There seems to be an awful lot of confusion about radios on the Inspire 4G. Most of the threads out there insist that you need ENG S-OFF to flash a radio. However to root our phones we had to flash a radio without having ENG S-OFF. I am attaching 3 radios known to work on the Inspire, I have prepared them to be flashed without ENG S-OFF and will explain how to make your own in the future. The official radio thread for all our phones(Inspire and Desire HD) is located here:
http://forum.xda-developers.com/showpost.php?p=9891546&postcount=1
More information on Radio S-OFF and ENG S-OFF can be found here:
HTC Vision Wiki
Using ENG S-OFF and fastboot to load radio images is more risky than loading the file on the sdcard and then checking the md5sum of the file because you have verified that the copy to the sdcard was completed correctly, rather than having no check with fastboot loading the file directly.
Quote from HTC Vision Wiki regarding ENG S-OFF:
This is totally optional and dangerous - if the write to the phone partition fails the phone will be bricked. At the moment there is no cure for a phone that has been bricked by a failed hboot install.
***DISCLAIMER***
YOUR WARRANTY IS NOW VOID! I AM NOT RESPONSIBLE IF THIS PROCESS BRICKS YOUR PHONE, CAUSES YOUR GIRLFRIEND/WIFE TO LEAVE YOU, SUMMONS DEMONS, SOILS YOUR IMMORTAL SOUL, ENDS THE WORLD. USE AT YOUR OWN RISK.
***/DISCLAIMER***
Make sure to check that there is no corruption in the process of getting the files and putting them on your sdcard. The best way to check this is to download the file, put it on your phone as PD98IMG.zip and from a command line/terminal, using adb, do:
Code:
adb shell md5sum /sdcard/PD98IMG.zip
*BE VERY CAREFUL WITH THIS PROCESS YOU CAN BRICK YOUR PHONE WITH A CORRUPT RADIO.IMG*
To flash a radio using hboot with radio S-OFF you can simply take the zip file PD98IMG.zip from the hack kit (IN THE RADIO FOLDER) (Thanks ATTN1) and remove the radio.img file from it using winrar or 7zip, and put a new radio.img from elsewhere in the zip named radio.img and using store (NO) compression or Normal compression. Make sure it is named exactly PD98IMG.zip and put it on the root of your sdcard. Reboot your phone into hboot and the new radio will prompt you to load. Press volume up on the phone and it will load automatically and ask you to press power to reboot.
Once you boot up normal you should see the new radio under baseband version in settings/about phone.
If you do not want the radio to flash every time you go into HBOOT you must remove or rename the file at the root of your card to something other than PD98IMG.zip
If you are creating your own PD98IMG.zip files make sure that the radio.img matches the md5sum of the original before placing it in the zip. Here is the md5sum of the 3 radios included in this post:
att - 12.39.60.19_26.06.04.06_M: 99f4994c7b8b193336cad0dc5ffd19b4 radio.img
telus - 12.35d.60.10f_26.06.03.24_M2: edc9b36f3e30b8a3aec0f8e5ebfe9484 radio.img
gb - 12.35d.60.140fU_26.08.03.07_M: b19c70e7d346c9f76ac31e1964fa4238 radio.img
Ace gb s - 12.41.60.19_26.06.04.14_M: 71ba0afe14b1caf5ba29da6f3e2ab755 radio.img
PD98IMG-att-12.39.60.19_26.06.04.06_M.zip
MD5 Checksum: dea534848a9b71fc54878c0111ceed76
PD98IMG-gb-12.35d.60.140fU_26.08.03.07_M.zip
MD5 Checksum: 2cf70fce7c649822bc67a719b0a68d46
PD98IMG-telus-Radio_12.35d.60.10f_26.06.03.24_M2.zip
MD5 Checksum: 64bb83fda93052fcc8c1423b7a433e77
PD98IMG-12.41.60.19_26.06.04.14_M.zip
MD5 Checksum: 9287AB3CE1E84CDCFF634755EA78D1B1
Thanks to clickclickpc for 12.41.60.19_26.06.04.14_M
att - 12.39a.60.19_26.06.06.30_M: 3d1ee5d6ceb4f58c126ffcf956b8fbd7
PD98IMG-att-12.39a.60.19_26.06.06.30_M.zip
MD5 Checksum: 33baebad8b1e7a20f4603aff0ba66468
This is the radio.img and rcdata.img from the newest AT&T ota released today(4/29/2010). I have included the rcdata.img in this for flashing because it apparently has parameters that effect the radio, however I have not found any information regarding what/how/why this all works.
This is the contents of the rcdata.img file in the newest AT&T ota:
Code:
QCT_UMTS_RADIO_VER=1
DisH=2
EnableHTCENS=1
AGPSNVSetting=1
EnDTM=0
MSCMode=10
HSDPACat=10
HSUPACat=6
IMEISVN=3
GEA3=1
QCT_UMTS_RADIO_END=1
For comparison here is the contents of the rcdata.img for the telus, gb, and original att.
Telus 12.35d.60.10f_26.06.03.24_M2:
Code:
QCT_UMTS_RADIO_VER=1
DisH=2
AGPSNVSetting=1
MSCMode=12
HSDPACat=10
HSUPACat=6
IMEISVN=1
GEA3=1
QCT_UMTS_RADIO_END=1
att 12.39.60.19_26.06.04.06_M:
Code:
QCT_UMTS_RADIO_VER=1
DisH=1
EnableHTCENS=1
AGPSNVSetting=1
EnDTM=0
MSCMode=10
HSDPACat=10
IMEISVN=02
QCT_UMTS_RADIO_END=1
GB:
Code:
QCT_UMTS_RADIO_VER=1
MSCMode=10
QCT_UMTS_RADIO_END=1
Downgrade Rom:
Code:
QCT_UMTS_RADIO_VER=1
DisH=2
HSDPACat=10
HSUPACat=6
QCT_UMTS_RADIO_END=1
Good idea. I've been walking people through this for the past week .
Thanks ATTN1 indeed!
How hard would it be to flash a splash screen this way?
Sent from my hmmm the box said Inspire 4G using XDA Premium
App
This should be in the sticky, because it's how radio firmware (aka radios) should always be flashed. It's just safer, and it's not hard. There is just no need to urge people toward eng s-off - when in reality it gets most users absolutely nothing except increased exposure to real trouble.
Excellent.
attn1 said:
This should be in the sticky, because it's how radio firmware (aka radios) should always be flashed. It's just safer, and it's not hard. There is just no need to urge people toward eng s-off - when in reality it gets most users absolutely nothing except increased exposure to real trouble.
Excellent.
Click to expand...
Click to collapse
Agreed. Mods please sticky.
Eng S-off is pretty risky, this is painless.
lrs421 said:
Agreed. Mods please sticky.
Eng S-off is pretty risky, this is painless.
Click to expand...
Click to collapse
so is eng s-off still risky if you don't ever use it? I have installed and flashed a radio that seems to work well with all roms and don't intend on using another one.
Wished I would have been patient
mj0528 said:
so is eng s-off still risky if you don't ever use it? I have installed and flashed a radio that seems to work well with all roms and don't intend on using another one.
Wished I would have been patient
Click to expand...
Click to collapse
The real danger is in the process, if you brick your phone while performing eng s-off you won't be happy. Personally I've never found a need to swap radios, on reflash it. The stock radio is HSUPA with plenty speed.
lrs421 said:
Agreed. Mods please sticky.
Eng S-off is pretty risky, this is painless.
Click to expand...
Click to collapse
Eng S-off should be nonexistent now except for devs. This will save many headaches. Would this help the issue with people having the black screen in CMR? I also think mods should sticky this.
Sent from my Desire HD using XDA Premium App
lrs421 said:
The real danger is in the process, if you brick your phone while performing eng s-off you won't be happy. Personally I've never found a need to swap radios, on reflash it. The stock radio is HSUPA with plenty speed.
Click to expand...
Click to collapse
Is there a way to reverse eng s-off?
mudknot2005 said:
How hard would it be to flash a splash screen this way?
Sent from my hmmm the box said Inspire 4G using XDA Premium
App
Click to expand...
Click to collapse
I believe to update the splash screen you would have to flash hboot, the whole idea of this thread is to not have ENG S-OFF so you don't run the risk of messing up your phone by flashing hboot, whether on purpose or by accident. Barring that, I'm not sure how to flash the splash screen.
mj0528 said:
Is there a way to reverse eng s-off?
Click to expand...
Click to collapse
Yes, flashing back to stock using the PD...zip from the RUU turns it back on.
mj0528 said:
Is there a way to reverse eng s-off?
Click to expand...
Click to collapse
Also, I'm not sure if running the RUU itself puts it back on as I've never tried, maybe someone else can chime in.
I do know that if you extract the rom.zip and rename it to PD98IMG.zip and flash it in hboot it does restore it.
lrs421 said:
Also, I'm not sure if running the RUU itself puts it back on as I've never tried, maybe someone else can chime in.
I do know that if you extract the rom.zip and rename it to PD98IMG.zip and flash it in hboot it does restore it.
Click to expand...
Click to collapse
Running the stock RUU will unroot you, but you'll still be S-Off. Follow the instructions in this (http://forum.xda-developers.com/showthread.php?t=957692) thread to get S-On BEFORE you run the RUU.
Note: If you're flashing the RUU for purposes other than a return, it's not necessary to S-On. You can leave S-Off and still run stock (this is also nice because then you can flash a stock rooted just like they're suggesting flashing the radio, by renaming the ROM's .zip to PD98IMG and flashing through HBoot, rather than going through the whole root process again)
homeslice976 said:
Running the stock RUU will unroot you, but you'll still be S-Off. Follow the instructions in this (http://forum.xda-developers.com/showthread.php?t=957692) thread to get S-On BEFORE you run the RUU.
Note: If you're flashing the RUU for purposes other than a return, it's not necessary to S-On. You can leave S-Off and still run stock (this is also nice because then you can flash a stock rooted just like they're suggesting flashing the radio, by renaming the ROM's .zip to PD98IMG and flashing through HBoot, rather than going through the whole root process again)
Click to expand...
Click to collapse
You're thinking s-on, we're talking about eng s-on. They'e different
lrs421 said:
The real danger is in the process, if you brick your phone while performing eng s-off you won't be happy. Personally I've never found a need to swap radios, on reflash it. The stock radio is HSUPA with plenty speed.
Click to expand...
Click to collapse
Flashing radios and hboots carry the same risks.
This method is safer than using fastboot with eng s-off to flash radios, and it's why I did it this way in the hack kit. If you already have eng s-off, you should still use this method.
lrs421 said:
You're thinking s-on, we're talking about eng s-on. They'e different
Click to expand...
Click to collapse
I was ENG S-Off, and the way I was able to get back to S-On was to rerun steps 2 and 3 of your hack kit, but instead of "./gfree -f" I ran ".g/free -s on" and I was back to S-On. At least that's what bootloader showed. Then I reran the hack kit to obtain S-Off and didn't do the ENG S-Off again.
Towards the middle of the thread I linked was where I got that information. Either way, this is the only way I flash radios anymore.
attn1 said:
Flashing radios and hboots carry the same risks.
This method is safer than using fastboot with eng s-off to flash radios, and it's why I did it this way in the hack kit. If you already have eng s-off, you should still use this method.
Click to expand...
Click to collapse
Thanks, am I correct in saying that flashing back to stock using the rom.zip from the RUU restores it but running the RUU alone will not?
So just having Eng s off and not using it is no danger?
Sent from my Desire HD using XDA Premium App
homeslice976 said:
I was ENG S-Off, and the way I was able to get back to S-On was to rerun steps 2 and 3 of your hack kit, but instead of "./gfree -f" I ran ".g/free -s on" and I was back to S-On. At least that's what bootloader showed. Then I reran the hack kit to obtain S-Off and didn't do the ENG S-Off again.
Towards the middle of the thread I linked was where I got that information
Click to expand...
Click to collapse
That's:
ACE PVT SHIP S-OFF RL
English S-off is not done via the hack kit. It's se[erate from what's above.
http://forum.xda-developers.com/showthread.php?t=994670
Related
NOT COMPATIBLE WITH DEVICES SHIPPED WITH GINGERBREAD 2.3
One click Radio S-OFF tool
YouTube videoHTC - Quietly Unlocked
About:
This tool will make a Desire HD Radio S-OFF after it has been permrooted with Visionary. After running this tool, you can flash any ROM and kernel to your device using ClockworkMod. No bootloader S-OFF needed! You use this tool at your own risk!
What's the difference to other methods?
First of all, this is easy. The steps are straightforward, you do not need to tinker with complicated command line stuff. Radio S-OFF is the way these devices are meant to be made S-OFF, it is a safe way. If you use this method, reverting to stock is very easy! Unfortunately without ENG bootloader (my other tool) you cannot use fastboot commands (advanced stuff) and, for example, my Kernel Update Utility. To make a raw comparison, this tool is for everybody including new users and the eng hboot S-OFF version is for enthusiasts. Many experienced users have both, because having both allows supreme flexibility.
I recommend to use Radio S-OFF instead of traditional bootloader ENG S-OFF, because this can be more easily removed and is much much safer!
System requirements:
Windows XP SP2 or higher
.NET Framework 4.0
HTC Sync (or ADB drivers)
Desire HD with stock kernel (or Apache14's 1.0.7 / 1.1.4 Sense)
It will not work on 1.72.405.3 or higher build, or new radio (12.28b.60.140e_26.03.02.26_M is ok). Downgrade first!!
So, in detail, the Root & S-OFF process goes like this:
Install Visionary
Open Visionary and tap temproot, then attempt permroot now. Your device will reboot.
Connect your phone to a computer (make sure you have USB Debugging enabled. Connect charge only!)
Download the Radio S-OFF tool and place it in the root of your hard drive (c:\[tool folder goes here])
Open my "Desire HD easy radio tool.exe" (Windows 7, right click & run as administrator), choose the first option, click "Do it"! There may be a SuperUser request on your phone, allow it.
Done. (Remember to click the thanks button)
But you might want to continue if you are a new user:
If you want to flash a radio (to improve signal and battery life) some day, do ENG S-OFF (no need to use Visionary again, just run the tool)
To flash a custom rom: Get Rom manager from the market, which will install a ClockWorkMod recovery for you. Just open it up and tap "Flash ClockworkMod recovery"
Download a custom ROM, put it to your SD, and flash it using Rom manager or ClockworkMod itself. You can access ClockworkMod through Rom manager. It is recommended to do "wipe data / factory reset" in ClockworkMod before installing ROM from SD card.
It will create a backup of your phone partition 7 (radio config) to the root of your sdcard, I recommend to keep that somewhere really safe!
To go back to S-ON:
Flash stock ROM (RUU, not over 1.7)
Temproot using Visionary
Use my tool, do Stock CID and S-ON (enter brand CID if you had a branded device, see second post)
Enjoy your factory-state phone
If you like my work, please consider: (or just hit the thanks button )
Thanks: Paul O'Brien for visionary, scotty2 and others who found the method to patch P7, Guhl and everyone else who has worked on the G2 root, gfree and wpthis, link to the source code, those have been released under GPL
Download link is in the end of the second post
[TOOL][VIDEO] One click Radio S-OFF, SimUnlock (Easy Root Guide)
FAQ:
Q: Why is this Radio Tool, does it flash a radio?
- From end user's view, it has nothing to do with radios, the name comes from the S-OFF technique this tool uses.
Q: I cannot find "System Info" in SHIP bootloader
- That is normal, just refer to the CID list when reverting to stock.
Q: How can I revert to full stock, I have ClockworkMod and/or ENG S-OFF too?
- Just follow the S-ON instructions.
Q: Can I use ENG S-OFF with this one? Which one first?
- Yes you can, it does not really matter, but I would do Radio S-OFF first.
Q: Does no fastboot stuff mean slow device startup (no HTC Fastboot)?
- No, I am talking about issuing commands to the bootloader through USB.
Q: Is this Radio S-OFF permanent, does it go away if I flash RUU/factory reset?
- It is permanent until you remove it using this tool.
Q: I already had ENG S-OFF and I ran the tool, how do I find out if it worked?
- If you used the first option, see bootloader system info. There should be CID-11111111.
Q: I have now ENG S-OFF and Radio S-OFF, how do I get to stock?
- Just follow the S-ON instructions, everything will be back to stock.
Q: I have 1.72 or higher system, what should I do??
- Downgrade using this guide, or flash Raidroid if you already have ENG S-OFF & ClockworkMod.
Q: I tried to flash a radio, but it says not allowed!
- You will also need ENG S-OFF to flash radios, because ENG S-OFF enables fastboot commands.
Q: I want to make my device stock, I cannot find the RUU but I have a backup of the stock rom.
- Follow these instructions.
Click to expand...
Click to collapse
Checking the device state:
- Go to the bootloader (turn fastboot off, turn off phone, hold vol- and power)
- If it says ACE PVT SHIP S-OFF in the first line, your device is Radio S-OFF
- If it says ACE PVT ENG S-OFF, you have ENG S-OFF, go to System info
- If system info CID is 11111111, your device is SuperCID
- And if you can verify either Radio S-OFF or SuperCID (and you did both), it worked fine and you have both of them
- You can check your original CID by going to radio tool folder with cmd and typing: "adb shell getprop ro.cid"
Click to expand...
Click to collapse
CID list:
- Unbranded: "HTC__001"
- O2: "O2___102"
- Orange: "ORANG001"
- German T-Mobile: "T-MOB101"
- Vodaphone UK: "VODAP001"
- More here
Click to expand...
Click to collapse
Troubleshooting:
- "Unknown error, probably connection"? See here, try with WiFi enabled.
- If that^ did not help, open a command window, go to the tool folder, and type: "adb shell" and "su". Then leave the window in the background, and run the tool again.
- "SD card failed"? When phone is connected to PC, check with some file manager that SD is accessible and works. Try another SD.
- Make sure you are rooted by downloading Terminal emulator from the market, write "su", '#' should appear.
- Check all the requirements. Twice. HTC Sync is mandatory!
- Keep your phone awake when you are running the tool, a superuser window might appear. You have to allow.
- Check your SD card, and tell us in the thread if a p7backup appeared on it.
- If it says Done and the CID does not change in ENG bootloader, you have most likely flashed too new radio.
Click to expand...
Click to collapse
Downloadcount:
v1: 1402 downloads
v2: 322 downloads
v2.1: 2396 downloads
Please do not re-upload the file anywhere.
WHOA! i just used your last tool to get s-off!
is this better? will it work over the previous one?
It will work over the S-OFF bootloader, I tested it myself
jkoljo said:
It will work over the S-OFF bootloader, I tested it myself
Click to expand...
Click to collapse
I can confirm that.
Hi,
how can i back to original?
My previous attempts have failed.
with friendly greet
starbase64
You will have to wait until Apache14 releases his kernel, which allows you to use command line to flash back the backup that is on your sdcard. The kernel works, so it is just a matter or time
Hi,
can not flash clockworkmod also.
with friendly greet
starbase64
So, this patches radio?
So if we run an oficial RUU or OTA, it overwrites the radio, thus restoring back to S-ON?
ttav said:
I can confirm that.
Click to expand...
Click to collapse
Yep, right on !
Eddie1506 said:
So, this patches radio?
So if we run an oficial RUU or OTA, it overwrites the radio, thus restoring back to S-ON?
Click to expand...
Click to collapse
Nope, will still be S-OFF, it will be 'ACE PVT SHIP S-OFF'
afrcom15 said:
Nope, will still be S-OFF, it will be 'ACE PVT SHIP S-OFF'
Click to expand...
Click to collapse
There is a partition 7 backup. Just restore that!
Sent from my Desire HD using XDA App
afrcom15 said:
Nope, will still be S-OFF, it will be 'ACE PVT SHIP S-OFF'
Click to expand...
Click to collapse
How's that possible?
Sorry I'm confused what this is. What difference to the other s-off tool ?
Sent from my Desire HD using XDA App
vimto25 said:
Sorry I'm confused what this is. What difference to the other s-off tool ?
Sent from my Desire HD using XDA App
Click to expand...
Click to collapse
yes tell us pls
This is permanent radio S-OFF as opposed to just ENG HBOOT S-OFF which can be wiped if you flash a standard ROM/RRU.
Flash this and you'll keep S-OFF no matter what you flash
JonnyFoxtrot said:
This is permanent radio S-OFF as opposed to just ENG HBOOT S-OFF which can be wiped if you flash a standard ROM/RRU.
Flash this and you'll keep S-OFF no matter what you flash
Click to expand...
Click to collapse
wow thanks
cool story!
THIS ROCKS!!!!!!!
If you use this one, you cannot use fastboot commands. If you like to play with your phone, then use the another one. This one is somewhat safer, however. In worst case scenario it is not possible to brick a device by using this tool, although to be honest, the other one has very very strict safety measures, too.
Jonny, the ENG bootloader will also survive a RUU if you do not have radio s-off.
jkoljo said:
If you use this one, you cannot use fastboot commands. If you like to play with your phone, then use the another one. This one is somewhat safer, however. In worst case scenario it is not possible to brick a device by using this tool, although to be honest, the other one has very very strict safety measures, too.
Jonny, the ENG bootloader will also survive a RUU if you do not have radio s-off.
Click to expand...
Click to collapse
so should we flash yes or no?
and why?
I have a backup with my stock ROM but when I go back to it everything still these such as root,s-off,Rom manager . So if I downloaded a clean stock ROM it will take everything off like it was when I first started phone up? And if I use this tool I can use stock ROM and my device is always s-off no matter what I do? Ifso how would you take s-off if needed for warranty issue. Thanks
Sent from my Desire HD using XDA App
DO NOT FLASH A NEW RUU OR OFFICIAL ROM IMAGE UNLESS YOU *REALLY* KNOW WHAT YOU ARE DOING !
The title says it all!
Doktaphex said:
As the title suggests, this is warning against flashing the new RUU_Ace_HTC_WWE_1.72.405.3_R_Radio_12.28e.60.140f_ 26.04.02.17_M2_release. It contains a new version of HBoot that breaks root and standard S-OFF! Please refer to these threads for more info:
http://forum.xda-developers.com/showthread.php?t=879375
http://forum.xda-developers.com/showthread.php?t=875099
You may be safe if you have full radio S-OFF and SuperCID but this is unconfirmed, and I would steer well clear until the DEVs have cracked open this latest HBoot.
Click to expand...
Click to collapse
Confirmed:
Only if you have full radio S-OFF you can 'downgrade' to 1.32xxxxxx and root
Yes, I can confirm that, too. You have to have Super-CID (Radio S-OFF) to downgrade. Rooting is not possible in this new one. Yet.
Can please someone explain me what's the real difference between ENG S OFF But CID 11111 and SHIP S OFF and CID HTC....?
ENG S-OFF: It is engineering bootloader S-OFF (may include Radio S-OFF). Allows custom bootloader commands, for example radio flashing, also allows to install custom roms.
SHIP S-OFF: Radio S-OFF, does not allow radio flashing, but allows ClockworkMod flashing. Usually comes together with SuperCID.
CID 11111111: Super-CID, Super Carrier ID, allows you to downgrade, and flash really anything to the phone without the phone saying "no thanks".
CID HTC__xxx: HTC Carrier ID, does not allow downgrading via RUU, but you can still flash through ClockworkMod if you are S-OFF.
Thank you very much for this answer..I ask because i cannot find this information somewhere in one post!
I am with ENG S-OFF and CID 11111111
So i can flash the new RUU and i am able to revert back to 1.32xxxxxx and root again.Correct?
Looks like its been rooted.
http://forum.xda-developers.com/showpost.php?p=9936625&postcount=91
At least it has if you flash just the system.img
Yeah but it needs clockworkmod, which goes away if people use the actual RUU. Also flashing system.img does not replace the bootloader, so S-OFF stays in fine (also hboot S-OFF).
How can you tell what your CID is?
madindehead said:
How can you tell what your CID is?
Click to expand...
Click to collapse
Bootloader > Fastboot > System Info (or something like that)
If you are SuperCID then it is 11111111 if not, then it begins with HTC_xxxx
looks like also this RUU_Ace_Orange_ES_1.75.75.2_Radio_12.28e.60.140f_2 6.04.02.17_M2_release also seems to stop you gaining root and fix's patched Hboot as someone saying he flashed the rom and can't gain root.
joners said:
Looks like its been rooted.
http://forum.xda-developers.com/showpost.php?p=9936625&postcount=91
At least it has if you flash just the system.img
Click to expand...
Click to collapse
can you tell how to extract the system.img from rom?
all i get is a [0] file. dont know what to do with it.
[HOW TO SAFELY FLASH THE NEW ROM AND BE ABLE TO REVERT BACK]
Currently, the new ROM (1.72.405.3) has a new HBOOT (so you can't install ENG HBOOT S-OFF) and is difficult to root (not as simple as it is with previous ROMs). However, it also has a better radio, and a faster ROM with various bugfixes. This ROM is also Android Froyo v2.21. If you want to try out the new ROM, whilst maintaining the ability to 'revert' back to your older, hackable state then follow the below instructions carefully. Also, do not worry about extracting system.img files and whatnot.
*It is recommended to do a NANDROID BACKUP first
*All RUUs can be obtained from www.xdafil.es/DesireHD/RUU/
*If you don't do steps 1-3 properly and flash the new ROM, you will not be able to revert back
*Radio S-OFF and SuperCID can be obtained by following instructions in this thread: http://forum.xda-developers.com/showthread.php?t=857537
*Tutorial for flashing RUUs (needed for steps 4 & 8): http://forum.xda-developers.com/showthread.php?t=841890
1. Install Radio S-OFF (NOT ENG HBOOT S-OFF) and SuperCID
2. Go to bootloader, then System Info. (If System Info is not there, but you have SHIP S-OFF skip step 3 and proceed to step 4)
3. Make sure CID is 11111111 *AND* the bootloader shows S-OFF. If not, repeat step 1
4. You can now flash the new ROM (1.72.405.3)
5. This will remove ENG HBOOT (if you had it) and ClockworkMod
6. If you did steps 1-3 correctly, your Desire HD should still be S-OFF. Go to bootloader and check. If not, you did not do steps 1-3 correctly and will have to wait for the new HBOOT to be cracked.
When you are done with the new ROM and want to go back, follow the instructions below:
7. Download the HTC RUU 1.32.405.6 of your choice (Since you are SuperCID you can flash any RUU)
8. Flash it to your Desire HD
9. Root your ROM using Visionary, and install ROM Manager and flash ClockworkMod. You can optionally install ENG HBOOT S-OFF now if you like.
If you made a NANDROID Backup, you can restore this now from ClockworkMod
joners said:
Looks like its been rooted.
http://forum.xda-developers.com/showpost.php?p=9936625&postcount=91
At least it has if you flash just the system.img
Click to expand...
Click to collapse
I can't get this to work myself, unfortunately.
joners said:
Looks like its been rooted.
http://forum.xda-developers.com/showpost.php?p=9936625&postcount=91
At least it has if you flash just the system.img
Click to expand...
Click to collapse
I have this working. The supplied .zip file does not include Superuser.apk. After following the instructions and then installing Superuser from the market I now have root on this rom.
Look forward to testing it over the next couple of days while I lay in hope of some custom roms based off this version.
EDIT: Superuser keeps force closing
My bootloader says
ACE PVT ENG S-OFF
HBOOT-0.85 2007 (PD9810000)
and system info says
CID-11111111
Am I good to go or shall I do something else?
Thank you for sharing info.
doh!
being used to the days of winmo I flashed this rom over my cyanogen taking a backup first.
Now I can't revert back to the old stock rom, any way of doing this (easily ish)?
Hi, I'm ENG S-Off but my CID is not 1111111, what's the safest way to do the Super-CID?
I'm stucked abroad using a **** phone cos I can't use another sim in my DHD
Sent from my Desire HD using Tapatalk on Revolution 1. 92
ninja.rogue said:
My bootloader says
ACE PVT ENG S-OFF
HBOOT-0.85 2007 (PD9810000)
and system info says
CID-11111111
Am I good to go or shall I do something else?
Thank you for sharing info.
Click to expand...
Click to collapse
Also on the same boat...
Anyone??
ninja.rogue said:
My bootloader says
ACE PVT ENG S-OFF
HBOOT-0.85 2007 (PD9810000)
and system info says
CID-11111111
Am I good to go or shall I do something else?
Thank you for sharing info.
Click to expand...
Click to collapse
looks like you are, you have superCID.
I'm unable to change my radio. I was able to flash it once and it worked fine im currently on radio 06.04.06. Ive tried to flash 3 different radios. I've read up on possible solutions but all of them say you need to have S-Off. Well i have S-off and im still getting the error. Any Solutions here? Ive tried to push thru adb or flash it on my SD via Fastboot. i can boot into recovery CW fine and flash roms and kernels.
I'm not an expert, but go into your bootloader (not recovery) and make sure it says "eng s-off" at the top.
If it is, put the zip file on the root of your SD card and make sure it is named PD98IMG.zip
That is what works for me.
2kgt said:
I'm not an expert, but go into your bootloader (not recovery) and make sure it says "eng s-off" at the top.
If it is, put the zip file on the root of your SD card and make sure it is named PD98IMG.zip
That is what works for me.
Click to expand...
Click to collapse
It says "ace pvt ship s-off rl" no eng off. Isn't this what everyone's says?
Sent from my Desire HD using XDA App
jthornton71707 said:
It says "ace pvt ship s-off rl" no eng off. Isn't this what everyone's says?
Sent from my Desire HD using XDA App
Click to expand...
Click to collapse
You need Engineering S-OFF to flash a radio. There are only a couple steps to attain it.
Skip down to Gaining Engineering S-OFF:
http://www.addictivetips.com/mobile/how-to-gain-s-off-radio-and-engineering-on-htc-desire-hd/
There's an even easier way to do that-
http://forum.xda-developers.com/showthread.php?t=965207
It's in the FAQ.
californiarailroader said:
There's an even easier way to do that-
http://forum.xda-developers.com/showthread.php?t=965207
It's in the FAQ.
Click to expand...
Click to collapse
Thanks for this! I had the SAME problem and you saved my azz! THANKS A MILLION!
Mods: Please mark as solved and move into Inspire 4G General Sub-forum.
Question, I just flashed [ROM]Mar 18[2.3.3]RCMix HD v4.3 Blazingly GingerBread | Build 2.25.1400.1. Now Can I install the stock radio with this rom? I came from a Captivate and the modems were interchangeable, so I was not sure if it's the same with the Inspire.
You can't flash a radio unless you obtain ENG S-OFF first.
On the captivate the radio is just a modem driver file.
On the Inspire the radio is a whole different beast. It's a separate CPU in the phone with it's own security which must be bypassed.
If you have Windows check out http://forum.xda-developers.com/showthread.php?t=896597
if you have a Mac, try http://forum.xda-developers.com/showthread.php?t=987997
You can do it the way Gunny suggested, or if you don't want to obtain ENG s-off you can just redo step 5 of the hack kit, but replace the radio.img file (radio folder of the hack kit, open pd98img.zip with 7zip, replace radio.img) with the radio.img file you download. Some people have beeen warning against using an Engineering bootloader...but I was ENG S-Off for while flashing radios that way and didn't run into any problems
homeslice976 said:
You can do it the way Gunny suggested, or if you don't want to obtain ENG s-off you can just redo step 5 of the hack kit, but replace the radio.img file (radio folder of the hack kit, open pd98img.zip with 7zip, replace radio.img) with the radio.img file you download. Some people have beeen warning against using an Engineering bootloader...but I was ENG S-Off for while flashing radios that way and didn't run into any problems
Click to expand...
Click to collapse
Can you turn eng s-off off?
mj0528 said:
Can you turn eng s-off off?
Click to expand...
Click to collapse
Yes. There's an S-On tool that should do it for you, there are also a few suggestions in the "Return to Stock" thread for doing it through ADB. The way I got back to S-On was redoing step 2 and 3 of the hack kit, but when it tells you to enter ./gfree -f, instead enter "./gfree -s on", then "sync", then you should be back to S-On.
I would think you should only have to do step 3 though. Push rage with hackerize-ace rage, then follow the terminal instructions up until the differences I explained previously.
ok, good to know thanks. I have never owned a HTC, so all of the rom design on this is new to me.
I did the one click root and s-off method. Iv flashed a few roms they all work fine. A few of them have wifi signal problems so i want to try different radios. They say you need eng s-off correct? Not radio s-off? Well this is my real question, in bootloader it says at the top,"ACE PVT SHIP S-OFF RL". So which is it? Radio s-off or eng s-off? Thanks for any help.
BAleR said:
I did the one click root and s-off method. Iv flashed a few roms they all work fine. A few of them have wifi signal problems so i want to try different radios. They say you need eng s-off correct? Not radio s-off? Well this is my real question, in bootloader it says at the top,"ACE PVT SHIP S-OFF RL". So which is it? Radio s-off or eng s-off? Thanks for any help.
Click to expand...
Click to collapse
I think most people would agree unless you are positive you know what your doing...eng s-off is not a good idea. Pretty much any radio you would want to flash can be flashed with just radio s-off....it just has to be in a zip named PD98IMG.zip and pretty much all the radios in this forum can be found in that format.
BAleR said:
I did the one click root and s-off method. Iv flashed a few roms they all work fine. A few of them have wifi signal problems so i want to try different radios. They say you need eng s-off correct? Not radio s-off? Well this is my real question, in bootloader it says at the top,"ACE PVT SHIP S-OFF RL". So which is it? Radio s-off or eng s-off? Thanks for any help.
Click to expand...
Click to collapse
http://forum.xda-developers.com/showpost.php?p=14293652&postcount=928
Check that out. It has a radio packaged in it and instructions on how to install it. And my understanding is that whatever radio you want to install, you can take that radio.img and place it in that zip to replace that radio.img that is in it. Somebody correct me if I am wrong please.
EDIT: Here is another thread with instructions on how to flash a radio WITHOUT eng s-off
http://forum.xda-developers.com/showthread.php?t=1002226
So is it eng? Or radio s-off?
And im running androidrevolution 5.1.9 and i downloaded the radio from that thread but i dont have access to a conputer to zip it and check it correctly, nor can i find the correct ziped version could somebody possibly do this for me? And the ril file? I think the radio for that rom is 12.54.60.25_26.09.04.11_M2 thanks guys!
BAleR said:
So is it eng? Or radio s-off?
And im running androidrevolution 5.1.9 and i downloaded the radio from that thread but i dont have access to a conputer to zip it and check it correctly, nor can i find the correct ziped version could somebody possibly do this for me? And the ril file? I think the radio for that rom is 12.54.60.25_26.09.04.11_M2 thanks guys!
Click to expand...
Click to collapse
If the radio is flashable via hboot, the thread where you found the radio should say that. The file must be named pd98img.zip for hboot to find it. When you flash a radio this way, you only need the s-off you already have (based on what your bootloader screen says). You do not need eng-off. You are good to go. You should not be zipping anything yourself...
PS Just use the stock ATT radio. There is a thread or two with the pd98img.zip that contains the radio and the ril.
Ok, i have the latest ota already, i did the wifi update before i did the one click, i guess all i need now is the matching rl from the radio i mentioned in my op
Someone just started a new thread for inspire radios. He said he will update it every Friday with radios an the matching ril for each radio.
Sent from my Inspire 4G using Tapatalk
Step 1: Find your HBoot flashable PD98IMG.zip file including a radio inside of it, which is compatible with your phone and has been tested and find its md5sum. Make sure that your not downloading a radio.img but a PD98IMG which you always will find here:http://forum.xda-developers.com/showthread.php?t=1002226
Step 2: Check the md5sum on your computer (if your running windows google md5checker or something similar) match them and move it to your sdcard, but NOT in a folder.
Step 3: Check the md5sum again but from your inspire, i use hashdroid personally but theres a terminal command also. Once it matches up you are safe and ready to go, but remember you can't be to safe flashing radio's.
Step 4: Hold down Vol- & Power while phone is off and fastboot is NOT on loading yourself into hboot, next is the suspenseful part (unless you did all the steps above correctly) let it sit for a second and it will load the zip on your sdcard later prompting you to vol+ or - for yes/no select yes if you feel safe and it will flash the radio.
Step 5: Attempt to successfully boot into your current rom and then check the radio firmware by going to menu>Settings>About>Software i believe or something close.
Congratulations you've made it through easily and painlessly without needing to bother with Eng-Off.
Thank Shad0wf0x for this method as i learned from his and attn1's help through alot of irc chatting when i first got my inspire, which was also my first android/ios phone.
BAleR said:
I did the one click root and s-off method. Iv flashed a few roms they all work fine. A few of them have wifi signal problems so i want to try different radios. They say you need eng s-off correct? Not radio s-off? Well this is my real question, in bootloader it says at the top,"ACE PVT SHIP S-OFF RL". So which is it? Radio s-off or eng s-off? Thanks for any help.
Click to expand...
Click to collapse
I don't think anyone has answered the question that he asked. He want to know if he has radio s-off or eng s-off if his bootloader screen said,"ACE PVT SHIP S-OFF RL". Answer is you have radio s-off so you can flash roms via recovery but not radios. Everyone here is just telling you that the eng s-off is not a good idea in order to flash radios and pointing you to posts that shows you how to install radios by using PD98IMG method. I used this post (http://forum.xda-developers.com/showthread.php?t=1106324). All the radios are already named PD98IMG.zip, so all you have to do is place it in your sd card and use Hboot to install it. Also it has correct ril files for the radio that you can flash from cwm recovery (make sure you go to mounts and storage screen and mount/system before you flash ril files when you are in recovery).
I had the same question, now I have both radio and eng s-off, you have to use the eng s-off tool...theres a turoial (to get eng s-off).....