Some special way support "Broken Device" #43

Closed
opened 2024-08-11 21:44:51 +02:00 by qdsp6sw · 4 comments

Some of the Broken device's Modem integrated an LPA. It will openLogicalChannel in the modem and prevent OpenEUICC to manage it.

But you can call closeLogicalChannel(1) first to close the modem's LPA logical channel, in this way OpenEUICC will works well on these device.

I tested it with AT+CSIM, manually sent closeLogicalChannel(1) apdu to the card. It works now.

Can you try this and add the code to survive these broken devices?

Some of the Broken device's Modem integrated an LPA. It will openLogicalChannel in the modem and prevent OpenEUICC to manage it. But you can call closeLogicalChannel(1) first to close the modem's LPA logical channel, in this way OpenEUICC will works well on these device. I tested it with AT+CSIM, manually sent closeLogicalChannel(1) apdu to the card. It works now. Can you try this and add the code to survive these broken devices?

Hi there,
I see your comment in v2ex here. I have a device with Known Broken Device, the Xiaomi Gauguinpro(M2007J17C).
I want to test this method, so could you give me more information about this?

  • How to interact with the euicc card though the modem, in this examle, Snapdragon X52 Modem-RF system? I tried to use 90DE, but the modem seems not to respond the AT+CSIM at all. maybe wrong baud?
  • How long will the moden re-open the logical channel?

Your reply is apperciated!

Hi there, I see your comment in v2ex here. I have a device with **Known Broken** Device, the Xiaomi Gauguinpro(M2007J17C). I want to test this method, so could you give me more information about this? - How to interact with the euicc card though the modem, in this examle, Snapdragon X52 Modem-RF system? I tried to use 90DE, but the modem seems not to respond the AT+CSIM at all. maybe wrong baud? - How long will the moden re-open the logical channel? Your reply is apperciated!
Owner

OpenEUICC already does send iccCloseLogicalChannel for channels 0 through 10 when running privileged. If you are talking about EasyEUICC, this is impossible because you can't close an arbitrary logical channel without direct access to TelephonyManager API.

OpenEUICC already does send `iccCloseLogicalChannel` for channels 0 through 10 when running privileged. If you are talking about __EasyEUICC__, this is impossible because you can't close an arbitrary logical channel without direct access to TelephonyManager API.
Author

Hi there,
I see your comment in v2ex here. I have a device with Known Broken Device, the Xiaomi Gauguinpro(M2007J17C).
I want to test this method, so could you give me more information about this?

  • How to interact with the euicc card though the modem, in this examle, Snapdragon X52 Modem-RF system? I tried to use 90DE, but the modem seems not to respond the AT+CSIM at all. maybe wrong baud?
  • How long will the moden re-open the logical channel?

Your reply is apperciated!

I have not published this on v2ex. The method on v2ex can't use on Xiaomi devices, it because xiaomi modem have signature check.
The CSIM command on xiaomi qualcomm devices can be opened manually by xiaomi's employee account using factory software. You can find these services on IdleFish.
After I opened CSIM on these broken device, they will work with OpenEUICC well.

You need to find at command tunnel manually on your phone, it's different between Xiaomi devices.

The modem only reopen it when you activating/deactivating profiles or changing sim card.

> Hi there, > I see your comment in v2ex here. I have a device with **Known Broken** Device, the Xiaomi Gauguinpro(M2007J17C). > I want to test this method, so could you give me more information about this? > - How to interact with the euicc card though the modem, in this examle, Snapdragon X52 Modem-RF system? I tried to use 90DE, but the modem seems not to respond the AT+CSIM at all. maybe wrong baud? > - How long will the moden re-open the logical channel? > > Your reply is apperciated! > > I have not published this on v2ex. The method on v2ex can't use on Xiaomi devices, it because xiaomi modem have signature check. The CSIM command on xiaomi qualcomm devices can be opened manually by xiaomi's employee account using factory software. You can find these services on IdleFish. After I opened CSIM on these broken device, they will work with OpenEUICC well. You need to find at command tunnel manually on your phone, it's different between Xiaomi devices. The modem only reopen it when you activating/deactivating profiles or changing sim card.
Author

OpenEUICC already does send iccCloseLogicalChannel for channels 0 through 10 when running privileged. If you are talking about EasyEUICC, this is impossible because you can't close an arbitrary logical channel without direct access to TelephonyManager API.

It cannot send to sim card physically, due to the code in the modem will drop it and return 6f00.
Do you have anyway to bypass these limit?

Now I manually added AT+CSIM at command before iccOpenLogicChannel, it works well now. But it didn't work on devices that have no at command tunnel.

> OpenEUICC already does send `iccCloseLogicalChannel` for channels 0 through 10 when running privileged. If you are talking about __EasyEUICC__, this is impossible because you can't close an arbitrary logical channel without direct access to TelephonyManager API. It cannot send to sim card physically, due to the code in the modem will drop it and return 6f00. Do you have anyway to bypass these limit? Now I manually added AT+CSIM at command before iccOpenLogicChannel, it works well now. But it didn't work on devices that have no at command tunnel.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: PeterCxy/OpenEUICC#43
No description provided.