UNLOCKING OF SEMC S1-BASED ODM PHONES

server-based full signature method

1. select correct model
2. on settings, check "signed mode", "do full unlock instead of usercode reset"
3. back to odm tab
4. press unlock

that method can fix damaged security zone.
that method depends of external service, so it can be offline any time.

standalone patch method

1. select correct model
2. uncheck all settings
3. back to odm tab
4. press unlock

note, that such method will work only for old security locosto-based phones.
if you will get error while attempting to do that method - you have new security phone and should try other methods.

server-based patch method

1. select correct model
2. on settings, check "signed mode", "use alternative security bypass"
3. back to odm tab
4. press unlock

that method can not fix security zone.
that method is standalone in setool2 versions, greater than 1.0

user code reset

1. select correct model
2. on settings, check "signed mode"
3. back to odm tab
4. press unlock

note,that some old firmware not support usercode reset, so if standart code will not work after reset, reflash phone with latest firmware.

SIGNED MODE (USING SERVER)
CFG:100000000000
PLEASE ATTACH TURNED OFF PHONE NOW
PRESS AND HOLD "C" BUTTON ...
 
RUNNING S1_EROM VER "R6A037"
 
EROM_AID : 0001
LOADER_AID : 0001
SW_AID : 0001
CUST_AID : 0001
SIM_LOCK_AID : 0001
 
[ llcomm: 00003000,00080000 ]
DEVICE ID: D21BC71897
FLASH ID: "0089/887E"
LOADER VERSION: R4A039
 
PHONE IMEI : 358599********
USERLOCK RESET TO "0000"
TOTAL CALL TIME RESET
Unlock DONE

SIGNED MODE (USING SERVER)
CFG:100100000000
PLEASE ATTACH TURNED OFF PHONE NOW
PRESS AND HOLD "C" BUTTON ...
 
RUNNING S1_EROM VER "R6A037"
 
EROM_AID : 0001
LOADER_AID : 0001
SW_AID : 0001
CUST_AID : 0001
SIM_LOCK_AID : 0001
 
[ llcomm: 00003000,00080000 ]
DEVICE ID: D21BC71897
FLASH ID: "0089/887E"
LOADER VERSION: R4A039
 
PHONE IMEI : 358599********
USERLOCK RESET TO "0000"
TOTAL CALL TIME RESET
Unlock DONE