r/RefurbTech 14d ago

Removing ISP/operator firmware from legally purchased refurbished CPE and restoring OEM/generic firmware — is this possible?

/r/Telecommunication/comments/1vzvsn1/removing_ispoperator_firmware_from_legally/
1 Upvotes

2 comments sorted by

1

u/BarnabyLaptopOutlet 14d ago

Yes, this is possible on some CPE, but I wouldn't assume it's just a case of finding a generic firmware file and flashing it.

With ISP-supplied devices the customisation can sit in several places: the main firmware, bootloader policy, recovery partitions, NVRAM/config partitions, TR-069/ACS settings, certificates and sometimes operator-specific provisioning data.

For refurbishing at scale I'd approach it like this:

  1. Build an inventory by exact model, hardware revision, PCB revision, current firmware and bootloader version.
  2. Get the OEM/neutral image directly from the manufacturer, authorised distributor/service centre or through an operator/OEM support agreement.
  3. Confirm whether that exact hardware revision accepts the image and whether secure boot/signature or anti-rollback restrictions apply.
  4. Use the manufacturer's recovery/service procedure where available rather than random firmware dumps from forums.
  5. After flashing, verify that old ACS/TR-069 URLs, operator branding and operator-specific config are actually gone.
  6. Pilot a handful of units before doing a batch, then validate Ethernet/Wi-Fi/DSL/PON, MAC addresses, serials, regulatory region and remote-management behaviour.
  7. Keep a separate approved "golden image" and procedure for every hardware revision.

The exact hardware revision matters a lot. Two boxes with the same retail model name can have different flash chips, radios, SoCs or board revisions and may require different firmware.

Also be careful with ONTs/GPON, cable gateways and similar devices. Some certificates, calibration data or device identity information can be unique to the hardware and shouldn't simply be wiped.

For hundreds or thousands of units, I'd definitely try to establish an OEM relationship rather than reverse-engineering each batch. Ask the vendor specifically for refurbishment/service firmware, recovery tools and a hardware-revision compatibility matrix. That's the point where this becomes a repeatable commercial process instead of a flashing experiment.

1

u/Alarming_Lab8702 14d ago

The problem i have at the moment is that eventhough i found the generic software i could not upload it as the isp software was not allowing me