Cinterion® PLS63-W

AT Command Set

Version: 01.002
DocId: PLS63-W_ATC_V01.002
Cinterion® PLS63-W AT Command Set Page 2 of 564

Document Name: Cinterion® PLS63-W AT Command Set

Version: 01.002
Date: February 9, 2021
DocId: PLS63-W_ATC_V01.002
Status Confidential / Preliminary

GENERAL NOTE
THE USE OF THE PRODUCT INCLUDING THE SOFTWARE AND DOCUMENTATION (THE "PRODUCT") IS
SUBJECT TO THE RELEASE NOTE PROVIDED TOGETHER WITH PRODUCT. IN ANY EVENT THE PROVI-
SIONS OF THE RELEASE NOTE SHALL PREVAIL. THIS DOCUMENT CONTAINS INFORMATION ON THA-
LES DIS AIS DEUTSCHLAND GMBH (“THALES“) PRODUCTS. THE SPECIFICATIONS IN THIS DOCUMENT
ARE SUBJECT TO CHANGE AT DISCRETION OF THALES. THALES GRANTS A NON-EXCLUSIVE RIGHT
TO USE THE PRODUCT. THE RECIPIENT SHALL NOT TRANSFER, COPY, MODIFY, TRANSLATE,
REVERSE ENGI-NEER, CREATE DERIVATIVE WORKS; DISASSEMBLE OR DECOMPILE THE PRODUCT
OR OTHERWISE USE THE PRODUCT EXCEPT AS SPECIFICALLY AUTHORIZED. THE PRODUCT AND
THIS DOCUMENT ARE PROVIDED ON AN "AS IS" BASIS ONLY AND MAY CONTAIN DEFICIENCIES OR
INADEQUACIES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THALES DISCLAIMS
ALL WAR-RANTIES AND LIABILITIES. THE RECIPIENT UNDERTAKES FOR AN UNLIMITED PERIOD OF
TIME TO OBSERVE SECRECY REGARDING ANY INFORMATION AND DATA PROVIDED TO HIM IN THE
CONTEXT OF THE DELIVERY OF THE PRODUCT. THIS GENERAL NOTE SHALL BE GOVERNED AND
CONSTRUED ACCORDING TO GERMAN LAW.

Copyright
Transmittal, reproduction, dissemination and/or editing of this document as well as utilization of its contents and
communication thereof to others without express authorization are prohibited. Offenders will be held liable for
payment of damages. All rights created by patent grant or registration of a utility model or design patent are
reserved.

Copyright © 2021, THALES DIS AIS Deutschland GmbH

Trademark Notice
Thales, the Thales logo, are trademarks and service marks of Thales and are registered in certain countries.

Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United
States and/or other countries. All other registered trademarks or trademarks mentioned in this document are
property of their respective owners.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 3 of 564
Contents

Contents

1. Introduction............................................................................................................................................ 12
1.1 Scope of the document ................................................................................................................. 12
1.2 Related documents ....................................................................................................................... 13
1.3 Document Conventions ................................................................................................................. 15
1.3.1 Quick Reference Table .................................................................................................. 15
1.3.2 Superscript Notation for Parameters And Values .......................................................... 16
1.4 AT Command Interpreter............................................................................................................... 17
1.5 AT Command Syntax .................................................................................................................... 18
1.5.1 Using Parameters .......................................................................................................... 18
1.5.2 Concatenating AT Commands....................................................................................... 19
1.6 Communication between Customer Application and PLS63-W .................................................... 20
1.7 Supported character sets .............................................................................................................. 21
1.7.1 GSM alphabet tables and UCS2 character values ........................................................ 23
1.7.2 UCS2 and GSM character coding and conversion ........................................................ 25
1.7.2.1 Output of SIM data (UE to TE)....................................................................................... 25
1.7.2.2 Input of SIM data (TE to UE) ......................................................................................... 26
1.8 Unsolicited Result Code Presentation........................................................................................... 27
1.8.1 Common URCs.............................................................................................................. 27
1.9 Errors and Messages .................................................................................................................... 29

2. Configuration Commands..................................................................................................................... 30
2.1 AT&F Reset AT Command Settings to Factory Default Values .................................................. 30
2.2 AT&V Display current Configuration............................................................................................ 31
2.2.1 AT&V Response ............................................................................................................ 31
2.3 AT&W Store AT Command Settings to User Defined Profile ...................................................... 32
2.4 ATQ Result Code Presentation Mode ......................................................................................... 33
2.5 ATV Result code format mode .................................................................................................... 34
2.5.1 Verbose and numeric result codes ................................................................................ 34
2.6 ATX Result Code Selection......................................................................................................... 35
2.7 ATZ Restore AT Command Settings from User Defined Profile ................................................. 36
2.8 AT+CFUN PLS63-W Functionality Level .................................................................................... 37
2.9 AT^SMSO Switch Off PLS63-W.................................................................................................. 39
2.10 AT+CMEE Error Message Format .............................................................................................. 40
2.10.1 CME/CMS Error Code Overview ................................................................................... 41
2.11 AT+CSCS Character Set ............................................................................................................ 45
2.12 AT^SCFG Extended Configuration Settings ............................................................................... 46
2.13 AT^SSRVSET Service Set for USB ............................................................................................ 81
2.14 AT^SPOW Set UART Mode and SLEEP Mode on UART .......................................................... 82
2.15 AT+GCAP Capabilities List ......................................................................................................... 84

3. Status Control Commands ................................................................................................................... 85

3.1 AT+CEER Extended Error Report............................................................................................... 85
3.1.1 List of status codes for extended error report ................................................................ 86
3.2 AT^SIND Extended Indicator Control .......................................................................................... 98

4. Serial Interface Control Commands................................................................................................... 114

4.1 AT\Q Flow Control..................................................................................................................... 114

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 4 of 564
Contents

4.2 AT&C Set Data Carrier Detect (DCD) line mode....................................................................... 115
4.3 AT&D Set Data Terminal Ready (DTR) line mode .................................................................... 116
4.4 AT&S Set Data Set Ready (DSR) line mode............................................................................. 117
4.5 ATE AT Command Echo ........................................................................................................... 118
4.6 AT+ICF Serial Interface Character Framing.............................................................................. 119
4.7 AT+IPR Bit Rate ........................................................................................................................ 121
4.8 AT+CMUX Multiplex mode........................................................................................................ 123
4.8.1 Restrictions while using Multiplex mode ...................................................................... 124
4.9 AT^SQPORT Query Port Id ...................................................................................................... 125

5. Security Commands ............................................................................................................................ 126

5.1 AT+CPIN PIN Authentication .................................................................................................... 126
5.2 AT^SPIC Display PIN Counter .................................................................................................. 128
5.3 AT+CLCK Facility Lock ............................................................................................................. 132
5.4 AT+CPWD Change Password .................................................................................................. 137
5.5 AT^SCSL Customer SIM Lock .................................................................................................. 140
5.6 AT^SSECUA Internet Service Certificate Store Actions ........................................................... 142
5.7 AT^SSECUC Internet Service Certificate Store Update Configuration ..................................... 145
5.8 AT^SSECRUN Signature Authentication for Protected Commands in Secure Mode ............... 148

6. Identification Commands.................................................................................................................... 149

6.1 ATI Display product identification information ........................................................................... 149
6.2 AT+CGMI Request manufacturer identification......................................................................... 152
6.3 AT+GMI Request manufacturer identification ........................................................................... 152
6.4 AT+CGMM Request model identification .................................................................................. 153
6.5 AT+GMM Request model identification..................................................................................... 153
6.6 AT+CGMR Request revision identification of software status................................................... 154
6.7 AT+GMR Request revision identification of software status ..................................................... 154
6.8 AT+CGSN Request International Mobile Equipment Identity (IMEI) ......................................... 155
6.9 AT+GSN Request International Mobile Equipment Identity (IMEI) ........................................... 155
6.10 AT+CIMI Request International Mobile Subscriber Identity (IMSI)............................................ 156
6.11 AT^SINFO Information Output .................................................................................................. 157

7. Call related Commands....................................................................................................................... 160

7.1 ATA Connect to Incoming Call .................................................................................................. 160
7.2 ATD Mobile originated call to specified number ........................................................................ 161
7.3 ATDL Redial last number used ................................................................................................. 163
7.4 ATH Disconnect existing data connection................................................................................. 164
7.5 AT+CHUP Hang up call ............................................................................................................ 165
7.6 AT^SHUP Hang up call(s) indicating a specific 3GPP TS 24.008 release cause ..................... 166
7.7 ATS0 Set number of rings before automatically answering a call ............................................. 168
7.8 ATO Switch from command mode to data mode / PPP online mode........................................ 169
7.9 +++ Escape from Data Mode to AT Command Mode ............................................................... 170
7.10 AT+CLCC List of current calls................................................................................................... 171
7.11 AT^SLCC Extended list of current calls .................................................................................... 173
7.12 AT+CRC Set Cellular Result Codes for incoming call indication .............................................. 176
7.13 AT+CVMOD Voice call mode .................................................................................................... 178

8. Network Service Commands .............................................................................................................. 179

8.1 AT+COPN Read operator names ............................................................................................. 179
8.2 AT+COPS Operator Selection .................................................................................................. 180

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 5 of 564
Contents

8.3 AT+CREG Network Registration Status.................................................................................... 184

8.4 AT+CSQ Signal Quality............................................................................................................. 187
8.5 AT+CPOL Preferred Operator List ............................................................................................ 188
8.6 AT+CPLS Select Preferred Operator List ................................................................................. 190
8.7 AT+CTZU Automatic Time Zone Update .................................................................................. 191
8.8 AT^SMONI Monitoring Serving Cell .......................................................................................... 193
8.8.1 AT^SMONI Responses................................................................................................ 193
8.8.2 Service states .............................................................................................................. 197
8.9 AT^SMONP Monitoring Neighbour Cells .................................................................................. 198
8.9.1 AT^SMONP Responses .............................................................................................. 198
8.10 AT^SNMON Network Monitoring............................................................................................... 203
8.11 AT+CAVIMS Availability for voice calls with IMS ...................................................................... 207
8.12 AT+CESQ Extended Signal Quality .......................................................................................... 208
8.13 AT^SNSRAT Radio Access Technologies Selection ................................................................ 210
8.14 AT^SNLWM2M LwM2M Client Configuration / Controlling ....................................................... 212
8.15 AT^SNCSGSC Closed Subscriber Group Network Scan ......................................................... 217
8.16 AT^SNCSGLS Operator CSG lists on USIM............................................................................. 219
8.17 AT^SNFOTA Firmware upgrade Over The Air .......................................................................... 220
8.18 AT+CEVDP Voice domain preference for LTE ......................................................................... 223

9. USIM Application Toolkit (USAT) Commands................................................................................... 224

9.1 AT^SSTA Remote-SAT Interface Activation ............................................................................. 224

10. Short Message Service (SMS) Commands........................................................................................ 226

10.1 SMS parameters ......................................................................................................................... 226
10.2 AT+CMGC Send an SMS command......................................................................................... 231
10.3 AT+CMGD Delete short message............................................................................................. 232
10.4 AT+CMGF Select SMS message format .................................................................................. 233
10.5 AT+CMGL List SMS messages from preferred store................................................................ 234
10.6 AT+CMGR Read SMS messages ............................................................................................. 236
10.7 AT+CMGS Send Short Message .............................................................................................. 237
10.8 AT+CMGW Write Short Messages to Memory ......................................................................... 238
10.9 AT+CMSS Send short messages from storage ........................................................................ 239
10.10 AT+CNMA New Message Acknowledgement to UE/TE ........................................................... 240
10.11 AT+CNMI SMS Event Reporting Configuration ........................................................................ 241
10.12 AT+CPMS Preferred SMS message storage ............................................................................ 244
10.13 AT+CMMS More Messages to Send......................................................................................... 246
10.14 AT+CSCA SMS Service Center Address .................................................................................. 247
10.15 AT+CSCB Select Cell Broadcast Message Indication .............................................................. 248
10.16 AT+CSDH Show SMS text mode parameters........................................................................... 250
10.17 AT+CSMP Set SMS Text Mode Parameters ............................................................................ 251
10.18 AT+CSMS Select Message Service.......................................................................................... 253
10.19 AT^SMGL List Short Messages from preferred store without setting status to REC READ ..... 255
10.20 AT^SMGR Read short message without setting status to REC READ ..................................... 256
10.21 AT^SSDA Set SMS Display Availability .................................................................................... 257
10.22 AT^SCMR Read Concatenated Short Messages ..................................................................... 258
10.23 AT^SCMS Send Concatenated Short Messages ...................................................................... 259
10.24 AT^SCMW Write Concatenated Short Messages to Memory ................................................... 260
10.25 AT^SCML List Concatenated Short Messages from preferred store ........................................ 261

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 6 of 564
Contents

11. Internet Service Commands ............................................................................................................... 262

11.1 AT^SICA Internet Connection Activate or Deactivate ............................................................... 266
11.2 AT^SICS Internet Connection Settings ..................................................................................... 267
11.3 AT^SIPS Internet Profile Storage .............................................................................................. 269
11.4 AT^SISS Internet Service Setup Profile .................................................................................... 270
11.5 AT^SISI Internet Service Information ........................................................................................ 281
11.6 AT^SISO Internet Service Open ............................................................................................... 284
11.7 AT^SISC Internet Service Close ............................................................................................... 287
11.8 AT^SISR Internet Service Read Data ....................................................................................... 288
11.8.1 Example: Socket Host Reads Small Amounts of UDP Data Packets (URC Mode)..... 290
11.9 AT^SISW Internet Service Write Data....................................................................................... 291
11.9.1 Usage of parameter <eodFlag>................................................................................... 293
11.10 AT^SIST Transparent Mode...................................................................................................... 294
11.11 AT^SISD Internet Service MQTT Dynamic Setup Profile.......................................................... 296
11.12 AT^SISU MQTT Dynamic Send Request.................................................................................. 299
11.13 AT^SISH Disconnect Remote Client ......................................................................................... 300
11.14 AT^SISX Internet Service Execution ......................................................................................... 301
11.15 AT^SISE Internet Service Error Report ..................................................................................... 304
11.16 Internet Service URC .................................................................................................................. 306
11.16.1 Information Elements Related to the Service Application............................................ 307
11.16.2 Information Elements Related to FTP Service............................................................. 310
11.16.3 Information Elements Related to HTTP Service .......................................................... 310
11.16.4 Information Elements Related to MQTT Service ......................................................... 310
11.17 Examples of how to Configure and Use Internet Service Profiles............................................... 312
11.17.1 Selecting URC Mode or Polling Mode ......................................................................... 312
11.17.2 Configuring an Internet Connection Profile.................................................................. 312
11.17.3 Configuring Non-Transparent Listener ........................................................................ 312
11.17.4 Configuring TCP Client for Calling a TCP Listener...................................................... 313
11.17.5 Transparent TCP Listener: Accepting / Rejecting Incoming Remote Client ................ 313
11.17.6 Transparent TCP Listener: Autoanswering Incoming Remote Client .......................... 315
11.17.7 Socket Client Sends Data via TCP Connection (Polling Mode)................................... 316
11.17.8 Socket Client Sends Data via TCP Connection with URCs......................................... 316
11.17.9 UDP Scenario .............................................................................................................. 317
11.17.10 Creating Transparent TCP Socket Client .................................................................... 319
11.17.11 Opening and Closing Transparent TCP Service.......................................................... 319
11.17.12 Transparent TCP Client Receives Data While in AT Command Mode........................ 320
11.17.13 Remote Server Disconnects While Transparent TCP Service is in Transparent Access
Mode............................................................................................................................ 321
11.17.14 Server Disconnects While Transparent TCP Service is in AT Command Mode and Data
is Pending .................................................................................................................... 321
11.17.15 FTP Download to FFS (URC Mode) ............................................................................ 323
11.17.16 FTP Upload Single File (URC Mode)........................................................................... 323
11.17.17 HTTP Download Using TLS......................................................................................... 324
11.17.18 HTTP Post ................................................................................................................... 325
11.17.19 Ping.............................................................................................................................. 326
11.17.20 Resolving DNS Host Name to IP Address................................................................... 326
11.17.21 Configuring MQTT Client ............................................................................................. 326
11.17.22 MQTT Client: Publish and Subscribe.......................................................................... 327

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 7 of 564
Contents

12. Supplementary Service Commands .................................................................................................. 329

12.1 AT+CACM Accumulated call meter (ACM) reset or query ........................................................ 329
12.2 AT+CAMM Accumulated call meter maximum (ACMmax) set or query.................................... 330
12.3 AT+CAOC Advice of Charge Information.................................................................................. 331
12.4 AT+CCUG Closed User Group ................................................................................................. 333
12.5 AT+CCFC Call forwarding number and conditions control ....................................................... 335
12.6 AT+CCWA Call Waiting ............................................................................................................ 339
12.7 AT+CHLD Call Hold and Multiparty........................................................................................... 342
12.8 AT+CLIP Calling Line Identification Presentation ..................................................................... 344
12.9 AT+CLIR Calling Line Identification Restriction ........................................................................ 346
12.10 AT+COLP Connected Line Identification Presentation ............................................................. 347
12.11 AT+CPUC Price per unit and currency table............................................................................. 349
12.12 AT+CSSN Supplementary service notifications ........................................................................ 350
12.13 AT+CUSD Unstructured Supplementary Service Data ............................................................. 352

13. Packet Domain Related Commands .................................................................................................. 354

13.1 AT+CGACT PDP Context Activate or Deactivate ..................................................................... 354
13.2 AT+CGATT PS Attach or Detach .............................................................................................. 356
13.3 AT+CGEQOS Define EPS Quality of Service ........................................................................... 357
13.4 AT+CGDATA Enter Data State ................................................................................................. 359
13.4.1 Automatic deactivation of PDP context during dial-up PPP......................................... 360
13.5 AT+CGDCONT Define PDP Context ........................................................................................ 361
13.5.1 Attaching to LTE Networks and Registering to IMS..................................................... 363
13.6 AT+CEREG EPS Network Registration Status ......................................................................... 366
13.7 AT+CGEQOSRDP EPS Quality of Service Read Dynamic Parameters................................... 368
13.8 AT+CGEQMIN 3G Quality of Service Profile (Minimum acceptable) ........................................ 370
13.9 AT+CGEQREQ 3G Quality of Service Profile (Requested) ...................................................... 374
13.10 AT+CGEREP Packet Domain Event Reporting ........................................................................ 378
13.11 AT+CGPADDR Show PDP Address ......................................................................................... 382
13.12 AT+CGSCONTRDP Secondary PDP Context Read Dynamic Parameters ............................. 384
13.13 AT+CGCONTRDP PDP context read dynamic parameters...................................................... 386
13.14 AT+CGQMIN Quality of Service Profile (Minimum acceptable) ................................................ 388
13.15 AT+CGREG Packet Domain Network Registration Status ....................................................... 391
13.16 AT+CGSMS Select Service for MO Short Messages ............................................................... 393
13.17 ATD*99# Request Packet Domain service................................................................................ 394
13.18 AT+CEMODE Modes of Operation for EPS .............................................................................. 395
13.19 AT+CGDSCONT Define Secondary PDP Context.................................................................... 396
13.20 AT+CGTFT Traffic Flow Template ............................................................................................ 398
13.21 AT+CGTFTRDP Traffic Flow Template Read Dynamic Parameters ........................................ 401
13.22 AT^SGAUTH Set Type of Authentication for PDP-IP Connections........................................... 404
13.23 AT^SWWAN PDP Context Activate or Deactivate .................................................................... 406
13.24 AT+CGPIAF Select Printing IP address format......................................................................... 408
13.25 AT+CNMPSD No more PS data ............................................................................................... 410

14. USIM related Commands .................................................................................................................... 411

14.1 AT+CCID USIM Card Identification Number ............................................................................. 411
14.2 AT+CRSM Restricted USIM Access ......................................................................................... 412
14.3 AT+CSIM Generic USIM Access .............................................................................................. 414
14.4 AT+CCHO Open logical channel .............................................................................................. 416
14.5 AT+CCHC Close logical channel .............................................................................................. 417

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 8 of 564
Contents

14.6 AT+CGLA Generic logical channel access ............................................................................... 418

14.7 AT^SSET USIM Data Ready Indication .................................................................................... 419
14.8 AT^SCID USIM Identification Number ...................................................................................... 420
14.9 AT^SCKS Query USIM and Chip Card Holder Status .............................................................. 421

15. Phonebook Commands....................................................................................................................... 423

15.1 AT+CPBS Select phonebook memory storage ......................................................................... 423
15.2 AT+CPBR Read from phonebook ............................................................................................. 426
15.3 AT+CPBW Write into phonebook .............................................................................................. 431
15.4 AT+CSVM Set voice mail number............................................................................................. 436
15.5 AT+CNUM Read own numbers................................................................................................. 438

16. GNSS Commands ................................................................................................................................ 439

16.1 GNSS NMEA Sentences............................................................................................................. 440
16.2 GNSS Power Saving Considerations .......................................................................................... 442
16.3 AT^SGPSC GNSS Configuration .............................................................................................. 443
16.3.1 Power Saving Considerations...................................................................................... 454
16.3.1.1 Dynamic Power Optimization (DPO) ........................................................................... 454
16.4 AT^SGPSE GNSS Event Notification ....................................................................................... 455
16.5 Examples of How to Configure and Use GNSS .......................................................................... 458
16.5.1 Loading Xtra.Bin File and Activating A-GNSS Start Mode .......................................... 458
16.5.2 Trying to Load Invalid XTRA File ................................................................................. 459
16.5.3 Starting GNSS without Aiding...................................................................................... 459
16.5.4 Cold Start..................................................................................................................... 459

17. Audio Commands ................................................................................................................................ 461

17.1 AT+CMUT Mute control ............................................................................................................ 461
17.2 AT+VTS DTMF and tone generation......................................................................................... 462
17.3 AT+VTD Tone duration ............................................................................................................. 463
17.4 AT^SAIC Audio Interface Configuration .................................................................................... 464
17.5 AT^SNFI Set microphone path parameters .............................................................................. 466
17.6 AT^SNFO Set audio output parameter (loudspeaker path) ...................................................... 467
17.7 AT^SNFS Select audio hardware set ........................................................................................ 469

18. Hardware related Commands ............................................................................................................. 470

18.1 AT+CCLK Real Time Clock....................................................................................................... 470
18.2 AT+CALA Alarm Configuration ................................................................................................. 471
18.3 AT^SBV Battery/Supply Voltage ............................................................................................... 474
18.4 AT^SCTM Critical Operating Temperature Monitoring.............................................................. 475
18.5 AT^SLED LED Feature ............................................................................................................. 477
18.6 AT^SSPI Serial Protocol Interface ............................................................................................ 478
18.6.1 Selecting SPI Mode ..................................................................................................... 480
18.6.2 Transmitting Data over AT Interface............................................................................ 480
18.6.3 Error Handling on the I²C Bus...................................................................................... 482
18.6.4 Example: Using I²C Bus............................................................................................... 484
18.6.5 Example: Transfer and Response Messages on SPI .................................................. 485
18.7 AT^SAD Antenna Configuration ................................................................................................ 486
18.8 AT^SRADC Configure and Read A/D Converter ...................................................................... 487

19. General Purpose I/O (GPIO) Pin related Commands........................................................................ 491

19.1 AT^SPIO GPIO Driver Open/Close ........................................................................................... 491

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 9 of 564
Contents

19.2 AT^SCPIN Pin Configuration .................................................................................................... 492

19.3 AT^SGIO Get IO state of a specified pin................................................................................... 494
19.4 AT^SSIO Set IO state of a specified pin ................................................................................... 495
19.5 AT^SGPINCA Pin Configuration ............................................................................................... 496

20. Subscription Management Commands ............................................................................................. 497

20.1 AT^SUSMA Subscription Management Action ......................................................................... 497
20.2 AT^SUSMC Subscription Management Control........................................................................ 499

21. Miscellaneous Commands.................................................................................................................. 500

21.1 ATS3 Command Line Termination ............................................................................................ 500
21.2 ATS4 Response Formatting ...................................................................................................... 501
21.3 ATS5 Command Line Editing .................................................................................................... 502
21.4 AT^SBNW Binary Write............................................................................................................. 503
21.5 AT^SFDL Enter Firmware Download Mode .............................................................................. 507
21.6 AT^SFSA Flash File System Access ........................................................................................ 509
21.7 AT^SRVCFG Service Configuration Settings............................................................................ 519
21.8 AT^SRVCTL Extra Service Control ........................................................................................... 528
21.9 AT^SBNR Binary Read ............................................................................................................. 534

22. Appendix .............................................................................................................................................. 537

22.1 Star-Hash (*#) Network Commands............................................................................................ 537
22.2 Available AT Commands and Dependency on SIM PIN ............................................................. 540
22.3 Availability of AT Commands Depending on Operating Mode of ME.......................................... 546
22.4 AT Command Settings storable with AT&W................................................................................ 552
22.5 Factory Default Settings Restorable with AT&F .......................................................................... 553
22.6 Summary of Unsolicited Result Codes (URC)............................................................................. 555
22.7 Alphabetical List of AT Commands ............................................................................................. 559

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 10 of 564
List of Tables

List of Tables

Table 1.1: Symbols used to mark the type of parameters ........................................................................... 16

Table 1.2: Symbols used to indicate storage options or correlations with other commands ....................... 16
Table 1.3: Symbols used to mark different types of default values of parameters ..................................... 16
Table 1.4: Types of AT commands and responses .................................................................................... 18
Table 1.5: Exemplary escape sequences generated by PLS63-W for its non-UCS2 output ...................... 22
Table 2.1: AT&V Response ........................................................................................................................ 31
Table 2.2: General "CME ERROR" Codes (3GPP TS 27.007) ................................................................. 41
Table 2.3: GPRS related "CME ERROR" Codes (3GPP TS 27.007) ........................................................ 42
Table 2.4: Enhanced "CME ERROR" Codes ............................................................................................. 42
Table 2.5: SMS related "CMS ERROR" Codes (3GPP TS 27.005) .......................................................... 43
Table 11.1: Applicability of AT^SICS <conParmTag> values ................................................................... 267
Table 11.2: Applicability of AT^SISS <srvParmTag> values ................................................................... 270
Table 11.3: Applicability of AT^SISD <dynParamTag> values ................................................................. 296
Table 18.1: PLS63-W Status and Mode Indication via LED ....................................................................... 477
Table 18.2: Special characters for ASCII coding ........................................................................................ 481
Table 18.3: Structure of Transfer and Response Messages on the I²C bus................................................ 482
Table 22.1: Star-Hash (*#) Command Overview ......................................................................................... 537
Table 22.2: Abbreviations of Codes and Parameters used in Table 22.1 ................................................... 538
Table 22.3: Star-Hash Command Response Parameters ........................................................................... 539
Table 22.4: Star-Hash Commands for Supplementary Services ................................................................ 539
Table 22.5: Available AT Commands and Dependency on SIM PIN........................................................... 540
Table 22.6: Availability of AT Commands Depending on Operating Mode of ME ....................................... 546
Table 22.7: Settings Stored to User Profile ................................................................................................. 552
Table 22.8: Factory Default Settings Restorable with AT&F ....................................................................... 553
Table 22.9: Summary of Unsolicited Result Codes (URC) .......................................................................... 555
Table 22.10: Alphabetical List of AT Commands........................................................................................... 559

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 11 of 564
List of Figures

List of Figures

Figure 1.1: Main character table of GSM 7 bit default alphabet.................................................................... 23

Figure 1.2: Extension character table of GSM 7 bit default alphabet............................................................ 24
Figure 18.1: SPI modes selectable on SPI ................................................................................................... 480

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 12 of 564
1. Introduction

1. Introduction

1.1 Scope of the document

This document presents the AT Command Set for

PLS63-W GSM/UMTS/LTE Engine, Release 01.002.

Before using the PLS63-W or upgrading to a new firmware version please read the latest product information
provided in "PLS63-W Release Notes, Version 01.002".

DISCLAIMER:
AT commands or parameters not documented in this document are subject to change and reserved for future
use. THALES DIS AIS Deutschland GmbH reserves the right to modify or even eliminate these options in later
releases.

PLS63-W features packet switched (PS) data capability, but does not support circuit switched (CS) data trans-
mission. Hoewever, for reasons of compatibility with other products, and for compliance with 3GPP TS specifi-
catiions, some AT commands imply parameters or values related to CS data capability.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 13 of 564
1.2 Related documents

1.2 Related documents

[1] PLS63-W Release Notes, Version 01.002

[2] PLS63-W Hardware Interface Description, Version 01.002
[3] User's Guide: Getting Started with PLS63-W
[4] Application Note 16: Updating PLS63-W Firmware
[5] Application Note 37: GPS Antenna Integration for PLS63-W
[6] Application Note 39: USB Interface Description for PLS63-W
[7] Application Note 43: Customizing PLS63-W Applications
[8] Application Note 62: Transport Layer Security for Client TCP/IP Services
[9] Application Note 90: Controlling Functionality Levels of Cinterion® Modules
[10] MPSS.AT LTE RF Software Overview
[11] Controlling Rx Chains on LTE
[12] 3GPP TR 21.905 (descendant of 3GPP TR 01.04): Vocabulary for 3GPP Specifications
[13] 3GPP TS 27.010 (descendant of 3GPP TS 07.10): Terminal Equipment to User Equipment (TE-UE) multi-
plexer protocol
[14] Multiplex Driver Developer's Guide
[15] International Organization for Standardization (ISO): ISO/IEC10646: Universal Multiple-Octet Coded Char-
acter Set (UCS) - Part 1: Architecture and Basic Multilingual Plane.
This international standard is closely related to the Unicode Standard published by the Unicode Consortium
[16] The Unicode Consortium: Mapping of ETSI GSM 03.38 7-bit default alphabet characters into Unicode
[.TXT!]
[17] ITU-T V.24 List of definitions for interchange circuits between data terminal equipment (DTE) and data cir-
cuit-terminating equipment (DCE)
[18] ITU-T V.250 Serial asynchronous automatic dialling and control
[19] 3GPP TS 11.11: Specification of the Subscriber Identity Module - Mobile Equipment (SIM - ME) interface
[20] 3GPP TS 31.101: UICC-terminal interface; Physical and logical characteristics
[21] 3GPP TS 31.102: Characteristics of the Universal Subscriber Identity Module (USIM) application
[22] ETSI TS 102 221: Smart Cards; UICC-Terminal interface; Physical and logical characteristics
[23] 3GPP TS 11.14: Specification of the SIM Application Toolkit for the Subscriber Identity Module - Mobile
Equipment (SIM - ME) interface
[24] 3GPP TS 31.111: Universal Subscriber Identity Module (USIM) Application Toolkit (USAT)
[25] ETSI TS 102 223: Smart Cards; Card Application Toolkit (CAT)
[26] 3GPP TS 31.124: Mobile Equipment (ME) conformance test specification - Universal Subscriber Identity
Module Application Toolkit (USAT) conformance test specification
[27] 3GPP TS 22.002 (descendant of 3GPP TS 22.02): Circuit Bearer Services (BS) supported by a Public Land
Mobile Network (PLMN)
[28] 3GPP TS 22.004 (descendant of 3GPP TS 02.04): General on supplementary services
[29] 3GPP TS 22.030 (descendant of 3GPP TS 02.30): Man-Machine Interface (MMI) of the Mobile Station (MS)
[30] 3GPP TS 22.060 (descendant of 3GPP TS 02.60): General Packet Radio Service (GPRS); Service descrip-
tion; Stage 1
[31] 3GPP TS 23.060 (descendant of 3GPP TS 03.60): General Packet Radio Service (GPRS); Service descrip-
tion; Stage 2
[32] 3GPP TS 22.081 (descendant of 3GPP TS 02.81): Line Identification Supplementary Services; Stage 1
[33] 3GPP TS 22.082 (descendant of 3GPP TS 02.82): Call Forwarding (CF) Supplementary Services; Stage 1
[34] 3GPP TS 22.083 (descendant of 3GPP TS 02.83): Call Waiting (CW) and Call Holding (HOLD); Supple-
mentary Services; Stage 1
[35] 3GPP TS 22.085 (descendant of 3GPP TS 02.85): Closed User Group (CUG) supplementary services;
Stage 1

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 14 of 564
1.2 Related documents

[36] 3GPP TS 22.088 (descendant of 3GPP TS 02.88): Call Barring (CB) supplementary services; Stage 1
[37] 3GPP TS 22.090 (descendant of 3GPP TS 02.90): Unstructured Supplementary Service Data (USSD);
Stage 1
[38] 3GPP TS 23.038 (descendant of 3GPP TS 03.38): Alphabets and language specific information
[39] 3GPP TS 23.040 (descendant of 3GPP TS 03.40): Technical realization of the Short Message Service
(SMS)
[40] 3GPP TS 23.041 (descendant of 3GPP TS 03.41): Technical realization of Cell Broadcast Service (CBS)
[41] 3GPP TS 23.107: Quality of Service (QoS) concept and architecture
[42] 3GPP TS 24.011 (descendant of 3GPP TS 04.11): Point-to-Point (PP) Short Message Service (SMS) sup-
port on mobile radio interface
[43] 3GPP TS 24.008 (descendant of 3GPP TS 04.08): Mobile radio interface Layer 3 specification; Core net-
work protocols; Stage 3
[44] 3GPP TS 24.080 (descendant of 3GPP TS 04.80): Mobile radio interface layer 3 supplementary services
specification; Formats and coding
[45] 3GPP TS 24.301 Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS)
[46] 3GPP TS 25.101 User Equipment (UE) radio transmission and reception (FDD)
[47] 3GPP TS 25.133 Requirements for support of radio resource management
[48] 3GPP TS 25.304 User Equipment (UE) procedures in idle mode and procedures for cell reselection in con-
nected mode
[49] 3GPP TS 25.331 Radio Resource Control (RRC)
[50] 3GPP TS 27.005 (descendant of 3GPP TS 07.05): Use of Data Terminal Equipment - Data Circuit terminat-
ing Equipment (DTE - DCE) interface for Short Message Service (SMS) and Cell Broadcast Service (CBS)
[51] 3GPP TS 27.007 (descendant of 3GPP TS 07.07): AT command set for User Equipment (UE)
[52] 3GPP TS 27.060 (descendant of 3GPP TS 07.60): Mobile Station (MS) supporting Packet Switched Ser-
vices
[53] 3GPP TS 22.101 (descendant of 3GPP TS 02.07 and 3GPP TS 02.40): Service principles
[54] Common PCN Handset Specification (CPHS) v4.2 [.ZIP!]
[55] 3GPP TS 45.008 (descendant of GSM 05.08): Radio subsystem link control
[56] 3GPP TS 36.101 Evolved Universal Terrestrial Radio Access (E-UTRA)
[57] 3GPP TS 36.133 Evolved Universal Terrestrial Radio Access (E-UTRA); Requirements for support of radio
resource management
[58] Documents posted on website of USB Implementers Forum
[59] USB Language Identifiers (LANGIDs) [.PDF!].
[60] USB Class Definitions for Communication Devices, Version 1.1 January 19, 1999

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 15 of 564
1.3 Document Conventions

1.3 Document Conventions

Throughout this document PLS63-W is also referred to as GSM/UMTS/LTE Engine or short UE, ME (Mobile
Engine), MS (Mobile Station) or Mobile Terminal (MT). In related documents the equivalent term DCE (Data
Communication Equipment) may be found.
AT Commands are used to control the PLS63-W. The controlling device is referred to as Customer Application
or short TE. Related documents may use the equivalent term DTE (Data Terminal Equipment).
All abbreviations and acronyms used throughout this document are based on GSM or 3GPP specifications. For
additional definitions please refer to 3GPP TR 21.905 [12].

1.3.1 Quick Reference Table

Each AT command description includes a table similar to the example shown below. The table is intended as a
quick reference to indicate the following functions:

PIN: Is the AT command PIN protected?

+ Yes
- No
± Usage is dependent on conditions specified for the command, or not all command
types are PIN protected (for example write command PIN protected, read command
not).
Note: The table provided in Section 22.2, Available AT Commands and Dependency
on SIM PIN uses the same symbols.
 Is the AT command supported in AIRPLANE mode?
+ Yes
- No
± In AIRPLANE mode, not all described functions are available. For example, the test
or read command is usable, the write or execute command is not. Furthermore, only
some of the listed parameters can be changed in AIRPLANE mode. A typical example
is AT^SCFG that controls different features.
Last: If commands are concatenated, this AT command must be the last one.
+ Yes
- No
Note: See also Section 1.5, AT Command Syntax for details on concatenated AT com-
mands.

Example:
PIN  Last
- - -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 16 of 564
1.3 Document Conventions

1.3.2 Superscript Notation for Parameters And Values

Table 1.1: Symbols used to mark the type of parameters

Parameter type Meaning

(num)
<param> Parameter value must be numeric type
(str)
<param> Parameter value must be string type enclosed in quotation marks.
(text)
<param> Parameter value is a string according to selected character set. Not enclosed in
double quotes.
<param>(u) Unspecified, i.e. parameter value may be numeric or string type.

Table 1.2: Symbols used to indicate storage options or correlations with other commands

Parameter option Meaning

(+CSCS)
<param> Parameter value has to be (is) coded according to current setting of <charSet>
(see AT+CSCS for details)
<param>(&W) Parameter value is stored to user profile in non-volatile memory after executing
AT&W
<param>(&V) Parameter value is displayed by AT&V
(NV)
<param> Parameter is stored in non-volatile memory.

Table 1.3: Symbols used to mark different types of default values of parameters

Value option Meaning

[x] Default value set if parameter is omitted.
(&F)
x Factory value restored by AT&F
(P)
x Powerup value of a parameter not stored in non-volatile memory.
(D)
x Delivery value of a parameter which may be overridden from non-volatile setting
(refer to symbol (NV) and symbol (&W) above).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 17 of 564
1.4 AT Command Interpreter

1.4 AT Command Interpreter

PLS63-W features 5 AT command ports mapped to

- the USB Modem (AT command port 1),
- the USB serial ports 1 - 3 (AT command ports 2 - 4)
- the serial interface ASC0 (AT command port 5).
If Multiplex mode is started on any AT command port 1 - 5 the number of AT command ports is 1 - 8.
For more details see AT^SQPORT and AT+CMUX and AT^SGPSC "Nmea/Interface".

All AT command ports are independent and do not share configuration settings if not stated otherwise.
The AT command scanner has a 30s timeout. If after AT command input started the scanner does not receive
the next character within 30s current AT command input is terminated with "ERROR". This will free the AT com-
mand port, and URCs will not be blocked any longer. Any received character will restart the 30s timeout. The
timer is stopped when AT command input is finished (command line termination character detected). So to avoid
the timeout error just send at least 1 character every 29s until you send the finishing command oline termination
character.

If the AT parser detects an unknown AT command it will return "+CME ERROR: unknown".

Please note, that not all of the AT commands, which are described as mandatory in ITU-T V.250 [18], are imple-
mented but only the ones described in this specification.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 18 of 564
1.5 AT Command Syntax

1.5 AT Command Syntax

The "AT" or "at" prefix must be set at the beginning of each command line. To terminate a command line enter
<CR>. Commands are usually followed by a response that includes "<CR><LF><response><CR><LF>".
Throughout this document, only the responses are presented, <CR><LF> are omitted intentionally.

Table 1.4: Types of AT commands and responses

AT command type Syntax Function

Test command AT+CXXX=? The test response returns supported parameters and supported
values. Values can be shown as a list of single values or a range,
for example, (1,2,3) or (1-3).
Read command AT+CXXX? This command returns the currently set value of the parameter or
parameters.
Write command AT+CXXX=<...> This command sets user-definable parameter values.
Exec(ution) command AT+CXXX The execution command reads non-variable parameters deter-
mined by internal processes in the UE.

1.5.1 Using Parameters

• Parameters are separated by commas.
Please note that throughout this document spaces behind commas may be added for better readability.
• Optional parameters are enclosed in square brackets. If optional parameters are omitted and no default value
is explicitly specified, then the current settings are used until you change them.
• Optional parameters or subparameters can be omitted unless they are followed by other parameters. If you
want to omit a parameter in the middle of a command string it must be replaced by a comma. See also exam-
ple 1.
• A parameter value enclosed in square brackets represents the value that will be used if an optional parameter
is omitted.
• When the parameter is a character string, e.g. <text> or <number>, the string must be enclosed in quotation
marks, e.g. "Charlie Brown" or "+49030xxxx". Symbols in quotation marks will be recognized as strings.
• All spaces will be ignored when using strings without quotation marks.
• It is possible to omit the leading zeros of strings which represent numbers.
• If an optional parameter of a ITU-T V.250 command is omitted, its value is assumed to be 0.
• Hexadecimal numeric parameters consist of a sequence of one or more of the characters "0" through "9",
inclusive, and "A" through "F" inclusive. The characters "A" through "F" represent the equivalent decimal val-
ues 10 through 15. A leading "0x" is not allowed.

Example 1: Omitting parameters in the middle of a string

AT+CCUG? Query current setting

+CCUG: 1,10,1
OK
AT+CCUG=,9 Set only the middle parameter
OK
AT+CCUG? Query new setting
+CCUG: 1,9,1
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 19 of 564
1.5 AT Command Syntax

1.5.2 Concatenating AT Commands

Concatenating AT commands on the same line is possible, though not recommended because of restrictions
listed below (for more details see ITU-T V.250 [18]).
When concatenating AT commands you need to enter the "AT" or "at" prefix only once at the beginning of a com-
mand line. Basic commands (i.e., ITU-T V.250 commands) are concatenated without delimiter. Extended com-
mands (i.e., commands starting with AT+ or AT^) use a semicolon as delimiter.

Disadvantages and restrictions:

• There is no way to control the minimum time to wait between finishing an AT command and sending the next
one. Please refer to Section 1.6, Communication between Customer Application and PLS63-W
for details about timing.
• The sequence of processing the AT commands may be different from the sequential order of command input.
• Many AT commands cannot be concatenated (see list below). Concatenating these commands might end up
with an error result code, or leads to an unexpected order of responses.

AT command type Comment

3GPP TS 27.007 commands Cannot be concatenated with extended commands
(prefix AT^S)
3GPP TS 27.005 commands (SMS) To be used standalone
Commands starting with AT& To be used standalone
AT+IPR To be used standalone

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 20 of 564
1.6 Communication between Customer Application and PLS63-W

1.6 Communication between Customer Application and PLS63-W

After power-up or restart ensure that the UE is in ready state before trying to send any AT command or data. For
detailed information on timing conditions, signal states and particularly the startup behavior of the PLS63-W's
signal lines refer to the Hardware Interface Description [2].

Leaving hardware flow control unconsidered the Customer Application (TE) is coupled with the PLS63-W (UE)
via a receive and a transmit line.
Since both lines are driven by independent devices collisions may (and will) happen. For example, if the TE
issues an AT command and the PLS63-W starts sending a URC. This will probably cause the TE to misinterpret
the URC being part of the AT command's response. To avoid this conflict the following measures must be taken:
• If an AT command is finished (with "OK" or "ERROR") the TE shall always wait at least 100 ms before sending
the next one.
The pause between two AT commands gives the PLS63-W the opportunity to the transmission of pending
URCs and get necessary service.
• The TE shall communicate with the PLS63-W using activated echo (ATE1), i.e. the PLS63-W echoes charac-
ters received from the TE.
Hence, when the TE receives the echo of the first character "A" of the AT command just sent by itself it has
control both over the receive and the transmit paths.

Using Backspace at command line:

• As the standard GSM alphabet does not provide a backspace functionality the PLS63-W is designed to use
the character "08" (hex 0x08) as backspace for command line input. This allows the user to easily erase the
last character when writing an AT command. On the other hand, this solution requires entering the escape
sequence \08 for writing the "ò" character in GSM character string parameters.
• If command echo is enabled (ATE1) Backspace may cause 08 - 32 - 08 (decimal) character sequence or no
echo, depending on serial interface and speed of character input.

Software flow control:

• Regardless of the selected alphabet, keep in mind that, when using software flow control (AT\Q1), character
values 17 and 19 (decimal) are interpreted as XON/XOFF control characters.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 21 of 564
1.7 Supported character sets

1.7 Supported character sets

PLS63-W supports two character sets: GSM 7 bit, also referred to as GSM alphabet or SMS alphabet (3GPP TS
23.038 [38]) and UCS216 bit (ISO-10646 [15]). See AT+CSCS for information about selecting the character set.
Character tables can be found below.

Explanation of terms
• Escape Character
There are two types of escape sequences which lead to an alternative interpretation on subsequent charac-
ters by the UE:
- AT command interface
Escape sequences starting with character value 0x5C are used for the UE's non-UCS2 input and output.
- GSM 7 bit default alphabet
The escape sequence used within a text coded in the GSM 7 bit default alphabet is starting with character
value 0x1B and needs to be correctly interpreted by the TE, both for character input and output. To the
PLS63-W, an escape sequence appears like any other byte received or sent.
For SMS user data input after the prompt '>' in text mode (AT+CMGF)=1 and AT+CSCS="GSM" the character
0x1A is interpreted as 'CTRL-Z'. The character 0x1B (interpreted as 'ESC') as well as the escape character
0x5C (is interpreted as 'Ö'), therefore both escape mechanisms are not supported in this case.
• TE Character Set
The character set currently used by the Customer Application is selected with AT+CSCS. It is recommended
to select UCS2 setting.
• Data Coding Scheme (DCS)
DCS is part of a short message and is saved on the SIM. When writing a short message to the SIM in text
mode, the DCS stored with AT+CSMP is used and determines the coded character set.
• International Reference Alphabet (IRA)
The International Reference Alphabet is equivalent to ASCII (American Standard Code for Information Inter-
change) and ISO 646, i.e. it defines a 7-bit coded character set. The mapping can be obtained from the char-
acter set tables below (UCS2 values 0x0000 to 0x007F).

When you enter characters that are not valid characters of the supported alphabets the behavior is undefined.
If GSM alphabet is selected, all characters sent over the serial line (between TE and UE) must be in the range
from 0 to 127 (7 bit range).
Note: If the UE is configured for GSM alphabet, but the Customer Application (TE) uses ASCII, bear in mind that
some characters have different code values, such as the following:
• "@" character with GSM alphabet value 0 is not displayable by an ASCII terminal program, e.g. Microsoft©
Hyperterminal®.
• "@" character with GSM alphabet value 0 will terminate any C string! This is because value 0 is defined as C
string end tag. Therefore, the GSM Null character will cause problems on application level when using 'C'-
functions, e.g. "strlen()". Using an escape sequence as shown in the table below solves the problem. By the
way, this may be the reason why even network providers sometimes replace '@' with "@=*" in their SIM appli-
cation.
• Some other characters of the GSM alphabet may be misinterpreted by an ASCII terminal program. For exam-
ple, GSM "ö" (as in "Börse") is assumed to be "|" in ASCII, thus resulting in "B|rse". This is because in both
alphabets there are different characters assigned to value 7C (hexadecimal).
If the TE sends characters differently coded or undefined in ASCII or GSM (e.g. Ä, Ö, Ü) it is possible to use
escape sequences. The UE's input parser translates the escape sequence to the corresponding GSM character
value.

Note:
The UE also uses escape sequences for its non-UCS2 output: Quotation mark (") and the escape character itself
(\, respectively Ö in GSM alphabet) are converted, as well as all characters with a value below 32 (hexadecimal
0x20).
Hence, the input parser of the Customer Application needs to be able to translate escape sequences back to the
corresponding character of the currently used alphabet.
Unsupported characters are shown as a space (hexadecimal 0x20).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 22 of 564
1.7 Supported character sets

Table 1.5: Exemplary escape sequences generated by PLS63-W for its non-UCS2 output

Character ASCII GSM UCS2 Escape Numeric Escape

Value Character Character Character Sequence Sequence
0x5C \ Ö 00D6 \5C 0x5C 0x35 0x43
0x22 " " 0022 \22 0x5C 0x32 0x32
0x00 NULL @ n/a \00 0x5C 0x30 0x30

Usually terminal programs are not able to recognize escape sequences, and thus, handle them as normal char-
acters.
To prevent misinterpretation of control characters or special characters it is recommended to always use UCS2
alphabet and PDU mode.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 23 of 564
1.7 Supported character sets

1.7.1 GSM alphabet tables and UCS2 character values

This section provides tables for the GSM default alphabet (3GPP TS 23.038 [38]) supported by the PLS63-W.
Below any GSM character find the corresponding two byte character value of the UCS2 alphabet. For details
refer to "ETSI GSM 03.38 mapping into Unicode" [16].

Figure 1.1: Main character table of GSM 7 bit default alphabet

1) This code is an escape to the following extension of the 7 bit default alphabet table.
2) This code is not a printable character and therefore not defined for the UCS2 alphabet. It shall be treated as the accom-
panying control character.
3) See Section 1.6 for further details on using backspace and "ò" character.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 24 of 564
1.7 Supported character sets

Figure 1.2: Extension character table of GSM 7 bit default alphabet

1) This code value is reserved for the extension to another extension table. On receipt of this code, a receiving entity shall
display a space until another extension table is defined.
2) This code represents the EURO currency symbol. The code value is the one used for the character 'e'. Therefore a receiv-
ing entity which is incapable of displaying the EURO currency symbol will display the character 'e' instead.
3) This code is defined as a Page Break character and may be used for example in compressed CBS messages. Any mobile
which does not understand the 7 bit default alphabet table extension mechanism will treat this character as Line Feed.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 25 of 564
1.7 Supported character sets

If the Customer Application receives a code where a symbol is not represented in Figure 1.2, Extension character
table of GSM 7 bit default alphabet it shall display the character shown in the main GSM 7 bit default alphabet
table (see Figure 1.1, Main character table of GSM 7 bit default alphabet).

1.7.2 UCS2 and GSM character coding and conversion

This section provides basic information on how to handle input and output character conversion, e.g. for SMS
text mode, if the character representation of UE and Customer Application differ, i.e. if the Data Coding Scheme
and the TE character set use different mappings.

1.7.2.1 Output of SIM data (UE to TE)

Used character set DCS = 7 bit DCS = 8 bit DCS = 16 bit

GSM Data UCS2
GSM Case 1 Case 2 Case 3
GSM (1:1) 8 bit to IRA (1:2) UCS2 to IRA (2:4)
UCS2 Case 4 Case 5 Case 6
GSM to IRA (1:4) 8 bit to IRA (1:4) UCS2 to IRA (2:4)
Note: The ratio of SIM bytes to output bytes is given in parentheses.

Case 1
Every GSM character is sent to the TE as it is (8-bit value with highest bit set to zero).
Example: 47'H, 53'H, 4D'H → 47'H, 53'H, 4D'H, displayed as "GSM"

Case 2
Every data byte is sent to the TE as 2 IRA characters each representing a halfbyte.
Example: B8'H (184 decimal) → 42'H, 38'H, displayed as "B8"

Case 3
Every 16-bit UCS2 value is sent to the TE as 4 IRA characters.
Example: C4xA7'H (50343 decimal) → 43'H, 34'H, 41'H, 37'H, displayed as "C4A7"
Problem: An odd number of bytes leads to an error because there are always two bytes needed for each UCS2
character

Case 4
Every GSM character is sent to the TE as 4 IRA characters to show UCS2 in text mode.
Example: 41'H ("A") → 30'H, 30'H, 34'H, 31'H, displayed as "0041"

Case 5
Every data byte is sent to the TE as IRA representation of UCS2 (similar to case 4).
Example: B2'H → 30'H, 30'H, 42'H, 32'H, displayed as "00B2"

Case 6
Every 16-bit value is sent to the TE as IRA representation of it. It is assumed that number of bytes is even.
Example: C3x46'H → 43'H, 33'H, 34'H, 36'H, displayed as "C346"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 26 of 564
1.7 Supported character sets

1.7.2.2 Input of SIM data (TE to UE)

Used character set DCS = 7 bit DCS = 8 bit DCS = 16 bit

GSM Data UCS2
GSM Case 1 Case 2 Case 3
GSM (1:1) IRA to 8 bit (2:1) IRA to 16 bit (4:2)
UCS2 Case 4 Case 5 Case 6
UCS2 to GSM (4:1) UCS2 to 8 bit (4:1) UCS2 to 16 bit (4:2)
Note: The ratio between the number of input characters and bytes stored on the SIM is given in parentheses.

Case 1
Every character is sent from TE to UE as GSM character (or ASCII with standard terminal emulation, e.g. Hyper-
terminal®).
Character value must be in range from 0 to 127 because of 7-bit GSM alphabet.
To reach maximum SMS text length of 160 characters in 140 bytes space characters will be compressed on SIM.
This must be set using the parameter <dcs> of AT+CSMP (add 64).
Example: "ABCDEFGH" typed is sent and stored uncompressed as → 4142434445464748'H (stored com-
pressed as 41E19058341E91'H)

Case 2
Every data byte is sent as 2 IRA characters.
Maximum text length is 280 IRA characters which will be converted into 140 bytes SMS binary user data
Example: "C8" typed is sent as 43'H, 38'H → stored as C8'H

Case 3
Every 16-bit value is sent as 4 IRA characters.
Maximum text length is 280 IRA characters which will be converted into 70 UCS2 characters (16-bit each)
Number of IRA characters must be a multiple of four because always 4 half bytes are needed for a 16-bit value
Example: "D2C8" typed is sent as 44'H, 32'H, 43'H, 38'H → stored as D2C8'H

Case 4
Every GSM character is sent as 4 IRA characters representing one UCS2 character.
Example: To store text "ABC" using UCS2 character set you have to type "004100420043".
This is sent as 30'H,30'H,34'H,31'H, 30'H,30'H,34'H,32'H, 30'H,30'H,34'H,33'H → detected as IRA representa-
tion of 3 UCS2 characters, converted to GSM character set and stored as 41'H, 42'H, 43'H.
Maximum input is 640 IRA characters representing 160 UCS2 characters when compression is active. These
are converted to 160 GSM 7-bit characters.
Without compression only 140 GSM characters can be stored which are put in as 560 IRA characters.
Values of UCS2 characters must be smaller than 80'H (128 decimal) to be valid GSM characters.
Number of IRA characters must be a multiple of four. Problems:
• "41" → Error, there are four IRA characters (two bytes) needed
• "0000" → Error, not an UCS2 character
• "4142" → Error, value of UCS2 character > 7F'H
• "008B" → Error, value of UCS2 character > 7F'H
This affects the maximum input length of a string)

Case 5
Every UCS2 character is sent as 4 IRA characters and is converted into two 8-bit values. This means that the
first two characters have to be '00'.
Example: UCS2 character 009F'H typed as "009F" is sent as 30'H,30'H,39'H,46'H → converted into 8-bit value
9F'H.
Maximum number of UCS2 characters is 140 which are represented by 560 IRA characters. Number of IRA char-
acters must be a multiple of four.

Case 6
Every UCS2 character is sent as 4 IRA characters each and is converted into a 16-bit value again.
Example: UCS2 character 9F3A'H typed as "9F3A" is sent as 39'H,46'H,33'H,41'H → converted into 9F3A'H.
Maximum number of UCS2 characters is 70 which are represented by 280 IRA characters. Number of IRA char-
acters must be a multiple of four.
Invalid UCS2 values must be prevented.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 27 of 564
1.8 Unsolicited Result Code Presentation

1.8 Unsolicited Result Code Presentation

URC stands for Unsolicited Result Code and is a report message issued by the PLS63-W without being
requested by the TE, i.e. a URC is issued automatically when a certain event occurs. Hence, a URC is not issued
as part of the response related to an executed AT command.

Typical events leading to URCs are incoming calls ("RING"), waiting calls, received short messages, changes in
temperature, network registration etc. For most of these messages, the UE needs to be configured whether or
not to send a URC. Such URCs will be sent only on the AT channels for which they were enabled. Descriptions
of these URCs are provided with the associated AT command.
Some URCs are not user definable and will be sent on all AT channels. These URCs are described in Section
1.8.1, Common URCs.
A summary of all URCs can be found in Section 22.6, Summary of Unsolicited Result Codes (URC).

1.8.1 Common URCs

This section lists URCs that cannot be disabled by the user and appear automatically when the required condi-
tions described below occur.
• "RING"
• "NOCARRIER"
• "BUSY"
• "^SYSSTART"
• "^SYSSTART AIRPLANE MODE"
• Voltage Monitoring:
Please refer to [2] for specifications regarding the minimum and maximum operating voltage limits. The auto-
matic shutdown procedure is usually equivalent to the Power-down initiated with the AT^SMSO command,
except when the voltage threshold is exceeded very quickly.
- "^SBC: Undervoltage Warning"
- "^SBC: Undervoltage Shutdown"
- "^SBC: Overvoltage Warning"
- "^SBC: Overvoltage Shutdown"
• "^SHUTDOWN"

URC 1
NO CARRIER
Indicates incoming call to the TE.

URC 2
NO CARRIER
Indicates end of call to the TE if call was released from remote party and call dialing command was already
finished by any final command response.

URC 3
BUSY
Indicates end of call to the TE if call was released from remote party, release cause user busy is received,
indication is configured accordingly by ATX=4 and call dialing command was already finished by any final
command response.

URC 4
^SBC: Undervoltage Warning
Supply voltage is close to the defined undervoltage threshold.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 28 of 564
1.8 Unsolicited Result Code Presentation

URC 5
^SBC: Undervoltage Shutdown
Undervoltage threshold exceeded. Module switches off within 5 seconds after sending the URC.

URC 6
^SBC: Overvoltage Warning
Supply voltage is close to overvoltage threshold. The URC is sent once.

URC 7
^SBC: Overvoltage Shutdown
Overvoltage threshold exceeded. Module switches off within 5 seconds after sending the URC.

URC 8
^SHUTDOWN
Indicates that the power-off procedure is finished and the module will be switched off in less than 1 second.
In case of Fast Shutdown the "^SHUTDOWN" URC will not be issued.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 29 of 564
1.9 Errors and Messages

1.9 Errors and Messages

The command result codes "+CME ERROR: <err>" and "+CMS ERROR: <err>" indicate errors related to mobile
equipment or network functionality.

The format of <err> can be either numeric or verbose and is selectable via AT+CMEE.

A result error code terminates the execution of the command and prevents the execution of all remaining com-
mands that may follow on the same command line.

Using the wrong command syntax may result in errors: For example, using the execute command syntax
although the command has no execute format, causes "ERROR" to be returned. Likewise, using the write com-
mand syntax although the command has no write format causes "+CME ERROR: <err>" to be returned.

See also:
• Section 2.10.1, CME/CMS Error Code Overview
• Section 2.5.1, Verbose and numeric result codes
• Section 3.1, AT+CEER

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 30 of 564
2. Configuration Commands

2. Configuration Commands

The AT Commands described in this chapter allow the external application to determine the PLS63-W's behav-
iour under various conditions.

2.1 AT&F Reset AT Command Settings to Factory Default Values

AT&F resets AT command settings to their factory default values. AT&W shall be used to retain these values effec-
tive for next power-up.
However, the command does not change the current bit rate of PLS63-W's asynchronous serial interface
(UART).
For a list of affected parameters refer to Section 22.5, Factory Default Settings Restorable with
AT&F.

Syntax
Exec Command

AT&F[<value>]
Response(s)
OK
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Parameter Description

<value>(num)
[0] Reset parameters in Section 22.5, Factory Default Settings Restor-
able with AT&F to their factory default values.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 31 of 564
2.2 AT&V

2.2 AT&V Display current Configuration

AT&V returns the setting of several AT command parameters applicable to the current operating mode, including
the single-letter AT command parameters which are not readable otherwise.
The response of AT&V varies depending on whether or not PIN authentication has been done.

Syntax
Exec Command

AT&V
Response(s)
ACTIVE PROFILE:
... (see Section 2.2.1, AT&V Response)
OK
PIN  Last
- + -

2.2.1 AT&V Response

Table 2.1: AT&V Response

PIN authentication done No PIN authentication

ACTIVE PROFILE: ACTIVE PROFILE:
E1 Q0 V1 X0 &C1 &D2 &S0 \Q3 E1 Q0 V1 &C1 &D2 &S0 \Q3
S0:000 S3:013 S4:010 S5:008 S0:000 S3:013 S4:010 S5:008
+CRC: 0 +IPR: 115200
+CMGF: 0 +ICF: 3
+CSDH: 0 +CMEE: 2
+CNMI: 0,0,0,0,1 ^SLCC: 0
+IPR: 115200 ^SCKS: 0,1
+ICF: 3 ^SSET: 0
+CMEE: 2 +CREG: 0,1
+CSMS: 0,1,1,1 +COPS: 0[,<format>,<opName>,<rat>]
^SLCC: 0 ^SLED: 0
^SCKS: 0,1 OK
^SSET: 0
+CREG: 0,1
+CLIP: 0
+CAOC: 0
+CGSMS: 3
+COPS: 0[,<format>,<opName>,<rat>]
^SLED: 0
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 32 of 564
2.3 AT&W

2.3 AT&W Store AT Command Settings to User Defined Profile

AT&W stores the current AT command settings to a user defined profile in non-volatile memory of PLS63-W. The
AT command settings will automatically be restored from the user defined profile during power-up or if ATZ is
used. AT&F restores AT command factory default settings. Hence, until first use of AT&W, ATZ works as AT&F.
A list of parameters stored to the user profile can be found at Section 22.4, AT Command Settings storable
with AT&W.

Syntax
Exec Command
AT&W[<value>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - V.250

Parameter Description

<value>(num)
[0] User Profile Number

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 33 of 564
2.4 ATQ

2.4 ATQ Result Code Presentation Mode

ATQ controls if the PLS63-W transmits any result code to the TE. Other information text transmitted as response
is not affected.

Syntax
Exec Command
ATQ[<n>]
Response(s)
If <n>=0:
OK
If <n>=1:
(none)
PIN  Last Reference(s)

- + - V.250

Parameter Description

<n>(num)(&V)(&W)
Result Code Presentation Mode.
It is not recommended to change this value.
[0](&F)(D) UE transmits result code.
1 Result codes are suppressed and not transmitted.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 34 of 564
2.5 ATV

2.5 ATV Result code format mode

This command determines the contents of header and trailer transmitted with AT command result codes and
information responses. Possible responses are described in Section 2.5.1, Verbose and numeric result codes.
Please note, that ATV does not affect numeric or verbose +CME ERROR responses. This means that if
AT+CMEE parameter <errMode> is set to 1 or 2 and a command returns a CME or CMS error, than it is always
printed verbose. A numeric result code is printed only if ATV0 and AT+CMEE=0 is set.

Syntax
Exec Command
ATV[<value>]
Response(s)
OK
ERROR
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Parameter Description

<value>(num)(&V)(&W)
[0] Information response: <text><CR><LF>
Short result code format: <numeric code><CR>
1(&F)(D) Information response: <CR><LF><text><CR><LF>
Long result code format: <CR><LF><verbose code><CR><LF>

2.5.1 Verbose and numeric result codes

Verbose format Numeric format Meaning

OK 0 command executed, no errors
CONNECT 1 link established
RING 2 ring detected
NO CARRIER 3 link not established or disconnected
ERROR 4 invalid command or command line too long
NO DIALTONE 6 no dial tone, dialling impossible, wrong mode
BUSY 7 remote station busy
NO ANSWER 8 no answer

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 35 of 564
2.6 ATX

2.6 ATX Result Code Selection

ATX determines whether or not the PLS63-W transmits particular result codes to the TE.
ATX also controls whether or not the UE verifies the presence of a dial tone when it begins dialing, and if engaged
tone (busy signal) detection is enabled.

Syntax
Exec Command

ATX[<value>]
Response(s)
OK
ERROR
PIN  Last Reference(s)

+ + - ITU-T V.250 [18]

Parameter Description

<value>(num)(&V)(&W)
[0](&F)(D) CONNECT result code returned. Dial tone and busy detection are disabled.
1 CONNECT result code returned. Dial tone and busy detection are disabled.
2 CONNECT result code returned. Dial tone detection is enabled, busy detection
is disabled.
3 CONNECT result code returned. Dial tone detection is disabled, busy detection
is enabled.
4 CONNECT result code returned. Dial tone and busy detection are both
enabled.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 36 of 564
2.7 ATZ

2.7 ATZ Restore AT Command Settings from User Defined Profile

First ATZ resets the AT command settings to their factory default values, similar to AT&F. Afterwards the AT com-
mand settings are restored from a user defined profile in non-volatile memory of PLS63-W, if one was stored with
AT&W before. Any additional AT command on the same command line may be ignored. A delay of 300 ms is
required before next AT command is sent.
However, ATZ does not change the current bit rate of PLS63-W's asynchronous serial interface (UART).
ATZ does not change the PDP context profiles.

Syntax
Exec Command

ATZ[<value>]
Response(s)
OK
PIN  Last Reference(s)

+ + - V.250

Parameter Description

<value>(num)
[0] User Profile Number

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 37 of 564
2.8 AT+CFUN

2.8 AT+CFUN PLS63-W Functionality Level

AT+CFUN controls PLS63-W functionality levels "Normal Functionality Mode" and "Airplane Mode".
AT+CFUN can also be used to reset the UE.

In pure Airplane Mode (AT+CFUN parameter <fun>=4) the UE shuts down its radio interface (PA and receiver),
what causes the UE to log off from network and disables AT commands whose execution requires a radio con-
nection. In extended Airplane Mode (<fun>=0) the UE shuts down its radio and USIM interfaces.
The benefit of using Airplane Modes is that they allow to save power and, at locations where no RF emission is
allowed (typically airplanes, hospitals etc.), the subscriber can continue network-independent activities rather
than powering off the UE.

Syntax
Test Command

AT+CFUN=?
Response(s)
+CFUN: (list of supported <fun>s), (list of supported <rst>s)
OK
ERROR
+CME ERROR: <err>
Read Command

AT+CFUN?
Response(s)
+CFUN: <fun>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CFUN=<fun>[, <rst>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Unsolicited Result Codes

URC 1
^SYSSTART
URC indicates that the UE is running in Normal Functionality level.

URC 2
^SYSSTART AIRPLANE MODE
URC indicates that the UE is running in Airplane Mode.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 38 of 564
2.8 AT+CFUN

Parameter Description

<fun>(num)
This parameter determines the functionality level of the UE.
It is possible to enable the UE to store the setting of this parameter persistently via AT^SCFG="MEopMode/
CFUN", <volaCFUN>.
0 Switch UE into Minimum Functionality level.
UE's RF (TX and RX) and USIM interfaces are shut down. Consequently, the
UE logs off from network and enters extended Airplane Mode, which is indi-
cated via "^SYSSTART AIRPLANE MODE" URC. Accordingly, AT commands
whose execution requires a radio connection or USIM access either return an
error result code or reflect the limited operating state.
Direct switches between pure and extended Airplane Modes (and vice versa)
are not supported.
To return to Normal Functionality level use AT+CFUN=1 or AT+CFUN=1,1. After
this, PIN authentication may be necessary if required by the USIM.
1(P) Switch UE into Normal Functionality level, which is indicated via "^SYSSTART"
URC.
4 Switch UE into pure Airplane Mode.
UE's RF-interface (TX and RX) is shut down whereby it logs off from the net-
work and enters Airplane mode, which is indicated via "^SYSSTART AIR-
PLANE MODE" URC. USIM remains accessible. Accordingly, AT commands
whose execution requires a radio connection will return an error result code or
reflect the limited operating state.
Direct switches between pure and extended Airplane Modes (and vice versa)
are not supported.
To return to Normal Functionality level use AT+CFUN=1 or AT+CFUN=1,1. The
UE may reregister to the network, e.g. if network service is available.

<rst>(num)
[0] UE switches to <fun> level without reset.
1 Reset and restart the UE.
Restart is only possible with <fun>=1; however, the current functionality level
will be retained.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 39 of 564
2.9 AT^SMSO

2.9 AT^SMSO Switch Off PLS63-W

AT^SMSO initiates PLS63-W's power-off procedure.

If <fso>="fast", the Fast-Shutdown procedure will be started:

• Finalize current flash erase/program cycles
• No further schedule in system will be arranged
• Power off the module
If parameter <fso> is omitted then the module will execute the "normal" shutdown procedure.

When Fast Shutdown is performed, there are no responses such as ^SMSO: OFF, OK, or ERROR URC. Do not
send any other AT command after this.
For further detail please refer to [2].

Syntax
Test Command
AT^SMSO=?
Response(s)
^SMSO:(list of supported<fso>s)
OK
Exec Command

AT^SMSO
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SMSO=[<fso>]
Response(s)

PIN  Last
- + +

Parameter Description

<fso>(str)
Fast Shutdown
“fast“ perform Fast-Shutdown procedure

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 40 of 564
2.10 AT+CMEE

2.10 AT+CMEE Error Message Format

AT+CMEE controls the format of error result codes that indicates errors related to PLS63-W functionality. Format
can be selected between plain "ERROR" output, error numbers or verbose "+CME ERROR: <err>" and "+CMS
ERROR: <err>" messages.
Possible error result codes are listed in Table 2.2, General "CME ERROR" Codes (3GPP TS 27.007), Table 2.3,
GPRS related "CME ERROR" Codes (3GPP TS 27.007) and Table 2.5, SMS related "CMS ERROR" Codes
(3GPP TS 27.005).
The AT+CMEE exec command performs a write command with factory default parameter setting.

Syntax
Test Command

AT+CMEE=?
Response(s)
+CMEE: (list of supported<errMode>s)
OK
Read Command

AT+CMEE?
Response(s)
+CMEE: <errMode>
OK
Exec Command
AT+CMEE
Response(s)
OK
ERROR
+CME ERROR:<err>
Write Command
AT+CMEE=<errMode>
Response(s)
OK
ERROR
+CME ERROR:<err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51], 3GPP TS

27.005 [50]

Parameter Description

<errMode>(num)(&V)(&W)
0 Disable result code, i.e. only "ERROR" will be displayed.
1 Enable error result code with numeric values.
(&F)(D)
2 Enable error result code with verbose (string) values.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 41 of 564
2.10 AT+CMEE

2.10.1 CME/CMS Error Code Overview

Table 2.2: General "CME ERROR" Codes (3GPP TS 27.007)

<err> Code Text (if AT+CMEE=2)

0 phone failure
1 no connection to phone
2 phone adapter link reserved
3 operation not allowed
4 operation not supported
5 PH-SIM PIN required
6 PH-FSIM PIN required
7 PH-FSIM PUK required
10 SIM not inserted
11 SIM PIN required
12 SIM PUK required
13 SIM failure
14 SIM busy
15 SIM wrong
16 incorrect password
17 SIM PIN2 required
18 SIM PUK2 required
20 memory full
21 invalid index
22 not found
23 memory failure
24 text string too long
25 invalid characters in text string
26 dial string too long
27 invalid characters in dial string
30 no network service
31 network timeout
32 network not allowed - emergency calls only
40 network personalization PIN required
41 network personalization PUK required
42 network subset personalization PIN required
43 network subset personalization PUK required
44 service provider personalization PIN required
45 service provider personalization PUK required
46 corporate personalization PIN required
47 corporate personalization PUK required

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 42 of 564
2.10 AT+CMEE

<err> Code Text (if AT+CMEE=2)

50 Incorrect parameters
100 unknown

Table 2.3: GPRS related "CME ERROR" Codes (3GPP TS 27.007)

<err> Code Text (if AT+CMEE=2)

103 illegal MS
106 illegal ME
107 GPRS services not allowed
111 PLMN not allowed
112 location area not allowed
113 roaming not allowed in this location area
127 missing or unknown APN
132 service option not supported
133 requested service option not subscribed
134 service option temporary out of order
148 unspecified GPRS error
149 PDP authentication failure
150 invalid mobile class
273 minimum TFTs per PDP address violated
274 TFT precedence index not unique
275 invalid parameter combination

Table 2.4: Enhanced "CME ERROR" Codes

<err> Code Text (if AT+CMEE=2)

256 operation temporary not allowed
257 network rejected request
258 retry operation
259 invalid deflected to number
260 deflected to own number
261 unknown subscriber
262 service not available
263 unknown class specified
264 unknown network message
300 resource limitation
301 subscription violation
302 TeleService not provisioned
303 error BearerService not provisioned
304 system failure
305 data missing
306 unknown alphabet
307 unexpected data value
308 unrecognized component

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 43 of 564
2.10 AT+CMEE

<err> Code Text (if AT+CMEE=2)

309 mistyped component
310 badly structured component
311 mistyped parameter
312 initiating release
320 call barred
330 SMSC address unknown
331 network search aborted
332 could not camp on chosen cell
333 reselection to chosen cell failed
340 call index error
341 call state error
342 sys state error
343 parameters error
344 expired password
350 cancelled due to active call state
351 cancelled due to location update processing
352 cancelled due to packet transfer mode
353 cancelled due to radio resource connection establishment
354 cancelled due to ongoing SMS transfer
355 cancelled due to ongoing SS transaction
767 operation failed

Table 2.5: SMS related "CMS ERROR" Codes (3GPP TS 27.005)

<err> Code Text (if AT+CMEE=2)

0 none
300 ME failure
301 SMS service of ME reserved
302 operation not allowed
303 operation not supported
304 invalid PDU mode parameter
305 invalid text mode parameter
310 SIM not inserted
311 SIM PIN required
312 PH-SIM PIN required
313 SIM failure
314 SIM busy
315 SIM wrong
316 SIM PUK required
317 SIM PIN2 required
318 SIM PUK2 required
320 memory failure
321 invalid memory index

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 44 of 564
2.10 AT+CMEE

<err> Code Text (if AT+CMEE=2)

322 memory full
330 SMSC address unknown
331 no network service
332 network timeout
340 no +CNMA acknowledgement expected
500 unknown error
512 user abort
538 invalid parameter

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 45 of 564
2.11 AT+CSCS

2.11 AT+CSCS Character Set

AT+CSCS write command informs the PLS63-W which character set is used by the TE. This enables the UE to
convert character strings correctly between TE and UE character sets. Please also refer to Section 1.7, Sup-
ported character sets.
Note: If UE-TE interface is set to 8-bit operation (AT+ICF) and selected character set is <charSet>="GSM" (7-
bit ), the highest bit will be set to zero.

Syntax
Test Command
AT+CSCS=?
Response(s)
+CSCS: (list of supported<charSet>s)
OK
Read Command
AT+CSCS?
Response(s)
+CSCS: <charSet>
OK
Write Command
AT+CSCS=<charSet>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<charSet>(str)
“GSM“(&F)(P) GSM default alphabet (3GPP TS 23.038 [38], subclause 6.2.1).
“UCS2“ 16-bit universal multiple-octet coded character set (ISO/IEC10646 [32]). UCS2
character strings are converted to hexadecimal numbers in the range 0000 to
FFFF; e.g. "004100620063" equates three 16-bit characters with decimal val-
ues 65, 98 and 99.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 46 of 564
2.12 AT^SCFG

2.12 AT^SCFG Extended Configuration Settings

AT^SCFG can be used to query and configure various settings of the PLS63-W.
AT^SCFG read command returns a list of all supported parameters and their current values.
AT^SCFG write command queries a configuration parameter (if no value is entered) or sets its value(s).

Syntax
Test Command

AT^SCFG=?
Response(s)
^SCFG: "Audio/Loop", (list of supported <al>s)
^SCFG: "Call/ECC", (list of supported <ecc>s)
^SCFG: "Call/Speech/Codec", (list of supported <scc>s)
^SCFG: "Call/VoLTE/Codec", (list of supported <vscc>s)
^SCFG: "GPIO/mode/ASC1", (list of supported <g_mode>s)
^SCFG: "GPIO/Mode/DTR0", (list of supported <dtr0>s)
^SCFG: "GPIO/Mode/DSR0", (list of supported <dsr0>s)
^SCFG: "GPIO/Mode/RING0", (list of supported <ring0>s)
^SCFG: "GPIO/Mode/DCD0", (list of supported <dcd0>s)
^SCFG: "GPIO/mode/FNS", (list of supported <g_mode>s)
^SCFG: "GPIO/mode/FSR", (list of supported <g_mode>s)
^SCFG: "GPIO/mode/SYNC", (list of supported <g_mode>s)
^SCFG: "GPIO/mode/DAI", (list of supported <g_mode>s)
^SCFG: "GPIO/mode/MCLK", (list of supported <g_mode>s)
^SCFG: "GPRS/AutoAttach", (list of supported <gaa>s)
^SCFG: "GPRS/MTU/Mode", (list of supported <nwmode>s)
^SCFG: "GPRS/MTU/Size", (range of supported <mtusize>s)
^SCFG: "GPRS/ApnWB", (list of supported <apnmode>s)
^SCFG: "Ident/Manufacturer", (max. string length of <manufacturer>)
^SCFG: "Ident/Product", (max. string length of <product>)
^SCFG: "MEopMode/CFUN", (list of supported <volaCFUN>s)
^SCFG: "MEopMode/CregRoam", (list of supported <mrs>s)
^SCFG: "MEopMode/DTM/Mode", (list of supported <dtm>s)
^SCFG: "MEopMode/ExpectDTR", (list of supported <expDtrSet>s), (list of supported <expDtrPort>s)
^SCFG: "MEopMode/IMS", (list of supported <ims>s)
^SCFG: "MEopMode/Prov/AutoFallback", (list of supported <provAutoFallback>s)
^SCFG: "MEopMode/Prov/AutoSelect", (list of supported <provAutoSelect>s)
^SCFG: "MEopMode/Prov/Cfg", (list of supported <provCfg>s)
^SCFG: "MEopMode/SRPOM", (list of supported <srpom>s)
^SCFG: "MEopMode/RingOnData", (list of supported <ringlineSig>s)
^SCFG: "MEShutdown/sVsup/threshold", (list of supported <vthresh>s), (list of supported
<PowerSupplyDomain>s)
^SCFG: "Radio/Band/2G", (list of supported <rba2g>s), , (list of supported <rbe>s)
^SCFG: "Radio/Band/3G", (list of supported <rba3g>s), , (list of supported <rbe>s)
^SCFG: "Radio/Band/4G", (list of supported <rba4g-1>s), (list of supported <rba4g-2>s), (list of
supported <rbe>s)
^SCFG: "Radio/Mtpl", (list of supported <PL_mode>s), (list of supported <PL_profile>s)
^SCFG: "Radio/Mtpl/2G", (list of supported <PL_mode>s), (list of supported <PL_profile>s), (list of
supported <PL_band2g>s), , (list of supported <PL_limit2g>s), (list of supported <PL_limit_psk>s)
^SCFG: "Radio/Mtpl/3G", (list of supported <PL_mode>s), (list of supported <PL_profile>s), (list of
supported <PL_band3g>s), , (list of supported <PL_limit3g>s)
^SCFG: "Radio/Mtpl/4G", (list of supported <PL_mode>s), (list of supported <PL_profile>s), (list of
supported <PL_band4g-1>s), (list of supported <PL_band4g-2>s), (list of supported <PL_limit4g>s)
^SCFG: "Radio/OutputPowerReduction", (list of supported <ropr>s)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 47 of 564
2.12 AT^SCFG

Test Command (Continued)

AT^SCFG=?
Response(s)
^SCFG: "RemoteWakeUp/Ports", (list of supported <RemWakePortSet>s), (list of supported
<RemWakePort>s)
^SCFG: "SAT/AR/Refresh", (list of supported <mode>s), (list of supported s)
^SCFG: "SIM/CS", (list of supported <sslot>s)
^SCFG: "SIM/DualMode", (list of supported <sdm>s)
^SCFG: "Serial/USB/DDD" , (list of supported <usbDeviceDescr>s) , (list of supported
<usbDescrIndex>s) , (max. string length of <usbLangId>) , (max. string length of <usbVendorId>) ,
(max. string length of <usbProductId>) , (max. string length of <usbManufacturer>) , (max. string length
of <usbProduct>) , (max. string length of <usbSerialNo>)
^SCFG: "SMS/Retrm", (list of supported <SmsRetrmTimeout>s)
^SCFG: "Tcp/IRT", (list of supported <tcpirt>)
^SCFG: "Tcp/WithURCs", (list of supported <tcpWithUrc>)
^SCFG: "Tcp/TLS/Version", (list of supported <TLS_min_version>s), (list of supported
<TLS_max_version>s)
^SCFG: "URC/Ringline", (list of supported <urcRinglineCfg>s)
^SCFG: "URC/Ringline/ActiveTime", (list of supported <urcRinglineDuration>s)
^SCFG: "URC/Ringline/SelWUrc", (list of supported <urcRinglineFilter>s)
OK
Read Command

AT^SCFG?
Response(s)
^SCFG: "Audio/Loop", <al>
^SCFG: "Call/ECC", <ecc>
^SCFG: "Call/Speech/Codec", <scc>
^SCFG: "Call/VoLTE/Codec", <vscc>
^SCFG: "GPIO/mode/ASC1", <g_mode>
^SCFG: "GPIO/Mode/DTR0", <dtr0>
^SCFG: "GPIO/Mode/DSR0", <dsr0>
^SCFG: "GPIO/Mode/RING0", <ring0>
^SCFG: "GPIO/Mode/DCD0", <dcd0>
^SCFG: "GPIO/mode/FNS", <g_mode>
^SCFG: "GPIO/mode/FSR", <g_mode>
^SCFG: "GPIO/mode/SYNC", <g_mode>
^SCFG: "GPIO/mode/DAI", <g_mode>
^SCFG: "GPIO/mode/MCLK", <g_mode>
^SCFG: "GPRS/AutoAttach", <gaa>
^SCFG: "GPRS/MTU/Mode", <nwmode>
^SCFG: "GPRS/MTU/Size", <mtusize>
^SCFG: "GPRS/ApnWB", <apnmode>
^SCFG: "Ident/Manufacturer", <manufacturer>
^SCFG: "Ident/Product", <product>
^SCFG: "MEopMode/CFUN", <volaCFUN>, <storedCFUN>
^SCFG: "MEopMode/CregRoam", <mrs>
^SCFG: "MEopMode/DTM/Mode", <dtm>
^SCFG: "MEopMode/ExpectDTR", "current"[, <expDtrPort>1[, <expDtrPort>2[, ...]]]
^SCFG: "MEopMode/ExpectDTR", "powerup"[, <expDtrPort>1[, <expDtrPort>2[, ...]]]
^SCFG: "MEopMode/IMS", <ims>
^SCFG: "MEopMode/Prov/AutoFallback", <provAutoFallback>
^SCFG: "MEopMode/Prov/AutoSelect", <provAutoSelect>
^SCFG: "MEopMode/Prov/Cfg", <provCfg>
^SCFG: "MEopMode/RingOnData", <ringlineSig>
^SCFG: "MEopMode/SRPOM", <srpom>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 48 of 564
2.12 AT^SCFG

Read Command (Continued)

AT^SCFG?
Response(s)
^SCFG: "MEShutdown/sVsup/threshold", <vthresh_BB_curr>, <vthresh_BB_request>
^SCFG: "Radio/Band/2G", <rba2g>
^SCFG: "Radio/Band/3G", <rba3g>
^SCFG: "Radio/Band/4G", <rba4g-1>[, <rba4g-2>]
^SCFG: "Radio/Mtpl", <PL_mode>[, <PL_profile>]
^SCFG: "Radio/Mtpl/2G", <PL_mode>[, <PL_profile>]
^SCFG: "Radio/Mtpl/3G", <PL_mode>[, <PL_profile>]
^SCFG: "Radio/Mtpl/4G", <PL_mode>[, <PL_profile>]
^SCFG: "Radio/OutputPowerReduction", <ropr>
^SCFG: "RemoteWakeUp/Ports", "current"[, <RemWakePort>1[, <RemWakePort>2[, ...]]]
^SCFG: "RemoteWakeUp/Ports", "powerup"[, <RemWakePort>1[, <RemWakePort>2[, ...]]]
^SCFG: "SIM/CS" , <sslot>
^SCFG: "SIM/DualMode" , <sdm>
^SCFG: "Serial/USB/DDD" , <usbDeviceDescr>, <usbDescrIndex>, <usbLangId>, <usbVendorId>,
<usbProductId>, <usbManufacturer>, <usbProduct>, <usbSerialNo>
^SCFG: "SMS/Retrm", <SmsRetrmTimeout>
^SCFG: "Tcp/IRT", <tcpirt>
^SCFG: "Tcp/WithURCs", <tcpWithUrc>
^SCFG: "Tcp/TLS/Version", <TLS_min_version>, <TLS_max_version>
^SCFG: "URC/Ringline", <urcRinglineCfg>
^SCFG: "URC/Ringline/ActiveTime", <urcRinglineDuration>
^SCFG: "URC/Ringline/SelWUrc", <urcRinglineFilter>
^SCFG: "SAT/AR/Refresh", <mode>,
OK
Write Command

Configure Audio Loop.

AT^SCFG="Audio/Loop"[, <al>]
Response(s)
^SCFG: "Audio/Loop", <al>
OK
ERROR
+CME ERROR: <err>
Write Command
Query/Configure Emergency numbers for USIM without or empty ECC field.
AT^SCFG="Call/ECC"[, <ecc>]
Response(s)
^SCFG: "Call/ECC", <ecc>
OK
ERROR
+CME ERROR: <err>
Write Command

Speech Codec Configuration for CS voice calls.

AT^SCFG="Call/Speech/Codec"[, <scc>]
Response(s)
^SCFG: "Call/Speech/Codec", <scc>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 49 of 564
2.12 AT^SCFG

Write Command

Speech Codec Configuration for VoLTE calls.

AT^SCFG="Call/VoLTE/Codec"[, <vscc>]
Response(s)
^SCFG: "Call/VoLTE/Codec", <vscc>
OK
ERROR
+CME ERROR: <err>
Write Command

Configure ASC1 interface lines RXD1, TXD1, RTS1, CTS1 shared with GPIO16 - GPIO19 lines
AT^SCFG="GPIO/mode/ASC1"[, <g_mode>]
Response(s)
^SCFG: "GPIO/mode/ASC1", <g_mode>
OK
ERROR
+CME ERROR: <err>
Write Command
Configure DTR0 signal line.
AT^SCFG="GPIO/Mode/DTR0"[, <dtr0>]
Response(s)
^SCFG: "GPIO/Mode/DTR0", <dtr0>
OK
ERROR
+CME ERROR: <err>
Write Command
Configure DSR0 signal line.
AT^SCFG="GPIO/Mode/DSR0"[, <dsr0>]
Response(s)
^SCFG: "GPIO/Mode/DSR0", <dsr0>
OK
ERROR
+CME ERROR: <err>
Write Command

Configure RING0 signal line.

AT^SCFG="GPIO/Mode/RING0"[, <ring0>]
Response(s)
^SCFG: "GPIO/Mode/RING0", <ring0>
OK
ERROR
+CME ERROR: <err>
Write Command

Configure DCD0 signal line.

AT^SCFG="GPIO/Mode/DCD0"[, <dcd0>]
Response(s)
^SCFG: "GPIO/Mode/DCD0", <dcd0>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 50 of 564
2.12 AT^SCFG

Write Command

Configure "SIM/DualMode" (<sdm>) shared with GPIO26.

AT^SCFG="GPIO/mode/FNS"[, <g_mode>]
Response(s)
^SCFG: "GPIO/mode/FNS", <g_mode>
OK
ERROR
+CME ERROR: <err>
Write Command

Configure Fast Shutdown line FST_SHDN shared with GPIO4 line.

AT^SCFG="GPIO/mode/FSR"[, <g_mode>]
Response(s)
^SCFG: "GPIO/mode/FSR", <g_mode>
OK
ERROR
+CME ERROR: <err>
Write Command
Configure Status LED line shared with GPIO5 line
AT^SCFG="GPIO/mode/SYNC"[, <g_mode>]
Response(s)
^SCFG: "GPIO/mode/SYNC", <g_mode>
OK
ERROR
+CME ERROR: <err>
Write Command
Configure Digital Audio Interface lines TXDDAI, RXDDAI, shared with GPIO20, GPIO21 lines.
AT^SCFG="GPIO/mode/DAI"[, <g_mode>]
Response(s)
^SCFG: "GPIO/mode/DAI", <g_mode>
OK
ERROR
+CME ERROR: <err>
Write Command

Activate or switch off Master Clock Signal Line.

AT^SCFG="GPIO/mode/MCLK"[, <g_mode>]
Response(s)
^SCFG: "GPIO/mode/MCLK", <g_mode>
OK
ERROR
+CME ERROR: <err>
Write Command

PS Domain auto attach.

AT^SCFG="GPRS/AutoAttach"[, <gaa>]
Response(s)
^SCFG: "GPRS/AutoAttach", <gaa>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 51 of 564
2.12 AT^SCFG

Write Command

Use pre-configured MTU Mode.

AT^SCFG="GPRS/MTU/Mode", <nwmode>
Response(s)
^SCFG: "GPRS/MTU/Mode", <nwmode>
OK
ERROR
+CME ERROR: <err>
Write Command

Use pre-configured MTU size.

AT^SCFG="GPRS/MTU/Size", <mtusize>
Response(s)
^SCFG: "GPRS/MTU/Size", <mtusize>
OK
ERROR
+CME ERROR: <err>
Write Command
Configurable write-back of APN to PDP context.
AT^SCFG="GPRS/ApnWB", <apnmode>
Response(s)
^SCFG: "GPRS/ApnWB", <apnmode>
OK
ERROR
+CME ERROR: <err>
Write Command
Configure manufacturer name.
AT^SCFG="Ident/Manufacturer"[, <manufacturer>]
Response(s)
^SCFG: "Ident/Manufacturer", <manufacturer>
OK
ERROR
+CME ERROR: <err>
Write Command

Configure product name.

AT^SCFG="Ident/Product"[, <product>]
Response(s)
^SCFG: "Ident/Product", <product>
OK
ERROR
+CME ERROR: <err>
Write Command

Control persistence of AT+CFUN parameter <fun>.

AT^SCFG="MEopMode/CFUN"[, <volaCFUN>]
Response(s)
^SCFG: "MEopMode/CFUN", <volaCFUN>, <storedCFUN>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 52 of 564
2.12 AT^SCFG

Write Command

AT^SCFG="MEopMode/CregRoam"[, <mrs>]
Response(s)
^SCFG: "MEopMode/CregRoam", <mrs>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SCFG="MEopMode/DTM/Mode"[, <dtm>]
Response(s)
^SCFG: "MEopMode/DTM/Mode", <dtm>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SCFG="MEopMode/ExpectDTR"[, <expDtrSet>[, <expDtrPort>1[, <expDtrPort>2[, ...]]]]

Response(s)
^SCFG: "MEopMode/ExpectDTR", "current"[, <expDtrPort>1[, <expDtrPort>2[, ...]]]
^SCFG: "MEopMode/ExpectDTR", "powerup"[, <expDtrPort>1[, <expDtrPort>2[, ...]]]
OK
ERROR
+CME ERROR: <err>
Write Command
IMS mode.
AT^SCFG="MEopMode/IMS"[, <ims>]
Response(s)
^SCFG: "MEopMode/IMS", <ims>
OK
ERROR
+CME ERROR: <err>
Write Command

Auto fallback provider profile.

AT^SCFG="MEopMode/Prov/AutoFallback"[, <provAutoFallback>]
Response(s)
^SCFG: "MEopMode/Prov/AutoFallback", <provAutoFallback>
OK
ERROR
+CME ERROR: <err>
Write Command

Auto select provider profile.

AT^SCFG="MEopMode/Prov/AutoSelect"[, <provAutoSelect>]
Response(s)
^SCFG: "MEopMode/Prov/AutoSelect", <provAutoSelect>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 53 of 564
2.12 AT^SCFG

Write Command

Provider profile configuration.

AT^SCFG="MEopMode/Prov/Cfg"[, <provCfg>]
Response(s)
^SCFG: "MEopMode/Prov/Cfg", <provCfg>
OK
ERROR
+CME ERROR: <err>
Write Command

Subcommand controls whether ring line signalization is used by the UE in case it can't output data due to a
blocked interface.
AT^SCFG="MEopMode/RingOnData"[, <ringlineSig>]
Response(s)
^SCFG: "MEopMode/RingOnData", <ringlineSig>
OK
ERROR
+CME ERROR: <err>
Write Command

Enable or disable RPM if inserted USIM contains no RPM files.

AT^SCFG="MEopMode/SRPOM"[, <srpom>]
Response(s)
^SCFG: "MEopMode/SRPOM", <srpom>
OK
ERROR
+CME ERROR: <err>
Write Command

Query / configure undervoltage threshold

AT^SCFG="MEShutdown/sVsup/threshold"[, <vthresh>][, <PowerSupplyDomain>]
Response(s)
^SCFG: "MEShutdown/sVsup/threshold", <vthresh_BB_curr>, <vthresh_BB_request>
OK
ERROR
+CME ERROR: <err>
Write Command
Enable/disable 2G radio bands.
AT^SCFG="Radio/Band/2G"[, <rba2g>][, ,<rbe>]
Response(s)
^SCFG: "Radio/Band/2G", <rba2g>
OK
ERROR
+CME ERROR: <err>
Write Command

Enable/disable 3G radio bands.

AT^SCFG="Radio/Band/3G"[, <rba3g>][, ,<rbe>]
Response(s)
^SCFG: "Radio/Band/3G", <rba3g>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 54 of 564
2.12 AT^SCFG

Write Command

Enable/disable 4G radio bands.

AT^SCFG="Radio/Band/4G"[, <rba4g-1>, <rba4g-2>][, <rbe>]
Response(s)
^SCFG: "Radio/Band/4G", <rba4g-1>[, <rba4g-2>]
OK
ERROR
+CME ERROR: <err>
Write Command

To control (deactivate / activate) output power limitation for SAR (Specific Absorption Rate)
<PL_mode> 2 and 3 (query / configure) are applicable only with:
"Radio/Mtpl/2G"
"Radio/Mtpl/3G"
"Radio/Mtpl/4G"
AT^SCFG="Radio/Mtpl"[, <PL_mode>[, <PL_profile>]]
Response(s)
^SCFG: "Radio/Mtpl", <PL_mode>[, <PL_profile>]
OK
ERROR
+CME ERROR: <err>
Write Command

To control (query / configure) output power limitation for SAR (Specific Absorption Rate).
<PL_mode> 0 and 1 (deactivate / activate) are applicable only with "Radio/Mtpl".
AT^SCFG="Radio/Mtpl/2G"[, <PL_mode>[, <PL_profile>, <PL_band2g>, , <PL_limit2g>,
<PL_limit_psk>]]
Response(s)
^SCFG: "Radio/Mtpl/2G", <PL_mode>[, <PL_profile>, <PL_band2g>, , <PL_limit2g>,
<PL_limit_psk>]

In case of <PL_mode>=2 and <PL_profile> one profile configuration is printed out

^SCFG: "Radio/Mtpl/2G", <PL_mode>, <PL_profile>, <PL_band2g>, , <PL_limit2g>,
<PL_limit_psk>
^SCFG: ["Radio/Mtpl/2G", <PL_mode>, <PL_profile>, <PL_band2g>, , <PL_limit2g>,
<PL_limit_psk>]
^SCFG: ["Radio/Mtpl/2G", ...]

In case of <PL_mode>=2 full profile configuration (1-8) is printed out

^SCFG: "Radio/Mtpl/2G", <PL_mode>, <PL_profile>, <PL_band2g>, , <PL_limit2g>,
<PL_limit_psk>
^SCFG: ["Radio/Mtpl/2G", <PL_mode>, <PL_profile>, <PL_band2g>, , <PL_limit2g>,
<PL_limit_psk>]
^SCFG: ["Radio/Mtpl/2G", <PL_mode>, <PL_profile>, <PL_band2g>, , <PL_limit2g>,
<PL_limit_psk>]
^SCFG: ["Radio/Mtpl/2G", ...]

In case of <PL_mode>=3 and <PL_profile>, <PL_band2g>,,<PL_limit2g>,<PL_limit_psk>

^SCFG: "Radio/Mtpl/2G", <PL_mode>[, <PL_profile>]
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 55 of 564
2.12 AT^SCFG

Write Command

To control (query / configure) output power limitation for SAR (Specific Absorption Rate).
<PL_mode> 0 and 1 (deactivate / activate) are applicable only with "Radio/Mtpl".
AT^SCFG="Radio/Mtpl/3G"[, <PL_mode>[, <PL_profile>, <PL_band3g>, , <PL_limit3g>]]
Response(s)
^SCFG: "Radio/Mtpl/3G", <PL_mode>[, <PL_profile>, <PL_band3g>, , <PL_limit3g>]

In case of <PL_mode>=2 and <PL_profile> one profile configuration is printed out

^SCFG: "Radio/Mtpl/3G", <PL_mode>, <PL_profile>, <PL_band3g>, , <PL_limit3g>
^SCFG: ["Radio/Mtpl/3G", <PL_mode>, <PL_profile>, <PL_band3g>, , <PL_limit3g>]
^SCFG: ["Radio/Mtpl/3G", ...]

In case of <PL_mode>=2 full profile configuration (1-8) is printed out

^SCFG: "Radio/Mtpl/3G", <PL_mode>, <PL_profile>, <PL_band3g>, , <PL_limit3g>
^SCFG: ["Radio/Mtpl/3G", <PL_mode>, <PL_profile>, <PL_band3g>, , <PL_limit3g>]
^SCFG: ["Radio/Mtpl/3G", <PL_mode>, <PL_profile>, <PL_band3g>, , <PL_limit3g>]
^SCFG: ["Radio/Mtpl/3G", ...]

In case of <PL_mode>=3 and <PL_profile>, <PL_band3g>,,<PL_limit3g>

^SCFG: "Radio/Mtpl/3G", <PL_mode>[, <PL_profile>]
OK
ERROR
+CME ERROR: <err>
Write Command
To control (query / configure) output power limitation for SAR (Specific Absorption Rate).
<PL_mode> 0 and 1 (deactivate / activate) are applicable only with "Radio/Mtpl".
AT^SCFG="Radio/Mtpl/4G"[, <PL_mode>[, <PL_profile>, <PL_band4g-1>, <PL_band4g-2>,
<PL_limit4g>]]
Response(s)
^SCFG: "Radio/Mtpl/4G", <PL_mode>[, <PL_profile>, <PL_band4g-1>, <PL_band4g-2>,
<PL_limit4g>]

In case of <PL_mode>=2 and <PL_profile> one profile configuration is printed out

^SCFG: "Radio/Mtpl/4G", <PL_mode>, <PL_profile>, <PL_band4g-1>, <PL_band4g-2>,
<PL_limit4g>
^SCFG: ["Radio/Mtpl/4G", <PL_mode>, <PL_profile>, <PL_band4g-1>, <PL_band4g-2>,
<PL_limit4g>]
^SCFG: ["Radio/Mtpl/4G", ...]

In case of <PL_mode>=2 full profile configuration (1-8) is printed out

^SCFG: "Radio/Mtpl/4G", <PL_mode>, <PL_profile>, <PL_band4g-1>, <PL_band4g-2>,
<PL_limit4g>
^SCFG: ["Radio/Mtpl/4G", <PL_mode>, <PL_profile>, <PL_band4g-1>, <PL_band4g-2>,
<PL_limit4g>]
^SCFG: ["Radio/Mtpl/4G", <PL_mode>, <PL_profile>, <PL_band4g-1>, <PL_band4g-2>,
<PL_limit4g>]
^SCFG: ["Radio/Mtpl/4G", ...]

In case of <PL_mode>=3 and <PL_profile>, <PL_band4g-1>,<PL_band4g-2>,<PL_limit4g>

^SCFG: "Radio/Mtpl/4G", <PL_mode>[, <PL_profile>]
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 56 of 564
2.12 AT^SCFG

Write Command

Radio output power reduction.

AT^SCFG="Radio/OutputPowerReduction"[, <ropr>]
Response(s)
^SCFG: "Radio/OutputPowerReduction", <ropr>
OK
ERROR
+CME ERROR: <err>
Write Command

Select ports for waking up the TE

AT^SCFG="RemoteWakeUp/Ports"[, <RemWakePortSet>[, <RemWakePort>1[, <RemWakePort>2[, ...]]]]
Response(s)
^SCFG: "RemoteWakeUp/Ports", "current"[, <RemWakePort>1[, <RemWakePort>2[, ...]]]
^SCFG: "RemoteWakeUp/Ports", "powerup"[, <RemWakePort>1[, <RemWakePort>2[, ...]]]
OK
ERROR
+CME ERROR: <err>
Write Command
Select USIM card.
AT^SCFG="SIM/CS"[, <sslot>]
Response(s)
^SCFG: "SIM/CS", <sslot>
OK
ERROR
+CME ERROR: <err>
Write Command
Configure USIM Dual Mode.
AT^SCFG="SIM/DualMode"[, <sdm>]
Response(s)
^SCFG: "SIM/DualMode", <sdm>
OK
ERROR
+CME ERROR: <err>
Write Command

USB Device Descriptor.

AT^SCFG="Serial/USB/DDD" [, <usbDeviceDescr>, [<usbDescrIndex>], [<usbLangId>],
<usbVendorId>, <usbProductId>, [<usbManufacturer>], [<usbProduct>], [<usbSerialNo>]]
Response(s)
^SCFG: "Serial/USB/DDD" , <usbDeviceDescr>, <usbDescrIndex>, <usbLangId>, <usbVendorId>,
<usbProductId>, <usbManufacturer>, <usbProduct>, <usbSerialNo>
OK
ERROR
+CME ERROR: <err>
Write Command
Configure SMS retransmission timeout.
AT^SCFG="SMS/Retrm", <SmsRetrmTimeout>
Response(s)
^SCFG: "SMS/Retrm", <SmsRetrmTimeout>
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 57 of 564
2.12 AT^SCFG

Write Command (Continued)

Configure SMS retransmission timeout.

AT^SCFG="SMS/Retrm", <SmsRetrmTimeout>
Response(s)
ERROR
+CME ERROR: <err>
Write Command

Configuration of TCP parameter 'Initial Retransmission Timeout'.

AT^SCFG="Tcp/IRT"[, <tcpirt>]
Response(s)
^SCFG: "Tcp/IRT", <tcpirt>
OK
ERROR
+CME ERROR: <err>
Write Command
Configuration of Internet Service URCs:
AT^SCFG="Tcp/WithURCs"[, <tcpWithUrc>]
Response(s)
^SCFG: "Tcp/WithURCs", <tcpWithUrc>
OK
ERROR
+CME ERROR: <err>
Write Command
Set a range of accepted TLS versions for the IPoverAT services.
AT^SCFG="Tcp/TLS/Version", <TLS_min_version>, <TLS_max_version>
Response(s)
^SCFG: "Tcp/TLS/Version", <TLS_min_version>, <TLS_max_version>
OK
ERROR
+CME ERROR: <err>
Write Command

Subcommand controls the behavior of the RING line if it is selected for URC signalization.
AT^SCFG="URC/Ringline"[, <urcRinglineCfg>]
Response(s)
^SCFG: "URC/Ringline", <urcRinglineCfg>
OK
ERROR
+CME ERROR: <err>
Write Command

Subcommand controls duration of active RING line if it is selected for URC signalization.
AT^SCFG="URC/Ringline/ActiveTime"[, <urcRinglineDuration>]
Response(s)
^SCFG: "URC/Ringline/ActiveTime", <urcRinglineDuration>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 58 of 564
2.12 AT^SCFG

Write Command

Subcommand specifies a filter for URC types allowed to toggle the Ring line
AT^SCFG="URC/Ringline/SelWUrc"[, <urcRinglineFilter>]
Response(s)
^SCFG: "URC/Ringline/SelWUrc", <urcRinglineFilter>
OK
ERROR
+CME ERROR: <err>
Write Command

(U)SAT Enhancement for Refresh Automatic Response Mode.

AT^SCFG="SAT/AR/Refresh", <mode>
Response(s)
^SCFG: "SAT/AR/Refresh", <mode>,
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<al>(str)
Audio Loop Setting
This parameter can be used to start and stop an audio loop. The feature is intended for testing the audio path
without SIM card inserted and without mobile network environment. It is not intended for normal operation.
Before starting the audio loop, it is recommended to set the audio related AT commands for the audio functions
to be tested.
“0“(P) No audio loop active
“1“ Audio loop active

<ecc>(str)(NV)
Emergency call numbers on non-ECC USIM
Setting specifies emergency call numbers on a USIM without or empty ECC field. It has no influence on the com-
monly used emergency numbers 112 and 911 which are always supported.
Also refer to Section 7.2, ATD where you can find a list of emergency call numbers supported if no USIM is
inserted.
The value range of <ecc> is "0"..."255". To select or deselect an emergency number calculate the sum of the
values of all desired numbers and use the resulting value. For example, for "08" (2) and "118" (8) please enter
the value (10).
Setting takes effect after next UE restart or USIM insertion.
"0"(D)..."255" Bitmask setting:
“ 0“ No additional emergency numbers
“ 1“ 000
“ 2“ 08
“ 4“ 110
“ 8“ 118
“16“ 119
“32“ 999

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 59 of 564
2.12 AT^SCFG

“64“ Reserved
“128“ Reserved
“255“ All additional emergency call numbers are supported.

<scc>(str)(NV)
Speech Codec Configuration for voice calls
This parameter can be used to configure the speech version indications in the bearer capabilities in case of voice
calls (see 3GPP TS 24.008).
If you change this parameter the command returns "OK", but a new setting takes effect the next time the UE is
restarted (after power-cycle).
“0“(D) All supported speech codecs are enabled for voice calls.
“2“ The speech codecs AMR WB are disabled for voice calls.

<vscc>(str)(NV)
Speech Codec Configuration for VoLTE calls
Speech Codec Configuration for VoLTE calls according to 3GPP TS 24.930.
If you change this parameter the command returns "OK", but a new setting takes effect the next time the UE is
restarted (after power-cycle).
“0“(D) All supported speech codecs are enabled for VoLTE.
“2“ AMR-WB speech codecs are disabled for VoLTE, all others enabled.

<dtr0>(str)(NV)
DTR0 signal line configuration
Setting takes effect after next restart.
“std“(D) Configure DTR0 signal line functionality.
“gpio“ Configure GPIO functionality.

<dsr0>(str)(NV)
DSR0 signal line configuration
Setting takes effect after next restart.
“std“(D) Configure DSR0 signal line functionality.
“gpio“ Configure GPIO functionality.

<ring0>(str)(NV)
RING0 signal line configuration
Setting takes effect after next restart.
“std“(D) Configure RING0 signal line functionality.
“gpio“ Configure GPIO functionality.

<dcd0>(str)(NV)
DCD0 signal line configuration
Setting takes effect after next restart.
“std“(D) Configure DCD0 signal line functionality.
“gpio“ Configure GPIO functionality.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 60 of 564
2.12 AT^SCFG

<g_mode>(str)(+CSCS)(NV)
Mode of operation for signal lines
Parameter of several AT^SCFG "GPIO/mode/xxx" subcommands. Can be used to configure shared signal lines
of the PLS63-W module. Depending on the connected devices the setting determines the specific function
assigned to the related signal line(s). Keep in mind that the functions assigned to shared lines are mutually
exclusive. Please refer also to Section 19.2, Pin Configuration which provides an overview on shared lines.
To enable the DAI interface select AT^SCFG="GPIO/mode/DAI","std". This will lock the GPIO functionality of
GPIO20, GPIO21. IMPORTANT: Audio commands offer full functionality only if the DAI is enabled with
AT^SCFG="GPIO/mode/DAI","std". If DAI resources are not available then DAI dependent audio commands will
respond "+CME ERROR: operation not allowed".
Likewise, to enable the second serial interface ASC1 select AT^SCFG="GPIO/mode/ASC1","std".
Changes take effect after restart of the UE.
“std“ Signal lines are assigned to this interface.
“gpio“ Signal lines are used as GPIO.
“rsv“ Reserved value.

Mode of operation special for AT^SCFG "GPIO/mode/MCLK", the values of <g_mode> parameter is as follows.
“std“ Master clock (MCLK) is activated permanently.
“off“ Master clock (MCLK) is switched off.

<gaa>(str)(NV)
PS Domain auto attach
Setting can be used to control whether or not the UE will perform a PS Domain attach immediately after power-
up during registration to the network or right after registering to the network, depending on network configuration.
If the setting is changed to "enabled" and the UE is not attached yet, it will not initiate an attach immediately but
after the next restart and registration to the network. For LTE please see more information in Section 13.5.1,
Attaching to LTE Networks and Registering to IMS.
“disabled“ PS Domain auto attach is disabled
(D)
“enabled“ PS Domain auto attach is enabled

<nwmode>(num)(NV)
0 Ask network for MTU size
1 Don't ask network for MTU size and use default value
Note: The default value for AT&T will be "1" and the default value for other MNOs will be "0".

<mtusize>(num)(NV)
MTU size in bytes.
1280...1430(D)...1500
Notes:
• IPv6 connection will be limited to 1280 bytes and ignore the MTU size configuration.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 61 of 564
2.12 AT^SCFG

<apnmode>(num)(NV)
Write-back of APN to PDP context
Setting can be used to enable or disable the write-back of APN to the PDP context.
0(D) Disable write-back of APN to the PDP context.
The APN received from network is applied to the PDN connection, but not writ-
ten back to the PDP context.
1 Enable write-Back of APN to the PDP context.
The APN received from network is written into the PDP context for the corre-
sponding CID (i.e. AT+CGDCONT parameter <cid>). The PDP context config-
uration is readable using AT+CGDCONT read command.

<manufacturer>(str)(NV)
Manufacturer name
Setting can be used to configure the name of the manufacturer which is displayed with the commands ATI,
AT+GMI and AT+CGMI. Maximal length of the Manufacturer name is 25 characters (or less if you use multibyte
characters).
“Cinterion“(D)

<product>(str)(NV)
Product name
Setting can be used to configure the name of the product which is displayed with the commands ATI, AT+GMM
and AT+CGMM. Maximal length of the product name is 25 characters (or less if you use multibyte characters).
“PLS63-W“(D)

<volaCFUN>(str)(NV)
Volatile +CFUN Mode
Parameter determines whether AT+CFUN parameter <fun> is stored persistently.
“0“(D) Setting of AT+CFUN parameter <fun> is stored persistently.
“1“ Setting of AT+CFUN parameter <fun> is volatile, i.e. changes are not reestab-
lished after next UE restart.

<storedCFUN>(str)(NV)
Stored +CFUN Mode
Indicates setting of AT+CFUN parameter <fun> which will be used for next UE restart.

<mrs>(str)(NV)
Modified Roaming Status
This parameter enables or disables the modified roaming status displayed by AT+CREG. If it is enabled, the reg-
istration status is "registered to home network" instead of "registered, roaming", when the registered PLMN and
the Home PLMN from USIM Elementary File EFIMSI are mapped to the same network name in the PLS63-W
internal operator list.
Please consider this configuration has no influence to the commands AT^SIND="roam", AT+CEREG and
AT+CGREG!
“0“(D) Disable the Modified Roaming Status Display.
“1“ Enable the Modified Roaming Status Display.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 62 of 564
2.12 AT^SCFG

<dtm>(str)(NV)
DTM Mode
This parameter controls the Dual Transfer Mode.
“0“ DTM and EDTM are disabled.
(D)
“1“ DTM is enabled and EDTM is disabled.
“2“ DTM and EDTM are enabled.

<expDtrSet>(str)
The <expDtrSet> parameter specifies whether the "MEopMode/ExpectDTR" configuration set with <exp-
DtrPort> is non-volatile or volatile.
“current“ The currently used configuration (volatile).
“powerup“ The configuration used after powerup or restart (non-volatile).

<expDtrPort>(str)
The purpose of AT^SCFG "MEopMode/ExpectDTR" subcommand is to ensure power saving even though a Cus-
tomer Application is designed to use only some but not all of the UE's ports. Keep in mind that the UE enters
Sleep mode only if there is no data pending on any port. This might be a problem if ports are not connected or
not opened. To ensure power saving in such case, the AT^SCFG "MEopMode/ExpectDTR" subcommand can
be activated simply by listing all those ports for which the Customer Application has no driver implemented. Vice
versa, if a Customer Application implements a driver for a given port, and thus ensures to open this port and
read all data, this port can be removed from the <expDtrPort> list.

On each port listed via <expDtrPort>, the UE transmits data and notifications only after the connected host
has activated DTR, or has sent a "SetControlLineState(DTE present)" request to a USB CDC ACM port. Any
data pending on such a port BEFORE the host has notified its readiness will be discarded because the UE
assumes that there is no host connected reading the data. This is to avoid that data left unsent in the output
queues (e.g. a ^SYSSTART URC) prevent the UE from sleeping, or even gradually block the output queue.

The supported ports are reported by the AT^SCFG test command in the line for "MEopMode/ExpectDTR". By
delivery default, all ports are listed in the AT^SCFG "MEopMode/ExpectDTR" read command responses, mean-
ing that the "MEopMode/ExpectDTR" feature is activated for all ports.
“acm0“(D) Refers to USB0, AT^SQPORT <id> 1
(D)
“acm1“ Refers to USB1, AT^SQPORT <id> 2
(D)
“acm2“ Refers to USB2, AT^SQPORT <id> 3
(D)
“acm3“ Refers to USB3, AT^SQPORT <id> 4
(D)
“diag“ for future use and currently not taken over in current configuration.
(D)
“asc0“ Refers to ASC0, AT^SQPORT <id> 5

Examples:
Default: UE expects the DTR signal on all ports.
Advantage: If a port is not connected or not opened any data available before DTR activation will be discarded.
AT^SCFG?
....
^SCFG: "MEopMode/ExpectDTR","current","acm0","acm1","acm2","acm3","asc0"
^SCFG: "MEopMode/ExpectDTR","powerup","acm0","acm1","acm2","acm3","diag","asc0"
....
OK
If the Customer Application implements a driver for a given port (in this example for the USB modem) then this
port can be removed from the "MEopMode/ExpectDTR","powerup" list:
AT^SCFG="MEopMode/ExpectDTR","powerup","acm1","acm2","acm3","diag","asc0"
^SCFG: "MEopMode/ExpectDTR","current","acm0","acm1","acm2","acm3","asc0"
^SCFG: "MEopMode/ExpectDTR","powerup","acm1","acm2","acm3","diag","asc0"
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 63 of 564
2.12 AT^SCFG

AT+CFUN=1,1
OK
^SYSSTART
AT^SCFG="MEopMode/ExpectDTR"
^SCFG: "MEopMode/ExpectDTR","current","acm1","acm2","acm3","asc0"
^SCFG: "MEopMode/ExpectDTR","powerup","acm1","acm2","acm3","diag","asc0"
OK

Please note, the usage of this feature on ports with standard applications, like Windows DUN, may cause unex-
pected behaviour, because such standard applications may toggle DTR line and therefore lose expected data.
For such cases, please remove the port from <expDtrPort>.

<ims>(str)(NV)
IMS Mode
The parameter <ims> of AT^SCFG "MEopMode/IMS" can be used to enable or disable the IMS registration
attempt after LTE attach. If value is not supported a "NOT IN USE" will be given.
Depending on provider requirements, the delivery value is part of the provider profiles preconfigured in the UE,
thus eliminating the need to change it. If nevertheless the setting may need to be changed consider that the new
setting takes effect after restart.
“0“ Disable IMS registration attempt after LTE attach.
“1“ Enable IMS registration attempt after LTE attach.

<provAutoFallback>(str)(NV)
Auto fallback provider profile
The AT^SCFG "MEopMode/Prov/AutoFallback" parameter <provAutoFallback> enables / disables the auto
fallback functionality of provider profiles.
Auto fallback is effective if AT^SCFG "MEopMode/Prov/AutoSelect" parameter <provAutoSelect> is set "on"
(enable).
“off“(D) Auto fallback is off.
“on“ Auto fallback is on.

<provAutoSelect>(str)(NV)
Autoselect provider profile
The AT^SCFG "MEopMode/Prov/AutoSelect" parameter <provAutoSelect> enables / disables the autoselec-
tion of provider profiles. Setting takes effect after next restart.

The UE comes with two types of preconfigured provider profiles:

• Dedicated provider profiles distinguished by the IIN field (Issuer Identification Number) of the ICCIDs in the
SIM:
Each provider profile loads a set of non-volatile provider specific settings, such as PDP contexts defined with
AT+CGDCONT, as well as IMS and VoLTE settings if applicable for the specific provider.
• One Fallback profile intended for all other providers:
The fallback profile comes with default PDP contexts. It depends on the provider whether default PDP con-

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 64 of 564
2.12 AT^SCFG

texts will do. If not, the TE will be required to define provider specific PDP contexts.
All preconfigured provider profiles are listed by the AT^SCFG=? test command and by ATI61. The currently
selected provider profile is indicated by the <provCfg> parameter of the AT^SCFG "MEopMode/Prov/Cfg" read
command response, by ATI61 and by the <provCur> parameter of the AT^SIND "prov" indicator. For profile
settings refer to: AT+CAVIMS, AT+CVMOD, AT+CGDCONT, <ims> of AT^SCFG "MEopMode/IMS".
It is the responsibility of the Customer Application manufacturer to use a desired profile.
“on“(D) Autoselection is on.
The provider profile changes automatically when the inserted SIM card
matches one of the provider profiles preconfigured in the UE.
“off“ Autoselection is off.
The provider profile can be set manually using the AT^SCFG "MEopMode/Prov/
Cfg" write command.
If autoselection is "on", provider profile settings are non-volatile as long as the same SIM or a SIM of the same
provider is inserted. Otherwise, if a different provider configuration is selected, or a SIM of a different provider
is inserted the existing profile will be cleared before the new profile can be loaded. This applies, in particular, to
all PDP contexts defined by AT+CGDCONT, no matter whether loaded as part of a preconfigured provider profile,
or set by the TE.
If the fallback profile is enabled, provider profile settings are non-volatile only as long as exactly the same SIM
is inserted. Changing the SIM, even though a SIM of the same issuer, always clears all profile settings.

The provider profile status is reported by the URC +CIEV: prov,<provMm>,<provCur> (see AT^SIND "prov").
The URC is enabled by powerup default. The URC reports the current provider profile status after UE restart
and any change of the provider profile configuration when autoselection is "on".
If the ICCID IIN of the inserted SIM matches one of the dedicated preconfigured provider profiles <provMm>
equals 0.
If the ICCID IIN of the inserted SIM does not match any dedicated preconfigured provider profile <provMm>
equals 1. For the fallback provider profile <provMm> is always 1.

<provCfg>(str)(NV)
Provider configuration
The AT^SCFG "MEopMode/Prov/Cfg" parameter <provCfg> controls the provider profiles.
It is not allowed to manually change the provider profile when <provAutoSelect> value is "on". Any attempt
to do so will be denied with result code "+CME ERROR: operation temporary not allowed".
“fallb*“(D) This value represents the fallback provider profile. Can be used if the inserted
SIM card does not match the provider profiles preconfigured in the UE.
The "*" is only a sign. Do not use this "*" in the provider profile name when set-
ting the fallback provider profile.
“tmode“ EXAMPLE ! Provider T-Mobile
“vdfde“ EXAMPLE ! Provider Vodafone
“...“ Next possible provider ...
“...“ Next possible provider ...

<ringlineSig>(str)(NV)
Parameter determines whether ring line signalization is used by the UE in case it can't output data due to a
blocked interface. Interface blocking may be caused by an unplugged USB cable or by an inactive RTS line on
ASC0, e.g. if the TE is in power save mode.
For details about URC presentation and related hardware signalization refer to Section 1.8, Unsolicited
Result Code Presentation. See also parameters <urcRinglineCfg> and <urcRinglineDuration>.
“on“ Ring line signalization is enabled if data can't be sent by the UE due to a
blocked interface.
“off“(P) No Ring line signalization if interface is blocked.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 65 of 564
2.12 AT^SCFG

<srpom>(str)(NV)
Radio Policy Manager Mode
Depending on the provider configuration it is possible that the AT^SCFG="MEopMode/SRPOM" command is not
available.
This parameter enables / disables the usage of the default Radio Policy Manager (RPM) parameter settings
according to GSMA "TSG.34/TS.34 - IoT Device Connection Efficiency Guidelines", as of Version 1.x, chapter 8.
If RPM files are found on the inserted USIM the configuration given in these RPM files applies, i.e. the Radio
Baseband Chipset shall use the RPM parameter settings of the USIM. In this case <srpom> settings are not
effective.
If the USIM does not contain RPM files, RPM functionality shall be enabled or disabled based on the default
setting of the UE's RPM parameter settings.
The AT^SINFO="RPM" subcommand returns the currently loaded RPM (Radio Policy Manager) parameters.
In some special provider configurations setting to enable or disable is not allowed. In this case the result code
will be "+CME ERROR: operation temporary not allowed".
Delivery value is dependent of provider requirements.
Changed value takes effect after restart.
“0“ Usage of default RPM parameter settings saved in the UE is disabled.
“1“ Usage of default RPM parameter settings saved in the UE is enabled. Compli-
ant with TS.34_8.2.1_REQ_001 in the GSMA "TSG.34/TS.34 - IoT Device
Connection Efficiency Guidelines", as of Version 1.x, chapter 8.

<vthresh>(str)(NV)
Undervoltage threshold value
The undervoltage thresholds defined for BB domain are calculated for max. 400 mV voltage drops during trans-
mit burst. Power supply sources for PLS63-W applications shall be designed to tolerate 400 mV voltage drops
without crossing the lower limits of 2.8 V (BB domain). For PLS63-W applications operating at the limit of the
allowed tolerance the default undervoltage threshold may be adapted by selecting a <vthresh> value.
New settings take effect after restart.

<PowerSupplyDomain>(str)
Power Supply Domain
“0“ <vthresh> value applies to BB domain (BATT+BB line).

<vthresh_BB_curr>(str)
Current BB undervoltage threshold
“-4“ 2.80 V
“-3“ 2.85 V
“-2“ 2.90 V
“-1“ 2.95 V
(D)
“0“ 3.00 V
“1“ 3.05 V
“2“ 3.10 V
“3“ 3.15 V
“4“ 3.20 V

<vthresh_BB_request>(str)
BB undervoltage threshold after next restart
For values see <vthresh_BB_curr>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 66 of 564
2.12 AT^SCFG

<rba2g>(str)(NV)
<rba2g> determines the 2G frequency bands the UE is allowed to use. Values are given in hexadecimal 32-
bit-value order. Every bit corresponds to a dedicated band number.
“1“ GSM 900
“2“ GSM 1800
“4“ GSM 850
“8“ GSM 1900
Factory default of <rba2g> is the combination of all available bands meaning that all supported bands are
allowed. If AT+COPS equals "0" (automatic mode) this solution allows the subscriber to take advantage of a full-
featured automatic network selection when trying to register.
Therefore, changes to the band configuration are recommended only if the subscriber wishes to restrict the
allowed bands to a specific band or band combination, in particular to speed up the network search, and thus,
to reduce the power consumption. In such case, <rba2g> may be one of the supported single values listed
below.
Any change of <rba2g> will take effect immediately and will also be effective after next UE restart. So, <rba2g>
is a parameter that may be used to read out the current band combination any time.
Additional parameter <rbe> is available for compatibility reasons and has no functional influence. This param-
eter is optional and does not need to be used. It could be omitted in the future.
Note: The AT^SCFG=? test command shows the minimum and maximum band values.
Switching off all 2G bands using AT^SCFG="Radio/Band/2G","0" is possible.
Switching off all bands returns an error. At least one remaining band must be activated.

<rba3g>(str)(NV)
<rba3g> determines the 3G frequency bands the UE is allowed to use. Values are given in hexadecimal 32-
bit-value order. Every bit corresponds to a dedicated band number.
“1“ WCDMA 2100 (BC1)
“2“ WCDMA 1900 (BC2)
“4“ WCDMA 1800 (BC3)
“8“ WCDMA 1700 AWS (BC4)
“10“ WCDMA 850 (BC5)
“20“ WCDMA 800 (BC6)
“80“ WCDMA 900 (BC8)
“40000“ WCDMA 850 (BC19)
Factory default of <rba3g> is the combination of all available bands meaning that all supported bands are
allowed. If AT+COPS equals "0" (automatic mode) this solution allows the subscriber to take advantage of a full-
featured automatic network selection when trying to register.
Therefore, changes to the band configuration are recommended only if the subscriber wishes to restrict the
allowed bands to a specific band or band combination, in particular to speed up the network search, and thus,
to reduce the power consumption. In such case, <rba3g> may be one of the supported single values listed
below.
Any change of <rba3g> will take effect immediately and will also be effective after next UE restart. So, <rba3g>
is a parameter that may be used to read out the current band combination any time.
Additional parameter <rbe> is available for compatibility reasons and has no functional influence. This param-
eter is optional and does not need to be used. It could be omitted in the future.
Note: The AT^SCFG=? test command shows the minimum and maximum band values.
Switching off all 3G bands using AT^SCFG="Radio/Band/3G","0" is possible.
Switching off all bands returns an error. At least one remaining band must be activated.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 67 of 564
2.12 AT^SCFG

<rba4g-1>(str)(NV)
<rba4g-1> determines 4G frequency bands the UE is allowed to use. Values are given in hexadecimal 32-bit-
value order. Every bit corresponds to a dedicated band number. The number range of <rba4g-1> covers band
1 to band 32.
“1“ LTE 2100 (B1)
“2“ LTE 1900 (B2)
“4“ LTE 1800 (B3)
“8“ LTE 1700 (B4)
“10“ LTE 850 (B5)
“40“ LTE 2600 (B7)
“80“ LTE 900 (B8)
“800“ LTE 700 (B12)
“1000“ LTE 700 (B13)
“20000“ LTE 850 (B18)
“40000“ LTE 800 (B19)
“80000“ LTE 800 (B20)
“2000000“ LTE 850 (B26)
“8000000“ LTE 700 (B28)
Factory default of <rba4g-1> is the combination of all available bands meaning that all supported bands are
allowed. If AT+COPS equals "0" (automatic mode) this solution allows the subscriber to take advantage of a full-
featured automatic network selection when trying to register.
Therefore, changes to the band configuration are recommended only if the subscriber wishes to restrict the
allowed bands to a specific band or band combination, in particular to speed up the network search, and thus,
to reduce the power consumption. In such case, <rba4g-1> may be one of the supported single values listed
below.
Any change of <rba4g-1> will take effect immediately and will also be effective after next UE restart. So,
<rba4g-1> is a parameter that may be used to read out the current band combination any time.
Additional parameter <rbe> is available for compatibility reasons and has no functional influence. This param-
eter is optional and does not need to be used. It could be omitted in the future.
Note: The AT^SCFG=? test command shows the minimum and maximum band values.
Switching off all 4G bands using AT^SCFG="Radio/Band/4G","0","0" is possible.
Switching off all bands returns an error. At least one remaining band must be activated.

<rba4g-2>(str)(NV)
<rba4g-2> determines 4G frequency bands the UE is allowed to use. Values are given in hexadecimal bit-
value order. Every bit corresponds to a dedicated band number. Leading zeros and 0x... are not necessary. The
number range of <rba4g-2> covers band 33 to max possible band. If the UE does not support bands higher
than 32 the AT^SCFG test command returns the value range 0 - 0, and the AT^SCFG read command response
does not display <rba4g-2>.
“20“ LTE 2600 (B38)
“80“ LTE 2350 (B40)
“100“ LTE 2550 (B41)
“200000000“ LTE 1745 (B66)
Factory default of <rba4g-2> is the combination of all available bands meaning that all supported bands are
allowed. If AT+COPS equals "0" (automatic mode) this solution allows the subscriber to take advantage of a full-
featured automatic network selection when trying to register.
Therefore, changes to the band configuration are recommended only if the subscriber wishes to restrict the
allowed bands to a specific band or band combination, in particular to speed up the network search, and thus,
to reduce the power consumption. In such case, <rba4g-2> may be one of the supported single values listed
below.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 68 of 564
2.12 AT^SCFG

Any change of <rba4g-2> will take effect immediately and will also be effective after next UE restart. So,
<rba4g-2> is a parameter that may be used to read out the current band combination any time.
Additional parameter <rbe> is available for compatibility reasons and has no functional influence. This param-
eter is optional and does not need to be used. It could be omitted in the future.
Note: The AT^SCFG=? test command shows the minimum and maximum band values.
Switching off all 4G bands using AT^SCFG="Radio/Band/4G","0","0" is possible.
Switching off all bands returns an error. At least one remaining band must be activated.
Note: When using the parameter <rba4g-2> at least also parameter <rba4g-1> must be used.

<rbe>(str)
Radio Band Enable: Set radio bands immediately active
The additional <rbe> parameter is available for compatibility reasons and has no functional influence. This
parameter is optional and does not need to be used. It could be omitted in the future.
“0“ takes no effect.
“1“ takes no effect.
Note: When using the parameter <rbe>, at least also parameter <rba2g>, <rba3g>, or <rba4g-1> must be
used.

<PL_mode>(str)
Power Limitation Mode
AT^SCFG subcommand "Radio/Mtpl/..." can be used to instantly adapt the module's Specific Absorption Rate
(SAR) by reducing its output power for specific or all bands in any operating mode. 8 profiles for instant RF out-
put power limitation can be defined and stored to the NV memory.
<PL_mode> 0 and 1 (deactivate / activate) are applicable only with "Radio/Mtpl".
Modes 2 and 3 (query / configure) are applicable only with specific subcommands.
- for GSM use "Radio/Mtpl/2G".
- for WCDMA use "Radio/Mtpl/3G".
- for LTE use "Radio/Mtpl/4G".
A profile contains all supported bands
- for GSM see <PL_band2g>,
- for WCDMA see <PL_band3g>,
- for LTE see <PL_band4g-1> and <PL_band4g-2>
and, for each single band, a parameter limiting the maximum RF output power
- for GSM see <PL_limit2g>,
- for WCDMA see <PL_limit3g>,
- for LTE see <PL_limit4g>.
For GSM, a second parameter, <PL_limit_psk>, is required to set the RF output power limit for GSM 8 PSK.
The RF output power limit for a GSM band is related to one transmit timeslot. If two/three/four timeslots are used
for transmission the specified power limit is reduced by another 3 / 4.8 / 6 dB.
Changing limit values of a profile with <PL_mode> 3 takes effect after UE restart only. Activating and deactivat-
ing power limitation with <PL_mode> 1 or 0, takes effect instantly. The <PL_mode> is volatile, therefore output
power limitaton is deactivated after UE restart.
For an example on how to configure and trigger instant power limitation see below Example section.

Bands WCDMA 850 (BC5) and WCDMA 800 (BC6) are changed in combination.
Bands WCDMA 1800 (BC3) and WCDMA 1700 AWS (BC4) are changed in combination.
“0“(P) Power limitation deactivated (no further parameters are possible).
“1“ Power limitation activated.
<PL_profile> parameter is mandatory for activation.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 69 of 564
2.12 AT^SCFG

“2“ Query profile settings.

The response shows the currently used limit values if instant power limitation
is active, i.e. if <PL_mode>= 1. Therefore, bear in mind that modified profile
values will be visible only if you restart the UE and run a query before activating
instant power limitation.
You can read either all profiles, or a specific profile by adding a
<PL_profile> number.
“3“ Configure profile. All parameters are mandatory. Remember to restart the UE
after changing the output power limits of a profile.

<PL_profile>(str)
Power Limitation Profile
This parameter identifies a profile.
When no profile is activated <PL_mode> "0" is returned and if any profile is activated <PL_mode> "1" and
<PL_profile> "1" ... "8" is returned in read command.
"1"..."8" Number of profile.

<PL_band2g>(str)
Radio Band 2G
Parameter specifies the 2G frequency bands of the UE in hexadecimal 32-bit-value order. Every bit corresponds
to a dedicated band number.
“1“ GSM 900
“2“ GSM 1800
“4“ GSM 850
“8“ GSM 1900

<PL_band3g>(str)
Radio Band 3G
Parameter specifies the 3G frequency bands of the UE in hexadecimal 32-bit-value order. Every bit corresponds
to a dedicated band number.
“1“ WCDMA 2100 (BC1)
“2“ WCDMA 1900 (BC2)
“4“ WCDMA 1800 (BC3)
“8“ WCDMA 1700 AWS (BC4)
“10“ WCDMA 850 (BC5)
“20“ WCDMA 800 (BC6)
“80“ WCDMA 900 (BC8)
“40000“ WCDMA 850 (BC19)

<PL_band4g-1>(str)
Radio Band 4G First Part
Parameter specifies the 4G frequency bands of the UE in hexadecimal 32-bit-value order. Every bit corresponds
to a dedicated band number. Value <PL_band4g-1> supports band 1 to band 32.
“0“ Must be used when setting any value for <PL_band4g-2> (parameter is man-
datory).
“1“ LTE 2100 (B1)
“2“ LTE 1900 (B2)
“4“ LTE 1800 (B3)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 70 of 564
2.12 AT^SCFG

“8“ LTE 1700 (B4)

“10“ LTE 850 (B5). (B6) is a true sub-band of (B5) with same uarfcn. (B5) and (B6)
always switched simultaneous.
“40“ LTE 2600 (B7)
“80“ LTE 900 (B8)
“800“ LTE 700 (B12)
“1000“ LTE 700 (B13)
“20000“ LTE 850 (B18)
“40000“ LTE 800 (B19)
“80000“ LTE 800 (B20)
“2000000“ LTE 850 (B26)
“8000000“ LTE 700 (B28)

<PL_band4g-2>(str)
Radio Band 4G Second Part
Parameter specifies the 4G frequency bands of the UE in hexadecimal bit-value order. Every bit corresponds to
a dedicated band number. <PL_band4g-2> specifies band 33 to band 85 (if supported by UE).
“0“ Must be used when setting any value for <PL_band4g-1> (parameter is man-
datory).
“20“ LTE 2600 (B38)
“80“ LTE 2350 (B40)
“100“ LTE 2550 (B41)
“200000000“ LTE 1745 (B66)

<PL_limit2g>(str)(NV)
Power Limitation 2G
This parameter is used to set the power limit.
Setting takes effect after next restart.
"18"..."33" Power limit value in dBm for GSM low bands.
"18"..."30" Power limit value in dBm for GSM high bands.

<PL_limit3g>(str)(NV)
Power Limitation 3G
This parameter is used to set the power limit.
Setting takes effect after next restart.
"18"..."24" Power limit value in dBm for WCDMA bands.

<PL_limit4g>(str)(NV)
Power Limitation 4G
This parameter is used to set the power limit.
Setting takes effect after next restart.
"18"..."23" Power limit value in dBm for LTE bands.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 71 of 564
2.12 AT^SCFG

<PL_limit_psk>(str)(NV)
Power Limitation 8 PSK (only for GSM)
This parameter is used to set the power limit 8 PSK.
Setting takes effect after next restart.
"18"..."27" Power limit value in dBm only for GSM 8 PSK low bands.
"18"..."26" Power limit value in dBm only for GSM 8 PSK high bands.

<ropr>(str)(NV)
Radio Output Power Reduction
According to 3GPP TS 45.005, it is permissible to reduce the the maximum (E)GPRS output power. The amount
of the maximum (E)GPRS power reduction is configurable for the case of 4TX.
Setting takes effect after next restart.
“4“ No power reduction with GMSK and 8PSK.
“5“ 2 dB power reduction with GMSK (with 4 Tx), no power reduction for 8PSK.
“6“ 4 dB power reduction with GMSK (with 4 Tx), no power reduction for 8PSK.
“7“ 6 dB power reduction with GMSK (with 4 Tx), no power reduction for 8PSK.
(D)
“8“ Max. power reduction for GMSK and 8PSK (6dB for 4 Tx).

<RemWakePortSet>(str)(NV)
Set of ports signaling Remote Wakeup Events
The <RemWakePortSet> parameter specifies whether the "RemoteWakeUp/Ports" configuration set with
<RemWakePort> is volatile or non-volatile.
“current“ The currently used configuration (volatile).
“powerup“ The configuration used after powerup or restart (non-volatile).

<RemWakePort>(str)
Port
Only ports listed with <RemWakePort> try to wake up the TE.
For those ports which are configured in <RemWakePort>, the module shall maintain an active data connection
even if VUSB is switched off or during USB reset/re-enumeration. For those not selected by this AT command,
the module shall drop data connection when VUSB is switched off, reset or re-enumerated. Specify behavior if
downlink data cannot be delivered to the application due to delayed interface startup.
“acm0“(D) Refers to USB0, AT^SQPORT <id> 1
(D)
“acm1“ Refers to USB1, AT^SQPORT <id> 2
(D)
“acm2“ Refers to USB2, AT^SQPORT <id> 3
(D)
“acm3“ Refers to USB3, AT^SQPORT <id> 4
(D)
“rmnet“ Refers to RMNET

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 72 of 564
2.12 AT^SCFG

<sslot>(str)(+CSCS)(NV)
USIM switch
This parameter determines which network/subscription to use.
In case a user decides to switch the active subscription the currently active card is logically removed, and pow-
ered down. After that the second USIM is connected physically and logically and powered up. Changing the
active USIM causes the UE to register to a network with prior derigistration.
For detailed information please refer to AN87 "Smart Network Switching".
“SIM1“(D) First USIM slot enabled. Always active when USIM Dual Mode is disabled
(<sdm>=0)
“SIM3“ Second USIM slot enabled.

<sdm>(str)(+CSCS)(NV)
USIM Dual Mode
This parameter enables / disables USIM Dual Mode.
If USIM Dual Mode is enabled the UE is capable of quickly switching between two networks/subscriptions using
the subcommand AT^SCFG="SIM/CS",<sslot>.
Two USIMs can be connected to the UE
Each subscription has its own USIM card. It is possible to connect USIM cards with different voltage classes and
different connection speeds.
At any given moment only one of the subscriptions is active, i.e. any MO request to the network is done in the
account assigned to the currently active USIM card.
For detailed information please refer to AN87 "Smart Network Switching" .
“0“(D) USIM Dual Mode disabled.
“2“ USIM Dual Mode enabled, using the module's first and second physical SIM
interface.

<SmsRetrmTimeout>(num)(NV)
SMS retransmission timeout in seconds. If the UE fails to send an MO short message, a new attempt of re-trans-
mitting it will be done after <SmsRetrmTimeout>. The total period during which the UE tries to send a short
message is 180 seconds - after this time an attempt to send the message is dropped. Default value is dependent
of the provider configuration.
1...45

<tcpirt>(str)(NV)
Initial Retransmission Timeout
"0"..."60" Parameter controls the initial retransmission timeout used by TCP on each new
connection. Special care must be taken when selecting the value because set-
ting large value will dramatically increase the amount of time that it takes for a
TCP connection attempt to fail, if target IP address does not exist. Default value
is set to 3 seconds.

<tcpWithUrc>(str)(NV)
URC mode or polling mode for Internet service commands
This parameter enables or disables the presentation of the following URCs related to Internet service com-
mands: "^SISR" URC, "^SISW" URC and "^SIS" URC for parameter <urcCause>=0 (Internet service events).
"^SIS" URCs with <urcCause>=1 or 2 used to indicate incoming Socket connections are always enabled.
“on“(D) Enable URCs related to Internet service commands.
Throughout the Chapter "Internet Service AT Commands" the mode is also
referred to as URC mode.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 73 of 564
2.12 AT^SCFG

“off“ Disable URCs related to Internet service commands.

This requires the TE to employ polling techniques when using the Internet ser-
vice AT commands: The TE is responsible to retrieve all status information
needed to control an Internet session. The method is referred to as polling
mode.

<TLS_min_version>(str)(NV)
Minimum TLS Version allowed
This parameter sets the accepted minimum TLS version for IPoverAT services.
“MIN“ Automatic minimum
“1.1“ TLSv1.1 (DTLSv1.0)
(D)
“1.2“ TLSv1.2
“1.3“ TLSv1.3 (DTLSv1.2)
“MAX“ Automatic maximum

<TLS_max_version>(str)(NV)
Maximum TLS version allowed
This parameter sets the accepted maximum TLS version for IPoverAT services. Must be equal or greater than
<TLS_min_version>.
“1.2“ TLSv1.2
“1.3“ TLSv1.3 (DTLSv1.2)
(D)
“MAX“ Automatic maximum

<usbDeviceDescr>(str)(NV)
Device Descriptor
Parameter determines whether to use the UE's standard USB Device Descriptor configuration (default) or a
Device Descriptor configuration customized by the Customer Application manufacturer.
Setting takes effect after next restart.
“0“(D) Standard USB Device Descriptor of the UE.
If <usbDeviceDescr>=0 is set all other parameters related to "Serial/USB/
DDD" cannot be changed.
“1“ Customer specific USB Device Descriptor.
If <usbDeviceDescr>=1 is set all other parameters related to "Serial/USB/
DDD" can be changed.
Customizing the USB Device Descriptor configuration requires a unique Ven-
dor ID obtained from the USB Implementers Forum. For information please
refer to http://www.usb.org.

<usbDescrIndex>(str)(NV)
Descriptor Index
“0“(D) Not to be changed. Use always 0.

<usbLangId>(str)(NV)
Language ID
Language ID as defined by USB.ORG [59]. Parameter shall be given in HEX format, maximum 4 characters,
and cannot be set to 0. PLS63-W supports only language ID "0409" (English) which cannot be changed.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 74 of 564
2.12 AT^SCFG

<usbVendorId>(str)(NV)
Vendor ID
This parameter represents the Vendor ID obtained from the USB Implementers Forum. The Vendor ID will,
together with the Product ID, be transmitted to the host during USB enumeration.
Parameter shall be given in HEX format, maximum 4 characters. It can be changed only if <usbDeviceDescr>
equals 1.
Setting takes effect after next USB interface enumeration.

<usbProductId>(str)(NV)
Product ID
Product ID (PID) defined by the Customer Application manufacturer to identify the USB device.
The Product ID will, together with the Vendor ID, be transmitted to the host during USB enumeration.
Parameter shall be given in HEX format, maximum 4 characters. It can be changed only if <usbDeviceDescr>
equals 1.
Setting takes effect after next USB interface enumeration.

<usbManufacturer>(str)(NV)
Manufacturer name
Optional manufacturer string defined by the Customer Application manufacturer.
Parameter length: maximum 63 characters. It can be changed only if <usbDeviceDescr> equals 1.
Setting takes effect after next USB interface enumeration.

<usbProduct>(str)(NV)
Product string
Optional product name defined by the Customer Application manufacturer.

Parameter length: maximum 63 characters. It can be changed only if <usbDeviceDescr> equals 1.

Setting takes effect after next USB interface enumeration.

<usbSerialNo>(str)(NV)
Device's serial number
Optional serial number. Empty string if not used, like in the case of the UE'S standard USB Device Descriptor
configuration.
A serial number enables the host to assign the same virtual COM port to the USB device even though the device
is connected to another USB port. This eliminates the need for the host to load the driver again.
Parameter length: maximum 6 characters. It can be changed only if <usbDeviceDescr> equals 1.
Setting takes effect after next USB interface enumeration.

<urcRinglineCfg>(str)(NV)
Parameter specifies the ring line to be used for signaling URCs both for idle interface and while interface is
reserved, i.e. while busy on AT command execution or data transmission. See also parameter <ringline-
Sig>.
For details about URC presentation and related hardware signalization refer to Section 1.8, Unsolicited
Result Code Presentation. For details on using the RING0 line line to wake up the TE refer to "PLS63-W
Hardware Interface Description, Version 01.002".
“off“ URCs do not activate a ring line.
(D)
“local“ Ring line will be activated on the same device where the URC appears: This is
the RING0 line (active low) if the URC appears on ASC0 device and a virtual
ring line if the URC appears on a USB related device.
“asc0“ RING0 line will be activated (low active) when an URC is sent on the current
AT command port.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 75 of 564
2.12 AT^SCFG

<urcRinglineDuration>(str)(NV)
Parameter determines how long the ring line shall be activated for URC signalization. The type of ring line
depends on parameter <urcRinglineCfg>.
For details about URC presentation and related hardware signalization refer to Section 1.8, Unsolicited
Result Code Presentation.
“0“ Ring line will be activated for 7ms
“1“ Ring line will be activated for about 100ms.
(D)
“2“ Ring line will be activated for about 1s.

<urcRinglineFilter>(str)(NV)
Parameter determines the types of URCs allowed to toggle the Ring line in the way specified with parameter
<urcRinglineCfg> of the AT^SCFG subcommand "URC/Ringline". It is possible to set a single <urcRing-
lineFilter> value, or a combination, such as AT^SCFG="URC/Ringline/SelWUrc","RING","+CMT".
“all“(D) All types of URCs are allowed to toggle the Ring line.
“RING“ Only call related URCs are allowed to toggle the Ring line.
“+CMT“ Only SMS related URCs are allowed to toggle the Ring line.

<mode>(str)
This parameter configure execution conditions for SAT proactive command refresh.
“0“(P) SAT Refresh always executed
“2“ SAT Refresh always rejected

Examples
EXAMPLE 1
The example shows how to activate or deactivate output power limitation using the AT^SCFG "Radio/Mtpl"
command.
See parameters <PL_mode> and <PL_profile>.
^SYSSTART
AT^SCFG="Radio/Mtpl" Read "Radio/Mtpl" mode.
^SCFG: "Radio/Mtpl","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl",1,1 Activate Profile 1.
^SCFG: "Radio/Mtpl","1","1" Instant power limitation is now enabled with profile 1.
OK
AT^SCFG="Radio/Mtpl",1,2 Switch profiles, and activate profile 2.
^SCFG: "Radio/Mtpl","1","2" Instant power limitation is now enabled with profile 2,
still using delivery default values.
OK
AT^SCFG="Radio/Mtpl",0 Deactivate instant power limitation.
^SCFG: "Radio/Mtpl","0" Instant power limitation is now disabled.
OK
EXAMPLE 2
The example shows how to query or configure output power limitation using the AT^SCFG "Radio/Mtpl/2G"
subcommand.
See parameters <PL_mode>, <PL_profile>, <PL_band2g>, <PL_limit2g>, <PL_limit_psk>.
^SYSSTART
AT^SCFG="Radio/Mtpl/2G" Read "Radio/Mtpl/2G" mode.
^SCFG: "Radio/Mtpl/2G","0" Instant power limitation is still disabled.
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 76 of 564
2.12 AT^SCFG

AT^SCFG="Radio/Mtpl/2G",2,1 Query profile 1 settings. Delivery default settings are

shown:
^SCFG: "Radio/Mtpl/2G","2","1","00000001",,"33","27"
^SCFG: "Radio/Mtpl/2G","2","1","00000002",,"30","26"
^SCFG: "Radio/Mtpl/2G","2","1","00000004",,"33","27"
^SCFG: "Radio/Mtpl/2G","2","1","00000008",,"30","26"
OK
AT^SCFG="Radio/Mtpl/2G",3,1,1,,25,20 Profile 1: Configure max. RF output power limit of
GSM 900 band to 25dBm and 8PSK to 20dBm.
^SCFG: "Radio/Mtpl/2G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/2G",3,1,2,,25,20 Profile 1: Configure max. RF output power limit of
GSM 1800 band to 25dBm and 8PSK to 20dBm.
^SCFG: "Radio/Mtpl/2G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/2G",3,1,4,,25,20 Profile 1: Configure max. RF output power limit of
GSM 850 band to 25dBm and 8PSK to 20dBm.
^SCFG: "Radio/Mtpl/2G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/2G",3,1,8,,25,20 Profile 1: Configure max. RF output power limit of
GSM 1900 band to 25dBm and 8PSK to 20dBm.
^SCFG: "Radio/Mtpl/2G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/2G",2,1 Query profile 1 settings.
...... The response returns the old values as above (there-
fore omitted in this example).
AT+CFUN=1,1 Restart UE to enable the profile 1 settings configured
above.
OK
^SYSSTART
AT^SCFG="Radio/Mtpl" Read "Radio/Mtpl" mode.
^SCFG: "Radio/Mtpl","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/2G",2,1 Query profile 1 settings. Changed values are shown
now.
^SCFG: "Radio/Mtpl/2G","2","1","00000001",,"25","20"
^SCFG: "Radio/Mtpl/2G","2","1","00000002",,"25","20"
^SCFG: "Radio/Mtpl/2G","2","1","00000004",,"25","20"
^SCFG: "Radio/Mtpl/2G","2","1","00000008",,"25","20"
OK
AT^SCFG="Radio/Mtpl",1,1 Activate Profile 1.
^SCFG: "Radio/Mtpl","1","1" Instant power limitation is now enabled with profile 1
and new limits as changed above.
OK
AT^SCFG="Radio/Mtpl",1,2 Switch profiles, and activate profile 2.
^SCFG: "Radio/Mtpl","1","2" Instant power limitation is now enabled with profile 2,
still using delivery default values.
OK
AT^SCFG="Radio/Mtpl",0 Deactivate instant power limitation.
^SCFG: "Radio/Mtpl","0" Instant power limitation is now disabled.
OK
EXAMPLE 3
The example shows how to query or configure output power limitation using the AT^SCFG "Radio/Mtpl/3G"
subcommand.
See parameters <PL_mode>, <PL_profile>, <PL_band3g>, <PL_limit3g>.
^SYSSTART
AT^SCFG="Radio/Mtpl/3G" Read "Radio/Mtpl/3G" mode.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 77 of 564
2.12 AT^SCFG

^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.

OK
AT^SCFG="Radio/Mtpl/3G",2,1 Query profile 1 settings. Delivery default settings are
shown:
^SCFG: "Radio/Mtpl/3G","2","1","00000001",,"24"
^SCFG: "Radio/Mtpl/3G","2","1","00000002",,"24"
^SCFG: "Radio/Mtpl/3G","2","1","00000004",,"24"
^SCFG: "Radio/Mtpl/3G","2","1","00000008",,"24"
^SCFG: "Radio/Mtpl/3G","2","1","00000010",,"24"
^SCFG: "Radio/Mtpl/3G","2","1","00000020",,"24"
^SCFG: "Radio/Mtpl/3G","2","1","00000080",,"24"
^SCFG: "Radio/Mtpl/3G","2","1","00040000",,"24"
OK
AT^SCFG="Radio/Mtpl/3G",3,1,1,,23 Profile 1: Configure max. RF output power limit of
WCDMA 2100 (BC1) band to 23dBm.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",3,1,2,,23 Profile 1: Configure max. RF output power limit of
WCDMA 1900 (BC2) band to 23dBm.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",3,1,4,,23 Profile 1: Configure max. RF output power limit of
WCDMA 1800 (BC3) band to 23dBm.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",3,1,8,,23 Profile 1: Configure max. RF output power limit of
WCDMA 1700 AWS (BC4) band to 23dBm.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",3,1,10,,23 Profile 1: Configure max. RF output power limit of
WCDMA 850 (BC5) band to 23dBm.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",3,1,20,,23 Profile 1: Configure max. RF output power limit of
WCDMA 800 (BC6) band to 23dBm.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",3,1,80,,23 Profile 1: Configure max. RF output power limit of
WCDMA 900 (BC8) band to 23dBm.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",3,1,40000,,23 Profile 1: Configure max. RF output power limit of
WCDMA 850 (BC19) band to 23dBm.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",2,1 Configure profile 1 settings.
...... The response returns the old values as above (there-
fore omitted in this example).
AT+CFUN=1,1 Restart UE to enable the profile 1 settings configured
above.
OK
^SYSSTART
AT^SCFG="Radio/Mtpl/3G" Read "Radio/Mtpl/3G" mode.
^SCFG: "Radio/Mtpl/3G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/3G",2,1 Configure profile 1 settings. Changed values are
shown now.
^SCFG: "Radio/Mtpl/3G","2","1","00000001",,"23"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 78 of 564
2.12 AT^SCFG

^SCFG: "Radio/Mtpl/3G","2","1","00000002",,"23"
^SCFG: "Radio/Mtpl/3G","2","1","00000004",,"23"
^SCFG: "Radio/Mtpl/3G","2","1","00000008",,"23"
^SCFG: "Radio/Mtpl/3G","2","1","00000010",,"23"
^SCFG: "Radio/Mtpl/3G","2","1","00000020",,"23"
^SCFG: "Radio/Mtpl/3G","2","1","00000080",,"23"
^SCFG: "Radio/Mtpl/3G","2","1","00040000",,"23"
OK
AT^SCFG="Radio/Mtpl",1,1 Activate Profile 1.
^SCFG: "Radio/Mtpl","1","1" Instant power limitation is now enabled with profile 1
and new limits as changed above.
OK
AT^SCFG="Radio/Mtpl",1,2 Switch profiles, and activate profile 2.
^SCFG: "Radio/Mtpl","1","2" Instant power limitation is now enabled with profile 2,
still using delivery default values.
OK
AT^SCFG="Radio/Mtpl",0 Deactivate instant power limitation.
^SCFG: "Radio/Mtpl","0" Instant power limitation is now disabled.
OK
EXAMPLE 4
The example shows how to query or configure output power limitation using the AT^SCFG "Radio/Mtpl/4G"
subcommand.
See parameters <PL_mode>, <PL_profile>, <PL_band4g-1>, <PL_band4g-2>, <PL_limit4g>.
^SYSSTART
AT^SCFG="Radio/Mtpl/4G" Read "Radio/Mtpl/4G" mode.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",2,1 Query profile 1 settings. Delivery default settings are
shown:
^SCFG: "Radio/Mtpl/4G","2","1","00000001","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000002","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000004","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000008","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000010","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000040","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000080","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000800","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00001000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00020000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00040000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00080000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","02000000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","08000000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000000","00000020","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000000","00000080","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000000","00000100","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000000","200000000","23"
OK
AT^SCFG="Radio/Mtpl/4G",3,1,1,0,23 Profile 1: Configure max. RF output power limit of
LTE B1 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,2,0,23 Profile 1: Configure max. RF output power limit of
LTE B2 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 79 of 564
2.12 AT^SCFG

AT^SCFG="Radio/Mtpl/4G",3,1,4,0,23 Profile 1: Configure max. RF output power limit of

LTE B3 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,8,0,23 Profile 1: Configure max. RF output power limit of
LTE B4 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,10,0,23 Profile 1: Configure max. RF output power limit of
LTE B5 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,40,0,23 Profile 1: Configure max. RF output power limit of
LTE B7 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,80,0,23 Profile 1: Configure max. RF output power limit of
LTE B8 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,800,0,23 Profile 1: Configure max. RF output power limit of
LTE B12 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,1000,0,23 Profile 1: Configure max. RF output power limit of
LTE B13 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,20000,0,23 Profile 1: Configure max. RF output power limit of
LTE B18 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,40000,0,23 Profile 1: Configure max. RF output power limit of
LTE B19 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,80000,0,23 Profile 1: Configure max. RF output power limit of
LTE B20 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,2000000,0,23 Profile 1: Configure max. RF output power limit of
LTE B26 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,8000000,0,23 Profile 1: Configure max. RF output power limit of
LTE B28 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,0,20,23 Profile 1: Configure max. RF output power limit of
LTE B38 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,0,80,23 Profile 1: Configure max. RF output power limit of
LTE B40 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",3,1,0,100,23 Profile 1: Configure max. RF output power limit of
LTE B41 band to 23dBm.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 80 of 564
2.12 AT^SCFG

^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.

OK
AT^SCFG="Radio/Mtpl/ Profile 1: Configure max. RF output power limit of
4G",3,1,0,200000000,23 LTE B66 band to 23dBm.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",2,1 Read profile 1 settings.
...... The response returns the old values as above (there-
fore omitted in this example).
AT+CFUN=1,1 Restart UE to enable the profile 1 settings configured
above.
OK
^SYSSTART
AT^SCFG="Radio/Mtpl/4G" Read "Radio/Mtpl/4G" mode.
^SCFG: "Radio/Mtpl/4G","0" Instant power limitation is still disabled.
OK
AT^SCFG="Radio/Mtpl/4G",2,1 Read profile 1 settings. Changed values are shown
now.
^SCFG: "Radio/Mtpl/4G","2","1","00000001","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000002","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000004","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000008","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000010","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000040","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000080","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000800","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00001000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00020000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00040000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00080000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","02000000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","08000000","00000000","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000000","00000020","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000000","00000080","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000000","00000100","23"
^SCFG: "Radio/Mtpl/4G","2","1","00000000","200000000","23"
OK
AT^SCFG="Radio/Mtpl",1,1 Activate Profile 1.
^SCFG: "Radio/Mtpl","1","1" Instant power limitation is now enabled with profile 1
and new limits as changed above.
OK
AT^SCFG="Radio/Mtpl",1,2 Switch profiles, and activate profile 2.
^SCFG: "Radio/Mtpl","1","2" Instant power limitation is now enabled with profile 2,
still using delivery default values.
OK
AT^SCFG="Radio/Mtpl",0 Deactivate instant power limitation.
^SCFG: "Radio/Mtpl","0" Instant power limitation is now disabled.
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 81 of 564
2.13 AT^SSRVSET

2.13 AT^SSRVSET Service Set for USB

The UE comes with numerous interfaces, such as USB, ASC0, ASC1. The USB interface enumerates as multi-
channel device comprising CDC Serial devices and CDC ECM/NCM devices.
By default the devices USB4 enumerates as ECM. As an alternative, you can configure CDC4 (USB4) to enu-
merate as specific WWAN devices (RmNet Model).
Each model employs a specific USB configuration with own Product IDs (PIDs). Therefore, changing the <Set-
Num> value of AT^SSRVSET takes effect after UE restart, and causes the USB controller to reassign all USB
ports.
When you enable either model the very first time with AT^SSRVSET you are required to install the USB drivers
separately for each USB composition.

Syntax
Test Command

AT^SSRVSET=?
Response(s)
OK
Write Command

Determine or query the configuration during next UE restart.

AT^SSRVSET="actSrvSet"[, <SetNum>]
Response(s)
^SSRVSET:<SetNum>
OK
ERROR
PIN  Last
- + -

Parameter Description

<SetNum>(num)(NV)
USB Service Set Number
1(D) CDC4 (USB4) enumerates as ECM devices. All USB devices of the UE enu-
merate with PID 0x0069.
11 CDC4 (USB4) enumerates as specific WWAN device. All USB devices of the
UE enumerate with PID 0x006F.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 82 of 564
2.14 AT^SPOW

2.14 AT^SPOW Set UART Mode and SLEEP Mode on UART

AT^SPOW enables or disables the UE's UART interfaces ASC0 and ASC1 and controls SLEEP mode on both
interfaces. Parameter settings are non-volatile and common for all interfaces but are not effective for USB.

If SLEEP mode is enabled on ASC0 and ASC1, keep in mind that the module's current consumption decreases
only if USB is either disconnected at all, or in Suspend state with VUSB_IN line enabled.
Please refer to "PLS63-W Hardware Interface Description, Version 01.002" for more information on power sav-
ing.

Syntax
Test Command

AT^SPOW=?
Response(s)
^SPOW: (list of supported <mode>s), (time range of <timeout>), (time range of <awake>)
OK
ERROR
+CME ERROR: <err>
Read Command

AT^SPOW?
Response(s)
^SPOW: <mode>, <timeout>, (time range of <awake>)
OK
ERROR
+CME ERROR: <err>
Write Command
AT^SPOW=<mode>, <timeout>, (time range of <awake>)
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<mode>(num)(NV)
0 UART interfaces ASC0 and ASC1 are deactivated to reduce power consump-
tion. They can be activated again by changing <mode> from from the USB
interface.
1(P) UART interfaces ASC0 and ASC1 are activated.
2 UART interfaces ASC0 and ASC1 are in a power saving mode, i.e., in SLEEP
mode.

<timeout>(num)(NV)
0(D) Value 0 applies only to <mode>= 0 or 1. Note that the AT^SPOW? read com-
mand response value of <awake> is always equal 0 when power saving is off.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 83 of 564
2.14 AT^SPOW

3...65535 In SLEEP mode (<mode>=2), time in milliseconds the UE remains awake after
the last sent character.
Minimum value: 3 ms, recommended 1000 ms. <timeout> values below 3
are denied with ERROR.
<timeout> value cannot be lower than <awake> value. If <timeout> is set
to lower value than <awake> it will be automatically set to be equal <awake>.

<awake>(num)(NV)
0(D) Value 0 applies only to <mode>=0 or 1. Note that the AT^SPOW? read com-
mand response value of <awake> is always equal 0 when power saving is off.
3...255 In SLEEP mode (<mode>=2), active period of CTS0/CTS1 in milliseconds
when UE is listening to paging messages from the base station and the AT
command interface is enabled.
Minimum and recommended value: 3 ms. Lower <awake> values are denied
with ERROR. Setting a higher value is recommended only when the TE flow
control is too slow.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 84 of 564
2.15 AT+GCAP

2.15 AT+GCAP Capabilities List

AT+GCAP displays a list of basic capabilities supported by the PLS63-W. This allows the TE to determine which
groups of extended-syntax AT commands can be used with the UE.

Syntax
Test Command
AT+GCAP=?
Response(s)
OK
Exec Command
AT+GCAP
Response(s)
+GCAP: <name>
OK
PIN  Last Reference(s)

+ + - ITU-T V.250 [18]

Parameter Description

<name>(str)
e.g. +GCAP: +CGSM

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 85 of 564
3. Status Control Commands

3. Status Control Commands

The AT Commands described in this chapter allow the external application to obtain various status information
from the PLS63-W.

3.1 AT+CEER Extended Error Report

AT+CEER returns an extended error report regarding the reason of the last
• call release
• failure to set up a call (both mobile originated or terminated)
• failure to modify a call by using Supplementary Services
• failed attempt to activate, register, query, deactivate or deregister a Supplementary Service
• unsuccessful PS attach or unsuccessful PDP context activation
• PS detach or PDP context deactivation
The release cause report <report> is a single line containing the cause information given by the network in
textual format.

Syntax
Test Command
AT+CEER=?
Response(s)
OK
ERROR
+CME ERROR: <err>
Exec Command
AT+CEER
Response(s)
+CEER: <report>
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CEER=<reset>
Response(s)
OK
ERROR
+CME ERROR
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

3GPP TS 24.008 [43]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 86 of 564
3.1 AT+CEER

Parameter Description

<report>(str)
release cause report
Reason for the last call release or call failure. See Section 3.1.1, List of status codes for extended error report.
Both CS and PS domain call types are reported. Cause data is captured from Call Manager events and cached
locally to later use by this command.

<reset>(num)
0 Reset the extended error report to initial value.

3.1.1 List of status codes for extended error report

CS internal cause
No cause information available (default)
Phone is offline
No service available
Network release, no reason given
Received incoming call
Client ended call
UIM not present
Access attempt already in progress
Access failure, unknown source
Concur service not supported by network
No response received from network
GPS call ended for user call
SMS call ended for user call
Data call ended for emergency call
Rejected during redirect or handoff
Lower-layer ended call
Call origination request failed
Client rejected incoming call
Client rejected setup indication
Network ended call
No funds available
No service available
Full service not available
Maximum packet calls exceeded
Video connection lost
Video protocol closed after setup
Video protocol setup failure
Internal error

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 87 of 564
3.1 AT+CEER

CS network cause
Unassigned/unallocated number
No route to destination
Channel unacceptable
Operator determined barring
Normal call clearing
User busy
No user responding
User alerting, no answer
Call rejected
Number changed
Non selected user clearing
Destination out of order
Invalid/incomplete number
Facility rejected
Response to status enquiry
Normal, unspecified
No circuit/channel available
Network out of order
Temporary failure
Switching equipment congestion
Access information discarded
Requested circuit/channel not available
Resources unavailable, unspecified
Quality of service unavailable
Requested facility not subscribed
Incoming calls barred within the CUG
Bearer capability not authorized
Bearer capability not available
Service/option not available
Bearer service not implemented
ACM >= ACM max
Requested facility not implemented
Only RDI bearer is available
Service/option not implemented
Invalid transaction identifier value
User not member of CUG
Incompatible destination
Invalid transit network selection
Recovery on timer expiry
Interworking, unspecified

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 88 of 564
3.1 AT+CEER

CS network reject
IMSI unknown in HLR
Illegal MS
IMSI unknown in VLR
IMEI not accepted
Illegal ME
GPRS services not allowed
GPRS and non GPRS services not allowed
MS identity cannot be derived
Implicitly detached
PLMN not allowed
Location area not allowed
Roaming not allowed
GPRS services not allowed in PLMN
No suitable cells in location area
MSC temporary not reachable
Network failure
MAC failure
Synch failure
Congestion
GSM authentication unacceptable
Service option not supported
Requested service option not subscribed
Service option temporary out of order
Not Authorized for this CSG
SMS provided via GPRS in this routing area
Call cannot be identified
No PDP context activated
Semantically incorrect message
Invalid mandatory information
Message type non-existent
Message type not compatible with state
Conditional IE error
Information element non-existent
Message not compatible with state
Protocol error, unspecified
RR release indication
RR random access failure
RRC release indication
RRC close session indication
RRC open session failure
Low level failure

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 89 of 564
3.1 AT+CEER

CS network reject
Low level failure no redial allowed
Invalid SIM
No service
Timer T3230 expired
No cell available
Wrong state
Access class blocked
Abort message received
Other cause
Timer T303 expired
No resources
Release pending
Invalid user data

PS internal cause
Invalid connection identifier
Invalid NSAPI
Invalid primary NSAPI
PDP establish timeout
Invalid field
SNDCP failure
RAB setup failure
No GPRS context
PDP activate timeout
PDP modify timeout
PDP inactive max timeout
PDP lowerlayer error
PDP duplicate
Access technology change
PDP unknown reason

PS network cause
LLC or SNDCP failure
Insufficient resources
Missing or unknown APN
Unknown PDP address or PDP type
User authentication failed
Activation rejected by GGSN
Activation rejected, unspecified
Service option not supported
Requested service option not subscribed
Service option temporary out of order

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 90 of 564
3.1 AT+CEER

PS network cause
NSAPI already used (not sent)
Regular deactivation
QoS not accepted
Network failure
Reactivation required
Feature not supported
Semantic error in the TFT operation
Syntactical error in the TFT operation
Unknown PDP context
PDP context without TFT already activated
Semantic errors in packet filter
Syntactical errors in packet filter
Invalid transaction identifier
Semantically incorrect message
Invalid mandatory information
Message non-existent/not implemented
Message type not compatible with state
IE non-existent/not implemented
Conditional IE error
Message not compatible with state
Protocol error, unspecified

Other release cause

Call barred

PS LTE cause
Operator Determined Barring
Insufficient resources
Unknown or missing APN
Unknown PDN type
User authentication failed
Request rejected by Serving GW or PDN GW
Request rejected, unspecified
Service option not supported
Requested service option not subscribed
Service option temporarily out of order
PTI already in use
Regular deactivation
EPS QoS not accepted
Network failure
Reactivation required
Feature not supported

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 91 of 564
3.1 AT+CEER

PS LTE cause
Semantic error in the TFT operation
Syntactical error in the TFT operation
Invalid EPS bearer identity
Semantic errors in packet filter(s)
Syntactical errors in packet filter(s)
EPS bearer context without TFT already activated
PTI mismatch
Last PDN disconnection not allowed
PDN type IPV4 only allowed
PDN type IPV6 only allowed
Single address bearers only allowed
ESM information not received
PDN connection does not exist
Multiple PDN connection for given APN not allowed
Collision with network initiated request
Unsupported QCI value
Invalid PTI value
Symantically invalid message
Invalid mandatory information
Message type non-existent or not implemented
Message type not compatible with the protocol state
Information element non-existent or not implemented
Conditional IE error
Message not compatible with the protocol state
Protocol error, unspecified
APN restriction value incompatible with active EPS bearer context
No Failure

PS LTE local cause

IMSI unknown in HSS
Illegal UE
IMEI not accepted
Illegal ME
EPS services not allowed
EPS services and non-EPS services not allowed
UE identity cannot be derived by the network
Implicitly Detached
PLMN not allowed
Tracking area not allowed
Roaming not allowed in this tracking area
EPS services not allowed in this PLMN
No Suitable cells in tracking area

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 92 of 564
3.1 AT+CEER

PS LTE local cause

MSC temporarily not reachable
Network failure
CS Domain Not available
ESM failure
MAC failure
Synch failure
Congestion
UE security capabilities mismatch
Security mode rejected, unspecified
Not Authorized for this CSG
Non-EPS authentication unacceptable
CS fallback call EST not allowed
CS domain temporarily not allowed
No EPS bearer context activated
Unknown EPS bearer context
Semantically incorrect message
Invalid mandatory information
Message type non-existent or not implemented
Message type not compatible with the protocol state
Information element non-existent or not implemented
Conditional IE error
Message not compatible with the protocol state
Protocol error, unspecified
Released AT RRC
Signal Connection Released
EMM detached
EMM attach failed
EMM attach started
NAS service request failed
ESM activate dedicated bearer reactivater by network
Lower layer failure
ESM sync up with network
Network activater dedicated bearer with ID of deffered bearer
BAD OTA message
DS rejected the call
Context transferred due to IRAT
DS explicit deactivation
ESM MSGR failure
Local Cause not Available
Rejected due to connected state
Nas Service request failed, no throttle
EMM T3417 expired

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 93 of 564
3.1 AT+CEER

PS LTE local cause

EMM T3417 ext expired
Nas LRRC UL data CNF failure TXN
Nas LRRC UL data CNF failure HO
Nas LRRC UL data CNF failure CONN release
Nas LRRC UL data CNF failure RLF
Nas LRRC UL data CNF failure control Not CONN
NAS LRRC connection EST success
NAS LRRC connection EST failure
NAS LRRC connection EST failure, aborted
NAS LRRC connection EST failure, access barrer
NAS LRRC connection EST failure, CELL resel
NAS LRRC connection EST failure, config failure
NAS LRRC connection EST failure, timer expired
NAS LRRC connection EST failure, link failure
NAS LRRC connection EST failure, not camped
NAS LRRC connection EST failure, SI failure
NAS LRRC connection EST failure, CONN reject
NAS LRRC connection release normal
NAS LRRC connection release RLF
NAS LRRC connection release CRE failure
NAS LRRC connection release QOS during CRE
NAS LRRC connection release aborted
NAS LRRC connection release SIB read error
NAS LRRC connection release aborted IRAT Success
Nas Reject LRRC radio link failure
Nas service request failure, LTE network reject
Nas detach with reattach, LTE network detach
NAS detach without reattach, LTE network detach

PS LTE SIP cause

SIP End bad req wait invite
SIP End bad req wait reinvite
SIP End invalid remote URII
SIP End remote unsupp media type
SIP End peer not reachable
SIP End network no resp time out
SIP End network no resp hold fail
SIP End data connecxtion lost
SIP End upgrade downgrade rej
SIP End 403 forbidden
SIP End LTE hard fail
SIP End no network response

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 94 of 564
3.1 AT+CEER

PS LTE SIP cause

SIP End upgrade downgrade cancelled
SIP End upgrade downgrade failed
SIP End CC reject
SIP End 486 busy here
SIP End IRAT pending call
SIP End emergency only
SIP End BSR in progress
SIP End BSR complete GSM
SIP End BSR complete WCDMA
SIP End 200 answered elsewhere

SIP Release Causes

no reason
100 Trying
180 Ringing
181 Call Is Being Forwarded
182 Queued
183 Session Progress
182 Queued
183 Session Progress
200 OK
180 Ringing
300 Multiple Choices
301 Moved Permanently
302 Moved Temporarily
305 Use Proxy
380 Alternative Service
400 Bad Request
401 Unauthorized
402 Payment Required
403 Forbidden
404 Not Found
406 Not Acceptable
408 Request Timeout
410 Gone
413 Request Entity Too Large
414 Request-URI Too Large
415 Unsupported Media Type
416 Unsupported URI Scheme
420 Bad Extension
421 Extension Required
423 Interval Too Brief

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 95 of 564
3.1 AT+CEER

SIP Release Causes

480 Temporarily not available
481 Call Leg/Transaction Does Not Exist
482 Loop Detected
483 Too Many Hops
484 Address Incomplete
485 Ambiguous
486 Busy Here
487 Request Terminated
488 Not Acceptable Here
491 Request Pending
493 Undecipherable
500 Internal Server Error
501 Not Implemented
502 Bad Gateway
503 Service Unavailable
504 Server Time-out
505 SIP Version not supported
513 Message Too Large
600 Busy Everywhere
603 Decline
604 Does not exist anywhere
606 Not Acceptable

ITU Q.850 Release Cause

1 Unallocated number
2 No route to specified transit network
3 No route to destination
4 Send special information tone
5 Misdialled trunk prefix
6 Channel unacceptable
7 Call awarded and being delivered in an established channel
8 Preemption
9 Preemption - circuit reserved for reuse
14 QoR: ported number
16 Normal call clearing
17 User busy
18 No user responding
19 No answer from user
20 Subscriber absent
21 Call rejected
22 Number changed
23 Redirection to new destination

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 96 of 564
3.1 AT+CEER

ITU Q.850 Release Cause

24 Call rejected due to feature at the destination
25 Exchange routing error
26 Non-selected user clearing
27 Destination out of order
28 Invalid number format
29 Facility rejected
30 Response to STATUS ENQUIRY
31 Normal, unspecified
34 No circuit/channel available
38 Network out of order
40 Permanent frame mode connection operational
41 Temporary failure
42 Switching equipment congestion
43 Access information discarded
44 Requested circuit or channel not available
46 Precedence call blocked
47 Resource unavailable, unspecified
49 Quality of service not available
50 Requested facility not subscribed
53 Outgoing calls barred within CUG
54 Incoming calls barred within CUG
55 Bearer capability not authorized
58 Inconsistency in designated outgoing access information and subscriber class
62 Service or option not available, unspecified
63 Bearer capability not implemented
65 Channel type not implemented
69 Requested facility not implemented
70 Only restricted digital information bearer capability is available
79 Service or option not implemented, unspecified
81 Invalid call reference value
82 Identified channel does not exist
83 A suspended call exists, but this call identity does not
84 Call identity in use
85 No call suspended
86 Call having the requested call identity has been cleared
87 User not member of CUG
88 Incompatible destination
90 Non-existent CUG
91 Invalid transit network selection
95 Invalid message, unspecified
96 Mandatory information element is missing
97 Message type non-existent or not implemented

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 97 of 564
3.1 AT+CEER

ITU Q.850 Release Cause

98 Message not compatible with call state or message type non-existent or not implemented
99 Information element /parameter non existent or not implemented
100 Invalid information element contents
101 Message not compatible with call state
102 Recovery on timer expiry
103 Parameter non-existent or not implemented, passed on
110 Message with unrecognized parameter, discarded
111 Protocol error, unspecified
127 Interworking, unspecified

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 98 of 564
3.2 AT^SIND

3.2 AT^SIND Extended Indicator Control

AT^SIND controls the presentation of indicator event URCs. You can enable or disable URCs to be issued by
the PLS63-W each time the value of the related indicator changes, you can request the current status of all indi-
cators, and you can also query the status of a single indicator.

Syntax
Test Command

AT^SIND=?
Response(s)
^SIND: (<indDescr>, (list of supported <indValue>s))[, (<indDescr>, (list of supported
<indValue>s))[, ...]], (list of supported <mode>s)
OK
Read Command

AT^SIND?
Response(s)
^SIND: <indDescr>, <mode>[, <indValue>]
[^SIND: <indDescr>, <mode>[, <indValue>]]
...

In case of <indDescr>="eons"
^SIND: eons, <mode>, <indValue>, <eonsOperator>, <servProvider>, <servProviderType>

In case of <indDescr>="nitz"
^SIND: nitz, <mode>, <nitzUT>, <nitzTZ>[, <nitzDST>]

In case of <indDescr>="steerroam"
^SIND: steerroam, <mode>

In case of <indDescr>="lsta"
^SIND: lsta, <mode>, <lstaLevel>

In case of <indDescr>="ceer"
^SIND: ceer, <mode>, <ceerRelCauseGroup>1[, <ceerRelCauseGroup>2[, ...]]

In case of <indDescr>="dtmf"
^SIND: dtmf, <mode>, <dtmfSrc>

In case of <indDescr>="newsms"
^SIND: newsms, <mode>[, <newsmsact>, <newsmsmem>, <newsmsindex>]

In case of <indDescr>="is_cert"
^SIND: is_cert, <mode>[, <srvProfileId>, <issuer>, <serialNumber>, <subject>,
<signatureAlgorithm>, <thumbprintAlgorithm>, <thumbprint>]

In case of <indDescr>="orpco"
^SIND: orpco, <mode>

In case of <indDescr>="prov"
^SIND: prov, <mode>, <provMm>, <provCur>

OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 99 of 564
3.2 AT^SIND

Write Command

AT^SIND=<indDescr>, <mode>
Response(s)
^SIND: <indDescr>, <mode>[, <indValue>]

In case of: <indDescr>="eons" and <mode>=2

^SIND: eons, <mode>, <indValue>, <eonsOperator>, <servProvider>, <servProviderType>

In case of: <indDescr>="nitz" and <mode>=2

^SIND: nitz , <mode>, <nitzUT>, <nitzTZ>[, <nitzDST>]

In case of: <indDescr>="newsms" and <mode>=2

^SIND: newsms, <mode>[, <newsmsact>, <newsmsmem>, <newsmsindex>]

In case of: <indDescr>="orpco" and <mode>=2

^SIND: orpco, <mode>, <containerid>, <mccmnc>

In case of: <indDescr>="is_cert" and <mode>=1 or 2:

^SIND: is_cert, <mode>[, <srvProfileId>, <issuer>, <serialNumber>, <subject>,
<signatureAlgorithm>, <thumbprintAlgorithm>, <thumbprint>]
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SIND="lsta", <mode>[, <lstaLevel>]

Response(s)
^SIND: lsta, <mode>[, <lstaLevel>]
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SIND="ceer", <mode>[, <ceerRelCauseGroup>]

Response(s)
^SIND: ceer, <mode>, <ceerRelCauseGroup>1[, <ceerRelCauseGroup>2[, ...]]
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SIND="prov", <mode>
Response(s)
^SIND: prov, <mode>, <provMm>, <provCur>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SIND=dtmf, <mode>[, <dtmfSrc>]

Response(s)
^SIND: dtmf, <mode>, <dtmfSrc>
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 100 of 564
3.2 AT^SIND

PIN  Last
- + -

Unsolicited Result Codes

URC 1
Format of the standard indicator:
+CIEV: <indDescr>, <indValue>
Value of an indicator has changed.

URC 2
Format of the "simdata" indicator:
+CIEV: <indDescr>, <cmdType>, <commandDetails>[, <pathLen>, <fileNum>,
<fileList>[, <status>, <statAddInfo>]]
This URC is issued when the UE receives a USAT Proactive Command (PAC) from the (U)SIM Application,
e.g. indicating that the content of one or more Elementary Files has been changed.
Additionally, independent of Remote-USAT modes, a "+CIEV: "simdata"" URC is issued if REFRESH com-
mand processing fails. The reason may derived from <status> and <statAddInfo> values.
The UE holds a limited storage available to keep numerous "simdata" events received while AT^SIND setting
was not enabled or UE-TE link was reserved, e.g. in online data mode. In case of storage overflow a special
URC "+CIEV: simdata,1,254" will be issued.

URC 3
Format of the "eons" indicator:
+CIEV: <indDescr>, <indValue>, <eonsOperator>, <servProvider>,
<servProviderType>
One URC is issued for each new LAI (Location Area Information) broadcast by the network.

URC 4
Format of the "nitz" indicator:
+CIEV: <indDescr>, <nitzUT>, <nitzTZ>[, <nitzDST>]

URC 5
Format of the "steerroam" indicator:
+CIEV: <indDescr>

URC 6
Format of the "lsta" indicator:
In case <indValue> equals "0" or <indValue> equals "2".
+CIEV: <indDescr>, <indValue>, <lstaEdvs>, <lstaRssi>
The URC is issued for every radio link error. It provides the error downcounter value corresponding to number
of consecutive errors on downlink and the RSSI of the serving cell.
Error downcounter value of 11 corresponds to first error occurred on downlink, 0 corresponds to last before
cell loss.

URC 7
In case <indValue> equals "1".
+CIEV: <indDescr>, <indValue>, <lstaNo>, <lstaMin>, <lstaMax>, <lstaMean>,
<lstaVar>
After the error downcounter reaches the value 0 the URC provides some statistic parameters of signal
strength distribution across the band.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 101 of 564
3.2 AT^SIND

URC 8
In case <indValue> equals "11" or "21".
+CIEV: <indDescr>, <indValue>, <lstaFrRep>, <lstaBandScnd>, <lstaFrMin>,
<lstaFrMax>, <lstaMin>, <lstaMax>, <lstaMean>, <lstaGrade>
After radio link loss the URC provides some statistic parameters of signal strength distribution across the
band.

URC 9
Format of the "ceer" indicator:
+CIEV: <indDescr>, <ceerRelCauseGroup>, <ceerReport>

URC 10
Format of the "dtmf" indicator:
+CIEV: <indDescr>, <dtmfChar>, <dtmfSrc>
DTMF characters are enclosed in quotation marks "...".The URC is sent when the DTMF tone detected.

Refer to <indDescr>, "dtmf".

URC 11
Format of the "newsms" indicator:
+CIEV: <indDescr>, <newsmsact>[, <newsmsmem>, <newsmsindex>]

URC 12
Format of the "is_cert" indicator:
+CIEV: <indDescr>, <srvProfileId>, <issuer>, <serialNumber>, <subject>,
<signatureAlgorithm>, <thumbprintAlgorithm>, <thumbprint>
The URC is issued after opening a secure Internet connection with AT^SISO.

URC 13
Format of the "prov" indicator:
+CIEV: <indDescr>, <provMm>, <provCur>

Parameter Description

<indDescr>(str)
This section describes <indDescr> values and their associated <indValue> ranges.
For command input on the AT^SIND write command line <indDescr> values are handled as string type. In
responses and URCs <indDescr> values are output without quotation marks.
“service“ Service availability:
0 Not registered to any network.
1 Registered to home network or, if "roam"=1 then registered to another
network.

“message“ Unread short message at memory location <mem1>. Refer to AT+CPMS.

0 No unread message(s) available.
1 Unread message(s) available.

“roam“ Roaming indicator:

0 Registered to home network or not registered.
1 Registered to other network.

“smsfull“ Capacity of storage for received short messages:

0 The short message memory location <mem3> is still free or has just
become free again. Refer to AT+CPMS.
1 All memory locations of <mem3> are used up.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 102 of 564
3.2 AT^SIND

“rssi“ Received signal (field) strength:

0 Signal strength ≤ -112 dBm
1 - 4 Signal strength in 15 dB steps
5 Signal strength ≥ -51 dBm
99 Signal strength not known or not detectable
Received signal (field) strength can also be obtained with AT+CSQ. However,
the signal strength is scaled to value range 0..31 by this command.
“simdata“ It is necessary for the Customer Application (TE) to be informed about some
types of ongoing Proactive Commands (PAC) with their content and status.
Therefore, AT^SIND="simdata" provides URC notification for PAC type
REFRESH:
• PAC REFRESH is sent by the (U)SIM Application to notify the UE of
changes to Elementary File(s) data on the (U)SIM. All data provided by the
USIM is stored in one of many of its so-called Elementary Files. This data
can be queried by the TE directly via AT+CRSM or implicitly via many AT
commands presented by this document. For instance the (U)SIM's Interna-
tional Mobile Subscriber Identity (IMSI) can be queried via AT+CIMI, but
actually is stored in EFIMSI, as defined in 3GPP TS 11.11 [19], 3GPP TS
31.101 [20], 3GPP TS 31.102 [21].
However, be aware that the content of any Elementary File can be changed
at any time by the network provider or the (U)SIM Application. For details
refer to USAT feature "Data Download to USIM" in 3GPP TS 11.14 [23],
3GPP TS 31.111 [24], ETSI TS 102 223 [25]. If this happens the TE urgently
needs to refresh its own copy of the changed data to ensure its safe and
consistent use!
Therefore, "+CIEV: "simdata"" URCs can be enabled indicating that the
content of one or more Elementary Files has been changed.
One "+CIEV: "simdata"" URC is generated, containing PAC data and Terminal
Response.
The UE provides a limited storage to keep numerous "simdata" events
received while AT^SIND setting was not enabled or UE-TE link was reserved,
e.g. in online data mode. In case of storage overflow a special URC "+CIEV:
"simdata",1,254" will be issued.
“eons“ Enhanced Operator Name String (EONS):
The Enhanced Operator Name String indicator feature allows the PLS63-W to
output various operator names for different PLMN identities. It also allows the
output of a different operator name based on a subset of the registered network
by using a range of Location Area Codes (LACs) or a single LAC. See also
3GPP TS 22.101 [53].
The EONS tables are stored in the USIM and will be read after SIM PIN authen-
tication.
Following USIM Elementary Files are affected by the EONS feature:
EFSST (USIM Service Table) - describes which features are active.
EFOPL (Operator PLMN List) - contains the PLMN identification and location ID
together with the index of the corresponding PNN record
EFPNN (PLMN Network Name) - contains the full and short form version of the
network name for the registered PLMN

The name displayed by the <eonsOperator> parameter depends on various

sources of information prioritized in the list below. The highest priority has
option 1. If an option is not available the next lower option from the list deter-
mines the displayed name. The priority is indicated by the <indValue>
parameter.
Prioritized sources determining the name displayed by <eonsOperator>:
<indValue> 0 Not registered.
<indValue> 1 Operator name from EFOPL and EFPNN in alphanumeric
format.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 103 of 564
3.2 AT^SIND

<indValue> 2 Operator name in long or short format according to

Common PCN Handset Specification (CPHS) [54]
depending on availability and content of EFONString
(Operator Name String) and EFOPShort (Operator Name
Short form).
<indValue> 3 Operator name received over the network via NITZ ser-
vice in long and short alphanumeric format.
<indValue> 4 Operator name found in the UE's AT+COPN list, given in
alphanumeric format.
<indValue> 5 Broadcast MCC-MNC (numeric format which consists
of a 3-digit country code plus a 2- or 3-digit network
code).
<indValue> 6 CSG (Closed Subscriber Group) Lookup.

“nitz“ Network Identity and Time Zone:

This indicator shows the time relevant information elements of an MM Informa-
tion (MMI) or GMM Information (GMMI) message received from the network
(see 3GPP TS 24.008 [43], ch. 9.2.15a and 9.4.19).
The network usually sends a NITZ indicator when the mobile attaches to the
network, when it enters a location area with different time zone or when a day-
light change occurs.
A NITZ indicator may consist of the following parameters: Universal Time (UT),
local Time Zone (TZ), Daylight Saving Time (DST). All information elements of
MMI/GMMI are optional and therefore, the presentation of the parameters
<nitzUT>, <nitzTZ>, <nitzDST> varies with the network. For example, the
network may send all three parameters UT, TZ, DST, or only UT and TZ or only
TZ.

UT is indicated in usual date/time format and represents the current world time
(GMT) at the moment when sent.
TZ is given as a positive (east) or negative (west) offset from UT in units of 15
minutes.
DST shows the number of hours added to the local TZ because of daylight sav-
ing time (summertime) adjustment. Usually DST is 1 hour but it can be also 2
hours in certain locations.

Example for time and time zone with DST:

+CIEV: nitz,"04/07/23,13:39:20",-28,1
In this example TZ is -28, showing a time offset of -7 hours (west) to Universal
Time/GMT (which never changes for DST). DST is 1 which indicates that one
hour was added to TZ because of Daylight Saving Time. If a network does not
send the DST parameter the TZ value would be -32 (8 hours west) as would
be done in winter:
+CIEV: nitz,"04/11/23,13:39:20",-32

Please be aware that although the last NITZ value can be looked up again via
"AT^SIND=nitz,2" the returned values may be out of date. Especially the UT
value is obsolete because there is no internal NITZ clock and therefore no con-
tinuation of UT.
NITZ values are lost when the UE detaches from network. Also when a manual
network selection fails and the UE automatically falls back to the previous net-
work the NITZ values cannot be recalled. Nevertheless an indicated time zone
is valid until a new MMI/GMMI will trigger another NITZ indication.

“simstatus“ USIM status:

0 USIM removed.
Note: Another way to verify the USIM connection is the "^SCKS" URC
enabled with AT^SCKS.
1 USIM inserted.
3 USIM PIN required - USIM locked. USIM PIN must be entered to
enable PLS63-W to register to the network.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 104 of 564
3.2 AT^SIND

4 Personalization info ready - CHV (Card Holder Verification) data have

been verified (if required).
5 USIM initialization completed - UE has finished reading USIM data.

“simtray“ Indication of USIM tray status as indicated by CCIN line. Result does not
depend on whether the tray holds a USIM or not.
Generating a URC on status change is not supported.
0 USIM tray empty.
1 USIM tray plugged in.

“psinfo“ Packet Switched status:

"psinfo" indicates the status of the UE related to packet switched data calls.
Please consider that some providers don't support the indication of HSDPA/
HSUPA.
0 GPRS/EGPRS not available in currently used cell
1 GPRS available in currently used cell
2 GPRS attached
3 EGPRS available in currently used cell
4 EGPRS attached
5 Camped on WCDMA cell
6 WCDMA PS attached
7 Camped on HSDPA capable cell
8 PS attached in HSDPA capable cell
9 Camped on HSDPA/HSUPA capable cell
10 PS attached in HSDPA/HSUPA capable cell
16 Camped on E-UTRAN capable cell
17 Attached in E-UTRAN capable cell

“lsta“ Link Stability indication (for GSM):

The Link Stability indicator feature allows the PLS63-W to output radio link
errors and statistic parameters of signal strength distribution across the band
via URC.
0 Radio link error.
1 Radio link signal strength distribution.
2 Radio link error during voice call.
The presentation of the "lsta" indicator is determined by the radio link spectrum
shape. For example, each time a radio link error appears the URC indicates an
Error Downcounter value and the RSSI of the serving cell to provide some kind
of warning. Every consecutive error decrements the Error Downcounter value
and successful downlink signal reception resets it to start value of 11. The Error
Downcounter value is only available in IDLE mode or during voice calls. It will
not be presented during PS connections.
The factor on which Error Downcounter is decremented depends on network
settings.
Error Downcounter value 0 means that the UE has lost the cell and will start
the cell reselection process. In this case the URC is enhanced and includes the
following statistic parameters of signal strength distribution across the band.
These are:
- Number of reported channels,
- Maximal signal strength value,
- Minimal signal strength value,
- Mean value of signal strength across frequency band and
- Variance of signal strength across frequency band.
To avoid that radio link error URCs are output too often, when radio conditions
are bad, you can select a lower warning level with <lstaLevel>.

Link Stability indication (for UMTS):

URC is issued for statistic parameters of signal strength distribution across the
band.
11 Radio link signal strength distribution.
If UE is out of service the URC with <indValue> equals "11" will be output for
each raw and list frequency scan.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 105 of 564
3.2 AT^SIND

It includes statistic parameters of signal strength distribution across the band

similar to the URC with <indValue> equals "1" (for 2G).

Link Stability indication (for LTE):

URC is issued for statistic parameters of signal strength distribution across the
band.
21 Radio link signal strength distribution.
If UE is out of service the URC with <indValue> equals "21" will be output for
each scan.
It includes statistic parameters of signal strength distribution across the band
similar to the URC with <indValue> equals "11" (for 3G).

“ratmode“ Radio Access Technology mode indication:

"ratmode" indicates the value of the AT&T specific USIM Elementary File
EFRATmode.
2 RAT mode WCDMA only
3 RAT mode dual (WCDMA/LTE)
4 RAT mode LTE only
99 RAT mode not known or USIM Elementary File EFRATmode not accessi-
ble
The contents of the USIM Elementary File EFRATmode may be changed by the
network in the background at any time via USIM Application Toolkit (USAT)
procedure "Data download to USIM". For a detailed description please refer to
3GPP TS 11.14 [23], 3GPP TS 31.111 [24], ETSI TS 102 223 [25].

“pacsp“ PLMN mode bit status:

:
"pacsp" indicates the parsed PLMN mode bit value of the USIM Elementary
File EFCSP (Customer Service Profile) according to Common PCN Handset
Specification (CPHS) [54].
0 CSP PLMN mode bit off
1 CSP PLMN mode bit on
99 CSP PLMN mode bit not defined or USIM Elementary File EFCSP not
accessible
The contents of the USIM Elementary File EFCSP may be changed by the net-
work in the background at any time via USIM Application Toolkit (USAT) pro-
cedure "Data download to USIM". For a detailed description please refer to
3GPP TS 11.14 [23], 3GPP TS 31.111 [24], ETSI TS 102 223 [25].
Please note that URC presentation <mode> for this indicator is stored to non-
volatile memory with AT&W, restored with ATZ and reset to '0' (disabled) by
AT&F.

“steerroam“ Steering-of-roaming:
The "steerroam" indicator supports so called "steering-of-roaming" ("SOR")
techniques of some providers.
If a UE roaming within a certain country tries to register to a VPLMN (visited
PLMN), the VPLMN will ask the HLR of the subscribers home operator for
authorization credentials of the subscriber. Steering-of-roaming means that
instead of sending those credentials, the HLR sends back an error message
which will make the VPLMN send back a location update reject to the UE. This
location updating procedure is described in 3GPP TS 24.008 [43] chapter
4.4.4.9.
When UE is attempting to register into a PLMN and get updating rejected with
reject cause 17 then UE stays in limited service on the configured network, UE
may reattempt network registration four times, and after that UE will inform the
TE via Steering-of-roaming indication URC +CIEV: "steerroam" that the regis-
tration attempt has failed.
When the UE is in manual PLMN selection mode (see AT+COPS) the TE has

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 106 of 564
3.2 AT^SIND

to start a new manual PLMN search to select a different network or switch to

automatic PLMN selection mode.
When UE is in automatic PLMN selection mode (see AT+COPS) UE itself
attempts a PLMN search to select a different network.

“iccid“ USIM identification number:

"iccid" indicator shows the USIM identification number stored in the USIM Ele-
mentary File EFICCID.
The AT^SIND test command indicates the maximum length of the "iccid"
<indValue>.
Please note that URC presentation <mode> for this indicator is stored to non-
volatile memory with AT&W, restored with ATZ and reset to '0' (disabled) by
AT&F.

“euiccid“ USIM embedded identification number:

"euiccid" indicator shows the USIM embedded identification number stored in
the USIM Elementary File EFEUICCID.
The AT^SIND test command indicates the maximum length of the "euiccid"
<indValue>.
Please note that URC presentation <mode> for this indicator is stored to non-
volatile memory with AT&W, restored with ATZ and reset to '0' (disabled) by
AT&F.

“ceer“ Extended Error Report:

"ceer" delivers an extended error / release cause report as a single line con-
taining the cause information given by the network in textual format.
The URC "CIEV: ceer,<ceerRelCauseGroup>,<ceerReport>" shows the
same information as the standard command AT+CEER. If enabled the indicator
will show up each time when a release cause is detected, wherease AT+CEER
only polls the release cause of the latest event. The major benefit is that "ceer"
URCs can be used for better analysis and tracing.

“dtmf“ DTMF character indication

If enabled with parameter <mode>=1, a DTMF character is shown as "dtmf"
URC when the DTMF tone detected in a voice call. The source of DTMF can
only be the network <dtmfSrc>= 1.

Additionally when DTMF source is network, it is strongly recommended to acti-

vate audio mode: <audMode>=6 set with AT^SNFS.

Example for a DTMF character:

+CIEV: dtmf,"*",1
“newsms“ AcT specific SMS notification:
The UE is able to detect whether incoming short messages are coded in 3GPP
or 3GPP2 format, and stores them to access technology (AcT) specific mem-
ory spaces of the memory selected with AT+CPMS. The "newsms" indicator
informs about new received and stored short messages by displaying the fol-
lowing parameters:
- <newsmsact> showing the AcT specific coding type of the short message,
- <newsmsmem> showing the used memory,
- <newsmsindex> showing the used index inside the memory.

“is_cert“ Report details of the server certificate used for a secure Internet connection
opened with AT^SISO.
The following certificate details are listed: <srvProfileId>, <issuer>,
<serialNumber>, <subject>, <signatureAlgorithm>, <thumb-
printAlgorithm>, <thumbprint>
Detailed guidelines for managing the required certificates can be found in [8].
See also AT commands AT^SISS, AT^SBNR and AT^SBNW.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 107 of 564
3.2 AT^SIND

“orpco“ Indication of new Operator Reserved Protocol Configuration Options:

"orpco" delivers the indication of a new "Operator Reserved PCO" received
from the network. Only <mode>= 2 is supported.

“prov“ Provider configuration mismatch:

The "prov" indicator delivers the provider configuration mismatch status via
URC.
+CIEV: prov,<provMm>,<provCur>
The AT^SIND test command indicates the maximum length of the "prov"
<indValue>.
For provider configuration details see ATI61.
Changing the provider configuration is done by AT^SCFG parameter "MEop-
Mode/Prov/Cfg" (see <provCfg>).
Please note that URC presentation <mode>=1 for this indicator is enabled by
powerup default.
The URC reports the current provider profile status after UE restarts, and any
change of the provider profile configuration when autoselection is "on".

<indValue>(num)
Integer type value as specified above for the corresponding <indDescr>.

<mode>(num)
Set or query URC presentation mode of a specific indicator <indDescr>.
Please note, that some indicator types allow the <mode> to be stored to non-volatile memory with AT&W,
restored with ATZ and reset to '0' (disabled) by AT&F. See indicator descriptions whether or not AT&W, AT&F and
ATZ are effective.
0(P) Disables the presentation of a specific URC.
1 Enables the presentation of a specific URC.
The URC will be buffered in the UE when the UE-TE link is reserved (e.g. in
online data mode), and flushed to the TE when the UE-TE link is free again.
Otherwise, the URC will be forwarded directly to the TE.
2 Requests the presentation mode of the URC status and the current value of a
single indicator type.

<eonsOperator>(str)(+CSCS)
Operator name determined by the source of information. The source is indicated as <indValue>. All possible
sources (<indValue>) are listed in the description of the "eons" indicator.

<servProvider>(str)(+CSCS)
Service Provider Name according to the status settings (USIM Service No. 17) in the USIM Service Table (SST)
of the USIM.
Service Provider Name (SPN) will be read from EFSPN. Service Provider Display Information (SPDI) will be read
from EFSPDI list.

<servProviderType>(num)
Service Provider Type according to Registered Public Land Mobile Network (RPLMN) and Home Public Land
Mobile Network (HPLMN).
0 Service Provider Name will not be displayed (EFSPN is empty or not available).
1 Service Provider Name will be displayed. RPLMN is the HPLMN.
2 Service Provider Name will be displayed. One entry of SPDI list is equal to the
RPLMN.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 108 of 564
3.2 AT^SIND

<nitzUT>(str)(+CSCS)
Universal Time delivered as part of the "nitz" Indicator. Refer to <indDescr>.

<nitzTZ>(num)
Time Zone delivered as part of the "nitz" Indicator. Refer to <indDescr>.

<nitzDST>(num)
Adjustment for Daylight Saving Time as part of the "nitz" Indicator. Displayed only when received from network.
Refer to <indDescr>.

<lstaLevel>(num)
Warning Level
0-11 User value to limit the indication of radio link errors.
Refer to <indDescr>.

<lstaEdvs>(num)
EDVS (0-11)
Error Downcounter value scaled. Refer to <indDescr>.

<lstaRssi>(num)
Value in dBm
Received signal strength indication value. Refer to <indDescr>.

<lstaNo>(num)
Number of reported channels. Refer to <indDescr>.

<lstaMin>(num)
Value in dBm
Minimal received signal strength value. Refer to <indDescr>.

<lstaMax>(num)
Value in dBm
Maximal received signal strength value. Refer to <indDescr>.

<lstaMean>(num)
Value in dBm
Mean value of received signal strength across frequency. Refer to <indDescr>.

<lstaVar>(num)
Variance of signal strength across frequency. Refer to <indDescr>.

<lstaFrRep>(num)
Number of reported frequencies. Refer to <indDescr>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 109 of 564
3.2 AT^SIND

<lstaBandScnd>(num)
Scanned band. Refer to <indDescr>.
3G:
0 Unknown
1 WCDMA 2100 (BC1)
2 WCDMA 1900 (BC2)
3 WCDMA 1800 (BC3)
4 WCDMA 1700 AWS (BC4)
5 WCDMA 850 (BC5)
6 WCDMA 800 (BC6)
8 WCDMA 900 (BC8)
19 WCDMA 850 (BC19)
100 List Frequency Scan (LFS)

4G:
0 Unknown
1 LTE 2100 (B1)
2 LTE 1900 (B2)
3 LTE 1800 (B3)
4 LTE 1700 (B4)
5 LTE 850 (B5)
7 LTE 2600 (B7)
8 LTE 900 (B8)
12 LTE 700 (B12)
13 LTE 700 (B13)
18 LTE 850 (B18)
19 LTE 800 (B19)
20 LTE 800 (B20)
26 LTE 850 (B26)
28 LTE 700 (B28)
38 LTE 2600 (B38)
40 LTE 2350 (B40)
41 LTE 2550 (B41)
66 LTE 2100 (B66)

<lstaFrMin>(num)
Refer to <indDescr>.
3G:
Lowest DL UARFCN reported in the scan. Please see 3GPP TS 25.101 [46] chapter 5.4.4.
4G:
Lowest DL EARFCN reported in the scan. Please see 3GPP TS 36.101 [56] chapter 5.4.4.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 110 of 564
3.2 AT^SIND

<lstaFrMax>(num)
Refer to <indDescr>.
3G:
Highest DL UARFCN reported in the scan. Please see 3GPP TS 25.101 [46] chapter 5.4.4.
4G:
Highest DL EARFCN reported in the scan. Please see 3GPP TS 36.101 [56] chapter 5.4.4.

<lstaGrade>(num)
Value in dBm.
Grade derived from the <lstaMean> value of the power scan results. Provides values of received signal
strength.
Use the following formula in order to calculate <lstaGrade>: (<lstaMean> + 108 + 6) / 6.
Refer to <indDescr> and to the resulting mapping table below:

RSSI measurement Grade

RSSI <-108 dBm grade=0
-108 dBm <RSSI <-102 dBm grade=1
-102 dBm <RSSI <-96 dBm grade=2

<ceerRelCauseGroup>(num)
Release Cause Group.
To enable the URC "CIEV: ceer,<ceerRelCauseGroup>,<ceerReport>" activate <mode> "1", and either
select single <ceerRelCauseGroup> values, or choose value "99" for all release causes.
For each single <ceerRelCauseGroup> value the AT^SIND write command needs to be executed. The
responses of the AT^SIND write or read command, however, then will list all activated single values. If only one
<ceerRelCauseGroup> or value 99 was activated, the AT^SIND write and read command responses contain
just this one value. <ceerRelCauseGroup> value "0" can be used to clear all activated values.
0(P) Clear activated <ceerRelCauseGroup> values.
1 CS Internal Cause.
2 CS Network Cause.
3 CS Network Reject.
4 PS Internal Cause.
5 PS Network Cause.
6 Other Release Cause.
7 PS LTE Cause.
8 PS LTE Local Cause.
9 PS LTE SIP Cause.
40 ITU Q.850 Release Cause.
41 SIP Release Cause.
99 All Release Causes.
Note that if value "99" is set selecting a single release cause will have no effect.
Before activating single release cause values first set <ceerRelCauseG-
roup> "0".
Example: Activating <ceerRelCauseGroup>s 4, 5 and 6:
AT^SIND=ceer,1,4
^SIND: ceer,1,4 # Response shows selected <ceerRelCauseGroup> value.
OK
AT^SIND=ceer,1,5
^SIND: ceer,1,4,5 # Response shows all <ceerRelCauseGroup> values currently selected.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 111 of 564
3.2 AT^SIND

OK
AT^SIND=ceer,1,6
^SIND: ceer,1,4,5,6 # Response shows all <ceerRelCauseGroup> values currently selected.
OK

<ceerReport>(str)
Release cause information given by the network in textual format.

<dtmfChar>(str)
DTMF character string of the "dtmf" URC.

<dtmfSrc>(num)(&W)
Source of the DTMF signal. Refer to <indDescr>, "dtmf".
1(&F)(D) DTMF source is network

<newsmsact>(str)
Access technology specific coding type of new received and stored short message.
“none“ No new stored short message received
“3GPP“ Coding type 3GPP
“3GPP2“ Coding type 3GPP2

<newsmsmem>(str)
Memory storage of new received and stored short message corresponding to technology, please see AT+CPMS
parameter <mem3>s).
““ No new stored short message received
“ME“ ME storage of received and stored short message
“SM“ Only for 3GPP

<newsmsindex>(num)
Storage index of received and stored short message, please see AT+CNMI parameter <index>

<srvProfileId>(num)
Internet service profile identifier. Refer to AT^SISS, <srvProfileId>.

<issuer>(str)
Certificate's issuer. Refer to <indDescr>.

<serialNumber>(str)
Certificate's serial number. Refer to <indDescr>.

<subject>(str)
Certificate's subject. Refer to <indDescr>.

<signatureAlgorithm>(str)
Certificate's signature algorithm. Refer to <indDescr>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 112 of 564
3.2 AT^SIND

<thumbprintAlgorithm>(str)
Certificate's thumbprint algorithm. Refer to <indDescr>.

<thumbprint>(str)
Certificate's thumbprint. Refer to <indDescr>.

<containerid>(num)
Container Id of Operator Reserved Protocol Configuration Options.
65280...65535 Container ID of received orpco

<mccmnc>(str)
Mobile country and network code

<provMm>(num)
Provider configuration mismatch.
0 No provider mismatch.
1 Provider mismatch.

<provCur>(str)
Current provider.
The fallback configuration is indicated by a "*".
“fallb*“ Fallback provider profile.
“tmode“ EXAMPLE ! Provider T-Mobile
“vdfde“ EXAMPLE ! Provider Vodafone
“...“ Next possible provider ...
“...“ Next possible provider ...

<cmdType>(num)
Proactive command ID, see Section and Table .

<commandDetails>(num)
0 USIM Initialization and Full File Change Notification
1 File Change Notification
2 USIM Initialization and File Change Notification
3 USIM Initialization
4 USIM Reset
5...255 Reserved values
For PACs OPEN_CHANNEL and CLOSE_CHANNEL this byte is RFU.

<pathLen>(num)
Number of bytes coded in <fileList>

<fileNum>(num)
Number of updated Elementary Files (EF) with path given in <fileList>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 113 of 564
3.2 AT^SIND

<fileList>(str)
String containing Elementary File paths. Each path contains at least two file entries; each file entry (MF, EF or
DF) consists of two bytes, e.g. '3F002FE2' or '3F007F206FAD'. Every path in the file description begins with the
Master File (MF). There can be any number of Dedicated File (DF) entries between Master File and Elementary
File.

<status>(num)
Command status return regarding the type of action that has taken place, e.g. action performed by the user.
Values are in accordance with 3GPP TS 11.14 [23], 3GPP TS 31.111 [24], ETSI TS 102 223 [25].

<statAddInfo>(num)
Optional additional command status; for possible values refer to 3GPP TS 11.14 [23], 3GPP TS 31.111 [24],
ETSI TS 102 223 [25].

Notes
• If the AT^SIND indicator "lsta" URC's <indValue> equals "1" and <lstaNo> is low, the following assump-
tions are possible:
- Low <lstaMean> indicates out of coverage
- High <lstaVar> indicates industrial interference
- High (or middle depending on distance from jammer) <lstaMean> and low <lstaVar> indicates jamming.
• If the AT^SIND indicator "lsta" URC's <indValue> equals "1" and <lstaNo> is high, the following assump-
tion is possible:
- High <lstaMean> and low <lstaVar> indicates jamming.
• If the AT^SIND indicator "lsta" URC's <indValue> equals "11" or "21" and <lstaNo> is low, the following
assumption is possible:
- Low <lstaMean> and low <lstaGrade> indicates out of coverage.
• If the AT^SIND indicator "lsta" URC's <indValue> equals "11" or "21" and <lstaNo> is high, the following
assumption is possible:
- High <lstaMean> and high <lstaGrade> indicates jamming.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 114 of 564
4. Serial Interface Control Commands

4. Serial Interface Control Commands

The AT Commands described in this chapter allow the external application to determine various settings related
to the PLS63-W's serial interface.

4.1 AT\Q Flow Control

AT\Q allows to configure flow control on the PLS63-W's asynchronous serial interface ASC0 and ASC1 (UART).
It is strongly recommended to always use RTS/CTS hardware flow control. In particular, when using SLEEP
mode (see AT^SPOW) or Multiplex mode (see AT+CMUX), ensure that both UE and TE have RTS/CTS hardware
flow control enabled.

The AT\Q setting is always common for all interfaces and can be changed, for compatibility reasons, on each
interface, but is only applicable to the ASC0 and ASC1 interface. AT\Q settings have no effect on the USB ports
because the USB protocol integrates a flow control mechanism of its own.

The setting will become active only after saving the configuration to the user profile with AT&W followed by a
restart of PLS63-W.

Syntax
Exec Command

AT\Q[<n>]
Response(s)
OK
PIN  Last
- + -

Parameter Description

<n>(num)(&V)(&W)
[0] Disable flow control
1 XON/XOFF software flow control
Value 1 can be set on ASC0 and ASC1, but XON/XOFF software flow control
takes effect only on ASC0. On ASC1, RTS/CTS hardware flow control remains
effective even though value 1 has been selected.
2 This value is not supported and will be mapped to RTS/CTS hardware flow
control
3(&F)(D) RTS/CTS hardware flow control

Notes
• When using XON/XOFF flow control (AT\Q1) in online mode, +++ should not be used while the data trans-
mission is paused with XOFF. Before entering the command mode with +++ the paused transmission should
be resumed using the XON character.
• For compatibility reasons, AT\Q can be used in Multiplex mode (AT+CMUX), though the settings will not take
effect. However, be aware that whenever you use the AT\Q write command in Multiplex mode and then save
the current configuration to the user profile with AT&W, the changed AT\Q setting will become active after
restart.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 115 of 564
4.2 AT&C

4.2 AT&C Set Data Carrier Detect (DCD) line mode

AT&C controls the behavior of the UE's DCD line.

AT&C offers full functionality only if the DCD0 line is enabled with AT^SCFG="GPIO/mode/DCD0","std". Other-
wise AT&C will respond "+CME ERROR: operation not allowed".

Syntax
Exec Command

AT&C[<value>]
Response(s)
OK
PIN  Last
- + -

Parameter Description

<value>(num)(&V)(&W)
[0] DCD line shall always be on.
(&F)(D)
1 DCD line shall be on only when data carrier signal is present.
2
DCD line shall be on when one or more Internet services defined on the related
serial channels are in an active state as described below. For details on the
various service states refer to AT^SISI, parameter <srvState> or AT^SISO,
parameter <srvState>.
• Transparent TCP or Transparent UDP client, SOCKET, HTTP,: DCD shall
be on when <srvState>="Connnecting" or "Up".
• Transparent TCP Listener: DCD shall be on when <srvState>="Up",
"Alerting", "Connected" and "Released".
• FTP: DCD shall be on when data channel is connected, i.e.
<srvState>="Up".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 116 of 564
4.3 AT&D

4.3 AT&D Set Data Terminal Ready (DTR) line mode

AT&D determines how the UE responds if DTR line is changed from ON to OFF state during data mode.

AT&D offers full functionality only if the DTR0 line is enabled with AT^SCFG="GPIO/mode/DTR0","std". Otherwise
AT&D will respond "+CME ERROR: operation not allowed".

Syntax
Exec Command

AT&D[<value>]
Response(s)
OK
PIN  Last
- + -

Parameter Description

<value>(num)(&V)(&W)
[0] ME ignores status of DTR line.
1 ON->OFF on DTR: Change to command mode while retaining the connected
call.
2(&F)(D) ON->OFF on DTR: Disconnect data call or PPP and change to command
mode. During OFF state of the DTR line the auto-answer function (see ATS0)
is disabled.
In Transparent Access Mode set up with AT^SIST DTR ON-OFF transition
changes to command mode. For more details see AT^SISS and AT^SIST.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 117 of 564
4.4 AT&S

4.4 AT&S Set Data Set Ready (DSR) line mode

AT&S determines how the UE sets the DSR line depending on its communication state.

AT&S offers full functionality only if the DSR0 line is enabled with AT^SCFG="GPIO/mode/DSR0","std". Other-
wise AT&S will respond "+CME ERROR: operation not allowed".

Syntax
Exec Command

AT&S[<value>]
Response(s)
OK
PIN  Last Reference(s)

- + - V.250

Parameter Description

<value>(num)(&V)(&W)
[0](&F)(D) DSR line is always ON
1 ME in command mode: DSR is OFF.
ME in data mode: DSR is ON.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 118 of 564
4.5 ATE

4.5 ATE AT Command Echo

ATE controls if the PLS63-W echoes characters received from TE during AT command state.

Syntax
Exec Command

ATE[<value>]
Response(s)
OK
ERROR
PIN  Last Reference(s)

- + - V.250

Parameter Description

<value>(num)(&V)(&W)
0 Echo mode off
(&F)(D)
[1] Echo mode on

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 119 of 564
4.6 AT+ICF

4.6 AT+ICF Serial Interface Character Framing

The command AT+ICF controls the serial interface character framing format and parity used for receiving and
transmitting.

The following settings are supported:

• 7 bits, even parity, 1 stop bit (AT+ICF=5,1)
• 7 bits, odd parity, 1 stop bit (AT+ICF=5,0)
• 8 bits, even parity, 1 stop bit (AT+ICF=2,1)
• 8 bits, no parity, 1 stop bit (AT+ICF=3)
• 8 bits, odd parity, 1 stop bit (AT+ICF=2,0)
• 8 bits, no parity, 2 stop bits (AT+ICF=1)

For compatibility reason AT+ICF can be used in Multiplex mode (refer AT+CMUX), though setting will not take
effect. However, settings made on multiplex channel shall be stored in the user defined profile with next AT&W.

Syntax
Test Command
AT+ICF=?
Response(s)
+ICF: (list of supported <format>s), (list of supported <parity>s)
OK
Read Command

AT+ICF?
Response(s)
+ICF: <format>[, <parity>]
OK
Write Command

AT+ICF=[<format>[, <parity>]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + + ITU-T V.250 [18]

Parameter Description

<format>(num)
Character format
Specifies the character format used for receiving and transmitting.
1 8 data 0 parity 2 stop
2 8 data 1 parity 1 stop
(&F)(D)
[3] 8 data 1 stop
5 7 data 1 parity 1 stop

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 120 of 564
4.6 AT+ICF

<parity>(num)
Parity bit
Specifies the method of calculating the parity bit, if a parity bit is supported by <format>.
If <format> does not support parity, this parameter has to be omitted.
0 Odd
1 Even

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 121 of 564
4.7 AT+IPR

4.7 AT+IPR Bit Rate

AT+IPR allows to query and set the bit rate of the PLS63-W's asynchronous serial interface (UART).
The test command returns the values of supported fixed bit rates.
The read command returns the currently set <rate> value.
The write command determines the bit rate to be used for the interface.

A selected fixed bit rate takes effect after the write command returns "OK" and is stored in the non-volatile mem-
ory. It is not recommended to set bit rates lower than 9600 bps in order to avoid timing problems (see Section
1.6, Communication between Customer Application and PLS63-W for details about timing).
When using AT+IPR on a USB channel or on a Multiplex mode related channel(AT+CMUX) the AT+IPR write
command responds with "OK", but will not have any effect. However, the AT+IPR read command always returns
the current setting dedicated to the UART channel.
It is highly recommended to use AT+IPR as a standalone AT command, i.e. better do not combine with other
commands on the same AT command line.
The current setting of AT+IPR will be preserved after firmware download (i.e. a firmware update does not restore
the factory setting) or in the event of power failure.

Syntax
Test Command

AT+IPR=?
Response(s)
+IPR: ( ) , (list of supported selectable <rate>s)
OK
Read Command

AT+IPR?
Response(s)
+IPR: <rate>
OK
Write Command

AT+IPR=<rate>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - V.250

Parameter Description

<rate>(num)(&V)(NV)
Bit rate per second (bps)
300
1200
2400
4800
9600
19200
38400

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 122 of 564
4.7 AT+IPR

57600
115200(D)
230400
460800
921600

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 123 of 564
4.8 AT+CMUX

4.8 AT+CMUX Multiplex mode

Multiplex mode according to 3GPP TS 27.010 [13] enables a serial interface to be multiplexed into virtual chan-
nels. It can be used on any available AT command port on:
• a USB interface;
• the serial interface ASC0;
The multiplex channels will be mapped as AT command ports. The AT^SQPORT command can be used to print
the AT command port ID of the currently used instance. Any channel can be mapped to NMEA interface by the
AT^SGPSC command.

For the host hardware, customers have to create their own multiplex programs conforming to the multiplexer pro-
tocol. To help system integrators save the time and expense of designing multiplexer applications, THALES DIS
AIS Deutschland GmbH offers WinMux, a ready-to-use multiplex driver for Windows. Another approach is to
develop customized solutions based on the sources of the WinMux driver.

The WinMux driver and its source files can be supplied on request. Please contact your local distributor to obtain
the latest installation software and user's guide.

AT+CMUX write command is used to enter Multiplex mode. Setup of the logical channels is initiated by the TE,
i.e. the TE acts as initiator. This means that the TE shall ensure that logical channels are established before any
further actions on the channels can be started. There is a timeout of five seconds, if the multiplexer protocol is
enabled but no multiplexer control channel is established. Afterwards PLS63-W returns to AT command mode.
The parameter maximum frame size (N1) according to 3GPP TS 27.010 [13] is implemented as 98 bytes by
default. All other parameters are not available.

Syntax
Test Command
AT+CMUX=?
Response(s)
+CMUX: (list of supported<mode>s)
OK
Read Command
AT+CMUX?
Response(s)
+CMUX: <mode>
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CMUX=<mode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + + 3GPP TS 27.007 [51]

3GPP TS 27.010 [13]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 124 of 564
4.8 AT+CMUX

Parameter Description

<mode>(num)
Enable Multiplex mode.
0 Basic option

4.8.1 Restrictions while using Multiplex mode

If Multiplex mode is used on ASC0 interface:
1. Before starting Multiplex mode, ensure that the bit rate set with AT+IPR is not lower than 57600 bps. For
using data services in Multiplex mode it is recommended to set at least 115200 bps.
2. Using AT+IPR write command on a Multiplex mode related channel command has no effect although "OK"
result code will be returned.
3. It is recommended to set hardware flow control (AT\Q3) before starting Multiplex mode. XON/XOFF flow
control (AT\Q1) is not supported in Multiplex mode.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 125 of 564
4.9 AT^SQPORT

4.9 AT^SQPORT Query Port Id

AT^SQPORT enables the Customer Application to query the IDs of the AT command ports.
The AT^SQPORT test command shows the IDs of the supported AT command ports. The number varies depend-
ing on whether Multiplex mode is started.
The AT^SQPORT read command shows the ID of the AT command port the Customer Application it is connected
to.

Syntax
Test Command
AT^SQPORT=?
Response(s)
^SQPORT: (range of available <id>s)
OK
Read Command
AT^SQPORT?
Response(s)
^SQPORT: <id>
OK
Exec Command
AT^SQPORT
Response(s)
^SQPORT: <id>
OK
PIN  Last
- + -

Parameter Description

<id>(num)
1 ID of AT command port 1 mapped to USB port 0 (modem).
2 ID of AT command port 2 mapped to USB port 1.
3 ID of AT command port 3 mapped to USB port 2.
4 ID of AT command port 4 mapped to USB port 3.
5 ID of AT command port 5 mapped to serial interface ASC0.
6 ID of AT command port 6 mapped to serial interface ASC1.
7 ID of AT command port 7 mapped to first multiplex channel.
8 ID of AT command port 8 mapped to second multiplex channel.
9 ID of AT command port 9 mapped to third multiplex channel.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 126 of 564
5. Security Commands

5. Security Commands

The AT Commands described in this chapter allow the external application to determine various security related
settings.

5.1 AT+CPIN PIN Authentication

The AT+CPIN read command returns an alphanumeric string indicating whether or not network authentication is
required.

The write AT+CPIN command allows the PLS63-W to store the entered password. This may be for example the
SIM PIN1 to register to a GSM/UMTS/LTE network, or the SIM PUK1 to replace a disabled SIM PIN1 with a new
one, or the PH-SIM PIN if the client has taken precautions for preventing damage in the event of loss or theft etc.

If SIM PIN1 authentication was successful and no SIM PIN1 request is pending the AT+CPIN? read command
returns "READY", but the next AT+CPIN=<pin> write command request refers to SIM PIN2. As a result, whilst
SIM PIN2 has not been given, each attempt to enter SIM PIN1 again leads to "+CME ERROR: incorrect pass-
word", thus decreasing the SIM PIN2 counter. Therefore, you are advised to check which password is requested
by using the read command AT^SPIC? and the execute command AT^SPIC.

Syntax
Test Command
AT+CPIN=?
Response(s)
OK
Read Command
AT+CPIN?
Response(s)
+CPIN: <code>
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CPIN=<pin>[, <new pin>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<pin>(str)
Password (string type).
If the requested password was a PUK, such as SIM PUK1 or PH-FSIM PUK or another password, then <pin>
must be followed by <new pin>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 127 of 564
5.1 AT+CPIN

<new pin>(str)
If the requested code was a PUK: specify a new password or restore the former disabled password.

<code>(text)
SIM PIN authentication
READY PIN has already been entered. No further entry needed.
SIM PIN UE is waiting for SIM PIN1.
SIM PUK UE is waiting for SIM PUK1 if PIN1 was disabled after three failed attempts to
enter PIN1.
SIM PIN2 UE is waiting for PIN2.
SIM PUK2 UE is waiting for PUK2 to unblock a disabled PIN2.
Phone security locks set by client or factory
PH-SIM PIN UE is waiting for phone-to-SIM card password if "PS" lock is active and the cli-
ent inserts other USIM, card than the one used for the lock. ("PS" lock is also
referred to as phone or antitheft lock).
PH-FSIM PIN UE is waiting for phone-to-very-first-SIM card password. Necessary when "PF"
lock was set. When powered up the first time, UE locks itself to the first USIM
card put into the card holder. As a result, operation of the mobile is restricted
to this one USIM card (unless the PH-FSIM PUK is used as described below).
PH-FSIM PUK UE is waiting for phone-to-very-first-USIM card unblocking password to be
given. Necessary when "PF" lock is active and other than first USIM card is
inserted.
PH-NET PIN UE is waiting for network personalisation password
PH-NET PUK UE is waiting for network personalisation unblocking password
PH-NETSUB PIN UE is waiting for network subset personalisation password
PH-NETSUB PUK UE is waiting for network subset unblocking password
PH-SP PIN UE is waiting for service provider personalisation password
PH-SP PUK UE is waiting for service provider personalisation unblocking password
PH-CORP PIN UE is waiting for corporate personalisation password
PH-CORP PUK UE is waiting for corprorate personalisation un-blocking password

Notes
• Successful PIN authentication only confirms that the entered PIN was recognized and correct. The output of
the result code OK does not necessarily imply that the mobile is registered to the desired network.
Typical example: PIN was entered and accepted with OK, but the UE fails to register to the network. This may
be due to missing network coverage, denied network access with currently used USIM card, no valid roaming
agreement between home network and currently available operators etc.
PLS63-W offers various options to verify the present status of network registration: For example, the
AT+COPS command indicates the currently used network. With AT+CREG you can also check the current sta-
tus and activate an unsolicited result code which appears whenever the status of the network registration
changes (e.g. when the UE is powered up, or when the network cell changes).
• <pin> and <new pin> can also be entered in quotation marks (e.g. "1234").
• See AT+CPWD for information on passwords.
• See AT+CLCK for information on lock types.
• See AT+CPBS for information on write access to the FD phonebook with PIN2

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 128 of 564
5.2 AT^SPIC

5.2 AT^SPIC Display PIN Counter

The AT^SPIC command can be used to find out whether the ME is waiting for a password and, if so, how many
attempts are left to enter the password.

The execute command returns the number of attempts still available for entering the currently required password,
for example the SIM PIN, SIM PUK, SIM PIN2 or SIM PUK2.

The read command AT^SPIC? indicates which password the number of attempts stated by the execute com-
mand actually refers to. Also, the write command may be used to query the counter for a specific password. It
indicates the number of attempts still available for entering the password identified by <facility>, for example
the SIM PIN, SIM PUK, SIM PIN2 or SIM PUK2.

To check whether or not you need to enter a password use the read commands AT+CPIN? or AT^SPIC? If the
response to AT+CPIN? is "READY" the counter of the execute command AT^SPIC relates to PIN2. See last
example. If PIN and PIN2 (e. g. AT+CPBS="FD","PIN2") are entered successfully no password is currently
required and AT^SPIC read and execute commands return only OK.
If no USIM card is inserted the AT^SPIC read, execute and write commands return "+CME ERROR: SIM not
inserted".

Syntax
Test Command
AT^SPIC=?
Response(s)
OK
Read Command

AT^SPIC?
Response(s)
^SPIC: <code>
OK
Exec Command

AT^SPIC
Response(s)
[^SPIC: <counter>]
OK
Write Command

AT^SPIC=<facility>[, <pin_puk>]
Response(s)
^SPIC: <counter>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<counter>(num)
Number of attempts left to enter the currently required password. This number will be counted down after each
failure.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 129 of 564
5.2 AT^SPIC

<facility>(str)
Password for which the corresponding PIN counter is to be displayed.
“SC“ SIM PIN if parameter <pin_puk> is omitted or set to 0.
SIM PUK if parameter <pin_puk> is set to 1.
“PS“ PH-SIM PIN current retries if parameter <pin_puk> is omitted or set to 0.
PH-SIM PIN maximum retries if parameter <pin_puk> is set to 1.
PH-SIM PUK is not supported.
“P2“ SIM PIN2 if parameter <pin_puk> is omitted or set to 0.
SIM PUK2 if parameter <pin_puk> is set to 1.
“PN“ Network Personalisation. PH-NET PIN current retries if parameter <pin_puk>
is omitted or set to 0.
PH-NET PIN maximum retries if parameter <pin_puk> is set to 1.
PH-NET PUK is not supported.

<pin_puk>(num)
[0] Show PIN counter for given <facility>.
1 Show PUK counter for given <facility>="SC" or "P2".
Show maximum retries PIN counter for given <facility>="PS" or "PN".

<code>(text)
Identification of the currently required password.
SIM PIN ME is waiting for SIM PIN1.
SIM PUK ME is waiting for SIM PUK1 if PIN1 was disabled after three failed attempts to
enter PIN1.
SIM PIN2 ME is waiting for PIN2, when the attempt to access PIN2 requiring features was
acknowledged with "+CME ERROR: SIM PIN2 required" (e.g. if the user
attempts to edit the FD phonebook by using AT+CPBS="FD","PIN2").
SIM PUK2 ME is waiting for PUK2 to unblock a disabled PIN2. Necessary if preceding
command was acknowledged with "+CME ERROR: SIM PUK2 required".
PH-SIM PIN ME is waiting for 8-digit code to unlock the UE to a SIM/UICC if "PS" lock is
active and user inserts other SIM card than the one used for the lock. For
details see AT+CLCK="PS".
PH-SIM PUK Not supported.
PH-NET PIN ME is waiting for Network Personalisation. For details see AT+CLCK="PN",
AT^SCSL="PN", AT+CPIN and AT+CPWD for further information.
PH-NET PUK Not supported.

Notes
• Whenever the required password changes, <counter> changes to reflect that change. Please refer to the
examples below.
• See also chapters AT+CLCK, AT^SCSL, AT+CPIN and AT+CPWD for further information on locks and pass-
words.

Examples
EXAMPLE 1
The user fails to provide a correct SIM PIN three times. The counter decreases each time. After the counter
reaches zero, the SIM PUK is required. After each failure to enter a correct SIM PUK, the counter decreases.
at+cpin?
+CPIN: SIM PIN

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 130 of 564
5.2 AT^SPIC

OK Currently required password is PIN1.

at^spic?
^SPIC: SIM PIN
OK Currently required password is PIN1.
at^spic
^SPIC: 3
OK 3 attempts left.
at+cpin="9999"
+CME ERROR: incorrect password
at^spic
^SPIC: 2 2 attempts left.
OK
at+cpin="9999"
+CME ERROR: incorrect password
OK
at^spic
^SPIC: 1 1 attempt left.
OK
at+cpin="9999"
+CME ERROR: incorrect password
at+cpin?
+CPIN: SIM PUK
OK Now required password is PUK1.
at^spic
^SPIC: 10
OK 10 attempts left for PUK1.
at+cpin="01234567","1234"
+CME ERROR: incorrect password
at^spic
^SPIC: 9
OK 9 attempts left for PUK1.
EXAMPLE 2
Though a mobile is locked to Network Personalisation ("PN"), the user attempts to operate it with another SIM
card. The user correctly enters the SIM PIN of the SIM card currently inserted:
at+cpin="9999"
OK
at+cpin?
+CPIN: PH-NET PIN ME is waiting for the Network Personalisation pass-
word.
OK
at^spic
^SPIC: 10 10 attempts left.
OK
at^spic="PN",1
^SPIC: 10 Maximum retries PIN counter.
OK
at+cpin="11110000"
+CME ERROR: operation failed
at^spic
^SPIC: 9 9 attempts left.
OK
at+cpin="11110000"
+CME ERROR: operation failed
and so on ...
at^spic
^SPIC: 1 1 attempt left.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 131 of 564
5.2 AT^SPIC

OK
at^spic?
^SPIC: PH-NET PIN Displayed counter refers to Network Personalisation
password.
OK

at+cpin="12345678" The password is a self defined module specific pass-

word.
OK
EXAMPLE 3
This example shows that after successful SIM PIN1 authentication the counter of the AT^SPIC execute and
read command refers to SIM PIN2, i.e. it does not reflect the status of SIM PIN1. This may be a problem if
the user enters a wrong PIN1 and is not aware that the number of attempts left to enter SIM PIN1 is counted
down.
+CREG: 0
at+cpin="1234"
OK
+CREG: 2

+CREG: 1 The mobile ist properly registered to the network.

at+cpin?
+CPIN: READY The AT+CPIN? read command confirms that SIM
PIN1 authentication was successful.
at^spic
^SPIC: 3 As SIM PIN1 authentication was successful, the
counter relates to SIM PIN2 and correctly indicates
that the user has 3 attempts to enter SIM PIN2.
OK
AT^SPIC? Likewise, the read command notifies that the ME is
waiting for SIM PIN2.
^SPIC: SIM PIN2
OK
at+clck="SC",0,"456789" First attempt to enter a wrong SIM PIN1.
+CME ERROR: incorrect password
at^spic
^SPIC: 3 SIM PIN1 authentication is still valid, and the counter
relates to SIM PIN2.
at+clck="SC",0,"456789" Second attempt to enter a wrong SIM PIN1.
+CME ERROR: incorrect password
at^spic
^SPIC: 3 SIM PIN1 authentication is still valid, and the counter
relates to SIM PIN2.
at+clck="SC",0,"456789" Third attempt to enter a wrong SIM PIN1.
+CME ERROR: incorrect password

+CREG: 0 SIM PIN1 authentication is no longer valid.

at^spic
^SPIC: 10 This time, after the SIM PIN1 code has been dis-
abled, the counter indicates the status of SIM PIN1
and notifies that 10 attempts are left to enter the SIM
PUK.
To avoid conflicts we recommend to use the AT^SPIC read and write commands rather than the execute com-
mand only. The read command clearly states the currently required password, and the write command may
be used to get the counter for a specific <facility>, in this case for example "P2".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 132 of 564
5.3 AT+CLCK

5.3 AT+CLCK Facility Lock

AT+CLCK can be used to lock, unlock or interrogate a network or UE <facility>. The command can be
aborted when network facilities are being set or interrogated.

Syntax
Test Command
AT+CLCK=?
Response(s)
+CLCK:list of supported <facility>s
OK
Write Command
AT+CLCK=<facility>, <mode>[, <password>][, <class>][, <data>]
Response(s)
If <mode> is 0 or 1 and command successful:
OK
If <mode>= 2 and command successful:
+CLCK: <status>[, <class>]
[+CLCK: <status>[, <class>]]
[+CLCK: ...]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ ± - 3GPP TS 27.007 [51],

3GPP TS 22.004 [28],
3GPP TS 22.088 [36],
3GPP TS 23.088,
3GPP TS 24.088

Parameter Description

<facility>(str)
Phone security locks set by client or factory:
Primarily intended for the client to take safety precautions, "SC" can be configured individually.
Parameter <class> is not applicable to security locks.
See examples below for further details.
“SC“ SIM (lock SIM card).
SIM requests password upon UE power-up and when this lock command is
issued.
<password>: SIM PIN1.
“PS“ PH SIM (lock PHone to SIM/UICC card).
UE asks for <password> when other than current SIM/UICC card is inserted.
<password>: PH-SIM PIN.
This 8-digit code is unique for each device. The PH-SIM PIN is necessary to
lock the UE to a SIM/UICC. The <password> is a self defined module specific
password and must be unique for each device. Parameter <class> is not
applicable. To allow for any later changes, it is the responsibility of the manu-
facturer to hold a database with the module specific passwords.
To avoid unauthorized use, the PH-SIM PIN should not be provisioned to end

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 133 of 564
5.3 AT+CLCK

users.
Be careful to enter wrong <password> when unlock with <mode>=0 the UE.
After having entered 10 times a wrong <password> the UE is blocked and
there is no chance to unblock it !
“FD“ SIM Fixed Dialing Phonebook lock.
If "FD" lock is enabled numbers or public MMI *# codes can be used only if they
start with matching numbers or characters stored in the "FD" phonebook. Num-
bers stored to the "FD" phonebook must not contain the call modifiers
"I","i","*31#", "#31#".
The capacity of the "FD" phonebook is depending on the SIM card.
<password>: SIM PIN2 is mandatory for <mode>=0 (unlock) or <mode>=1
(lock).
Any attempt to dial a string not specified in the "FD" phonebook will be denied,
causing an error result code. The type of result code varies depending on the
type of service:
"+CME ERROR: call barred" for voice calls, packet switched connections and
*# codes for Supplementary Services and USSD.
"+CMS ERROR: operation not allowed" for SMS.

If "FD" lock is enabled the following applies:

• Handling of AT+CCFC:
The "FD" lock is effective only for AT+CCFC <mode> 3 (registering the CF
destination number). All other functions provided by AT+CCFC are not
restricted by the "FD" lock.
• Handling of USSD:
Access to Unstructured Supplementary Services is possible with ATD if the
ATD dial string starts with a matching *# code stored in the "FD" phone-
book. The USSD command AT+CUSD, however, is not barred by an "FD"
lock.
• SMS can be sent only to phone numbers which are stored in the "fixed dial-
ing numbers" phonebook "FD".
If SMS numbers are missing in "FD" phonebook, indication is "+CMS
ERROR: operation not allowed".

Supplementary Service Call Barring:

Supplementary Service "Call Barring" allows to specify conditions under which calls will be disallowed by the
network.
The availability of the Supplementary Services varies with the network. To benefit from call barring the client will
need to subscribe them, though a limited number of call barring types may be included in the basic tariff pack-
age.
When you attempt to set a <facility> or <class> which is not provisioned, not yet subscribed to, or not sup-
ported by the module, the setting will not take effect regardless of the response returned. The responses in these
cases vary with the network (for example "OK", "+CME ERROR: operation not allowed", "+CME ERROR: oper-
ation not supported" etc.). To make sure check the extended error response with AT+CEER and the lock status
with <mode>=2.
<password>: Network password supplied from the provider or operator. Usually there is one password which
applies to all call barring options. For details contact your provider.
“AO“ BAOC (Bar All Outgoing Calls)
“OI“ BOIC (Bar Outgoing International Calls)
“OX“ BOIC-exHC (Bar Outgoing International Calls except to Home Country)
“AI“ BAIC (Bar All Incoming Calls)
“IR“ BIC-Roam (Bar Incoming Calls when Roaming outside the Home Country)
“AB“ All Barring services (applicable only for <mode>=0)
“AG“ All outGoing barring services (applicable only for <mode>=0)
“AC“ All inComing barring services (applicable only for <mode>=0)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 134 of 564
5.3 AT+CLCK

<mode>(num)
0 Unlock (parameter <password> is mandatory).
1 Lock (parameter <password> is mandatory).
2 Query status.

<status>(num)
0 Lock is inactive
1 Lock is active

<password>(str)
Password string used to lock and to unlock a <facility>. Length and authority for passwords depend on the
<facility> in question and are therefore listed in the section on parameter <facility>. Passwords which
can be modified see AT+CPWD.
The <password> for <facility>="PS" is a self defined module specific password and must be unique for
each device.

<class>(num)
Integer or sum of integers each representing a class of information, i.e. a bearer service, telecommunication ser-
vice or bearer service group as defined in 3GPP TS 22.004 [28]. Values related to data connectivity are listed
for compatibility reasons, but are not supported by PLS63-W.
1 Voice
2 Class 2 ("Data") comprises all those individual data classes between 16 and
128, that are supported both by the network and the MS. This means, a setting
made for class 2 applies to all individual data classes (if supported). In addition,
you can assign a different setting to a specific class. For example, you can acti-
vate Call Forwarding for all data classes, but deactivate it for data class 64,
"dedicated packet access".
4 Fax (only for compatibility reasons, not supported by PLS63-W)
8 SMS
16 Data circuit sync
32 Data circuit async
64 Dedicated packet access
128 Dedicated PAD access
1...[7]...255 Combination of some of the above classes.
For example, the default setting 7 represents the sum of the integers 1, 2 and
4 for voice, data and fax (fax only for compatibilty reasons) .
The value 255 covers all classes.
If parameter "class" is omitted, the default value 7 is used.

<data>(str)
Data of the allowed network operators.
Each operator code consists of the "Mobile Country Code" MCC and the "Mobile Network Code" MNC, both sep-
arated by a dot, e.g. MCC1.MNC1 . If more than one operator is entered on the same line, then a colon must be
set between each operator code, e.g. MCC1.MNC1:MCC2.MNC2:MCC3.MNC3 . For example, for the three
operators T-Mobile D1, Vodafone D2 and E-Plus you would enter the following data: 262.01:262.02:262.03
New operator entries will not be added to an existing list. If you need to add new operator entries please unlock
the old one and send the complete list once again.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 135 of 564
5.3 AT+CLCK

Notes
• The AT+CLCK command offers the full range of <class> parameters according to the 3GPP Technical Spec-
ifications. However, when you attempt to use a service option which is not provisioned or not yet subscribed
to, the setting will not take effect regardless of the response returned.
The responses in these cases vary with the network (for example "OK", "Operation not allowed", "Operation
not supported" etc.). To make sure check the extended error response with AT+CEER and the lock status with
<mode>=2.
• The command has been implemented with the full set of <class> parameters according to
3GPP TS 27.007 [51]. For actual applicability of a desired Call barring service to a specific service or service
group (a specific <class> value) please consult table A.1 of 3GPP TS 22.004 [28].
• If an outgoing Data Call is rejected due to an active <facility>="FD" barring supplementary service, the
call will be terminated with result code NO CARRIER.
Under the same conditions, an outgoing Voice call will be terminated with result code NO DIALTONE.
• In the airplane mode the write command version for the network related <facility> (AO, OI, OX, AI, IR,
AB, AG and AC) is not supported. For remaining facilities the command is fully functional then.
• As stated above <class> 2 is intended only to send the data classes 16/32/64/128 to the network. However,
the responses returned when the subscriber sets or queries the lock refer only to the status of the data classes
received from the network. This means that the responses will display only those data classes between 16
and 128 which are supported by the network and currently activated. There will be no output for class 2, nor
for classes which are not supported or not set.
• The parameter <class> will not be sent to the network if <mode>=2. Therefore it may happen that the
response of the query command contains information about classes which were not requested, or it shows
only the inactive status of the class 1 or 255. This means that the status is valid for all classes.
• Parameter <class> is also allowed by <mode>=2.

Examples
EXAMPLE 1
Lock SIM card (<facility>="SC")
AT+CLCK="SC",1,"9999" The "SC" parameter enables or disables the SIM PIN authentication
(PIN1) when you power up the UE.
OK SIM card locked. As a result, SIM PIN1 must be entered to enable UE
to register to the network.

AT+CLCK="SC",0,"9999" Unlocks SIM card.

OK When powered up, UE registers to the network without requesting SIM
PIN1.
Note: Depending on the services offered by the provider, this feature is
not supported by all SIM card types. If so, the command returns
"ERROR" when you attempt to unlock the card.
To query the status of the SIM card lock:
AT+CLCK="SC",2 Query the status of SIM card lock.
+CLCK: 1 SIM card is locked. SIM PIN1 must be entered to enable UE to register
to the network.
OK
EXAMPLE 2
Phone locked to SIM card (<facility>="PS"):
AT+CPIN? Make sure that PIN1 authentication is valid.
+CPIN: READY
OK
To lock the UE to the currently inserted SIM card use:
AT+CLCK="PS",1,"55555555" Locks the UE to the current SIM card.
OK
Optionally, query the status of the phone locked to SIM card:

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 136 of 564
5.3 AT+CLCK

AT+CLCK="PS",2
+CLCK: 1
OK
To operate the UE with the SIM card for which "PS" lock was activated:
AT+CPIN?
+CPIN: SIM PIN
OK
AT+CPIN="9999"
OK No additional password is required for operation (SIM recognized by
UE).
To operate the UE with other SIM card than the one used for the "PS" lock:
Enter PH-SIM PIN of present card, followed by "PS" lock password.
AT+CPIN?
+CPIN: SIM PIN
OK
AT+CPIN="1111"
OK PIN authentication accepted.
AT+CPIN?
+CPIN: PH-SIM PIN "PS" phone lock password is required.
OK
AT+CPIN="55555555"
OK "PS" phone lock password has been accepted. UE is fully operational
now.
To deactivate the phone locked to SIM card:
AT+CLCK="PS",0,"55555555" "PS" phone lock password has to be provided again.
OK Now the UE can be used with any SIM card, without the need of the
phone lock password.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 137 of 564
5.4 AT+CPWD

5.4 AT+CPWD Change Password

AT+CPWD allows to define a new password for a password protected <facility> lock function. Each password
is a string of digits, the length of which varies with the associated <facility>. The test command returns a list
of pairs which represent the available facilities and the maximum length of the associated password. See AT
command AT+CLCK for more information on the various lock features.

To delete a password use the following syntax: at+cpwd=<facility>,<old password>

Syntax
Test Command

AT+CPWD=?
Response(s)
+CPWD:list of supported (<facility>, <password length>)
OK
Write Command

AT+CPWD=<facility>, <old password>, <new password>

Response(s)
New password has been registered for the facility lock function.
OK
If parameter <old password> was not correct:
+CME ERROR: 16 (+CME ERROR: incorrect password)
If the password for the selected <facility> has been invalidated due to too many failed attempts:
+CME ERROR: ...
If the network provider or network operator doesn't supply the Network Password:
+CME ERROR: 258 (+CME ERROR: retry operation)
If error is related to ME functionality:
+CME ERROR: <err>
PIN  Last Reference(s)

+ ± - 3GPP TS 27.007 [51]

Parameter Description

<facility>(str)
Phone security locks set by client or factory:
Primarily intended for the client to take safety precautions, passwords "SC" (SIM PIN) and "P2" (SIM PIN2) are
usually predefined, but can be configured individually.
“SC“ SIM PIN. SIM requests password upon ME power-up and when this lock com-
mand is issued.
If incorrectly entered three times, the SIM PUK is required to perform authen-
tication. Input of the SIM PUK password is possible only with AT command
AT+CPIN or ATD.
<password length>: 4 to 8 digits.
“P2“ SIM PIN 2, e.g. required for authentication with facility lock "FD" (cf. AT+CLCK).
If incorrectly entered three times, the SIM PUK 2 is required to perform authen-
tication. Input of the SIM PUK 2 password is possible only with AT command
AT+CPIN or ATD.
<password length>: 4 to 8 digits.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 138 of 564
5.4 AT+CPWD

Supplementary Service Call Barring:

The call barring supplementary service allows to specify conditions under which calls will be disallowed by the
network.
The availability of the supplementary services varies with the network. To benefit from call barring the client will
need to subscribe them, though a limited number of call barring types may be included in the basic tariff pack-
age.
<password length>: ThenNetwork password needs to be supplied from the network provider or network
operator. Usually there is one 4 digit password which applies to all call barring options. For details contact your
provider.
“AO“ BAOC (Bar All Outgoing Calls)
“OI“ BOIC (Bar Outgoing International Calls)
“OX“ BOIC-exHC (Bar Outgoing International Calls except to Home Country)
“AI“ BAIC (Bar All Incoming Calls)
“IR“ BIC-Roam (Bar Incoming Calls when Roaming outside the home country)
“AB“ All Barring services
“AG“ All outGoing barring services
“AC“ All inComing barring services

<password length>(num)
4...8 Length of password. The range of permitted length for a password depends on
the associated <facility>. It is available from the test command response,
or in the description of parameter <facility>. If the entered password is lon-
ger then the maximum password length it will be stripped to the maximum
length and the remaining digits will be ignored.

<old password>(str)
Password specified for the facility.
Parameter <old password> can be ignored if no old password was allocated to the facility.
Take into account that a password may have already been set by factory, or that the service is subject to a pass-
word issued by the provider. See notes above or contact provider.

<new password>(str)
New password, which will be set if correct old password is provided.

Notes
• In the airplane mode the write command version for the network related <facility> (AO, OI, OX, AI, IR,
AB, AG and AC) is not supported. For remaining facilities the command is fully functional then.
• As stated above there is usually a one 4-digit password for all call barring facilities. To change the password
please use only the "AB" <facility> (All Barring services).

Examples
EXAMPLE 1
To change PIN1
AT+CPWD="SC","1111","2222" (where "1111" = old PIN1 and "2222" = new PIN1)
OK PIN1 password has been changed to "2222"
EXAMPLE 2
To change PIN2
AT+CPWD="P2","0000","8888" (where "0000" = old PIN2 and "8888" = new PIN2)
OK PIN2 password has been changed to "8888"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 139 of 564
5.4 AT+CPWD

EXAMPLE 3
To set the password used to enable or disable Call Barring:
AT+CPWD="AB","0000","3333" Requests the network to change the password for
the call barring supplementary service.
OK Even though issued for "AB" only the request applies
to all other call barring services, too.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 140 of 564
5.5 AT^SCSL

5.5 AT^SCSL Customer SIM Lock

The AT^SCSL command controls the Customer SIM Lock feature. This feature allows application manufacturers
to lock a mobile to specific operators by activating a Network Personalization ("PN"). If the lock is enabled the
mobile will accept only SIM cards from the given operators.
The lock is activated by specifying the mobile country codes and mobile networks codes on command line. The
Customer SIM Lock feature is protected by a depersonalization key.
If a SIM card is inserted AT^SCSL is SIM PIN protected, i.e., changing or querying any settings requires SIM PIN
authentication. If no SIM card is inserted AT^SCSL is not SIM PIN protected, i.e., all settings can be changed and
queried without SIM PIN authentication. The benefit for application manufacturers is that Customer SIM Lock can
be set during production.

Syntax
Test Command

AT^SCSL=?
Response(s)
OK
Write Command

AT^SCSL=<facility>, <action>[, <password>, <data>]

Response(s)
If <action>= 2 and no Customer SIM Lock has been programmed yet:
^SCSL: ""
If <action>= 2, Customer SIM Lock is effective and command is successful:
^SCSL: "<data>[: <data>: <data>: ...]"
OK
ERROR
+CME ERROR: <err>
PIN  Last
± + -

Parameter Description

<facility>(str)
“PN“ Network Personalisation (= Customer SIM Lock).
Be careful to enter wrong <password> when unlock with <action>=0 the
UE.
After having entered 10 times a wrong <password> the UE is blocked and
there is no chance to unblock it !

<action>(num)
0 Delete programmed SIM lock data (unlock) and disable the personalization.
Required parameters: <facility>="PN",<action>=0,<password>.
Removing the Customer SIM Lock deletes all <data>, i.e. the entire list of
operators.
1 Program given Customer SIM Lock data and activate lock.
Required parameters: <facility>="PN",<action>=1,<pass-
word>,<data>.
2 Request Customer SIM Lock status.
Required parameters: <facility>="PN",<action>=2.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 141 of 564
5.5 AT^SCSL

<password>(str)
8-digit depersonalization key associated with the device.
The depersonalization key is necessary for programming a Customer SIM Lock. It can also be used to unlock a
Customer SIM Lock in order to operate the mobile with a SIM other than the one associated with the Customer
SIM Lock. See note below.
The <password> is a self defined module specific password and must be unique for each device.
To allow for any later changes, it is the responsibility of the manufacturer to hold a database with the module
specific passwords. To avoid unauthorized use, the <password> should not be provisioned to end users.
The password is not needed for <action>=2.

<data>(str)
Data of the allowed network operators.
Each operator code consists of the "Mobile Country Code" MCC and the "Mobile Network Code" MNC, both sep-
arated by a dot, e.g. MCC1.MNC1 . If more than one operator is entered on the same line, then a colon must be
set between each operator code, e.g. MCC1.MNC1:MCC2.MNC2:MCC3.MNC3 . For example, for the three
operators T-Mobile D1, Vodafone D2 and E-Plus you would enter the following data: 262.01:262.02:262.03
New operator entries will not be added to an existing list, but overwrite all old entries. If you need to add new
operator entries please send the complete list once again.

Notes
• Usage of the Customer SIM Lock features may be restricted by existing facility locks, such as a factory set
SIM lock.
• When reprogramming an active SIM lock, first delete the current SIM Lock and request the new SIM Lock.
• As described above the depersonalization key <password> is needed for programming a Customer SIM
Lock with AT^SCSL.
It can also be used to unlock an existing Customer SIM Lock in order to operate the mobile with a SIM other
than the one associated with the Customer SIM Lock. In such case, if the user inserts an unsupported SIM
and enters PIN1 the ME returns OK, although access to SIM related commands (such as dialing out, access
to phonebooks, SMS etc.) will be denied. If then the read command AT+CPIN? is executed the ME will
request the PH-NET PIN, i.e. the <password>. After entering the <password> the ME can be operated with
the new SIM. To avoid unauthorized use, the <password> should not be provisioned to end users.

Example
The example shows how to use the <password> which is self defined and must be module specific. Configuring
and removing the Customer SIM Lock is then possible.
AT^SCSL="PN",2 Request status.
^SCSL: "" SIM lock disabled.
OK
AT^SCSL="PN",1,"12345678","262.01:262.02" Program Customer SIM Lock.
OK
AT^SCSL="PN",2 Request status
^SCSL: "262.01:262.02" SIM lock is enabled.
OK
AT^SCSL="PN",0,"12345678" Remove Customer SIM Lock.
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 142 of 564
5.6 AT^SSECUA

5.6 AT^SSECUA Internet Service Certificate Store Actions

AT^SSECUA can be used to initialize and update the Internet Services Certificate Store of the PLS63-W by pre-
configured certificates. Also certificates of the pre-configured and Internet Service certification store can be
deleted.

The initialization is possible only in case the Internet Service certificate store is empty, otherwise ERROR is
returned. In case the client certificate with key was not pre-configured at the factory, the command returns
ERROR and no certificate is copied.

It is possible to update only the server certificates in the Internet Service certificate store. Additionally after firm-
ware update procedure it is possible to update the list of server certificates in the Internet Service certificate store
in case it has changed with the latest firmware update procedure. The server certificates that are not currently
configured in the active Internet Service certificate store but are in the pre-configured list are added. Firmware
update procedure can also introduce list of certificates to be revoked. Those server certificates for which thumb-
print is included in the revocation list are removed from the Internet Service certificate store.

Syntax
Test Command
AT^SSECUA=?
Response(s)
^SSECUA:"CertStore/TLS/PreconfigureCerts"
^SSECUA:"CertStore/TLS/PreconfigureCert"
^SSECUA:"CertStore/TLS/UpdateServerCerts"
OK
Write Command

Initialize Internet Service Certificate Store with preconfigured server certificates and a pair of private certificate
and key.
AT^SSECUA="CertStore/TLS/PreconfigureCerts"[, <signature>]
Response(s)
^SSECUA: "CertStore/TLS/PreconfigureCerts", <index>
[... ]
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
Write Command

Initialize Internet Service Certificate Store with only selected certificate.

AT^SSECUA="CertStore/TLS/PreconfigureCert"[, <signature>], <preloaded-index>
Response(s)
^SSECUA: "CertStore/TLS/PreconfigureCerts", <index>
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
Write Command
Internet Service Certificate Store Update for server certificates.
AT^SSECUA="CertStore/TLS/UpdateServerCerts"[, <signature>], <mode>
Response(s)
^SSECUA: "CertStore/TLS/UpdateServerCerts", <index>, <action>
[... ]
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 143 of 564
5.6 AT^SSECUA

Write Command (Continued)

Internet Service Certificate Store Update for server certificates.

AT^SSECUA="CertStore/TLS/UpdateServerCerts"[, <signature>], <mode>
Response(s)
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Unsolicited Result Code

Format of the certification update indicator:
^SSECUA: "CertStore/TLS/UpdateServerCerts", <index>, <action>
[... ]
When <certUpdateMode>" is set to automatic mode, the module will generate URCs messages during boot
after changing firmware and successful certificates update. The URCs messages are sent for each certificate,
which is changed.

Parameter Description

<signature>(str)
Signature used to authenticate the command if the TLS server and client authentication certificates are config-
ured to be protected in secure mode (i.e. <secmode>=1 or 2, <sectag>="TLS", and <secmap>="0x0001"),
otherwise the value is "don't care".
IMEI is required in the signature only when "Secure mode with certificate + IMEI" is enabled (i.e. <secmode>=2).

<mode>(str)
Mode used to control how the certificates will be updated.
“0“ Perform revocation and replacement of revoked certificates only.
[“1“] Copy all certificates that are not yet in IS certificate store.

<index>(num)
1...30 index of Internet Service certification store, where the server certificate is
added or removed.

<preloaded-index>(num)
1...30 index of Internet Service certification store, where the certificate is added .

<action>(num)
0 for removed certificate
1 for added certificate

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 144 of 564
5.6 AT^SSECUA

Notes
• In case there is not enough space currently to store all added certificates then only part of the certificates are
added and ERROR returned.
• The client certificate at index 0 of Internet Service certificate store cannot be updated. The command returns
ERROR in case the certificate at index 0 is empty in Internet Service certificate store.
• After successful manual/automatic Internet Service store update the preconfigured certificates set is not
removed.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 145 of 564
5.7 AT^SSECUC

5.7 AT^SSECUC Internet Service Certificate Store Update Configura-

tion

AT^SSECUC="CertStore/TLS/UpdateServerCerts/Mode" can be used to configure and query the update mode

for the Internet Services Certificate Store of the PLS63-W.

AT^SSECUC="SEC/MODE" can be used to configure and query the Secure Mode of the PLS63-W.

AT^SSECUC="SEC/LEVEL" can be used to configure and query the Secure Level of the PLS63-W.

AT^SSECUC="CoT/omitRoT" can be used to configure the usage of Root-of-Trust (R-o-T) in the Chain-of-Trust
(C-o-T) according to RFC 5246 and RFC 6347 for Internet Service of the PLS63-W.

Syntax
Test Command

AT^SSECUC=?
Response(s)
^SSECUC:"CertStore/TLS/UpdateServerCerts/Mode", maximum length of (<signature>), list of supported
(<certUpdateMode>)s
^SSECUC:"SEC/MODE", maximum length of (<signature>), list of supported (<secmode>)s
^SSECUC:"SEC/LEVEL", maximum length of (<signature>), list of supported (<sectag>)s, list of
supported (<secmap>)s
^SSECUC:"CoT/omitRoT", maximum length of (<signature>), list of supported (<omitRoT>)s
OK
Write Command

Internet Service Certification Store update configuration and query update mode
AT^SSECUC="CertStore/TLS/UpdateServerCerts/Mode"[[, <signature>], <certUpdateMode>]
Response(s)
^SSECUC: "CertStore/TLS/UpdateServerCerts/Mode", <certUpdateMode>
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
Write Command

Secure Mode Control - Protect Asset Modification on Module

AT^SSECUC="SEC/MODE", <signature>, <secmode>
Response(s)
^SSECUC: "SEC/MODE", <secmode>
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
Write Command
Secure Level Control - control the security setting in the various functional groups as designated by <sectag>
AT^SSECUC="SEC/LEVEL", <signature>, <sectag>, <secmap>
Response(s)
^SSECUC: "SEC/LEVEL", <sectag>, <secmap>
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 146 of 564
5.7 AT^SSECUC

Write Command

Configure if Root-of-Trust is included in Chain-of-Trust for TLS handshake at TLS connection setup.
AT^SSECUC="CoT/omitRoT"[, <signature>, <omitRoT>]
Response(s)
^SSECUC: "CoT/omitRoT", <omitRoT>
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<signature>(str)
Signature used to authenticate the command if the asset is configured to be protected in secure mode, otherwise
the value can be omitted.
IMEI is required in the signature only when "Secure mode with certificate + IMEI" is enabled (i.e. <secmode>=2).

<certUpdateMode>(str)(NV)
“0“(D) Only manual IS certificate store update from pre-configured set can be done
using the AT^SSECUA="CertStore/TLS/UpdateServerCerts"[,<signature>]
“1“ Manual IS certificate store update from pre-configured set without signature
verification can be done using the AT^SSECUA="CertStore/TLS/UpdateServer-
Certs"
“2“ Perform automatic IS certificate store update after each pre-configured certifi-
cate set update (e.g. after firmware update)
“3“ Perform automatic revocation and certificate replacement (mode 0) in IS certif-
icate store update after each pre-configured certificate set update (e.g. after
firmware update).

<secmode>(str)
Secure Mode.
“0“(D) Unsecured mode
“1“ Secure mode with certificate only (set and query) where AT commands and
other means to access or modify security-relevant configuration data, creden-
tials and code are protected by a cryptographic signature based on the secure-
mode certificate loaded onto the module.
“2“ Secure mode with certificate + IMEI (set and query) where AT commands and
other means to access or modify security-relevant configuration data, creden-
tials and code are protected by a cryptographic signature based on the secure-
mode certificate loaded onto the module and on the IMEI of the module (for
customer IMEI modules the module serial no. is used instead).

<sectag>(str)
Secure Tag.
“TLS“ Define 2 bits in <secmap> to protect TLS related assets, including TLS server,
TLS client, pre-shared symmetric keys, and TLS stack configuration.
“DevMan“(D) Define 2 bits in <secmap> to protect LwM2M client and IoT Service agent
related assets.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 147 of 564
5.7 AT^SSECUC

<secmap>(str)
Secure Map. Containing a bitmap describing which assets to protect.
“0x0001“ When <sectag>="DevMan":
Bitmap to protect the configuration of DM security, server, and basic device
identification parameters. When <sectag>="TLS":
Bitmap to protect TLS server authentication certificates resp. root of trust, TLS
client authentication certificate chain and private key, and TLS pre-shared
symmetric keys (if applicable).
“0x0002“ Only when <sectag>="TLS":
Bitmap to protect the TLS stack configuration.
“0xFFFF“ When <sectag>="DevMan":
Bitmap to protect the complete DM configuration, values, and DM client states
(including starting and stopping the client). When <sectag>="TLS":
Bitmap to protect all the TLS related assets, including TLS server, client, pre-
shared symmetric keys, and stack configuration.

<omitRoT>(num)(NV)
Configure the sending of the Root-of-Trust within TLS handshake at TLS connection setup.
0 Include the Root-of-Trust
(D)
1 Omit the Root-of-Trust when sending TLS handshake (factory default)

Note
• AT^SSECUC="CertStore/TLS/UpdateServerCerts/Mode" without any parameters queries current <certUp-
dateMode> value.

The configuration of AT^SSECUC="SEC/LEVEL" takes effect only when secure mode is enabled (<sec-
mode>=1 or 2).

AT^SSECUC="CoT/omitRoT" without any parameters queries current <omitRoT> value.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 148 of 564
5.8 AT^SSECRUN

5.8 AT^SSECRUN Signature Authentication for Protected Com-

mands in Secure Mode

When Secure Mode is on (i.e. AT^SSECUC="SEC/MODE" is set to "1" or "2") and proper Secure Level is set, the
following AT commands are protected by Secure Mode. Signature authentication using AT^SSECRUN write com-
mand is required before executing these protected AT commands.

For Secure level with <sectag>="DevMan":

• AT^SNLWM2M
For Secure level with <sectag>="TLS":
• AT^SCFG="Tcp/TLS/Version"
• AT^SBNW="ciphersuites"
• AT^SBNW="is_cert"
• AT^SBNW="management_cert"

AT^SSECRUN write command provides one-time authentication on the command immediately following it, with 2
steps below:
• Run AT^SSECRUN with a valid signature for the protected AT command.
• Enter the protected AT command immediately on the same AT command port.

Note that the signature cache will be cleared after the execution of the command immediately following it. For
any repeated execution of the protected AT commands, repeat the 2 steps above.

Syntax
Write Command
Signature authentication for protected commands in Secure Mode
AT^SSECRUN="sign", <at-command-signature>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<at-command-signature>(str)
Signature used to authenticate the command protected by Secure Mode. Note that the signature cache will be
cleared after the execution of the command immediately following it.

Note
• AT^SSECRUN="sign", <at-command-signature> supports command concatenation. To do so, enter the
separator semicolon ";" followed by the protected command and parameters, without prefix "AT", as follows:

Example:
AT^SSECRUN="sign",<at-command-signature>;^SCFG="TCP/TLS/VERSION",1.1,1.2.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 149 of 564
6. Identification Commands

6. Identification Commands

The AT Commands described in this chapter allow the external application to obtain various identification infor-
mation related to the PLS63-W and linked entities.

6.1 ATI Display product identification information

The ATI execute command delivers a product information text.

Syntax
Exec Command
ATI
Response(s)
Cinterion
PLS63-W
REVISION xx.yyy
OK
Exec Command

ATI1
Response(s)
Cinterion
PLS63-W
REVISION xx.yyy
A-REVISION xx.zzz.cc
OK
Exec Command

ATI2
Response(s)
UICC Application Identification <applId>
OK
ERROR
+CME ERROR: <err>
Exec Command

ATI8
Response(s)
C-REVISION ccccc.vv
OK
Exec Command

ATI61
Response(s)
[<provCfg> <mdmSwVer>]
[<provCfg> <mdmSwVer>]
[...]
xxx.<cProvCfg>
MIMG <mdmImage>
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 150 of 564
6.1 ATI

Exec Command

ATI176
Response(s)
<imeisv_number>
OK
PIN  Last Reference(s)

± + - ITU-T V.250 [18]

Parameter Description

<applId>(num)
UICC application types. A single value or a combination of the following values is possible.
For example, the response value 0x03 represents the sum of the integers 0x01 and 0x02 (GSM application and
USIM application).
0x01 GSM application
0x02 USIM application
0x04 ISIM application
0x08 CSIM application
ATI2 command requires SIM-PIN to be provided.

<provCfg>(text)
Possible provider configuration.
For details on how to change the provider configuration see AT^SCFG parameter "MEopMode/Prov/Cfg" (see
<provCfg>).
The fallback configuration is indicated by a "*".

<mdmSwVer>(text)
Modem software version number.

<cProvCfg>(text)
Current provider configuration.

<mdmImage>(text)
Modem image.

<imeisv_number>(num)
IMEISV (International Mobile station Equipment Identity and Software Version number) conforming to the for-
mat: <IMEI>.<SVN>. For information on IMEISV refer to 3GPP TS 23.003 and 3GPP TS 27.007 [51].

Notes
• The "Revision" information consists of the following parts: Version xx and variant yyy of software release.
• "A-REVISION xx.zzz.cc" information consists of the following parts:
Application Revision Number 'xx' as an assignment to customer application. '01' indicates no customer appli-
cation.
Application Revision Version 'zzz' as an assignment to changes in customer application.
'cc' as an additional number, e.g. defined by customer.
• If the user changed the setting of the AT^SCFG parameter "Ident/Manufacturer", then instead of "Cinterion"
the changed value will be returned (for details please refer to description of parameter <manufacturer>).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 151 of 564
6.1 ATI

• If the user changed the setting of the AT^SCFG parameter "Ident/Product", then instead of "PLS63-W" the
changed value will be returned (for details please refer to description of parameter <product>).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 152 of 564
6.2 AT+CGMI

6.2 AT+CGMI Request manufacturer identification

AT+CGMI returns a manufacturer identification text. See also: AT+GMI.

Syntax
Test Command

AT+CGMI=?
Response(s)
OK
Exec Command

AT+CGMI
Response(s)
Cinterion
OK
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Note
• If the user changed the setting of the AT^SCFG parameter "Ident/Manufacturer", then instead of "Cinterion"
the changed value will be returned (for details please refer to description of parameter <manufacturer>).

6.3 AT+GMI Request manufacturer identification

AT+GMI returns a manufacturer identification text. See also: AT+CGMI.

Syntax
Test Command
AT+GMI=?
Response(s)
OK
Exec Command
AT+GMI
Response(s)
Cinterion
OK
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Note
• If the user changed the setting of the AT^SCFG parameter "Ident/Manufacturer", then instead of "Cinterion"
the changed value will be returned (for details please refer to description of parameter <manufacturer>).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 153 of 564
6.4 AT+CGMM

6.4 AT+CGMM Request model identification

AT+CGMM returns a product model identification text. Command is identical with AT+GMM.

Syntax
Test Command

AT+CGMM=?
Response(s)
OK
Exec Command

AT+CGMM
Response(s)
PLS63-W
OK
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Note
• If the user changed the setting of the AT^SCFG parameter "Ident/Product", then instead of "PLS63-W" the
changed value will be returned (for details please refer to description of parameter <product>).

6.5 AT+GMM Request model identification

AT+GMM returns a product model identification text. Command is identical with AT+CGMM.

Syntax
Test Command
AT+GMM=?
Response(s)
OK
Exec Command
AT+GMM
Response(s)
PLS63-W
OK
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Note
• If the user changed the setting of the AT^SCFG parameter "Ident/Product", then instead of "PLS63-W" the
changed value will be returned (for details please refer to description of parameter <product>).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 154 of 564
6.6 AT+CGMR

6.6 AT+CGMR Request revision identification of software status

AT+CGMR delivers a product firmware version identification. Command is identical with AT+GMR.

Syntax
Test Command

AT+CGMR=?
Response(s)
OK
Exec Command

AT+CGMR
Response(s)
REVISION <xx.yyy>
OK
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<xx.yyy>(text)
Version xx and variant yyy of software release.

6.7 AT+GMR Request revision identification of software status

AT+GMR delivers a product firmware version identification. Command is identical with AT+CGMR.

Syntax
Test Command

AT+GMR=?
Response(s)
OK
Exec Command

AT+GMR
Response(s)
REVISION <xx.yyy>
OK
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Parameter Description

<xx.yyy>(text)
Version xx and variant yyy of software release.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 155 of 564
6.8 AT+CGSN

6.8 AT+CGSN Request International Mobile Equipment Identity

(IMEI)

AT+CGSN returns the International Mobile Equipment Identity (IMEI). Command is identical with AT+GSN.

Syntax
Test Command
AT+CGSN=?
Response(s)
OK
Exec Command
AT+CGSN
Response(s)
<sn>
OK
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<sn>(text)
IMEI used to identify mobile equipment when used on a mobile network.

6.9 AT+GSN Request International Mobile Equipment Identity (IMEI)

AT+GSN returns the International Mobile Equipment Identity (IMEI). Command is identical with AT+CGSN.

Syntax
Test Command

AT+GSN=?
Response(s)
OK
Exec Command

AT+GSN
Response(s)
<sn>
OK
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Parameter Description

<sn>(text)
IMEI used to identify mobile equipment when used on a mobile network.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 156 of 564
6.10 AT+CIMI

6.10 AT+CIMI Request International Mobile Subscriber Identity (IMSI)

AT+CIMI delivers the International Mobile Subscriber Identity (IMSI). The IMSI permits the TE to identify the indi-
vidual SIM attached to the UE.

Syntax
Test Command
AT+CIMI=?
Response(s)
OK
Exec Command
AT+CIMI
Response(s)
<imsi>
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<imsi>(text)
International Mobile Subscriber Identity

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 157 of 564
6.11 AT^SINFO

6.11 AT^SINFO Information Output

The AT^SINFO command delivers general product information text.

Syntax
Test Command

AT^SINFO=?
Response(s)
OK
Read Command

AT^SINFO?
Response(s)
^SINFO: "RPM", <RpmFlag>, <RpmN1>, <RpmT1>, <RpmF1>, <RpmF2>, <RpmF3>, <RpmF4>, <RpmLR-
1>, <RpmLR-2>, <RpmLR-3>, <RpmC-BR-1>, <RpmC-R-1>, <RpmC-PDP-1>, <RpmC-PDP-2>, <RpmC-
PDP-3>, <RpmC-PDP-4>, <RpmVer>, <RpmOrigin>
OK
ERROR
+CME ERROR: <err>
Write Command

Display loaded RPM (Radio Policy Manager) parameters

AT^SINFO="RPM"
Response(s)
^SINFO: "RPM", <RpmFlag>, <RpmN1>, <RpmT1>, <RpmF1>, <RpmF2>, <RpmF3>, <RpmF4>, <RpmLR-
1>, <RpmLR-2>, <RpmLR-3>, <RpmC-BR-1>, <RpmC-R-1>, <RpmC-PDP-1>, <RpmC-PDP-2>, <RpmC-
PDP-3>, <RpmC-PDP-4>, <RpmVer>, <RpmOrigin>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<RpmFlag>(str)
The AT^SINFO "RPM" command returns the loaded RPM (Radio Policy Manager) parameters specified in the
GSMA "TSG.34/TS.34 - IoT Device Connection Efficiency Guidelines", as of Version 1.x, chapter 8. For further
information see also the GSMA "TSG.35/TS.35 - IoT Device Connection Efficiency Test Book".
See also AT^SCFG "MEopMode/SRPOM" parameter <srpom>.
“0“ RPM disabled
“1“ RPM enabled

<RpmN1>(str)
Max number of SW resets per hour allowed by RPM following "permanent" MM/GMM/EMM reject.
“0“ Requirement disabled.
"1"..."255" Number of resets per hour.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 158 of 564
6.11 AT^SINFO

<RpmT1>(str)
T1. Average time before RPM resets modem following permanent MM/GMM/EMM reject.
“0“ Requirement disabled.
"1"..."255" Defines in 6 min increments the time to reset after receiving a permanent MM/
GMM/EMM reject, i.e. MM#2.

<RpmF1>(str)
F1. Max. number of PDP Activation Requests per Hour allowed by RPM following a PDP Activation Ignore Sce-
nario.
“0“ Requirement disabled.
"1"..."255" Defines in 6 min increments the time to reset after receiving a permanent MM/
GMM/EMM reject, i.e. MM#2.

<RpmF2>(str)
F2. Max number of PDP Activation Requests per Hour allowed by RPM following a "Permanent" PDP Activation
Reject.
“0“ Requirement disabled.
"1"..."255" Max. attempts allowed.

<RpmF3>(str)
F3. Max number of PDP Activation Requests per Hour allowed by RPM following a "Temporary" PDP Activation
Reject.
“0“ Requirement disabled.
"1"..."255" Max. attempts allowed.

<RpmF4>(str)
F4. Max number of PDP Activation/Deactivation Requests per Hour allowed by RPM.
“0“ Requirement disabled.
"1"..."255" Max. attempts allowed.

<RpmLR-1>(str)
LR-1. Leak rate for C-BR-1.
“0“ C-BR-1 shall not be decremented.
"1"..."255" Defines number of hours before C-BR-1 is decremented by 1.

<RpmLR-2>(str)
LR-2. Leak rate for C-R-1.
“0“ C-R-1 shall not be decremented.
"1"..."255" Defines number of hours before C-R-1 is decremented by 1.

<RpmLR-3>(str)
LR-3. Leak rate for C-R-3.
“0“ C-PDP-1 TO C-PDP-4 shall not be decremented.
"1"..."255" Defines number of hours before C-PDP-1 TO C-PDP-4 is decremented by 1.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 159 of 564
6.11 AT^SINFO

<RpmC-BR-1>(str)
C-BR-1. Counter related to N1.
"1"..."255" Indicate number of control actions triggered by N1.

<RpmC-R-1>(str)
C-R-1. Counter related to T1.
"1"..."255" Indicate number of control actions triggered by T1.

<RpmC-PDP-1>(str)
C-PDP-1. Counter related to F1.
"1"..."255" Indicate number of control actions triggered by F1.

<RpmC-PDP-2>(str)
C-PDP-2. Counter related to F2.
"1"..."255" Indicate number of control actions triggered by F2.

<RpmC-PDP-3>(str)
C-PDP-3. Counter related to F3.
"1"..."255" Indicate number of control actions triggered by F3.

<RpmC-PDP-4>(str)
C-PDP-4. Counter related to F4.
"1"..."255" Indicate number of control actions triggered by F4.

<RpmVer>(str)
RPM version implemented on the device

<RpmOrigin>(str)
Origination of RPM parameters
“0“ UE's memory
“1“ USIM

Notes
• We can display the parameters also if RPM is disabled (can be disabled by SIM or by enable flag from EFS).
• RPM init is done after PIN verification, so before PIN verification most of the RPM data is not valid.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 160 of 564
7. Call related Commands

7. Call related Commands

The AT Commands described in this chapter are related to Mobile Originated (MOC, i.e. outgoing) Calls and
Mobile Terminated (MTC, i.e. incoming) Calls.

7.1 ATA Connect to Incoming Call

ATA connects the PLS63-W to an incoming voice call indicated by a "RING" URC. AT+CRC allows to customize
the format of the incoming call URC.
ATA may also be used to accept a network request for a PDP context activation (see ATA).

Additional AT commands on the same command line are ignored.

The command may be aborted by any character sent from the TE to the UE during execution. It cannot be
aborted in some connection setup states, such as handshaking.

Syntax
Exec Command

ATA
Response(s)
In case of voice call, if successfully connected:
OK
If incoming call is not available, i.e. already disconnected or hung up:
NO CARRIER
PIN  Last Reference(s)

+ - + ITU-T V.250 [18]

Parameter Description

<text>(str)
Connection speed
Presented only if ATX parameter setting is greater 0. See also ATV.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 161 of 564
7.2 ATD

7.2 ATD Mobile originated call to specified number

ATD can be used to set up outgoing voice calls. The termination character ";" is mandatory. The command may
be aborted by any character sent from the TE to the UE during execution. It cannot be aborted in some connec-
tion setup states, such as handshaking.

Syntax
Exec Command

ATD<n>[<mgsm>];
Response(s)
If voice call successful or not:
OK
When sending *# sequences response is specific to *# sequence. For details see Section 22.1, Star-Hash
(*#) Network Commands
If no dialtone (parameter setting ATX2 or ATX4):
NO DIALTONE
If busy (parameter setting ATX3 or ATX4):
BUSY
If a connection cannot be set up:
NO DIALTONE
BUSY
NO CARRIER
NO ANSWER
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

± - - ITU-T V.250 [18]

Parameter Description

<n>(text)
String of dialing digits and optional V.250 modifiers: 0-9, *, #, +, A, B, C, D
The following V.250 modifiers are ignored: ,(comma), T, P, !, W ,@

<mgsm>(text)
Modifier characters:
I Activates CLIR (disables presentation of own phone number to called party,
*#31#-code will be ignored)
i Deactivates CLIR (enables presentation of own phone number to called party,
*#31#-code will be ignored)
G Activate Closed User Group explicit invocation for this call only.
g Deactivate Closed User Group explicit invocation for this call only.

Notes
• The UE is equipped with a "Blacklist" function according to GSM02.07 Annex A:
After a predefined number of failed call attempts, the dialed number is entered into a read-only phonebook
called "blacklist" (phonebook "BL"). Call attempts to numbers contained in the blacklist will be barred by UE
and not signalled to the network.
An attempt to start a voice call to a barred phone number will be stopped with a "+CME ERROR: call barred".
The barred numbers are automatically removed from the blacklist according to the timing conditions specified
in GSM02.07 Annex A.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 162 of 564
7.2 ATD

• Emergency calls:
If no SIM is inserted, call numbers 000, 08, 110, 112, 118,119, 911 and 999 cause an emergency call setup.
If a SIM with ECC file is inserted, 112 and 911 and all additional call numbers stored in the ECC file cause an
emergency call setup.
If a SIM without or empty ECC file is inserted, call numbers 112 and 911 and in addition all call numbers
enabled with AT^SCFG, "Call/ECC", parameter <ecc> will cause an emergency call setup.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 163 of 564
7.3 ATDL

7.3 ATDL Redial last number used

ATDL redials the last voice and data call number used in the ATD command. If terminated with semicolon ";" ATDL
dials the last voice call number stored in the "LD" phonebook. Otherwise, the last dialed data or fax number will
be used (not contained in the "LD" phonebook).

Syntax
Exec Command

ATDL[;]
Response(s)
If there is no last number or number is not valid:
+CME ERROR: <err>
If no dialtone (parameter ATX2 or ATX4):
NO DIALTONE
If busy (parameter setting ATX3 or ATX4):
BUSY
If connection cannot be set up:
NO CARRIER
NO DIALTONE
If successfully connected and non-voice call (TA switches to online data mode):
CONNECT <text>
When TA returns to command mode after call release:
OK
If successfully connected and voice call:
OK
PIN  Last Reference(s)

+ - - ITU-T V.250 [18]

Notes
• This command may be aborted generally by receiving a character during execution. Abortion is not possible
during some states of connection setup such as handshaking.
• Parameter "I" and "i" only if no *#-code is within the dial string.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 164 of 564
7.4 ATH

7.4 ATH Disconnect existing data connection

ATH disconnects voice calls like AT+CHUP or AT^SHUP.

To disconnect PS data connections refer to AT&D.

Syntax
Exec Command
ATH[<n>]
Response(s)
OK
PIN  Last Reference(s)

+ - - ITU-T V.250 [18]

Parameter Description

<n>(num)
[0] Disconnect from line and terminate data call.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 165 of 564
7.5 AT+CHUP

7.5 AT+CHUP Hang up call

AT+CHUP cancels all voice calls.

For data connections use ATH or AT^SHUP.

Syntax
Test Command
AT+CHUP=?
Response(s)
OK
ERROR
+CME ERROR: <err>
Exec Command
AT+CHUP
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- - - 3GPP TS 27.007 [51]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 166 of 564
7.6 AT^SHUP

7.6 AT^SHUP Hang up call(s) indicating a specific 3GPP TS 24.008

release cause

The AT^SHUP write command terminates calls known to the UE and indicates a specific 3GPP TS 24.008 [43]
release cause specified by the user. Calls will be terminated regardless of their current call status, which may be
any of the states listed with AT+CLCC.

Syntax
Test Command

AT^SHUP=?
Response(s)
OK
Write Command

AT^SHUP=<cause>[, <cn>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

Parameter Description

<cause>(num)
Release cause
3GPP TS 24.008 [43] release cause to be indicated to the network.
The PLS63-W will release the selected connection(s) with release cause indication "cause" and location "user"
(0) in the "disconnect" protocol message to the network. It depends on the network whether or not the release
cause will be forwarded to the remote party.
1 Send 3GPP TS 24.008 [43] release cause "unassigned (unallocated) number"
16 Send 3GPP TS 24.008 [43] release cause "normal call clearing "
17 Send 3GPP TS 24.008 [43] release cause "user busy "
18 Send 3GPP TS 24.008 [43] release cause "no user responding "
21 Send 3GPP TS 24.008 [43] release cause "call rejected"
27 Send 3GPP TS 24.008 [43] release cause "destination out of order "
31 Send 3GPP TS 24.008 [43] release cause "normal, unspecified"
88 Send 3GPP TS 24.008 [43] release cause "incompatible destination"

<cn>(num)
Call number
The "call number" is an optional index used in the list of current calls indicated by AT+CLCC. The AT^SHUP com-
mand will terminate the call identified by the given call number. The default call number "0" is not assigned to
any call, but signifies "all calls". As "0" is the default value, it may be omitted.
[0] Terminate all known calls.
1...7 Terminate the specific call number <cn>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 167 of 564
7.6 AT^SHUP

Note
• Multiparty calls within a IMS call cannot be terminated individually by AT^SHUP command, due to limitations
of the IMS standard. For releasing an individual IMS multiparty call you have to use AT+CHLD=1x instead.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 168 of 564
7.7 ATS0

7.7 ATS0 Set number of rings before automatically answering a call

Setting is local to the AT command port. It is allowed to have different settings on different AT command ports.
In such cases the AT command port 'wins', which is idle and uses the smallest <n> value.

Syntax
Read Command
ATS0?
Response(s)
<n>
OK
ERROR
Write Command
ATS0=<n>
Response(s)
OK
ERROR
PIN  Last Reference(s)

± - - ITU-T V.250 [18]

Parameter Description

<n>(num)(&V)(&W)
000(&F)(D) Automatic answer mode is disabled.
001-255 Enable automatic answering after specified number of rings.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 169 of 564
7.8 ATO

7.8 ATO Switch from command mode to data mode / PPP online
mode

ATO is the corresponding command to the +++ escape sequence: If the UE is in command mode during a data
connection ATO causes the UE to return to data mode.

Syntax
Exec Command

ATO[<n>]
Response(s)
If connection is not successfully resumed:
NO CARRIER
or
UE returns to data mode from command mode
CONNECT
PIN  Last Reference(s)

+ - - ITU-T V.250 [18]

Parameter Description

<n>(num)
[0] Switch from command mode to data mode

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 170 of 564
7.9 +++

7.9 +++ Escape from Data Mode to AT Command Mode

+++ escape sequence is only available in a data connection. The +++ character sequence causes the PLS63-
W to pause data mode and return to AT command mode. This allows to enter AT commands while maintaining
the data connection to the remote device. By the way the same task can be performed by toggling the DTR line
if AT&D is set to 1. ATO is used to resume data or PPP online mode.
To prevent the +++ character sequence from being misinterpreted as data, it must be preceded and followed by
a pause of 1000 ms. The +++ characters must be entered in quick succession, all within 1000 ms.

Syntax
Exec Command

+++
Response(s)
OK
PIN  Last Reference(s)

- - - ITU-T V.250 [18]

Note
• When using XON/XOFF flow control (AT\Q1) in online mode, +++ should not be used while the data trans-
mission is paused with XOFF. Before entering the command mode with +++ the paused transmission should
be resumed using the XON character.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 171 of 564
7.10 AT+CLCC

7.10 AT+CLCC List of current calls

The AT+CLCC execute command lists all current calls. If the command is successful, but no calls are available,
no information response is sent to the TE.

Syntax
Test Command
AT+CLCC=?
Response(s)
OK
Exec Command
AT+CLCC
Response(s)
[+CLCC: <idx>, <dir>, <stat>, <mode>, <mpty>[, <number>, <type>[, <alpha>]]]
[+CLCC: <idx>, <dir>, <stat>, <mode>, <mpty>[, <number>, <type>[, <alpha>]]]
[+CLCC: ...]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<idx>(num)
Call identification number as described in 3GPP TS 22.030 [29], subclause 6.5.5.1., this number can be used
in AT+CHLD command operations.

<dir>(num)
0 Mobile originated call (MOC)
1 Mobile terminated call (MTC)

<stat>(num)
State of the call
0 Active
1 Held
2 Dialing (MOC)
3 Alerting (MOC)
4 Incoming (MTC)
5 Waiting (MTC)

<mode>(num)
Bearer/teleservice
0 Voice

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 172 of 564
7.10 AT+CLCC

<mpty>(num)
0 Call is not one of multiparty (conference) call parties
1 Call is one of multiparty (conference) call parties

<number>(str)
Phone number in format specified by <type>

<type>(num)
Type of address octet as defined by 3GPP TS 24.008 [43], subclause 10.5.4.7. For possible values and further
details see <type> parameter specified for phonebook related AT commands such as AT+CPBR and AT+CPBW.
128 Number is restricted
161 National <number>. Network support of this type is optional.
145 Dialing string <number> includes international access code character '+'
255 Dialing string <number> contains "*", "#" characters for Supplementary Ser-
vice codes. Network support of this type is optional.
129 Otherwise

<alpha>(str)(+CSCS)
Alphanumeric representation of <number> corresponding to the entry found in phonebook(see for example
AT+CPBW, parameters <text> and <tlength>).
If the same <number> is written to several phonebooks with different names the <alpha> representation pri-
oritizes the name from the "SM" phonebook and next according to the order: "ME", "FD", "ON". This order of
priority applies also to dialed numbers no matter which phonebook is used for dialing.

Note
• For alphanumeric representation the number stored in phonebook must be identical to the number trans-
ported over the network, then the associated name will be recognized.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 173 of 564
7.11 AT^SLCC

7.11 AT^SLCC Extended list of current calls

AT^SLCC covers essentially the same information as the 3GPP TS 27.007 [51] command AT+CLCC, with the fol-
lowing extensions:
• The additional write command allows to activate event reporting for the list of current calls.
• The additional read command returns an indication whether event reporting is active for the current interface.
• The exec command returns, like AT+CLCC, a list of current calls. If the command is successful, but no calls
are available, no information response is sent to the TE.

Syntax
Test Command

AT^SLCC=?
Response(s)
^SLCC: (list of supported<n>s)
OK
Read Command

AT^SLCC?
Response(s)
^SLCC: <n>
OK
Exec Command

AT^SLCC
Response(s)
[^SLCC:<idx>, <dir>, <stat>, <mode>, <mpty>, <Reserved>[, <number>, <type>[, <alpha>]]]
[^SLCC:<idx>, <dir>, <stat>, <mode>, <mpty>, <Reserved>[, <number>, <type>[, <alpha>]]]
[^SLCC:...]
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SLCC=<n>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

Unsolicited Result Code

Unsolicited Call Status information
if the list of current calls is empty:
^SLCC:
if one or more calls are currently in the list:
^SLCC: <idx>, <dir>, <stat>, <mode>, <mpty>, <Reserved>[, <number>, <type>[,
<alpha>]]
[^SLCC: <idx>, <dir>, <stat>, <mode>, <mpty>, <Reserved>[, <number>, <type>[,
<alpha>]]]
[... ]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 174 of 564
7.11 AT^SLCC

^SLCC:
URC "^SLCC" displays the list of current calls as displayed with the execute command AT^SLCC. The list is dis-
played in the state it has at the time of display, not in the state it had when the signal was generated. The URC's
occurrence indicates call status changes for any of the calls in the list of current calls.
If multiple displays of identical list configurations occur, this happens because of short intermediate states of the
list, that have already been overridden by new transitions and states. Thus, it is guaranteed that the configuration
displayed is always the current configuration at the time of the last display.
The list of active calls displayed with this URC will always be terminated with an empty line preceded by prefix
"^SLCC: ", in order to indicate the end of the list.

Parameter Description

<n>(num)(&V)(&W)
0(&F)(D) Presentation of URC "^SLCC" disabled
1 Presentation of URC "^SLCC" enabled

<idx>(num)
Call identification number as described in subclause 6.5.5.1 of 3GPP TS 22.030 [29]. This number can be used
in AT+CHLD command operations.

<dir>(num)
0 Mobile originated call (MOC)
1 Mobile terminated call (MTC)

<stat>(num)
State of the call
0 Active
1 Held
2 Dialing (MOC)
3 Alerting (MOC)
4 Incoming (MTC)
5 Waiting (MTC)

<mode>(num)
Bearer/teleservice
0 Voice

<mpty>(num)
0 Call is not one of multiparty (conference) call parties
1 Call is one of multiparty (conference) call parties

<Reserved>(num)
0 Reserved

<number>(str)
Phone number in format specified by <type>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 175 of 564
7.11 AT^SLCC

<type>(num)
Type of address octet as defined by 3GPP TS 24.008 [43], subclause 10.5.4.7. For possible values and further
details see <type> parameter specified for phonebook related AT commands such as AT+CPBR and AT+CPBW.
128 Number is restricted
145 Dialing string <number> includes international access code character '+'
161 National number
255 Dialing string <number> contains "*", "#" characters for Supplementary Ser-
vice codes. Network support of this type is optional.
129 Otherwise

<alpha>(str)(+CSCS)
Alphanumeric representation of <number> corresponding to the entry found in phonebook (see for example
AT+CPBW, parameters <text> and <tlength>).
Due to time constraints on the necessary evaluation of the phonebook, this parameter may show a default value
during early call phases (e.g. for <stat>= "dialing", "incoming" or "alerting"), even if a phonebook entry is pres-
ent for the number concerned.
If the same <number> is written to several phonebooks with different names the <alpha> representation pri-
oritizes the name from the "SM" phonebook and next according to the order: "ME", "FD", "ON". This order of
priority applies also to dialed numbers no matter which phonebook is used for dialing.

Notes
• Some parameters of the AT+CHLD command, as well as some situations where the call status in the network
changes very quickly (e.g. the transition between <stat>= "unknown", "dialing" and "alerting" for a call to a
reachable subscriber within the registered network) may lead to quasi-simultaneous changes to the states of
one or several calls in the list, possibly leading to multiple displays of identical list configurations.
• If multiple displays of identical list configurations occur, this happens because of intermediate states of the
list, that have already been overridden by new transitions and states. Thus, it is guaranteed that the configu-
ration displayed in such cases is the current configuration at the time of the last display.
• For alphanumeric representation the number stored in the phonebook must be identical to the number trans-
ported over the network - then the associated name will be recognized.
• If a multiparty call is established, the transmission of DTMF tones is not possible anymore till the call is
released. This behaviour is caused due to an ambiguity between the different transaction identifiers.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 176 of 564
7.12 AT+CRC

7.12 AT+CRC Set Cellular Result Codes for incoming call indication

AT+CRC controls whether or not to use the extended format of incoming call indication.
<mode>=1 may lead to connection failure, if the application waits for default result code/URC.

Syntax
Test Command
AT+CRC=?
Response(s)
+CRC: (list of supported<mode>s)
OK
ERROR
Read Command
AT+CRC?
Response(s)
+CRC: <mode>
OK
ERROR
Exec Command
AT+CRC
Response(s)
OK
ERROR
Write Command

AT+CRC=<mode>
Response(s)
OK
ERROR
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Unsolicited Result Codes

URC 1
RING
Indicates incoming call to the TE if <mode>=0.

URC 2
+CRING: <type>
Indicates incoming call to the TE if <mode>=1.

Parameter Description

<mode>(num)(&V)(&W)
0(&F)(D) Disable extended format
1 Enable extended format

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 177 of 564
7.12 AT+CRC

<type>(str)
“REL ASYNC“ Asynchronous non-transparent
“FAX“ Fax call
(Fax only for compatibility reasons, not supported by PLS63-W)
“VOICE“ Voice
“GPRS“ Network initiated PDP context activation (NICA) request from UMTS/GPRS
network

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 178 of 564
7.13 AT+CVMOD

7.13 AT+CVMOD Voice call mode

The AT+CVMOD selects the voice call mode for making a Mobile Originated voice call from the UE. The voice call
mode can be CS_ONLY, VOIP_ONLY or VOIP_PREFERRED.

Syntax
Test Command
AT+CVMOD=?
Response(s)
+CVMOD: (list of supported<voicemode>s)
OK
Read Command
AT+CVMOD?
Response(s)
+CVMOD: <voicemode>
OK
Write Command
AT+CVMOD=<voicemode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - + 3GPP TS 27.007 [51]

Parameter Description

<voicemode>(num)(NV)
0 CS_ONLY
1 VOIP_ONLY
(D)
3 VOIP_PREFFERED

Notes
• If the Call Mode is set to CS_ONLY, then the ATD command will make a call in CS mode.
If the Call Mode is set to VOIP_ONLY, then the ATD command will make a call in VoIP mode.
If the Call Mode is set to VOIP_PREFERRED, then the ATD command gives preference for VoIP based voice
call
• The preferences are not applicable for the emergency call.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 179 of 564
8. Network Service Commands

8. Network Service Commands

The AT Commands described in this chapter are related to various network services.

8.1 AT+COPN Read operator names

The AT+COPN command returns the list of operator names from the UE. Each operator code <numericn> that
has an alphanumeric equivalent <alphan> in the UE memory is returned.

Syntax
Test Command
AT+COPN=?
Response(s)
OK
ERROR
+CME ERROR: <err>
Exec Command
AT+COPN
Response(s)
+COPN: <numericn>, <alphan>
[+COPN: ...]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<numericn>(str)
Operator in numeric format

<alphan>(str)(+CSCS)
Operator in long alphanumeric format

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 180 of 564
8.2 AT+COPS

8.2 AT+COPS Operator Selection

AT+COPS queries the present status of the PLS63-W's network registration and allows to determine whether
automatic or manual network selection shall be used.

Three operator selection modes are available with AT+COPS:

• Automatic
PLS63-W searches for the home operator automatically. If successful the PLS63-W registers to the home
network. If the home network is not found, PLS63-W goes on searching. If a permitted operator is found,
PLS63-W registers to this operator.
If no operator is found the PLS63-W remains unregistered.
• Manual
Desired operator can be determined using the AT+COPS write command. If the operator is found, PLS63-W
registers to it immediately. If the selected operator is forbidden, the PLS63-W remains unregistered.
• Manual/automatic
The UE first tries to find the operator determined via AT+COPS write command. If the UE fails to register to
this operator, then it starts to select another (permitted) operator automatically.

The AT+COPS test command lists sets of five parameters, each representing an operator present in the network.
A set consists of
• an integer indicating the availability of the operator,
• long alphanumeric format of the operator's name,
• short alphanumeric format of the operator's name,
• numeric format representation of the operator and
• an integer indicating the access technology of the operator.
Any of the parameters may be unavailable and will then be an empty field (,,). The list of operators comes in the
following order: Home network, networks referenced in SIM and other networks.
The operator list is followed by a list of the supported <mode>s and <format>s. These lists are delimited from
the operator list by two commas.
The response to the AT+COPS test command is independent of the settings made with <mode> and <rat>. The
AT+COPS test command will return a list of operators with the supported <rat>s.
Under certain conditions the UE has not enough resources to perform a network scan in the background. In such
case, the AT+COPS test command is denied with error, for example during location update, data traffic in PS con-
nections, voice call etc.

The response to the AT+COPS read command depends on the registration status. If the UE is not registered, the
read command returns only the current <mode>. If the UE is registered, the response returns the currently
selected operator, the currently set format and the currently used <rat>.

The AT+COPS write command forces an attempt to select and register to a network operator. If the selected oper-
ator is not available, no other operator will be selected (except <mode>=4). The selected operator name <for-
mat> will apply to further read commands, too.

Syntax
Test Command
AT+COPS=?
Response(s)
+COPS: [list of supported (<opStatus>, long alphanumeric <opName>, short alphanumeric <opName>,
numeric <opName>, <rat>)s], , (list of supported <mode>s), (list of supported <format>s)
OK
ERROR
+CME ERROR:<err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 181 of 564
8.2 AT+COPS

Read Command

AT+COPS?
Response(s)
+COPS:<mode>[, <format>[, <opName>][, <rat>]]
OK
ERROR
+CME ERROR:<err>
Write Command

AT+COPS=<mode>[, <format>[, <opName>[, <rat>]]]

Response(s)
OK
ERROR
+CME ERROR:<err>
Write Command

When <mode>=0:
AT+COPS=[<mode>[, <format>[, <opName>[, <rat>]]]]
Response(s)
OK
ERROR
+CME ERROR:<err>
Write Command

When <mode>=1 or 4:
AT+COPS=<mode>, <format>, <opName>[, <rat>]
Response(s)
OK
ERROR
+CME ERROR:<err>
Write Command

When <mode>=2 (deregistering from network):

AT+COPS=<mode>
Response(s)
OK
ERROR
+CME ERROR:<err>
Write Command
When <mode>=3 (changing only <format>):
AT+COPS=[<mode>], <format>[, <opName>][, <rat>]
Response(s)
OK
ERROR
+CME ERROR:<err>
PIN  Last Reference(s)

± - - 3GPP TS 27.007 [51]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 182 of 564
8.2 AT+COPS

Parameter Description

<opStatus>(num)
Operator Status
0 Unknown
1 Operator available
2 Current operator
3 Operator forbidden

<opName>(str)(&V)
Operator Name
If test command: Operator name in long alphanumeric format, short alphanumeric format and numeric format.
If read command: Operator name as per <format>.
If write command: Operator name in numeric format.

<mode>(num)(&V)(NV)
Only Parameter values 0 and 1 are stored in the non-volatile memory of the PLS63-W.
0(D) Automatic mode; <opName> field is ignored.
1 Manual operator selection
The AT+COPS write command requires <opName> in numeric format, i.e.
<format> shall be 2.
When using this mode keep in mind that only the <mode> parameter is non-
volatile, but not the selected <opName>. After restarting the UE the network will
be selected according to the priority order specified in 3GPP TS 23.122: "Last
Registered PLMN", "Home PLMN", "Preferred PLMN" (related USIM elemen-
tary files are EF_LOCI, EF_IMSI, EF_PLMNwAcT). The same priority order
applies when swapping the USIM during operation.
2 Manually deregister from network and remain unregistered until <mode>=0 or
1 or 4 is selected.
3 Set only <format> (for AT+COPS read command).
4 Manual / automatic selection (<opName> field shall be present); if manual
selection fails, automatic mode (<mode>=0) is entered.

<rat>(num)(&V)(NV)
Radio Access Technology (RAT)
By delivery default, the <rat> parameter is set to an automatic selection mode which enables the UE to select
either UTRAN (UMTS) or GSM GSM or E-UTRAN, depending on the network coverage. This automatic mode
for selecting <rat> remains enabled until you explicitly set either 0 for GSM or 2 for UTRAN either 0 for GSM
or 7 for E-UTRAN This means, setting the <rat> parameter is a restriction, i.e. it forces the UE to select either
UTRAN only or or GSM only GSM only or E-UTRAN only. The selected <rat> value will be stored in the non-
volatile memory. If the selected <rat> is not available, the UE cannot register to a network.
The automatic <rat> selection mode can be restored any time by executing the AT+COPS write command with-
out choosing a specific <rat>, i.e. simply by omitting the <rat> value. When you do so, it does not matter,
which value(s) you select for other AT+COPS parameters. For example, an easy way is setting AT+COPS=0,
which means both PLMN and RAT are automatically selected. Another way is giving the AT+COPS write com-
mand with any <mode>, <format>, or <opName>, but <rat> omitted.
Please consider that the AT+COPS? read command does not reflect whether <rat> was omitted or explicitly
set. This is because the response to the AT+COPS? read command will always indicate the currently used
<rat>.
0 GSM
2 UTRAN

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 183 of 564
8.2 AT+COPS

3 GSM w/EGPRS
Only in read command response, not intended for the AT+COPS write com-
mand.
4 UTRAN w/HSDPA
Only in read command response, not intended for the AT+COPS write com-
mand.
6 UTRAN w/HSDPA and HSUPA
Only in read command response, not intended for the AT+COPS write com-
mand.
7 E-UTRAN

<format>(num)(&V)(&W)
0(&F)(D) Long alphanumeric format of <opName>.
1 Short alphanumeric format of <opName>.
2 Numeric format of <opName>. This is the Location Area Identification (LAI)
number, which consists of the 3-digit Mobile Country Code (MCC) plus the 2-
or 3-digit Mobile Network Code (MNC).

Note
• AT+COPS=? shows PLMNs as available (<opStatus>=1) as long as a location update was not rejected and
the PLMNs are not written to the forbidden PLMN list (SIM EF-FPLMN).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 184 of 564
8.3 AT+CREG

8.3 AT+CREG Network Registration Status

AT+CREG serves to monitor the PLS63-W's circuit mode network registration status. Information can be reported
by the AT+CREG? read command and by +CREG: URCs.
For packet switched service the AT+CGREG command and response apply to the registration (<stat>) and loca-
tion information (<lac> and <ci>) for packet switched service.
For EPS service the AT+CEREG command and response apply to the registration (<stat>) and location infor-
mation (<tac> and <ci>) for EPS service.

Syntax
Test Command

AT+CREG=?
Response(s)
+CREG: (list of supported <urcMode>s)
OK
Read Command

AT+CREG?
Response(s)
+CREG: <urcMode>, <regStatus>[, <netLac>, <netCellId>[, <AcT>]]
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CREG=<urcMode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Unsolicited Result Codes

URC 1
If <urcMode>=1 and there is a change in the UE's network registration status:
+CREG: <regStatus>

URC 2
If <urcMode>=2 and there is a change of the UE's network registration status or at least one of the additional
network information elements:
+CREG: <regStatus>[, <netLac>, <netCellId>[, <AcT>]]

Parameter Description

<urcMode>(num)(&V)(&W)
[0](&F) Disable +CREG URC.
1 Enable URC +CREG: <regStatus> to report status of network registration.
2 Enable URC +CREG: <regStatus>[, <netLac>, <netCellId>[, <AcT>]] to
report status of network registration including location information. Parameters
<netLac>, <netCellId> and <AcT> will only be displayed if available.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 185 of 564
8.3 AT+CREG

<regStatus>(num)(&V)
0 Not registered, UE is currently not searching for new operator.
There is a technical problem. User intervention is required. Yet, emergency
calls can be made if any network is available. Probable causes:
• no SIM card available
• no PIN entered
• no valid Home PLMN entry found on the SIM
1 Registered to home network.
2 Not registered, but UE is currently searching for a new operator.
UE searches for an available network. Failure to log in until after more than a
minute may be due to one of the following reasons:
• No network available or insufficient Rx level.
• UE has no access rights to the networks available.
• Networks from the SIM list of allowed networks are around, but login fails
due to one of the following reasons:
- #11 ... PLMN not allowed
- #12 ... Location area not allowed
- #13 ... Roaming not allowed in this location area
After this, the search will be resumed (if automatic network search is
enabled).
• The Home PLMN or an allowed PLMN is available, but login is rejected by
the cell (reasons: Access Class or LAC).
If at least one network is available, emergency calls can be made.
3 Registration denied
• If automatic network search is enabled:
Authentication or registration fails after Location Update Reject due to one
of the following reasons:
- #2 ... IMSI unknown at HLR
- #3 ... Illegal MS
- #6 ... Illegal UE
Either the SIM or the UE are unable to log into any network. User interven-
tion is required. Emergency calls can be made, if any network is available.
• Only if manual network search is enabled:
Manual registration fails after Location Update Reject due to the following
reasons:
- #2 ... IMSI unknown at HLR
- #3 ... Illegal MS
- #6 ... Illegal UE
- #11 ... PLMN not allowed
- #12 ... Location area not allowed
- #13 ... Roaming not allowed in this location area
No further attempt is made to search or log into a network. Emergency calls
can be made if any network is available.
4 Unknown, e.g. out of GSM/UMTS/LTE coverage.
5 Registered, roaming.
UE is registered at a foreign network (national or international network)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 186 of 564
8.3 AT+CREG

<netLac>(str)
Two byte location area code in hexadecimal format (e.g. "00C1" equals 193 in decimal).

<netCellId>(str)
Cell ID in hexadecimal format:
- 16 bit for 2G
- 28 bit for 3G or 4G

<AcT>(num)
Radio access technology
0 GSM
2 UTRAN
3 GSM w/EGPRS
4 UTRAN w/HSDPA
6 UTRAN w/HSDPA and HSUPA
7 E-UTRAN

Example
AT+CREG=1 Activate URC mode.
OK
AT+COPS=0 Force UE to automatically search a network operator.
OK
+CREG: 2 URC reports that UE is currently searching.
+CREG: 1 URC reports that operator has been found.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 187 of 564
8.4 AT+CSQ

8.4 AT+CSQ Signal Quality

The AT+CSQ execute command indicates the received signal strength <rssi> and the channel bit error rate
<ber>.

Syntax
Test Command
AT+CSQ=?
Response(s)
+CSQ: (list of supported <rssi>s), (list of supported<ber>s)
OK
Exec Command
AT+CSQ
Response(s)
+CSQ: <rssi>,<ber>
OK
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<rssi>(num)
0 -113 dBm or less
1 -111 dBm
2..30 -109... -53 dBm
31 -51 dBm or greater
99 not known or not detectable
According to 3GPP TS 27.007 [51], the <rssi> value is not applicable to 3G and 4G networks. Please use
AT+CESQ instead, or AT^SMONI.

Note for 3G only: With a view to employing AT+CSQ also for 3G networks the PLS63-W has been designed to
show a <rssi> value derived from the 3G specific RSCP parameter shown by AT^SMONI. Nevertheless,
please consider that connection quality in 3G networks is depending on further factors. For example, despite
good <rssi> or RSCP values for signal quality, data throughput may vary depending on the number of sub-
scribers sharing the same cell. It is therefore recommended to use also AT^SMONI which delivers additional
information, in particular the values RSCP, EC/n0, SQual and SRxLev RX level.

<ber>(num)
0..7 as RXQUAL values in the table in 3GPP TS 45.008 [55], section 8.2.4 (for GSM
network only).
99 not known or not detectable.

Note
• After using network related commands such as AT+CCWA, AT+CCFC, users are advised to wait 3s before
entering AT+CSQ. This is recommended to be sure that any network access required for the preceding com-
mand has finished.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 188 of 564
8.5 AT+CPOL

8.5 AT+CPOL Preferred Operator List

AT+CPOL read command queries the list of the preferred operators.

AT+CPOL write command allows to edit the list of the preferred operators.
The response of AT+CPOL read command also depends on the setting of AT+CPLS.
If <index> is given but <operator> is left out, the entry is deleted.

Syntax
Test Command

AT+CPOL=?
Response(s)
+CPOL:(list of supported <index>s), (list of supported <format>s)
OK
ERROR
+CME ERROR: <err>
Read Command

AT+CPOL?
Response(s)
+CPOL: <index>, <format>, <operator>[, <gsm>, <gsm_compact>, <utran>, <e-utran>]
+CPOL: ...
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CPOL=[<index>][, <format>[[, <operator>][, <gsm>, <gsm_compact>, <utran>, <e-utran>]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<index>(num)
The order number of the operator in the SIM preferred operator list.

<format>(num)
0 Long alphanumeric format <operator>
1 Short alphanumeric format <operator>
2 Numeric format <operator>

<operator>(str)
The operator in the format specified in <format>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 189 of 564
8.5 AT+CPOL

<gsm>(num)
0 AcT GSM disabled
1 AcT GSM enabled

<gsm_compact>(num)
0 AcT GSM Compact disabled

<utran>(num)
0 AcT UTRAN disabled
1 AcT UTRAN enabled

<e-utran>(num)
0 AcT E-UTRAN disabled
1 AcT E-UTRAN enabled

Note
• The Access Technology selection parameters <gsm>, <gsm_compact>, <utran>, <e-utran> are required
for SIM cards or UICCs containing PLMN selector with Access Technology.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 190 of 564
8.6 AT+CPLS

8.6 AT+CPLS Select Preferred Operator List

AT+CPLS is used to select a preferred PLMN list defined in Elementary Files of the SIM card or active application
of the USIM. The setting takes effect for the AT+CPOL command.

Syntax
Test Command
AT+CPLS=?
Response(s)
+CPLS:(list of USIM supported <plmn-selector>s)
OK
Read Command
AT+CPLS?
Response(s)
+CPLS: <plmn-selector>
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CPLS=<plmn-selector>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<plmn-selector>(num)
0(P) User controlled PLMN with EFPLMNwAcT/EFPLMNsel
1 Operator controlled PLMN selector with EFOPLMNwAcT
2 HPLMN selector with EFHPLMNwAcT

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 191 of 564
8.7 AT+CTZU

8.7 AT+CTZU Automatic Time Zone Update

The AT+CTZU command enables and disables automatic time zone update via NITZ (if supported by the net-
work).

When AT+CTZU is set to 1, the Real Time Clock (RTC) on the UE is updated with the network time every time
when the UE receives a NITZ message. Any changes to the RTC using the command AT+CCLK will be wiped
out by the network time.

When AT+CTZU is set to 0, AT+CCLK can be used to set the RTC. The newly set time will not be overwritten by
the network time.

The AT^SIND command can also be used to get NITZ information, for details see "nitz" indicator. Unlike
AT+CTZU, AT^SIND settings have no effect for the RTC. See AT+CCLK for examples.

Syntax
Test Command

AT+CTZU=?
Response(s)
+CTZU:(list of supported <n>s)
OK
Read Command

AT+CTZU?
Response(s)
+CTZU: <n>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CTZU=<n>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Unsolicited Result Code

Format of the unsolicited result code:
+CTZU:<nitzUT>, <nitzTZ>[, <nitzDST>]
The URC indicates the RTC update from network time, and contains the time relevant information elements of
the NITZ message.

Parameter Description

<n>(num)
0(&F)(P) Disable automatic time zone update via NITZ. Suppress unsolicited result
codes.
1 Enable automatic time zone update via NITZ. Output unsolicited result codes.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 192 of 564
8.7 AT+CTZU

<nitzUT>(str)
Universal Time delivered as part of the NITZ message.

<nitzTZ>(num)
Time Zone delivered as part of the NITZ message.
Positive (east) or negative (west) offset from the UTC in units of 15 minutes.

<nitzDST>(num)
Adjustment for Daylight Saving Time as part of the NITZ message. Displayed only when received from network.
Indicates whether <nitzTZ> includes daylight savings adjustment.
0 No daylight savings adjustment included.
1 +1 hour (equals 4 quarters in <nitzTZ>) adjustment for daylight saving time
included.
2 +2 hours (equals 8 quarters in <nitzTZ>) adjustment for daylight saving time
included.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 193 of 564
8.8 AT^SMONI

8.8 AT^SMONI Monitoring Serving Cell

The AT^SMONI command supplies information of the serving cell.

Syntax
Test Command

AT^SMONI=?
Response(s)
OK
Exec Command

AT^SMONI
Response(s)
See: Section 8.8.1, AT^SMONI Responses
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

8.8.1 AT^SMONI Responses

UE is not connected:
• UE is camping on a GSM (2G) cell and registered to the network:
Syntax:
^SMONI: ACT,ARFCN,BCCH,MCC,MNC,LAC,cell,C1,C2,NCC,BCC,GPRS,PWR,RXLev,Conn_state
Example:
^SMONI: 2G,990,-75,262,03,0139,02C9,28,28,3,0,G,0,-104,NOCONN
• UE is camping on a UMTS (3G) cell and registered to the network:
Syntax:
^SMONI: ACT,UARFCN,PSC,EC/n0,RSCP,MCC,MNC,LAC,cell,SQual,SRxLev,CSGid,Conn_state
Example:
^SMONI: 3G,10737,131,-7.5,-103,260,01,7D3D,C80BC9A,21,11,--,NOCONN
• UE is camping on a LTE (4G) cell and registered to the network:
Syntax:
^SMONI: ACT,EARFCN,Band,DL bandwidth,UL bandwidth,Mode,MCC,MNC,TAC,Global Cell ID,Phys-
ical Cell ID,Srxlev,RSRP,RSRQ,LTEA,Conn_state,CA_DL,CA_UL,SNR,CSGid
Example:
^SMONI: 4G,6300,20,10,10,FDD,262,02,BF75,0345103,350,33,-94,-7,,NOCONN,,,0,--
• UE is searching and could not (yet) find a suitable cell:
Example:
^SMONI: Searching
• UE is camping on a GSM cell but not registered to the network (only emergency call allowed):
Syntax:
^SMONI: ACT,ARFCN,BCCH,MCC,MNC,LAC,cell,C1,C2,NCC,BCC,GPRS,PWR,RXLev,Conn_state
Example:
^SMONI: 2G,673,-89,262,07,4EED,A500,16,16,7,4,G,5,-107,LIMSRV

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 194 of 564
8.8 AT^SMONI

• UE is camping on a UMTS cell but not registered to the network (only emergency call allowed):
Syntax:
^SMONI: ACT,UARFCN,PSC,EC/n0,RSCP,MCC,MNC,LAC,cell,SQual,SRxLev,CSGid,Conn_state
Example:
^SMONI: 3G,10564,96,-7.5,-79,262,02,0143,00228FF,-92,-78,--,LIMSRV
• UE is camping on a LTE (4G) cell but not registered to the network (only emergency call allowed):
Syntax:
^SMONI: ACT,EARFCN,Band,DL bandwidth,UL bandwidth,Mode,MCC,MNC,TAC,Global Cell ID,Phys-
ical Cell ID,Srxlev,RSRP,RSRQ,LTEA,Conn_state,CA_DL,CA_UL,SNR,CSGid
Example:
^SMONI: 4G,6300,20,10,10,FDD,262,02,BF75,0345103,350,33,-94,-7,,LIMSRV,,,0,--

UE has a dedicated channel:

• GSM (2G) cell:
Syntax:
^SMONI:
ACT,ARFCN,BCCH,MCC,MNC,LAC,cell,C1,C2,NCC,BCC,GPRS,PWR,RXLev,ARFCN,TS,timAdv,dBm,Q,ChM
od
Example:
^SMONI: 2G,852,-80,262,03,4E2D,6C2D,28,32,3,5,E,0,-104,816,1,3,-71,0,A_FR
• UMTS (3G) cell:
Syntax:
^SMONI: ACT,UARFCN,PSC,EC/n0,RSCP,MCC,MNC,LAC,cell,SQual,SRxLev,CSGid,Trans-
portCh,SF,Slot,EC/n0,RSCP,ComMod,HSUPA,HSDPA
Example:
^SMONI: 3G,10737,131,-5,-93,260,01,7D3D,C80BC9A,21,11,--,DPCH,256,4,-5,-93,0,00,00
• LTE (4G) cell:
Syntax:
^SMONI: ACT,EARFCN,Band,DL bandwidth,UL bandwidth,Mode,MCC,MNC,TAC,Global Cell ID,Phys-
ical Cell ID,TX_power,RSRP,RSRQ,LTEA,Conn_state,CA_DL,CA_UL,SNR,CSGid
Example:
^SMONI: 4G,6300,20,10,10,FDD,262,02,BF75,0345103,350,90,-94,-7,,CONN,,,0,--

Columns for GSM (2G) Serving Cell parameters:

Column Description
ACT Access Technology
ARFCN ARFCN (Absolute Radio Frequency Channel Number) of the BCCH carrier
BCCH Receiving level of the BCCH carrier in dBm (level is limited from -110dBm to -47dBm)
MCC Mobile Country Code (first part of the PLMN code)
MNC Mobile Network Code (second part of the PLMN code)
LAC Location Area Code
cell Cell ID
C1 Coefficient for base station selection
C2 Coefficient for base station selection
NCC PLMN colour code
BCC Base station colour code

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 195 of 564
8.8 AT^SMONI

Column Description
GPRS GPRS state
PWR Maximal power level used on RACH channel in dBm
RxLev Minimal receiving level (in dBm) to allow registration

Columns for GSM (2G) Dedicated Channel parameters:

Column Description
ARFCN ARFCN (Absolute Radio Frequency Channel Number) of the BCCH carrier
TS Timeslot number
timAdv Timing advance in bits
dBm Receiving level of the traffic channel carrier in dBm
Q Receiving quality (0-7)
ChMod Channel mode
(--: Signalling, S_HR: Half rate, S_FR: Full rate, S_EFR: Enhanced Full Rate, A_HR: AMR
Half rate, A_FR: AMR Full rate)

Columns for UMTS (3G FDD) Serving Cell parameters:

Column Description
ACT Access Technology
UARFCN UARFCN (UTRAN Absolute Radio Frequency Channel Number) of the BCCH carrier
PSC Primary Scrambling Code
EC/n0 Carrier to noise ratio in dB = measured Ec/Io value in dB.
Please refer to 3GPP 25.133, section 9.1.2.3, Table 9.9 for details on the mapping from EC/
n0 to EC/Io.
RSCP Received Signal Code Power in dBm
MCC Mobile Country Code (first part of the PLMN code)
MNC Mobile Network Code (second part of the PLMN code)
LAC Location Area Code, see note
cell Cell ID
SQual Quality value for base station selection in dB (see 3GPP 25.304)
SRxLev RX level value for base station selection in dB (see 3GPP 25.304)
CSGid Closed Subscriber Group id

Columns for UMTS (3G FDD) Dedicated Channel parameters:

Note: Transport channels in downlink are considered.

Column Description
TransportCh Transport Channel Type (DPCH, FDPCH, HSDSCH, EDCH)
SF Spreading Factor (4,8,16,32,64,128,256,512)
Slot Slot Format for DPCH (0-16) (see 3GPP TS 25.211 V7.10.0 Table 11)
Slot Format for FDPCH (0-9) (see 3GPP TS 25.211 V7.10.0 Table 16C)
EC/n0 Carrier to noise ratio in dB
RSCP Received Signal Code Power in dBm

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 196 of 564
8.8 AT^SMONI

Column Description
ComMod Compressed Mode (0-1) (indicates valid transmission gap pattern)
HSUPA HSUPA Status (a.k.a. E-DCH Status) indicated by xy:
x = Cell Capability Indicator: 0 - HSUPA capability not indicated, 1 - HSUPA Capable Cell.
Please consider that some providers/MNOs don't support this flag and that it is provided "for
display indication only".
See 3GPP TS 25.331 [49] (later than version 6.9.0) section 10.2.48.8.8.
y = UE Call Status: 0 - HSUPA inactive, 1 - HSUPA active
HSDPA HSDPA Status (a.k.a. HSDSCH Status) indicated by xy:
x = Cell Capability Indicator: 0 - HSDPA capability not indicated, 1 - HSDPA Capable Cell, 2
- HSDPA+ Capable Cell.
Please consider that some providers/MNOs don't support this flag and that it is provided "for
display indication only".
See 3GPP TS 25.331 [49] (later than version 6.8.0), section 10.2.48.8.8.
y = UE Call Status: 0 - HSDPA inactive, 1 - HSDPA suspended, 2 - HSDPA active, 3 -
Unknown

Columns for LTE (4G) Serving Channel parameters:

Column Description
ACT Access Technology
EARFCN E-UTRA Absolute Radio Frequency Channel Number
Band E-UTRA frequency band (see 3GPP 36.101)
DL bandwith DL bandwith
UL bandwith UL bandwith
Mode FDD or TDD
MCC Mobile Country Code (first part of the PLMN code)
MNC Mobile Network Code (second part of the PLMN code)
TAC Tracking Area Code (see 3GPP 23.003 Section 19.4.2.3)
Global Cell ID Global Cell ID
Physical Cell ID Physical Cell ID
Srxlev RX level value for base station selection in dB (see 3GPP 25.304)
RSRP Reference Signal Received Power (see 3GPP 36.214 Section 5.1.1.)
RSRQ Reference Signal Received Quality (see 3GPP 36.214 Section 5.1.2.)
TX power Used Uplink Power in 1/10 dBm
LTEA Serving cell is LTE-A cell
0 - cell does not support Carrier Aggregation
1 - cell does support Carrier Aggregation
This parameter is available for compatibility reasons and has no functional influence.
Conn_state Connection state. Can be one of following: CONN, LIMSRV, NOCONN or SEARCH
CA_DL Downlink cell for Carrier Aggregation
0 - Cell is currently not used for DL Carrier Aggregation
1 - Cell is currently used for DL Carrier Aggregation
2 - Cell is used for DL Carrier Aggregation (is activated)
This parameter is available for compatibility reasons and has no functional influence.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 197 of 564
8.8 AT^SMONI

Column Description
CA_UL Uplink cell for Carrier Aggregation
0 - Cell is currently not used for UL Carrier Aggregation
1 - Cell is currently not used for UL Carrier Aggregation
2 - Cell is used for UL Carrier Aggregation (is activated)
This parameter is available for compatibility reasons and has no functional influence.
SNR Signal to Noise Ratio
CSGid Closed subscriber group identifier

8.8.2 Service states

Depending on the service state, an additional textual output is generated (refer also to the response examples):
• "SEARCH" (Searching) - The MS is searching, but could not (yet) find a suitable cell. This output appears
after restart of the MS or after loss of coverage.
• "NOCONN" (No connection) - The MS is camping on a cell and registered to the network. The service state
is 'idle', i.e. there is no connection established or a dedicated channel in use.
• "LIMSRV" (Limited Service) - The MS is camping on a cell but not registered to the network. Only emergency
calls are allowed. The MS enters this state, for example, when
- no SIM card is inserted, or PIN has not been given,
- neither Home PLMN nor any other allowed PLMN are found,
- registration request was not answered or denied by the network (use command AT+CREG to query the reg-
istration status),
- authentication failed.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 198 of 564
8.9 AT^SMONP

8.9 AT^SMONP Monitoring Neighbour Cells

The AT^SMONP supplies information of active cells and all neighbour cells. The active cell information will be
delivered additively because an UE can be situated in Soft Handover or Softer Handover.

Syntax
Test Command
AT^SMONP=?
Response(s)
OK
Exec Command
AT^SMONP
Response(s)
See: Section 8.9.1, AT^SMONP Responses
OK
PIN  Last
- - -

Notes
• Due to the fact that not all necessary information of the neighbour cells can be decoded during a connection,
there are several constraints to be considered:
- Only neighbour cells that have already been visible in IDLE mode will be further updated, as long as they
are still included in the list.
- Though new neighbour cells can be added to the list (e.g. due to handover), their C1 and C2 parameters
cannot be displayed until the connection is released. In this case "-" is presented for C1 and C2.
• The neighbour cells have the same PLMN as the serving cell. In case of searching for a network the serving
cell can change and the UE shows different sets of neighbour cells depending on the PLMN of the serving cell.
• Parameters for which no values are available are shown as "-".

8.9.1 AT^SMONP Responses

• In case of a GSM (2G) serving cell:
Syntax:
2G:
ARFCN1,rs1,dBm1,MCC1,MNC1,NCC1,BCC1,C11,C21,LAC1,cell1,C311,C321
ARFCN2,rs2,dBm2,MCC2,MNC2,NCC2,BCC2,C12,C22,LAC2,cell2,C312,C322
...
ARFCNn,rsn,dBmn,MCCn,MNCn,NCCn,BCCn,C1n,C2n,LACn,celln,C31n,C32n
3G:
UARFCN1,PSC1,EC/n01,RSCP1
UARFCN2,PSC2,EC/n02,RSCP2
...
UARFCNn,PSCn,EC/n0n,RSCPn

4G:
EARFCN1,RSRQ1,RSRP1,PCI1
EARFCN2,RSRQ2,RSRP2,PCI2
...
EARFCNn,RSRQn,RSRPn,PCIn

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 199 of 564
8.9 AT^SMONP

Example:
2G:
658,51,-60,262,07,7,4,46,46,4EED,08B8,0,0
666,47,-64,262,07,7,1,42,42,4EED,A500,0,0
1006,37,-74,262,07,7,4,32,32,4EED,----,0,0
1021,36,-75,262,07,7,1,31,21,4EED,08B2,0,0
702,33,-78,262,07,7,3,28,28,4EED,A4F0,0,0
654,32,-79,262,07,7,5,27,27,4EED,1C3A,0,0
3G:
-----,---,-----,----
4G:
-----,-----,----,---
OK
• In case of a 3G serving cell:
Syntax:
3G:
UARFCN1,PSC1,EC/n01,RSCP1,SQual1,SRxLev1,set1,rank1
UARFCN2,PSC2,EC/n02,RSCP2,SQual2,SRxLev2,set2,rank2
...
UARFCNn,PSCn,EC/n0n,RSCPn,,SQualn,SRxLevn,setn,rankn

2G:
ARFCN1,RSSI1,NCC1,BCC1,SRxLev1,rank1
ARFCN2,RSSI2,NCC2,BCC2,SRxLev2,rank2
...
ARFCNn,RSSIn,NCCn,BCCn,SRxLevn,rankn

4G:
EARFCN1,RSRQ1,RSRP1,Srxlev1,PCI1,TDD1
EARFCN2,RSRQ2,RSRP2,Srxlev2,PCI2,TDD2
...
EARFCNn,RSRQn,RSRPn,Srxlevn,PCIn,TDDn

Example:
3G:
10786,49,-7.0,-75,22,37,AS,-9
10786,161,-24.0,-121,0,0,--,0
10786,54,-24.0,-121,0,0,--,0
10786,51,-24.0,-121,0,0,--,0
10786,62,-24.0,-121,0,0,--,0
10786,159,-24.0,-121,0,0,--,0
2G:
----,----,-,-,----,------
4G:
-----,-----,----,--,---,-
OK
• In case of a 4G serving cell:
Syntax:
4G:
EARFCN1,RSRQ1,RSRP1,Srxlev1,PCI1,RSSI1,Cell ID1,MCC1,MNC1,TAC1,CA_DL1,CA_UL1
EARFCN2,RSRQ2,RSRP2,Srxlev2,PCI2,RSSI2,Cell ID2,MCC2,MNC2,TAC2,CA_DL2,CA_UL2
...

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 200 of 564
8.9 AT^SMONP

EARFCNn,RSRQn,RSRPn,Srxlevn,PCIn,RSSIn,Cell IDn,MCCn,MNCn,TACn,CA_DLn,CA_ULn

2G:
ARFCN1,RSSI1,NCC1,BCC1,SRxLev1,rank1
ARFCN2,RSSI2,NCC2,BCC2,SRxLev2,rank2
...
ARFCNn,RSSIn,NCCn,BCCn,SRxLevn,rankn

3G:
UARFCN1,PSC1,EC/n01,RSCP1,SQual1,SRxLev1,set1,rank1
UARFCN2,PSC2,EC/n02,RSCP2,SQual2,SRxLev2,set2,rank2
...
UARFCNn,PSCn,EC/n0n,RSCPn,,SQualn,SRxLevn,setn,rankn

Example 1:
4G:
1830,-12.6,-91,38,368,-60,368,262,03,C463,0,,
1830,-11.7,-93,36,262,-72,368,262,03,C463,0,,
1830,-10.9,-93,36,329,-73,368,262,03,C463,0,,
1830,-15.1,-96,33,261,-72,368,262,03,C463,0,,
2527,-9.5,-83,--,1,-57,----,---,---,----,1,,
2G:
----,--,----,-,-,----,-
3G:
-----,---,-----,----,--
OK

Example 2:
4G:
1830,-12.6,-91,38,368,-60,368,262,03,C463,0,,
1830,-11.7,-93,36,262,-72,368,262,03,C463,0,,
1830,-10.9,-93,36,329,-73,368,262,03,C463,0,,
1830,-15.1,-96,33,261,-72,368,262,03,C463,0,,
2527,-9.5,-83,--,1,-57,----,---,---,----,1,,
2G:
----,--,----,-,-,----,-
3G:
10564,---,-----,----,--
10688,---,-----,----,--
OK

Columns for GSM (2G) parameters:

Column Description
ARFCN Absolute Radio Frequency Channel Number of the BCCH carrier
rs RSSI value 0 - 63 (RSSI = Received signal strength indication)
dBm Receiving level in dBm
MCC Mobile Country Code (first part of the PLMN code)
MNC Mobile Network Code (second part of the PLMN code)
NCC Network colour Code
BCC Base Station colour code
C1 cell selection criterion

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 201 of 564
8.9 AT^SMONP

Column Description
C2 cell reselection criterion
LAC Location area code
cell Cell identifier
C31 cell reselection criterion
C32 cell reselection criterion
SRxLev RX level value for base station selection in dB (see 3GPP 25.304)
rank Rank of this cell as neighbor for inter-RAT cell reselection

Columns for UMTS (3G) parameters:

Column Description
UARFCN UTRAN Absolute Radio Frequency Channel Number of the BCCH carrier
PSC Primary Scrambling Code
EC/n0 Carrier to noise ratio in dB = measured Ec/Io value in dB.
Please refer to 3GPP 25.133, section 9.1.2.3, Table 9.9 for details on the mapping from
EC/n0 to EC/Io.
RSCP Received Signal Code Power in dBm
SQual Quality value for base station selection in dB (see 3GPP 25.304)
SRxLev RX level value for base station selection in dB (see 3GPP 25.304)
set 3G neighbour cell set (AS: ASET, SN: Sync Nset, AN: Async Nset)
rank Rank of this cell as neighbor for inter-RAT cell reselection

Columns for LTE (4G) parameters:

Column Description
EARFCN E-UTRA Absolute Radio Frequency Channel Number
RSRQ Reference Signal Received Quality as measured by L1 in dB
(see ETSI TS 136 214 version 10.1.0 Section 5.1.3.)
RSRP Reference Signal Received Power as measured by L1 in dBm
(see ETSI TS 136 214 version 10.1.0 Section 5.1.1.)
Srxlev RX level value for base station selection in dB (see 3GPP 25.304)
PCI Physical Cell ID
RSSI Received Signal Strength Indication as measured by L1 in dBm
Cell ID LTE Serving cell ID
MCC Mobile Country Code
MNC Mobile Network Code
TAC Tracking Area Code (see 3GPP 23.003 Section 19.4.2.3)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 202 of 564
8.9 AT^SMONP

Column Description
CA_DL Cell is a downlink cell for Carrier Aggregation
0 - Cell is currently not used for DL Carrier Aggregation
1 - Cell is currently used for DL Carrier Aggregation
2 - Cell is used for DL Carrier Aggregation (is activated)
This parameter is available for compatibility reasons and has no functional influ-
ence.
CA_UL Cell is an uplink cell for Carrier Aggregation
0 - Cell is currently not used for UL Carrier Aggregation
1 - Cell is currently used for UL Carrier Aggregation
2 - Cell is used for UL Carrier Aggregation (is activated)
This parameter is available for compatibility reasons and has no functional influ-
ence.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 203 of 564
8.10 AT^SNMON

8.10 AT^SNMON Network Monitoring

The AT^SNMON command can be used to monitor various network information.

Syntax
Test Command

AT^SNMON=?
Response(s)
^SNMON: "INS2G", (list of supported <action>s), (list of supported <rba2g>s)
^SNMON: "INS3G", (list of supported <action>s), (list of supported <rba3g>s)
^SNMON: "INS4G", (list of supported <action>s), (list of supported <rba4g-1>s), (list of supported
<rba4g-2>s)
OK
ERROR
+CME ERROR: <err>
Write Command
Start informal network scan for 2G bands. Parameter <action> shall be 2.
AT^SNMON="INS2G", <action>[, <rba2g>]
Response(s)
^SNMON: "INS2G", <reserved>, <rba2g>, <cell_ID>, <lac>, <plmn>, <arfcn>, <rssi>, <dbm>

In case of no cell found for specific band then all values behind <rba2g> will be omitted:
^SNMON: "INS2G", <reserved>, <rba2g>

OK
ERROR
+CME ERROR: <err>
Write Command
Start informal network scan for 3G bands. Parameter <action> shall be 2.
AT^SNMON="INS3G", <action>[, <rba3g>]
Response(s)
^SNMON: "INS3G", <reserved>, <rba3g>, <cell_ID>, <lac>, <plmn>, <uarfcn>, <rscp>, <dbm>,
<psc>

In case of no cell found for specific band then all values behind <rba3g> will be omitted:
^SNMON: "INS3G", <reserved>, <rba3g>

OK
ERROR
+CME ERROR: <err>
Write Command
Start informal network scan for 4G bands. Parameter <action> shall be 2.
AT^SNMON="INS4G", <action>[, [<rba4g-1>][, <rba4g-2>]]
Response(s)
^SNMON: "INS4G", <reserved>, <rba4g-1>, <rba4g-2>, <cell_ID>, <tac>, <plmn>, <earfcn>,
<pcid>, <bwdl>, <bwup>, <rsrp>, <rsrq>

In case of no cell found for specific band then all values behind <rba4g-1> and <rba4g-2> will be omitted:
^SNMON: "INS4G", <reserved>, <rba4g-1>, <rba4g-2>

OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 204 of 564
8.10 AT^SNMON

Write Command (Continued)

Start informal network scan for 4G bands. Parameter <action> shall be 2.

AT^SNMON="INS4G", <action>[, [<rba4g-1>][, <rba4g-2>]]
Response(s)
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- - - 3GPP TS 45.008 [55]

Parameter Description

<action>(num)
This parameter determines the action to be taken for the monitoring command.
0 Reserved value
2 Query values

<reserved>(num)
0 Value returned in scan output responses. Value has no meaning and can be
ignored.

<rba2g>(str)(NV)
<rba2g> determines the 2G frequency bands the UE is allowed to use. Values are given in hexadecimal 32-
bit-value order. Every bit corresponds to a dedicated band number. Leading zeros are not necessary.
“1“ GSM 900
“2“ GSM 1800
“4“ GSM 850
“8“ GSM 1900

<rba3g>(str)(NV)
<rba3g> determines the 3G frequency bands the UE is allowed to use. Values are given in hexadecimal 32-
bit-value order. Every bit corresponds to a dedicated band number. Leading zeros are not necessary.
“1“ WCDMA 2100 (BC1)
“2“ WCDMA 1900 (BC2)
“4“ WCDMA 1800 (BC3)
“8“ WCDMA 1700 AWS (BC4)
“10“ WCDMA 850 (BC5)
“20“ WCDMA 800 (BC6)
“80“ WCDMA 900 (BC8)
“40000“ WCDMA 850 (BC19)

<rba4g-1>(str)(NV)
<rba4g-1> determines 4G frequency bands the UE is allowed to use. Values are given in hexadecimal 32-bit-
value order. Every bit corresponds to a dedicated band number. Leading zeros are not necessary. The number
range of <rba4g-1> covers band 1 to band 32.
“1“ LTE 2100 (B1)
“2“ LTE 1900 (B2)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 205 of 564
8.10 AT^SNMON

“4“ LTE 1800 (B3)

“8“ LTE 1700 (B4)
“10“ LTE 850 (B5)
“40“ LTE 2600 (B7)
“80“ LTE 900 (B8)
“800“ LTE 700 (B12)
“1000“ LTE 700 (B13)
“20000“ LTE 850 (B18)
“40000“ LTE 800 (B19)
“80000“ LTE 800 (B20)
“2000000“ LTE 850 (B26)
“8000000“ LTE 700 (B28)

<rba4g-2>(str)(NV)
<rba4g-2> determines 4G frequency bands the UE is allowed to use. Values are given in hexadecimal 32-bit-
value order. Every bit corresponds to a dedicated band number. The number range of <rba4g-2> covers band
33 to max possible band. If the UE does not support bands higher than 32 the AT^SNMON test command returns
the value range 0 - 0.
“20“ LTE 2600 (B38)
“80“ LTE 2350 (B40)
“100“ LTE 2550 (B41)
“200000000“ LTE 1745 (B66)

<cell_ID>(str)
Cell ID
16 bit length for GSM
28 bit length for UMTS
28 bit length for LTE

<lac>(str)
Location Area Code
Two byte location area code in hexadecimal format (e.g. "00C1" equals 193 in decimal) of the cell that was
scanned.

<tac>(num)
Tracking Area Code (see 3GPP 23.003 Section 19.4.2.3)

<plmn>(str)
PLMN code
Public Land Mobile Network Code

<arfcn>(num)
Absolute Radio Frequency Channel Number of the BCCH carrier.

<uarfcn>(num)
UTRAN Absolute Radio Frequency Channel Number of the BCCH carrier.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 206 of 564
8.10 AT^SNMON

<earfcn>(num)
E-UTRA Absolute Radio Frequency Channel Number

<rssi>(num)
Received signal level of the BCCH carrier. The indicated value is composed of the measured value in dBm plus
an offset.
This is in accordance with a formula specified in 3GPP TS 45.008 [55]

<dbm>(str)
Signal Strength
signal strength in dBm

<rscp>(num)
Received Signal Code Power in dBm

<psc>(num)
Primary Scrambling Code

<pcid>(num)
Physical Cell ID

<bwdl>(num)
bandwidth in download direction

<bwup>(num)
bandwidth in upload direction

<rsrp>(num)
Reference Signal Received Power as measured by L1 in dBm (see ETSI TS 136 214 version 10.1.0 Section
5.1.1.)

<rsrq>(num)
Reference Signal Received Quality as measured by L1 in dB (see ETSI TS 136 214 version 10.1.0 Section
5.1.3.)

Note
• The time required for a network scan depends not only on the number of radio bands to be scanned, but also
on ripple and existing ghost peaks on the scanned radio bands.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 207 of 564
8.11 AT+CAVIMS

8.11 AT+CAVIMS Availability for voice calls with IMS

Read command returns the UEs IMS voice call availability status stored in the MT. Test command returns sup-
ported values as a compound value.

Syntax
Test Command
AT+CAVIMS=?
Response(s)
+CAVIMS:(list of supported <mode>s)
OK
+CME ERROR: <err>
ERROR
Read Command
AT+CAVIMS?
Response(s)
+CAVIMS: <mode>
OK
+CME ERROR: <err>
ERROR
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<mode>(num)
The UEs IMS voice call availability status
0 Voice calls with the IMS are not available.
1 IMS registration was successful. Voice calls with the IMS are available.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 208 of 564
8.12 AT+CESQ

8.12 AT+CESQ Extended Signal Quality

The AT+CESQ command returns received signal quality parameters. If the current serving cell is not a GERAN
cell, <rxlev> and <ber> are set to value 99. If the current serving cell is not a UTRA FDD or UTRA TDD cell,
<rscp> is set to 255. If the current serving cell is not a UTRA FDD cell, <ecno> is set to 255. If the current serv-
ing cell is not an E-UTRA cell, <rsrq> and <rsrp> are set to 255.

Syntax
Test Command

AT+CESQ=?
Response(s)
+CESQ: (list of supported <rxlev>s), (list of supported<ber>s), (list of supported<rscp>s), (list of
supported<ecno>s), (list of supported<rsrq>s), (list of supported<rsrp>s)
OK
Exec Command
AT+CESQ
Response(s)
+CESQ: <rxlev>, <ber>, <rscp>, <ecno>, <rsrq>, <rsrp>
OK
ERROR
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<rxlev>(num)
Received signal strength level (see 3GPP TS 45.008 [55] subclause 8.1.4). For 2G networks only
0 rssi < -110 dBm
1 -110 dBm ≤ rssi < -109 dBm
2 -109 dBm ≤ rssi < -108 dBm
...
61 -50 dBm ≤ rssi < -49 dBm
62 -49 dBm ≤ rssi < -48 dBm
63 -48 dBm ≤ rssi
99 not known or not detectable

<ber>(num)
Channel bit error rate (in percent). For 2G networks only
0..7 as RXQUAL values in the table in 3GPP TS 45.008 [55] subclause 8.2.4
99 not known or not detectable

<rscp>(num)
Received signal code power (see 3GPP TS 25.133 [47] subclauses 9.1.1.3 and 9.1.1.1.3) For 3G networks only
0 rscp < -120 dBm
1 -120 dBm ≤ rscp < -119 dBm
2 -119 dBm ≤ rscp < -118 dBm

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 209 of 564
8.12 AT+CESQ

...
94 -27 dBm ≤ rscp < -26 dBm
95 -26 dBm ≤ rscp < -25 dBm
96 -25 dBm ≤ rscp
255 not known or not detectable

<ecno>(num)
Ratio of the received energy per PN chip to the total received power spectral density (see 3GPP TS 25.133 [47]
subclause 9.1.2.3) For 3G networks only
0 Ec/Io < -24 dB
1 -24 dB ≤ Ec/Io < -23.5 dB
2 -23.5 dB ≤ Ec/Io < -23 dB
...
47 -1 dB ≤ Ec/Io < -0.5 dB
48 -0.5 dB ≤ Ec/Io < 0 dB
49 0 dB ≤ Ec/Io
255 not known or not detectable

<rsrq>(num)
Reference signal received quality (see 3GPP TS 36.133 [57] subclause 9.1.7). For 4G networks only
0 rsrq < -19.5 dB
1 -19.5 dB ≤ rsrq < -19 dB
2 -19 dB ≤ rsrq < -18.5 dB
...
32 -4 dB ≤ rsrq < -3.5 dB
33 -3.5 dB ≤ rsrq < -3 dB
34 -3 dB ≤ rsrq
255 not known or not detectable

<rsrp>(num)
Reference signal received power (see 3GPP TS 36.133 [57] subclause 9.1.4). For 4G networks only
0 rsrp < -140 dBm
1 -140 dBm ≤ rsrp < -139 dBm
2 -139 dBm ≤ rsrp < -138 dBm
...
95 -46 dBm ≤ rsrp < -45 dBm
96 -45 dBm ≤ rsrp < -44 dBm
97 -44 dBm ≤ rsrp
255 not known or not detectable

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 210 of 564
8.13 AT^SNSRAT

8.13 AT^SNSRAT Radio Access Technologies Selection

The AT^SNSRAT command specifies the Radio Access Technologies (RAT) to be used for network selection and
registration. See also AT+COPS.

The AT^SNSRAT execute command will reset RATs to default values. The rule is as below: LTE > UMTS > GSM.

The AT^SNSRAT write command allows to set the preferred RATs:

• The preferred RATs can be set in a prioritized order of <1stPreferredAcT>, <2ndPreferredAcT> and
<3rdPreferredAcT>. The settings are stored non-volatile, and will be used first for the next registration
attempt. However, depending on network capability, it is possible that the UE changes to the non-preferred
RAT if this more suitable.
• The preferred RATs set in <1stPreferredAcT>, <2ndPreferredAcT> or <3rdPreferredAcT> cannot
be the same.
• If a preferred RAT is set in <1stPreferredAcT> while <2ndPreferredAcT> and <3rdPreferredAcT>
are not, the unselected RATs will be ignored during network research. For example, if preferred RAT is set
by AT^SNSRAT=2, the radio access technology will change to UMTS; GSM and LTE will be ignored during
the network research.
• The preferred RATs will be overwritten by AT+COPS write command. For example, if preferred RAT
<1stPreferredAcT> is set by AT^SNSRAT=7, the radio access technology will change to LTE; then if
AT+COPS=0 is set in the next step, the automatic <rat> selection mode will be restored. See also <rat> in
AT+COPS.

Syntax
Test Command

AT^SNSRAT=?
Response(s)
^SNSRAT:(list of supported <1stPreferredAcT>s)[, (list of supported <2ndPreferredAcT>s)[, (list of
supported <3rdPreferredAcT>s)]]
OK
ERROR
+CME ERROR: <err>
Read Command

AT^SNSRAT?
Response(s)
^SNSRAT:<1stPreferredAcT>[, <2ndPreferredAcT>[, <3rdPreferredAcT>]]
OK
ERROR
+CME ERROR:<err>
Exec Command

AT^SNSRAT
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SNSRAT=<1stPreferredAcT>[, <2ndPreferredAcT>[, <3rdPreferredAcT>]]

Response(s)
OK
ERROR
+CME ERROR:<err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 211 of 564
8.13 AT^SNSRAT

PIN  Last
- ± -

Parameter Description

<1stPreferredAcT>(num)(NV)
Access technology 1st preferred
0 GSM
2 UMTS
(D)
7 LTE

<2ndPreferredAcT>(num)(NV)
Access technology 2nd preferred
0 GSM
(D)
2 UMTS
7 LTE

<3rdPreferredAcT>(num)(NV)
Access technology 3rd preferred
0(D) GSM
2 UMTS
7 LTE

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 212 of 564
8.14 AT^SNLWM2M

8.14 AT^SNLWM2M LwM2M Client Configuration / Controlling

AT^SNLWM2M is used to configure and control LWM2M Client.

Syntax
Read Command

AT^SNLWM2M?
Response(s)
^SNLWM2M: "status/srv"
^SNLWM2M: "status/stack"
OK
Write Command

The following command shall be used to control LwM2M Client:

AT^SNLWM2M="act" , <stack_id_str>, <action>[, <start_parameters>]
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

The following command shall be used to configure LwM2M Client settings:

AT^SNLWM2M="cfg" , <stack_id_str>[, <mgmt_rsc>[, <rsc_value>]]
Response(s)
^SNLWM2M: "cfg" , <stack_id_str>, <mgmt_rsc>,[<rsc_value>], <rsc_flags>[, <rsc_size>]

In case of <rsc_value> is omitted, and <mgmt_rsc> does not specify the resource instance:
^SNLWM2M: "cfg", <stack_id_str>, <mgmt_rsc>, <rsc_value>
[^SNLWM2M: "cfg", <stack_id_str>, <mgmt_rsc>, <rsc_value>]
...

OK
ERROR
+CME ERROR: <err>
Write Command

The following command shall be used to configure extension configuration:

AT^SNLWM2M="cfg/ext" , <stack_id_str>[, <mgmt_rsc>[, <ext_param>[, <ext_value>]]]
Response(s)
^SNLWM2M: "cfg/ext" , <stack_id_str>, <mgmt_rsc>, <ext_param>, <ext_value>
OK
ERROR
+CME ERROR: <err>
Write Command
The following command shall be used to create or remove an Object Instance:
AT^SNLWM2M="cfg/object" , <stack_id_str>, <mgmt_rsc>, <rsc_operation>
Response(s)
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 213 of 564
8.14 AT^SNLWM2M

Write Command

The following command shall be used for Object Resource Instance Setting:
AT^SNLWM2M="cfg/rsc" , <stack_id_str>, <mgmt_rsc>, <value>
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

The following command shall be used to control LwM2M Client autostart:

AT^SNLWM2M="cfg/stack" , <stack_id_str>, autostart , <autostart>
Response(s)
^SNLWM2M: "cfg/stack" , <stack_id_str>, autostart, <autostart>
OK
ERROR
+CME ERROR: <err>
Write Command
The following command shall be used to delete extension configuration:
AT^SNLWM2M="del/ext" , <stack_id_str>, <mgmt_rsc>, <ext_param>
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command
The following command shall be used to get the current status of the LwM2M Client:
AT^SNLWM2M="status/stack" , <stack_id_str>
Response(s)
^SNLWM2M: "status/stack" , <stack_id_str>, <stack_status>[, <status_parameter>]
OK
ERROR
+CME ERROR: <err>
Write Command

The following command shall be used to get the current status of the LwM2M Server:
AT^SNLWM2M="status/srv" , <stack_id_str>[, <srvID>]
Response(s)
^SNLWM2M: "status/srv" , <stack_id_str>, <srvID>, <server_status>[,
<server_status_parameter>]
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Unsolicited Result Code

^SNLWM2M, "procedure", <stack_id_str>, [<srvID>], <procedure>,
<procedure_status>[, <procedure_status_parameter>]
URCs indicate execution status of LwM2M action procedure.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 214 of 564
8.14 AT^SNLWM2M

Parameter Description

<stack_id_str>(text)
This parameter is used for identification of the client
MODS Identification of the client Module Service.
attus Identification of the client AT&T LwM2M service.

Example: To start the AT&T LwM2M service execute following command: AT^SNLWM2M="act", "attus", "start".

<mgmt_rsc>(str)
This parameter is used for identification of the management object, in the format of "/object", "/object/object
instance", "/object/object instance/resource", or "/object/object instance/resource/resource instance".
“/“ To configure default value. The value range of an object, an object instance, a
resource or a resource instance is from 0 to 65534.

<rsc_value>(str)(+CSCS)
This parameter represent the value of resource and is omitted when the management object has the status
uninitialized, not printable or Secure Read.

<rsc_flags>(str)
This parameter represents status of the resource.
“0“ Uninitialized - Resource value has not been set yet
“1“ Valid
“2“ Not printable - value is valid but is too large or contains characters not printable
on AT interface
“4“ Secure Read - value is valid but cannot be read over plain AT interface

<rsc_size>(str)
This parameter represent size of the resource value <rsc_value>.

<rsc_operation>(str)
This parameter determines if a management object will be created or deleted.
“new“ Creation of object instance
“del“ Deletion of object instance

<value>(str)
This parameter is used to set the object resource instance.

<ext_param>(str)
This parameter is used for identification of the management object parameter.
“conID“ For context ID

<ext_value>(str)
This parameter is used for identification of the management object value, eg. parameter <cid> of AT+CGDCONT.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 215 of 564
8.14 AT^SNLWM2M

<action>(str)
This parameter determines if a management object will be created or deleted.
“start“ Start LwM2M Client
“stop“ Stop LwM2M Client
“server-bootstrap“ Start Client-initiated bootstrap against bootstrap server
“regUpdate“ Initiate registration update

<action_status>(str)
This parameter shows the status of management object.
“0“ Success for start/stop of LwM2M Client
“1“ Error for start/stop of LwM2M Client

<start_parameters>(str)
This optional parameter is only applicable in case of <action>="regUpdate".

<autostart>(str)
the parameter controls the autostart of the LwM2M Client.
“on“ Autostart switched on
“off“ Autostart switched off

<stack_status>(str)
the parameter shows the status of the LwM2M Client.
“init“ LwM2M client is in factory bootstrap mode, i.e. resources and objects can be
configured via AT interface. All connections to servers are disabled
“active“ LwM2M client is in normal LwM2M operation mode, i.e. it registers to config-
ured LwM2M servers. Resource values can be configured via AT interface
“server-bootstrap“ LwM2M client is in remote bootstrap mode, i.e. it connects to the bootstrap
server to get initial configuration. Objects or resources cannot be configured or
modified via the AT interface. AT^SNLWM2M="status/srv" will return status
only of the bootstrap server connection.

<status_parameter>(str)
the parameter shows additional status information of the LwM2M Client.

<srvID>(str)
LwM2M Server Identification is integer value of short server id or empty for bootstrap server

<server_status>(str)
The parameter shows the status of the LwM2M Server.
“deregistered“ No registration to the server and client is currently not attempting registration.
“connecting“ Transport connection is being setup - e.g. DNS query or (D)TLS handshake.
“registering“ Registration on CoAP layer started.
“registered“ Registered to the server.
“sleep“ Queue mode activated - registered, but server is buffering data.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 216 of 564
8.14 AT^SNLWM2M

“error“ There was an error in the last registration attempt, client is not registered
“bootstrapping“ The client is connected to the bootstrap server and bootstrap procedure is
ongoing.

<server_status_parameter>(str)
The parameter shows additional status information of the LwM2M Server. In case of "error" state it shall contain
error code and description of the error.

<procedure>(str)
The parameter shows the procedure in progress
“start“ To indicate the LwM2M client is performing the start action procedure
“stop“ To indicate the LwM2M client is performing the stop action procedure
“fwdownload“ To indicate the LwM2M client is performing the firmware download procedure
“fwupdate“ To indicate the LwM2M client is performing the firmware update procedure

<procedure_status>(str)
The parameter shows the status of procedure in progress
“start failed“ To indicate the failure occurs during LwM2M client start action
“stop failed“ To indicate the failure occurs during LwM2M client stop action
“init“ To indicate the action which firmware download is starting with URL informa-
tion provided in <procedure_status_parameter>
“ready“ To indicate action is ready to be initiated
“progress“ To indicate download progress percentage, with downloading percentage
information provided in <procedure_status_parameter>, the URC will be
printed in every 5 percent increased
“status“ To indicate final action status

<procedure_status_parameter>(str)
The parameter shows additional status information of the procedure in progress.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 217 of 564
8.15 AT^SNCSGSC

8.15 AT^SNCSGSC Closed Subscriber Group Network Scan

AT^SNCSGSC queries the present status of the PLS63-W's CSG networks registration and allows to register to
a specific macro cell as well as query the current used macro cell.

The AT^SNCSGSC test command lists sets of six parameters, each representing a macro cell present in the net-
work.
A set consists of
• numeric format representation of the operator country code
• numeric format representation of the operator network code
• an hexadecimal number indicating the macro cell id.
• an integer indicating the access technology of the operator.
• an integer indicating the access properties of the macro cell.
• an integer indicating the signal strength.

Reponse to AT^SNCSGSC read command depends on the registration status. If the UE is registered the response
returns the currently registered status. Any of the parameters may be unavailable and will then be an empty field
(-). The <mcc>,<mnc>,<netLac>,<netCellId>,<rat> are vaild if module is registered or camped to network.
If <csgId> is not empty (-) it means that current serving cell is a femtocell with CSG support.

The AT^SNCSGSC write command forces an attempt to select and register to a manual selected macro cell. This
result does not mean that registration to CSG cell is done with success or not. In order to get information if reg-
istration to CSG was done, it is needed to set the command AT+CREG= 2 before CSG registration. After execut-
ing the AT^SNCSGSC write command wait for URC with information that ME is registered to new cell. After that,
it can be checked if this cell is CSG via AT^SNCSGSC read command. The network name can be checked via
AT+COPS command.

Syntax
Test Command

AT^SNCSGSC=?
Response(s)
^SNCSGSC: [list of supported (<mcc>, <mnc>, <csgId>, <rat>, <cat>, <rssi>)]
OK
ERROR
+CME ERROR:<err>
Read Command

AT^SNCSGSC?
Response(s)
^SNCSGSC:<mcc>, <mnc>, <csgId>, <rat>, <netLac>, <netCellId>
OK
ERROR
+CME ERROR:<err>
Write Command

AT^SNCSGSC=<mcc>, <mnc>, <csgId>, <rat>

Response(s)
OK
ERROR
+CME ERROR:<err>
PIN  Last
- - -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 218 of 564
8.15 AT^SNCSGSC

Parameter Description

<rat>(num)
0 GSM
1 UTRAN
2 E-UTRAN

<cat>(num)
0 Unknown CSG list
1 Allowed CSG list
2 Operator CSG list

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 219 of 564
8.16 AT^SNCSGLS

8.16 AT^SNCSGLS Operator CSG lists on USIM

The AT^SNCSGLS command supplies the CSG (Closed Subscriber Group) lists from USIM EFOCSGL.

Syntax
Test Command

AT^SNCSGLS=?
Response(s)
OK
ERROR
+CME ERROR: <err>
Exec Command

AT^SNCSGLS
Response(s)
^SNCSGLS: <mcc>,<mnc>,<csgId>,<cti>
[^SNCSGLS: ...]
OK
ERROR
+CME ERROR: <err>
PIN  Last
+ + -

Parameter Description

<mcc>(str)
Mobile Country Code

<mnc>(str)
Mobile Network Code

<csgId>(str)
CSG ID belonging to the Operator CSG lists

<cti>(num)
CSG type indicator

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 220 of 564
8.17 AT^SNFOTA

8.17 AT^SNFOTA Firmware upgrade Over The Air

AT^SNFOTA is one of the AT commands designed for the over-the-air firmware update (FOTA) solution. Major
steps for updating the firmware over the air are:
• Connect to the Internet, e.g. by using AT+CGDCONT with PDP context range 1 - 16 dedicated for the embed-
ded TCP/IP stack.
• Download the firmware from an external FOTA server using AT^SNFOTA.
• Install the firmware from the FFS using the command AT^SFDL=2.
• Switch on the UE (if shut down after firmware installation from FFS has completed).
Detailed guidelines for updating the firmware over the air can be found in Application Note 17.

This chapter refers only to the AT^SNFOTA procedure. The tasks of AT^SNFOTA include:
• Specify FOTA server address, port, and file name.
• Specify CRC hash string value.
• Configure URC presentation mode.
• Configure PDP context ID for FOTA download.
• Download the firmware from an external FOTA server to the FFS, and verify the integrity of the downloaded
firmware by SHA256 hash.

Syntax
Test Command

AT^SNFOTA=?
Response(s)
^SNFOTA:"url", (max. string length of <url:port/filename>)
^SNFOTA:"crc", (required string length of <crc>)
^SNFOTA:"urc", (list of supported <urcMode>s)
^SNFOTA:"conid", (list of supported <cid>s)
^SNFOTA:"act", (list of supported <action>s)
OK
Read Command
AT^SNFOTA?
Response(s)
^SNFOTA: "url", <url:port/filename>
^SNFOTA: "crc", <crc>
^SNFOTA: "urc", <urcMode>
^SNFOTA: "conid", <cid>
^SNFOTA: "act", <action>, <error>, <progress>
Write Command
Specify FOTA server address, port, and filename.
AT^SNFOTA="url"[, <url:port/filename>]
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

Configure crc hash value.

AT^SNFOTA="crc"[, <crc>]
Response(s)
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 221 of 564
8.17 AT^SNFOTA

Write Command (Continued)

Configure crc hash value.

AT^SNFOTA="crc"[, <crc>]
Response(s)
ERROR
+CME ERROR: <err>
Write Command

Configure URC mode.

AT^SNFOTA="urc"[, <urcMode>]
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command
Configure PDP context ID.
AT^SNFOTA="conid"[, <cid>]
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command
Perform FOTA action.
AT^SNFOTA="act"[, <action>]
Response(s)
OK
ERROR
+CME ERROR: <err>

If <action>=0 or 2 - they are done by the UE in the background. Their results are reported by URCs.
PIN  Last
- - -

Unsolicited Result Code

If <action>= 0 or 2:
^SNFOTA: "act",<action>,<error>,<progress>

Parameter Description

<url:port/filename>(str)(NV)
Address of the FOTA server in the form of hostname or IP address with optional port number and path to file.
Entered string may contain up to 255 characters. If port is omitted default port 80 will be used for HTTP and port
443 for HTTPS. The firmware path and file name should contain the complete path and file name on the FOTA
server where to download the firmware.
It shall be provided in the following scheme: "http[s]://<address>[:<port>][/<path>]"
Example: "http:// 95.143.247.130:50000/amss.usf".
““(D) Default is empty string.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 222 of 564
8.17 AT^SNFOTA

<crc>(str)(NV)
SHA256 hash checksum used to verify downloaded firmware. Length of entered string must be equal 64 char-
acters.
Example: "bfcfea8e6282039ba0c04752dec9dbf3c85a7928701f633861962e56c700d651".
““(D) Default is empty string.

<cid>(num)(NV)
Parameter specifies a particular context definition (see AT+CGDCONT). This parameter is used to read network
settings like APN and IP version protocol from specified context ID <cid> and utilize this configuration to estab-
lish the connection to FOTA server.
1(D)...16

<action>(num)
Sends request for FOTA action.
0(P) Abort
Stops all communication with server.
2 Download firmware image file to the user partition of the FFS.
If the previous file downloading was interrupted, the <action>=2 will check
and resume downloading. The FOTA server checks whether the FOTA frag-
ment files in the FFS is consistent with that on the FOTA server. If yes, the file
downloading will be resumed; if not, the file download process will be restarted.

<error>(num)
Possible FOTA errors reported by URCs
0 No error
1 Error unknown
3 Server error
5 Socket error
6 Timeout error
7 File error
8 Not enough space
10 Firmware not available
11 integrity check mismatch
12 User break

<progress>(num)
0...100 Download progress in percent in steps of 10%.

<urcMode>(num)(NV)
"^SNFOTA" URC presentation mode.
0 "^SNFOTA" URCs disabled.
(D)
1 "^SNFOTA" URCs enabled.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 223 of 564
8.18 AT+CEVDP

8.18 AT+CEVDP Voice domain preference for LTE

Write command is used to set the MT to operate according to the specified voice domain preference for LTE.
The read command returns the setting, independent of the current serving cell capability and independent of the
current serving cell's access technology.
Test command returns supported values as a compound value.

Syntax
Test Command

AT+CEVDP=?
Response(s)
+CEVDP:(list of supported <setting>s)
OK
+CME ERROR: <err>
ERROR
Read Command

AT+CEVDP?
Response(s)
++CEVDP: <setting>
OK
+CME ERROR: <err>
ERROR
Write Command
AT+CEVDP=[<setting>]
Response(s)
OK
+CME ERROR: <err>
ERROR
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<setting>(num)(NV)
Indicates the voice domain preference of the UE for LTE.
1 CS Voice only
2 CS Voice preferred, IMS PS Voice as secondary
(D)
[3] IMS PS Voice preferred, CS Voice as secondary
4 IMS PS Voice only

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 224 of 564
9. USIM Application Toolkit (USAT) Commands

9. USIM Application Toolkit (USAT) Commands

This chapter describes AT commands and responses related to the PLS63-W's USIM Application Toolkit (USAT)
implementation.

USAT is a technology that allows an application running on the USIM to control the GSM/UMTS/LTE Engine
(UE); it is specified in 3GPP TS 11.14 [23], 3GPP TS 31.111 [24], ETSI TS 102 223 [25].
Remote USIM Application Toolkit, or short Remote-USAT, provides a link between an application running on the
USIM and the Customer Application (TE). The purpose of Remote-USAT is to allow the TE to send AT com-
mands to the USAT interface and to display dedicated USAT activity on the user interface of the TE.

9.1 AT^SSTA Remote-SAT Interface Activation

AT^SSTA write command can be used to determine the Remote-SAT activation mode <mode>. Removing and
inserting the SIM does not affect the activation status.
SAT commands which are not using the AT interface (non-MMI related SAT commands, e.g. PROVIDE LOCAL
INFORMATION) are executed without activating Remote-SAT.
The read command can be used to request the current operating status and the used alphabet of the Remote-
SAT interface.

Syntax
Test Command
AT^SSTA=?
Response(s)
^SSTA:(list of supported <state>s), (list of supported <Alphabet>s)
OK
Read Command
AT^SSTA?
Response(s)
^SSTA: <state>, <Alphabet>, <allowedInstance>, <SatProfile>, <userTOut>, <AppType>
OK
Write Command
AT^SSTA=<mode>[, <Alphabet>]
Response(s)
OK
PIN  Last
- + -

Parameter Description

<state>(num)
UE Remote-SAT interface states
0 RESET
1 OFF
2 IDLE

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 225 of 564
9.1 AT^SSTA

3 PAC
4 WAIT

<Alphabet>(num)(NV)
Setting becomes effective after restarting the UE.
0(D) GSM character set
Input of a character requests one byte, e.g. "Y".
1 UCS2
To display the 16 bit value of characters represented in UCS2 alphabet a 4 byte
string is required, e.g. "0059" is coding the character "Y". For details please
refer to ISO/IEC 10646.

<allowedInstance>(num)
Remote-SAT handling is only usable via the serial channel on which the Explicit Response (ER) mode was acti-
vated.
This parameter is implemented for compatibility reason only, and has no effect for PLS63-W.

<SatProfile>(str)
SAT or USAT Terminal Profile according to 3GPP TS 11.14 [23], 3GPP TS 31.111 [24], ETSI TS 102 223 [25].
UE supports different profiles for 2G SIM and 3G USIM applications. The type of profile issued by AT^SSTA read
command depends on the inserted SIM or USIM.
In case of no SIM is inserted the SAT Terminal Profile will be issued.
The profile tells the SIM Application which features (e.g. Proactive Commands) are supported by the SIM Appli-
cation Toolkit implementation of the UE.

<userTOut>(num)
PAC user timeout in seconds.
To limit the time Remote-SAT is kept in states PAC or WAIT, any ongoing (but unanswered) proactive command
will be aborted automatically after 5 minutes. In this case, the terminal response is either "ME currently unable
to process command", or if applicable, "No response from user". In addition a URC "Terminate Proactive Com-
mand" will be sent to the external application.

This parameter is implemented for compatibility reason only, and has no effect for PLS63-W.

<AppType>(num)
SIM Application type.
This parameter shows the type of SIM application currently running.
0 (U)SIM not inserted
1 2G Application (SAT)
2 3G Application (USAT)

<mode>(num)(NV)
Select Remote-SAT activation mode.
Setting becomes effective after restarting the UE. Removing and inserting the SIM does not affect the activation
status.
0(D) Automatic Response (AR) mode.
All commands and responses are exchanged automatically between the UE
and the SIM application. This eliminates the need to enter any Remote-SAT
commands including the AT^SSTA command.
If AR mode is enabled the UE enters the OFF state (<state>=1) after restart.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 226 of 564
10. Short Message Service (SMS) Commands

10. Short Message Service (SMS) Commands

The AT Commands described in this chapter allow an external application to use the Short Message Service with
the PLS63-W.

10.1 SMS parameters

This section provides an overview of parameters included in SMS related AT commands and lists references to
3GPP TS specifications.

Parameter Description

<ackpdu>(num)
Format is same for <pdu> in case of SMS, but without 3GPP TS 24.011 [42] SC address field and parameter
shall be bounded by double quote characters like a normal string type parameter.

<ct>(num)
Command Type
3GPP TS 23.040 [39] TP-Command-Type in integer format
[0]...255

<da>(str)(+CSCS)
Destination Address
3GPP TS 23.040 [39] TP-Destination-Address Address-Value field in string format; BCD numbers (or GSM
default alphabet characters) are converted into characters; type of address given by <toda>

<data>(num)(+CSCS)
User Data (in text mode)
In case of SMS: 3GPP TS 23.040 [39] TP-User-Data in text mode responses; format:
• If <dcs> indicates that 3GPP TS 23.038 [38] default alphabet is used and <fo> indicates that 3GPP TS
23.040 [39] TP-User-Data-Header-Indication is not set: UE converts GSM alphabet into current TE character
set according to rules covered in Annex A.
• If <dcs> indicates that 8-bit or UCS2 data coding scheme is used, or <fo> indicates that 3GPP TS 23.040
[39] TP-User-Data-Header-Indication is set: UE converts each 8-bit octet into hexadecimal numbers con-tain-
ing two IRA characters (e.g. octet with integer value 42 is presented to TE as two characters 2A (IRA 50 and
65).
In case of CBS: 3GPP TS 23.041 [40] CBM Content of Message in text mode responses; format:
• If <dcs> indicates that 3GPP TS 23.038 [38] default alphabet is used: UE converts GSM alphabet into current
TE character set according to rules covered in Annex A.
• If <dcs> indicates that 8-bit or UCS2 data coding scheme is used: UE converts each 8-bit octet into hexa-
decimal numbers containing two IRA characters.

<dt>(num)
Discharge Time
Parameter for Status Reports: 3GPP TS 23.040 [39] TP-Discharge-Time in time-string format: "yy/MM/
dd,hh:mm:ss+zz", where characters indicate year (two last digits), month, day, hour, minutes, seconds and time
zone. For example, 6th of May 1994, 22:10:00 GMT+2 hours equals "94/05/06,22:10:00+08"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 227 of 564
10.1 SMS parameters

<ieia>(num)
IEIa (Information Element Identifier octet) of the concatenated SMS.
8 Concatenated short messages, 8-bit reference number
16 Concatenated short messages, 16-bit reference number

<index>(num)
Integer type; value in the range of location numbers supported by the associated memory.

<length>(num)
Message Length
For PDU mode (<mode>=0):
Integer type value indicating in PDU mode (AT+CMGF=0), the length of the actual TP data unit in octets (i.e. the
RP layer SMSC address octets are not counted in the length).

For Text mode (<mode>=1):

In Text mode the value of the <length> parameter depends on the <dcs>parameter in following way:
• If <dcs> indicates that GSM 7 bit default alphabet is used: every character counts as 1, i.e. for "ABC"
<length>= 3.
• If <dcs> indicates that 8-bit data coding scheme is used: every coded character (2 IRA characters) counts
as 1, i.e. for "414243" (= "ABC") <length>= 3.
• If <dcs> indicates that UCS2 data coding scheme is used: every coded character (4 IRA characters) counts
as 1, i.e. for "004100420043" (= "ABC") <length>= 3.

For concatenated SMS messages the maximum length will be reduced by the length of the user data header
with respect to <ieia> (6 bytes for <ieia>=8 and 7 bytes for <ieia>=16). In the case of 8-bit data, the max-
imum length of the short message field is: 140 octets - (6 or 7) = 134 or 133. In the case of GSM 7 bit default
alphabet data, the maximum length of the short message is (140 - (6 or 7))*8/7 = 153 or 152 characters. In the
case of 16 bit UCS2 data, the maximum length of the short message is: (140 - (6 or 7))/2)= 67 or 66 characters.

<max>(num)
Maximum number of all segments to be concatenated into one SMS, beginning with 1.
<max>=0 means: ignore the value. This will result in a non-concatenated SMS.
0...255

<mem1>(str)(NV)
Memory to be used when listing, reading and deleting messages:
“SM“ SIM message storage
(D)
“ME“ UE message storage
“MT“ Same as "ME" storage
“SR“ Status report storage
Received status reports are not stored by the module. Therefore, AT+CMGR,
AT+CMGL, AT^SMGR, AT^SMGL commands will show only status reports previ-
ously stored to the "SR" memory.

<mem2>(str)(NV)
Memory to be used when writing and sending messages:
“SM“ SIM message storage
(D)
“ME“ UE message storage

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 228 of 564
10.1 SMS parameters

“MT“ Same as "ME" storage

“SR“ Status report storage

<mem3>(str)(NV)
Received messages will be placed in this memory storage if routing to TE is not set. See command AT+CNMI
with parameter <mt>=2.
“SM“ SIM message storage
(D)
“ME“ UE message storage
“MT“ Same as "ME" storage
“SR“ Status report storage

<mid>(num)
Message Identifier
3GPP TS 23.041 [40] CBM Message Identifier in integer format

<mn>(num)
Message Number
3GPP TS 23.040 [39] TP-Message-Number in integer format

<mr>(num)
Message Reference
3GPP TS 23.040 [39] TP-Message-Reference in integer format

<oa>(str)(+CSCS)
Originating Address
3GPP TS 23.040 [39] TP-Originating-Address Address-Value field in string format; BCD numbers (or GSM
default alphabet characters) are converted into characters; type of address given by <tooa>

<page>(num)
Page Parameter
3GPP TS 23.041 [40] CBM Page Parameter bits 4-7 in integer format

<pages>(num)
Page Parameter
3GPP TS 23.041 [40] CBM Page Parameter bits 0-3 in integer format

<pdu>(num)
In the case of SMS: 3GPP TS 24.011 [42] SC address followed by 3GPP TS 23.040 [39] TPDU in hexadecimal
format: UE converts each octet of TP data unit into hexadecimal numbers containing two IRA characters (e.g.
octet with integer value 42 is presented to TE as two characters 2A (IRA 50 and 65)). In the case of CBS: <ra>
3GPP TS 23.040 [39] TP-Recipient-Address Ad-dress-Value field in string format; BCD numbers (or GSM
default alphabet characters) are converted into characters; type of address given by <tora>

<ra>(str)(+CSCS)
Recipient Address
3GPP TS 23.040 [39] TP-Recipient-Address Address-Value field in string format; BCD numbers (or GSM default
alphabet characters) are converted to characters of the currently selected TE character set (refer to command
AT+CSCS.); type of address given by <tora>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 229 of 564
10.1 SMS parameters

<ref>(num)
Reference number to identify all segments of the concatenated SMS (i.e. the number needs to be the same for
each segment).
0...255 8 bit reference number <ieia>=8
0...65535 16 bit reference number <ieia>=16

<sca>(str)(+CSCS)(NV)
Service Center Address
3GPP TS 24.011 [42] RP SC address Address-Value field in string format; BCD numbers (or GSM default alpha-
bet characters) are converted to characters of the currently selected TE character set (refer to command
AT+CSCS); type of address given by <tosca>

<scts>(num)
Service Centre Time Stamp
3GPP TS 23.040 [39] TP-Service-Centre-Time-Stamp in time-string format (refer <dt>)

<seq>(num)
Sequence number of the concatenated SMS beginning with 1. The number must be incremented by one for
each segment of the concatenated short message.
<seq>=0 means: ignore the value. This will result in a non-concatenated SMS.
0...255

<sn>(num)
Serial Number
3GPP TS 23.041 [40] CBM Serial Number in integer format

<st>(num)
Status
3GPP TS 23.040 [39] TP-Status in integer format for Status Report
0...255

<stat>(str)
Message status
3GPP 27.005 Interface of SMS and CB. Indicates the status of message in memory.

Description text mode (<mode>=1) PDU mode (<mode>=0) Default

Received unread mes- "REC UNREAD" 0 for SMS reading com-
sages mands
Received read messages "REC READ" 1
Stored unsent messages "STO UNSENT" 2 for SMS writing com-
mands
Stored sent messages "STO SENT" 3
All messages "ALL" 4

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 230 of 564
10.1 SMS parameters

<toda>(num)
Type of Destination Address
3GPP TS 24.011 [42] TP-Destination-Address Type-of-Address octet in integer format (when first character of
<da> is + (IRA 43) default is 145, otherwise default is 129)
0...255

<tooa>(num)
Type of Originating Address
3GPP TS 24.011 [42] TP-Originating-Address Type-of-Address octet in integer format (default refer <toda>)

<tora>(num)
Type of Recipient Address
3GPP TS 24.011 [42] TP-Recipient-Address Type-of-Address octet in integer format (default refer <toda>)

<tosca>(num)
Type of Service Center Address
3GPP TS 24.011 [42] RP SC address Type-of-Address octet in integer format (default refer <toda>)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 231 of 564
10.2 AT+CMGC

10.2 AT+CMGC Send an SMS command

Syntax
Test Command

AT+CMGC=?
Response(s)
OK
Write Command

If text mode (see AT+CMGF=1)

AT+CMGC=<fo>, <ct>[, <pid>[, <mn>[, <da>[, <toda>]]]]<CR> Text can be entered <CTRL-Z>/<ESC>
Response(s)
+CMGC: <mr>[, <scts>]
If sending fails
ERROR
+CMS ERROR: <err>
Write Command
If PDU mode (see AT+CMGF=0)
AT+CMGC=<length><CR> PDU can be entered <CTRL-Z>/<ESC>
Response(s)
+CMGC: <mr>[, <ackpdu>]
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.005 [50]

Note
• After invoking the commands AT+CMGW, AT+CMGS or AT+CMGC it is necessary to wait for the prompt ">"
before entering text or PDU.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 232 of 564
10.3 AT+CMGD

10.3 AT+CMGD Delete short message

The AT+CMGD write command deletes a short message from the preferred message storage <mem1> location
<index>. If <delflag> is present and not set to 0, the UE shall ignore <index> and follow the rules for
<delflag> shown below. If deleting fails, final result code +CMS ERROR is returned.

The AT+CMGD test command returns the valid <index> locations of the preferred <mem1> and the supported
<delflag> values.

Syntax
Test Command

AT+CMGD=?
Response(s)
+CMGD: (list of supported <index>s), (list of supported <delflag>es)
OK
Write Command

AT+CMGD=<index>[, <delflag>]
Response(s)
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Parameter Description

<index>(num)
Integer type; value in the range of location numbers supported by the associated memory. See <index>.

<delflag>(num)
0 (Or omitted) delete the message specified in <index>.
1 Delete all read messages from preferred message storage, leaving unread
messages and stored mobile originated messages (whether sent or not)
untouched.
2 Delete all read messages from preferred message storage and sent mobile
originated messages, leaving unread messages and unsent mobile originated
messages untouched.
3 Delete all read messages from preferred message storage, sent and unsent
mobile originated messages leaving unread messages untouched.
4 Delete all messages from preferred message storage including unread mes-
sages.

Notes
• To delete multiple SMS please use concatenated AT+CMGD=<index> commands, for example
AT+CMGD=1;+CMGD=17;+CMGD=55. Note that a single concatenated command line supports max. 1000
characters.
• If there is no short message stored at the selected index, the response is OK too.
• Users should be aware that error will occur when using this AT command quickly after SIM PIN authentication
due to the fact the SIM data may not yet be accessible.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 233 of 564
10.4 AT+CMGF

10.4 AT+CMGF Select SMS message format

The AT+CMGF command specifies the input and output format of the short messages.

Syntax
Test Command

AT+CMGF=?
Response(s)
+CMGF: (list of supported<mode>s)
OK
Read Command

AT+CMGF?
Response(s)
+CMGF: <mode>
OK
Write Command

AT+CMGF=<mode>
Response(s)
OK
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Parameter Description

<mode>(num)(&V)(&W)
[0](&F) PDU mode
1 Text mode

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 234 of 564
10.5 AT+CMGL

10.5 AT+CMGL List SMS messages from preferred store

The write command returns messages with status value <stat> from message storage <mem1> to the TE. If the
status of the message is 'received unread', the status in the storage changes to 'received read'.
The execute command is the same as the write command with the given default for <stat>.

Syntax
Test Command

AT+CMGL=?
Response(s)
+CMGL: (list of supported <stat>s)
OK
Exec Command

AT+CMGL
Response(s)
+CMGL: (see write command for default of <stat>)
OK
Write Command

AT+CMGL=<stat>
Response(s)
Output if text mode (AT+CMGF=1) and command successful:
For SMS- SUBMITs and/or SMS-DELIVERs
+CMGL: <index>, <stat>, <oa>/<da>, , [<scts>][, <tooa>/<toda>, <length>]
<data>
[... ]
OK

For SMS-Commands
+CMGL: <index>, <stat>, <fo>, <ct>
[... ]
OK

Output if PDU mode AT+CMGF=0 and command successful:

For SMS-SUBMITs and/or SMS-DELIVERs
+CMGL: <index>, <stat>, , <length>
<pdu>
[... ]
OK

If error is related to ME functionality

ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 235 of 564
10.5 AT+CMGL

Notes
• The selected <mem1> can contain different types of SMs (e.g. SMS-DELIVERs, SMS-SUBMITs and SMS-
COMMANDs), the response may be a mix of the responses of different SM types. TE application can recog-
nize the response format by examining the third response parameter.
• Users should be aware that error will occur when using this AT command quickly after SIM PIN authentication
due to the fact the SIM data may not yet be accessible.
• Status reports are not stored by the module and therefore are not displayed by AT+CMGR and AT+CMGL com-
mands.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 236 of 564
10.6 AT+CMGR

10.6 AT+CMGR Read SMS messages

The write command returns SMS message with location value <index> from message storage <mem1> to the
TE. If status of the message is 'received unread', status in the storage changes to 'received read'.

Syntax
Test Command
AT+CMGR=?
Response(s)
OK
Write Command
AT+CMGR=<index>
Response(s)
Output if text mode (AT+CMGF=1) and command successful:
For SMS-DELIVER
+CMGR: <stat>, <oa>, , <scts>[, <tooa>, <fo>, <pid>, <dcs>, <sca>, <tosca>, <length>]
<data>
[... ]
OK

For SMS-SUBMIT
+CMGR: <stat>, <da>, [, <toda>, <fo>, <pid>, <dcs>, [<vp>], <sca>, <tosca>, <length>]
<data>
[... ]
OK

For SMS-Commands
+CMGR: <stat>, <fo>, <ct>[, <pid>[<mn>], [<da>], [<toda>], <length>
<data>]
[... ]
OK

Output if PDU mode (AT+CMGF=0) and command successful:

For SMS-SUBMITs and/or SMS-DELIVERs
+CMGR: <stat>, , <length>
<pdu>
[... ]
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Notes
• If AT+CMGR is used to read an empty record the response is: OK.
• If AT+CMGR is used to read a non-existent record index the response is: "+CMS ERROR: 321" (invalid mem-
ory index).
• Users should be aware that error will occur when using this AT command quickly after SIM PIN authentication
due to the fact the SIM data may not yet be accessible.
• Status reports are not stored by the module and therefore are not displayed by AT+CMGR and AT+CMGL com-
mands.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 237 of 564
10.7 AT+CMGS

10.7 AT+CMGS Send Short Message

The write command transmits a short message from TE to network (SMS-SUBMIT).

After invoking the write command wait for the prompt ">" and then start to write the message. To send the mes-
sage simply enter <CTRL-Z>.
To abort sending use <ESC>. Abortion is acknowledged with "OK", though the message will not be sent.
The message reference <mr> is returned to the TE on successful message delivery. The value can be used to
identify the message in a delivery status report provided as an unsolicited result code.

Syntax
Test Command

AT+CMGS=?
Response(s)
OK
Write Command

If text mode (see AT+CMGF=1)

AT+CMGS=<da>[, <toda>]<CR> Text can be entered. <CTRL-Z>/<ESC>
Response(s)
+CMGS: <mr>[, <scts>]
OK
ERROR
+CMS ERROR: <err>
Write Command

If PDU mode (see AT+CMGF=0)

AT+CMGS=<length><CR> PDU can be entered. <CTRL-Z>/<ESC>
Response(s)
+CMGS: <mr>[, <ackpdu>]
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.005 [50]

Notes
• Note that some providers do not recognize an @ symbol used in a short message. A widely used alternative
is typing "*" as defined in 3GPP TS 23.040 [39].
• Message Length in Text Mode:
The maximum length of a short message depends on the used coding scheme: It is 160 characters if the 7
bit GSM coding scheme is used, and 140 characters according to the 8 bit GSM coding scheme.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 238 of 564
10.8 AT+CMGW

10.8 AT+CMGW Write Short Messages to Memory

The execute and write commands transmit a short message (either SMS-DELIVER or SMS-SUBMIT) from TE
to memory storage <mem2>. Memory location <index> of the stored message is returned. Message status will
be set to 'stored unsent' unless otherwise given in parameter <stat>.
After invoking the execute or write command wait for the prompt ">" and then start to write the message. To save
the message simply enter <CTRL-Z>.
To abort writing use <ESC>. Abortion is acknowledged with "OK", though the message will not be saved.

Syntax
Test Command

AT+CMGW=?
Response(s)
OK
Exec Command

If text mode (see AT+CMGF=1):

AT+CMGW
Response(s)
<CR> Text can be entered. <CTRL-Z>/<ESC>
+CMGW: <index>
OK
ERROR
+CMS ERROR: <err>
Write Command

If text mode (see AT+CMGF=1):

AT+CMGW=<oa>/<da>[, [<tooa>/<toda>][, <stat>]]<CR> Text can be entered. <CTRL-Z>/<ESC>
Response(s)
+CMGW: <index>
OK
ERROR
+CMS ERROR: <err>
Write Command
If PDU mode (see AT+CMGF=0):
AT+CMGW=<length>[, <stat>]<CR> PDU can be entered. <CTRL-Z>/<ESC>
Response(s)
+CMGW: <index>
OK
If writing fails see notes below.
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Notes
• Note that some providers do not recognize an @ symbol used in a short message. A widely used alternative
is typing "*" as defined in 3GPP TS 23.040 [39].
• Message Length in Text Mode:
The maximum length of a short message depends on the used coding scheme: It is 160 characters if the 7
bit GSM coding scheme is used, and 140 characters according to the 8 bit GSM coding scheme.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 239 of 564
10.9 AT+CMSS

10.9 AT+CMSS Send short messages from storage

The write command sends message with location value <index> from message storage <mem2> to the network
(SMS-SUBMIT or SMS-COMMAND).
If new recipient address <da> is given for SMS-SUBMIT, it shall be used instead of the one stored with the mes-
sage. Reference value <mr> is returned to the TE on successful message delivery. Value can be used to identify
message upon unsolicited delivery status report result code.
If the optional parameter <da> is given, the old status of the short message at <index> remains unchanged
(see <stat>).

Syntax
Test Command

AT+CMSS=?
Response(s)
OK
Write Command

If text mode (AT+CMGF=1):

AT+CMSS=<index>[, <da>[, <toda>]]
Response(s)
+CMSS: <mr>[, <scts>]
OK
If sending fails
ERROR
+CMS ERROR: <err>
Write Command

If PDU mode (AT+CMGF=0):

AT+CMSS=<index>[, <da>[, <toda>]]
Response(s)
+CMSS: <mr>[, <ackpdu>]
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.005 [50]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 240 of 564
10.10 AT+CNMA

10.10 AT+CNMA New Message Acknowledgement to UE/TE

The AT+CNMA write and execute commands confirm successful receipt of a new message (SMS-DELIVER or
SMS-STATUS-REPORT) routed directly to the TE. If the PLS63-W does not receive acknowledgement within
required time (network timeout), it sends an "RP-ERROR" message to the network. The UE will automatically
disable routing to the TE by setting both <mt> and <ds> values of AT+CNMI to zero.

Syntax
Test Command

AT+CNMA=?
Response(s)
+CNMA: (list of supported <n>s)
OK
Exec Command

AT+CNMA
Response(s)
OK
ERROR
+CMS ERROR: <err>
Write Command

AT+CNMA=<n>
Response(s)
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.005 [50]

Parameter Description

<n>(num)
Parameter required only for PDU mode.
0 Command operates similarly as in text mode.
1 Send positive (RP-ACK) acknowledgement to the network. Accepted only in
PDU mode.
2 Send negative (RP-ERROR) acknowledgement to the network. Accepted only
in PDU mode.

Note
• Execute and write command shall only be used when AT+CSMS parameter <service> equals 1 (= phase
2+) and an appropriate URC has been issued by the module, i.e.:
"+CMT" for <mt>=2 incoming message classes 0,1,3 and none;
"+CMT" for <mt>=3 incoming message classes 0 and 3;
"+CDS" for <ds>=1.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 241 of 564
10.11 AT+CNMI

10.11 AT+CNMI SMS Event Reporting Configuration

AT+CNMI controls details of the SMS related URC presentation. It selects the procedure how the receipt of a new
SMS from the network is indicated to the TE when TE is active.
The rules <mt>=2 and <mt>=3 for storing received messages are possible only if phase 2+ compatibility is acti-
vated with AT+CSMS=1. The parameter <ds>=1 is also only available in phase 2+.

Syntax
Test Command

AT+CNMI=?
Response(s)
+CNMI: (list of supported<mode>s), (list of supported <mt>s), (list of supported <bm>s), (list of supported
<ds>s), (list of supported <bfr>s)
OK
Read Command
AT+CNMI?
Response(s)
+CNMI: <mode>, <mt>, <bm>, <ds>, <bfr>
OK
Write Command
AT+CNMI=[[<mode>][[, <mt>][[, <bm>][[, <ds>][[, <bfr>]]]]]]
Response(s)
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Unsolicited Result Codes

URC 1
<mt>=1,2 or 3 - indication only (text and PDU mode):
+CMTI: <mem3>, <index>
Indicates that new message has been received

URC 2
<mt>=1,2 or 3 - directly routed message (PDU mode enabled):
+CMT: <length><CR><LF><pdu>
Indicates that new message has been received

URC 3
<mt>=1,2 or 3 - directly routed message (text mode enabled):
+CMT: <oa>, , <scts>[, <tooa>, <fo>, <pid>, <dcs>, <sca>, <tosca>,
<length>]<CR><LF><data>
Indicates that new message has been received

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 242 of 564
10.11 AT+CNMI

URC 4
<bm>=2 (PDU mode enabled):
+CBM: <length><CR><LF><pdu>
Indicates that new cell broadcast message has been received

URC 5
<bm>=2 (text mode enabled):
+CBM: <sn>, <mid>, <dcs>, <page>, <pages><CR><LF><data>
Indicates that new cell broadcast message has been received

URC 6
<ds>=1 (PDU mode enabled):
+CDS: <length><CR><LF><pdu>
Indicates that new SMS status report has been received

URC 7
<ds>=1 (text mode enabled):
+CDS: <fo>, <mr>[, <ra>][, <tora>], <scts>, <dt>, <st>
Indicates that new SMS status report has been received

Parameter Description

<mode>(num)(&V)(&W)
0(&F)(D) SMS related URCs are always buffered in the UE. If the buffer is full, the oldest
indications are discarded and replaced with newly received indications.
1 SMS related URCs are forwarded directly to the TE. However, if this is not pos-
sible because UE-TE link is reserved, e.g. during a data call, these URCs are
discarded.
2 SMS related URCs are forwarded directly to the TE. However, if this is not pos-
sible because UE-TE link is reserved these URCs are buffered and flushed to
the TE afterwards.
Additionally, while UE-TE link is reserved, buffered URCs can be signaled to
the TE by activating the RING line, according to parameters AT^SCFG "URC/
Ringline" <urcRinglineCfg> and AT^SCFG "URC/Ringline/ActiveTime"
<urcRinglineDuration>.

<mt>(num)(&V)(&W)
Rules for storing received short messages depend on the relevant data coding method (refer to
3GPP TS 23.038 [38]), preferred memory storage setting (AT+CPMS) and this value.
0(&F)(D) No SMS-DELIVER indications are routed to the TE.
1 Class 0 SMS-DELIVERs are routed directly to the TE via URC.
For all other messages the following applies: If SMS-DELIVER is stored in UE,
indication of the memory location is routed to the TE via URC.
2 SMS-DELIVERs, except class 2 messages and messages in the message
waiting indication group (store message) are routed directly to the TE via URC.
Class 2 messages and messages in the message waiting indication group
(store message) result in indication as defined for <mt>=1
3 Class 0 and 3 SMS-DELIVERs are routed directly to the TE via URCs defined
in <mt>=2. Messages of other data coding schemes result in indication as
defined in <mt>=1.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 243 of 564
10.11 AT+CNMI

<bm>(num)(&V)(&W)
Rules for storing received CBMs depend on the relevant data coding method (refer to 3GPP TS 23.038 [38]),
the setting of Select CBM Types (AT+CSCB) and this value:
0(&F)(D) No CBM indications are routed to the TE.
2 New CBMs are routed directly to the TE via URC.

<ds>(num)(&V)(&W)
0(&F)(D) No SMS-STATUS-REPORTs are routed to the TE. Also see notes.
1 SMS-STATUS-REPORTs are routed to the TE via URC.

<bfr>(num)(&V)(&W)
1(&F)(D) UE's buffer of SMS related URCs is cleared when <mode> changes from 0 to
1, 2.

<index>(num)
Integer type; value in the range of location numbers supported by the associated memory

Notes
• It is not possible to route messages to more than one AT command port (have none zero settings for <mt>
and <ds> on more than one AT command port). Any attempt to activate settings that conflict with existing
settings on another interface, will result in "+CMS ERROR: operation not allowed".
• With <mt>=2,3 and <ds>=1 messages routed directly to the TE (either short messages or status reports)
have to be acknowledged with AT+CNMA. To do this, GSM Phase 2+ has to be enabled (see AT+CSMS).
• If Phase 2+ is enabled and either a short message or a status report is not acknowledged within the required
time, then <mt> and <ds> will be set to zero. See AT+CNMA for further detail.
• Received status reports are not stored by the module. Therefore, AT+CMGR, AT+CMGL, AT^SMGR, AT^SMGL
commands will show only status reports previously stored to the "SR" memory.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 244 of 564
10.12 AT+CPMS

10.12 AT+CPMS Preferred SMS message storage

The AT+CPMS write command selects memory storages <mem1>,<mem2>, <mem3> to be used for reading, writ-
ing, etc.
The AT+CPMS test command lists the supported memory storages.
The AT+CPMS read command indicates the currently selected memory storages incl. the numbers of used and
total entries.

Syntax
Test Command
AT+CPMS=?
Response(s)
+CPMS: (list of supported <mem1>s), (list of supported <mem2>s), (list of supported <mem3>s)
OK
Read Command
AT+CPMS?
Response(s)
+CPMS: <mem1>, <used1>, <total1>, <mem2>, <used2>, <total2>, <mem3>, <used3>, <total3>
OK
ERROR
+CMS ERROR: <err>
Write Command

AT+CPMS=<mem1>[, <mem2>[, <mem3>]]

Response(s)
+CPMS: <used1>, <total1>, <used2>, <total2>, <used3>, <total3>
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Parameter Description

<used1>(num)
Number of messages currently in <mem1>

<used2>(num)
Number of messages currently in <mem2>

<used3>(num)
Number of messages currently in <mem3>

<total1>(num)
Number of messages storable in <mem1>

<total2>(num)
Number of messages storable in <mem2>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 245 of 564
10.12 AT+CPMS

<total3>(num)
Number of messages storable in <mem3>

Notes
• The Mobile Equipment storage ''ME'' offers space for 255 short messages, see <mem1>.
• Incoming Class 1 short messages (ME specific) will be preferably stored to ''ME'' and may be transferred to
the ''SM'' storage if ''ME'' is used up.
Incoming Class 2 messages (SIM specific) will be stored to the SIM card only, no matter whether or not there
is free ''ME'' space. For more information regarding SIM and ME specific message classes refer to parameter
<dcs> and the following specification: 3GPP TS 23.038 [38].
• While <mem3> equals ''SM'' and <mem1> equals ''ME'' it is possible that, after deleting short messages from
''ME'', the freed space on ''ME'' is reclaimed for new incoming short messages, when there is no space left on
the ''SM'' storage. As it is often the clients concern to have received short messages stored only to the SIM
card, inconsistent settings should be generally avoided. This can be achieved simply by using the same mem-
ory for all parameters.
• Users should be aware that error will occur when using this AT command quickly after SIM PIN authentication
due to the fact the SIM data may not yet be accessible.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 246 of 564
10.13 AT+CMMS

10.13 AT+CMMS More Messages to Send

AT+CMMS controls the continuity of the SMS relay protocol link. If the feature is enabled (and supported by the
currently used network) multiple messages can be sent faster as the link is kept open.

Syntax
Test Command
AT+CMMS=?
Response(s)
+CMMS: (list of supported) <mode>s
Read Command
AT+CMMS?
Response(s)
+CMMS: <mode>
OK
Write Command
AT+CMMS=<mode>
Response(s)
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Parameter Description

<mode>(num)
[0] Feature disabled.
1 Keep link open until the time between the response of the latest message's
send command (AT+CMGS, AT+CMSS, etc.) and the next send command
exceeds 1-5 seconds. Afterwards UE will close the link and automatically
switches <mode> back to 0.
2 Keep link open until the time between the response of the latest message's
send command (AT+CMGS, AT+CMSS, etc.) and the next send command
exceeds 1-5 seconds. Afterwards UE will close the link, but will not reset
<mode> to 0.

Notes
• After read command usage a delay of 5-10 seconds is required before issuing the write command, otherwise
the "+CMS ERROR: 500" may appear.
• CMMS mode changes directly from 2 to 1 is not possible. To change it, first disable CMMS mode (0) and then
enable (1 or 2).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 247 of 564
10.14 AT+CSCA

10.14 AT+CSCA SMS Service Center Address

Write command updates the SMSC address, through which mobile originated SMs are transmitted. In text mode,
setting is used by send and write commands. In PDU mode, setting is used by the same commands, but only
when the length of the SMSC address coded into the <pdu> parameter equals zero.

Syntax
Test Command

AT+CSCA=?
Response(s)
OK
Read Command

AT+CSCA?
Response(s)
+CSCA: <sca>, <tosca>
OK
Write Command

AT+CSCA=<sca>[, <tosca>]
Response(s)
OK
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Notes
• The SMS service center address should be entered as specified by the service provider.
• An empty string ("") for <sca> is not accepted and denied with error.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 248 of 564
10.15 AT+CSCB

10.15 AT+CSCB Select Cell Broadcast Message Indication

The test command returns the supported <operation>s as a compound value.

The read command displays the accepted message types.
Depending on the <operation> parameter, the write command adds or deletes the message types accepted
by the ME.

Syntax
Test Command

AT+CSCB=?
Response(s)
+CSCB: (list of supported <operation>s)
OK
ERROR
+CMS ERROR: <err>
Read Command

AT+CSCB?
Response(s)
+CSCB: <operation>, <mids>, <dcss>
OK
ERROR
+CMS ERROR: <err>
Write Command
AT+CSCB=[<operation>[, <mids>[, <dcss>]]]
Response(s)
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Parameter Description

<operation>(num)
Add/delete operation
0(&F)(P) Add new message types defined in <mids> to the list of accepted message
types by ME and replace types defined in <dcss>.
In case of using this operation code without parameters default (0-65535)
range will be added to the list of <mids>.
1 Delete message types defined in <mids> from the list of accepted message
types by ME and replace types defined in <dcss>.
In case of using this operation code without parameters all <mids>s will be
deleted.
(for more see notes)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 249 of 564
10.15 AT+CSCB

<mids>(str)(NV)
Cell Broadcast Message ID specification
All different possible combinations of CBM message identifiers; e.g. "0,1,5,320-478,922". Maximum length of
the input string in the AT+CSCB write command is 50 characters (including ',' as separator and '-' in ranges).
““(D)

<dcss>(str)
CBM data coding scheme specification
All different possible combinations of CBM data coding schemes (e.g. "0-3,5"). Maximum length of the string is
50 characters (including ',' as separator and '-' in ranges). A given <dcss> replaces any former value and is
used for consecutive requests.
““(&F)(P) Default is empty string and if it is used all CBMs are received independent of
their dcss.

Note
• The <operation> parameter shown in the AT+CSCB read command response retains the value last used in
the write command. This way, the read command response always reflects the last action done: 0 means that
the last action was adding new channel(s), 1 means that the last action was deleting channel(s).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 250 of 564
10.16 AT+CSDH

10.16 AT+CSDH Show SMS text mode parameters

The write command sets whether or not detailed header information is shown in text mode result codes.

Syntax
Test Command

AT+CSDH=?
Response(s)
+CSDH: (list of supported <show>s)
OK
Read Command

AT+CSDH?
Response(s)
+CSDH:<show>
OK
Write Command

AT+CSDH=<show>
Response(s)
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Parameter Description

<show>(num)(&V)(&W)
0(&F)(D) Do not show header values defined in commands AT+CSCA and AT+CSMP
(<sca>, <tosca>,<fo>,<vp>, <pid> and <dcs>) nor <length>, <toda> or
<tooa> in "+CMT", AT+CMGL, AT+CMGR result codes for SMS-DELIVERs and
SMS-SUBMITs in text mode; for SMS-COMMANDs in +CMGR result code, do
not show <pid>,<mn>,<da>, <toda>, <length>
1 Show the values in result codes

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 251 of 564
10.17 AT+CSMP

10.17 AT+CSMP Set SMS Text Mode Parameters

AT+CSMP controls additional parameters needed when an SMS is sent to the network or placed in a storage if
text format message mode is selected.
It is possible to set the validity period starting from the time when the short message is received by the SMSC
(<vp> is in the range 0... 255) or define an absolute time for validity period termination (<vp> is a string). The
format of <vp> is given by <fo>.

Syntax
Test Command
AT+CSMP=?
Response(s)
OK
Read Command
AT+CSMP?
Response(s)
+CSMP:<fo>, <vp>/ <scts>, <pid>, <dcs>
OK
Write Command
AT+CSMP=[<fo>[, <vp>/<scts>[, <pid>[, <dcs>]]]]
Response(s)
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Parameter Description

<fo>(num)
First Octet
Depending on the command or result code: First octet of 3GPP TS 23.040 [39] SMS-DELIVER, SMS-SUBMIT,
SMS-STATUS-REPORT, or SMS-COMMAND in integer format. If a valid value has been entered once, param-
eter can be omitted.
0...17(&F)(P)...255

<vp>(num)
Validity Period
Depending on SMS-SUBMIT <fo> setting: 3GPP TS 23.040 [39] TP-Validity-Period either in integer format or
in time-string format (refer <dt>).
0...167(&F)(P)...255

<pid>(num)(NV)
Protocol Identifier
3GPP TS 23.040 [39] TP-Protocol-Identifier in integer format.
0(&F)...255

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 252 of 564
10.17 AT+CSMP

<dcs>(num)(NV)
Data Coding Scheme
3GPP TS 23.038 [38] SMS Data Coding Scheme, or Cell Broadcast Data Coding Scheme in integer format.
0(&F)...247 Compressed SMS are network dependent and may not be supported properly.

Note
• When storing a SMS DELIVER from the TE to the preferred memory storage in text mode (using the AT+CMGW
write command), <vp> field can be used for <scts>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 253 of 564
10.18 AT+CSMS

10.18 AT+CSMS Select Message Service

Syntax
Test Command

AT+CSMS=?
Response(s)
+CSMS: (list of supported<service>s)
OK
Read Command

AT+CSMS?
Response(s)
+CSMS: <service>, <mt>, <mo>, <bm>
OK
Write Command

AT+CSMS=<service>
Response(s)
+CSMS: <mt>, <mo>, <bm>
OK
ERROR
+CMS ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.005 [50]

Parameter Description

<service>(num)(&V)(&W)
0(&F) 3GPP TS 23.040 [39] and 3GPP TS 23.041 [40] (the syntax of SMS AT com-
mands is compatible with 3GPP TS 27.005 [50] Phase 2 version 4.7.0; Phase
2+ features which do not require new command syntax may be supported, e.g.
correct routing of messages with new Phase 2+ data coding schemes)
1 3GPP TS 23.040 [39] and 3GPP TS 23.041 [40] (the syntax of SMS AT com-
mands is compatible with 3GPP TS 27.005 [50] Phase 2+ version; the require-
ment of <service> setting 1 is mentioned under corresponding command
descriptions).

<mt>(num)(&V)
Mobile Terminated Messages:
0 Type not supported
1 Type supported

<mo>(num)(&V)
Mobile Originated Messages:
0 Type not supported
1 Type supported

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 254 of 564
10.18 AT+CSMS

<bm>(num)(&V)
Broadcast Type Messages:
0 Type not supported
1 Type supported

Note
• Phase 2+ (<service>=1) must be set before acknowledging incoming short messages with AT+CNMA is
possible. Acknowledgements are required for directly routed messages delivered using "+CMT" and "+CDS"
URCs. Direct routing is used for certain message classes when <mt>=2, <mt>=3 or <ds>=1.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 255 of 564
10.19 AT^SMGL

10.19 AT^SMGL List Short Messages from preferred store without set-
ting status to REC READ

The write command allows to select a status type and lists, from the message storage <mem1>, all messages
that currently have the specified <stat>. The major difference over the standard command AT+CMGL is that the
status of the listed messages remains u n c h a n g e d (unread remains unread).
The execute command is the same as the write command, but uses the given default of <stat>.

Syntax
Test Command
AT^SMGL=?
Response(s)
same as AT+CMGL
Exec Command
AT^SMGL
Response(s)
^SMGL: (For default values of <stat>, see "Section 10.1, SMS parameters.)
OK
Write Command
AT^SMGL=<stat>
Response(s)
same as AT+CMGL
PIN  Last
+ + -

Notes
• The selected <mem1> can contain different types of SMs (e.g. SMS-DELIVERs, SMS-SUBMITs and SMS-
COMMANDs), the response may be a mix of the responses of different SM types. TE application can recog-
nize the response format by examining the third response parameter.
• Users should be aware that when using this AT command quickly after SIM PIN authentication the SIM data
may not yet be accessible, resulting in an error or a short delay before the requested AT command response
is returned.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 256 of 564
10.20 AT^SMGR

10.20 AT^SMGR Read short message without setting status to REC

READ

The AT^SMGR command is a proprietary command which has the same syntax as AT+CMGR. The only functional
difference is that the status "REC UNREAD" of a short message is not overwritten to "REC READ".

Syntax
Test Command

AT^SMGR=?
Response(s)
OK
Write Command

AT^SMGR=<index>
Response(s)
see AT+CMGR
PIN  Last
+ + -

Note
• Users should be aware that when using this AT command quickly after SIM PIN authentication the SIM data
may not yet be accessible, resulting in a short delay before the requested AT command response is returned.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 257 of 564
10.21 AT^SSDA

10.21 AT^SSDA Set SMS Display Availability

AT^SSDA determines whether to display an incoming Class 0 short message directly to the user or to store it
automatically in the SMS memory. This means, for Class 0 short messages, AT^SSDA overrides the AT+CNMI
<mt> settings.
For all other short message classes AT^SSDA is not effective, i.e. they will be indicated as specified with
AT+CNMI.

In case of Class 0 SMS, the <da> setting modifies the AT+CNMI functionality for <mt> as follows:
• If AT^SSDA=0:
The UE handles Class 0 short messages as though there was no message class: SMS-DELIVER is stored
in the UE and indication of the memory location is routed to the TE via URC. This approach is compliant with
3GPP TS 23.038 [38].
• If AT^SSDA=1:
Class 0 SMS-DELIVERs are routed directly to the TE via URC.

Syntax
Test Command

AT^SSDA=?
Response(s)
^SSDA:(list of supported <da>s)
OK
Read Command
AT^SSDA?
Response(s)
^SSDA:<da>
OK
Write Command
AT^SSDA=<da>
Response(s)
OK
PIN  Last
- + -

Parameter Description

<da>(num)(NV)
Display Availability
0 Application is not able to display incoming short message
(&F)(D)
1 Application is able to display incoming short message

Note
• If the ME operates on different instances () avoid different settings for routing and indicating short messages.
For example, if messages shall be routed directly to one instance of the TE (set with AT+CNMI, AT^SSDA), it
is not possible to activate the presentation of URCs with AT+CNMI on another instance. Any attempt to acti-
vate settings that conflict with existing settings on another interface, will result in "+CME ERROR", or accord-
ingly "+CMS ERROR".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 258 of 564
10.22 AT^SCMR

10.22 AT^SCMR Read Concatenated Short Messages

The write command returns the message with location value <index> from message storage <mem1> to the TE.
If the status of the message is 'received unread', the status in the storage changes to 'received read'. See notes
of AT+CMGR.

Syntax
Test Command

AT^SCMR=?
Response(s)
OK
Write Command

AT^SCMR=<index>
Response(s)
Output if text mode (AT+CMGF=1) and command successful:
For SMS-DELIVER
^SCMR: <stat>, <oa>, , <scts>[, <tooa>, <fo>, <pid>, <dcs>, <sca>, <tosca>, <length>][, <seq>,
<max>, <ieia>, <ref>]
<data>
[... ]
OK

For SMS-SUBMIT
^SCMR: <stat>, <da>, [, <toda>, <fo>, <pid>, <dcs>, [<vp>], <sca>, <tosca>, <length>][, <seq>,
<max>, <ieia>, <ref>]
<data>
[... ]
OK

For SMS-STATUS-REPORT
^SCMR: <stat>, <fo>, <mr>, [<ra>], [<tora>], <scts>, <dt>, <st>
<data>
[... ]
OK

For SMS-Commands
^SCMR: <stat>, <fo>, <ct>[, <pid>, [<mn>], [<da>], [<toda>], <length>]
<data>
[... ]
OK

Output if PDU mode (AT+CMGF=0) and command successful:

For SMS-SUBMITs and/or SMS-DELIVERs
^SCMR: <stat>, , <length>
<pdu>
[... ]
OK

ERROR
+CMS ERROR: <err>
PIN  Last
+ + -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 259 of 564
10.23 AT^SCMS

10.23 AT^SCMS Send Concatenated Short Messages

Sending a concatenated message is similar to sending a "normal" message, except that each segment of the
concatenated message must be identified by the additional parameters <seq>, <ieia> and <ref>. To send all
segments of the message one by one, the AT^SCMS write command must be executed for each segment.
The write command transmits one segment of a concatenated short message from TE to network (SMS-SUB-
MIT).
After invoking the write command wait for the prompt ">" and then start to write the message. To send the mes-
sage simply enter <CTRL-Z>. After the prompt a timer will be started to observe the input.
To abort sending use <ESC>. Abortion is acknowledged with "OK", though the message will not be sent.
The message reference <mr> is returned to the TE on successful message delivery. The value can be used to
identify the message in a delivery status report provided as an unsolicited result code.

Syntax
Test Command

AT^SCMS=?
Response(s)
OK
Write Command

Command syntax for text mode (see AT+CMGF=1):

AT^SCMS=<da>, [<toda>], <seq>, <max>, <ieia>, <ref><CR> Text can be entered <CTRL-Z>/<ESC>
Response(s)
^SCMS: <mr>[, <scts>]
OK
If sending fails
ERROR
+CMS ERROR: <err>
PIN  Last
+ - -

Notes
• See notes provided for AT+CMGS.
• Command is only available if AT+CMGF=1.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 260 of 564
10.24 AT^SCMW

10.24 AT^SCMW Write Concatenated Short Messages to Memory

Writing a concatenated message to the memory is similar to writing a "normal" message, except that each seg-
ment of the concatenated message must be identified by the additional parameters <seq>, <ieia> and <ref>.
To store all segments of the message one by one, the AT^SCMW write command must be executed for each seg-
ment.
The write commands transmits one segment of a concatenated SMS (either SMS-DELIVER or SMS-SUBMIT)
from TE to memory storage <mem2>. Memory location <index> of the stored message is returned. Message
status will be set to 'stored unsent' unless otherwise given in parameter <stat>.

Syntax
Test Command

AT^SCMW=?
Response(s)
OK
Write Command

If text mode (see AT+CMGF=1)

AT^SCMW=<oa>/<da>, [<tooa>/<toda>][, <stat>], <seq>, <max>, <ieia>, <ref><CR> Text can be
entered. <CTRL-Z>/<ESC>
Response(s)
^SCMW: <index>
OK
If writing fails
ERROR
+CMS ERROR: <err>
PIN  Last
+ + -

Notes
• Command is only available if AT+CMGF=1.
• To send or delete a concatenated short message please use the known SMS commands, see AT+CMSS for
sending and AT+CMGD for deleting.
• See notes provided for AT+CMGW.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 261 of 564
10.25 AT^SCML

10.25 AT^SCML List Concatenated Short Messages from preferred

store

The write command returns messages with status value <stat> from message storage <mem1> to the TE. If the
status of the message is 'received unread', the status in the storage changes to 'received read'. The execute
command is the same as the write command with the given default for <stat>. See notes of AT+CMGL.

Syntax
Test Command

AT^SCML=?
Response(s)
^SCML: (list of supported <stat>s)
OK
Exec Command

AT^SCML
Response(s)
^SCML: (see write command for default of <stat>)
OK
Write Command

AT^SCML=<stat>
Response(s)
Output if text mode (AT+CMGF=1) and command successful:
For SMS-SUBMITs and/or SMS-DELIVERs
^SCML: <index>, <stat>, <oa>/<da>, , [<scts>][, <tooa>/<toda>, <length>][, <seq>, <max>,
<ieia>, <ref>]
<data>
[... ]
OK

For SMS-STATUS-REPORTs
^SCML: <index>, <stat>, <fo>, <mr>, [<ra>], [<tora>], <scts>, <dt>, <st>
[... ]
OK

For SMS-Commands
^SCML: <index>, <stat>, <fo>, <ct>
[... ]
OK

Output if PDU mode (AT+CMGF=0) and command successful:

For SMS- SUBMITs and/or SMS-DELIVERs
^SCML: <index>, <stat>, , <length>
<pdu>
[... ]
OK

If error is related to ME functionality

ERROR
+CMS ERROR: <err>
PIN  Last
+ + -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 262 of 564
11. Internet Service Commands

11. Internet Service Commands

PLS63-W has an embedded TCP/IP stack that is driven by AT commands and enables the host application to
easily access the Internet. The advantage of this solution is that it eliminates the need for the application manu-
facturer to implement own TCP/IP and PPP stacks, thus minimizing cost and time to integrate Internet connec-
tivity into a new or existing host application. This chapter is a reference guide to all the AT commands and
responses defined for use with the TCP/IP stack.

The embedded TCP/IP stack provides the following services:

1. Socket Services:
- TCP Client in Non-Transparent or Transparent Mode
- UDP Client in Non-Transparent or Transparent Mode
- Transparent TCP Listener
- Standard TCP Listener in Non-Transparent or Transparent Mode
- Non-Transparent UDP Endpoint
2. FTP Client
3. HTTP Client
4. MQTT Client
5. CoAP (Constrained Application Protocol) Client

Step-by-step overview of how to configure and use TCP/IP communications with PLS63-W:
• Use AT+CGDCONT to create an Internet connection profile (= bearer). The PDP context IDs set with <cid>
will later be used as "conId" parameter when creating a service profile with AT^SISS. Optionally, you can
specify DNS preferences using AT^SICS. To activate or deactivate the bearer use the AT^SICA command.
• Use AT^SISS to create service profile(s), each identified by the <srvProfileId>. The service profile spec-
ifies the type of Internet service to use, e.g., Socket, FTP, HTTP.
• Once the bearer has been established with AT^SICA, and the service profile is created with AT^SISS, an
Internet session can be opened by entering the AT^SISO write command and the desired <srvProfileId>.
A URC indicates how to proceed. The "^SIS" URC with <urcCause> "5" shows that an opened listener or
endpoint is ready. The "^SISW" URC means that data can be sent. The "^SISR" URC means that received
data are available for reading. Error or event information is reported by the "^SIS" URC with <urcCause>
"0".
• The next steps differ depending on the service type and the transfer mode (Non-Transparent or Transparent).
• Once a service is opened, the AT^SISI command shall be used to monitor the progress of the session. The
command reports the service state of the used service profile and indicates the number of bytes sent and
received, and, in the case of sending, the number of bytes acknowledged or unacknowledged at TCP layer.
• If an error occurs during a session you can enter the AT^SISE command and the <srvProfileId> to iden-
tify the reason. This is especially important in polling mode.
• Finally, to close an opened service, enter the AT^SISC write command and the <srvProfileId>. Then you
can deactivate the bearer using AT^SICA.
AT^SISH disconnects a remote client from a Transparent TCP Listener without closing the listener (see also
below).

Transparent Mode or Non-Transparent Mode:

• Transparent Mode is stream-oriented, i.e. a single data stream can be sent, and another single data stream
can be received. Packetizing of data is done automatically by the embedded TCP/IP stack.
Transparent Mode is activated with AT^SIST and then indicated by the "CONNECT" result code. The mode
eliminates the need for AT^SISW and AT^SISR read and write sequences.
Keep in mind that the used AT command port will be blocked for any other AT commands as long as Trans-
parent Mode is active.
• Non-Transparent Mode is packet oriented, i.e. data is transferred in separate packets. Maximum packet size
is 1500 bytes for TCP, 1460 bytes for UDP. To read and write data AT^SISW and AT^SISR sequences shall
be used. FTP, HTTP employ Non-Transparent Mode, for Socket services it is optional.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 263 of 564

To send or receive more than 1500 bytes, the read or write action shall be repeated until the data transfer has
completed. Each read or write action requires that the command response (of AT^SISR or AT^SISW) con-
firms that the service is ready to send or receive data. The read/write cycles can be controlled by URCs or
polling. For details see below, section "URC mode and polling mode".
To end an upload data stream set the <eodFlag> in the last AT^SISW command.
• FTP, HTTP, and UDP Endpoint employ Non-Transparent Mode.
TCP Client, UDP client and Standard TCP Listener can employ both modes, and may even mix both modes
in the same connection.

Listener services:
A listener is waiting for incoming remote client requests. PLS63-W supports two listener types: Transparent TCP
Listener and Standard TCP Listener.
After opening a listener with AT^SISO no "^SISW" URC appears. Instead, the "^SIS" URC with <urcCause>
"5" shows that the opened listener is ready and starts listening. Additionally, the states can be verified with
AT^SISI which shows state "4" (Up - listening).
An incoming remote client request is indicated by the "^SIS" URC. For details please refer to Section 11.16,
Internet Service URC, escpecially parameters <urcCause> and <urcInfoId>.
• Transparent TCP Listener:
- The Transparent TCP Listener can accept 1 remote client. The connection to the remote client does not
need an additional service profile, as it uses the Transparent TCP Listener instance.
- To define a listener service profile as Transparent TCP Listener the "etx" parameter is mandatory in the
address. See AT^SISS.
- AT^SISS allows some specific options for the Transparent TCP Listener service, such as "autoconnect",
"connecttimeout", "addrfilter";
- If autoconnect is enabled an incoming remote client is indicated by the "^SIS" URC with <urcCause> "3"
(Transparent) and <urcInfoId> "1" (= autoconnect enabled). The request is automatically accepted.
The Listener profile instantly changes to Server mode (AT^SISO <socketState> to 4 = SERVER) and
opens transparent data mode (indicated by "CONNECT" result code).
- If autoconnect is disabled, the remote client connection request is indicated by the "^SIS" URC with
<urcCause> "3" (Transparent) and <urcInfoId> "0" (= autoconnect disabled). The request can be
accepted with AT^SISO or rejected with AT^SISH. In all cases the same <srvProfileId> shall be
used. After accepting the client the Listener profile instantly changes to Server mode (AT^SISO <sock-
etState> to 4 = SERVER).
If a remote client connection request is not accepted within the configured 'connecttimeout', it will be
rejected automatically, and the URC "^SIS" is sent with <urcCause> set to '4'.
- As long as one remote client is connected all other remote client requests are rejected automatically with-
out displaying the "^SIS" URC. The <rejCounter> in the response of the AT^SISO read command indi-
cates such hidden rejects.
- AT^SISH disconnects a remote client, without closing the service, allowing the Transparent TCP Listener
to wait for the next remote client.
AT^SISC both disconnects the remote client and shuts down the Transparent TCP Listener.
- An example can be found in Section 11.16, Internet Service URC and Section 11.17.5, Transparent
TCP Listener: Accepting / Rejecting Incoming Remote Client
• Standard TCP Listener:
- The Standard Listener can accept several remote clients. Each incoming remote client connection request
is dynamically assigned to the next free service profile indicated as <srvProfileId> within the "^SIS"
URC. <urcCause> in the "^SIS" URC equals "1" (Non-Transparent). The dynamically assigned profile
acts as Server (AT^SISO <socketState> equals 4 = SERVER). Its <srvProfileId> shall be used to
accept the remote client with AT^SISO, or to reject it with AT^SISC. The number of acceptable remote
clients depends on the number of free service profiles.
- To transfer data it is possible to proceed with Transparent Mode using AT^SIST, or Non-Transparent
Mode using AT^SISR and AT^SISW read / write sequences.
- An example can be found in Section 11.16, Internet Service URC and Section 11.17.3, Configuring
Non-Transparent Listener

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 264 of 564

Socket service used with UDP protocol

The significant differences between the TCP and UDP protocols imply that UDP sometimes requires particular
procedures or even specific parameters. Details on how to handle UDP services can be found in extra notes or
are included in the general parameter descriptions.
The PLS63-W offers two kinds of Socket service with UDP protocol.
• UDP Client: Intended for connections to a given remote host. In this case the IP address and the UDP port of
the remote host are set as a fixed parameter in the service profile. The UDP Client can use Transparent Mode
and Non-Transparent Mode.
• Non-Transparent UDP Endpoint: IP address and UDP port of the remote hosts are handled in each read
(AT^SISR) and write (AT^SISW) request. This enables the host application to communicate with different
remote hosts.
See example in Section 11.17.9, UDP Scenario.

MQTT client service

The MQTT client provides basic MQTT functionality according to specification OASIS MQTT Version 3.1.1.
Supported transport protocols are:
• TCP/IP - defined in URI as "mqtt://"
• TLS - defined in URI as "mqtts://"
The MQTT client support sending MQTT control packets CONNECT, DISCONNECT, PUBLISH, SUBSCRIBE
and UNSUBSCRIBE.
The MQTT client handle automatically MQTT control packets CONNACK, PUBACK, PUBREC, PUBCOMP,
SUBACK, UNSUBACK, PINGREQ and PINGRESP.

MQTT client Control

Setup: there are 3 types how to setup and handle MQTT connection by AT commands interface from host device:
• Static parameters request - parameters are setup together with connection parameters by command
AT^SISS before opening a connection with AT^SISO and <optParam>=0 or omitted. Only one request is
possible to be sent during active connection which is triggered by AT^SISO.
• Dynamic parameters - request parameters are setup by AT^SISD only after opening connection by AT^SISO
and <optParam>=2. Multiple request are allowed to be send during active connection. Trigger for sending
request is done by AT^SISU.
• Dynamic request - request parameters are setup and request itself is triggered by one AT^SISU only after
opening connection by AT^SISO and <optParam>=2. Multiple requests are allowed to send during active
connection.

Triggers: the host can trigger sending request to server by:

• AT^SISO command - request will be send automatically after successful connection. Request parameters
needs to be defined statically by AT^SISS. Payload could be defined by hcContent parameter or by
AT^SISW.
• AT^SISU command - request will be send during already active connection. Request parameters need to be
defined dynamically by AT^SISD or AT^SISU. Payload could be defined by hcContent parameter or by
AT^SISW.
• AT^SISC command - used for sending DISCONNECT control packet for correct end of connection with
server.
Return of OK response from module signal accepting data for sending by MQTT client but not acknowledgement
from MQTT server.
Getting information about the current status of the MQTT client is possible by URCs OR by polling from the host
device.

Secure connection (TLS)

All services except Listener services support server and client authentication for Transport Layer Security (TLS).
• To set TLS add "s" to the address type, such as socktcps, sockudps, ftps, https. For details see AT^SISS
<srvParmTag> parameter "address".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 265 of 564

• To create, load, delete and read customized TLS certificates use the commands AT^SBNW and AT^SBNR.
• The AT^SISS session profile parameter "secopt" specifies whether or not to check certificates received from
the server against the local certificate store (if at least one local certificate is set).
• The AT^SCFG subcommand "Tcp/TLS/Version" specifies the security level.
• The used certificates can be shown in text format (issuer, serial, subject, signatureAlg, thumbprint). For this
purpose it is recommended to enable the "+CIEV: "is_cert" URC, see AT^SIND.

URC mode or polling mode (for non-Transparent Mode only)

The PLS63-W offers two modes of controlling a Non-Transparent Mode session opened with AT^SISO. To select
the mode use the AT^SCFG command, parameter "Tcp/WithURCs" (refer to <tcpWithUrc>).
• URC mode (delivery default):
The progress of a Non-Transparent Mode session is URC driven. The URCs notify the host whether data can
be sent or received, whether data transfer has completed, whether the service can be closed or whether an
error has occurred. This mechanism eliminates the need to poll the service until the necessary progress infor-
mation is received.
To enable the URC mode select: AT^SCFG="Tcp/WithURCs",on.
• Polling mode:
In polling mode, the presentation of URCs related to the Internet Services is disabled. The host is responsible
to retrieve all the status information needed for controlling the Internet session. This is done by polling, where
the host application keeps sending the commands AT^SISR, AT^SISW, AT^SISI.
To enable the polling mode select: AT^SCFG="Tcp/WithURCs",off.
The disabled URCs are the following: "^SISR" URC, "^SISW" URC and "^SIS" URC for parameter <urc-
Cause>=0 (Internet service events), but not for all other <urcCause>s (needed for listener or endpoint and
therefore always enabled).

Address notation
Server addresses shall be provided as IPv4 addresses in standard dot format, e.g. "192.168.1.2", or as IPv6
addresses in standard colon format enclosed in square brackets, e.g. "[FE80::2]", or as server address names
resolvable by a DNS server.

Timeouts
Timeouts are not part of the Internet AT command functionality implemented in PLS63-W and, if desired, are the
responsibility of the host application. It is recommended that the host application validates URCs and AT com-
mand responses and reacts adequately, for example by sending a close message or starting a timer.

Using the DCD line to detect the connection status of Internet services
With AT&C you can configure the DCD line of the used serial interface to indicate whether an Internet service is
active. For Socket, HTTP the states "Up" or "Connecting" are indicated, for FTP and transparent TCP only the
state "Up", for the Transparent TCP Listener service the states "Up", "Alerting", "Connected" and "Released".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 266 of 564
11.1 AT^SICA

11.1 AT^SICA Internet Connection Activate or Deactivate

The AT^SICA write command can be used to activate or deactivate an Internet service connection using a PDP
context defined with AT+CGDCONT. To track activation errors the AT^SIND indicator "ceer" should be used.

The AT^SICA read command shows whether a connection for Internet services is active and which PDP context
is used for it. If no connection is active, then the read command just returns OK.

Syntax
Test Command
AT^SICA=?
Response(s)
^SICA: (list of supported <state>s), (list of supported <cid>s)
OK
ERROR
+CME ERROR: <err>
Read Command
AT^SICA?
Response(s)
[^SICA: <cid>, <state>]
[^SICA: ...]
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SICA=<state>, <cid>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
+ - -

Parameter Description

<state>(num)
0 Deactivate(d)
1 Activate(d)

<cid>(num)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 267 of 564
11.2 AT^SICS

11.2 AT^SICS Internet Connection Settings

AT^SICS serves to specify additional settings for Internet connection specified with the AT+CGDCONT command.
Currently only setup and query of DNS server addresses is supported.
Keep in mind changes will be used upon next restart of the module and PDP context activation.

Table 11.1: Applicability of AT^SICS <conParmTag> values

<conParmTag> Mandatory or optional

"dns1" optional
"dns2" optional
"ipv6dns1" optional
"ipv6dns2" optional

Syntax
Test Command

AT^SICS=?
Response(s)
OK
Read Command

AT^SICS?
Response(s)
[^SICS: <conProfileId>, <conParmTag>, <conParmValue>]
[^SICS: ...]
OK
Write Command
AT^SICS=<conProfileId>[, <conParmTag>, <conParmValue>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<conProfileId>(num)(NV)
Internet connection profile as specified with AT+CGDCONT parameter <cid>. Invoking command only with this
parameter will delete related DNS server address.

<conParmTag>(str)(NV)
Internet connection parameter.
“dns1“ Primary DNS server address (IP address in dotted-four-byte format).
This value determines whether to use the DNS server addresses dynamically
assigned by the network or a specific DNS server address given by the user.
"dns1" = "0.0.0.0" (default) means that the connection profile uses dynamic
DNS assignment. Any other address means that the Primary DNS is manually
set.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 268 of 564
11.2 AT^SICS

The default value applies automatically if no other address is set. Note that the
AT^SICS read command only returns a manually configured IP address, while
the value "0.0.0.0" is not indicated at all, no matter whether assumed by default
or explicitly specified.
See also note below.
“dns2“ Secondary DNS server address (IP address in dotted-four-byte format).
If "dns1" = "0.0.0.0" this setting will be ignored. Otherwise this value can be
used to manually configure an alternate server for the DNS1.
If "dns1" is not equal "0.0.0.0" and no "dns2" address is given, then
"dns2"="0.0.0.0" will be assumed automatically. The AT^SICS read command
only returns a manually configured IP address, while the value "0.0.0.0" is not
indicated at all, no matter whether assumed by default or explicitly specified.
“ipv6dns1“ Primary IPv6 DNS server address (IP address Each group is written as 4 hexa-
decimal digits and the groups are separated by colons (:). The whole address
is encapsulated by square brackets [].
This value determines whether to use the DNS server addresses dynamically
assigned by the network or a specific DNS server address given by the user.
"ipv6dns1" = "" (default) means that the connection profile uses dynamic DNS
assignment. Any other address means that the Primary DNS is manually set.
The default value applies automatically if no other address is set. Note that the
AT^SICS read command only returns a manually configured IPv6 address,
while the value "" is not indicated at all, no matter whether assumed by default
or explicitly specified.
See also note below.
“ipv6dns2“ Secondary IPv6 DNS server address (IP address Each group is written as 4
hexadecimal digits and the groups are separated by colons (:). The whole
address is encapsulated by square brackets [].
"ipv6dns2" = "" (default) means that the connection profile uses dynamic DNS
assignment. Any other address means that the secondary DNS is manually
set.
The default value applies automatically if no other address is set. Note that the
AT^SICS read command only returns a manually configured IPv6 address,
while the value "" is not indicated at all, no matter whether assumed by default
or explicitly specified.

<conParmValue>(str)(NV)
Parameter value; type and supported content depend on related <conParmTag>.

Note
• If a network does not support or is not correctly configured for automatic DNS address assignment the TCP/
IP stack cannot resolve fully qualified domain names. In this case, a warning message will be returned when
trying to open an Internet service configured for automatic DNS address assignment.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 269 of 564
11.3 AT^SIPS

11.3 AT^SIPS Internet Profile Storage

AT^SIPS saves and loads the settings of the Internet service profiles in the non-volatile memory. AT^SIPS can
also be used to reset the settings to their default values without saving.

Syntax
Test Command
AT^SIPS=?
Response(s)
^SIPS:(list of supported <type>s), (list of supported <action>s), (list of supported <ProfileId>s)
OK
Write Command
AT^SIPS=<type>, <action>[, <ProfileId>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<type>(str)
Internet profile storage type parameter.
“service“ Handle AT^SISS parameter set.
“all“ Implemented for compatibility with other products. For PLS63-W, same effect
as value "service".
“tls-session“ Reset stored TLS session data. This parameter can be used only with
<action>="reset".

<action>(str)
Internet profile storage action parameter
“reset“ Reset current profile(s) for given <type> to default settings without saving.
If <ProfileId> is given only specific profile will be reset.
Only the connections which are in "Down" status and the services which are in
"Allocated" status could be affected.
“save“ Stores current profile(s) for given <type>.
If <ProfileId> is given only specific profile will be stored.
“load“ Loads stored profile(s) for given <type>.
If <ProfileId> is given only specific profile will be loaded.

<ProfileId>(num)
Internet service profile storage identifier
0...9 Possible profile identifiers of used <type>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 270 of 564
11.4 AT^SISS

11.4 AT^SISS Internet Service Setup Profile

AT^SISS specifies the Internet service profiles needed to control data connections by using AT^SICA,
AT^SISO, AT^SISC, AT^SISR, AT^SISW, AT^SIST, AT^SISH, AT^SISD, AT^SISU and AT^SISE.

The AT^SISS read command requests the current settings of all Internet service profiles. One line is issued for
every possible parameter of a given <srvParmTag> "srvType" value.

The AT^SISS write command specifies the parameters for a service profile identified by <srvProfileId>. At
first the type of Internet service needs to be selected via <srvParmTag> value "srvType". This determines the
applicability of all other <srvParmTag> values related to this "srvType" and, partially, sets their defaults. Chang-
ing the <srvParmTag> "srvType" of an existing service profile will reset all <srvParmTag> values.

To change the settings the write command needs to be executed for each single <srvParmTag>. All profile
parameters set with AT^SISS are volatile. mandatory (= m) or optional (= o).

Table 11.2: Applicability of AT^SISS <srvParmTag> values

<srvParmTag> Socket FTP HTTP MQTT

SrvType m m m m
conId m m m m
address m m m m
tcpMR o o o o
tcpOT o o o o
cmd m m o
path o
files o o
ftpath o
ftMode o
hcContent o Publish: o
hcContLen m Publish: o
hcUserAgent o
hcProp o
user (as separate m o o
parameter
or in address field)
passwd (as sepa- m o o
rate parameter
or in address field
alphabet o o o o
ipVer o o o o
secopt o o o o
secsni o o o o
sniname o o o o
TlsSesTypeInit o o o o
TlsSesExpInit o o o o
TlsSesPers o o o o
clientId m
keepAlive o

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 271 of 564
11.4 AT^SISS

<srvParmTag> Socket FTP HTTP MQTT

willFlag o
lastWillTopic o
lastWillMessage o
lastWillQos o
lastWillRetain o
cleanSession o
Topic Publish: m
Qos Publish: o
Retain Publish: o
TopicFilter Subscribe: m
Unsubscribe: m
TopicQos Subscribe: o

Syntax
Test Command

AT^SISS=?
Response(s)
OK
Read Command

AT^SISS?
Response(s)
^SISS: <srvProfileId>, <srvParmTag>, <srvParmValue>
[^SISS: ...]
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SISS=<srvProfileId>, <srvParmTag>, <srvParmValue>

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<srvProfileId>(num)
Internet service profile identifier.
The <srvProfileId> is used to reference all parameters related to the same service profile. Furthermore,
when using the AT commands AT^SISO, AT^SISR, AT^SISW, AT^SIST, AT^SISH, AT^SISD, AT^SISU,
AT^SISE and AT^SISC the <srvProfileId> is needed to select a specific service profile.
0...9

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 272 of 564
11.4 AT^SISS

<srvParmTag>(u)
Internet service profile parameter.
srvType Type of Internet service to be configured with consecutive usage of AT^SISS.
For supported values of <srvParmValue> refer to <srvParmValue-srv-
Type>.
alphabet Selects the character set for input and output of string parameters within a pro-
file.
The selected value is bound to the specific profile. This means that different
profiles may use different alphabets. Unlike other parameters the alphabet can
be changed no matter whether the <srvParmTag> value "srvType" has been
set.
For supported values of <srvParmValue> refer to <srvParmValue-
alphabet>.
user User name string for FTP, HTTP, MQTT authentication.
The user name can be set by <srvParmTag> parameter "user" or as part of
"address" parameter.
For HTTP only simple authentication is supported.
Length: 64 octets
passwd Password string for FTP, HTTP, MQTT authentication.
The password can be set by <srvParmTag> parameter "password" or as part
of "address" parameter.
Length: 64 octets
conId Internet connection profile as defined with AT+CGDCONT. The value is one of
the PDP context IDs set with parameter <cid>.
address String value containing the URL for the specific service:
1. Socket Service URLs:
- TCP Client URL:
"socktcp[s]://<host>:<remotePort>[;etx[=<etxChar>]
[;timer=<value>][;bufsize=<value>]][;keepidle=<value>]
[;keepcnt=<value>][;keepintvl=<value>]"
- UDP Client URL:
"sockudp[s]://<host>:<remotePort>[;etx[=<etxChar>]
[;timer=<value>][;bufsize=<value>]][;port=<localPort>]"
- UDP Endpoint URL:
"sockudp://:<localPort>"
- Standard TCP Listener URL:
"socktcp://listener:<localPort>[;keepidle=<value>]
[;keepcnt=<value>][;keepintvl=<value>]"
- Transparent TCP Listener URL:
"socktcp://listener:<localPort>;etx[=<etxChar>][;timer=<value>]
[;bufsize=<value>][;autoconnect='0|1'][;connecttimeout=<value>]
[;keepidle=<value>][;keepcnt=<value>][;keepintvl=<value>]
[;addrfilter=<filter>]"
Socket service URL parameters:
- <host>: IPv4 address in standard dot format, e.g. "192.168.1.2", or IPv6
address in standard colon format enclosed in square brackets, e.g.
"[FE80::2]", or as FQDN.
- <remotePort>: 1 ... 216-1 for the remote port number.
- <localPort>: 1 ... 216-1 for the local port number.
- "etx": This parameter allows a socket service to use Transparent Mode.
For the Transparent Listener "etx" is mandatory.
For the Client services "etx" is optional, but required for using the Trans-
parent Mode parameters "etxChar" and "timer".
Please note that even though "etx" is set in a service profile, data trans-

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 273 of 564
11.4 AT^SISS

fer can be performed by a mixing Transparent Mode (AT^SIST) and

Non-Transparent Mode (AT^SISW / AT^SISR cycles) in the same con-
nection. This applies both to the Transparent Listener and to Client ser-
vices.
- "<etxChar>": Specifies the character used to change from Transparent
Mode to AT Command Mode.
range: 1...15,17...255 (16 is not allowed because it is used as DLE
(0x10))
If parameter is not set no escaping is configured, thus requiring either
+++ or DTR ON-OFF transition for changing to AT command mode. If
value is set, the transmitted bytes are parsed for the DLE (0x10) char-
acter followed by the specified <etxChar> value. If both characters are
found the service returns to AT command mode without transmitting
these two bytes.
If you wish to send DLE characters as normal text string within your pay-
load data the characters shall be doubled (DLE DLE).
- "bufsize": For Transparent Mode only: Specifies maximum payload size
for sending data from the IP service to the underlying IP stack with
AT^SIST, i.e. for limiting the length of UDP packets.
range: 1..[1460]
- "timer": The parameter configures the Nagle algorithm, which is used in
Transparent Mode.
range: 0, 20...[100]...500 milliseconds in steps of 20
Value 0 disables the Nagle algorithm.
- "keepidle": specifies the TCP parameter TCP_KEEPIDLE (see
RFC1122, Section 4.2.3.6; not for Transparent UDP client)
range: 1...65535 seconds; disabled if no value set (default).
- "keepcnt": specifies the TCP parameter TCP_KEEPCNT (see
RFC1122, Section 4.2.3.6; not for Transparent UDP client); ignored if
option "keepidle" is not set
range: 1...[9]...127
- "keepintvl": specifies the TCP parameter TCP_KEEPINTVL (see
RFC1122, Section 4.2.3.6; not for Transparent UDP client); ignored if
option "keepidle" is not set
range: 1...[75]...255 seconds
- "autoconnect" (for Transparent TCP Listener service only):
0 ... disabled (default)
1 ... automatically accept incoming client connects
- "connecttimeout": specifies the time after which incoming client con-
nects are rejected automatically (for Transparent TCP Listener service
only)
range: 1...[30]...180 seconds
- "addrfilter": This option allows to filter incoming client connects based on
the IP address of the client (for Transparent TCP Listener service only).
It is possible to specify a maximum of 3 filters separated by commas.
If the IP address of any incoming client connect does not match any of
the specified filters, then the connect is rejected automatically. If the
option is not specified, then all client connects are allowed.
In IPv4: Each filter is specified as 4 numbers separated by dots
("<n>.<n>.<n>.<n>"). Each number n can be in the range between 0 and
254. It is allowed to use the wildcard "*" instead of n which matches all.
Example: "addrfilter=10.10.0.*,80.190.158.9" - allows connects from
10.10.0.81 and 80.190.158.9 but not from 10.10.17.81 and
80.190.158.10.
In IPv6: Each filter is specified by up to 8 bytes separated by colons
("<x7>:<x6>:...:<x0>"). Each byte can be in the range between 0 and
[f,F]. It is allowed to use the wildcard "*" which matches all.
Examples: *:5678:9abc:def0:1234:5678:9ABC:D*F0
1234::

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 274 of 564
11.4 AT^SISS

::1**4
1*34:*::3456
2. FTP Client URL
"ftp[s][es]://[<user>:<passwd>@]<host>[:<port>][/<path>]"
"ftp://": The default TCP port 21 for ftp server is used.
"ftps://": The default SSL port 990 for secure ftp server is used.
"ftpes://": The default SSL port 21 for explicit secure ftp server is used.
<host>: element can be an IPv4 address, or an IPv6 address enclosed in
square brackets, or a DNS FQDN string.
<port>: element can be set optionally to replace the default port.
<user>: username for authentication, 64 octets. Can be set as part of
"address" or separately by <srvParmTag> parameter "user".
<passwd>: password for authentication, 64 octets. Can be set as part of
"address" or separately by <srvParmTag> parameter "passwd".
<path>: path of file or directory. To read a root directory or subdirectory path
shall be terminated with slash: <path>/.
3. HTTP Client URL
Length: 6...255
"http[s]://[<user>:<passwd>@]<server>[:<port>/<path>]"
<server>: element can be an FQDN, or an IPv4 address, or an IPv6 address
enclosed in square brackets.
<path>: path of file or directory.
<port>: If parameter is omitted the service connects to HTTP default port
80.
<user>: username for authentication, 64 octets.
<passwd>: password for authentication, 64 octets.
"https://": Used for SSL connection.
Refer to "IETF-RFC 2616".
4. MQTT client URL
"mqtt[s]://[<user>:<passwd>@]<host>[:<port>]
[;connackTimeout=<value>]"
<host>: element can be an FQDN, or an IPv4 address, or an IPv6 address
enclosed in square brackets.
<user>: username for authentication, 64 octets.
<passwd>: password for authentication, 64 octets.
<port>: If parameter is omitted the service connects to default port 1883 and
for TLS default port 8883.
"connackTimeout": Definition of max time in seconds waiting for CONNACK
packet from server.
range: [5]...60 seconds.
cmd 1. HTTP service
- "0" or "get": Send HTTP GET request to server
- "1" or "post": Send HTTP POST request to server
- "2" or "head": Send HTTP HEAD request to server
2. FTP service
- get [<OffsetString>]: get a single file from FTP server.
- put [<OffsetString>]: create and write a single file to FTP server using
AT^SISW.
- dir: List the directory on the FTP server and show file size.
- list: List the directory on the FTP server without showing file size.
- fget: Get multiple files listed in <srvParmTag> parameter "files".
- fput: Send one or multiple files listed in <srvParmTag> parameter
"files".
- size: Request the size of the file element on the FTP server. The size
result is output as "^SIS" URC.
- del: Delete a file specified with <srvParmTag> parameter "files" on FTP

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 275 of 564
11.4 AT^SISS

server.
- append: Append data to existing file on FTP server
- unique: Selects the FTP Store Unique command to create a file name
unique to the current directory. If the file name is assigned by the server
then the "^SIS" URC will appear, indicating <urcInfoId> 2100 and
the file name.
<OffsetString> is an optional parameter for "get" and "put". It allows resum-
ing a broken uplink or downlink transfer to resend data. The <OffsetString>
value specifies the offset in number of octets to start the transfer from. Max-
imum length is 16 digits. For "get" the <OffsetString> value must be calcu-
lated from the <urcInfoId> 2100 of the "^SIS" URC requested before by
using "size".
3. MQTT Service
Types of MQTT request:
- "publish": The MQTT client sends data by PUBLISH control packet
request to server
- "subscribe": The MQTT client that wants to receive data must subscribe
to it by SUBSCRIBE control packet
- "unsubscribe": The MQTT client that doesn't want to receive subscribed
data any more must unsubscribe specified topic by sending UNSUB-
SCRIBE control packet
The "cmd" is optional when opening MQTT Service with dynamic setup (i.e.
by AT^SISO and <optParam>=2).
path Path on the local FFS. Specifies drive prefix and pathname.
Optional for FTP.
Default: AT^SISS=<srvProfileId>,"path","file:///a:".
ftpath Specifies the path of the remote FTP server after login. If no path is set the
default path will be used.
ftMode Specifies the data transfer mode for FTP SIZE command. If not set, the default
value will be used.
• "bin" or "BIN": binary mode.
• "asci" or "ASCI": ASCII mode.
files Specifies single or multiple files:
• Name of a single file for upload from the AT command interface to a server,
or download from a server to the AT command interface if the "cmd" param-
eter is given with "get" or "post" in case of HTTP, with "get", "put" or "del" in
the case of FTP.
• Name(s) of file(s) located on the FFS when "cmd" parameter is given with
parameters "fput" or "fget" in case of FTP. Maximum 5 files can be handled,
separated by comma.
hcContent HTTP "POST": Variable mode.
Optional parameter if HTTP "post" is set with <srvParmTag> parameter
"cmd".
Length: 1...255 bytes
Can be used to transfer a small amount of data. The content of this string will
only be sent if "hcContLen" = 0.
To transmit a larger amount of data "hcContLen" must be set to a non-zero
value. In this case the "hcContent" string will be ignored, and data transmission
from the client to the server is done with AT^SISW.
Usage example:
AT^SISS=x,cmd,"POST"

AT^SISS=x,hcContent,"This text will be sent to the server now ........ response

OK"
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 276 of 564
11.4 AT^SISS

AT^SISS=x,hcContLen,0

AT^SISO=x
OK

^SIS: x,0,2200,"Http connect 10.42.228.61:80"

^SISW: x,2

Please take care not to exceed the maximum "hcContent" length 255 bytes.
Otherwise data is truncated.

MQTT Client Payload:

Definition of payload in case parameter "hcContLen" = 0.
Length: 0...5120
Can be used to transfer a small amount of data without the need for AT^SISW.
The content of the "hcContent" string will only be sent if "hcContLen" = 0.
To transmit a larger amount of data, the "hcContLen" string shall set to a non-
zero value. In this case, the "hcContent" string will be ignored, and data trans-
mission from the client to the server is done with AT^SISW.
hcContLen HTTP "POST": Fixed mode.
Mandatory parameter if HTTP "post" is set with <srvParmTag> parameter
"cmd".
Length: 0...231-1
The content length shall be set in the header of the HTTP "Post" request before
the data part is transferred.
If "hcContLen" = 0 then the data given in the "hcContent" string will be posted.
If "hcContLen" > 0 then the AT^SISW command will be used to send data from
the client to the server. In this case, "hcContLen" specifies the total amount of
data to be sent. The data can be sent in one or several parts. For each part,
the transmission is triggered by the URC "^SISW: x, 1", then the AT^SISW write
command can be executed. After the exact number of bytes are transferred,
the HTTP client will go from service state "Up" to service state "Closing" (see
AT^SISO <srvState> and AT^SISI <srvState> for detail). Finally, the
URC "^SISW: x, 2" indicates that all data have been transferred and the service
can be closed with AT^SISC.

MQTT Client Payload Length:

Definition of payload length. If this parameter is non-zero value the payload is
then defined by the AT^SISW command.
Length: 0...5120
If "hcContLen" = 0 then the data given in the "hcContent" string will be posted.
If "hcContLen" > 0 then the AT^SISW command will be used to send data from
the client to the server.
If this parameter is not set, default hcContLen 0 is used.
hcUserAgent The user agent string must be set by the application to identify the mobile. Usu-
ally operation system and software version info is set with this browser identi-
fier.
Length: 0...63
hcProp Parameter for several HTTP settings.
Length: 0...127
The general format is 'key': <space> 'value'
Multiple settings can be given separated by "\0d\0a" sequences within the
string, do not put them at the end.
Possible 'key' values are defined at HTTP/1.1 Standard RFC 2616.
tcpMR Parameter can be used to set maximum numbers of retransmission for a spe-
cific Internet Service connection profile. If the parameter is not specified the
value 10 will be used.
Supported value range <srvParmValue> for this parameter is 1 to 30 retrans-
missions.
Setting is not relevant for Internet Service "Socket" with type "UDP".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 277 of 564
11.4 AT^SISS

tcpOT Parameter can be used to set overall timeout for a specific Internet Service
connection profile. If the parameter is not specified the timeout will occur after
6000 seconds.
Supported value range <srvParmValue> for this parameter is 1 to 6000 sec-
onds.
Setting is not relevant for Internet Service "Socket" with type "UDP".
ipVer Used IP Protocol version:
This parameter limits the IP Protocol version for the Internet service when the
PDP context defined with AT+CGDCONT supports IPv4 and IPv6.
4 Values 4 (default) or 6 can be used for the following situations only:
6 An IPv4v6 PDP context is employed, and this context provides both
IPv4 and IPv6 interfaces, and
- either the service acts as a listener,
- or the client address is a hostname, and the DNS server provides
both IPV4 and IPV6 addresses.
In such case value 4 allows IPv4 addresses only, and value 6
allows IPv6 addresses only.

secopt Security Option of IP service. Values:

1 (default) Check received certificates from server against local store, if local
store has at least one certificate.
0 Do not check received certificates from server against the local
store.
NOTE: Local store is created with AT^SBNW,is_cert.
secsni Security Option for Server Name Indication (SNI) extension (defined by
RFC6066).
• If parameter "secsni" is not provided then default configuration is "1", i.e.
SNI extension is enabled by default.
• If user does not configure AT^SISS=<srvProfileId>,secsni but enters
AT^SISS=<srvProfileId>,sniname,"name": SNI extension will be used
with "name".
• If user sets AT^SISS=<srvProfileId>,secsni,1 and sets
AT^SISS=<srvProfileId>,sniname,"name": SNI extension will be used
with with "name".
• If neither "secsni" nor "sniname" is configured or if user sets
AT^SISS=<srvProfileId>,secsni,1 but does not configure
AT^SISS=<srvProfileId>,sniname,"name": SNI extension will be used
with hostname extracted from AT^SISS=<srvProfileId>,address.
NOTE: Data related to SNI extension are sent in first client message called
"Client Hello" and processed by server.
1 (default) SNI Extension will be used if TLS connection will be invoked.
0 SNI Extension will not be used.
sniname AT^SISS=<srvProfileId>,sniname,"name" means that the "name" is used
as server name indication during TLS connection setup. If parameter is not pro-
vided and SNI extension is enabled then the hostname value from
AT^SISS=<srvProfileId>,address is used. Length of "name" must be
greater than 0 and less than 256 characters.
TlsSesTypeInit TLS Session Resume Type
"none" TLS session resumption is disabled. Any previously stored TLS
(default) session data for the service profile will be cleared.
"sesid" Only SessionID resumption (no ticket resumption).
"all" SessionID resumption or Ticket resumption (depending on server
decision).
TlsSesExpInit TLS Session State Expiry.
Client preference of maximum expiry time of the stored TLS session state (in
seconds).
0 Unlimited expiry.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 278 of 564
11.4 AT^SISS

1...[3600] Value of expiry time.

NOTE: The expiry time can be also limited by server preferences.
TlsSesPers TLS Session State Persistence.
0 (default) TLS session information is volatile and will not be stored to non-vol-
atile memory.
1 TLS session information is stored non-volatile.
clientId Unique client identification of the connection to the MQTT server.
ClientId are between 1 and 23 UTF-8 encoded bytes in length, and that contain
only the following characters
"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUV
WXYZ"
keepAlive Define keep alive time interval defined in seconds.
range: [0]...65535 seconds
willFlag Definition of will flag bit.
• 0: If the Will Flag is set to 0 the Will QoS and Will Retain fields in the Con-
nect Flags must be set to zero and the Will Topic and Will Message fields
must not be present in the payload. If the Will Flag is set to 0, a Will Mes-
sage must not be published when this Network Connection ends:
• 1: If the Will Flag is set to 1 this indicates that, if the Connect request is
accepted, a Will Message must be stored on the Server and associated with
the Network Connection. The Will Message must be published when the
Network Connection is subsequently closed unless the Will Message has
been deleted by the Server on receipt of a DISCONNECT Packet:
lastWillTopic Definition of last will topic.
Length: 0...64 octets
lastWillMessage Definition of last will message.
Length: 0...128 octets
lastWillQos Definition of Qos level of publishing last will message.
• 0: At most once delivery
• 1: At least once delivery
• 2: Exactly once delivery
If this parameter is not set, default Qos 0 is used.
lastWillRetain Definition if last will message is to be retained by server.
• 0: Retained message must not be stored as a retained message on the
Server
• 1: The Server must store the Application Message
If this parameter is not set, default Retain 0 is used.
cleanSession Definition of session type to be initiated with server.
• 0: Server will try to resume current session with client
• 1: Server will start new clean session
If this parameter is not set, default value 1 is used.
Qos MQTT Service:
Definition of Qos level of publishing application message.
• 0: At most once delivery
• 1: At least once delivery
• 2: Exactly once delivery
If this parameter is not set, default Qos 0 is used.
Topic Definition topic of publishing application message.
Length: 0...64
Retain Flag define if application message will be retained on server.
• 0: Retained message MUST NOT be stored as a retained message on the

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 279 of 564
11.4 AT^SISS

Server
• 1: The Server MUST store the Application Message
If this parameter is not set, default Retain 0 is used.
topicFilter Definition of topic filter list for subscribing or unsubscribing data.
Each topicFilter separated by a semicolon, the max number is 5.
topicQos Definition of maximum Qos level at which the server can send application mes-
sages to the client for each topic filter from topicFilter list.
Each topicQos separated by a semicolon, the max number is 5.
If all topics should have same Qos then only one needs to be defined.
accept Indicates acceptable media type for the client, in the order of preference (most
preferred first). No default value is assumed. <contentformat> received from
server.
Range: 0..65535
contentformat Indicates media type
Range: 0..65535
Ifmatch Used to make a conditional request on the current existence or value of an
ETag for one or more representation of the resource. Useful for re-source
update requests (to avoid accidental overwrites). Is either an ETag or the
empty string. An empty string places the precondition on the existence of any
current representation for the target resource.
Length: 2..16 Bytes
Ifnomatch Used to make a request conditional on the non-existence of the target
resource. Useful for resource creation requests (against accidental over-
writes). It carries no value (empty, Length: 0).
ETag Intended for use as a resource-local identifier for differentiating between rep-
resentations of the same resource that vary over time. It is included in a request
to determine the valid representation among those stored local-ly is the valid
one.
Length: 2..16 Bytes
size1 In a request, it is set to ask for a size estimation; in a response, it is set for a
server’s (Block2) or client’s (Block1) estimation of the total size of the resource
representation.
Range: 0..(232-1)
blocknum sequence number of the block
Range: 0..220
blockSZX Blocksize
Range: 24..210

<srvParmValue>(str)(+CSCS)
Parameter value; type and supported content depend on related <srvParmTag>.

<srvParmValue-srvType>(str)
Supported Internet service type values in <srvParmValue> for <srvParmTag> value "srvType".
Before changing the "srvType" of an existing service profile be sure that the profile is closed. To verify the con-
nection state of the service profile enter the read command AT^SISI. Only when <srvState>=2 is returned
for this specific service profile you can change its service type.
“Socket“ PLS63-W acting as client or server (listener) for TCP or UDP. "etx" subparam-
eter in URL configures Transparent mode for Socket service.
“Ftp“ PLS63-W acting as FTP client.
“Http“ PLS63-W acting as HTTP client.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 280 of 564
11.4 AT^SISS

“Mqtt“ PLS63-W acting as MQTT client.

The MQTT client supports sending MQTT control packets CONNECT, DIS-
CONNECT, PUBLISH, SUBSCRIBE and UNSUBSCRIBE.
The MQTT client handle automatically MQTT control packets CONNACK,
PUBACK, PUBREC, PUBCOMP, SUBACK, UNSUBACK, PINGREQ and PIN-
GRESP.
The maximum number of configurable MQTT client is 1.
“none“ Reset Internet service profile settings. Operation is not allowed if profile is in
use, i.e. it was activated via AT^SISO.

<srvParmValue-alphabet>(str)
Supported string parameter character set selections in <srvParmValue> for <srvParmTag> value "alphabet".
[“0“] Applicable character set is determined by current setting of AT+CSCS.
“1“ International Reference Alphabet (IRA, seven bit ASCII).

Notes
• String parameters are truncated if greater than the maximum length specified above.
• For correct input of the @ character in address parameters please refer to Section 1.7, Supported char-
acter sets.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 281 of 564
11.5 AT^SISI

11.5 AT^SISI Internet Service Information

AT^SISI serves to monitor the status of Internet service profiles defined with AT^SISS.

The AT^SISI read command requests the current status of all defined Internet service profiles.

The AT^SISI write command requests the status of the specified Internet service profile. If the specified service
profile is not defined yet, "+CME ERROR" is returned.

Syntax
Test Command

AT^SISI=?
Response(s)
[^SISI:(list of defined <srvProfileId>s)]
OK
Read Command

AT^SISI?
Response(s)
If response is related to service profile(s) created / opened on this interface:
[^SISI: <srvProfileId>, <srvState>, <rxCount>, <txCount>, <ackData>, <unackData>]
[^SISI: ...]

If response is related to service profile(s) created / opened on other interface(s):

[^SISI: <srvProfileId>, <srvParmTag>value "srvType"]
[^SISI: ...]
OK
ERROR
Write Command

AT^SISI=<srvProfileId>[, <mode>]
Response(s)
If no <mode> or if <mode>=0
^SISI: <srvProfileId>, <srvState>, <rxCount>, <txCount>, <ackData>, <unackData>

If <mode>=2
^SISI: <mode>, <srvProfileId>, <TlsSesTypeAct>, <TlsSesExpAct>, <TlsSesCipherAct>,
<TlsSesVersionAct>

OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 282 of 564
11.5 AT^SISI

Parameter Description

<srvProfileId>(num)
Internet service profile identifier as defined by AT^SISS (<srvProfileId>).
0...9

<mode>(num)
[0] Current status of all defined Internet service profiles. Has the same effect as
AT^SISI=<srvProfileId> write command.
2 Display resumption information.

<TlsSesTypeAct>(str)
Active TLS Session Resume Type

<TlsSesExpAct>(num)
Active TLS Session State Expiry

<TlsSesCipherAct>(str)
Active TLS Session Ciphersuite

<TlsSesVersionAct>(str)
Active TLS Session Protocol Version

<srvState>(num)
Internet service state (for details see AT^SISO parameter <srvState>).
2 Allocated
3 Connecting
4 Up
5 Closing
6 Down
7 Alerting
8 Connected

<rxCount>(num)
Number of bytes received via AT^SISR or AT^SIST since last successful AT^SISO write command.
This is the same value as displayed by the AT^SISO read command with the parameter <rxCount>.

<txCount>(num)
Number of bytes sent via AT^SISW or AT^SIST since last successful AT^SISO write command.
This is the same value as displayed by the AT^SISO read command with the parameter <txCount>.

<ackData>(num)
Number of data bytes already sent and acknowledged at TCP layer. Value 0 indicates that no sent data is
acknowledged yet.
Parameter is not applicable to HTTP, Socket with UDP, MQTT. For these services the counter is always set to 0.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 283 of 564
11.5 AT^SISI

<unackData>(num)
Number of data bytes already sent but not yet acknowledged at TCP layer. A value 0 indicates that all sent data
is already acknowledged.
This is the same value as displayed in the response of the AT^SISW write command with the parameter
<unackData>.
Parameter is not applicable to HTTP, Socket with UDP, MQTT. For these services the counter is always set to 0.
<unackData> includes the overhead needed for encryption when TLS/SSL is used.

Note
• If a service is in state "Down" the responses for <rxCount>, <txCount>, <ackData> and <unackData>
are the last known values for the service in the states "Connecting", "Up/Listening", "Connected" and "Clos-
ing".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 284 of 564
11.6 AT^SISO

11.6 AT^SISO Internet Service Open

The AT^SISO write command starts an Internet service configured with AT^SISS. Before you can start a service
it is necessary to activate the bearer with with AT^SICA.
The command may be aborted by any character sent from the TE to the UE during execution.

Syntax
Test Command

AT^SISO=?
Response(s)
OK
Read Command

AT^SISO?
Response(s)
If response is related to service profile(s) created / opened on this interface:
^SISO: <srvProfileId>, <srvType>, <srvState>, <socketState>, <rxCount>, <txCount>,
<locAddr>, <remAddr>[, <rejCounter>]
[^SISO: ...]

If response is related to service profile(s) created / opened on other interface(s):

^SISO: <srvProfileId>, <srvType>
[^SISO: ...]
OK
Write Command
AT^SISO=<srvProfileId>[, <optParam>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

Parameter Description

<srvProfileId>(num)
<srvProfileId> 0 ... 9 specified with AT^SISS.

<srvType>(str)
The type of the internet service as specified by the AT^SISS parameter <srvParmValue-srvType>.

<srvState>(num)
Internet service state.
Please note, that the state of an Internet service may influence the state of the serial DCD line. For details see
description of value 2 for parameter <value> of command AT&C.
2 Allocated
Service profile resources are allocated, i.e. at least the service type has been
set (parameter <srvParmTag>, value "srvType" of AT^SISS). The service is
not opened, but ready for configuration.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 285 of 564
11.6 AT^SISO

3 Connecting
State after opening a service with AT^SISO where the connection is being
established.
If connection setup is successful the service proceeds to the state "4" (Up) and
one of the URCs "^SISW" and "^SISR" may follow. If connection setup is not
successful, the "^SIS" URC may appear and the service enters <srvState>
6 (Down).
In the case of FTP, <srvState>=3 means that the command channel is being
established.
If the service profile is configured as Standard Listener, then the Listener
always stays at <srvState>=3 and <socketState>=3 (LISTENER), while
the <srvState> and <socketState> of the dynamically assigned service
profile may change. See examples in Section 11.17.5.
4 Up
The service performs its purpose. The data transfer process is the major func-
tion at this state.
FTP: Data channel is up.
Transparent TCP Listener service: the service is listening to remote client con-
nection requests. Not applicable to Standard Listener. See examples in Sec-
tion 11.17.6.
5 Closing
Internet Service is closing the network connection.
FTP: Command channel is released.
6 Down
This state is entered if
- the service has successfully finished its session (see note on Socket),
- the remote peer has reset the connection or
- the IP connection has been closed because of an error (see note below on
service or network errors).

If a service in this state be sure to close it with AT^SISC before reopening it.
7 Alerting
A client tries to connect to the Transparent TCP Listener service. Not applica-
ble to Standard Listener.
8 Connected
A client is connected with the Transparent TCP Listener service. Not applicable
to Standard Listener.
9 Released
The client has disconnected from the Transparent TCP Listener service but
there are unread data. To go back into Up/Listening state read the pending
data using AT^SIST or discard them by using AT^SISH.

<socketState>(num)
Socket state identifier.
1 Socket not assigned, i.e. no TCP/UDP connection active.
2 Socket assigned as CLIENT.
3 Socket assigned as LISTENER or UDP Endpoint.
4 Socket assigned as SERVER.

<rxCount>(num)
Number of bytes received via AT^SISR or AT^SIST since last successful AT^SISO write command.

<txCount>(num)
Number of bytes sent via AT^SISW or AT^SIST since last successful AT^SISO write command.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 286 of 564
11.6 AT^SISO

<locAddr>(str)
Recently used local IPv4 address in dotted-four-byte format and TCP port separated by colon, e.g.
"192.60.10.10:80", or recently used local IPv6 address in colon format enclosed in square brackets, e.g.
"[FE80::2]" and TCP port separated by colon, e.g. "[FE80::2]:80".

<remAddr>(str)
Remote IPv4 address in dotted-four-byte format and TCP port, separated by colon, e.g. "192.60.10.10:80", or
remote IPv6 address in colon format enclosed in square brackets, e.g. "[FE80::2]" and TCP port separated by
colon, e.g. "[FE80::2]:80".
If the Socket service is configured as UDP Endpoint, a remote IP address cannot be assigned, and a default
value will be shown instead.

<rejCounter>(num)
Number of automatically rejected client connect attempts to a Transparent TCP Listener service because the
service is already connected with a client.

<optParam>(num)
[0] MQTT service: Connect and use static setup defined by AT^SISS
1 Show only parameters of service profile for given <srvProfileId>.
2 MQTT service: Connect and use dynamic setup defined by AT^SISD

Notes
• If the bearer cannot be established and AT^SISO returns an error there might be a general mobile network
problem. To identify the reason you can take advantage of the AT+CEER command. Using AT+CEER is espe-
cially recommended when the <infoID> parameter of the AT^SISE command equals 0.
• If a service or network error occurs during an IP session and the "^SIS" URC or the AT^SISE command dis-
play an error message, the service enters <srvState>=5 and then 6, i.e. the IP connection is closed. In this
case, the service still allows reading the data stored in the buffer, but writing data is denied. After reading,
close the service and open it again.
• If an FTP connection is no longer available after network loss or server shutdown a 3-minute closing timeout
for each of the two used sockets takes effect, adding up to 6 minutes. The timeout is effective if the AT^SISC
is not sent.
• As in polling mode no error URCs are available you are advised to integrate the commands AT^SISI and
AT^SISE into the command sequences for upload and download jobs. So, the AT^SISO command may be
followed by AT^SISI to check that the service has entered the <srvState>=4 before sending AT^SISR,
AT^SISW or AT^SIST. This helps you to detect errors even though the "^SIS" URCs are disabled. A typical
example is that the service fails to be opened because the service profile contains a wrong destination
address. In such a case, after opening with AT^SISO and OK response, the service quickly enters the states
<srvState>=2, 4 and 6, with an error being returned no earlier than after sending the first AT^SISR or
AT^SISW command. In URC mode, an error URC, such as "Host not found" would be received in this situa-
tion, but in polling mode the only way to detect the state is using AT^SISI or, alternatively, AT^SISO.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 287 of 564
11.7 AT^SISC

11.7 AT^SISC Internet Service Close

The AT^SISC write command closes the TCP/IP connection to the remote peer which was opened with
AT^SISO. All resources are released, all status information parameters, e.g. <srvState>, <rxCount> and
<txCount> counters are reset. Only the initial configuration settings are preserved. The service can be restarted
any time, using the same configuration or a new one.

Syntax
Test Command

AT^SISC=?
Response(s)
OK
Write Command

AT^SISC=<srvProfileId>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
± - -

Parameter Description

<srvProfileId>(num)
0...9 <srvProfileId> specified with AT^SISS.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 288 of 564
11.8 AT^SISR

11.8 AT^SISR Internet Service Read Data

The AT^SISR write command can be used to read data for the specified service. It may return the following
errors: The AT^SISR command either triggers a read operation (download) or queries the number of bytes in the
internal buffer.
The "^SISR: x, 1" URC is also used to report status changes of the transparent TCP service while the client is
in AT command mode.

The AT^SISR write command may return the following errors:

• "+CME ERROR: operation failed" if there is a problem on application, socket, PPP or network level. The
AT^SISE command and the "^SIS" URC offer additional error information.
• "+CME ERROR: operation temporary not allowed" e.g. if the service has not network resources allocated.
• "+CME ERROR: operation not allowed" e.g. if the service is not configured.

Syntax
Test Command
AT^SISR=?
Response(s)
OK
Write Command
AT^SISR=<srvProfileId>, <reqReadLength>
Response(s)
^SISR: <srvProfileId>, <cnfReadLength>[, <remainUdpPacketLength>[, <Udp_RemClient>]]
Number of data bytes are sent as specified by <cnfReadLength>. If peek operator was used no data bytes
are sent.
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - +

Unsolicited Result Code

^SISR: <srvProfileId>, <urcCauseId>
Data availability status of the Internet service configured with AT^SISS has changed. The URC is issued when:
• data is available after opening an Internet service or
• less data was confirmed (in <cnfReadLength>) than requested (with <reqReadLength>) during the last
"Read Data" operation and new data is available.
The URC is disabled in polling mode. See AT^SCFG, parameter "Tcp/WithURCs", <tcpWithUrc>.

Parameter Description

<srvProfileId>(num)
<srvProfileId> 0 ... 9 specified with AT^SISS. Transparent TCP Listener services are not supported.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 289 of 564
11.8 AT^SISR

<reqReadLength>(num)
0 Peek Operator: Query number of received bytes within internal buffers.
The behaviour of the peek operator depends on the selected Internet service,
i.e. it may not be supported by all IP Services.
For "Socket" service configured for UDP the size of the next available UDP
packet is returned.
1...1500 Requested number of data bytes to be read via the Internet service specified
in <srvProfileId>.

<cnfReadLength>(num)
-2 Indicates end of data. Data transfer has been finished (all data have been read)
and the service can be closed with AT^SISC.
-1 Applies only to HTTP: Querying number of available bytes is not supported by
the HTTP service.
0 Indicates that no further data is available at the moment.
>0 Number of available data bytes. The range is determined by <reqRead-
Length>:
If <reqReadLength> was greater than 0, then <cnfReadLength> may be
less or equal to the value requested with <reqReadLength>.
If <reqReadLength> equals 0 (peek operator) the value indicated by
<cnfReadLength> may be greater than 1500.

<urcCauseId>(num)
Indicates whether or not data is available for reading with AT^SISR and AT^SIST.
1 Meaning of value "1" for all services except Transparent TCP service:
Data is available and can be read by sending the AT^SISR command. The
URC appears when less data was confirmed (in <cnfReadLength>) than
requested (with <reqReadLength>) during the last "Read Data" operation
and new data is available.

Meaning of value "1" for Transparent TCP service:

If the Transparent TCP service is in AT command mode the "^SISR: x, 1" URC
notifies the client that the server has sent new data. In this case the client shall
enter the AT^SIST command to go to transparent access mode and read the
data.
2 End of data. Data transfer has completed (all data read). The service can be
closed with AT^SISC.

<remainUdpPacketLength>(num)
Optional third parameter of the AT^SISR write command response displayed only if the Socket service uses the
UDP protocol.
The reception of each datagram must be completed before the next datagram can be received. This may be a
problem if the buffer of the host application is limited and not designed to handle the maximum packet size of
1500 bytes. To compensate this, the host is advised to request, via <reqReadLength>, an amount less or
equal its maxmimum buffer capacity and wait for the resulting AT^SISR write command response with param-
eter <remainUdpPacketLength>. The benefit of this approach is that the host may properly receive all parts
of a UDP datagram, as after each received data part the number of remaining bytes is synchronized, until read-
ing the datagram is finished.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 290 of 564
11.8 AT^SISR

If the currently read datagram is smaller than the number of bytes requested by the host the <remainUdpPack-
etLength> parameter is omitted.
Further write attempts with AT^SISR are denied as long as the <remainUdpPacketLength> is unequal 0 or
is not omitted. In this case the service returns "+CME ERROR: operation of service temporary not allowed".
0 Indicates that all bytes of the current UDP datagram are read.
(max. data size)-1...1 Indicates that the currently read UDP datagram is not yet complete. The dis-
played value is the remaining number of bytes.
<remainUdpPacketLength> is unequal 0 until reading all parts of the cur-
rent datagram is finished.

<Udp_RemClient>(str)
Service specific parameter of the AT^SISR write command response. If the Socket service is configured as UDP
endpoint this parameter shows the IP address and the UDP port of the remote host that has sent the current
UDP data. See example in Section 11.17.9, UDP Scenario.

11.8.1 Example: Socket Host Reads Small Amounts of UDP Data Pack-
ets (URC Mode)
This section applies only to the Socket service using the UDP protocol. The example shows how to read UDP
packets if the buffer of the host application can handle only a few bytes. There are two datagrams available for
reading.
Buffer size: 6 bytes
Datagram A = 18 bytes (content "THIS_IS_DATAGRAM_A")
Datagram B = 3 bytes (content "NEW")

^SISR: 0,1 Service profile 0 is configured for Socket service and UDP. The URC
notifies host that data is available for reading.
at^sisr=0,6 The host requests to read 6 bytes.
^SISR: 0,6,12 The first 6 bytes of datagram A are confirmed and transmitted. Another
THIS_I 12 bytes are still available.
OK
at^sisr=0,6 The host requests to read the next part of 6 bytes.
^SISR: 0,6,6 The next 6 bytes of datagram A are confirmed and transmitted. Another
S_DATA 6 bytes are still available.
OK
at^sisr=0,6 The host requests to read the next part of 6 bytes.
^SISR: 0,6,0 Last part of datagram A was received, no remainder is left.
GRAM_A
OK
at^sisr=0,6 Again, the host requests to read 6 bytes. This time, the request refers to
datagram B which has only 3 bytes. As the read datagram is smaller
than the size requested by the host, the response does not include the
<remainUdpPacketLength>.
^SISR: 0,3 3 bytes are confirmed and transmitted. Datagram B was properly
NEW received.
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 291 of 564
11.9 AT^SISW

11.9 AT^SISW Internet Service Write Data

AT^SISW triggers a write operation (upload) and queries the amount of data already sent, but not acknowledged
at the TCP layer. The URC "^SISW: <srvProfileId>, <urcCauseId>" will be issued if the PLS63-W is ready
to accept user data.

The AT^SISW write command may return the following errors:

• "+CME ERROR: operation failed" if there is a problem on application, socket, PPP or network level. The
AT^SISE command and the "^SIS" URC offer additional error information.
• "+CME ERROR: operation temporary not allowed" e.g. if the service has not network resources allocated.
• "+CME ERROR: operation not allowed" e.g. if the service is not configured.

Syntax
Test Command

AT^SISW=?
Response(s)
OK
Write Command

AT^SISW=<srvProfileId>, <reqWriteLength>[, <eodFlag>[, <Udp_RemClient>]]

Response(s)
^SISW: <srvProfileId>, <cnfWriteLength>, <unackData>
Number of data bytes as specified by <cnfWriteLength>.
OK
ERROR
+CME ERROR: <err>
PIN  Last
± - +

Unsolicited Result Code

^SISW: <srvProfileId>, <urcCauseId>
The URC indicates the following status changes:
• After opening a TCP Client or UDP Client with AT^SISO the "^SISW" URC indicates that the service is ready
to accept data. After this initial "^SISW" URC, the TCP Client or UDP Client can proceed in Transparent Mode
or Non-Transparent Mode.
The initial "^SISW" URC is not issued after a Transparent Listener or UDP Endpoint was opened, because
for listening services the "^SIS" URC will be issued.
• During AT^SISW write cycles the "^SISW" URC indicates that the service is ready to accept new data, or that
data transfer has finished successfully.

The URC is disabled in polling mode. See AT^SCFG, parameter "Tcp/WithURCs", <tcpWithUrc>.

Parameter Description

<srvProfileId>(num)
<srvProfileId> 0 ... 9 specified with AT^SISS. Transparent TCP Listener services are not supported.

<reqWriteLength>(num)
0...1500
Specifies the number of bytes to be sent with AT^SISW or, if set to 0, requests the amount of data already sent
with AT^SISW but not yet acknowledged:

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 292 of 564
11.9 AT^SISW

• Parameter <reqWriteLength> may be 1...1500 bytes to specify the amount of data to be sent with
AT^SISW.
• If parameter <reqWriteLength> equals 0, AT^SISW does not expect any data, but a normal query is per-
formed. This allows the application to explictly request, in particular at the end of an upload job, the amount
of unacknowledged data at the TCP layer indicated by <unackData>.
• If Socket service is selected with UDP protocol
- <reqWriteLength>=0 can be used to send an empty UDP packet;
- it is recommended that the size of each data packet be limited to 1460 bytes. Otherwise, it is possible that
the following URC occurs: "^SIS: <id>, 0, 9, The supplied buffer was too small / large".

<eodFlag>(num)
End of data indication flag. See also Section 11.9.1.
0...1 Used as bit field
bit 1 Represents End of data is signaled to the Internet Service.
[0]: No end of data. Other data may follow to be transmitted via the Internet ser-
vice.

Notes:
- UDP Endpoint service: Value 0 must be set before <Udp_RemClient>
parameter although <eodFlag> is not effective for UDP Endpoint.
- <eodFlag> is not intended and not usable for HTTP.
1: End of data is signalled to the Internet Service. Further AT^SISW write com-
mands return an error response. However, reading data may be possible. The
<eodFlag> is effective only if the <reqWriteLength> equals <cnfWrite-
Length>, in particular if the <reqWriteLength> equals 0.
End-of-data flag must be enabled for following actions:
- FTP "cmd","put" (sending single file to FTP server)

<Udp_RemClient>(str)
Service specific parameter of the AT^SISW write command. If the Socket service is configured as UDP endpoint
this parameter is mandatory and specifies the IP address (in dotted format) and the UDP port of the remote host.
For each write request another IP address and UDP port may be given. See example in Section 11.17.9, UDP
Scenario.

<cnfWriteLength>(num)
0...1500 Confirmed number of data bytes which can be transmitted via the Internet ser-
vice configured in <srvProfileId>. This number may be less or equal to the
value requested with <reqWriteLength>. The application has to deliver
exactly the number of bytes indicated by <cnfWriteLength>. A 0 value
means that no data can be written at this time, i.e. it serves as a flow control
mechanism.

<unackData>(num)
Number of data bytes already sent but not yet acknowledged at the TCP layer.
The value is constantly changing until the entire upload job has completed. If the value equals 0 all data sent so
far is acknowledged.
<unackData> includes the <cnfWriteLength> value of the pending write operation. Therefore, the very first
write operation of an upload job returns identical values for <cnfWriteLength> and <unackData>.
This mechanism allows the host application to easily verify whether or not the remote host has successfully
received the data.
Parameter is not applicable to HTTP, Socket with UDP protocol. For these services the counter is always set to
0.
<unackData> includes the overhead needed for encryption when TLS/SSL is used.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 293 of 564
11.9 AT^SISW

<urcCauseId>(num)
1 The service is ready to accept new user data.
2 Data transfer has been finished successfully and Internet service may be
closed without loss of data.

Note
• Do not send any characters after AT^SISW command line termination (ATS3) until "^SISW" URC is received.
This is necessary to avoid that any characters related to the AT command can be interpreted as being part of
the data stream to be transferred. Also refer to Section 1.5, AT Command Syntax.

11.9.1 Usage of parameter <eodFlag>

Service type
Socket Parameter is optional for Socket services.
Not applicable to Socket with UDP protocol, i.e. value is ignored.

After the service accepts the end-of-data flag the service state changes to "Closing". No fur-
ther user data is accepted.
After releasing the TCP link the service remains in state "Down".
FTP Parameter is mandatory for FTP "put" (sending single file to FTP server).

After accepting the end-of-data flag the service state changes to "Closing" and starts to end
the running FTP session.
No further user data is accepted.
After the FTP session is completed on FTP protocol level the service state switches to "Down".
In case of successful completion the URC "^SISW: x,2" is generated.
HTTP Parameter is not indended and not usable for HTTP.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 294 of 564
11.10 AT^SIST

11.10 AT^SIST Transparent Mode

AT^SIST activates / deactivates Transparent Mode. Keep in mind that the used AT command port will be
blocked for any other AT commands as long as Transparent Mode is active.

After entering the AT^SIST command, the CONNECT response notifies that the service has entered Transpar-
ent Mode and is ready to transparently send and receive payload data over the AT command interface. In this
mode, the signaling of the URCs is done by RING line. This can be configured by AT^SCFG, parameter
<urcRinglineCfg>.

There are several ways to quit the Transparent Mode and revert to AT Command Mode:
• +++ escape sequence (also transmitted over the air)
• DTR ON-OFF transitions (see AT&D for configuring DTR line)
• "etxChar" parameter set within the server address (see AT^SISS, <srvParmTag> "address" for Socket ser-
vice URLs.
Switching back and forth between both modes does not affect the underlying socket and has no influence on the
service <srvState>.
If the service is in AT Command Mode the "^SISR: x, 1" URC appears once to indicate that the remote side has
sent new data. In this case, the client or listener shall enter AT^SIST to go to Transparent Mode and read out
the new data.

If the connection is released by the remote side the following applies:

• If the service is in Transparent Mode (CONNECT mode): UE returns to AT Command Mode, issues a specific
"NO CARRIER" result code and goes to <srvState> 6 ("Down") in case of TCP or UDP Client, and to 4
("Up/Listening") in case of Transparent Listener. The "NO CARRIER" result code starts with 0x10 (DLE) and
0x04 (EOT) and ends with the command line termination character (ATS3), followed by the response format-
ting character (ATS4).
• If the service is in AT Command Mode the "^SISR: x, 1" URC appears to indicate that the state of the service
has changed. In this case, the client or listener shall go to Transparent Mode with AT^SIST in order to read
remaining data (if any) and get the "NO CARRIER" result code. After this, the service changes to
<srvState> 6 ("Down"). Otherwise, if the client or listener does not go to Transparent Mode after receiving
"^SISR: x, 1" URC the service remains in <srvState> 4 ("Up") even though the remote side has shut down.
In some cases, depending on the remote side and the network, it is possible that "^SIS" URCs may be
reported, for example "^SIS" URCs with <urcInfoId> 15 ("Remote host has reset the connection") and 19
("Socket has been shut down). See Section 11.16, Internet Service URC for a list of possible URCs.
• In all above scenarios, the Transparent service shall be closed with AT^SISC. Trying to return to Transparent
Mode with AT^SIST would only end up with "NO CARRIER" once again and is not recommended.
• Use AT^SISO and AT^SISI to check the <srvState>.

Syntax
Test Command

AT^SIST=?
Response(s)
OK
Write Command

AT^SIST=<srvProfileId>
Response(s)
CONNECT
(indicates that UE has entered Transparent Mode)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - +

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 295 of 564
11.10 AT^SIST

Parameter Description

<srvProfileId>(num)
<srvProfileId> 0 ... 9 specified with AT^SISS.

Note
• If AT^SIST is running for a certain <srvProfileId>, then the commands AT^SISR and AT^SISW are not
usable for the same <srvProfileId>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 296 of 564
11.11 AT^SISD

11.11 AT^SISD Internet Service MQTT Dynamic Setup Profile

AT^SISD serves to set up the necessary parameters in the MQTT service profiles. Service profiles can then be
used to control a data link in conjunction with AT^SISU and AT^SISE.

Command could be used only after connection is opened with AT^SISO parameter <optParam>=2. Each
request parameter can be changed multiple time during active connection.

The AT^SISD write command specifies the parameters for MQTT service profile identified by <srvPro-
fileId>.
To change the settings the write command needs to be executed for each single <dynParamTag>. All profile
parameters set with AT^SISD are volatile.

The list below shows which <dynParamTag> parameters apply to MQTT service and which of them are man-
datory (= m) or optional (= o).

Table 11.3: Applicability of AT^SISD <dynParamTag> values

<dynParamTag> Mandatory or optional

Publish
"Cmd" m
"Qos" o
"Topic" m
"Retain" o
"hcContent" o
"hcContLen" o

Subscribe
"Cmd" m
"topicFilter" m
"topicQos" o

Unsubscribe
"Cmd" m
"topicFilter" m

Syntax
Test Command
AT^SISD=?
Response(s)
OK
Write Command
Set parameters defined by <dynParamTag> to value <dynParamValue>
AT^SISD=<srvProfileId>, "setParam", <dynParamTag>, <dynParamValue>
Response(s)
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 297 of 564
11.11 AT^SISD

Write Command

Get current value of dynamic parameters defined by <dynParamTag>

AT^SISD=<srvProfileId>, "getParam", <dynParamTag>
Response(s)
^SISD: <srvProfileId>, <dynParamTag>, <dynParamValue>
OK
ERROR
+CME ERROR: <err>
Write Command

Set all dynamic parameters for service to default value

AT^SISD=<srvProfileId>, "cleanParam"
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command
Get all dynamic parameters of service
AT^SISD=<srvProfileId>
Response(s)
^SISD: <srvProfileId>, <dynParamTag>, <dynParamValue>
^SISD: ...
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

Parameter Description

<srvProfileId>(num)
Internet service profile identifier as defined by AT^SISS <srvProfileId>.
0...9

<dynOption>(str)
Parameter<dynOption> define action in dynamic setup of request parameters.
Omitting this parameter will show all dynamic parameters of service in the response.
“setParam“ Set parameter defined by <dynParamTag> to value <dynParamValue>.
“getParam“ Get current value of parameter defined by <dynParamTag>.
“cleanParam“ Set all request parameters for service to its default value.

<dynParamTag>(u)
MQTT service profile parameter.
cmd refer to <srvParmTag>.
Qos refer to <srvParmTag>.
Topic refer to <srvParmTag>.
Retain refer to <srvParmTag>.
hcContent refer to <srvParmTag>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 298 of 564
11.11 AT^SISD

hcContLen refer to <srvParmTag>.

topicFilter refer to <srvParmTag>.
topicQos refer to <srvParmTag>.

<dynParamValue>(str)(+CSCS)
Parameter value; type and supported content depend on related <dynParamTag>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 299 of 564
11.12 AT^SISU

11.12 AT^SISU MQTT Dynamic Send Request

AT^SISU serves to setup and send MQTT request.

Command could be used only after connection is opened with AT^SISO parameter <optParam>=2. Each
request parameter can be changed multiple time during active connection.
The AT^SISU write command with only first parameter <srvProfileId> is used to trigger send of service
request that was defined by dynamic parameters with command AT^SISD.
The AT^SISU write command with second parameter is used to define dynamic request.

All profile parameters set with AT^SISU are volatile.

Syntax
Test Command

AT^SISU=?
Response(s)
OK
Write Command

AT^SISU=<srvProfileId>[, <dynReqType>[, <dynReqValue>]]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

Parameter Description

<srvProfileId>(num)
Internet service profile identifier as defined by AT^SISS <srvProfileId>.
0...9

<dynReqType>(str)
Parameter <dynReqType> define type of service specific request.
“publish“ The MQTT client sends data by PUBLISH control packet request to server.
“subscribe“ The MQTT client that wants to receive data must subscribe to it by SUB-
SCRIBE control packet.
“unsubscribe“ The MQTT client that doesn’t want to receive subscribed data anymore must
unsubscribe specified topic filter by sending UNSUBSCRIBE control packet.

<dynReqValue>(str)(+CSCS)
Parameter <dynReqValue> define all request parameters separated by ":" character.
• PUBLISH: Qos:Topic:Retain:hcContent:hcContLen
• SUBSCRIBE: topicFilter:topicQos
Multiple topics could be send by one subscribe request in topicFIlter separated by ";". Accordingly for each
topic in topicFilter different Qos can be setup in topicQos separated by ";" with preserved order. If all topics
should have same Qos then only one Qos needs to be defined.
• UNSUBSCRIBE: topicFilter
Parameter value and supported content depend on related <dynParamTag>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 300 of 564
11.13 AT^SISH

11.13 AT^SISH Disconnect Remote Client

AT^SISH is intendend only for a Transparent TCP Listener service. It allows to reject an incoming remote client
connection request or to disconnect an established client connection from server side.

Syntax
Test Command
AT^SISH=?
Response(s)
OK
Write Command
AT^SISH=<srvProfileId>[, <mode>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

Parameter Description

<srvProfileId>(num)
0...9 A Transparent TCP Listener service <srvProfileId> defined with
AT^SISS.

<mode>(num)
Specifies disconnect mode.
[0] Socket is closed with graceful option
1 Socket is closed without graceful option

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 301 of 564
11.14 AT^SISX

11.14 AT^SISX Internet Service Execution

The AT^SISX command can be used to send ICMP (Internet Control Message Protocol) Echo Requests to a
target IP address or DNS host name (also referred to as Ping command). This command can also be used to
resolve DNS host names to IP addresses (HostByName) or resolve the network time, NTP protocol, in UTC.
The AT^SISX write command can be used any time while a connection profile (bearer) is active. If used while
no connection is active (no profile opened) then the AT^SISX "Ping" command tries to use the default APN (no
APN name).
If the AT^SISX write command is executed for Ping, then the command returns one row for every ICMP Echo
Request. The last Ping response line is followed by two lines to report a statistic calculated from the Echo
Request responses. After starting the Ping command the AT channel is blocked until all ICMP requests are exe-
cuted. To stop the periodic Ping early, send any character (user break).
It is also possible to cancel the HostByName or NTP service by user break. But this may temporarily block further
AT^SISX write commands which is indicated by the error response "+CME ERROR: operation temporary not
allowed". As soon as the background activity for the last started HostByName service is finished the AT^SISX
write command can be used again.

Syntax
Test Command
AT^SISX=?
Response(s)
^SISX:"Ping", (list of supported <conProfileId>s), , (range of supported <request>s), (range of
supported <timelimit>s)
^SISX:"HostByName", (list of supported <conProfileId>s)
^SISX:"Ntp", (list of supported <conProfileId>s)
OK
Write Command

AT^SISX=<service>, <conProfileId>, <address>[, <request>[, <timelimit>]]

Response(s)
In case of <pingInfoType>= 1: ICMP Echo Requests (1 - 30 rows)
^SISX:"Ping", <pingInfoType>, <conProfileId>, <ip-address>, <roundTripTime>
[...]

In case of <pingInfoType>= 2: Packet statistic (1 row)

^SISX:"Ping", <pingInfoType>, <conProfileId>, <sent>, <received>, <lost>, <lostPercent>

In case of <pingInfoType>= 3: Time statistic (1 row)

^SISX:"Ping", <pingInfoType>, <conProfileId>, <minRTT>, <maxRTT>, <meanRTT>

In case of <service>= "HostByName"

^SISX:"HostByName", <ip-address>
[...]

In case of <service>= "Ntp"

^SISX:"Ntp", <ntp>

OK
ERROR
+CME ERROR: <err>
PIN  Last
+ - -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 302 of 564
11.14 AT^SISX

Parameter Description

<service>(str)
“Ping“ Ping host.
“HostByName“ Get first address from a host.
“Ntp“ Network time protocol.

<conProfileId>(num)
Internet connection profile to be used as specified with AT+CGDCONT parameter <cid>.

<address>(str)
In case of "Ping" or "Ntp" this is the target host as FQDN or IP address (i.e. "192.168.1.3"), in case of "HostBy-
Name" this is the FQDN to be resolved into the IP address.

<ip-address>(str)
The IP address of the host (i.e. "192.168.1.3").

<request>(num)
[1]...30 Number of "Ping" ICMP Echo Requests to be sent.
Not supported for "HostByName".
4 IPV4 only in case of "HostByName"
6 IPV6 only in case of "HostByName"

<timelimit>(num)
200...[5000]...10000 Amount of time, in milliseconds, to wait for an ICMP Echo Response message
related to a previously sent Echo Request message.
Parameter is not supported for "HostByName".

<pingInfoType>(num)
Indicate the type and format of the information given in the command responses (see syntax of the AT^SISX
write command above).
1 Ping status received for the ICMP Echo Request(s). Depending on parameter
<request> 1 - 30 rows. Address and Round Trip Time are returned for each
request.
2 one row packet statistic calculated from the ping response(s) received for
<pingInfoType>=1.
3 one row time statistics calculated from the ping response(s) received for
<pingInfoType>=1 (displayed only if at least one Echo response message
was received).

<roundTripTime>(num)
Round Trip Time in milliseconds. If the Echo Response message is not received within the time specified by
<timelimit> the value -1 is returned (e.g. when the bearer shuts down during command execution).

<sent>(num)
Number of sent packets.

<received>(num)
Number of received packets.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 303 of 564
11.14 AT^SISX

<lost>(num)
Number of lost packets.

<lostPercent>(num)
Lost packets in percent.

<minRTT>(num)
Minimum Round Trip Time in milliseconds.

<maxRTT>(num)
Maximum Round Trip Time in milliseconds.

<meanRTT>(num)
Average Round Trip Time in milliseconds.

<ntp>(num)
time in extended format UTC without time zone information ("YYYY-MM-DDThh:mm:ss")

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 304 of 564
11.15 AT^SISE

11.15 AT^SISE Internet Service Error Report

The AT^SISE write command returns the current error status of the specified Internet service profile. If the ser-
vice profile is not defined or the value is invalid "+CME ERROR" response is returned.
The error status is identical to the content of the "^SIS" URC last issued or if a service fails the commands
AT^SISR, AT^SISW or AT^SIST will return an error response. However, if the AT^SISE command returns
<infoID>=0 it is recommended to use the AT+CEER command because a general network problem might be
the reason.

Syntax
Test Command

AT^SISE=?
Response(s)
OK
Write Command

AT^SISE=<srvProfileId>[, <infoMode>]
Response(s)
^SISE: <srvProfileId>, <infoID>[, <info>]
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

Parameter Description

<srvProfileId>(num)
Internet service profile identifier as defined by AT^SISS <srvProfileId>.
0...9

<infoMode>(num)
Information Mode
0 Return current error status in response parameter <infoID> and <info>.
1 Return oldest unread event in response parameter <infoID> and <info> –
used for polling

<infoID>(num)
Reason for Internet service error. This is a subset of the <urcInfoId>s which can be found in Section 11.16,
Internet Service URC.
The value 0 indicates there is no special Internet service error. In this case the application may use AT+CEER
to check for general network problems.

<info>(str)
Information text related to <infoID>. This is a subset of the <urcInfoText>s which can be found in Section
11.16, Internet Service URC.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 305 of 564
11.15 AT^SISE

Note
• In particular cases, the AT^SISE command may deliver information and warnings. This applies the following
services:
FTP: Information 2100
If an error occurs the information and warning messages are overwritten by error messages.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 306 of 564
11.16 Internet Service URC

11.16 Internet Service URC

This section first describes the syntax and the parameters of the "^SIS" URC. The second part consists of tables
listing the information elements delivered within the "^SIS" URC and the command response of AT^SISE.

The presentation of the "^SIS" URC containing the parameter <urcCause>=0 or <urcCause>=5 can be dis-
abled or enabled depending on whether polling mode or URC mode is preferred. To do so, use the AT^SCFG
command, parameter "Tcp/WithURCs" (refer to <tcpWithUrc>). However, if related to <urcCause>=1, 2, 3 or
4, the "^SIS" URC will always be delivered regardless of the setting made with AT^SCFG.

Unsolicited Result Code

Indicates an event, an error or an information element. The same information can be obtained via AT^SISE.
^SIS: <srvProfileId>, <urcCause>[, [<urcInfoId>][, <urcInfoText>]]
The URC may appear if an event or an error occurs, for example after opening an Internet service with AT^SISO
or any time during operation. The URC also indicates a request for a mobile terminated Internet service client
connection, or a failure if a mobile terminated request is rejected. Furthermore, the URC may deliver an informa-
tion element resulting from a specific command given in the service profile.

A list of possible causes can be found in the tables below. The tables contain the <urcInfoId> and, if applica-
ble, a specific <urcInfoText>. If marked with *) the precise text related to a <urcInfoId> varies greatly
depending on the scenario and the implementation of the remote server. In these cases, only a brief explanation
of the scenario can be found in the table column "Description".

Parameter Description

<urcCause>(num)
URC cause identifier.
0 An event has occurred after opening or while using an Internet service.
The event number is presented via <urcInfoId> and may be an error, a
warning, an information element or a note. Optionally additional information
may be supplied via <urcInfoText>.
1 Indicates that an opened Standard TCP Listener service (in Non-Transparent
Mode) is receiving a connection request from a remote client.
The incoming socket connection is dynamically assigned to the next free Inter-
net service profile. In this case, the parameter <urcInfoId> inside the "^SIS"
URC equals the <srvProfileId> of the dynamically assigned service pro-
file. This ID shall be used to accept the connection request with AT^SISO or to
reject it with AT^SISC.
The connection status may be requested by using the AT^SISI read or write
command or the AT^SISO read command. Among other details, the response
indicates the IP address of the remote client (parameter <remAddr>). This
may be helpful to decide whether to accept or reject the request.
2 Incoming Socket service client connection has failed. The client request was
rejected automatically because no free Internet service profile was available.
3 Indicates that an opened Transparent TCP Listener service is receiving a con-
nection request from a remote client. The parameter <urcInfoId> then indi-
cates whether auto answering is active for the service (<urcInfoId>=1) or
not. Parameter <urcInfoText> contains the remote IP address and the port
of the connecting client.
Example: "^SIS: 5,3,0,"192.168.105.17:1712" means that a client from host
192.168.105.17 tries to connect from port 1712 to our listening Transparent
TCP Listener with profile 5. Auto answering is disabled.
4 Indicates for a Transparent TCP Listener service, that a remote client which is
allowed due to the used address filter (see option "addrfilter" for AT^SISS),
was internally rejected, e.g. because the connect timeout has expired (see
option "connecttimeout" for AT^SISS). The URC is not generated if the remote

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 307 of 564
11.16 Internet Service URC

client is rejected because its IP address is not matching the address filters.
If <urcCause> equals "4", then <urcInfoId> always equals "0".
This cause is also used if UE is not in Transparent Mode and a connected client
has closed the connection remotely.
5 Only for TCP Listeners, Non-Transparent UDP Endpoint.
Indicates that the service is ready.

<urcInfoId>(num)
Information identifier related to <urcCause>. See tables below for further detail. The <urcInfoId> number
ranges indicate the type of information element:
0: Service is working properly.
1 - 2000: Error, service is aborted and enters <srvState>=6 (Down). Value 1000 notifies that service profile
contains invalid parameter(s).
2001 - 4000: Information related to progress of service.
4001 - 6000: Warning, but no service abort.
6001 - 8000: Notes
Additional information for Socket service: As stated above, if a Socket connection request from a remote client
is received (see <urcCause>=1) the <urcInfoId> equals the <srvProfileId> of the dynamically assigned
free service profile.
If <urcCause> is 3, <urcInfoId> is used as auto answer indicator. If the value is 0, auto answering is dis-
abled, if the value is 1, auto answering is enabled.

<urcInfoText>(str)
Information text related to <urcCause>. See tables below for further detail. The maximum length of an infor-
mation text is 255 bytes. Any longer messages will be truncated.
If <urcCause> is 3, <urcInfoText> is used to indicate the IP address and port of the connecting client, e.g.
"192.168.105.17:1712".

11.16.1 Information Elements Related to the Service Application

The following table lists the informatiomation elements which may be returned by all supported services within
the "^SIS" URC and the command response of AT^SISE. It should be noted that TCP/IP socket problems may
occur in all Internet service connections (Socket, Transparent TCP or Transparent UDP, FTP,HTTP).

<urcInfoId> <urcInfoText> Description

Information Elements Returned by the TCP/IP socket
2 Invalid socket descriptor Socket error
3 Bad address specified Socket error
4 Invalid operation Socket error
5 No free socket descriptors Socket error
6 The operation would block Socket error
7 A previous attempt at this operation is still ongoing Socket error
8 Socket is not bound Socket error
9 The supplied buffer is too small / large Socket error
10 Flags not supported Socket error
11 Operation not supported Socket error
12 The address is already in use Socket error
13 The network is unavailable Socket error
14 An established connection was aborted (transmission Socket error
time-out or protocol error)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 308 of 564
11.16 Internet Service URC

<urcInfoId> <urcInfoText> Description

15 Remote host has reset the connection Socket error
16 No buffer space available Socket error
17 The socket is already connected Socket error
18 For TCP/IP sockets, the socket is not connected Socket error
19 Socket has been shut down Socket error
20 Connection timed out Socket error
21 Remote host has rejected the connection Socket error
22 Remote host is unreachable Socket error
23 An unexpected error occurred Socket error
24 Host not found DNS error
25 An error occurred that may be transient; a further attempt DNS error
may succeed.
26 An unrecoverable error occurred DNS error
General Information Elements
46 Fatal: The service has detected an unknown error
47 *) Indicates that the remote ser-
vice has closed the connection.
The host shall close the service.
48 Remote peer has closed the connection Remote peer has closed the
connection unexpectedly, and
no data are available. The host
shall close the service.
Note that the "^SIS" URC only
indicates the <urcInfoId>,
but the AT^SISE command
indicates both the <urcIn-
foId> and the <urcInfo-
Text>.
49 Fatal: No memory is available for service action
50 Fatal: Service has detected an internal error
51 Application Task ID is not registered
52 Fatal: Entity not supported
53 No free Entity available
54 Index not supported
55 Service is not writeable
56 Syntax error in URL
57 Configuration Error
58 No more data available
59 Peek operation rejected
60 Service don't accept further data
61 Fatal: Service has no socket connection
62 Unknown internal TLS error SSL error
63 Wrong format of certificate data SSL error
64 Certificate validity period is in future SSL error
65 Certificate validity period expired SSL error

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 309 of 564
11.16 Internet Service URC

<urcInfoId> <urcInfoText> Description

66 Peer certificate is not confirmed SSL error
67 Wrong signature key format SSL error
68 Unsupported signature key type SSL error
69 Wrong protocol data format SSL error
70 Wrong protocol data format SSL error
71 No memory available for TLS SSL error
72 Buffer error in TLS SSL error
73 Wrong input data for RSA operation SSL error
74 TLS/SSL protocol error SSL error
75 Internat error in TLS SSL error
76 Certificate format error SSL error
77 The certificate does not exist SSL error
78 Unknown TLS error code! SSL error
80 Connection profile not defined.
84 PPP LCP FAILED PPP error
85 PAP Authentication failed PPP error
86 CHAP Authentication failed PPP error
87 IPCP failed PPP error
89 PDP: can not obtain controling task
90 PDP: internal error 1
91 PDP: internal error 2
92 PDP: no authentication req
93 PDP: internal error 3
94 PDP: conection failed
95 PDP: internal error 4
96 PDP: no IP assigned
97 PDP: no network
98 PDP: network is not up
99 PDP: internal error 5
119 PDP: no DNS received
120 DNS: no data
121 DNS: timeout
122 DNS: connection refused
123 DNS: terminated lookup
124 DNS: domain name is too long
125 DNS: invalid server
126 DNS: undefined error
General Information Elements

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 310 of 564
11.16 Internet Service URC

<urcInfoId> <urcInfoText> Description

1000 PARA-ERR: <Info> Notifies that service profile con-
tains a wrong parameter.
<Info> text indicates the service
profile parameter that contains
an error.
6001 General progress information
for connection setup.

*)
Text varies depending on scenario.

11.16.2 Information Elements Related to FTP Service

<urcInfoId> <urcInfoText> Description

Error URCs
100 FTP-ERR: <FTP Response Str> <FTP Response Str> text
depends on FTP server imple-
mentation
Info URCs
2100 <info> <info> text depends on FTP
server implementation

11.16.3 Information Elements Related to HTTP Service

<urcInfoId> <urcInfoText> Description

Error URCs
200 HTTP-ERR: Not connected - cannot send request
HTTP-ERR: failed on sending request
Info URCs
2200 HTTP Redirect to: <Host>:<Port> <Path>
2201 HTTP Response <Response code>
Example: ^SIS: 2,3,2201, "HTTP Response: HTTP/1.1
200 OK"

11.16.4 Information Elements Related to MQTT Service

<urcInfoId> <urcInfoText> Description

Error URCs
500 Connection refused, unacceptable protocol version
501 Connection refused, identifier rejected
502 Connection refused, server unavailable
503 Connection refused, bad user name or password
504 Connection refused, not authorized
505 Connection closed by server

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 311 of 564
11.16 Internet Service URC

<urcInfoId> <urcInfoText> Description

Info URCs
2500 Connection accepted on clean session
2501 Connection accepted on retain session
2510 Unsubscribed request acknowledged
2520 Subscribed topic name Filter topic subscribed with
maximum QoS=0
2521 Subscribed topic name Filter topic subscribed with
maximum QoS=1
2522 Subscribed topic name Filter topic subscribed with
maximum QoS=2
3488 Publish received topic name PUBLISH received with DUP=0
and Retain=0 and Payload
3489 Publish received topic name PUBLISH received with DUP=0
and Retain=1 and Payload
3490 Publish received topic name PUBLISH received with DUP=1
and Retain=0 and Payload
3491 Publish received topic name PUBLISH received with DUP=1
and Retain=1 and Payload
3492 Publish received topic name PUBLISH received with DUP=0
and Retain=0 and NO payload
3493 Publish received topic name PUBLISH received with DUP=0
and Retain=1 and NO payload
3494 Publish received topic name PUBLISH received with DUP=1
and Retain=0 and NO payload
3495 Publish received topic name PUBLISH received with DUP=1
and Retain=1 and NO payload
3520 Publish topic name Publish acknowledged
4500 Filter topic subscribe not accepted

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 312 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

11.17 Examples of how to Configure and Use Internet Service Profiles

Below you can find selective examples of how to configure and use Internet service profiles. To visualize the dif-
ference between URC mode and polling mode the operation of services (after opening with AT^SISO) is
explained in separate examples for either mode.

11.17.1 Selecting URC Mode or Polling Mode

To enable or disable the presentation of URCs for the Internet services use the AT^SCFG command, type "TcpIp/
WithURCs" and select "on" or "off" for parameter <tcpWithUrc>.

at^scfg=tcp/withurcs Query the current setting.

^SCFG: "Tcp/WithURCs","on" URC mode is enabled (delivery default).
OK
at^scfg=tcp/withurcs,off Select polling mode (by switching off URC mode).
^SCFG: "Tcp/WithURCs","off" Polling mode is accepted.
OK

11.17.2 Configuring an Internet Connection Profile

AT+COPS? Checking network registration.

+COPS: 0,0,"E-Plus",0 ME is registered to German provider E-Plus.
OK
AT+CGATT=1 Attaching to GPRS network (optional).
OK
AT+CGDCONT=1,"IP","internet.eplus.de" Specifying PDP context 1 with APN for E-Plus.
OK
AT^SICS=1,"dns1","198.023.097.002" Specifiying primary DNS address (optional).
OK
AT^SICS=1,"dns2","212.023.097.003" Specifiying secondary DNS address (optional).
OK
AT^SICA=1,1 Activating PDP context 1.
OK
AT+CGPADDR=1 Requesting dynamic IP address assigned to local cli-
ent for context 1.
+CGPADDR: 1,"10.129.137.217" Response returns currently assigned IP address.
OK

11.17.3 Configuring Non-Transparent Listener

Keep in mind that if the host is configured as Non-Transparent Listener another service profile must be left free
to be dynamically assigned as Server when the Non-Transparent Listener receives a connection request from a
remote client.

Configure the service profile 4 for use as Non-Transparent Listener:

AT^SISS=4,srvType,"Socket" Select service type Socket.

OK
AT^SISS=4,conId,"1" Select connection profile.
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 313 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

AT^SISS=4,address,"socktcp://lis- The host specifies its local port 65534 to be used for
tener:65534" the Socket listener service. The local IP address will
be dynamically assigned when the service is opened
with AT^SISO.
OK
Open the Listener service and query the IP address dynamically assigned to the Listener:

AT^SISO=4 Open the Listener service.

OK
AT^SISO? Query the current status of services. All service pro-
^SISO: 0,"" files are unused, except for service profile 4 which is
^SISO: 1,"" running in listener mode, where <srvState>=3 (lis-
tening) and <socketState>=3 (LISTENER). The
response also indicates the IP address dynamically
assigned to the listener.
^SISO: 2,""
^SISO: 3,""
^SISO: 4,"Socket",3,3,0,0,"10.10.0.187:65534","0.0.0.0:0"
^SISO: 6,""
^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK

11.17.4 Configuring TCP Client for Calling a TCP Listener

Configure the client's service profile for calling a TCP Listener on another host:

AT^SISS=1,srvType,"Socket" Select service type Socket.

OK
AT^SISS=1,conId,"1" Select connection profile.
OK
AT^SISS=1,address,"socktcp:// Add the IP address and the TCP port of the remote
10.10.0.187:65534" host (from example in Section 11.17.3, Configuring
Non-Transparent Listener.
OK

11.17.5 Transparent TCP Listener: Accepting / Rejecting Incoming

Remote Client
Host 1: Configure Transparent TCP Listener with Autoconnect disabled:

AT^SISS=1,"srvType","Socket" Select service type Socket.

OK
AT^SISS=1,conId,"1" Select connection profile.
OK
AT^SISS=1,"address","socktcp://lis- "etx" configures Transparent mode. Autoconnect
tener:2000;etx=26;autoconnect=0" disabled.
OK
AT^SISS=1,"tcpMR","3"
OK
AT^SISS=1,"tcpOT","5555"
OK
Host 1: Open Transparent TCP Listener and query IP address dynamically assigned to Listener:

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 314 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

AT^SISO=1
OK
^SIS: 1,5 Listener ready, listening (value 5).
AT^SISO=1,1 Query status of profile 1.
^SISO: Profile is running in listener mode, where
1,"Socket",4,3,0,0,"10.10.0.187:65534","0.0 <srvState>=4 (listening) and <socketState>=3
.0.0:0" (LISTENER). Dynamic IP address is shown.

OK
Host 2: Configure TCP Client:

AT^SISS=0,srvType,"Socket" Select service type Socket.

OK
AT^SISS=0,conId,"1" Select connection profile.
OK
AT^SISS=0,"address","socktcp:// Set Listener's IP address.
"10.10.0.187:65534"
OK
AT^SISS=0,"tcpMR","3"
OK
AT^SISS=0,"tcpOT","5555"
OK
Host 2: Start TCP Client

AT^SISO=0
OK
^SISW: 0,1 URC indicates that sending data is possible.
Host 1: Listener rejects incoming connection request from host 2:

^SIS: 1,3,0,"10.66.90.165:46723" URC indicates incoming connection request.

AT^SISH=1 Listener rejects connection request.
OK
AT^SISO=1,1 Query status of profile 1.
1,"Socket",4,3,0,0,"10.10.0.187:65534","0.0 Listener is listening again.
.0.0:0"
OK
Host 1: Listener accepts incoming connection request from host 2:

^SIS: 1,3,0,"10.66.90.165:46723" URC indicates incoming connection request.

AT^SISO=1 Listener accepts connection request, profile
changes to Server mode.
OK
^SISW: 1,1 URC indicates that data transmission is possible.
AT^SISO=1,1 Query status of profile 1.
1,"Socket",8,4,0,0,"10.10.0.187:65534","10. Service connected (value 8) and in Server mode /
66.90.165:46723",0 value 4).
OK
AT^SIST=0 Change to transparent access mode.
CONNECT Service enters transparent access mode.
Hello .... For further handling see examples below, e.g. Sec-
tion 11.17.11, Opening and Closing Transparent
TCP Service, Section 11.17.12, Transparent TCP
Client Receives Data While in AT Command Mode

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 315 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

11.17.6 Transparent TCP Listener: Autoanswering Incoming Remote

Client
Host 1: Configure Transparent TCP Listener with Autoconnect enabled.

AT^SISS=1,"srvType","Socket" Select service type Socket.

OK
AT^SISS=1,conId,"1" Select connection profile.
OK
AT^SISS=1,"address","socktcp://lis- "etx" configures Transparent mode. Autoconnect
tener:2000;etx=26;autoconnect=1" enabled.
OK
AT^SISS=1,"tcpMR","3"
OK
AT^SISS=1,"tcpOT","5555"
OK
Host 1: Open Transparent TCP Listener and query IP address dynamically assigned to Listener:

AT^SISO=1
OK
^SIS: 1,5 Listener ready, listening (value 5).
AT^SISO=1,1 Query status of Listener profile.
^SISO: Listener ready, listening (value 4). Dynamic IP
1,"Socket",4,3,0,0,"10.10.0.187:2000","0.0. address is shown.
0.0:0"
OK
^SISW: 1,1
Host 2: Configure TCP Client.

AT^SISS=0,srvType,"Socket" Select service type Socket.

OK
AT^SISS=0,conId,"1" Select connection profile.
OK
AT^SISS=0,"address","socktcp:// Set Listener's IP address.
10.10.0.187:2000"
OK
AT^SISS=0,"tcpMR","3"
OK
AT^SISS=0,"tcpOT","5555"
OK
Host 2: Start TCP Client

AT^SISO=0
OK
^SISW: 0,1
Host 1: Transparent TCP Listener automatically accepts connection request from host 2:

^SIS: 1,3,1,"10.66.90.165:46723" URC indicates incoming connection request.

CONNECT Service autoconnects to client and enters Transpar-
ent Mode.
Hello .... For further handling see examples below, e.g. Sec-
tion 11.17.11, Opening and Closing Transparent
TCP Service, Section 11.17.12, Transparent TCP
Client Receives Data While in AT Command Mode
Type +++ to return to AT command mode (+++ not
visible in example).
OK
AT^SISO=1,1 Query status of profile 1.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 316 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

^SISO: Transparent TCP Listener connected to client (value

1,"Socket",8,4,0,0,"10.10.0.187:2000","10.6 8) and in Server mode (value 4).
6.90.165:46723",0
OK

11.17.7 Socket Client Sends Data via TCP Connection (Polling Mode)
The example uses service profile 0 configured for Socket service and TCP.

AT^SISO=0 The host opens service profile 0.

OK Note: URC ^SISW:0,1 does not appear! The host
must poll the service state by means of AT^SISI until
the service is in <srvState> "Up".
AT^SISI=0
^SISI: 0,3,0,0,0,0 The service is still in <srvState> "Connecting".
OK
AT^SISI=0
^SISI: 0,4,0,0,0,0 The service is now in <srvState> "Up" and is
ready to accept data.
OK
AT^SISW=0,10 The host requests to write 10 bytes.
^SISW: 0,10,10 Response that 10 bytes can be sent and are unac-
knowledged.
0123456789
OK
AT^SISW=0,10,1 The host requests to write next 10 bytes and enables
the <eodFlag>.
^SISW: 0,0,10 But the service refuses the request, even the end-of-
data flag remains without effect.
OK
AT^SISW=0,10,1 Next try (polling).
^SISW: 0,10,20 Response that the service accepts 10 bytes and this
data and the previously sent data are unacknowl-
edged.
0123456789
OK
AT^SISW=0,0,0 Polling to request unacknowledged data.
^SISW: 0,0,10 There are 10 bytes still unacknowledged.
OK
AT^SISI=0 Polling for <srvState> change ("Closing" ->
"Down").
^SISI: 0,5,0,20,10,10 20 bytes are transfered via serial interface, 10 bytes
are acknowledged by remote peer, 10 bytes are on
the way.
OK
AT^SISI=0 Polling for <srvState> change ("Closing" ->
"Down").
^SISI: 0,6,0,20,20,0 The Service is in state "Down" and all data is con-
firmed by the remote peer.
OK
AT^SISC=0 Closing the Socket service.
OK

11.17.8 Socket Client Sends Data via TCP Connection with URCs
The example uses service profile 0 configured for Socket service and TCP.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 317 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

AT^SISO=0 The host opens service profile 0.

OK
^SISW: 0,1 Socket service is ready for upload.
AT^SISW=0,10 The host requests to write 10 bytes.
^SISW: 0,10,10 Response that 10 bytes can be sent and are unac-
knowledged.
0123456789
OK
^SISW: 0,1 The URC indicates that the Socket service is ready
to transfer more data. Data of the last AT^SISW
command are transferred to the remote host.
AT^SISW=0,10,1 The host requests to write next 10 bytes and enables
the <eodFlag> to notify that these are the last 10
bytes of the session.
^SISW: 0,10,20 Response that the service accepts 10 bytes and this
data and the previously sent data are unacknowl-
edged.
0123456789
OK
------ Waiting for URC.
^SISW: 0,2 Data transfer has been finished.
AT^SISC=0 Closing the Socket service.
OK

11.17.9 UDP Scenario

The following example shows a communication between a UDP endpoint (host 1) and a UDP client (host 2).
Part 1 of the example refers to the UDP endpoint and shows the configuration which allows the UDP endpoint to
communicate with any UDP client.
Part 2 shows the settings of a UDP client.
Part 3 and 4 are running in parallel: Part 3 shows the procedures on the UDP endpoint side done when commu-
nicating with a UDP client. Part 4 shows the equivalent steps done by the UDP client when communicating with
the UDP endpoint.

Part 1 - host 1 is configured for use as UDP endpoint:

AT^SISS=0,srvtype,socket Select service type Socket.

OK
AT^SISS=0,conid,1 Select connection profile 1.
OK
AT^SISS=0,alphabet,1 Choose ASCII alphabet.
OK
AT^SISS=0,address,"sockudp://:6666" Specify the local UDP port.
OK

Part 2 - host 2 is configured for use as UDP client:

AT^SISS=1,srvtype,socket Select service type Socket.

OK
AT^SISS=1,conid,1 Select connection profile 1.
OK
AT^SISS=1,alphabet,1 Choose ASCII alphabet.
OK
AT^SISS=1,address,"sockudp:// Specify the address of host 1.
10.10.0.219:6666"
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 318 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

Part 3 - host 1 opens the service and communicates with host 2:

AT^SISO=0 Open the service.

OK
^SIS: 0,5 URC indicates that host 1 is waiting (on UDP port
6666).
AT^SISO=0,1
^SISO: Request connection status.
0,"Socket",4,3,0,0,"10.10.0.219:6666","0.0.
0.0:0"
OK
^SISR: 0,1 URC indicates that host 2 has opened the connec-
tion to host 1 and has sent some data.
AT^SISR=0,100 Host 1 requests to read 100 bytes.
OK
^SISR: 0,22,"10.10.0.222:6561" Host 1 is reading the text string received from host 2
Hello, I'm the client! (see part 4 of the example) and gets information
about the remote client, i.e. the address of host 2.
OK
AT^SISW=0,25,0,"10.10.0.222:6561" Host 1 starts sending 25 bytes to host 2.
^SISW: 0,25,0 Host 1 is sending the message "Hi, I'm the UDP end-
point!" (25 bytes) to host 2. As a result, host 2 is
receiving the URC "^SISR: 1,1" shown below in part
4 of the example.
OK
^SISW: 0,1 URC confirms that host 1 can send data again.
AT^SISC=0 Close the service.
OK

Part 4 - host 2 opens the service and communicates with host 1:

AT^SISO=1 Open the service.

OK
^SISW: 1,1 URC indicates that host 2 can send data.
AT^SISO=1,1
^SISO: Request connection status.
1,"Socket",4,2,0,0,"10.10.0.222:6561","10.1
0.0.219:6666"
OK
AT^SISW=1,22 Host 2 starts to write 22 bytes.
^SISW: 1,22,0 Host 2 is writing the message "Hello, I'm the client!"
(22 bytes). As a result, host 1 is receiving the URC
"^SISR: 0,1" shown above in part 3 of this example.
OK
^SISW: 1,1 URC confirms that host 2 could send data.
^SISR: 1,1 URC indicates that host 2 has received data from
host 1.
AT^SISR=1,100 Host 2 requests to read 100 bytes.
^SISR: 1,25 Response indicates that host 2 has received 25
Hi, I'm the UDP endpoint! characters from host 1.
OK
AT^SISC=1 Close the service.
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 319 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

11.17.10 Creating Transparent TCP Socket Client

AT^SISS=1,srvType,"Socket" Select service type "Socket".

OK
AT^SISS=1,conId,1 Select connection profile 1.
OK
AT^SISS=1,address,"socktcp:// Specify server address. Add "etx" parameter to set
10.10.0.110:9996;etx;timer=200" Transparent mode.
OK

11.17.11 Opening and Closing Transparent TCP Service

AT^SISO=1 Open Transparent TCP service.

OK
^SISW: 1,1 URC indicates that Transparent TCP service is
ready.
at^sist=1 Open transparent access mode.
CONNECT Service is ready to send or receive data.
Client is sending data, e.g Good Morning (not visible
in example).
Client types +++ to return to AT command mode
(+++ not visible in example).
OK
at^sisi=1 Check the service state of service profile 1.
^SISI: 1,4,0,16,16,0 Service is in state "Up" (4). 0 bytes received, 16
bytes sent and acknowledged.
OK
AT^SISO? Check the service state of service profile 1.
^SISO: 0,""
^SISO: Service is in state "Up" (4). Socket is assigned. 0
1,"Socket",4,2,0,16,"10.10.0.200:1024","10. bytes received, 16 bytes sent. Local and remote IP
10.0.108:65532" address are assigned.
^SISO: 2,""
^SISO: 3,""
^SISO: 4,""
^SISO: 5,""
^SISO: 6,""
^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK
AT^SISC=1 Close the service.
OK
at^sisi=1 Check the service state of service profile 1.
^SISI: 1,2,0,0,0,0 Service profile 1 is in state "Allocated" (2).
OK
AT^SISO? Check the service state of service profile 1.
^SISO: 0,""
^SISO: Service is in state "Allocated" (2). Socket not
1,"Socket",2,1,0,0,"0.0.0.0:0","0.0.0.0:0" assigned.
^SISO: 2,""
^SISO: 3,""
^SISO: 4,""
^SISO: 5,""
^SISO: 6,""

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 320 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK

11.17.12 Transparent TCP Client Receives Data While in AT Command

Mode

AT^SISO=1 Open Transparent TCP service.

OK
^SISW: 1,1 URC indicates that Transparent TCP service is
ready.
at^sist=1 Open transparent access mode.
CONNECT Service is ready to send or receive data.
Hello Client is reading received data.
Client types +++ to return to AT command mode
(+++ not visible in example).
OK
^SISR: 1,1 URC indicates that new data is available for the cli-
ent.
at^sist=1 Return to transparent access mode.
CONNECT Service is ready to send or receive data.
Goodbye Client is reading received data.
Client types +++ to return to AT command mode (not
visible in example).
OK
at^sisi=1 Check the service state of service profile 1.
^SISI: 1,4,12,6,6,0 Service is in state "Up" (4). 12 bytes received, 6
bytes sent and acknowledged.
OK
AT^SISO? Check the service state of service profile 1.
^SISO: 0,""
^SISO: Service is in state "Up" (4). Socket is assigned. 12
1,"Socket",4,2,12,6,"10.10.0.200:1025","10. bytes received, 6 bytes sent. Local and remote IP
10.0.108:65532" address are assigned.
^SISO: 2,""
^SISO: 3,""
^SISO: 4,""
^SISO: 5,""
^SISO: 6,""
^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK
AT^SISC=1 Close the service.
OK
at^sisi=1 Check the service state of service profile 1.
^SISI: 1,2,0,0,0,0 Service profile 1 is in state "Allocated" (2).
OK
AT^SISO? Check the service state of service profile 1.
^SISO: 0,""
^SISO: Service is in state "Allocated" (2). Socket not
1,"Socket",2,1,0,0,"0.0.0.0:0","0.0.0.0:0" assigned.
^SISO: 2,""
^SISO: 3,""

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 321 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

^SISO: 4,""
^SISO: 5,""
^SISO: 6,""
^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK

11.17.13 Remote Server Disconnects While Transparent TCP Service is

in Transparent Access Mode

AT^SISO=1 Open Transparent TCP service.

OK
^SISW: 1,1 URC indicates that Transparent TCP service is
ready.
at^sist=1 Open transparent access mode.
CONNECT Service is ready to send or receive data.
Good Morning Remote server has sent data and disconnected. Cli-
NO CARRIER ent reads data. Then client gets NO CARRIER in AT
command mode.
at^sisi=1 Check the service state of service profile 1.
^SISI: 1,6,12,0,0,0 Service is in state "Down" (6). 12 bytes received.
OK
AT^SISO? Check the service state of service profile 1.
^SISO: 0,""
^SISO: Service is in state "Down" (6). Socket is assigned. 6
1,"Socket",6,2,12,0,"10.10.0.200:1026","10. bytes received. 12 bytes sent. Local and remote IP
10.0.108:65532" address are assigned.
^SISO: 2,""
^SISO: 3,""
^SISO: 4,""
^SISO: 5,""
^SISO: 6,""
^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK
AT^SISC=1 Close the service.
OK
at^sisi=1 Check the service state of service profile 1.
^SISI: 1,2,0,0,0,0 Service profile 1 is in state "Allocated" (2).
OK

11.17.14 Server Disconnects While Transparent TCP Service is in AT

Command Mode and Data is Pending

AT^SISO=1 Open Transparent TCP service.

OK
^SISW: 1,1 URC indicates that Transparent TCP service is
ready.
at^sist=1 Open transparent access mode.
CONNECT Service is ready to send or receive data.
Good Morning Client is reading data.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 322 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

Client types +++ to return to AT command mode (not

visible in example).
OK
^SISR: 1,1 Remote server has sent data and closed the connec-
tion (not visualized in this example). URC indicates
that remaining data is available for reading.
at^sisi=1 Check service state of service profile 1.
OK
^SISI: 1,4,12,3,3,0 Service profile 1 is in state "Up" (4). 12 bytes
received. 3 bytes sent and acknowledged.
OK
AT^SISO? Check the service state of service profile 1.
^SISO: 0,""
^SISO: Service is in state "Up" (4). Socket is assigned. 12
1,"Socket",4,2,12,3,"10.10.0.200:1027","10. bytes received. 3 bytes sent. Local and remote IP
10.0.108:65532" address are assigned.
^SISO: 2,""
^SISO: 3,""
^SISO: 4,""
^SISO: 5,""
^SISO: 6,""
^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK
at^sist=1 Return to transparent access mode.
CONNECT Service is ready to send or receive data.
Good bye Client reads remaining data. Then client gets NO
NO CARRIER CARRIER in AT command mode.
at^sisi? Check service state of service profile 1.
^SISI: 1,6,20,3,3,0 Service is in service "Down" state (6). 20 bytes
received. 3 bytes sent and acknowledged.
OK
AT^SISO? Check the service state of service profile 1.
^SISO: 0,""
^SISO: Service is in state "Down" (6). Socket is assigned. 20
1,"Socket,20,3,"10.10.0.200:1027","10.10.0. bytes received. 3 bytes sent. Local and remote IP
108:65532" address are assigned.
^SISO: 2,""
^SISO: 3,""
^SISO: 4,""
^SISO: 5,""
^SISO: 6,""
^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK
AT^SISC=1 Close the service.
OK
at^sisi=1 Check service state of service profile 1.
^SISI: 1,2,0,0,0,0 Service profile 1 is in state "Allocated" (2).
OK
AT^SISO? Check the service state of service profile 1.
^SISO: 0,""
^SISO: Service is in state "Allocated" (2). Socket is not
1,"Socket",2,1,0,0,"0.0.0.0:0","0.0.0.0:0" assigned. Local and remote IP address not
assigned.
^SISO: 2,""

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 323 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

^SISO: 3,""
^SISO: 4,""
^SISO: 5,""
^SISO: 6,""
^SISO: 7,""
^SISO: 8,""
^SISO: 9,""
OK

11.17.15 FTP Download to FFS (URC Mode)

Configure the service profile 1 for FTP:

AT^SISS=1,srvType,"Ftp" Select service type FTP.

OK
AT^SISS=1,conId,"1" Select connection profile 1.
OK
AT^SISS=1,address,"ftp://ftp.heise.de/pub" Specify FTP address.
OK
AT^SISS=1,cmd,"fget" Select command type download.
OK
AT^SISS=1,user,"anonymous"
OK
AT^SISS=1,passwd,"[email protected]"
OK
AT^SISS=1,path,"file:///a:/data/" Specify target path on local FFS.
OK
AT^SISS=1,files,"INDEX" Specify file to be downloaded.
OK
Make an FTP connection:

AT^SISO=1 Open the service.

OK Bearer is established, service is getting started.
^SIS: 1,0,2100,"Ftp open(ftp.heise.de:21)" "^SIS" URC with <urcInfoId> 2100 (FTP) indi-
cates download status.
^SIS: 1,0,2100,"220 Hallo auf ftp.heise.de."
^SIS: 1,0,2100,"FTP Login OK"
^SIS: 1,0,2100,"fget INDEX"
^SIS: 1,0,2100,"FGET : INDEX 225 bytes"
^SISR: 1,2 Download complete.
AT^SISO? Request service state.
^SISO:
1,"Ftp",4,1,225,0,"37.80.21.126:4113","193.
99.144.79:21"
AT^SISC=1 Close the service.
OK
AT^SISO? Request service state.
^SISO: Service is closed and reset.
1,"Ftp",2,1,0,0,"0.0.0.0:0","0.0.0.0:0"

11.17.16 FTP Upload Single File (URC Mode)

Configure the service profile 2 for FTP:

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 324 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

AT^SISS=2,"srvType","Ftp" Select service type FTP.

OK
AT^SISS=2,conId,"1" Select connection profile 1.
OK
AT^SISS=2,"address","ftp:// Specify FTP address with individual user name and
myname:mypasswd@testnetwork/upload" password.
OK
AT^SISS=2,"cmd","put" Select command type upload for single file.
OK
AT^SISS=2,"files","newdata.txt" File "newdata.txt" shall be put on FFTP server.
OK
Make an FTP connection:

AT^SISO=2 Open the service.

OK Bearer is established, service is getting started.
^SIS: 2,0,2100,"Ftp open(testnetwork:21)" "^SIS" URC with <urcInfoId> 2100 (FTP) status
information from FTP server.
^SIS: 2,0,2100,"220 FTP server (Version 6.4/OpenBSD/Linux-ftpd-0.17) ready."

^SIS: 2,0,2100,"FTP Login OK"

^SIS: 2,0,2100,"put newdata.txt"
^SISW: 2,1 URC indicates that FTP service is ready for upload.
AT^SISW=2,40 Client requests to send 40 bytes.
^SISW: 2,40,0 The write command response confirms that 40 bytes
must be transferred now.
01234567890123456789012345678901234567890 User data is transferred.
OK
^SISW: 2,1 URC indicates that the FTP service is ready to trans-
fer more data.
AT^SISW=2,40 Client requests to send 40 bytes.
^SISW: 2,40,0 The write command response confirms that 40 bytes
must be transferred now.
01234567890123456789012345678901234567890 User data is transferred.
OK
^SISW: 2,1 URC indicates that the FTP service is ready to trans-
fer more data.
AT^SISW=2,0,1 No more data available. <eodFlag> set. File "new-
^SISW: 2,0,0 data.txt" shall be closed on FTP server.

OK
^SIS: 2,0,2100,"226 Transfer complete."
^SISW: 2,2 URC indicates that data transfer finished success-
fully. Connection to the FTP server closes.
AT^SISC=2 Close the FTP service.
OK

11.17.17 HTTP Download Using TLS

Configure the service profile 4 for HTTPS:

AT^SISS=4,srvType,"Http" Select service type HTTP.

OK
AT^SISS=4,conId,"1" Select connection profile 1.
OK
AT^SISS=4,address,"https://www.face- Specify access to Facebook website (always
book.com" secured).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 325 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

OK
AT^SISS=4,cmd,"get" Select command type download.
OK
Opening connection:

AT^SISO=4 Open the service.

OK
^SISS: 4,0,2200,"Http www.facebook.com:443"

^SISR: 4,1 URC indicates that the HTTP service is ready to read
data.
AT^SISR=4,1000 Read 1000 bytes.
^SISR: 4,1000
<?xml version="1.0" encoding="utf-8"?> <!DOCTYPE html PUBLIC "-//WAPFORUM//DTD XHTML
Mobile 1.0//EN" "http://www.wapforum.org

OK
AT^SISR=4,1000 Repeat reading data n times.
^SISR: 4,1000
....
^SISR: 4,2 URC indicates that data transfer finished success-
fully. Connection to the HTTP server closes.
AT^SISC=4 Close the HTTP service.
OK

11.17.18 HTTP Post

Configure the service profile 6 for HTTP:

AT^SISS=6,srvType,"Http" Select service type HTTP.

OK
AT^SISS=6,conId,"1" Select connection profile 1.
OK
AT^SISS=6,"address","http://testnetwork/ Specify URL.
cgi/first.pl"
OK
AT^SISS=6,"user","myuser" Specify user name.
OK
AT^SISS=6,"passwd","mypasswd" Specify password.
OK
AT^SISS=6,cmd,"post" Select command type download.
OK
AT^SISS=6,"hcContent"," " Parameter is ignored.
OK
AT^SISS=6,"hcContLen","60" "hcContlen" specifies to send 60 bytes. Data will be
sent from AT command interface.
OK
Opening connection:

AT^SISO=6 Open the service.

OK
^SIS: 6,0,2200,"Http pegasus.testnetz.sw5:80"

^SISW: 6,1 URC indicates that the HTTP service is ready to

send data.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 326 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

AT^SISW=6,30 Send 30 bytes.

^SISW: 6,30,0
OK
^SISW: 6,1 URC indicates that the HTTP service is ready to
send data.
AT^SISW=6,30 Send 30 bytes.
^SISW: 6,30,0
OK
^SISW: 6,1 URC indicates that the HTTP service is ready to
send data.
^SISW: 6,2 URC confirms: all data sent to server.
^SIS: 6,0,2200,"HTTP POST: http://testnetwork/cgi/first.pl"

^SIS: 6,0,2200,"HTTP POST Response: 200"

AT^SISC=6 Close the HTTP service.
OK

11.17.19 Ping
This example shows a Ping output. The example uses the Internet connection profile shown in Section 11.17.2.

AT^SISX=Ping,1,"74.125.39.99",5,5000
^SISX: "Ping",1,1,"74.125.39.99",1696
^SISX: "Ping",1,1,"74.125.39.99",175
^SISX: "Ping",1,1,"74.125.39.99",174
^SISX: "Ping",1,1,"74.125.39.99",174
^SISX: "Ping",1,1,"74.125.39.99",2111
^SISX: "Ping",2,1,5,5,0,0
^SISX: "Ping",3,1,174,2111,865
OK

11.17.20 Resolving DNS Host Name to IP Address

This example uses the Internet connection profile shown in Section 11.17.2.

AT^SISX=HostByName,1,"www.google.de"
^SISX: "HostByName","74.125.39.99"
OK

11.17.21 Configuring MQTT Client

This example configures the service profile 1 for use as MQTT client.

AT^SICA=0,1 Deactivate Context 1

OK
AT^SISS=1,srvType,"Mqtt" Select Service Type
OK
AT^SISS=1,conId,"1" Select connection profile
OK
AT^SISS=1,address,"mqtt://bro- Add the IP address and Port of the MQTT broker
ker.hivemq.com:1883;connackTimeout=30"
OK
AT^SISS=1,clientId,"004401083574984" Set Client ID (e.g. IMEI)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 327 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

OK
AT^SISS=1,cleanSession,"1" Broker does not any subscription information or
undelivered messages for the client
OK
AT^SISS=1,ipVer,"4" Select IP Version
OK
AT^SISS=1,cmd,"unsubscribe" Select MQTT command
OK
AT^SISS=1,TopicFilter,"MQTTDemoListener" Select Topic Filter
OK
AT^SICA=1,1 Activate Context 1
OK
AT^SISO=1,2 Open Service Profile 1 with use of dynamic setup
defined by AT^SISD
OK
^SIS: 1,0,8800,"Mqtt connect Connected to MQTT Broker
18.196.16.204:1883"
^SIS: 1,0,2500,"Connection accepted on clean Connection accepted on clean session
session."
^SIS: 1,0,2510,"MQTTDemoListener" Unsubscribed request acknowledged

11.17.22 MQTT Client: Publish and Subscribe

This example uses the Internet connection profile shown in Section 11.17.21.

Subscribe for TopicFilter "MQTTDemoListener":

AT^SISD=1,"cleanParam" Broker does not any subscription information or

undelivered messages for the client.
OK
AT^SISU=1,"subscribe","MQTTDemoListener;2" Subscribe for TopicFilter=MQTTDemoListener with
QoS=2
OK
^SIS: 1,0,2522,"MQTTDemoListener" Filter topic subscribed with maximum QoS=2
OK

Publish - Send Data for Topic "MQTTDemo":

AT^SISU=1,"publish","2:MQTTDemo:1:0:14" Publish with QoS=2, Topic=MQTTDemo, Retain=1,

hcContent=0, hcContLen=14 (Data will be sent by
AT^SISW)
OK
^SISW: 1,1 Service is ready to accept new user data
at^sisw=1,14 Sent 14 Bytes to Broker
^SISW: 1,14,0 Ready to write data
Hello World! 1 Write data
OK
^SIS: 1,0,3520,"MQTTDemo" Publish acknowledged
^SISW: 1,2 Data transfer has been finished successfully
AT^SISU=1,"publish","2:MQTTDemo:1:0:14" Publish with QoS=2, Topic=MQTTDemo, Retain=1,
hcContent=0, hcContLen=14 (Data will be sent by
AT^SISW)
OK
^SISW: 1,1 Service is ready to accept new user data
AT^SISW=1,14 Sent 14 Bytes to Broker
^SISW: 1,14,0 Ready to write data
Hello World! 2 Write data

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 328 of 564
11.17 Examples of how to Configure and Use Internet Service Profiles

OK
^SIS: 1,0,3520,"MQTTDemo" Publish acknowledged
^SISW: 1,2 Data transfer has been finished successfully

Receive Data for subscribed TopicFilter "MQTTDemoListener":

^SIS: 1,0,3488,"topic=MQTTDemoListener; Publish received from Broker

bytes=17"
^SISR: 1,1 Data available and can be read by AT^SISR
AT^SISR=1,1500 Request to read 1500 Bytes
^SISR: 1,17 17 Bytes are available
That's all folks! Data received from Broker
OK
^SISR: 1,2 All data read

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 329 of 564
12. Supplementary Service Commands

12. Supplementary Service Commands

The AT commands described in this chapter are related to Supplementary Services.

12.1 AT+CACM Accumulated call meter (ACM) reset or query

The AT+CACM read command returns the current ACM value.

The AT+CACM write command resets the Advice of Charge related to the accumulated call meter (ACM) value in
SIM file EF(ACM). ACM contains the total number of home units for both the current and preceding calls.

Syntax
Test Command

AT+CACM=?
Response(s)
OK
Read Command

AT+CACM?
Response(s)
+CACM: <acm>
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CACM=[<passwd>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<acm>(str)
Three bytes of the current ACM value in hexadecimal format (e.g. "00001E" indicates decimal value 30) 000000
- FFFFFF.

<passwd>(str)
SIM PIN2

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 330 of 564
12.2 AT+CAMM

12.2 AT+CAMM Accumulated call meter maximum (ACMmax) set or

query

The AT+CAMM read command returns the current ACMmax value.

The AT+CAMM write command sets the Advice of Charge related to the accumulated call meter maximum value
in SIM file EF (ACMmax). ACMmax contains the maximum number of home units allowed to be consumed by
the subscriber.

Syntax
Test Command

AT+CAMM=?
Response(s)
OK
Read Command

AT+CAMM?
Response(s)
+CAMM: <acmmax>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CAMM=<acmmax>[, <passwd>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<acmmax>(str)
Three bytes of the max. ACM value in hexadecimal format (e.g. "00001E" indicates decimal value 30) 000000
disable ACMmax feature 000001-FFFFFF.

<passwd>(str)
SIM PIN2

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 331 of 564
12.3 AT+CAOC

12.3 AT+CAOC Advice of Charge Information

AT+CAOC controls the Advice of Charge supplementary service function mode.

Syntax
Test Command

AT+CAOC=?
Response(s)
+CAOC: (list of supported<urcMode>s)
OK
Read Command

AT+CAOC?
Response(s)
+CAOC: <urcMode>
OK
Exec Command

AT+CAOC
Response(s)
If <urcMode>=0, UE returns the current <ccmValue> value:
+CAOC: <ccmValue>
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CAOC=[<urcMode>]
Response(s)
If <urcMode>=0, UE returns the current <ccmValue> value:
+CAOC: <ccmValue>
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Unsolicited Result Code

+CCCM: <ccmValue>
If activated a URC is sent everytime the CCM value changes, but not more often than every 10 seconds.

Parameter Description

<urcMode>(num)(&V)
0 Query current <ccmValue> value.
(P)
[1] Deactivate URC reporting of <ccmValue> value.
2 Activate URC reporting of <ccmValue> value.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 332 of 564
12.3 AT+CAOC

<ccmValue>(str)
Current value in hexadecimal format, e.g. "00001E" indicates decimal value 30). The three bytes are coded as
ACMmax value on the USIM; for details refer to 3GPP TS 11.11 [19], 3GPP TS 31.101 [20], 3GPP TS 31.102 [21].

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 333 of 564
12.4 AT+CCUG

12.4 AT+CCUG Closed User Group

The AT+CCUG write command serves to activate or deactivate the explicit CUG invocation, to set the desired
index, and to specify if Preferential Group or Outgoing Access shall be suppressed.

The AT+CCUG read command returns if the Explicit CUG invocation is activated (in parameter <n>), which CUG
<index> is chosen, and if Preferential Group or Outgoing Access is suppressed (in parameter <info>).

Syntax
Test Command
AT+CCUG=?
Response(s)
OK
Read Command
AT+CCUG?
Response(s)
+CCUG:<n>, <index>, <info>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CCUG=[[<n>][, <index>][, <info>]]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51],

3GPP TS 22.085 [35],
3GPP TS 24.085

Parameter Description

<n>(num)
Explicit CUG invocation options
0(P) Deactivate explicit CUG invocation
1 Activate explicit CUG invocation

<index>(num)
0(P)...9 Explicit selection of CUG index
10 No index (preferred CUG taken from subscriber data)

<info>(num)
State of the call
0(P) No information
1 Suppress outgoing access

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 334 of 564
12.4 AT+CCUG

2 Suppress preferential CUG

3 Suppress preferential CUG and Outgoing Access.

Notes
• The active settings for omitted parameters are retained without changes.
• Explicit CUG invocation means that at each call setup, CUG information is added to the called number.
• When starting a call with ATD, Parameter 'G' or 'g' of command ATD will have no effect if the option selected
for this single call is identical to the option already selected with AT+CCUG.
• ATZ or AT&F do not influence the current settings.
• Some combinations of parameters may lead to rejection of CUG calls by the network. For more information,
please consult 3GPP TS 24.085.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 335 of 564
12.5 AT+CCFC

12.5 AT+CCFC Call forwarding number and conditions control

AT+CCFC controls the call forwarding supplementary service. Registration, erasure, activation, deactivation and
status query are supported.

Syntax
Test Command
AT+CCFC=?
Response(s)
+CCFC:(list/range of supported <reason>s)
OK
Write Command
AT+CCFC=<reason>, <mode>[, [<number>][, [<type>][, [<class>][, [<sub-number>][, [<sub-type>][,
[<time>]]]]]]]
Response(s)
If <mode> is not equal 2 and command successful:
OK
If <mode>= 2, <reason> is not equal 2 and command successful:
+CCFC: <status>, <class>[, <number>, <type>, <sub-number>, <sub-type>]
OK
If <mode>= 2, <reason>= 2 and command successful:
+CCFC: <status>, <class>[, <number>, <type>, <sub-number>, <sub-type>, <time>]
OK
If error is related to UE functionality
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51],

3GPP TS 22.004 [28],
3GPP TS 22.082 [33],
3GPP TS 24.082

Parameter Description

<reason>(num)
Reason for call forwarding
0 Unconditional
1 Mobile busy
2 No reply
3 Not reachable
4 All call forwarding (includes reasons 0, 1, 2 and 3)
5 All conditional call forwarding (includes reasons 1, 2 and 3)

<mode>(num)
Network operation to be performed for Supplementary service "call forwarding"
0 Disable call forwarding (disable service)
1 Enable call forwarding (enable service)
2 Query status of call forwarding (query service status)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 336 of 564
12.5 AT+CCFC

3 Register <number> and activate call forwarding (register service)

4 Erase <number> and deactivate call forwarding (erase service)

<number>(str)
String type phone number of forwarding address in format specified by <type>. If you select <mode>= 3, the
phone <number> will be registered in the network. This allows you to disable / enable CF to the same destination
without the need to enter the phone number once again. Depending on the services offered by the provider the
registration may be mandatory before CF can be used. The number remains registered in the network until you
register another number or erase it using <mode> = 4. Default is an empty number.

<type>(num)
Type of address octet
145 Dialing string <number> includes international access code character '+'
129 Otherwise
[0] May rejected by network

<class>(num)
Integer or sum of integers each representing a class of information, i.e. a bearer service, telecommunication ser-
vice or bearer service group as defined in 3GPP TS 22.004 [28].
0 Service unknown
Note: This value can be shown when <status>= 0.
1 Voice
2 Data
<class> 2 (data) comprises all those <class> values between 16 and 128, that
are supported both by the network and the MS. This means, a setting made for
<class> 2 applies to all remaining data classes (if supported). In addition, you
can assign a different setting to a specific class. For example, you can activate
call forwarding for all data classes, but deactivate it for a specific data class.
4 Fax (only for compatibility reasons, not supported by PLS63-W)
8 SMS
16 Data circuit sync
32 Data circuit async
64 Dedicated packet access
128 Dedicated PAD access
1...[7]...255 Combination of some of the above classes. For example, the default setting 7
represents the sum of the integers 1, 2 and 4 for voice, data and fax (fax only
for compatibilty reasons).

<sub-number>(str)
String type phone number of sub address in format specified by <type>. Default is an empty sub address.

<sub-type>(num)
Type of sub-address octet
145 International access code character '+'
[128] Otherwise

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 337 of 564
12.5 AT+CCFC

<time>(num)
5...[20]...30 Time to wait before call is forwarded, rounded to a multiple of 5 sec (only for
<reason>=no reply).
An operator defined default or the last known value may be used, depending
on the network operator.

<status>(num)
0 Call forwarding not active
Note: When <status>= 0 then ignore parameter <class>.
1 Call forwarding active

Notes
• For some networks, the interrogation command will return the same result for each requested class.
• You can register, disable, enable and erase <reason> 4 and 5 as described above. However, querying the
status of <reason> 4 and 5 with AT+CCFC will result in an error.
• Most networks will not permit registration of new parameters for conditional call forwarding (reasons 1,2,3,5)
while unconditional call forwarding is enabled.
• The AT+CCFC command offers a broad range of call forwarding options according to the 3GPP Technical
Specifications. However, when you attempt to set a call forwarding option which is not provisioned or not yet
subscribed to, the setting will not take effect regardless of the response returned. The responses in these
cases vary with the network (for example "OK", "Operation not allowed", "Operation not supported" etc.). To
make sure check the call forwarding status with <mode>=2.
• Some networks may choose to have certain call forwarding condtions permanently enabled (e.g. forwarding
to a mailbox if the mobile is not reachable). In this case, erasure or deactivation of call forwarding for these
conditions will not be successful, even if the CCFC request is answered with response "OK".
• The command has been implemented with the full set of <class> parameters according to 3GPP TS 27.007
[51]. For actual applicability of SS "call forwarding" to a specific service or service group (a specific <class>
value) please consult table A.1 of 3GPP TS 22.004 [28].
• There is currently no release of 3GPP TS 22.004 [28], in which the call forwarding supplementary service is
defined as applicable to SMS services.
• As stated above <class> 2 is intended only to send the data classes 16/32/64/128 to the network. However,
the responses returned when the subscriber sets or queries call forwarding refer only to the status of the data
classes received from the network. This means that the responses will display only those data classes
between 16 and 128 which are supported by the network and currently activated. There will be no output for
class 2, nor for classes which are not supported or not set.
• The parameter <class> will not be sent to the network if <mode>=2. Therefore it may happen that the
response of the query command contains information about classes which were not requested, or it shows
only the inactive status of the class 1 or 255, This means that the status is valid for all classes. The reponse
shows the status in the order of the network response.

Example
Please note that when you configure or query call forwarding without specifying any classes, the settings will
refer to classes 1, 2 and 4 only (= default).
• To register the destination number for unconditional call forwarding (CFU):
at+ccfc=0,3,"+493012345678",145
OK
The destination number will be registered for above default classes.
In most networks, the registration will also cause call forwarding to be activated for these <class> values.
• To query the status of CFU without specifying <class>:
at+ccfc=0,2
+CCFC: 1,1,"+493012345678",145

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 338 of 564
12.5 AT+CCFC

+CCFC: 1,4,"+493012345678",145
OK
• To erase the registered CFU destination number:
at+ccfc=0,4
OK
Now, when you check the status, no destination number will be indicated:

at+ccfc=0,2
+CCFC: 0,1
+CCFC: 0,4
OK
• To query the status of CFU for all classes:
at+ccfc=0,2,,,255
+CCFC: 0,255
OK
• <reason> 4 or 5 cannot be used to query the status of all call forwarding reasons (see also notes above):
at+ccfc=4,2
ERROR
at+ccfc=5,2
ERROR

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 339 of 564
12.6 AT+CCWA

12.6 AT+CCWA Call Waiting

The AT+CCWA write command controls the call waiting supplementary service according to 3GPP TS 22.083 [34].
Activation, deactivation and status query are supported. The read command returns the current value of <n>.

Syntax
Test Command
AT+CCWA=?
Response(s)
+CCWA:(list of supported <n>s)
OK
Read Command
AT+CCWA?
Response(s)
+CCWA:<n>
OK
Write Command
AT+CCWA=[<n>[, <mode>[, <class>]]]
Response(s)
If <mode> is not equal 2 and command successful:
OK
If <mode>= 2 and command successful :
+CCWA: <status>, <class>
[+CCWA: <status>, <class>]
[+CCWA: ...]
OK
If error is related to ME functionality
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51],

3GPP TS 22.004 [28],
3GPP TS 22.083 [34],
3GPP TS 24.083

Unsolicited Result Code

Indication of a call that is currently waiting and can be accepted.
+CCWA: <calling number>, <type of number>[, <class>][, , <CLI validity>]
If <n>=1 and the call waiting supplementary service is enabled in the network, URC "+CCWA" indicates a waiting
call to the TE. It appears while the waiting call is still ringing.

Parameter Description

<n>(num)
Switch URCs "+CCWA" for call waiting on/off
0 Disable display of URCs "+CCWA"
1 Enable display of URCs "+CCWA"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 340 of 564
12.6 AT+CCWA

<mode>(num)
Network operation to be performed for Supplementary service call waiting
0 Disable call waiting (disable service)
1 Enable call waiting (enable service)
2 Query status of call waiting (query service status)

<class>(num)
Integer or sum of integers each representing a class of information, i.e. a bearer service, telecommunication ser-
vice or bearer service group. as defined in 3GPP TS 22.083 [34] In the write command, parameter <class>
specifies the class of the active call during which an incoming call of any class is to be regarded as a waiting call.
In URC "+CCWA: <calling number>, <type of number>[, <class>][, , <CLI validity>]", parameter
<class> specifies the class of the waiting call.
1 Voice
2 Data
<class> 2 (data) comprises all those <class> values between 16 and 128, that
are supported both by the network and the MS. This means, a setting made for
<class> 2 applies to all remaining data classes (if supported). In addition, you
can assign a different setting to a specific class. For example, you can activate
call waiting for all data classes, but deactivate it for a specific data class.
4 Fax (only for compatibility reasons, not supported by PLS63-W)
8 SMS
16 Data circuit sync
32 Data circuit async
64 Dedicated packet access
128 Dedicated PAD access
1...[7]...255 Combination of some of the above classes. For example, the default setting 7
represents the sum of the integers 1, 2 and 4 for voice, data and fax (fax only
for compatibilty reasons). If the <class> parameter is omitted, the default value
7 is used.

<status>(num)
0 Call waiting service is not active
1 Call waiting service is active

<calling number>(str)
Phone number of waiting caller in the format specified by parameter <type of number>.

<type of number>(num)
Type of address octet in integer format (refer to 3GPP TS 24.008 [43], subclause 10.5.4.9)
128 Number restricted
145 <calling number> includes international access code character '+'
161 National number
129 Otherwise

<CLI validity>(num)
0 CLI valid

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 341 of 564
12.6 AT+CCWA

1 CLI has been withheld

2 CLI is not available

Notes
• With AT+CHLD, it is possible to establish a multiparty call or to set the active voice call on hold and then accept
a waiting voice call (not possible with data call).
• Users should be aware that if call waiting is activated (<mode>=1), the presentation of URCs needs to be
enabled, too (<n>=1).
Otherwise, on the one hand, a waiting caller would be kept waiting due to lack of BUSY signals, while, on the
other hand, the waiting call would not be indicated to the called party.
• AT+CCWA offers a broad range of options according to 3GPP Technical Specifications. However, when you
attempt to enable call waiting for a <class> for which the service is not provisioned or not supported , the
setting will not take effect regardless of the response returned. The responses in these cases vary with the
network (for example "OK", "Operation not allowed", "Operation not supported" etc.). To make sure check the
current call waiting settings with <mode>=2.
• AT+CCWA has been implemented with the full set of <class> parameters according to 3GPP TS 27.007 [51].
For actual applicability of SS call waiting to a specific service or service group (a specific <class> value)
please consult table A.1 of 3GPP TS 22.004 [28] .
• Despite the specifications stated in 3GPP TS 22.004 [28] call waiting is not handled uniformly among all net-
works:
3GPP TS 22.004 [28], Annex A, provides the following specification:
"The applicability of call waiting refers to the telecommunication service of the active call and not of the waiting
call. The incoming, waiting, call may be of any kind." Nevertheless, networks do differ on the actual imple-
mentation of the service. For example, the activation of call waiting for a data <class> causes some net-
works to send a call waiting indication if a call "of any kind" comes in during an active data call, but others
may (with the same settings active) indicate a waiting data call during any kind of active call. Thus, the only
reliable way to receive or prevent a call waiting indication under any circumstances and in any network, is to
activate or deactivate call waiting for all tele- and bearer services (<class> 255).
• As stated above <class> 2 is intended only to send the data classes 16/32/64/128 to the network. However,
the responses returned when the subscriber sets or queries call waiting refer only to the status of the data
classes received from the network. This means that the responses will display only those data classes
between 16 and 128 which are supported by the network and currently activated. There will be no output for
class 2, nor for classes which are not supported or not set.
• The parameter <class> will not be sent to the network if <mode>= 2. Therefore it may happen that the
response of the query command contains information about classes which were not requested or it shows
only the inactive status of the class 1 or 255. This means, that the status is valid for all classes.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 342 of 564
12.7 AT+CHLD

12.7 AT+CHLD Call Hold and Multiparty

The AT+CHLD command controls the Supplementary Services Call Hold and Multiparty. Calls can be put on hold,
recovered, released and added to a conversation.
Like for all Supplementary Services, the availability and detailed functionality of Call Hold and Multiparty services
depends on the configuration of the network. The PLS63-W can only request the service, but the network decides
whether and how the request will be answered.

Syntax
Test Command
AT+CHLD=?
Response(s)
+CHLD: (list of supported <n>s)
OK
Write Command
AT+CHLD=[<n>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<n>(num)
0 Release all held calls or set User Determined User Busy (UDUB) for a waiting
call:
• If a call is waiting, release the waiting call. The calling party will receive a
"BUSY" indication (Supplementary Service User Determined User Busy
"UDUB")
• Otherwise, terminate all held calls (if any).
1 Terminate all active calls (if any) and accept "the other call" as the active call:
• If a call is waiting, the waiting call will be accepted.
• Otherwise, if a held call is present, the held call becomes active.
1X Terminate a specific call X. The call may be active, held or waiting. The remote
party of the terminated call will receive a "NO CARRIER" indication.
Parameter X is the call number <idx> in the list of current calls indicated by
AT+CLCC. Instead of AT+CLCC, the AT^SLCC command with parameter <idx>
can be used.
[2] Place all active calls on hold (if any) and accept "the other call" as the active
call:
• If a call is waiting, the waiting call will be accepted.
• Otherwise, if a held call is present, the held call becomes active.
2X Place all active calls on hold except call X.
Parameter X is the call number <idx> in the list of current calls indicated by
AT+CLCC. Instead of AT+CLCC, the AT^SLCC command with parameter <idx>
can be used.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 343 of 564
12.7 AT+CHLD

3 Add a held call to the active calls in order to set up a conference (multiparty)
call.
4 Connect the two calls of a multiparty call and disconnects the subscriber from
both calls (ECT).

Notes
• The AT+CHLD command offers a broad range of options according to 3GPP Technical Specifications. How-
ever, if you attempt to invoke an option which is not provisioned by the network, or not subscribed to, invoca-
tion of this option will fail. The responses in these cases may vary with the network (for example "Operation
not allowed", "Operation not supported" etc.).
• The handling of the supplementary service Call hold and Multiparty varies with the types of calls. This is
because only voice calls can be put on hold, while data calls cannot. The following procedures apply: With
AT+CHLD=2 the user can simultaneously place a voice call on hold and accept another waiting voice or data
call. If the waiting call is a data call, it is also possible to put the voice call on hold. The user needs to wait for
the RING signal and manually answer the data call with ATA. To switch back from the active data call to the
held voice call the active call must be terminated with AT+CHLD=1. If all active and held calls are voice calls
it is possible to switch back and forth with AT+CHLD=2.
• In conflict situations, e.g. when a waiting call comes while there are already held calls, the above procedures
apply to the waiting call only. For example, <n>=0 rejects the waiting call, but does not affect the held calls.
• See also the AT+CCWA command for details on how to display waiting calls.
• The commands AT+CHLD=2x and AT+CHLD=4 are not supported by VoLTE.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 344 of 564
12.8 AT+CLIP

12.8 AT+CLIP Calling Line Identification Presentation

AT+CLIP refers to the supplementary service CLIP (Calling Line Identification Presentation) that enables a
called subscriber to get the calling line identity (CLI) of the calling party when receiving a mobile terminated call.
The AT+CLIP write command enables or disables the presentation of the CLI. It has no effect on the execution
of the supplementary service CLIP in the network.
The AT+CLIP read command gives the status of <clipUrcMode>, and also triggers an interrogation of the pro-
vision status of the CLIP service according to 3GPP TS 22.081 [32] (given in <clipStatus>).

Syntax
Test Command

AT+CLIP=?
Response(s)
+CLIP: (list of supported<clipUrcMode>s)
OK
ERROR
+CME ERROR: <err>
Read Command

AT+CLIP?
Response(s)
+CLIP: <clipUrcMode>, <clipStatus>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CLIP=<clipUrcMode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51],

3GPP TS 22.081 [32]

Unsolicited Result Code

+CLIP: <clipNumber>, <clipNumType>, , [, <clipAlpha>][, <CLI validity>]
If CLIP is enabled (and is permitted by the calling subscriber), this URC is delivered after every "RING" or
"+CRING" URC when a mobile terminated voice call occurs. For data calls the URC is delivered only once.

Parameter Description

<clipUrcMode>(num)(&V)(&W)
[0](&F) Suppress unsolicited result codes
1 Display unsolicited result codes

<clipStatus>(num)
0 CLIP not provisioned

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 345 of 564
12.8 AT+CLIP

1 CLIP provisioned
2 Unknown

<clipNumber>(str)
String type phone number of calling address in format specified by <clipNumType>.

<clipNumType>(num)
Type of address octet in integer format as received by the network. For further details see 3GPP TS 24.008 [43],
subclause 10.5.4.7.
Most common values are:
128 Number is restricted or unknown.
161 National <clipNumber>. Network support of this type is optional.
145 Dialing string <clipNumber> includes international access code character '+'.

<clipAlpha>(str)
String type alphanumeric representation of <clipNumber> corresponding to the entry found in phonebook;
used character set is the one selected with AT+CSCS.

<CLI validity>(num)
0 CLI valid
1 CLI has been withheld by the originator.
2 CLI is not available due to interworking problems or limitations of originating
network. <clipNumber> shall be an empty string ("") and <clipNumType>
value will not be significant.
When CLI is not available ( <CLI validity>=2), <clipNumber> shall be an plus string ("+") and <clipNum-
Type> value will be "145". Nevertheless, the UE returns value 128 for <clipNumType> if TON/NPI is unknown
in accordance with 3GPP TS 24.008 [43], subclause 10.5.4.7.
When CLI has been withheld by the originator, (<CLI validity>=1) and the CLIP is provisioned with the
"override category" option (refer to 3GPP TS 22.081 [32] and 3GPP TS 23.081), <clipNumber> and
<clipNumType> is provided. Otherwise, the UE returns the same setting for <clipNumber> and <clipNum-
Type> as if the CLI was not available.

Note
• For alphanumeric representation the number stored in the phonebook must be identical to the number trans-
ported via the network - then the associated name will be recognized.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 346 of 564
12.9 AT+CLIR

12.9 AT+CLIR Calling Line Identification Restriction

The AT+CLIR command refers to the supplementary service CLIR (Calling Line Identification Restriction).

Syntax
Test Command

AT+CLIR=?
Response(s)
+CLIR: (list of supported <n>s)
OK
Read Command

AT+CLIR?
Response(s)
+CLIR<n>, <m>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CLIR=<n>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<n>(num)
Parameter shows the settings for outgoing calls:
0(&F)(P) Presentation indicator is used according to the subscription of the CLIR service
1 CLIR invocation
2 CLIR suppression

<m>(num)
Parameter shows the subscriber CLIR service status in the network:
0 CLIR not provisioned
1 CLIR provisioned in permanent mode
2 Unknown (e.g. no network, etc.)
3 CLIR temporary mode presentation restricted
4 CLIR temporary mode presentation allowed

Note
• The settings made with AT+CLIR=1 or AT+CLIR=2 are used for all outgoing calls until the UE is switched off
or AT+CLIR=0 is used.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 347 of 564
12.10 AT+COLP

12.10 AT+COLP Connected Line Identification Presentation

This command refers to the supplementary service COLP (Connected Line Identification Presentation) that
enables a calling subscriber to get the connected line identity (COL) of the called party after setting up a mobile
originated voice call. The command enables or disables the presentation of the COL at the TE. It has no effect
on the execution of the supplementary service COLR in the network.

Syntax
Test Command

AT+COLP=?
Response(s)
+COLP:(list of supported <n>s)
OK
Read Command

AT+COLP?
Response(s)
+COLP: <n>, <m>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+COLP=[<n>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Unsolicited Result Code

Call response format:
+COLP: <number>, <type>[, <sub-number>][, <sub-type>][, <alpha>]

Parameter Description

<n>(num)
[0] Disable - suppress unsolicited result codes
1 Enable - display unsolicited result codes

<m>(num)
0 COLP not provisioned (no presentation)
1 COLP provisioned
2 Unknown

<number>(str)
String type phone number of connected address in format specified by <type>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 348 of 564
12.10 AT+COLP

<type>(num)
Type of address octet in integer format.
128 Number is restricted.
161 National <number>
145 Number string <number> includes international access code character '+'.
129 Otherwise

<sub-number>(str)
String type phone number of sub address in format specified by <sub-type>.

<sub-type>(num)
Type of sub-address octet
145 international access code character '+'
129 otherwise

<alpha>(str)
String type alphanumeric representation of <number> corresponding to the entry found in phonebook; used
character set is the one selected with AT+CSCS.

Note
• For alphanumeric representation the number stored in the phonebook must be identical to the number trans-
ported over the network - then the associated name will be recognized.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 349 of 564
12.11 AT+CPUC

12.11 AT+CPUC Price per unit and currency table

The AT+CPUC read command returns the current parameters of PUC.

The AT+CPUC write command sets the parameters of Advice of Charge related price per unit and currency table.
SIM PIN2 is usually required to set the parameters.

Syntax
Test Command

AT+CPUC=?
Response(s)
OK
Read Command

AT+CPUC?
Response(s)
+CPUC: <currency>, <ppu>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CPUC=<currency>, <ppu>[, <passwd>]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<currency>(str)(+CSCS)
Three-character currency code (e.g. "GBP", "EUR"). If the currency name is longer than three characters, all
characters will be cut off after the third position. Before they are written to the SIM Card, these characters are
converted to the standard GSM alphabet.

<ppu>(str)
Price per unit; dot is used as a decimal separator (e.g. "2.66"). The length is limited to 20 characters. If the string
length is exceeded, the command is terminated with an error. This string may only contain digits and a dot. Lead-
ing zeros are removed from the string. The minimum and maximum value are determined by the structure of the
SIM-PUCT file. The maximum price per unit value is 40950000000 (4095 x 10 exp 7). When successfully
entered, this value is rounded to maximum accuracy.
Note: Due to storage in mantisse (range 0-4095) and exponent (-7 to 7) it is possible that rounding errors occur.

<passwd>(str)
SIM PIN2. String parameter which can contain any combination of digits. The maximum string length is limited
to 8 digits. If this value is exceeded, the command terminates with an error message. If the PIN2 is incorrect, a
CME error (+CME ERROR: incorrect password) is output. Parameter may be ommitted only if SIM PIN2 was
correctly entered before.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 350 of 564
12.12 AT+CSSN

12.12 AT+CSSN Supplementary service notifications

Syntax
Test Command

AT+CSSN=?
Response(s)
+CSSN: (list of supported<n>s), (list of supported<m>s)
OK
Read Command

AT+CSSN?
Response(s)
+CSSN: <n>, <m>
OK
Write Command

AT+CSSN=[<n>[, <m>]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Unsolicited Result Codes

URC 1
+CSSI: <code 1>
When <n>=1 and a supplementary service notification is received after a mobile originated call setup, inter-
mediate result code "+CSSI: <code 1>" is sent to TE before any other MO call setup result codes

URC 2
+CSSU: <code 2>
When <m>=1 and a supplementary service notification is received during a mobile terminated call setup or
during a call, unsolicited result code "+CSSU: <code 2>" is sent to TE.

Command Description
The write command enables or disables the presentation of URCs for supplementary services.

Parameter Description

<n>(num)
0(&F)(P) Suppress "+CSSI" URCs
1 Activate "+CSSI" URCs

<m>(num)
0(&F)(P) Suppress "+CSSU" URCs
1 Activate "+CSSU" URCs

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 351 of 564
12.12 AT+CSSN

<code 1>(num)
0 Unconditional call forwarding is active
1 Some of the conditional call forwardings are active
2 Call has been forwarded
3 Waiting call is pending
5 Outgoing call is barred

<code 2>(num)
0 The incoming call is a forwarded call
2 Call has been put on hold (during a voice call)
3 Call has been retrieved (during a voice call)
5 Held call was terminated by other party
10 Additional incoming call forwarded

Note
• URCs will be displayed only if the call concerned is a voice call, but some URCs will be displayed as well as
for data calls (like "+CSSU"=0).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 352 of 564
12.13 AT+CUSD

12.13 AT+CUSD Unstructured Supplementary Service Data

AT+CUSD allows to control the handling of Unstructured Supplementary Service Data (USSD) according to 3GPP
TS 22.090 [37]. Both network and mobile initiated operations are supported. The interaction of this command
with other AT commands based on other supplementary services is described in the related technical specifica-
tions.

Parameter <ussdMode> is used to control the presentation of "+CUSD" URCs to the TE, which will be caused by
a USSD response from the network or by different network or USAT initiated operations. Therefore, it is recom-
mended to always have "+CUSD" URCs enabled.

If parameter <ussdReq> is given, a mobile initiated USSD send request or a USSD response to a network or
USAT initiated operation is sent to the network. A possible response USSD of the network is again presented by
a subsequent "+CUSD" URC.

Syntax
Test Command

AT+CUSD=?
Response(s)
+CUSD: (list of supported<ussdMode>s)
OK
Read Command

AT+CUSD?
Response(s)
+CUSD: <ussdMode>
OK
Write Command

AT+CUSD=<ussdMode>[, <ussdReq>[, <ussdDCS>]]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51],

3GPP TS 22.090 [37],
3GPP TS 24.090

Unsolicited Result Code

+CUSD: <ussdStatus>[, <ussdRsp>[, <ussdDCS>]]
"+CUSD" URC indicates a USSD response from the network, respectively caused by a network or USAT initiated
operation.

Parameter Description

<ussdMode>(num)
0(&F)(P) Disable "+CUSD" URC presentation.
1 Enable "+CUSD" URC presentation. If a USSD send request is sent via ATD this
setting is activated implicitly.
2 Cancel session (not applicable to read command response).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 353 of 564
12.13 AT+CUSD

<ussdReq>(str)(+CSCS)
Unstructured Supplementary Service Data (USSD) to be sent to the network.
If <ussdReq> parameter is not given, network is not interrogated. AT+CUSD write command only supports set-
ting <ussdDCS>=15.

<ussdRsp>(str)(+CSCS)
Unstructured Supplementary Service Data (USSD) received from the network.
If <ussdDCS> indicates that 3GPP TS 23.038 [38] GSM 7 bit default alphabet is used, the UE converts GSM
alphabet into current TE character set according to rules of 3GPP TS 27.005 [50], Annex A. See also Section
1.7, Supported character sets. However, in case of invalid or omitted <ussdDCS>, conversion of <uss-
dRsp> is not possible.

<ussdDCS>(num)
3GPP TS 23.038 [38] Cell Broadcast Data Coding Scheme (default 15).
In case of an incoming USSD with invalid or omitted data coding scheme information <ussdDCS> will not be
presented.

<ussdStatus>(num)
0 No further user action required (network initiated USSD notification, or no fur-
ther information needed after mobile initiated operation).
1 Further user action is required (network initiated USSD request, or further infor-
mation is needed after mobile initiated operation).
If <ussdStatus>=1 the user input needs to be sent via an additional
AT+CUSD action <ESC>.
2 USSD exchange is terminated by network.
3 A (UE local) client has responded, i.e. the interface was not idle and a busy
indication was sent to the network.
4 Operation not supported (e.g. wrong input value given).
5 Network timeout.

Note
• It is recommended to finalize or escape a pending USSD user interaction before further actions are done to
prevent blocking situations.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 354 of 564
13. Packet Domain Related Commands

13. Packet Domain Related Commands

The AT commands described in this chapter allow the Customer Application to control packet switched services
in GSM/UMTS/LTE networks.

13.1 AT+CGACT PDP Context Activate or Deactivate

AT+CGACT write command is used to activate or deactivate the specified PDP context(s). After command has
completed, the MT remains in V.250 command state. If any PDP context is already in the requested state, the
state for that context remains unchanged. If MT is not PS attached when the activation form of the command is
executed, MT firstly performs a PS attach and then attempts to activate the specified contexts. If no <cid>s are
specified the activation/deactivation form of the command activates/deactivates all defined contexts.

AT+CGACT read command returns the current activation states for all defined PDP contexts.

AT+CGACT test command is used for requesting information on supported PDP context activation states.

Syntax
Test Command

AT+CGACT=?
Response(s)
+CGACT: (list of supported <state>s)
OK
ERROR
+CME ERROR: <err>
Read Command
AT+CGACT?
Response(s)
+CGACT: [<cid>, <state>]
[+CGACT: <cid>, <state>]
...
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CGACT=<state>[,<cid>[,<cid>[, ...]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 355 of 564
13.1 AT+CGACT

Parameter Description

<state>(num)
Indicates the state of PDP context activation.
0 Deactivated
1 Activated

<cid>(num)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).

Notes
• More than one PDP context can be active if each PDP context ID has a specific setting, e.g. the APN.
Keep in mind that PDP contexts are activated automatically when the UE attaches to the PDN (Packet Data
Network) and to the IMS (IP-based Multimedia Subsystem). If the UE is registered to LTE and IMS AT+CGACT
shows the active state of both PDP contexts, but any attempt to deactivate them with AT+CGACT will be
denied. See more information in Section 13.5.1, Attaching to LTE Networks and Registering to IMS.
For IP sessions, the user may activate further PDP contexts. To avoid conflicts those PDP contexts should
be different from PDP contexts automatically activated along with preconfigured provider settings. Also, the
user is responsible to make sure whether parallel usage of these PDP contexts is allowed by the mobile oper-
ator and by the USIM.
Remember that contexts may also be activated implicitly by using other commands, e.g. AT+CGDATA or
ATD*99#.
• Contexts activated by , e.g. AT+CGDATA or ATD*99# cannot be handled by the AT+CGACT write command
but their activation state is still visible via AT+CGACT read command. A write command without specifying any
<cid> will always fail as long as some contexts are still in use by AT+CGDATA or ATD*99#.
• If activation or deactivation of a context fails, then AT+CEER may provide further information about the reason.
• Please see AT&D for information on disconnecting data call.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 356 of 564
13.2 AT+CGATT

13.2 AT+CGATT PS Attach or Detach

The AT+CGATT write command is used to attach the MT to, or detach the MT from, the Packet Domain service.
After the command has completed, the MT remains in V.25ter command state. If the MT is already in the
requested state, the command is ignored and the OK response is returned. If the requested state cannot be
achieved, an ERROR or +CME ERROR response is returned.
Any active PDP contexts will be automatically deactivated when the attachment state changes to detached.
The AT+CGATT read command returns the current Packet Domain service state.
The AT+CGATT test command is used for requesting information on the supported Packet Domain service states.

Syntax
Test Command

AT+CGATT=?
Response(s)
+CGATT: (list of supported <state>s)
OK
Read Command

AT+CGATT?
Response(s)
+CGATT: <state>
OK
Write Command
AT+CGATT=[<state>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<state>(num)
Indicates the state of PS attachment.
0(P) Detached
[1] Attached

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 357 of 564
13.3 AT+CGEQOS

13.3 AT+CGEQOS Define EPS Quality of Service

AT+CGEQOS write command allows the UE to specify the EPS Quality of Service parameters for a PDP context
or Traffic Flows. When in UMTS/GPRS the MT applies a mapping function to UTMS/GPRS Quality of Service.
A special form of the write command, AT+CGEQOS=<cid> causes the values for context number <cid> to
become undefined.

Syntax
Test Command

AT+CGEQOS=?
Response(s)
+CGEQOS: (range of supported <cid>s), (range of supported <QCI>s), (range of supported <DL_GBR>s),
(range of supported <UL_GBR>s), (range of supported <DL_MBR>s), (range of supported <UL_MBR>s)
OK
Read Command
AT+CGEQOS?
Response(s)
[+CGEQOS: <cid>, <QCI>, [<DL_GBR>, <UL_GBR>], [<DL_MBR>, <UL_MBR>]]
[+CGEQOS: ...]
OK
Write Command

AT+CGEQOS=<cid>[, <QCI>[, <DL_GBR>, <UL_GBR>[, <DL_MBR>, <UL_MBR>]]]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<cid>(num)
Specifies a particular EPS Traffic Flows definition in EPS and a PDP Context definition in UMTS/GPRS (see
AT+CGDCONT and AT+CGDSCONT).
1...16

<QCI>(num)
Specifies a class of EPS QoS.
0 QCI is selected by network
1...4 Value range for guaranteed bit rate Traffic Flows
5...9 Value range for non-guaranteed bit rate Traffic Flows

<DL_GBR>(num)
Indicates DL GBR in case of GBR QCI. The value is in kbit/s. This parameter is omitted for a non-GBR QCI (see
3GPP TS 24.301 [45]).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 358 of 564
13.3 AT+CGEQOS

<UL_GBR>(num)
Indicates UL GBR in case of GBR QCI. The value is in kbit/s. This parameter is omitted for a non-GBR QCI (see
3GPP TS 24.301 [45]).

<DL_MBR>(num)
Indicates DL MBR in case of GBR QCI. The value is in kbit/s. This parameter is omitted for a non-GBR QCI (see
3GPP TS 24.301 [45]).

<UL_MBR>(num)
Indicates UL MBR in case of GBR QCI. The value is in kbit/s. This parameter is omitted for a non-GBR QCI (see
3GPP TS 24.301 [45]).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 359 of 564
13.4 AT+CGDATA

13.4 AT+CGDATA Enter Data State

AT+CGDATA write command causes the MT to perform all actions which are necessary to establish communica-
tion between the TE and the network using one or more Packet Domain PDP types. This may include performing
a PS attach and one or more PDP context activations. Commands following the AT+CGDATA command in the AT
command line will not be processed by the MT.
If the write command is successful, the MT issues the intermediate result code CONNECT and enters V.250
online data state.
The application that initiates the PPP mode must be designed to start all LCP configure requests in accordance
with TS 27.060 par 9.1. Otherwise the MT remains, after the CONNECT, infinitely in a waiting state.
After data transfer is complete, and layer 2 protocol termination procedure has completed successfully, com-
mand state is reentered and MT returns the final result code OK.
If <L2P> parameter value is unacceptable to the MT it returns ERROR or +CME ERROR.
In the event of erroneous termination or a failure to start up, command state is reentered and MT returns NO
CARRIER, or if enabled +CME ERROR.

AT+CGDATA test command is used for requesting information on the supported layer 2 protocols to be used
between TE and MT.

Syntax
Test Command

AT+CGDATA=?
Response(s)
+CGDATA: (list of supported <L2P>s)
OK
Write Command
AT+CGDATA=[<L2P>[, <cid>]]
Response(s)
CONNECT
NO CARRIER
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - + 3GPP 27.007

Parameter Description

<L2P>(str)
Layer 2 protocol to be used between TE and MT.
[“PPP“] Layer 2 protocol PPP

<cid>(num)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).
Secondary PDP contexts are not supported.
If parameter is not specified, then the first defined primary context is used.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 360 of 564
13.4 AT+CGDATA

13.4.1 Automatic deactivation of PDP context during dial-up PPP

From using AT+CGDATA write command or ATD*99# follows that MT issues intermediate result code CONNECT
and enters V.250ter online data state. In V.250 online data state, first some LCP protocol exchange between MT
and TE is performed to set up the PPP link. After successfully establishing the PPP link, the MT performs PDP
context activation procedure if the context is not already activated. As a result, MT is in a "PDP context activated"
state within the PLMN, the PPP link is established on the mobile side and the mobile is ready for IP data transfer.
If the TE wants to close the LCP link the MT may perform an LCP termination request procedure on PPP level.
After this LCP termination procedure the MT deactivates the PDP context automatically and the MT returns to
V.250 command mode and issues the final result code NO CARRIER.
If DTR is configured to disconnect data connections (AT&D2), the application should not toggle DTR during
implicit PDP context deactivation and before "NO CARRIER" is received.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 361 of 564
13.5 AT+CGDCONT

13.5 AT+CGDCONT Define PDP Context

AT+CGDCONT specifies the parameters for a PDP context identified by the context identifier <cid>. The number
of contexts that may be in a defined state at the same time is given by the range returned by the AT+CGDCONT
test command. A special form of the write command (AT+CGDCONT=<cid>) causes the values for context
<cid> to become undefined. If context 1 is undefined on startup, it will be recreated automatically with
<PDP_type> "IPV4V6" and all other parameters set to their defaults.
It is not allowed to undefine an already activated context.
The AT+CGDCONT read command returns the current settings for each defined PDP context.

The default settings of AT+CGDCONT depend on the loaded network provider profile. For details see AT^SCFG
"MEopMode/Prov/Cfg" parameter <provCfg> and AT^SCFG "MEopMode/Prov/AutoSelect" parameter <prov-
AutoSelect>.

Syntax
Test Command
AT+CGDCONT=?
Response(s)
+CGDCONT: (range of supported <cid>s), "IP", , , (list of supported <d_comp>s), (list of supported
<h_comp>s), (list of supported <IPv4AddrAlloc>s), (list of supported <emergency_indication>s), (list
of supported <P-CSCF_discovery>s), (list of supported <IM_CN_Signalling_Flag_Ind>s)
+CGDCONT: (range of supported <cid>s), "PPP", , , (list of supported <d_comp>s), (list of supported
<h_comp>s), (list of supported <IPv4AddrAlloc>s), (list of supported <emergency_indication>s), (list
of supported <P-CSCF_discovery>s), (list of supported <IM_CN_Signalling_Flag_Ind>s)
+CGDCONT: (range of supported <cid>s), "IPV6", , , (list of supported <d_comp>s), (list of supported
<h_comp>s), (list of supported <IPv4AddrAlloc>s), (list of supported <emergency_indication>s), (list
of supported <P-CSCF_discovery>s), (list of supported <IM_CN_Signalling_Flag_Ind>s)
+CGDCONT: (range of supported <cid>s), "IPV4V6", , , (list of supported <d_comp>s), (list of supported
<h_comp>s), (list of supported <IPv4AddrAlloc>s), (list of supported <emergency_indication>s), (list
of supported <P-CSCF_discovery>s), (list of supported <IM_CN_Signalling_Flag_Ind>s)
OK
ERROR
+CME ERROR: <err>
Read Command
AT+CGDCONT?
Response(s)
[+CGDCONT: <cid>, <PDP_type>, <APN>, <PDP_addr>, <d_comp>, <h_comp>[, <IPv4AddrAlloc>[,
<emergency_indication>[, <P-CSCF_discovery>[, <IM_CN_Signalling_Flag_Ind>]]]]]
[+CGDCONT: <cid>, <PDP_type>, <APN>, <PDP_addr>, <d_comp>, <h_comp>[, <IPv4AddrAlloc>[,
<emergency_indication>[, <P-CSCF_discovery>[, <IM_CN_Signalling_Flag_Ind>]]]]]
[+CGDCONT: ...]
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CGDCONT=<cid>[, <PDP_type>[, <APN>[, <PDP_addr>[, <d_comp>[, <h_comp>[,

<IPv4AddrAlloc>[, <emergency_indication>[, <P-CSCF_discovery>[,
<IM_CN_Signalling_Flag_Ind>]]]]]]]]]
Response(s)
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 362 of 564
13.5 AT+CGDCONT

PIN  Last Reference(s)

- + - 3GPP TS 27.007,
3GPP TS 23.003,
3GPP TS 24.301,
3GPP TS 25.323,
3GPP TS 44.065

Parameter Description

<cid>(num)(NV)
PDP Context Identifier
Parameter specifies a particular PDP context definition. This parameter is used in other PDP context-related
commands.
1...16

<PDP_type>(str)(NV)
Packet Data Protocol type
Specifies the type of the packet data protocol.
“IP“ Internet Protocol (IETF STD 5)
“PPP“ Point to Point Protocol (IETF STD 51)
“IPV6“ Internet Protocol, version 6 (see RFC 2460)
“IPV4V6“ Virtual <PDP_type> introduced to handle dual IP stack UE capability. (See
3GPP TS 24.301 [45]).
Not applicable to PPP (dialup) connections).

<APN>(str)(NV)
Access Point Name
Logical name used to select the GGSN or the external packet data network. Maximum length: 62 characters.
An Access Point Name has to follow the syntax rules specified in 3GPP TS 23.003 in section 9.1.
If the value is null or omitted, then the subscription value will be requested.

<PDP_addr>(str)(NV)
Packet Data Protocol address
Identifies the MT in the address space applicable to PDP (e.g. IPv4 address for PDP type IP). If the value is null
or omitted, then a value may be provided by the TE during the PDP startup procedure or, failing that, a dynamic
address will be requested. The read command will continue to return the null string even if an address has been
allocated during the PDP startup procedure. A string consisting of the values 0.0.0.0 for IPV4 or
0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 for IPV6 has the same meaning as a null string. The allocated address may be
read using AT+CGPADDR.

<d_comp>(num)(NV)
Data Compression
Controls the PDP data compression (applicable for Subnetwork Dependent Convergence Protocol (SNDCP)
only); see 3GPP TS 44.065 and GPP TS 23.003 for details.
[0] off
1 on
2 V.42bis

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 363 of 564
13.5 AT+CGDCONT

<h_comp>(num)(NV)
Header Compression
Controls the PDP header compression; see 3GPP TS 44.065 and 3GPP TS 25.323 for details.
[0] off
1 on
2 RFC1144
3 RFC2507
4 RFC3095

<IPv4AddrAlloc>(num)(NV)
Numeric parameter that controls how the MT/TA requests to get the IPv4 address information.
[0] IPv4 Address Allocation through NAS Signalling

<emergency_indication>(num)(NV)
Numeric parameter used to indicate whether the PDP context is for emergency bearer services or not.
[0] PDP context is not for emergency bearer services
1 PDP context is for emergency bearer services

<P-CSCF_discovery>(num)(NV)
Numeric parameter influences how the MT/TA requests to get the P-CSCF address, see 3GPP TS 24.229 [89]
annex B and annex L.
[0] Preference of P-CSCF address discovery not influenced by +CGDCONT
1 Preference of P-CSCF address discovery through NAS Signalling
2 Preference of P-CSCF address discovery through DHCP

<IM_CN_Signalling_Flag_Ind>(num)(NV)
Numeric parameter used to indicate to the network whether the PDP context is for IM CN subsystem-related
signalling only or not.
[0] UE indicates that the PDP context is not for IM CN subsystem-related signaling
only
1 UE indicates that the PDP context is for IM CN subsystem-related signaling
only

13.5.1 Attaching to LTE Networks and Registering to IMS

To allow access to the PDN (Packet Data Network) and to the IMS (IP-based Multimedia Subsystem), the UE
has to perform attach and context activation procedures. The initial PDN attach is prerequisite for LTE services.
For Voice service in LTE (VoLTE), the PDN attach is followed by IMS registration attempt if network support is
available.

The correct APNs shall be specified before the UE tries to attach. For ease of use, the UE comes with precon-
figured provider profiles. Depending on the selected provider configuration the UE either loads
- a standard profile intended for a great variety of operators (referred to as Fallback profile),
- or a dedicated profile preconfigured for a specific network operator.
For details on provider configurations see ATI61 and the AT^SCFG subcommands "MEopMode/Prov/Cfg" and
"MEopMode/Prov/AutoSelect". To check the currently defined PDP contexts use the AT+CGDCONT read com-
mand.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 364 of 564
13.5 AT+CGDCONT

If provider profile autoselection is on, provider profile settings are non-volatile as long as the same SIM or a SIM
of the same provider is inserted. Otherwise, if a different provider configuration is selected, or a SIM of a different
provider is inserted the existing profile will be cleared before the new profile can be loaded. This applies to all
PDP contexts defined with AT+CGDCONT, no matter whether loaded as part of a preconfigured provider profile,
or set by the TE.
If the Fallback profile is enabled, provider profile settings are non-volatile only as long as exactly the same SIM
is inserted. Changing the SIM, even though a SIM of the same issuer, always clears all profile settings.

In contrast to 2G (GSM) and 3G (UMTS) where PDN attach and context activation are performed separately, a
successful LTE attach and registration procedure always includes the automatic activation of a PDN PDP con-
text. If IMS (IP-based Multimedia Subsystem) is enabled and supported by the network, the IMS PDP context
will also be activated when the UE attaches to LTE.

Many network operators allow to assign the 1st PDP context to the PDN APN, and the 2nd to the IMS APN. This
way, the 1st PDP context serves both for LTE attach and Internet access. For PLS63-W this means that the
AT^SWWAN command can simply reuse the 1st PDP context to establish data connections to the Internet. PDP
contexts defined for IMS or IMS Emergency signalling cannot be used for AT^SWWAN.
NOTE: Only few operators require separate APNs for LTE attach and for Internet access, for example German
Telecom and China Mobile. Therefore, the profile preconfigured for the German Telecom inside the UE defines
the 1st PDP context only for Internet access without usage for LTE attach, while the 2nd PDP context is assigned
to IMS and used for LTE attach. The benefit is that German Telecom subscribers may also set up AT^SWWAN
connections at the 1st PDP context. For China Mobile, the 3rd PDP context is preconfigured for LTE attach.

How to trigger the attach procedure:

To ensure that the UE properly attaches to LTE it is necessary to retain the auto attach ability, by default enabled
with AT^SCFG="GPRS/AutoAttach". This way, the UE automatically tries to attach to LTE and IMS after SIM
PIN1 authentication has completed. Manual attach / detach procedures by AT+CGATT are not recommended for
LTE and IMS, and should be used only for GSM and UMTS.

To verify whether LTE attach and IMS registration were successful use the following AT commands:
- AT+CGACT? read command shows the automatically activated PDP contexts for PDN and IMS.
- AT+CGPADDR shows the IP addresses dynamically assigned to each PDP context.
- AT+CGCONTRDP shows the APNs, EPS bearer IDs, IP addresses.

As long as the UE is attached and registered to LTE any attempt to deactivate the active PDP context (e.g
AT+CGACT=0,1) will be denied with "+CME ERROR: operation not allowed". The detach command AT+CGATT=0
is accepted but will cause the UE to deregister from LTE.
Likewise, an active PDP context assigned to IMS can neither be deactivated.

LTE attach with no APN

If no PDN APN is specified (for most operators at <cid> 1) when the UE attaches to LTE, the network will auto-
matically select the so called default APN, specified in the HSS, to establish the initial context (PDN connection/
default bearer). Although the LTE attach procedure will be successful in that case, the context for the default APN
might be configured with restrictions concerning the transmission of data, depending on operator settings.

LTE attach with wrong APN

If a wrong PDN APN is configured during the LTE attach procedure, e.g. if an application allows the user to
change SIM cards and the APN was not set correctly after the SIM change, the LTE attach will be rejected by
the network. As result, the RAT type LTE will be disabled by the UE for a limited amount of time and the UE will
only use 2G and 3G RAT types for PS access. The duration while RAT type LTE is disabled depends on network
configuration (timer T3402, default 12 minutes).

Recommendations for LTE attach

When using LTE auto attach, the application shall ensure that the correct PDN APN is specified before the UE
attaches to LTE. To do so, use the command AT+CGDCONT=<cid>,<PDP_type>,<APN>.
If the application cannot ensure that the correct PDN APN is configured before the UE attempts to attach to LTE,
the application shall employ one of the following command sequences:
• AT+COPS=2 to deregister from the network, AT+CGDCONT to set the APN, then AT+COPS=0 to force a new
network registration, thus enabling a new LTE auto attach attempt. If running, the T3402 timer will be stopped
by AT+COPS=0.
• AT+COPS=2 to deregister from the network, AT+CGDCONT to set the APN, then AT+CFUN=1,1 to restart the

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 365 of 564
13.5 AT+CGDCONT

UE (since the AT+CGDCONT setting is non-volatile).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 366 of 564
13.6 AT+CEREG

13.6 AT+CEREG EPS Network Registration Status

The AT+CEREG write command enables presentation of URC "+CEREG: <stat>" when <n>=1 and UE's EPS
network registration status in LTE changes, or URC "+CEREG: <stat>[, [<tac>], [<ci>], [<AcT>]]" when <n>=2
and the current network cell in LTE changes.
The AT+CEREG execute command restores default value "0" for parameter <n>.
The AT+CEREG read command queries the current URC presentation status and <stat> which shows whether
the network has currently indicated the registration of the ME. Location information elements <tac> and <ci>
are returned only if <n>=2 and ME is registered to the network.

Syntax
Test Command

AT+CEREG=?
Response(s)
+CEREG: (list of supported <n>s)
OK
Read Command

AT+CEREG?
Response(s)
+CEREG: <n>, <stat>[, [<tac>], [<ci>], [<AcT>]]
OK
Exec Command
AT+CEREG
Response(s)
OK
Write Command
AT+CEREG=<n>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Unsolicited Result Codes

URC 1
+CEREG: <stat>
Indicates a change in the UE's EPS network registration status.

URC 2
+CEREG: <stat>[, [<tac>], [<ci>], [<AcT>]]
Indicates a change in the UE's EPS network registration status or a change of the network cell including loca-
tion information.

Parameter Description

<n>(num)
0(&F)(P) Disable network registration unsolicited result code

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 367 of 564
13.6 AT+CEREG

1 Enable network registration URC "+CEREG: <stat>"

2 Enable network registration URC "+CEREG: <stat>[, [<tac>], [<ci>],
[<AcT>]]"

<stat>(num)
0 Not registered, ME is not currently searching an operator to register to.
1 Registered, home network.
2 Not registered, but ME is currently trying to attach or searching an operator to
register to.
3 Registration denied.
4 Unknown, e.g. out of LTE coverage
5 Registered, roaming.

<tac>(str)
Two byte tracking area code in hexadecimal format (e.g. "00C3" equals 195 in decimal)

<ci>(str)
Four byte LTE cell ID in hexadecimal format.

<AcT>(num)
Radio access technology
0 GSM (not applicable)
2 UTRAN (not applicable)
3 GSM w/EGPRS (not applicable)
4 UTRAN w/HSDPA (not applicable)
5 UTRAN w/HSUPA (not applicable)
6 UTRAN w/HSDPA and w/HSUPA (not applicable)
7 E-UTRAN

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 368 of 564
13.7 AT+CGEQOSRDP

13.7 AT+CGEQOSRDP EPS Quality of Service Read Dynamic Parame-

ters

The write command returns Quality of Service parameters of the active PDP context associated to the provided
context identifier <cid>.
If the parameter <cid> is omitted, the Quality of Service parameters for all secondary and non-secondary active
PDP contexts are returned.
The test command returns a list of <cid>s associated with active PDP contexts.
Parameters of both network and MT/TA initiated PDP contexts will be returned.

Syntax
Test Command

AT+CGEQOSRDP=?
Response(s)
+CGEQOSRDP: (list of <cid>s associated with active contexts)
OK
Exec Command

AT+CGEQOSRDP
Response(s)
[+CGEQOSRDP: <cid>, <QCI>, [<DL_GBR>, <UL_GBR>], [<DL_MBR>, <UL_MBR>][, <DL_AMBR>,
<UL_AMBR>]]
[+CGEQOSRDP: ...]
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CGEQOSRDP=<cid>
Response(s)
[+CGEQOSRDP: <cid>, <QCI>[, <DL_GBR>, <UL_GBR>][, <DL_MBR>, <UL_MBR>][, <DL_AMBR>,
<UL_AMBR>]]
[+CGEQOSRDP: ...]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<cid>(str)
Specifies a particular EPS Traffic Flows definition in EPS and a PDP Context definition in UMTS/GPRS (see
AT+CGDCONT and AT+CGDSCONT).

<QCI>(num)
Specifies a class of EPS QoS.
0 QCI is selected by network
1...4 Value range for guaranteed bit rate Traffic Flows
5...9 Value range for non-guaranteed bit rate Traffic Flows
128...254 Value range for for Operator-specific QCIs

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 369 of 564
13.7 AT+CGEQOSRDP

<DL_GBR>(num)
Indicates DL GBR in case of GBR QCI. The value is in kbit/s. This parameter is omitted for a non-GBR QCI.

<UL_GBR>(num)
Indicates UL GBR in case of GBR QCI. The value is in kbit/s. This parameter is omitted for a non-GBR QCI.

<DL_MBR>(num)
Indicates DL MBR in case of GBR QCI. The value is in kbit/s. This parameter is omitted for a non-GBR QCI.

<UL_MBR>(num)
Indicates UL MBR in case of GBR QCI. The value is in kbit/s. This parameter is omitted for a non-GBR QCI.

<DL_AMBR>(num)
Indicates DL APN aggregate MBR. The value is in kbit/s.

<UL_AMBR>(num)
Indicates UL APN aggregate MBR. The value is in kbit/s.

Notes
• If multiple lines in a response belong to the same PDN connection they contain the same <DL_AMBR>
<UL_AMBR> values.
• The <cid> for network-initiated PDP contexts will have values outside the ranges (including values of 100
and above) indicated for the <cid> in the test form of the commands AT+CGDCONT and AT+CGDSCONT.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 370 of 564
13.8 AT+CGEQMIN

13.8 AT+CGEQMIN 3G Quality of Service Profile (Minimum accept-

able)

AT+CGEQMIN write command allows the TE to specify a Quality of Service Profile for the context identified by the
context identification parameter <cid> which is checked by the MT against the negotiated profile returned in the
Activate/Modify PDP Context Accept message.
A special form of the write command, AT+CGEQMIN=<cid> causes the requested profile for context number
<cid> to become undefined.

The AT+CGEQMIN read command returns the current settings for each context for which a QOS was explicitly
specified.

The AT+CGEQMIN test command returns values supported as a compound value.

Syntax
Test Command
AT+CGEQMIN=?
Response(s)
+CGEQMIN: "IP", (list of supported <Traffic class>s), (list of supported <Maximum bitrate UL>s),
(list of supported <Maximum bitrate DL>s), (list of supported <Guaranteed bitrate UL>s), (list of
supported <Guaranteed bitrate DL>s), (list of supported <Delivery order>s), (list of supported
<Maximum SDU size>s), (list of supported <SDU error ratio>s), (list of supported <Residual bit
error ratio>s), (list of supported <Delivery of erroneous SDUs>s), (list of supported <Transfer
delay>s), (list of supported <Traffic handling priority>s)
+CGEQMIN: "PPP", (list of supported <Traffic class>s), (list of supported <Maximum bitrate UL>s),
(list of supported <Maximum bitrate DL>s), (list of supported <Guaranteed bitrate UL>s), (list of
supported <Guaranteed bitrate DL>s), (list of supported <Delivery order>s), (list of supported
<Maximum SDU size>s), (list of supported <SDU error ratio>s), (list of supported <Residual bit
error ratio>s), (list of supported <Delivery of erroneous SDUs>s), (list of supported <Transfer
delay>s), (list of supported <Traffic handling priority>s)
+CGEQMIN: "IPV6", (list of supported <Traffic class>s), (list of supported <Maximum bitrate UL>s),
(list of supported <Maximum bitrate DL>s), (list of supported <Guaranteed bitrate UL>s), (list of
supported <Guaranteed bitrate DL>s), (list of supported <Delivery order>s), (list of supported
<Maximum SDU size>s), (list of supported <SDU error ratio>s), (list of supported <Residual bit
error ratio>s), (list of supported <Delivery of erroneous SDUs>s), (list of supported <Transfer
delay>s), (list of supported <Traffic handling priority>s)
+CGEQMIN: "IPV4V6", (list of supported <Traffic class>s), (list of supported <Maximum bitrate
UL>s), (list of supported <Maximum bitrate DL>s), (list of supported <Guaranteed bitrate UL>s),
(list of supported <Guaranteed bitrate DL>s), (list of supported <Delivery order>s), (list of
supported <Maximum SDU size>s), (list of supported <SDU error ratio>s), (list of supported
<Residual bit error ratio>s), (list of supported <Delivery of erroneous SDUs>s), (list of
supported <Transfer delay>s), (list of supported <Traffic handling priority>s)
OK
Read Command
AT+CGEQMIN?
Response(s)
+CGEQMIN: [<cid>, <Traffic class>, <Maximum bitrate UL>, <Maximum bitrate DL>,
<Guaranteed bitrate UL>, <Guaranteed bitrate DL>, <Delivery order>, <Maximum SDU
size>, <SDU error ratio>, <Residual bit error ratio>, <Delivery of erroneous SDUs>,
<Transfer delay>, <Traffic handling priority>]
[+CGEQMIN: <cid>, <Traffic class>, <Maximum bitrate UL>, <Maximum bitrate DL>,
<Guaranteed bitrate UL>, <Guaranteed bitrate DL>, <Delivery order>, <Maximum SDU
size>, <SDU error ratio>, <Residual bit error ratio>, <Delivery of erroneous SDUs>,
<Transfer delay>, <Traffic handling priority>]
[+CGEQMIN: ...]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 371 of 564
13.8 AT+CGEQMIN

Write Command

AT+CGEQMIN=<cid>[, <Traffic class>[, <Maximum bitrate UL>[, <Maximum bitrate DL>[,

<Guaranteed bitrate UL>[, <Guaranteed bitrate DL>[, <Delivery order>[, <Maximum SDU
size>[, <SDU error ratio>[, <Residual bit error ratio>[, <Delivery of erroneous
SDUs>[, <Transfer delay>[, <Traffic handling priority>]]]]]]]]]]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<cid>(num)(NV)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).

<Traffic class>(num)(NV)
0 conversational
1 streaming
2 interactive
3 background
[4] subscribed value

<Maximum bitrate UL>(num)(NV)

This parameter indicates the maximum number of kbits/s delivered to UMTS (up-link traffic) at a SAP. As an
example a bitrate of 32kbit/s would be specified as 32 (e.g. AT+CGEQMIN=...,32,...).
[0] subscribed value
1...11520

<Maximum bitrate DL>(num)(NV)

This parameter indicates the maximum number of kbits/s delivered by UMTS (down-link traffic) at a SAP. As an
example a bitrate of 32kbit/s would be specified as 32 (e.g. AT+CGEQMIN=...,32,...).
[0] subscribed value
1...42200

<Guaranteed bitrate UL>(num)(NV)

This parameter indicates the guaranteed number of kbits/s delivered to UMTS (up-link traffic) at a SAP (provided
that there is data to deliver). As an example a bitrate of 32kbit/s would be specified as 32 (e.g. AT+CGEQ-
MIN=...,32,...).
[0] subscribed value
1...11520

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 372 of 564
13.8 AT+CGEQMIN

<Guaranteed bitrate DL>(num)(NV)

This parameter indicates the guaranteed number of kbits/s delivered by UMTS (down-link traffic) at a SAP (pro-
vided that there is data to deliver). As an example a bitrate of 32kbit/s would be specified as 32 (e.g. AT+CGEQ-
MIN=...,32,...).
[0] subscribed value
1...42200

<Delivery order>(num)(NV)
This parameter indicates whether the UMTS bearer shall provide in-sequence SDU delivery or not.
0 no
1 yes
[2] subscribed value

<Maximum SDU size>(num)(NV)

This parameter indicates the maximum allowed SDU size in octets.
[0] subscribed value
10...1520 (value needs to be divisible by 10 without remainder)
1502

<SDU error ratio>(str)(NV)

This parameter indicates the target value for the fraction of SDUs lost or detected as erroneous. SDU error ratio
is defined only for conforming traffic. The value is specified as "mEe". As an example a target SDU error ratio
of 5*10-3 would be specified as "5E3" (e.g. AT+CGEQMIN=...,"5E3",...).
[“0E0“] subscribed value
“1E1“
“1E2“
“7E3“
“1E3“
“1E4“
“1E5“
“1E6“

<Residual bit error ratio>(str)(NV)

This parameter indicates the target value for the undetected bit error ratio in the delivered SDUs. If no error
detection is requested, Residual bit error ratio indicates the bit error ratio in the delivered SDUs. The value is
specified as "mEe". As an example a target residual bit error ratio of 5*10-3 would be specified as "5E3" (e.g.
AT+CGEQMIN=...,"5E3",...).
[“0E0“] subscribed value
“5E2“
“1E2“
“5E3“
“4E3“
“1E3“
“1E4“
“1E5“

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 373 of 564
13.8 AT+CGEQMIN

“1E6“
“6E8“

<Delivery of erroneous SDUs>(num)(NV)

This parameter indicates whether SDUs detected as erroneous shall be delivered or not.
0 no
1 yes
2 no detect
[3] subscribed value

<Transfer delay>(num)(NV)
This parameter indicates the targeted time between request to transfer an SDU at one SAP to its delivery at the
other SAP, in milliseconds.
[0] subscribed value
100...150 (value needs to be divisible by 10 without remainder)
200...950 (value needs to be divisible by 50 without remainder)
1000...4000 (value needs to be divisible by 100 without remainder)

<Traffic handling priority>(num)(NV)

This parameter specifies the relative importance for handling of all SDUs belonging to the UMTS bearer com-
pared to the SDUs of the other bearers.
[0] subscribed
1
2
3

Notes
• Definitions of parameters can be found in 3GPP 23.107. Please note, that not all parameter combinations are
allowed. Details can be found in 3GPP TS 23.107 in section 6.5.1 "Ranges of UMTS Bearer Service Attri-
butes".
• All QOS settings are non-volatile and independent of AT&F and ATZ.
• If QOS settings are configured with AT+CGQMIN and AT+CGEQMIN in parallel the MT will use only the
AT+CGEQMIN settings for connection setup while the AT+CGQMIN settings are ignored.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 374 of 564
13.9 AT+CGEQREQ

13.9 AT+CGEQREQ 3G Quality of Service Profile (Requested)

The AT+CGEQREQ write command allows the TE to specify a Quality of Service Profile for the context identified
by the context identification parameter <cid> which is used when the MT sends an Activate PDP Context
Request message to the network.
A special form of the write command, AT+CGEQREQ=<cid> causes the requested profile for context number
<cid> to become undefined.

The AT+CGEQREQ read command returns the current settings for each context for which a QOS was explicitly
specified.

The AT+CGEQREQ test command returns values supported as a compound value.

Syntax
Test Command

AT+CGEQREQ=?
Response(s)
+CGEQREQ: "IP", (list of supported <Traffic class>s), (list of supported <Maximum bitrate UL>s),
(list of supported <Maximum bitrate DL>s), (list of supported <Guaranteed bitrate UL>s), (list of
supported <Guaranteed bitrate DL>s), (list of supported <Delivery order>s), (list of supported
<Maximum SDU size>s), (list of supported <SDU error ratio>s), (list of supported <Residual bit
error ratio>s), (list of supported <Delivery of erroneous SDUs>s), (list of supported <Transfer
delay>s), (list of supported <Traffic handling priority>s)
+CGEQREQ: "PPP", (list of supported <Traffic class>s), (list of supported <Maximum bitrate UL>s),
(list of supported <Maximum bitrate DL>s), (list of supported <Guaranteed bitrate UL>s), (list of
supported <Guaranteed bitrate DL>s), (list of supported <Delivery order>s), (list of supported
<Maximum SDU size>s), (list of supported <SDU error ratio>s), (list of supported <Residual bit
error ratio>s), (list of supported <Delivery of erroneous SDUs>s), (list of supported <Transfer
delay>s), (list of supported <Traffic handling priority>s)
+CGEQREQ: "IPV6", (list of supported <Traffic class>s), (list of supported <Maximum bitrate UL>s),
(list of supported <Maximum bitrate DL>s), (list of supported <Guaranteed bitrate UL>s), (list of
supported <Guaranteed bitrate DL>s), (list of supported <Delivery order>s), (list of supported
<Maximum SDU size>s), (list of supported <SDU error ratio>s), (list of supported <Residual bit
error ratio>s), (list of supported <Delivery of erroneous SDUs>s), (list of supported <Transfer
delay>s), (list of supported <Traffic handling priority>s)
+CGEQREQ: "IPV4V6", (list of supported <Traffic class>s), (list of supported <Maximum bitrate
UL>s), (list of supported <Maximum bitrate DL>s), (list of supported <Guaranteed bitrate UL>s),
(list of supported <Guaranteed bitrate DL>s), (list of supported <Delivery order>s), (list of
supported <Maximum SDU size>s), (list of supported <SDU error ratio>s), (list of supported
<Residual bit error ratio>s), (list of supported <Delivery of erroneous SDUs>s), (list of
supported <Transfer delay>s), (list of supported <Traffic handling priority>s)
OK
Read Command

AT+CGEQREQ?
Response(s)
+CGEQREQ: [<cid>, <Traffic class>, <Maximum bitrate UL>, <Maximum bitrate DL>,
<Guaranteed bitrate UL>, <Guaranteed bitrate DL>, <Delivery order>, <Maximum SDU
size>, <SDU error ratio>, <Residual bit error ratio>, <Delivery of erroneous SDUs>,
<Transfer delay>, <Traffic handling priority>]
[+CGEQREQ: <cid>, <Traffic class>, <Maximum bitrate UL>, <Maximum bitrate DL>,
<Guaranteed bitrate UL>, <Guaranteed bitrate DL>, <Delivery order>, <Maximum SDU
size>, <SDU error ratio>, <Residual bit error ratio>, <Delivery of erroneous SDUs>,
<Transfer delay>, <Traffic handling priority>]
[+CGEQREQ: ...]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 375 of 564
13.9 AT+CGEQREQ

Write Command

AT+CGEQREQ=<cid>[, <Traffic class>[, <Maximum bitrate UL>[, <Maximum bitrate DL>[,

<Guaranteed bitrate UL>[, <Guaranteed bitrate DL>[, <Delivery order>[, <Maximum SDU
size>[, <SDU error ratio>[, <Residual bit error ratio>[, <Delivery of erroneous
SDUs>[, <Transfer delay>[, <Traffic handling priority>]]]]]]]]]]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<cid>(num)(NV)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).

<Traffic class>(num)(NV)
0 conversational
1 streaming
2 interactive
3 background
[4] subscribed value

<Maximum bitrate UL>(num)(NV)

This parameter indicates the maximum number of kbits/s delivered to UMTS (up-link traffic) at a SAP. As an
example a bitrate of 32kbit/s would be specified as 32 (e.g. AT+CGEQREQ=...,32,...).
[0] subscribed value
1...11520

<Maximum bitrate DL>(num)(NV)

This parameter indicates the maximum number of kbits/s delivered by UMTS (down-link traffic) at a SAP. As an
example a bitrate of 32kbit/s would be specified as 32 (e.g. AT+CGEQREQ=...,32,...).
[0] subscribed value
1...42200

<Guaranteed bitrate UL>(num)(NV)

This parameter indicates the guaranteed number of kbits/s delivered to UMTS (up-link traffic) at a SAP (provided
that there is data to deliver). As an example a bitrate of 32kbit/s would be specified as 32 (e.g.
AT+CGEQREQ=...,32,...).
[0] subscribed value
1...11520

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 376 of 564
13.9 AT+CGEQREQ

<Guaranteed bitrate DL>(num)(NV)

This parameter indicates the guaranteed number of kbits/s delivered by UMTS (down-link traffic) at a SAP (pro-
vided that there is data to deliver). As an example a bitrate of 32kbit/s would be specified as 32 (e.g.
AT+CGEQREQ=...,32,...).
[0] subscribed value
1...42200

<Delivery order>(num)(NV)
This parameter indicates whether the UMTS bearer shall provide in-sequence SDU delivery or not.
0 no
1 yes
[2] subscribed value

<Maximum SDU size>(num)(NV)

This parameter indicates the maximum allowed SDU size in octets.
[0] subscribed value
10...1520 (value needs to be divisible by 10 without remainder)
1502

<SDU error ratio>(str)(NV)

This parameter indicates the target value for the fraction of SDUs lost or detected as erroneous. SDU error ratio
is defined only for conforming traffic. The value is specified as "mEe". As an example a target SDU error ratio
of 5*10-3 would be specified as "5E3" (e.g. AT+CGEQREQ=...,"5E3",...).
[“0E0“] subscribed value
“1E1“
“1E2“
“7E3“
“1E3“
“1E4“
“1E5“
“1E6“

<Residual bit error ratio>(str)(NV)

This parameter indicates the target value for the undetected bit error ratio in the delivered SDUs. If no error
detection is requested, Residual bit error ratio indicates the bit error ratio in the delivered SDUs. The value is
specified as "mEe". As an example a target residual bit error ratio of 5*10-3 would be specified as "5E3" (e.g.
AT+CGEQREQ=...,"5E3",...).
[“0E0“] subscribed value
“5E2“
“1E2“
“5E3“
“4E3“
“1E3“
“1E4“
“1E5“

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 377 of 564
13.9 AT+CGEQREQ

“1E6“
“6E8“

<Delivery of erroneous SDUs>(num)(NV)

This parameter indicates whether SDUs detected as erroneous shall be delivered or not.
0 no
1 yes
2 no detect
[3] subscribed value

<Transfer delay>(num)(NV)
This parameter indicates the targeted time between request to transfer an SDU at one SAP to its delivery at the
other SAP, in milliseconds.
[0] subscribed value
100...150 (value needs to be divisible by 10 without remainder)
200...950 (value needs to be divisible by 50 without remainder)
1000...4000 (value needs to be divisible by 100 without remainder)

<Traffic handling priority>(num)(NV)

This parameter specifies the relative importance for handling of all SDUs belonging to the UMTS bearer com-
pared to the SDUs of the other bearers.
[0] subscribed
1
2
3

Notes
• Definitions of parameters can be found in 3GPP 23.107. Please note, that not all parameter combinations are
allowed. Details can be found in 3GPP TS 23.107 in section 6.5.1 "Ranges of UMTS Bearer Service Attri-
butes".
• All QOS settings are non-volatile and independent of AT&F and ATZ.
• If QOS settings are configured with AT+CGQREQ and AT+CGEQREQ in parallel the MT will use only the
AT+CGEQREQ settings for connection setup while the AT+CGQREQ settings are ignored.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 378 of 564
13.10 AT+CGEREP

13.10 AT+CGEREP Packet Domain Event Reporting

The AT+CGEREP write command enables or disables sending of unsolicited result codes, +CGEV URCs from MT
to TE in the case of certain events occurring in the Packet Domain MT or the network.
Parameter <mode> controls the processing of unsolicited result codes specified within this command. <bfr>
controls the effect on buffered codes when <mode> 1 or 2 is entered. If a setting is not supported by the MT,
ERROR or +CME ERROR: is returned.

The AT+CGEREP read command returns the current <mode> and buffer settings.

The AT+CGEREP test command returns the modes and buffer settings supported by the MT as compound values.

Syntax
Test Command

AT+CGEREP=?
Response(s)
+CGEREP: (list of supported <mode>s), (list of supported <bfr>s)
OK
Read Command

AT+CGEREP?
Response(s)
+CGEREP: <mode>, <bfr>
OK
Write Command

AT+CGEREP=[<mode>[, <bfr>]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Unsolicited Result Codes

URC 1
+CGEV: REJECT <PDP_type>, <PDP_addr>
A network request for PDP context activation occurred when the MT was unable to report it to the TE with a
+CRING unsolicited result code and was automatically rejected.

URC 2
+CGEV: NW REACT <PDP_type>, <PDP_addr>[, <cid>]
The network has requested a context reactivation. The <cid> that was used to reactivate the context is pro-
vided if known to the MT.

URC 3
+CGEV: NW DEACT <PDP_type>, <PDP_addr>[, <cid>]
The network has forced a context deactivation. The <cid> that was used to activate the context is provided
if known to the MT.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 379 of 564
13.10 AT+CGEREP

URC 4
+CGEV: ME DEACT <PDP_type>, <PDP_addr>[, <cid>]
The UE has forced a context deactivation. The <cid> that was used to activate the context is provided if
known to the MT.

URC 5
+CGEV: NW DETACH
The network has forced a PS detach.

URC 6
+CGEV: ME DETACH
The UE has forced a PS detach.

URC 7
+CGEV: NW CLASS <class>
The network has forced a change of MS class. The highest available class is reported.

URC 8
+CGEV: ME CLASS <class>
The UE has forced a change of MS class. The highest available class is reported.

URC 9
+CGEV: ME ACT <pcid>, <cid>, <event-type>
The network has responded to an ME initiated context activation. The <cid> for this context is provided to
the TE in addition to the associated primary <pcid>.

URC 10
+CGEV: NW MODIFY <cid>,<change-reason>,<event-type>
The network has modified a context. The associated <cid> is provided to the TE in addition to the <change-
reason> and <event-type>. The format of the parameter <cid> is found in command AT+CGDCONT or
AT+CGDSCONT.

URC 11
+CGEV: NW PDN ACT <cid>
The network has activated a context. The context represents a Primary PDP context in GERAN / UTRAN.
The <cid> for this context is provided to the TE. The format of the parameter <cid> is found in command
AT+CGDCONT.

URC 12
+CGEV: NW PDN DEACT <cid>
The network has deactivated a context. The context represents a PDN connection in LTE or a Primary PDP
context in GERAN / UTRAN. The associated <cid> for this context is provided to the TE. The format of the
parameter <cid> is found in command AT+CGDCONT.

URC 13
+CGEV: ME PDN DEACT <cid>
The UE has deactivated a context. The context represents a PDN connection in LTE or a Primary PDP con-
text in GERAN / UTRAN. The <cid> for this context is provided to the TE. The format of the parameter <cid>
is found in command AT+CGDCONT.

URC 14
+CGEV: NW ACT <pcid>, <cid>, <event-type>
The network has activated a context. The <cid> for this context is provided to the TE in addition to the asso-
ciated primary <pcid>. The format of the parameters <pcid> and <cid> are found in command
AT+CGDSCONT.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 380 of 564
13.10 AT+CGEREP

URC 15
+CGEV: ME MODIFY <cid>, <change-reason>, <event-type>
The UE has modified a context. The associated <cid> is provided to the TE in addition to the <change-
reason> and <event-type>.

URC 16
+CGEV: ME PDN ACT <cid>[, <reason>]
The UE has activated a context. The context represents a Primary PDP context in GSM/UMTS/LTE. The
<cid> for this context is provided to the TE. This event is sent either in result of explicit context activation
request (AT+CGACT), or in result of implicit context activation request associated to attach request
(AT+CGATT=1).

Parameter Description

<mode>(num)
0(P) Buffer unsolicited result codes in the MT. Currently 3 +CGEV URCs can be
buffered. If MT result code buffer is full, the oldest ones will be discarded. No
codes are forwarded to the TE.
1 Discard unsolicited result codes when MT TE link is reserved (e.g. AT com-
mand port is in use, e.g. in online mode or in waiting state due to AT command
processing); otherwise forward them directly to the TE.
2 Buffer unsolicited result codes in the MT when MT TE link is reserved (AT com-
mand port is in use, e.g. in online mode or in waiting state due to AT command
processing) and flush them to the TE when MT TE link becomes available; oth-
erwise forward them directly to the TE. Currently 3 +CGEV URCs can be buff-
ered. If MT result code buffer is full, the oldest URCs will be discarded.

<bfr>(num)
0 MT buffer of unsolicited result codes defined within this command is cleared
when <mode> 1 or 2 is entered
1 MT buffer of unsolicited result codes defined within this command is flushed to
the TE when <mode> 1 or 2 is entered (OK response will be given before flush-
ing the codes). Buffer is empty afterwards.

<class>(str)
Parameter indicates the GPRS mobile class.
“A“ Class A (highest)
“B“ Class B
“CG“ Class C in GPRS mode
“CC“ Class C in circuit switched mode

<reason>(num)
Indicates the reason why the context activation request for PDP type IPv4v6 was not granted. This parameter
is only included if the requested PDP type associated with <cid> is IPv4v6, and the PDP type assigned by the
network for <cid> is either IPv4 or IPv6.
0 IPV4 only allowed
1 IPV6 only allowed
2 Single address bearers only allowed
3 Single address bearers only allowed and MT initiated context activation for a
second address type bearer was not successful.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 381 of 564
13.10 AT+CGEREP

<change-reason>(num)
Integer type parameter indicates what kind of change occurred.
0 Not available
1 TFT only changed
2 Qos only changed
3 Both TFT and QoS changed

<event-type>(num)
Integer type parameter indicates whether this is an informational event or whether the TE has to acknowledge it.
0 Informational event

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 382 of 564
13.11 AT+CGPADDR

13.11 AT+CGPADDR Show PDP Address

The AT+CGPADDR exec command returns a list of PDP addresses for all defined contexts.

The AT+CGPADDR write command returns a list of PDP addresses for the specified context identifiers. If a context
is not defined, then no output line is generated for it. If no <cid> is specified, the addresses for all defined con-
texts are returned.

The AT+CGPADDR test command returns a list of defined <cid>s.

Syntax
Test Command

AT+CGPADDR=?
Response(s)
[+CGPADDR: (list of defined <cid>s)]
OK
Exec Command

AT+CGPADDR
Response(s)
[+CGPADDR: <cid>[, <PDP_address_1>[, <PDP_address_2>]]]
[+CGPADDR: ...]
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CGPADDR=[<cid>[,<cid>[, ...]]]
Response(s)
[+CGPADDR: <cid>[, <PDP_address_1>[, <PDP_address_2>]]]
[+CGPADDR: ...]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP 27.007

Parameter Description

<cid>(num)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).

<PDP_address_1>(str)
A string that identifies the MT in the address space applicable to the PDP. The address may be static or dynamic.
If address is not available parameter is omitted.
Parameter specifies the assigned address as a dot-separated numeric (0-255) parameter of the form
"a1.a2.a3.a4" for IPv4 and "a1.a2.a3.a4.a5.a6.a7.a8.a9.a10.a11.a12.a13.a14.a15.a16" for IPv6.
The settings of AT+CGPIAF can influence the format of the IPv6 address.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 383 of 564
13.11 AT+CGPADDR

<PDP_address_2>(str)
A string that identifies the MT in the address space applicable to the PDP. The address may be static or dynamic.
Parameter is displayed only when both IPv4 and IPv6 addresses are assigned, with <PDP_address_1> con-
taining the IPv4 address and this parameter the IPv6 address.
Parameter specifies the assigned IPv6 address as a dot-separated numeric (0-255) parameter of the form
"a1.a2.a3.a4.a5.a6.a7.a8.a9.a10.a11.a12.a13.a14.a15.a16".
The settings of AT+CGPIAF can influence the format of this parameter.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 384 of 564
13.12 AT+CGSCONTRDP

13.12 AT+CGSCONTRDP Secondary PDP Context Read Dynamic

Parameters

The write command returns <p_cid> and <bearer_ID> for an active secondary PDP context with the context
identifier <cid>.
If the parameter <cid> is omitted, the <cid>, <p_cid> and <bearer_ID> are returned for all active secondary
PDP contexts. In EPS, the Traffic Flow parameters are returned.
The test command returns a list of <cid>s associated with active secondary PDP contexts.

Syntax
Test Command

AT+CGSCONTRDP=?
Response(s)
+CGSCONTRDP: (list of <cid>s associated with active contexts)
OK
Exec Command

AT+CGSCONTRDP
Response(s)
[<cid>, <p_cid>, <bearer_ID>]
[<cid>, <p_cid>, <bearer_ID>]
[...]
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CGSCONTRDP=<cid>
Response(s)
[+CGSCONTRDP: <cid>, <p_cid>, <bearer_ID>]
[+CGSCONTRDP: <cid>, <p_cid>, <bearer_ID>]
[+CGSCONTRDP: ...]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<cid>(num)
Specifies a particular active secondary PDP context or Traffic Flows definition. The parameter is used in other
PDP context-related commands (see the AT+CGDCONT and AT+CGDSCONT).

<p_cid>(num)
Specifies a particular PDP context definition or default EPS context Identifier which has been specified by use
of the AT+CGDSCONT command (see the AT+CGDSCONT command).

<bearer_ID>(num)
Identifies the bearer, EPS Bearer in EPS and NSAPI in UMTS/GPRS.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 385 of 564
13.12 AT+CGSCONTRDP

Note
• The <cid> for network-initiated PDP contexts will have values outside the ranges (including values of 100
and above) indicated for the <cid> in the test form of the commands AT+CGDCONT and AT+CGDSCONT.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 386 of 564
13.13 AT+CGCONTRDP

13.13 AT+CGCONTRDP PDP context read dynamic parameters

The AT+CGCONTRDP write command returns dynamic parameters for the active non-secondary PDP context
specified with <cid>.
The AT+CGCONTRDP execute command returns dynamic parameters for all active non-secondary PDP contexts.
For contexts of <PDP_type> "IPV4V6" the response of exec and write command will have two lines per <cid>.
First line describes the IPV4 dynamic parameters followed by another line with the IPV6 dynamic parameters.

Syntax
Test Command
AT+CGCONTRDP=?
Response(s)
+CGCONTRDP: (list of supported <cid>s) associated with active contexts
OK
Exec Command
AT+CGCONTRDP
Response(s)
+CGCONTRDP: <cid>, <Bearer_ID>, <APN>[, <LocalAddr and SubNetMask>[, <GwAddr>[,
<DNS_prim_addr>[, <DNS_sec_addr>[, <P_CSCF_prim_addr>[, <P_CSCF_sec_addr>]]]]]]
+CGCONTRDP: <cid>, <Bearer_ID>, <APN>[, <LocalAddr and SubNetMask>[, <GwAddr>[,
<DNS_prim_addr>[, <DNS_sec_addr>[, <P_CSCF_prim_addr>[, <P_CSCF_sec_addr>]]]]]]
[+CGCONTRDP: ...]
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CGCONTRDP=<cid>
Response(s)
+CGCONTRDP: <cid>, <Bearer_ID>, <APN>[, <LocalAddr and SubNetMask>[, <GwAddr>[,
<DNS_prim_addr>[, <DNS_sec_addr>[, <P_CSCF_prim_addr>[, <P_CSCF_sec_addr>]]]]]]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<cid>(num)
Specifies a particular non-secondary PDP context definition. The parameter is local to the TE-MT interface and
is used in other PDP context-related commands. See AT+CGDCONT.

<Bearer_ID>(num)
Identifies the bearer, EPS Bearer in EPS and NSAPI in UMTS/GPRS.

<APN>(str)
Access Point Name
Logical name used to select the GGSN or the external packet data network.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 387 of 564
13.13 AT+CGCONTRDP

<LocalAddr and SubNetMask>(str)

Shows the IP address and subnet mask of the UE in the format specified by AT+CGPIAF.

<GwAddr>(str)
Shows the Gateway Address of the UE in the format specified by AT+CGPIAF.

<DNS_prim_addr>(str)
Shows the IP address of the primary DNS server.
The settings of AT+CGPIAF influences the format of this parameter.

<DNS_sec_addr>(str)
Shows the IP address of the secondary DNS server.
The settings of AT+CGPIAF influences the format of this parameter.

<P_CSCF_prim_addr>(str)
Shows the IP address of the primary P-CSCF server.
The settings of AT+CGPIAF influences the format of this parameter.

<P_CSCF_sec_addr>(str)
Shows the IP address of the secondary P-CSCF server.
The settings of AT+CGPIAF influences the format of this parameter.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 388 of 564
13.14 AT+CGQMIN

13.14 AT+CGQMIN Quality of Service Profile (Minimum acceptable)

AT+CGQMIN allows the TE to specify a minimum acceptable profile which is checked by the MT against the nego-
tiated profile returned in the Activate PDP Context Accept message.

The AT+CGQMIN write command specifies a profile for the context identified by the context identification param-
eter, <cid>.
A special form of the write command, AT+CGQMIN=<cid> causes the minimum acceptable profile for context
number <cid> to become undefined. In this case no check is made against the negotiated profile.

The AT+CGQMIN test command returns values supported as a compound value.

The AT+CGQMIN read command returns the current settings for each context for which a QOS was explicitly
specified.

Syntax
Test Command

AT+CGQMIN=?
Response(s)
+CGQMIN: "IP", (list of supported <precedence>s), (list of supported <delay>s), (list of supported
<reliability>s), (list of supported <peak>s), (list of supported <mean>s)
+CGQMIN: "PPP", (list of supported <precedence>s), (list of supported <delay>s), (list of supported
<reliability>s), (list of supported <peak>s), (list of supported <mean>s)
+CGQMIN: "IPV6", (list of supported <precedence>s), (list of supported <delay>s), (list of supported
<reliability>s), (list of supported <peak>s), (list of supported <mean>s)
+CGQMIN: "IPV4V6", (list of supported <precedence>s), (list of supported <delay>s), (list of supported
<reliability>s), (list of supported <peak>s), (list of supported <mean>s)
OK
ERROR
+CME ERROR: <err>
Read Command
AT+CGQMIN?
Response(s)
+CGQMIN: [<cid>, <precedence>, <delay>, <reliability>, <peak>, <mean>]
[+CGQMIN: <cid>, <precedence>, <delay>, <reliability>, <peak>, <mean>]
[+CGQMIN: ...]
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CGQMIN=<cid>[, <precedence>[, <delay>[, <reliability>[, <peak>[, <mean>]]]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<cid>(num)(NV)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 389 of 564
13.14 AT+CGQMIN

<precedence>(num)(NV)
Precedence class
[0] Network subscribed value
1 High Priority
Service commitments shall be maintained ahead of precedence classes 2 and
3
2 Normal priority
Service commitments shall be maintained ahead of precedence class 3
3 Low priority
Service commitments shall be maintained

<delay>(num)(NV)
Delay class
The delay parameter defines the end-to-end transfer delay incurred in the transmission of SDUs through the
Packet Domain network(s).
[0] Network subscribed value
1..4 SDU size: 128 octets:

Delay Class Mean Transfer Delay 95 percentile

1 (Predictive) <0.5 <1.5
2 (Predictive) <5 <25
3 (Predictive) <50 <250
4 (Best Effort) Unspecified

SDU size: 1024 octets:

Delay Class Mean Transfer Delay 95 percentile

1 (Predictive) <0.5 <1.5
2 (Predictive) <5 <25
3 (Predictive) <50 <250
4 (Best Effort) Unspecified

<reliability>(num)(NV)
Reliability class
[0] Network subscribed value
1 Non real-time traffic, error-sensitive application that cannot cope with data loss
2 Non real-time traffic, error-sensitive application that can cope with infrequent
data loss
3 Non real-time traffic, error-sensitive application that can cope with data loss,
GMM/SM, and SMS
4 Real-time traffic, error-sensitive application that can cope with data loss
5 Real-time traffic, error non-sensitive application that can cope with data loss

<peak>(num)(NV)
Peak throughput class (in octets per second).
[0] Network subscribed value

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 390 of 564
13.14 AT+CGQMIN

1 Up to 1 000 (8 kbit/s).
2 Up to 2 000 (16 kbit/s).
3 Up to 4 000 (32 kbit/s).
4 Up to 8 000 (64 kbit/s).
5 Up to 16 000 (128 kbit/s).
6 Up to 32 000 (256 kbit/s).
7 Up to 64 000 (512 kbit/s).
8 Up to 128 000 (1024 kbit/s).
9 Up to 256 000 (2048 kbit/s).

<mean>(num)(NV)
Mean throughput class(in octets per hour).
[0] Network subscribed value
1 100 (~0.22 bit/s)
2 200 (~0.44 bit/s)
3 500 (~1.11 bit/s)
4 1 000 (~2.2 bit/s)
5 2 000 (~4.4 bit/s)
6 5 000 (~11.1 bit/s)
7 10 000 (~22 bit/s)
8 20 000 (~44 bit/s)
9 50 000 (~111 bit/s)
10 100 000 (~0.22 kbit/s)
11 200 000(~0.44 kbit/s)
12 500 000(~1.11 kbit/s)
13 1 000 000 (~2.2 kbit/s)
14 2 000 000 (~4.4 kbit/s)
15 5 000 000 (~11.1 kbit/s)
16 10 000 000 (~22 kbit/s)
17 20 000 000 (~44 kbit/s)
18 50 000 000 (~111 kbit/s)
31 best effort

Notes
• Definitions of parameters can be found in 3GPP 23.107.
• All QOS settings are non-volatile and independent of AT&F and ATZ.
• If QOS settings are configured with AT+CGQMIN and AT+CGEQMIN in parallel the MT will use only the
AT+CGEQMIN settings for connection setup while the AT+CGQMIN settings are ignored.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 391 of 564
13.15 AT+CGREG

13.15 AT+CGREG Packet Domain Network Registration Status

The AT+CGREG write command enables the presentation of the URC "+CGREG: <stat>" when <n>=1 and ME's
Packet Domain network registration status in GSM or UMTS changes, or URC "+CGREG: <stat>[, <lac>][,
<ci>][, <AcT>]" when <n>=2 and the current network cell in GSM or UMTS changes.

AT+CGREG read command queries the current URC presentation status <n> and an integer <stat> which
shows whether the network has currently indicated the registration of the ME.
Location information elements <lac>, <ci> and <AcT> are sent only if available, if <n>=2 and if ME is regis-
tered to the network.

Syntax
Test Command
AT+CGREG=?
Response(s)
+CGREG: (list of supported <n>s)
OK
Read Command
AT+CGREG?
Response(s)
+CGREG: <n>, <stat>[, [<lac>], [<ci>], [<AcT>]]
OK
Write Command

AT+CGREG=<n>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP 27.007

Unsolicited Result Codes

URC 1
+CGREG: <stat>
Indicates a change in the ME's Packet Domain network registration status.

URC 2
+CGREG: <stat>[, <lac>][, <ci>][, <AcT>]
Indicates a change in the ME's Packet Domain network registration status or a change of the network cell
including location information.

Parameter Description

<n>(num)
0(&F)(P) Disable Packet Domain network registration URC
1 Enable Packet Domain network registration URC "+CGREG: <stat>"
2 Enable Packet Domain network registration URC "+CGREG: <stat>[, <lac>][,
<ci>][, <AcT>]"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 392 of 564
13.15 AT+CGREG

<stat>(num)
0 Not registered, ME is not currently searching an operator to register to.
1 Registered, home network.
2 Not registered, but ME is currently trying to attach or searching an operator to
register to.
3 Registration denied.
4 Unknown
5 Registered, roaming.

<lac>(str)
Two byte location area code in hexadecimal format.

<ci>(str)
Cell ID in hexadecimal format:
- 16 bit for 2G
- 28 bit for 3G

<AcT>(num)
Radio access technology
0 GSM
2 UTRAN
3 GSM w/EGPRS
4 UTRAN w/HSDPA
5 UTRAN w/HSUPA
6 UTRAN w/HSDPA and w/HSUPA
7 E-UTRAN

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 393 of 564
13.16 AT+CGSMS

13.16 AT+CGSMS Select Service for MO Short Messages

AT+CGSMS specifies the service or service preference that the MT will use to send MO (mobile originated) short
messages.

Syntax
Test Command
AT+CGSMS=?
Response(s)
+CGSMS: (list of supported <service>s)
OK
Read Command
AT+CGSMS?
Response(s)
+CGSMS: <service>
OK
Write Command
AT+CGSMS=<service>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP 27.007

Parameter Description

<service>(num)(&V)(NV)
A numeric parameter which indicates the service or service preference to be used.
0 Packet Domain
(D)
1 Circuit switched
2 Packet Domain preferred (use circuit switched SMS transfer if mobile is not PS
attached)
3 Circuit switched preferred (use Packet Domain if circuit switched is not avail-
able)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 394 of 564
13.17 ATD*99#

13.17 ATD*99# Request Packet Domain service

This command causes the MT to perform whatever actions are necessary to establish a communication between
the TE and the external PDN.
The V.250 'D' (Dial) command causes the MT to enter the V.250 online data state and, with the TE, to start the
specified layer 2 protocol. No further commands may follow on the AT command line. PS attachment and PDP
context activation procedures may take place prior to or during the PDP startup if they have not already been
performed using the AT+CGATT and AT+CGACT commands.
To confirm acceptance of the command before entering the V.250 online data state command will respond with
CONNECT.
The application that initiates the PPP mode must be designed to start all LCP configure requests in accordance
with TS 27.060 par 9.1. Otherwise the MT remains, after the CONNECT, infinitely in a waiting state.
When the layer 2 protocol has terminated, either as a result of an orderly shut down of the PDP or an error, the
MT enters V.250 command state and returns NO CARRIER (for details refer to Section 13.4.1, Automatic deac-
tivation of PDP context during dial-up PPP).
ATD*99# is blocked when the Fixed Dialing lock is enabled and the number "*99#" is not present in the "FD"
phonebook (see AT+CLCK SIM Fixed Dialing lock). In this case "+CME ERROR: call barred" is returned. Please
note, this is the only extended error code supported.

Syntax
Exec Command

ATD*99[* [<called_address>][* [<L2P>][* [<cid>]]]]#

Response(s)
CONNECT
NO CARRIER
ERROR
PIN  Last Reference(s)

+ - + 3GPP TS 27.007 [51]

Parameter Description

<called_address>(str)
IP V4 address in the form w.x.y.z, which identifies the called party; if it is provided, the MT will automatically set
up a virtual call to the specified address after the context has been activated.

<L2P>(num)
Layer 2 protocol to be used between the TE and MT.
[1] layer 2 protocol PPP

<cid>(num)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).
Secondary PDP contexts are not supported.
If parameter is not specified, then the first defined primary context is used.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 395 of 564
13.18 AT+CEMODE

13.18 AT+CEMODE Modes of Operation for EPS

AT+CEMODE indicates the mode of operation for EPS (Evolved Packet System), see 3GPP TS 24.301 [45].
AT+CEMODE read command returns the mode of operation set by the TE, independent of the current serving cell
capability and independent of the current serving cell Access Technology.
AT+CEMODE test command is used for requesting information on the supported mode of operation.

Syntax
Test Command

AT+CEMODE=?
Response(s)
+CEMODE: (list of supported <mode>s)
OK
ERROR
+CME ERROR: <err>
Read Command

AT+CEMODE?
Response(s)
+CEMODE: <mode>
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<mode>(num)
Indicates the mode of operation.
0 PS mode 2 of operation
(P)
1 CS/PS mode 1 of operation
2 CS/PS mode 2 of operation
3 PS mode 1 of operation

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 396 of 564
13.19 AT+CGDSCONT

13.19 AT+CGDSCONT Define Secondary PDP Context

The AT+CGDSCONT write command specifies PDP context parameter values for a Secondary PDP context iden-
tified by the context identification parameter <cid>. The number of PDP contexts that may be in a defined state
at the same time is given by the range returned by the test command.
A special form of the write command, AT+CGDSCONT=<cid> causes the values for context number <cid> to
become undefined. The AT+CGDSCONT read command returns the current settings for each defined context.
The AT+CGDSCONT test command returns values supported as a compound value.

Syntax
Test Command

AT+CGDSCONT=?
Response(s)
+CGDSCONT: (range of supported <cid>s), (list of <pcid>s for defined primary contexts), (list of supported
<d_comp>s), (list of supported <h_comp>s)
OK
ERROR
+CME ERROR: <err>
Read Command

AT+CGDSCONT?
Response(s)
+CGDSCONT: [<cid>, <pcid>, <d_comp>, <h_comp>]
[+CGDSCONT: <cid>, <pcid>, <d_comp>, <h_comp>]
[+CGDSCONT: ...]
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CGDSCONT=<cid>[, <pcid>[, <d_comp>[, <h_comp>]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<cid>(num)(NV)
PDP Context Identifier
Parameter specifies a particular PDP context definition and is used in other PDP context-related commands.
1...16

<pcid>(num)(NV)
Primary PDP Context Identifier
Parameter specifies a particular PDP context definition which has been specified by use of the AT+CGDCONT
command. The list of permitted values is returned by the test form of the command.
1...16

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 397 of 564
13.19 AT+CGDSCONT

<d_comp>(num)(NV)
Data Compression
Controls the PDP data compression (applicable for Subnetwork Dependent Convergence Protocol (SNDCP)
only) 3GPP TS 44.065
[0] off
1 on
2 V.42bis

<h_comp>(num)(NV)
Header Compression
Controls the PDP header compression 3GPP TS 44.065, 3GPP TS 25.323
[0] off
1 on
2 RFC1144
3 RFC2507
4 RFC3095

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 398 of 564
13.20 AT+CGTFT

13.20 AT+CGTFT Traffic Flow Template

Syntax
Test Command

AT+CGTFT=?
Response(s)
+CGTFT: <pdptype>, (list of supported <filterid>s), (list of supported <precedence>s), , (list of
supported <protocolno>s), (list of supported <destportrange>s), (list of supported
<srcportrange>s), (list of supported <ipsecidx>s), (list of supported <tos>s), (list of supported
<flowlabel>s)
OK
Read Command

AT+CGTFT?
Response(s)
[+CGTFT: <cid>, <filterid>, <precedence>, <rem_addr_subnet_mask>, <protocolno>,
<destportrange>, <srcportrange>, <ipsecidx>, <tos>, <flowlabel>]
[+CGTFT: ...]
Write Command

AT+CGTFT=[<cid>[, <filterid>, <precedence>[, <rem_addr_subnet_mask>[, <protocolno>[,

<destportrange>[, <srcportrange>[, <ipsecidx>[, <tos>[, <flowlabel>]]]]]]]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Command Description
The test command returns values supported as a compound value. If the MT supports several PDP types, the
parameter value ranges for each PDP type are returned on a separate line. TFTs shall be used for PDP-type IP
and PPP only. For PDP-type PPP a TFT is applicable only when IP traffic is carried over PPP. If PPP carries
header-compressed IP packets, then a TFT cannot be used.
The read command returns the current settings for all Packet Filters for each defined context.
The write command allows the TE to specify a Packet Filter - PF for a Traffic Flow Template - TFT that is used
in the GGSN for routing of down-link packets onto different QoS flows towards the TE. The concept is further
described in the 3GPP TS 23.060. A TFT consists of from one and up to two Packet Filters, each identified by a
unique <filterid>. A Packet Filter also has an <precedence> that is unique within all TFTs associated with
all PDP contexts that are associated with the same PDP address.
The write command specifies a Packet Filter that is to be added to the TFT stored in the MT and used for the
context identified by the context identification parameter, <cid>. The specified TFT will be stored in the GGSN
only at activation or MS-initiated modification of the related context. Since this is the same parameter that is used
in the +CGDCONT and +CGDSCONT commands, the +CGTFT command is effectively an extension to these
commands. The Packet Filters consist of a number of parameters, each of which may be set to a separate value.
A special form of the write command, +CGTFT= <cid> causes all of the Packet Filters in the TFT for context
number <cid> to become undefined. At any time there may exist only one PDP context with no associated TFT
amongst all PDP contexts associated to one PDP address. At an attempt to delete a TFT, which would violate
this rule, an ERROR or +CME ERROR response is returned. Extended error responses are enabled by the
AT+CMEE command.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 399 of 564
13.20 AT+CGTFT

Parameter Description

<cid>(num)
Parameter specifies a particular PDP context definition. The parameter is local to the TE-MT interface and is
used in other PDP context-related commands.
1...16

<filterid>(num)
Packet filter identifier
Parameter specifies a packet filter identifier.
1...16

<precedence>(num)
Evaluation Precedence Index
Parameter specifies a evaluation precedence index.
0...255

<rem_addr_subnet_mask>(str)
Remote address and subnet mask
The string is given as dot-separated numeric (0-255) parameters on the form:
"a1.a2.a3.a4.m1.m2.m3.m4" for IPv4 or
"a1.a2.a3.a4.a5.a6.a7.a8.a9.a10.a11.a12.a13.a14.a15.a16.m1.m2.m3.m4.m5.m6.m7.m8.m9.m10.m11.m12.
m13.m14.m15.m16" for IPv6.
The settings of AT+CGPIAF can influence the format of this parameter.

<protocolno>(num)
Protocol number
Parameter specifies the protocol number (ipv4) / next header (ipv6).
0...255

<destportrange>(str)
Destination port range
Parameter specifies the destination port range.
"0.0"..."65535.65535"

<srcportrange>(str)
Source port range
Parameter specifies the source port range.
"0.0"..."65535.65535"

<ipsecidx>(num)
IPsec security parameter index
Parameter specifies the IPsec security parameter index (spi).
0...FFFFFFFF

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 400 of 564
13.20 AT+CGTFT

<tos>(str)
Type of service and mask/traffic class
Parameter specifies the type of service (tos)(ipv4) and mask/traffic class (ipv6).
"0.0"..."255.255"

<flowlabel>(num)
Flow label
Parameter specifies the flow label (ipv6).
0...FFFFF

<pdptype>(str)
PDP type
Parameter specifies the PDP type.
“IP“ Internet Protocol (IETF STD 5)
“PPP“ Point to Point Protocol (IETF STD 51)
“IPV6“ Internet Protocol, version 6 (see RFC 2460)
“IPV4V6“ Virtual <pdptype> introduced to handle dual IP stack UE capability. (See
3GPP TS 24.301)

Note
• Some of the above listed attributes may coexist in a Packet Filter while others mutually exclude each other,
the possible combinations are shown in 3GPP TS 23.060.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 401 of 564
13.21 AT+CGTFTRDP

13.21 AT+CGTFTRDP Traffic Flow Template Read Dynamic Parameters

The write command returns the relevant information about Traffic Flow Template for an active secondary or non-
secondary PDP context specified by <cid> together with the additional network assigned values when estab-
lished by the network.
The exec command returns the relevant information about the Traffic Flow Templates for all active secondary
and non-secondary PDP contexts.
Parameters of both network and MT/TA initiated PDP contexts will be returned.

The test command returns a list of <cid>s associated with active secondary and non-secondary contexts.

Syntax
Test Command
AT+CGTFTRDP=?
Response(s)
+CGTFTRDP: (list of <cid>s associated with active contexts)
OK
Exec Command
AT+CGTFTRDP
Response(s)
[+CGTFTRDP: <cid>, <filterid>, <precedence>, <rem_addr_subnet_mask>, <protocolno>,
<local-portrange>, <remote-portrange>, <ipsecidx>, <tos>, <flowlabel>, <direction>,
<NW-filterID>]
[+CGTFTRDP: ...]
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CGTFTRDP=<cid>
Response(s)
[+CGTFTRDP: <cid>, <filterid>, <precedence>, <rem_addr_subnet_mask>, <protocolno>,
<local-portrange>, <remote-portrange>, <ipsecidx>, <tos>, <flowlabel>, <direction>,
<NW-filterID>]
[+CGTFTRDP: ...]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - - 3GPP TS 27.007 [51]

Parameter Description

<cid>(num)
Specifies a particular secondary or non secondary PDP context definition or Traffic Flows definition (see
AT+CGDCONT and AT+CGDSCONT commands). (see notes for network initiated PDP context)
1...16

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 402 of 564
13.21 AT+CGTFTRDP

<filterid>(num)
Packet filter identifier
Specifies a packet filter identifier. (see notes for network initiated PDP context)
1...16

<precedence>(num)
Evaluation Precedence Index
Specifies a evaluation precedence index.
0...255

<rem_addr_subnet_mask>(str)
Remote address and subnet mask
The string is given as dot-separated numeric (0-255) parameters on the form:
"a1.a2.a3.a4.m1.m2.m3.m4" for IPv4 or
"a1.a2.a3.a4.a5.a6.a7.a8.a9.a10.a11.a12.a13.a14.a15.a16.m1.m2.m3.m4.m5.m6.m7.m8.m9.m10.m11.m12.
m13.m14.m15.m16" for IPv6.
The settings of AT+CGPIAF can influence the format of this parameter.

<protocolno>(num)
Protocol number
Specifies the protocol number (ipv4) / next header (ipv6).
0...255

<local-portrange>(str)
Local port range
The string is given as dot-separated numeric (0-65535) parameters on the form "f.t".

<remote-portrange>(str)
Remote port range
The string is given as dot-separated numeric (0-65535) parameters on the form "f.t".

<ipsecidx>(num)
IPsec security parameter index
Specifies the IPsec security parameter index (spi) in hexadecimal format.
00000000...FFFFFFFF

<tos>(str)
Type of service and mask/traffic class
Specifies the type of service (tos)(ipv4) and mask/traffic class (ipv6) and mask. The string is given as dot-sep-
arated numeric (0-255) parameters on the form "f.t".

<flowlabel>(num)
Flow label
Parameter specifies the flow label in hexadecimal format (valid for ipv6 only).
00000...FFFFF

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 403 of 564
13.21 AT+CGTFTRDP

<direction>(num)
Specifies the transmission direction in which the Packet Filter will be applied.
0 Pre Release 7 TFT Filter
1 Uplink
2 Downlink
3 Bidirectional (Used for Uplink and Downlink)

<NW-filterID>(num)
NW Packet filter identifier
Parameter specifies a packet filter identifier. In EPS the value is assigned by the network when established.
1...16

Notes
• Some of the listed attributes can coexist in a Packet Filter while others mutually exclude each other. The pos-
sible combinations are shown in 3GPP TS 23.060 [31].
• The <cid> for network-initiated PDP contexts will have values outside the ranges (including values of 100
and above) indicated for the <cid> in the test form of the commands AT+CGDCONT and AT+CGDSCONT.
• <filterid> values for network initiated PDP contexts can have values outside the ranges indicated.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 404 of 564
13.22 AT^SGAUTH

13.22 AT^SGAUTH Set Type of Authentication for PDP-IP Connections

Syntax
Test Command

AT^SGAUTH=?
Response(s)
^SGAUTH:(range of supported<cid>s), (list of supported <auth_type>s), ,
OK
ERROR
+CME ERROR: <err>
Read Command

AT^SGAUTH?
Response(s)
^SGAUTH:<cid>, <auth_type>[, <user>]
^SGAUTH:<cid>, <auth_type>[, <user>]
...
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SGAUTH=<cid>[, <auth_type>[, <passwd>, <user>]]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<cid>(num)(NV)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).

<auth_type>(num)(NV)
Indicates the types of authentication to be used for the specified context. If CHAP or PAP is selected two addi-
tional parameters <passwd> and <user> need to be specified.
[0] none
1 PAP
2 CHAP

<passwd>(str)(NV)
Parameter specifies the password used for authentication. It is required for the authentication types PAP and
CHAP.
Maximum length: 127 characters.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 405 of 564
13.22 AT^SGAUTH

<user>(str)(NV)
Parameter specifies the user name used for authentication. It is required for the authentication types PAP and
CHAP.
Maximum length: 127 characters.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 406 of 564
13.23 AT^SWWAN

13.23 AT^SWWAN PDP Context Activate or Deactivate

AT^SWWAN write command can be used to activate or deactivate a WWAN connection for a PDP context defined
with AT+CGDCONT.

UE supports one WWAN adapter (also referred to as a Wireless Adapter or a RmNet interface).

AT^SWWAN read command shows whether a WWAN connection is active and which PDP context is used for it.
If no WWAN connection is active, then read command just returns OK. To track activation errors AT^SIND indi-
cator "ceer" can be used.

Syntax
Test Command
AT^SWWAN=?
Response(s)
^SWWAN: (list of supported <state>s), (list of supported <cid>s), (list of supported <WWAN adapter>s)
OK
ERROR
+CME ERROR: <err>
Read Command
AT^SWWAN?
Response(s)
[^SWWAN: <cid>, <state>[, <WWAN adapter>]]
[^SWWAN: ...]
OK
ERROR
+CME ERROR: <err>
Write Command

Activate/Deactivate WWAN connection

AT^SWWAN=<action>, <cid>[, <WWAN adapter>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
+ - -

Parameter Description

<action>(num)
0 Deactivate
1 Activate

<state>(num)
0(P) Deactivated
1 Activated

<cid>(num)
Parameter specifies a particular PDP context definition (see AT+CGDCONT parameter <cid>).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 407 of 564
13.23 AT^SWWAN

<WWAN adapter>(num)
1 First WWAN adapter
If parameter <WWAN adapter> is omitted in the AT^SWWAN write command,
the first WWAN adapter will be used.

Notes
• PDP contexts already activated by other commands as for example AT+CGACT cannot be reused for WWAN,
except in LTE mode where the PDP context activated for LTE attach can also be used to start a WWAN con-
nection. However, please note that some providers do not allow reusing this PDP context for data connectivity
via Internet (e.g. German Telecom, China Mobile). For more information please refer to Section 13.5.1,
Attaching to LTE Networks and Registering to IMS.
• PDP contexts defined for IMS and Emergency APNs cannot be used for WWAN connections.
To check the currently defined PDP contexts use the AT+CGDCONT read command. The preconfigured APNs
largely depend on the provider configuration, some APNs refer to IMS or SOS, others do not. Therefore, it is
recommended to check especially the AT+CGDCONT parameter <P-CSCF_discovery> that is enabled
(value 1) only in PDP contexts for IMS or IMS Emergency signalling.
• If activation or deactivation of a WWAN connection fails, then AT+CEER may provide further information about
the reason.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 408 of 564
13.24 AT+CGPIAF

13.24 AT+CGPIAF Select Printing IP address format

AT+CGPIAF specifies the format to print IPV6 address parameters of other AT commands. See RFC 4291 for
details of the IPv6 address format. The +CGPIAF parameters <format>, <subnet>, <lzeros> and <cze-
ros> affect the following commands and parameters:
• in AT+CGTFT and AT+CGTFTRDP, the <rem_addr_subnet_mask>;
• in AT+CGDCONT, the <PDP_addr>;
• in AT+CGPADDR, the <PDP_address_1> and <PDP_address_2>;
• in AT+CGCONTRDP, the <LocalAddr and SubNetMask>, <GwAddr>, <DNS_prim_addr>,
<DNS_sec_addr>, <P_CSCF_prim_addr> and <P_CSCF_sec_addr>.

The read command returns the current command parameter settings.

The test command returns supported parameter values.

Syntax
Test Command
AT+CGPIAF=?
Response(s)
+CGPIAF: (list of supported <format>s), (list of supported <subnet>s), (list of supported <lzeros>s),
(list of supported <czeros>s)
OK
Read Command

AT+CGPIAF?
Response(s)
+CGPIAF: <format>, <subnet>, <lzeros>, <czeros>
OK
Write Command

AT+CGPIAF=[<format>[, <subnet>[, <lzeros>[, <czeros>]]]]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP 27.007

Parameter Description

<format>(num)
A numeric parameter which decides the IPv6 address format. Relevant for all AT command parameters that can
hold an IPv6 address.
0(&F)(P) Use IPv4-like dot-notation. IP address, and subnetwork mask if appliccable,
are dot-separated, e.g.
"32.1.13.184.0.0.205.48.0.0.0.0.0.0.0.0.255.255.255.255.255.255.255.240.0.
0.0.0.0.0.0.0"
for parameters holding address and subnet mask and
"32.1.13.184.0.0.205.48.0.0.0.0.0.0.0.0"
for other IP address parameters.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 409 of 564
13.24 AT+CGPIAF

1 Use IPv6-like colon-notation. IP address, and subnetwork mask if applicable

and when given explicitly, are separated by a space, e.g.
"2001:0DB8:0000:CD30:0000:0000:0000:0000
FFFF:FFFF:FFFF:FFF0:0000:0000:0000:0000"
for parameters holding address and subnet mask and
"2001:0DB8:0000:CD30:0000:0000:0000:0000"
for other IP address parameters.

<subnet>(num)
A numeric parameter which decides the subnet-notation for parameters that hold remote address and subnet
mask, e.g. <rem_addr_subnet_mask>. Setting does not apply if <format>= 0.
0(&F)(P) Both IP Address and subnet mask are stated explicitly, separated by a space,
e.g.
"2001:0DB8:0000:CD30:0000:0000:0000:0000
FFFF:FFFF:FFFF:FFF0:0000:0000:0000:0000".
1 The printout format is applying / (forward slash) subnet-prefix Classless Inter-
Domain Routing (CIDR) notation, e.g.
":0DB8:0000:CD30:0000:0000:0000:0000/60"

<lzeros>(num)
A numeric parameter which decides whether leading zeros are omitted or not. Setting does not apply if <for-
mat>= 0.
0(&F)(P) Leading zeros are omitted, e.g. "2001:DB8:0:CD30:0:0:0:0".
1 Leading zeros are included, e.g.
"2001:0DB8:0000:CD30:0000:0000:0000:0000".

<czeros>(num)
A numeric parameter which decides whether 1-n instances of 16-bit zero-values are replaced by only '::'. This
applies only once. Setting does not apply if <format>= 0.
0(&F)(P) No zero compression, e.g. "2001:DB8:0:CD30:0:0:0:0".
1 Use zero compression, e.g. "2001:DB8:0:CD30::".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 410 of 564
13.25 AT+CNMPSD

13.25 AT+CNMPSD No more PS data

The AT+CNMPSD command indicates that no application on the MT is expected to exchange data. Upon receiving
this command, the final result code OK is returned. When in UTRAN, if further conditions defined in 3GPP TS
25.331 [49] are met, this can cause transmission of a SIGNALLING CONNECTION RELEASE INDICATION
message with the cause "UE Requested PS Data session end".

Syntax
Test Command

AT+CNMPSD=?
Response(s)
OK
Exec Command

AT+CNMPSD
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ - + 3GPP 27.007

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 411 of 564
14. USIM related Commands

14. USIM related Commands

AT commands described in this chapter are related to the Universal Subscriber Identity Module (USIM) con-
nected to the PLS63-W.

14.1 AT+CCID USIM Card Identification Number

AT+CCID serves to query the USIM card identification number. This information is retrieved from USIM Elemen-
tary File EFICCID. For details refer to 3GPP TS 11.11 [19], 3GPP TS 31.101 [20], 3GPP TS 31.102 [21].

Syntax
Test Command

AT+CCID=?
Response(s)
OK
Exec Command

AT+CCID
Response(s)
+CCID: <ICCID>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<ICCID>(str)
ICCID (Integrated Circuit Card ID) of the USIM card

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 412 of 564
14.2 AT+CRSM

14.2 AT+CRSM Restricted USIM Access

AT+CRSM offers easy access of the Elementary Files on the USIM. Access to the USIM database is restricted to
the commands listed with parameter <command>.
All parameters of AT+CRSM are used as defined by the specifications listed below. PLS63-W handles internally
all required USIM interface locking and file selection routines.
As response to the command, the PLS63-W sends the actual USIM information parameters and response data.
"+CME ERROR" may be returned if the command cannot be passed to the USIM, e.g. if the USIM is not inserted.
Failures to execute the command on the USIM will be reported by the <sw1> and <sw2> parameters.

Syntax
Test Command

AT+CRSM=?
Response(s)
OK
Write Command

AT+CRSM=<command>[, <fileID>[, <P1>, <P2>, <P3>[, <data>][, <pathId>]]]

Response(s)
+CRSM: <sw1>,<sw2>[,<response>]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51],

3GPP TS 11.11 [19], 3GPP TS
31.101 [20], 3GPP TS 31.102 [21],
ETSI TS 102 221 [22]

Parameter Description

<command>(num)
USIM command number.
176 READ BINARY
178 READ RECORD
192 GET RESPONSE
214 UPDATE BINARY
220 UPDATE RECORD
242 STATUS

<fileID>(num)
Identifier for an elementary data file on USIM, if used by <command>.

<P1>(num)
Parameter to be passed on by the PLS63-W to the USIM.
0...255

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 413 of 564
14.2 AT+CRSM

<P2>(num)
Parameter to be passed on by the PLS63-W to the USIM.
0...255

<P3>(num)
Parameter to be passed on by the PLS63-W to the USIM.
0...255

<data>(str)
Information which shall be written to the USIM (hexadecimal character format).

<pathId>(str)
Contains the directory path of an elementary file on a UICC in hexadecimal format (e.g. "7F105F50").
Up to 3 Dedicated Files (DFs) can be listed.
The <pathId> parameter is applicable only to UICCs.
Some types of UICCs may have Dedicated Files which are not unique, because the same file ID is allocated to
several applications on the UICC and this way used twice or even more times. Therefore, to access UICC files
of USIM applications please use the optional parameter <pathId>. UICC files of USIM applications are acces-
sible without any need for the <pathId> parameter.

<sw1>(num)
Status information from the USIM about the execution of the actual command. It is returned in both cases, on
successful or failed execution of the command.
0...255

<sw2>(num)
Status information from the USIM about the execution of the actual command. It is returned in both cases, on
successful or failed execution of the command.
0...255

<response>(str)
Response data in case of a successful completion of the previously issued command.
"STATUS" and "GET RESPONSE" commands return data, which gives information about the currently selected
elementary data field. This information includes the type of file and its size.
After "READ BINARY" or "READ RECORD" commands the requested data will be returned.
<response> is empty after "UPDATE BINARY" or "UPDATE RECORD" commands.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 414 of 564
14.3 AT+CSIM

14.3 AT+CSIM Generic USIM Access

AT+CSIM allows direct control of the USIM.

Compared to the restricted USIM access command AT+CRSM, the definition of AT+CSIM allows to take more con-
trol over the USIM interface.
However, the USIM Application Toolkit functionality is not supported by AT+CSIM. Therefore the following USIM
commands cannot be used: TERMINAL PROFILE, ENVELOPE, FETCH and TEMINAL RESPONSE.

Syntax
Test Command
AT+CSIM=?
Response(s)
OK
Write Command
AT+CSIM=<length>, <command>
Response(s)
+CSIM: <length>,<response>
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51],

3GPP TS 11.11 [19], 3GPP TS
31.101 [20], 3GPP TS 31.102 [21],
ETSI TS 102 221 [22]

Parameter Description

<length>(num)
Number of characters in <command> or <response> string.

<command>(str)
Command passed on by the PLS63-W to the USIM.
Parameter length: maximum 260 Bytes.

<response>(str)
Response data of the command returned by the USIM.
Parameter length: maximum 258 Bytes.

Note
• Access to datafields via SELECT is only allowed to files according to 3GPP TS 11.11 [19], 3GPP TS 31.101
[20], 3GPP TS 31.102 [21].

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 415 of 564
14.3 AT+CSIM

Examples
EXAMPLE 1
The following examples show SELECT and GET RESPONSE commands for a 2G SIM card.
AT+CSIM=14,"A0A40000027F10" SELECT DF-Telecom.
+CSIM: 4,"9F19" Command successful. Indicates that x19 bytes
response data are available and can be requested by
using GET RESPONSE.
OK
AT+CSIM=14,"A0A40000026F3A" SELECT EF-ADN (Abbreviated dialing numbers).
+CSIM: 4,"9F0F" Command successful. Indicates that x0F bytes
response data are available and can be requested by
using GET RESPONSE.
OK
AT+CSIM=10,"A0C000000F" GET RESPONSE command requests x0F bytes EF-
ADN data.
+CSIM: 34,"000002306F3A040011F0220102011C9000"
OK
EXAMPLE 2
The following examples show SELECT and GET RESPONSE commands for a 3G USIM card.
AT+CSIM=14,"00A40004023F00" SELECT Master File (MF).
+CSIM: 4,"6138" Command successful. Indicates that x38 bytes
response data are available and can be requested by
using GET RESPONSE.
OK
AT+CSIM=10,"00C0000038" GET RESPONSE command requests x38 bytes MF
data.
+CSIM: 116,"6236.......A9000" (Response truncated here.)
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 416 of 564
14.4 AT+CCHO

14.4 AT+CCHO Open logical channel

AT+CCHO asks the UE to open a communication session with USIM. The UICC will open a new logical channel
for the selected application identified by <dfname> and the UE shall return <sessionid> as response. The UE
shall restrict the communication between the TE and the UICC to this logical channel.
The <sessionid> shall be used when sending commands with the Generic Logical Channel access AT+CGLA
command. It will also be used with AT+CCHC to close the channel.

Syntax
Test Command
AT+CCHO=?
Response(s)
OK
Write Command
AT+CCHO=<dfname>
Response(s)
+CCHO: <sessionid>
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51],

3GPP TS 11.11 [19], 3GPP TS
31.101 [20], 3GPP TS 31.102 [21]

Parameter Description

<dfname>(str)
All selectable applications in USIM are referenced by DF name coded on 1 to 16 bytes.

<sessionid>(num)
A session Id to be used in order to target a specific application on USIM using logical channels mechanism.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 417 of 564
14.5 AT+CCHC

14.5 AT+CCHC Close logical channel

AT+CCHC asks the UE to close a communication session with the USIM. The UE shall close the previously
opened logical channel, and no more commands can be sent on this logical channel. The UICC will close the
logical channel when receiving this command.

Syntax
Test Command

AT+CCHC=?
Response(s)
OK
Write Command

AT+CCHC=<sessionid>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51],

3GPP TS 11.11 [19], 3GPP TS
31.101 [20], 3GPP TS 31.102 [21]

Parameter Description

<sessionid>(num)
Session Id to be used in order to target a specific application on the USIM using the logical channels mechanism.
The number is the <sessionid> returned by the channel open command AT+CCHO.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 418 of 564
14.6 AT+CGLA

14.6 AT+CGLA Generic logical channel access

AT+CGLA allows direct control of the USIM by a remote application on the TE. The UE manages the channel
relevant bits of the class byte depending on the <sessionid> and then sends the <command> as it is to the
USIM. The UE takes care of processing USIM information within the frame specified by GSM/UMTS.
For parameter and USIM result coding please refer to 3GPP TS 11.11 [19], 3GPP TS 31.101 [20], 3GPP TS
31.102 [21].

Syntax
Test Command
AT+CGLA=?
Response(s)
OK
Write Command
AT+CGLA=<sessionid>, <length>, <command>
Response(s)
+CGLA: <length>,<response>
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51],

3GPP TS 11.11 [19], 3GPP TS
31.101 [20], 3GPP TS 31.102 [21]

Parameter Description

<sessionid>(num)
Identifier of the session to be used in order to send the APDU commands to the USIM.
The number is the <sessionid> returned by the channel open command AT+CCHO.

<length>(num)
Number of characters of <command> or <response> string.

<command>(str)
Command passed on by the UE to the USIM.

<response>(str)
Response data of the command returned by the USIM.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 419 of 564
14.7 AT^SSET

14.7 AT^SSET USIM Data Ready Indication

After power-up and personalization (PIN entry if required) PLS63-W starts reading data from the USIM. AT^SSET
controls the presentation of "^SSIM READY" URC which indicates that the UE has finished this initial reading.
Afterwards all AT commands that depend on USIM data can be used, e.g. phonebook and SMS related AT com-
mands.

Syntax
Test Command

AT^SSET=?
Response(s)
^SSET:(list of supported <n>s)
OK
Read Command

AT^SSET?
Response(s)
^SSET: <n>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SSET=<n>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Unsolicited Result Code

^SSIM READY
This URC indicates that the UE has finished its initial USIM access.
Any attempt to access phonebook, SMS or other USIM data before having received the "^SSIM READY" URC,
may either result in a "+CME: SIM busy" message or, in some cases, a couple of seconds delay before the com-
mand is executed.

Parameter Description

<n>(num)(&V)(&W)
URC presentation mode
0(&F) Disable "^SSIM READY" URC.
1 Enable "^SSIM READY" URC.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 420 of 564
14.8 AT^SCID

14.8 AT^SCID USIM Identification Number

AT^SCID serves to query the USIM identification number. This information is retrieved from USIM elementary
file EFICCID; for details refer to 3GPP TS 11.11 [19], 3GPP TS 31.101 [20], 3GPP TS 31.102 [21].

Syntax
Test Command
AT^SCID=?
Response(s)
OK
Exec Command
AT^SCID
Response(s)
^SCID: <cid>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<cid>(text)
USIM identification number.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 421 of 564
14.9 AT^SCKS

14.9 AT^SCKS Query USIM and Chip Card Holder Status

AT^SCKS write command enables or disables the presentation of URCs to report the connection status of the
USIM.
AT^SCKS read command returns the URC presentation mode and the status of the USIM connection.
Also refer to AT^SIND, which supplies indicator "simstatus" to monitor the USIM status.

Syntax
Test Command

AT^SCKS=?
Response(s)
^SCKS:(list of supported <mode>s)
OK
Read Command

AT^SCKS?
Response(s)
^SCKS: <mode>, <SimStatus>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SCKS=<mode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Unsolicited Result Code

^SCKS: <SimStatus>
If the USIM connection status has changed an unsolicited result code (URC) is issued.

Parameter Description

<mode>(num)(&V)(&W)
0(&F) Disable URC "^SCKS".
1 Enable URC "^SCKS".

<SimStatus>(num)(&V)
0 USIM is not inserted.
1 USIM inserted.
2 Possible reasons:
• The USIM interface hardware has been deactivated to prevent possible
damage (e.g. if a USIM with invalid or unsupported electrical specifications
has been detected).
The USIM interface can be reactivated only by restarting the UE, e.g. with
"AT+CFUN= n,1".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 422 of 564
14.9 AT^SCKS

• In case a 5V USIM is inserted it might be possible that the USIM is not func-
tional at all. As a result, URC "^SCKS: 0" occurs.

Note
• If <mode>=1 ("^SCKS" URC enabled) is stored to the user profile with AT&W it may happen that the "^SCKS"
URC shows up after the "^SYSSTART" URC although the (U)SIM connection status has not changed.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 423 of 564
15. Phonebook Commands

15. Phonebook Commands

The AT command(s) described in this chapter allow the external application to access the phonebooks located
in the PLS63-W's memory or on the attached Subscriber Identity Module (SIM).

15.1 AT+CPBS Select phonebook memory storage

AT+CPBS selects the active phonebook storage, i.e. the phonebook storage that all subsequent phonebook com-
mands will be operating on.
The read command returns the currently selected <storage>, the number of <used> entries and the <total>
number of entries available for this storage.
The test command returns all supported <storage>s as compound value.

Syntax
Test Command

AT+CPBS=?
Response(s)
+CPBS: (list of supported <storage>s)
OK
ERROR
+CME ERROR: <err>
Read Command

AT+CPBS?
Response(s)
+CPBS: <storage>, <used>, <total>
OK
ERROR
+CME ERROR: <err>
Exec Command

All records of the "LD" phonebook will be deleted.

AT+CPBS
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CPBS=<storage>
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

For write access to FD phonebook

AT+CPBS=<storage>, <pin>
Response(s)
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 424 of 564
15.1 AT+CPBS

Write Command (Continued)

For write access to FD phonebook

AT+CPBS=<storage>, <pin>
Response(s)
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<storage>(str)
“SM“(&F)(P) USIM phonebook
Capacity: depending on USIM
Location: USIM
“FD“ Fixed dialing phonebook
Capacity: depending on USIM
Location: USIM
“LD“ Last number dialed phonebook. Stores all call numbers dialed with ATD.
Capacity: Depending on USIM
Location: USIM
AT+CPBW command is not applicable to this storage.
“EN“ Emergency number
Capacity: depending on USIM or ME
Location: USIM or ME
Can be accessed without entering PIN.
AT+CPBW command is not applicable to this storage.
“ON“ MSISDN list
Availability and capacity: depending on USIM
Location: USIM

<used>(num)
Value indicating the number of used locations in selected memory storage.

<total>(num)
Value indicating the maximum number of locations allowed in the selected memory storage.

Notes
• Users should be aware that when using this AT command quickly after USIM PIN authentication, the USIM
data may not yet be accessible, resulting in a short delay before the requested AT command response is
returned.
• The following call history rule applies to the phonebook type "LD":
When the same number is dialed several times in direct succession, the "LD" phonebooks will store each
entry, resulting in double or multiple "LD" phonebook entries related to this number.
Likewise, the phonebook will store each entry when calls from the same number are received several times.
• To get write access to the "FD" phonebook the following input is required: AT+CPBS="FD","PIN2"
• When using "EN" phonebook the numbers 911 and 112 must always be output by using AT+CPBR write com-
mand. ATD For more details about emergency numbers see notes in ATD dial command.
• Emergency number ("EN") phonebook can be accessed (using AT+CPBS="EN") without entering PIN usually
used by AT+CPIN="PIN1". Then AT+CPBS read command and AT+CPBR write command are also possible
without entering PIN.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 425 of 564
15.1 AT+CPBS

• "LD" phonebook is only supported when corresponding Elementary File is available on USIM. Elementary
Files belonging to "LD" phonebook are optional on USIM.
• The <text> assigned to a phone <number> is stored to the "LD" phonebook only if the complete comparison
with the number delivered by the network provider is successful.
• When a dial string includes DTMF digits, the DTMF digits are not saved at the "LD" phonebook. ABCD can
be used as DTMF digits within a ATD dial string, but cannot be saved due to BCD limitations.
• After having locked or unlocked the "FD" phonebook using the command AT+CLCK="FD",1 or 0,"PIN2" the
refresh mechanism takes some seconds, therefore it is not possible to see the "SM" phonebook shortly after
entering the lock or unlock command.
• The "SM" phonebook may or may not be available when FD lock is activated (see AT+CLCK), depending on
USIM and its configuration.
• "LD" phonebook stores all call numbers dialed with ATD (except *# sequences). For details see Section 22.1,
Star-Hash (*#) Network Commands.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 426 of 564
15.2 AT+CPBR

15.2 AT+CPBR Read from phonebook

AT+CPBR serves to read one or more entries from the phonebook selected with AT command AT+CPBS.

The AT+CPBR test command returns the location range supported by the current phonebook storage, the maxi-
mum length of <number> field and the maximum length of <text> field.
Note: Length information may not be available while SIM storage is selected. If storage does not offer format
information, the format list contains empty parenthesizes.

The AT+CPBR write command determines the phonebook entry to be displayed with <location1> or a location
range from <location1> to <location2>. Hence, if no <location2> is given only the entry at
<location1> will be displayed.
If no entries are found at the selected location "+CME ERROR: not found" will be returned.

For extended USIM phonebook features there are several additional parameters (<group>, <adnumber>,
<adtype> <secondtext>, <email>, <sip_uri> and <tel_uri>) possible.

Syntax
Test Command
AT+CPBR=?
Response(s)
+CPBR: (1-<maxloc>), <nlength>, <tlength>[, <glength>, <slength>, <elength>, <siplength>,
<tellength>]
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CPBR=<location1>[, <location2>]
Response(s)
[+CPBR: <location1>, <number>, <type>, <text>[, <group>, <adnumber>, <adtype>,
<secondtext>, <email>, <sip_uri>, <tel_uri>]]
[+CPBR: <location2>, <number>, <type>, <text>[, <group>, <adnumber>, <adtype>,
<secondtext>, <email>, <sip_uri>, <tel_uri>]]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

± + - 3GPP TS 27.007 [51],

3GPP TS 24.008 [43],
3GPP TS 11.11 [19], 3GPP TS
31.101 [20], 3GPP TS 31.102 [21]

Parameter Description

<location1>(num)
The first (lowest) location number within phonebook memory where to start reading. The maximum range sup-
ported by the current phonebook is given in the test command response.
If <location1> exceeds the upper bound <maxloc> (as indicated by the test command), command will
respond with "+CME ERROR: invalid index".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 427 of 564
15.2 AT+CPBR

<location2>(num)
The last (highest) location number within phonebook memory where to stop reading. The maximum range sup-
ported by the current phonebook is given in the test command response.
If both <location1> and <location2> are in the range indicated by the test command parameter <max-
loc>, the list of entries will be output and terminated with "OK". If <location2> exceeds the range indicated
by the test command parameter <maxloc>, the list of entries will be output but terminated with "+CME ERROR:
invalid index".

<number>(str)
Phone number in format specified by <type>, it may be an empty string.

<type>(num)
Type of address octet, which defines the used type of number (ton) and the numbering plan identification (npi).
Possible values are:
128 Restricted <number> includes unknown type and format.
145 Dialing string <number> includes international access code character '+'.
161 National number <number>. Network support of this type is optional.
209 Dialing string <number> has been saved as ASCII string and includes non-
digit characters other than "*", "#" or "+". Note that phonebook entries saved
with this type cannot be dialed.
255 Dialing string <number> contains "*", "#" characters for Supplementary Ser-
vice codes. Network support of this type is optional.
129 Otherwise.

<text>(str)(+CSCS)
Text assigned to a phone number. The maximum length for this parameter is given with test command response
parameter <tlength>.
If using an ASCII terminal characters which are coded differently in ASCII and GSM have to be entered via
escape sequences as described in Section 1.7, Supported character sets.

<group>(str)(+CSCS)
Indication of a group the entry may belong to. Parameter must be present, although it may be an empty string.
The maximum length of this parameter is given in the test command response <glength>. When using an
ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via escape
sequences as described in Section 1.7, Supported character sets.

<adnumber>(str)
Additional phone number in format specified by <adtype>. Parameter must be present, although it may be an
empty string. Alphabetic characters are not permitted. <adnumber> may contain dialstring modifiers "*", "#" or
"+".

<adtype>(num)
Additional type of address octet, which defines the used type of number (ton) and the numbering plan identifi-
cation (npi).
If <adtype> is not specified the unknown <adtype>=129 is used. Supported values are:
128 Restricted <adnumber> includes unknown type and format.
145 Dialing string <adnumber> must include international access code character
"+".
161 National number <adnumber>. The network support for this type is optional.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 428 of 564
15.2 AT+CPBR

209 Dialing string <adnumber> will be saved as ASCII string.

255 Dialing string <adnumber> is a command to control a Supplementary Service,
i.e. "*", "#" codes are contained. Network support of this type is optional.
129 Unknown number <adnumber>.

<secondtext>(str)(+CSCS)
Second text assigned to the phonebook entry. Parameter must be present, although it may be an empty string.
The maximum length of this parameter is given in the test command response <slength>. When using an
ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via escape
sequences as described in Section 1.7, Supported character sets.

<email>(str)(+CSCS)
Email field assigned to the phonebook entry. Parameter must be present, although it may be an empty string.
The maximum length of this parameter is given in the test command response <elength>. When using an
ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via escape
sequences as described in Section 1.7, Supported character sets.

<sip_uri>(str)(+CSCS)
SIP number field assigned to the phonebook entry. Parameter must be present, although it may be an empty
string. The maximum length of this parameter is given in the test command response <siplength>. When
using an ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via
escape sequences as described in Section 1.7, Supported character sets.

<tel_uri>(str)(+CSCS)
TEL number field assigned to the phonebook entry. Parameter must be present, although it may be an empty
string. The maximum length of this parameter is given in the test command response <tellength>. When
using an ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via
escape sequences as described in Section 1.7, Supported character sets.

<maxloc>(num)
Maximum location number for the currently selected storage. For phonebooks located on SIM, this value varies
depending on the SIM card. See AT+CPBS for typical values.

<nlength>(num)
Maximum length of phone number for "normal" locations. Depending on the storage a limited number of loca-
tions with extended memory is available per phonebook. These locations allow storing numbers with twice the
standard length, which is 2*<nlength> digits for normal numbers, but only <nlength> digits for numbers
saved with <type>=209.

<tlength>(num)
Maximum amount of memory of <text> assigned to the telephone number in bytes. The value is shown in the
AT+CPBR test command response. For details please see AT+CPBW parameter <tlength>.

<glength>(num)
Maximum length of <group> assigned to the phonebook entry. For GSM or UCS2 character coding details see
parameter <tlength>.

<slength>(num)
Maximum length of <secondtext> assigned to the phonebook entry. For GSM or UCS2 character coding
details see parameter <tlength>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 429 of 564
15.2 AT+CPBR

<elength>(num)
Maximum length of <email> assigned to the phonebook entry. For GSM or UCS2 character coding details see
parameter <tlength>.

<siplength>(num)
Maximum length of <sip_uri> assigned to the phonebook entry. For GSM or UCS2 character coding details
see parameter <tlength>.

<tellength>(num)
Maximum length of <tel_uri> assigned to the phonebook entry. For GSM or UCS2 character coding details
see parameter <tlength>.

Notes
• Users should be aware that when using this AT command quickly after SIM PIN authentication the SIM data
may not yet be accessible, resulting in a short delay before the requested AT command response is returned.
• When a supplementary service command was stored to the phonebook along with a "+" within the phone
number please note that the UE will not display the "+" after restart, but correctly handles the phone number
as international type.
• When emergency number ("EN") phonebook is selected by AT+CPBS write command the numbers 911 and
112 must always be output by using AT+CPBR write command. ATD For more details about emergency num-
bers see notes in ATD dial command.
• Emergency number ("EN") phonebook can be accessed (using AT+CPBS="EN") without entering PIN usually
used by AT+CPIN="PIN1". Then AT+CPBS read command and AT+CPBR write command are also possible
without entering PIN.
• There is no restriction reading unsupported values for <type>.
• For extended USIM phonebook features please check with AT+CPBR test command which parameters are
possible.
• The handling of extended USIM phonebook features is controlled by the user (e.g. saved phonebook entries
cannot be dialed, no handling of '+' in international numbers, no support for Supplementary Service, i.e. '*#'
codes, etc. ).

Examples
EXAMPLE 1

AT+CPBR=? First run the AT+CPBR test command to find out the
maximum range of entries stored in the active
phonebook.
+CPBR: (1-100),20,17 PLS63-W returns the supported values, where 100 is
the supported range of location numbers, 20 is the
length of the phone number and 17 is the maximum
length of the associated text.
AT+CPBR=1,3 Then use the AT+CPBR write command to display the
+CPBR: 1,"+999999",145,"Charlie" phonebook entries sorted by location numbers.
+CPBR: 2,"+777777",145,"Bill"
+CPBR: 3,"+888888",145,"Arthur"
EXAMPLE 2
The following example shows the extended parameters when using an USIM.
Please have a look to the sample of write (via AT+CPBW) and read (via AT+CPBR) phonebook entry of location
10.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 430 of 564
15.2 AT+CPBR

AT+CPBR=10
+CPBR:
10,"07032002",129,"Alec","z","+311028128",145,"Boss","[email protected]","sip:+49-
30-123@domain","tel:+49-30-123"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 431 of 564
15.3 AT+CPBW

15.3 AT+CPBW Write into phonebook

The AT+CPBW write command can be used to create, edit and delete a phonebook entry at a <location> of
the active storage selected with AT+CPBS.
If <storage>="FD" (SIM fixed dialing numbers) is selected, PIN2 authentication has to be performed prior to
any write access.

The AT+CPBW test command returns the location range supported by the current storage, the maximum length
of the <number> field, the range of supported <type> values and the maximum length of the <text> field.
Note: The length may not be available while SIM storage is selected. If storage does not offer format information,
the format list contains empty parenthesizes.

For extended USIM phonebook features there are several additional parameters (<group>, <adnumber>,
<adtype> <secondtext>, <email>, <sip_uri> and <tel_uri>) possible.

Syntax
Test Command

AT+CPBW=?
Response(s)
+CPBW: (1-<maxloc>), <nlength>, (list of supported <type>s), <tlength>[, <glength>, <slength>,
<elength>, <siplength>, <tellength>]
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CPBW=[<location>][, <number>[, <type>[, <text>[, <group>[, <adnumber>[, <adtype>[,
<secondtext>[, <email>[, <sip_uri>[, <tel_uri>]]]]]]]]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51],

3GPP TS 24.008 [43],
3GPP TS 11.11 [19], 3GPP TS
31.101 [20], 3GPP TS 31.102 [21]

Parameter Description

<location>(num)
Location number within phonebook memory. The maximum range supported by each storage type is indicated
in the test command response. If <location> is not given, the first free entry will be used.
If <location> is given as the only parameter, the phonebook entry specified by <location> is deleted.

<number>(str)
Phone number in format specified by <type>. Parameter must be present, although it may be an empty string.
The <number> may contain dialstring modifiers "*", "#" or "+".
If other printable special characters or alphabetic characters are used the entry needs to be saved with
<type>=209. A <number> saved with <type>=209 requires double memory. In order to fit into a standard
location, the number needs to be reduced to a maximum length of <nlength>/2, including all digits and dial
string modifiers. Extended locations may be used as stated below for <nlength>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 432 of 564
15.3 AT+CPBW

<type>(num)
Type of address octet, which defines the used type of number (ton) and the numbering plan identification (npi).
If <type> is not specified:
- if <number> starts with "+", <type> 145 is used
- otherwise, <type> 129 is used.
Supported values are:
128 Restricted <number> includes unknown type and format.
145 Dialing string <number> includes international access code character "+".
161 National number <number>. The network support for this type is optional.
209 Dialing string <number> will be saved as ASCII string.
Note that phonebook entries saved with this type cannot be dialed.
255 Dialing string <number> contains "*", "#" characters for Supplementary Ser-
vice codes. Network support of this type is optional.
129 Unknown number. If <number> contains a leading "+", the "+" sign will be
removed.

<text>(str)(+CSCS)
Text assigned to the phone number. The maximum length of this parameter is given in the test command
response <tlength>. When using an ASCII terminal, characters which are coded differently in ASCII and GSM
have to be entered via escape sequences as described in Section 1.7, Supported character sets.

<group>(str)(+CSCS)
Indication of a group the entry may belong to. Parameter must be present, although it may be an empty string.
The maximum length of this parameter is given in the test command response <glength>. When using an
ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via escape
sequences as described in Section 1.7, Supported character sets.

<adnumber>(str)
Additional phone number in format specified by <adtype>. Parameter must be present, although it may be an
empty string. Alphabetic characters are not permitted. The <adnumber> may contain dialstring modifiers "*",
"#" or "+".

<adtype>(num)
Additional type of address octet, which defines the used type of number (ton) and the numbering plan identifi-
cation (npi).
If <adtype> is not specified the unknown <adtype>=129 is used. Supported values are:
128 Restricted <adnumber> includes unknown type and format.
145 Dialing string <adnumber> must include international access code character
"+".
161 National number <adnumber>. The network support for this type is optional.
209 Dialing string <adnumber> will be saved as ASCII string.
255 Dialing string <adnumber> is a command to control a Supplementary Service,
i.e. "*", "#" codes are contained. Network support of this type is optional.
129 Unknown number <adnumber>.

<secondtext>(str)(+CSCS)
Second text assigned to the phonebook entry. Parameter must be present, although it may be an empty string.
The maximum length of this parameter is given in the test command response <slength>. When using an
ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via escape
sequences as described in Section 1.7, Supported character sets.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 433 of 564
15.3 AT+CPBW

<email>(str)(+CSCS)
Email field assigned to the phonebook entry. Parameter must be present, although it may be an empty string.
The maximum length of this parameter is given in the test command response <elength>. When using an
ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via escape
sequences as described in Section 1.7, Supported character sets.

<sip_uri>(str)(+CSCS)
SIP number field assigned to the phonebook entry. Parameter must be present, although it may be an empty
string. The maximum length of this parameter is given in the test command response <siplength>. When
using an ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via
escape sequences as described in Section 1.7, Supported character sets.

<tel_uri>(str)(+CSCS)
TEL number field assigned to the phonebook entry. Parameter must be present, although it may be an empty
string. The maximum length of this parameter is given in the test command response <tellength>. When
using an ASCII terminal, characters which are coded differently in ASCII and GSM have to be entered via
escape sequences as described in Section 1.7, Supported character sets.

<maxloc>(num)
Maximum number of locations supported by the currently selected storage. For phonebooks located on SIM,
this value varies depending on the SIM card. See AT+CPBS for typical values.

<nlength>(num)
Maximum length of phone number for "normal" locations. Depending on the storage, a limited number of loca-
tions with extended memory is available per phonebook. These locations allow storing numbers with twice the
standard length, which is 2*<nlength> digits for normal numbers, but only <nlength> digits for numbers
saved with parameter <type>= 209. If all extended locations of the selected phonebook are used up, then any
attempt to write a number which requires extended memory will be denied with "+CME ERROR: memory full".

<tlength>(num)
Maximum amount of memory of <text> assigned to the telephone number in bytes. The value is shown in the
AT+CPBW test command response.
An internal optimization mechanism enables the UE to choose the most efficient method of storing <text>:
Depending on the entered <text> characters, the UE internally converts them either to GSM or UCS2 alphabet,
no matter which character set the TE is using for input and output (configured with AT+CSCS). For example, if
AT+CSCS="UCS2" and, therefore, the TE enters the letter "A" as "0041" (two bytes) it is possible that the UE
converts it to GSM alphabet, thus requiring only one byte of memory.
Note that escape sequences used in GSM coding require two bytes. Example: The € symbol will be stored as
escape sequence "\1Be" in GSM, and "20AC" in UCS2.
For strings in UCS2 there are three different coding schemes. For detailed descriptions please refer to 3GPP
TS 11.11 [19], 3GPP TS 31.101 [20], 3GPP TS 31.102 [21], Annex B.

<glength>(num)
Maximum length of <group> assigned to the phonebook entry. For GSM or UCS2 character coding details see
parameter <tlength>.

<slength>(num)
Maximum length of <secondtext> assigned to the phonebook entry. For GSM or UCS2 character coding
details see parameter <tlength>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 434 of 564
15.3 AT+CPBW

<elength>(num)
Maximum length of <email> assigned to the phonebook entry. For GSM or UCS2 character coding details see
parameter <tlength>.

<siplength>(num)
Maximum length of <sip_uri> assigned to the phonebook entry. For GSM or UCS2 character coding details
see parameter <tlength>.

<tellength>(num)
Maximum length of <tel_uri> assigned to the phonebook entry. For GSM or UCS2 character coding details
see parameter <tlength>.

Notes
• Users should be aware that when using this AT command quickly after SIM PIN authentication the SIM data
may not yet be accessible, resulting in a short delay before the requested AT command response is returned.
• See for more details AT+CPBS select command which phonebook <storage> is possible to write by the user.
• For extended USIM phonebook features please check with AT+CPBW test command which parameters are
possible.
• The handling of extended USIM phonebook features is controlled by the user (e.g. saved phonebook entries
cannot be dialed, no handling of '+' in international numbers, no support for Supplementary Service, i.e. '*#'
codes, etc. ).

Examples
EXAMPLE 1
Make a new phonebook entry at the first free location
AT+CPBW=,"+431234567",145,"international"
EXAMPLE 2
Delete entry at location 1
AT+CPBW=1
EXAMPLE 3
The following examples are provided to illustrate the effect of writing phonebook entries with different types
of dial string modifiers in <number>
AT+CPBW=5,"12345678",,"Arthur"
AT+CPBW=6,"432!+-765()&54*654#",,"John"
AT+CPBW=7,"432!+-765()&54*654#",129,"Eve"
AT+CPBW=8,"432!+-765()&54*654#",145,"Tom"
AT+CPBW=9,"432!+-765()&54*654#",209,"Richard"
EXAMPLE 4
Read phonebook entries from locations 5 - 9 via AT+CPBR
+CPBR:5,"12345678",129,"Arthur"
+CPBR:6,"432!+-765()&54*654#",209,"John"
+CPBR:7,"432+76554*654#",129,"Eve"
+CPBR:8,"+432+76554*654#",145,"Tom"
+CPBR:9,"432!+-765()&54*654#",209,"Richard"
EXAMPLE 5
The following example shows the extended parameters when using an USIM.
Please have a look to the sample of write (via AT+CPBW) and read (via AT+CPBR) phonebook entry of location
10.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 435 of 564
15.3 AT+CPBW

AT+CPBW=10,"07032002",129,"Alec","z","+311028128",145,"Boss","[email protected]","
sip:+49-30-123@domain","tel:+49-30-123"
AT+CPBR=10
+CPBR:
10,"07032002",129,"Alec","z","+311028128",145,"Boss","[email protected]","sip:+49-
30-123@domain","tel:+49-30-123"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 436 of 564
15.4 AT+CSVM

15.4 AT+CSVM Set voice mail number

The number to the voice mail server is set by AT+CSVM command.

The parameters <number> and <type> can be left out if the parameter <mode> is set to 0. The read command
returns the status (enabled <mode>=1 or disabled <mode>=0), the currently selected voice mail <number> and
the <type>.
The test command returns supported <mode>s and <type>s.

Syntax
Test Command
AT+CSVM=?
Response(s)
+CSVM: (list of supported <mode>s), (list of supported<type>s)
OK
ERROR
+CME ERROR: <err>
Read Command
AT+CSVM?
Response(s)
+CSVM: <mode>, <number>, <type>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CSVM=<mode>[, <number>[, <type>]]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<mode>(num)
0 Disable the voice mail number
1 Enable the voice mail number

<number>(str)
Phone number in format specified by <type>. Parameter must be present when setting (<mode>=1) the voice
mail number. Alphabetic characters are not permitted. The <number> may contain dialstring modifiers "*", "#"
or "+".
If other printable non-alphabetic characters are used the entry needs to be saved with <type>=209. A <num-
ber> saved with <type>=209 requires double memory. In order to fit into a standard location, the number
needs to be reduced to a maximum length of <nlength>/2, including all digits and dial string modifiers.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 437 of 564
15.4 AT+CSVM

<type>(num)
Type of address octet, which defines the used type of number (ton) and the numbering plan identification (npi).
If <type> is not specified the unknown <type>=129 is used. If <number> contains a leading "+" <type>=145
(international) is used.
Possible values are:
128 Restricted <number> includes unknown type and format.
145 Dialing string <number> includes international access code character "+".
161 National number <number>. The network support for this type is optional.
209 Dialing string <number> will be saved as ASCII string.
This is the default value, if <type> is not specified explicitly and characters
other than "*", "#" or "+" are included in <number>.
Note that phonebook entries saved with this type cannot be dialed.
255 Dialing string <number> is a command to control a Supplementary Service,
i.e. "*", "#" codes are contained. Network support of this type is optional.
129 Unknown number. If <type> is unknown and the <number> contains a lead-
ing "+", then this sign is removed.

Notes
• Users should be aware that when using this AT command quickly after USIM PIN authentication the USIM
data may not yet be accessible, resulting in a short delay before the requested AT command response is
returned.
• "VM" phonebook is only supported when corresponding Elementary File is available on USIM. Elementary
Files belonging to "VM" phonebook are optional on USIM.
• If "VM" phonebook is available on USIM and has no write access it is not possible to use AT+CSVM write com-
mand.

Examples
EXAMPLE 1
Make a new voice mail number entry
AT+CSVM=1,"1234567890" The <type> is not specified therefore the unknown <type>=129 is
used.
OK The voice mail number is written to UE.
EXAMPLE 2
Delete the voice mail number entry
AT+CSVM=0 The parameters <number> and <type> are not
necessary.
OK The voice mail number is deleted on UE.
EXAMPLE 3
Read an empty voice mail number entry
AT+CSVM?
+CSVM: 0,"",128
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 438 of 564
15.5 AT+CNUM

15.5 AT+CNUM Read own numbers

AT+CNUM returns the subscribers own number(s) from the SIM.

Syntax
Test Command

AT+CNUM=?
Response(s)
OK
Exec Command

AT+CNUM
Response(s)
[+CNUM: [<alpha>], <number>, <type>]
[+CNUM: ... ]
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

+ + - 3GPP TS 27.007 [51]

Parameter Description

<alpha>(str)
Optional alphanumeric string associated with <number>.

<number>(str)
Phone number in format specified by <type>.

<type>(num)
Type of address octet, see also: AT+CPBR <type>.

Notes
• Users should be aware that when using this AT command quickly after SIM PIN authentication the SIM data
may not yet be accessible, resulting in a short delay before the requested AT command response is returned.
• The subscribers own number(s) are stored in the "ON" phonebook and can be set using the AT+CPBW com-
mand.
• For alphanumeric representation the number stored in the phonebook must be identical to the number trans-
ported over the network - then the associated name will be recognized.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 439 of 564
16. GNSS Commands

16. GNSS Commands

PLS63-W integrates a GNSS engine (Global Navigation Satellite System) which supports GPS (Global Position-
ing Sytem) and GLONASS (Globalnaja Nawigazionnaja Sputnikowaja Sistema) and GALILEO and Beidou and
QZSS (Quasi-Zenith Satellite System) based on the NMEA 0183 protocol.

To configure, activate or deactivate the GNSS engine, to choose Standalone GNSS or A-GNSS operation, to
start, stop and configure the NMEA output, please use the AT^SGPSC command.

The GNSS receiver is always capable of receiving signals from all supported satellite systems, and decides on
its own whether to calculate the position from GPS only, or any combination of the systems. The AT^SGPSC sub-
commands "Nmea/Gps", "Nmea/Glonass", "Nmea/Galileo" and "Nmea/Beidou" and "Nmea/QZSS" can be used
to enable or disable the output of NMEA sentence types, but they do not switch off their usage for position cal-
culation. Only the output of GALILEO and Beidou and QZSS data will instantly be disabled when the UE gets a
GPS position fix over US territory. Apart from that, it is possible to enable or disable Galileo, Glonass, Beidou
and QZSS capabilities of the GNSS receiver. See AT^SGPSC subcommands "Engine/Galileo", "Engine/
Glonass", "Engine/Beidou", "Engine/Qzss".

A-GNSS (Assisted GNSS) will improve the startup performance, i.e. the Time to First Fix (TTFF), if the GNSS
engine has not yet precise location and time information. For A-GNSS, valid GpsOneXTRA assistance data shall
be stored to the UE's FFS and injected into the GNSS receiver by using the AT^SBNW command. The assistance
data files can be downloaded via HTTP from one of the GpsOneXTRA servers. For PLS63-W please use the
xtra2.bin file which includes GPS and GLONASS.
The XTRA data is valid up to 7 days, although after 3 days the accuracy would start to degrade faster. We rec-
ommend to update XTRA data every 2 days. To check the validity of the injected XTRA data you can use the
AT^SGPSC parameter <InfoXtraDurationMinutes>. In most cases, however, it will be sufficient to activate
the GNSS driver since the GNSS engine dynamically determines the best startup scenario depending on the
available position, time, Almanac and/or Ephemeris data.

NMEA data will be printed to the dedicated NMEA instance depending on the <NmeaInterface> settings. The
dedicated NMEA instance does not accept AT commands. If the serial port ASC0 is selected for NMEA output
please consider that NMEA data is transmitted at a fixed bit rate of 115200 bps regardless of the AT+IPR value
set on ASC0.
In addition, the commands AT^SGPSC="Nmea/Output/,"last" and AT^SGPSC="Nmea/Output/,"gpsdataurc" and
AT^SGPSC="Nmea/URC","on" can be used to get all GNSS information on the AT command instances(s), elim-
inating the need to poll the dedicated NMEA instance.

The UE may connect to an active or passive GNSS antenna. Active GNSS antennas need an extra power supply
which can be switched on or off with AT^SGPSC. Take care that the antenna is capable of GPS and GLONASS
as well (if required). Details on how to connect and handle active or passive antennas can be found in [2].

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 440 of 564
16.1 GNSS NMEA Sentences

16.1 GNSS NMEA Sentences

A standard NMEA sentence set consists of the sentences listed below. Each single sentence starts with $ prefix
and a Talker ID followed by a three letter Sentence ID. Both IDs are followed by data fields separated by comma.
The data is provided in ASCII format.

For GPS, the Talker ID is GP. The UE supports the following GPS related NMEA sentence types:
• GPGGA - GPS Fix Data, i.e. Time, Position and fix related data of GNSS receiver
• GPRMC - Recommended minimum data for GPS
• GPGSV - Number of satellites in view, elevation, azimuth and CNR for each satellite. Max. 16 satellites (= 4
satellites per GPGSV row, and max. 4 GPGSV rows in each NMEA sentence set).
• GPGSA - GPS DOP (Dilution of Precision) and active satellites
• GPVTG - Vector track and speed over the ground

For GLONASS, the Talker ID is "GL". The UE supports the following GLONASS related NMEA sentence types
• GLGSV - Number of satellites in view, elevation, azimuth and CNR for each satellite. Max. 16 satellites (= 4
satellites per GLGSV row, and max. 4 GLGSV rows in each NMEA sentence set).

For GALILEO, the Talker ID is "GA". The UE supports the following GALILEO related NMEA sentence types:
• GARMC - Recommended minimum data for GLONASS
• GAGSV - Number of satellites in view, elevation, azimuth and CNR for each satellite. Max. 16 satellites (= 4
satellites per GAGSV row, and max. 4 GAGSV rows in each NMEA sentence set)
• GAGSA - GALILEO DOP (Dilution of Precision) and active satellites
• GAVTG - Vector track and speed over the ground
• GAGGA - Fix Data, i.e. Time, Position and fix related data

For Beidou, the Talker ID is "BD". The UE supports the following BEIDOU related NMEA sentence types:
• BDGSV - Number of satellites in view, elevation, azimuth and CNR for each satellite. Max. 16 satellites (= 4
satellites per BDGSV row, and max. 4 BDGSV rows in each NMEA sentence set)
• BDGSA - BEIDOU DOP (Dilution of Precision) and active satellites

For QZSS, the Talker ID is "QZ". The UE supports the following QZSS related NMEA sentence types:
• QZGSV - Number of satellites in view, elevation, azimuth and CNR for each satellite. Max. 16 satellites (= 4
satellites per QZGSV row, and max. 4 QZGSV rows in each NMEA sentence set)
• QZGSA - QZSS DOP (Dilution of Precision) and active satellites

Talker ID "GN" indicates that GPS is used in combination with GLONASS, GALILEO, BEIDOU, QZSS . The UE
supports the following NMEA sentence types for mixed usage:
• GNGSA - GPS/GLONASS /GALILEO/BEIDOU/QZSS DOP (Dilution of Precision) and active satellites
• GNGNS - Fix Data, i.e. Time, Position and fix related data

Note:
The GNSS engine does not allow to disable the usage of GPS satellites, in contrast to GLONASS, GALILEO,
Beidou, QZSS satellites which can be enabled or disabled with AT^SGPSC "Engine/...." subcommands. The
GNSS engine always tries first to use GPS satellites to obtain a position fix, while other satellite systems may be
used additionally depending on their AT^SGPSC settings and depending on GNSS power saving. If power saving
is effective and the GPS signal is sufficient to get a fix, the GNSS engine automatically deactivates the usage
and output of satellite systems in order to save power see Section 16.3.1.1, Dynamic Power Optimization (DPO).
Therefore, attention should be paid to specific side effects, in case the output of GPS NMEA sentences is dis-
abled with AT^SGPSC "Nmea/GPS" <GpsVal> "off": Even though a position fix is obtained, no NMEA sentences
are output as long as only GPS was used for calculation. NMEA sentences of other satellite systems will be out-

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 441 of 564
16.1 GNSS NMEA Sentences

put only if enabled and used for calculation.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 442 of 564
16.2 GNSS Power Saving Considerations

16.2 GNSS Power Saving Considerations

If GNSS is switched on (see AT^SGPSC parameters <EngineVal> and <OutVal>), GPS and GLONASS and
GALILEO and Beidou may altogether be employed for position calculation.
Usage of GLONASS or GALILEO or Beidou is added only if needed to get position fix. If the GPS signal is suf-
ficient to get a fix, the GNSS engine automatically deactivates the usage and output of GLONASS, GALILEO,
Beidou in order to reduce power consumption. The output of GPS sentences can also be switched off. See
AT^SGPSC parameters <GlonassVal>, <GalileoVal>, <BeidouVal>, <GpsVal>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 443 of 564
16.3 AT^SGPSC

16.3 AT^SGPSC GNSS Configuration

AT^SGPSC is a configuration command that can be used to set GNSS parameters and to switch the GNSS
engine on and off.

Syntax
Test Command
AT^SGPSC=?
Response(s)
^SGPSC: "Engine", (list of supported <EngineVal>s)
^SGPSC: "Engine/Beidou", (list of supported <EngineBeidouVal>s)
^SGPSC: "Engine/Galileo", (list of supported <EngineGalileoVal>s)
^SGPSC: "Engine/Glonass", (list of supported <EngineGlonassVal>s)
^SGPSC: "Engine/Qzss", (list of supported <EngineQzssVal>s)
^SGPSC: "Info", (list of supported <InfoType>s), (list of supported <InfoUrcVal>s), (list of supported
<InfoUrcMinutes>s)
^SGPSC: "Nmea/Beidou", (list of supported <BeidouVal>s)
^SGPSC: "Nmea/Data", (list of supported <NmeaDataUrcMask>s)
^SGPSC: "Nmea/ExtGSV", (list of supported <ExtGSV>s)
^SGPSC: "Nmea/Galileo", (list of supported <GalileoVal>s)
^SGPSC: "Nmea/Glonass", (list of supported <GlonassVal>s)
^SGPSC: "Nmea/GPS", (list of supported <GpsVal>s)
^SGPSC: "Nmea/Interface", (list of supported <NmeaInterface>s)
^SGPSC: "Nmea/Output", (list of supported <OutVal>s)
^SGPSC: "Nmea/Qzss", (list of supported <QzssVal>s)
^SGPSC: "Nmea/Urc", (list of supported <FixUrcVal>s)
^SGPSC: "Nmea/Version", (list of supported <NmeaVersion>s)
^SGPSC: "Power/Antenna", (list of supported <AntVal>s)
^SGPSC: "Power/Psm", (list of supported <PsmVal>s)
OK
ERROR
+CME ERROR: <err>
Read Command

AT^SGPSC?
Response(s)
^SGPSC: "Engine", <EngineState>
^SGPSC: "Engine/Beidou", <EngineBeidouVal>
^SGPSC: "Engine/Galileo", <EngineGalileoVal>
^SGPSC: "Engine/Glonass", <EngineGlonassVal>
^SGPSC: "Engine/Qzss", <EngineQzssVal>
^SGPSC: "Info", "Urc"[, <InfoUrcVal>][, <InfoUrcMinutes>]
^SGPSC: "Nmea/Beidou", <BeidouVal>
^SGPSC: "Nmea/Data", <NmeaDataUrcMask>
^SGPSC: "Nmea/ExtGSV", <ExtGSV>
^SGPSC: "Nmea/Galileo", <GalileoVal>
^SGPSC: "Nmea/Glonass", <GlonassVal>
^SGPSC: "Nmea/GPS", <GpsVal>
^SGPSC: "Nmea/Interface", <NmeaInterface>
^SGPSC: "Nmea/Output", <OutVal>
^SGPSC: "Nmea/Qzss", <QzssVal>
^SGPSC: "Nmea/Urc", <FixUrcVal>
^SGPSC: "Nmea/Version", <NmeaVersion>
^SGPSC: "Power/Antenna", <AntVal>
^SGPSC: "Power/Psm", <PsmVal>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 444 of 564
16.3 AT^SGPSC

Read Command (Continued)

AT^SGPSC?
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

Activating or deactivating GNSS engine.

AT^SGPSC="Engine"[, <EngineVal>]
Response(s)
^SGPSC: "Engine", <EngineState>
OK
ERROR
+CME ERROR: <err>
Write Command

Activating or deactivating Beidou capability.

AT^SGPSC="Engine/Beidou"[, <EngineBeidouVal>]
Response(s)
^SGPSC: "Engine/Beidou", <EngineBeidouVal>
OK
ERROR
+CME ERROR: <err>
Write Command

Activating or deactivating Galileo capability.

AT^SGPSC="Engine/Galileo"[, <EngineGalileoVal>]
Response(s)
^SGPSC: "Engine/Galileo", <EngineGalileoVal>
OK
ERROR
+CME ERROR: <err>
Write Command
Activating or deactivating Glonass capability.
AT^SGPSC="Engine/Glonass"[, <EngineGlonassVal>]
Response(s)
^SGPSC: "Engine/Glonass", <EngineGlonassVal>
OK
ERROR
+CME ERROR: <err>
Write Command

Activating or deactivating QZSS capability.

AT^SGPSC="Engine/Qzss"[, <EngineQzssVal>]
Response(s)
^SGPSC: "Engine/Qzss", <EngineQzssVal>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 445 of 564
16.3 AT^SGPSC

Write Command

If <InfoType>= "Urc": Configuring "^SGPSE" URC type "XTRA file invalidity notification".
AT^SGPSC="Info", "Urc"[, <InfoUrcVal>][, <InfoUrcMinutes>]
Response(s)
^SGPSC: "Info", "Urc", <InfoUrcVal>[, <InfoUrcMinutes>]
OK
ERROR
+CME ERROR: <err>
Write Command

If <InfoType>= "Xtra": Requesting validity of XTRA file.

AT^SGPSC="Info", "Xtra"
Response(s)
^SGPSC: "Info", "Xtra", <InfoXtraWeek>, <InfoXtraMinute>, <InfoXtraDurationMinutes>
OK
ERROR
+CME ERROR: <err>
Write Command
Configuring output of BEIDOU sentences.
AT^SGPSC="Nmea/Beidou"[, <BeidouVal>]
Response(s)
^SGPSC: "Nmea/Beidou", <BeidouVal>
OK
ERROR
+CME ERROR: <err>
Write Command
Configuring URC output for NMEA data
AT^SGPSC="Nmea/Data"[, <NmeaDataUrcMask>]
Response(s)
^SGPSC: "Nmea/Data", <NmeaDataUrcMask>
OK
ERROR
+CME ERROR: <err>
Write Command

Enabling extended NMEA sentences.

AT^SGPSC="Nmea/ExtGSV"[, <ExtGSV>]
Response(s)
^SGPSC: "Nmea/ExtGSV", <ExtGSV>
OK
ERROR
+CME ERROR: <err>
Write Command

Configuring output of GALILEO sentences.

AT^SGPSC="Nmea/Galileo"[, <GalileoVal>]
Response(s)
^SGPSC: "Nmea/Galileo", <GalileoVal>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 446 of 564
16.3 AT^SGPSC

Write Command

Configuring output of GLONASS sentences.

AT^SGPSC="Nmea/Glonass"[, <GlonassVal>]
Response(s)
^SGPSC: "Nmea/Glonass", <GlonassVal>
OK
ERROR
+CME ERROR: <err>
Write Command

Configuring output of GPS sentences.

AT^SGPSC="Nmea/GPS"[, <GpsVal>]
Response(s)
^SGPSC: "Nmea/GPS", <GpsVal>
OK
ERROR
+CME ERROR: <err>
Write Command
Configuring dedicated NMEA interface.
AT^SGPSC="Nmea/Interface"[, <NmeaInterface>]
Response(s)
^SGPSC: "Nmea/Interface", <NmeaInterface>
OK
ERROR
+CME ERROR: <err>
Write Command
Configuring output of NMEA sentences.
AT^SGPSC="Nmea/Output"[, <OutVal>]
Response(s)
^SGPSC: "Nmea/Output", <OutVal>
OK
ERROR
+CME ERROR: <err>

If <OutVal> is "last":
[^SGPSC: ...]
[Last NMEA sentence set received from internal buffer]
OK
ERROR
+CME ERROR: <err>
Write Command

Configuring output of QZSS sentences.

AT^SGPSC="Nmea/Qzss"[, <QzssVal>]
Response(s)
^SGPSC: "Nmea/Qzss", <QzssVal>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 447 of 564
16.3 AT^SGPSC

Write Command

Configuring "^SGPSE" URC type "Position fix notification".

AT^SGPSC="Nmea/Urc"[, <FixUrcVal>]
Response(s)
^SGPSC: "Nmea/Urc", <FixUrcVal>
OK
ERROR
+CME ERROR: <err>
Write Command

Read NMEA protocol version

AT^SGPSC="Nmea/Version"
Response(s)
^SGPSC: "Nmea/Version", <NmeaVersion>
OK
ERROR
+CME ERROR: <err>
Write Command
Configuring antenna supply.
AT^SGPSC="Power/Antenna"[, <AntVal>]
Response(s)
^SGPSC: "Power/Antenna", <AntVal>
OK
ERROR
+CME ERROR: <err>
Write Command
Activating Sleep mode for GNSS engine (Power Save Mode).
AT^SGPSC="Power/Psm"[, <PsmVal>]
Response(s)
^SGPSC: "Power/Psm", <PsmVal>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<EngineVal>(str)
Parameter of the AT^SGPSC "Engine" write command. Switches the GNSS engine on or off.
“0“(P) GNSS engine off.
“1“ Start GNSS engine without employing GpsOneXTRA assistance data. The
GNSS engine dynamically determines the best startup scenario depending on
the available position, time, Almanac and/or Ephemeris data.
However, please consider that if GpsOneXTRA assistance data is still injected
(due to previously used mode 2), this data might still be effective. To enable
cold start in such case first delete assistance data using AT^SBNW="agps",-1
before employing AT^SGPSC="Engine","1".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 448 of 564
16.3 AT^SGPSC

“2“ Start GNSS engine in A-GNSS mode by employing the GpsOneXTRA assis-
tance data previously stored to the FFS and injected to the GNSS engine with
AT^SBNW.
Remember that the RTC is correctly set (AT+CCLK) to Greenwich Mean Time
(GMT): 0.

Using mode 2 without GpsOneXTRA assistance data:

If the following conditions are met you can use mode 2 instead of mode 1 even
though GpsOneXTRA assistance data were not injected beforehand:
Take care that the RTC is set to Greenwich Mean Time (GMT). If Ephemeris
data is still valid, mode 2 enables faster TTFF than mode 1. If Ephemeris data
has expired, TTFF is about the same in mode 2 or mode 1.
“delete“ Delete all GNSS data in the engine.

<EngineState>(str)
Parameter of the AT^SGPSC "Engine" read and write command responses. Shows the GNSS engine state.
“0“ GNSS engine off.
“1“ GNSS engine on.

<EngineGalileoVal>(str)(NV)
Parameter of the AT^SGPSC "Engine/Galileo" write command. Configures Galileo capabilities of the GNSS
receiver. Changed setting takes effect after restarting the GNSS engine
“0“ Galileo capability disabled.
(D)
“1“ Galileo capability enabled. GNSS receiver checks the position to find out
whether Galileo can be used in this area. This requires a position fix.

<EngineBeidouVal>(str)(NV)
Parameter of the AT^SGPSC "Engine/Beidou" write command. Configures Beidou capabilities of the GNSS
receiver. Changed setting takes effect after restarting the GNSS engine
“0“ Beidou capability disabled.
(D)
“1“ Beidou capability enabled. GNSS receiver checks the position to find out
whether Beidou can be used in this area. This requires a position fix.

<EngineGlonassVal>(str)(NV)
Parameter of the AT^SGPSC "Engine/Glonass" write command. Configures Glonass capabilities of the GNSS
receiver. Changed setting takes effect after restarting the GNSS engine
“0“ Glonass capability disabled.
(D)
“1“ Glonass capability enabled.

<EngineQzssVal>(str)(NV)
Parameter of the AT^SGPSC "Engine/Qzss" write command. Configures QZSS capabilities of the GNSS
receiver. Changed setting takes effect after restarting the GNSS engine
“0“ QZSS capability disabled.
(D)
“1“ QZSS capability enabled.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 449 of 564
16.3 AT^SGPSC

<InfoType>(str)
Parameter of the AT^SGPSC "Info" write command. Specifies the type of information which will be requested.
“Xtra“ Check the validity of the XTRA file which was successfully injected in the
GNSS engine before.
The write command AT^SGPSC="Info","Xtra" requests the validity of the
injected XTRA.bin file and returns the parameters <InfoXtraWeek>,
<InfoXtraMinute> and <InfoXtraDurationMinutes>.
“Urc“ Refers to the "^SGPSE" URC type "XTRA file invalidity notification".
The URC shall be enabled / disabled by setting the <InfoUrcVal> parame-
ter. Depending on the <InfoUrcMinutes> parameter, the URC will be emit-
ted either before or at the moment when the validity of the injected XTRA file
expires. XTRA file validity is checked at 1 minute frequency. The calculation
uses AT+CCLK time. This must be GMT0.

<InfoXtraWeek>(str)
Parameter of the AT^SGPSC "Info" write command. Shows the GNSS week (time stamp since 1st epoch January
6th, 1980 Sunday 0:00) inside the injected XTRA.bin file. Together with <InfoXtraMinute> the value can be
used to manually calculate the time difference to GMT0 time.

<InfoXtraMinute>(str)
Parameter of the AT^SGPSC "Info" write command. Shows the GNSS minutes of the current week inside the
injected XTRA.bin file. When manually calculating the time difference to GMT0 time, this value has to be added
to the <InfoXtraWeek> value.
"0"..."10080" Time in minutes.

<InfoXtraDurationMinutes>(str)
Parameter of the AT^SGPSC "Info" write command. Counts down the validity duration of the currently injected
XTRA file in minutes.
The calculation uses AT+CCLK time. This must be GMT0.
“0“ No saved XTRA file or the saved XTRA file is no longer valid.
"1"..."10080" Validity of injected XTRA file in minutes.

<InfoUrcVal>(str)
Parameter of the AT^SGPSC "Info" write command. Enables / disables the "^SGPSE" URC type "XTRA file inva-
lidity notification". Parameter <InfoUrcMinutes> is applicable only if parameter <InfoUrcVal> is set to "on".
“off“(P) Disable the "^SGPSE" URC type "XTRA file invalidity notification".
“on“ Enable the "^SGPSE" URC type "XTRA file invalidity notification".

<InfoUrcMinutes>(str)
Parameter of the AT^SGPSC "Info" write command. Specifies the number of minutes the "^SGPSE" URC type
"XTRA file invalidity notification" shall show up before the validity of the injected XTRA file expires.
[“0“] URC shall show up exactly at the time when the validity of the injected XTRA
file has expired.
"1"..."10080" Number of minutes the URC shall show up before the validity of the injected
XTRA file expires.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 450 of 564
16.3 AT^SGPSC

<GpsVal>(str)(NV)
Parameter of the AT^SGPSC "Nmea/GPS" subcommand. This setting can only be changed when the GNSS
engine is off (see parameter <EngineVal>).
“off“ Disables the output of GPS sentences.
(D)
“on“ Enables the output of GPS sentences.

<GlonassVal>(str)(NV)
Parameter of the AT^SGPSC "Nmea/Glonass" subcommand. This setting can only be changed when the GNSS
engine is off (see parameter <EngineVal>).
“off“ Disables the output of GLONASS sentences. Nevertheless, GLONASS data is
still received by the GNSS engine as long as required for positional calcula-
tions. See also Section 16.2, GNSS Power Saving Considerations for
details on power saving.
“on“(D) Enables the output of GLONASS sentences, but only as long as used for posi-
tion fix.

<GalileoVal>(str)(NV)
Parameter of the AT^SGPSC "Nmea/Galileo" subcommand. Setting can only be changed when the GNSS
engine is off (see parameter <EngineVal>).
“off“ Disables the output of GALILEO sentences. Nevertheless, GALILEO data is
still received by the GNSS engine as long as required for positional calcula-
tions. See also Section 16.2, GNSS Power Saving Considerations for
details on power saving.
“on“(D) Enables the output of GALILEO sentences, but only as long as used for posi-
tion fix.

<BeidouVal>(str)(NV)
Parameter of the AT^SGPSC "Nmea/Beidou" subcommand. Setting can only be changed when the GNSS
engine is off (see parameter <EngineVal>).
“off“ Disables the output of BEIDOU sentences. Nevertheless, BEIDOU data is still
received by the GNSS engine as long as required for positional calculations.
See also Section 16.2, GNSS Power Saving Considerations for details
on power saving.
“on“(D) Enables the output of BEIDOU sentences, but only as long as used for position
fix.

<QzssVal>(str)(NV)
Parameter of the AT^SGPSC "Nmea/Qzss" subcommand. Setting can only be changed when the GNSS engine
is off (see parameter <EngineVal>). Changed setting takes effect after restarting the GNSS engine.
“off“ Disables the output of QZSS sentences. Nevertheless, QZSS data is still
received by the GNSS engine as long as required for positional calculations.
See also Section 16.2, GNSS Power Saving Considerations for details
on power saving.
“on“(D) Enables the output of QZSS sentences, but only as long as used for position
fix.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 451 of 564
16.3 AT^SGPSC

<ExtGSV>(str)(NV)
Parameter of the AT^SGPSC "Nmea/ExtGSV" subcommand.
“off“(D) Disables the output of decimals in GSV elements Elevation, Azimuth, SNR/
CN0.
$GLGSV,3,1,10,73,25,324,45,66,48,101,52,82,58,307,51,80,30,261,43*64
“on“ Enables the output of decimals in GSV elements Elevation, Azimuth, SNR/
CN0.
Example:
$GLGSV,3,1,10,73,25.3,324.8,42.0,66,48.5,99.8,47.9,82,59.1,309.4,47.3,80,
29.5,260.2,40.2*59

<NmeaInterface>(str)(NV)
Parameter of the AT^SGPSC "Nmea/Interface" subcommand. Configures which AT command port is switched
to NMEA data mode. A number as returned by AT^SQPORT parameter <id> has to be used.
If an AT command port is switched to NMEA mode, then this is indicated by a "CONNECT NMEA" URC on this
AT command port. If the AT command port is switched backed from NMEA mode to normal AT command mode,
then this is indicated by "OK".
All URCs for an AT command port switched to NMEA mode are disabled.
It is not possible to switch an AT command port to NMEA mode, when this AT command port is currently exe-
cuting an AT command. Otherwise you will get a "+CME ERROR: operation temporary not allowed".
It is not possible to change the setting of this parameter if the dedicated NMEA mode is active (value of
AT^SGPSC "Nmea/Output" parameter <OutVal> is set to "on"). Otherwise you will get a "+CME ERROR: oper-
ation temporary not allowed".
The setting of this parameter is non-volatile. So if you set some AT command port to NMEA mode, then this is
also active after the next restart/new start. This will be indicated by the "CONNECT NMEA" URC but without a
"^SYSSTART" URC before.
Parameter is global for all interfaces and will not be reset by AT&F.
“0“(D) No AT command port switched to NMEA data mode.
"1"..."9" The ID of the AT command port switched to NMEA data mode.
Possible IDs are listed in the AT^SQPORT test command response. IDs 7 to 9
are Multiplex channels, usable only while Multiplex mode is active.

<OutVal>(str)(NV)
Parameter of the AT^SGPSC "Nmea/Output" subcommand. Configures the output of NMEA sentences (see Sec-
tion 16.1, GNSS NMEA Sentences).
“off“(D) No output.
If the GNSS engine is set to Sleep mode via <PsmVal>=1 then please note
that after switching <OutVal> from "off" to "on" the GNSS engine may take a
couple of seconds to transmit a position fix.
“on“ NMEA sentences will be output on the dedicated NMEA port at the frequency
of 1 Hz.
This value is only usable if AT^SGPSC "Nmea/Interface" parameter
<NmeaInterface> is not set to "0".
“last“ This option can be used to query any time the NMEA sentence set most
recently received by the GNSS engine and stored in an internal buffer.
The benefit is that the NMEA data is instantly returned on the AT command
instance where command was executed, eliminating the need to poll the ded-
icated NMEA instance.
The response comes as one NMEA sentence set containing the sentences
defined in Section 16.1, GNSS NMEA Sentences. It is provided in ASCII for-
mat (incl. "$" character).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 452 of 564
16.3 AT^SGPSC

“gpsdataurc“ This option enables the output of NMEA sentences as "^SGPSE" URC type 3
("NMEA sentence)". As a result, all NMEA sentences selected with AT^SGPSC
"Nmea/Data" parameter <NmeaDataUrcMask> will be printed to the AT com-
mand ports with enabled "^SGPSE" URCs (see AT^SGPSE for details). For
each single NMEA sentence, there will be a single URC. At the frequency of 1
Hz, the GNSS engine will send a set of URCs for each set of NMEA sentences.

<NmeaDataUrcMask>(str)(NV)
Parameter of the AT^SGPSC "Nmea/Data" subcommand. Determines the type of NMEA sentences presented
via "^SGPSE" URC type 3 ("NMEA sentence") if <OutVal> is set to "gpsdataurc".
Precondition for showing the URCs is that the output of the corresponding satellite system is also enabled via,
<GpsVal> <GlonassVal>, <GalileoVal>, <BeidouVal>, <QzssVal>.
To select the NMEA sentence types, you can set one of the single values listed below, or the sum created from
arbitrary set of valid single-choices. By default, all types are enabled with value 255.
“0“ No presentation of NMEA data by URC.
“1“ All NMEA sentences with Talker ID $GP are enabled.
“2“ All NMEA sentences with Talker ID $GL are enabled.
“4“ All NMEA sentences with Talker ID $GA are enabled.
“8“ All NMEA sentences with Talker ID $BD are enabled.
“16“ All NMEA sentences with Talker ID $QZ are enabled.
(D)
“255“ All available NMEA sentences are enabled (only for usage as command line
parameter; in command response always the sum of the single values of the
really enabled sentences is printed).

<FixUrcVal>(str)
Parameter of the AT^SGPSC "NMEA/URC" subcommand. Enables / disables the "^SGPSE" URC type "Position
fix notification" that reports changes of the positioning fix state. For details see "^SGPSE" parameter <Posi-
tionStatus>. The advantage is that the information on the positioning state is displayed on an AT command
instance (not on the NMEA instance).
“off“(P) Disable URC.
“on“ Enable URC.

<AntVal>(str)(NV)
Parameter of the AT^SGPSC "Power/Antenna" subcommand. Configures the GNSS antenna power supply.
“off“ Antenna power off.
“on“ Antenna power supply always on (3.05 V).
(D)
“auto“ Antenna power will be automatically switched on or off depending on GNSS
engine activity. This mode automatically becomes always active after the
GNSS engine was activated with <EngineVal> or if an E-911 emergency call
was established by Control Plane.

<PsmVal>(str)(NV)
Parameter of the AT^SGPSC "Power/Psm" subcommand. Activates Sleep mode for the GNSS engine. The set-
ting takes effect after restart.
If Sleep mode is enabled with <PsmVal>= "1", it might be possible that GLONASS, GALILEO, Beidou, and
QZSS is not used for positioning when signal quality is good (NMEA sentences will not be output in this case).
See Section 16.3.1.1, Dynamic Power Optimization (DPO) for details.
“0“(D) Off.
“1“ On.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 453 of 564
16.3 AT^SGPSC

<NmeaVersion>(str)(NV)
Parameter of the AT^SGPSC "Nmea/Version" subcommand. Shows the version number of the NMEA protocol
in the form "major version.minor version".

Note
• During cold start of GNSS engine and when the output of Nmea GPS sentences is disabled, the module may
stop sending empty frames on Nmea port for short time until it receives a position fix from the requested sys-
tem (other than GPS). This is caused by AT^SGPSC Nmea configuration which blocks GPS sentences and
at the beginning only GPS position fix is obtained.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 454 of 564
16.3 AT^SGPSC

16.3.1 Power Saving Considerations

The purpose of this section is to explain the modes provided by PLS63-W to minimize current consumption while
maintaining or getting a position fix. The settings can be made by using the command AT^SGPSC="Power/
Psm",<PsmVal>.

16.3.1.1 Dynamic Power Optimization (DPO)

DPO is a power saving feature which attempts to turn off GNSS RF and other components when the components
are not needed. DPO takes effect when enabled with <PsmVal>, when there is good GNSS signal visibility, and
when the receiver has sufficient navigational data to perform a fix (either has GpsOneXTRA assistance data or
has decoded it off-the-air). By delivery default of PLS63-W, DPO is disabled (AT^SGPSC="Power/
Psm",<PsmVal>= "0").

Preconditions for DPO to turn on:

• Have ephemeris for all SVs -> 26 dB-Hz or recent (<3.5 days) almanac corrections for those SVs provided
by GpsOneXTRA assistance data.
• Health or UTC information is not transmitted over-the-air (i.e., not in subframe 4 of page 18, or subframes 4
and 5 of page 25).
• Valid position and HEPE is less than 50 m and also less than QoS timeout of 60 seconds.
• 6 SVs > 37 dB-Hz or 4 SVs > 26 dB-Hz and have almanac and health for all SVs.

Benefits and impact:

• The GNSS engine is not on continuously and the SV or navigational data cannot be decoded at that time.
• If GNSS is switched on (see AT^SGPSC parameters <EngineVal> and <OutVal>), GPS and GLONASS
and GALILEO and Beidou and QZSS may altogether be employed for position calculation.
Usage of GLONASS or GALILEO or Beidou or QZSS is added only if needed to get position fix. If the GPS
signal is sufficient to get a fix, the GNSS engine automatically deactivates the usage and output of GALILEO,
Beidou, QZSS in order to reduce power consumption. The output of GPS sentences can also be switched off.
See AT^SGPSC parameters, <GpsVal> <GlonassVal>, <GalileoVal>, <BeidouVal>, <QzssVal>.
• TTFF and yield should not be impacted.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 455 of 564
16.4 AT^SGPSE

16.4 AT^SGPSE GNSS Event Notification

AT^SGPSE serves to monitor GNSS events. Information can be reported by the AT^SGPSE read command and
by "^SGPSE" URCs.

Syntax
Test Command
AT^SGPSE=?
Response(s)
^SGPSE: (list of supported<urcMode>s), (list of supported<BufferStatus>s), (list of
supported<BufferCount>s), (list of supported<PositionStatus>s), (list of
supported<InfoUrcMinutes>s)
OK
Read Command

AT^SGPSE?
Response(s)
^SGPSE: <urcMode>, <BufferStatus>, <BufferCount>, <PositionStatus>, <InfoUrcMinutes>
OK
Write Command

AT^SGPSE=<urcMode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Unsolicited Result Codes

URC 1
NMEA buffer notification (<UrcType> 0):
^SGPSE: <UrcType>, <BufferStatus>, <BufferCount>

URC 2
Position fix notification (<UrcType> 1):
^SGPSE: <UrcType>, <PositionStatus>

URC 3
XTRA file invalidity notification (<UrcType> 2):
^SGPSE: <UrcType>, <InfoUrcMinutes>

URC 4
NMEA data output (<UrcType> 3):
^SGPSE: <UrcType>, <NMEA_sentence>
[^SGPSE: <UrcType>, <NMEA_sentence>]
...

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 456 of 564
16.4 AT^SGPSE

Parameter Description

<urcMode>(num)(NV)
0(D) Disable ^SGPSE URCs.
1 Enable ^SGPSE URCs.
Keep in mind that each ^SGPSE <UrcType> has to be enabled with a specific
AT^SGPSC subcommand.

<UrcType>(num)
0 URC type "NMEA buffer notification".
This URC type is enabled by setting the AT^SGPSC "Nmea/Output" subcom-
mand with parameter <OutVal>= "buffered". The buffer mechanism and the
URC are disabled if <OutVal>= "on" or "off".
If the NMEA buffering mechanism is active (see <OutVal>), two URCs will be
generated:
The first URC will show up when approximately 80% of the buffer is filled. This
way, the application has enough time to wake up and select <OutVal>= "on"
in order to read and empty the buffer and get new NMEA sentences.
The second URC will show up when the buffer is full.
1 URC type "Position fix notification".
This URC type is enabled by setting the AT^SGPSC "Nmea/Urc" subcommand
with parameter <FixUrcVal>= "on". <FixUrcVal>= "off" disables the URC.
The URC is emitted each time when the state of the positioning fix changes,
i.e. when the fix becomes valid or invalid.
2 URC type "XTRA file invalidity notification".
This URC type is enabled by setting the AT^SGPSC subcommand "Info" with
<InfoType>= "Urc" and <InfoUrcVal>= "on". Parameter <InfoUrc-
Minutes> specifies the number of minutes the URC shall show up before the
injected XTRA file validity expires. <InfoUrcVal>= "Off" disables the URC.
3 URC type "NMEA sentence".
If this URC type is enabled NMEA sentences will be handled as URCs. They
will be printed to the URC destination instance, eliminating the need of the ded-
icated NMEA instance.
For each single NMEA sentence, there will be a single URC. At the frequency
of 1 Hz, the UE will send a set of URCs for each set of NMEA sentences.
This URC type is enabled by setting the AT^SGPSC "Nmea/Output" subcom-
mand with parameter <OutVal>= "gpsdataurc". The types of NMEA sen-
tences have to be configured with AT^SGPSC "Nmea/Data" parameter
<NmeaDataUrcMask>.

<BufferStatus>(num)
Status of NMEA buffer
0 Buffer fill status is 80%.
1 Buffer is full.
If the buffer is not emptied buffering stops to retain the data buffered data. This
allows the TE to store the buffered data, e.g. for position tracking.

<BufferCount>(num)
GNSS NMEA buffer count
Number of bytes located in NMEA buffer

<PositionStatus>(num)
0 Engine has no position fix.
1 Engine gets a fix position.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 457 of 564
16.4 AT^SGPSE

<InfoUrcMinutes>(num)
0 Injected XTRA file is invalid.
1...10080 Injected XTRA file will be invalid in <InfoUrcMinutes> minutes.

<NMEA_sentence>(num)
A single NMEA sentence starting with $ prefix, exactly as defined in Section 16.1, GNSS NMEA Sentences.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 458 of 564
16.5 Examples of How to Configure and Use GNSS

16.5 Examples of How to Configure and Use GNSS

Below you can find selective examples of how to configure and use the PLS63-W's integrated GNSS engine.

16.5.1 Loading Xtra.Bin File and Activating A-GNSS Start Mode

To take advantage of A-GNSS ensure that valid GpsOneXTRA assistance data (in short XTRA file) is available.
To do so, first download a new GpsOneXTRA binary file via HTTP from one of the gpsOneXtra assistance web-
servers. Save the received xtra*.bin file to your local memory and check the exact file size.
- http://xtrapath4.izatcloud.net/xtra2.bin
- http://xtrapath5.izatcloud.net/xtra2.bin
- http://xtrapath6.izatcloud.net/xtra2.bin
Next, use AT+CCLK to set the RTC. Then, use AT^SBNW to store the GpsOneXTRA assistance data on the FFS.
If AT^SBNW returns the responses "AGPS END OK" and "OK" the XTRA file will be injected to the GNSS engine.
Finally, use AT^SGPSC to switch on the GNSS engine.

AT+CCLK="12/01/20,13:15:57" Set PLS63-W RTC to Greenwich Mean Time

OK (instead of local time).
AT^SGPSC="Engine","0" Deactivate the GNSS engine.
^SGPSC: "Engine","0"
OK
AT^SBNW=agps,-1 Optional: Remove existing xtra.bin file from GNSS
CONNECT receiver and FFS.
AGPS READY: RESET GPS ENGINE AND DELETE XTRA
FILE ...
AGPS: END OK
OK
AT^SBNW="agps",59734 Write new XTRA file to FFS. File size is 59734 bytes.
CONNECT
AGPS READY: SEND FILE ... New XTRA file is successfully stored to the FFS and
AGPS: END OK injected into the GNSS engine.
OK
AT^SGPSC="Power/Antenna","on" For active antenna only: Switch on antenna power
^SGPSC: "Power/Antenna","on" supply.
OK
AT^SGPSC="Engine","2" Switch on GNSS engine by using the injected XTRA
^SGPSC: "Engine","1" file. The response confirms that the GNSS engine is
OK active.
AT^SGPSC="NMEA/Output","on" NMEA output is enabled by power-up default, there-
^SGPSC: "Nmea/Output","on" fore setting this command is necessary only if NMEA
OK output was deactivated before.

NMEA output will instantly start on the dedicated NMEA port. The example shows a position fix.

....
$GPGGA,123521.0,5232.017893,N,01316.443884,E,1,05,3.7,198.0,M,43.0,M,,*5C
$GPVTG,,T,0.0,M,0.0,N,0.0,K,A*0D
$GPRMC,123521.0,A,5232.017893,N,01316.443884,E,0.0,,270711,,,A*44
$GPGSA,A,3,09,14,25,27,29,,,,,,,,6.4,3.7,5.2*36
$GPGSV,3,1,12,01,,,29,02,19,122,19,09,50,142,26,14,38,288,26*46
$GPGSV,3,2,12,25,43,265,38,27,38,140,36,29,09,205,31,04,24,075,*78
$GPGSV,3,3,12,12,82,293,,17,11,043,,32,03,347,,30,,,*4B
$GPGGA,123522.0,5232.017872,N,01316.443885,E,1,06,1.9,198.0,M,43.0,M,,*5E
....

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 459 of 564
16.5 Examples of How to Configure and Use GNSS

16.5.2 Trying to Load Invalid XTRA File

AT^SBNW=agps,-1 Optional: Remove existing xtra.bin file from FFS.

CONNECT
AGPS READY: RESET GPS ENGINE AND DELETE FILE ...
AGPS END OK
OK
AT^SBNW="agps",47616 Write new XTRA file to FFS. Specified number of
CONNECT bytes is greater than actual XTRA file size.
AGPS READY: SEND FILE ...
Wrong check sum. File not saved.
BAD CRC
ERROR

16.5.3 Starting GNSS without Aiding

AT^SGPSC="Power/Antenna","on" For active antenna only: Switch on antenna power

^SGPSC: "Power/Antenna","on" supply.
OK
AT^SGPSC="Engine","1" Switch on GNSS engine.
^SGPSC: "Engine","1"
OK
AT^SGPSC="NMEA/Output","on" NMEA output is active by power-up default, therefore
^SGPSC: "Nmea/Output","on" setting this command is necessary only if NMEA out-
OK put was deactivated before.

NMEA output will instantly start on the dedicated NMEA port. The example shows a position fix.

....
$GPGGA,123521.0,5232.017893,N,01316.443884,E,1,05,3.7,198.0,M,43.0,M,,*5C
$GPVTG,,T,0.0,M,0.0,N,0.0,K,A*0D
$GPRMC,123521.0,A,5232.017893,N,01316.443884,E,0.0,,270711,,,A*44
$GPGSA,A,3,09,14,25,27,29,,,,,,,,6.4,3.7,5.2*36
$GPGSV,3,1,12,01,,,29,02,19,122,19,09,50,142,26,14,38,288,26*46
$GPGSV,3,2,12,25,43,265,38,27,38,140,36,29,09,205,31,04,24,075,*78
$GPGSV,3,3,12,12,82,293,,17,11,043,,32,03,347,,30,,,*4B
$GPGGA,123522.0,5232.017872,N,01316.443885,E,1,06,1.9,198.0,M,43.0,M,,*5E
....

16.5.4 Cold Start

To trigger a cold start first clear current GNSS data inside GNSS receiver. Do not shut down or restart the UE
afterwards. Simply switch on the GNSS engine.
This example uses AT^SGPSC defaults, such as <OutVal>="on", =1 (1 second frequency interval).,<Ant-
Val>="auto" for antenna power.

AT^SBNW=agps,-1 Clear current GNSS data inside GNSS receiver.

CONNECT
AGPS READY: RESET GPS ENGINE AND DELETE FILE ...
AGPS END OK
OK
AT^SGPSC="Engine","1" Switch on GNSS engine.
^SGPSC: "Engine","1"
OK

NMEA output will instantly start on the dedicated NMEA port. The example shows a position fix.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 460 of 564
16.5 Examples of How to Configure and Use GNSS

....
$GPGGA,,,,,,0,,,,,,,,*66
$GPRMC,,V,,,,,,,,,,N*53
$GPGSV,3,1,11,02,19,045,35,04,45,295,33,05,16,071,40,09,,,33*44
$GPGSV,3,2,11,12,10,116,25,23,08,317,24,26,30,295,33,29,80,064,36*7C
$GPGSV,3,3,11,33,,,37,06,01,033,,14,,,*4F
$GPVTG,,T,,M,,N,,K,N*2C
$GPGSA,A,1,,,,,,,,,,,,,,,*1E
$GPGGA,,,,,,0,,,,,,,,*66
$GPRMC,,V,,,,,,,,,,N*53
$GPGSV,3,1,11,02,19,045,36,04,45,295,34,05,16,071,41,09,,,34*46
$GPGSV,3,2,11,12,10,116,25,23,08,317,27,26,30,295,33,29,80,064,36*7F
$GPGSV,3,3,11,33,,,37,06,01,033,,14,,,*4F
$GPGGA,175612.0,5232.068356,N,01316.494305,E,1,03,6.5,43.8,M,43.0,M,,*60
$GPVTG,,T,0.0,M,0.0,N,0.0,K,A*0D
$GPRMC,175612.0,A,5232.068356,N,01316.494305,E,0.0,,120416,,,A*44
$GPGSA,A,3,02,26,29,,,,,,,,,,8.9,6.5,6.1*3A
$GPGSV,3,1,11,02,19,045,36,04,45,295,34,05,16,071,41,09,,,34*46
$GPGSV,3,2,11,12,10,116,25,23,08,317,26,26,30,295,33,29,80,064,37*7F
$GPGSV,3,3,11,33,,,37,06,01,033,,14,,,*4F
$GPGGA,175613.0,5232.067004,N,01316.494489,E,1,03,2.1,41.6,M,43.0,M,,*65
$GPVTG,,T,0.0,M,0.0,N,0.0,K,A*0D
$GPRMC,175613.0,A,5232.067004,N,01316.494489,E,0.0,,120416,,,A*4D
$GPGSA,A,2,02,26,29,,,,,,,,,,2.3,2.1,1.0*3D
$GPGSV,4,1,15,02,19,045,35,04,45,295,34,05,16,071,41,09,,,32*40
$GPGSV,4,2,15,12,10,116,24,23,08,317,24,26,30,295,33,29,80,064,37*7F
$GPGSV,4,3,15,33,,,38,06,01,033,,16,10,295,,20,08,122,*45
$GPGSV,4,4,15,21,16,192,,25,48,120,,31,51,233,*4F
....

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 461 of 564
17. Audio Commands

17. Audio Commands

The AT Commands described in this chapter are related to the PLS63-W's audio interface.

IMPORTANT: Audio AT commands offer full functionality only if the Digital Audio Interface is enabled with
AT^SCFG="GPIO/mode/DAI","std". If DAI resources are not available (AT^SCFG="GPIO/mode/DAI" = "gpio" or
"rsv") then the Test command format is usable for all DAI related audio AT commands, but Read / Write / Exec
commands are blocked and will respond "+CME ERROR: operation not allowed". The two commands AT+VTD
and AT+VTS are usable regardless of "GPIO/mode/DAI" settings.

17.1 AT+CMUT Mute control

The AT+CMUT command mutes the microphone input during a voice call. The AT+CMUT write command can be
used in all audio modes (incl. audio mode 1). See AT^SNFS for more details on the various audio modes.

When a voice call is made, or the audio mode is changed with AT^SNFS during an active voice call, mute mode
will automatically be switched off (+CMUT: 0). After the voice call has finished +CMUT: 1 will be set again.

Syntax
Test Command

AT+CMUT=?
Response(s)
+CMUT: (list of supported<mute>s)
OK
Read Command

AT+CMUT?
Response(s)
+CMUT: <mute>
OK
ERROR
+CME ERROR: <err>
Write Command

AT+CMUT=<mute>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<mute>(num)
0 Mute off
(P)
1 Mute on

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 462 of 564
17.2 AT+VTS

17.2 AT+VTS DTMF and tone generation

AT+VTS is intended to send ASCII character which cause the Mobile Switching Center (MSC) to transmit DTMF
tone to a remote subscriber. The command can only be used during active voice calls and offers the following
options:
• AT+VTS=<dtmf>[,<duration>] allows to send a single DTMF tone. The duration can be indvidually deter-
mined during the call.
If <duration> is not given the duration is determined by AT+VTD.

Syntax
Test Command

AT+VTS=?
Response(s)
+VTS: (list of supported<dtmf>s), (list of supported<duration>s)
OK
Write Command

AT+VTS=<dtmf>[, <duration>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- - - 3GPP TS 27.007 [51]

Parameter Description

<dtmf>(str)
Single ASCII character in the set 0...9,#,*, A, B, C, D. The string single ASCII character must be enclosed in
quotation marks ("...").

<duration>(num)
Tone duration in 1/10 seconds with tolerance.
The minimum duration of DTMF signals is 300ms. DTMF tones below 300ms cannot be generated.
1...255

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 463 of 564
17.3 AT+VTD

17.3 AT+VTD Tone duration

This command refers to an integer <duration> that defines the length of tones transmitted with the AT+VTS
command.

Syntax
Test Command
AT+VTD=?
Response(s)
+VTD: (list of supported<duration>s)
OK
Read Command
AT+VTD?
Response(s)
<duration>
OK
ERROR
+CME ERROR: <err>
Write Command
AT+VTD=<duration>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- - - 3GPP TS 27.007 [51]

Parameter Description

<duration>(num)
Duration of the DTMF signal in 1/10 seconds with tolerance.
1(&F)(P)...255

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 464 of 564
17.4 AT^SAIC

17.4 AT^SAIC Audio Interface Configuration

AT^SAIC can be used to configure the digital audio interface as PCM and as I²S. Further information regarding
audio functionality is available in the "PLS63-W Hardware Interface Description" [2].

Syntax
Test Command
AT^SAIC=?
Response(s)
^SAIC:(list of supported <io>s), (list of supported<mic>s), (list of supported<ep>s), (list of
supported<bclk>s), (list of supported<mode>s), (list of supported<frame_mode>s), (list of
supported<clk_mode>s), (list of supported<sample_rate>s)
OK
Read Command

AT^SAIC?
Response(s)
^SAIC: <io>, <mic>, <ep>, <bclk>, <mode>, <frame_mode>, <clk_mode>, <sample_rate>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SAIC=<io>, <mic>, <ep>, <bclk>, <mode>, <frame_mode>, <clk_mode>[, <sample_rate>]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<io>(num)
Input and output selection
4 Digital input and output (PCM)
(P)
5 Digital input and output (I²S)

<mic>(num)
Microphone selection
1(P) Microphone 1

<ep>(num)
Select differential earpiece amplifier
1(P) Selects the earpiece amplifier 1

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 465 of 564
17.4 AT^SAIC

<bclk>(num)
Parameter configures the Bit Clock (BCLK) signal for PCM and I²S.
Parameter is always mandatory, but only effective if <io>=4 (PCM).
On the I²S bus BCLK is always either 256 kHz at 8 kHz sample rate, or 512 kHz at 16 kHz sample rate, regard-
less of the value selected with <bclk>.
The parameter value is dependent of <sample_rate>.
0 256 kHz Bit Clock if <sample_rate>= 1
1 256 kHz Bit Clock if <sample_rate>= 0
512 kHz Bit Clock if <sample_rate>= 1
2 512 kHz Bit Clock if <sample_rate>= 0
1024 kHz Bit Clock if <sample_rate>= 1
3(P) 2048 kHz Bit Clock if <sample_rate>= 0
4096 kHz Bit Clock if <sample_rate>= 1

<mode>(num)
Master or Slave mode for PCM and I²S. Specifies if BCLK and FSC signals are either output (Master) or input
(Slave).
Parameter is always mandatory.
0(P) Master mode

<frame_mode>(num)
Parameter configures the Frame Synchronization (FSC) signal.
Parameter is always mandatory, but only effective if <io>=4 (PCM).
I²S always uses a 32 bit stereo voice signal (16 bit word length) regardless of the value selected with
<frame_mode>.
0(P) Short frame
1 Long frame

<clk_mode>(num)
Clock mode
1(P) BCLK signal will be provided only during digital audio activity (non permanent).

<sample_rate>(num)
Sample rate. Parameter is optional.
0 8 kHz
(P)
1 16 kHz

Note
• The default values of AT^SAIC after restart of ME are ^SAIC: 5,1,1,3,0,0,1,1 for every audio mode.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 466 of 564
17.5 AT^SNFI

17.5 AT^SNFI Set microphone path parameters

AT^SNFI controls microphone settings. The AT^SNFI read and write command parameters are related to the
active audio mode set with AT^SNFS.

Syntax
Test Command
AT^SNFI=?
Response(s)
^SNFI: (list of supported <micAmp1>s), (list of supported <micAmp2>s), (list of supported <micTxVol>s)
OK
Read Command
AT^SNFI?
Response(s)
^SNFI: <micAmp1>, <micAmp2>, <micTxVol>
OK
ERROR
+CME ERROR: <err>
Write Command
AT^SNFI=<micAmp1>, <micAmp2>, <micTxVol>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<micAmp1>(num)
0(P) Fixed value

<micAmp2>(num)
16(P) Fixed value

<micTxVol>(num)
16384(P) Fixed value

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 467 of 564
17.6 AT^SNFO

17.6 AT^SNFO Set audio output parameter (loudspeaker path)

AT^SNFO controls the audio output path amplification. The AT^SNFO read and write command parameters are
related to the active audio mode set with AT^SNFS.

Syntax
Test Command
AT^SNFO=?
Response(s)
^SNFO: (list of supported <cdcRxGain>s) , (list of supported <rxVol>s) , (list of supported <stGain>s) ,
(list of supported <rxVolStep>s) , (list of supported <toneVolStep>s)
OK
Read Command

AT^SNFO?
Response(s)
^SNFO: <cdcRxGain>, <rxVol>, <stGain>, <rxVolStep>, <toneVolStep>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SNFO=<cdcRxGain>, <rxVol>, <stGain>[, <rxVolStep>][, <toneVolStep>]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<cdcRxGain>(num)
57(P) Fixed value.

<rxVol>(num)
33(P) Fixed value.

<stGain>(num)
0(P) Fixed value.

<rxVolStep>(num)
<rxVolStep> configures the speaker volume step. Parameter is effective only for PCM and I²S.
0(P)...5 6 volume levels ranging from -15 dB to 0 dB, adjustable in steps of 3 dB.
(0 = 0dB, 5 = -15 dB)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 468 of 564
17.6 AT^SNFO

<toneVolStep>(num)
<toneVolStep> configures the tone generator volume step for locally generated supervisory tones and SAT
tones.
1...43(P) 43 volume levels ranging from -42 dB to 0 dB, adjustable in steps of 1 dB.
(1 = -42 dB, 43 = 0 dB)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 469 of 564
17.7 AT^SNFS

17.7 AT^SNFS Select audio hardware set

AT^SNFS specifies the audio mode required for the connected equipment.
The AT^SNFS write command serves to set the audio mode required for the connected equipment.
The AT^SNFS read command indicates the currently selected audio mode.
Further information regarding audio functionality is available in the "PLS63-W Hardware Interface Description"
[2].

Syntax
Test Command
AT^SNFS=?
Response(s)
^SNFS: (list of supported <audMode>s)
OK
Read Command
AT^SNFS?
Response(s)
^SNFS: <audMode>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SNFS=<audMode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<audMode>(num)
1(P) Audio mode 1: Standard mode.
Optimized for the reference headset that can be connected to the audio inter-
face (see "PLS63-W Hardware Interface Description" for information on this
headset).
2 Audio mode 2: Echo canceller and noise suppressor are preset for user hand-
set usage.
3 Audio mode 3: Echo canceller and noise suppressor are preset for speaker-
phone usage.
4 Audio mode 4: Reserved value.
5 Audio mode 5: Reserved value.
6 Audio mode 6: Echo canceller and noise suppressor are preset for transparent
applications.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 470 of 564
18. Hardware related Commands

18. Hardware related Commands

All AT commands described in this chapter are related to the hardware interface of the PLS63-W. Further infor-
mation regarding this interface is available in the "PLS63-W Hardware Interface Description" [2].

18.1 AT+CCLK Real Time Clock

AT+CCLK controls the real time clock (RTC) of PLS63-W.

If a network supports automatic time update the RTC is constantly updated with the network time. Any changes
to the RTC using the command AT+CCLK will be wiped out by the network time. If a network does not support
automatic time update the RTC can be set using AT+CCLK.
Each time the UE is restarted it may take up to two seconds to reinitialize the RTC and to update the current time.
Therefore, it is recommended to delay the usage of AT+CCLK and AT+CALA after restart.
If the clock is set into the past, it is recommended to reset the UE using AT+CFUN to avoid blocked calls because
of the autocall restriction.
The current setting of the clock is retained if the UE enters Power Down mode via AT^SMSO or restarts using
AT+CFUN. However, it will be reset to its factory default value if the UE is totally disconnected from power.

Syntax
Test Command

AT+CCLK=?
Response(s)
OK
Read Command

AT+CCLK?
Response(s)
+CCLK: <time>
OK
Write Command

AT+CCLK=<time>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

Parameter Description

<time>(str)(NV)
Real time clock setting
Format is "yy/mm/dd,hh:mm:ss", where the characters yy indicate the two last digits of the year, followed by
month (mm), day (dd), hour (hh, 24 hour format), minutes (mm) and seconds (ss). For example the 6th of July
2017 at ten past ten in the evening equates to "17/07/06,22:10:00".
The factory delivery value, which is also used if the UE was totally disconnected from power, is "80/01/
06,00:00:00", where "80" here stands for "1980".
So <time> values as reponse of the read command are ambiguous if the year part is > "79". To be sure that in
such cases the correct time is used, it should be set explicitly using the AT+CCLK write command.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 471 of 564
18.2 AT+CALA

18.2 AT+CALA Alarm Configuration

AT+CALA allows to set an alarm time for the PLS63-W. For further details on the UE's real time clock (RTC) refer
to "PLS63-W Hardware Interface Description, Version 01.002". When the alarm time is reached and alarm is exe-
cuted the UE presents an Unsolicited Result Code (URC), and the alarm time is reset to "00/01/01,00:00:00".
The alarm can adopt two functions, depending on whether or not you switch the UE off after setting the alarm:
• Reminder message: You can use the alarm function to generate reminder messages. For this purpose, set
the alarm as described below and do not switch off or power down the UE. When executed the message
comes as "+CALA" URC which optionally may include a user defined <text>.
• Alarm mode: You can use the alarm function to restart the UE when powered down. For this purpose, set the
alarm as described below. Then power down the UE via AT^SMSO. When the alarm time is reached the UE
will power on. Its functionality level (AT+CFUN=<fun>) depends on setting of AT^SCFG="MEopMode/CFUN",
<volaCFUN>:
- <volaCFUN>=0: Setting of AT+CFUN parameter <fun> is stored persistently. The UE re-establishes its
functionality level formerly used before power down. Wake up is notified by "^SYSSTART" or "^SYS-
START AIRPLANE MODE" URC.
- <volaCFUN>=1 (delivery value): Setting of AT+CFUN parameter <fun> is volatile. The UE always restarts
using Normal Functionality level, which is indicated by "^SYSSTART" URC presentation.
An additional "+CALA" URC with user defined <text> can be configured.
AT+CALA test command returns the supported array index values <n>, the supported alarm types <type> and
the maximum length of the text <tlength>.
AT+CALA read command returns the current alarm settings.

Syntax
Test Command
AT+CALA=?
Response(s)
+CALA: (list of supported <n>s), (list of supported <type>s), (supported <tlength>)
OK
ERROR
+CME ERROR: <err>
Read Command
AT+CALA?
Response(s)
+CALA: <time>, <n>, <type>, <text>
+CALA: <time>, <n>, <type>, <text>
+CALA: ...
OK
ERROR
+CME ERROR: <err>
Write Command
AT+CALA=<time>[, <n>[, <type>[, <text>]]]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last Reference(s)

- + - 3GPP TS 27.007 [51]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 472 of 564
18.2 AT+CALA

Unsolicited Result Codes

URC 1
+CALA: [<text>]
Indicates reminder message.

URC 2
^SYSSTART
+CALA: [<text>]
Indicates UE wake-up at functionality level AT+CFUN=1 (Normal mode).

URC 3
^SYSSTART AIRPLANE MODE
+CALA: [<text>]
Indicates UE wake-up at functionality level AT+CFUN=0 or AT+CFUN=4 (Airplane mode).

Parameter Description

<time>(str)
Format is "yy/MM/dd,hh:mm:ss". For example, 6th of July 2015, 22:10:00 equals to "15/07/06,22:10:00". See
also AT+CCLK.
To clear a given alarm before its scheduled time simply enter an empty string "" for parameter <time>. This will
also clear a given <text>.

<n>(num)
Integer type value indicating the array index of the alarm.
[0]...4

<type>(num)
Integer type value indicating the type of the alarm.
0 Alarm indication: text message on AT command instance

<text>(str)
String type value indicating the text to be displayed when alarm time is reached; maximum length is <tlength>.
By factory default, <text> is undefined.
Note: <text> will be stored to the non-volatile flash memory when the device enters the Power Down mode via
AT^SMSO. Once saved, it will be available upon next power-up, until you overwrite it by typing another text. This
eliminates the need to enter the full string when setting a fresh alarm.
<text> should not contain characters which are coded differently in ASCII and GSM (e.g. umlauts), see also
"Supported character sets" and "GSM alphabet tables".

<tlength>(num)
Integer type value indicating the maximum length of <text>. The maximum length is 16.

Notes
• After the alarm was executed the parameter <time> of AT+CALA will be reset to "00/01/01,00:00:00", but
<text> will be preserved as described above.
• If UE is totally disconnected from power supply the most recently saved configuration of +CALA: <time>
[,<n> [,<type>[,<text>]]] will be presented when UE is powered up.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 473 of 564
18.2 AT+CALA

Examples
EXAMPLE 1
You may want to configure a reminder message for July 31, 2015, at 9.30h, including the message "Good
Morning".
AT+CALA="15/07/31,09:30:00",0,0,"Good Morning"
OK
Do not switch off the UE.When the alarm occurs the UE returns the following URC:
+CALA: Good Morning
EXAMPLE 2
To set a fresh alarm using the same message as in Example 1, simply enter date and time. <n>, <type> and
<text> can be omitted:
AT+CALA="15/07/31,08:50:00"
OK
When the alarm is executed the URC comes with the same message:
+CALA: Good Morning
EXAMPLE 3
To enable the UE to wake up into Alarm mode, e.g. on July 20, 2015, at 8.30h, enter
AT+CALA="15/07/20,08:30:00"
OK
Next, power down the UE:
AT^SMSO
OK
When the alarm is executed the UE wakes up to functionality level (AT+CFUN) which was valid before power
down and displays a URC. If available, this line is followed by the individual <text> most recently saved.
^SYSSTART
+CALA: Good Morning

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 474 of 564
18.3 AT^SBV

18.3 AT^SBV Battery/Supply Voltage

AT^SBV allows to monitor the supply (or battery) voltage of the module. The voltage is periodically measured.
The displayed value is averaged.

The measurement is related to the reference points of BATT+ and GND. For details on the reference points
please refer to the Hardware Interface Description [2]. If the measured average voltage drops below or rises
above the given voltage thresholds the UE will report alert messages by sending the "^SBC" URCs listed in Sec-
tion 1.8.1, Common URCs.

Syntax
Test Command

AT^SBV=?
Response(s)
OK
ERROR
+CME ERROR: <err>
Exec Command

AT^SBV
Response(s)
^SBV: <Voltage>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<Voltage>(num)
Supply (or battery) voltage in mV

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 475 of 564
18.4 AT^SCTM

18.4 AT^SCTM Critical Operating Temperature Monitoring

AT^SCTM allows to monitor the operating temperature range of the PLS63-W device. Refer to "PLS63-W Hard-
ware Interface Description" [2] for specifications on critical temperature ranges.
The AT^SCTM write command controls the presentation of URCs to report critical operating temperature limits.
Use parameter <UrcMode> to enable (1) and disable (0) URC presentation.

Important: Even if setting is <UrcMode>= 0 URC presentation is enabled during a guard period of 2 minutes
after PLS63-W was switched on. After expiry URC presentation will be disabled, i.e. no URCs will be generated.

URCs indicating levels "2" or "-2" are always enabled, i.e. they will be issued even though the factory setting
AT^SCTM=0 was never changed. If level "2" or "-2" URCs occur PLS63-W will trigger shutdown within 5 seconds,
unless the temperature returns to a valid operating level ("1", "0", "-1").

URCs indicating alert levels "1" or "-1" are intended to enable the user to take appropriate precautions, such as
protect PLS63-W from exposure to extreme conditions, or save or back up data etc. .

AT^SCTM read command returns:

• The URC presentation mode.
• Information about the current temperature range of the PLS63-W device.
• The board temperature (in degree Celsius) if parameter <tempCtrl>=1.

Syntax
Test Command

AT^SCTM=?
Response(s)
^SCTM:(list of supported <UrcMode>s)[, (range of <temp>in Celsius)]
OK
Read Command
AT^SCTM?
Response(s)
^SCTM: <UrcMode>, <UrcCause>[, <temp>]
OK
ERROR
+CME ERROR: <err>
Write Command
AT^SCTM=<UrcMode>[, <tempCtrl>]
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Unsolicited Result Code

URCs will be automatically sent to the TE when the temperature reaches or exceeds the critical level, or when it
is back to normal.
^SCTM_B: <UrcCause>
URC for PLS63-W device temperature warning.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 476 of 564
18.4 AT^SCTM

Parameter Description

<UrcMode>(num)
URC presentation mode. Setting will not be stored during power-down, i.e. after next restart default setting will
be restored.
0(&F)(P) Disable URC presentation (except for <UrcCause> equal to -2 or +2).
1 Enable URC presentation.

<UrcCause>(num)
-2 Below lowest temperature limit (causes switch-off after 5 s time).
-1 Below low temperature alert limit.
0 Normal operating temperature.
1 Above upper temperature alert limit.
2 Above uppermost temperature limit (causes switch-off after 5 s time).

<tempCtrl>(num)
0(P) Suppress output of <temp> in read command.
1 Output <temp> in test and read command.

<temp>(num)
Board temperature in Celsius. Is comprised between the lowest temperature warning level and the uppermost
temperature warning level.

Examples
EXAMPLE 1
URCs issued when the operating temperature is out of range:
^SCTM_B: 1 Caution: Module close to overtemperature limit.
^SCTM_B: 2 Alert: Module is above overtemperature limit and switches off.
^SCTM_B: -1 Caution: Module close to undertemperature limit.
^SCTM_B: -2 Alert: Module is below undertemperature limit and switches off.
EXAMPLE 2
URC issued when the temperature is back to normal (URC is output once):
^SCTM_B: 0 Module back to normal temperature.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 477 of 564
18.5 AT^SLED

18.5 AT^SLED LED Feature

AT^SLED controls the LED function provided by the PLS63-W's SYNC PLS63-W's STATUS line, which acts as
an output and can be used to control a connected LED. The electrical specifications of the status line and advice
on how to connect the LED circuit can be found in [2].
The LED indicates the operating states listed below:

Table 18.1: PLS63-W Status and Mode Indication via LED

PLS63-W Status <mode>=1 <mode>=2

- GSM PS data transfer Permanently on 10 ms on /
- UMTS/LTE data transfer - LTE data transfer 1990 ms off
UE registered to a network. No call, no data Permanently on 1250 ms on /
transfer 3750 ms off
Limited Network Service (e.g. because no SIM/ 500 ms on / 500 ms on /
USIM, no PIN or during network search) 500 ms off 500 ms off

Syntax
Test Command

AT^SLED=?
Response(s)
^SLED: (list of supported <mode>s)
OK
Read Command

AT^SLED?
Response(s)
^SLED: <mode>
OK
Write Command

AT^SLED=<mode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<mode>(num)(&V)(&W)
LED operating mode
Parameter is global for all instances.
0(&F)(D) LED feature is disabled.
1 LED feature is enabled.
2 LED is flashing when the UE is registered to the network or data transfer is
ongoing.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 478 of 564
18.6 AT^SSPI

18.6 AT^SSPI Serial Protocol Interface

AT^SSPI enables PLS63-W to be connected to external I²C or SPI devices.

The I²C datastream is mapped through an internal I²C driver to and from an ASCII hex protocol which can be
exchanged with an external application via V24.
The AT^SSPI write command configures and activates the I²C interface and changes from command mode into
data mode. All values must be given in hexadecimal format (0 - 9, A - F) without "0x". For further details, please
refer to Section 18.6.2, Transmitting Data over AT Interface.

Syntax
Test Command

AT^SSPI=?
Response(s)
^SSPI:(list of supported <basicConfiguration>s), (list of supported <wordLength>s), (list of
supported <extendedSpiConfiguration>s)
OK
Read Command

AT^SSPI?
Response(s)
^SSPI: <connectionState>, <basicConfiguration>, <wordLength>,
<extendedSpiConfiguration>
OK
ERROR
+CME ERROR: <err>
Write Command

AT^SSPI=[<basicConfiguration>][, <wordLength>[, <extendedSpiConfiguration>]]

Response(s)
CONNECT
(indicates that ME has entered data mode)
ERROR
+CME ERROR: <err>
PIN  Last
- + +

Parameter Description

<connectionState>(num)
Parameter returned by the AT^SSPI? read command.
Indicates whether or not the I²C or SPI channel is used. When the channel is open and the ME is in data mode
, the read command can only be used if one of the remaining interfaces is available.
[0] Not connected (channel closed).
All following parameters are the factory settings ^SSPI: 0,0010.
1 Connected (channel open, ME in data mode).
All following parameters are the values currently used, for example ^SSPI:
1,0010.

<basicConfiguration>(num)
Parameter <basicConfiguration> is a 16 bit word which contains four subparameters to control the follow-
ing functions:

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 479 of 564
18.6 AT^SSPI

Subparameter Bit Hexadecimal Selected function

Interface type D15 - D12 0 I²C bus
1 SPI device
Port D11 - D8 0 Internal port
Data transfer rate D7 - D4 0 I²C at 100 kbps
1 I²C at 400 kbps

0 SPI at 100 kbps

1 SPI at 250 kbps
2 SPI at 500 kbps
3 SPI at 1.083 Mbps
4 SPI at 3.25 Mbps
5 SPI at 6.5 Mbps
Protocol D3 - D0 0 ASCII (hex coding)

<wordLength>(num)
For SPI only:
0000 Length of SPI word = 8 bits

<extendedSpiConfiguration>(num)
For SPI only: Parameter <extendedSpiConfiguration> is a 16 bit word which contains four subparameters
to control the following functions:

Subparameter Bit Hexadecimal Selected function

SPI mode D15 - D12 0 Four different SPI modes. Phase and
1 polarity of all SPI modes are illustrated in
2 Section 18.6.1, Selecting SPI Mode.
3
Chip Select (CS) mode D11 - D8 0 One Chip Select per Transfer Frame.
Arrangement of bytes D7 - D4 0 Big endian
Bit sequence D3 - D0 0 MSB first
(arrangement of bits on the SPI)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 480 of 564
18.6 AT^SSPI

18.6.1 Selecting SPI Mode

The figure shows the four types of SPI mode selectable by setting the appropriate hexadecimal value within the
parameter <extendedSpiConfiguration>.

Figure 18.1: SPI modes selectable on SPI

18.6.2 Transmitting Data over AT Interface

This section provides information on the protocol used for data transmission to or from I²C /SPI devices and
explains the data mode. It is assumed that you are familiar with the I²C specification.
Throughout this section the following document conventions are used to mark the direction of send and receive:
Transfer Message: AT → I²C or SPI device driver
Response Message: AT ← I²C or SPI device driver

Open / Close channel

To change from command mode to data mode use the AT^SSPI write command. To close down the channel
and return to command mode send the ASCII code # (0x23).

Open ASCII protocol for I²C communication over AT interface:

The protocol allows using a Terminal program for the communication between the UE and the I²C slave device.
To visualize transferred characters and response data it is recommended to run the Terminal program in chat
mode or to switch on local echo. For transfer and response, special characters are defined, such as Start and
Stop to mark a single message and Close to disconnect the data channel. All valid special characters are listed
below:

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 481 of 564
18.6 AT^SSPI

Table 18.2: Special characters for ASCII coding

Direction Function in protocol Special Hex value Description

AT - Driver character
→ Start Transfer Message < 0x3C Special character sent to the I²C driver to
start sending.
→ Stop Transfer Message > 0x3E Special character sent to the I²C driver to
stop sending.
→ Repeated Start Message * 0x2A Triggers a Repeated Start condition.
→ Channel Close # 0x23 For signalling. Channel Close can be sent
any time inside or outside a transmit or
receive message. Causes the transfer to
be aborted and takes the ME back to AT
command mode.
← Start Response Message { 0x7B Special character sent to the I²C driver to
mark the beginning of a Response Mes-
sage.
← Stop Response Message } 0x7D Special character sent to the I²C driver to
mark the end of a Response Message.
← Protocol error ! 0x21 For signalling.Reports to the AT interface
that the Transfer Frame does not comply
with the protocol definition (syntax error).
← Transmission OK (in I²C + 0x2B Notifies the AT interface that data were
protocol referred to as successfully transmitted or , on the I²C bus,
ACK) the I²C Slave Address was recognized.
← Transmission error (in I²C - 0x2D Notifies the AT interface that data trans-
protocol referred to as mission failed or the I²C Slave Address
NAK) was not recognized.

Message syntax
Each Message consists of a Start and Stop character, a Message ID, further protocol data and user data. The
notation of all elements is explained below.

Notation of Message ID
• All ASCII characters between 0x00...0x7F. It is recommended to use only the characters 0...9, A...Z, a...z.
• Length of the Message ID: only one character

Notation of protocol data (except Message ID) and user data:

• Hex (0...9, a...f, A...F)
• Without "0x" (0x01 → 01)
• Each hex value consists of 2 characters (1 → 01)
• Without delimiters such as comma, semicolon, space etc. (0xAE 0x01 0xA5 → AE01A5)
• In a Transfer Message, the number of all characters after the Message ID shall be even. If it is odd, a protocol
error will be reported. This applies to the I²C Slave Address and all subsequent written user data. Keep in
mind that the number of all characters transmitted between Start < and Stop > of the Transfer Frame shall
always be odd because the ID is one character only.
• Length of I²C Slave Address and user data: ≤ 2048 bytes
• The first element of each message is the Start character (< for Transfer, { for the Response). Accordingly, the
last character of a message is the Stop character (> for Transfer, } for the Response).
The second element of each message is the Message ID (1 character). The Message ID serves the user to
distinguish among different messages. It is only relevant on protocol level (between AT interface and I²C
device driver), i.e. it is not sent to the I²C slave device.
Each transfer to the device is followed by a Response Message sent from the driver to the AT interface. The
response includes the Message ID and either OK ("+") or error characters ("-" or "!"). A successful response

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 482 of 564
18.6 AT^SSPI

to a Read Message contains the OK character and the read data. If an error occurs on the I²C bus, the
response consists of an error character.
After each Transfer Message, wait for the Response Message before sending the next Transfer Message.
All characters entered outside a valid message (i.e. not input between Start character < and Stop character
>) are ignored.

Structure of Messages on the I²C Bus

Table 18.3: Structure of Transfer and Response Messages on the I²C bus

Frame Format
Write Transfer Message <ID SlaveAddress Data>

Maximum length: 2048 bytes for I²C bus Slave Address and writ-
ten data. LSB of I²C bus Slave Address = "0".
Read Transfer Message <ID SlaveAddress ReadLength>

Read Length ≤ 2048 bytes. LSB I²C of Slave Address = "1".

Transfer Message with Repeated Start <ID SlaveAddress Data * … * SlaveAddress ReadLength>
condition
Transfer Message with Repeated Start condition may contain one
or more Write Requests and maximum one Read Request that
must be placed at the end of Transfer Message.
Response
Write OK {ID + }
Read of x bytes OK {ID + Data}
NAK if Read or Write transmission fails {ID - 0}
Protocol error near xth byte {ID ! xxxx}
• On the I²C bus, read and write data are handled in two separate frames transmitted one after the other. This
is because the I²C bus has only two bus lines, I2CDAT for the serial data and I2CCLK for the serial clock.
Write data are packed into a Transfer Frame. Read data are packed into a Response Frame. The Transfer
Frame contains a Receive or Transmit Request (R/W Request) for the I²C master.
• In a Transfer Message (Read or Write), the third element is the 7-bit I²C Slave Address (2 characters) that
identifies each single device connected to the bus. The 8th bit of this byte is the LSB that determines the direc-
tion of a message. If the LSB is "0" the master will write information to the selected slave. If the LSB is "1" the
master will read information sent from the slave.
• In a Read Transfer Message on the I²C bus, the size of the expected data must be specified explicitly. This
is an element of 4 characters stating the number of bytes to be read. It must be placed after the I²C Slave
Address.
• It is possible to send one or more Write Requests and maximum one Read Request without sending Stop
signal on I²C bus between them using Repeated Start condition. If Transfer Message with Repeated Start
condition contains Read Request it must be placed as last request in the Transfer Message. In such case
read data is packed into a Response Frame.

18.6.3 Error Handling on the I²C Bus

Protocol error:
If a protocol error is detected the ASCII value "!" is sent to the AT interface. A protocol error occurs if:
• any data / address characters do not equal 0...9, a...f and A...F
• the length of a read word is smaller or greater than 16 bits
• the number of ASCII data is odd (e.g. "af1" instead of "af01")
• the Read or Write request is greater than 2KB (0x0800).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 483 of 564
18.6 AT^SSPI

Acknowledge:
Once a transmission has completed successfully (Write or Read), the special character "+" (ACK) is included in
the Response sent to the AT interface. During a Write Transfer, the I²C driver acknowledges each transferred
byte, but the Response contains only one ACK which is transmitted only if all bytes are successfully transferred.
During a Read Transfer, an ACK is sent when the I²C slave device notifies that it has recognized the I²C Slave
Address.

Not Acknowledge:
During a Transmit Transfer, a NAK is given when the I²C Slave Device notifies a failure to receive neither the I²C
Slave Address nor a data byte. In this case, a Stop Condition is sent to the I²C device. During a Receive Transfer,
a NAK is transmitted only when the I²C does not receive any response for the I²C Slave Address. The I²C device
never acknowledges the validity of the received data (by sending an ACK the master acknowledges each
received byte to the slave).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 484 of 564
18.6 AT^SSPI

18.6.4 Example: Using I²C Bus

As stated above, it is recommended to run the Terminal program in chat mode or to use the local echo. First,
activate the I²C interface:

AT^SSPI=0010,,0000,0000 The first group of characters forms the <basicCon-

CONNECT figuration>, where the first "0" sets I²C, the sec-
ond "0" is the internal port, the digit "1" sets 400 kbps
bit rate on the I²C bus, and the next "0" selects ASCII
coding.
Note: If omitted all above parameters are assumed
by default. Therefore, instead of AT^SSPI=0010 it is
sufficient to only enter AT^SSPI=
The CONNECT response shows that the module
has entered data mode and is ready to transmit data.

The module is in data mode now. This allows you to send a Write Transfer Message:

<aAE000102030405060708090A0B0C0D0E0F> Write Transfer Frame, where a = ID, AE = Slave

Address and write request.
{a+} Write Response Message, where a = ID.
<bAF0010> Read Transfer Message, where b = ID, AF = Slave
Address and read request, 0010 = number of
expected bytes.
{b+000102030405060708090A0B0C0D0E0F} Read Response Message, where b = ID.
<cAE0001020304050607*AF0008> Transfer Message with Repeated Start condition,
where a = ID. Contains one Write Request where AE
= Slave Address and one Read Request where
AF=Slave Address, 0008 = number of expected
bytes.
{c+0001020304050607} Response Message, where c = ID.
# To quit data mode and return to command mode
enter the Close character # .
OK The response OK confirms that the ME is back to
command mode and ready to accept any AT com-
mands.

If the ME is in command mode, the response to the read command contains the factory settings.

AT^SSPI?
^SSPI: 0,0010 The read command returns the connection state "not
connected" (Channel closed) and the factory set-
tings for I²C.
OK

If the ME is in data mode, the response to the read command contains the current settings.

AT^SSPI?
^SSPI: 1,0010 The read command returns the connection state
"connected" (Channel open) and the current settings
for I²C.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 485 of 564
18.6 AT^SSPI

18.6.5 Example: Transfer and Response Messages on SPI

The following examples shall illustrate the message structure and write/read procedures explained in Section .
Blanks are inserted only to better visualize frame elements. In practice no blanks are allowed.

<0 00 0000 11 22 33> Transfer Message: The master writes 3 bytes.

{0 +} Response Message: Transmission successful.

<1 00 0010> Transfer Message: The master requests to read 16

bytes from the slave. Read Offset is zero, therefore,
reading starts from the first byte.
{1 + 11 22 33 44 ... FF 00} Response Message: Reading data successful.

<2 03 0008> Transfer Message: The master requests to read 8

bytes from the slave. Read Offset is 3, therefore,
reading starts from the fourth byte.
{2 + 44 55 66 77 88 99 AA BB} Response Message: Reading data successful.

<3 03 0004 11 22 33 44 55 66> Transfer Message: The master writes 6 bytes and
requests to read 4 bytes from the slave. Read Offset
is 3, therefore, reading starts from the fourth byte.
{3 + AA BB CC DD} Response Message: Reading and writing data suc-
cessful.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 486 of 564
18.7 AT^SAD

18.7 AT^SAD Antenna Configuration

AT^SAD controls usage of the module's UMTS/LTE (RX) diversity/MIMO antenna.

For RX antenna diversity, the AT^SAD command enables verification of receive paths. RX antenna diversity
means usage of two antennas and two receiver paths to provide significant gains in performance. The gains
depend on how 'decoupled' the antennas are from each other. Transmitter (TX) signal is always transferred via
primary antenna.

Syntax
Test Command

AT^SAD=?
Response(s)
^SAD: (list of supported <sadMode>s)
OK
Write Command

AT^SAD=<sadMode>
Response(s)
^SAD: <sadValue>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<sadMode>(num)
This parameter controls usage of the RX diversity antenna.

<sadMode> RX antenna diversity related settings 10, 11, 13 are stored in the non-volatile memory, any change
takes effect after next UE power-up. An error is returned if write access to non-volatile storage fails.
10 Testing mode: Disable RX diversity functionality. Activate only the first antenna
for RX operation, i.e. use the primary (main) antenna for RX operation. The
secondary (diversity) receiver path is switched off.
11(D) Enable RX diversity functionality by activating both antennas for RX operation.
12 Query RX diversity functionality setting.
<sadValue> returns the currently stored configuration.
13 Testing mode: The primary (main) antenna port is used as TX chain. However,
the related receiver path is switched off.
Only the secondary (diversity) antenna is activated for RX operation.

<sadValue>(num)
The meaning of this parameter depends on given <sadMode>.

For <sadMode>=[10, 11, 13] <sadValue> returns the currently stored configuration of the RX diversity func-
tionality, which will be used after next restart of the UE.
For <sadMode>=12 <sadValue> returns the current non-volatile memory setting (range 10, 11, 13).

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 487 of 564
18.8 AT^SRADC

18.8 AT^SRADC Configure and Read A/D Converter

AT^SRADC controls the UE's Analog-to-Digital Converter (ADC). This allows to measure the voltage of external
devices connected to the ADC input lines.
AT^SRADC write command configures the parameters required for ADC measurement and returns the measure-
ment result(s). The value(s) can be delivered once on request by using the single measurement mode, or peri-
odically by specifying a measurement interval.
For details refer to "PLS63-W Hardware Interface Description, Version 01.002".

Syntax
Test Command

AT^SRADC=?
Response(s)
^SRADC:(list of supported <ch>s), (list of supported <op>s), (list of supported <it>s)
OK
Read Command

AT^SRADC?
Response(s)
^SRADC: <ch>, <op>, <it>
[^SRADC: <ch>, <op>, <it>]
[^SRADC: ...]
OK
Write Command

Single measurement (with automatic channel open and close):

AT^SRADC=<ch>
Response(s)
^SRADC: <ch>, <count>, <value>
OK
ERROR
+CME ERROR: <err>
Write Command

Periodic measurement:
AT^SRADC=<ch>, <op>[, <it>]
Response(s)
[^SRADC: <ch>, <count>, <value>]
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Unsolicited Result Code

ADC measurement URC (only used in periodic measurement mode).
^SRADC: <ch>, <count>, <value>[, <value>[, <value>[, <value>[, <value>[, <value>[,
<value>[, <value>[, <value>[, <value>[, <value>]]]]]]]]]]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 488 of 564
18.8 AT^SRADC

Parameter Description

<ch>(num)
ADC channel
0 First ADC channel (ADC1_IN)
1 Second ADC channel (ADC2_IN)
2 Third ADC channel (ADC3_IN).

<op>(num)
Operation
Open or close ADC channel for measurement.
If parameter is not specified, then single measurement mode is initiated (with open and close of channel). Single
measurement is not allowed if the channel is already open.
[0] Close ADC channel (value of parameter <it> is ignored).
1 Open ADC channel

<it>(num)
Measurement interval
Parameter is used only if operation <op> is 1 (Open).

Single Measurement Mode:

[0] Performs a single measurement (incl. close of channel).

Measurement interval in ms for Periodic Measurement Mode:

Measurement interval and URC output:
The URC output interval is miminum 1000 ms. This means if the measurement interval <it> is smaller than
1000 ms, then every second one URC will be output containing several measurement values. If <it> is equal
1000 ms or greater, each URC contains exactly one single measurement value. See examples below.

URC buffer mechanism:

If the interface is not free (e.g., during execution of an AT command) measurement values are buffered. Up to
5 URCs can be buffered, each containing up to 11 measurement values. After freeing the interface, all buffered
URCs will be printed out. Loss of measured values, if any, is indicated by an additional 6th URC containing the
value "32767". See example below.

Possible values in milliseconds (ms):

100...30000

<value>(num)
Measurement value
Measurement value in mV

<count>(num)
1...11 Number of measured samples
In single measurement mode: <count> is always 1.
In periodic measurement mode: <count> is the number of <value>s indi-
cated by the URC "^SRADC". The higher the sample rate set with <it>, the
more measured values are reported within the URC "^SRADC".

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 489 of 564
18.8 AT^SRADC

Examples
EXAMPLE 1
Single measurement
AT^SRADC=0 Open the first ADC channel for single measurement.
^SRADC: 0,1,78
OK
EXAMPLE 2
Periodic measurement at low sample rate (5s):
AT^SRADC=0,1,5000 Start periodic measurement mode on the first ADC
^SRADC: 0,1,76 channel. Samples are taken every 5s. Every 5s the
^SRADC: 0,1,78 URC "^SRADC" appears to report the measured volt-
^SRADC: 0,1,76 ages. The second parameter represents the number
of measured samples, in this case only one.
^SRADC: 0,1,76
AT^SRADC=0,0 Stop the periodic measurement
OK
EXAMPLE 3
Periodic measurement at high sample rate (250ms):
AT^SRADC=0,1,250 Start periodic measurement on the first ADC chan-
^SRADC: 0,4,76,76,77,76 nel. Samples are taken every 250ms. Every second
^SRADC: 0,4,76,76,75,76 a URC "^SRADC" appears to report the measured
^SRADC: 0,5,77,77,76,76,76 voltage. The number of samples is 4 or 5.
^SRADC: 0,4,76,76,75,76
AT^SRADC=0,0
OK Stop the periodic measurement
EXAMPLE 4
Handling of "^SRADC" URCs and AT command execution on the same interface:
AT^SRADC=0,1,250 Start periodic measurement mode on the first ADC
^SRADC: 0,4,76,76,77,76 channel. Samples are taken every 250ms.
^SRADC: 0,5,77,77,76,76,76
^SRADC: 0,4,76,76,75,76
^SRADC: 0,4,76,76,75,76
AT^SRADC? Input of AT command and <CR> takes some sec-
onds.
^SRADC: 0,1,250
^SRADC: 1,0,0
OK
^SRADC: Some URCs were buffered during command input
0,11,75,75,75,75,75,75,75,75,75,75,75 and sent after completion.
^SRADC: 0,8,75,75,75,75,75,75,75,77
^SRADC: 0,1,75
^SRADC: 0,4,76,76,75,76 More URCs are delivered.
^SRADC: 0,4,76,76,75,76
^SRADC: 0,5,77,77,76,76,76
^SRADC: 0,4,76,76,77,76
^SRADC: 0,4,76,76,75,76
AT^SRADC? Input of AT command and <CR> takes 90s.
^SRADC: 0,1,250
^SRADC: 1,0,0
OK
^SRADC: some URCs were buffered during command input
0,11,75,75,75,75,75,75,75,75,75,75,75 and sent after completion
^SRADC:
0,11,73,74,73,74,73,73,73,74,74,73,73

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 490 of 564
18.8 AT^SRADC

^SRADC: 0,11,74,73,74,73,73,73,73,73,73,73,73
^SRADC: 0,11,73,73,74,74,73,73,74,73,73,74,74
^SRADC: 0,11,73,73,73,73,73,73,73,74,74,73,73
^SRADC: 0,8,73,73,74,73,73,73,73,32767 The URC indicates lost measurement results.
^SRADC: 0,4,74,74,73,73 More URCs are delivered.
^SRADC: 0,4,75,75,75,75
......

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 491 of 564
19. General Purpose I/O (GPIO) Pin related Commands

19. General Purpose I/O (GPIO) Pin related Commands

This chapter describes the AT commands used to access and configure the GPIO pins of PLS63-W.

Please also refer to [2] for electrical specifications of the GPIO pins.

19.1 AT^SPIO GPIO Driver Open/Close

AT^SPIO write command opens and closes the General Purpose I/O (GPIO) driver. The command must be exe-
cuted before any GPIO related command can be used.
The command does not reserve any GPIO lines, only the driver required for their management will be started.

Syntax
Test Command
AT^SPIO=?
Response(s)
^SPIO:(list of supported <mode>s)
OK
Write Command

AT^SPIO=<mode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<mode>(num)
0 Close General purpose I/O driver
1 Open General purpose I/O driver

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 492 of 564
19.2 AT^SCPIN

19.2 AT^SCPIN Pin Configuration

The AT^SCPIN write command serves to configure GPIOs.

Keep in mind that each GPIO can be assigned only one function. This means that if configured for GPIO handling
with AT^SCPIN this GPIO is locked for any alternative function, and vice versa. Mutually exclusive functions are:
• Configuring a GPIO with AT^SCPIN.
- Using a GPIO configured as input with AT^SCPIN to wake up the UE from power saving. Suitable GPIOs
(unless otherwise assigned): GPIO1, GPIO3, GPIO4, GPIO6, GPIO8, GPIO12, GPIO16, GPIO17,
GPIO19, GPIO20, GPIO21, GPIO25. Reporting of level state changes at the specified GPIO shall be
enabled with AT^SCPOL.
• When GPIO direction is set as Input, GPIO PIN configuration (eg. None, Pull-up, Pull-down, Keep) is taken
from AT^SGPINCA.

Syntax
Test Command
AT^SCPIN=?
Response(s)
^SCPIN:(list of supported <mode>s), (list of supported <pin_id>s), (list of supported <direction>s), (list
of supported <startValue>s)
OK
Write Command

AT^SCPIN=<mode>, <pin_id>, <direction>[, <startValue>]

Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<mode>(num)
0 Close pin
1 Open pin

<pin_id>(num)
Pin identifier
0 GPIO1
1 GPIO2
2 GPIO3
3 GPIO4
4 GPIO5
5 GPIO6
6 GPIO7
7 GPIO8
10 GPIO11
11 GPIO12

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 493 of 564
19.2 AT^SCPIN

12 GPIO13
13 GPIO14
14 GPIO15
15 GPIO16
16 GPIO17
17 GPIO18
18 GPIO19
19 GPIO20
20 GPIO21
23 GPIO24
24 GPIO25
25 GPIO26

<direction>(num)
Parameter <direction> is mandatory when opening a pin, but can be omitted when closing a pin.
0 Input
1 Output

<startValue>(num)
Can be set only for outputs.
[0] Low
1 High

Notes
• Please refer to AT^SPIO for information on opening and closing the pin.
• For closing a pin with the write command (<mode>=0), the parameter <direction> is not needed.
• Before changing the configuration of a pin be sure to close the pin.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 494 of 564
19.3 AT^SGIO

19.3 AT^SGIO Get IO state of a specified pin

AT^SGIO write command returns the state of selected GPIO Pin. AT^SGIO requires GPIO drivers opened using
AT^SPIO and AT^SCPIN.

Syntax
Test Command
AT^SGIO=?
Response(s)
^SGIO:(list of supported <io_id>s)
OK
Write Command
AT^SGIO=<io_id>
Response(s)
^SGIO: <value>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<io_id>(num)
<pin_id> shows supported GPIO.

<value>(num)
State read on this <io_id>.
0 Low for <pin_id>
1 High for <pin_id>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 495 of 564
19.4 AT^SSIO

19.4 AT^SSIO Set IO state of a specified pin

AT^SSIO write command sets the state of GPIO Pin. AT^SSIO requires GPIO drivers opened using AT^SPIO
and AT^SCPIN. GPIO Pin must be set as ouput using AT^SCPIN first otherwise command will return error.

Syntax
Test Command
AT^SSIO=?
Response(s)
^SSIO:(list of supported <io_id>s), (list of supported <value>s)
OK
Write Command
AT^SSIO=<io_id>, <value>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<io_id>(num)
This is an already configured <pin_id>.

<value>(num)
State to be set for this <io_id>.
0 Low for <pin_id>
1 High for <pin_id>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 496 of 564
19.5 AT^SGPINCA

19.5 AT^SGPINCA Pin Configuration

The AT^SGPINCA write command configures the internal pull-up or pull-down constant current source of an
GPIO, which is configured as input. Keep in mind that some GPIO lines share functions with other interfaces. For
details see AT^SCFG "GPIO/mode/xxx" settings, Section and following AT commands: AT^SLED,, AT^SSPI,
AT^SCFG "MEShutdown/Fso".

Syntax
Test Command

AT^SGPINCA=?
Response(s)
^SGPINCA:(list of supported <pin_in_id>s), (list of supported <pinconf>s)
OK
Write Command

AT^SGPINCA=<pin_in_id>[, <pinconf>]
Response(s)
^SGPINCA: <pin_in_id>, <pinconf>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<pinconf>(str)
Pin pull configuration
“NONE“(P) GPIO configured as input
“KEEP“ GPIO is configured as Input and Keep
“PD“ GPIO is configured as Input and Pull down (PD)
“PU“ GPIO is configured as Input and Pull Up (PU)

<pin_in_id>(num)
Supported GPIO
<pin_id> shows supported GPIO.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 497 of 564
20. Subscription Management Commands

20. Subscription Management Commands

The AT Commands described in this chapter are related to Subscription Management and allow the external
application to control the
• Verizon Wireless Remote Subscription Management (RSM)

20.1 AT^SUSMA Subscription Management Action

The AT^SUSMA command delivers general control for the

• Verizon Wireless Remote Subscription Management (RSM)

Syntax
Test Command

AT^SUSMA=?
Response(s)
^SUSMA: "VzwSimAct/State", (list of supported <susmaAction>s)
OK
Read Command

AT^SUSMA?
Response(s)
^SUSMA: "VzwSimAct/State", <VzwSimActState>
OK
ERROR
+CME ERROR: <err>
Write Command
Query state of Verizon UICC activation.
AT^SUSMA="VzwSimAct/State"[, <susmaAction>]
Response(s)
^SUSMA: "VzwSimAct/State", <VzwSimActState>
OK
ERROR
+CME ERROR: <err>
PIN  Last
+ + -

Unsolicited Result Code

^SUSMA: "VzwSimAct/State", 7
URC indicates that "EF_ActStatus" (Path: "3F00/7F48/6F01") is changed from 0 to any other values.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 498 of 564
20.1 AT^SUSMA

Parameter Description

<susmaAction>(num)
AT^SUSMA Action Parameter
This Parameter is used to start a dedicated Action.
0 Stop Action (if applicable);
1 Start Action;

<VzwSimActState>(str)
State of Verizon UICC activation
"0"..."7" Bitmask setting:
“1“ Set to 0 always, reserved for future use;
“2“ Set to 1 when the content of USIM MSISDN is different from default value per
3GPP;
“4“ Set to 1 when content of "EF_ActStatus" (Path: "3F00/7F48/6F01") is non-
zero.

Note
• The AT^SUSMA for RSM will be available when a Verizon Wireless SIM is inserted. Otherwise the command
will return ERROR.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 499 of 564
20.2 AT^SUSMC

20.2 AT^SUSMC Subscription Management Control

The AT^SUSMC command delivers general URC control for the

• Verizon Wireless Remote Subscription Management (RSM)

Syntax
Test Command
AT^SUSMC=?
Response(s)
^SUSMC: "VzwSimAct/State/URC", (list of supported <RsmUrcCtrl>s)
OK
Read Command
AT^SUSMC?
Response(s)
^SUSMC: "VzwSimAct/State/URC", <RsmUrcCtrl>
OK
ERROR
+CME ERROR: <err>
Write Command
Controls if URC "^SUSMA" for Remote Subscription Management (RSM) will be delivered.
AT^SUSMC="VzwSimAct/State/URC"[, <RsmUrcCtrl>]
Response(s)
^SUSMC: "VzwSimAct/State/URC", <RsmUrcCtrl>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<RsmUrcCtrl>(str)(NV)
RSM URC Control
“0“(D) Disable URC for RSM
“1“ Enable URC for RSM

Note
• The AT^SUSMC for RSM will be available when a Verizon Wireless SIM is inserted. Otherwise the command
will return ERROR.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 500 of 564
21. Miscellaneous Commands

21. Miscellaneous Commands

The AT Commands described in this chapter are related to various areas.

21.1 ATS3 Command Line Termination

ATS3 is implemented for compatibility reasons only, and has no effect on module behaviour.

Syntax
Read Command

ATS3?
Response(s)
<n>
OK
Write Command

ATS3=<n>
Response(s)
OK
ERROR
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Parameter Description

<n>(num)(&V)
000...013(&F)...127

Notes
• Read command will return default value n=13.
• Write command will return OK or ERROR. OK - when parameter <n> is in range, ERROR otherwise.
• Despite OK returned in case of any parameter from range, no changes will be made.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 501 of 564
21.2 ATS4

21.2 ATS4 Response Formatting

ATS4 is implemented for compatibility reasons only, and has no effect on module behaviour.

Syntax
Read Command

ATS4?
Response(s)
<n>
OK
Write Command

ATS4=<n>
Response(s)
OK
ERROR
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Parameter Description

<n>(num)(&V)
000...010(&F)...127

Notes
• Read command will return default value n=10.
• Write command will return OK or ERROR. OK - when parameter <n> is in range, ERROR otherwise.
• Despite OK returned in case of any parameter from range, no changes will be made.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 502 of 564
21.3 ATS5

21.3 ATS5 Command Line Editing

ATS5 is implemented for compatibility reasons only, and has no effect on module behaviour.

Syntax
Read Command

ATS5?
Response(s)
<n>
OK
Write Command

ATS5=<n>
Response(s)
OK
ERROR
PIN  Last Reference(s)

- + - ITU-T V.250 [18]

Parameter Description

<n>(num)(&V)
000...008(&F)...127

Notes
• Read command will return default value n=8.
• Write command will return OK or ERROR. OK - when parameter <n> is in range, ERROR otherwise.
• Despite OK returned in case of any parameter from range, no changes will be made.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 503 of 564
21.4 AT^SBNW

21.4 AT^SBNW Binary Write

AT^SBNW allows for writing binary or hexadecimal data to the non-volatile memory or to the Flash File System
(FFS). The handling of the AT^SBNW write command varies depending on the type of data.

Syntax
Test Command
AT^SBNW=?
Response(s)
^SBNW:(list of supported <type>s), (list of supported <subtype>s)
OK
Write Command
Cipher suites user file modification:
AT^SBNW="ciphersuites", <ciphersuites_length>
Response(s)
CONNECT

CIPHERSUITES: SEND FILE ...

Indicates that UE has entered binary data mode. Data can be transferred.
When Ciphersuites file data are transferred and updated, or error occurs the UE returns one of following
answers:
CIPHERSUITES: LENGTH ERROR
CIPHERSUITES: FILE WRITE ERROR
CIPHERSUITES: SUITE NOT FOUND
CIPHERSUITES: UNDEFINED ERROR
CIPHERSUITES: INTERNAL ERROR
CIPHERSUITES: I/O ERROR
OK
Write Command

Cipher suites user file removal:

AT^SBNW="ciphersuites", 0
Response(s)
CIPHERSUITES: DELETE CIPHERSUITES FILE...
CIPHERSUITES: DONE
OK
+CME ERROR: <err>
Write Command
Save the xtra.bin file to local memory (if <agps_size> is used to specify file size):
AT^SBNW="agps", <agps_size>
Response(s)
CONNECT

AGPS READY: SEND FILE ...

(Indicates that UE has entered binary data mode. Data can be transferred.)

After data transfer the UE returns one of the following result codes:
AGPS: END OK
AGPS: TIME INFO ERROR
AGPS: I/O ERROR
AGPS: GENERAL FAILURE
AGPS: UNSUPPORTED

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 504 of 564
21.4 AT^SBNW

Write Command (Continued)

Save the xtra.bin file to local memory (if <agps_size> is used to specify file size):
AT^SBNW="agps", <agps_size>
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

Delete existing xtra.bin file:

AT^SBNW="agps", -1
Response(s)
CONNECT

AGPS READY: RESET GPS ENGINE AND DELETE XTRA FILE...

(Indicates that UE tries to reset all current GPS data and to delete a saved xtra.bin file)
After that the UE returns one of the following result codes:
AGPS: END OK
AGPS: GENERAL FAILURE
AGPS: UNSUPPORTED
OK
ERROR
+CME ERROR: <err>
Write Command

Certificate management for secure connection of client IP services.

AT^SBNW="is_cert", <subtype>
Response(s)
CONNECT

SECURE CMD READY: SEND COMMAND ...

(Indicates that UE has entered binary data mode. Secure command data can be transferred.)
When secure command data is processed the UE will send one of following answers:
SECURE CMD LENGTH ERROR
SECURE CMD PUBLIC CERTIFICATE IS CORRUPTED
SECURE CMD PRIVATE KEY WAS REMOVED
SECURE CMD SERVICE TIMEOUT ERROR
SECURE CMD TO MANY DATA ERROR
SECURE CMD ERROR
SECURE CMD END OK
Write Command
Certificates for local UE management.
AT^SBNW="management_cert", <subtype>
Response(s)
CONNECT

SECURE CMD READY: SEND COMMAND ...

(Indicates that UE has entered binary data mode. Secure command data can be transferred.)
When secure command data is processed the UE will send one of following answers:
SECURE CMD LENGTH ERROR
SECURE CMD PUBLIC CERTIFICATE IS CORRUPTED
SECURE CMD PRIVATE KEY WAS REMOVED
SECURE CMD SERVICE TIMEOUT ERROR
SECURE CMD TO MANY DATA ERROR

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 505 of 564
21.4 AT^SBNW

Write Command (Continued)

Certificates for local UE management.

AT^SBNW="management_cert", <subtype>
Response(s)
SECURE CMD ERROR
SECURE CMD END OK
PIN  Last
- + -

Parameter Description

<type>(str)
“agps“ Activates A-GPS binary data mode.
“ciphersuites“ Command for IPoverAT TLS Cipher Suite file management.
“is_cert“ Secure Command Mode (Manage Certificates).
For embedded TCP IP services the certicates shall be created in DER format.
“management_cert“ Secure command mode for managing certificates for UE management. See
AT^SSECUA and AT^SSECUC.

<subtype>(num)
1 Start Secure Command Block Transfer mode

<agps_size>(num)
4097...102400 Size of xtra.bin file (number of bytes).
-1 Delete stored xtra.bin file. Also all currently used GPS data are deleted.

<ciphersuites_length>(num)
Number of characters of ciphersuite names.

Notes
• The AT^SBNW="AGPS" write command can be used to load binary data for A-GNSS (Assisted GNSS) from
a local memory to the PLS63-W Flash File System (FFS). The GNSS receiver integrated in PLS63-W sup-
ports gpsOneXTRATM assistance data.

Before transferring A-GNSS data ensure that the following conditions are met:
- Take care that the RTC of PLS63-W is correctly set to Greenwich Mean Time (GMT):0 with AT+CCLK and
is up to date.
- Deactivate the GNSS receiver with AT^SGPSC="<EngineVal>",0.
- Download a new GpsOneXTRA binary file via HTTP from one of the following gpsOneXtra assistance
webservers, for example:
- http://xtrapath4.izatcloud.net/xtra2.bin
- http://xtrapath5.izatcloud.net/xtra2.bin
- http://xtrapath6.izatcloud.net/xtra2.bin
- Save the received XTRA file to your local memory and check the exact file size. This is because the pre-
cise data length shall be given when storing the XTRA file to the PLS63-W FFS. The data length shall be
the second parameter <agps_size>.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 506 of 564
21.4 AT^SBNW

The UE verifies the XTRA file. If the validation check is successful the UE will send the responses "AGPS:
END OK" and "OK" and return to command mode. The file will be saved in the FFS and injected into the
GNSS engine. If the validation check is not successful the UE respond with "AGPS: TIME INFO ERROR".
The data can be used to achieve faster TTFF (Time to First Fix). For this purpose, set AT^SGPSC="<Engi-
neVal>",2 and activate the GNSS receiver. Assistance data is valid for up to 7 days.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 507 of 564
21.5 AT^SFDL

21.5 AT^SFDL Enter Firmware Download Mode

AT^SFDL allows the application manufacturer to download PLS63-W firmware into the module by starting the
download process from the host application or a customer-designed download program.

The download can be performed via the following serial interfaces: USB, ASC0 and ASC1.
The PLS63-W firmware update file must be available in the *.USF format. It consists of records to be transferred
one by one from the host application to the module.
This manual only describes the handling of the AT^SFDL command. All technical requirements and steps to pre-
pare the host application for this download solution can be found in the "Application Note 16: Updating PLS63-
W Firmware" [4]. An example for developing an appropriate download program is included.

The AT^SFDL execute command causes the module to enter the firmware download mode. If a valid firmware
is still installed, but the AT^SFDL command is issued without sending any firmware afterwards the module will
stay in ready state. In this case it must be switched off.
The AT^SFDL=2 write command causes the module to start the firmware update mode.

After entering the download mode the ME sends the start pattern HEX 0x01 ("ANSWER_OK") to the update tool
to indicate its ready state. Next, the update tool shall start to send the records of the firmware file. Each record
received by the ME is acknowledged to the update tool. Once all records are successfully received, the ME shuts
down automatically.

Syntax
Test Command

AT^SFDL=?
Response(s)
^SFDL:(list of supported <mode>s)
OK
Exec Command
Enter firmware download mode
AT^SFDL
Response(s)
In case of success:
OK
0x01
In case of error:
ERROR
+CME ERROR: <err>
Write Command

Start firmware update mode.

AT^SFDL=<mode>
Response(s)
OK
ERROR
+CME ERROR: <err>
PIN  Last
- + +

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 508 of 564
21.5 AT^SFDL

Parameter Description

<mode>(num)
Parameter to start the firmware update using AT^SFDL=2 write command.
2 Launches firmware update mode to replace the PLS63-W's existing firmware
with a new firmware provided on the internal flash.

Note
• The software update program sends first answer code OK and waits for data. If no data is received and after
a 2 seconds timeout, the program ends with an error and the AT command interpreter outputs an error mes-
sage.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 509 of 564
21.6 AT^SFSA

21.6 AT^SFSA Flash File System Access

AT^SFSA provides access to the Flash File System. The following functionality is supported:
• Reading global status information, available storage and max. storage size
• Creating and deleting files and directories
• Reading file status information, e.g. file size, optional date
• Renaming files and directories
• Copying files and directories
• Listing directory contents
• Computation and displaying CRC of a given file
• Reading and writing an arbitrary amount of data per call
• Providing random access to the file data and a seek function

Flash File System Requirements:

AT^SFSA="gstat" shows the maximum memory space of the FFS (see <StorageSize>) and the free memory
space (see <FreeSpace>). As the file system is block structured the <FreeSpace> value will decrease only in
full block multiples. The block size is 2048 bytes.
Keep in mind that the entire memory space comprises both user data and internal resources for the file system
infrastructure. As a result, the free memory space depends on the file size, the number of files and the number
of created directories. In short, the more files / folders you create, and the more internal data is used from the
system, the less memory will be available for user data. If the limit is reached, the error code ^SFSA: 28 will be
returned.

Please consider the following rules for an efficient FFS management:

• The maximum number of directories altogether in the root directory and all subdirectories is limited to 100.
The maximum number of files is about 1000 altogether in the root directory and all subdirectories.
Note: It is not possible to use these maximum numbers of file system entries, the actual amount of files and
directories may be lower, because some of them are used internally by the net service functionalities of mod-
ule itself.
Note: Ensure not to fill up the file system to its limits, otherwise the net service functionalities may run into
trouble.
• The subdirectory depth shall not be greater than 5.
• Allowed characters for path and file names:
- Path and file names are alphanumeric. Allowed characters: A - Z, a - z, digits, underscore, and special
characters used in file URL format defined in IETF RFCs 1738 (except "*","'") and 2396. Space characters
are allowed as well, but require the whole path or file name be enclosed in quotation marks (e.g. "a:/dire
ctory/my file.txt" or "a:/ directory/my file.txt"), otherwise the spaces will be discarded.
- Character "/" is a separator for directories and files, e.g. /directory/my_sub_dir/my_file.txt.
- Both "." and ".." are illegal for directory names, "." as part of a file name is allowed.
- File and directory names are case-sensitive.
- Path names start with drive prefix "a:/" or "A:/".
• Length of files and paths (incl. drive prefix "a:/" or "A:/"): The maximum usable length is 128 GSM characters.
• If the file is in open status, it must be closed first before executing other file operations such as copy, rename
and remove.

Syntax
Test Command

AT^SFSA=?
Response(s)
^SFSA: "close", (range of <fh>)
^SFSA: "copy", (max. string length of <path>), (max. string length of <DestinationPath>), (list of
supported <CopyFlag>s)
^SFSA: "crc", (max. string length of <path>)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 510 of 564
21.6 AT^SFSA

Test Command (Continued)

AT^SFSA=?
Response(s)
^SFSA: "gstat", (list of supported <drive>s)
^SFSA: "ls", (max. string length of <path>)
^SFSA: "mkdir", (max. string length of <path>)
^SFSA: "open", (max. string length of <path>), (range of <flag>)
^SFSA: "read", (range of <fh>), (max. value of <size>)
^SFSA: "remove", (max. string length of <path>)
^SFSA: "rename", (max. string length of <path>), (max. string length of <name>)
^SFSA: "rmdir", (max. string length of <path>)
^SFSA: "seek", (range of <fh>), (range of <offset>), (list of supported <SeekFlag>)
^SFSA: "stat", (max. string length of <path>)
^SFSA: "write", (range of <fh>), (max. value of <size>)
OK
Write Command

Close a file. The file has to be successfully opened before.

AT^SFSA="close", <fh>
Response(s)
In case of success:
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command

Copy a file given by the <path> parameter to the file given by the<DestinationPath>. Both names should
not be identical, otherwise copy operation returns error "path already exists".
AT^SFSA="copy", <path>, <DestinationPath>[, <CopyFlag>]
Response(s)
In case of success:
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command

Compute CRC of a file.

AT^SFSA="crc", <path>
Response(s)
In case of success:
^SFSA: <crc>, <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 511 of 564
21.6 AT^SFSA

Write Command

Read global status of FFS.

AT^SFSA="gstat"[, <drive>]
Response(s)
In case of success:
^SFSA: <StorageSize>
^SFSA: <FreeSpace>
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command

Read global status of the FFS.

AT^SFSA="gstat"
Response(s)
In case of success:
^SFSA: <StorageSize>
^SFSA: <FreeSpace>
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command

List content of a directory.

AT^SFSA="ls", <path>
Response(s)
In case of success:
[^SFSA: <name>]
[... ]
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command
Create a directory. The directory in which the new directory should be created must already exist, i.e. the cre-
ation of intermediate sub-directories is not supported.
AT^SFSA="mkdir", <path>
Response(s)
In case of success:
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 512 of 564
21.6 AT^SFSA

Write Command

Open a file.
AT^SFSA="open", <path>, <flag>
Response(s)
In case of success:
^SFSA: <fh>, <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command

Read from a file. The file has to be opened for reading before.
The command returns <nbytes> bytes of binary data read from the file.
The number of bytes actually read can be equal or smaller than the requested number of bytes given by the
<size> parameter.
AT^SFSA="read", <fh>, <size>
Response(s)
In case of success:
<CR><LF>^SFSA: <nbytes>, <result><CR><LF>
[Binary data of <nbytes> bytes]
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command

Remove a file. The file has to be closed.

AT^SFSA="remove", <path>
Response(s)
In case of success:
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command
Rename a file or directory.
AT^SFSA="rename", <path>, <name>
Response(s)
In case of success:
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 513 of 564
21.6 AT^SFSA

Write Command

Remove a directory. The directory has not to be empty.

AT^SFSA="rmdir", <path>
Response(s)
In case of success:
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command

Move the pointer of the current position in a file.

AT^SFSA="seek", <fh>, <offset>[, <SeekFlag>]
Response(s)
In case of success:
^SFSA: <new offset>, <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>
Write Command

Read file or directory status.

AT^SFSA="stat", <path>
Response(s)
In case of success:
^SFSA: <FileSize>
^SFSA: <DateLastAccess>
^SFSA: <DateLastModification>
^SFSA: <DateLastFileStatChange>
^SFSA: <StatAttribute>
^SFSA: <result>
OK
In case of error:
^SFSA: <result>
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 514 of 564
21.6 AT^SFSA

Write Command

Write to a file. The file has to be opened for writing before.

After entering the command, the ME enters data entry mode and is ready to receive binary data over the serial
interface. The ME awaits certain number of<size> bytes to write.
There are three ways to quit the data entry mode and revert to AT command mode:
- the exact number of bytes has been received by the ME (see the <size> parameter)
- timeout has expired. The timeout value for reception of each character is 30 seconds.
- inline break +++ is entered to abort the data input before the certain number of<size> bytes input.
After invoking the command it is necessary to wait for the prompt "CONNECT" before entering data.
After the prompt a timer will be started to guard the input period.
If current position in the file is not set to the end, the data will be overwritten.
In case of timeout, the command ends with <result> 214.
AT^SFSA="write", <fh>, <size>
Response(s)
In case of success:
CONNECT
[<size> bytes of binary data]

^SFSA: <size>
^SFSA: <result>
OK
In case of error:
^SFSA: <size>
^SFSA: <result>
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<fh>(num)
File handle
The file handle is returned by the system in the open command. It has then to be used in the following requests,
e.g. read, write, close, seek. The number of opened files is limited to 32.
0...31 .

<path>(str)
Path to a file or a directory
For naming restrictions please see above rules for efficient FFS management.

<DestinationPath>(str)
Path to a destination file
For naming restrictions please see above rules for efficient FFS management.

<name>(str)
Name of a file or a directory
The list command shows directory names with appended slash.
For naming restrictions please see above rules for efficient FFS management.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 515 of 564
21.6 AT^SFSA

<flag>(num)
File access flags
All available flags are divided into two groups: primary and optional. To select the desired flag combination, cal-
culate the sum of the values and use the resulting value. Writing data to file can take up to 180 seconds due to
internal flash file system data processing.
Primary group:
1 Write. When set it is still allowed to read out the file content. After applying it on
the file with read-only or hidden attribute, the file attribute will not be changed.
2 Read/write. Has priority over the read-only, hidden and write flags, when set in
combination with them. After applying it on the file with read-only or hidden
attribute, the file attribute will be cleared.
32 Hidden.
64 Read-only.
Optional group:
4 Append. Set the current position in the file to the end of the file. If append flag
is not used, current position will be set to the beginning of the file.
8 Create. Create the file if it does not exist. Otherwise the existing file will be
opened.
16 Truncate. Truncate the file to the size 0. This truncate operation is not applica-
ble on a file which has Read-only attribute and has priority over Append, Write
and Read/Write when set in combination with them. The file will first be trun-
cated to size 0, then other operation will take effect.
Depending on the file size, truncating may take a couple of seconds.

<SeekFlag>(num)
Seek flags
Determines how the new position is calculated.
[0] Offset from the beginning of the file. The new position in the file equals <off-
set>. The offset has to be positive or zero.
1 Offset from the current file position. The new position in the file equals the cur-
rent position + <offset>. The <offset> can be positive, zero or negative. In
case the new position exceeds the allowed range for the <offset> parame-
ter, the pointer goes to 0 or to the possible maximum position.
2 Offset from the end of the file. The new position in the file equals the file size +
<offset>. The offset has to be negative or zero. In case the new position
exceeds the allowed range for the <offset> parameter, the pointer goes to 0
or to the possible maximum position.

<CopyFlag>(num)
Copy flags
Determines whether or not copy works as force copy behavior, when destination path entry already exists.
[0] Performs normal copy, reporting error when destination path entry already
exists.
1 Performs force copy, replacing destination path entry which already exists.
Even when using force copy, the two path <path> and <DestinationPath>
should not be identical, otherwise copy operation will return error "path already
exists"; If force copy failed during operation, the <DestinationPath>'s entry
file will be removed without recovery.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 516 of 564
21.6 AT^SFSA

<result>(num)
Result code
The result of the operation. The codes below 200 are proprietary file system error codes.
0 success
1 path not found
2 file not found
3 open file error
4 close file error
5 create file error
6 delete file error
7 truncate file error
8 rename file error
9 invalid file descriptor
10 file size error
11 change file attribute error
12 list file error
13 invalid access
14 create directory error
15 remove directory error
16 path already exist
17 file already exists
22 seek to negative file pointer attempted
23 seek to invalid file pointer attempted
24 no more file descriptors available
28 no free space available
30 sharing violation
100 invalid drive
101 invalid path
102 invalid file name
103 generic internal error
104 path too long
105 file name too long
201 command not recognized
202 incorrect parameter
203 incorrect number of input parameters
204 input parameter out of range
205 input stream open error
206 output stream open error
207 input stream read error
208 output stream write error
209 input stream close error
210 output stream close error

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 517 of 564
21.6 AT^SFSA

211 data transfer abort

214 data transfer error: timeout expired
215 data transfer error: internal error
216 directory listing error: no such directory
217 busy
218 internal error
219 unknown error

<StatAttribute>(num)
Status information attribute
Attributes of files or directories. Bitmask is composed of sum of the following values:
0 Regular file
16 Directory

<size>(num)
Number of bytes to read or write.
[reference] available read size.
1...file size
[reference] available write size.
1...free space size

<FileSize>(num)
File size
The size of the file. 32-bit value.
0...4294967295

<StorageSize>(num)
Storage Size
Maximum storage size of FFS.

<FreeSpace>(num)
Free space
Free space on FFS.

<offset>(num)
The current position in a file. 32-bit signed value.
file size - 1...negative value of file size

<new offset>(num)
The new position in a file. 32-bit signed value.
file size - 1...negative value of file size

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 518 of 564
21.6 AT^SFSA

<crc>(num)
CRC check-sum computed on a file. 16-bit value.
The check-sum is calculated using the initial value 65535 (hex 0xFFFF). The polynomial generator is x16 + x12
+ x5 + 1 and the final XOR value equals 65535 (hex 0xFFFF). The low-bit order is used for the whole calculation
(the least-significant bit at the leftmost position in a byte).
0...65535

<nbytes>(num)
Number of bytes
The number of bytes to read.
1...file size
The number of bytes to write.
1...free space size

<drive>(str)
Default "A:/". This parameter may be omitted.

<DateLastAccess>(str)
Date of last file access. Identical with <DateLastModification>. Format is "yy/mm/dd,hh:mm:ss", where the
characters indicate the two last digits of the year, followed by month, day, hour, minutes, seconds; for example
6th of July 2005, 22:10:00 hours equals to "05/07/06,22:10:00"

<DateLastModification>(str)
Date of last file modification
Date of last file modification is updated when the file is closed.
Format is "yy/mm/dd,hh:mm:ss", where the characters indicate the two last digits of the year, followed by month,
day, hour, minutes, seconds; for example 6th of July 2005, 22:10:00 hours equals to "05/07/06,22:10:00"

<DateLastFileStatChange>(str)
Date of last file status change
Updated when closing file if file was modified. Format is "yy/mm/dd,hh:mm:ss", where the characters indicate
the two last digits of the year, followed by month, day, hour, minutes, seconds; for example 6th of July 2005,
22:10:00 hours equals to "05/07/06,22:10:00"

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 519 of 564
21.7 AT^SRVCFG

21.7 AT^SRVCFG Service Configuration Settings

The AT^SRVCFG can be used to query and configure various settings of extra services supported by the PLS63-
W.
The AT^SRVCFG write command queries a configuration parameter (if no value is input) or sets its value(s).
All settings are stored non-volatile.
Input of parameter names is always coded in GSM character set.

Syntax
Test Command
AT^SRVCFG=?
Response(s)
^SRVCFG: "SLAE", (list of supported <action>)
^SRVCFG: "CBL", "key", (max. string length of <CBLKey>s)
^SRVCFG: "CBL", "urc", (range of <CBLUrc>s)
^SRVCFG: "CBL", "city", (list of supported <CBLCity>s)
^SRVCFG: "CBL", "fallback", (list of supported <CBLFallback>s)
^SRVCFG: "CBL", "gps", (list of supported <CBLGps>s)
^SRVCFG: "CBL", "gps/latitude", (range of <CBLLatitude>s)
^SRVCFG: "CBL", "gps/longitude", (range of <CBLLongitude>s)
^SRVCFG: "CBL", "gps/hAcc", (range of <CBLHacc>s)
^SRVCFG: "CBL", "gps/posAge", (range of <CBLPosAge>s)
^SRVCFG: "CBL", "gps/elevation", (range of <CBLElevation>s)
^SRVCFG: "CBL", "gps/vaccurancy", (range of <CBLVaccurancy>s)
^SRVCFG: "CBL", "gps/heading", (range of <CBLHeading>s)
^SRVCFG: "CBL", "gps/speed", (range of <CBLSpeed>s)
^SRVCFG: "CBL", "wifi", (list of supported <CBLWifi>s)
^SRVCFG: "CBL", "wifi/bssid", (max. string length of <CBLBssid>s)
^SRVCFG: "CBL", "wifi/ssid", (max. string length of <CBLSsid>s)
^SRVCFG: "CBL", "wifi/rssid", (range of <CBLRssid>s)
OK
Write Command

Display and write configuration file.

AT^SRVCFG="SLAE", "read"
Response(s)
^SRVCFG: "SLAE","read","slae.xml"
OK
ERROR
+CME ERROR: <err>
Write Command
Display and write configuration file.
AT^SRVCFG="SLAE", "write"
Response(s)
ENTER DATA

After the response “ENTER DATA”, the configuration file content can be sent or pasted to the terminal.
The end of configuration file input is marked by input of CTRL-Z or Send Byte: Ox1a
^SRVCFG: "SLAE","write",,0
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 520 of 564
21.7 AT^SRVCFG

Write Command

Query/Configure COMBAIN key.

AT^SRVCFG="CBL", "key"[, <CBLKey>]
Response(s)
^SRVCFG: "CBL", "key", <CBLKey>
OK
ERROR
+CME ERROR: <err>
Write Command

Query/Configure the interval for automatically repeated location reporting via URC.
AT^SRVCFG="CBL", "urc" [, <CBLUrc>]
Response(s)
^SRVCFG: "CBL", "urc" , <CBLUrc>
OK
ERROR
+CME ERROR: <err>
Write Command
Query/Configure the City-Flag.
AT^SRVCFG="CBL", "city" [, <CBLCity>]
Response(s)
^SRVCFG: "CBL", "city" , <CBLCity>
OK
ERROR
+CME ERROR: <err>
Write Command
Query/Configure the Fallback-Flag.
AT^SRVCFG="CBL", "fallback" [, <CBLFallback>]
Response(s)
^SRVCFG: "CBL", "fallback" , <CBLFallback>
OK
ERROR
+CME ERROR: <err>
Write Command

Enable/Disable the usage of GPS assistance data.

AT^SRVCFG="CBL", "gps" [, <CBLGps>]
Response(s)
^SRVCFG: "CBL", "gps" , <CBLGps>
OK
ERROR
+CME ERROR: <err>
Write Command

Query/Configure the latitude of the GPS entity.

AT^SRVCFG="CBL", "gps/latitude" [, <CBLLatitude>]
Response(s)
^SRVCFG: "CBL", "gps/latitude" , <CBLLatitude>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 521 of 564
21.7 AT^SRVCFG

Write Command

Query/Configure the longitude of the GPS entity.

AT^SRVCFG="CBL", "gps/longitude" [, <CBLLongitude>]
Response(s)
^SRVCFG: "CBL", "gps/longitude" , <CBLLongitude>
OK
ERROR
+CME ERROR: <err>
Write Command

Query/Configure the accuracy (horizontal) of the GPS entity.

AT^SRVCFG="CBL", "gps/hAcc" [, <CBLHacc>]
Response(s)
^SRVCFG: "CBL", "gps/hAcc" , <CBLHacc>
OK
ERROR
+CME ERROR: <err>
Write Command
Query/Configure the age of the GPS entity
AT^SRVCFG="CBL", "gps/posAge" [, <CBLPosAge>]
Response(s)
^SRVCFG: "CBL", "gps/posAge" , <CBLPosAge>
OK
ERROR
+CME ERROR: <err>
Write Command
Query/Configure the altitude of the GPS entity.
AT^SRVCFG="CBL", "gps/elevation" [, <CBLElevation>]
Response(s)
^SRVCFG: "CBL", "gps/elevation" , <CBLElevation>
OK
ERROR
+CME ERROR: <err>
Write Command

Query/Configure altitude accuracy of the GPS entity.

AT^SRVCFG="CBL", "gps/vaccurancy" [, <CBLVaccurancy>]
Response(s)
^SRVCFG: "CBL", "gps/vaccurancy" , <CBLVaccurancy>
OK
ERROR
+CME ERROR: <err>
Write Command

Query/Configure the direction of movement of the GPS entity.

AT^SRVCFG="CBL", "gps/heading" [, <CBLHeading>]
Response(s)
^SRVCFG: "CBL", "gps/heading" , <CBLHeading>
OK
ERROR
+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 522 of 564
21.7 AT^SRVCFG

Write Command

Query/Configure the speed of GPS location of the GPS entity.

AT^SRVCFG="CBL", "gps/speed" [, <CBLSpeed>]
Response(s)
^SRVCFG: "CBL", "gps/speed" , <CBLSpeed>
OK
ERROR
+CME ERROR: <err>
Write Command

Enable/Disable the usage of wifi assistance data.

AT^SRVCFG="CBL", "wifi" [, <CBLWifi>]
Response(s)
^SRVCFG: "CBL", "wifi" , <CBLWifi>
OK
ERROR
+CME ERROR: <err>
Write Command
Query/Configure the BSSID for the wifi entity.
AT^SRVCFG="CBL", "wifi/bssid" [, <CBLBssid>]
Response(s)
^SRVCFG: "CBL", "wifi/bssid" , <CBLBssid>
OK
ERROR
+CME ERROR: <err>
Write Command
Query/Configure the SSID for the wifi entity.
AT^SRVCFG="CBL", "wifi/ssid" [, <CBLSsid>]
Response(s)
^SRVCFG: "CBL", "wifi/ssid" , <CBLSsid>
OK
ERROR
+CME ERROR: <err>
Write Command

Query/Configure the measured signal strength for the wifi entity.

AT^SRVCFG="CBL", "wifi/rssid" [, <CBLRssid>]
Response(s)
^SRVCFG: "CBL", "wifi/rssid" , <CBLRssid>
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 523 of 564
21.7 AT^SRVCFG

Parameter Description

<action>(str)
Actions for SensorLogic Service
The functionality provided by SensorLogic Service.
“read“ Display the configuration file.
“write“ Write the configuration file.

<CBLKey>(str)(NV)
COMBAIN service key
Combain's licence key which is the crucial token to access the COMBAIN service. The maximal length of the
string is 20.

<CBLUrc>(num)(NV)
Interval of the repeated location service in minutes
This parameter number of minutes between two location requests enabled with AT^SRVCTL. When errors occur
during the requesting service, this parameter would be reset to "0". If the value is "0", launching the service with
AT^SRVCTL triggers a one-time positioning request in non-blocking mode.
0(D)...1440

<CBLCity>(num)(NV)
City information
Setting can be used to control whether the city information is shown in the response if available.
0(D) Disable city flag.
1 Enable city flag.

<CBLFallback>(num)(NV)
Fallback switch
This parameter enables or disables the fallback solution which serves as an alternative method to positioning
while the cell information is not found. Beware that the returned location may be unreliable.
0(D) Disable fallback solution.
1 Enable fallback solution.

<CBLGps>(num)(NV)
GPS assistance data
This parameter determines whether the GPS assistance data are used for location calculation. Only when all
the mandatory parameters of the GPS entity are set, this parameter can be changed to "1". In addition, if the
parameter is "1", the configuration of the GPS entity cannot be modified. Note that this parameter will be reset
to "0", after the GPS entity has been used.
0(D) Do not use GPS assistance data for location requests.
1 Using GPS assistance data for next location request. This setting will be auto-
matically reset <CBLUrc>=0 after next successful location request.

<CBLLatitude>(str)(NV)
Latitude of the GPS entity
Latitude is a mandatory value for the GPS entity. Its default value is empty (""). The value can be set in the format
"45.62154".
This parameter is effective only if <CBLGps> is 1, and can be modified only when <CBLGps> is 0.
Note that this parameter will be reset to "0", after the GPS entity has been used.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 524 of 564
21.7 AT^SRVCFG

"-90.00000"..."90.00000" A valid latitude of place

(D)
““ The latitude is not set

<CBLLongitude>(str)(NV)
Longitude of the GPS entity
Longitude is a mandatory value for the GPS entity. Its default value is empty (""). The value can be set in the
format "-121.62154".
This parameter is effective only if <CBLGps> is 1, and can be modified only when <CBLGps> is 0.
Note that this parameter will be reset to "0", after the GPS entity has been used.
"-180.00000"..."180.00000" A valid longitude of place
(D)
““ The longitude is not set

<CBLHacc>(str)(NV)
Accuracy (horizontal) of the GPS entity
This parameter specifies the accuracy of the GPS location, it is also a mandatory value for the GPS entity. Its
default value is empty (""). The value can be modified only when <CBLGps> is 0.
Note that this parameter will be reset to "0", after the GPS entity has been used.
"0"..."65535" A valid accuracy of GPS location
(D)
““ The accuracy is not set

<CBLPosAge>(str)(NV)
Age of the GPS entity
This parameter specifies the age of the position in seconds. The value serves as a criteria for the availability of
the GPS entity. If this parameter is older than 600s, the GPS entity would be omitted automatically. This param-
eter is mandatory for the GPS entity. Its default value is empty (""). The value can be modified only when
<CBLGps> is 0.
Note that this parameter will be reset to "0", after the GPS entity has been used.
"0"..."65535" A valid age of position
(D)
““ The age is not set

<CBLElevation>(str)(NV)
The altitude of the GPS entity
This parameter specifies the altitude of the GPS entity in meters. Its default value is empty (""). The value can
be modified only when <CBLGps> is 0.
Note that this parameter will be reset to "0", after the GPS entity has been used.
"0"..."65535" A valid altitude for GPS location
(D)
““ The altitude is not set

<CBLVaccurancy>(str)(NV)
The accuracy of the altitude
This parameter specifies the altitude accuracy for the GPS location in meters. Its default value is empty (""). The
value can be modified only when <CBLGps> is 0.
Note that this parameter will be reset to "0", after the GPS entity has been used.
"0"..."65535" A valid accuracy of altitude for GPS location
(D)
““ The accuracy of altitude is not set

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 525 of 564
21.7 AT^SRVCFG

<CBLHeading>(str)(NV)
The direction of movement
This parameter specifies the direction of movement of the GPS entity. Its default value is empty (""). The value
can be modified only when <CBLGps> is 0.
Note that this parameter will be reset to "0", after the GPS entity has been used.
"0"..."65535" A valid direction for GPS location
(D)
““ The direction is not set

<CBLSpeed>(str)(NV)
The speed of movement
This parameter specifies the speed of the GPS entity in m/s. Its default value is empty (""). The value can be
modified only when <CBLGps> is 0.
Note that this parameter will be reset to "0", after the GPS entity has been used.
"0"..."65535" A valid speed for GPS location
(D)
““ The speed is not set

<CBLWifi>(num)(NV)
Wifi assistance data
This parameter can be used to control Wifi assistance data to be calculated for positioning. Only all the manda-
tory configurations for wifi were set, this parameter could be set to "1", at meantime configurations for Wifi would
be locked. Note that this parameter would be reset to "0" automatically, after the GPS entity is used.
0(D) Do not use Wifi assistance data for location requests.
1 Using Wifi assistance data for next location request. This setting will be auto-
matically reset to <CBLUrc>=0 after next successful location request.

<CBLBssid>(str)(NV)
The BSSID of the Wifi
This parameter indicates the MAC address of the Wifi router, e.g 00:50:56:C0:01. It is a mandatory configuration
for Wifi, and default as empty (""). Note that this parameter will be reset to "", after the Wifi entity has been used.
““(D) The The BSSID of the Wifi is not set

<CBLSsid>(str)(NV)
The SSID of the Wifi
This parameter represents the name of Wifi access point. The maximal length of the string is 32. Note that this
parameter will be reset to "", after the Wifi entity has been used.
““(D) The SSID of the Wifi is not set

<CBLRssid>(str)(NV)
The measured signal strength of the Wifi
This parameter denotes the received signal strength in dBm. Note that this parameter will be reset to "", after
the Wifi entity has been used.
"-65535"..."0" A valid signal strength of the Wifi router
(D)
““ The signal strength of the Wifi router is not set

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 526 of 564
21.7 AT^SRVCFG

Notes
• The <CBLUrc> will be reset to "0" when any errors occur during the service.
• <CBLGps> and <CBLWifi> will be automatically reset to "0" after next successful location request.
• Only if mandatory configurations for gps/wifi are set, the corresponding mode can be set to 1. Configurations
cannot be modified while the corresponding mode is 1.

Example
Usage of "CBL":
AT+CSCS="UCS2" Switch to UCS2 character set.
OK
AT^SRVCFG="CBL","key","a2f2j4l6kj34lo12ppbg Set COMBAIN key.
"
^SRVCFG: "CBL","key","a2f2j4l6kj34lo12ppbg"
OK
AT^SRVCFG="CBL","key" Query COMBAIN key.
^SRVCFG: "CBL","key","a2f2j4l6kj34lo12ppbg"
OK
AT^SRVCFG="CBL","urc",1 Activate URC mode.
^SRVCFG: "CBL","urc",1
OK
AT^SRVCFG="CBL","urc" Query URC mode.
^SRVCFG: "CBL","urc",1
OK
AT^SRVCFG="CBL","gps",1 Enable GPS assistance data without setting the
mandatory configurations
ERROR
AT^SRVCFG="CBL","gps/longitude","12.22334" Set mandatory configurations for GPS entity
^SRVCFG: "CBL","gps/longitude","12.22334"
OK
AT^SRVCFG="CBL","gps/latitude","42.55564"
^SRVCFG: "CBL","gps/latitude","42.55564"
OK
AT^SRVCFG="CBL","gps/hAcc","30"
^SRVCFG: "CBL","gps/hAcc","30"
OK
AT^SRVCFG="CBL","gps/posAge","500"
^SRVCFG: "CBL","gps/posAge","500"
OK
AT^SRVCFG="CBL","gps",1 Enable GPS assistance data with setting the manda-
tory configurations
^SRVCFG: "CBL","gps",1
OK
AT^SRVCFG="CBL","wifi",1 Enable Wifi assistance data without setting the man-
datory configurations
ERROR
AT^SRVCFG="CBL","wifi/ Set mandatory configurations for Wifi entity
bssid","00:50:56:C0:00:01"
^SRVCFG: "CBL","wifi/bssid","00:50:56:C0:00:01"
OK
AT^SRVCFG="CBL","wifi",1 Enable Wifi assistance data with setting the manda-
tory configurations
^SRVCFG: "CBL","wifi",1
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 527 of 564
21.7 AT^SRVCFG

AT^SRVCFG="CBL","wifi/ When the configuration for Wifi is locked, you can

bssid","00:50:56:C0:11:11" reset the Wifi mode and then change the configura-
tion
ERROR
AT^SRVCFG="CBL","wifi",0
^SRVCFG: "CBL","wifi",0
OK
AT^SRVCFG="CBL","wifi/bssid","00:50:56:C0:11:11"
^SRVCFG: "CBL","wifi/bssid","00:50:56:C0:11:11"
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 528 of 564
21.8 AT^SRVCTL

21.8 AT^SRVCTL Extra Service Control

AT^SRVCTL provides access to extra services. The following services are supported:
• COMBAIN cell based positioning: supporting the usage of cell (wifi/gps as assistance data) information to
locate the module's position.
• SensorLogic Service: a M2M middleware service in JavaTM that seamlessly connects PLS63-W modules to
the SensorLogic Application Enablement Platform. The SL Agent exposes a set of easy-to-use JavaTM APIs
for quick application development, allowing M2M solutions to be deployed in a fraction of the time.

Syntax
Test Command

AT^SRVCTL=?
Response(s)
^SRVCTL: "CBL", (list of supported <CBLAction>s)
^SRVCTL: "SLAE", (list of supported <action>s)
OK
Write Command

Enable COMBAIN service.

AT^SRVCTL="CBL", "Enable"
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command

Disable COMBAIN service.

AT^SRVCTL="CBL", "Disable"
Response(s)
OK
ERROR
+CME ERROR: <err>
Write Command
Query location in blocking mode.
AT^SRVCTL="CBL", "Loc"
Response(s)
In case of success:
^SRVCTL: "CBL", "Loc", <CBLCode>, <CBLLatitude>, <CBLLongitude>, <CBLAccuracy>[,
<CBLCountryCode>, <CBLCountry>, <CBLCity>]
OK
In case of error:
^SRVCTL: "CBL", "Loc", <CBLCode>, <CBLMessage>
ERROR
+CME ERROR: <err>
Write Command
Query the remaining number of credits of COMBAIN service.
AT^SRVCTL="CBL", "Crd"
Response(s)
In case of success:
^SRVCTL: "CBL", "Crd", <CBLCode>, <CBLCrd>
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 529 of 564
21.8 AT^SRVCTL

Write Command (Continued)

Query the remaining number of credits of COMBAIN service.

AT^SRVCTL="CBL", "Crd"
Response(s)
In case of error:
^SRVCTL: "CBL", "Crd", <CBLCode>, <CBLMessage>
ERROR
+CME ERROR: <err>
Write Command

Start a positioning service. Result will be reported via URC (if enabled with <CBLUrc> parameter of
AT^SRVCFG).
AT^SRVCTL="CBL", "Start"
Response(s)
In case of success:
OK
In case of error:
^SRVCTL: "CBL", "Start", <CBLCode>, <CBLMessage>
ERROR
+CME ERROR: <err>
Write Command

Stop the running positioning service.

AT^SRVCTL="CBL", "Stop"
Response(s)
In case of success:
OK
In case of error:
^SRVCTL: "CBL", "Stop", <CBLCode>, <CBLMessage>
ERROR
+CME ERROR: <err>
Write Command

Start the SensorLogic Service.

AT^SRVCTL="SLAE", "start"
Response(s)
In case of service response:
^SRVCTL: "SLAE", "start", <response>[, <service message>]
OK
In case of command response:
OK
ERROR
+CME ERROR: <err>
Write Command
Stop the SensorLogic Service.
AT^SRVCTL="SLAE", "stop"
Response(s)
In case of service response:
^SRVCTL: "SLAE", "stop", <response>[, <service message>]
OK
In case of command response:
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 530 of 564
21.8 AT^SRVCTL

Write Command (Continued)

Stop the SensorLogic Service.

AT^SRVCTL="SLAE", "stop"
Response(s)
ERROR
+CME ERROR: <err>
Write Command

List SensorLogic Service status.

AT^SRVCTL="SLAE", "status"
Response(s)
In case of service response:
^SRVCTL: "SLAE", "status", <response>, <status message>
OK
In case of command response:
OK
ERROR
+CME ERROR: <err>
PIN  Last
- - -

Unsolicited Result Code

Response from the positioning service
In case of success:
^SRVCTL: "CBL", "Loc", <CBLCode>, <CBLLatitude>, <CBLLongitude>, <CBLAccuracy>[,
<CBLCountryCode>, <CBLCountry>, <CBLCity>]

OK
In case of error:
^SRVCTL: "CBL", "Loc", <CBLCode>, <CBLMessage>

ERROR

+CME ERROR: <err>

The URC will be issued when the positioning service has successfully queried the location, or encountered an
error.

Parameter Description

<CBLAction>(str)(+CSCS)
Actions for COMBAIN service
The functionality provided by COMBAIN service.
“Enable“ Enable COMBAIN service.
“Disable“ Disable COMBAIN service.
“Loc“ Query location in blocking mode.
“Crd“ Query the remaining number of credits of COMBAIN service.
“Start“ Start a positioning service.
“Stop“ Stop the running positioning service.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 531 of 564
21.8 AT^SRVCTL

<CBLCode>(num)
Result codes of COMBAIN service
This parameter indicates the result of execution.
0 success
1 common errors
2 request quota exceeded
3 invalid key
4 invalid device ID (IMEI)
5 invalid request number
6 invalid input parameters

<CBLMessage>(str)(+CSCS)
Result messages of COMBAIN service
This parameter shows the detail of the error, e.g "unsuccessful positioning, cells and wifi access points not
found","warning: already stared", "warning: get imei information failed", "network error".

<CBLLatitude>(num)
Latitude information from positioning result
The latitude result calculated by cell information, e.g "55.71123".

<CBLLongitude>(num)
Longitude information from positioning result
The longitude result calculated by cell information, e.g "-13.21412".

<CBLAccuracy>(num)
Accuracy of the positioning result
The accuracy is the median error in meters.

<CBLCountryCode>(str)
Country code from the positioning result
This parameter shows the country code of the Country (e.g. "DE" for Germany).

<CBLCountry>(str)
Country name from the positioning result
This parameter represents the country name in text format (e.g. "Germany").

<CBLCity>(str)
City name from the positioning result
This parameter indicates the city that is closest to the positioning result.

<CBLCrd>(num)
Remaining number of credits
This parameter shows the remaining amount of credits for COMBAIN service. It will be reduced every time when
a positioning was successfully executed.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 532 of 564
21.8 AT^SRVCTL

<action>(str)
Actions for SensorLogic Service
The functionality provided by SensorLogic Service.
“start“ Start the SensorLogic Service.
“stop“ Stop the SensorLogic Service.
“status“ Display the SensorLogic Service status.

<response>(str)
Response code
This parameter shows the response code for SensorLogic Service.
“0“ Success
“1“ Error

<service message>(str)
Message for SensorLogic Service
This parameter shows the service message for SensorLogic start/stop action.
“warning: service already started“
“service start failed, configuration error“
“service start failed, service is not installed“
“service start failed“
“warning: service already stopped“

<status message>(str)
Message for Service Status
This parameter shows the status message for SensorLogic Service.
“service is not running“
“service is running“

Notes
• Make sure that the UE can access the Internet.
• Basically, the COMBAIN service is based on the AT^SNMON command and the interaction with COMBAIN
server via Internet, so please make sure both conditions are accepted.
• If any error occured while COMBAIN service was ongoing, the service will shut down and throw an error mes-
sage. Also, the <CBLUrc> will be set to "0".

Example
Usage of "CBL":
AT+CPIN="1234" Let the module register to network.
OK
AT^SRVCFG="CBL","key","a2f2j4l6kj34lo12ppbg Configure customer key.
"
^SRVCFG: "CBL","key","a2f2j4l6kj34lo12ppbg"
OK
AT^SRVCTL="CBL","Loc" Query location in blocking-mode.
^SRVCTL: "CBL","loc",0,52.53344,13.28263,102
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 533 of 564
21.8 AT^SRVCTL

AT^SRVCTL="CBL","Crd" Query remaining number of credits for COMBAIN

service.
:^SRVCTL: "CBL","Crd",33
OK
AT^SRVCFG="CBL","urc",1 Configure service interval
^SRVCFG: "CBL","urc",1
OK
AT^SRVCTL="CBL","Start" Start a positioning service
OK
^SRVCTL: "CBL","Loc",0,52.53344,13.28263,102
OK
^SRVCTL: "CBL","Loc",0,52.53344,13.28263,102
OK
AT^SRVCTL="CBL","Stop" Stop the running service
OK

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 534 of 564
21.9 AT^SBNR

21.9 AT^SBNR Binary Read

Syntax
Test Command

AT^SBNR=?
Response(s)
OK
Read Command

AT^SBNR?
Response(s)
OK
Write Command

If <type>= "ciphersuites": Gets the accepted values by default for IPoverAT TLS Cipher suites:
AT^SBNR="ciphersuites", "default"
Response(s)
(default CYASSL ciphers string)
OK
Write Command
If <type>= "ciphersuites": Gets the user-accepted values for IPoverAT TLS Cipher suites, or default values if
not defined:
AT^SBNR="ciphersuites", "current"
Response(s)
(ciphersuite user file contents)
OK
If no user values defined:
No Cipher Suites file found or loaded
Default Cipher Suites:
(default CYASSL ciphers string)
OK
Write Command

If <type>= "is_cert":
Read certificates for secure connection of client IP services.
AT^SBNR="is_cert"
Response(s)
^SBNR:<index>, <size>, <issuer>, <serial-number>, <subject>, <signature-algorithm>,
<thumbprint-algorithm>, <thumbprint>, <expiry-date>
[... ]
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
If certificate file is corrupted:
<index>, certificate is corrupted

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 535 of 564
21.9 AT^SBNR

Write Command

If <type>= "preconfig_cert":
Read list of thumbprints of revoked certificates or preconfigured certificates.
AT^SBNR="preconfig_cert"[, <status>]
Response(s)
^SBNR:<index>, <size>, <issuer>, <serial-number>, <subject>, <signature-algorithm>,
<thumbprint-algorithm>, <thumbprint>, <expiry-date>[, <replace-index>]
[... ]
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
Write Command
If <type>= "management_cert":
Read certificate for local UE management.
AT^SBNR="management_cert"
Response(s)
^SBNR:<index>, <size>, <issuer>, <serial-number>, <subject>, <signature-algorithm>,
<thumbprint-algorithm>, <thumbprint>, <expiry-date>
[... ]
OK
If error is related to ME functionality:
ERROR
+CME ERROR: <err>
PIN  Last
- + -

Parameter Description

<type>(str)
“ciphersuites“ IPoverAT TLS Cipher suites
“is_cert“ Read certificate details
“preconfig_cert“ Read preconfigured certificates and list of out of date certificates. See
AT^SSECUA and AT^SSECUC.
“management_cert“ Read module management certificate details. See AT^SSECUA and AT^SSE-
CUC.

<status>(num)
For list of certificates to be removed (<status>=0) only the parameters used to match the certificate will be
output in the AT^SBNR response, all other parameters will be empty except for <replace-index> that will indi-
cate preloaded certificate index to replace the revoked certificate if such is configured.
0 Read list of revoked certificates to be removed from store.
1 Read list of certificates to be added to store or empty.

<index>(num)
Certificate index
0...30 Index 0 is handled as client certificate (only 1 allowed). Indexes from 1 to 30
are handled as server certificates.

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 536 of 564
21.9 AT^SBNR

<size>(str)
Size of certificate file in bytes

<issuer>(str)
Certificate issuer

<serial-number>(str)
Serial number of certificate

<subject>(str)
Subject of certificate

<signature-algorithm>(str)
Signature algorithm of certificate

<thumbprint-algorithm>(str)
Thumbprint algorithm of certificate

<thumbprint>(str)
Thumbprint of certificate

<expiry-date>(str)
Expiry date of certificate

<replace-index>(num)
Replace Index

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 537 of 564
22. Appendix

22. Appendix

22.1 Star-Hash (*#) Network Commands

The following command strings can be sent to the network via ATD and have to be terminated with a semicolon.
The command strings are defined with 3GPP TS 22.030 [29].

Table 22.1: Star-Hash (*#) Command Overview

Star-Hash Code Functionality Response, also refer to Table 22.3

Phone Security
*#06# Query IMEI <IMEI> OK
**04[2]*oldPin[2]*newPin[2]*new- Change SIM password +CME ERROR: <err> / OK
Pin[2]#
**05[2]*unblKey[2]*newPin[2]*new- Change/Unblocking SIM password +CME ERROR: <err> / OK
Pin[2]#
*[*]03*[ZZ]*oldPw*newPw*newPw# Registration of NET password +CME ERROR: <err> / OK

Phone number presentation

*#30# Check status of CLIP (Calling Line +CLIP : <n>,<m> OK (see
Identification Presentation) AT+CLIP)
*#31# Check status of CLIR (Calling Line +CLIR : <n>,<m> OK (see
Identification Restriction) AT+CLIR)
*31#<Phonenumber>[;] Suppress CLIR (see AT+CLIR)
#31#<Phonenumber>[;] Activate CLIR (see AT+CLIR)
*#76# Check status of COLP (Connected +COLP : <n>,<m> OK (see:
Line Identification Presentation) AT+COLP)
*#77# Check status of COLR (Connected +COLR : 0,<m> OK (where <m> =
Line Identification Restriction) active or not active)

Call forwarding
(choice of *,#,*#,**,##)21*DN*BS# Act/deact/int/reg/eras CFU +CCFC : <status>, <class> [,...]
(see: AT+CCFC)
(choice of *,#,*#,**,##)67*DN*BS# Act/deact/int/reg/eras CF busy see above
(choice of Act/deact/int/reg/eras CF no reply see above
*,#,*#,**,##)61*DN*BS*T#
(choice of *,#,*#,**,##)62*DN*BS# Act/deact/int/reg/eras CF no reach see above
(choice of Act/deact/int/reg/eras CF all see above
*,#,*#,**,##)002*DN*BS*T#
(choice of Act/deact/int/reg/eras CF all cond see above
*,#,*#,**,##)004*DN*BS*T#

Call waiting
(choice of *,#,*#)43*BS# Activation/deactivation/int WAIT +CCWA : <status>, <class> [,...].
(Refer to AT+CCWA)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 538 of 564
22.1 Star-Hash (*#) Network Commands

Star-Hash Code Functionality Response, also refer to Table 22.3

Call barring
(choice of *,#,*#)33*Pw*BS# Act/deact/int BAOC +CLCK : <status>, <class> [,
...].(Refer to AT+CLCK)
(choice of *,#,*#)331*Pw*BS# Act/deact/int BAOIC see above
(choice of *,#,*#)332*Pw*BS# Act/deact/int BAOIC exc.home see above
(choice of *,#,*#)35*Pw*BS# Act/deact/int BAIC see above
(choice of *,#,*#)351*Pw*BS# Act/deact/int BAIC roaming see above
#330*Pw*BS# Deact. All Barring Services see above
#333*Pw*BS# Deact. All Outg.Barring Services see above
#353*Pw*BS# Deact. All Inc.Barring Services see above

Call hold / Multiparty

C[C] in call Call hold and multiparty +CME ERROR: <err> / OK

USSD messages
[C]...[C]# Send USSD message +CME ERROR: <err> / OK
C[C] (excluded 1[C]) Send USSD message +CME ERROR: <err> / OK

Table 22.2: Abbreviations of Codes and Parameters used in Table 22.1

Abbreviation Meaning Value

ZZ Type of supplementary services:
Barring services 330
All services Not specified
DN Dialing number String of digits 0-9
BS Basic service equivalent to parameter class:
Voice 11
Fax (only for compatibility reasons) 13
SMS 16
SMS+Fax (only for compatibility reasons) 12
SMS+Fax+Voice (only for compatibility reasons) 10
Data circuit asynchron 25
Data circuit synchron 24
Dedicated PAD access 27
Dedicated Packet access 26
Data circuit asynchron+PAD 21
Data circuit synchron+Packet 22
Data circuit asynchron+synchron+Packet+PAD 20
All Services --
T Time in seconds In contrast to AT+CCFC, parameter
T has no default value. If T is not
specified, an operator defined
default or the last known value may
be used, depending on the network
operator.
PW Password --
C Character of TE character set (e.g. asterisk, hash --
or digit in case of USSD, or digits in case of held
calls or multiparty calls)

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 539 of 564
22.1 Star-Hash (*#) Network Commands

Table 22.3: Star-Hash Command Response Parameters

Parameter Meaning
<m> Mode: 0 = not active, 1 = active
<n> Unsolicited result code: 0 = presentation disabled, 1 = presentation enabled
<status> Status: 0 = not active, 1 = active
<class> Represents BS = basic service, refer to AT+CCFC, AT+CLCK
<fac> Facility lock, refer to AT+CLCK
<reason> Call forwarding reason

For exact specification of format and parameters for Star-Hash commands refer to Table 3.2 of 3GPP TS 22.004
[28], and Annex C of of 3GPP TS 22.030 [29].

Table 22.4: Star-Hash Commands for Supplementary Services

Star-Hash Code Abbreviations in Table 22.1 Functionality

* act Activate (except for CLIR, see list above)
** reg Register and activate
*# int Check status (interrogate)
# deact Deactivate (except for CLIR, see list above)
## eras Unregister and deactivate

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 540 of 564
22.2 Available AT Commands and Dependency on SIM PIN

22.2 Available AT Commands and Dependency on SIM PIN

ø ... Command not available

- ... Command does not require PIN1
+ ... Command requires PIN1
± ... Command sometimes requires PIN1

Table 22.5: Available AT Commands and Dependency on SIM PIN

AT Command Exec Test Read Write

Configuration Commands
AT&F - ø ø ø
AT&V - ø ø ø
AT&W - ø ø ø
ATQ - ø ø ø
ATV - ø ø ø
ATX + ø ø ø
ATZ + ø ø ø
AT+CFUN ø - - -
AT^SMSO - - ø -
AT+CMEE - - - -
AT+CSCS ø - - -
AT^SCFG ø - - -
AT^SSRVSET ø - ø -
AT^SPOW ø - - -
AT+GCAP + + ø ø

Status Control Commands

AT+CEER + + ø +
AT^SIND ø - - -

Serial Interface Control Commands

AT\Q - ø ø ø
AT&C - ø ø ø
AT&D - ø ø ø
AT&S - ø ø ø
ATE - ø ø ø
AT+ICF ø - - -
AT+IPR ø - - -
AT+CMUX ø - - -
AT^SQPORT - - - ø

Security Commands
AT+CPIN ø - - -
AT^SPIC - - - -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 541 of 564
22.2 Available AT Commands and Dependency on SIM PIN

AT Command Exec Test Read Write

AT+CLCK ø + ø +
AT+CPWD ø + ø +
AT^SCSL ø ± ø ±
AT^SSECUA ø - ø -
AT^SSECUC ø - ø -
AT^SSECRUN ø ø ø -

Identification Commands
ATI ± ø ø ø
AT+CGMI - - ø ø
AT+GMI - - ø ø
AT+CGMM - - ø ø
AT+GMM - - ø ø
AT+CGMR - - ø ø
AT+GMR - - ø ø
AT+CGSN - - ø ø
AT+GSN - - ø ø
AT+CIMI + + ø ø
AT^SINFO ø - - -

Call related Commands

ATA + ø ø ø
ATD ± ø ø ø
ATDL + ø ø ø
ATH + ø ø ø
AT+CHUP - - ø ø
AT^SHUP ø - ø -
ATS0 ø ø - +
ATO + ø ø ø
+++ - ø ø ø
AT+CLCC + + ø ø
AT^SLCC - - - -
AT+CRC + + + +
AT+CVMOD ø + + +

Network Service Commands

AT+COPN + + ø ø
AT+COPS ø ± ± ±
AT+CREG ø - - -
AT+CSQ + + ø ø
AT+CPOL ø + + +
AT+CPLS ø + + +
AT+CTZU ø - - -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 542 of 564
22.2 Available AT Commands and Dependency on SIM PIN

AT Command Exec Test Read Write

AT^SMONI - - ø ø
AT^SMONP - - ø ø
AT^SNMON ø - ø -
AT+CAVIMS ø - - ø
AT+CESQ + + ø ø
AT^SNSRAT - - - -
AT^SNLWM2M ø ø - -
AT^SNCSGSC ø - - -
AT^SNCSGLS + + ø ø
AT^SNFOTA ø - - -
AT+CEVDP ø - - -

USIM Application Toolkit (USAT) Commands

AT^SSTA ø - - -

Short Message Service (SMS) Commands

AT+CMGC ø + ø +
AT+CMGD ø + ø +
AT+CMGF ø + + +
AT+CMGL + + ø +
AT+CMGR ø + ø +
AT+CMGS ø + ø +
AT+CMGW + + ø +
AT+CMSS ø + ø +
AT+CNMA + + ø +
AT+CNMI ø + + +
AT+CPMS ø + + +
AT+CMMS ø
AT+CSCA ø + + +
AT+CSCB ø + + +
AT+CSDH ø + + +
AT+CSMP ø
AT+CSMS ø
AT^SMGL + + ø +
AT^SMGR ø + ø +
AT^SSDA ø - - -
AT^SCMR ø + ø +
AT^SCMS ø + ø +
AT^SCMW ø + ø +
AT^SCML + + ø +

Internet Service Commands

AT^SICA ø + + +

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 543 of 564
22.2 Available AT Commands and Dependency on SIM PIN

AT Command Exec Test Read Write

AT^SICS ø - - -
AT^SIPS ø - ø -
AT^SISS ø - - -
AT^SISI ø - - -
AT^SISO ø - - +
AT^SISC ø - ø +
AT^SISR ø - ø +
AT^SISW ø - ø +
AT^SIST ø - ø -
AT^SISD ø - ø -
AT^SISU ø - ø -
AT^SISH ø - ø -
AT^SISX ø + ø +
AT^SISE ø - ø -

Supplementary Service Commands

AT+CACM ø + + +
AT+CAMM ø + + +
AT+CAOC
AT+CCUG ø + + +
AT+CCFC ø + ø +
AT+CCWA ø + + +
AT+CHLD ø + ø +
AT+CLIP ø + + +
AT+CLIR ø + + +
AT+COLP ø + + +
AT+CPUC ø + + +
AT+CSSN ø + + +
AT+CUSD ø + + +

Packet Domain Related Commands

AT+CGACT ø + + +
AT+CGATT ø + + +
AT+CGEQOS ø - - -
AT+CGDATA ø ø
AT+CGDCONT ø - - -
AT+CEREG + + + +
AT+CGEQOSRDP + + ø +
AT+CGEQMIN ø - - -
AT+CGEQREQ ø - - -
AT+CGEREP ø + + +
AT+CGPADDR + + ø +

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 544 of 564
22.2 Available AT Commands and Dependency on SIM PIN

AT Command Exec Test Read Write

AT+CGSCONTRDP + + ø +
AT+CGCONTRDP + + ø +
AT+CGQMIN ø - - -
AT+CGREG ø + + +
AT+CGSMS ø + + +
ATD*99# ø ø ø
AT+CEMODE ø + + ø
AT+CGDSCONT ø - - -
AT+CGTFT ø - - -
AT+CGTFTRDP ø
AT^SGAUTH ø - - -
AT^SWWAN ø + + +
AT+CGPIAF ø + + +
AT+CNMPSD ø ø

USIM related Commands

AT+CCID - - ø ø
AT+CRSM ø - ø -
AT+CSIM ø - ø -
AT+CCHO ø - ø -
AT+CCHC ø - ø -
AT+CGLA ø - ø -
AT^SSET ø - - -
AT^SCID - - ø ø
AT^SCKS ø - - -

Phonebook Commands
AT+CPBS + + + +
AT+CPBR ø ± ø ±
AT+CPBW ø + ø +
AT+CSVM ø + + +
AT+CNUM + + ø ø

GNSS Commands
AT^SGPSC ø - - -
AT^SGPSE ø - - -

Audio Commands
AT+CMUT ø - - -
AT+VTS ø - ø -
AT+VTD ø - - -
AT^SAIC ø - - -
AT^SNFI ø - - -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 545 of 564
22.2 Available AT Commands and Dependency on SIM PIN

AT Command Exec Test Read Write

AT^SNFO ø - - -
AT^SNFS ø - - -

Hardware related Commands

AT+CCLK ø - - -
AT+CALA ø - - -
AT^SBV - - ø ø
AT^SCTM ø - - -
AT^SLED ø - - -
AT^SSPI ø - - -
AT^SAD ø - ø -
AT^SRADC ø - - -

General Purpose I/O (GPIO) Pin related Commands

AT^SPIO ø - ø -
AT^SCPIN ø - ø -
AT^SGIO ø - ø -
AT^SSIO ø - ø -
AT^SGPINCA ø - ø -

Subscription Management Commands

AT^SUSMA ø - - +
AT^SUSMC ø - - -

Miscellaneous Commands
ATS3 ø ø - -
ATS4 ø ø - -
ATS5 ø ø - -
AT^SBNW ø - ø -
AT^SFDL - - ø -
AT^SFSA ø - ø -
AT^SRVCFG ø - ø -
AT^SRVCTL ø - ø -
AT^SBNR ø - - -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 546 of 564
22.3 Availability of AT Commands Depending on Operating Mode of ME

22.3 Availability of AT Commands Depending on Operating Mode of ME

- ... AT command not supported

+ ... AT command supported
± ... AT command partially supported
See description of AT command for details.

Table 22.6: Availability of AT Commands Depending on Operating Mode of ME

AT Command Normal Mode 

Configuration Commands
AT&F +
AT&V +
AT&W +
ATQ +
ATV +
ATX +
ATZ +
AT+CFUN +
AT^SMSO +
AT+CMEE +
AT+CSCS +
AT^SCFG + +
AT^SSRVSET +
AT^SPOW + +
AT+GCAP +

Status Control Commands

AT+CEER +
AT^SIND +

Serial Interface Control Commands

AT\Q +
AT&C +
AT&D +
AT&S +
ATE +
AT+ICF +
AT+IPR +
AT+CMUX + +
AT^SQPORT +

Security Commands
AT+CPIN + +
AT^SPIC + +

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 547 of 564
22.3 Availability of AT Commands Depending on Operating Mode of ME

AT Command Normal Mode 

AT+CLCK + ±
AT+CPWD + ±
AT^SCSL + +
AT^SSECUA + +
AT^SSECUC + +
AT^SSECRUN + +

Identification Commands
ATI +
AT+CGMI +
AT+GMI +
AT+CGMM +
AT+GMM +
AT+CGMR +
AT+GMR +
AT+CGSN +
AT+GSN +
AT+CIMI +
AT^SINFO +

Call related Commands

ATA + -
ATD + -
ATDL + -
ATH + -
AT+CHUP + -
AT^SHUP + -
ATS0 + -
ATO + -
+++ + -
AT+CLCC + -
AT^SLCC + -
AT+CRC +
AT+CVMOD + -

Network Service Commands

AT+COPN +
AT+COPS + -
AT+CREG + +
AT+CSQ + -
AT+CPOL +
AT+CPLS + -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 548 of 564
22.3 Availability of AT Commands Depending on Operating Mode of ME

AT Command Normal Mode 

AT+CTZU +
AT^SMONI + -
AT^SMONP + -
AT^SNMON + -
AT+CAVIMS + +
AT+CESQ + -
AT^SNSRAT + ±
AT^SNLWM2M + +
AT^SNCSGSC + -
AT^SNCSGLS +
AT^SNFOTA + -
AT+CEVDP + +

USIM Application Toolkit (USAT) Commands

AT^SSTA + +

Short Message Service (SMS) Commands

AT+CMGC + -
AT+CMGD + +
AT+CMGF + +
AT+CMGL + +
AT+CMGR + +
AT+CMGS + -
AT+CMGW + +
AT+CMSS + -
AT+CNMA + -
AT+CNMI + +
AT+CPMS +
AT+CMMS +
AT+CSCA +
AT+CSCB + +
AT+CSDH +
AT+CSMP +
AT+CSMS +
AT^SMGL +
AT^SMGR +
AT^SSDA +
AT^SCMR +
AT^SCMS + -
AT^SCMW +
AT^SCML +

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 549 of 564
22.3 Availability of AT Commands Depending on Operating Mode of ME

AT Command Normal Mode 

Internet Service Commands

AT^SICA + -
AT^SICS +
AT^SIPS +
AT^SISS +
AT^SISI +
AT^SISO + -
AT^SISC + -
AT^SISR + -
AT^SISW + -
AT^SIST + -
AT^SISD + -
AT^SISU + -
AT^SISH + -
AT^SISX + -
AT^SISE + -

Supplementary Service Commands

AT+CACM +
AT+CAMM +
AT+CAOC +
AT+CCUG + +
AT+CCFC + -
AT+CCWA + -
AT+CHLD + -
AT+CLIP + -
AT+CLIR + -
AT+COLP + -
AT+CPUC + +
AT+CSSN + -
AT+CUSD + -

Packet Domain Related Commands

AT+CGACT + -
AT+CGATT + -
AT+CGEQOS +
AT+CGDATA + -
AT+CGDCONT + +
AT+CEREG + +
AT+CGEQOSRDP + -
AT+CGEQMIN + +

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 550 of 564
22.3 Availability of AT Commands Depending on Operating Mode of ME

AT Command Normal Mode 

AT+CGEQREQ + +
AT+CGEREP + +
AT+CGPADDR + +
AT+CGSCONTRDP + -
AT+CGCONTRDP + -
AT+CGQMIN + +
AT+CGREG + +
AT+CGSMS +
ATD*99# + -
AT+CEMODE + -
AT+CGDSCONT + +
AT+CGTFT +
AT+CGTFTRDP + -
AT^SGAUTH + +
AT^SWWAN + -
AT+CGPIAF +
AT+CNMPSD + -

USIM related Commands

AT+CCID +
AT+CRSM +
AT+CSIM +
AT+CCHO +
AT+CCHC +
AT+CGLA +
AT^SSET +
AT^SCID +
AT^SCKS +

Phonebook Commands
AT+CPBS + +
AT+CPBR + +
AT+CPBW + +
AT+CSVM + +
AT+CNUM + +

GNSS Commands
AT^SGPSC + +
AT^SGPSE + +

Audio Commands
AT+CMUT +
AT+VTS + -

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 551 of 564
22.3 Availability of AT Commands Depending on Operating Mode of ME

AT Command Normal Mode 

AT+VTD + -
AT^SAIC +
AT^SNFI +
AT^SNFO +
AT^SNFS +

Hardware related Commands

AT+CCLK +
AT+CALA +
AT^SBV +
AT^SCTM +
AT^SLED +
AT^SSPI +
AT^SAD +
AT^SRADC +

General Purpose I/O (GPIO) Pin related Commands

AT^SPIO +
AT^SCPIN +
AT^SGIO +
AT^SSIO +
AT^SGPINCA +

Subscription Management Commands

AT^SUSMA + +
AT^SUSMC + +

Miscellaneous Commands
ATS3 +
ATS4 +
ATS5 +
AT^SBNW +
AT^SFDL + +
AT^SFSA +
AT^SRVCFG + -
AT^SRVCTL + -
AT^SBNR +

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 552 of 564
22.4 AT Command Settings storable with AT&W

22.4 AT Command Settings storable with AT&W

Table 22.7: Settings Stored to User Profile

AT Command Stored Parameters

Configuration Commands
ATQ <n>
ATV <value>
ATX <value>
AT+CMEE <errMode>

Status Control Commands

AT^SIND <dtmfSrc>

Serial Interface Control Commands

AT\Q <n>
AT&C <value>
AT&D <value>
AT&S <value>
ATE <value>

Call related Commands

ATS0 <n>
AT^SLCC <n>
AT+CRC <mode>

Network Service Commands

AT+COPS <format>
AT+CREG <urcMode>

Short Message Service (SMS) Commands

AT+CMGF <mode>
AT+CNMI <mode>, <mt>, <bm>, <ds>, <bfr>
AT+CSDH <show>
AT+CSMS <service>

Supplementary Service Commands

AT+CLIP <clipUrcMode>

USIM related Commands

AT^SSET <n>
AT^SCKS <mode>

Hardware related Commands

AT^SLED <mode>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 553 of 564
22.5 Factory Default Settings Restorable with AT&F

22.5 Factory Default Settings Restorable with AT&F

Table 22.8: Factory Default Settings Restorable with AT&F

AT Command Factory Defaults

Configuration Commands
ATQ <n>=0
ATV <value>=1
ATX <value>=0
AT+CMEE <errMode>=2
AT+CSCS <charSet>="GSM"

Status Control Commands

AT^SIND <dtmfSrc>=1

Serial Interface Control Commands

AT\Q <n>=3
AT&C <value>=1
AT&D <value>=2
AT&S <value>=0
ATE <value>=1
AT+ICF <format>=3

Call related Commands

ATS0 <n>=000
AT^SLCC <n>=0
AT+CRC <mode>=0

Network Service Commands

AT+COPS <format>=0
AT+CREG <urcMode>=0
AT+CTZU <n>=0

Short Message Service (SMS) Commands

AT+CMGF <mode>=0
AT+CNMI <mode>=0, <mt>=0, <bm>=0, <ds>=0, <bfr>=1
AT+CSCB <operation>=0, <dcss>=" "
AT+CSDH <show>=0
AT+CSMP <fo>=17, <vp>=167, <pid>=0, <dcs>=0
AT+CSMS <service>=0
AT^SSDA <da>=1

Supplementary Service Commands

AT+CLIP <clipUrcMode>=0
AT+CLIR <n>=0

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 554 of 564
22.5 Factory Default Settings Restorable with AT&F

AT Command Factory Defaults

AT+CSSN <n>=0, <m>=0
AT+CUSD <ussdMode>=0

Packet Domain Related Commands

AT+CEREG <n>=0
AT+CGREG <n>=0
AT+CGPIAF <format>=0, <subnet>=0, <lzeros>=0, <czeros>=0

USIM related Commands

AT^SSET <n>=0
AT^SCKS <mode>=0

Phonebook Commands
AT+CPBS <storage>="SM"

Audio Commands
AT+VTD <duration>=1

Hardware related Commands

AT^SCTM <UrcMode>=0
AT^SLED <mode>=0

Miscellaneous Commands
ATS3 <n>=013
ATS4 <n>=010
ATS5 <n>=008

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 555 of 564
22.6 Summary of Unsolicited Result Codes (URC)

22.6 Summary of Unsolicited Result Codes (URC)

Table 22.9: Summary of Unsolicited Result Codes (URC)

AT Command URC

Unsolicited Result Code Presentation

NO CARRIER
NO CARRIER
BUSY
^SBC: Undervoltage Warning
^SBC: Undervoltage Shutdown
^SBC: Overvoltage Warning
^SBC: Overvoltage Shutdown
^SHUTDOWN

Configuration Commands
AT+CFUN ^SYSSTART
AT+CFUN ^SYSSTART AIRPLANE MODE

Status Control Commands

AT^SIND +CIEV: <indDescr>, <indValue>
AT^SIND +CIEV: <indDescr>, <cmdType>, <commandDetails>[, <pathLen>, <fileNum>,
<fileList>[, <status>, <statAddInfo>]]
AT^SIND +CIEV: <indDescr>, <indValue>, <eonsOperator>, <servProvider>,
<servProviderType>
AT^SIND +CIEV: <indDescr>, <nitzUT>, <nitzTZ>[, <nitzDST>]
AT^SIND +CIEV: <indDescr>
AT^SIND +CIEV: <indDescr>, <indValue>, <lstaEdvs>, <lstaRssi>
AT^SIND +CIEV: <indDescr>, <indValue>, <lstaNo>, <lstaMin>, <lstaMax>, <lsta-
Mean>, <lstaVar>
AT^SIND +CIEV: <indDescr>, <indValue>, <lstaFrRep>, <lstaBandScnd>, <lstaFr-
Min>, <lstaFrMax>, <lstaMin>, <lstaMax>, <lstaMean>, <lstaGrade>
AT^SIND +CIEV: <indDescr>, <ceerRelCauseGroup>, <ceerReport>
AT^SIND +CIEV: <indDescr>, <dtmfChar>, <dtmfSrc>
AT^SIND +CIEV: <indDescr>, <newsmsact>[, <newsmsmem>, <newsmsindex>]
AT^SIND +CIEV: <indDescr>, <srvProfileId>, <issuer>, <serialNumber>, <sub-
ject>, <signatureAlgorithm>, <thumbprintAlgorithm>, <thumbprint>
AT^SIND +CIEV: <indDescr>, <provMm>, <provCur>

Security Commands
AT^SSECUA ^SSECUA: "CertStore/TLS/UpdateServerCerts", <index>, <action>
[... ]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 556 of 564
22.6 Summary of Unsolicited Result Codes (URC)

AT Command URC

Call related Commands

AT^SLCC if the list of current calls is empty:
^SLCC:
if one or more calls are currently in the list:
^SLCC: <idx>, <dir>, <stat>, <mode>, <mpty>, <Reserved>[, <number>,
<type>[, <alpha>]]
[^SLCC: <idx>, <dir>, <stat>, <mode>, <mpty>, <Reserved>[, <number>,
<type>[, <alpha>]]]
[... ]
^SLCC:
AT+CRC RING
AT+CRC +CRING: <type>

Network Service Commands

AT+CREG +CREG: <regStatus>
AT+CREG +CREG: <regStatus>[, <netLac>, <netCellId>[, <AcT>]]
AT+CTZU +CTZU:<nitzUT>, <nitzTZ>[, <nitzDST>]
AT^SNLWM2M ^SNLWM2M, "procedure", <stack_id_str>, [<srvID>], <procedure>,
<procedure_status>[, <procedure_status_parameter>]
AT^SNFOTA ^SNFOTA: "act",<action>,<error>,<progress>

Short Message Service (SMS) Commands

AT+CNMI +CMTI: <mem3>, <index>
AT+CNMI +CMT: <length><CR><LF><pdu>
AT+CNMI +CMT: <oa>, , <scts>[, <tooa>, <fo>, <pid>, <dcs>, <sca>, <tosca>,
<length>]<CR><LF><data>
AT+CNMI +CBM: <length><CR><LF><pdu>
AT+CNMI +CBM: <sn>, <mid>, <dcs>, <page>, <pages><CR><LF><data>
AT+CNMI +CDS: <length><CR><LF><pdu>
AT+CNMI +CDS: <fo>, <mr>[, <ra>][, <tora>], <scts>, <dt>, <st>

Internet Service Commands

AT^SISR ^SISR: <srvProfileId>, <urcCauseId>
AT^SISW ^SISW: <srvProfileId>, <urcCauseId>
Internet Ser- ^SIS: <srvProfileId>, <urcCause>[, [<urcInfoId>][, <urcInfoText>]]
vice URC

Supplementary Service Commands

AT+CAOC +CCCM: <ccmValue>
AT+CCWA +CCWA: <calling number>, <type of number>[, <class>][, , <CLI validity>]
AT+CLIP +CLIP: <clipNumber>, <clipNumType>, , [, <clipAlpha>][, <CLI validity>]
AT+COLP +COLP: <number>, <type>[, <sub-number>][, <sub-type>][, <alpha>]
AT+CSSN +CSSI: <code 1>
AT+CSSN +CSSU: <code 2>
AT+CUSD +CUSD: <ussdStatus>[, <ussdRsp>[, <ussdDCS>]]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 557 of 564
22.6 Summary of Unsolicited Result Codes (URC)

AT Command URC

Packet Domain Related Commands

AT+CEREG +CEREG: <stat>
AT+CEREG +CEREG: <stat>[, [<tac>], [<ci>], [<AcT>]]
AT+CGEREP +CGEV: REJECT <PDP_type>, <PDP_addr>
AT+CGEREP +CGEV: NW REACT <PDP_type>, <PDP_addr>[, <cid>]
AT+CGEREP +CGEV: NW DEACT <PDP_type>, <PDP_addr>[, <cid>]
AT+CGEREP +CGEV: ME DEACT <PDP_type>, <PDP_addr>[, <cid>]
AT+CGEREP +CGEV: NW DETACH
AT+CGEREP +CGEV: ME DETACH
AT+CGEREP +CGEV: NW CLASS <class>
AT+CGEREP +CGEV: ME CLASS <class>
AT+CGEREP +CGEV: ME ACT <pcid>, <cid>, <event-type>
AT+CGEREP +CGEV: NW MODIFY <cid>,<change-reason>,<event-type>
AT+CGEREP +CGEV: NW PDN ACT <cid>
AT+CGEREP +CGEV: NW PDN DEACT <cid>
AT+CGEREP +CGEV: ME PDN DEACT <cid>
AT+CGEREP +CGEV: NW ACT <pcid>, <cid>, <event-type>
AT+CGEREP +CGEV: ME MODIFY <cid>, <change-reason>, <event-type>
AT+CGEREP +CGEV: ME PDN ACT <cid>[, <reason>]
AT+CGREG +CGREG: <stat>
AT+CGREG +CGREG: <stat>[, <lac>][, <ci>][, <AcT>]

USIM related Commands

AT^SSET ^SSIM READY
AT^SCKS ^SCKS: <SimStatus>

GNSS Commands
AT^SGPSE ^SGPSE: <UrcType>, <BufferStatus>, <BufferCount>
AT^SGPSE ^SGPSE: <UrcType>, <PositionStatus>
AT^SGPSE ^SGPSE: <UrcType>, <InfoUrcMinutes>
AT^SGPSE ^SGPSE: <UrcType>, <NMEA_sentence>
[^SGPSE: <UrcType>, <NMEA_sentence>]
...

Hardware related Commands

AT+CALA +CALA: [<text>]
AT+CALA ^SYSSTART
+CALA: [<text>]
AT+CALA ^SYSSTART AIRPLANE MODE
+CALA: [<text>]
AT^SCTM ^SCTM_B: <UrcCause>
AT^SRADC ^SRADC: <ch>, <count>, <value>[, <value>[, <value>[, <value>[, <value>[,
<value>[, <value>[, <value>[, <value>[, <value>[, <value>]]]]]]]]]]

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 558 of 564
22.6 Summary of Unsolicited Result Codes (URC)

AT Command URC

Subscription Management Commands

AT^SUSMA ^SUSMA: "VzwSimAct/State", 7

Miscellaneous Commands
AT^SRVCTL In case of success:
^SRVCTL: "CBL", "Loc", <CBLCode>, <CBLLatitude>, <CBLLongitude>, <CBLAc-
curacy>[, <CBLCountryCode>, <CBLCountry>, <CBLCity>]
OKIn case of error:
^SRVCTL: "CBL", "Loc", <CBLCode>, <CBLMessage>
ERROR+CME ERROR: <err>

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 559 of 564
22.7 Alphabetical List of AT Commands

22.7 Alphabetical List of AT Commands

Table 22.10: Alphabetical List of AT Commands

AT Command Description Section and Page

+++ Escape from Data Mode to AT Command Mode Section 7.9, page 170
AT&C Set Data Carrier Detect (DCD) line mode Section 4.2, page 115
AT&D Set Data Terminal Ready (DTR) line mode Section 4.3, page 116
AT&F Reset AT Command Settings to Factory Default Values Section 2.1, page 30
AT&S Set Data Set Ready (DSR) line mode Section 4.4, page 117
AT&V Display current Configuration Section 2.2, page 31
AT&W Store AT Command Settings to User Defined Profile Section 2.3, page 32
AT+CACM Accumulated call meter (ACM) reset or query Section 12.1, page 329
AT+CALA Alarm Configuration Section 18.2, page 471
AT+CAMM Accumulated call meter maximum (ACMmax) set or query Section 12.2, page 330
AT+CAOC Advice of Charge Information Section 12.3, page 331
AT+CAVIMS Availability for voice calls with IMS Section 8.11, page 207
AT+CCFC Call forwarding number and conditions control Section 12.5, page 335
AT+CCHC Close logical channel Section 14.5, page 417
AT+CCHO Open logical channel Section 14.4, page 416
AT+CCID USIM Card Identification Number Section 14.1, page 411
AT+CCLK Real Time Clock Section 18.1, page 470
AT+CCUG Closed User Group Section 12.4, page 333
AT+CCWA Call Waiting Section 12.6, page 339
AT+CEER Extended Error Report Section 3.1, page 85
AT+CEMODE Modes of Operation for EPS Section 13.18, page 395
AT+CEREG EPS Network Registration Status Section 13.6, page 366
AT+CESQ Extended Signal Quality Section 8.12, page 208
AT+CEVDP Voice domain preference for LTE Section 8.18, page 223
AT+CFUN PLS63-W Functionality Level Section 2.8, page 37
AT+CGACT PDP Context Activate or Deactivate Section 13.1, page 354
AT+CGATT PS Attach or Detach Section 13.2, page 356
AT+CGCONTRDP PDP context read dynamic parameters Section 13.13, page 386
AT+CGDATA Enter Data State Section 13.4, page 359
AT+CGDCONT Define PDP Context Section 13.5, page 361
AT+CGDSCONT Define Secondary PDP Context Section 13.19, page 396
AT+CGEQMIN 3G Quality of Service Profile (Minimum acceptable) Section 13.8, page 370
AT+CGEQOS Define EPS Quality of Service Section 13.3, page 357
AT+CGEQOSRDP EPS Quality of Service Read Dynamic Parameters Section 13.7, page 368
AT+CGEQREQ 3G Quality of Service Profile (Requested) Section 13.9, page 374
AT+CGEREP Packet Domain Event Reporting Section 13.10, page 378
AT+CGLA Generic logical channel access Section 14.6, page 418
AT+CGMI Request manufacturer identification Section 6.2, page 152
AT+CGMM Request model identification Section 6.4, page 153

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 560 of 564
22.7 Alphabetical List of AT Commands

AT Command Description Section and Page

AT+CGMR Request revision identification of software status Section 6.6, page 154
AT+CGPADDR Show PDP Address Section 13.11, page 382
AT+CGPIAF Select Printing IP address format Section 13.24, page 408
AT+CGQMIN Quality of Service Profile (Minimum acceptable) Section 13.14, page 388
AT+CGREG Packet Domain Network Registration Status Section 13.15, page 391
AT+CGSCONTRDP Secondary PDP Context Read Dynamic Parameters Section 13.12, page 384
AT+CGSMS Select Service for MO Short Messages Section 13.16, page 393
AT+CGSN Request International Mobile Equipment Identity (IMEI) Section 6.8, page 155
AT+CGTFT Traffic Flow Template Section 13.20, page 398
AT+CGTFTRDP Traffic Flow Template Read Dynamic Parameters Section 13.21, page 401
AT+CHLD Call Hold and Multiparty Section 12.7, page 342
AT+CHUP Hang up call Section 7.5, page 165
AT+CIMI Request International Mobile Subscriber Identity (IMSI) Section 6.10, page 156
AT+CLCC List of current calls Section 7.10, page 171
AT+CLCK Facility Lock Section 5.3, page 132
AT+CLIP Calling Line Identification Presentation Section 12.8, page 344
AT+CLIR Calling Line Identification Restriction Section 12.9, page 346
AT+CMEE Error Message Format Section 2.10, page 40
AT+CMGC Send an SMS command Section 10.2, page 231
AT+CMGD Delete short message Section 10.3, page 232
AT+CMGF Select SMS message format Section 10.4, page 233
AT+CMGL List SMS messages from preferred store Section 10.5, page 234
AT+CMGR Read SMS messages Section 10.6, page 236
AT+CMGS Send Short Message Section 10.7, page 237
AT+CMGW Write Short Messages to Memory Section 10.8, page 238
AT+CMMS More Messages to Send Section 10.13, page 246
AT+CMSS Send short messages from storage Section 10.9, page 239
AT+CMUT Mute control Section 17.1, page 461
AT+CMUX Multiplex mode Section 4.8, page 123
AT+CNMA New Message Acknowledgement to UE/TE Section 10.10, page 240
AT+CNMI SMS Event Reporting Configuration Section 10.11, page 241
AT+CNMPSD No more PS data Section 13.25, page 410
AT+CNUM Read own numbers Section 15.5, page 438
AT+COLP Connected Line Identification Presentation Section 12.10, page 347
AT+COPN Read operator names Section 8.1, page 179
AT+COPS Operator Selection Section 8.2, page 180
AT+CPBR Read from phonebook Section 15.2, page 426
AT+CPBS Select phonebook memory storage Section 15.1, page 423
AT+CPBW Write into phonebook Section 15.3, page 431
AT+CPIN PIN Authentication Section 5.1, page 126
AT+CPLS Select Preferred Operator List Section 8.6, page 190
AT+CPMS Preferred SMS message storage Section 10.12, page 244

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 561 of 564
22.7 Alphabetical List of AT Commands

AT Command Description Section and Page

AT+CPOL Preferred Operator List Section 8.5, page 188
AT+CPUC Price per unit and currency table Section 12.11, page 349
AT+CPWD Change Password Section 5.4, page 137
AT+CRC Set Cellular Result Codes for incoming call indication Section 7.12, page 176
AT+CREG Network Registration Status Section 8.3, page 184
AT+CRSM Restricted USIM Access Section 14.2, page 412
AT+CSCA SMS Service Center Address Section 10.14, page 247
AT+CSCB Select Cell Broadcast Message Indication Section 10.15, page 248
AT+CSCS Character Set Section 2.11, page 45
AT+CSDH Show SMS text mode parameters Section 10.16, page 250
AT+CSIM Generic USIM Access Section 14.3, page 414
AT+CSMP Set SMS Text Mode Parameters Section 10.17, page 251
AT+CSMS Select Message Service Section 10.18, page 253
AT+CSQ Signal Quality Section 8.4, page 187
AT+CSSN Supplementary service notifications Section 12.12, page 350
AT+CSVM Set voice mail number Section 15.4, page 436
AT+CTZU Automatic Time Zone Update Section 8.7, page 191
AT+CUSD Unstructured Supplementary Service Data Section 12.13, page 352
AT+CVMOD Voice call mode Section 7.13, page 178
AT+GCAP Capabilities List Section 2.15, page 84
AT+GMI Request manufacturer identification Section 6.3, page 152
AT+GMM Request model identification Section 6.5, page 153
AT+GMR Request revision identification of software status Section 6.7, page 154
AT+GSN Request International Mobile Equipment Identity (IMEI) Section 6.9, page 155
AT+ICF Serial Interface Character Framing Section 4.6, page 119
AT+IPR Bit Rate Section 4.7, page 121
AT+VTD Tone duration Section 17.3, page 463
AT+VTS DTMF and tone generation Section 17.2, page 462
AT\Q Flow Control Section 4.1, page 114
AT^SAD Antenna Configuration Section 18.7, page 486
AT^SAIC Audio Interface Configuration Section 17.4, page 464
AT^SBNR Binary Read Section 21.9, page 534
AT^SBNW Binary Write Section 21.4, page 503
AT^SBV Battery/Supply Voltage Section 18.3, page 474
AT^SCFG Extended Configuration Settings Section 2.12, page 46
AT^SCID USIM Identification Number Section 14.8, page 420
AT^SCKS Query USIM and Chip Card Holder Status Section 14.9, page 421
AT^SCML List Concatenated Short Messages from preferred store Section 10.25, page 261
AT^SCMR Read Concatenated Short Messages Section 10.22, page 258
AT^SCMS Send Concatenated Short Messages Section 10.23, page 259
AT^SCMW Write Concatenated Short Messages to Memory Section 10.24, page 260
AT^SCPIN Pin Configuration Section 19.2, page 492

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 562 of 564
22.7 Alphabetical List of AT Commands

AT Command Description Section and Page

AT^SCSL Customer SIM Lock Section 5.5, page 140
AT^SCTM Critical Operating Temperature Monitoring Section 18.4, page 475
AT^SFDL Enter Firmware Download Mode Section 21.5, page 507
AT^SFSA Flash File System Access Section 21.6, page 509
AT^SGAUTH Set Type of Authentication for PDP-IP Connections Section 13.22, page 404
AT^SGIO Get IO state of a specified pin Section 19.3, page 494
AT^SGPINCA Pin Configuration Section 19.5, page 496
AT^SGPSC GNSS Configuration Section 16.3, page 443
AT^SGPSE GNSS Event Notification Section 16.4, page 455
AT^SHUP Hang up call(s) indicating a specific 3GPP TS 24.008 Section 7.6, page 166
release cause
AT^SICA Internet Connection Activate or Deactivate Section 11.1, page 266
AT^SICS Internet Connection Settings Section 11.2, page 267
AT^SIND Extended Indicator Control Section 3.2, page 98
AT^SINFO Information Output Section 6.11, page 157
AT^SIPS Internet Profile Storage Section 11.3, page 269
AT^SISC Internet Service Close Section 11.7, page 287
AT^SISD Internet Service MQTT Dynamic Setup Profile Section 11.11, page 296
AT^SISE Internet Service Error Report Section 11.15, page 304
AT^SISH Disconnect Remote Client Section 11.13, page 300
AT^SISI Internet Service Information Section 11.5, page 281
AT^SISO Internet Service Open Section 11.6, page 284
AT^SISR Internet Service Read Data Section 11.8, page 288
AT^SISS Internet Service Setup Profile Section 11.4, page 270
AT^SIST Transparent Mode Section 11.10, page 294
AT^SISU MQTT Dynamic Send Request Section 11.12, page 299
AT^SISW Internet Service Write Data Section 11.9, page 291
AT^SISX Internet Service Execution Section 11.14, page 301
AT^SLCC Extended list of current calls Section 7.11, page 173
AT^SLED LED Feature Section 18.5, page 477
AT^SMGL List Short Messages from preferred store without setting Section 10.19, page 255
status to REC READ
AT^SMGR Read short message without setting status to REC READ Section 10.20, page 256
AT^SMONI Monitoring Serving Cell Section 8.8, page 193
AT^SMONP Monitoring Neighbour Cells Section 8.9, page 198
AT^SMSO Switch Off PLS63-W Section 2.9, page 39
AT^SNCSGLS Operator CSG lists on USIM Section 8.16, page 219
AT^SNCSGSC Closed Subscriber Group Network Scan Section 8.15, page 217
AT^SNFI Set microphone path parameters Section 17.5, page 466
AT^SNFO Set audio output parameter (loudspeaker path) Section 17.6, page 467
AT^SNFOTA Firmware upgrade Over The Air Section 8.17, page 220
AT^SNFS Select audio hardware set Section 17.7, page 469

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
Cinterion® PLS63-W AT Command Set Page 563 of 564
22.7 Alphabetical List of AT Commands

AT Command Description Section and Page

AT^SNLWM2M LwM2M Client Configuration / Controlling Section 8.14, page 212
AT^SNMON Network Monitoring Section 8.10, page 203
AT^SNSRAT Radio Access Technologies Selection Section 8.13, page 210
AT^SPIC Display PIN Counter Section 5.2, page 128
AT^SPIO GPIO Driver Open/Close Section 19.1, page 491
AT^SPOW Set UART Mode and SLEEP Mode on UART Section 2.14, page 82
AT^SQPORT Query Port Id Section 4.9, page 125
AT^SRADC Configure and Read A/D Converter Section 18.8, page 487
AT^SRVCFG Service Configuration Settings Section 21.7, page 519
AT^SRVCTL Extra Service Control Section 21.8, page 528
AT^SSDA Set SMS Display Availability Section 10.21, page 257
AT^SSECRUN Signature Authentication for Protected Commands in Section 5.8, page 148
Secure Mode
AT^SSECUA Internet Service Certificate Store Actions Section 5.6, page 142
AT^SSECUC Internet Service Certificate Store Update Configuration Section 5.7, page 145
AT^SSET USIM Data Ready Indication Section 14.7, page 419
AT^SSIO Set IO state of a specified pin Section 19.4, page 495
AT^SSPI Serial Protocol Interface Section 18.6, page 478
AT^SSRVSET Service Set for USB Section 2.13, page 81
AT^SSTA Remote-SAT Interface Activation Section 9.1, page 224
AT^SUSMA Subscription Management Action Section 20.1, page 497
AT^SUSMC Subscription Management Control Section 20.2, page 499
AT^SWWAN PDP Context Activate or Deactivate Section 13.23, page 406
ATA Connect to Incoming Call Section 7.1, page 160
ATD Mobile originated call to specified number Section 7.2, page 161
ATD*99# Request Packet Domain service Section 13.17, page 394
ATDL Redial last number used Section 7.3, page 163
ATE AT Command Echo Section 4.5, page 118
ATH Disconnect existing data connection Section 7.4, page 164
ATI Display product identification information Section 6.1, page 149
ATO Switch from command mode to data mode / PPP online Section 7.8, page 169
mode
ATQ Result Code Presentation Mode Section 2.4, page 33
ATS0 Set number of rings before automatically answering a call Section 7.7, page 168
ATS3 Command Line Termination Section 21.1, page 500
ATS4 Response Formatting Section 21.2, page 501
ATS5 Command Line Editing Section 21.3, page 502
ATV Result code format mode Section 2.5, page 34
ATX Result Code Selection Section 2.6, page 35
ATZ Restore AT Command Settings from User Defined Profile Section 2.7, page 36

t PLS63-W_ATC_V01.002 21/02/9
Confidential / Preliminary
 564

Germany
81541 Munich
Werinherstrasse 81
THALES DIS AIS Deutschland GmbH

© Thalles 2021. All rights reserved. Thales, the Thales logo, are trademarks and service marks of Thales and are registered in certain countries.