Is the information on this site helpful to you? If so, I am NOT asking for money, but rather that you apply for a new credit card with 0% interest on purchases for 12 months at: ZeroPercentCards.com

Is your credit less than stellar? Then check out the credit card choices at: YoCredit.com

Last updated 1/2/2002 19:00
to send questions or comments, visit the main programming page at: http://bridog.net/cellular/
original file located at: http://bridog.net/cellular/legacy/motorola-startac-7860-7867-7868-and-timeport-8167-8767-cdma-phones/

be sure to check out the ‘Motorola Bible’ at:
http://bridog.net/cellular/the-motorola-bible/

The StarTac 7760, 7860, and 7868; the Timeport 8167 and 8767, and the Vader 8160 all share the same firmware, and consequently, the same programming instructions. The most current firmware version for these phones activated on Verizon Wireless is 7582, which includes capability for mobile-originated short message service (MO-SMS).

I am not sure if these codes are valid for programming TDMA IS-136 StarTacs, such as the ST7797. I do not that it is not possible to change the banner on the TDMA StarTacs. If anyone has any info on programming TDMA StarTacs, please email it to me and I will post it for everyone.

NOTE: This is the only info that I have for the Motorola StarTac 7868. I do not own one of these phones, and know of no further programming codes other than the info presented here, which has been submitted by readers of this page. If you would like to add some info, please drop me a line and I’ll add it to this page.

Wireless Web IP Gateway addresses:

204.147.060.100 – Verizon/Bell Atlantic Mobile
153.114.115.100:01905 – Verizon/AirTouch
153.114.116.100:01905 – Verizon/AirTouch
004.019.002.232 – Verizon/GTE/PrimeCo
208.018.146.075:01905 – Sprint PCS
208.018.146.139:01905 – Sprint PCS

Sprint PCS seems to specify port 1905 on their gateway for wireless web access, however, Verizon/Bell Atlantic Mobile does not. It should be noted that my Sprint PCS Nokia 6185 activated on Verizon/Bell Atlantic Mobile has no trouble accessing the myvzw.com minibrowser website when a minibrowser gateway of 204.147.060.100:01905 is specified.

—
alt.cellular.verizon #73583 (2 + 68 more)
(1)+-(1)+-(1)–(1)
From: fabsambh@msn.com (Sam Hiatt) | \-[1]
[1] Re: Kyocera 7135 on Verizon \-[1]–[1]
Date: Thu Dec 26 11:24:36 EST 2002
Lines: 31

The IP settings are the same for both settings:
199.74.153.210
The port settings should be 9203 and that’s for both as well
—

———- Forwarded message ———-
Date: Sun, 28 May 2000 10:14:36 -0400
From: Erik
Subject: 7868 programming codes

Brian,

Here are some codes and other information that I’ve unearthed from USENET and Verizon Technical Support. According to what I’ve read on USENET, the 7868 is not locked (unless your provider changes the six-digit security code from 000000 to something else while activating your phone.) This is my first phone, so I have no clue what these codes do, I can only extrapolate from what little that I do know:

775 FCN FCN
NAM 1 (I can’t figure out what this is or how to change it. “North American Mobile”? “Normal Analog Mode”?) PRL On (Preferred Roaming List, whatever that is. Hit smart button to toggle off.)
Someone on Usenet writing about this said they changed to SCAN B, entered their cell phone number and system IDs for both AMPS and CDMA, and rebooted. They were trying to set up their 7868 on a 800 MHz CDMA signal in non-Verizon territory.

FCN 0 security code security code RCL
For example, FCN 0 000000 000000 RCL is default. For other security codes, try 123456, 654321, 0 + zip code, or 000 + last three numbers in
cell phone number. Phone displays “Enter MIN”, then displays your cell phone number after a few seconds. I don’t know what a “MIN” is or how to enter one.

When I set up my phone for Phone.com Web Access, the Verizon Technical Support person tried to push me through the programming codes faster than I could write them down, much less remember them. I pretended that a pot of noodles was boiling over on my stove while I ran to fetch a pencil and paper. Then I told him to go slow so I could stir the noodles at the same time. This may not work for all 7868 phones, but it worked for mine.
472337377 FCN FCN (Phone displays “Link.A”.)
STO (Phone displays “IP Addr 1”.)
STO (Phone displays “IP Addr 1, then IP address. The first number in the dotted quat blinks.)
STO (Phone displays “Set”.)
RCL (Phone returns to normal display.)
RCL (No apparent change, but the technical support person did say to hit RCL twice.)
Then the technical support person had me launch the browser on the phone. We set up my email. This involved changes on his computer as well as on my phone, so you probably could not duplicate these changes yourself. I chose my email username and password – the technical support person said that I could change my password later if I couldn’t think up one that I liked – and entered them into the phone using the number keys.

Please let me know if these codes were useful to you. If you find out exactly what they do, let me know.

Thanks!
Erik, bearfort ‘at’ frontiernet.net.

—

easier way to set up browser: ##browser (##2769737)(spell browser on keypad!) thats it!

—

Programming for motorola 78xx series digital/cell phones.
>
> note…. use this at your own risk! You Can seriously screw up your phone and needlessly tie up the cellular system!
>
> For Motorola st 7860 and 7867, the sub code is usually the master code. On the st7868, there is a one-time programming code, as well as a Master Subsidy Unlock code.
>
> Long Programming:
>
> FCN 0, security code twice, RCL….
> default security code is 000000
> STO to save info/scroll
>
> SUBCODE=the subsidy lock code/programming code
> MIN = phone number
> MDN = phone number also
> Country code = 000
> Network code = 00
> AMPS SID = whatever
> CDMA system ID = whatever, (same as above)
> Network ID = 65535
> Primary channel A = 283
> Primary channel B = 384
> Secondary channel A = 691
> Secondary channel B = 777
> Emergency no 1 = (recommend 911)
> Emergency no 2 = whatever (*911??)
> Emergency no 3 = (whatever)
> Security code = XXXXXX
> Lock code = XXX
> SPC code = 000000 (this is the infamous SUB lock code)
> How many nos? = 1 unless using multiple NAM
> Entry done…..
>
> Short Programming:
> enter 74663#1, fcn, fcn to program NAM 1
> enter the subsidy code
> enter the MIN (mobile tel number), press sto
> enter the AMPS home SID, press sto
> enter the CDMA home SID (if prompted), press sto
> entry done… reboot the phone

> Both the Motorola T8767 (Tri-Mode) and ST7868 (Tri-Mode) have the same
programming, as for all the newer Motorola phones.
>
> Punch 7-4-6-6-3-#-FNC-FNC
> NAM1 Phone Number?
> Type in 10-digit phone number, then hit STO.
> NAM1 SID?
> Type in the SID for your local area, then hit STO.
> “Entry Done” should appear.
>
> If STO does not work, try hitting the SEND key or the Smart-Key
(located on the side of the phone. If your phone has a programming lock
code, it will ask you for it before the Phone number step.

—

Programming ST7800W series

To program the Motorola’s ST7800W series you will need primarily Five
Things:

Phone Number _ _ _-_ _ _-_ _ _ _ (10)
Analog System ID _ _ _ _ _ (5)
Digital System ID _ _ _ _ _ (5)
Digital Network ID _ _ _ _ _ (5)
*Most importantly your Programming Lock Code _ _ _ _ _ _ (6) ?

This code is probably programmed by your provider i.e. Verizon,
or at the location where the phone was bought. Getting this code is
probably about the hardest information to find. Last time I called
Verizon CS they said they had the prog lock codes, but wouldn’t give them
out. I am sure if you act really pissed off and sound authoritative
you’ll get what you need.

Next Press

1. 775 FCN FCN or type in PHONE, #>, 1, FCN, FCN
2. Enter your Prog lock code if applicable see Here for Ideas
3. Enter NAM 1 Programming mode Display= Enter MIN
4. Enter your phone number all 10 digits hit STO (e.g.. 888-555-1212)
5. Enter Analog System ID _ _ _ _ _ STO (e.g.. 11111)
6. Enter Digital Network ID _ _ _ _ _ STO (typically 65535)

If you make a mistake you will see “Try Again”, hit CLR and enter the
correct numbers

Programming NAM 2-4

Follow steps 1-6 except in step one sequence enter 2, 3, 4, for NAM 2,3,
or 4. For example to program phone line 2 enter P-H-O-N-E #>, 2, FCN,
FCN and follow steps 2-6

—

(from: http://x62.deja.com/getdoc.xp?AN=717084575 )

USE AT YOUR OWN RISK!!!

Debug/Test Menu Setup:

Put into test mode: FCN 00 ** 83786633 STO
559# then 01000100 STO 01#
(you’re changing bit 6 from 0 to 1)
Activate debug by just pressing FCN FCN.
This is the debug/test menu.
Use standard scroll and select buttons.

IT IS STRONGLY SUGGESTED THAT CAUTION IS USED!

The only selections that should be used are:
Battery Status Mode
Call Status Mode
Vocorder (13K default, I’d leave it where it is)

Call Status Mode – CDMA

AAA BB C DD EEE
FFF GGG H III JJ
KKK LL MM.MM N
OOO PP Q R

AAA = PN of strongest active pilot
BBB = Ec/Io of strongest active pilot
CCC = Number of pilots in active set
DD = Number of pilots in neighbor set
EEE = Current RF channel
FFF = PN of strongest neighbor pilot
GGG = Ec/Io of strongest neighbor pilot
H = Number of pilots in candidate set
III = Call processing state
JJ = Last call indicator
KKK = Current RF RSSI in dBm
LL = Current transmit power in dBm (N/A if idle)
MM.MM = Frame error rate
N = Dropped call counter
OOO = Current service option
PP = Current SID
Q = Current NID
R = Call counter

Call Status Mode – Analog

AAA BBB X 1 384
CCC DDD X IDL NI
XXXX XXX X XXX 0
0 20 X XXX 0

AAA = Current channel
BBB = Word syncs
CCC = RSSI
DDD = Bad words

Battery Status Mode – not charging

AAA `BX C.CC
DD% EF

AAA = Temp in C
`BX X = below
0 = Discharging main
1 = Charging main
2 = Discharging Aux
3 = Charging Aux
C.CC = Voltage of B+ rail
DD% = percentabe of battery remaining
E = values below
0 = Discharging/destroyed
1 = battery detect
2 = waiting to charge
3 = Rapid charge
4 = Top off charge
5 = Maintenence charge
6 = Paused
F = Values below
L = Lithium
N = NMh
U = Does not recognize

Battery Status Mode – Charging

AA `CBDE.EEV
FFFmAGGGmAHI

AA = Temp in C
B = below
0 = Discharging main
1 = Charging main
2 = Discharging Aux
3 = Charging Aux
D = below
F = Fast charge
S = Slow charge
E.EE = Voltage of B+ rail
FFF = Unphased charge current
GGG = Phased charge current
H = below
0 = Discharging/destroyed
1 = battery detect
2 = waiting to charge
3 = Rapid charge
4 = Top off charge
5 = Maintenence charge
6 = Paused
I = Below
L = Lithium
N = NMh
U = Does not recognize

Test Menu Steps and Option Byte Contents

1. SID

2. A Option Byte
A7 – local use
A6 – preferred system, 0=B, 1=A
A5 – end to end signaling
A4 – markov test override, MSB
A3 – markov test override
A2 – not used
A1 – markov test override, LSB
A0 – min mark, 1 = area code sent

3. MIN Mobile ID Number

4. Station Class Mark
010 = CDMA only, non-slotted
042 = CDMA only, slotted
074 = dual mode, non-slotted
106 = dual mode, slotted

5. Access Overload Class

6. Seecurity Code

7. Lock Code

8. Service Level

9. B Option Byte
B7 = Display Pilot Status. Gives the same display as test menu – call
status mode, but stays displayed all the time.
B6 = Enable Test menu
B5 = Paging Channel message filtering
B4 = Portable data logging
B3 = Single serving system scan – only A or only B, depending on step 1
being odd or even (odd A, even B)
B2 = Auto recall
B1 = Disable service levels (call restrictions)
B0 = Lock disable

10. C Option byte
C7 & C6 = no of active NAMs
7 6 #NAMS Programming steps

0 0 1 26
0 1 2 43
1 0 3 60
1 1 4 77

C5 = Test mode enable / Auto Answer
C4 = Auto redial disable
C3 = 3 wire bus speaker disable
C2 = Not used
C1 = Selectable system scan disable
C0 = Diversity antenna

11. AMPS inittial paging channel

12. AMPS initial A channel

13. AMPS initial B channel

14. AMPS dedicated paging channels

15. D option byte
D7 = Enhanced scan
D6 = Cellular connection
D5 = long tone DTMF
D4 = Transportable transducer enable
D3 = Not used
D2 = Handset test mode disable
D1 = Fail Page Indication disable
D0 = Word sync scan disable

16. E option byte
E7 = Not used
E6 & E5 = Preferred Mode

6 5

0 0 CDMA only
0 1 CDMA preferred (default)
1 0 Analog only
1 1 CDMA selected (alternate)
E4 = Extended address method enable
E3 = Preferred analog serving system
E2 = configure for mobile termination using home SID/NID pair
E1 = configure for mobile termination while SID roamer
E0 = configure for mobile termination using home while NID roamer

17. Slot cycle index

18. CDMA SID

19. CDMA network ID

20. Mobile Country Code

21. CDMA Primary Channel A

22. CDMA Primary Channel B

23. CDMA Secondary Channel A

24. CDMA Primary Channel B

25. CDMA SID #2

26. CDMA Network ID #2

Common Test Mode Commands

19# – Software Version

38# – ESN

55# – Test Mode Programming

32# – Total Reset

PRL Select

775 FCN, FCN – PRL on/off

Vocorder Select

VOCODE, FCN, FCN