General Information

All these radios are from the same line (Waris Series). Some are export versions, others are domestic. As far as we know, there appears to be a few different versions of RSS to program them. Apparently, up until recently there was different software for the Latin American product, the North American Product, and the European.

We were told that the newest versions of CPS (HVN9025G) for these radios now supports the Latin American and the North American radios with the same software. This apparently is not the case. Even though the CD the RSS is on mentions "PRO", it appears that this does not refer to the PRO series of radios (Latin America). It looks like the Latin America PRO radios still use their own RSS.

We know for sure that the HT750/1250/1550 and CDM750/CDM1250/1550 use RSS part number HVN9025.

The GP320/340/360/380 use their own RSS.

There are MPT versions of the GP340 and GP380, called the GP640 and GP680 respectively. There is also a MPT version of the HT1550 called the GP1280.

Just for reference, the following is a list of domestic radios and their equivalent export counterparts:

Be advised that is you have one of the PRO5150 Elite radios, it does use the standard programming cables for these radios, but you need one of the newer versions of CPS to read and write to the radio. It looks like some of the older versions can read the radio, but it cannot write back to the radio.

A programming cable tip for the Professional Series:

A programming tip for the Professional Series:

NOTE: At this time, we are not aware of any way to program an export version radio with the RSS for a domestic version radio, or vice versa.

These mobile radios also use the same RSS as the portables (HT750/1250/1550), as long as it is version R.03.00.01 or newer (HVN9025D).

You cannot clone a portable and to a mobile. It must all be typed in manually the first time.

Some users of these portable radios are having issues with coverage, see this Motorola Document on the problem.

The Pro Series radios have a "region byte" that is set by the Distribution Center (DC) in Atlanta. The byte determines what band splits the radio will accept via the RSS. We believe only two different bytes are used, that is, Americas and Rest of the World (ROW). Radios programmed with the Americas byte are programmable to the FCC approved and type accepted ranges for North America. The Rest of the World radios have a more open band range. These are the radios that could be programmed with ham frequencies, but we suspect would not be type accepted in the US. Anyone know where the region byte is located and what the values are? If you do, email us.

Field Programming

In the Pro Series CPS, in the Help menu it clearly states that the "edit" feature is for a Multi-line display radio (HT1550/PRO9150) is for field programming of the TX frequency, the RX frequency, the RX tone, if any, and the TX tone, if any. Sounds very similar to that of the JT1000.

It looks like CPS 6.00.00 or greater for the PRO9150 supports field programming.

In order to access the field programming in the radio, you will need the special NNTN4503AR battery with the built in programming key.

You will also need to turn on field programming in the RSS for the modes you want to change, as well as set a programming password (kinda like a JT1000).

The programming battery can be added as an option when ordering your new radio, it is about a $30US upgrade.

Password Protection

If a radio had a password that was guessed at 3 times (wrong), it would lock you out and display "Radio Locked". The radio is supposed to reset in 15 minutes after three bad password attempts. The radio must be left "on" to reset.

However, with some of the early models, the radio would stay locked. An HT1250 with this issue was returned to the depot with this problem. They could not reset the radio and it was replaced. It was shipped back to the factory as the depot could not fix it. They finally stated that it appeared that the "onboard" lithium battery had failed. For all practical purposes "time was standing still" for the radio as it's internal clock was dead.

So, if you have a radio that will not reset and let you keep trying at the password, this may be the problem.

As far as we know, there is no back door password or any other way to clear the password in the radio. We've been told that Motorola just replaces the board.

You might want to try and remove and re-install the lithium battery to remove the password. This may or may not work, but you will probably also loose all the programming in the radio.

Flash Upgrading


Of course to flash the radio, you will need the flash key, new firmware, and the RSS for the radio you are going to flash. You will also need the appropriate programming cable, either the one that uses the RIB, or the RIB-less one. And, you will need the RLN4853 Adapter Cable if you are flashing using the programming cable with the RJ45 connector on it. The pinout of the RLN4853 flash adapter cable can be found here.

The RLN4853 Adapter Cable is a passive cable used to make connection to the mobile Professional Radio when the radio is to be programmed or flashed via the accessory port. The adapter is a 20-way accessory connector at one end, which connects to the radio, and an 8-pin Telco (RJ45) connector (which will accept a 10 pin Telco plug) at the other end.

Alternatively, you can just build and use the AARKN4083 Programming/Test Cable. This cable connects directly from the RIB to the accessory connector for programming, tuning, and flashing the radio.

The Professional series radios can have firmware upgrades programmed using the RIB-less cable, EXCEPT when upgrading from version R01.XX.XX firmware, in which case a RIB and RIB to radio cable must be used.


The same info applies for the portables as is above for the mobiles. The only exception is that you will need to use the RKN4074 Test/Flash/Programming Cable or AARKN4075B (RIB-less Programming/Flash Cable) with these radios.

For both mobiles and portables, you will need the Flash Adapter. If you are using a RIB and associated cable, the Flash Adapter must be connected between the RIB and the Programming/Test Cable. If you are using the RIB-less cable, the Flash Adapter must be connected between the PC and the RIB-less Programming Cable.

You do not need a SmartRIB (SRIB) to flash upgrade the radios, the normal RLN4008 RIB will work just fine.


The GP340 is the European version of HT750 with SELECT-5 and 16 channels. GP320 is a 1 channel version of the GP340 without any channel knob. Also availble are the GP360 and GP380. The GP380 is a display version with 255 channels and keypad. The GP360 is same as the GP380 but without keypad.

The pinout of the RKN4074 Programming/Test/Flash Cable is here.

The pin layout of the accessory connector is the opposite of this mating connector.

RKN4081 Rib-less Cable

While it would have been nice if it were as simple as connecting a few wires between your computer and radio without a RIB to program it, as the schematic for the RIB-less programming cable schematic from Motorola depicts, this in fact is not the case.

What is not shown on the Motorola schematic is the RS232-TTL converter (RIB) circuit that is included inside the DB25 hood of the cable. See this picture for proof.

So, I guess that settles this subject... no quick cable solution. Sorry.

Refurbishing Kits

Refurbishing kits are available for the HT750/1250, PRO5150/7150 radios. The part numbers and parts contents are as follows:

No Keypad   Full Keypad  
Kit REX4663A   Kit REX4661A  
Part Number Description Part Number Description
3680529Z01 Knob Volume 3680529Z01 Knob Volume
3680530Z02 Knob Freq 3680530Z02 Knob Freq
1380525Z01 Escutcheon Top 16 Ch 1380525Z01 Escutcheon Top 16 Ch
1380525Z04 Escutcheon Top 4 Ch 1380525Z04 Escutcheon Top 4 Ch
3380644Z01 Escutcheon Label 3380644Z01 Escutcheon Label
3280533Z03 Seal Control Top 3280533Z03 Seal Control Top
6180527Z01 Lightpipe TX 6180527Z01 Lightpipe TX
HLN9961A HT750 Label HLN9990A HT750 DTMF Label
HLN9965A PRO5150 Label HLN9995A PRO5150 Wide Label
HLN9820A Universal Dust Cover HLN9820A Universal Dust Cover
1386058A01 Escutcheon Univ Conn 1386058A01 Escutcheon Univ Conn
1580666Z03 Cover Front Assy Basic 1580666Z04 Cover Front Pop DTMF
7580532Z01 Keypad Side Control 7580532Z01 Keypad Side Control
1380528Z01 Bezel Side Control 1380528Z01 Bezel Side Control
7585680Z03 Kpd Pop Basic 7585680Z04 Kpd Pop Full
3586057A01 Cloth Speaker 3586057A01 Cloth Speaker

Limited Keypad   Full Keypad  
Kit REX4660A   Kit REX4662A  
Part Number Description Part Number Description
3680529Z01 Knob Volume 3680529Z01 Knob Volume
3680530Z02 Knob Freq 3680530Z02 Knob Freq
1380525Z01 Escutcheon Top 16 Ch 1380525Z01 Escutcheon Top 16 Ch
1380525Z04 Escutcheon Top 4 Ch 1380525Z04 Escutcheon Top 4 Ch
3380644Z01 Escutcheon Label 3380644Z01 Escutcheon Label
3280533Z03 Seal Control Top 3280533Z03 Seal Control Top
6180527Z01 Lightpipe TX 6180527Z01 Lightpipe TX
HLN9962A HT1250 Label HLN9962A HT1250 Label
HLN9964A HT1250LS Label HLN9964A HT1250LS Label
HLN9969A PRO7150 Conv Label HLN9969A PRO7150 Conv Label
HLN9820A Universal Dust Cover HLN9820A Universal Dust Cover
1386058A01 Escutcheon Univ Conn 1386058A01 Escutcheon Univ Conn
1580666Z01 Cover Preferred Basic 1580666Z02 Cover Preferred DTMF
7580532Z01 Keypad Side Control 7580532Z01 Keypad Side Control
1380528Z01 Bezel Side Control 1380528Z01 Bezel Side Control
7585680Z01 Keypad Basic 7585680Z02 Keypad Full
3586057A01 Cloth Speaker 3586057A01 Cloth Speaker


The part number for the service manual for these radios is 68P81091C63-0.

The CDM750, CDM1250 and CDM1550 can use the same programming cable as the Maxtrac/Radius (you just won't be able to flash with it). The proper cable for these radios has 10 contacts instead of the RJ45's 8. We believe that the pinout for this cable should look something like this. The 8 contacts of the CDM series mic jack appear to coincide with the pinout of the Maxtrac Mic Jack.

The radio can also be programmed or flashed with the AARKN4083A Programming/Test Cable. This cable connects to the accessory connector of the radio directly. The pinout of this cable is available here.

As for the accessory connector, the connector on the back of the radio is actually a 20 pin connector. It has an extra column of pins (2), one on either side of the 16 pin connector. The software makes no mention of the pins or their use. The accessory connector uses this numbering scheme. The pinout of the accessory connector is as follows:

Mobile Radio Accessory Connector Predetermined Functionality
Pin Description Direction Comments
1 Speaker (-) Not Programmable
2 External Mic Audio Partially Programmable
3 Digital In #1 Input Only Fully Programmable, 12 Active Low Only
4 Digital In #2 Output Only Fully Programmable
5 Flat TX Audio Input Partially Programmable
6 Digital In/Out #3 Input Only Fully Programmable
7 Ground Not Programmable
8 Digital In/Out #4 Selectable Input/Output Fullt Programmable
9 Analog In #5 Special Input Fully Programmable, Tri-state Emergency Switch
10 Ignition Sense Special Input Not Programmable, Active High
11 Flat RX Audio Partially Programmable
12 Digital In/Out #7 Selectable Input/Output Fully Programmable
13 Switched Battery (+) Not Programmable
14 Digital In/Out #8 Selectable Input/Outpur Fully Programmable
15 RSSI (Radio Signal Strength Input) Not Programmable
16 Speaker (+) Not Programmable
17 BUS (+)* Not Programmable
18 Boot Control* Not Programmable
19 Unknown Not Programmable
20 Unknown Not Programmable

*These pins are used in conjunction with the flash adapter cable.

If you want an easy way to connect to the Accessory Connector on these radios, you can order the HLN9242A or HLN9457A Accessory Connector kits. These include an accessory connector housing, some pins, and some wires with pins already attached. One thing to note, the HLN9242A kit also includes a pin extractor for removing previously installed pins. This kit is designed for the Maxtrac/Radius series of radios, and as a result, is only a 16 pin connector (not the 20 pin like these radios use).

Model Breakdown


AA M 25 K H F 9 AA 8 A N
Internal Use Radio Type Model Series Bandsplit Power Display Channel Spacing Protocol Feature Level Model Revision Model Package
AA Internal Use M Mobile 25 Model Series B 29.7-36 MHz H 1-25 W A No Display, No Keypad 9 Programmable AA Conventional 1 4 Frequency A Original Revision N Standard Package
LA Internal Use C 36-42 MHz K 25-40 W C No Display, Basic Keypad DU LTR 2 64 Frequency
D 42-50 MHz D 1 Line Display,Limited Keypad 5 128 Frequency
K 136-174 MHz F 1 Line Display, Standard Keypad 8 160 Frequency
R 403-470 MHz N 4 Line Display, Enhanced Keypad
S 450-512 MHz

Below is a partial model breakdown chart for the HT/PRO Series portable radios:

LA H 25 K D C 9 AA 2 A N
Internal Use Type of unit Model Series Frequency Band Power Level Physical Package Frequency Spacing Protocol Feature Level Model Revision Model Package
AA Internal Use H Portable 25 Model Series B 29.7-42 MHz C 3W C No Display 9 Programmable AA Conventional 2 4 Frequency A Model Revision N Model Package
LAInternal Use     C 35-50 MHz D 4-5W H 1 Line Display   CK MPT 3 16 Frequency    
      K 136-174 MHz E 6W N 4 Line Display   DU LTR 6 128 Frequency    
      R 403-470 MHz         8 160 Frequency    

Out Of Band

Depending on which version of RSS you have, this may or may not work for you.

Check and see if you have a GP300.EXE file, all bandsplits are in the GP300.EXE file if you do.

You need to open the GP300.EXE file in your Hex Editor and do a hex search for the lower or upper band limit you want to change.

All the band limits are in INTEL UNSIGNED LONG format and in Hz (eg. 403 MHz is 403000000 wich equals to C04A0518h). So, if you are searching for the 403 MHz band limit, you would do a hex search for C04A0518 and change what it finds to the limit you want.

No CRC check is done by the RSS, so you don't have to worry about correcting for one.

With version 5 of the HVN9025 RSS, we've been told that at least the VHF portion will allow programming between 137-173 MHz, we don't know about any of the other bands.

Corrupted Codeplugs

The following applies to the GP professional series radios.

The following method can recover corrupted codeplugs, and upgrade radio models - you need the following items:

Attach each RIB-less programming cable to an upgrade dongle.

Create a "Y" cable to interface between the RS-232 port on your PC and the two programming cable assemblies (upgrade dongles and their attached RIB-less programming cables). The "Y" cable needs to be complete, ie. RS-232 send and receive (pins 2,3 and ground), to the good radio, but RS-232 send only (pin2 and ground) to the bad radio.

Test communications using the utility supplied with the flash upgrade software. The good radio will give a handshake to the software and hence good comms., but the other radio (on the lead that does not have RS-232 receive) will hang and require a power off reset.

Re-flash both radios together, using the normal flash upgrade method, following the normal Motorola instructions.

If you get Motorola error codes, follow the instructions explicitly to BOTH radios, i.e remove both batteries, etc.

NOTE: If you do this, and are successful, BOTH radios will have the same serial number!

If you have a number of radios to "recover" and several versions of the flash software, use the early versions first, then you can keep "upgrading" the good radio time and time again, until you reach the current latest software version - the recovered radios can be re-flashed again at the end of all this to the latest version.

If attempting to upgrade a radio model, first check with the manual that it has adequate RAM/ROM, etc. for the radio that you are attempting to turn it into.

You can use this method to change GP320 to GP340 (needs a channel switch), GP340 to GP640, GP380 to GP680, and others...

Change bandsplits (although the radio may not work in the new bandsplit). I find that a UHF unit usually gives acceptable performance 20 mhz high or lower than its original bandsplit.

This method will NOT work with the old RLN4008 rib box.

European radios will convert to American models, but not usually the other way round as the American radios usually have far smaller flash ROM/RAM than the European versions - this is due to the huge program needed to support selcall signallijng, etc.

The method depends upon the good radio giving the correct handshakes to the software via the full RS-232 connection. The "bad" radio cannot reply (as its return RS-232 connection does not exist) but having sent its un-receieved answer the software replies anyway as the handshake has been received from the good unit. This results in both codeplugs being overwritten with ALL the information from the good radio.

Remember to realign the second radio unit, as its softpots have data from the first unit.

As with all Motorola flash reprogramming, be careful, you might want to use a portable laptop so that power outages do not corrupt both radios.

CPS and Reverse-burst CTCSS

The latest issue of Motorola CPS for the HT-750/CDM-750 series radios has a revolutionary feature added to it. CPS version R06.02.03, HVN9025K, now has the capability to program either the "standard" Reverse Burst used by Motorola, or a "Non-Standard Reverse Burst" used by Kenwood, ICOM, Yaesu/Vertex, Standard, Ritron, Johnson, GE/Ericsson, and others.

The industry standard EIA/TIA-603 lists two formats for CTCSS Reverse Burst: The format used by Motorola is 120 degree phase shift for 180 milliseconds, while the format used by all other manufacturers as well as by aftermarket tone equipment makers is 180 degree phase shift for 150 milliseconds. While this difference in reverse burst encoding and decoding is ignored by mechanical reeds and simple PLL devices, it is very easily discriminated by the digital signal processors used in modern radios. This subtle difference in Reverse burst format is the reason why a Motorola radio may cause a "squelch crash" in non-Motorola radios, and vice versa.

On the Advanced tab of the Conventional Personality page in CPS R06.02.03, there is now a box labeled, "Non-Standard Reverse Burst." Its default is unchecked. When this box is checked, both the encoding and decoding of the CTCSS Reverse Burst will be in a format that is compatible with non-Motorola radios. Each personality may be individually programmed for either a Motorola or a non-Motorola Reverse Burst format. This feature will be very valuable for many public safety agencies where, for example, the police may have a Motorola repeater and the fire department may have a Kenwood repeater; now, just one radio will mute quietly on both systems.