FCC ID: P27LC4RT1 Ninja LTE Module

Ver 1.6a CONFIDENTIAL Ninja LTE mini PCIe Module LC4R-T User Guide Version 1.6a This document contains information of a proprietary nature. ALL INFORMATION CONTAINED HEREIN SHALL BE KEPT IN STRICT CONFIDENTIAL. None of this information shall be divulged to persons other than SerComm employees authorized by the nature of their duties to receive information, or individuals and organizations authorized by SerComm in accordance with existing policy regarding release of company information. SerComm Corp. 8F, No. 3-1, YuanQu St., Nan-Kang Taipei 115, Taiwan, R.O.C. CONFIDENTIAL Change List Revision Date 1.0 1.1 1.2 1.3 1.4 1.5 1.6a 2015/10/14 2015/10/14 2015/10/21 2015/10/23 2015/11/23 2016/4/1 2016/6/6 Author Alex Tu Alex Tu Alex Tu Alex Tu Alex Tu Alex Tu Alex Tu Change descriptions Initial release Add CDD ON/OFF Add NAS enable Firmware upgrade Replace 0,0,0 with null after APNNAME command Add more AT commands Upgrade content update Add FCC statement in AT+CGDCONT 2 CONFIDENTIAL Table of Contents Change List ................................................................................................................................................................................... 2 Table of Contents .......................................................................................................................................................................... 3 1 Product Overview ....................................................................................................................................................................... 7 1.1 Introduction ......................................................................................................................................................................... 7 1.2 System Structure ................................................................................................................................................................ 7 1.3 Network structure ................................................................................................................................................................ 8 1.4 Federal Communication Commission Interference Statement ......................................................................................... 10 Radiation Exposure Statement: .................................................................................................................................................. 10 2 DM mode.................................................................................................................................................................................. 12 2.1 Read Band Scan List ........................................................................................................................................................ 12 2.2 Write Band Scan List ........................................................................................................................................................ 12 2.3 Update Non-Volatile .......................................................................................................................................................... 12 2.4 Configure PCI Black List ................................................................................................................................................... 12 2.5 Show PCI Black List .......................................................................................................................................................... 13 3 UCFG commands .................................................................................................................................................................... 14 3.1 Connection Manager Selection ......................................................................................................................................... 14 3.2 PLMN Search Type ........................................................................................................................................................... 14 3.3 Set AutoCM Mode ............................................................................................................................................................. 14 3.4 Set ATCM Mode ............................................................................................................................................................... 15 3.5 USB Ethernet Interface Enable ......................................................................................................................................... 15 3.6 USB Ethernet Interface Disable ........................................................................................................................................ 15 3.7 USB Ethernet Interface Mode ........................................................................................................................................... 15 3.8 List of PLMN Search Type ................................................................................................................................................ 15 4 AT Commands ......................................................................................................................................................................... 16 4.1 Request information commands ....................................................................................................................................... 16 4.1.1 AT+CGMI Request manufacture identification ........................................................................................................... 16 4.1.2 AT+CGMM Request model identification ............................................................................................................... 16 4.1.3 AT+CGMR Request revision identification ................................................................................................................. 16 4.1.4 AT+CGSN Request product serial number identification ........................................................................................... 16 4.1.5 AT+CSCS Request TE character set ......................................................................................................................... 16 4.1.6 AT+CIMI Request international mobile subscriber identity ........................................................................................ 17 4.2 Network service related commands .................................................................................................................................. 18 4.2.1 AT+COPS PLMN selection ........................................................................................................................................ 18 3 CONFIDENTIAL 4.2.2 AT+CLCK Facility lock ................................................................................................................................................ 18 4.2.1 AT+CPWD Change password .................................................................................................................................... 19 4.2.2 AT+CPOL Preferred PLMN list ................................................................................................................................... 19 4.2.3 AT+CPLS Selection of preferred PLMN list ............................................................................................................... 21 4.3 Mobile Termination control and status commands ........................................................................................................... 21 4.3.1 AT+CPAS Phone activity status ................................................................................................................................. 21 4.3.2 AT+CFUN Set phone functionality ............................................................................................................................. 22 4.3.3 AT+CPIN Enter PIN .................................................................................................................................................... 22 4.3.4 AT+CPUK Unblock PIN2 ............................................................................................................................................ 23 4.3.5 AT+CSQ Signal Quality .............................................................................................................................................. 23 4.3.6 AT+CCLK Clock ......................................................................................................................................................... 24 4.3.7 AT+CSIM Generic SIM access ................................................................................................................................... 24 4.3.8 AT+CRSM Restricted SIM access ............................................................................................................................. 25 4.3.9 AT+CLAC List all available AT commands ................................................................................................................ 26 4.3.10 AT+CPINC PIN remaining attempt number ............................................................................................................. 26 4.3.11 AT+CPINR Remaining PIN retries ........................................................................................................................... 27 4.4 Commands for packet Domain ......................................................................................................................................... 27 4.4.1 AT+CGDCONT Define PDP (Packet Data Protocol) Context .................................................................................... 27 4.4.2 AT+CGDSCONT Define Secondary PDP Context ..................................................................................................... 29 4.4.3 AT+CGTFT Traffic Flow Template ............................................................................................................................ 30 4.4.4 AT+CGATT PS attach or detach ................................................................................................................................ 32 4.4.5 AT+CGACT PDP Context Activate or Deactivate ..................................................................................................... 33 4.4.6 AT+CGCMOD PDP Context Modify .............................................................................................................................. 33 4.4.7 AT+CGDATA Enter data rate .................................................................................................................................... 33 4.4.8 AT+CGPADDR Show PDP (IP) address .................................................................................................................... 34 4.4.9 AT+CGEREP Packet Domain event reporting ........................................................................................................... 34 4.4.10 AT+CEREG EPS network registration status .......................................................................................................... 35 4.4.11 AT+CGCONTRDP PDP Context Read Dynamic Parameters ................................................................................ 36 4.4.12 AT+CGSCONTRDP Secondary PDP Context Read Dynamic Parameters............................................................ 37 4.4.13 AT+CGTFTRDP Traffic Flow Template Read Dynamic parameters ....................................................................... 37 4.4.14 AT+CGEQOS Define EPS Quality of Service .......................................................................................................... 39 4.4.15 AT+CGEQOSRDP EPS Quality of Service Read Dynamic Parameters .................................................................... 40 4.5 SMS Commands ............................................................................................................................................................... 41 4.5.1 AT+CSMS ...................................................................................................................................................................... 41 4.5.2 AT+CPMS ...................................................................................................................................................................... 41 4.5.3 AT+CMGF ...................................................................................................................................................................... 41 4.5.4 AT+CSCA ...................................................................................................................................................................... 41 4.5.5 AT+CSMP ...................................................................................................................................................................... 42 4 CONFIDENTIAL 4.5.6 AT+CMGL ...................................................................................................................................................................... 42 4.5.7 AT+CMGR ..................................................................................................................................................................... 44 4.5.8 AT+CMGS ...................................................................................................................................................................... 44 4.5.9 AT+CMSS ...................................................................................................................................................................... 45 4.5.10 AT+CMGW ................................................................................................................................................................... 45 4.5.11 AT+CMGD ................................................................................................................................................................... 45 4.5.12 AT+CMGC ................................................................................................................................................................... 46 5 Other commands ..................................................................................................................................................................... 47 5.1 CDD .................................................................................................................................................................................. 47 5.1.1 CDD ON (2 Tx) .............................................................................................................................................................. 47 5.1.2 CDD OFF (1 Tx) ............................................................................................................................................................. 47 5.2 Q Log Message ................................................................................................................................................................. 48 5.2.1 PERF: CPU Usage Profile ............................................................................................................................................. 48 5.2.2 FRAME: LTE Radio Frame Information ......................................................................................................................... 49 5.2.3 RF: RF Metric ................................................................................................................................................................. 49 5.2.4 CHAN: Channel Information .......................................................................................................................................... 50 5.2.5 MEAS: Measurement Result of a Serving Cell .............................................................................................................. 51 5.2.6 NMEAS: Measurement Result of a Neighbor Cell ......................................................................................................... 52 5.2.7 L1D: PHY DL statistics ................................................................................................................................................... 52 5.2.8 L1U: PHY UL Statistics .................................................................................................................................................. 55 5.2.9 MCS: DL/UL MCS statistics ........................................................................................................................................... 56 5.2.10 CSI: Channel State Information ................................................................................................................................... 57 5.2.11 TP: Throughput Statistics ............................................................................................................................................ 58 5.2.12 MAC ............................................................................................................................................................................. 58 5.2.13 RLC .............................................................................................................................................................................. 58 5.2.14 DP: Data-path statistics ............................................................................................................................................... 59 5.2.15 CIP: Cipher Integrity Statistics ..................................................................................................................................... 59 5.3 NAS Protocol Binary Decode ............................................................................................................................................ 60 5.3.1 Install decoder ................................................................................................................................................................ 60 5.3.2 Copy NAS Data .............................................................................................................................................................. 60 5.3.3 Paste to Decoder ........................................................................................................................................................... 60 6 Network Connection Examples ................................................................................................................................................ 61 6.1 Auto connection (Three bands) ........................................................................................................................................ 61 6.2 Auto connection (One band, B41 for example) ................................................................................................................ 61 6.3 Manual Connection (Three bands) ................................................................................................................................... 61 6.4 Manual Connection (One band only) ................................................................................................................................ 62 6.5 Disconnect ........................................................................................................................................................................ 62 5 CONFIDENTIAL 6.6 Get IP Address .................................................................................................................................................................. 62 7 FW Upgrade ............................................................................................................................................................................. 63 7.1 Using JIG board or CPE board ......................................................................................................................................... 63 6 CONFIDENTIAL 1 Product Overview 1.1 Introduction LC4R module uses GCT GDM7243Q chipset which is a wireless LTE FDD/TDD solution. The chipset inside the module owns a dual core CPU. One of CPU (ARM1) is designed to run LTE modem job; the other CPU (ARM0) is designed for router or other application. In order to get full control, GCT designs three kinds of command sets.

AT commands : 3GPP standard compatible commands to control network connection

DM commands : GCT proprietary commands for calibration and NVM configuration

UCFG commands : GCT proprietary application that manages LTE NVM (Non-Volatile Memory) block used as command based interface at GDM7243 Linux kernel environment. We will use them for different purposes. 1.2 System Structure Figure 1: Device Application for CPE From above diagram, there is an UCM (Unify Connection Manager) application running in ARM0 for connnection function. To simply dial process, using it is good suggestion, and AT commands are required. If more specific dial requirement required, DM/UCFG commands are needed. 7 CONFIDENTIAL 1.3 Network structure GDM7243M network block diagram LC4R chipset, GDM7243Q, doesnt have WiMAX function. MII ETH is not used either due to mini PCIe form factor, so usb0 is the only interface for network communication. When NAT is enabled, notebook/PC will get IP from DHCP server on br0 interface, it will be like 192.168.0.10. br0 IP is 192.168.0.1. ltepdn0 IP can be retrieved by AT command or DM command Host Interface. LC4R uses USB 2.0 for data communication. USB interface need to be enabled and usb mode need to be configured for different condition.

Connect to test board and Windows PC Auto or RNDIS mode

Connect to Linux OS CDC-EEM or CDC-ECM mode ACM port is a virtual port on USB for AT command access only. We suggested using this interface for AT command because there is no console dump data which mixes with AT command response. Device can be found at /dev/ttyACM0. 8 CONFIDENTIAL Modem control and monitor are done by UART which is defined in reserved pin 17 & 19 of mini PCIe interface. UART0_TXD and UART0_RXD voltage is 1.8V. Default baud rate is 921600/n/8/1. If CPE board baud rate cannot support such high bit rate, reducing baud rate is doable from UART at boot loader mode or by pre-configuration. To update UART port baudrate, go to boot loader (reboot and press enter key during booting), and follow the commands to update new value. Reboot is still required to take new baudrate working. 9 CONFIDENTIAL 1.4 Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna.

Connect the equipment into an outlet on a circuit different from that Increase the separation between the equipment and receiver. to which the receiver is connected.

Consult the dealer or an experienced radio/TV technician for help. FCC Caution:

Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment.

This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. users, and Radiation Exposure Statement:

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 21cm between the radiator & your body. This device is intended only for OEM integrators under the following conditions:

1) The antenna must be installed such that 21 cm is maintained between the antenna and The transmitter module may not be co-located with any other transmitter or antenna. 2) As long as 2 conditions above are met, further transmitter test will not be required. However, the OEM integrator is still responsible for testing their end-product for any additional compliance requirements required with this module installed IMPORTANT NOTE: In the event that these conditions can not be met (for example certain laptop configurations or co-

location with another transmitter), then the FCC authorization is no longer considered valid and the FCC ID can not be used on the final product. In these circumstances, the OEM integrator will be responsible for re-evaluating the end product (including the transmitter) and obtaining a separate FCC authorization. End Product Labeling This transmitter module is authorized only for use in device where the antenna may be installed such that 21 cm may be maintained between the antenna and users. The final end product must be labeled in a visible area with the following: Contains FCC ID: P27LC4RT1. The grantee's FCC ID can be used only when all FCC compliance requirements are met. Manual Information To the End User 10 The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF module in the users manual of the end product which integrates this module. The end user manual shall include all required regulatory information/warning as show in this manual. CONFIDENTIAL 11 CONFIDENTIAL 2 DM mode When system boots up, DM> prompt will be seen, then DM mode is active. Some of commands will be introduced in the following section. 2.1 Read Band Scan List Command nv bcfgr <cmd=49> <port=0>

Example: nv bcfgr 49 0 2.2 Write Band Scan List Response 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 OK Command nv bcfgw <cmd=49> <port=0> <band=41 25 26>

Example: nv bcfgw 49 0 41 25 26 Response OK 2.3 Update Non-Volatile Command nv bcfgsv <cmd=1>

Example: nv bcfgsv 1 2.4 Configure PCI Black List Response OK This command sets cell black list. Command rrc dm cell block [[<earfcn> <pci>]]

rrc dm cell block < 'a' or 'd'> [[<earfcn> <start pci> <end pci>]]

'a' : add a cell to the list

'd' : delete a cell from the list start pci : low PCI of the range end pci : high PCI of the range Notice: total 48 records Example: rrc dm cell block a 39650 0 100 rrc dm cell block d 39650 0 100 12 Response CONFIDENTIAL 2.5 Show PCI Black List Command rrc dm cell block ?

Cell Black List : 2 (use SIB9:0)

>> earfcn: 39950, pci: 0 ~ 100

>> earfcn: 38950, pci: 0 ~ 100 Response 13 CONFIDENTIAL 3 UCFG commands UCFG application needs to be run at Linux kernel. To go to Linux shell, type shell from DM>, Type exit to return DM> mode from Llinux shell mode 3.1 Connection Manager Selection Command ucfg set config wan lte vendor <value>

<value> :

0 None 1 lteautocm 3.2 PLMN Search Type Command ucfg set config wan lte plmn_search_type <value>

<value> :

0 PLMN Search 1 PLMN Search with band 2 PLMN Extension Search 3.3 Set AutoCM Mode Response vendor=<value>

Response vendor=<value>

To set lteautocm operation mode. If manual connection is designed, manual mode of lteaucm is used Command ucfg set config wan lte autocm manual <value>

<value> :

0 Auto 1 Manual Response vendor=<value>

14 CONFIDENTIAL 3.4 Set ATCM Mode To set atcm mode about PDN connect Command ucfg set config wan lte atcm use_autocm_req <value>

<value> :

0 By itself 1 Request to lteautocm 3.5 USB Ethernet Interface Enable Command ucfg set config lan usbeth ENABLE 1 3.6 USB Ethernet Interface Disable Command ucfg set config lan usbeth ENABLE 0 3.7 USB Ethernet Interface Mode Command ucfg set config lan usbeth mode <value>

<value> :

0 Auto Detect (Default) 1 RNDIS 2 CDC-EEM 3 CDC-ECM 3.8 List of PLMN Search Type Response vendor=<value>

Response ENABLE=1 Response ENABLE=0 Response mode=<value>

Response Command ucfg set plmn search_list <[type]/[number]/[value]... [type]/[number]/[value]> mode=0

[type] : the type of PLMN Search 1 MRU Search 2 Earfcn Search 3 Band Search 4 Sarfcn Range Search

[number] : the count of each PLMN Search type, Max of number is 5 While type=1, means The count of MRU Search While type=2, means The number of earfcn While type=3, means The number of Band While type=4, means The number of Earfcn range

[value] : value of each PLMN Search type 1 N/A 2 /earfcn_1/earfcn_2/...../earfcn_[number]

3 /band_1/band_2..../band_[number]

4 /start_earfcn_1/end_earfcn1/...../start_earfcn_[number]/end_earfcn_[number]

15 CONFIDENTIAL 4 AT Commands AT commands can be accessed from UART port and ACM port. 4.1 Request information commands 4.1.1 AT+CGMI Request manufacture identification This command gets the manufacture identification Command

+CGMI Response

<manufacture>

+CME ERROR: <err>

+CGMI=?

4.1.2 AT+CGMM Request model identification Value GCT Value GDM7243R0 This command gets the model identification Command

+CGMM

+CGMM=?

Response

<model>

+CME ERROR: <err>

- <model>: The value will be updated to GDM7243Q in next FW release. 4.1.3 AT+CGMR Request revision identification This command gets the revision identification Command

+CGMR

+CGMR=?

Response

<revision>

+CME ERROR: <err>

Value FW_VER: 0.2.65.1 4.1.4 AT+CGSN Request product serial number identification This command gets the serial number identification Command

+CGSN Response

<sn>

4.1.5 AT+CSCS Request TE character set Command

+CSCS=[<chset>]

+CSCS?

+CSCS=?

Response

+CSCS:<chset>

+CSCS: (list of supported <chset>s) 16 Value IMEI Value CONFIDENTIAL 4.1.6 AT+CIMI Request international mobile subscriber identity Command

+CIMI

+CIMI=?

Response

<IMSI>

+CME ERROR: <err>

Value

- <IMSI>: Interational Mobile Subscriber Identity (string without double quote) 17 CONFIDENTIAL 4.2 Network service related commands 4.2.1 AT+COPS PLMN selection Forces an attemp to select and register the GSM/UMTS network operator Command

+COPS=?

Possible Response

+COPS: ([list of supported<stat> ,long alphanumeric

<oper> ,short alphanumeric <oper> ,numeric

<oper>[,<Act>] )s][,,(list of supported<mode> s),(list of supported <format> s)]

+CME ERROR:<err>

+COPS: <mode>[,<format>,<oper>[,<Act>]]

- <stat>: Availability of operator

+COPS?

+COPS=[<mode>[,format>[,<oper>]]]

0 unknown 1 available 2 current 3 forbidden

- <oper>: Shows the operator identity in the format set by <format>

- <mode>: Registration mode 0 automatic (<oper> field is ignored) 1 manual (<oper> field shall be present, and <AcT> optionally) 2 deregister from network 3 set only <format> (for read command AT+COPS?), do not attempt registration / de-

registration (<oper> field is ignored); this value is not applicable in read command response 4 manual/automatic (<oper> field shall be present); if manual selection fails, automatic mode<mode> =0) is entered 5 manual (use plmn extension list)

- <format>: Format of <oper> reports 0 long format alphanumeric <oper>

1 short format alphanumeric <oper>

2 numeric <oper>

4.2.2 AT+CLCK Facility lock 18 CONFIDENTIAL 4.2.1 AT+CPWD Change password 4.2.2 AT+CPOL Preferred PLMN list 19 CONFIDENTIAL 20 CONFIDENTIAL 4.2.3 AT+CPLS Selection of preferred PLMN list 4.3 Mobile Termination control and status commands 4.3.1 AT+CPAS Phone activity status 21 CONFIDENTIAL 4.3.2 AT+CFUN Set phone functionality 4.3.3 AT+CPIN Enter PIN 22 CONFIDENTIAL 4.3.4 AT+CPUK Unblock PIN2 4.3.5 AT+CSQ Signal Quality 23 CONFIDENTIAL 4.3.6 AT+CCLK Clock 4.3.7 AT+CSIM Generic SIM access 24 CONFIDENTIAL 4.3.8 AT+CRSM Restricted SIM access 25 CONFIDENTIAL 4.3.9 AT+CLAC List all available AT commands 4.3.10 AT+CPINC PIN remaining attempt number 26 CONFIDENTIAL 4.3.11 AT+CPINR Remaining PIN retries 4.4 Commands for packet Domain 4.4.1 AT+CGDCONT Define PDP (Packet Data Protocol) Context Specifies PDP context parameter values for a PDP context identified by the (local) context identification parameter, <cid>.

- [set command]

: specifies PDP context parameter values for a PDP context identified by the (local) context identification parameter, <cid>.

: a special form of the set command, +CGDCONT=<cid> causes the values for context number <cid> to become undefined.

- [read command]

- [test command]

: returns the current settings for each defined context.

: returns values supported as a compound value. Command

+CGDCONT=[<cid>[,<PDP_type>[,<APN>[,

<PD P_addr>[,<d_comp>[,<h_comp>[,<IPv4Addr A lloc>[,<emergency indication>[,<PCSCF_ discovery>[,<IM_CN_Signalling_Flag _Ind>]]]]]]]]]]

+CGDCONT?

Response OK ERROR

+CGDCONT: <cid>,<PDP_type>,<APN>,<PDP_ad dr>,<d_comp>,<h_comp>[,<IPv4AddrAlloc>[,<emerg 27 CONFIDENTIAL

+CGDCONT=?

ency indication>[,<PCSCF_ discovery>[,<IM_CN_Signalling_Flag_ Ind>]]]][<CR><LF>+CGDCONT:

<cid>,<PDP_type>,<APN>,<PDP_addr>,<d_comp>,

<h_comp>[,<IPv4Add rAlloc>[,<emergency indication>[,<PCSCF_ discovery>[,<IM_CN_Signalling_Flag_ Ind>]]]][...]]

+CGDCONT: (range of supported

<cid>s),<PDP_type>,,,(list of supported

<d_comp>s),(list of supported <h_comp>s),(list of supported <IPv4AddrAlloc>s),(list of supported

<emergency indication>s),(list of supported <PCSCF_ discovery>s),(list of supported

<IM_CN_Signalling_Flag_Ind>s)

[<CR><LF>+CGDCONT: (range of supported

<cid>s),<PDP_type>,,,(list of supported

<d_comp>s),(list of supported <h_comp>s),(list of supported <IPv4AddrAlloc>s),(list of supported

<emergency indication>s),(list of supported <PCSCF_ discovery>s),(list of supported

<IM_CN_Signalling_Flag_Ind>s)

[...]]

- <cid>: numeric; specifies a particular PDP context definition.

- <PDP_type>: string; specifies the type of packet data protocol X.25 : ITU-T/CCITT X.25 layer 3 (Obsolete) IP : Internet Protocol IPV6 : Internet Protocol, version 6 IPV4V6 : Virtual <PDP_type> introduced to handle dual IP stack UE capability. OSPIH : Internet Hosted Octect Stream Protocol (Obsolete) PPP : Point to Point Protocol (IETF STD 51)

- <APN>: string; a logical name that is used to select the GGSN or the external packet data network

- <PDP_addr> for EPS, this field is omitted.

- <d_comp>: numeric; controls PDP data compression. 0 - off (default if value is omitted) 1 - on (manufacturer preferred compression) 2 - V.42bis 3 - V.44 Other values are reserved.

- <h_comp>: numeric; controls PDP header compression. 0 - off (default if value is omitted) 1 on (manufacturer preferred compression) 2 - RFC1144 (applicable for SNDCP only) 3 - RFC2507 4 - RFC3095 (applicable for PDCP only) Other values are reserved.

- <IPv4AddrAlloc>: numeric; controls how the MT/TA requests to get the IPv4 address information 0 - IPv4 Address Allocation through NAS Signaling (default if omitted) 1 - IPv4 Address Allocated through DHCP

- <emergency indication>: a numeric parameter used to indicate whether the PDP context is for emergency bearer services or not. 0 PDP context is not for emergency bearer services

- <P-CSCF_discovery>: a numeric parameter influences how the MT/TA requests to get the P-CSCF address, see 3GPP TS 24.229 [89] annex B and annex L. 0 Preference of P-CSCF address discovery not influenced by +CGDCONT 1 Preference of P-CSCF address discovery through NAS Signalling 28 CONFIDENTIAL 2 Preference of P-CSCF address discovery through DHCP

- <IM_CN_Signalling_Flag_Ind>: a numeric parameter used to indicate to the network whether the PDP context is for IM CN subsystem-related signalling only or not. 0 UE indicates that the PDP context is not for IM CN subsystem-related signalling only 4.4.2 AT+CGDSCONT Define Secondary PDP Context 29 CONFIDENTIAL 4.4.3 AT+CGTFT Traffic Flow Template 30 CONFIDENTIAL 31 CONFIDENTIAL 4.4.4 AT+CGATT PS attach or detach 32 CONFIDENTIAL 4.4.5 AT+CGACT PDP Context Activate or Deactivate Activate or deactivate the specified PDP context(s).

- [execution command]

: activate or deactivate the specified PDP context(s). <cid>: is a numeric parameter which specifies a particular PDP context definition.

- [read command]

- [test command]

: returns the current Packet Domain service state.

: requests information on the supported PDP context activation states Command

+CGACT=<state>,<cid>

+CGACT?

+CGACT=?

Response OK ERROR

+CGACT: <cid>, <state> [<CR><LF>+CGACT:

<cid>,

<state>[]]

+CGACT: (list of supported <state>s)

- <state>: indicates the state of PS attachment 0 deactivated 1 activated other values are reserved and will result in an ERROR response to the execution command

- <cid>: numeric; specifies a particular PDP context definition. 4.4.6 AT+CGCMOD PDP Context Modify 4.4.7 AT+CGDATA Enter data rate 33 CONFIDENTIAL 4.4.8 AT+CGPADDR Show PDP (IP) address 4.4.9 AT+CGEREP Packet Domain event reporting 34 CONFIDENTIAL 4.4.10 AT+CEREG EPS network registration status Reports changes in network registration

- [set command]

: controls the presentation of an unsolicited result code when there is a change in the MT's EPS network registration status.

- [read command]

: returns the status of result code presentation and an integer <stat> which shows whether the network has currently indicated the registration of the MT

- [test command]

: list of supported <n>s Command

+CEREG=<n>

+CEREG?

+CEREG=?

Response OK ERROR

+CEREG: <n>,<stat>[,<lac>,<rac>,<ci>[,<AcT>]]

+CME ERROR: <err>

+CEREG: (list of supported <n>s)

-<n>: numeric;

0 disable network registration unsolicited result code

1 enable network registration unsolicited result code +CEREG: <stat>

2 enable network registration and location information unsolicited result code +CEREG:

<stat>[,<lac>,<rac>,<ci>[,<AcT>]]

-<stat>: numeric; EPS registration status

0 not registered, MT is not currently searching an operator to register to

1 registered, home network

2 not registered, but MT is currently trying to attach or searching an operator to register to

3 registration denied

4 unknown

5 registered, roaming

-<lac>: string; two byte location area code or tracking area code in hexadecimal format (e.g. "00C3" equals 195 in decimal).

-<rac>: string; one byte routing area code in hexadecimal format (e.g. "1C" equals 28 in decimal). If no routing area code is applicable, "00" (equals 00 in decimal) is provided.

-<ci>: string; four byte GERAN/UTRAN/E-UTRAN cell ID in hexadecimal format.

-<AcT>: numeric; access technology of the registered network 35 CONFIDENTIAL

0 GSM

1 GSM Compact

2 UTRAN

3 GSM w/EGPRS

4 UTRAN w/HSDPA

5 UTRAN w/HSUPA

6 UTRAN w/HSDPA and HSUPA

7 E-UTRAN 4.4.11 AT+CGCONTRDP PDP Context Read Dynamic Parameters

- [execution command]

: returns the relevant information <bearer_id>, <apn>, <ip_addr>, <subnet_mask>, <gw_addr>,

<DNS_prim_addr>, <DNS_sec_addr>, <P-CSCF_prim_addr> and <PCSCF_sec_addr> for a non secondary PDP Context established by the network with the primary context identifier <p_cid>

: If the parameter <p_cid> is omitted, the relevant information for all established PDP contexts are returned

- [test command]

: returns a list of <p_cid>s associated with active contexts Command

+CGCONTRDP=[<p_cid>]

+CGCONTRDP=?

Response

+CGCONTRDP: <p_cid>, <bearer_id>, <apn>[,

<ip_addr>, <subnet_mask>[, <gw_addr>[,

<DNS_prim_addr>[, <DNS_sec_addr>[,

<PCSCF_ prim_addr>[, <P-CSCF_sec_addr>]]]]]]

[<CR><LF>+CGCONTRDP: <p_cid>,

<bearer_id>,

<apn>[, <ip_addr>, <subnet_mask>[,

<gw_addr>[,

<DNS_prim_addr>[, <DNS_sec_addr>[,

<PCSCF_ prim_addr>[, <P-CSCF_sec_addr>]]]]]]

[]]

+CGCONTRDP: (list of <p_cid>s associated

- <p_cid>: numeric; specifies a particular non secondary PDP context definition. The parameter is local to the TE-MT interface and is used in other PDP context-related commands.

- <bearer_id>: numeric; identifies the bearer, EPS Bearer in EPS and NSAPI in UMTS/GPRS.

- <APN>: string; a logical name that was used to select the GGSN or the external packet data network.

- <ip_addr>: string; shows the IP Address of the MT. The string is given as dot-separated numeric (0-255) parameters on the form:

"a1.a2.a3.a4" for IPv4 or

"a1.a2.a3.a4.a5.a6.a7.a8", for IPv6. If the MT has dual stack capabilities the string shows first the dot separated IPv4 Address followed by the dot separated IPv6 Global Prefix Address. The IPv4 address and the IPv6 address parameters are separated by space:

"a1.a2.a3.a4 a1:a2:a3:a4:a5:a6:a7:a8"

- <subnet_mask>: string; shows the subnet mask for the IP Address of the MT. The string is given as dot-separated numeric (0-255) parameters. If the MT has dual stack capabilities the string shows the dot separated IPV4 subnet mask followed by the dot separated IPV6 subnet mask. The subnet masks are separated by space.

- <gw_addr>: string; shows the Gateway Address of the MT. The string is given as dot-separated numeric (0-255) parameters If the MT has dual stack capabilities the parameter shows first the dot separated IPV4 Gateway address followed by the dot separated IPV6 Gateway Address. The gateway addresses are separated by space. 36 CONFIDENTIAL

- <DNS_prim_addr>: string; shows the IP Address of the primary DNS Server. If the MT has dual stack capabilities the parameter shows first the dot separated IPV4 Address, followed by the dot separated IPV6 Address of DNS Server.

- <DNS_sec_addr>: string; shows the IP address of the secondary DNS Server. If the MT has dual stack capabilities the parameter shows first the dot separated IPV4 Address, followed by the dot separated IPV6 Address of DNS Server.

- <P_CSCF_prim_addr>: string; shows the IP Address of the primary P-CSCF Server. If the MT has dual stack capabilities the parameter shows first the dot separated IPV4 Address, followed by the dot separated IPV6 primary Address of P-CSCF Server.

- <P_CSCF_sec_addr>: string; shows the IP Address of the secondary P-CSCF Server. If the MT has dual stack capabilities the parameter shows first the dot separated IPV4 Address, followed by the dot separated IPV6 Address of P-CSCF Server. 4.4.12 AT+CGSCONTRDP Secondary PDP Context Read Dynamic Parameters 4.4.13 AT+CGTFTRDP Traffic Flow Template Read Dynamic parameters 37 CONFIDENTIAL 38 CONFIDENTIAL 4.4.14 AT+CGEQOS Define EPS Quality of Service 39 CONFIDENTIAL 4.4.15 AT+CGEQOSRDP EPS Quality of Service Read Dynamic Parameters 40 CONFIDENTIAL 4.5 SMS Commands 4.5.1 AT+CSMS 4.5.2 AT+CPMS 4.5.3 AT+CMGF 4.5.4 AT+CSCA 41 CONFIDENTIAL 4.5.5 AT+CSMP 4.5.6 AT+CMGL 42 CONFIDENTIAL 43 CONFIDENTIAL 4.5.7 AT+CMGR 4.5.8 AT+CMGS 44 CONFIDENTIAL 4.5.9 AT+CMSS 4.5.10 AT+CMGW 4.5.11 AT+CMGD 45 CONFIDENTIAL 4.5.12 AT+CMGC 46 CONFIDENTIAL 5 Other commands 5.1 CDD 5.1.1 CDD ON (2 Tx) 1. Run the command in shell mode, mount -o remount,rw /

2.Edit script file, vi etc/sysconfig/script/lte_init_script.sh 3.Update mode, chmod +x /etc/sysconfig/script/lte_init_script.sh 4. write "l1u t cdd 1 4" , save file, and reboot 5.1.2 CDD OFF (1 Tx) Update etc/sysconfig/script/lte_init_script.sh with "l1u t cdd 0 4" and save file, reboot. 47 CONFIDENTIAL 5.2 Q Log Message There are three text-DM modes when q log command uses, DM>q 0/1/2. Interactive mode (q 0) Logging is disabled but command line interface is enabled.

Logging mode (q 1) Logging is enabled but command line interface is disabled.

Verbose mode (q 2) Both logging and CLI are enabled. To enable NAS protocol dump, type DM>dbg nas* -1 before q log command. 5.2.1 PERF: CPU Usage Profile Example: PERF : C(88.4/0.9/7.4/3.3) I(4101) M(H:10.0/2MB P:0.4/0.5/0.1/0.1/2MB) 48 CONFIDENTIAL 5.2.2 FRAME: LTE Radio Frame Information Example: FRAME: CONNECTED CAT5 TDD(2:7,N) Pos=(38245,38247,38247,38247) STI=836 5.2.3 RF: RF Metric 49 CONFIDENTIAL Example: RF : E(39850,39850) B41 F25160 AFC(R,0:-182:34,-160,H,0x409) AGC(N,0x53:50:55,0x5f:5a:61,0x60:5d:61,0x6b:66:6d) ACI=0 5.2.4 CHAN: Channel Information 50 CONFIDENTIAL Example: CHAN : 20MHz #A2 TM2 PCI=501 DS(S,96,0,0,0/0.3,0.3) ACE(I) FIB(-1:0:0:-1) CS(17:17:17:16) 5.2.5 MEAS: Measurement Result of a Serving Cell Example: MEAS : CINR(32.1,33.6) RSRP(-75.2,-81.3) RSSI(-49.3,-55.5) RSRQ(-5.9,-5.8) CINR(33.9,32.2) RSRP(-80.2,-87.3) RSSI(-54.3,-61.5) RSRQ(-5.9,-5.8) 51 CONFIDENTIAL 5.2.6 NMEAS: Measurement Result of a Neighbor Cell Example: NMEAS: {39850,501,-75.0,-6.0}

5.2.7 L1D: PHY DL statistics 52 CONFIDENTIAL 53 CONFIDENTIAL Example: L1D : DCI0=3 DCI={1A(0/3)}{} BLER(0/3,0/0) Dup(0,0) HI(0/4) CFI(796:3:1:0) TB(0,0) TP=1K Layer-Map={1C1L=3,1C2L=0,2C2L=0,2C3L=0,2C4L=0}

54 CONFIDENTIAL 5.2.8 L1U: PHY UL Statistics 55 CONFIDENTIAL Example: L1U : PUSCH(4)={2(0/3),7(0/1)} PRACH=1 ACK(0/3,0/0) DTX(9,12) PWR(-54.0,-23.3,-48.0,-,-28.1) 5.2.9 MCS: DL/UL MCS statistics Example: MCS : DL={0(0/2),5(0/1)} UL={8(0/4)} PMCH={}

56 CONFIDENTIAL 5.2.10 CSI: Channel State Information Example: CSI : RM(0,10,0,0) A30(0/0/0) P10(10/10/10) RI(0,0,0,0) PMI={}

CQI={15(10)}{}

57 CONFIDENTIAL 5.2.11 TP: Throughput Statistics Example: TP : PHY(1K:1K) MAC(1K:1K) RLC(84:79) PDCP(75:73) DIM() IPC(0:0) 5.2.12 MAC Example: MAC : [S] PDU=D{4},U{3}, CE=D{CR1,PAD(0/3)},U{PHR2,BSR(0/3/1),SR(0/2),PAD(0/3)}, I{0,0,0}

[S:0] PDU=D{1},U{2}

[S:1] PDU=D{2},U{3}

[R] RA{0/1}, CE{0,1}, CR{0,0,0}

5.2.13 RLC Example: RLC : [0] PDU=D{T1},U{T1}

[1] PDU=D{A1,C1},U{A0/2,C1}, I{0,0,1,0}, STATE=D{1,1},U{2,2}

58 CONFIDENTIAL 5.2.14 DP: Data-path statistics Example: DP : RLC=D0{DC0,AF0,UF0} IPC=D{F0,M0,T0},U{A0,M0,T0}

5.2.15 CIP: Cipher Integrity Statistics Example: CIP : S=0 DL(0,0) UL(0,0) DI(0,0,0) DO(0,0,0) UI(0,0,0) UO(0,0,0) B(0) 59 CONFIDENTIAL 5.3 NAS Protocol Binary Decode 5.3.1 Install decoder Install 3GPP message decoder 5.3.2 Copy NAS Data Copy NAS protocol binary string 5.3.3 Paste to Decoder 60 CONFIDENTIAL 6 Network Connection Examples 6.1 Auto connection (Three bands) Step 1 2 3 4 5 6 7 8 command DM> nv bcfgw 49 0 41 25 26 DM> nv bcfgsv 1 DM>shell

#ucfg set config wan lte vendor 1

#ucfg set config wan lte autocm manual 0

#ucfg set config wan lte atcm use_autocm_req 1

#ucfg set config wan lte apntable apn3 ENABLE 1

#ucfg set config wan lte apntable apn3 apn_name <new_APN>

9

#reboot 6.2 Auto connection (One band, B41 for example) Step 1 2 3 4 5 6 7 8 command DM> nv bcfgw 49 0 41 DM> nv bcfgsv 1 DM>shell

#ucfg set config wan lte vendor 1

#ucfg set config wan lte autocm manual 0

#ucfg set config wan lte atcm use_autocm_req 1

#ucfg set config wan lte apntable apn3 ENABLE 1

#ucfg set config wan lte apntable apn3 apn_name <new_APN>

9

#reboot 6.3 Manual Connection (Three bands) Step 1 is to configure required information Step 1 2 3 4 5 6 7 8 command DM> nv bcfgw 49 0 41 25 26 DM> nv bcfgsv 1 DM>shell

#ucfg set config wan lte vendor 0

#ucfg set config wan lte atcm use_autocm_req 0

#ucfg set config wan lte plmn_search_type 2

#ucfg set plmn search_list 3/3/41/25/26

#reboot Description Write band number into scan list Write NVRAM back to flash Enter shell mode Connection manager, lteautocm Lteautocm chooses Auto mode Request to lteautocm Enable APN3 Update correct APN, default is internet Description Write band number 41 Write NVRAM back to flash Enter shell mode Connection manager, lteautocm Lteautocm chooses Auto mode Request to lteautocm Enable APN3 Update correct APN, default is internet Description Write band number into scan list Write NVRAM back to flash Enter shell mode Connection manager, None By itself Search with extension mode Assign scan band to scan list 61 CONFIDENTIAL Step 2 is using AT commands to enable modem dial up action Step 1 DM>AT+CGDCONT=1,"IPV4V6","APNNAME","",,, command 2 3 4 DM>AT%GPDNTYPE=1,3 DM>AT+COPS=5 DM>AT+CGACT=1,1 6.4 Manual Connection (One band only) Step 1 is to configure required information Step 1 DM> nv bcfgw 49 0 41 command 2 3 4 5 6 7 8 DM> nv bcfgsv 1 DM>shell

#ucfg set config wan lte vendor 0

#ucfg set config wan lte atcm use_autocm_req 0

#ucfg set config wan lte plmn_search_type 2

#ucfg set plmn search_list 3/1/41

#reboot Step 2 is using AT commands to enable modem dial up action Step 1 DM>AT+CGDCONT=1,"IPV4V6","APNNAME","",,, command 2 3 4 DM>AT%GPDNTYPE=1,3 DM>AT+COPS=5 DM>AT+CGACT=1,1 6.5 Disconnect Description APNNAME need to change to your network internet APN name, like internet Choose APN 3 for internet Choose search extension mode Attached to network Description Write band number B41 into scan list Write NVRAM back to flash Enter shell mode Connection manager, None By itself Search with extension mode Assign scan band to scan list Description APNNAME need to change to your network internet APN name, like internet Choose APN 3 for internet Choose search extension mode Attached to network Step 1 DM>AT+CGACT=0,1 command Description Deactivate 1 PDP context 6.6 Get IP Address command Step 1 AT+CGCONTRDP=3?

Response: AT+CGCONTRDP:

3,6,"internet.lguplus.co.kr","10.118.177.89","10.0.0.166","211.40.215.140","117.111.29.4","","",0 OK Note: ipaddr:10.118.177.879, gateway:10.0.0.166, dns1:211.40.215.140, dns2:117.111.29.4 Cid=3 Description 62 CONFIDENTIAL 7 FW Upgrade 7.1 Using JIG board or CPE board If JIP board is used, GCT LTE window driver and ACM driver are required to install first. When connected PC get IP, 192.168.0.10, from JIG board USB port, GDM7243Q module GUI can be accessed by http://192.168.0.1. Click continuous the web site link to go to main page. If using CPE board, access GCT module by http://192.168.0.1 Select Firmware update from System Link and Select file from filename 1, click update button. For xxx.gz file, RAW Format shall be selected; for xxx.bin, Package Format selected instead. LTE version can be seen from LTEStatus page. 63 CONFIDENTIAL 7.2 Upgrade FW from 64M to 80M Two steps required. Step 1: Get 80M package file and follow the ways to input to module web gui. 1. Select Filename 1 :u-boot-7243q.bin 2. Select Filename 2 :uImage 3. Select Filename 3 :ramdisk.ubifs 4. Select Filename 4 :tk.gz 5. Select RAW Format, Click Update button, Then the system will move to 80M format. Step 2: Reset to default From JIG board console port:

#ucfg clean config

#ucfg clean factory

#ucfg sync 64

FCCID: P27LC4RT1 TopSide(onshieldingcover) LabelLocation

Sercomm Corporation TaipeiOffice:8F,No.31,YuanQuSt.,NanKang,Taipei115,Taiwan,R.O.C. TEL:886226553988FAX:886226553966 ConfidentialityRequest PursuanttoSections0.457and0.459oftheCommissionsRules,theApplicantherebyrequests confidentialtreatmentofinformationaccompanyingthisApplicationasoutlinedbelow:

Theabovematerialscontaintradesecretsandproprietaryinformationnotcustomarilyreleasedto thepublic.ThepublicdisclosureofthesemattersmightbeharmfultotheApplicantandprovide unjustifiedbenefitstoitscompetitors. TheApplicantunderstandsthatpursuanttoRule0.457,disclosureofthisApplicationandall accompanyingdocumentationwillnotbemadebeforethedateoftheGrantforthisapplication. Sincerelyyours, Date:20170411 FCCID:P27LC4RT1 Totheattentionof FederalCommunicationsCommission AuthorizationandEvaluationDivision Schematics BlockDiagram OperationalDescription Partlist TuneupProcedure SercommCorporation NickWu/Engineer TEL:886226553988*2556 FAX:886226553965 Email:Nick_wu@sercomm.com

Sercomm Corporation ? & & -f Ak t7 & IR 4) S ERC O/TIN Taipei Office: 8F, No.3-1, YuanQu St., NanKang, Taipei 115, Taiwan, R.O.C. TEL: 886-2-2655-3988 FAX: 886-2-2655-3966 Date: 2017-03-30 FCC ID: P27LC4RT1 To the attention of Federal Communications Commission Authorization and Evaluation Division Confidentiality Request Pursuant to Sections 0.457 and 0.459 of the commissions rules, we request short-term confidential treatment for the following information until 180 days after the Grant Date of Equipment Authorization) in order to ensure sensitive business information remains confidential until the actual marketing of the device:

External photos Test Setup photos Users manual Internal Photos Sincerely yours, Sercomm Corporation Nick Wu/ Engineer TEL: 886-2-2655-3988*2556 FAX: 886-2-2655-3965 E-mail: Nick_wu@sercomm.com

Sercomm Corporation ? & & F Akt7 F IRA

SERC C7/TIN. Taipei Office: 8F, No.3-1, YuanQu St., NanKang, Taipei 115, Taiwan, R.O.C. TEL: 886-2-2655-3988 FAX: 886-2-2655-3966 Date: 2017-03-30 FCC ID: P27LC4RT1 AUTHORIZATION LETTER To whom it may concern:

We, the undersigned, hereby authorize Amanda Wu/ Senior Specialist of Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch (BV CPS Taoyuan) of Taiwan to act on our behalf in all manners relating to FCC application for equipment authorization, including signing of all documents relating to these matters. Any and all acts carried out by Amanda Wu/ Senior Specialist of BV CPS Taoyuan on our behalf shall have the same effect as acts of our own. If you have any questions regarding the authorization, please dont hesitate to contact us. Sincerely yours, Abe. Sercomm Corporation Nick Wu/ Engineer TEL: 886-2-2655-3988*2556 FAX: 886-2-2655-3965 E-mail: Nick_wu@sercomm.com

Sercomm Corporation ? & & F Ak tt F IR 4) SERC O/TIN Taipei Office: 8F, No.3-1, YuanQu St., NanKang, Taipei 115, Taiwan, R.O.C. TEL: 886-2-2655-3988 FAX: 886-2-2655-3966 Modular Approval Request Letter March 16, 2017 Dear Application Examiner, Sercomm Corporation, LTE module, FCC ID: P27LC4RT1 would like to have your authorization as a modular approval specific to the mobile RF exposure condition. would like to have your authorization as a modular approval specific to the mobile RF exposure condition. The requirements of KDB996369 have been met and shown on the following statements. 1. The modular transmitter must have its own RF shielding. The radio portion of this module has been shielded, please see exhibition External Photo. 2. The modular transmitter must have buffered modulation/data inputs. The EUT has buffered data inputs, it is integrated in chip GCTGDM7243Q. 3. The modular transmitter must have its own power supply regulation. The part number of this regulator is GMTG5851. 4. The modular transmitter must comply with the antenna requirements of section 15.203 and 15.204(C). The EUT meets the FCC antenna requirements. The spurious emission, unique antenna connector and photo of antennas are shown in the test report. 5. The modular transmitter must be tested in a stand-alone configuration The EUT was tested in a stand-

alone configuration via a USB extender. Please see section Photographs of Test Configuration in the test report, the EUT was plugged in this extender. 6. The modular transmitter must be labeled with its own FCC ID number. Please see exhibition Label Sample for the FCC ID of this module. And also in the exhibition Users Manual, there are instructions give to the OEM on how to label the end product. 7. The modular transmitter must comply with any specific rule or operating requirements applicable to the transmitter and the manufacturer must provide adequate instructions along with the module to explain any such requirements. The EUT is compliant with all applicable FCC rules. Detail instructions for maintaining compliance are given in the Users Manual. 8. The modular transmitter must comply with any applicable RF exposure requirements. The EUT is compliant with all applicable RF exposure requirements. RF Exposure is addressed in the RF exposure exhibition. Please contact me if you have any further questions. Thanks for your attention. Best Regards, Sercomm Corporation Nick Wu/ Engineer TEL: 886-2-2655-3988*2556 FAX: 886-2-2655-3965 E-mail: Nick_wu@sercomm.com

RF Exposure Report Report No.: SA170328D10 FCC ID: P27LC4RT1 Test Model: LC4R-T Received Date: Jun. 17, 2016 Test Date: Jun. 29 ~ 30, 2016, Nov. 10, 2016 & Mar. 29 ~ 30, 2017 Issued Date: Mar. 31, 2017 Applicant: Sercomm Corp. Address: 8F, No. 3-1, YuanQu St., NanKang, Taipei 115, Taiwan, R.O.C. Issued By: Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch Lab Address: No. 47-2, 14th Ling, Chia Pau Vil., Lin Kou Dist., New Taipei City, Taiwan

(R.O.C.) This report is for your exclusive use. Any copying or replication of this report to or for any other person or entity, or use of our name or trademark, is permitted only with our prior written permission. This report sets forth our findings solely with respect to the test samples identified herein. The results set forth in this report are not indicative or representative of the quality or characteristics of the lot from which a test sample was taken or any similar or identical product unless specifically and expressly noted. Our report includes all of the tests requested by you and the results thereof based upon the information that you provided to us. You have 60 days from date of issuance of this report to notify us of any material error or omission caused by our negligence, provided, however, that such notice shall be in writing and shall specifically address the issue you wish to raise. A failure to raise such issue within the prescribed time shall constitute your unqualified acceptance of the completeness of this report, the tests conducted and the correctness of the report contents. Unless specific mention, the uncertainty of measurement has been explicitly taken into account to declare the compliance or non-compliance to the specification. The report must not be used by the client to claim product certification, approval, or endorsement by TAF or any government agencies. Report No.: SA170328D10 Page No. 1 / 6 Report Format Version: 6.1.1 Table of Contents Release Control Record ............................................................................................................................. 3 Certificate of Conformity ................................................................................................................. 4 1 RF Exposure .................................................................................................................................... 5 2 Limits For Maximum Permissible Exposure (MPE) .......................................................................... 5 2.1 2.2 MPE Calculation Formula ............................................................................................................... 5 2.3 Classification .................................................................................................................................. 5 Calculation Result Of Maximum Conducted Power ....................................................................... 6 3 Report No.: SA170328D10 Page No. 2 / 6 Report Format Version: 6.1.1 Release Control Record Issue No. SA170328D10 Description Original release. Date Issued Mar. 31, 2017 Report No.: SA170328D10 Page No. 3 / 6 Report Format Version: 6.1.1 1 Certificate of Conformity Product: Ninja LTE module Brand: Sercomm Test Model: LC4R-T Sample Status: Engineering sample Applicant: Sercomm Corp. Test Date: Jun. 29 ~ 30, 2016, Nov. 10, 2016 & Mar. 29 ~ 30, 2017 Standards: FCC Part 2 (Section 2.1091) KDB 447498 D03 IEEE C95.1 The above equipment has been tested by Taoyuan Branch, and found compliance with the requirement of the above standards. The test record, data evaluation & Equipment Under Test (EUT) configurations represented herein are true and accurate accounts of the measurements of the samples EMC characteristics under the conditions specified in this report. Bureau Veritas Consumer Products Services (H.K.) Ltd., Prepared by :

:

Approved by Celia Chen / Supervisor

, Date:

Mar. 31, 2017 Rex Lai / Assistant Manager

, Date:

Mar. 31, 2017 Report No.: SA170328D10 Page No. 4 / 6 Report Format Version: 6.1.1 2 RF Exposure 2.1 Limits For Maximum Permissible Exposure (MPE) Frequency Range

(MHz) Electric Field

(mW/cm2) Strength (V/m) Limits For General Population / Uncontrolled Exposure Magnetic Field Strength (A/m) Power Density Average Time

(minutes) 300-1500 1500-100,000 F = Frequency in MHz 2.2 MPE Calculation Formula F/1500 1.0 30 30 Pd = (Pout*G) / (4*pi*r2) where Pd = power density in mW/cm2 Pout = output power to antenna in mW G = gain of antenna in linear scale Pi = 3.1416 R = distance between observation point and center of the radiator in cm 2.3 Classification The antenna of this product, under normal use condition, is at least 21cm away from the body of the user. So, this device is classified as Mobile Device. Report No.: SA170328D10 Page No. 5 / 6 Report Format Version: 6.1.1 3 Calculation Result Of Maximum Conducted Power Frequency Band

(MHz) LTE Band 25: 1852.5MHz ~1912.5MHz Frequency Band

(MHz) LTE Band 41: 2506.8MHz ~ 2560MHz, 2628.8MHz ~ 2680MHz EIRP

(dBm) 32.23 Distance

(cm) 21 Power Density

(mW/cm2) 0.3015 Limit

(mW/cm2) 1 Max Power

(dBm) Antenna Gain

(dBi) Distance

(cm) Power Density

(mW/cm2) Limit

(mW/cm2) 26.79 10.51 21 0.9691 1 NOTE: Directional gain = 7.5dBi + 10log(2) = 10.51dBi

--- END ---

Conclusion:

The formula of calculated the MPE is:

CPD1 / LPD1 + CPD2 / LPD2 + etc. < 1 CPD = Calculation power density LPD = Limit of power density WLAN + Zigbee + LPRF + EGPRS: 824.2MHz ~ 848.8MHz + DECT

= 0.6038/1 + 0.0107/1 + 0.0020/0.602 + 0.1718/0.550 + 0.0050/1 = 0.9352 WLAN + Zigbee + LPRF + EGPRS: 1850.2MHz ~ 1909.8MHz + DECT

= 0.6038/1 + 0.0107/1 + 0.0020/0.602 + 0.1475/1 + 0.0050/1 = 0.7703 Therefore the maximum calculations of above situations are less than the 1 limit. Report No.: SA170328D10 Page No. 6 / 6 Report Format Version: 6.1.1

FCC Test Report

(Part 24) Report No.: RF170328D10 FCC ID: P27LC4RT1 Test Model: LC4R-T Received Date: Jun. 17, 2016 Test Date: Jun. 29 ~ 30, 2016 & Mar. 29, 2017 Issued Date: Mar. 31, 2017 Applicant: Sercomm Corp. Address: 8F, No. 3-1, YuanQu St., NanKang, Taipei 115, Taiwan, R.O.C. Issued By: Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch Lab Address: No. 47-2, 14th Ling, Chia Pau Vil., Lin Kou Dist., New Taipei City, Taiwan, R.O.C. This report is for your exclusive use. Any copying or replication of this report to or for any other person or entity, or use of our name or trademark, is permitted only with our prior written permission. This report sets forth our findings solely with respect to the test samples identified herein. The results set forth in this report are not indicative or representative of the quality or characteristics of the lot from which a test sample was taken or any similar or identical product unless specifically and expressly noted. Our report includes all of the tests requested by you and the results thereof based upon the information that you provided to us. You have 60 days from date of issuance of this report to notify us of any material error or omission caused by our negligence, provided, however, that such notice shall be in writing and shall specifically address the issue you wish to raise. A failure to raise such issue within the prescribed time shall constitute your unqualified acceptance of the completeness of this report, the tests conducted and the correctness of the report contents. Unless specific mention, the uncertainty of measurement has been explicitly taken into account to declare the compliance or non-compliance to the specification. The report must not be used by the client to claim product certification, approval, or endorsement by TAF or any government agencies. Report No.: RF170328D10 Reference No.: 160617D01 Page No. 1 / 36 Report Format Version: 6.1.1 Table of Contents 4 3 Release Control Record ............................................................................................................................. 3 1 Certificate of Conformity ................................................................................................................. 4 Summary of Test Results ................................................................................................................ 5 2 2.1 Measurement Uncertainty .............................................................................................................. 5 2.2 Test Site and Instruments ............................................................................................................... 6 General Information ......................................................................................................................... 8 3.1 General Description of EUT ............................................................................................................ 8 3.2 Configuration of System Under Test ............................................................................................... 9 3.2.1 Description of Support Units ........................................................................................................... 9 3.3 Test Mode Applicability and Tested Channel Detail ....................................................................... 10 3.4 EUT Operating Conditions ............................................................................................................ 10 3.5 General Description of Applied Standards..................................................................................... 10 Test Types and Results ................................................................................................................. 11 4.1 Output Power Measurement ..........................................................................................................11 4.1.1 Limits of Output Power Measurement ............................................................................................11 4.1.2 Test Procedures ............................................................................................................................11 4.1.3 Test Setup .................................................................................................................................... 12 4.1.4 Test Results.................................................................................................................................. 13 4.2 Frequency Stability Measurement ................................................................................................ 15 4.2.1 Limits of Frequency Stabiliity Measurement .................................................................................. 15 4.2.2 Test Procedure ............................................................................................................................. 15 4.2.3 Test Setup .................................................................................................................................... 15 4.2.4 Test Results.................................................................................................................................. 16 4.3 Occupied Bandwidth Measurement .............................................................................................. 17 4.3.1 Test Procedure ............................................................................................................................. 17 4.3.2 Test Setup .................................................................................................................................... 17 4.3.3 Test Result ................................................................................................................................... 17 4.4 Band Edge Measurement ............................................................................................................. 19 4.4.1 Limits of Band Edge Measurement ............................................................................................... 19 4.4.2 Test Setup .................................................................................................................................... 19 4.4.3 Test Procedures ........................................................................................................................... 19 4.4.4 Test Results.................................................................................................................................. 20 4.5 Peak To Average Ratio ................................................................................................................. 22 4.5.1 Limits of Peak To Average Ratio Measurement ............................................................................. 22 4.5.2 Test Setup .................................................................................................................................... 22 4.5.3 Test Procedures ........................................................................................................................... 22 4.5.4 Test Results.................................................................................................................................. 23 4.6 Conducted Spurious Emissions .................................................................................................... 24 4.6.1 Limits of Conducted Spurious Emissions Measurement ................................................................ 24 4.6.2 Test Setup .................................................................................................................................... 24 4.6.3 Test Procedure ............................................................................................................................. 24 4.6.4 Test Results.................................................................................................................................. 25 4.7 Radiated Emission Measurement ................................................................................................. 31 4.7.1 Limits of Radiated Emission Measurement ................................................................................... 31 4.7.2 Test Procedure ............................................................................................................................. 31 4.7.3 Deviation from Test Standard ........................................................................................................ 31 4.7.4 Test Setup .................................................................................................................................... 32 4.7.5 Test Results.................................................................................................................................. 33 5 Pictures of Test Arrangements...................................................................................................... 35 Appendix Information on the Testing Laboratories ............................................................................. 36 Report No.: RF170328D10 Reference No.: 160617D01 Page No. 2 / 36 Report Format Version: 6.1.1 Issue No. RF170328D10 Description Original release. Release Control Record Date Issued Mar. 31, 2017 Report No.: RF170328D10 Reference No.: 160617D01 Page No. 3 / 36 Report Format Version: 6.1.1 1 Certificate of Conformity Product: Ninja LTE module Brand: Sercomm Test Model: LC4R-T Sample Status: Engineering sample Applicant: Sercomm Corp. Test Date: Jun. 29 ~ 30, 2016 & Mar. 29, 2017 Standards: FCC Part 24, Subpart E Bureau Veritas Consumer Products Services (H.K.) Ltd., The above equipment has been tested by Taoyuan Branch, and found compliance with the requirement of the above standards. The test record, data evaluation & Equipment Under Test (EUT) configurations represented herein are true and accurate accounts of the measurements of the samples EMC characteristics under the conditions specified in this report. Prepared by :

:

Approved by Celia Chen / Supervisor

, Date:

Mar. 31, 2017 Rex Lai / Assistant Manager

, Date:

Mar. 31, 2017 Report No.: RF170328D10 Reference No.: 160617D01 Page No. 4 / 36 Report Format Version: 6.1.1 2 Summary of Test Results Applied Standard: FCC Part 24 & Part 2 Test Item Result Remarks Effective Radiated Power Pass Meet the requirement of limit. Peak To Average Ratio Pass Meet the requirement of limit. Frequency Stability Pass Meet the requirement of limit. Occupied Bandwidth Pass Meet the requirement of limit. FCC Clause 2.1046 24.232 2.1046 24.232(d) 2.1055 24.235 2.1049 24.238(b) 24.238(b) Band Edge Measurements Pass Meet the requirement of limit. 2.1051 24.238 2.1053 24.238 Conducted Spurious Emissions Pass Meet the requirement of limit. Radiated Spurious Emissions Pass Meet the requirement of limit. Minimum passing margin is

-17.89 dB at 3707.32MHz. 2.1 Measurement Uncertainty Where relevant, the following measurement uncertainty levels have been estimated for tests performed on the EUT as specified in CISPR 16-4-2:

Measurement Radiated Emissions up to 1 GHz Radiated Emissions above 1 GHz Frequency 30MHz ~ 1000MHz 1GHz ~ 40GHz Expended Uncertainty

(k=2) () 5.54 dB 5.48 dB Report No.: RF170328D10 Reference No.: 160617D01 Page No. 5 / 36 Report Format Version: 6.1.1 2.2 Test Site and Instruments For all test items except for Output Power Measurement & Radiated Spurious Emissions test DESCRIPTION &

MANUFACTURER MODEL NO. SERIAL NO. CALIBRATED CALIBRATED DATE UNTIL Feb. 25, 2017 Feb. 25, 2017 Feb. 28, 2017 Feb. 01, 2017 Jan. 03, 2017 May 28, 2017 Jan. 07, 2017 Jan. 20, 2017 SF104 892164 N9038A NA NA NA NA NA NA MY51210129 Feb. 02, 2016 TT100 AT100 8447D 8449B BBHA 9120-D1 Radiated_V7.6.15.9.4 AMF-6F-260400-33-8P 2432A03504 3008A01201 VULB 9168 VHBA 9123 BBHA-9170 Feb. 26, 2016 Feb. 26, 2016 Mar. 01, 2016 139 480 212 D130 0306 0306 NA Jan. 04, 2016 May 29, 2015 Jan. 08, 2016 Jan. 21, 2016 HP Preamplifier HP Preamplifier MITEQ Preamplifier Agilent TEST RECEIVER Schwarzbeck Antenna Schwarzbeck Antenna Schwarzbeck Horn Antenna Schwarzbeck Horn Antenna ADT. Turn Table ADT. Tower Software SUHNER RF cable With 4dB PAD SUHNER RF cable With 3dB PAD KEYSIGHT MIMO Powermeasurement Test set KEYSIGHT Spectrum Analyzer EMCO Horn Antenna Highpass filter Wainwright Instruments ROHDE & SCHWARZ Spectrum Analyzer Anritsu Power Sensor Anritsu Power Meter NOTE: 1. The calibration interval of the above test instruments is 12/24 months. And the calibrations Cable-CH8-3.6m Aug. 15, 2015 U2021XA-001 May 25, 2016 WHK 3.1/18G-10SS Aug. 15, 2015 Sep. 23, 2015 Jan. 19, 2016 Apr. 28, 2016 Apr. 28, 2016 MY54490260 Jul. 14, 2015 CABLE-CH6 00028257 MA2411B U2021XA ML2495A 0738404 0842014 N9030A 101042 FSV40 SF102 3115 SN 8 NA NA Aug. 14, 2016 Aug. 14, 2016 May 24, 2017 Jul. 13, 2016 Jan. 18, 2017 Sep. 22, 2016 Apr. 27, 2017 Apr. 27, 2017 are traceable to NML/ROC and NIST/USA. 2. The horn antenna and HP preamplifier (model: 8449B) are used only for the measurement of emission frequency above 1GHz if tested. 3. The test was performed in Chamber No. 6. 4. The Industry Canada Reference No. IC 7450E-6. 5. The FCC Site Registration No. is 447212. 6. Tested date: Jun. 29 ~ 30, 2016 Report No.: RF170328D10 Reference No.: 160617D01 Page No. 6 / 36 Report Format Version: 6.1.1 For Output Power Measurement & Radiated Spurious Emissions test only DESCRIPTION &

MANUFACTURER MODEL NO. SERIAL NO. CALIBRATED DATE CALIBRATED UNTIL Feb. 20, 2018 Feb. 21, 2018 Feb. 20, 2018 Feb. 07, 2018 Dec. 12, 2017 May 28, 2017 Dec. 29, 2017 Dec. 26, 2017 SF104 892164 N9038A NA NA NA MY51210129 Feb. 08, 2017 TT100 AT100 8447D 8449B BBHA 9120-D1 Radiated_V7.6.15.9.5 AMF-6F-260400-33-8P 2432A03504 3008A01201 VULB 9168 VHBA 9123 BBHA-9170 Feb. 21, 2017 Feb. 22, 2017 Feb. 21, 2017 139 480 212 D130 0306 0306 NA Dec. 13, 2016 May 29, 2015 Dec. 30, 2016 Dec. 27, 2016 HP Preamplifier HP Preamplifier MITEQ Preamplifier Agilent TEST RECEIVER Schwarzbeck Antenna Schwarzbeck Antenna Schwarzbeck Horn Antenna Schwarzbeck Horn Antenna ADT. Turn Table ADT. Tower Software SUHNER RF cable With 4dB PAD SUHNER RF cable With 3dB PAD KEYSIGHT MIMO Powermeasurement Test set KEYSIGHT Spectrum Analyzer EMCO Horn Antenna Highpass filter Wainwright Instruments ROHDE & SCHWARZ Spectrum Analyzer Anritsu Power Sensor Anritsu Power Meter NOTE: 1. The calibration interval of the above test instruments is 12/24 months. And the calibrations Cable-CH8-3.6m Aug. 15, 2016 WHK 3.1/18G-10SS U2021XA-001 Aug. 15, 2016 Sep. 30, 2016 Dec. 15, 2016 May 25, 2016 Apr. 28, 2016 Apr. 28, 2016 MY54490260 Jul. 26, 2016 CABLE-CH6 00028257 MA2411B U2021XA ML2495A 0738404 0842014 N9030A 101042 FSV40 SF102 3115 SN 8 NA NA NA NA NA Aug. 14, 2017 Aug. 14, 2017 May 24, 2017 Jul. 25, 2017 Dec. 14, 2017 Sep. 29, 2017 Apr. 27, 2017 Apr. 27, 2017 are traceable to NML/ROC and NIST/USA. 2. The horn antenna and HP preamplifier (model: 8449B) are used only for the measurement of emission frequency above 1GHz if tested. 3. The test was performed in Chamber No. 6. 4. The Industry Canada Reference No. IC 7450E-6. 5. The FCC Site Registration No. is 447212. 6. Tested Date: Mar. 29, 2017 Report No.: RF170328D10 Reference No.: 160617D01 Page No. 7 / 36 Report Format Version: 6.1.1 3 General Information 3.1 General Description of EUT Product Brand Test Model Status of EUT Power Supply Rating Modulation Type Operating Frequency Max. Conducted Output Power Max. EIRP Power Ninja LTE module Sercomm LC4R-T Engineering sample 3.3Vdc QPSK, 16QAM, 64QAM LTE Band 25

(Channel Bandwidth 5MHz) LTE Band 25

(Channel Bandwidth 5MHz) LTE Band 25

(Channel Bandwidth 5MHz) LTE Band 25 I-PEX N/A N/A Antenna Type Antenna Connector Accessory Device Data Cable Supplied Note: The EUT is a Ninja LTE module. 1852.5MHz ~1912.5MHz 387.3mW (25.88dBm) 1671.1mW (32.23dBm) Dipole antenna with 7dBi gain Report No.: RF170328D10 Reference No.: 160617D01 Page No. 8 / 36 Report Format Version: 6.1.1 EUT Mechanical tool A (A) Configuration of System Under Test 3.2 3.2.1 Description of Support Units The EUT has been tested as an independent unit together with other necessary accessories or support units. The following support units or accessories were used to form a representative test configuration during the tests. ID A. B. C. D. Supplied by client Supplied by client Supplied by client Provided by Lab Mechanical tool A Mechanical tool B Mechanical tool B (B) Adapter Notebook Brand N/A N/A Notebook (D) FCC DoC Approved Adapter (C) N/A N/A N/A N/A N/A N/A WT10A-050U DC jack Model No. FAIRWAY Serial No. 8SNZ12S N/A N/A Remarks Product FCC ID PP27L DELL 2 3 1 Note: All power cords of the above support units are non-shielded (1.8m). ID 1. 2. 3. Descriptions Qty. Length (m) DC cable Data cable USB cable 3.0 0.2 1.0 1 1 1 Shielding

(Yes/No) N N Y Cores (Qty.) Remarks 0 0 0 Supplied by client Supplied by client Supplied by client Report No.: RF170328D10 Reference No.: 160617D01 Page No. 9 / 36 Report Format Version: 6.1.1 3.3 Test Mode Applicability and Tested Channel Detail Pre-Scan has been conducted to determine the worst-case mode from all possible combinations between available modulations, data rates, XYZ axis and antenna ports. The worst case was found when positioned on X-plane. Following channel(s) was (were) selected for the final test as listed below:

LTE Band 25 Test item EIRP Frequency Stability Occupied Bandwidth Available channel Tested channel 26065 to 26665 26065 to 26665 26065 to 26665 26065, 26365, 26665 26365 26065, 26365, 26665 Band Edge 26065 to 26665 26065 26665 26065 to 26665 26065 to 26665 26065 to 26665 26065, 26365, 26665 26065, 26365, 26665 26065 Channel Bandwidth Modulation Mode 5MHz 5MHz 5MHz 5MHz 5MHz 5MHz 5MHz 5MHz QPSK QPSK QPSK/16QAM/

64QAM QPSK QPSK QPSK/16QAM/

64QAM QPSK QPSK 25 RB / 0 RB Offset 25 RB / 0 RB Offset 25 RB / 0 RB Offset 1 RB / 0 RB Offset 25 RB / 0 RB Offset 1 RB / 24 RB Offset 25 RB / 0 RB Offset 25 RB / 0 RB Offset 25 RB / 0 RB Offset 25 RB / 0 RB Offset 26065 to 26665 26065, 26365, 26665 5MHz QPSK 25 RB / 0 RB Offset Peak to Average Ratio Condcudeted Emission Radiated Emission Below 1GHz Radiated Emission Above 1GHz Test Condition:

Test Item EIRP Frequency Stability Occupied Bandwidth Band Edge Peak To Average Ratio Conducted Emission Radiated Emission 3.4 EUT Operating Conditions Environmental Conditions Input Power 22deg. C, 77%RH 26deg. C, 65%RH 26deg. C, 65%RH 26deg. C, 65%RH 26deg. C, 65%RH 26deg. C, 65%RH 22deg. C, 77%RH 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc Tested By Dalen Dai Aaron You Aaron You Aaron You Aaron You Aaron You Dalen Dai The software provided by client to enable the EUT to export maximum output power under transmission mode and specific channel frequency. 3.5 General Description of Applied Standards The EUT is a RF Product. According to the specifications of the manufacturer, it must comply with the requirements of the following standards:

FCC 47 CFR Part 2 FCC 47 CFR Part 24 KDB 971168 D01 Power Meas License Digital Systems v02r02 KDB 662911 D01 Multiple Transmitter Output v02r01 ANSI/TIA/EIA-603-D 2010 Note: All test items have been performed and recorded as per the above standards. Report No.: RF170328D10 Reference No.: 160617D01 Page No. 10 / 36 Report Format Version: 6.1.1 Test Types and Results 4 4.1 Output Power Measurement 4.1.1 Limits of Output Power Measurement Mobile / Portable station are limited to 2 watts (33dBm) e.i.r.p. 4.1.2 Test Procedures EIRP / erp Measurement:

a. All measurements were done at low, middle and high operational frequency range. RBW and VBW is 10MHz for LTE Mode. b. Substitution method is used for E.I.R.P measurement. In the semi-anechoic chamber, EUT placed on the 0.8m height of Turn Table, rotated the table around 360 degrees to search the maximum radiation power and receiver antenna shall be rotated vertical and horizontal polarization and moved height from 1m to 4m to find the maximum polar radiated power. The Read Value is the spectrum reading the maximum power value. c. The substitution horn antenna is substituted for EUT at the same position and signals generator export the CW signal to the substitution antenna via a tx cable. Rotated the Turn Table and moved receiving antenna to find the maximum radiation power. Adjust output power level of S.G to get a Value of spectrum reading equal to Read Value of step b. Record the power level of S.G d. EIRP = Output power level of S.G TX cable loss + Antenna gain of substitution horn.E.R.P power can be calculated form E.I.R.P power by subtracting the gain of dipole, E.R.P power = E.I.R.P power - 2.15dBi. Conducted Power Measurement:

A power sensor was used on the output port of the EUT. A power meter was used to read the response of the power sensor. Record the power level. Report No.: RF170328D10 Reference No.: 160617D01 Page No. 11 / 36 Report Format Version: 6.1.1 4.1.3 Test Setup EUT Power Sensor Power Meter 20dB Attenuation PAD For the actual test configuration, please refer to the attached file (Test Setup Photo). Report No.: RF170328D10 Reference No.: 160617D01 Page No. 12 / 36 Report Format Version: 6.1.1 4.1.4 Test Results CONDUCTED OUTPUT POWER (dBm) Total QPSK Mid CH 26365 1882.5 MHz Chain0 Chain1 High CH 26665 1912.5 MHz Chain0 Chain1 Low CH 26065 1852.5 MHz Chain0 Chain1 23.15 21.46 25.40 22.67 22.91 25.80 22.67 22.81 25.75 22.94 21.37 25.24 22.58 22.90 25.75 22.61 22.78 25.71 23.08 21.50 25.37 22.61 22.92 25.78 22.58 22.77 25.69 23.04 21.39 25.30 22.59 22.85 25.73 22.63 22.69 25.67 22.97 21.43 25.28 22.63 22.89 25.77 22.54 22.75 25.66 23.06 21.51 25.36 22.55 22.87 25.72 22.52 22.73 25.64 23.27 21.59 25.52 22.72 23.01 25.88 22.79 22.90 25.86 Total Total Total 16QAM Mid CH 26365 1882.5 MHz Chain0 Chain1 High CH 26665 1912.5 MHz Chain0 Chain1 Low CH 26065 1852.5 MHz Chain0 Chain1 23.10 21.33 25.31 22.59 22.79 25.70 22.62 22.70 25.67 22.86 21.26 25.14 22.42 22.77 25.61 22.50 22.62 25.57 22.91 21.41 25.23 22.58 22.78 25.69 22.43 22.61 25.53 22.95 21.28 25.21 22.39 22.64 25.53 22.54 22.58 25.57 22.89 21.37 25.21 22.44 22.70 25.58 22.39 22.60 25.51 22.90 21.35 25.20 22.41 22.76 25.60 22.40 22.64 25.53 23.17 21.46 25.41 22.60 22.92 25.77 22.67 22.82 25.76 Total Total Total 64QAM Mid CH 26365 1882.5 MHz Chain0 Chain1 High CH 26665 1912.5 MHz Chain0 Chain1 Low CH 26065 1852.5 MHz Chain0 Chain1 23.06 21.32 25.29 22.60 22.77 25.70 22.54 22.74 25.65 22.81 21.22 25.10 22.51 22.75 25.64 22.40 22.56 25.49 22.97 21.38 25.26 22.43 22.76 25.61 22.46 22.51 25.50 22.93 21.26 25.19 22.40 22.65 25.54 22.39 22.47 25.44 22.80 21.30 25.12 22.51 22.71 25.62 22.47 22.55 25.52 22.95 21.36 25.24 22.39 22.67 25.54 22.38 22.58 25.49 23.11 21.42 25.36 22.64 22.89 25.78 22.66 22.87 25.78 Total Total Page No. 13 / 36 Report Format Version: 6.1.1 Band / BW RB Size RB Offset 25 / 5M 1 1 1 12 12 12 25 0 12 24 0 6 13 0 Band / BW RB Size RB Offset 25 / 5M 1 1 1 12 12 12 25 0 12 24 0 6 13 0 Band / BW RB Size RB Offset 1 1 1 12 12 12 25 0 12 24 0 6 13 0 25 / 5M Report No.: RF170328D10 Reference No.: 160617D01 EIRP Power (dBm) LTE Band 25 Channel Bandwidth: 5MHz MODE TX channel 26065 Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 1852.50 Reading

(dBm) 18.82 S.G Power Value (dBm) 9.07 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 12.01 21.08 33.00

-11.92 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 1852.50 Reading

(dBm) 30.34 S.G Power Value (dBm) 20.22 MODE TX channel 26365 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 12.01 32.23 33.00

-0.77 Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 1882.50 Reading

(dBm) 17.99 S.G Power Value (dBm) 8.52 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 12.01 20.53 33.00

-12.47 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 1882.50 Reading

(dBm) 28.44 S.G Power Value (dBm) 18.38 MODE TX channel 26665 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-2.61 33.00 12.01 30.39 Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 1912.50 Reading

(dBm) 16.94 S.G Power Value (dBm) 7.54 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 11.98 19.52 33.00

-13.48 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 1912.50 Reading

(dBm) 28.08 S.G Power Value (dBm) 18.13 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 11.98 30.11 33.00

-2.89 Note: EIRP (dBm) = S.G Power Value (dBm) + Correction Factor (dB). Report No.: RF170328D10 Reference No.: 160617D01 Page No. 14 / 36 Report Format Version: 6.1.1 4.2 Frequency Stability Measurement 4.2.1 Limits of Frequency Stabiliity Measurement The frequency stability shall be sufficient to ensure that the fundamental emission stays within the authorized frequency block. 4.2.2 Test Procedure a. Device is placed at the oven room. The oven room could control the temperatures and humidity. Power warm up is at least 15 min and power applied should perform before recording frequency error. b. EUT is connected the external power supply to control the DC input power. The test voltage range is from minimum to maximum working voltage. Each step shall be record the frequency error rate. c. The temperature range step is 10 degrees in this test items. All temperature levels shall be hold the 0.5 during the measurement testing. The each temperature step shall be at least 0.5 hours, consider the EUT could be test under the stability condition. 4.2.3 Test Setup DC Power Supply Oven Room External Power Source EUT Report No.: RF170328D10 Reference No.: 160617D01 Page No. 15 / 36 Report Format Version: 6.1.1 4.2.4 Test Results Frequency Error vs. Voltage Voltage

(Volts) 3.465 3.3 3.135 Chain 0 0.0106241700 0.0100929615 0.0090305445 Frequency Error (ppm) LTE Band 25 5MHz Chain 1 0.0122177955 0.0106241700 0.0090305445 Note: The applicant defined the normal working voltage is from 3.135Vdc to 3.465Vdc. Frequency Error vs. Temperature Temp.

() 50 40 30 20 10 0 Chain 0 0.0116865870 0.0106241700 0.0095617530 0.0090305445 0.0079681275 0.0069057105 Frequency Error (ppm) LTE Band 25 5MHz Chain 1 0.0127490040 0.0116865870 0.0095617530 0.0090305445 0.0079681275 0.0063745020 Limit

(ppm) 2.5 2.5 2.5 Limit

(ppm) 2.5 2.5 2.5 2.5 2.5 2.5 Report No.: RF170328D10 Reference No.: 160617D01 Page No. 16 / 36 Report Format Version: 6.1.1 4.3 Occupied Bandwidth Measurement 4.3.1 Test Procedure All measurements were done at low, middle and high operational frequency range. The software provided by client to control a EUT to export maximum output power under transmission mode and specific channel frequency. Use OBW measurement function of Spectrum analyzer to measure 99 % occupied bandwidth. 4.3.2 Test Setup 4.3.3 Test Result 20dB Attenuation PAD Spectrum Analyzer EUT Channel Frequency

(MHz) LTE Band 25 Channel Bandwidth 5MHz 99% Occupied Bandwidth (MHz) QPSK 16QAM 64QAM Chain 0 Chain 1 Chain 0 Chain 1 Chain 0 Chain 1 26065 26365 26665 1852.5 1882.5 1912.5 4.50 4.48 4.48 4.48 4.48 4.48 4.46 4.46 4.48 4.46 4.48 4.46 4.53 4.51 4.53 4.51 4.55 4.56 Spectrum Plot Of Worst Value 5MHz / 64QAM Report No.: RF170328D10 Reference No.: 160617D01 Page No. 17 / 36 Report Format Version: 6.1.1 Channel Frequency

(MHz) LTE Band 25 Channel Bandwidth 5MHz

-26dBc Bandwidth (MHz) QPSK 1RB 25RB Chain 0 Chain 1 Chain 0 Chain 1 26065 26365 26665 1852.5 1882.5 1912.5 1.22 1.17 1.23 1.26 1.18 1.27 5.32 5.25 5.51 5.34 5.29 5.49 Spectrum Plot Of Worst Value 5MHz / QPSK / 25RB Report No.: RF170328D10 Reference No.: 160617D01 Page No. 18 / 36 Report Format Version: 6.1.1 4.4 Band Edge Measurement 4.4.1 Limits of Band Edge Measurement Power of any emission outside of the authorized operating frequency ranges must be attenuated below the transmitting power (P) by a factor of at least 43 + 10 log(P) dB. In the 1 MHz bands immediately outside and adjacent to the frequency block a resolution bandwidth of at least one percent of the emission bandwidth of the fundamental emission of the transmitter may be employed. Note: The results for each of the transmit chains shall be individually compared with the limits after these limits have been added by 10 x log (N) (number of active transmit chains). 4.4.2 Test Setup 4.4.3 Test Procedures EUT Spectrum Analyzer 20dB Attenuation PAD a. All measurements were done at low and high operational frequency range. b. The center frequency of spectrum is the band edge frequency and span is 1.5MHz. RB of the spectrum is 15kHz and VB of the spectrum is 50kHz (LTE Channel Bandwidth 5MHz for 1RB Size). c. The center frequency of spectrum is the band edge frequency and span is 1.5MHz. RB of the spectrum is 100kHz and VB of the spectrum is 300kHz (LTE Channel Bandwidth 5MHz for 25RB Size). d. Record the max trace plot into the test report. Report No.: RF170328D10 Reference No.: 160617D01 Page No. 19 / 36 Report Format Version: 6.1.1 4.4.4 Test Results LTE Band 25 Channel Bandwidth 5MHz Chain 0 Channel 26065 1 RB Channel 26665 1 RB Channel 26065 25 RB Channel 26665 25 RB Report No.: RF170328D10 Reference No.: 160617D01 Page No. 20 / 36 Report Format Version: 6.1.1 LTE Band 25 Channel Bandwidth 5MHz Chain 1 Channel 26065 1 RB Channel 26665 1 RB Channel 26065 25 RB Channel 26665 25 RB Report No.: RF170328D10 Reference No.: 160617D01 Page No. 21 / 36 Report Format Version: 6.1.1 4.5 Peak To Average Ratio 4.5.1 Limits of Peak To Average Ratio Measurement In measuring transmissions in this band using an average power technique, the peak to-average ratio (PAR) of the transmission may not exceed 13 dB 4.5.2 Test Setup 4.5.3 Test Procedures 20dB Attenuation PAD Spectrum Analyzer EUT a. Set resolution/measurement bandwidth signals occupied bandwidth;

b. Set the number of counts to a value that stabilizes the measured CCDF curve;

c. Record the maximum PAPR level associated with a probability of 0.1%. Report No.: RF170328D10 Reference No.: 160617D01 Page No. 22 / 36 Report Format Version: 6.1.1 4.5.4 Test Results Channel Frequency

(MHz) LTE Band 25 Channel Bandwidth 5MHz Peak To Average Ratio (dB) QPSK 16QAM 64QAM Chain 0 Chain 1 Chain 0 Chain 1 Chain 0 Chain 1 26065 26365 26665 1852.5 1882.5 1912.5 5.24 5.35 4.99 5.40 5.33 5.29 5.62 5.51 5.37 5.51 5.86 5.35 5.58 5.43 5.36 5.72 5.66 5.75 Spectrum Plot Of Worst Value 5MHz / 16QAM Report No.: RF170328D10 Reference No.: 160617D01 Page No. 23 / 36 Report Format Version: 6.1.1 4.6 Conducted Spurious Emissions 4.6.1 Limits of Conducted Spurious Emissions Measurement The power of any emission outside of the authorized operating frequency ranges must be attenuated below the transmitting power (P) by a factor of at least 43 + 10 log(P) dB. The emission limit equal to 13dBm. 4.6.2 Test Setup 4.6.3 Test Procedure 20dB Attenuation PAD Spectrum Analyzer EUT a. All measurements were done at low, middle and high operational frequency range. b. Measuring frequency range is from 9 kHz to 20GHz. 20dB attenuation pad is connected with spectrum. RBW=1MHz and VBW=3MHz is used for conducted emission measurement. Report No.: RF170328D10 Reference No.: 160617D01 Page No. 24 / 36 Report Format Version: 6.1.1 4.6.4 Test Results LTE Band 25 Channel Band width: 5MHz Chain 0 Channel 26065 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10 Reference No.: 160617D01 Page No. 25 / 36 Report Format Version: 6.1.1 LTE Band 25 Channel Band width: 5MHz Chain 0 Channel 26365 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10 Reference No.: 160617D01 Page No. 26 / 36 Report Format Version: 6.1.1 LTE Band 25 Channel Band width: 5MHz Chain 0 Channel 26665 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10 Reference No.: 160617D01 Page No. 27 / 36 Report Format Version: 6.1.1 LTE Band 25 Channel Band width: 5MHz Chain 1 Channel 26065 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10 Reference No.: 160617D01 Page No. 28 / 36 Report Format Version: 6.1.1 LTE Band 25 Channel Band width: 5MHz Chain 1 Channel 26365 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10 Reference No.: 160617D01 Page No. 29 / 36 Report Format Version: 6.1.1 LTE Band 25 Channel Band width: 5MHz Chain 1 Channel 26665 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10 Reference No.: 160617D01 Page No. 30 / 36 Report Format Version: 6.1.1 4.7 Radiated Emission Measurement 4.7.1 Limits of Radiated Emission Measurement The power of any emission outside of the authorized operating frequency ranges must be attenuated below the transmitting power (P) by a factor of at least 43 + 10 log(P) dB. The emission limit equal to 13dBm. 4.7.2 Test Procedure a. Substitution method is used for E.I.R.P measurement. In the semi-anechoic chamber, EUT placed on the 0.8m height of Turn Table, rotated the table around 360 degrees to search the maximum radiation power and receiver antenna shall be rotated vertical and horizontal polarization and moved height from 1m to 4m to find the maximum polar radiated power. The Read Value is the spectrum reading the maximum power value. b. The substitution horn antenna is substituted for EUT at the same position and signals generator export the CW signal to the substitution antenna via a TX cable. Rotated the Turn Table and moved receiving antenna to find the maximum radiation power. Adjust output power level of S.G to get a Value of spectrum reading equal to Read Value of step a. Record the power level of S.G c. EIRP = Output power level of S.G TX cable loss + Antenna gain of substitution horn. d. E.R.P power can be calculated form E.I.R.P power by subtracting the gain of dipole, E.R.P power = E.I.R.P power - 2.15dBi. Note: The resolution bandwidth and video bandwidth of test receiver/spectrum analyzer is 1MHz/3MHz. 4.7.3 Deviation from Test Standard No deviation. Report No.: RF170328D10 Reference No.: 160617D01 Page No. 31 / 36 Report Format Version: 6.1.1 4.7.4 Test Setup For the actual test configuration, please refer to the attached file (Test Setup Photo). Report No.: RF170328D10 Reference No.: 160617D01 Page No. 32 / 36 Report Format Version: 6.1.1 4.7.5 Test Results Below 1GHz LTE Band 25 Channel Bandwidth: 5MHz Mode TX channel 26065 Frequency Range Below 1000 MHz No. Freq. (MHz) 1 2 3 4 5 6 86.23 103.10 245.09 336.46 413.78 687.91 No. Freq. (MHz) 1 2 3 4 5 6 98.88 166.36 190.26 425.03 477.04 687.91 Antenna Polarity & Test Distance: Horizontal at 3 M Reading

(dBm)

-60.09

-59.76

-65.45

-70.43

-72.87

-74.73 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-75.40

-75.02

-82.88

-88.24

-91.48

-94.06 9.12 10.76 14.03 17.11 19.11 24.88

-66.28

-64.26

-68.85

-71.13

-72.37

-69.18

-13.00

-13.00

-13.00

-13.00

-13.00

-13.00

-53.28

-51.26

-55.85

-58.13

-59.37

-56.18 Antenna Polarity & Test Distance: Vertical at 3 M Reading

(dBm)

-65.18

-67.87

-64.16

-64.20

-66.54

-73.52 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-80.70

-82.86

-81.24

-83.25

-86.30

-93.47 10.03 14.47 12.55 19.59 20.85 24.88

-70.67

-68.39

-68.69

-63.66

-65.45

-68.59

-13.00

-13.00

-13.00

-13.00

-13.00

-13.00

-57.67

-55.39

-55.69

-50.66

-52.45

-55.59 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Report No.: RF170328D10 Reference No.: 160617D01 Page No. 33 / 36 Report Format Version: 6.1.1 Above 1GHz LTE Band 25 Channel Bandwidth: 5MHz Mode TX channel 26065 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 3707.32 Reading

(dBm)

-35.70 S.G Power Value (dBm)

-49.31 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 18.42

-30.89

-13.00

-17.89 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 3705.14 Reading

(dBm)

-37.86 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-51.50 18.41

-33.09

-13.00

-20.09 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Mode TX channel 26365 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 3765.00 Reading

(dBm)

-36.55 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-49.85 18.55

-31.30

-13.00

-18.30 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 3765.00 Reading

(dBm)

-39.22 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-52.59 18.55

-34.04

-13.00

-21.04 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Mode TX channel 26665 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 3822.68 Reading

(dBm)

-38.09 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-51.39 18.70

-32.69

-13.00

-19.69 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 3822.68 Reading

(dBm)

-39.40 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-52.78 18.70

-34.08

-13.00

-21.08 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Report No.: RF170328D10 Reference No.: 160617D01 Page No. 34 / 36 Report Format Version: 6.1.1 5 Pictures of Test Arrangements Please refer to the attached file (Test Setup Photo). Report No.: RF170328D10 Reference No.: 160617D01 Page No. 35 / 36 Report Format Version: 6.1.1 Appendix Information on the Testing Laboratories We, Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch, were founded in 1988 to provide our best service in EMC, Radio, Telecom and Safety consultation. Our laboratories are accredited and approved according to ISO/IEC 17025. If you have any comments, please feel free to contact us at the following:

Linko EMC/RF Lab Tel: 886-2-26052180 Fax: 886-2-26051924 Hwa Ya EMC/RF/Safety Lab Tel: 886-3-3183232 Fax: 886-3-3270892 Email: service.adt@tw.bureauveritas.com Web Site: www.bureauveritas-adt.com Hsin Chu EMC/RF/Telecom Lab Tel: 886-3-6668565 Fax: 886-3-6668323 The address and road map of all our labs can be found in our web site also.

--- END ---

Report No.: RF170328D10 Reference No.: 160617D01 Page No. 36 / 36 Report Format Version: 6.1.1

FCC Test Report

(Part 27) Report No.: RF170328D10-1 FCC ID: P27LC4RT1 Test Model: LC4R-T Received Date: Jun. 17, 2016 Test Date: Jun. 29 ~ 30, 2016, Nov. 10, 2016 & Mar. 29 ~ 30, 2017 Issued Date: Mar. 31, 2017 Applicant: Sercomm Corp. Address: 8F, No. 3-1, YuanQu St., NanKang, Taipei 115, Taiwan, R.O.C. Issued By: Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch Lab Address: No. 47-2, 14th Ling, Chia Pau Vil., Lin Kou Dist., New Taipei City, Taiwan, R.O.C. This report is for your exclusive use. Any copying or replication of this report to or for any other person or entity, or use of our name or trademark, is permitted only with our prior written permission. This report sets forth our findings solely with respect to the test samples identified herein. The results set forth in this report are not indicative or representative of the quality or characteristics of the lot from which a test sample was taken or any similar or identical product unless specifically and expressly noted. Our report includes all of the tests requested by you and the results thereof based upon the information that you provided to us. You have 60 days from date of issuance of this report to notify us of any material error or omission caused by our negligence, provided, however, that such notice shall be in writing and shall specifically address the issue you wish to raise. A failure to raise such issue within the prescribed time shall constitute your unqualified acceptance of the completeness of this report, the tests conducted and the correctness of the report contents. Unless specific mention, the uncertainty of measurement has been explicitly taken into account to declare the compliance or non-compliance to the specification. The report must not be used by the client to claim product certification, approval, or endorsement by TAF or any government agencies. Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 1 / 66 Report Format Version: 6.1.1 Table of Contents 4 3 Release Control Record ............................................................................................................................. 3 1 Certificate of Conformity ................................................................................................................. 4 Summary of Test Results ................................................................................................................ 5 2 2.1 Measurement Uncertainty .............................................................................................................. 5 2.2 Test Site and Instruments ............................................................................................................... 6 General Information ......................................................................................................................... 9 3.1 General Description of EUT ............................................................................................................ 9 3.2 Configuration of System Under Test ............................................................................................. 10 3.2.1 Description of Support Units ......................................................................................................... 10 3.3 Test Mode Applicability and Tested Channel Detail ........................................................................11 3.4 EUT Operating Conditions ............................................................................................................ 12 3.5 General Description of Applied Standards..................................................................................... 12 Test Types and Results ................................................................................................................. 13 4.1 Output Power Measurement ......................................................................................................... 13 4.1.1 Limits of Output Power Measurement ........................................................................................... 13 4.1.2 Test Procedures ........................................................................................................................... 13 4.1.3 Test Setup .................................................................................................................................... 14 4.1.4 Test Results.................................................................................................................................. 15 4.2 Frequency Stability Measurement ................................................................................................ 18 4.2.1 Limits of Frequency Stabiliity Measurement .................................................................................. 18 4.2.2 Test Procedure ............................................................................................................................. 18 4.2.3 Test Setup .................................................................................................................................... 18 4.2.4 Test Results.................................................................................................................................. 19 4.3 Emission Bandwidth Measurement ............................................................................................... 23 4.3.1 Limits of Emission Bandwidth Measurement ................................................................................. 23 4.3.2 Test Procedure ............................................................................................................................. 23 4.3.3 Test Setup .................................................................................................................................... 23 4.3.4 Test Result ................................................................................................................................... 24 4.4 Channel Edge Measurement ........................................................................................................ 26 4.4.1 Limits of Band Edge Measurement ............................................................................................... 26 4.4.2 Test Setup .................................................................................................................................... 26 4.4.3 Test Procedures ........................................................................................................................... 26 4.4.4 Test Results.................................................................................................................................. 27 4.5 Peak To Average Ratio ................................................................................................................. 39 4.5.1 Limits of Peak To Average Ratio Measurement ............................................................................. 39 4.5.2 Test Setup .................................................................................................................................... 39 4.5.3 Test Procedures ........................................................................................................................... 39 4.5.4 Test Results.................................................................................................................................. 40 4.6 Conducted Spurious Emissions .................................................................................................... 41 4.6.1 Limits of Conducted Spurious Emissions Measurement ................................................................ 41 4.6.2 Test Setup .................................................................................................................................... 41 4.6.3 Test Procedure ............................................................................................................................. 41 4.6.4 Test Results.................................................................................................................................. 42 4.7 Radiated Emission Measurement ................................................................................................. 58 4.7.1 Limits of Radiated Emission Measurement ................................................................................... 58 4.7.2 Test Procedure ............................................................................................................................. 58 4.7.3 Deviation from Test Standard ........................................................................................................ 58 4.7.4 Test Setup .................................................................................................................................... 59 4.7.5 Test Results.................................................................................................................................. 60 5 Pictures of Test Arrangements...................................................................................................... 65 Appendix Information on the Testing Laboratories ............................................................................. 66 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 2 / 66 Report Format Version: 6.1.1 Issue No. RF170328D10-1 Description Original release. Release Control Record Date Issued Mar. 31, 2017 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 3 / 66 Report Format Version: 6.1.1 1 Certificate of Conformity Product: Ninja LTE module Brand: Sercomm Test Model: LC4R-T Sample Status: Engineering sample Applicant: Sercomm Corp. Test Date: Jun. 29 ~ 30, 2016, Nov. 10, 2016 & Mar. 29 ~ 30, 2017 Standards: FCC Part 27, Subpart H, M Bureau Veritas Consumer Products Services (H.K.) Ltd., The above equipment has been tested by Taoyuan Branch, and found compliance with the requirement of the above standards. The test record, data evaluation & Equipment Under Test (EUT) configurations represented herein are true and accurate accounts of the measurements of the samples EMC characteristics under the conditions specified in this report. Prepared by :

:

Approved by Celia Chen / Supervisor

, Date:

Mar. 31, 2017 Rex Lai / Assistant Manager

, Date:

Mar. 31, 2017 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 4 / 66 Report Format Version: 6.1.1 2 Summary of Test Results FCC Clause LTE Band 41 2.1046 27.50(h)

----

2.1055 27.54 2.1049 27.53(m)(6) 2.1051 27.53(m) 2.1051 27.53(h) 2.1053 27.53(m)(4)(6) Applied Standard: FCC Part 27 & Part 2 Test Item Result Remarks Transmitter Output Power Pass Meet the requirement of limit. Peak To Average Ratio Pass Meet the requirement of limit. Frequency Stability Stay with the authorized bands of operation Pass Meet the requirement of limit. Emission Bandwidth Pass Meet the requirement of limit. Band Edge Measurements Pass Meet the requirement of limit. Conducted Spurious Emissions Radiated Spurious Emissions Pass Meet the requirement of limit. Meet the requirement of limit. Minimum passing margin is

-8.24 dB at 5028.97MHz. Pass 2.1 Measurement Uncertainty Where relevant, the following measurement uncertainty levels have been estimated for tests performed on the EUT as specified in CISPR 16-4-2:

Measurement Radiated Emissions up to 1 GHz Radiated Emissions above 1 GHz Frequency 30MHz ~ 1000MHz 1GHz ~ 40GHz Expended Uncertainty

(k=2) () 5.54 dB 5.48 dB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 5 / 66 Report Format Version: 6.1.1 2.2 Test Site and Instruments For all test items (Tested channel: 39790, 40040, 40290, 40990, 41240, 41490) except for Radiated Spurious Emissions test DESCRIPTION &

MANUFACTURER MODEL NO. SERIAL NO. CALIBRATED CALIBRATED DATE UNTIL Feb. 25, 2017 Feb. 25, 2017 Feb. 28, 2017 Feb. 01, 2017 Jan. 03, 2017 May 28, 2017 Jan. 07, 2017 Jan. 20, 2017 SF104 892164 N9038A NA NA NA NA NA NA MY51210129 Feb. 02, 2016 TT100 AT100 8447D 8449B BBHA 9120-D1 Radiated_V7.6.15.9.4 AMF-6F-260400-33-8P 2432A03504 3008A01201 VULB 9168 VHBA 9123 BBHA-9170 Feb. 26, 2016 Feb. 26, 2016 Mar. 01, 2016 139 480 212 D130 0306 0306 NA Jan. 04, 2016 May 29, 2015 Jan. 08, 2016 Jan. 21, 2016 HP Preamplifier HP Preamplifier MITEQ Preamplifier Agilent TEST RECEIVER Schwarzbeck Antenna Schwarzbeck Antenna Schwarzbeck Horn Antenna Schwarzbeck Horn Antenna ADT. Turn Table ADT. Tower Software SUHNER RF cable With 4dB PAD SUHNER RF cable With 3dB PAD KEYSIGHT MIMO Powermeasurement Test set KEYSIGHT Spectrum Analyzer EMCO Horn Antenna Highpass filter Wainwright Instruments ROHDE & SCHWARZ Spectrum Analyzer Anritsu Power Sensor Anritsu Power Meter NOTE: 1. The calibration interval of the above test instruments is 12/24 months. And the calibrations Cable-CH8-3.6m Aug. 15, 2015 U2021XA-001 May 25, 2016 WHK 3.1/18G-10SS Aug. 15, 2015 Sep. 23, 2015 Jan. 19, 2016 Apr. 28, 2016 Apr. 28, 2016 MY54490260 Jul. 14, 2015 CABLE-CH6 00028257 MA2411B U2021XA ML2495A 0738404 0842014 N9030A 101042 FSV40 SF102 3115 SN 8 NA NA Aug. 14, 2016 Aug. 14, 2016 May 24, 2017 Jul. 13, 2016 Jan. 18, 2017 Sep. 22, 2016 Apr. 27, 2017 Apr. 27, 2017 are traceable to NML/ROC and NIST/USA. 2. The horn antenna and HP preamplifier (model: 8449B) are used only for the measurement of emission frequency above 1GHz if tested. 3. The test was performed in Chamber No. 6. 4. The Industry Canada Reference No. IC 7450E-6. 5. The FCC Site Registration No. is 447212. 6. Tested date: Jun. 29 ~ 30, 2016 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 6 / 66 Report Format Version: 6.1.1 For all test items (Tested channel: 39758, 40978) except for Radiated Spurious Emissions test DESCRIPTION &

MANUFACTURER MODEL NO. SERIAL NO. CALIBRATED DATE CALIBRATED UNTIL Feb. 25, 2017 Feb. 25, 2017 Feb. 28, 2017 Feb. 01, 2017 Jan. 03, 2017 May 28, 2017 Jan. 07, 2017 Jan. 20, 2017 SF104 892164 N9038A NA NA NA MY51210129 Feb. 02, 2016 TT100 AT100 8447D 8449B BBHA 9120-D1 Radiated_V7.6.15.9.5 AMF-6F-260400-33-8P 2432A03504 3008A01201 VULB 9168 VHBA 9123 BBHA-9170 139 480 212 D130 0306 0306 NA Feb. 26, 2016 Feb. 26, 2016 Mar. 01, 2016 Jan. 04, 2016 May 29, 2015 Jan. 08, 2016 Jan. 21, 2016 HP Preamplifier HP Preamplifier MITEQ Preamplifier Agilent TEST RECEIVER Schwarzbeck Antenna Schwarzbeck Antenna Schwarzbeck Horn Antenna Schwarzbeck Horn Antenna ADT. Turn Table ADT. Tower Software SUHNER RF cable With 4dB PAD SUHNER RF cable With 3dB PAD KEYSIGHT MIMO Powermeasurement Test set KEYSIGHT Spectrum Analyzer EMCO Horn Antenna Highpass filter Wainwright Instruments ROHDE & SCHWARZ Spectrum Analyzer Anritsu Power Sensor Anritsu Power Meter NOTE: 1. The calibration interval of the above test instruments is 12/24 months. And the calibrations Cable-CH8-3.6m Aug. 15, 2016 WHK 3.1/18G-10SS U2021XA-001 Aug. 15, 2016 Sep. 30, 2016 Jan. 19, 2016 May 25, 2016 Apr. 28, 2016 Apr. 28, 2016 MY54490260 Jul. 26, 2016 CABLE-CH6 NA NA NA 00028257 MA2411B U2021XA ML2495A 0738404 0842014 N9030A 101042 FSV40 SF102 3115 SN 8 NA NA Aug. 14, 2017 Aug. 14, 2017 May 24, 2017 Jul. 25, 2017 Jan. 18, 2017 Sep. 29, 2017 Apr. 27, 2017 Apr. 27, 2017 are traceable to NML/ROC and NIST/USA. 2. The horn antenna and HP preamplifier (model: 8449B) are used only for the measurement of emission frequency above 1GHz if tested. 3. The test was performed in Chamber No. 6. 4. The Industry Canada Reference No. IC 7450E-6. 5. The FCC Site Registration No. is 447212. 6. Tested date: Nov. 10, 2016 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 7 / 66 Report Format Version: 6.1.1 For Radiated Spurious Emissions test only DESCRIPTION &

MANUFACTURER MODEL NO. SERIAL NO. CALIBRATED DATE CALIBRATED UNTIL Feb. 20, 2018 Feb. 21, 2018 Feb. 20, 2018 Feb. 07, 2018 Dec. 12, 2017 May 28, 2017 Dec. 29, 2017 Dec. 26, 2017 SF104 892164 N9038A NA NA NA MY51210129 Feb. 08, 2017 TT100 AT100 8447D 8449B BBHA 9120-D1 Radiated_V7.6.15.9.5 AMF-6F-260400-33-8P 2432A03504 3008A01201 VULB 9168 VHBA 9123 BBHA-9170 Feb. 21, 2017 Feb. 22, 2017 Feb. 21, 2017 139 480 212 D130 0306 0306 NA Dec. 13, 2016 May 29, 2015 Dec. 30, 2016 Dec. 27, 2016 HP Preamplifier HP Preamplifier MITEQ Preamplifier Agilent TEST RECEIVER Schwarzbeck Antenna Schwarzbeck Antenna Schwarzbeck Horn Antenna Schwarzbeck Horn Antenna ADT. Turn Table ADT. Tower Software SUHNER RF cable With 4dB PAD SUHNER RF cable With 3dB PAD KEYSIGHT MIMO Powermeasurement Test set KEYSIGHT Spectrum Analyzer EMCO Horn Antenna Highpass filter Wainwright Instruments ROHDE & SCHWARZ Spectrum Analyzer Anritsu Power Sensor Anritsu Power Meter NOTE: 1. The calibration interval of the above test instruments is 12/24 months. And the calibrations Cable-CH8-3.6m Aug. 15, 2016 WHK 3.1/18G-10SS U2021XA-001 Aug. 15, 2016 Sep. 30, 2016 Dec. 15, 2016 May 25, 2016 Apr. 28, 2016 Apr. 28, 2016 MY54490260 Jul. 26, 2016 CABLE-CH6 00028257 MA2411B U2021XA ML2495A 0738404 0842014 N9030A 101042 FSV40 SF102 3115 SN 8 NA NA NA NA NA Aug. 14, 2017 Aug. 14, 2017 May 24, 2017 Jul. 25, 2017 Dec. 14, 2017 Sep. 29, 2017 Apr. 27, 2017 Apr. 27, 2017 are traceable to NML/ROC and NIST/USA. 2. The horn antenna and HP preamplifier (model: 8449B) are used only for the measurement of emission frequency above 1GHz if tested. 3. The test was performed in Chamber No. 6. 4. The Industry Canada Reference No. IC 7450E-6. 5. The FCC Site Registration No. is 447212. 6. Tested Date: Mar. 29 ~ 30, 2017 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 8 / 66 Report Format Version: 6.1.1 3 General Information 3.1 General Description of EUT Product Brand Test Model Status of EUT Power Supply Rating 3.3Vdc Modulation Type Ninja LTE module Sercomm LC4R-T Engineering sample Operating Frequency QPSK, 16QAM, 64QAM LTE Band 41

(Channel Bandwidth 20MHz) Max. Conducted LTE Band 41 Output Power

(Channel Bandwidth 20MHz) Antenna Type LTE Band 41 Antenna Connector I-PEX Accessory Device N/A Data Cable Supplied N/A Note: The EUT is a Ninja LTE module. 2506.8MHz ~ 2560MHz, 2628.8MHz ~ 2680MHz 2506.8MHz ~ 2560MHz: 368.978mW (25.67dBm) 2628.8MHz ~ 2680MHz: 477.529mW (26.79dBm) Dipole antenna with 7.5dBi gain Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 9 / 66 Report Format Version: 6.1.1 EUT Mechanical tool A (A) Configuration of System Under Test 3.2 3.2.1 Description of Support Units The EUT has been tested as an independent unit together with other necessary accessories or support units. The following support units or accessories were used to form a representative test configuration during the tests. ID A. B. C. D. Supplied by client Supplied by client Supplied by client Provided by Lab Mechanical tool A Mechanical tool B Mechanical tool B (B) Adapter Notebook Brand N/A N/A Notebook (D) FCC DoC Approved Adapter (C) N/A N/A N/A N/A N/A N/A WT10A-050U DC jack Model No. FAIRWAY Serial No. 8SNZ12S N/A N/A Remarks Product FCC ID PP27L DELL 2 3 1 Note: All power cords of the above support units are non-shielded (1.8m). ID 1. 2. 3. Descriptions Qty. Length (m) DC cable Data cable USB cable 3.0 0.2 1.0 1 1 1 Shielding

(Yes/No) N N Y Cores (Qty.) Remarks 0 0 0 Supplied by client Supplied by client Supplied by client Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 10 / 66 Report Format Version: 6.1.1 3.3 Test Mode Applicability and Tested Channel Detail Pre-Scan has been conducted to determine the worst-case mode from all possible combinations between available modulations, data rates, XYZ axis and antenna ports. The worst case was found when positioned on X-plane. Following channel(s) was (were) selected for the final test as listed below:

LTE Band 41 Test item Available channel Tested channel Transmitter Output Power Frequency Stability Emission Bandwidth Band Edge Peak to Average Ratio Condcudeted Emission Radiated Emission Below 1GHz Radiated Emission Above 1GHz Test Condition:

39758 to 40290, 40978 to 41490 39758 to 40290, 40978 to 41490 39758 to 40290, 40978 to 41490 39758 to 40290, 40978 to 41490 39758 to 40290, 40978 to 41490 39758 to 40290, 40978 to 41490 39758 to 40290, 40978 to 41490 39758 to 40290, 40978 to 41490 39758, 39790, 40040, 40290, 40978, 40990, 41240, 41490 39758, 40040, 40978, 41240 39758, 39790, 40040, 40290, 40978, 40990, 41240, 41490 39758, 39790, 40040, 40290, 40978, 40990, 41240, 41490 39758, 39790, 40040, 40290, 40978, 40990, 41240, 41490 39758, 39790, 40040, 40290, 40978, 40990, 41240, 41490 39790, 40990 39758, 39790, 40040, 40290, 40978, 40990, 41240, 41490 Channel Bandwidth Modulation Mode 20MHz 20MHz 20MHz 20MHz 20MHz 20MHz 20MHz 20MHz QPSK 100 RB / 0 RB Offset QPSK 100 RB / 0 RB Offset QPSK / 16QAM /

64QAM QPSK / 16QAM /

64QAM QPSK / 16QAM /

64QAM 100 RB / 0 RB Offset 100 RB / 0 RB Offset 100 RB / 0 RB Offset QPSK 100 RB / 0 RB Offset QPSK 100 RB / 0 RB Offset QPSK 100 RB / 0 RB Offset Test Item Test Channel Environmental Conditions Input Power Transmitter Output Power Frequency Stability Occupied Bandwidth Band Edge Peak To Average Ratio Conducted Emission Radiated Emission 39790, 40040, 40290, 40990, 41240, 41490 26deg. C, 65%RH 39758, 40978 27deg. C, 61%RH 39790, 40040, 40290, 40990, 41240, 41490 26deg. C, 65%RH 39758, 40978 27deg. C, 61%RH 39790, 40040, 40290, 40990, 41240, 41490 26deg. C, 65%RH 39758, 40978 27deg. C, 61%RH 39790, 40040, 40290, 40990, 41240, 41490 26deg. C, 65%RH 39758, 40978 27deg. C, 61%RH 39790, 40040, 40290, 40990, 41240, 41490 26deg. C, 65%RH 39758, 40978 27deg. C, 61%RH 39790, 40040, 40290, 40990, 41240, 41490 26deg. C, 65%RH 39758, 40978 27deg. C, 61%RH 39758, 39790, 40040, 40290, 40978, 40990, 41240, 41490 22deg. C, 77%RH 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc 3.3Vdc Tested By Aaron You Dalen Dai Aaron You Dalen Dai Aaron You Dalen Dai Aaron You Dalen Dai Aaron You Dalen Dai Aaron You Dalen Dai Dalen Dai Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 11 / 66 Report Format Version: 6.1.1 3.4 EUT Operating Conditions The software provided by client to enable the EUT to export maximum output power under transmission mode and specific channel frequency. 3.5 General Description of Applied Standards The EUT is a RF Product. According to the specifications of the manufacturer, it must comply with the requirements of the following standards:

FCC 47 CFR Part 2 FCC 47 CFR Part 27 KDB 971168 D01 Power Meas License Digital Systems v02r02 KDB 662911 D01 Multiple Transmitter Output v02r01 ANSI/TIA/EIA-603-D 2010 Note: All test items have been performed and recorded as per the above standards. Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 12 / 66 Report Format Version: 6.1.1 Test Types and Results 4 4.1 Output Power Measurement 4.1.1 Limits of Output Power Measurement According FCC Part 27 Clause 27.50(h)(2), the all user stations except for mobile stations are limited to 2.0 watts transmitter output power. 4.1.2 Test Procedures Conducted Power Measurement:

A power sensor was used on the output port of the EUT. A power meter was used to read the response of the power sensor. Record the power level. Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 13 / 66 Report Format Version: 6.1.1 4.1.3 Test Setup CONDUCTED POWER MEASUREMENT:

For the actual test configuration, please refer to the attached file (Test Setup Photo). Power Sensor 20dB Attenuation PAD EUT Power Meter Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 14 / 66 Report Format Version: 6.1.1 4.1.4 Test Results CONDUCTED OUTPUT POWER (dBm) QPSK Band /

BW RB Size RB Offset Low CH 39758 2506.8 MHz 39790 2510 MHz Mid CH 40040 2535 MHz High CH 40290 2560 MHz 41 /

20M 1 1 1 50 50 50 100 Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total 21.89 22.72 25.34 21.92 22.74 25.36 22.09 21.53 24.83 21.81 22.48 25.17 21.70 22.81 25.30 21.74 22.83 25.33 22.05 21.48 24.78 22.11 22.39 25.26 21.91 22.94 25.47 21.88 22.96 25.46 21.99 21.56 24.79 22.08 22.42 25.26 21.92 22.83 25.41 21.90 22.89 25.43 21.98 21.51 24.76 22.19 22.50 25.36 21.95 22.90 25.46 21.94 22.94 25.48 22.02 21.63 24.84 22.17 22.37 25.28 21.83 22.91 25.41 21.81 22.98 25.44 22.06 21.59 24.84 22.15 22.46 25.32 21.99 23.08 25.58 22.08 23.17 25.67 22.14 21.76 24.96 22.27 22.90 25.61 0 50 99 0 25 50 0 Band /

BW RB Size RB Offset QPSK Low CH 40978 2628.8 MHz 40990 2630 MHz Mid CH 41240 2655 MHz High CH 41490 2680 MHz 1 1 1 50 50 50 100 Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total 22.14 22.98 25.59 22.16 23.02 25.62 21.62 21.53 24.59 22.14 21.89 25.03 24.91 22.02 26.71 24.93 22.04 26.73 21.87 21.14 24.53 22.12 21.53 24.85 24.22 22.04 26.28 24.31 22.08 26.35 21.96 21.09 24.56 22.05 21.32 24.71 24.35 22.15 26.40 24.36 22.31 26.47 21.63 21.48 24.57 22.16 21.75 24.97 24.20 21.84 26.19 24.21 21.76 26.17 21.54 21.39 24.48 22.07 21.78 24.94 24.19 21.85 26.19 24.19 21.71 26.13 21.53 21.42 24.49 22.08 21.83 24.97 24.89 22.07 26.72 24.96 22.15 26.79 21.72 21.58 24.66 22.21 21.96 25.10 0 50 99 0 25 50 0 41 /

20M Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 15 / 66 Report Format Version: 6.1.1 16QAM Band /

BW RB Size RB Offset Low CH 39758 2506.8 MHz 39790 2510 MHz Mid CH 40040 2535 MHz High CH 40290 2560 MHz 41 /

20M 1 1 1 50 50 50 100 Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total 21.82 22.51 25.19 21.84 22.62 25.26 21.96 21.44 24.72 21.76 22.38 25.09 21.65 22.65 25.19 21.69 22.71 25.24 21.92 21.39 24.67 22.02 22.20 25.12 21.57 22.84 25.26 21.80 22.85 25.37 21.88 21.50 24.70 21.95 22.29 25.13 21.72 22.75 25.28 21.79 22.80 25.33 21.90 21.41 24.67 22.04 22.30 25.18 21.83 22.72 25.31 21.82 22.89 25.40 21.95 21.55 24.76 22.02 22.27 25.16 21.77 22.82 25.34 21.73 22.91 25.37 21.99 21.48 24.75 22.00 22.31 25.17 21.79 22.89 25.39 21.96 23.02 25.53 22.05 21.68 24.88 22.13 22.76 25.47 0 50 99 0 25 50 0 Low CH 16QAM Band /

BW RB Size RB Offset 40978 2628.8 MHz 40990 2630 MHz Mid CH 41240 2655 MHz High CH 41490 2680 MHz 1 1 1 50 50 50 100 Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total 22.11 22.91 25.54 22.09 22.93 25.54 21.56 21.52 24.55 22.08 21.84 24.97 24.72 21.92 26.55 24.88 21.94 26.66 21.81 21.07 24.47 22.05 21.46 24.78 24.15 22.04 26.23 24.29 22.01 26.31 21.87 21.02 24.48 21.97 21.27 24.64 24.18 22.18 26.30 24.32 22.27 26.43 21.58 21.41 24.51 22.09 21.61 24.87 23.99 21.85 26.06 24.08 21.94 26.15 21.49 21.37 24.44 21.94 21.70 24.83 24.06 21.86 26.11 24.11 21.89 26.15 21.51 21.38 24.46 22.01 21.79 24.91 24.79 22.04 26.64 24.92 22.08 26.74 21.65 21.52 24.60 22.17 21.88 25.04 0 50 99 0 25 50 0 41 /

20M Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 16 / 66 Report Format Version: 6.1.1 64QAM Band /

BW RB Size RB Offset Low CH 39758 2506.8 MHz 39790 2510 MHz Mid CH 40040 2535 MHz High CH 40290 2560 MHz 41 / 20M 1 1 1 50 50 50 100 Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total 21.82 22.58 25.23 21.88 22.64 25.29 21.93 21.28 24.63 21.74 22.34 25.06 21.60 22.69 25.19 21.62 22.73 25.22 21.90 21.45 24.69 22.03 22.32 25.19 21.69 22.71 25.24 21.79 22.81 25.34 21.82 21.37 24.61 22.00 22.29 25.16 21.77 22.74 25.29 21.81 22.75 25.32 21.81 21.42 24.63 22.06 22.41 25.25 21.72 22.79 25.30 21.74 22.82 25.32 21.79 21.54 24.68 22.05 22.25 25.16 21.70 22.85 25.32 21.75 22.90 25.37 21.94 21.51 24.74 22.08 22.31 25.21 21.92 22.92 25.46 21.99 22.97 25.52 22.01 21.65 24.84 22.16 22.80 25.50 0 50 99 0 25 50 0 Low CH 64QAM Band /

BW RB Size RB Offset 40978 2628.8 MHz 40990 2630 MHz Mid CH 41240 2655 MHz High CH 41490 2680 MHz 1 1 1 50 50 50 100 Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total Chain0 Chain1 Total 22.07 22.84 25.48 22.08 22.91 25.53 21.55 21.40 24.49 22.08 21.83 24.97 24.82 21.78 26.57 24.85 21.79 26.59 21.74 21.09 24.44 22.06 21.42 24.76 24.25 21.75 26.19 24.25 21.97 26.27 21.91 21.02 24.50 21.98 21.20 24.62 24.19 21.19 25.95 24.30 21.29 26.06 21.51 21.33 24.43 22.09 21.64 24.88 24.05 21.58 26.00 24.09 21.62 26.04 21.39 21.27 24.34 21.95 21.68 24.83 24.00 21.60 25.97 24.02 21.64 26.00 21.46 21.30 24.39 21.98 21.77 24.89 24.73 21.84 26.53 24.82 21.93 26.62 21.63 21.51 24.58 22.19 21.92 25.07 0 50 99 0 25 50 0 41 / 20M Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 17 / 66 Report Format Version: 6.1.1 4.2 Frequency Stability Measurement 4.2.1 Limits of Frequency Stabiliity Measurement The frequency stability shall be sufficient to ensure that the fundamental emission stays within the authorized frequency block. 4.2.2 Test Procedure a. Device is placed at the oven room. The oven room could control the temperatures and humidity. Power warm up is at least 15 min and power applied should perform before recording frequency error. b. EUT is connected the external power supply to control the DC input power. The test voltage range is from minimum to maximum working voltage. Each step shall be record the frequency error rate. c. The temperature range step is 10 degrees in this test items. All temperature levels shall be hold the 0.5 during the measurement testing. The each temperature step shall be at least 0.5 hours, consider the EUT could be test under the stability condition. 4.2.3 Test Setup DC Power Supply Oven Room External Power Source EUT Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 18 / 66 Report Format Version: 6.1.1 4.2.4 Test Results TX channel 39758 Frequency Error vs. Voltage Voltage

(Volts) 3.465 3.3 3.135 Frequency Error (ppm) LTE Band 41 20MHz Chain 0 0.0067815542 0.0059837243 0.0055848093 Chain 1 0.0067815542 0.0063826392 0.0059837243 Note: The applicant defined the normal working voltage is from 3.135Vdc to 3.465Vdc. Frequency Error vs. Temperature Voltage

(Volts) 50 40 30 20 10 0 Chain 0 0.0067815542 0.0063826392 0.0059837243 0.0055848093 0.0047869794 0.0039891495 Frequency Error (ppm) LTE Band 41 20MHz Chain 1 0.0063826392 0.0055848093 0.0055848093 0.0047869794 0.0039891495 0.0039891495 Limit

(ppm) 2.5 2.5 2.5 Limit

(ppm) 2.5 2.5 2.5 2.5 2.5 2.5 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 19 / 66 Report Format Version: 6.1.1 TX channel 40040 Frequency Error vs. Voltage Voltage

(Volts) 3.465 3.3 3.135 Frequency Error (ppm) LTE Band 41 20MHz Chain 0 0.0067061144 0.0063116371 0.0055226824 Chain 1 0.0063116371 0.0055226824 0.0051282051 Note: The applicant defined the normal working voltage is from 3.135Vdc to 3.465Vdc. Frequency Error vs. Temperature Voltage

(Volts) 50 40 30 20 10 0 Chain 0 0.0071005917 0.0067061144 0.0059171598 0.0055226824 0.0047337278 0.0043392505 Frequency Error (ppm) LTE Band 41 20MHz Chain 1 0.0067061144 0.0059171598 0.0055226824 0.0047337278 0.0039447732 0.0035502959 Limit

(ppm) 2.5 2.5 2.5 Limit

(ppm) 2.5 2.5 2.5 2.5 2.5 2.5 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 20 / 66 Report Format Version: 6.1.1 TX channel 40978 Frequency Error vs. Voltage Voltage

(Volts) 3.465 3.3 3.135 Frequency Error (ppm) LTE Band 41 20MHz Chain 0 0.0068472307 0.0060864273 0.0060864273 Chain 1 0.0064668290 0.0057060256 0.0057060256 Note: The applicant defined the normal working voltage is from 3.135Vdc to 3.465Vdc. Frequency Error vs. Temperature Frequency Error (ppm) LTE Band 41 20MHz Chain 1 0.0064668290 0.0060864273 0.0057060256 0.0053256239 0.0041844187 0.0038040170 Voltage

(Volts) 50 40 30 20 10 0 Chain 0 0.0060864273 0.0057060256 0.0049452222 0.0049452222 0.0041844187 0.0038040170 Limit

(ppm) 2.5 2.5 2.5 Limit

(ppm) 2.5 2.5 2.5 2.5 2.5 2.5 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 21 / 66 Report Format Version: 6.1.1 TX channel 41240 Frequency Error vs. Voltage Voltage

(Volts) 3.465 3.3 3.135 Frequency Error (ppm) LTE Band 41 20MHz Chain 0 0.0071563089 0.0064030132 0.0060263653 Chain 1 0.0067796610 0.0060263653 0.0056497175 Note: The applicant defined the normal working voltage is from 3.135Vdc to 3.465Vdc. Frequency Error vs. Temperature Voltage

(Volts) 50 40 30 20 10 0 Chain 0 0.0060263653 0.0056497175 0.0048964218 0.0045197740 0.0037664783 0.0030131827 Frequency Error (ppm) LTE Band 41 20MHz Chain 1 0.0064030132 0.0060263653 0.0056497175 0.0041431262 0.0037664783 0.0033898305 Limit

(ppm) 2.5 2.5 2.5 Limit

(ppm) 2.5 2.5 2.5 2.5 2.5 2.5 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 22 / 66 Report Format Version: 6.1.1 4.3 Emission Bandwidth Measurement 4.3.1 Limits of Emission Bandwidth Measurement According to FCC 27.53(m)(6) specified that emission bandwidth is defined as the width of the signal between two points, one below the carrier center frequency and one above the carrier center frequency, outside of which all emissions are attenuated at least 26dB below the transmitter power. 4.3.2 Test Procedure The transmitter output was connected to the spectrum analyzer through an attenuator. The bandwidth of the fundamental frequency was measured by spectrum analyzer with RBW = 430kHz and VBW = 1.2MHz

(Channel Bandwidth: 20MHz). The 26dB bandwidth is defined as the total spectrum the power of which is higher than peak power minus 26dB. 4.3.3 Test Setup 20dB Attenuation PAD Spectrum Analyzer EUT Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 23 / 66 Report Format Version: 6.1.1 4.3.4 Test Result LTE Band 41 Channel Bandwidth: 20MHz Channel Frequency

(MHz) 39758 39790 40040 40290 40978 40990 41240 41490 2506.8 2510 2535 2560 2628.8 2630 2655 2680

-26dBc Bandwidth (MHz) QPSK 16QAM 64QAM Chain 0 19.34 19.73 19.94 19.57 19.52 19.50 19.73 19.44 Chain 1 19.55 19.78 19.92 19.58 19.29 19.56 19.64 19.56 Chain 0 19.51 19.55 19.96 19.57 19.37 19.48 19.57 19.47 Chain 1 19.30 19.67 20.00 19.63 20.82 19.53 19.45 19.48 Chain 0 19.31 19.70 20.13 19.56 19.33 19.49 19.60 19.59 Chain 1 19.38 19.62 19.98 19.62 20.82 19.54 19.60 19.55 Channel Frequency

(MHz) 39758 39790 40040 40290 40978 40990 41240 41490 2506.8 2510 2535 2560 2628.8 2630 2655 2680 LTE Band 41 Channel Bandwidth: 20MHz Occupied Bandwidth (MHz) QPSK 16QAM 64QAM Chain 1 17.86 17.86 18.00 18.00 17.93 18.00 18.00 18.00 Chain 0 17.86 17.93 17.93 17.86 17.86 17.80 17.93 18.00 Chain 1 17.93 17.93 17.86 17.86 17.93 18.00 17.80 17.93 Chain 0 17.86 17.80 17.93 17.86 17.86 17.93 17.93 18.00 Chain 1 17.93 17.93 18.00 17.80 17.93 18.06 17.80 17.93 Chain 0 17.86 17.93 17.93 17.86 17.93 17.93 17.86 18.06 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 24 / 66 Report Format Version: 6.1.1

-26dBc Bandwidth Occupied Bandwidth Spectrum Plot Of Worst Value 20MHz / 64QAM 20MHz / QPSK Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 25 / 66 Report Format Version: 6.1.1 4.4.4 Test Results LTE Band 41 / QPSK Channel Bandwidth 20MHz Chain 0 Channel 39758 100 RB Channel 39790 100 RB Channel 40040 100 RB Channel 40290 100 RB Channel 40978 100 RB Channel 40990 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 27 / 66 Report Format Version: 6.1.1 Channel 41240 100 RB Channel 41490 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 28 / 66 Report Format Version: 6.1.1 LTE Band 41 / 16QAM Channel Bandwidth 20MHz Chain 0 Channel 39758 100 RB Channel 39790 100 RB Channel 40040 100 RB Channel 40290 100 RB Channel 40978 100 RB Channel 40990 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 29 / 66 Report Format Version: 6.1.1 Channel 41240 100 RB Channel 41490 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 30 / 66 Report Format Version: 6.1.1 LTE Band 41 / 64QAM Channel Bandwidth 20MHz Chain 0 Channel 39758 100 RB Channel 39790 100 RB Channel 40040 100 RB Channel 40290 100 RB Channel 40978 100 RB Channel 40990 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 31 / 66 Report Format Version: 6.1.1 Channel 41240 100 RB Channel 41490 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 32 / 66 Report Format Version: 6.1.1 LTE Band 41 / QPSK Channel Bandwidth 20MHz Chain 1 Channel 39758 100 RB Channel 39790 100 RB Channel 40040 100 RB Channel 40290 100 RB Channel 40978 100 RB Channel 40990 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 33 / 66 Report Format Version: 6.1.1 Channel 41240 100 RB Channel 41490 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 34 / 66 Report Format Version: 6.1.1 LTE Band 41 / 16QAM Channel Bandwidth 20MHz Chain 1 Channel 39758 100 RB Channel 39790 100 RB Channel 40040 100 RB Channel 40290 100 RB Channel 40978 100 RB Channel 40990 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 35 / 66 Report Format Version: 6.1.1 Channel 41240 100 RB Channel 41490 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 36 / 66 Report Format Version: 6.1.1 LTE Band 41 / 64QAM Channel Bandwidth 20MHz Chain 1 Channel 39758 100 RB Channel 39790 100 RB Channel 40040 100 RB Channel 40290 100 RB Channel 40978 100 RB Channel 40990 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 37 / 66 Report Format Version: 6.1.1 Channel 41240 100 RB Channel 41490 100 RB Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 38 / 66 Report Format Version: 6.1.1 4.5 Peak To Average Ratio 4.5.1 Limits of Peak To Average Ratio Measurement In measuring transmissions in this band using an average power technique, the peak to-average ratio (PAR) of the transmission may not exceed 13 dB 4.5.2 Test Setup 4.5.3 Test Procedures 20dB Attenuation PAD Spectrum Analyzer EUT a. Set resolution/measurement bandwidth signals occupied bandwidth;

b. Set the number of counts to a value that stabilizes the measured CCDF curve;

c. Record the maximum PAPR level associated with a probability of 0.1%. Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 39 / 66 Report Format Version: 6.1.1 4.5.4 Test Results Channel Frequency

(MHz) 39758 39790 40040 40290 40978 40990 41240 41490 2506.8 2510 2535 2560 2628.8 2630 2655 2680 LTE Band 41 Channel Bandwidth 20MHz Peak To Average Ratio (dB) QPSK 16QAM 64QAM Chain 0 Chain 1 Chain 0 Chain 1 Chain 0 Chain 1 6.89 6.90 6.42 5.61 6.75 6.75 6.27 6.46 6.43 6.28 7.05 5.72 6.84 6.94 6.11 6.37 5.92 5.89 5.83 5.78 6.08 6.02 5.38 5.87 5.82 5.51 6.14 5.77 6.07 6.06 5.34 6.30 6.79 6.65 6.50 5.63 6.35 6.32 5.96 6.24 Spectrum Plot Of Worst Value 20MHz / 64QAM 6.80 6.60 6.88 5.94 6.32 6.22 5.91 6.36 Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 40 / 66 Report Format Version: 6.1.1 4.6 Conducted Spurious Emissions 4.6.1 Limits of Conducted Spurious Emissions Measurement For LTE Band 41 On any frequency outside a licensees frequency block, The power of any emission shall be attenuated below the transmitter power (P) by at least 55 + 10 log (P) dB. The emission limit equal to 25dBm. 4.6.2 Test Setup 4.6.3 Test Procedure 20dB Attenuation PAD Spectrum Analyzer EUT a. For LTE band LTE Band 41 measurements were done at 6 channels: low, middle and high operational frequency range. b. When the spectrum scanned from 9kHz to 20GHz, it shall be connected to the 20dB pad attenuated the carried frequency. The spectrum set RB = 1MHz, VB = 3MHz for LTE Band 41. Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 41 / 66 Report Format Version: 6.1.1 4.6.4 Test Results LTE Band 41 Channel Band width: 20MHz Channel 39758 Chain 0 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 42 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 39790 Chain 0 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 43 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 40040 Chain 0 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 44 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 40290 Chain 0 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 45 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 40978 Chain 0 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 46 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 40990 Chain 0 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 47 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 41240 Chain 0 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 48 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 41490 Chain 0 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 49 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 39758 Chain 1 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 50 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 39790 Chain 1 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 51 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 40040 Chain 1 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 52 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 40290 Chain 1 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 53 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 40978 Chain 1 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 54 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 40990 Chain 1 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 55 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 41240 Chain 1 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 56 / 66 Report Format Version: 6.1.1 LTE Band 41 Channel Band width: 20MHz Channel 41490 Chain 1 Frequency Range : 9kHz~3GHz Frequency Range : 3GHz~10GHz Frequency Range : 10GHz~20GHz Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 57 / 66 Report Format Version: 6.1.1 4.7 Radiated Emission Measurement 4.7.1 Limits of Radiated Emission Measurement For LTE Band 41 On any frequency outside a licensees frequency block, The power of any emission shall be attenuated below the transmitter power (P) by at least 55 + 10 log (P) dB. The emission limit equal to 25dBm. 4.7.2 Test Procedure a. The power was measured with R&S Spectrum Analyzer. For LTE Band 41 measurements were done at 6 channels (low, middle and high channel of operational frequency range.) b. Substitution method is used for E.I.R.P measurement. In the semi-anechoic chamber, EUT placed on the 0.8m height of Turn Table, rotated the table around 360 degrees to search the maximum radiation power and receiver antenna shall be rotated vertical and horizontal polarization and moved height from 1m to 4m to find the maximum polar radiated power. The Read Value is the spectrum reading the maximum power value. c. The substitution antenna is substituted for EUT at the same position and signals generator export the CW signal to the substitution antenna via a TX cable. Rotated the Turn Table and moved receiving antenna to find the maximum radiation power. Adjust output power level of S.G to get a Value of spectrum reading equal to Read Value of step b. Record the power level of S.G d. EIRP = Output power level of S.G TX cable loss + Antenna gain of substitution antenna. Note: The resolution bandwidth and video bandwidth of test receiver/spectrum analyzer is 1MHz/3MHz. 4.7.3 Deviation from Test Standard No deviation. Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 58 / 66 Report Format Version: 6.1.1 4.7.4 Test Setup For the actual test configuration, please refer to the attached file (Test Setup Photo). Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 59 / 66 Report Format Version: 6.1.1 4.7.5 Test Results Below 1GHz LTE Band 41 Channel Bandwidth: 20MHz Mode TX channel 39790 Frequency Range Below 1000 MHz No. Freq. (MHz) 1 2 3 4 5 6 98.88 122.78 191.67 245.09 342.09 687.91 No. Freq. (MHz) 1 2 3 4 5 6 98.88 166.36 232.43 364.58 498.13 687.91 Antenna Polarity & Test Distance: Horizontal at 3 M Reading

(dBm)

-64.06

-63.00

-70.85

-64.75

-70.10

-75.59 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-79.24

-78.45

-86.99

-82.18

-87.97

-94.92 10.03 13.03 12.45 14.03 17.17 24.88

-69.21

-65.42

-74.54

-68.15

-70.80

-70.04

-25.00

-25.00

-25.00

-25.00

-25.00

-25.00

-44.21

-40.42

-49.54

-43.15

-45.80

-45.04 Antenna Polarity & Test Distance: Vertical at 3 M Reading

(dBm)

-64.73

-66.46

-66.37

-71.24

-73.48

-73.25 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-80.25

-81.45

-82.80

-89.11

-93.30

-93.20 10.03 14.47 12.84 17.85 21.24 24.88

-70.22

-66.98

-69.96

-71.26

-72.06

-68.32

-25.00

-25.00

-25.00

-25.00

-25.00

-25.00

-45.22

-41.98

-44.96

-46.26

-47.06

-43.32 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 60 / 66 Report Format Version: 6.1.1 Mode TX channel 40990 Frequency Range Below 1000 MHz No. Freq. (MHz) 1 2 3 4 5 6 98.88 122.78 233.84 268.99 450.33 687.91 No. Freq. (MHz) 1 2 3 4 5 6 98.88 166.36 232.43 433.46 687.91 797.57 Antenna Polarity & Test Distance: Horizontal at 3 M Reading

(dBm)

-64.43

-62.92

-52.88

-63.84

-60.34

-76.23 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-79.61

-78.37

-69.58

-80.67

-79.95

-95.56 10.03 13.03 13.07 15.09 20.40 24.88

-69.58

-65.34

-56.51

-65.58

-59.55

-70.68

-25.00

-25.00

-25.00

-25.00

-25.00

-25.00

-44.58

-40.34

-31.51

-40.58

-34.55

-45.68 Antenna Polarity & Test Distance: Vertical at 3 M Reading

(dBm)

-64.36

-65.42

-66.80

-64.40

-74.05

-76.18 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-79.88

-80.41

-83.23

-83.75

-94.00

-95.93 10.03 14.47 12.84 19.93 24.88 26.56

-69.85

-65.94

-70.39

-63.82

-69.12

-69.37

-25.00

-25.00

-25.00

-25.00

-25.00

-25.00

-44.85

-40.94

-45.39

-38.82

-44.12

-44.37 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 61 / 66 Report Format Version: 6.1.1 Above 1GHz LTE Band 41 Channel Bandwidth: 20MHz Mode TX channel 39758 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 5013.45 Reading

(dBm)

-42.19 S.G Power Value (dBm)

-55.98 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 21.02

-34.96

-25.00

-9.96 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 5013.88 Reading

(dBm)

-41.34 S.G Power Value (dBm)

-54.81 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 21.02

-33.79

-25.00

-8.79 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Mode TX channel 39790 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 5028.68 Reading

(dBm)

-41.57 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-55.34 21.06

-34.28

-25.00

-9.28 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 5028.97 Reading

(dBm)

-40.83 S.G Power Value (dBm)

-54.30 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 21.06

-33.24

-25.00

-8.24 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Mode TX channel 40040 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 5070.14 Reading

(dBm)

-44.22 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-57.93 21.15

-36.78

-25.00

-11.78 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 5069.71 Reading

(dBm)

-43.01 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-56.47 21.15

-35.32

-25.00

-10.32 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 62 / 66 Report Format Version: 6.1.1 Mode TX channel 40290 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 5111.32 Reading

(dBm)

-45.92 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-59.60 21.27

-38.33

-25.00

-13.33 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 5119.71 Reading

(dBm)

-44.43 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-57.91 21.30

-36.61

-25.00

-11.61 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Mode TX channel 40978 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 5257.73 Reading

(dBm)

-41.69 S.G Power Value (dBm)

-55.31 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 21.76

-33.55

-25.00

-8.55 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 5257.64 Reading

(dBm)

-41.51 S.G Power Value (dBm)

-55.08 Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB) 21.76

-33.32

-25.00

-8.32 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Mode TX channel 40990 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 5251.17 Reading

(dBm)

-46.58 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-60.21 21.74

-38.47

-25.00

-13.47 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 5260.14 Reading

(dBm)

-45.40 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-58.97 21.76

-37.21

-25.00

-12.21 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 63 / 66 Report Format Version: 6.1.1 Mode TX channel 41240 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 5310.14 Reading

(dBm)

-48.47 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-62.04 21.90

-40.14

-25.00

-15.14 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 5309.86 Reading

(dBm)

-44.66 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-58.24 21.90

-36.34

-25.00

-11.34 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Mode TX channel 41490 Frequency Range Above 1000MHz Antenna Polarity & Test Distance: Horizontal at 3 M No. Freq. (MHz) 1 5360.43 Reading

(dBm)

-49.13 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-62.67 22.06

-40.61

-25.00

-15.61 Antenna Polarity & Test Distance: Vertical at 3 M No. Freq. (MHz) 1 5360.00 Reading

(dBm)

-46.37 S.G Power Value (dBm) Correction Factor (dB) EIRP (dBm) Limit (dBm) Margin (dB)

-59.98 22.06

-37.92

-25.00

-12.92 Remarks:

1. Output Power (dBm) = S.G Value (dBm) + Correction Factor (dB). 2. Correction Factor (dB) = Substitution Antenna Gain (dB) + Cable Loss (dB). Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 64 / 66 Report Format Version: 6.1.1 5 Pictures of Test Arrangements Please refer to the attached file (Test Setup Photo). Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 65 / 66 Report Format Version: 6.1.1 Appendix Information on the Testing Laboratories We, Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch, were founded in 1988 to provide our best service in EMC, Radio, Telecom and Safety consultation. Our laboratories are accredited and approved according to ISO/IEC 17025. If you have any comments, please feel free to contact us at the following:

Linko EMC/RF Lab Tel: 886-2-26052180 Fax: 886-2-26051924 Hwa Ya EMC/RF/Safety Lab Tel: 886-3-3183232 Fax: 886-3-3270892 Email: service.adt@tw.bureauveritas.com Web Site: www.bureauveritas-adt.com Hsin Chu EMC/RF/Telecom Lab Tel: 886-3-6668565 Fax: 886-3-6668323 The address and road map of all our labs can be found in our web site also.

--- END ---

Report No.: RF170328D10-1 Reference No.: 160617D01 Page No. 66 / 66 Report Format Version: 6.1.1

PHOTOGRAPHS OF THE TEST CONFIGURATION Radiated Emission Test (Below 1GHz) Report No.: RF170328D10 1 of 2 Radiated Emission Test (Above 1GHz) Report No.: RF170328D10 2 of 2

PHOTOGRAPHS OF THE TEST CONFIGURATION Radiated Emission Test (Below 1GHz) Report No.: RF170328D10-1 1 of 2 Radiated Emission Test (Above 1GHz) Report No.: RF170328D10-1 2 of 2