Uploading new firmware to HP lt4120 modem

I've started researching how to configure the modem to work properly in Linux. First thing I checked how it's configuring in Windows drivers. Fortunately I've found drivers installer log with detailed steps to configure it. You can find relevant extract from the log here.

Installer log analyzing results

Reading through log I've found that it checks current firmware version (in Linux it available as 'qmicli --dms-get-revision'), then reboots device to Fastboot mode (using GobiConnect/ChangeDeviceDownLoadMode) and downloads/uploads firmware.

Implementing ChangeDeviceDownLoadMode

This call is present in Gobi driver, so it should use standard qmi protocol. Analyzing USB spoof results using usbpcap/Wireshark I've found that this command have id 0x5556 and have one uint8 parameter, so I've added the call to libqmi. Also I've created program to change the mode that don't require libqmi to implement new calls. You can download it here.

After executing it:
sudo ./x5-set-download-mode -d /dev/cdc-wdm0 -m 5
modem will be switched to fast boot mode:
T:  Bus=01 Lev=01 Prnt=01 Port=02 Cnt=01 Dev#=  8 Spd=480 MxCh= 0
D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=03f0 ProdID=9f1d Rev=01.00
S:  Manufacturer=HP
S:  Product=HP lt4120 Snapdragon X5 LTE
S:  SerialNumber=MDM9625
C:  #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=256mA
I:  If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=42 Prot=03 Driver=(none)

So now we can flash new firmware. It was done by standard fastboot utility. But Windows drivers decrypt files before flash. Quick research showed that the Decrypt.exe utility just drops first 12 bytes of file (may be it also checks CRC)?

After flashing

After flashing modem still don't work. Looks like it require one more part: selecting active config, that is done by MCFG.exe executable. Looks like it use PDC service interface, that completely missed in libqmi. So it will be next target.

Current version of the code can be found in my Github repo: borovsky/x5-snapdragon-linux.

Comments

  1. AnonymousJune 23, 2016 at 4:41 AM

    well done, please, keep investigating -- I look fwd to using my modem again :)

    ReplyDelete

Post a Comment

Popular posts from this blog

Configuring HP lt4120 in Linux

Configuring HP lt4120 in Linux As I mentioned in previous post, updating firmware is not enough, modem needs configuration loaded and activated. Unfortunately there was no implementation of the calls in libqmi, so I've spend last few weeks writing code. I've submitted patches for this calls ( 96465 , 96854 , 96855 ) and this functionality should be soon in upstream. What you need to start using modem in Linux For use configuration script you need to install: Fresh libqmi version with the patches mentioned before Fastboot from android-tools.   Also you need to copy udev configuration file 99-hp-lt4120.rules to /etc/udev/rules.d. Last piece you need is firmware images. You can obtain it from Windows driver directory. In my case I've found it at C:\Program Files (x86)\HP lt4120 Snapdragon X5 LTE\Image How to use it After system startup just run script from root. After few minutes you will have you modem configured. Sometimes you need to make additional
Read more

Configuring HP lt4120 LTE modem in Ubuntu

I've recently bought HP Zbook 15u G3 notebook with HP lt4120 LTE modem. Most of this notebook hardware worked properly out of the box, but the modem didn't So I've started journey to configure it. First steps for configuration I've found on Austrian ubook.at forum . In few words: This modem require some udev configuration for make existing drivers (qmi_wwan and qcserial) to see it. It should be in specific configuration in order of Network Manager to see it. It require firmware loaded to work properly. What I did Installed libqmi-utils Added udev configuration for the modem (from udev.at forum): Network Manager detected mobile broadband, but haven't connected properly to it. Playing around with qmicli, showed that modem can work with no firmware, but network connection to it available only in ipv6 mode (but qmicli --wds-get-default-settings=3ggp states it work in ipv4-or-ipv6 PDP type) and NetworkManager doesn't work properly in this mode. If f
Read more