FM350-GL (installed in ThinkPad P1 Gen 5)

[Bjørn Mork]

Thilo-Alexander Ginkel <thilo at ginkel.com> writes:

> Turns out the challenge needs to be requested via --set-fcc-lock=0,0.

Right.  Makes sense.

> Still, I can't get a valid unlock.

And those challenge input values are correct?  The firware isn't
expecting something other than 0,0?

>> Is this problem the same with the official Lenovo unlock tool and
>> scripts?
>>
>
> Good question. The official beta tool does not even support my laptop model
> - but I can convince it to run by bind-mounting a supported laptop's string
> to /sys/class/dmi/id/product_family.
>
> Is there a way to capture the official tool's communication? AFAICS it is
> using libmbim (?) for the modem communication by calling
> mbim_message_intel_mutual_authentication_fcc_lock_set_new.
>
> Knowing a valid response for a given challenge would help validating the
> hashing algorithm.

If you can get the tool to use the proxy then you could simply inspect
the proxy logs, I guess.  See
https://modemmanager.org/docs/modemmanager/debugging/#qmi-proxy-or-mbim-proxy-debug-logs

Or you could hack the driver to printk the messages.


Bjørn