[Q] What are the advantages of S-off? - General Questions and Answers

I've been reading a little on this S-off thing and was wondering what its purpose actually is and what the advantages are from doing it? I know I was able to flash my HTC Vivid without it so what is it really used for? Thank you in advance.

Answer...
phrotac said:
I've been reading a little on this S-off thing and was wondering what its purpose actually is and what the advantages are from doing it? I know I was able to flash my HTC Vivid without it so what is it really used for? Thank you in advance.
Click to expand...
Click to collapse
See: What Is S-OFF & How To Gain It On HTC Android Phones With unrevoked forever
In a nutshell, S-OFF means that the NAND portion of the device is unlocked and can be written to. The default setting for HTC’s devices is S-ON, which means that neither can you access certain areas of the system nor can you guarantee a permanent root. Furthermore, signature check for firmware images is also ensured by the S-ON flag.
Click to expand...
Click to collapse
---------- Post added at 11:01 PM ---------- Previous post was at 10:58 PM ----------
Basically, if you are going to be installing custom ROMs, you probably want to set s-off so you can flash unsigned ROMs.

Very interesting. Thank you for responding That gives me something to think about.

In short. S-OFF allows you to change pretty much everything. Your CID, firmware (radio, hboot etc) and most important thing probably, allows you to flash older RUUs
Sent from my HTC Sensation XE with Beats Audio using Tapatalk 2

If you are going to be changing roms, themes, etc, then leave it off. If not then turn in back on.

kdub83 said:
If you are going to be changing roms, themes, etc, then leave it off. If not then turn in back on.
Click to expand...
Click to collapse
I found the perfect ROM from WCX but I never had to use a wire on it though. Is HTCdev the reason why? I'm just trying to figure out this whole s-off thing because I saw a video where someone used a piece of insulated wire and was wondering why. I'm sorry if I wasn't clear enough with my questions earlier... My bad.

S-OFF
Hi - I've had HTC devices since the Eris way back in 2010 - currently running the Rezound. Hopefully I can shed some more light.
When I first got the Rezound I was coming over from an S-OFF Eris... if you wanted to flash something custom, you'd go to htcdev.com and use their "unlock bootloader" tool. Once you ran that and followed a few other steps, you are reverted to stock and your bootloader now has a little warning "unlocked" in the text at the top. This was in January 2012, and ROMs back then came with 2 things - the ROM and a Kernel. You had to flash the kernel separatley (and via the bootloader as opposed to a custom recovery), as S-ON (even unlocked) still won't let you write to certain places (in the case of the kernel, its the boot partition).
We got S-OFF several months later (the thing using the wire trick). In S-OFF - custom recovery can write to all areas of the device - no more need for any separate files, you just flash a ROM in custom recovery and everything is set up the way it should be. Added bonus - no need to unlock the bootloader from htcdev... so no "unlocked" warning message.
Here was my S-OFF process:
1. Run the official RUU exe to get your device back to stock with a Locked bootloader (backup any files on the SDCard first!).
2. Perform the wire trick
3. Flash a custom recovery and proceed with flashing ROMS
Let me know if I can clarify anything...

Basically allows you to flash RADIOS that have not been signed by HTC
Sent from my Galaxy Nexus using xda premium

Ryan Kasper said:
Hi - I've had HTC devices since the Eris way back in 2010 - currently running the Rezound. Hopefully I can shed some more light.
When I first got the Rezound I was coming over from an S-OFF Eris... if you wanted to flash something custom, you'd go to htcdev.com and use their "unlock bootloader" tool. Once you ran that and followed a few other steps, you are reverted to stock and your bootloader now has a little warning "unlocked" in the text at the top. This was in January 2012, and ROMs back then came with 2 things - the ROM and a Kernel. You had to flash the kernel separatley (and via the bootloader as opposed to a custom recovery), as S-ON (even unlocked) still won't let you write to certain places (in the case of the kernel, its the boot partition).
We got S-OFF several months later (the thing using the wire trick). In S-OFF - custom recovery can write to all areas of the device - no more need for any separate files, you just flash a ROM in custom recovery and everything is set up the way it should be. Added bonus - no need to unlock the bootloader from htcdev... so no "unlocked" warning message.
Click to expand...
Click to collapse
Thank you very much. That DOES explain it very well.
Ryan Kasper said:
Here was my S-OFF process:
1. Run the official RUU exe to get your device back to stock with a Locked bootloader (backup any files on the SDCard first!).
2. Perform the wire trick
3. Flash a custom recovery and proceed with flashing ROMS
Let me know if I can clarify anything...
Click to expand...
Click to collapse
Are you saying I can make my bootloader say LOCKED again? I thought I could only make it say UNLOCKED or RELOCKED now that I've unlocked it. That is so awesome. And then the s-off will give me permanent root?

Are you saying I can make my bootloader say LOCKED again? I thought I could only make it say UNLOCKED or RELOCKED now that I've unlocked it. That is so awesome. And then the s-off will give me permanent root?
Click to expand...
Click to collapse
Yup! Once you are S-OFF you will be back on the stock bootloader that reads "locked". There are a variety of HBOOTS (AKA Bootloaders) you can flash (well - there are for my device currently...). For the Rezound right now I have a variety of them with different verbages in the title (example - "locked S-ON", "Rezound") - or you can simply leave it at the stock HBOOT though you will not be able to flash, say a custom recovery, using fastboot in the bootloader via a terminal emulator (you have to use the PH98IMG.zip method in the bootloader)... Also the devs that made the wire trick available offer their own hboot "juopunutbear" - this one allows fastboot recovery flashing... - here for the vivid http://unlimited.io/jb_holiday.htm
Also - be VERY careful when updating the bootloader - it is a very common way to brick the device... I always check the MD5Sum before copying to SD and flashing.
And regarding permanent root - absolutely. Flash SuperSU from custom recovery (the zip version available here - http://forum.xda-developers.com/showthread.php?t=1538053

Ryan Kasper said:
Yup! Once you are S-OFF you will be back on the stock bootloader that reads "locked". There are a variety of HBOOTS (AKA Bootloaders) you can flash (well - there are for my device currently...). For the Rezound right now I have a variety of them with different verbages in the title (example - "locked S-ON", "Rezound") - or you can simply leave it at the stock HBOOT though you will not be able to flash, say a custom recovery, using fastboot in the bootloader via a terminal emulator (you have to use the PH98IMG.zip method in the bootloader)... Also the devs that made the wire trick available offer their own hboot "juopunutbear" - this one allows fastboot recovery flashing... - here for the vivid http://unlimited.io/jb_holiday.htm
Also - be VERY careful when updating the bootloader - it is a very common way to brick the device... I always check the MD5Sum before copying to SD and flashing.
And regarding permanent root - absolutely. Flash SuperSU from custom recovery (the zip version available here - http://forum.xda-developers.com/showthread.php?t=1538053
Click to expand...
Click to collapse
This information is golden. Thank you very much

tinky1 said:
In short. S-OFF allows you to change pretty much everything. Your CID, firmware (radio, hboot etc) and most important thing probably, allows you to flash older RUUs
Sent from my HTC Sensation XE with Beats Audio using Tapatalk 2
Click to expand...
Click to collapse
Awesome! I have a couple more questions still *scratches head in confusion*...
Once I S-Off, can I reverse it if needed?
and
<Ignore this part... I found the information LOL>
What is an RUU? I have googled it and I can't find anything about it (maybe I'm just too tired or something)

phrotac said:
Awesome! I have a couple more questions still *scratches head in confusion*...
Once I S-Off, can I reverse it if needed?
Click to expand...
Click to collapse
Yup - here is how I'd do it if I had to for my device - http://forum.xda-developers.com/showthread.php?t=1612937 - careful if you do and read any warnings (brick opportunities again)

Hi,
It is possible, if I install custom rom, some function will not work without S-OFF?
The phone was routed and unlokced but it was S-ON.

Related

[Q] a couple questions

I just picked up the HTC 1x att version. When I got the phone it was already rooted and running paranoid android. Here is where I have a couple of questions. It has cwm touch as a recovery, I booted into the boot loader and at the top it says
***tampered***
***unlocked ***
Evita pvt ship son rl
Hboot-1.09.0000
Radio-0.17.32.09.12
Open DSP v28.1.0.32.0504
Why does it say tampered? I have had a few htc's first one was the dream. And have yet to see one say tampered.
Next, on the HTC boot screen it says some stuff about software not for use outside HTC..... is that part of the custom ROM?
And can anyone recommended a ROM that I can flash that is closer to stock or that contains the sense ui?
Thanks there's a lot I still need to read on here about this phone, any info will be greatly appreciated
31ken31 said:
I just picked up the HTC 1x att version. When I got the phone it was already rooted and running paranoid android. Here is where I have a couple of questions. It has cwm touch as a recovery, I booted into the boot loader and at the top it says
***tampered***
***unlocked ***
Evita pvt ship son rl
Hboot-1.09.0000
Radio-0.17.32.09.12
Open DSP v28.1.0.32.0504
Why does it say tampered? I have had a few htc's first one was the dream. And have yet to see one say tampered.
Next, on the HTC boot screen it says some stuff about software not for use outside HTC..... is that part of the custom ROM?
And can anyone recommended a ROM that I can flash that is closer to stock or that contains the sense ui?
Thanks there's a lot I still need to read on here about this phone, any info will be greatly appreciated
Click to expand...
Click to collapse
Thats normal...i dont know why either, but it means u're rooted and unlocked.
Rom that is close to sense:
- viperxl (im using it and its amazing)
- cleanrom (havent used it, but people been saying its amazing)
Sent from my HTC One XL
I would suggest downloading goomanager from the play market first before you go much further.
Open goomanager and open the app settings. There is an option to install openrecovery script.
This will pull the latest version of TWRP recovery and install it for you without any hassle. CWM has a lot of issues on the One X so try not to use it.
Other then that you Hboot being 1.09 means you don't have to flash the boot.img before you flash a rom. So if see install instructions for a ROM asking you to do that you can skip that step. This will save you a lot of headaches. It also means you can flash custom kernels and radios to your phone.
Viper Rom is a Sense rom that you can tweak like crazy and change almost every aspect of the rom.
Clean Rom is very close to stock with some optimizations added to it that make it one of the top roms.
doc_v15 said:
Thats normal...i dont know why either, but it means u're rooted and unlocked.
Rom that is close to sense:
- viperxl (im using it and its amazing)
- cleanrom (havent used it, but people been saying its amazing)
Sent from my HTC One XL
Click to expand...
Click to collapse
OK I'll have to try them out. Now I need to flash the boot image before installing the ROM? It seems more involved than the sensation XML I just retired. Is there a way to flash it from the phone being my laptop met its end via my 4 year old and a coffee.
31ken31 said:
Why does it say tampered? I have had a few htc's first one was the dream. And have yet to see one say tampered.
Next, on the HTC boot screen it says some stuff about software not for use outside HTC..... is that part of the custom ROM?
And can anyone recommended a ROM that I can flash that is closer to stock or that contains the sense ui?
Click to expand...
Click to collapse
HTC is constantly changing their security schemes, in reality to make it harder for the modding community to do their thing. So whatever you have experienced on past HTC devices doesn't really apply.
Its going to say tampered if its rooted, and possibly also if bootloader unlocked whether rooted or not (not sure). If you return to stock ROM and relock the bootloader, the tampered flag will go away. But the bootloader will only read as RELOCKED, you can't return it to the original condition of LOCKED (at least not currently).
The red text on the boot screen is also normal. It will appear if you are bootloader unlocked. There is no known way to change this at this time.
---------- Post added at 10:02 AM ---------- Previous post was at 09:56 AM ----------
31ken31 said:
OK I'll have to try them out. Now I need to flash the boot image before installing the ROM? It seems more involved than the sensation XML I just retired. Is there a way to flash it from the phone being my laptop met its end via my 4 year old and a coffee.
Click to expand...
Click to collapse
You only need to flash the boot.img seperately if you are on hboot 1.14 or higher. You are on hboot 1.09, so you don't need to do it. It will flash automatically when you flash any ROM from recovery.

[Q] How to get started from my situation

Hi! I'm a newcommer to Android world . I really like the idea of being able to get my phone customized but the more I read the more difficult it gets. Right now I'm trying to process some data and i would really like some help .
1. The S-Off
As far as I have got the s-on is some kind of security system protecting system partitions from getting modified/ersed. But i have found guides here that claim that I can get root acces without getting s-off my phone. But the root is acces to the system files, right? So how does it work? To do flashing i have to have root or s-off?
2. The HBOOT
So the HBOOT is a bootloader, it gets phone up when I push the button. Bu it is also the partition on the NAND. It gets me confused as some say that bootloader is like a BIOS. But as far as I understand BIOS it can be manipulating crucial PC settings like for example the CPU clocks. But I read that in the Android we have kernel for that. Is this right?
3. Mu current phone state
After some reading I tried to get some information about my phone. So when I got to the HBOOT (?) it says:
***LOCKED***
SAGA PVT SHIPS S-ON RL
HBOOT-2.02.0002
RADIO-3831.19.00.110
eMMC-boot
What bothers me is how from there i can get to flashing some Custom Roms? Currently I'm using official ICS becaouse I needed fully functioning phone for a while and didn't want to get it bricked. But right now I'm interested in change but when I think about it I'm getting confused. I would like to test Flinny's Cyanogen but I'm not sure can it be flashed on my hboot? Do i have to change hboot like it is in guide in here
http://forum.xda-developers.com/showthread.php?t=1318919
or just get my phone rooted on my HBOOT following the guide here:
http://forum.xda-developers.com/showthread.php?t=1525100
?
Ok **roll up sleeves **
You need to decide what you want.
You can just unlock your bootloader via HTC Dev and still be S-ON and flash custom ROM's.
This is the easy process. The disadvantages are that you will loose warranty and will need to flash the kernel separately using a PC and some commands every time you flash a ROM.
On the other hand you can downgrade your HBOOT to 0.98 and then proceed to use revolutionary to gain S-OFF and unlock the bootloader. With this method you can still revert to stock in case you need to send the phone for warranty. You also don't need any additional steps to flash the kernel. It will be flashed along with the ROM.
In either case, after HTC dev unlock or downgrade and S-OFF you will need to flash a custom recovery which will enable you to take full nandroid backups and flash ROM'S.
Choice is yours
Read about both the methods and decide. Everything can be found in the index.
Tapatalked from Desire S running Andromadus
VnnAmed said:
Currently I'm using official ICS becaouse I needed fully functioning phone for a while and didn't want to get it bricked.
Click to expand...
Click to collapse
If you are already using official ics i dont think u can go for the s-off method without unlocking first.
Ohh yes, forgot about that.
If you are on ICS, the only option for you now is HTC Dev unlock.
Tapatalked from Desire S running Andromadus
rain987 said:
If you are already using official ics i dont think u can go for the s-off method without unlocking first.
Click to expand...
Click to collapse
Yes, it seems that way http://forum.xda-developers.com/showthread.php?t=1318919 Guide here that is showing the proces of getting older HBOOT includes HTC-Dev unlocking. The bigger problem is that it includes many really advanced steps like creating gold cards and using Android Windows Tools which i guess are not the same thing as ADB(?) and there are no files becaouse
I will not supply the necessary files that is needed, you MUST know how to use SEARCH. I also suggest to give THANKS to those who originally made/uploaded the files.
Click to expand...
Click to collapse
wchich is overwhelming. The problem is that I don't want to get my phone bricked. My friend has Galaxy SII and is just flashing customs through Odin. I guess there isn't such thing for Desire S? So should i go this way? And if i follow this guide http://forum.xda-developers.com/showthread.php?t=1525100 i will have custom rom but stock kernel? I have read that some Roms need specefic kernel otherwise some features or whole ROMs doesn't work which is just sad. And the only guide i have found of flashing kernel while S-On is here http://forum.xda-developers.com/showthread.php?t=1794867 but the guy there has different phone and different HBOOT so i guess it doesn't hel me...
You need to read more. With your current level of understanding I suggest you put your rooting plans aside and keep reading.

[GUIDE] Root, SuperCID & S-Off for Evita Hboot 2.14 - Firmware 3.17 [Orange UK]

This is for International hTC One XL/Evita - Hboot 2.14 & firmware 3.17 (Orange UK)
If you own AT&T One X please look elsewhere, this guide is not for your phone
There is an abundance of information scattered in these forums and not all root methods/exploits work universally due to variation in firmware builds and Hboots.
I had to read a lot of threads to figure out how to S-off my Orange UK One XL with Hboot 2.14 and firmware build 3.17.
I was only interested in attaining S-off but had to start with HTCDev bootloader unlocking which I didn't really want to do but none of the known root exploits worked on my firmware.
I am sharing this hoping it would help others avoid taking pills for headaches when pursuing this noble quest
AIM:
Provide a short guide to others with similar device and configuration on where to start and simple clear steps to follow with needed links.
PREREQUISITES:
1. latest htc drivers for your Windows PC/laptop if you have one of those. Check here.
2. a working adb environment preferably from latest Android SDK, if you don't have this already set up please check here.
3. "USB debugging" must be checked under Phone settings>Developer options
4. an original htc USB cable is strongly recommended.
5. phone charged at above 50%
6. basic knowledge of using command prompt (cmd) in Windows and adb commands.
STEPS:
So in my case the steps were:
[1] Unlock bootloader through htcdev.com
[2] Flash/install TWRP recovery
This is done manually. All-In-One Toolkit didn't work for me BTW.
1. download latest TWRP recovery for One XL/Evita from here
2. you can rename file for easier command prompt typing later, like TWRP5.img
3. place file recovery file in your adb/fastboot folder
4. connect phone in fastboot mode to PC, make sure it displays fastboot USB on phone before you proceed.
5. start command prompt from within fastboot folder by right clicking inside folder and choosing "open prompt here", type following command:
Code:
C:\yourFastbootFolder> fastboot flash recovery TWRP5.img
Not a bad idea to test your recovery by making a nandroid backup before proceeding to next step.
[3] Flash a custom rom (root)
All custom roms are rooted by definition. If you chose e.g. ViperXL like I did remember to flash boot.img extracted form same rom zip afterwards, otherwise bootloop!
You can of course flash a SuperSU zip instead to gain root but I don't see the point.
[4] SuperCID
This is the simplest way that I found accidentally during my endless searches, all credit goes to @beaups for this one and @Austempest for sharing :good:
1. connect phone to PC in Android mode (mode where you can use phone)
2. Run the following command from command prompt (CMD):
Code:
C:\>adb shell
To enter adb shell, then enter following commands after each other:
Code:
# su
# echo -ne "11111111" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
3. Reboot to bootloader and hopefully you'll see 11111111 as your CID ...... yes
[5] S-Off
Now that your are rooted with SuperCID you can just follow @beaups simple steps for S-Off found here Facepalm S-Off
That is it.... you broke your shackles :laugh:
I am not a dev and for sure not taking credit for other people's work, merely giving back and hoping this assists clarify stuff and save some time.
Cheers!
the one clicks would not work for you because you dont have an att one x so the supercid exploit doesnt work on our phones
all phones go through htcdev.com to unlock, att phones just need supercid first.
you should make a not in your guide that this guide wont work for at&t phones.
exad said:
the one clicks would not work for you because you dont have an att one x so the supercid exploit doesnt work on our phones
all phones go through htcdev.com to unlock, att phones just need supercid first.
you should make a note in your guide that this guide wont work for at&t phones.
Click to expand...
Click to collapse
Thanks for this important reminder, note added in red on top!
You mentioned one click is only for AT&T phones, I guess you mean All-In-One Toolkit by hason2000, you see even in the tool's thread it's not stated explicitly that tool works only for AT&T, while the respective threads for these exploit state that it's for AT&T One X not negating other international versions!
Most guides/tools are for North America and some Australia but very few for Europe which BTW only recently came on board with 4G/LTE.
So figuring out, especially for noobs, what is what with all these international variations for one device and huge amount of information, while searching doesn't always provide an answer is a tedious task and can end up miserably :crying:
I hope it's in order to add some info for European Evitas
guys kindly don't quote whole post(s), thanks
Only AT&T Phones are different in the case of unlocking/rooting because they can't use HTCDEV. Every other onexl is the same for unlocking/rooting.
Great guide, thanks you! it worked !
Now i'm stuck at the next step. ha :crying:
i cant get root, because my touchscreen not functional after flashed a custom rom. i had success until step 3, i cant proceed to step 4 as i cant use my touches when the rom loaded. i didnt have any back up. i already searched around to dgrade my touchscreen firmware, but it needs root. im stuck here, i can flash custom cwm recovery, install custom rom but cant touch screen. the default cm10.1 dont have android debugging enabled by default, i cant enable it cos i cant touch the screen. if i restore to stock ruu, i can touch screen n all works, but i had a problem sync google contacts.
The reason im getting my hands on custom rom is bcos my stock XL(Asian version) will neve sync google contacts properly, i tried to flash JB stock RUU, but its same. then, i started to tamper my fon with unlocking bootloader via htcdev, flash cwm(twrp mess on my sdcard storage). i had experience on older htc devices but its my 1st time on the htc one series. right now, im on evita s-on, unlocked bootloader, hboot 2.14, cwm recovery(twrp mess on my sdcard storage), not-super CID. I 'm left with a non-touchable cm10.1, i can flash any rom that supports s-on. tried to relock bootloader but i cant flash stock ICS ruu.flashing stock JB RUU is ok. my target now is to s-off n superCID.
i can :
flash RUU 3.17, running a stock RUU 3.17.
unlock bootloader
flash custom recovery(twrp mess with my internal storage)
i cant :
root my device on stock rom
touchscreen wont work on custom rom
any help will b greatly appreciated.
Do not make multiple posts about the same thing. It is strictly against XDA rules.
sorry, may i know how to delete it? i click on edit/delete but cant see any options to delete my post.
You cannot
Sent from my One X using xda app-developers app
sir how to back or normal cid help me
sir how to back or normal cid help me i have a one x its allredy super cid how get back normal cid
Fastboot oem writecid whateveryourcidwas
This will only work once with s-on after supercid but will work as many times as you want if s-off.
Sent from my One X using xda app-developers app
ignore this post. found a relevant thread
How to upgrade bootloader to 2.14
So what if you are not on HBoot 2.14?
EDIT:
Warning: It is not a good idea to upgrade only the bootloader if you intend to flash the latest CM10 builds! Avoiding RUU and unlocking again out of laziness will probably get you in trouble afterwards. RUU is definitely the safer way. You'll find a good collection of ROMs here
http://forum.xda-developers.com/showthread.php?t=2119610
and the tutorial for upgrading RUU on a previously modded phone here
http://forum.xda-developers.com/showthread.php?p=26260005
I found these threads which helped me SuperCID, S-Off and finally upgrade the HBoot of my already rooted evita.
First you need the superCID from this post:
http://forum.xda-developers.com/showthread.php?p=42351491
Next Step S-Off:
http://forum.xda-developers.com/showthread.php?t=2155069
Then RegawMOD the appropriate bootloader from this thread and flash:
http://forum.xda-developers.com/showthread.php?t=1786498
The procedure was easy once I had found the appropriate threads on XDA
You should not update hboot that way. It only updates one file and not all the firmware files. Ruu or flashing firmware.zip are the best ways.
Sent from my HTC One XL using xda app-developers app
New CM10 and derivates require HBoot 2.14
exad said:
You should not update hboot that way. It only updates one file and not all the firmware files. Ruu or flashing firmware.zip are the best ways.
Click to expand...
Click to collapse
I simply needed an updated bootloader in order to enable flashing the latest CM10 nightlies. This did the job.
ernstlustig said:
exad said:
You should not update hboot that way. It only updates one file and not all the firmware files. Ruu or flashing firmware.zip are the best ways.
I simply needed an updated bootloader in order to enable flashing the latest CM10 nightlies. This did the job.
Click to expand...
Click to collapse
That's exactly why you should not do it that way. You may get issues along the way as a result of the software not properly utilizing your hardware. This is why you're supposed to update hboot. What you did is more like tricking it into thinking you updated the firmware.
Sent from my HTC One XL using xda app-developers app
Click to expand...
Click to collapse
ernstlustig said:
I simply needed an updated bootloader in order to enable flashing the latest CM10 nightlies. This did the job.
Click to expand...
Click to collapse
As exad said, CM 10 didnt want you to update just the hboot it wanted you to flash 3.18 RUU or equal to get updated firmware.
The requirement to install 3.18 RUU is listed as a requirement for CM. The hboot is what is checked but things like radio, adsp and wcnss are what actually needed to be updated, which you have not updated.
All you have successfully done is beaten the basic check for if you flashed the 3.18 RUU without actually doing what you were told to do.
How did you get s-off? i have a rogers version
salt204 said:
How did you get s-off? i have a rogers version
Click to expand...
Click to collapse
Links to XDA threads updated. (Sorry.) Please look again.
Has anyone tried successfully to write SuperCID into hboot 2.15 S-On devices?
as the instructions is for hboot 2.14, and I would like to S-Off the device with hboot 2.15 and it is S-On.
I have tried the hex with adb method, but it doesn't work.

[Q] A Little Assistance Please?

First off, I’d like to say thank you ahead of time to everyone here on this forum. You guys are very intelligent and generous and it is much appreciated. All the hard work and dedication that is put into this particular subject does not go without notice. :good:
My issue may not be too major or really an issue at all. It’s more of a ‘How-To’ per say and I’m just looking for a little guidance. I have used the resources available to me within XDA and am grateful that so many of you have spent so much time creating guides, code, etc. With that being said, I’d like to reach out to the User Forum in general and ask for your assistance.
I’m still in the mindset of the HTC HD2 days where it was a native Windows phone and all that took place was flashing. Flash this. Flash that. Once the concept was known, it was fairly simple and quite easy to comprehend.
Since then, I have upgraded to the T-Mo HTC Sensation 4G (About a year ago) and have kept it stock until just recently. This has been my first native Android phone so the ‘Rooting’ aspect is anew.
So on to the bulk of the posting. Please excuse my ‘Noobness’ in this matter.
I have followed ‘-AssKicker-’ guide to perfection which you can view below.
[GUIDE] Flashing roms with S-ON and 1.27+ HBOOT
http://forum.xda-developers.com/showthread.php?t=1631861
One of the most well written guides I’ve seen to date. Upon doing so, I currently have Unlocked my phone Via HTCDev. I have flashed a recovery (4EXT) and then flashed the ‘Android Revolution HD 1.2.2 Tmobile’ ROM. Everything went to perfection and works flawlessly. Now I’d like to take things a step further and obtain S-OFF and full root (If that’s the correct terminology?). This is where I’m at a standstill. From what I’ve read, I need to flash back to a “Stock” rom before I should perform the S-OFF procedure?
I guess I’m just confused at the process of achieving this. I’ve read several guides about achieving S-OFF such as the one by ‘auggie2k’ and other How To guides. I guess my question is what is my best option from where I’m currently at? The best process? Do I have a full root or just a Rooted ROM? Upon downloading a ‘Root Checker’ App within Play Store, it appears that I have root access. Is this just due to the Rooted ROM that I’ve flashed? How does the recovery come into play when I go about achieving S-OFF? Once I flash a “Stock” ROM, Do I need to rid of the recovery before gaining S-OFF?
If someone links an article to this thread, would you be so kind to explain the procedure more in depth from my viewpoint?
My best regards,
-Josh
For s-off, there isn't really a "best way". Since you have hboot version 1.2x, you need to use auggie's guide: http://forum.xda-developers.com/showthread.php?p=25202517
Recovery will not be affected in any way after you s-off your device. Recovery is a mode in which you can do multiple tasks including but not limited to (these are the most common tasks in recovery) 1. Flash zip files (ROMs, mods...) 2. Make nandroid backups/ restore nandroid backups 3. Format different partitions
There are numerous functions of recovery mode, and ones such add 4EXT and clockworkmod are custom ones.
After you s-off your device, "permanent root" is not necessary. S-off allows you to change your phone's firmware (includes phone radio [for carrier signal] and other things that allow you to flash different ROMs). By the way, you need a stock ROM to s-off. I'm pretty sure ARHD will work.
So... For you, i would:
1. S-off via juopunut bear method(auggie's thread)
2. Flash firmware 3.33 in kohr-ah's thread: http://forum.xda-developers.com/showthread.php?p=21711154
3. Flash any ROM you want! Make sure you format all partitions before you flash any rom unless the ROM says that a full wipe is not required.
Sent from my Ouya
AndroidSupporter318 said:
For s-off, there isn't really a "best way". Since you have hboot version 1.2x, you need to use auggie's guide: http://forum.xda-developers.com/showthread.php?p=25202517
Recovery will not be affected in any way after you s-off your device. Recovery is a mode in which you can do multiple tasks including but not limited to (these are the most common tasks in recovery) 1. Flash zip files (ROMs, mods...) 2. Make nandroid backups/ restore nandroid backups 3. Format different partitions
There are numerous functions of recovery mode, and ones such add 4EXT and clockworkmod are custom ones.
After you s-off your device, "permanent root" is not necessary. S-off allows you to change your phone's firmware (includes phone radio [for carrier signal] and other things that allow you to flash different ROMs). By the way, you need a stock ROM to s-off. I'm pretty sure ARHD will work.
So... For you, i would:
1. S-off via juopunut bear method(auggie's thread)
2. Flash firmware 3.33 in kohr-ah's thread: http://forum.xda-developers.com/showthread.php?p=21711154
3. Flash any ROM you want! Make sure you format all partitions before you flash any rom unless the ROM says that a full wipe is not required.
Sent from my Ouya
Click to expand...
Click to collapse
So according to Auggie's guide, it requires a complete format/wipe of the device and Micro SD card. This will not affect the Recovery in any way? It will still be in it's current state as I see it now? The bootloader will also remain 'Unlocked' upon formatting everything? It also says on Auggies guide, it has the following pre-requisite:
* Be rooted (have superuser and/or an unsecured boot image installed)
Thank you for the clarifications. It is much appreciated.
freeridindirtbiker said:
So according to Auggie's guide, it requires a complete format/wipe of the device and Micro SD card. This will not affect the Recovery in any way? It will still be in it's current state as I see it now? The bootloader will also remain 'Unlocked' upon formatting everything? It also says on Auggies guide, it has the following pre-requisite:
* Be rooted (have superuser and/or an unsecured boot image installed)
Thank you for the clarifications. It is much appreciated.
Click to expand...
Click to collapse
Technically, a full wipe of your SD card is not required, it is a precaution (I s-offed my device without wiping my SD card)
And yes, s-off will not affect recovery in any way. S-off is security off which means that you can change pretty much anything you want to your phone.
No. The bootloader will technically not be unlocked, but you have s-off so you won't have to worry. After you finish s-off, you have two choices: 1. Controlbear.exe (juopunut will ask if you want their custom bootloader). Their bootloader is unlocked so you can flash roms and stuff via adb/fastboot commands). 2. You can flash firmware 3.33 (recommended). Firmware 3.33 will also unlock your bootloader so that you can flash ROMs and stuff via adb/fastboot commands.
I'm guessing you are rooted because you have an unlocked bootloader via HTC Dev and root checker confirmed that you are rooted. So since you are rooted, go ahead and s-off your sensation.
Sent from my Ouya
AndroidSupporter318 said:
Technically, a full wipe of your SD card is not required, it is a precaution (I s-offed my device without wiping my SD card)
And yes, s-off will not affect recovery in any way. S-off is security off which means that you can change pretty much anything you want to your phone.
No. The bootloader will technically not be unlocked, but you have s-off so you won't have to worry. After you finish s-off, you have two choices: 1. Controlbear.exe (juopunut will ask if you want their custom bootloader). Their bootloader is unlocked so you can flash roms and stuff via adb/fastboot commands). 2. You can flash firmware 3.33 (recommended). Firmware 3.33 will also unlock your bootloader so that you can flash ROMs and stuff via adb/fastboot commands.
I'm guessing you are rooted because you have an unlocked bootloader via HTC Dev and root checker confirmed that you are rooted. So since you are rooted, go ahead and s-off your sensation.
Sent from my Ouya
Click to expand...
Click to collapse
Thank you so much for the information.
What I meant was that by formatting the phone and/or SD card (If I did), would the recovery still be on the phone itself? Just to be clear, the Bootloader is completely separate from the Recovery? Or is the recovery an aspect associated with the bootloader. Upon doing the HTCDev method, I believe its my bootloader that says **UNLOCKED** at the very top of the screen but of course still says S-ON since I haven't done S-OFF yet. I have 4EXT flashed onto the phone.I guess now I'm confused because the S-OFF guide states to unlock the phone via HTCDev before S-OFF which I've done. Is this like a partial root since you can't change the firmware or radios due to it being restricted? I haven't done anything but follow the directions within the guide I posted above.
HTCDev unlock Method>Flashed 4EXT>Flashed Custom ROM.
Thanks again.
freeridindirtbiker said:
Thank you so much for the information.
What I meant was that by formatting the phone and/or SD card (If I did), would the recovery still be on the phone itself? Just to be clear, the Bootloader is completely separate from the Recovery? Or is the recovery an aspect associated with the bootloader. Upon doing the HTCDev method, I believe its my bootloader that says **UNLOCKED** at the very top of the screen but of course still says S-ON since I haven't done S-OFF yet. I have 4EXT flashed onto the phone.I guess now I'm confused because the S-OFF guide states to unlock the phone via HTCDev before S-OFF which I've done. Is this like a partial root since you can't change the firmware or radios due to it being restricted? I haven't done anything but follow the directions within the guide I posted above.
HTCDev unlock Method>Flashed 4EXT>Flashed Custom ROM.
Thanks again.
Click to expand...
Click to collapse
I'll try to answer your questions in a list to prevent confusion:
1. Formatting all partitions of the phone and formatting SD card will not erase the recovery. Formatting the SD card WILL remove all your backups from recovery though.
2. Bootloader is completely separate from recovery. 4EXT and clockworkmod are custom recoveries used to restore your phone (and wipe your data/perform other functions)
3. You can say unlocking bootloader is a partial root. It gives you access to flash some things, but not other things. You can flash a custom recovery, ROMs, and mods(tweaks/themes to ROMs).
However, s-off allows you to change other parts of your phone (firmware, radio...)
Sent from my Ouya

[Q] Unlocked, but can't get further...

Hello! Third HTC I'll (potentially) root, so I'm not sure why I'm stuck on this, but here goes....
I have an AT&T (Evita) on 2.20. It seemed the first step was to unlock using the X-Factor root exploit, so I did. When I was done, my bootloader said *UNLOCKED*, but it still said "S-OFF".
When I read any of the rollup/Q&A/FAQ threads, they all seem to indicate that my next step should be to flash a custom recovery. The first time I installed GooManager, then settings/Install OpenRecoveryScript. It said recovery had been installed, but when I selected Reboot Recovery, it wouldn't reboot.
So I powered down and came back up in the bootloader. I clicked recovery from there and after a few seconds I wound up with a mostly black screen with a drive or something in the middle and a red X over the middle. Something's clearly not working.
So I manage to get out of that, get the phone booted back into Android, back to the bootloader and into Fastboot USB to try and install the TWRP img file I downloaded from their site. did "fastbook flash recovery nameofmyimage.img" and it appeared to have moved the IMG to my device. Typed "fastboot reboot" and I wound up rebooted back to Android. Went back into GooManager to see if the "reboot into recovery" command would work now, it doesn't. Powered bown and back into the bootloader screen, select Recovery and I wind up back in Android.
What am I missing or doing wrong? Anyone?
finallygreen said:
I have an AT&T (Evita) on 2.20. It seemed the first step was to unlock using the X-Factor root exploit, so I did. When I was done, my bootloader said *UNLOCKED*, but it still said "S-OFF".
Click to expand...
Click to collapse
You mean S-off or S-on? S-on is the stock condition, and S-off is the modified condition (all security off).
finallygreen said:
So I powered down and came back up in the bootloader. I clicked recovery from there and after a few seconds I wound up with a mostly black screen with a drive or something in the middle and a red X over the middle. Something's clearly not working.
Click to expand...
Click to collapse
That is the stock recovery. GooManager is a big quirky when installing TWRP, the fastboot way is safer. Of course, you tried that way and still having trouble.
Try:
fastboot erase cache
Also, what version of TWRP exactly are you trying to install by fastboot (exact filename)?
redpoint73 said:
You mean S-off or S-on? S-on is the stock condition, and S-off is the modified condition (all security off).
That is the stock recovery. GooManager is a big quirky when installing TWRP, the fastboot way is safer. Of course, you tried that way and still having trouble.
Try:
fastboot erase cache
Also, what version of TWRP exactly are you trying to install by fastboot (exact filename)?
Click to expand...
Click to collapse
I typed it correctly....when I'd finished the process of unlocking the bootloader, my bootloader screen said:
***UNLOCKED***
EVITA PVT SHIP S-On RL
And that's what it still says. Is this what's stopping me from proceeding? Did I miss something because I can't find a step I missed in any of these tutorials...they all say to move on to installing a custom recovery right after you unlock the bootloader.
Oh, and the img I was flashing:
openrecovery-twrp-2.6.3.0-evita.img
Can you post the text from the command prompt on an attempt so we can try troubleshoot it?
Sent from my Evita
which text?
The text from the command prompt when you're trying to flash TWRP recovery.
Sent from my Evita
timmaaa said:
The text from the command prompt when you're trying to flash TWRP recovery.
Sent from my Evita
Click to expand...
Click to collapse
OK, so today I go back to the bootloader screen and I see this:
*** TAMPERED ***
*** UNLOCKED ***
EVITA PVT SHIP S-ON RL
HBOOT-1.14.0002
Yesterday, I didn't have *** TAMPERED *** at the top.
Anyways, I've tried flashing TWRP again. here's the command prompt text:
Code:
c:\android>fastboot flash recovery openrecovery-twrp-2.6.3.0-evita.img
sending 'recovery' (8176 KB)... OKAY
writing 'recovery'... OKAY
And that's it. But this time, my results are different. I rebooted the bootloader, selected recovery, and now I'm IN TWRP!
So, I guess that's a good thing. However, since I don't at all understand why doing the same thing gave a different result today (and that *** TAMPERED *** thing that wasn't there yesterday), I'm a bit confused at to where to go next. So that I don't muck this up, could you tell me what the next logical step should be now?
Make a nandroid backup. Download an evita Rom and flash away
Sent from my VENOMized HoxL
area51avenger said:
Make a nandroid backup. Download an evita Rom and flash away
Sent from my VENOMized HoxL
Click to expand...
Click to collapse
OK, so I made a backup (just data/system/boot...hopefully that was the right choice), and when I went to reboot, it said that SuperSU was not yet installed. Now I'm not sure why none of the writeups mentioned that part because I know that every HTC I've ever rooted in the past needed that. Anyways, I said yes, it installed, and now I'm back in Android. I went back to the bootloader to check what it was saying...it still says "Tampered/Unlocked/S-On". I then went into TWRP and told it to reboot, this time it didn't prompt me to install SuperSU, so I guess that's good.
So:
1. Will the backup I made prior to the SuperSU install be good or will I need to redo that now that SuperSU is installed?
2. Why still S-On? Are HOX users sticking with S-On or....is this another step I've missed or is it even necessary with this device?
3. I keep seeing something about SuperCID...something that never came up in my previous HTC rooting adventures. What is this? How can I tell if I have it? Do I need it?
4. If this does indeed mean I'm fully rooted now and it's time to select a ROM, could anyone recommend one? I tend to prefer the latest Android that's known to run well on the device, running as close to stock and least amount of bloatware possible. But then again, I've no clue what the ROMs for this device can do since I just got it, so I'd certainly try something outside those parameters if it was extremely well-recommended.
Thanks!
Yeah that backup configuration looks fine to me. TWRP 2.6 has a feature where it detects if you don't yet have root installed when you're about to reboot, so it can install it for you, makes rooting a lot easier. You don't need to backup again, the one you made is fine.
The phone is still s-on because you haven't gone through the s-off process yet. Having s-off and unlocking the bootloader are two different things.
SuperCID is needed to get s-off, so you'll need to get SuperCID before you attempt the s-off process. The hex edit method is the best method for you to achieve SuperCID. One you've done that you can go to the Facepalm S-off thread and get s-off.
You are now fully rooted and can install custom ROMs. Asking for best/favourite/most stable/recommended ROMs isn't really allowed here, this is because saying one ROM is superior infers that the others are inferior in some way which isn't fair to the devs who spend a lot of time developing them for us. Take a look through our two development sections which are here and here. Pick one you think you'll like and give it a shot. Make sure you read the OP for the ROM you select because some have firmware upgrades prior to flashing them, these firmware upgrades usually need s-off to be done.
My suggestion is to do this: get SuperCID, get s-off, find a ROM, make sure you meet any requirements stated, and then flash it. If you have any questions dying be afraid to ask.
Sent from my Evita
timmaaa said:
Yeah that backup configuration looks fine to me. TWRP 2.6 has a feature where it detects if you don't yet have root installed when you're about to reboot, so it can install it for you, makes rooting a lot easier. You don't need to backup again, the one you made is fine.
The phone is still s-on because you haven't gone through the s-off process yet. Having s-off and unlocking the bootloader are two different things.
SuperCID is needed to get s-off, so you'll need to get SuperCID before you attempt the s-off process. The hex edit method is the best method for you to achieve SuperCID. One you've done that you can go to the Facepalm S-off thread and get s-off.
You are now fully rooted and can install custom ROMs. Asking for best/favourite/most stable/recommended ROMs isn't really allowed here, this is because saying one ROM is superior infers that the others are inferior in some way which isn't fair to the devs who spend a lot of time developing them for us. Take a look through our two development sections which are here and here. Pick one you think you'll like and give it a shot. Make sure you read the OP for the ROM you select because some have firmware upgrades prior to flashing them, these firmware upgrades usually need s-off to be done.
My suggestion is to do this: get SuperCID, get s-off, find a ROM, make sure you meet any requirements stated, and then flash it. If you have any questions dying be afraid to ask.
Sent from my Evita
Click to expand...
Click to collapse
First off, thank you very much for explaining things so clearly...I really appreciate that!
Second, I honestly didn't stop to think about the full ramifications of asking for a ROM recommendation. Based on your explanation, I completely understand why I shouldn't ask!
I'm gonna take your suggested route (SuperCID/S-Off) then start exploring for ROMs.
Thanks again for all the help!
No problems, glad to help. About the ROM question, you didn't know so it's all good, no harm no foul.
PS. If someone helps you around here, please press the thanks button.
Sent from my Evita
OK, so maybe I'm not as clear as I thought I was.
I did the X-Factor thing to unlock the bootloader at the beginning, and that involved spoofing my CID to get the unlock code from htcdev.com, right?
In any case, right now when I type: fastboot getvar cid
I get:
cid: 11111111
But you told me I still needed to do some hex editing?
You are good with the vid, time to achieve s-off
Sent from my HTC One XL using xda app-developers app
Yeah, you already have SuperCID do you can go for s-off now.
Sent from my Evita

Categories

Resources