Koti » Modify Sony Xperia 1 LTE-A band combos

Modify Sony Xperia 1 LTE-A band combos

On this instruction we will modify Sony Xperia 1 band combo profiles with Qualcomm software. Sony smartphones have software limitation and we will unlock this.

Here have list of supported combos

This instruction is for Sony Xperia 1 and newer phones. If you have Sony XZ2 or older, use this instruction. Before you follow instruction, make sure you have already rooted Sony smartphone. Be careful, because this can make your device unusable.

Requirement

  • USB-Cable between your desktop and pyhone
  • On desktop, you must have platform-tools downloaded and drivers for your Sony phone
  • QPST-application. Please find application from internet

Please enable under Developer Tools USB-Debugging on your Android phone. Then connect your phone with USB-cable to desktop. Make sure your USB-default action is “No data transfer”.

Open command line and run adb shell -command:

.\adb.exe shell

enable Qualcomm modem mode:

J9110:/ $ su
J9110:/ # setprop sys.usb.config rndis,eng_mode,adb

If you phone prompt “Allow Access?” dialog, please Deny because this change setprop value back to default.

Open then QPST-application. You should see now your phone on port list automatic. If you don’t see your device on QPST-application, please verify you have Qualcomm Diagnostics Driver installed. It should install automatically from Windows Update to your device.

Check on Device Manager you have Qualcomm Diagnostic Driver installed. You can download and install Drivers also manually.

Open Start Clients -menu -> QPST EFS Explorer. Select your device and wait a moment.

Then go to policyman directory and on directory copy carrier_policy.xml to your desktop. If you have Dual SIM version, you should see also carrier_policy_Subscription01.xml file. This is for second SIM-card.

Before edit any files, make backup all files what you will modify.

Now you can modify band limitations and CA combos to XML file. After modify file, please make sure XML syntax is correct and upload file back to phone. Reboot your phone and then your phone load latest configuration.

Disable Xperia System Service

I recommended disable Xperia System Service on Xperia 1 phone so then it doesn’t load default configs when you swap SIM-cards with Disable Applications [Root] -app.

Modify band support

There is rf_band_list every network. on <include> there is defined bands what is supported per MNC. Here is example Finland and i have added 37 (B38) and 39 (B40). Add +1 to number to know what is real band number.

Modify CA-support

Below you should find your serving CA combo list. There you can remove and add more combos. On screenshot i have removed all Upload CA enabled combos to make sure have best DL experience.

35 thoughts on “Modify Sony Xperia 1 LTE-A band combos”

    1. france wongprasert

      You’re the best. Thank you for adding my country to your table! It appears that the Xperia 1 already supports all the important CA combos here by default it’s nice to know that there is no need add or modify anything to get the best possible speeds that the network allows across all 3 major ISPs here. Even low bands like B8 gets 4x4MIMO which is even better. you’ve helped me make my final decision and now I have the Xperia 1 is right in my hands 😀 I have to say, the LTE speeds I’m getting is noticeably better than my previous phone. Upload CA, 4x4MIMO can finally work at the same time for 3CA B8-B3-B1 and I can’t wait to shatter local records with this device 😉

      Speaking of

      “40C44A-3A4-1A4-mAll
      40C44-3A4A-1A4-mAll
      40C44-3A4-1A4A-mAll”

      Those are really nice combos but unfortunately, B1 and B3 are not configured for CA by “dtac” (not even B3+B1 is allowed). Currently, only intraband CA is allowed on B40. 3 contiguous B40 carriers, each with 20MHz bandwidth can be aggregated giving you an enormous total bandwidth of 60MHz. Nearly every B40 base stations are 4x4MIMO ready too(except indoors.) Another bad news is that currently, all towers that uses Nokia equipment (including my nearest tower) suffers from some kind of optimization problem so a portion of B40 must be temporarily turned off until they get some kind of “software update” from Nokia. Right now, only 40MHz is available. Still, even after reducing the bandwidht, Rank 3 and Rank 4 are still highly unstable even under excellent SNR conditions. As far as I know, Urban Towers that recieve upgrade during ‘phase 1 expansion’ uses Ericsson equipment performs a lot better on B40. Someone managed to achieve 595 mpbs with just B40 with Ericsson station. Almost no one can go past 300mpbs with nokia. Seems like it’s time for me to hunt for the Ericsson towers! 😛

      https://imgur.com/a/OcX3EmA

      Your 800mbps+ result is very impressive! I’m not sure if I’m able to beat that ^^

  1. france wongprasert

    Thank you so much for this 🙂 I am currently looking for a phone that will allow me to achieve Maximum throughput and I think this phone will do the trick. Would you mind adding the CA combos for tha_mccs (520) as well?

    1. Now sheet have tha_mccs (520) added.

      There are best combos i think with 4CA 4×4 MIMO:

      40C44A-3A4-1A4-mAll
      40C44-3A4A-1A4-mAll
      40C44-3A4-1A4A-mAll

      Should offer good speed 🙂 You can also remove / add combos from default list to your mccs so then you can maybe get better throughput. X1 is very good phone to get high speed, my best result is 800Mbps: https://wp.me/p92Xl7-Q6

  2. Sir i have Mi A1 i successfully enabled band 40 intraband CA using qxdm but for interband if i enable it results in unstable signal. Can you suggest any way ? Please reply.

    1. With Xperia 1 that is not recommended because then you wouldn’t get best performance. It’s recommended have best combos enabled on your device, max 128 same time.

  3. Murtaza Saeed

    I’ve got an Xperia 1 (J9110) running on Customized UK firmware, but I’m not in the UK.

    My carrier uses Band 3 (1800 MHz), aggregated with Band 8 (900 MHz) for LTE. However, my phone refuses to detect 900 MHz LTE and only picks up Band 3.

    My Galaxy S10+, Galaxy A70 and other Samsung phones all show 4G+, and they show Band 8 when checking with ServiceMode.

    I’ve tried switching to Customized NOBA and Customized EU firmwares on the Xperia, but it doesn’t help. Still no 4G+.

    Any idea why it won’t use 900 MHz for LTE?

    1. What network you using right now (PLMN)? Sony have carrier policy to define allowed bands and combos.

      1. Murtaza Saeed

        Jazz Pakistan (PLMN 410 – 01).

        Sony phones are no longer officially sold here, so there’s no official local firmware for us to flash, but as I mentioned earlier, 900 MHz LTE doesn’t work with UK, EU or NOBA firmwares.

        1. On Carrier Policy i see on MCC 410 have enabled only bands 1 (2100Mhz), 3 (1800Mhz), 3 (2600Mhz) and 20 (800Mhz). If you have rooted Xperia 1 you can enable band 8 (900MHz) and combos via carrier policy. Changing firmware doesn’t help because carrier policy depends per MCC/MNC/PLMN.

  4. MURTAZA SAEED

    Thanks for the response.

    Why does Sony limit band use based on MCC/MNC and not just keep all bands enabled like other OEMs?

    Is there any way of contacting Sony to get them to update this?

    1. I don’t know really and i think providers should contact to Sony. If you like get B8 enabled, then i think fastest way is just edit Carrier Policy.

      1. Murtaza Saeed

        Thanks for the response. Do I only have to add B8 to the rf_band_list part or do I have to update CA-support as well so that it aggregates B3 and B8?

        1. Yes you have to add to both section to enable B3+B8 CA-combo. rf_band_list enable only single-band support. You can copy combos from other section of carrier_policy.xml

          1. Murtaza Saeed

            Thank you so much for your help. I cleared the entire ca_combos string since I couldn’t figure out which B3+B8 combo to use, but I enabled B8 in rf_band_list and I pushed the carrier_policy file back to the phone and rebooted it.

            CA is working perfectly now. Thanks for this great tutorial and for responding to the comments!

          2. I don’t recommend empty ca_combos string because could cause lots of issues if network doesn’t request bands. If network do, then it’s fine but otherwise your device will load too many combos and then network doesn’t work properly. I recommend set max 128 cacombos to string.

  5. Murtaza Saeed

    Could you let me know what combo to add?

    My carrier uses B3 (1800 MHz, EARFCN 1818, 20 MHz bandwidth) + B8 (900 MHz, EARFCN 3761, 5 MHz bandwidth).

    It’s all 2×2 MIMO with 64QAM.

    1. So just add “8A4A-3A4-mAll;8A4-3A4A-mAll;” to ca_band_combos string and keep also current one. This will enable 3+8 CA on your device. Also on add on rf_band_list “7” to enable B8 single band.

      1. Murtaza Saeed

        Did both those things, 4G+ is working now with both bands.

        Thank you very much for the help.

  6. ้hi i want to know CA intra Band 41( B41+B41 CA)
    what is code 41C44-3A4-1A4A-mAll right? thank

  7. Hi, how do you interpret the strings like “41C44A-mAll”?
    From 3gpp I have the document 38.101-3 that seems to be the on describing combinations and this format is not used in there.

    Actually my problem is that I want to check if the phone does the combo LTE band7 – NR band 78 and I don’t know how to do that.
    I have the file carrier_policy.xml, the phone is rooted. I am working in the OpenAirInterface project and we struggle with this phone to have it connect with our lte-nr setup. And we don’t know why the phone does not accept to go in dual-connectivity mode after we send RRCConnectionReconfiguration. One other phone works. But not this one. So I was wondering that maybe it’s this policy file that needs to be modified. To test that I would need to maybe add the combo. The band 7 is doing 5 MHz with only 1 DL and 1 UL, and the band 78 is 40 MHz, 1 DL and 1 UL. When switching to dual-connectivity mode we close the data bearer on lte side and open it on nr side. That is lte keeps doing control (srb 1 and 2) and nr does data (drb 1).

    Well, that’s it. 🙂 If you could help me here, that would be very nice!

      1. Hi Minh,

        the phone is a prototype (sony xperia something) given to us from an industrial partner. It does report nr band 78 in the UE Capabilities and definitely works with band 7 because it starts the connection on band 7. It also sees the nr band 78 because we receive RRC Measurements for this band. But when instructed to go on nr band 78 it’s a no. We have access to the lte and nr logs (qmdl files) and we have qcat and qxdm to analyse them, but nothing is clear in these logs.

        I was wondering if combo settings in this file could solve the problem.

        So, do you have an example of combo string with lte and nr? What could it be for my case (band 7 and 78)?

        1. Oh nice 🙂

          In Carrier Policies there is no combo string for Dual Connectivity combinations. Combo string is for LTE Carrier Aggregation. I don’t know much new Xperia devices but i have instruction for Xperia 1 mk 2: https://mt-tech.fi/en/modify-sony-xperia-1-ii-lte-a-and-5g-nr-combinations/ .

          I have here Carrier Policy for Sony Xperia 1 mk 2: https://pastebin.com/u2zRGtjy and here is supported combos of Xperia 1 mk 2: https://cacombos.com/device?model=XQ-AT51 . It support 7_n78.

          Maybe it doesn’t report in eutra-nr 7_n78 because 5G is not enabled on your PLMN. Your network of course have to request EUTRA band 7 and NR band 78 in UE Capability Enquiry.

          1. Okay, thanks for pointing out that there is no combo for dual connectivity. One thing ruled out. 🙂

            How can I know if 5G is enabled or not for my PLMN? This is in a configuration file somewhere on the phone?

            In the UE Capability Enquiry we set band 7 and n78, yes.

            The phone only has carrier_policy.xml and device_config.xml.

            If you want, I can provide a pcap trace, but I don’t want to abuse of your time.

            Anyway, thanks for those clarifications.

            The most probable problem we have is some wrong configuration in the RRCReconfiguration message we send to the phone. And we don’t have the cause of error in the qmdl logs. Or we don’t know how to find it.

            Thanks again and keep up the good work you do here!

          2. Yes it’s in carrier_policy.xml file normally. There can see if 5G enabled on your network and of course possible confirm in UE Capability Information message.

Kommentoi