E5-00 RM-632 после даунгрейта CMLA key Not exist

[Ку3ьмич]

Итак - пришел апарат на русежку, стояла версия 102.002, соотв русского нет, с согласия клиента решили делать даунгрейт (чесно я и забыл, что CMLA корректно не сливается)

Были сделаны бекапы полного РПЛЬ, ПМ, СИМ лока, фул не помню сделан или нет, надо на работе глянуть.

Апарат полностью затерт,

User ACCEPTED FULL ERASE
Dead Mode is Selected
Waiting for USB device...
--- Insert cable and charger or press phone's power button! ---
Connection opened successfully
Waiting for communication response...
BootRom : 1st boot ok
ASIC ID:       000000030000022600010007600C192102031104
CPU ID :       RAPU v11 , Features : Dead-Test , USBRPL , FullUSB
EM0 ID:        00001040
EM1 ID:        00001060
PUBLIC ID:     0D60021025495D4025B8DD17D2E565FC5C549768
ASIC MODE ID:  00
ROOT KEY HASH: 916F75217F32081248B15C38DFC8E81B
ROM ID:        E693EF0DAC22615B
Use RAPUv11_2nd.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing RAWLOADER...
FLIC : 00500020
Req : XSR 1.6
Use RAPUv11_XSR17_alg.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing PASUBTOC ...
Processing ALG ...
Boot Done! :)
TIME : Boot time : 00:00:02 

- > Backup check skipped by user

Reopening the connection...
Waiting for response: 30
ADL: Check mode
Select ASIC [C900]
PAPUBkeys : CCD9F80559BA50D9B3E274F9E7120BE1EE4EEA7C

Reading NPC certificate...
IMEI : 000000000000000
Reading CCC certificate...
Reading HWC certificate...
Reading R&D certificate...
Reading VARIANT certificate...
Reading PARTNERC certificate...
Reading MDM_KEYS certificate...

ADL: Preparing for erase...

Full Erase started...
Asic : CMT , Sub : NAND
Erase Area 0x00000000-0x1FFFFFFF
Erasing Ok , [0F]
Erase done , time : 00:00:07 

ADL: Erase done

Прошит версией 101.003:

ADL: Close_Session
Content: 000205000000000000FFFF00000000
ADL: Reboot
Phone disconected!

Connect phone on selected interface...

Core : v1.61 , BB5XG FlashEngine : v4.0

Selected FlashSettings : Manual
Check FlashFiles, Please, wait...

Files Set for Flashing :
MCU : rm632_101.003_prd.core.fpsx
PPM : rm632_101.003_20.01_Russian_QW1_prd.rofs2.fpsx
PPM2 : rm632_101.003_C00.01_DEFAULT_prd.rofs3.fpsx
CNT : rm632_101.003_U003.000_prd.uda.fpsx
Flashing phone now...
Check files done...
-> SWversion check skipped : Dead mode selected
Dead Mode is Selected
Waiting for USB device...
--- Insert cable and charger or press phone's power button! ---
Connection opened successfully
Waiting for communication response...
BootRom : 1st boot ok
ASIC ID:       000000030000022600010007600C192102031104
CPU ID :       RAPU v11 , Features : Dead-Test , USBRPL , FullUSB
EM0 ID:        00001040
EM1 ID:        00001060
PUBLIC ID:     0D60021025495D4025B8DD17D2E565FC5C549768
ASIC MODE ID:  00
ROOT KEY HASH: 916F75217F32081248B15C38DFC8E81B
ROM ID:        E693EF0DAC22615B
Use RAPUv11_2nd.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing RAWLOADER...
FLIC : 00500020
Req : XSR 1.6
Use RAPUv11_XSR17_alg.fg  ,  Rev : 3.0  Ver : 12.14.0 
Processing PASUBTOC ...
Processing ALG ...
Boot Done! :)
TIME : Boot time : 00:00:02 
Reopening the connection...
Waiting for response: 30
ADL: Check mode
Select ASIC [C900]
PAPUBkeys : blank (Erased or HW failure)
ADL: phone is in flash mode

 === SW Version Check === 
- > Can not collect initial info, continue flashing...
- > Hope, this version will be ok
 === SW Version Check === 

   ===Flashing [MCU]===
Erase : Processing rm632_101.003_prd.core.fpsx
Partitioning....
Partitioning Ok...
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:02 
Write : Processing rm632_101.003_prd.core.fpsx
CMT: Writing Hash CERT [ADA]
CMT: Writing Hash CERT [KEYS]
CMT: Writing Hash CERT [PRIMAPP]
CMT: Writing Hash CERT [RAP3NAND]
CMT: Writing Hash CERT [SOS+PMML]
CMT: Writing Hash CERT [PASUBTOC]
CMT: Writing Hash CERT [PAPUBKEYS]
CMT: Writing Hash CERT [GENIO_INIT]
CMT: Writing Hash CERT [SOS*UPDAPP]
CMT: Writing Hash CERT [SOS*DSP0]
CMT: Writing Hash CERT [LDSP]
CMT: Writing Hash CERT [SOS*ISASW]
CMT: Writing Hash CERT [SOS+CORE]
CMT: Writing Hash CERT [SOS+ROFS1]
Total writen 433 blocks
TIME : Write time : 00:00:15 
MCU Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [PPM]===
Erase : Processing rm632_101.003_20.01_Russian_QW1_prd.rofs2.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:00 
Write : Processing rm632_101.003_20.01_Russian_QW1_prd.rofs2.fpsx
CMT: Writing Hash CERT [SOS+ROFS2]
Total writen 223 blocks
TIME : Write time : 00:00:08 
PPM Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [PPM2]===
Erase : Processing rm632_101.003_C00.01_DEFAULT_prd.rofs3.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:00 
Write : Processing rm632_101.003_C00.01_DEFAULT_prd.rofs3.fpsx
CMT: Writing Hash CERT [SOS+ROFS3]
Total writen 35 blocks
TIME : Write time : 00:00:01 
PPM Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

   ===Flashing [CNT]===
Erase : Processing rm632_101.003_U003.000_prd.uda.fpsx
Erasing....
Erasing Ok...
TIME : Erase time : 00:00:02 
Write : Processing rm632_101.003_U003.000_prd.uda.fpsx
Total writen 97 blocks
TIME : Write time : 00:00:05 
CNT Write done
ADL: Request programm status
NAND status : 0000001C / 0000001C / 00000000

ADL: Close_Session
Content: 0003000000001C0000001C00000000
ADL: Reboot

Flashing done!
Total flash time : 00:00:36
Reboot phone now...

Afterflash not selected, skip
Done!

Phone disconected!

Connect phone on selected interface...

Elapsed: 00:00:55

Зделан рипейр NPC, рипейр SD, рипейр SL, и выборочная авторизация SX4

Connect phone on selected interface...

Phone found!
Series 60 Device detected!
read info...  - Ok

Reading Product code...
Product code : 
Done!

Write Product code to phone...
Write done... Check now...
Product code : 0595183
Code changed Ok!

Checking StartUp data ...
-----------------------
SDD Key status : SDData is Ok
CMLA Key status : CMLA key Not exist
SimLock status : SimLock is Ok

Security status : Security Damaged!!!!! :(
 - > Do Local SX4 or Server SX4 , Upload Tune ( checkbox or manual )

-----------------------

PA_SimLock Version : 
PA_SL3 phone ,  SP_CODE_LEN : 15

Done!

Local SX4 procedure started...

Check SD : Key is Ok
Phone Imei: 353277054526527
Use custom key...
Step 1...
Step 2...
Step 3...
SX4 Auth - Ok
Done!

И селф тесты:

Initializing Tests...
IMEI : 353277054526527 , Phone : RM-632 Nokia E5-00
Get keys...
PASSED | ST_UEM_CBUS_IF_TEST
PASSED | ST_EAR_DATA_LOOP_TEST
PASSED | ST_SIM_CLK_LOOP_TEST
PASSED | ST_SIM_LOCK_TEST
MINOR | ST_SECURITY_TEST
PASSED | ST_PWR_KEY_TEST
PASSED | ST_CURRENT_CONS_TEST
PASSED | ST_HOOKINT_TEST
PASSED | ST_BTEMP_TEST
PASSED | ST_MBUS_RX_TX_LOOP_TEST
PASSED | ST_KELVIN_BATVOLTAGE_TEST
->ERROR | ST_KELVIN_VIBRA_TEST
PASSED | ST_KELVIN_CAPACITOR_TEST
PASSED | ST_KELVIN_MISC_TEST
PASSED | ST_KELVIN_AUDIO_TEST
PASSED | ST_KELVIN_XEAR_TEST
PASSED | ST_AMB_LIGHT_SENSOR_TEST
PASSED | ST_USB_CHARGING_TEST
PASSED | ST_IIC_TEST
PASSED | ST_DIGIMIC_TEST
PASSED | ST_RAM_IF_TEST
PASSED | ST_LED_CONTROLLER_TEST
NOT EXECUTED | ST_CDSP_SLEEPCLOCK_FREQ_TEST
NOT EXECUTED | ST_CDSP_RF_BB_IF_TEST
NOT EXECUTED | ST_CDSP_RF_SUPPLY_TEST
NOT EXECUTED | ST_CDSP_TX_IQ_TEST
NOT EXECUTED | ST_CDSP_TXC_DATA_TEST
NOT EXECUTED | ST_CDSP_RX_PLL_PHASE_LOCK_TEST
NOT EXECUTED | ST_CDSP_TX_PLL_PHASE_LOCK_TEST
NOT EXECUTED | ST_CDSP_WCDMA_TX_POWER_TEST
NOT EXECUTED | ST_CDSP_RX_IQ_LOOP_BACK_TEST
NOT EXECUTED | ST_CDSP_GSM_TX_POWER_TEST
SelfTests end

Соответственно апрат в локал режими не заходит, от ЮСБ, по Ф-бас все конектится.

Как можно выйти из этой ситуации?
ПРошивкаENO, что-то даст, или дорога за новым РПЛЬ ?

Сохраненные Бекапы :