Can't connect to hologram/anthing

I have an MKRNB 1500 that I am trying to get to connect to the internet using a hologram sim. So far only SMS works. Following this example:
https://support.hologram.io/hc/en-us/articles/360038810214-u-blox-SARA-R410

I have upgraded my firmware to L0.0.00.00.05.12,A.02.19

And I am getting an error at AT+USOWR, log below. Sometimes I get a CME error (operation not allowed) at USCOC. UMNOPROF is set to 2 because I am in the U.S. and I found 2 (ATT) connects the fastest.

I have also tried running the stock Arduino SSL client programs, but they fail too (output below)

Has anyone gotten a SARA-R4 connecting via TCP to anything reliably in the U.S.? If so I would love to hear how you configured the modem and got this to work. After much google searching, I am totally stuck on this. I am open to any suggestions, I am look for any non-sms way to communicate with my device.

.

AT

OK
AT+UMNOPROF?

+UMNOPROF: 2

OK
AT+CGDCONT=1,"IP","hologram"

OK
AT+COPS=

ERROR
AT+COPS=0

OK
AT+CREG?

+CREG: 0,5

OK
AT+USOCR=6

+USOCR: 0

OK
AT+USOCO=0,"cloudsocket.hologram.io",9999

OK
AT+UDCONF=1,1

OK

+UUSORD: 0,2
AT+USOWR=0,61,"7B226B223A224142434431323334222C2264223A2248656C6C6F2066726F6D206D79205234313021222C2274223A224E6F76615F41727469636C65227D"

+CME ERROR: Operation not allowed

AT

OK
AT+CMEE=0

OK
AT+CFUN=0

OK
AT+CPIN?

+CPIN: READY

OK
AT+CMGF=1

OK
AT+UDCONF=1,1

OK
AT+CTZU=1

OK
AT+CGDCONT=1,"IP","hologram"

OK
AT+UAUTHREQ=1,0

OK
AT+CFUN=1

OK
AT+CEREG?

+CEREG: 0,0

OK
AT+CEREG?

+CEREG: 0,2

OK
AT+CEREG?

+CEREG: 0,2

OK
AT+CEREG?

+CEREG: 0,2

OK
AT+CEREG?

+CEREG: 0,2

OK
AT+CEREG?

+CEREG: 0,5

OK
AT+CGATT=1

OK
AT+CGACT?

+CGACT: 1,1

OK
connecting...
AT+USECMNG=0,0,"AddTrust_External_CA_Root",1082

>
+USECMNG: 0,0,"AddTrust_External_CA_Root","1D3554048578B03F42424DBF20730A3F"

OK
AT+USECMNG=0,0,"Baltimore_CyberTrust_Root",891

>
+USECMNG: 0,0,"Baltimore_CyberTrust_Root","ACB694A59C17E0D791529BB19706A6E4"

OK
AT+USECMNG=0,0,"COMODO_RSA_Certification_Authority",1500

>
+USECMNG: 0,0,"COMODO_RSA_Certification_Authority","1B31B0714036CC143691ADC43EFDEC18"

OK
AT+USECMNG=0,0,"DST_Root_CA_X3",846

>
+USECMNG: 0,0,"DST_Root_CA_X3","410352DC0FF7501B16F0028EBA6F45C5"

OK
AT+USECMNG=0,0,"DigiCert_High_Assurance_EV_Root_CA",969

>
+USECMNG: 0,0,"DigiCert_High_Assurance_EV_Root_CA","D474DE575C39B2D39C8583C5C065498A"

OK
AT+USECMNG=0,0,"Entrust_Root_Certification_Authority",1173

>
+USECMNG: 0,0,"Entrust_Root_Certification_Authority","D6A5C3ED5DDD3E00C13D87921F1D3FE4"

OK
AT+USECMNG=0,0,"Equifax_Secure_Certificate_Authority",804

>
+USECMNG: 0,0,"Equifax_Secure_Certificate_Authority","67CB9DC013248A829BB2171ED11BECD4"

OK
AT+USECMNG=0,0,"GeoTrust_Global_CA",856

>
+USECMNG: 0,0,"GeoTrust_Global_CA","F775AB29FB514EB7775EFF053C998EF5"

OK
AT+USECMNG=0,0,"GeoTrust_Primary_Certification_Authority_G3",1026

>
+USECMNG: 0,0,"GeoTrust_Primary_Certification_Authority_G3","B5E83436C910445848706D2E83D4B805"

OK
AT+USECMNG=0,0,"GlobalSign",958

>
+USECMNG: 0,0,"GlobalSign","9414777E3E5EFD8F30BD41B0CFE7D030"

OK
AT+USECMNG=0,0,"Go_Daddy_Root_Certificate_Authority_G2",969

>
+USECMNG: 0,0,"Go_Daddy_Root_Certificate_Authority_G2","803ABC22C1E6FB8D9B3B274A321B9A01"

OK
AT+USECMNG=0,0,"VeriSign_Class_3_Public_Primary_Certification_Authority_G5",1239

>
+USECMNG: 0,0,"VeriSign_Class_3_Public_Primary_Certification_Authority_G5","CB17E431673EE209FE455793F30AFA1C"

OK
AT+USECMNG=2,0,"AmazonRootCA1"

ERROR
AT+USECMNG=0,0,"Starfield_Services_Root_Certificate_Authority_G2",1011

>
+USECMNG: 0,0,"Starfield_Services_Root_Certificate_Authority_G2","173574AF7B611CEBF4F93CE2EE40F9A2"

OK
AT+USOCR=6

+USOCR: 0

OK
AT+USOSEC=0,1,0

OK
AT+USECPRF=0,0,1

OK
AT+USOCO=0,"www.arduino.cc",443

ERROR
AT+USOCL=0

OK
connection failed
AT+USOER

+USOER: 11

OK

disconnecting.

Update:

Following this example, I can get data over UDP fine: https://community.hologram.io/t/cannot-receive-sms-on-r410m/3088/7, however, I still can’t send/receive anything over TCP.

We see the R410 working all the time with transferring TCP data so that’s strange. I’m seeing your CEREG and CREG don’t seem to show that it actually registered on the network?

You may not want to use UMNOPROF 2. The reason it’s faster is because it limits what can connect. Try going through this guide: https://support.hologram.io/hc/en-us/articles/360038810214-u-blox-SARA-R410

Oh, never mind, you already did, but try to follow the same band mask and UMNOPROF commands as in there. It’s normal for Cat-M to be slow the first couple times.

Setting UMNOPROF to 100 seems to have worked. Isn’t profile 100 for Europe though (I am U.S. based)?

Sorry missed your reply here. It’s not just for Europe, more just fits with various roaming profiles common across Europe but also overlaps with how our SIMs tend to work