�*�Programming the EF�6106 Panasonic Cellular Phone�



1)      Power on Unit
2)      Enter [*] 0 0 0 0 [#] Wait 2 seconds
3)      Enter [*] 1 [SEND]    Wait 2 seconds
4)      Enter 50 [SEND]       Wait 2 seconds
5)      System Id (SIDH) _ _ _ _                                        [STO] 01
6)      Mobile Id       (MIN) (_ _ _) _ _ _ � _ _ _ _   [STO] 02
7)      Lock Code       _ _ _ _                                         [STO] 03
8)      Speed Dial (00) (_ _ _) _ _ _ � _ _ _ _         [STO] 04
9)      Station CL. Mark  0 0                                   [STO] 05
10)     Init. Page (1PCH) 3 3 3 (or 334 for W/L)        [STO] 06
11)     Acc. Overload      0 5                                  [STO] 07
12)     Group Id. (GIM)   1 2                                   [STO] 08

13)                                                                             [STO] 09
1       Local Use
1       Min MArk
1       Pref. System (1= N�W/L and 0= W/L)
1       End to End
1       Repert. Dial
1       Horn Alert **
0       Not Used
0       Not Used

14)                                                                             [STO] 10
0       Not USed
0       Monitor Mode
0       Auto Lock
0       Not Used
0       Not USed
1       A/B System Sel. (1=N�W/L and 0= W/L)
0       Pref. Sys. Only
0       Home Sys. Only

15)                                                                             [STO] 11
1       Call in Absence
1       DTMF
0       Not Used
0       Not Used
0       Not Used
0       Not Used
1       Tot. Call Timer
1       Ind. Call Timer

16) [Missing from my sheet]

17) Program Recall � [RCL] Memory Location

18)     Burning the NAM � [STO] * *

To restart normal operations turn the power off, then back on.�j� Make a test call. If a problem occurs enter the password and check your programming.

NOTE1: In order to program the phone ONLY THE FOLLOWING CONNECTIONS CAN BE MADE TO THE PHONE. On a 25 pin (RS�232 type) female connector have 12 volts positive to pins 11,12, and 13; and negative to pins 3, 24, and 25. Otherwise the phone will ignore the password sequence and not enter program mode.

NOTE2: I am told by someone who opened up their phone that the NAM is an EEPROM, ie it can be reprogrammed over and over again. (Unlike some phones such as one model by Motorola which can only be programmed three time and then the NAM has to be switched.

NOTE3: It is advisable to first recall and write down all program memory locations by pressing [RCL] and 01 through 11. This will allow you to go back if your new number does not work. Ordinarily you will only have to change 01 , 02 and the Pref. System and A/B System Sel. if you have switched from a Wireline or a Non�Wireline Carrier or vice�versa.

NOTE4:H A C K I N G
Limited experimentation has been done with this information. One test that has succeeded was to program a number as yet unassigned by a carrier and try it in a ROAM mode elsewhere. This worked completely and lends credence to the theory that the Nationwide database of ESN's is not yet activated. Unless your ESN is in the local system, the default is that you can roam with a valid mobile number until the local system is programmed to lock you out. This seemed to work even when a known stolen and therefore supposedly locked out mobile number was used in ROAM on a foreign system.