A1 CA Permission1 Permission2 Permission3 Permission4 Permission5 Permission6 Permission7 Permission8 Permission9 Permission10 A2 System commands group (0x01) Performs controlled power down of the ME.

The Loader shuts down in a controlled fashion and proceeds to shut down the ME itself. Application packet length

Loader version length No data

The Loader Version command is sent by the PC to request version information from the loader. The ME responds with a Loader Version information coded as ASCII characters in the data field. Application packet length

Loader version length Loader version identifier

The Protocol Version command is sent by the PC to request the application protocol version information from the loader. The ME responds with two bytes holding the major and the minor version respectively. Application packet length

Protocol version length Protocol version identifier

The Loader returns a list of implemented command groups and whether they are permitted to execute in the current Loader state. Application packet length

Supported Groups length Each byte of the string represents a supported command group.

This command is sent by the PC to request a Platform Property, by sending a PropertyID in the data field. The ME responds with the Property value. Application packet length

The size of the PropertyValue depends on the PropertyID

This command is sent by the PC to request a Memory Property. The ME responds with the Memory Property value. Application packet length

The size of the PropertyValue depends on the PropertyID

This command is sent by the PC to set a Memory Property. Application packet length The MemoryPropertyPayload buffer holds the Memory Propertiy ID and the Memory Property value. The size of the MemoryPropertyValue depends on the PropertyID

The size of the PropertyValue depends on the PropertyID

This command is used in a Flashless bridge configuration. It returns the Static data and all dinamic variables cretaed during the signing process. Application packet length

This command is used to transfer a new Loader to the ME. The data should hold either Header or Payload. Application packet length

The Reset command is used to instruct the Loader to reset the ME. Upon receiving this command, the Loader shuts down in a controlled fashion and restarts the ME. Application packet length The ResetTimeout value is in ms.

This command is sent by the PC to set the SIM Lock Keys. Application packet length There are 12 SIM Lock Keys, each represented with a 16 bytes long string.

A2 Flash Commands group (0x02) Application packet length

Application packet length There are two parameters in the input buffer: Start address and Block size, both 4 bytes long.

Application packet length

Application packet length

This command is used to readp from the flash. The input parameters buffer holds: Logical Unit number = 4 bits, Start address = 28 bits and End address = 4 bytes. Application packet length

A2 GDFS Commands Group (0x03) Application packet length

A2 File system commands Group (0x04) Application packet length

A2 Signature Commands Group (0x05) This command is used to write the SIM Lock control keys. Application packet length There are 12 SIM Lock Keys, each represented with a 16 bytes long string.

Application packet length The SetPlatformPropertyIn buffer holds the Platform Property ID and the Platform property value. The size of the Platform Property ID is 4 bytes and the size of the Platform Property Value depends on the PropertyID

Application packet length

Application packet length The WriteDefaultDataIn buffer holds the Unit number,the Unit size and Unit data

Application packet length

Application packet length

Application packet length

Application packet length

Application packet length The KeySharStage1ReqIn buffer holds the Version (1 byte), the ID (4 bytes) and Random Value (24 bytes)

Application packet length The KeySharStage2ReqIn buffer holds the ID (4 bytes), the Cipher (1 byte), the CertificateLength (4 bytes) and Certificate (CertificateLength)

Application packet length The KeySharStage3ReqIn buffer holds the ID (4 bytes), C2 (16 bytes) and MAC (20 bytes).

Application packet length

This command is used to compare received SIM Lock keys against the SIM Lock keys stored in the ME. Application packet length There are 12 SIM Lock Keys, each represented with a 16 bytes long string.

Application packet length

A2 Reset Commands group (0x07) Application packet length

Application packet length

A2 Control massage (0x10)