering Recovery Mode]]
* [[DFU Mode#How to Enter True Hardware DFU|Entering DFU Mode]]

==Semi-Technical==
* [[Mounting ramdisk of ipsw beta 4-7]]
* [[Understanding iphone backup files]]

==Reversing==
* [[IDA Pro Setup|Setting up IDA Pro Advanced to reverse the baseband]]

==Resources==
Check also the [[Useful Links|link section]].

Tutorials

2011-02-24T03:17:01Z

Amoamare: /* Re-Provisioning (Unlocking) */

Tutorials

2011-02-24T03:16:24Z

Amoamare: /* Re-Provisioning */

[http://helpmejailbreak.com/ Help Me Jailbreak] is a relatively new and simple website that tells if a specific device can be jailbroken (and unlocked) or not. After answering a series of questions about a device and the user's preferences, an answer will be presented along with an updated and complete list of the currently avaliable options.

== Jailbreaking ==

You can read lots of tutorials on [[Useful Links#Websites|iClarified]]. Also have a look on the [[Ground Rules#A_note_on_tutorials|ground rules]] concerning tutorials.

* [[Tutorial:Jailbreaking 2.2.1|Jailbreak 2.2.1 (For beginners)]]
* [[Tutorial:Jailbreaking 3.2.x|Jailbreaking 3.2.x]]
* [[Tutorial:Jailbreaking 4.0 and 4.0.1|Jailbreaking 4.0 and 4.0.1]]

==Unlocking==
* [[Unlock iPhone 3G with TurboSim|TurboSIM Unlock, for iPhone 3G]]
* [[Unlock iPhone with WinPwn 2.0|Unlock firmware version 2.0 with WinPwn 2.0, for original iPhone]]

==Re-Provisioning (Unlocking)==
* [[Re-Provisioning iPhone 4G from Verizon Wireless for other CDMA Carriers using OTA (Over The Air)]]
* [[Re-Provisioning iPhone 4G using file system (Incomplete)]]

==Troubleshooting==
* [[Recovery Mode|Entering Recovery Mode]]
* [[DFU Mode#How to Enter True Hardware DFU|Entering DFU Mode]]

==Semi-Technical==
* [[Mounting ramdisk of ipsw beta 4-7]]
* [[Understanding iphone backup files]]

==Reversing==
* [[IDA Pro Setup|Setting up IDA Pro Advanced to reverse the baseband]]

==Resources==
Check also the [[Useful Links|link section]].

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-24T03:15:19Z

Amoamare: /* Installation */

=== Prerequisites ===

You need:
* Jailbroken iPhone 4G CDMA with OpenSSH installed.
* SSH client.
* pList Editor

----

=== Setting UP ===

Reserved.

----

=== Installation ===

Reserved..

----

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-24T03:14:30Z

Amoamare: /* Prerequisites */

=== Prerequisites ===

You need:
* Jailbroken iPhone 4G CDMA with OpenSSH installed.
* SSH client.
* pList Editor

----

=== Installation ===

Reserved..

----

Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

2011-02-24T03:13:08Z

Amoamare: New page: === Prerequisites === You need: * Jailbroken iPhone 4G CDMA with OpenSSH installed. * SSH client. * pList Editor ----

=== Prerequisites ===

You need:
* Jailbroken iPhone 4G CDMA with OpenSSH installed.
* SSH client.
* pList Editor

----

Tutorials

2011-02-24T03:06:43Z

Amoamare: /* Re-Provisioning */

[http://helpmejailbreak.com/ Help Me Jailbreak] is a relatively new and simple website that tells if a specific device can be jailbroken (and unlocked) or not. After answering a series of questions about a device and the user's preferences, an answer will be presented along with an updated and complete list of the currently avaliable options.

== Jailbreaking ==

You can read lots of tutorials on [[Useful Links#Websites|iClarified]]. Also have a look on the [[Ground Rules#A_note_on_tutorials|ground rules]] concerning tutorials.

* [[Tutorial:Jailbreaking 2.2.1|Jailbreak 2.2.1 (For beginners)]]
* [[Tutorial:Jailbreaking 3.2.x|Jailbreaking 3.2.x]]
* [[Tutorial:Jailbreaking 4.0 and 4.0.1|Jailbreaking 4.0 and 4.0.1]]

==Unlocking==
* [[Unlock iPhone 3G with TurboSim|TurboSIM Unlock, for iPhone 3G]]
* [[Unlock iPhone with WinPwn 2.0|Unlock firmware version 2.0 with WinPwn 2.0, for original iPhone]]

==Re-Provisioning==
* [[Re-Provisioning iPhone 4G from Verizon Wireless for other CDMA Carriers using OTA (Over The Air)]]
* [[Re-Provisioning iPhone 4G using file system (Incomplete)]]

==Troubleshooting==
* [[Recovery Mode|Entering Recovery Mode]]
* [[DFU Mode#How to Enter True Hardware DFU|Entering DFU Mode]]

==Semi-Technical==
* [[Mounting ramdisk of ipsw beta 4-7]]
* [[Understanding iphone backup files]]

==Reversing==
* [[IDA Pro Setup|Setting up IDA Pro Advanced to reverse the baseband]]

==Resources==
Check also the [[Useful Links|link section]].

Tutorial:Re-Provisioning iPhone 4 from Verizon Wireless for other CDMA Carriers

2011-02-24T03:00:39Z

Amoamare: /* OTA Programming */

=== Prerequisites ===

You will need:
* Verizon iPhone 4 CDMA
* A Carrier that will except other Carriers ESN/MEID phones. Example Cricket or MetroPCS.

----

=== OTA Programming ===

*Note the only known method for getting the CDMA iPhone to another carrier is by using the OTA feature to update your PRL, MDN and MIN.
If the OTA is not working in your area, then this will not work for you at the moment.

1. You must be using a carrier who will accept the phones MEID.

2. Add the phone to your account by calling in 611 from your current phone or calling your carriers number.
Phone Numbers
Cricket 1-800-274-2538

3. If you are using Cricket, Please make sure you are on the $45.00 plan and Android CPE (Customer Provided Equipment) as your phone model.
MetroPCS owners the plan shouldn't matter.

4. Once you have the phone on your plan, its time to find out the correct OTA number for you to dial in order for you to provision your phone.
Start with *22800, *22801, *22802 etc until you receive your carriers OTA message.
Known OTA Numbers for areas
Salt Lake City Utah, *22804

5. Follow the OTA instructions, making sure to select update equipment or update roaming agreements.

6. Once the OTA has succesfully updated your iPhone4 with the correct PRL, MDN, MIN and SYSID you should be ready for basic Talk and Text.

7. You can check the current PRL you are using by dailing.
*#5005*help#(4357), Send.

[[Image:iPhonePRL]]

8. That's it for now more to come!!

----

Tutorial:Re-Provisioning iPhone 4 from Verizon Wireless for other CDMA Carriers

2011-02-24T02:56:41Z

Amoamare:

=== Prerequisites ===

You will need:
* Verizon iPhone 4 CDMA
* A Carrier that will except other Carriers ESN/MEID phones. Example Cricket or MetroPCS.

----

=== OTA Programming ===

**Note the only known method for getting the CDMA iPhone to another carrier is by using the OTA feature to update your PRL, MDN and MIN.
If the OTA is not working in your area, then this will not work for you at the moment.

1. You must be using a carrier who will accept the phones MEID.

2. Add the phone to your account by calling in 611 from your current phone or calling your carriers number.
Phone Numbers
Cricket 1-800-274-2538

3. If you are using Cricket, Please make sure you are on the $45.00 plan and Android CPE (Customer Provided Equipment) as your phone model.
MetroPCS owners the plan shouldn't matter.

4. Once you have the phone on your plan, its time to find out the correct OTA number for you to dial in order for you to provision your phone.
Start with *22800, *22801, *22802 etc until you receive your carriers OTA message.

Known OTA Numbers for areas
Salt Lake City Utah, *22804

5. Follow the OTA instructions, making sure to select update equipment or update roaming agreements.

6. Once the OTA has succesfully updated your iPhone4 with the correct PRL, MDN, MIN and SYSID you should be ready for basic Talk and Text.

7. You can check the current PRL you are using by dailing.
*#5005*help#(4357), Send.

[[Image:iPhonePRL]]

8. That's it for now more to come!!

----

Tutorial:Re-Provisioning iPhone 4 from Verizon Wireless for other CDMA Carriers

2011-02-24T02:44:04Z

Amoamare: New page: === Prerequisites === You will need: * Verizon iPhone 4 CDMA ----

=== Prerequisites ===

You will need:
* Verizon iPhone 4 CDMA

----

Tutorials

2011-02-24T02:40:38Z

Amoamare: /* Unlocking */

[http://helpmejailbreak.com/ Help Me Jailbreak] is a relatively new and simple website that tells if a specific device can be jailbroken (and unlocked) or not. After answering a series of questions about a device and the user's preferences, an answer will be presented along with an updated and complete list of the currently avaliable options.

== Jailbreaking ==

You can read lots of tutorials on [[Useful Links#Websites|iClarified]]. Also have a look on the [[Ground Rules#A_note_on_tutorials|ground rules]] concerning tutorials.

* [[Tutorial:Jailbreaking 2.2.1|Jailbreak 2.2.1 (For beginners)]]
* [[Tutorial:Jailbreaking 3.2.x|Jailbreaking 3.2.x]]
* [[Tutorial:Jailbreaking 4.0 and 4.0.1|Jailbreaking 4.0 and 4.0.1]]

==Unlocking==
* [[Unlock iPhone 3G with TurboSim|TurboSIM Unlock, for iPhone 3G]]
* [[Unlock iPhone with WinPwn 2.0|Unlock firmware version 2.0 with WinPwn 2.0, for original iPhone]]

==Re-Provisioning==
* [[Re-Provisioning iPhone 4G from Verizon Wireless for other CDMA Carriers]]

==Troubleshooting==
* [[Recovery Mode|Entering Recovery Mode]]
* [[DFU Mode#How to Enter True Hardware DFU|Entering DFU Mode]]

==Semi-Technical==
* [[Mounting ramdisk of ipsw beta 4-7]]
* [[Understanding iphone backup files]]

==Reversing==
* [[IDA Pro Setup|Setting up IDA Pro Advanced to reverse the baseband]]

==Resources==
Check also the [[Useful Links|link section]].