Hey All,
Ill keep this short since it's late and I have been fussing with my tab all day to no avail. I posted on here last month that I got stuck in a bootloop and then was unable to access the recovery menu leading to a full on brick (no nvflash). This happened when my infinity froze in the middle of regular use (day of .18 update). I sent the unit in RMA and just got it back with a replaced system board. I am not too thrilled with the performance + dock issues i seem to have with every JB build so I decided I would unlock and run a custom build. I have done this on my 2 primes so I have some experience.
I got the "unknown error" message about a thousand times while trying to run the unlocker tool (device came back with .16 on it). I decided to downgrade to .30 and try it, but I kept getting the network connection issue. I figured since i was on .30 I would root the device and try and backup the root when I went back to JB. I went up to .18 trying to maintain the root using rootkeeper, wasn't able to keep it. Tried running the unlock tool again and got the same error, but noticed that in my logcat logs (was checking to see if i kept getting the asus server refusal) it wasnt even pinging the server, which led me to thinking maybe the unlock went through after one of those attempts and i just wasnt paying attention (unlikely!)
Now things get a little strange. When I boot my device I see "No certificate to inject" in white text where it would normally say the device is unlocked... I have never seen that before and couldnt find anything through searching. I'm not sure which certificate its talking about and how it disappeared. I am able to access fastboot, and I am able to flash recovery blobs or images for TWRP or CWM. The fastboot prompt shows that the file is sending, and then writing, both successful. When I reboot the device and try and enter recovery I get the stock JB recovery, RCK gives me a sad dead android (assuming i dont have a stock zip on my mSD card).
I would really like to get this functioning with a custom rom. The device still functions normally though, and has no problems going between firmwares and was able to root properly in .30 but now i have a missing certificate which I am guessing is pretty important to all of this (again I have never seen this issue).
I spent about 6 hours on this today, I have done lots of things, wiping data, factory resets, etc... not sure where things are going wrong. I assume the device is in an unlocked state because I am able to use fastboot and successfully write while using the flash command, but I could be wrong.
I appreciate any suggestions or help you guys might have!
Not sure about this you may have to do a little more digging.
Thought I had read about RMA'd tablets being permanently locked for some reason.
I'm not sure if Asus re-serializes the tablet if it had a board replaced.
Does the system serial number match the sticker on the bottom?
If not I'd try registering the tablet with the boards s\n.
Hope you can figure this out.
jallweiss said:
Hey All,
Ill keep this short since it's late and I have been fussing with my tab all day to no avail. I posted on here last month that I got stuck in a bootloop and then was unable to access the recovery menu leading to a full on brick (no nvflash). This happened when my infinity froze in the middle of regular use (day of .18 update). I sent the unit in RMA and just got it back with a replaced system board. I am not too thrilled with the performance + dock issues i seem to have with every JB build so I decided I would unlock and run a custom build. I have done this on my 2 primes so I have some experience.
I got the "unknown error" message about a thousand times while trying to run the unlocker tool (device came back with .16 on it). I decided to downgrade to .30 and try it, but I kept getting the network connection issue. I figured since i was on .30 I would root the device and try and backup the root when I went back to JB. I went up to .18 trying to maintain the root using rootkeeper, wasn't able to keep it. Tried running the unlock tool again and got the same error, but noticed that in my logcat logs (was checking to see if i kept getting the asus server refusal) it wasnt even pinging the server, which led me to thinking maybe the unlock went through after one of those attempts and i just wasnt paying attention (unlikely!)
Now things get a little strange. When I boot my device I see "No certificate to inject" in white text where it would normally say the device is unlocked... I have never seen that before and couldnt find anything through searching. I'm not sure which certificate its talking about and how it disappeared. I am able to access fastboot, and I am able to flash recovery blobs or images for TWRP or CWM. The fastboot prompt shows that the file is sending, and then writing, both successful. When I reboot the device and try and enter recovery I get the stock JB recovery, RCK gives me a sad dead android (assuming i dont have a stock zip on my mSD card).
I would really like to get this functioning with a custom rom. The device still functions normally though, and has no problems going between firmwares and was able to root properly in .30 but now i have a missing certificate which I am guessing is pretty important to all of this (again I have never seen this issue).
I spent about 6 hours on this today, I have done lots of things, wiping data, factory resets, etc... not sure where things are going wrong. I assume the device is in an unlocked state because I am able to use fastboot and successfully write while using the flash command, but I could be wrong.
I appreciate any suggestions or help you guys might have!
Click to expand...
Click to collapse
If you rooted, try to install custom twrp recovery using goomanager from the market, see if it installed.
Just guessing here: I think "no certificate to inject" might be pointing to a root certificate that isn't there.
My guess is that the "certificate to inject" is related to the CER partition that contains the bootloader unlock token, and the device is "half unlocked".
Thanks for the responses.
I've been really busy with work and I also just got a brand new Galaxy S3 that I have been tinkering with. Ill try some of your suggestions in a little bit and let you know whats up. Also the serial number in the OS is the same as my original SN on the box/sticker.
Cheers!
Quick update...
1)Went from .18 back down to .30 no problems. Wiped data/factory reset before downgrade.
2)Rooted in .30 using debugfs method, no problems
3)Verified superuser was working, downloaded goomanager
4)Installed openrecovery twrp blob through goomanager.
5)On restart and trying to access recovery menu recieved "Blob Signature failed" message
6)Device rebooted itself, attempted recovery again. Got Default android recovery with dead droid (removed mSD card so it wouldnt try to re-install firmware) hit power and confirmed its default android system recovery.
7)Flashed twrp.blob from twrp site using adb, which was successful. Restarted and got same result as #5 and #6
8)Flashed newest version of cwm non-touch using adb, which was successful. Restarted and got same result as #5 and #6
Unlock tool still gives the unknown error, and im registering my device on vip.asus.com right now.
Any thoughts? I really appreciate everyone's knowledge on this.
Thanks!
EDIT: Registered with vip.asus.com unlock tool still returns unknown error. The idea of the device being semi-unlocked seems probable at this time... hope i can fix it.
jallweiss said:
4)Installed openrecovery twrp blob through goomanager.
5)On restart and trying to access recovery menu recieved "Blob Signature failed" message
Click to expand...
Click to collapse
Just to explain what you see:
Step 4 copies the blob to the update staging partition.
Step 5 is the bootloader which sees the blob in the update staging partition, checks the signature of the blob (because the device is not unlocked), and refuses to flash the blob to the recovery partition because the signature is not from Asus.
Step 6 therefore boots the stock recovery, because it has not been overwritten by step 5.
Steps 7 and 8 are just variants of step 4. (assuming you were using dd to mmcblk0p4, which is the update staging partition), so they have the same effect. All methods for flashing recovery or kernel require cooperation of the bootloader.
I think you can only continue running the Asus unlock tool from time to time, maybe they fix their server issues.
_that said:
Just to explain what you see:
Step 4 copies the blob to the update staging partition.
Step 5 is the bootloader which sees the blob in the update staging partition, checks the signature of the blob (because the device is not unlocked), and refuses to flash the blob to the recovery partition because the signature is not from Asus.
Step 6 therefore boots the stock recovery, because it has not been overwritten by step 5.
Steps 7 and 8 are just variants of step 4. (assuming you were using dd to mmcblk0p4, which is the update staging partition), so they have the same effect. All methods for flashing recovery or kernel require cooperation of the bootloader.
I think you can only continue running the Asus unlock tool from time to time, maybe they fix their server issues.
Click to expand...
Click to collapse
Thats what I was thinking when I saw what was going on. I guess that flashing using adb, goomanager, or fastboot was successful on all the attempts because of rooting and not unlocking? I figured if the device was fully locked that any type of flash to any partition would return an error saying that it was unable to write. Is there a way that I can flash over the bootloader so that it doesnt restore the stock recovery every time (assuming its able to write on that partition)?
I've been in touch with Asus support with the guy who handled my RMA. He told me to register the device which I did yesterday, but the unlock tool still isnt working, and the log still shows that my asus connection is refused. At the same time when I run the unlock tool it did generate a text file saying "Device unlocked at such and such date and time" will that file generate even on an unsuccessful unlock?
Thanks again for your response.
I doubt it will help solve my unlocking problem, but here are my logs (filtering to see the keyboxservice while running unlock tool)
Code:
W/ActivityManager( 224): Scheduling restart of crashed service com.asus.wvdrm/.KeyBoxService in 5000ms
I/ActivityManager( 224): Start proc com.asus.wvdrm for service com.asus.wvdrm/.KeyBoxService: pid=8937 uid=1000 gids={3003, 1015, 3002, 3001, 3007}
D/KeyBoxService( 8937): === onCreate()
D/KeyBoxService( 8937): === onStartCommand(), intent=null, flags=2, startId=35
D/KeyBoxService( 8937): === StatusCode: SC_UNAUTHORIZED!
D/KeyBoxService( 8937): === OTA BEGIN
E/KeyBoxService( 8937): === Connection to http://wvdrm.asus.com refused
D/KeyBoxService( 8937): === Retry after 60 seconds.
D/KeyBoxService( 8937): === OTA END
D/KeyBoxService( 8937): === StatusCode: SC_UNAUTHORIZED!
D/KeyBoxService( 8937): === OTA BEGIN
E/KeyBoxService( 8937): === Connection to http://wvdrm.asus.com refused
D/KeyBoxService( 8937): === Retry after 300 seconds.
D/KeyBoxService( 8937): === OTA END
D/KeyBoxService( 8937): === onStartCommand(), intent=Intent { cmp=com.asus.wvdrm/.KeyBoxService }, flags=2, startId=36
D/KeyBoxService( 8937): === StatusCode: SC_UNAUTHORIZED!
D/KeyBoxService( 8937): === OTA BEGIN
D/KeyBoxService( 8937): === onStartCommand(), intent=Intent { cmp=com.asus.wvdrm/.KeyBoxService }, flags=2, startId=37
D/KeyBoxService( 8937): === OTA END
D/KeyBoxService( 8937): === StatusCode: SC_UNKNOWN!
D/KeyBoxService( 8937): === Nothing To Do!
D/KeyBoxService( 8937): === onDestroy()
EDIT: Just thought I would check to see if it was related. Im running .30 and I went into system information and hit the button to check for an update for the firmware which ended up saying there is no new firmware updates for my system. Im guessing this means that OTA is not functioning which I had heard was an issue with units returning from RMA (happened on my prime after an RMA but I could still unlock it). Hopefully Asus service may have a solution because at this point I don't think there is much I can do. Unless there was a solution that I missed while searching those old threads
jallweiss said:
Thats what I was thinking when I saw what was going on. I guess that flashing using adb, goomanager, or fastboot was successful on all the attempts because of rooting and not unlocking? I figured if the device was fully locked that any type of flash to any partition would return an error saying that it was unable to write. Is there a way that I can flash over the bootloader so that it doesnt restore the stock recovery every time (assuming its able to write on that partition)?
Click to expand...
Click to collapse
The bootloader does not restore the stock recovery. You cannot flash the bootloader, kernel or recovery directly (they don't even have corresponding entries in /dev/block) - you can only write a signed blob to the staging partition (mmcblk0p4). The blob contains one or more partition images and a digital signature. The bootloader checks the signature, and only if it is correct it copies the image to the correct partition(s).
So anyone with root access can write anything to the staging partition, but only the bootloader decides if and what will be flashed to the system-critical locations. And without unlocking, it accepts only blobs signed by Asus.
btw, I am not sure if wvdrm has anything to do with unlocking or OTA updates - I remember I also got lots of these "connection refused" messages, but I still was able to unlock.
_that said:
The bootloader does not restore the stock recovery. You cannot flash the bootloader, kernel or recovery directly (they don't even have corresponding entries in /dev/block) - you can only write a signed blob to the staging partition (mmcblk0p4). The blob contains one or more partition images and a digital signature. The bootloader checks the signature, and only if it is correct it copies the image to the correct partition(s).
So anyone with root access can write anything to the staging partition, but only the bootloader decides if and what will be flashed to the system-critical locations. And without unlocking, it accepts only blobs signed by Asus.
btw, I am not sure if wvdrm has anything to do with unlocking or OTA updates - I remember I also got lots of these "connection refused" messages, but I still was able to unlock.
Click to expand...
Click to collapse
very interesting, I have a lot of experience with PCs and some specialty computers but I did not know exactly how the staging partition was handled by the bootloader, thanks for that info. As far as those wvdrm related instances in the logs, I see them with some other tasks associated, but the key handler is what i see consistently return an error when using the unlock tool.
Also I just heard back from the Asus rep Carl who had worked with me on 2 previous RMA cases (Prime and Infinity), I went from being called by name to "Dear Valued Customer," and he told me I should RMA the unit again. Based on what I have read on the forums about people RMAing for unlock issues and knowing they wont unlock it in the service center, I really doubting this is any sort of solution. I replied asking to get into contact with either a service manager or being put in touch with a technician or engineer who actually has some sort of access to the servers responsible for tracking SNs or the unlock manager. I doubt I will get anywhere with it but its worth a shot right?
Until then I think im just going to stick to ICS, .20 was just as unstable as .16 and .18 for me, constant crashes and horrible performance. I still love my infinity, but I just feel very constrained and unsatisfied now
If anyone has any contacts within the depths of Asus I would love to talk to them though so that my serial number isnt on the unlocker S#!tList anymore
cheers
asus?!?
jallweiss said:
very interesting, I have a lot of experience with PCs and some specialty computers but I did not know exactly how the staging partition was handled by the bootloader, thanks for that info. As far as those wvdrm related instances in the logs, I see them with some other tasks associated, but the key handler is what i see consistently return an error when using the unlock tool.
Also I just heard back from the Asus rep Carl who had worked with me on 2 previous RMA cases (Prime and Infinity), I went from being called by name to "Dear Valued Customer," and he told me I should RMA the unit again. Based on what I have read on the forums about people RMAing for unlock issues and knowing they wont unlock it in the service center, I really doubting this is any sort of solution. I replied asking to get into contact with either a service manager or being put in touch with a technician or engineer who actually has some sort of access to the servers responsible for tracking SNs or the unlock manager. I doubt I will get anywhere with it but its worth a shot right?
Until then I think im just going to stick to ICS, .20 was just as unstable as .16 and .18 for me, constant crashes and horrible performance. I still love my infinity, but I just feel very constrained and unsatisfied now
If anyone has any contacts within the depths of Asus I would love to talk to them though so that my serial number isnt on the unlocker S#!tList anymore
cheers
Click to expand...
Click to collapse
i am dealing with a very similar situation here! i paid $600 on the tablet, then RMA it for another $200 and got a tablet which cannot be unlocked anymore. my fault! should have never gone with asus (their technical stuff looked good on paper but i disregarded other "details"...)
got two new samsung tablets and they're working great. will never EVER buy an asus device in my life!
PS
I also think that google is smoking to use asus for their new tablet... all the people i know avoid asus at ALL COST
Related
Soft bricked my TF300T about a month ago, stuck on ASUS logo screen with "The Device is Unlocked", I dont exactly remember what I did to brick it
Sent it away to asus and $197 and a couple weeks later got it back with a new motherboard with JB build 10.4.2.9
Now the tab is prompting me to downgrade to ICS 9.4.3.30, which I would like to do since it would allow me NVflash
At this point the tab is still just like it was when I got it back from RMA
When I run the prompted downgrade procedure the tab boots into stock JB bootloader
and runs for a minute then gives "signature mismatch" error and reboots back into
JB 10.4.2.9 with all data wiped and prompts me to downgrade to 9.4.3.30 again
Tried 2 times with same result, then tried ASUS Unlock Device app which gives error
"An unknown error occurs, which may be a network connection issue, please wait and try again later"
I would like to be able to unlock and load custom bootloader, root and flash roms but seem to be stuck
Any ideas how I can fix signature mismatch error or get unlock app to work?
screenshots at photobucket.com/tf300
jjb7733 said:
Soft bricked my TF300T about a month ago, stuck on ASUS logo screen with "The Device is Unlocked", I dont exactly remember what I did to brick it
Sent it away to asus and $197 and a couple weeks later got it back with a new motherboard with JB build 10.4.2.9
Now the tab is prompting me to downgrade to ICS 9.4.3.30, which I would like to do since it would allow me NVflash
At this point the tab is still just like it was when I got it back from RMA
When I run the prompted downgrade procedure the tab boots into stock JB bootloader
and runs for a minute then gives "signature mismatch" error and reboots back into
JB 10.4.2.9 with all data wiped and prompts me to downgrade to 9.4.3.30 again
Tried 2 times with same result, then tried ASUS Unlock Device app which gives error
"An unknown error occurs, which may be a network connection issue, please wait and try again later"
I would like to be able to unlock and load custom bootloader, root and flash roms but seem to be stuck
Any ideas how I can fix signature mismatch error or get unlock app to work?
screenshots at photobucket.com/tf300
Click to expand...
Click to collapse
You won't be able to unlock your tablet for the time being. This has been happening to Prime owners since July with no solution in sight.
http://forum.xda-developers.com/showthread.php?t=1764917
The unlock procedure involves a handshake and key exchange with a mysterious Asus server, and since your motherboard has been replaced -- the unit serial number no longer matches the CPU serial number (Tegra ID, I think it's called) so the server throws out an error and tells you to get lost.
Unfortunately, Asus has been of zero help thus far. Asus had suggested another RMA to correct the information on the tablet so it matches the server, but even the people that had RMA'd to have the un-unlockable situation specifically addressed are getting tablets returned still not able to unlock.
jjb7733 said:
Soft bricked my TF300T about a month ago, stuck on ASUS logo screen with "The Device is Unlocked", I dont exactly remember what I did to brick it
Sent it away to asus and $197 and a couple weeks later got it back with a new motherboard with JB build 10.4.2.9
Now the tab is prompting me to downgrade to ICS 9.4.3.30, which I would like to do since it would allow me NVflash
At this point the tab is still just like it was when I got it back from RMA
When I run the prompted downgrade procedure the tab boots into stock JB bootloader
and runs for a minute then gives "signature mismatch" error and reboots back into
JB 10.4.2.9 with all data wiped and prompts me to downgrade to 9.4.3.30 again
Tried 2 times with same result, then tried ASUS Unlock Device app which gives error
"An unknown error occurs, which may be a network connection issue, please wait and try again later"
I would like to be able to unlock and load custom bootloader, root and flash roms but seem to be stuck
Any ideas how I can fix signature mismatch error or get unlock app to work?
screenshots at photobucket.com/tf300
Click to expand...
Click to collapse
The downgrade request is probably the result of 9.4.3.30 zip file left on your internal or external sdcard.
tobdaryl said:
The downgrade request is probably the result of 9.4.3.30 zip file left on your internal or external sdcard.
Click to expand...
Click to collapse
yes you are correct! It went away after i deleted the file on my sd card, didnt know that was there, thanks!
krhainos said:
You won't be able to unlock your tablet for the time being. This has been happening to Prime owners since July with no solution in sight.
http://forum.xda-developers.com/showthread.php?t=1764917
The unlock procedure involves a handshake and key exchange with a mysterious Asus server, and since your motherboard has been replaced -- the unit serial number no longer matches the CPU serial number (Tegra ID, I think it's called) so the server throws out an error and tells you to get lost.
Unfortunately, Asus has been of zero help thus far. Asus had suggested another RMA to correct the information on the tablet so it matches the server, but even the people that had RMA'd to have the un-unlockable situation specifically addressed are getting tablets returned still not able to unlock.
Click to expand...
Click to collapse
yes they are ZERO help, every time I call and say the words "Unlock Bootloader" they just immediately hang up on me
this thing might as well still be bricked, these devices are no fun if you cant modify them beyond what the manufacturer intended!!!!!!!
paid these bastards $197 and got it back with no ability to do what I want with this tablet, now im out $600 and cant even root
Thank You for the replies!!
anybody know if there is a solution to this issue yet?
jjb7733 said:
yes they are ZERO help, every time I call and say the words "Unlock Bootloader" they just immediately hang up on me
this thing might as well still be bricked, these devices are no fun if you cant modify them beyond what the manufacturer intended!!!!!!!
paid these bastards $197 and got it back with no ability to do what I want with this tablet, now im out $600 and cant even root
Thank You for the replies!!
Click to expand...
Click to collapse
try mottochopper, it worked for me also i can't unlock either but having root helps forgetting it
I have combed through these forums and haven't been able to find an answer yet, so please forgive me if I have missed something. So here goes:
If: a) I have updated to JB, and
b) I unlocked my device and
c) I successfully installed TWRP and
d) I managed to brick my device insomuch that ONLY APX mode is available to me when I connect to my PC, is there a solution unbrick my device at this time?
Currently booting my device will only display the first ASUS boot screen and never goes any further.
Many thanks to anybody who can provide some insight.
jeremiah.wells said:
I have combed through these forums and haven't been able to find an answer yet, so please forgive me if I have missed something. So here goes:
If: a) I have updated to JB, and
b) I unlocked my device and
c) I successfully installed TWRP and
d) I managed to brick my device insomuch that ONLY APX mode is available to me when I connect to my PC, is there a solution unbrick my device at this time?
Currently booting my device will only display the first ASUS boot screen and never goes any further.
Many thanks to anybody who can provide some insight.
Click to expand...
Click to collapse
What have you tried in the meantime? Did you install NvFlash before the update to JB? You cannot get to recovery? If you cannot but do have fastboot available, either use TWRP or CWM (which can be flashed via fastboot as well: http://forum.xda-developers.com/showthread.php?t=1926286 in case your recovery has been borked) and then flash a stock ROM from ASUS from here: http://www.asus.com/Tablet/Transformer_Pad/ASUS_Transformer_Pad_Infinity_TF700T/#download
Take a look here: http://forum.xda-developers.com/showthread.php?t=1938129 as well.
MartyHulskemper said:
What have you tried in the meantime? Did you install NvFlash before the update to JB? You cannot get to recovery? If you cannot but do have fastboot available, either use TWRP or CWM (which can be flashed via fastboot as well: http://forum.xda-developers.com/showthread.php?t=1926286 in case your recovery has been borked) and then flash a stock ROM from ASUS from here: http://www.asus.com/Tablet/Transformer_Pad/ASUS_Transformer_Pad_Infinity_TF700T/#download
Take a look here: http://forum.xda-developers.com/showthread.php?t=1938129 as well.
Click to expand...
Click to collapse
MartyHulskemper, many thanks for your prompt reply. To answer your questions:
1) I have tried (in vain, I now understand) to use nvflash (first using wheelie with a couple configurations) and to no avail
2) I did NOT install nvflash before, as I was excited about rooting and wasn't abreast of all the consequences of updating directly to JB and then unlock and then root with a new device. Unfortunately I had read a post on (another website) that nvflash wasn't working on the TF700T (which I presume was correct at the time it was written) only to now learn that it is.
A note -- fastboot is not available and the only way I can get the device visible to a computer is to put it in APX mode.
This is a classic case of me jumping the gun without fully understanding what's implied with the various updates and root solutions out there. Basically I followed a guide and used a set of files distributed on scottsroms that indeed rooted my device with the TWRP recovery. What I then attempted and (I think what ultimately did my device to its current state) was to attempt to flash CWM. After that flash I couldn't get either recovery to boot and so I attempted a data wipe and was going to reflash with CWM. After that data wipe is when I could not longer boot.
Sorry about the novel but I guess I'm vainly hoping this may trigger and idea from you or a future reader about what my options are. I will look at the link you suggested and go from there.
Again, thank-you for any assistance you may provide.
Can you get into recovery at all when you hold vol down and power? I had the same problem with my infinity when the .18 update came out, i had a freeze and a crash during normal use while the update was either downloading or changing something and when it restarted I couldnt do anything but go into APX. I never unlocked it (mainly because the asus tool wouldnt work) but I had to RMA to get it fixed. If you can at least get to the recovery menu you can try reinstalling the stock rom from an mSD. Otherwise you may have to do the same as me and RMA and hope that they dont tell you tough luck since its unlocked As far as I know the only way to recover the tablet when APX is your only option is with NVFlash, which I never installed because .30 was on my infinity when i bought it.
jeremiah.wells said:
I couldn't get either recovery to boot and so I attempted a data wipe
Click to expand...
Click to collapse
That is the exactly step that bricked many TF700s here (search the forums). "Wipe data" with a broken recovery = bootloader won't do anything else than try to boot the broken recovery.
If you didn't create a blob for wheelie/nvflash before, your only option now is to send it to Asus for a costly "repair" (they claim they have to change the mainboard, I don't know why they don't just use nvflash).
_that said:
That is the exactly step that bricked many TF700s here (search the forums). "Wipe data" with a broken recovery = bootloader won't do anything else than try to boot the broken recovery.
If you didn't create a blob for wheelie/nvflash before, your only option now is to send it to Asus for a costly "repair" (they claim they have to change the mainboard, I don't know why they don't just use nvflash).
Click to expand...
Click to collapse
Yes, with only APX available but no NvFlash backup, there's very little to no light at the end of the tunnel. I also wondered why the reports of RMA'd users mention a motherboard change, but I do remember something about unit-specific code being backed up with NvFlash. Although I'd think it strange, it might be that even ASUS cannot revive a bricked 700 without knowing that code, necessitating the new motherboard with a known code. This is only speculation, of course, but it's the only reason I could think of.
@OP: with no fastboot available, you will not be able to follow either Scott's guide or reflash a recovery. I sincerely feel for you, especially since it was enthusiasm that got you into trouble. I know the resultant feeling, and I hate it, for it quells said enthusiasm in the future and make you overly cautious. I wish you a speedy and effective RMA!
jeremiah.wells said:
MartyHulskemper, many thanks for your prompt reply. To answer your questions:
1) I have tried (in vain, I now understand) to use nvflash (first using wheelie with a couple configurations) and to no avail
2) I did NOT install nvflash before, as I was excited about rooting and wasn't abreast of all the consequences of updating directly to JB and then unlock and then root with a new device. Unfortunately I had read a post on (another website) that nvflash wasn't working on the TF700T (which I presume was correct at the time it was written) only to now learn that it is.
A note -- fastboot is not available and the only way I can get the device visible to a computer is to put it in APX mode.
This is a classic case of me jumping the gun without fully understanding what's implied with the various updates and root solutions out there. Basically I followed a guide and used a set of files distributed on scottsroms that indeed rooted my device with the TWRP recovery. What I then attempted and (I think what ultimately did my device to its current state) was to attempt to flash CWM. After that flash I couldn't get either recovery to boot and so I attempted a data wipe and was going to reflash with CWM. After that data wipe is when I could not longer boot.
Sorry about the novel but I guess I'm vainly hoping this may trigger and idea from you or a future reader about what my options are. I will look at the link you suggested and go from there.
Again, thank-you for any assistance you may provide.
Click to expand...
Click to collapse
I really feel for you...just bricked a phone last week and it's an awful feeling, like you should have known better. Good luck.
Just out of curiosity, did you use Rom Manager to flash CWM recovery? That's the kiss of death for the TF700.
I feel for you too as this happened to me even without any type of modifications to my recovery or bootloader! As far as RMA and the motherboard change I am not sure whether they recovered my device without an actual change. When i got it back from RMA it was on the same firmware as before (not the most recent at the time) as well as retaining the same SN on my device. Since I got it back though I am unable to use the unlocker tool. I get that network error and a refusal from the asus unlock server that lots of people were having issues with a while back. I am in touch with Asus service now, but asus service is usually a long arduous process! I hope that they dont charge you for the replacement, but seeing as you unlocked its very possible if you have any sort of insurance from your credit card that may be a better route by trying to replace it as a lost or broken unit. My RMA was free (except shipping) but again, no unlock!
best of luck.
MartyHulskemper said:
it might be that even ASUS cannot revive a bricked 700 without knowing that code, necessitating the new motherboard with a known code. This is only speculation, of course, but it's the only reason I could think of.
Click to expand...
Click to collapse
They must know the device key, because the unlocking process requires it. However it is plausible that service centers have no access to this information.
It's somehow depressing that not knowing 128 secret bits takes away control over our own devices.
_that said:
They must know the device key, because the unlocking process requires it. However it is plausible that service centers have no access to this information.
It's somehow depressing that not knowing 128 secret bits takes away control over our own devices.
Click to expand...
Click to collapse
In cases like this, I always hope you get a motivated technician that actually hunts down your serial from that database and helps you out. Guess I'm a bit naive in that regard.
Yeah, those 16 bytes keeping the door shut are a major bummer, as is the fact that NvFlash was not pre-installed anyway...
okantomi said:
I really feel for you...just bricked a phone last week and it's an awful feeling, like you should have known better. Good luck.
Just out of curiosity, did you use Rom Manager to flash CWM recovery? That's the kiss of death for the TF700.
Click to expand...
Click to collapse
To answer your curiosity, NO... I did not install or use Rom Manager in any way to get to this state.
Got a question. Mine is rooted but locked, i attempted to install TWRP before unlocking. I can still boot it up but i cant get into recovery. Can i unlock it without a working recovery and just reinstall TWRP? what are my options? Any help would be great.
edit: nevermind, i think i found the answer...
Sent from my ASUS Transformer Pad TF700T using Tapatalk 2
By the title, you can assume the situation is not very pretty and this poor individual needs some help. You would be correct in your assessment. This was me yesterday, freaking out after the new OTA update crippled my device and made me fear the worst (bricking). As a new Rom developer/flasher, I certainly worry about bricking my device, but have luckily not…yet. I certainly won’t deny the amount of tinkering that I do with my phone and flashing custom Roms, which might have assisted in my near meltdown, however, I thought it may be a good idea to share this experience (issue + solution) with the rest of the community, to hopefully save someone long periods of stress and research.
Note: I am only assuming the OTA is what caused the problem, but this could be incorrect, feel free to correct me.
Key Factors:
Custom Recovery: TWRP
Custom Rom (at the time of meltdown): Google Play Edition
Device: Verizon HTC One m8
OTA update ran.
Decided I wanted to go back to something closer to Sense and noticed that the ViperOne rom was getting some awesome reviews.
Downloaded Rom
Attempted to go into Recovery, but was greeted by the following error message:
HBoot
Model ID incorrect
Update failed
Press power to reboot
Downloaded Flashify and was able to get into recovery.
I knew I would need to deal with this error eventually, but thought maybe flashing the new Rom would assist in that area.
Flashed ViperOne rom, flash failed.
I swiped to unlock and the phone rebooted…
Then the real fun began.
My phone would boot to HTC logo with the read development disclaimer at the bottom:
“This build is for development purposes only. Do not distribute outside of HTC without HTC’s written permission. Failure to comply may lead to legal action.”
I freaked out for a bit, researched a ton and finally began to put the bits and pieces together:
At this screen it is possible to reboot, but then you will just boot into Hboot error, so pretty pointless (from what I know, feel free to chime in If you know of a way to get into recovery/fastboot from here).
I downloaded the latest version of TWRP
While on the HTC One screen, I plugged my phone into the computer and entered: adb devices.
At first, the command yielded no results, but after about 3 minutes, the device was recognized, but offline.
After 4 minutes, the device was recognize and looked to be available.
I then issued the following command:
Adb reboot bootloader
Success! This booted me into the fastboot usb method, which gave me a huge glimpse of hope.
Next, I ran the command to reflash the custom recovery:
Fastboot flash recovery [insert recovery file name here].
I received a successful message flash, however, after a reboot, I experienced the same problem as before.
I attempted to boot into recovery from the menu UI, but the option was not available. The journey continues:
I attempted the steps outlined above and then flashed the TWRP recovery image to boot instead of as recovery:
Fastboot flash boot [insert recovery file name here].
reboot-bootloader
This time, I was able to select “Recovery”, and booted into TWRP.
I then installed the GPE Rom again.
After the GPE rom installed, I rebooted into TWRP and checked to see if my restores were available, and luckily enough they were still in the same place (phew!).
This little article will hopefully help someone, as all the information I found for this issue was scattered throughout the web and I was luckily able to piece it together for my specific issue.
Ultimately, typing the ADB and Fastboot by themselves and reading through the commands in the CMD prompt, helped me figure out the commands needed to be successful in my endevours.
This would have been deeply helpful for me a week and a half ago. I actually bricked my device during the process of S-Off and unlocking the bootloader, after which, my device wouldn't be recognized on my computer (I missed a step in the process). Luckily for me, Verizon gave me an exchange, even though the phone was rooted and the only screen that'd boot up was TWRP. Apparently since I was in the 14-day return window, rooting or unlocking your device doesn't disqualify you from doing an exchange.
The first ROM I flashed after getting the new device and unlocking it was the same Google Play Edition. I had some issues getting in to recovery. I reflashed TWRP and have been fine ever since. I'm thinking it may be a bug in that ROM that causes devices to lose discoverability or for recovery to fail.
As a preface, I keep my Nexus (16GB) stock/unrooted because having it down while flashing ROMs is not an option anymore. I need to the phone to work all the time, period. The irony is ridiculous.
Received the OTA from Sprint a couple of weeks ago, immediately noticed the (often-mentioned) dismal battery life and GPS hasn't been able to connect since that day. As I use GPS daily and need my phone to last for longer than 6 hours--these present full stop problems. This is in addition to the (often mentioned) stuttering/lag/freezing issues which are beyond frustrating as a heavy user. Really Google?!
Over the last week I've:
-Cleared caches multiple times
-Wiped/Factory Data Reset (3 times as it would not allow me to sign into my Google Account or sync apps)
-Spoke with Nexus Support for three hours today, which ended with 'Sorry, you'll have to call Sprint or LG'
-Tried GPS location 'fix' on XDA (didn't work)
-Been unable to send/receive SMS messages for two days
I'm beyond frustrated with this process and with Google for their lack of response in fixing widely-known 5.0 issues...on their own device. This phone is useless at the moment. What are my options? Root and roll back to KitKat? Throw this phone out of the window and go get a G3? I don't want to use a custom ROM/Recovery unless there are no other options.
Thanks for any advice-
993 said:
Over the last week I've:
-Cleared caches multiple times
-Wiped/Factory Data Reset (3 times as it would not allow me to sign into my Google Account or sync apps)
-Spoke with Nexus Support for three hours today, which ended with 'Sorry, you'll have to call Sprint or LG'
-Tried GPS location 'fix' on XDA (didn't work)
Click to expand...
Click to collapse
For the problems you're describing, you really haven't done much to solve it.
Unlock the bootloader, flash a factory image, relock the bootloader.
Why would you speak to Nexus support for 3 hours for? Waste of time
Frankly, I wanted to see if they would even acknowledge any of the issues that appear to be quite common recently with 5.0. They clearly did not, and it was relatively little effort wasted as it was through Hangouts (on a desktop though, phone forgot how to Hangout).
I have not tried to flash the bootloader, as I said I want to keep this phone as OEM as possible. Since that doesn't appear to be an option I will update when it's complete.
993 said:
I have not tried to flash the bootloader, as I said I want to keep this phone as OEM as possible. Since that doesn't appear to be an option I will update when it's complete.
Click to expand...
Click to collapse
Please read the stickies and take advantage of the knowledge base. My suggestion keeps the phone absolutely stock. It's telling that you couldn't recognize that.
I agree, just flash the stock image from fastboot.
Sent from my Nexus 5 using Tapatalk
Wakamatsu said:
Please read the stickies and take advantage of the knowledge base. My suggestion keeps the phone absolutely stock. It's telling that you couldn't recognize that.
Click to expand...
Click to collapse
That isn't what the Nexus rep said (reps have been known to be misinformed). I have read the relevant stickies and am aware of how to use this site. You didn't read my question. As I said, I would rather not flash if there are other viable options. IF this is the only workable solution thus far for people experiencing the above listed issues then OK. Thanks for your suggestion.
993 said:
That isn't what the Nexus rep said (reps have been known to be misinformed). I have read the relevant stickies and am aware of how to use this site. It is telling you didn't read my question. As I said, I would rather not flash if there are other viable options. IF this is the only workable solution thus far for people experiencing the above listed issues then OK. Thanks for your suggestion.
Click to expand...
Click to collapse
Flash the factory image. OTAs sometimes fail to implement properly. What you are describing is almost certainly that. You've already tried everything you can to fix the issues short of flashing. So flash.
You either have bad hardware, or the upgrade didn't install correctly. As others have mentioned, flashing the factory image should work.
993 said:
You didn't read my question. As I said, I would rather not flash if there are other viable options.
Click to expand...
Click to collapse
You said that you don't want to flash a custom rom. A factory image is what is installed on the Nexus by Google. Again, you're betraying a lack of knowledge on this subject.
If you wanted stablity you should of stayed on kitkat, hence why i never updated, you a os i can rely on and thats currently 4.4, as usual android builds at the start have minor issues and we wait for google to fix them.
I usually dont update till the devs can get a functioning build thats suitable for the community.
as above,
Fastboot oem unlock, flash 4.4 or 5.0 google image, relock bootloader
If he doesnt want to flash a custom rom then he should know how to flash a stock rom.
https://developers.google.com/android/nexus/images
I don't even speak to my own family for 3 hours, let alone a complete stranger lol wow
Wakamatsu said:
You said that you don't want to flash a custom rom. A factory image is what is installed on the Nexus by Google. Again, you're betraying a lack of knowledge on this subject.
Click to expand...
Click to collapse
Here's what's been done so far several times over:
Unlocked Bootloader
Installed SDK kit from Google using their walk though
Attempted ADB sideload of Google Factory images (5.0 then 4.4) from appropriate modes on CWM and TW
Attempted Fastboot (works only with CWM, no push/pull)
Multiple Full Wipes in both recoveries
Attempted ADB commands through terminal (W7 Pro - Admin)
Uninstalled, Reinstalled all recommended device driver packages, only recognizes in device manager as 'Google Nexus ADB Device' not Explorer Shell (read relevant FAQs) regardless of driver.
Used multiple USB ports/cables, rebooted PC each change in configuration
Root Toolkit 1.9.9 does not recognize through ADB
As of current, only Bootloader (unlocked) and Recovery mode work. I cannot access the SD card of the device through any means I've tried. The last that the OS booted I ensured that USB debugging was on in Settings. ADB mode in either recovery does not change device recognition on PC, nor does file system appear. System will not boot to ensure debugging setting has remained. Same issues with a laptop with no known prior driver issues.
993 said:
Attempted ADB sideload of Google Factory images (5.0 then 4.4) from appropriate modes on CWM and TW
Attempted Fastboot (works only with CWM, no push/pull)
Click to expand...
Click to collapse
You can't sideload a factory image. Fastboot commands are executed in bootloader, not recovery.
That should read that 'fastboot only responds to commands while CWM is the recovery'.
I can flash recoveries by this method from CMD but anything else (ROMS, etc) show progress but end before completion.
993 said:
That should read that 'fastboot only responds to commands while CWM is the recovery'.
I can flash recoveries by this method from CMD but anything else (ROMS, etc) show progress but end before completion.
Click to expand...
Click to collapse
Dude, you really need to read and understand the stickies before you do something bad to your phone. You are just flailing right now.
And really, all you needed to read was the install instructions on the Google factory image page.
1) Unlock bootloader
2) Unzip the factory image zip
3) Reboot in to bootloader
4) Run the flash-all script in the factory image folder.
This was the first method I tried. I have downloaded the factory image from Google several times and I get an 'unexpected end of data' message in 7zip when extracting my copies. Downloading from Google has been hit or miss with 'unknown network error' that halts the download, not sure what that could be.
I am trying to pinpoint the cause of these issues, as flashing back to factory without good images won't be possible. I understand how straightforward a factory flash should be especially with OEM tools but in my case I keep running into roadblocks.
Disable your antivirus and firewall during the download, that may help.
gee2012 said:
Disable your antivirus and firewall during the download, that may help.
Click to expand...
Click to collapse
Thanks for your suggestion. I disabled MSE + Firewall on the W7 machine and attempted to download [hammerhead-lrx21o-factory-01315e08.tgz] again from Google with the same error result, halting the download before completion.
My main machine, a Chromebook, will download the file completely however the zip cannot be moved without losing file size (downloads the entire 556.3MB, however once moved it magically becomes 417.2MB).
Further, I went to the Sprint Store today (I know) to see what the techs could do about pushing the factory image on the device. After about 30 minutes, they came back with "You should call Google". Brilliant. Now all I need is someone to suggest I call LG and the trifecta will be complete.
993 said:
Thanks for your suggestion. I disabled MSE + Firewall on the W7 machine and attempted to download [hammerhead-lrx21o-factory-01315e08.tgz] again from Google with the same error result, halting the download before completion.
My main machine, a Chromebook, will download the file completely however the zip cannot be moved without losing file size (downloads the entire 556.3MB, however once moved it magically becomes 417.2MB).
Further, I went to the Sprint Store today (I know) to see what the techs could do about pushing the factory image on the device. After about 30 minutes, they came back with "You should call Google". Brilliant. Now all I need is someone to suggest I call LG and the trifecta will be complete.
Click to expand...
Click to collapse
Try LG to see if they will help. Haha had to.
Can you not download on your phone? I'm not familiar with sending MMS but does it work forcing your phone to 1x? I'm trying to think of ideas. What all apps do you have installed?
Sent from my Nexus 5 using XDA Free mobile app
Hey guys,
I've backed myself into a corner here a little and I hope you can guide me to get a working phone again.
I was on Ephemeral Mate 8 for a while now and decided it was time to upgrade. The new ROM I wanted to try mentioned I should have at least firmware version B3XX to flash it, so I thought the easiest way to get there would be to flash a stock ROM again and let the system update function do it's work. I updated from NXT-L29C432B180 to B192 to B560 to B581 (no B3XX offered in between) and somehow managed to get the phone rooted again. Yet I noticed some things (like Bluetooth) not working quite properly anymore (for whatever reason) and so wanted to downgrade again.
Tried to restore one of my old backups from Ephemeral Mate 8: it failed. The backup from stock B581 I made before: no idea where it was stored, but I can't find it anymore and may have accidentally deleted it by now. Currently it seems I don't have any OS installed anymore.
I still have an unlocked bootloader and can access it by pressing power + volume down and can flash a custom recovery via Fastboot (the one I'm currently trying with is this one). However, no ROM I try to flash or backup I want to restore will work anymore, they just fail with varying errors like error 7 or invalid zip file. At some point I tried to wipe almost anything I could before every new try to flash anything (probably a very bad idea), because I thought a clean start would somehow resolve some of the various errors TWRP was throwing at me - obviously it hasn't. I also tried installing the same stock ROM like the first time via dload method, but it always says there is an incompatibility with my current version (probably that I don't have one anymore by now) and fails.
Sadly, I can't remember anymore what everything I tried to flash in between to try and get it working again or where I found it, because it simply is too much. But I'm willing to provide any information I'm able to achieve and try any steps you tell me to get it working again. I'd be very grateful for any help on this and already thank you in advance for any advice.
Sooo... in the meantime I followed this guide and got my phone working again. However, I'm facing another problem now:
When I try to flash TWRP I always get this error and can't find out what it means and how to fix it:
Code:
target reported max download size of 471859200 bytes
sending 'recovery' (17280 KB)...
OKAY [ 0.437s]
writing 'recovery'...
FAILED (remote: image verification error)
finished. total time: 0.454s
Maybe it's related to that somehow the Serial Number of my device has changed in the process? It's now just '0123456789ABCDEF'. I read about fixing it with HCU Client tool, but when trying to repair the Serial Number it just gives me this error:
Code:
2017-06-23 13:11:36.503 Autodetect COM port and phone type start!
2017-06-23 13:11:36.509 Compatible COM ports not found!
2017-06-23 13:11:36.513 ERROR!
Phone not found !
I don't know how to proceed, but don't want to be stuck with stock rom. Any suggestions?
Okay, image verification error obviously had something to do with the B320 rom I flashed. Tried B192 now and recovery flash with fastboot goes through with OKAY... Just that the phone doesn't boot into recovery - it just sits there stuck on boot screen.
Would still be thankful for any hints.
Patneu said:
Okay, image verification error obviously had something to do with the B320 rom I flashed. Tried B192 now and recovery flash with fastboot goes through with OKAY... Just that the phone doesn't boot into recovery - it just sits there stuck on boot screen.
Would still be thankful for any hints.
Click to expand...
Click to collapse
I read somewhere that once you are on EMUI 5 you can't go back to 4. The rollback works to 4.1 which is where I am now with C636B330 but that's it. No further. I was advised to use the DC Phoenix tool and go to 330 which thankfully worked! Do the same and you should be ok I guess.. 4.1 or 5.
I think I'm just going to have to wait for someone like kang to do a Rom based on one of those before I try custom. Unless there already is one? Next time I flash a phone I should really research the pitfalls. That would avoid a week of using a different device!
Bearded_1 said:
I read somewhere that once you are on EMUI 5 you can't go back to 4. The rollback works to 4.1 which is where I am now with C636B330 but that's it. No further. I was advised to use the DC Phoenix tool and go to 330 which thankfully worked! Do the same and you should be ok I guess.. 4.1 or 5.
Click to expand...
Click to collapse
Thanks for the reply! I'm now back on C432B180 with EMUI 4.0 flashed with DC Phoenix and finally managed to flash a TWRP using SRK Tool.
Anything with B3XX or B5XX still just gives me the 'image verification error' mentioned above for any custom recovery and I doubt it would be any different with SRK Tool since it also just makes use of fastboot as it seems to me. So I'm staying with B180 for the moment unless someone has a suggestion on how to get rid of this error.
I'll now try to flash Ephemeral Mate 8 again, since it was the first (and last) custom ROM that worked for me before. I know it's discontinued, but it's the only one I can currently find that doesn't mention to go to B3XX first - which wouldn't work for me.
What worked and didn't work so far:
Tried flashing EM8_41816_SIGNED.zip, which failed without warning and rebooted to fastboot mode mid-process which showed some error involving the word 'panic'.
Managed to root the stock B180 again with SRK Tool, but will continue to try earlier versions of Ephemeral 'cause I really need the Kang Tools. Will update on how that worked out.
Suggestions still welcome on:
How to get rid of 'image verification error' on B3XX and B5XX' so I can try flashing a non-outdated ROM.
Other still available pre-B3XX ROMs I could try.
Any root apps to achieve navbar and status bar modifications similar to Kang Tools, so I could do without a custom ROM and stay with currently achieved rooted stock ROM.
One little edit concerning the 'image verification error': My phone mentions the FRP to be unlocked in fastboot mode, when on B3XX or B5XX which it doesn't on B1XX, so maybe that's related to it? But I don't know exactly what an FRP is or what it means to unlock it.
YEEESSS!!! :victory:
Tried flashing EM8_40416_SIGNED.zip now and went through without errors. Took a few seconds to reboot and it works! Just B170 now it seems, but hey...
My quest to upgrade may have failed graciously, but at least I got a working rooted phone again with Kang Tools - what more can I ask for? And unless someone, somehow, somewhen has a hint for me about this damned 'image verification error' (at least I now know a foolproof way to fix it if I mess anything up again) I'm taking this cautionary tail to heart and won't touch this damned phone's firmware again 'til it turns to dust under my fingers.
And now, as common courtesy commands, my exact steps - from having completely messed up with nothing save stock recovery and fastboot mode working anymore to functioning phone again with root, cutom ROM and Kang Tools - for the sake of the poor souls of the future who may (hopefully not) follow in my footsteps facing the same problems (no guarantees or responsibility whatsoever on my part, just what worked for me):
1. Reboot your phone into fastboot mode (bootloader) by pressing and holding power + volume down together (don't forget to connect the phone to a PC before!). As always, make sure you have enough battery power left before each step! If you don't at this point, try booting into stock recovery by holding power + volume up and charge your phone, then continue.
2. Download:
2.1: DC Phoenix from here. Found here via here.
2.2: File with partition rework and factory firmware from here. Found here.
2.3: NXT-L29C432B180 stock ROM from here (you may need a different version depending on your device!). Found here. (Stock ROMs B3XX or higher may work too, but didn't for me - see above).
3. Buy 15 credits here to use DC Phoenix (it's worth it!), unpack and start DC Phoenix and login with your DC-unlocker credentials. (Edit: If you want to try the new guide mentioned below from step 5 onward, you should consider buying the 'DC-Phoenix + HCU timed license' option for 19 bucks instead.)
4. Follow this guide. You find the mentioned 'UPDATE.APP' file in the stock ROM ('update.zip') file you downloaded before.
5. You should have unbricked your phone and have a working stock ROM again by now. :fingers-crossed: Now on to getting a custom ROM again:
(Edit: I fiddled around with my phone a bit more in the meantime, so if you prefer flashing a TWRP on a B5XX-based stock ROM and finding your way from there, you may want to follow this new guide instead.)
6. In the settings of your phone enable 'Developer options' -> 'USB debugging' if you haven't already (and 'Enable OEM unlock' too just to be sure, don't know if it's necessary, but I did it). If you don't see 'Developer options', tap on 'About phone' -> 'Build number' a few times. Connect phone to your PC.
7. Downloads:
7.1: SRK Tool from here. Found here via here.
7.2: Ephemeral Mate 8 from here. Found here via here. (Later version or other ROMs may work for you, but didn't for me.)
8. Move 'EM8_40416_SIGNED.zip' file (or the one you want to flash) to the external sdcard of your phone.
9. Unpack and start SRK Tool.
10. Select '3. Install Recovery 6.0' -> '2. Huawei Mate 8' -> '2. Install Mate 8 TWRP for Marshmallow (EMUI 4.0)' (may depend on the stock ROM version you flashed before). Confirm requests and follow the instructions.
11. Your phone now reboots. Remove the USB cable connecting it to the PC and press and hold power + volume up to boot into the newly flashed custom recovery.
12. Select your language (it was chinese later on for me, when I didn't!) and press 'Cancel' if asked for a password. When asked to allow changes to system, do it (don't know if necessary, but I did).
13. Select 'Wipe' -> Swipe to Factory Reset'.
14. Go back and 'Format Data' -> type 'yes' and confirm. Reboot the phone and enter custom recovery like before. Factory Reset again. (Don't know if this step is necessary, but I did it.)
15. Go back and select 'Install' -> select and flash the zip file you moved to sdcard before. If no errors occured, reboot your phone. Let it reboot, it may take a few seconds. If you get errors, try starting with step 1 or 11 again (depending on how badly you messed up...) and try a different custom ROM (Follow the instructions there and be aware of prequisites and warnings!). If that doesn't work either, note your errors and ask for help - good luck!
16. Congratulations, you should have a working phone again with Ephemeral Mate 8 custom ROM with Kang Tools, it should be rooted already. :good:
17. Maybe buy the guys, who developed and wrote the mentioned tools and guides to help you on your way, a coffee - they surely deserve it.
Hint: If you only want a rooted stock ROM, reboot your phone after step 12, start SRK Tool again, select option '4. Root' and follow instructions.
Patneu said:
Thanks for the reply! I'm now back on C432B180 with EMUI 4.0 flashed with DC Phoenix and finally managed to flash a TWRP using SRK Tool.
Anything with B3XX or B5XX still just gives me the 'image verification error' mentioned above for any custom recovery and I doubt it would be any different with SRK Tool since it also just makes use of fastboot as it seems to me. So I'm staying with B180 for the moment unless someone has a suggestion on how to get rid of this error.
I'll now try to flash Ephemeral Mate 8 again, since it was the first (and last) custom ROM that worked for me before. I know it's discontinued, but it's the only one I can currently find that doesn't mention to go to B3XX first - which wouldn't work for me.
What worked and didn't work so far:
Tried flashing EM8_41816_SIGNED.zip, which failed without warning and rebooted to fastboot mode mid-process which showed some error involving the word 'panic'.
How to get rid of 'image verification error' on B3XX and B5XX' so I can try flashing a non-outdated ROM.
Any root apps to achieve navbar and status bar modifications similar to Kang Tools, so I could do without a custom ROM and stay with currently achieved rooted stock ROM.
One little edit concerning the 'image verification error': My phone mentions the FRP to be unlocked in fastboot mode, when on B3XX or B5XX which it doesn't on B1XX, so maybe that's related to it? But I don't know exactly what an FRP is or what it means to unlock it.
Click to expand...
Click to collapse
Isn't the FRP related to the 'enable oem lock' option? Glad it's sorted! I might follow this thread in the future to go back to pre EMUI 4.1, but I like the camera options so willing to stick with it for a while!
Hey, I didn't realized, I have the 0123456789ABCDEF serial number too, I'm on B330, after unbricking it with DC phoenix (flashed directly from the "Factory_firmware.." for unbrick it, to B330). Did you solve that?
I think I cannot do much now because I'm waiting for the 14 days using my HW account to request de bootloader unlock code. Altough, my phone says I have the bootloader unlocked (that's because the DC phoenix tool did something). But I've never formerly unlocked my phone.
Don Kronos said:
Did you solve that?
Click to expand...
Click to collapse
Well, sort of... I'm still on this fake ABC... Serial Number, but as you can read above, I at least managed to flash a TWRP again and also to install a custom ROM, if only a B1XX based. Better than nothing, though. Didn't encounter any other downsides of the changed Serial Number 'til now.
If you have a hint concerning the 'image verification error' I'd still be glad to hear, but otherwise I'm fine now.
Patneu said:
If you have a hint concerning the 'image verification error' I'd still be glad to hear, but otherwise I'm fine now.
Click to expand...
Click to collapse
Patneu said:
One little edit concerning the 'image verification error': My phone mentions the FRP to be unlocked in fastboot mode, when on B3XX or B5XX which it doesn't on B1XX, so maybe that's related to it? But I don't know exactly what an FRP is or what it means to unlock it.
Click to expand...
Click to collapse
The FRP (Factory Reset Protection) prevents some "writing" commands of ADB to be executed, thats the reason of the "image verification error". It is the homologue to an iCloud protection of iPhone, but using Google Account. I don't know why it gets locked.. but the DC phoenix can crack that protection.
Don Kronos said:
The FRP (Factory Reset Protection) prevents some "writing" commands of ADB to be executed, thats the reason of the "image verification error".
Click to expand...
Click to collapse
Sounds right, aside from the fact that my FRP doesn't seem to be locked. When I flashed B320 via DC Phoenix or flashed B1XX and updated to B560 via OTA and booted into fastboot mode, it said there "Phone unlocked" and "FRP unlocked". I shouldn't get the 'image verification error' then, right? But I do. If I flash B1XX via DC Phoenix, it says nothing about FRP, whether locked or unlocked, just "Phone unlocked" and I don't get 'image verification error'.
I remember getting a TWRP to flash when I updated from B180 (flashed with the TWRP I had before) to B581 OTA before I used DC Phoenix (even if it threw errors like nothing good), but I don't remember if it said anything about FRP then.
Don Kronos said:
I don't know why it gets locked.. but the DC phoenix can crack that protection.
Click to expand...
Click to collapse
Yeah, it seems so, but it can't flash a custom ROM, can it? Only 'UPDATE.APP' of stock ROMS as far as I can see.
Patneu said:
YEEESSS!!! :victory:
And now, as common courtesy commands, my exact steps - from having completely messed up with nothing save stock recovery and fastboot mode working anymore to functioning phone again with root, cutom ROM and Kang Tools - for the sake of the poor souls of the future who may (hopefully not) follow in my footsteps facing the same problems (no guarantees or responsibility whatsoever on my part, just what worked for me):
Click to expand...
Click to collapse
You just saved my fuc**ing ass bro. Thanks a lot for such detailed steps. I was another prick who got his device bricked. I also fhashed a buch of things and lost track on the number of solutions tried until I came across your post:fingers-crossed: Now i feel solid again and want to continue flashing and messing up with my device. That´s the beauty of android, you can recover your device from almost any state. Thanks a lot. You made my day!
The process really work and it's really easy. Those 15 bucks are worth every penny!
juanq214 said:
The process really work and it's really easy. Those 15 bucks are worth every penny!
Click to expand...
Click to collapse
Glad, I could help you and yeah, they surely are.
Just a few remarks I discovered in the meantime:
- If you want to further mess with your phone after that, be sure to not mess up so badly as to having to use DC Phoenix again, unless within the next 72 hours or you'll have to pay the 15 bucks again (as mentioned here). Other claims made there about "lifetime" are not legit.
- Tried EM8_41816_SIGNED version of Ephemeral Mate 8 (based on B180) again and it works, too. The failure and mid-process 'panic' reboot at first try was caused by unrelated battery (hardware) problems of my device (which I think already started before messing with the firmware), which caused me to think I had more power left than I actually did. :silly:
I solved the battery problems by replacing the battery using this guide, ruining some cheap repair kit, made of too much plastic, in the process and paying altogether around 40 bucks for it and for now, everything runs fine again. :good:
Patneu said:
Glad, I could help you and yeah, they surely are.
Just a few remarks I discovered in the meantime:
- If you want to further mess with your phone after that, be sure to not mess up so badly as to having to use DC Phoenix again, unless within the next 72 hours or you'll have to pay the 15 bucks again (as mentioned here). Other claims made there about "lifetime" are not legit.
- Tried EM8_41816_SIGNED version of Ephemeral Mate 8 (based on B180) again and it works, too. The failure and mid-process 'panic' reboot at first try was caused by unrelated battery (hardware) problems of my device (which I think already started before messing with the firmware), which caused me to think I had more power left than I actually did. :silly:
I solved the battery problems by replacing the battery using this guide, ruining some cheap repair kit, made of too much plastic, in the process and paying altogether around 40 bucks for it and for now, everything runs fine again. :good:
Click to expand...
Click to collapse
I successfully got OTA for L29C432B581. I don't really care much about xposed or magic, all I needed was Nougat update. The only downside is that fast charging is gone, but that is not because of the brick but rather a bug related to the update.
Everything fixed.
Ok, so I'm a little late on this, but because some recent circumstances forced me to mess with my phones firmware again - despite my former new-found resolutions :angel: - I dug into this mess again and finally found the solution for the last unsolved problem I encountered: the dreaded 'image verification error'. So I thought, I'd share it with anyone else out there, who may still be struggling:
If you followed my original instuctions, maybe you got stuck at the same point I did: I originally wanted to install a more recent custom ROM based on Android Nougat, but couldn't for the hell of it flash a working TWRP, because of 'image verification error', when I was on a stock Nougat ROM (B5XX-based) and finally settled for my old B1XX-based Ephemeral Mate 8 ROM once more.
So here's what I did to get a working TWRP flashed with a B5XX-based stock ROM (again, no guarantees, just what worked for me):
1. Depending on how badly you messed up before or at what point you currently are, first you may want to follow some of my original instructions 'til step 5. (All links are still working, as far as I can see.) You then should be good to go with a working B1XX-based stock ROM as a basis for what where going to do now. :fingers-crossed: If you already are, great. :good:
1.1: Attention! If you don't already have a working B1XX-based stock ROM, you may want to slightly differ from my original instructions: instead of buying the 15 credits for DC Phoenix in step 3, you could directly choose the "DC-Phoenix + HCU timed license" option for 19 bucks, so you're already set for everything we're doing later and can mess with your phone as much as you want for the next 72 hours - it may come cheaper in the end and it's easier in any case.
1.2: You may notice afterwards, that if you start adb and type 'adb devices', that the serial number of your device changed to something generic like '0123456789ABCDEF'. We'll fix that later on, along with the 'image verification error', but be sure to note your devices original S/N! You can find it on a sticker at the side of the box your phone came in or in the phones 'Settings' -> 'About phone' -> 'Status' -> 'Serial number'. I don't know where else to recover it, if you lost it.
2. Once you have a working B1XX-based stock ROM as a basis, update it to the latest B5XX-based one (was B582 for me) via 'Settings' -> 'System update'.
2.1: Attention again! You may want to check 'Developer options' -> 'Enable OEM unlock' first, since it was greyed out (while still checked) for me once I updated to B5XX. Don't know if it's necessary to have it enabled, but better safe than sorry so you don't have to start over. (If you don't see 'Developer options', tap 'About phone' -> 'Build number' a few times.)
3. Download:
3.1: HCU Client from here. (Thanks Petr S. for putting me on the right track!)
3.2: Unofficial TWRP for EMUI 5.X from here. Found here. (Official TWRP versions may work for you, but didn't for me.)
4. If you didn't already, buy a sufficient number of credits (don't know how much it will be) to use HCU Client from here or directly choose the "DC-Phoenix + HCU timed license" option for 19 bucks to get the all-round carefree package.
5. Unpack and start HCU Client and login with your DC-Unlocker credentials.
6. Connect your phone to your PC and enable 'Developer options' -> 'USB debugging' (don't know if necessary, but I did).
7. As instructed by HCU Client, type '*#*#2846579#*#*' (minus the quotes) into your phones dialer and select '1. Background Settings' -> '2. USB Port Settings' -> 'Manufacture Mode'. If your phone should be rebooting somewhere in the process, you may need to do this again.
8. Now click 'Read phone info' in HCU Client ('Autodetect' should be checked already) and wait for it to complete. (If you didn't buy a sufficient number of credits or the mentioned license before, HCU Client will simply get stuck instead of just telling you - which I found a little odd. )
9. Click 'Repair UMTS' (acknowledge the warning) and type the original serial number of your device (not the '0123456789ABCDEF' one!) into the 'SN' textfield, check it and hit 'Repair'. (I also retyped the 'IMEI' and 'IMEI 2' numbers, but I guess that was unnecessary.)
10. If now you hit 'Read phone info' again, all the textfields under 'Repair UMTS' (except 'WiFi MAC' and 'Bluetooth MAC') should be filled with the right values. Then click 'Unlock' -> 'Read Bootloader code', note the bootloader code. Your phone will shutdown.
11. Power up your phone again, make sure 'Settings' -> 'Developer options' -> 'USB Debugging' and 'Enable OEM unlock' are still checked and bring it into fastboot mode, then open a command prompt and cd to where your 'Minimal ADB and Fastboot' (or whatever you're using) is installed, if you didn't already, and type 'fastboot devices'. You should see your device with the original serial number again.
12. Unlock your device again with the command 'fastboot oem unlock ' followed by the bootloader code you noted before. Now you should be able to flash the unofficial TWRP you downloaded with 'fastboot flash recovery twrp-3.1.1-1-next.img' (assuming you copied the TWRP image file to your 'Minimal ADB and Fastboot' directory for convenience and didn't rename it).
13. Type 'fastboot reboot' and immediately bring your phone into recovery mode. You should now have a working TWRP with a B5XX-based stock ROM and should be able to flash anything you'd like. :fingers-crossed::good:
You should also be able to flash a Nougat-based custom ROM now, though I didn't try that and settled for the stock ROM rooted with Magisk for personal reasons.
A last word of warning: Be sure to frequently make backups in TWRP before you flash or change anything important like installing or updating Magisk or Xposed modules, because I noticed my system to be a little... wonky at this point.
Don't know if that's related to the way I unbricked my phone with all these DC-unlocker tools or just using Magisk or whatever, but several times after changing something important and rebooting, my phone kind of crashed into fastboot mode with some warning about 'native_boot_fail' and wouldn't boot again until I made a factory reset in recovery and started all over (the first time while writing this guide :silly. Not so bad, as it doesn't happen randomly as long as I don't make any major changes to the system, but you wouldn't want to retype your Google password and setup your system again everytime like I had to do, would you? So, yeah, just make a backup in TWRP before you change anything root-related - and tread a little lightly, as in: don't make to many changes at once - and you should be fine.