Editing QA Flagging
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 1: | Line 1: | ||
= QA Flag = | = QA Flag = | ||
A QA flag is a value set in [[SC EEPROM]] at address 0x48C0A. When this flag is set, the token is read from SYSCON and decrypted, this gets passed to various modules to unlock certain functionality. | A QA flag is a value set in [[SC EEPROM]] at address 0x48C0A. When this flag is set, the token is read from SYSCON and decrypted, this gets passed to various modules to unlock certain functionality. | ||
= QA Token = | = QA Token = | ||
A QA token is | A QA token is a 80 byte value that determines amount of functionality on your console. | ||
It is signed with a 20 byte SHA1 key then encrypted using AES256CBC. Please see the [[keys]] page. | It is signed with a 20 byte SHA1 key then encrypted using AES256CBC. Please see the [[keys]] page. | ||
Line 10: | Line 9: | ||
<pre> | <pre> | ||
0x00, 0x00, 0x00, 0x01, 0x00, 0x11, 0x22, 0x33, | |||
0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xAA, 0xBB, | |||
0xCC, 0xDD, 0xEE, 0xFF, 0x00, 0x00, 0x00, 0x00, | |||
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |||
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |||
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |||
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |||
0x00, 0x00, 0x00, 0x00, 0x19, 0x4A, 0x4B, 0xBA, | |||
0x15, 0x97, 0xAE, 0x71, 0x36, 0xCC, 0xB6, 0x65, | |||
0x7F, 0xC3, 0xB5, 0x3F, 0x49, 0x22, 0x2F, 0xB1 | |||
</pre> | </pre> | ||
Line 23: | Line 25: | ||
! Address !! Length !! Value !! Description | ! Address !! Length !! Value !! Description | ||
|- | |- | ||
| 0x00 || 0x4 || 0x01 || | | 0x00 || 0x4 || 0x01 || Unknown (Static) | ||
|- | |- | ||
| | | 0x04 || 0x14 || 0x112233445566778899AABBCCDDEEFF || [[IDPS]] | ||
|- | |- | ||
| | | 0x14 || 0x3C || 0x00 || [[#Token Flags|Token Flags]] | ||
|- | |- | ||
| 0x3C || | | 0x3C || 0x80 || 0x194A4BBA1597Ae7136CCB6657FC33F49222FB1 || digest | ||
|} | |} | ||
Line 39: | Line 39: | ||
== Token Flags == | == Token Flags == | ||
The flags are a | The flags are a 40 byte value containing a set of flags that enable specific features on the PS3 console. These flags are largely unknown. | ||
<pre> | |||
QA_FLAG_ALLOW_NON_QA = byte 0x33, bit 0 | |||
QA_FLAG_FORCE_UPDATE = byte 0x33, bit 1 | |||
QA_FLAG_EXAM_API_ENABLE = byte 0x27, bit 0 | |||
QA_FLAG_QA_MODE_ENABLE = byte 0x27, bit 2 | |||
</pre> | |||
< | |||
= Setting QA Flag & Token with Linux = | = Setting QA Flag & Token with Linux = | ||
Line 118: | Line 64: | ||
Type it into my app in the format I provided, click the button, and run that command. Should work. | Type it into my app in the format I provided, click the button, and run that command. Should work. | ||
[http://www.multiupload.com/N3365C67ZT Tokenator.7z (26.42 KB)] | [http://www.multiupload.com/N3365C67ZT Tokenator.7z (26.42 KB)] | ||
[http://psx-scene.com/forums/f149/qa-flags-discussion-86504/index92.html#post842118 Slynk] | [http://psx-scene.com/forums/f149/qa-flags-discussion-86504/index92.html#post842118 Slynk] | ||
== Procedure == | == Procedure== | ||
=== Getting the info === | === Getting the info === | ||
First you need | First you need you IDPS | ||
the easyest way is using graf aim | |||
<pre> | <pre> | ||
./ps3dm_aim /dev/ps3dmproxy get_dev_id | |||
</pre> | </pre> | ||
Write it down and load it | Write it down and load it on the Tokenator app | ||
It will give you the command you should use in linux + your encrypted token | It will give you the command you should use in linux + your encrypted token | ||
something like this | |||
<pre> | <pre> | ||
./ps3dm_um /dev/ps3dmproxy | ./ps3dm_um /dev/ps3dmproxy set_token 0x7E 0xDA 0xE2 0x68... | ||
</pre> | </pre> | ||
=== Setting the token === | === Setting the token === | ||
Line 151: | Line 94: | ||
'''Congrats now you ps3 is QA flagged''' | '''Congrats now you ps3 is QA flagged''' | ||
'''Reboot''' | '''Reboot''' | ||
=== Getting the QA flag menu === | === Getting the QA flag menu === | ||
Set | Set yourself on network settings and press the weird combo | ||
<pre> | |||
L2+R2+L1+R1+L3(this means pressing you left analog stick)+dpad_down | |||
</pre> | |||
= Setting QA Flag & Token with Grafs Payload = | |||
You can follow this tutorial to set the flag and token and then get the menu with the combo needed | |||
You can follow this tutorial to set the flag and token and then get the menu with the combo needed | |||
[http://www.ps3devwiki.com/index.php?title=Graf%27s_PSGroove_Payload#Setting_QA_Mode GrafPayload] | [http://www.ps3devwiki.com/index.php?title=Graf%27s_PSGroove_Payload#Setting_QA_Mode GrafPayload] | ||
= GameOS app to QA flag = | = GameOS app to QA flag = | ||
Glevand's QA flagging tools | |||
[http://wiki.gitbrew.org/index.php/QA_Flagging_Tools Alternative]: | |||
*Source : git://git.gitbrew.org/ps3/otheros-utils/qa_flag.git | *Source : git://git.gitbrew.org/ps3/otheros-utils/qa_flag.git | ||
*Prebuild | *Prebuild package : [http://7track.org/~glevand/public/qa_flag.pkg qa_flag.pkg] | ||
http:// | |||
= QA Flags Features = | |||
== | ==Token seed byte 48=0x02== | ||
===Edy viewer=== | |||
Payment service in japan | |||
more info [http://manuals.playstation.net/document/en/ps3/current/settings/edyviewer.html Edy viewer] | |||
===Debug Settings=== | |||
{|class="wikitable" | |||
|- | |||
! Setting !! Value !! Description | |||
|- | |||
| DTCP-IP || on-off|| '''D'''igital '''T'''ransmission '''C'''ontent '''P'''rotection over '''I'''nternet '''P'''rotocol, a specification for copy protection of copyrighted content that is transferred over digital interfaces in home networks that adhere to IP. Allows you to turn it on or off for PS3. | |||
|- | |||
| ATRAC || on/off || '''A'''daptive '''TR'''ansform '''A'''coustic '''C'''oding is a family of proprietary audio compression algorithms developed by Sony. Allows you to enable or disable ATRAC playback for your PS3 system. | |||
|- | |||
| WMA || on/off || '''W'''indows '''M'''edia '''A'''udio is an audio data compression technology developed by Microsoft. Allows you to enable or disable WMA playback for your PS3 system. | |||
|- | |||
| NP Enviroment || enviroment|| Allows you to change which environment your PS3 connects. Known enviroments are: C1-NP, D2-NP, D2-PMGT, D2-PQA, D2-SPINT, D3-NP, D3-PMGT, D3-PQA, D3-SPINT, D-NP, D-PMGT, D-PQA, D-SPINT, EI-NP, EI-PMGT, EI-PQA, EI-SPINT, HF, HF-NP, HF-PMGT, HF-PQA, HF-SPINT, H-NP, H-PMGT, H-PQA, H-SPINT, MGMT (Management), NP (Retail), PMGT, PQA, PROD-QA (Quality Assurance), Q2, Q2-NP, Q2-PMGT, Q2-PQA, Q2-SPINT, Q-NP, Q-PMGT, Q-PQA, Q-SPINT, RC, RC-NP, R-NP, R-PMGT, R-PQA, R-SPINT, SP-INT (Developer). There might be even more of different environments. See [[Environments]] | |||
|- | |||
| Fake Free Space (for CEX)|| on/off || Use with Fake Limit Size to artificially set the free space on the PS3. | |||
|- | |||
| Fake Limit Size || X MB || Amount of free space left (in MB). | |||
|- | |||
| NP Debug || on/off || | |||
|- | |||
| NPDRM Debug || on/off || | |||
|- | |||
| Edy Debug || on/off || Edy is a payment service in Japan, allows you to enable or disable debugging for Edy Viewer. | |||
|- | |||
| Nav-only NP || on/off || | |||
|- | |||
| Cdda Server || Production/Evaluation || | |||
|- | |||
| Crash Report || on/off || | |||
|- | |||
| Crash reporter Status || Ready/Busy/Never be called || | |||
|- | |||
| VSH Crash Dump Generator || on/off || | |||
|- | |||
| System Update Debug || on/off || Allows you to enable or disable system update debug, which lets you to downgrade with official Sony update manager. | |||
|- | |||
| Information Board QA Server || on/off || | |||
|- | |||
| Format Marlin Personal Data || ? || | |||
|- | |||
| PlaystationRStore Ad Clock || on/off || | |||
|- | |||
| Geo Filtering for PlaystationRStore || Normal/Always Succeed/Always Fail || | |||
|- | |||
| Remove Game License || ? || | |||
|- | |||
| Home Debug || on/off || | |||
|- | |||
| Delete Trophy Personal Data || ? || | |||
|- | |||
| GameUpdate Impose Test || on/off || | |||
|- | |||
| Network Emulation Setting || on/off || | |||
|- | |||
| Auto-Off Debug || on/off || | |||
|- | |||
| WLAN Device || on/off || | |||
|- | |||
| NAT Traversal Information || on/off || | |||
|- | |||
| Internet Browser Debug || on/off || | |||
|- | |||
| SMSS Result Output || on/off || | |||
|- | |||
| Adhoc SSID Prefix || PSP/? || | |||
|- | |||
| Disc Auto-Start at System Startup || on/off || Allows you to start disc in-drive automatically when you start system on. | |||
|- | |||
| 3D Video Output || Automatic/On || Allows you to set 3D Video Output automatic or always on. | |||
|- | |||
| Fake NP SNS Throttle || Off (60 sec)/ On (0,10,120,3600,closed)|| | |||
|- | |||
| Debug for HDD Exchange Utility || || | |||
|- | |||
| Fake Plus || on/off || | |||
|- | |||
| Push Console Binding || on/off|| | |||
|- | |||
| Automatic Download || on/off || Set automatic download on or off. There's not info available what this does change. '''May be automatic system updates!''' | |||
|- | |||
| Motion Controller Calibration Result || on/off || Shows lastest results from motion controller calibration. | |||
|- | |||
| VideoEditor Delete Preset BGM || || | |||
|} | |||
===Install Package Files=== | |||
Will install the first (only the first) package it finds on the root of the USB stick, it will work only with properly signed packages. | |||
==Install Package Files== | |||
Will install | |||
=On 3.6x Firmwares= | =On 3.6x Firmwares= | ||
As we know Sony has <strike>taken QA Flag away</strike> changed the Auth for QA-flag on 3.6x Firmwares. Until someone changes it to work with the new method (which doesnt work on the old), your QA Flag will not work on 3.6x. | As we know Sony has <strike>taken QA Flag away</strike> changed the Auth for QA-flag on 3.6x Firmwares. Until someone changes it to work with the new method (which doesnt work on the old), your QA Flag will not work on 3.6x. | ||