Hi,you dont need make 07.D0 BL,and testpointing anymore.
you need edit any CG1 extracted from 4xR MP using FB3,firmware menu,choose 4xr MP and save only CG1.open the saved CG1 using XVI32,find at e398mod.com in PC Software section.in XVI32,find offset 1B in the first row,or use find menu,change hex number of offset 1B from 00 to 01,if it cant, change 01 to 00,just change number manually.save and flash directly to phone.it worked always for me.i forget exactly,but one of them is absolutely true.i used this method every flashing new 4xr,unless you'll stuck in previous MP.
RSA patching by using the new method LTE2 never worked in Flash backup 3.dwnlod FB3 at motorola-tools.net  in trial mode.trust me it works.