Need help with root password reset on FX30

[olugovyk]

Trying multiple recommendations listed on this forum, neither helped:

1. holding for 10 seconds reset button while powering FX30: the RSA key is reset (fingerprint is different) but it keeps asking for root password instead of prompting to change it;
2. trying AT RMARESET command:

AT!RMARESET=1
!RMARESET: DEVICE REBOOT REQUIRED

Items Restored:  1282
Items Deleted:   26
Items Defaulted: 0
Items Skipped:   5

OK

followed by reset as in (1) - same result, it keeps asking for root password.
3) reflashed with R15.1.0.004 Firmware for Generic
and repeated (1) and (2) - still no change.

What could I miss?

Some additional details about the FX30:
AT!FWD?ALVER
R15.1.0.004

OK
AT!FWD?DEVTYPE
FX30(WP7702)

OK
AT!IMAGE?
TYPE SLOT STATUS LRU FAILURES UNIQUE_ID BUILD_ID
FW 1 GOOD 2 0 0 ?? 02.36.06.00?
FW 2 GOOD 1 0 0 ?? 02.22.12.00?
FW 3 GOOD 1 0 0 ?? 02.36.08.01?
Max FW images: 3
Active FW image is at slot 1

TYPE SLOT STATUS LRU FAILURES UNIQUE_ID BUILD_ID
PRI FF GOOD 0 0 0 001.067_002 02.36.06.00_ATT
PRI FF GOOD 0 0 0 001.071_002 02.36.06.00_GENERIC
PRI FF GOOD 0 0 0 001.043_002 02.36.06.00_SIERRA
PRI FF GOOD 0 0 0 001.059_001 02.36.08.01_TELSTRA
PRI FF GOOD 0 0 0 001.042_003 02.22.12.00_VERIZON
Max PRI images: 50

OK
AT!PACKAGE?
1104770_9910239_FX30(WP7702)_02.36.06.00_00_FX30-Series_001.002_000

OK

[jyijyi]

Does this help?

Factory Reset FX30

Thanks for the suggestion, but this command also didn’t work. After that, I connected through serial instead of ethernet, and I was able to use AT commands through that connection. I then reset the FX30, and I know that I successfully reset the FX30 because I had to create a new password whenever I connected again via SSH. What I’m confused about is that everything remained the same on the Octave website (virtual resources, edge actions, observations). I thought that a factory reset would reset …

[olugovyk]

Unfortunately no.
I have tried to do reset using following command:
at!entercnd=“A710”
at!rmareset=1
it didn’t help and still asking for the root password, that’s confusing.

[jyijyi]

Have you tried the (AT!FWD=FACTORYRECOVERY,ENABLE) command which enables factory reset via the push button?

You can also see here

[FX30-4G LTE-M] Wrong /etc size in ls FW14

I tried the swiflash method on the R14 and it doesn’t work (as expected). In all case, the swiflash is not viable for us since we need to erase the overlay on FX30 that are not connected to the PC. Could you confirm that our script that clean the overlay, do enough erasing (we want to create the same behavior as reset.cwe does)?

[olugovyk]

Yes, I did it multiple times, to verify that it is enabled:
…
AT!FWD?FACTORYRECOVERY
ENABLED

OK
…
then press reset button, power ON the modem and keep pushing the reset button for >10seconds.
On the next boot, the RSA key is different, but it still prompts for the root password instead of setting new one.

Also tried to flash older R11 release
FX30_WP77xx_full_R11.0.0.007-generic-SWI9X06Y_02.16.06.00.cwe
and repeat all the procedures:

• reset using reset button
• AT!RMARESET=1
• swiflash -m “wp77xx” -r
  None worked.

[jyijyi]

How about this?

Swiflash -r broken with release 12 on wp77xx?

According to the release note of fw r12, QTI9X07-2870 is to fix userapp partition being erased which is security hole. You might also try the following without downgrading to older version: (Be careful of the mtd number, different FW might have different mtd number for userapp partition !!! ) root@swi-mdm9x28-wp:~# cat /proc/mtd|grep userapp -i mtd16: 08300000 00040000 "userapp" root@swi-mdm9x28-wp:~# pwd /home/root root@swi-mdm9x28-wp:~# ls UART_Test1.wp77xx.update root@swi-mdm9x28-wp:~# fl…

[olugovyk]

unfortunately this can be done if I have ssh access to my modem…

Could you please explain how to get access to linux shell using second UART? I don’t want to reconfigure working UART1, which is used for AT commands, because I will not be able to reset it.

Also is there a way to reboot into bootloader and erase user partition from the bootloader?

[jyijyi]

you can turn the 2nd UART into console port by AT!MAPUART=16,2

[olugovyk]

Yeah, I know the command, sorry for the confusion.
My question was about physical connection?
If it’s over the same USB, I don’t see any new /dev/ttyUSB* after enabling that port with
AT!MAPUART=16,2
In my case there are /dev/ttyUSB0, /dev/ttyUSB1 and /dev/ttyUSB2
The AT command service is on UART1, which is /dev/ttyUSB2 in my case.
I have tried to use both /dev/ttyUSB0 and /dev/ttyUSB1 after enabling second UART, but neither seems to work as linux console.

[jyijyi]

I believe /dev/ttyusb2 is from the AT port of usb , noy uart

And /dev/ttyusb0 and /dev/ttyusb1 are all from the usb port, not uart

[olugovyk]

you are right, /dev/ttyUSB2 is the AT port of usb. So, you are saying, that “AT!MAPUART” command will not have impact on behavior of the /dev/ttyUSB2, am I right?
I still don’t understand how to connect to UART1 and 2 in order to start using them.

[jyijyi]

you should check dmesg to see what device is enumerated when connected to your PC

[olugovyk]

Well, according to dmesg there are only three new devices registered (/dev/ttyUSB0,1 and 2) when connecting usb cable:

[4672355.055925] usb 1-1: new high-speed USB device number 20 using xhci_hcd
[4672355.187346] usb 1-1: config 1 has an invalid interface number: 8 but max is 5
[4672355.187353] usb 1-1: config 1 has an invalid interface number: 19 but max is 5
[4672355.187356] usb 1-1: config 1 has an invalid interface number: 20 but max is 5
[4672355.187359] usb 1-1: config 1 has an invalid interface number: 20 but max is 5
[4672355.187362] usb 1-1: config 1 has no interface number 1
[4672355.187364] usb 1-1: config 1 has no interface number 4
[4672355.187366] usb 1-1: config 1 has no interface number 5
[4672355.195230] usb 1-1: New USB device found, idVendor=1199, idProduct=68c0, bcdDevice= 4.14
[4672355.195237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[4672355.195241] usb 1-1: Product: Sierra Wireless FX30(WP7702)
[4672355.195243] usb 1-1: Manufacturer: Sierra Wireless, Incorporated
[4672355.195246] usb 1-1: SerialNumber: e228582b
[4672355.208449] qcserial 1-1:1.0: Qualcomm USB modem converter detected
[4672355.208628] usb 1-1: Qualcomm USB modem converter now attached to ttyUSB0
[4672355.209599] qcserial 1-1:1.2: Qualcomm USB modem converter detected
[4672355.209723] usb 1-1: Qualcomm USB modem converter now attached to ttyUSB1
[4672355.210706] qcserial 1-1:1.3: Qualcomm USB modem converter detected
[4672355.210833] usb 1-1: Qualcomm USB modem converter now attached to ttyUSB2
[4672355.214205] qmi_wwan 1-1:1.8: cdc-wdm0: USB WDM device
[4672355.214340] wwan wwan0: port wwan0qmi0 attached
[4672355.219096] qmi_wwan 1-1:1.8 wwan0: register ‘qmi_wwan’ at usb-0000:00:14.0-1, WWAN/QMI device, 2a:4e:b5:1c:7e:69
[4672355.224244] cdc_ether 1-1:1.19 usb0: register ‘cdc_ether’ at usb-0000:00:14.0-1, CDC Ethernet Device, 82:c1:25:fa:69:d1
[4672355.323606] qmi_wwan 1-1:1.8 wwp0s20f0u1i8: renamed from wwan0
[4672355.338006] cdc_ether 1-1:1.19 enp0s20f0u1i19: renamed from usb0

In some other thread I saw that there should be separate devices for these UARTS, but not in my case

[jyijyi]

You need to connect another cable for the uart connection

[olugovyk]

Do you mean through the IoT expansion slot?
Because on the FX30 there are only 1xUSB, 1xEthernet and two antennas

[jyijyi]

then there is no UART port for your usage

[olugovyk]

Okay.
Lets return to my question regarding possibility to erase user partition from bootloader.
Is that possible? Or the bootloader allows to download firmware only as mentioned in the description of the “AT!BOOTHOLD” command?

[jyijyi]

I can see there is usb0 interface which is usb ecm port

Are you able to use that port to erase userapp partition?

[olugovyk]

Could you please elaborate on how I can do that?
I cound’t find anything in the documentation retarding erasing userapp through the usb0

[jyijyi]

you can see here:

Swiflash -r broken with release 12 on wp77xx?

According to the release note of fw r12, QTI9X07-2870 is to fix userapp partition being erased which is security hole. You might also try the following without downgrading to older version: (Be careful of the mtd number, different FW might have different mtd number for userapp partition !!! ) root@swi-mdm9x28-wp:~# cat /proc/mtd|grep userapp -i mtd16: 08300000 00040000 "userapp" root@swi-mdm9x28-wp:~# pwd /home/root root@swi-mdm9x28-wp:~# ls UART_Test1.wp77xx.update root@swi-mdm9x28-wp:~# fl…

can you log in to the module console with usb0 now?