Guide: How To Unlock BT home Hub 3.0(A)

I can't seem to find the threads now... but when I was searching the net for the above (titled) Several people people on here mentioned the BT Hub3 isn't possible to unlock.

*Remove this thread if it's a duplicate, I can't find one though?*
** Information gathered from: psidoc.com All Credit goes to them guys! Took me a while to find something, so thought I'd share :) **

"How To Unlock Your BT Home Hub 3.0 (type A)"

Things you'll need before you start:
• Please screen shot all of this info so you can refer to it while your offline setting up the router. (If your on Chrome: handy extension called "webpage screenshot").
• A USB Driver / Memory stick: 32MB (back up the data so you don't risk losing any of it)
• Download the files: Unlock File /// Firmware Downgrade File (if needed)



Connect your BT router & Log into: normally by typing 192.168.1.254 into the web browser address bar

Check the firmware number (should be at the bottom of the page).

If it says: 4.7.5.1.83.8.57.1.3 You will NEED to downgrade the firmware first before you can continue unlocking. See the quote below

If you don't need to downgrade, please skip to "Preparation"



DOWNGRADING FIRMWARE

Quote from: PSI

• Download the firmware file (here) and extract it to your desktop.
• Make sure you are connected to the router via an ethernet cable. We're flashing a firmware here so we don't want any wireless hiccups.
• Open you web browser and type in: http://192.168.1.254/firmware_upgrade
• Put in your password for the router (found on the little pull out plastic tab on the top of the router).
• Click the browse button and select HUB3A_4.7.5.1.83.8.57_prod.rms as the update file from your desktop.
• Click OK. (You may be warned that all your settings will be wiped out. This is normal, and besides if it's a locked router you haven't configged to work your way anyway!)
• The Hub may ask you are you sure about the update. Click yes. The hub will now reboot and the power light will remain orange for a minute or so. Don't panic - this IS normal!

After the hub will reboot again and it will take slightly longer than normal to reboot to the blue lights - don't worry this is normal.
Once it's rebooted you can carry on with the unlock tutorial.



PREPARATION

• Download and extract the files: BTHomeHub_unlock.exe
• Plug your USB drive into your PC
• Open DiskImage_1_6_WinAll.exe, say yes to the freeware licence. Note: If in Vista or 7  right click and run as administrator!
• Select the physical disk (not the Drive letter) that is you USB drive. Note: Double check this because you can trash your PC hard drive if you get it wrong!!
• Click the browse button and select ext3.img.
• Click the start button. Writing takes approx 3 - 15 seconds and you can see it's progress on the progress bar.
• On your PC setup a new user account with the name admin (all lower case).
• Set up the password for the newly created account called admin that is the same as your Home Hub 3
• Log in to the newly created admin account and stay there till your finished.


Getting root
• Reset router to defaults
• Pop the USB drive into the HomeHub 3A
• In the 3A unlock folder you downloaded and extracted to your PC (Not the USB1 folder) select the utelnetd and the smb.conf files, then select edit >> copy
• Open My Computer and type in \\192.168.1.254\usb1.
• Double click the SYS folder and then the ETC folder
• Select Edit >> Paste and confirm overwriting the smb.conf file.
• Close the My Computer window you have been working in.
• Open a new My Computer window and type in \\192.168.1.254\ and again double click usb1 folder and double click the sys folder. Now go in to a couple of folders - any will do - in the file system but don't delete anything. This is to trigger the telnet into working.
• Open Kitty and select the telnet button, ip address 192.168.1.254, port 4002, and click open. NOTE: if it doesn't work 1st time wait 15 seconds or so and try again... and again... and again. You should be in after a minute max and have a root telnet session.

The Hack
At the command prompt type in the commands below one at a time. Note: everything before the ":<---" is the command everything after explains what the command is doing.
• ssh_cli :<--- This fires up the openrg command interface and the prompt changes to "BT Home Hub 3.0A"
• conf print persistent/bt/domain_locking/enabled :<--- This is checking the domain lock. It will be a (enabled(1))
• conf set persistent/bt/domain_locking/enabled 0 :<--- This is the unlock bit!
• conf print persistent/bt/domain_locking/enabled :<--- Check the domain lock again will now be (enabled(0)).. Hurrah unlocked!
• conf del fw/policy/0/chain/fw_br0_in :<--- Unlocking the SSH command shell by deleting the firewall drop command (ethernet)
• conf del fw/policy/0/chain/fw_br1_in :<--- Unlocking the SSH command shell by deleting the firewall drop command (wifi)
• conf set bt/bt_agent/enabled 0 :<--- Let's turn off BT's Spy access whilst we're in there shall we.
• conf set /admin/user/0/permissions/ssh 1 <--- This command allows SSH access that was previously eluding us.
• conf reconf 1 :<--- save everything to flash.


Making the router usable for KAROO

Open your browser and go to this page: http://192.168.1.254/thd_setup
Here, you can change: VPI / VCI - Karoo use: 1 / 50

THE END

Connection's to games etc is far better than it was. No Pesky NAT issues. The router does what I tell it to do. Packet loss = 0 Jitter = 0 / 1 (at the most). Before it was "high" (normally line quality related though....???)

Hope this helps any of you with a shiny BT hub sitting in the cupboard.