tyufhl Posted December 15, 2014 Share Posted December 15, 2014 these are real values MBA6,2 MLB: C0232260DQRFD49AG ROM: 406c8fcb38ac MLB: C02326207WBFD49AA ROM: 406c8fd8f788 MLB: C0232130012FD49AR ROM: 406c8fc3948e how it everything is connected??? or all casual values? P.S. I give up. It is simpler to prescribe real and not to puzzle. Link to comment Share on other sites More sharing options...
Pike R. Alpha Posted December 15, 2014 Share Posted December 15, 2014 There was too much variation in the TTT values of the MLB so I had another look and I think we are reading it wrong. Let's take an example from the above MLB's: C0 2 3 21 30 012 FD49 AR What if we use this: PP G Y WW xx NBR EEEE xx Now NBR looks more like a Base36 production number i.e this would be the 38th logic board. What do you think? Link to comment Share on other sites More sharing options...
Allan Posted December 15, 2014 Share Posted December 15, 2014 I called to Apple support, but...nothing They registered my Serial Number, restart my Hack, but still the same. Link to comment Share on other sites More sharing options...
flicka Posted December 15, 2014 Share Posted December 15, 2014 There was too much variation in the TTT values of the MLB so I had another look and I think we are reading it wrong. Let's take an example from the above MLB's: C0 2 3 21 30 012 FD49 AR What if we use this: PP Y WW xx NBR EEEE xx Now NBR looks more like a Base36 production number i.e this would be the 38th logic board. What do you think? I think you misspelled. What you probably mean is "PP P Y WW xx NBR EEEE xx". In any case, your guess is very plausible Link to comment Share on other sites More sharing options...
Kris404 Posted December 15, 2014 Share Posted December 15, 2014 From a real MacBookAir6,1, the NBR value is: 0U9 Assuming: PP G Y WW xx NBR EEEE xx Link to comment Share on other sites More sharing options...
Pike R. Alpha Posted December 15, 2014 Share Posted December 15, 2014 I think you misspelled. What you probably mean is "PP P Y WW xx NBR EEEE xx". In any case, your guess is very plausible Oops. Thanks. Fixed. Link to comment Share on other sites More sharing options...
Maf3r0 Posted December 15, 2014 Share Posted December 15, 2014 I called to Apple support, but...nothing On the last month, i did the same — . A kind of "gentlewoman" help me to solve this problem; she ask me a few questions (just to confirm that I was me) and then she said me: "iMessage was activated on your AppleID" — . They registered my Serial Number, restart my Hack, but still the same. I u just say: — "I have a problem with Apple ID", then they won't request Serial. But, if u say: — "I have a problem with iMessage", they will request a Serial. At now, after a month, I lost my activation because i tryed disable activation and reactivate on other OS X instalation (with same AppleID, Serial, SmUUID, Hardware UUID, MLB and ROM — just in another partition). Well, this is my walkthrough. 1 Link to comment Share on other sites More sharing options...
flicka Posted December 16, 2014 Share Posted December 16, 2014 @PikeMy two cents:looking at various 17 characters MLB I've noticed that the second x in "WW xx NBR" is always a "0". Maybe a coincidence, but another thing is that "NBR", if Base36, may be a maximum of 46.665, which, multiplied by 52 makes a total of 2.426.580. Macs sold in 2012 were 18,158,000 and in this case, the iMacs would be, approximately, 13% of the total. I think it is an underestimate, but in any case, what I wanted to point out is that "NBR" seems too small and this leads me to think that the pattern instead of "PP G Y WW xx NBR EEEE xx could be "PP G Y WW x NMBR EEEE xx".Let me know if I've done another big mistake. Link to comment Share on other sites More sharing options...
rayap Posted December 17, 2014 Share Posted December 17, 2014 Have a 2 for x in an early 2011 MBP. Link to comment Share on other sites More sharing options...
fusion71au Posted December 17, 2014 Share Posted December 17, 2014 So...Generate MLB (that looks like genuine Mac) won't fix the problem because we still need it to be registered via Apple Customer Support right? But if we do that it will get Apple more attention as holyfield stated in OP. As people with no have genuine MLB I just think about removing iMassage & FaceTime from Dock I'm pretty certain you are correct with this - even if you have generated a MLB serial with correct formatting/syntax, it still needs to be registered on Apple's "whitelist". Obviously MLB/ROMs from real Macs have the correct formatting/syntax and are registered on the whitelist so you don't need to call Apple Support when using genuine values. Testing by changing only a single digit of genuine MLB/ROM combination from 2 Macs: 1. MBP 6,2 ---> 13 character MLB MLB format PPYWWSSSSCCCC where WW changed from 36 to 46 ROM unchanged 2. Mac Mini 6,2 ---> 17 character MLB MLB format PPGYWWxxNBREEEExx where WW changed from 36 to 39 ROM unchanged results in activation failure and "Your Apple ID can't be used to set up iMessage at this time" + "Customer Code". Changing WW back to original values results in immediate and successful iMessage activation/login again. Take Home Message: unless you accidently generate someone's real MLB/ROM by chance, you still need to contact Apple Support to register your fake serials. I called to Apple support, but...nothing They registered my Serial Number, restart my Hack, but still the same. @Allan, Did you call support using a 17 character MLB generated according to the OP's guidelines? Going by a few user reports, after stricter MLB syntax checking introduced by Apple sometime after 17th Nov 2014, you might have a greater chance of success calling Apple Support using a synthetic 13 character MLB (due to looser validation checking compared to 17 character MLB?). Presently, MLB cross checking is NOT done against system serial or system-id (only against ROM), so it is still possible to use an older MLB/ROM (with 13 character MLB eg from MBP 6,2) to activate a hack using a newer SMBIOS and system serial eg MacPro 6,1. 3 Link to comment Share on other sites More sharing options...
Pike R. Alpha Posted December 17, 2014 Share Posted December 17, 2014 @Pike My two cents: looking at various 17 characters MLB I've noticed that the second x in "WW xx NBR" is always a "0". Maybe a coincidence, but another thing is that "NBR", if Base36, may be a maximum of 46.665, which, multiplied by 52 makes a total of 2.426.580. Macs sold in 2012 were 18,158,000 and in this case, the iMacs would be, approximately, 13% of the total. I think it is an underestimate, but in any case, what I wanted to point out is that "NBR" seems too small and this leads me to think that the pattern instead of "PP G Y WW xx NBR EEEE xx could be "PP G Y WW x NMBR EEEE xx". Let me know if I've done another big mistake. You only looked at the maximum value of NBR, which is indeed 46655 for ZZZ, but you forgot EEEE. Now look at this: NBR EEEE = 78.364.164.095 x 52 = 4.074.936.532.940 That is the theoretical maximum number, in one year, available for Apple serial numbers. Now look at the models that were actually sold in 2012 (models that I found): iMac (Late 2012) 661-7101 Logic Board, Quad-Core i5, 2.7GHz, 21.5 inch 512MB GDDR A1418, EEE Code: DYWF,F117,F502,F505,F9GY,F9H0,F9H1,F9H2 661-7102 Logic Board, Quad-Core i5, 2.9GHz, 512MB GDDR A1418, EEE Code: DYWD,F504 661-7103 Logic Board, Quad-Core i7, 3.1GHz, 512MB GDDR A1418, EEE Code: F116,F503 661-7156 Logic Board, Quad-Core i5, 2.9GHz, 512MB GDDR A1419, EEE Code: F2FR,F653 661-7157 Logic Board, Quad-Core i5, 3.2GHz, 1GB GDDR A1419, EEE Code: F49P,F651 661-7158 Logic Board, Quad-Core i5, 3.2GHz, 2GB GDDR A1419, EEE Code: F49R,F652 661-7159 Logic Board, Quad-Core i7, 3.4GHz, 1GB GDDR A1419, EEE Code: DYW3,F64V 661-7160 Logic Board, Quad-Core i7, 3.4GHz, 2GB GDDR A1419, EEE Code: F0V5,F64W 661-7373 Logic Board, 2.7GHz (Supports Fusion Drive) A1418, EEE Code: FF4G,FF4H,FF4J,FF4K,FF4L,FF4M,FF4N,FF4P iMac12,1 (Late 2011) 661-6024 Logic Board, 3.1 GHz, Dual-Core i3 - 21.5inch iMac Late 2011 - A1311, EEE Code: DNY3,DP00 iMac12,2 (Mid 2011) 661-5935 Logic Board, 2.5 GHz, Quad-Core i5 - 21.5 inch iMac Mid 2011 - A1311, EEE Code: DJWK,DM66,DNJK 661-5936 Logic Board, 2.7 GHz, Quad-Core i5 - 21.5 inch iMac Mid 2011 - A1311, EEE Code: DKG1,DM65,DNJJ 661-5937 Logic Board, 2.8 GHz, Quad-Core i7 - 21.5 inch iMac Mid 2011 - A1311, EEE Code: DKG2,DM67,DNJL 661-5948 Logic Board, 2.7 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWM,DMT3,DMT5 661-5949 Logic Board, 3.1 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWN, DM69 661-5950 Logic Board, 3.4 GHz, Quad core i7 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWP, DM6C That are 48 EEE codes giving us: 46655 (ZZZ) * 52 (weeks) = 2426060 * 48 (found EEE Codes) = 116450880 Enough for a ton more iMac's (a week) before Apple would run into issues with their serial numbers. Not to mention that Apple uses different production plants and several generations so it could even be more. In the end. Nobody knows exactly what Apple is using. I could be dead wrong, but so is everybody else for as long as we have to do (educated) guess work. @fusion71au, Do that test once more and take a look at: /var/log/system.log Note the "Registered: No" v.s. "Registered:Yes" Link to comment Share on other sites More sharing options...
Alien::X Posted December 17, 2014 Share Posted December 17, 2014 LOL ..... Looks like Apple going in Danger. LOL 661-5948 Logic Board, 2.7 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWM,DMT3,DMT5 661-5949 Logic Board, 3.1 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWN, DM69 661-5950 Logic Board, 3.4 GHz, Quad core i7 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWP, DM6C Check out this series M , N , P I think its in Series Not encoded in Base64 or etc. Also with this series FF4G,FF4H,FF4J,FF4K,FF4L,FF4M,FF4N,FF4P PP G Y WW X NMBR EEEE XXAnd pike r alpha what about last two ? Many results shows X is related with Mac address 8 bit conversion 3 Link to comment Share on other sites More sharing options...
themonarc Posted December 17, 2014 Share Posted December 17, 2014 I enjoy reading the work you guys are doing. So, is it safe or not to use real mlb/rom id's from family mac? It uses different icloud and imessage account but has been working on my hack for a week or so. If not, it looks like we will soon be able to generate mlb numbers based on apple's sequence, unless they must be specifically whitelisted on the server (in which case we are screwed)? just looking for clarification, thanks! Link to comment Share on other sites More sharing options...
flicka Posted December 17, 2014 Share Posted December 17, 2014 @Pike Thanks for the clarification Link to comment Share on other sites More sharing options...
Pike R. Alpha Posted December 17, 2014 Share Posted December 17, 2014 LOL ..... Looks like Apple going in Danger. LOL 661-5948 Logic Board, 2.7 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWM,DMT3,DMT5 661-5949 Logic Board, 3.1 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWN, DM69 661-5950 Logic Board, 3.4 GHz, Quad core i7 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWP, DM6C Check out this series M , N , P I think its in Series Not encoded in Base64 or etc. Also with this series FF4G,FF4H,FF4J,FF4K,FF4L,FF4M,FF4N,FF4P PP G Y WW X NMBR EEEE XX And pike r alpha what about last two ? Many results shows X is related with Mac address 8 bit conversion What do you mean with "this series"? The EEE code is Base36. That we know already. We also know that the EEE codes of the current Mac models haven't showed up on Mac parts/repair sites. This because Apple's one year warranty is still covering the repairs. In most cases that is. About the last two bytes. I don't know what to do with them. Perhaps they are also part of the EEE code. Maybe less important to logic board replacements, but hey what do I know Link to comment Share on other sites More sharing options...
blackosx Posted December 17, 2014 Share Posted December 17, 2014 Just found this thread. Great first post holyfield! Looks like I have some reading to do. Link to comment Share on other sites More sharing options...
Alien::X Posted December 18, 2014 Share Posted December 18, 2014 FF4G FF4H FF4J FF4K FF4L FF4M FF4N FF4P DJWM DJWN DJWP "Only For iMac" In this model (A1312) First three letters are Fixed For iMac DJW , FF4 etc. are common last one is in ABCD.. They Name First build mac with EEEE:::: XXXA,XXXB,XXXC etc. (Example) I think They give number by ABCD . < I'm not sure that all ABCD character use by apple> In this pattern Core not matter Its can i5 or i7 etc. After Finishing Last latter It can change XXYA , XXYB , XXYC etc. PikeR I'm not Sure its my prediction. Link to comment Share on other sites More sharing options...
Sabin1936 Posted December 18, 2014 Share Posted December 18, 2014 Quick question: If you have an existing mac that you own and don't plan to use for iMessage or Apple ID in any way and in fact it lives in a closet and you have no intentions of selling or otherwise getting rid of it, would it be possible/appropriate to use its ROM/MLB/Serial in your Hackintosh safely? If so, how do you go about extracting them? Follow-up: I used imessage_debug to extract values... is that sufficient? If I run my hack using the smbios of an older Mac Mini (4,1) does anyone know if that causes any hardware issues? Link to comment Share on other sites More sharing options...
Pavo Posted December 18, 2014 Share Posted December 18, 2014 Quick question: If you have an existing mac that you own and don't plan to use for iMessage or Apple ID in any way and in fact it lives in a closet and you have no intentions of selling or otherwise getting rid of it, would it be possible/appropriate to use its ROM/MLB/Serial in your Hackintosh safely? If so, how do you go about extracting them? Follow-up: I used imessage_debug to extract values... is that sufficient? If I run my hack using the smbios of an older Mac Mini (4,1) does anyone know if that causes any hardware issues? Apparently you haven't read all the post on this thread, that has already been answered Link to comment Share on other sites More sharing options...
Sabin1936 Posted December 18, 2014 Share Posted December 18, 2014 apologies, I found it Link to comment Share on other sites More sharing options...
pac-man Posted December 18, 2014 Share Posted December 18, 2014 Does anyone know a command which read/extracts MLB Data? (formatted or unformatted) I don't mean iMessage Debug Tool - I mean a console command. Link to comment Share on other sites More sharing options...
Allan Posted December 19, 2014 Share Posted December 19, 2014 @Allan, Did you call support using a 17 character MLB generated according to the OP's guidelines? Going by a few user reports, after stricter MLB syntax checking introduced by Apple sometime after 17th Nov 2014, you might have a greater chance of success calling Apple Support using a synthetic 13 character MLB (due to looser validation checking compared to 17 character MLB?). Presently, MLB cross checking is NOT done against system serial or system-id (only against ROM), so it is still possible to use an older MLB/ROM (with 13 character MLB eg from MBP 6,2) to activate a hack using a newer SMBIOS and system serial eg MacPro 6,1. @fusion71au Hi! Yes bro, i still using 17 character MLB. I will change this now. Thanks 1 Link to comment Share on other sites More sharing options...
darkvoid Posted December 19, 2014 Share Posted December 19, 2014 Does anyone know a command which read/extracts MLB Data? (formatted or unformatted) I don't mean iMessage Debug Tool - I mean a console command. nvram 4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14:ROM nvram 4D1EDE05-38C7-4A6A-9CC6-4BCCA8B38C14:MLB Link to comment Share on other sites More sharing options...
fusion71au Posted December 19, 2014 Share Posted December 19, 2014 @fusion71au Hi! Yes bro, i still using 17 character MLB. I will change this now. Thanks I've gotten hold of a real MLB (from a 13 inch MBP 5,5 Mid 2009) to give you an example of how to generate a synthetic MLB using its component parts . It's comprised of 13 characters with the format PPYWWSSSSCCCC PP = Manufacturing location ID = W8 Y = Year of manufacturing = 2009 WW = Week of manufacture (01-52) Say 26 SSSS = Production number, within this week. Say it is 41 066 decimal converted to Base-36 = 0VOQ CCCC = ID-Model of hardware part = 6GCA So our made up MBP 5,5 MLB serial number is W89260VOQ6GCA. You can obviously change WW and SSSS to other values so that the MLB is unique... Procedure to activate Set the ROM as your 12 character ethernet MAC address. To make it more "genuine", replace the first 6 characters with an "Apple Prefix" code. Put MLB & ROM in RtVariables/config.plist, keep everything else the same including current system serial and SMBIOS Disconnect from internet Reboot computer and run iMessage debug to confirm MLB/ROM values are persistent Reconnect internet Login to iMessage ---> will most likely get Customer code if you haven't accidently created someone's real MLB/ROM Call Apple Support saying you have a problem with your Apple ID while logging in to iMessage Cross fingers that they fix it ! Other examples: Google for sellers of Mac parts or "Mac Logic Board Model No" (model no is usually in format AXXXX). I have found that CCCC is often the EEE code followed by the letter A eg for MacPro 3,1, EEE = XDA, CCCC = XDAA. MacPro 3,1 PP=J5, Year=2008, Week=17, Production No=6506 (decimal)=050Q (Base36), CCCC=XDAA ---> J5817050QXDAA MacPro 4,1 PP=J5, Year=2009, Week=47, Production No=32075 (decimal)=0OQZ (Base36), CCCC=BXZA ---> J59470OQZBXZA MacPro 5,1 PP=J5, Year=2010, Week=33, Production No=5802 (decimal)=04H6 (Base36), CCCC=BH8A ---> J503304H6BH8A iMac 10,1 27 inch PP=W8, Year=2009, Week=49, Production No=8512 (decimal)=06KG (Base36), CCCC=BZRA ---> W894906KGBZRA iMac 11,1 27 inch PP=W8, Year=2010, Week=15, Production No=11303 (decimal)=08PZ (Base36), CCCC=BA1A ---> W801508PZBA1A 6 Link to comment Share on other sites More sharing options...
Allan Posted December 19, 2014 Share Posted December 19, 2014 Thank you man! I will try immediately. One doubt, the BoardSerialNumber (in SMBios) and MLB are the same thing? And i need use both in config.plist? Thanks again. Link to comment Share on other sites More sharing options...
Recommended Posts