ATT_TFW_US modem settings — build 21.1

carrier-explode iOS carrier and country bundles

ATT_TFW_USUnitedStates country bundle

Phone

overrides_D52g_D53g_D53p_D54p.der.pri Modem package. Read from build 46.1, the newest copy of this bundle with a file for these phones.

Header

PRI Revision

0.3.173

Baseband overrides (57)

Setting	Value
LTE feature disablelikely LTE RRC capability feature-disable bitmap /nv/item_files/modem/lte/rrc/efs/lte_feature_disable
nv_pdown_uim_consecutive_techproblemsunverified SIM setting: UIM / SIM manager / SIM Toolkit /nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems	769
lte_fgi_r10_tddlikely LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability /nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd	14142
lte_fgi_r8likely LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability /nv/item_files/modem/lte/rrc/efs/lte_fgi_r8	15639800300xfe70385d
lte_conn_ctrl_barring_optimz_paramsunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params	1
lte_rrc_sub_feature_enableunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable	"@"
slot_features_status_list__mav_overrideunverified Apple override: Apple override of the Qualcomm item of the same name /nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override	266
SRVCC support SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216) /nv/item_files/modem/nas/nas_srvcc_support	1= On
Refresh vote OKlikely Vote TRUE for SIM REFRESH /nv/item_files/modem/sms/mmgsdi_refresh_vote_ok	0= Off
LTE bands with UL CAlikely LTE bands allowed in uplink carrier-aggregation combos /nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca	B2 B5 B12 B14 B30 B66
LTE band priority listlikely Prioritised band list for LFS/FFS scans (uint16 array) /nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
EN-DC combos per PLMNlikely Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune) /nv/item_files/modem/mav/endc_ca_file_generation	1= On
Block SMS-PP envelopelikely Block SIM Toolkit SMS-PP (data download) envelopes, per subscription /nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub	0= Off
disable_4l_per_bandunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
Call before PS attachlikely Allow data-call origination before PS attach /nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach	0= Off
PDN throttling configlikely Carrier PDN throttling timers /nv/item_files/modem/data/epc/pdn_throttling_config.txt	"FAILURE_TIMER_5:720; "
whitelist_ca_combos_with_laalikely CA combo list: LTE CA / EN-DC band-combination allow/deny list /nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
RPM paramslikely Radio Policy Manager retry limits (10 bytes) /nv/item_files/data/3gpp/rpm_params
ens_slot_enabledunverified SIM setting: UIM / SIM manager / SIM Toolkit /nv/item_files/modem/uim/mmgsdi/ens_slot_enabled	1
lte_fgi_r9likely LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability /nv/item_files/modem/lte/rrc/efs/lte_fgi_r9	0
RPM SIM listlikely SIMs Radio Policy Manager applies to /nv/item_files/data/3gpp/rpm_suppported_sim
Carrier policylikely PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode /policyman/carrier_policy.xml
LTE connection controlunverified LTE connection control /nv/item_files/modem/lte_connection_control	1
LTE disable durationlikely How long LTE stays disabled when CS services are unavailable /nv/item_files/modem/mmode/lte_disable_duration	0
mode_prefunverified Multimode setting: Call manager / system determination /nv/item_files/modem/mmode/mode_pref	92
srv_req_throt_config.txtunverified Data services setting: Data services (PDN, throttling, AT commands) /data/3gpp/throttling/srv_req_throt_config.txt	"FAILURE_TIMER_5:720; "
lte_fgi_r8_tddlikely LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability /nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd	15639800300xfe70385d
blacklist_ca_comboslikely CA combo list: LTE CA / EN-DC band-combination allow/deny list /nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
LTE band preferencelikely LTE band bitmap (bit n = band n+1) /nv/item_files/modem/mmode/lte_bandpref	373833952788470xfffffeffff210000
override_opl_pnn_lookup_for_non_rplmnunverified SIM setting: UIM / SIM manager / SIM Toolkit /nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn	2
Fake eNodeB mitigationlikely LTE false-base-station (fake eNodeB) mitigation /nv/item_files/modem/lte/rrc/bbq/bbq_mitigation	1= On
3gpp_rel_versionlikely 3GPP release: Signalled 3GPP release /nv/item_files/modem/data/3gpp/ps/3gpp_rel_version	5
IMS media service configunverified IMS media (codec/RTP) service config; no public schema /nv/item_files/ims/media_service_config
WCDMA to LTE PS handoverlikely WCDMA->LTE PS handover support /nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support	0= Off
Service request throttle behaviourlikely Service-request throttling behaviour /nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior	1
CSG supportlikely Closed Subscriber Group (femtocell) support /nv/item_files/modem/nas/csg_support_configuration	1
SMS domain preference listunverified Per-RAT/PLMN SMS domain list; layout not public /nv/item_files/modem/mmode/sms_domain_pref_list
SIM refresh retrylikely SIM REFRESH retry parameters (4 x uint32) /nv/item_files/modem/uim/mmgsdi/refresh_retry
LTE feature enablelikely LTE RRC capability feature-enable bitmap; bit list unpublished /nv/item_files/modem/lte/rrc/efs/lte_feature_enable
endc_reduced_cc_lte_fr1_ca_comboslikely CA combo list: LTE CA / EN-DC band-combination allow/deny list /nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos	517
Mode preference police maskunverified Apple mask over the PRI mode preference /mav/mav_police_pri_mode_pref_mask	92
cap_disable_ul_256qamlikely NR UE capability: NR RRC UE-capability toggle /nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam	257
endc_reduced_cc_fr2_ca_comboslikely CA combo list: LTE CA / EN-DC band-combination allow/deny list /nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos	264
IMS enable Enables the IMS task (VoLTE, VoWiFi, SMS over IMS) /nv/item_files/ims/IMS_enable	2
data_3gpp_config.xmlunverified Data services setting: Data services (PDN, throttling, AT commands) /data/3gpp/data_3gpp_config.xml
LTE CA combos per PLMNlikely Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml /nv/item_files/modem/mav/lte_ca_xml_generation	1= On
lte_fgi_r9_tddlikely LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability /nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd	0
ISRlikely Idle-mode Signalling Reduction (TS 23.401) /nv/item_files/modem/nas/isr	1= On
Voice domain preference E-UTRAN voice domain (TS 24.301 9.9.3.44) /nv/item_files/modem/mmode/voice_domain_pref	3= IMS PS voice preferred
lte_fgi_r10likely LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability /nv/item_files/modem/lte/rrc/efs/lte_fgi_r10	14142
cdrx_opt_infounverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/ML1/cdrx_opt_info	257
lte_connection_ctrl_paramsunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_caselikely 5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic /nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case	0
APN reject namelikely APN whose rejection triggers carrier throttling /nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt	"reject_apn:ims; "
endc_whitelist_ca_combos_with_laalikely CA combo list: LTE CA / EN-DC band-combination allow/deny list /nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
Reject LTE null cipheringlikely Reject an LTE NAS Security Mode Command that selects null ciphering (EEA0) /nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering	1= On
lte_mac_enable_aasunverified LTE setting: LTE RRC / L1 / L2 /nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas	0

Setting

Value

LTE feature disablelikely

LTE RRC capability feature-disable bitmap

/nv/item_files/modem/lte/rrc/efs/lte_feature_disable

nv_pdown_uim_consecutive_techproblemsunverified

SIM setting: UIM / SIM manager / SIM Toolkit

/nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems

769

lte_fgi_r10_tddlikely

LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability

/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd

14142

lte_fgi_r8likely

LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability

/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8

15639800300xfe70385d

lte_conn_ctrl_barring_optimz_paramsunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params

lte_rrc_sub_feature_enableunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable

"@"

slot_features_status_list__mav_overrideunverified

Apple override: Apple override of the Qualcomm item of the same name

/nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override

266

SRVCC support

SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)

/nv/item_files/modem/nas/nas_srvcc_support

1= On

Refresh vote OKlikely

Vote TRUE for SIM REFRESH

/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok

0= Off

LTE bands with UL CAlikely

LTE bands allowed in uplink carrier-aggregation combos

/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca

B2 B5 B12 B14 B30 B66

LTE band priority listlikely

Prioritised band list for LFS/FFS scans (uint16 array)

/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2

EN-DC combos per PLMNlikely

Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune)

/nv/item_files/modem/mav/endc_ca_file_generation

1= On

Block SMS-PP envelopelikely

Block SIM Toolkit SMS-PP (data download) envelopes, per subscription

/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub

0= Off

disable_4l_per_bandunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band

Call before PS attachlikely

Allow data-call origination before PS attach

/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach

0= Off

PDN throttling configlikely

Carrier PDN throttling timers

/nv/item_files/modem/data/epc/pdn_throttling_config.txt

"FAILURE_TIMER_5:720; "

whitelist_ca_combos_with_laalikely

CA combo list: LTE CA / EN-DC band-combination allow/deny list

/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa

RPM paramslikely

Radio Policy Manager retry limits (10 bytes)

/nv/item_files/data/3gpp/rpm_params

ens_slot_enabledunverified

SIM setting: UIM / SIM manager / SIM Toolkit

/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled

lte_fgi_r9likely

LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability

/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9

RPM SIM listlikely

SIMs Radio Policy Manager applies to

/nv/item_files/data/3gpp/rpm_suppported_sim

Carrier policylikely

PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode

/policyman/carrier_policy.xml

LTE connection controlunverified

LTE connection control

/nv/item_files/modem/lte_connection_control

LTE disable durationlikely

How long LTE stays disabled when CS services are unavailable

/nv/item_files/modem/mmode/lte_disable_duration

mode_prefunverified

Multimode setting: Call manager / system determination

/nv/item_files/modem/mmode/mode_pref

srv_req_throt_config.txtunverified

Data services setting: Data services (PDN, throttling, AT commands)

/data/3gpp/throttling/srv_req_throt_config.txt

"FAILURE_TIMER_5:720; "

lte_fgi_r8_tddlikely

LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability

/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd

15639800300xfe70385d

blacklist_ca_comboslikely

CA combo list: LTE CA / EN-DC band-combination allow/deny list

/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos

LTE band preferencelikely

LTE band bitmap (bit n = band n+1)

/nv/item_files/modem/mmode/lte_bandpref

373833952788470xfffffeffff210000

override_opl_pnn_lookup_for_non_rplmnunverified

SIM setting: UIM / SIM manager / SIM Toolkit

/nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn

Fake eNodeB mitigationlikely

LTE false-base-station (fake eNodeB) mitigation

/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation

1= On

3gpp_rel_versionlikely

3GPP release: Signalled 3GPP release

/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version

IMS media service configunverified

IMS media (codec/RTP) service config; no public schema

/nv/item_files/ims/media_service_config

WCDMA to LTE PS handoverlikely

WCDMA->LTE PS handover support

/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support

0= Off

Service request throttle behaviourlikely

Service-request throttling behaviour

/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior

CSG supportlikely

Closed Subscriber Group (femtocell) support

/nv/item_files/modem/nas/csg_support_configuration

SMS domain preference listunverified

Per-RAT/PLMN SMS domain list; layout not public

/nv/item_files/modem/mmode/sms_domain_pref_list

SIM refresh retrylikely

SIM REFRESH retry parameters (4 x uint32)

/nv/item_files/modem/uim/mmgsdi/refresh_retry

LTE feature enablelikely

LTE RRC capability feature-enable bitmap; bit list unpublished

/nv/item_files/modem/lte/rrc/efs/lte_feature_enable

endc_reduced_cc_lte_fr1_ca_comboslikely

CA combo list: LTE CA / EN-DC band-combination allow/deny list

/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos

517

Mode preference police maskunverified

Apple mask over the PRI mode preference

/mav/mav_police_pri_mode_pref_mask

cap_disable_ul_256qamlikely

NR UE capability: NR RRC UE-capability toggle

/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam

257

endc_reduced_cc_fr2_ca_comboslikely

CA combo list: LTE CA / EN-DC band-combination allow/deny list

/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos

264

IMS enable

Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)

/nv/item_files/ims/IMS_enable

data_3gpp_config.xmlunverified

Data services setting: Data services (PDN, throttling, AT commands)

/data/3gpp/data_3gpp_config.xml

LTE CA combos per PLMNlikely

Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml

/nv/item_files/modem/mav/lte_ca_xml_generation

1= On

lte_fgi_r9_tddlikely

LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability

/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd

ISRlikely

Idle-mode Signalling Reduction (TS 23.401)

/nv/item_files/modem/nas/isr

1= On

Voice domain preference

E-UTRAN voice domain (TS 24.301 9.9.3.44)

/nv/item_files/modem/mmode/voice_domain_pref

3= IMS PS voice preferred

lte_fgi_r10likely

LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability

/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10

14142

cdrx_opt_infounverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/ML1/cdrx_opt_info

257

lte_connection_ctrl_paramsunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params

mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_caselikely

5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic

/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case

APN reject namelikely

APN whose rejection triggers carrier throttling

/nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt

"reject_apn:ims; "

endc_whitelist_ca_combos_with_laalikely

CA combo list: LTE CA / EN-DC band-combination allow/deny list

/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa

Reject LTE null cipheringlikely

Reject an LTE NAS Security Mode Command that selects null ciphering (EEA0)

/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering

1= On

lte_mac_enable_aasunverified

LTE setting: LTE RRC / L1 / L2

/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas

Legacy NV values (3)

NV	Item	Value
6850	UMTS AMR Codec Preference Configlikely	5
3461	ENS Enabledlikely Enhanced Network Selection	1= On
62005	PRI revision Packed PRI Revision header	11338496= 0.3.1730x0003ad00

Carrier Configuration Management feature groups

25 one-byte flags per group. No source names them; under each set flag is which carriers set it, and what the modem does with it where its code shows. The EVDO, UIM and OMA groups are obsolete in the iPhone 17 modem.

Group	Flags
Call Manager Feature Group NV 62012, 2 of 25 set	0123456789101112131415161718192021222324 12: Set only on AT&T's network (AT&T, its brands and Dish), always with flag 3 of the unnamed group 20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14
Feature Group (unnamed, tag 9f83e453)unverified NV 62035, 1 of 25 set	0123456789101112131415161718192021222324 3: Set only on AT&T's network, always with Call Manager flag 12. The modem checks it in its geo-MCC attach logic, alongside a home-network check (medium confidence)

Group

Flags

Call Manager Feature Group

NV 62012, 2 of 25 set

0123456789101112131415161718192021222324

12: Set only on AT&T's network (AT&T, its brands and Dish), always with flag 3 of the unnamed group

20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14

Feature Group (unnamed, tag 9f83e453)unverified

NV 62035, 1 of 25 set

0123456789101112131415161718192021222324

3: Set only on AT&T's network, always with Call Manager flag 12. The modem checks it in its geo-MCC attach logic, alongside a home-network check (medium confidence)

Legacy NV item list (93)

Green ones have a value above.

259Home SID/NID List176IMSI MCC177IMSI 11 1220Primary CDMA Channel21Secondary CDMA Channel5Slot Cycle Index179Voice Privacy285EVRC Voice Service Options34CDMA Mobile Terminated Home SID Registration Flag35CDMA Mobile Terminated Foreign SID Registration Flag36CDMA Mobile Terminated Foreign NID Registration Flag296OTASP SPC Change304OTKSL Flag261SPASM Protection Per NAM260OTAPA Enabled3533SMS MO Retry Interval240QNC Enabled Flag459Data Services QC Mobile IP460Data Services Mobile IP Registration Retries461Data Services Mobile IP Registration Retries Initial Interval462Data Services Mobile IP Registration Expiration Attempt Reregistration463Data Services Mobile IP Number Profiles546Data Services Mobile IP RFC2002bis MN Home Agent Authenticator Calculation495Data Services Mobile IP Qualcomm PREV 6 MIP Handoff Optimization Enabled854Data Services Mobile IP DMU PKO ID889Data Services Mobile IP DMU MN Authentication906IP PPP Password579xEV(HDR) Access Network CHAP Authentication NAI1192HDR Access Network Stream CHAP Authentication Password298Packet Data Calls Originate String429Data SCRM Enabled450Data Throttle Enabled300Packet Data Configuration241Data Service Option Set401GPSOne PDE TCP Address426GPSOne PDE Port423Primary DNS Server424Secondary DNS Server714Data Services Mobile IP Enable Profile4101Roam Indicator Custom Home4960HS Based Plus Dial Setting4959User SID To MCC Assoc Table3635SD Configurable Items62002NV 62002466Data Services Mobile IP Shared Secret User Profile4102CDMA SO68 Enabled3446TRM Configuration4396DS Mobile IP Deregistration Retries553GSM A5 Algorithms Supported4432GPRS GEA Algorithms Supported4118HSDPA Category4210WCDMA HSUPA Category62009CDMA 1X Feature Group62011System Determination Feature Group62012Call Manager Feature Group62013Wireless Messaging Feature Group62014Data Service Feature Group62015UIM Service Feature Group62003442Roaming Preference58021NV 580211920AAGPS Positioning Modes Supported4265VOIP Registration Mode4229SMS MP On Traffic Channel6248eHRPD Enabled4528HDR EMPA Supported6862eHRPD Authentication Mode4964HDR SCP Force AT Configuration475HDR SCP Session Status7166CDMA SO73 Enabled6Mobile CAI Revision Number6850UMTS AMR Codec Preference Config1907Authentication Require Password Encryption62026NV 620265895MGRF Supported6247PPP VSNCP Config Data852APN Name5280Disable CM Call Type946Band preference bits 16-312954Bits 32 To 63 Of Band Pref6832HDRSCP Force Restricted CF3461ENS Enabled62025Delay RAU during CSFB (probable)6203162023NV 620234703CGPS UMTS PDE Server Address URL6792GNSS SUPL Version3758AAGPS Use Transport Security909GSM/UMTS SMS Bearer Preference62005PRI revision5800462035Feature Group (unnamed, tag 9f83e453)855RTRE Configuration

NV path schema index (222 paths, raw)

/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
/nv/item_files/ims/IMS_enable
/nv/item_files/modem/mmode/ue_usage_setting
/nv/item_files/cdma/1xcp/1xadvanced_capability
/nv/item_files/cdma/1xcp/so73_cop0_supported
/nv/item_files/modem/mmode/voice_domain_pref
/nv/item_files/modem/mmode/lte_disable_duration
/nv/item_files/modem/hdr/cp/ovhd/d2lresel
/nv/item_files/data/3gpp2/ehrpd_partial_context
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
/nv/item_files/modem/data/epc/qmi_qos
/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb
/nv/item_files/modem/data/3gpp/lteps/auto_connect_def_pdn
/nv/item_files/modem/mmode/lte_bandpref
/nv/item_files/modem/lte/L2/mac/lte_mac_disable_dormancy
/nv/item_files/modem/mmode/sms_mandatory
/nv/item_files/modem/data/3gpp/umts_nw_initiated_qos_support
/nv/item_files/modem/nas/nas_lai_change_force_lau_for_emergency
/nv/item_files/data/3gpp2/mpit_enable
/nv/item_files/data/3gpp2/max_fb_pdn_failure_count
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
/nv/item_files/modem/nas/hplmn_rat_order
/nv/item_files/modem/mmode/sms_only
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_csfb_control
/nv/item_files/modem/mmode/sms_domain_pref
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9
/nv/item_files/wcdma/rrc/wcdma_ppac_support
/nv/item_files/wcdma/rrc/wcdma_rrc_feature
/nv/item_files/data/3gpp2/ehrpd_to_hrpd_fallback
/nv/item_files/data/3gpp2/epc_data_context_duration
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support
/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
/nv/item_files/modem/nas/cm_efs_mav_health_monitor_control_pri
/nv/item_files/modem/nas/nas_srvcc_support
/nv/item_files/data/3gpp2/tethered_nai_prefix
/nv/item_files/modem/sms/pri_disable_cb_dup_detection
/nv/item_files/modem/lte/rrc/lte_rrc_1xcsfb_enabled
/nv/item_files/modem/lte/ML1/cdrx_opt_info
/nv/item_files/modem/nas/ignore_uplmn
/nv/item_files/modem/lte/rrc/rohc_supported
/nv/item_files/wcdma/rrc/wcdma_rrc_csfb_skip_sib11_opt
/nv/item_files/modem/nas/csg_support_configuration
/nv/item_files/modem/nas/iPLMN
/nv/item_files/modem/nas/max_validate_sim_counter
/nv/item_files/modem/nas/forced_irat
/nv/item_files/modem/nas/irat_search_timer
/nv/item_files/modem/lte/lte_3gpp_release_ver
/nv/item_files/modem/tdd_test_mode
/nv/item_files/modem/mmode/sms_domain_pref_list
/nv/item_files/modem/mmode/qmi/mav_pri_allow_auto_answer
/ds/atcop/atcop_cops_auto_mode.txt
/nv/item_files/modem/uim/mmgsdi/refresh_retry
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
/nv/item_files/modem/lte_connection_control
/nv/item_files/modem/lte/rrc/cap/prune_ca_combos
/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_tdd_ps_ho_support
/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok
/nv/item_files/modem/nas/enable_international_cdma_roaming
/nv/item_files/modem/uim/gstk/default_apn
/nv/item_files/modem/mmode/buffer_ims_pref_change_timer
/nv/item_files/data/3gpp/rpm_params
/nv/item_files/data/3gpp/rpm_suppported_sim
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_srvcc_control
/eHRPD/initial_sequence_number.txt
/nv/item_files/modem/data/epc/pdn_throttling_config.txt
/policyman/carrier_policy.xml
/mav/mav_police_pri_mode_pref_mask
/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled
/nv/item_files/modem/nas/pri_fplmn
/nv/item_files/modem/nas/lte_nas_ignore_mt_csfb_during_volte_call
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
/nv/item_files/modem/lte/L2/mac/lte_mac_configure_aas
/nv/item_files/modem/lte/L2/mac/lte_mac_configure_aas_tcprio_fd
/nv/item_files/modem/data/3gpp/lteps/null_apn_support_for_non_attach_pdn
/nv/item_files/modem/nas/mav_rat_upgrade_from_pri
/data/ds_dsd_apm_rules.txt
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params
/nv/item_files/modem/lte/L2/mac/lte_mac_configure_aas_params
/nv/item_files/modem/data/3gpp/lteps/allow_def_lte_pdn_teardown
/nv/item_files/modem/nas/eplmn_cell_reselect
/nv/item_files/modem/nas/hplmn_rat_order_ctrl
/data/3gpp/throttling/srv_req_throt_config.txt
/nv/item_files/modem/lte/rrc/lte_deprio_supported
/nv/item_files/wcdma/rrc/rrc_fe_fach_support
/nv/item_files/modem/nas/nas_config_feature
/nv/item_files/modem/lte/rrc/efs/ho_neigh_cell_si_acq_params
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11_tdd
/nv/item_files/modem/qmi/mav_fws_gsm_key_signature_bitmask
/nv/item_files/modem/mmode/lte_rpm_info_2
/nv/item_files/modem/nas/dos_mitigation_feature_config
/nv/item_files/modem/nas/mav_lte_local_release_on_data_stall_enabled
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
/nv/item_files/modem/mmode/mode_pref
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_disable
/nv/item_files/modem/lte/rrc/efs/cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/c2k_rx_config
/nv/item_files/modem/mmode/sd/avoid_gw_scan_timer
/nv/item_files/modem/mmode/follow_tot
/nv/item_files/modem/nr5g/rrc/cep_conn_est_fail_ctrl
/nv/item_files/modem/mmode/nr5g_disable_mode
/nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override
/nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn
/nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
/nv/item_files/modem/uim/uimdrv/mav_uim_null_byte_rx_for_power_down_config
/nv/item_files/modem/lte/rrc/cap/max_ca_combos
/nv/item_files/modem/mmode/nr_band_pref
/data/3gpp/data_3gpp_config.xml
/nv/item_files/modem/nas/emm_cust_nv_items
/nv/item_files/modem/nas/mm5g_cust_nv_items
/nv/item_files/modem/lte/rrc/mav_rrc_reject_supported
/nv/item_files/modem/nr5g/RRC/cap_limit_bw
/nv/item_files/modem/nr5g/RRC/cap_add_bw
/nv/item_files/modem/mmode/sd/mcc_list_emerg_call_full_srv
/nv/item_files/ims/media_service_config
/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
/nv/item_files/modem/nas/mav_lte_steady_camp_duration
/nv/item_files/modem/nas/mav_interlace_scan_init_timer
/nv/item_files/modem/uim/gstk/feature_bmask__mav_override
/nv/item_files/modem/mmode/nr_nsa_band_pref
/nv/item_files/modem/lte/rrc/efs/csg_control_v2
/nv/item_files/modem/mav/disable_sdm
/nv/item_files/modem/mav/disable_sdm_sub_triggers
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
/nv/item_files/modem/mav/disable_nr_after_so_hysteresis_tmr_val
/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
/nv/item_files/modem/mav/lte_ca_xml_generation
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
/nv/item_files/modem/lte/rrc/cap/blacklist_explicit_ca_combos
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/mav/endc_ca_file_generation
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_ulca
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr2_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos
/nv/item_files/modem/nas/tdscdma_op_plmn_list
/nv/item_files/modem/nr5g/RRC/cap_dss_control
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
/nv/item_files/modem/lte/rrc/cap/max_nr_cap_size
/nv/item_files/modem/lte/rrc/cap/max_lte_nr_cap_size
/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
/nv/item_files/modem/data/3gpp/ps/ran_bit_rate_support
/nv/item_files/modem/nas/mav_nr_predef_narfcn
/nv/item_files/modem/nas/isr
/nv/item_files/modem/lte/L2/mac/lte_mac_configure_aas2_dc
/nv/item_files/modem/uim/gstk/feature_bmask_2__mav_override
/nv/item_files/modem/mmode/ssac_hvolte
/nv/item_files/modem/lte/rrc/efs/dsds_timers
/nv/item_files/modem/uim/uimdrv/mav_uim_wakeup_poll_timer_config
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
/nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt
/nv/item_files/modem/nr5g/rrc/endc_disable_specific_ul_bands
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
/nv/item_files/modem/mmode/ims_reg_status_wait_timer
/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
/nv/item_files/modem/mmode/scan_scope_rule
/nv/item_files/data/3gpp2/dscam_reduced_dormancy_timer
/nv/item_files/modem/data/dsmgr/pdu_session_id_inclusion
/nv/reg_files/modem/lte/rrc/csp/pref_freq_list
/nv/item_files/modem/mav/local_crp_hysteresis_tmr_val
/nv/item_files/modem/uim/gstk/mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
/nv/item_files/modem/nas/is_eps_rplmn_from_sim_needed
/nv/item_files/modem/nr5g/RRC/cre_thermal_ota_cause
/nv/item_files/modem/lte/rrc/efs/data_inactivity_control
/policyman/fullrat_timer
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
/mav/sensor/uwb_coex/feature_flag
/nv/item_files/modem/lte/ML1/fr2_priority_optimization
/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
/nv/item_files/modem/nas/skip_acb_check_drb_est_ims_registration
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
/Data_Profiles/Profile5
/eHRPD/SRLTE_reselection_timer_config.txt
/nv/item_files/modem/hdr/cp/almp/min_init_lte_meas_time
/nv/item_files/modem/hdr/srch/tclte/tbackoff
/nv/item_files/modem/nas/is_x_to_nr_enabled
/nv/item_files/modem/nr5g/RRC/meas_pruning
/nv/item_files/modem/mav/disable_mmw_for_ftv
/nv/item_files/modem/mav/disable_fr1_for_lpm
/nv/item_files/modem/data/3gpp/ps/set_volte_call_type
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state
/nv/item_files/modem/nas/mav_pssi_reg_follow_rplmn_rat_order_power_up
/nv/item_files/modem/nr5g/RRC/cap_per_plmn_limit_bw
/policyman/5g_roaming_feature_enabled.xml
/policyman/5g_msim_feature_enabled.xml
/policyman/dss_feature_restrictions.xml
/nv/item_files/modem/lte/rrc/efs/dyn_3gpp_r14_plmn_list
/nv/item_files/modem/nas/lte_fast_cfl_search_timer
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
/nv/item_files/modem/lte/rrc/efs/hst_scan_params
/nv/item_files/modem/uim/gstk/mav_auto_user_confirm_for_no_and_null_alpha_for_setup_call
/nv/item_files/modem/data/3gpp/reset_non_spec_throttle_with_reattach_required
/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
/nv/item_files/modem/mav/mav_monitor_enable_5g_to_lte_dynamic_si
/nv/item_files/modem/mav/mav_monitor_5g_to_lte_dynamic_si_lte_bands_list
/nv/item_files/modem/mav/sa_depri_bw_val
/nv/item_files/modem/mav/override_icon_based_on_sa_coverage
/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control

Unidentified fields (1)

Tag	n	len	Value	Note
9fa710	1	22	b2002000210006010701d101090b8e03aa042500890b	small binary blob that precedes the NV item list

Tag

len

Value

Note

9fa710

b2002000210006010701d101090b8e03aa042500890b

small binary blob that precedes the NV item list

Modem defaults this file replaces

Files the package ships at the EFS paths this bundle's .der.pri writes.

EFS path	Package copy
/policyman/carrier_policy.xml	bbcfg.mbn P1P4P5P6P9P10	Compare
/data/3gpp/data_3gpp_config.xml	bbcfg.mbn P1P5P6	Compare
/data/3gpp/data_3gpp_config.xml	bbcfg.mbn P4P9P10	Compare

EFS path

Package copy

/policyman/carrier_policy.xml

bbcfg.mbn P1P4P5P6P9P10

Compare

/data/3gpp/data_3gpp_config.xml

bbcfg.mbn P1P5P6

Compare

/data/3gpp/data_3gpp_config.xml

bbcfg.mbn P4P9P10

Compare

782 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready