4500 UHF RESET Codeplug

[ki4gyw]

I have a AAM27QNH9JA1AN xpr 4500 uhf I need to reset the codeplug password and remove all of the programing & programing passwords is there a way to do this?

[maelv]

Do you have the codeplug on the pc like a file because then it is pretty easy to recover the password and then open the codeplug in the cps

[ki4gyw]

No, I read the post on recovering th paassword from the codeplug, but I thought about using a demo code plug and writing my radio values into it, to try to load it to bypass the password, but when i try to open it i get a bad data error. Can I not just get a 4500 uhf codeplug and load into it?

[ki4gyw]

Ok, now I have got the info in the codeplug changed but Im getting to codeplug versions and radio version do not match. It tryes to update from device then there's the supersecret comtrain password that I cant get, or them even write me back on...

[nmfire10]

Your best bet is to ask the lawful owner of the radio what the password is.

[ki4gyw]

These were bought at a auction from a company that went out, there is no way to find the previous owners, I hate being stuck with a paperweight! That I payed high dollar for. Does anyone know of a site where maybe I could find some codeplugs to try to get the right version.

[ki4gyw]

Ok thanks for every onces comments here are the instructions that need to be done if I only had a Motorola Online Account!
To retrieve the Firmware and Codeplug update package:

Launch the web browser.
Log onto the Motorola Online website (http://www.motorola.com/businessonline).
Click the Resource Center link and type MOTOTRBO in the Search area.
Select the update package from the available list.
Save the update package (compressed or zipped) onto the desktop.
Extract the compressed folder to the device update folder located in the directory where the CPS is installed. The default path is C:\Program Files\Motorola\MOTOTRBO CPS\deviceupdate.

[wavetar]

No, I read the post on recovering th paassword from the codeplug, but I thought about using a demo code plug and writing my radio values into it, to try to load it to bypass the password, but when i try to open it i get a bad data error. Can I not just get a 4500 uhf codeplug and load into it?

You cannot overwrite the password protected codeplug with another...the CPS prompts you for the password before allowing the 'write' cycle. You can find the password with the Mantisware Triple DES decryptor and the decryption key detailed in the thread you refer to above, along with a hex editor that has a search feature.

[ki4gyw]

I dont have the codeplug i wish i did! i would decrypt it. they would not give me one, it was done by Comtran he told me it would be $100.00 bucks per radio to have it removed (I have three of them) plus i would have to ship it from TN to NY! Guess I have a few paperweights.

[formula1976]

Is there a way to extract the codeplug from the Radio?
Does the RSS have this capability?
Please let me know.

[wavetar]

I dont have the codeplug i wish i did! i would decrypt it. they would not give me one, it was done by Comtran he told me it would be $100.00 bucks per radio to have it removed (I have three of them) plus i would have to ship it from TN to NY! Guess I have a few paperweights.

The Winhex RAM editor method of finding passwords works for TRBO CPS, just like it does for most others as detailed in the thread below:

http://batboard.batlabs.com/viewtopic.p ... lit=winhex

Follow the instructions posted in the thread. If you do a search within Winhex for the string RC_CPPASSWORD, the password will preceed it in several instances...the 6th, 14th, 16th & 18th in my case when I tried it. Good luck.