Daniel Cazzulino's Blog

Go Back to
kzu′s Latest post

How to flash, root and SIM unlock a Galaxy Tab

These instructions worked for me on two AT&T devices, 850/1900 WCDMA (the one that works in Argentina), model SGH-i987 to be precise.

AT&T decided to cripple its ROM for the Galaxy Tab: it doesn’t do USB debugging, it can’t install apps from outside the Android Market (this prevents the z4root unlock), it doesn’t have 3G video calls (what’s the front camera for?!), etc.

So I decided to flash it with a Europe ROM, root and unlock it to get the full power of the hardware you can get for $550 now at Amazon.

These instructions are an aggregate of my own for a total newbie with a Win7 x64 OS and instructions I found on the great XDA forum. You will need the excelent and free 7zip to extract the downloaded files, which I placed on my own public share in Amazon S3 for future reference and to avoid depending on sites that may go away or files that are linked in various forum posts, etc.

  1. With the Tab unplugged from USB, go to Settings, Applications, Development and see if you can turn on USB debugging.
  2. If you can’t, it seems that running the Samsung Kies software at least once fixes it. There is a new v2 out that I couldn’t get to connect to my Tab. I uninstalled Kies as soon as I got what I needed form it, so I don’t really care for v2. So I uploaded the version that did work for me to S3.
    • After installing the software (a 135 MB download), plug-in the Tab, and select "Kies (Firmware update)" in the "Select USB mode" screen that shows up.
    • Run the Kies software.
  3. If you get a dreaded "Unsupported device alert" or something like that, it’s because the drivers for the device were not properly installed. I manually extracted all drivers from the Kies installer executable above as follows (you can also download the 7zip file directly if you don’t mind an extra 14 MB download):
    • Open the Kies*.exe installer file with 7zip
    • Browse to the CabFile\USB Driver\ folder
    • Extract to a temporary location
    • Open from the temporary location, and extract the SAMSUNG_USB_Driver_for_Mobile_Phones.exe file from it
    • Finally, open the extracted SAMSUNG_USB_Driver_for_Mobile_Phones.exe file and extract all its contents to a temporary folder
    • Go to the Device Manager, find the devices that didn’t start successfully, open its properties, select Update Driver, and use the "Browse my computer for driver software" choice.
      • Note: I had to do this twice after the drivers for the first device were successfully installed, as a new unrecognized device showed up and later installed correctly.
    • Browse to the folder where you extracted the entire contents of the SAMSUNG_USB_Driver_for_Mobile_Phones.exe file, and it will install the appropriate driver.
  4. In the Kies software, the device will now show up. Just exit, and uninstall Kies. Yup, weird :S.
  5. Download the following files:
  6. Extract them all.
  7. Start the Tab in download mode by pressing the volume down and power buttons together. A big yellow sign right on boot will tell you you’re in download mode.
  8. Run the Odin3 program. Select PIT:  P1_add_hidden.pit , PDA: P1000XWJJ4-REV03-ALL-CL639474.tar.md5,  and check the Re-Partition option. Click Start.

    The phone will reboot and may be in Russian. (it started in English on the second Tab I did this :o )).
    Close Odin3.

  9. Start the Tab in download mode again (volume down + power)
  10. Run Odin3 (you may need to unplug/plug the Tab from USB at this point, and restart Odin if it does not show up in ID:COM like above, although it mostly detects automatically when you plug the device again). Select PDA: P1000OXAJK5.tar with NO repartition and NO PIT file. Click Start.

    The phone will reboot with the latest euro firmware in English. Yay!

  11. Start the Tab in download mode again (volume down + power)
  12. Run Odin again. Select PHONE: modem.bin (from the modem_bell_i9000.7z download) with NO repartition and NO PIT file. Click Start.

    You’re done with the flashing part. The OS is now fully featured for the hardware you bought.

  13. Now in order to unlock the SIM card, you first need to root the OS. First check if the z4root application is available in the market. If it’s now, download it to the Tab SD card (plug it via USB and select Mount in the UI) and run it from there using a file manager (like the built-in My Files application or the FileManager from the Market which is free and pretty good). Clicking the apk will install it, and you can run it then. Just click the Root button.
  14. Install Busybox from the Market.
  15. To unlock the SIM card (adapted from XDA forum):
    • Install the Java Development Kit (JDK)
    • Install the Android SDK
    • Open a command prompt, cd to the android platform-tools folder (in my machine, using the default installation path, it’s C:\Program Files (x86)\Android\android-sdk-windows\platform-tools) and type: adb shell
    • Then paste all the following commands into the shell window at once, in other words, one big copy and paste:
      sucd /sdcardecho "this takes about 45 seconds. run only ONCE"busybox cp /efs/nv_data.bin /sdcard/nv_data.bin.origecho -en \\x00 > out0dd if=nv_data.bin.orig of=out1 bs=1 count=1578089dd if=nv_data.bin.orig of=out2 bs=1 skip=1578090 count=163dd if=nv_data.bin.orig of=out3 bs=1 skip=1578254 cat out1 out0 out2 out0 out3 > nv_data.bin.unlockedrm out0 out1 out2 out3rm /efs/nv_data.binbusybox cp nv_data.bin.unlocked /efs/nv_data.binrm /efs/nv_data.bin.md5reboot

Now you have a fully unlocked and full featured Galaxy Tab!!!

Among the cool things you now have, you can do a video call right from the Phone dialer with anyone that has the standard 3G video calls enabled (I’m told oldish WinMo phones have this capability, as well as Nokia and Samsung phones. We tried this with a Samsung Galaxy S and it worked like a charm). Needless to say, you’ll need a SIM with a data plan to do that. No VoIP involved.



  1. [...] How to flash, root and SIM unlock a Galaxy Tab … Description : AT&T decided to cripple its ROM for the Galaxy Tab: it doesn’t do USB debugging, it can’t install apps from outside the Android Market (this prevents the z4root unlock), it doesn’t have 3G video calls (what’s the front camera for? … http://blogs.clariusconsulting .. [...]

  2. I am not understanding how to do the unlock the sim part? I am new at this…need alittle more detail. Where I am running into problems is the java and android sdk part. I can not get it to run correctly. I am currently running windows 7 and there seems to be some conflicts.

    • Hi Pam
      I was confused in the bigining but I found the answer
      go to program files\android\android-sdk\platform-tools (on your computer and the tab is connected through USB)
      then click shift and right click(on the platform-tools folder) to open cmd
      then print adb shell and hit enter you will see this mark $( or somthing similer) now copy the code below
      cd /sdcard
      echo “this takes about 45 seconds”
      if [ ! -f /sdcard/nv_data.bin.orig ]; then
      echo “copying file to /sdcard”
      cp /efs/nv_data.bin /sdcard/nv_data.bin.orig
      echo -en \\x00 > out0
      dd if=nv_data.bin.orig of=out1 bs=1 count=1578089
      dd if=nv_data.bin.orig of=out2 bs=1 skip=1578090 count=163
      dd if=nv_data.bin.orig of=out3 bs=1 skip=1578254
      cat out1 out0 out2 out0 out3 > nv_data.bin.unlocked
      rm out0 out1 out2 out3
      rm /efs/nv_data.bin
      cp nv_data.bin.unlocked /efs/nv_data.bin
      rm /efs/nv_data.bin.md5
      Wait 45 seconds for the whole process to complete.
      Thats It! your phone will reboot and its carrier unlocked!

      hope That’s help

  3. Daniel,
    I just came across your very informative Blog. I bought a T Mobile Samsung Galxy Tab Wi-fi version last month in the US. It was unlocked but appears to have defaulted back to locked. Would you mind If I emailed you again on this matter as I would like to unlock the SIM and use my Tab.I think you might be able to assit me. Again my email is
    Thank you
    Harry in Sydney Australia

  4. Hi Daniel
    I go through the process and it’s worked for me my samsung 7″ tab was locked to Bell-Canada and now it’s UNLOCKED :)

  5. Excellent Job!!! Now I have Galaxy Tab Unlocked! Thank you so much!!!
    May I translate this tutorial to portuguese? It will help developers from Brazil.

  6. Hi… i manage to get to the part od the cmd
    adb sheel
    when i write it says: error device not found
    Can u help me ??? Thanks

  7. You must have the USB driver for your device, Without that nothing will work.


  8. Thank you so much for the post. I was able to get to step 7 but when i got to extract the two p1000…. files its asking me for a password inorder to extract. could anyone please help me with this. thanks in advance.

  9. SGH-i987 – I have tried twice to update this using your method. Each time it is successful, but it’s stuck on the Galaxy Tab display at first boot up and will not go further. Is there a master reset that might clear this or have I totally bricked it?

    • I have had teh same problem as David, my Galaxy Tab is Bricked. I get connected, load the pit file, Odin says is was successful, Tab restes but is frozen at boot screen. Reset and load the pda file, it runs successfully but reboots to a blank screen, frozen and bricked

      Help. if you can

  10. Amazing! Thanks a lot Daniel. I got my SGH-i987 AT&T Version rooted, loaded and Sim-unlocked via your step-by-step instruction.

    You are the man!

    I am grateful!

  11. I have done all according to your explaination and steps followed but now my galaxy tab is just starting well but stoping on sumsung it cant show the app please help me soving this problem

  12. please help me solving my galaxy tab SC-01C docomo I have tried to follow all the step you have mationed but all want well but now it just showing samsung just on starting and it stops from there what can I do to solve this probleme. HTML

  13. Hi,
    I have been searching for long time but turn out was very little and did not get me any were until I found your post and it helped a lot. My question is little side from the discussion. I want to install custom recovery so that I can go in recovery mode and able to install a rom. How can I install a custom recovery (or any other you recommend) without damaging the current Rom.

  14. Hello Guys,
    thanks Daniel for your help, I was able to Root my tab,and it works better than before. I just had an issue with the unlocking part, it was not clear enough especially when I tried to install the Andriod SDK, Please help.


  15. Hi, I have been using my galaxy tab for almost one year, just two days ago it just started showing me “NO SERVICE” with an image of sim on the tool bar and a crossed circle too. I was told I need to unlock the sim port. Pls help me out, how do I do dat? Dis is d first time it is happening to the tab.

  16. I am stuck at rooting the device because by the time that I get there following the exact procedure above I can no longer enable USB debugging. I’ve tried repeating the steps to enable it, but they don’t seem to work. I am stuck. Any advice?

  17. I fixed that problem now. I just had to completely unplug the device and change the USB settings in the wireless & networks menu.

    But now I am running into a problem running the command suggested in the adb shell. It says permission denied. A bit stumped what to do at this point again.

  18. Update. Okay, so I figured it all out. I had to do a couple of other things in order to get this to work. First I had to remount the rootfs because by default it was ro.

    mount -o rw,remount rootfs /


    mount -o rw,remount rootfs rootfs /

    should work.

    Then the original command in the instructions did not work for me. Maybe I am just noob but ‘sucd’ command does not exist. And also don’t forget that you need to mount the phone/device as usb before any of these commands in the adb shell will work. Mostly I used the commands that KAIS provided (thanks). With one modification, there is no cp command built in. So there is where busybox becomes necessary. I don’t know if it’s a path issue or something because I’m simply not that skilled, but that I had use the following modified command in the adb shell:

    busybox cp cp /efs/nv_data.bin /sdcard/nv_data.bin.orig

    Also I just entered the commands manually one by one instead of running them in a script or copy and paste fashion since I wouldn’t know how to do that anyway. Hope this helps someone.

  19. hay you just saved my bricked tab thank you do you know is there any way to put 4.4 on the sgh-i987

  20. My tab will not boot place I need the flash file

  21. Hi.
    Can anyone help me unlock+root my Galaxy SGH-I467 from AT@T ?
    I need more detailed instruction how do so.
    I have problem find odin/others files to download and run – my laptop settining keep blocking it.

  22. please I do own a galaxy docomo sc-01c , am requesting you to guide me on how to unlock it

  23. provides different smart phone like sony xperia phones and surplussonline is the best online shopping for the accessories in India.If any guys interested smartphone please visit this site.