Sponsored Links

Updating the modem firmware of the ZTE MF286d

meritez

ULTIMATE Member
Over here:

Is modem firmware for the ZTE MF286d to bring it up to B11.
Three UK Modem firmware is HGGBMF286DV1.0.0B04

The qualcomm card runs a cut down version of android, now how to get to adb from stock firmware to update the modem firmware.

Code:
The upgrade phase should be done one by one, so if your modem is at B03, you need to upgrade to B04, then B05 and so on.

To see which version you are currently running, use picocom or minicom and connect to /dev/ttyUSB1 and issue "ATI" command.
You will get an output like that:

Manufacturer: ZTE CORPORATION
Model: MF286DMODULE
Revision: BD_TELIAMF286DV1.0.0B11
SVN: 11
IMEI: 86XXXXXX
+GCAP: +CGSM,+DS

The reviersione is this one: BD_TELIAMF286DV1.0.0B11 <-- in this case is 1.0.0 B11

Extract each file called imageB0XnaB0Y (where X is the current build, and Y is the target version).

If your modem is at build 1.0.0B03, you should use files inside imageB03naB06 and so on.

On the folder where you need to update, copy the two files called "delta.package" and "delta.signature" into /tmp folder of your OpenWRT router (on that machine you should have also ADB package installed)

SSH into router, then goes on /tmp and copy these two files into /cache folder of the modem:

adb push delta.package /cache/
adb push delta.signature /cache/

Then open again a session with picocom/minicom to /dev/ttyUSB1 and to these commands:

at+fotactr=0
+FOTACTR: 0,0 <-- if 0, the modem see the update package

at+fotactr=1
+FOTACTR: 1,0 <-- if 0, validation is ok, 1 is failed, 2 is waiting

at+fotactr=5
+FOTACTR: 5,486202 <-- the last number is the byte of the update package (in this case is 486kbyte for the latest OTA to B11)

!!!! THIS COMMAND SHOULD BE DONE ON EACH UPDATE !!!!

at+fotactr=8
+FOTACTR: 8,0 <-- if 0, this will remove old *.flg file from the /cache directory used by latest upgrade

If everything is correct, issue this command will start the update

at+fotactr=2

After 5 minutes the modem will reboot and bring up again. It's necessary to do another "reboot" that will update the "ATI" command output.

You can do this "twice reboot" just on the latest update, so if you are con B03, go up to B11 (you have to copy each time the delta files), when you have done the latest update, just power cycle the router.
 
It can now be updated to b12, difference between B11 and B12, upload carrier aggregation enabled by default.
 
It can now be updated to b12, difference between B11 and B12, upload carrier aggregation enabled by default.
sign of things to come from three??? Upload CA will be a godsend.
 
Sponsored Links
For those who stumble upon this post when researching ZTE MF286D:

This indeed works and requires no access to the modem PCB.

I've got a Three branded MF286D from CEX, updated it to openwrt via ethernet port as suggested by meritez in another post.

Got it configured with QoS/SQM and some other custom modules. However, I was unhappy with the limited band locking and other features, so decided to update from B02 to B12 using the above guidance.

Had no issues apart from one strange output:
at+fotactr=8
+FOTACTR: 8, -1

Where the normal output is 0. Yet, the updates went through after several reboots. Now it's on B12 ready for a new firmware probably from 4IceG with LuCi packages for band locking, etc.
 
Had no issues apart from one strange output:
at+fotactr=8
+FOTACTR: 8, -1
Same here, but like you, could see no ill effect.

Where the normal output is 0. Yet, the updates went through after several reboots. Now it's on B12 ready for a new firmware probably from 4IceG with LuCi packages for band locking, etc.
Yes, the ui thingy for band selection works, although I guess you could do it also from picocom/AT.
 
Sponsored Links
Just got another MF286D off eBay, so I have one to play around with while the other one keeps me connected
So, this one is Three branded and does not appear to have been modified. The GUI shows CR_H3GGBMF286DV1.0.0B07.
My other MF286D was on CR_H3GGBMF286DV1.0.0B04, so have Three pushed a firmware upgrade in the last year or so, or even shipped these with a more recent firmware?

And does B07 suggest that the modem has been upgraded as well (can't see any improvement in the GUI)?
 
Just got another MF286D off eBay, so I have one to play around with while the other one keeps me connected
So, this one is Three branded and does not appear to have been modified. The GUI shows CR_H3GGBMF286DV1.0.0B07.
My other MF286D was on CR_H3GGBMF286DV1.0.0B04, so have Three pushed a firmware upgrade in the last year or so, or even shipped these with a more recent firmware?

And does B07 suggest that the modem has been upgraded as well (can't see any improvement in the GUI)?
Three have pushed a firmware update, think it now supports ipv6 from other forum members.
No idea if the modem was updated though
 
Just got another MF286D off eBay, so I have one to play around with while the other one keeps me connected
So, this one is Three branded and does not appear to have been modified. The GUI shows CR_H3GGBMF286DV1.0.0B07.
My other MF286D was on CR_H3GGBMF286DV1.0.0B04, so have Three pushed a firmware upgrade in the last year or so, or even shipped these with a more recent firmware?

And does B07 suggest that the modem has been upgraded as well (can't see any improvement in the GUI)?
Hi,
Three pushed an update few months ago. The B07 now supports IPv6 and VoLTE for Three/Smarty SIMs. I do not think the modem was updated, it's still not doing downlink 3CA.
 
Last edited:
Sponsored Links
1, 3, 20 and 28
This should work in various combinations with the latest Nordic (Telia) firmware, I'm not sure about the Three firmware though.
This device is listed on cacombos, without any reference to firmware version/variant. Their data looks incomplete as there is no B32 shown, but your combos are there: 20-3-1 and 28-3-1
 
FYI Three has just released another firmware version, B08. I am not sure what changes from B07. Everything works/looks exactly the same.
 
The ZTE web admin panel (& app) tells me a firmware update is available, which it then downloads, attempts to install at reboot, but every time on reboot the update fails

It's currently running firmware VersionNordic_MF286D_B11, I don't know which version it's attempting to install

Does anyone know a way around the failing update, so I can get it installed to discount it from my current connection woes (intermittently horrendous Jitter)
 
The ZTE web admin panel (& app) tells me a firmware update is available, which it then downloads, attempts to install at reboot, but every time on reboot the update fails

It's currently running firmware VersionNordic_MF286D_B11, I don't know which version it's attempting to install

Does anyone know a way around the failing update, so I can get it installed to discount it from my current connection woes (intermittently horrendous Jitter)
I also have a update that fails my firmware is the same as yours also. @meritez Is it the same procedure to update the modems firmware on nordic without openwrt?
 
Sponsored Links
Update procedure was written by me on EKO forum. Anyway do you have B11 installed using the framework that is over internet? In that case B11 is only router part, modem is stuck at B02 if I remember correctly. Only way is to update FOTA BY FOTA on one of these three modes:

- remove the module, put it into mPCIe2USB adapter and do it on PC
- install Openwrt on router board and do it from it
- attach serial console and a pendrive with all FOTA extracted on the router and do from it

I’ll prefer the first option, each time you reset the module also the router board will reboot 😅
 
Hi @stich86
Thanks for the reply and hard work.
I router came with firmware VersionNordic_MF286D_B11 already loaded. this is displayed in the web UI anyway.

I'm sure you are correct and the modem is on a lower firmware version as the available update fails every time in the web UI, but i have not interfaced with the modem via serial to see what firmware is installed on it. I don't have a serial cable and was going to use my raspberry pi sometime this week.

Ideally i wanted to keep it on nordic and update the modem
I was planning to flash the Nordic to Nordic zte mf286d firmware and proceed updating from bxx all the way to b12. Are you saying this way won't update the modem with the board?

maybe a dumb question but, Is it possible to plug the modem directly into the PCIe of a PC motherboard? and update it this way?

What is FOTA? what would be the procedure to update the modem via USB and UART?

Your help is greatly appreciated. I have been reading hundreds of posts and translating pages for days and feel more confused than ever!
 
Hi @stich86
Thanks for the reply and hard work.
I router came with firmware VersionNordic_MF286D_B11 already loaded. this is displayed in the web UI anyway.

I'm sure you are correct and the modem is on a lower firmware version as the available update fails every time in the web UI, but i have not interfaced with the modem via serial to see what firmware is installed on it. I don't have a serial cable and was going to use my raspberry pi sometime this week.

Ideally i wanted to keep it on nordic and update the modem
I was planning to flash the Nordic to Nordic zte mf286d firmware and proceed updating from bxx all the way to b12. Are you saying this way won't update the modem with the board?

maybe a dumb question but, Is it possible to plug the modem directly into the PCIe of a PC motherboard? and update it this way?

What is FOTA? what would be the procedure to update the modem via USB and UART?

Your help is greatly appreciated. I have been reading hundreds of posts and translating pages for days and feel more confused than ever!
the module inside the router is a mini-pcie with usb3.0/usb2.0 lane. If you want to connect on your PC just buy a simple adapter (less then 20€) from Amazon, is the best solution :)

FOTA is the acronym of = firmware over the air, the one that is trying to do the router on the module, but will not function because it's B02/03 for sure

The procedure is the one exposed by @meritez, just need to download the various active, decompress them and copy them to the module using ADB. You should do this procedore for each delta update, because there is no direct file to go from B02/03 to B11/12
 
the module inside the router is a mini-pcie with usb3.0/usb2.0 lane. If you want to connect on your PC just buy a simple adapter (less then 20€) from Amazon, is the best solution :)

FOTA is the acronym of = firmware over the air, the one that is trying to do the router on the module, but will not function because it's B02/03 for sure

The procedure is the one exposed by @meritez, just need to download the various active, decompress them and copy them to the module using ADB. You should do this procedore for each delta update, because there is no direct file to go from B02/03 to B11/12
I think I confused myself. I will try meritez procedure on my Nordic based router
thanks for your help
 
Top
Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £22.99
132Mbps
Gift: None
Vodafone UK ISP Logo
Vodafone £24.00 - 26.00
150Mbps
Gift: None
NOW UK ISP Logo
NOW £24.00
100Mbps
Gift: None
Plusnet UK ISP Logo
Plusnet £25.99
145Mbps
Gift: £50 Reward Card
Large Availability | View All
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
200Mbps
Gift: None
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £22.99
132Mbps
Gift: None
Hey! Broadband UK ISP Logo
150Mbps
Gift: None
Youfibre UK ISP Logo
Youfibre £23.99
150Mbps
Gift: None
Large Availability | View All
Sponsored Links
The Top 15 Category Tags
  1. FTTP (6024)
  2. BT (3639)
  3. Politics (2720)
  4. Business (2439)
  5. Openreach (2405)
  6. Building Digital UK (2330)
  7. Mobile Broadband (2144)
  8. FTTC (2083)
  9. Statistics (1899)
  10. 4G (1814)
  11. Virgin Media (1763)
  12. Ofcom Regulation (1582)
  13. Fibre Optic (1467)
  14. Wireless Internet (1462)
  15. 5G (1405)
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms  ,  Privacy and Cookie Policy  ,  Links  ,  Website Rules