[GUIDE] Band unlocking for OP2 - OnePlus 2 General

After reading through the OPO thread and someone confirming they saw bands unlocked for their OP2, but could not test if they are working as well as reading through the OP3 and similar threads with our processor I finally delved into trying this. Here is the quick guide of how to do it. Sorry if there is any confusion I will try my best to make it concise as possible. This is my first time writing a guide up for XDA.
I have not been able to test each band to confirm it's working, but it is showing up in Network Guru. I am on AT&T so I only unlocked AT&T bands (bc that's all I care about currently and it makes it easier for me to test)
I WILL NOT BE HELD RESPONSIBLE IF SOMETHING WRONG HAPPENS TO YOUR DEVICE BY FOLLOWING THIS GUIDE!
Credit: All my fellow XDA'rs who have been diligently testing, experimenting, bricking/unbricking, creating ROMs, FLASH, Root ability, and Bootloader unlocking. You are the heart and soul of XDA!
[URL="https://forum.xda-developers.com/member.php?u=4066277" @otonieru[/URL] for the concise guide
[URL="https://forum.xda-developers.com/member.php?u=7846474" @baskaflyfer[/URL] Rmt Storage Patch Zip
Here is the OP3 thread I based this guide off of and credit to all those mentioned in there as getting this far would have been impossible without them: https://forum.xda-developers.com/oneplus-3/how-to/guide-unlock-additional-lte-bands-t3519563
OKAY:
PreReq's:
1. Rooted
2. TWRP or like
3. RMT Storage patch from OP3 forums: SEE POST BELOW!
4. DFS Explorer - Find via searching XDA, again checking OP3 thread or OPO
5. ADB installed (whether that be minimal ADB or like from other toolboxes out there)
6. QPST - Check forums for download
Guide:
1. Put phone in MTP mode if not default (Some default to charge mode) Just go to status bar and press the charging mode to change to file transfer
2. Place file from PRE-REQ #3 in a folder you'll remember
3. Reboot phone (or shut down) and when coming on hold Vol Down+Power for a few seconds and let go
4. Boot into TWRP
5. Backup (If you don't have a backup of EVERYTHING at this point, probably a good idea to do so)
---If you do take only EFS
And install file from #3
6. Restart into System
7. Open up your CMD and run this ADB command :
adb devices
adb shell
su (you will get pop up on your phone to give root authorization for ADB, authorize it)
setprop sys.usb.config diag,adb (this will open your OP3 diagnostic port)
Click to expand...
Click to collapse
This forces it into DIAG mode, check your Device Manager to see if you see a port connection displaying a COM PORT.. IF NOT, you need to install drivers--Search thread for drivers, likely will be find in original OPO or OP3 thread.
***********THIS SECTION IS PURELY PRECAUTIONARY*********************** SKIP TO 11 IF YOU WANT
Purely precautionary we did not have to restore any QCN as they do in OP3 due to encryption:
8. Install QPST, open QPST
Now fire up QPST and go to "Port" tab, and choose "Add New Port" ,
9. On "Serial/USB Port" tab, unchecked the option of "Show Serial & USB...bl bla bla" option, you will see your phone listed there as a "COM#" (# is a number depending on your PC) choose it, and click "OK"
10. Now choose "Start Clients" from the Menu tab above, and choose "Software Download"
**********************************************************************************
11. CLOSE QPST. Open up DFS Explorer, when the signup option comes up it is up to you whether or not you want to register for an account (Good to support them since it's a good application) If not, press the X and the app will be there
12. You should see your PORT listed as you did on QPST. Double click on it (If you can't; confirm QPST is closed otherwise you won't be able to connect to the port) You should see it turn green and highlighted ONLINE if you successfully connected
13. Go to the "Band" option then click on "LTE"
14. Press READ; Give it a second and you should see all currently enabled bands listed; If you want to compare you can go to "Network Guru" and press the 3 dots on the top right and press Band Locking and then press LTE.. Should list the same ones
15. Check the additional bands (Just because it says it's enabled, doesn't mean hardware wise it will work due to chipset hardware limitations; This is why as you all do this if you can confirm which bands for you connected and/or didn't connect we can keep a running list.)
16. Press "Write"
17. Since we're in Demo mode it will count down and then in the LOG box you'll see operation successful
18. Restart the phone at this point and disconnect the cable
19. Wait until it boots up again and go to "Network Guru" press the 3 dots again and go to Band Locking and you should see the new bands listed
*If you don't press the 3 dots and press Clear forcings and it'll prompt that a power cycle may occur; That's okay, let it, mine did, wait until the phone comes back up and repeat 19 and the new bands should be listed.
20. LET US KNOW ON THIS THREAD what bands are working, what aren't. It will allow us to further play with the device to discover if there's limitations or if further editing is required like in the OP3.
*Please press THANK YOU if this guide was helpful.
**Sorry for the missing of some info in the guide! Seems when I added the HYPERLINK it removed most of the other text before it so it started at #4 instead of the remainder of #1-3

---

Direct link to RMT STORAGE PATCH:
Rmt Storage Patch Zip

---

usb debugging should be enabled i think, you didn't mentioned that. " (this will open your OP3 diagnostic port)" and here should be op2 i think. thanks for thread, i have a2005 and want to unlock 20 band(800mhz), will try asap, now i have exams running out of time. btw, so the risk of breaking phone is low right, this steps only modify EFS partition only? so hybrid recovery and flashfire can backup/restore if enything goes wrong

---

What is the benefit from this? Better reception?
Sent from my ONE A2005 using Tapatalk

---

So... Are your at&t bands working now? Which bands specifically?
我從使用 Tapatalk 的 Nexus 9 發送

---

Still something is missing
Hi, I think something is missing. Let me describe what I have done on a A2005:
1- I downloaded the rmt_storage from the link provided on Pre-reqs #3.
2- I backed up EFS, installed the patched rmt_storage, reboot into system.
3- I installed the modified HTC modem driver as unsigned driver, did the adb diag port commands, and the phone is recognized by DFS.
4- On DFS, I must click on SPC 000000 since the log shows errors. I'm not sure if a specific SPC value is required ***
5- When I click on Read, it captures the values, I wanted to add Band 3 (1800) so I checked it and then clicked on write. The logs showed that the write was successful.
6- I restart the phone, connect it and load adb diag port commands again, load DFS, click on read and the values stay
7- When I open Network Guru on locked LTE bands, the list shows me the previous one, as if nothing has been written. I restarted the phone already several times, still no LTE on Band 3.
Besides the SPC code, I might think that:
- The rmt_storage somehow it's not working
- DFS keeps the values but they are not reflected into Network Guru or phone. I already set 4G/3G/2G enabled on the connectivity options. No changes
- Maybe there is another value that needs to be changed with another tool such as QXDM
Any help would be very appreciated!!!

---

haroldgv said:
Hi, I think something is missing. Let me describe what I have done on a A2005:
1- I downloaded the rmt_storage from the link provided on Pre-reqs #3.
2- I backed up EFS, installed the patched rmt_storage, reboot into system.
3- I installed the modified HTC modem driver as unsigned driver, did the adb diag port commands, and the phone is recognized by DFS.
4- On DFS, I must click on SPC 000000 since the log shows errors. I'm not sure if a specific SPC value is required ***
5- When I click on Read, it captures the values, I wanted to add Band 3 (1800) so I checked it and then clicked on write. The logs showed that the write was successful.
6- I restart the phone, connect it and load adb diag port commands again, load DFS, click on read and the values stay
7- When I open Network Guru on locked LTE bands, the list shows me the previous one, as if nothing has been written. I restarted the phone already several times, still no LTE on Band 3.
Besides the SPC code, I might think that:
- The rmt_storage somehow it's not working
- DFS keeps the values but they are not reflected into Network Guru or phone. I already set 4G/3G/2G enabled on the connectivity options. No changes
- Maybe there is another value that needs to be changed with another tool such as QXDM
Any help would be very appreciated!!!
Click to expand...
Click to collapse
what and where is PRE-REQ #3?

---

haroldgv said:
Hi, I think something is missing. Let me describe what I have done on a A2005:
1- I downloaded the rmt_storage from the link provided on Pre-reqs #3.
2- I backed up EFS, installed the patched rmt_storage, reboot into system.
3- I installed the modified HTC modem driver as unsigned driver, did the adb diag port commands, and the phone is recognized by DFS.
4- On DFS, I must click on SPC 000000 since the log shows errors. I'm not sure if a specific SPC value is required ***
5- When I click on Read, it captures the values, I wanted to add Band 3 (1800) so I checked it and then clicked on write. The logs showed that the write was successful.
6- I restart the phone, connect it and load adb diag port commands again, load DFS, click on read and the values stay
7- When I open Network Guru on locked LTE bands, the list shows me the previous one, as if nothing has been written. I restarted the phone already several times, still no LTE on Band 3.
Besides the SPC code, I might think that:
- The rmt_storage somehow it's not working
- DFS keeps the values but they are not reflected into Network Guru or phone. I already set 4G/3G/2G enabled on the connectivity options. No changes
- Maybe there is another value that needs to be changed with another tool such as QXDM
Any help would be very appreciated!!!
Click to expand...
Click to collapse
In Network Signal Guru, choose clear forcing. And check the LTE bands again,
or, install Network Signal Guru after you done unlocking, else it will show what it remember on previous set up
---------- Post added at 01:44 PM ---------- Previous post was at 01:43 PM ----------
chxei said:
what and where is PRE-REQ #3?
Click to expand...
Click to collapse
the guide forget to mention that u need to flash rmt storage patch before do any modification,
else no mod will be saved (will revert upon boot)
the patch is in my OP3 thread

---

Thanks! So today's update:
1- I connected the phone again, ran adb commands, reviewed the bands again on DFS tool and settings stayed. I'm pursuing to enable Band 3
2- I uninstalled Network Signal Guru
3- On Recovery, flashed again the patched rmt_storage, boot the phone, wrote the values again on DFS tool. Reboot phone
4- I installed Network Signal Guru and now it's showing up on the bands lists. I unchecked the bands default on A2005 and used the ones from Eruper/Asia Model as FDD-LTE: Bands 1/3/5/7/8/20 and TDD-LTE: Bands 38/40/41. My provider in Costa Rica (Movistar) uses Band 3 (1800) for their LTE. I clicked on Band locking, clicked on GSM and WDCMA and removed all checks. Then clicked on LTE and left all LTE bands in hopes that it will connect to that frequency. The list shows:
B1: 2100
B3: 1800+
B5: 850
B7: 2600
B8: 900 GSM
B20: 800 DD
B38: TDD2600
B40: TDD 2300
B41: TDD 2500
When I only picked LTE bands as checked, it never resovled to get connected to any cell base.
5- I dialed *#*#4636#*#* to access the information about the phone and monitored the signal setting it up to "LTE Only". No signal on that either
Top of my head, I will restore the qcn backup I made and restore the backup I made for EFS and start again. Now it's saving values after reboot, which is great, but not identifying anything.
Is there any log worth posting here? I read on the OP3 guide that they were restoring a qcn file with bands enabled. Is it worth trying the same?
Anyone that has LTE band 3 enabled would be very appreciated if they post their qcn backup

---

t99220475 said:
So... Are your at&t bands working now? Which bands specifically?
我從使用 Tapatalk 的 Nexus 9 發送
Click to expand...
Click to collapse
I have not been able to further test as all the phones I compare to that are also AT&T ie: AT&T S6 are connected to the same Bands as me so cannot test til I get to an area where other bands are available currently. Will report back as I can test, but was hoping others can test in the mean time as well.

---

haroldgv said:
Thanks! So today's update:
Click to expand...
Click to collapse
You shouldn't need to restore any QCN or EFS, just re-check the bands you unchecked and it should pickup all the bands again. Also, confirm your APN is correct to be used with LTE?
Did you get ANY LTE Bands before this mod? Or you only have LTE on Band3?
You can use RAT locking to enable LTE Only rather than unchecking all the WCDMA and GSM bands. that way it'll force LTE, if it doesn't go to the Cellular Network tab and press the Preferred NETWORK to go to LTE ONLY.

---

sadly for me nothing happened, i have a2005 and want to add band 3 and band 20, did everything 2-3 times whats in a guide, everything went well, write process was comlete but bands didn't added

---

When you say didn't add, you don't see them in network guru or you see then, but unable to catch signal on them?

---

aurfawce said:
When you say didn't add, you don't see them in network guru or you see then, but unable to catch signal on them?
Click to expand...
Click to collapse
both, not shown in neywork guru, nor lte signal

---

chxei said:
both, not shown in neywork guru, nor lte signal
Click to expand...
Click to collapse
You tried to force clear in network guru? If so, when you reconnect and enter diag mode and go to DFS, press bands and LTE, press read, did the changes you made stick?

---

Just so ppl around here know... there is old forum about band OPT band unlocking with various trials of changing bands, which failed, due to missing RMT patch OR BUT it got MANY juicy info !!!
in the past other users sent me qcn/qcnx files of the EU and CN models ( credit: whoever sent me these files from the old thread ) - I hope this help you out.
keep up the good work ! :good:

---

gps3dx said:
Just so ppl around here know... there is old forum about band OPT band unlocking.
( un-successful of course due to missing RMT patch OR modem ( on A2005=US) ) with juicy info.
in the past other users sent me qcn/qcnx files of the EU and CN models ( credit: whoever sent me these files from the old thread ) - I hope this help you out.
keep up the good work ! :good:
Click to expand...
Click to collapse
Have you tried what we said here? And tried to see if you can band lock on 3?
I'm going to see the qcn based off of the op3 guide as well as they had to do qcn restoring.

---

aurfawce said:
Have you tried what we said here? And tried to see if you can band lock on 3?
I'm going to see the qcn based off of the op3 guide as well as they had to do qcn restoring.
Click to expand...
Click to collapse
not yet...it will take me some time, i'm a master's student in exam period.
nontheless, as you can see from the old forum, i'm really interested in opening LTE band 3 on my A2005.

---

Thanks guys! I live in Venezuela and we use band 3 for LTE and I have the EU version. I'll try this guide today
EDIT: I tried without success, I did all the process but i do not have LTE signal on Band 3. On Network Guru, Band 3 appears as supported. I tried RAT locking but It keeps without signal.

---

gps3dx said:
Just so ppl around here know... there is old forum about band OPT band unlocking with various trials of changing bands, which failed, due to missing RMT patch OR BUT it got MANY juicy info !!!
in the past other users sent me qcn/qcnx files of the EU and CN models ( credit: whoever sent me these files from the old thread ) - I hope this help you out.
keep up the good work ! :good:
Click to expand...
Click to collapse
Thank you for the qcn files. I've tried it, and it overwrites my imei, which is expected. Then I tried to replace the imei with mine by hex editor, but flashing the modified qcn still overwrites my imei. We may get into the same trouble with op3, which is the imei encryption.