Samsung Galaxy S3 ESN Swap (from LG Optimus S)

I've (mostly) swapped an LG Optimus S (refurbished) donor phone over to my Sprint Galaxy S3.  However, I'm having some odd behavior with the 3G data.  I'm hoping someone can help me out!  Once I get the kinks worked out, I'd be happy to write up a step-by-step document as I'm guessing there are others who aren't patient enough for the BYOD to get here ;)

My problem:

I've got the Galaxy S3 up and running with the ESN and calling, texting, and data (both 1X and 3G).  However, it seems like my 3G connection doesn't work on certain towers.  When I'm at home (on an Airave still active directly through Sprint) it works fine on 3G (wifi disconnected of course).  In other areas on Sprint towers it works fine with 3G.  However, certain towers show full coverage and "Sprint" (i.e. not roaming) coverage, but my data connection fails with an authentication related error.

What I've done for the ESN swap:

1) Installed DFS (latest version of their freeware package)

2) Installed appropriate Samsung drivers (from Samsung site)

3) Installed appropriate LG drivers (from LG site)

4) Achieved connectivity to both phones through DFS

5) Located the SPC a.k.a. MSL for both phones (Ting was awesome, Sprint was a challenge as the phone wasn't on my account, but I got it)

6) Located the device PWD for each phone

7) Read settings for each phone and archived (screenshots in a Word doc)

8) Copied settings from my LG phone to the S3 (ESN&MEID, MDN, MSID, data profile username, HA IP's, and PRL)

9) *DID NOT* copy the AAA or HA keys from the LG Optimus or overwrite the AAA/HA keys on the S3

10) Performed an activation on the S3 by entering "##72786#"

This resulted in the phone getting updated programming information (from what I understand) and resulted in me having working phone and data.  However, as I mentioned above, my 3G still doesn't work on certain towers.  Does anyone know if the AAA / HA keys get provisioned when you do the "Activate" action?  I'm curious whether that's my problem, or whether it's something else.  I'd also love to know if it's imperative that I keep the old AAA / HA settings from the S3 (with original ESN) for use if I want to use the original ESN to activate it (and bring my donor Optimus S back to life) once Ting gets BYOD off the ground.

1

Comments

64 comments
  • Would be nice if you gave a bit more details on your process. Such as getting the PWD and using DFS tool.

    0
    Comment actions Permalink
  • I would love to do that!  I don't want to mislead anyone, though, until I find answers to my 3G issues.  Haven't gotten any input from anyone else, nor have I seen much in the threads.  Still hoping!

    0
    Comment actions Permalink
  • The Device Password (not MSL/SPC) for the Samsung Galaxy S3 (SPH-L710) is "01F2030F5F678FF9".

    0
    Comment actions Permalink
  • How did you get DFS to connect? Also, it seem the free version of DFS i downloaded is actually just a demo version and it doesnt show any device drivers for either phone. Am i missing an important step or have the wrong download? Seems DFS wanted me to pay $35 for each device for only 5 minutes of usage. Seems nuts. I must be missing something simple.

    0
    Comment actions Permalink
  • Good question!  DFS makes it look like a free version that can't do anything... I'm not sure what the phone profiles are for (maybe they auto-install drivers? maybe they give you the appropriate PWD?), but it works without selecting a particular profile.

    I mentioned it somewhat above, but I did the following:

    1) Downloaded and install the appropriate Samsung USB drivers:

    http://www.samsung.com/us/support/owners/product/SPH-L710RWBSPR?tabContent=content2#content2

    2) Download and install the "freeware/demo" version of DFS

    3) Put your phone in DIAG mode:

      * phone -> ##DIAG# (opens Diag screen)

      * Open "Qualcom USB Setting" menu and select "DM + Modem + ADB", hit "Ok"

      * Select "CDMA Modem"

    4) Plug your phone into your computer via USB

    5) Open DFS and click the connections button (a plug, I believe), you should see your Samsung device listed.  Double click on the "Diag" entry

    6) Your phone should now be connected!  Select your phone from the dropdown in DFS (upper left)

    7) Enter your MSL/SPC in the left box and click the button to send the code, you should see an "Unlocked" success message in the console

    8) Enter the device code "01F2030F5F678FF9" in the PWD box, click the button to send the code, you should se another "Unlocked" success message in the console

    9) You should be able to read/write codes at this point

    10) IMPORTANT- The part I don't fully understand is the AAA/HA key part, I recommend making sure you can read those (to save your old codes) before writing new ones!  I'm not sure if Sprint can re-generate these for you... but if they can't (and I simply don't know) you may not be able to use your original ESN!  I'm hoping someone can answer that one for me......

    This is all from memory, so names/buttons may be slightly different :)

    0
    Comment actions Permalink
  • Hmm. I cant even seem to get a reaction when i type in ##DIAG# or ##PORT#. ##DATA# works though, but obviously not what were looking for right now. My phone is already in USB debug mode.

    I am an IT consultant and I have been rooting/flashing phones (custom roms, etc) for years, but this donor phone process is giving me fits. Seems there is just to many tutorials/howto's with missing information, etc. As far as your issue with AAA keys, i am pretty sure you have to copy that stuff to your galaxy s3.

    0
    Comment actions Permalink
  • No kidding.  I'm adding to that incomplete information issue ;)  I'd love to do a full writeup once I figure it out.  I'm in the same boat... software developer, been rooting/flashing phones for a while, have plenty of hardware experience, and it's frustrating for exactly the same reason.  I wish there was a semi-uniform WIKI out there for cleaned-up explanations on how to do these processes.  I'll bet most people go through the same "view 37 posts and piece it together" method.  Lots of dead WIKI/Forums out there though... so who knows.  It's a problem that needs solving though!

    I'll bet your ##DIAG# issue is that you're running a custom ROM that isn't based off of an official Sprint ROM.  Most AOSP ROMs don't have the additional menu capabilities.

    I'm running the "FreeGS3 JellyBean" ROM (probably a month old now) and it's been stable, largely I bet as it's based on the Sprint JB leak (much more stable than my wife's Note JB ROM, she averages a new bug each day...).  FreeGS3 is in this form (which seems kept up to date):

    http://forum.xda-developers.com/showthread.php?t=1748818

    0
    Comment actions Permalink
  • Ha. I am actually running that same great rom on my S3. I thought though I would need to things first with the Optimus S in order to get the required information to use on the S3. Am i wrong?

    0
    Comment actions Permalink
  • I believe I did the programming on the stock ROM.  However, it still connects to DFS and seems to work ok on FreeGS3.  Of course you need to read the info off the Optimus S before you can write it to the ESN & MEID to the S3 though :)

    0
    Comment actions Permalink
  • Well my point was that ##DIAG# and ##PORT#'s dont do anything in the Olympus phone.

    0
    Comment actions Permalink
  • You should consider joining the Ting Army.

    I can't say much, but there may or may not be mounds of information with step-by-step instructions on how to achieve what you want hidden within the walls of those barracks.

    0
    Comment actions Permalink
  • Why would some information be hidden from other users? Seems they are not excepting any more Ting Army recruits. =/

    0
    Comment actions Permalink
  • I wouldn't say that there's a lot of information hidden from other users,,, I think Ryan's being overly optimistic.  You see my question here, and I have access to the Ting Army forum!  I haven't seen any step by step instructions yet, but I'd love to write some up if someone cares to answer the AAA/HA questions (or if I end up figuring it out once I get tired of my 3G working sporadically).

    In reality, the BYOD program  should provide the magic that will avoid this ESN Cloning nonsense!  Looking forward to that.

    0
    Comment actions Permalink
  • And I apologize for misreading your earlier post, ##DIAG# doesn't do anything on the LG.  I don't recall exactly what I did, but I got some info from this video (although I didnt' follow the LGPST details, wasn't working for me, but I did get access to read other settings in the Optimus S).

    http://www.youtube.com/watch?v=FqCiY1mL-GY&feature=player_embedded

    0
    Comment actions Permalink
  • Actually, I feel I'm being quite realistic.

    There are step-by-step instructions on how to clone several donor and target phones, as well as detailed writeups on how things work in general (I should know, I wrote most of the Ting Army wiki).

    Yes, I do wish it was more open to the public (at least read-only to all), but that's not yet something that's been setup.

    0
    Comment actions Permalink
  • Well ##PORT# isnt working for me either. I am assuming I need that mode to get the AAA keys? With DFS, the AAA keys are empty and a few other areas he mentions in that video.

    0
    Comment actions Permalink
  • Nevermind, I got it all working AFAIK. I have 3G working, but I have only tested it at home. I will update you once I have dont further testing, but so far calls, sms, mms, and 3g work just fine as they did when the phone was direct with Sprint. PRL and Profiles updated just like they normally would.

    0
    Comment actions Permalink
  • Mark: I am like you were in that I can't get AAA or HA to read but most of the others read for the Optimus S. Also ##PORT# does not work, just tries to make a phone call instead of opening up entry for MSL. What made yours work? Thank for your help.

    0
    Comment actions Permalink
  • I haven't gotten a chance to write instructions for this on the wiki yet. I need to do so since at ~$50, it seems to be most people's default go to donor phone now. Rough instructions are as follows:

    MSL - pull from CDMA workshop, use the "LG method" under the security tab, works just fine.

    ##PORT# doesn't do anything on the optimus S, it's only necessary for the Optimus V (they went to a lot of trouble to try to prevent modem access).

    You need LGNPST to get this to work. You have to run LGNPST, connect the phone, make sure the LS670.dll is loaded (you load up from the file menu, file attached). On LGNPST, once connected and the phone is detected, hit the "phone setting" button, then hit "read".

    Once that has been read, close LGNPST and then go to DFS and read the profiles after sending the MSL. The AAA keys for both profiles will then be readable.

    0
    Comment actions Permalink
  • Ryan: Have been unable to find a good download for LGNPST. Any suggestions? I did unlock and root my GNexus with NRT. That worked very well. I then was able to get my MSL and SPC with ADB. So far I have not been able to connect my GNexus with Otto's ETS for flashing the GNexus (using the Optimus S donor info). I am using the 64-bit drivers for the GNexus. The 32-bit won.t load on my computer. I am trying on a 32-bit machine later. I don't know how to use the NRT for flashing the required Ting parameters after I get them from my Optimus S. Also what is the $50 item mentioned above? (If someone will do all of this for me for that price, count me in. However, because I would like to learn the process and more about cell phones, I might keep trying.) Thanks for your help.

    P. S. The big bummer is no Nexus for MVNO. It would be nice if that could be straightened out. Then it would be BYOSD!

    0
    Comment actions Permalink
  • Not to sound harsh, but did you bother to google for lgnpst download? The first hit on my results takes me to a working download link from an xda post...You guys have to help yourselves a bit here. Flashing programming information isn't going to work if you can't be a bit resourceful. You have to think a little.

    Also, there are step-by-step instructions on both the wiki and the ting army forums for the galaxy nexus. Read. If you're still absolutely stuck, pop into the irc chat room, I can probably help you.

    0
    Comment actions Permalink
  • WOW... I have done some hacks and mods before but wow, this one is in DEPTH. I've spent most of my today on it and I feel that I have an OK understanding of the process. I have not made any changes to the S3 yet but I was able to read all the current info from both phones. It's getting late here so I will pick up on this another day.
    I got in this situation by making the mistake of jumping the gun a couple of weeks ago after the webcast and ordered an S3 from glyde. I received it yesterday and called up Ting and found out the hard way that they are not supporting this phone. This one would have been a 2nd S3 since I purchased my first from Ting a few months back. I also have a ting LG Optimus from ting that I'm not using so I figured this might be my solution.
    Anyway, I think we should keep this alive as there are others out there that will be able to use any info we have.

    0
    Comment actions Permalink
  • Hi, I been trying to get the HA / AAA keys for my sprint galaxy s3 but no software could read them for me.. I tried (CDMA WorkShop, DFS Tool, CDMA NV Reader, QPST, QXDM) None worked at reading them.. they read the other info fine..

    Do I even need the HA AAA Keys if I decided to put the original S3 ESN back into it?

     

    Thank you.

    0
    Comment actions Permalink
  • I couldn't edit my comment above but I also tried LGNPST when I finally got it to see the phone it asks for my MSL .. I type the correct one in but it says its wrong.

    0
    Comment actions Permalink
  • Any chance we'll see a detailed write up?

    0
    Comment actions Permalink
  • Al Koofi: I would recommend grabbing your HA & AAA keys in case you want to put the original ESN back on (i.e. once Ting gets BYOD for the S3 worked out).  I'm not sure where it's asking for your MSL, but it might be looking for the device password of "01F2030F5F678FF9" or the blank msl "000000".

    Christian: Not from me yet, I still haven't had the time to get the details worked out to get the 3G keys off my Optimus.  I'm guessing that my 64bit Windows 7 had something to do with it, so I've got XP mode installed to try it again... just haven't had time to yet.  Dealing with the pain of 1X until then!

    0
    Comment actions Permalink
  • Peter Porter thanks for your reply.. I got impatient and went ahead and changed the S3 ESN.. to my surprise; thats all I had to do for it to work on Ting :).. everything is working, Voice, Text, MMS, and 3G. as for the HA/AAA I gave up on them.. lets just hope I wont need them when its time to go back to the original ESN.

    0
    Comment actions Permalink
  • Ok, just finished moddying one of my S2's to Cyanogenmod successfully - really nice and fast! so far no issues

    and the LG Marquee also nice and fast, I bought the heavier battery and that thing is now a monster, so far it's been sitting on my desk for 2 days and the battery has gone from 65 to 55% - amazing

    I have 2 other S2's and now I am ready to sacrifice one of them as a donor into an S3

    so if I have to learn/buy one or two the tools you menitioned which one should I go for

    (CDMA WorkShop, DFS Tool, CDMA NV Reader, QPST, QXDM)

    Thx

    0
    Comment actions Permalink
  • Has anyone found a way to grab the original HA & AAA keys from the Samsung Galaxy S3? I just got an M370 to use as a donor but I don't want to ruin my BYOD chances when that is straightened out later this year...

    0
    Comment actions Permalink
  • I haven't been able to read the HA / AAA keys from my Samsung Galaxy S3 using any of the methods I noted above (DFS, Samsung drivers) although I was able to read the HA / AAA keys from my LG Optimus S.  I'm in the same boat as you, I don't want to risk throwing away the keys in my S3 and I haven't heard of a reliable way to regenerate those keys.

    I've decided to live with the 1xRTT connectivity until Ting gets BYOD for the S3 as I heard that it will hopefully be Q1 of this year... hopefully January.

    0
    Comment actions Permalink

Please sign in to leave a comment.