[HOW-TO] Unlock Bootloader and Root Using Linux - Motorola Photon Q 4G LTE

Hey all. Had a few issues trying to unlock and root my own phone on my Linux box, so I decided to post what I learned in the process in case anyone else visiting the forums runs into the same problem.
First, a little background on me, since I'm fairly new here at the xda forums (let alone to the Photon Q).
My foray into the Android world started with the OG Droid. The moment I held that baby in my hands, I knew I wanted to be a part of the community the Android platform would spawn. With the OG and the Droid3, I didn't do much more than help others find certain settings options, or explain how to perform a specific task. However, I learned some of the basics of theming during the last few days I had my D3 before I (sadly) traded it in when I switched from Verizon to Sprint.
When I switched carriers, I picked up the Samsung Transform Ultra, and I've been a major contributor in that arena, particularly over at the phone-specific area of androidforums. I've learned a lot in the time I've had the device, especially with creating flashable zip files and theming. I now look forward to seeing what all I will learn while contributing to the Photon Q community.
Now, before we get into the actual instructions, the obligatory Disclaimer:
I AM IN NO WAY RESPONSIBLE FOR WHAT MAY OR MAY NOT HAPPEN TO YOUR PHONE WHILE FOLLOWING THESE INSTRUCTIONS! FOLLOW THIS GUIDE AND ANY HELP I OR OTHERS GIVEAT YOUR OWN RISK! THIS WILL VOID YOUR WARRANTY!
These instructions assume you are starting with a new phone (meaning it hasn't been unlocked or rooted yet), are relatively familiar with root, are using Linux on your machine, and are fairly comfortable navigating your way around both the phone and PC. As of this writing (5-18-2013), I am running Ubuntu Linux 13.04 on my system, and am basing my instructions on such a setup. Also, the Android SDK and the 'tools' and 'platform-tools' portions from the SDK must be installed and up-to-date.
With all that out of the way, let's get into the guide, shall we?
To ensure the best chance for success, make sure the following applies:
USB debugging is on and the MTP option in "USB computer connection" is selected. This ensures that 'adb' and 'fastboot' will recognize the phone.
Unless otherwise noted, the instructions below assume the phone is connected to your computer via USB, and said computer has its own internet connection independent of the phone.
Before we begin, make sure to have the SuperSU zip downloaded to the root of the SD card (phone or external card), and the preferred recovery image downloaded and moved to the same location that 'adb' and 'fastboot' are in ("/home/user/androidSDK/platform-tools", for example).
CAUTION: If any other Android devices are plugged into your computer in addition to your phone, the 'adb' and 'fastboot' commands will affect ALL devices connected at the time!
To make the guide a little easier to follow, commands that need to be typed will be marked like this. Text to look for will be formatted this way.
Part i: Required tools and downloads:
Depending on which recovery you want to use, I recommend using the SuperSU made available at that recovery's thread. In the event that a SuperSU zip isn't made available, download one from one of the other recovery's threads, then download the recovery img you prefer.
TWRP v2.5.0.0 - thread/SuperSU - here recovery img - here
CWM v6.0.1.0 - thread/SuperSU/recovery img - here
OpenRecovery v2.05 - thread/recovery img - here
PART A: Unlocking the Bootloader
1. Follow instructions #1-6 on the how-to found here.
Open a Terminal window and type lsusb, then look for a line with Motorola PCS; copy down the ID number to the left of Motorola PCS because we will need it shortly (it should look something like 12ab:cd34, though your numbers will be different).
Using Terminal, type sudo gedit /etc/udev/rules.d/51-android.rules. "gedit" can be replaced with your preferred text editor if you don't want to use it or don't have it installed.
Enter your sudo password, and add this line to the file: SUBSYSTEM=="usb", ATTRS{idVendor}=="12ab", ATTRS{idProduct}=="cd34", MODE="0666" GROUP="androiddev", SYMLINK+="android%n", changing "12ab" to match the left part of the ID number you copied down earlier, and "cd34" to the part to the right of the colon.
Save the changes made to the file, then close the text editor. Type sudo service udev restart to ensure both computer and phone recognize the changes that have recently been made (you may not need to re-enter your sudo password if you made the changes to "51-android.rules" quickly enough).
Now go back to the DroidLife (DL) How-To, and pick up at step #8. The only difference is that your Terminal window will look more like this:
(bootloader) 0123456789ABCDEF#0123456789ABCD
(bootloader) EF0123456789ABCDEF01234567#0123
(bootloader) 456789ABCDEF0123456789ABCDEF012
(bootloader) 34567#0123456789ABCDEF012345678
(bootloader) 9ABCDEF
Helpful Hint: the first fourteen numbers on the first line are also your IMEI/MEID (0123456789ABCD in the example above), so if you need that, now's a good time to copy it down as well.
When entering the number in on Motorola's website, it's VERY IMPORTANT no white spaces are included in the number. Using the above example, the number should look like
Code:
0123456789ABCDEF#0123456789ABCDEF0123456789ABCDEF01234567#0123456789ABCDEF0123456789ABCDEF01234567#0123456789ABCDEF0123456789ABCDEF[/COLOR][/FONT]
[*]After following the rest of the DL guide, your phone will reboot normally.
PART B: Installing recovery and obtaining root:
Before beginning this part, make sure your phone's battery has at least 20% (or there-abouts) charge remaining, or 'fastboot' will refuse to flash the recovery.
Open Terminal (if it's not already), navigate to where 'adb' is installed, then type fastboot reboot-bootloader or adb reboot bootloader to get the phone to reboot into the bootloader.
Once the phone is in the bootloader, type fastboot flash recovery <your-recovery-filename-here>.img, replacing <your-recovery-filename-here> with the name of the recovery you would like to use. For example, if you wanted to use TWRP, the above command would look like: fastboot flash recovery openrecovery-twrp-2.5.0.0-asanti_c.img. If the recovery installation was successful, you will get the following lines:
(bootloader) Variable not supported!
target reported max download size of 31457280 bytes
sending 'recovery' (7084 KB)...
OKAY [ 0.563s]
writing 'recovery'...
OKAY [ 1.823s]
finished. total time: 2.386s
Note that the first line says "Variable not supported!". As long as "sending 'recovery'..." and "writing 'recovery'..." say "OKAY" beneath them, then this so-called error can be ignored in most cases.
While holding the Volume-up and Volume-down buttons, press the power button on the phone to reboot it and exit out of the bootloader.
When the options menu comes up, press the Volume-down button until "Recovery" is selected, then press the Volume-up button.
Once in recovery, make a backup of your phone, should you ever need to return to stock for any reason (such as an insurance exchange - since the first half of the guide voids the warranty ). Once that finishes, then flash the SuperSU.zip and reboot the phone.
If everything went well, there will be a super-user app in your app drawer, and root checkers will tell you that your device is rooted. Congratulations!
(Optional) After granting root access to a few apps that require it (such as Terminal Emulator when su is typed in, Titanium Backup or other app backup utilities, Root explorers, etc.), reboot the phone into recovery, and make a second backup of your now stock-rooted phone...mostly just for posterity, but also to keep from having to do it again in the future, should you ever choose to return to stock but want to keep root.
PART C: Wall of Glory
This guide would not be possible if not for the following people and their contributions:
Solust for his guide on the same process on a Windows machine.
arrrghhh for porting TWRP over for our phones, and his thread.
Skrilax_CZ for porting Open Recovery for our phones and his thread.
Shabbypenguin for porting CWM, his thread, and the SuperSU zips.
ChainsDD for the SuperSU app.
Motorola for the Photon Q!
Google for the Android mobile Operating System.
Droid Life for the guide on unlocking the Photon Q's bootloader.
If I've forgotten anyone or made any other mistakes, please PM me and I'll be sure to make the change.
Thanks for playing along! Hope others find this handy; I ended up having to figure most of this out the hard way. Either way, it's been a fun ride figuring out a new phone.

Related

Rooting and ClockworkMod Recovery OS X Guide

Hi all,
Saw there were no guides for ClockworkMod install on Mac. And people cool enough to have the DHD must also surely have Macs Or like hacking about enough to have a hackintosh. So anyways, I made a guide.
Rooting and s-off
I rooted using this thread here
http://forum.xda-developers.com/showthread.php?t=835746
You need to download visionary r12 and a terminal emulator, but its all explained there. Exact same process as for windows users.
Once you are rooted and have s-off, come back here.
ClockworkMod Recovery (Updated guide for [email protected] version)
1. Download the Android SDK for Mac from HERE
Extract it, then move the whole folder to the root of your main drive
e.g for me its full path is "/Snow/android-sdk-mac_x86"
2. Download the HTC fastboot binary from Here
Then extract it and move it to /xxxx/android-sdk-mac_x86/tools/
3. Download the clockwork.img from This thread
And copy it to the tools folder where you put fastboot
4. Connect your DHD to the computer in charge only mode.
5. Open Terminal.app
6. Type
Code:
cd /xxxx/android-sdk-mac_x86/tools/
Where xxxx is the name of your drive
And press enter.
If the drive where your sdk folder is located has a space in its name, you have to add a backslash before the second word.
e.g if your drive is called "Macintosh HD" the path will be:
/Macintosh \HD/android-sdk-mac_x86/tools
Alternatively, if you cant be asked typing into terminal, type cd, then a space, drag the tools folder to the terminal window, make sure it says the right path, then press enter.
7. Type
Code:
./adb devices
And press enter
Check your device is listed correctly y checking its serial number in settings on your phone with the serial number that comes up
8.Type
Code:
./adb reboot bootloader
And press enter
This should reboot your phone to bootloader, with green writing at the top, then fastboot USB in red.
9. Now type
Code:
./fastboot flash recovery clockwork.img
And press enter
If youve done it correctly, it will say
Code:
sending 'recovery' (4914 KB)... OKAY
writing 'recovery'... OKAY
10. Now use the volume buttons to navigate, and power button to select, and navigate to bootloader, then once that loads, to recovery.
Let it load and ClockworkMod will load.
Then click down through the whole menu 3 times until it says 'back menu button enabled"
This means the power button now is the select button.
You now have CM successfully installed, and can reboot, install new roms etc as you please!
No guarantee provided for this guide, if it breaks your device, blows up the computer, gets you sued by google or whatever, I am not responsible and you do all this at your own risk.
Any improvements to the guide, please say in the thread.
I am also working on a script/app to do it all on OS X with one click. Will hopefully be done once this 10 days of coursework and tests is over!
Happy Flashing and thanks to all the devs that made this possible!
Rory
excellent looking forward to the app!
mac OS x needs love from android! devs
Yeah!!!
Useful Guide! Thanks!!
Thanks!
I'm running Ubuntu and the commands are basically the same for Linux systems.
But Linux users will need to add a small file to let the OS see the Device correctly.
Follow step 3 "Setup your system to detect your device." in the guide below:
http://developer.android.com/guide/developing/device.html
Great guide!!!
but on Mac I ceep on getting a signature error??
What am i forgetting?
duanes said:
Great guide!!!
but on Mac I ceep on getting a signature error??
What am i forgetting?
Click to expand...
Click to collapse
Not sure mate, maybe look in the windows threads.
First thing I would suggest is redownload the recovery image.
At what point are you getting the signature error?
excellent i just did it..and my DHD is free!
nandihno said:
excellent i just did it..and my DHD is free!
Click to expand...
Click to collapse
Glad I could help. Will soon be expanding it for flashing kernels and ROMs using fastboot.
Thank you so much for this tutorial is very useful! If Mac users who believe that this method is difficult, can install BootCamp and run Windows natively. I use Windows 7 Ultimate under BootCamp to use the tools for Root, Downgrade, etc... (remember: for use the tools under Windows, runing under "Administrator mode" click right on mouse over the EXE file
Someone with a Mac to use Parallels Desktop or VMWare Fusion for root, to Downgrade, etc with the DHD?
Regards,

[REF] Installing Kindle Fire HD 7" 2nd-Bootloader + TWRP Complete Tutorial

Disclaimer: By following this guide, you understand and accepts that I, and any developers mentioned in this guide, will NOT be held responsible in the event that your device stops functioning or dies. While I try my best to make everything as clear and concise as it can be, accidents will happen should you not follow everything like a hawk. Read the replies and make the best decision for yourself.
Installing Kindle Fire HD 7" 2nd-Bootloader + TWRP Complete Tutorial​
This tutorial DOES NOT work for the 2013 HD model, only for the 2012 model. Following the guide with the newer model WILL CAUSE your heart to race after doing so because you'll end up with red screens and/or bootloops. So please, don't do it.
I'm going to lead you through installing Hashcode's 2nd-Bootloader and TWRP in order to start flashing custom ROMs and make backups. First, let's go over the basics and why I'm doing this in the first place. I wrote this guide to be used on a Windows computer, but as long as you can do the same things on Mac/Linux, the whole guide applies. If there are any issues, please first refer to the troubleshooting portion at the end of the guide.
+Note: As of Amazon OS update 7.3.x+, there has been a lot of issues with rooting and flashing the 2nd-bootloader. Many users reported bootloops during the completion of the guide. Those with tablets running 7.3.0 or higher, please proceed with caution, and make sure you have a factory cable on hand if you wish to advance. I strongly recommend you make backups in Step 2. If you want guaranteed success, use this tool to revert back to 7.2.3 before using the guide. You will need to flash a brand-new 7.2.3 on top to revert, so you will lose everything if you don't backup your files first.
++Note: As of December 2013, Hashcode updated the freedom-boot.img to Amazon 7.4.6 so there should be no more bootloops or any other issues like that for those running 7.4.6 or lower, but to be safe, revert back regardless. If your tablet is running anything higher than 7.4.6, you will run into issues when completing the guide. Again, if you revert back to 7.2.3 like I pointed to above, then you will have no issues. If you didn't revert, always make sure your tablet is running the same or lower version than Hashcode's freedom-boot.img.
===== 1. Why do we need a 2nd bootloader? =====
The stock Amazon bootloader doesn't play nice with Android even though it has Android at its core. We can still use fastboot commands with it, but other than that, it's quite locked-down. In other words, normal exploits used to unlock the bootloader on other Android devices, for example, like the Nexus series by Google or the handsets by HTC don't apply here. In order to use the same features, like a custom ROM, custom kernel, custom recovery, we must bypass Amazon's software by installing a 2nd bootloader.
===== 2. Why are you posting a tutorial? =====
I'm doing this because the lack of a guide means that people like myself, who are not proficient developers, keep running into issues and some ended up bricking their devices. This means that they end up with a heavy paperweight, with no chance of fixing, other than hoping that they're lucky with a fastboot cable (not the one that came with the device) and find their way back to the beginning. I'm sick of seeing so many questions about the exact same issues so I thought, why not just make a guide everyone can follow and thus make the world a better place.
===== 3. Do I need any special equipment/knowledge? =====
You don't need any special equipment, provided that you follow this guide word-for-word and be careful. I recommend a factory cable, just in case, which can be found in various online dealers, like eBay. This is just in case you make a mistake and you brick the device. I successfully installed the 2nd-Bootloader + TWRP and flashed CM10.1 without a factory cable, within minutes. The key is make sure you don't miss anything, and if you're not sure, don't make any random guesses. As far as knowledge, yes, and no. Know what you're dealing with. Anything underneath the ROM has the chance to brick the device, so know what you're getting into.
===== 4. Can't I just use FireFireFire or another automatic tool to install the bootloader + TWRP? =====
Definitely not. This is the exact reason why there are so many threads in the Q&A section about bricked devices in the first place. Never use a tool that wasn't made for the version of your tablet. The Kindle Fire (1st gen), the Kindle Fire 2 (2nd gen), and the Kindle Fire HD 7" & 8.9" (3rd gen) are not the same devices, at all. Due to the way the bootloader behaves, flashing the files that are only compatible for the Kindle Fire 2 on a Kindle Fire HD 7" will definitely brick it. This is because the bootloader is so-named for a program that checks the booting process before the device actually boots, and if there are any bad sectors that don't match, the device won't boot.
How do you avoid this? By following guides like mine, and first knowing exactly what model you have. Yes, the Kindle Fire 2 and the Kindle Fire HD 7" look similar, and Amazon seriously have problems with their naming method, but a bit of research tells you that the Kindle Fire HD actually contains an HD resolution screen, 1280x800 for the 7" and 1920x1200 for the 8.9". Also, ONLY the Kindle Fire HD 7" and 8.9" models have a front-facing camera while the other models don't have one at all. If you want to be sophisticated about it, you can use working fastboot to identify the tablet.
+Note: if you know 100% that you have the right model, skip to Step 1 and begin the guide. This part is only for those with knowledge of fastboot and would like to confirm scientifically that they have the right model. You don't need to know how to use ADB or fastboot in order to successfullly complete the guide and install custom ROMs:
In CMD, type:
Code:
fastboot -i 0x1949 getvar product
Hitting enter will return with <waiting for device>. If you connect your powered-off Kindle Fire HD 7" or 8.9" at this point, it will reboot into fastboot mode, and on CMD, it will return with "tate-xxx-xxx" for the 7" and "jem-xxx-xxx" for the 8.9". I cannot stress this enough, please know your stuff before you end up crying about how you made a simple mistake that cost you $200, or however many in other currencies, but I do know that universally, it's quite a lot of money.
===== 5. What is Android SDK, ADB, and Fastboot? =====
Android SDK is a package with the tools for an Android developer to modify devices and collect data to help them create builds and maintain a device. Included in the package is what we commonly use around here in the development world, called ADB (Android Debug Bridge) and Fastboot. ADB allows a computer to communicate with a device by means of a USB cable, allowing a developer to push and pull data between the two devices, and this is the way some root methods are discovered.
Fastboot is the term we use to refer to a diagnostic tool built into Android. This is because fastboot is the first thing a developer turns to when their device is bricked. Factory cables are designed to power the devices into fastboot, and that's all they're really good for. While ADB is for communication between two devices, pushing and pulling data, fastboot is all about writing data into the partitions on a device. We call this process "flashing".
Generally, ADB commands in command prompts start with "adb" (i.e. "adb reboot bootloader" which commands a typical Android device to boot into bootloader mode, another name for fastboot mode). ADB commands can only be used when both devices are fully booted up, and ADB debugging is selected on the Android device. After the device boots into fastboot, the device no longer recognizes ADB commands, only fastboot commands. Likewise, in fastboot mode, commands begin with "fastboot" (i.e. "fastboot oem unlock" which unlocks the bootloader on many Android devices). While in fastboot mode, the only safe way to exit is by typing "fastboot reboot" although the usual power button will be fine for most cases.
On the Kindle Fire HD 7" and 8.9", you will notice that the fastboot commands look something like this: "fastboot -i 0x1949 flash boot boot.img" ("flash" is the command to flash a file, "boot" is the partition to flash the file into, and "boot.img" is the image file containing the booting information). The reason why there's a "-i 0x1949" is simply because of the locked-down bootloader. After we install the 2nd-bootloader, this part commands the device to flash the files into the stock bootloader, because the 2nd-bootloader doesn't accept fastboot commands.
To install the Android SDK and be able to use ADB + fastboot, go to this link: Android SDK. After you hit download, just be patient, and you will need a video reference to help set up the package properly, so click here: Video on Installation of Android SDK. To check if it installed properly, once you're done with the video, open up a command prompt (for Windows, hold the Windows key + R, and type cmd, then hit Enter), and type either "adb" or "fastboot" and hit Enter. For both cases, you should get a block of text that tells you what each command does.
To check if your device can work with ADB, enable ADB on the device (may be called USB debugging), and connect it to the computer. If there are any drivers installing, let them finish. Then, on the command prompt, type "adb devices" and hit Enter. If your ADB drivers work, you should see a line of letters and characters. Same thing with fastboot. Always do this check before you start messing around to make sure your devices are receiving the commands.
===== 6. I bricked my Kindle! Help! =====
Calm down. You know you have a brick when the Kindle dies completely. It doesn't respond in anyway, even plugging in the USB won't do anything. It is also considered a brick if you have a red screen, which is commonly associated with trying to mod the system of Amazon OS 7.3.0 or higher without first flashing the Amazon OS 7.2.3 bootloader. Your only hope is to purchase a factory cable (not the same one that came with your device in the box) and go from there. To restore the device to factory settings and unbrick, go to this thread: KFHD System Restore Tool and follow the directions.
Alternatively, if you are reading this after you made a mistake and ended up with either scenarios above, and have made backups from Step 1 below, use the instructions from #7 to boot into fastboot using a regular USB cable, and restore with instructions found in Step 1. If you do have a factory cable, simply open up command prompt, plug in the cable to the device and the computer, and proceed with the second line of code in the last set of codes.
===== 7. How do I get into fastboot mode without a factory cable? =====
This relies on you having a working device (as long as it can boot at all, you're good). If you wish to enter fastboot mode to flash system images like new versions of TWRP or restore Amazon OS 7.2.3 if you've got freezing or bootloops, then you need a regular USB cable that came with the device, or any other mini-USB cable that fits the device and the computer. Again, you need to have Android SDK installed before you can use fastboot. Turn the device off, and leave it unplugged. Go to your computer, open command prompt, and type this:
Code:
fastboot -i 0x1949 getvar product
Hit enter, and it should return with <waiting for device>. If it doesn't, your fastboot drivers aren't working. Install Android SDK and go from there. If it does, connect your turned-off Kindle to the computer. Two things will happen: one, the command prompt will show "Tate-xxx-xxx" (something there), and two, your Kindle should reboot into fastboot mode. To exit fastboot mode, after you finished flashing what you needed, type this:
Code:
fastboot -i 0x1949 reboot
If you can fully boot into the ROM, you can use ADB to boot into fastboot, but you must still use the same command above to reboot out of fastboot mode. Then make sure ADB is turned on through settings, connect the device to the computer using a regular USB cable, and type this:
Code:
adb shell su -c "reboot bootloader"
And that's all for the basics! Let's move on to the actual process.
Step 1: Rooting​
+Note: Some users reported not being able to root on 7.4.1, so go into Settings and check your software version. 7.2.3 is what you want to see. I provided two root methods in case one doesn't work. If both fails, please try the second one again, using a different mode.
Before you can do anything else, you need to root the device first. Rooting is the process of acquiring superuser (administrator) access on a Linux system, allowing you to modify just about anything with regards to software. It is generally very safe to do, provided you follow the correct guides and you use the correct tools, and if there are no tools, the knowledge to manually root the device. On many other Android devices, rooting also installs a custom recovery, but the Kindle Fire HD 7" is different. You must root first before you do any modifications.
Go to this thread: QEMU Root by sparkym3, and download the necessary attachments. Use any decompressing software to unzip the files, and install the Kindle Fire HD 7" ADB drivers (this may fail, no need to worry). Then jump to your device, go to Settings and turn on ADB, then plug it into your computer. At this time, your computer should report that the ADB Composite Interface has been installed. What this means is that your ADB drivers work. Go ahead and use that thread's instructions to root the device.
Alternatively, you can use this if the first method failed: Root_with_Restore_by_Bin4ry, same idea. Make sure your ADB drivers are working, and that ADB is turned on in Settings. Open the RunMe.bat file, choose option 1. Now it will ask for your Amazon account password to restore, go ahead and type in your password and proceed. After the device reboots, it will be sluggish, now run the first method again, and you'll be back to normal with root.
To check if you're rooted, when the device is on, go to the Amazon Appstore, install "ES File Manager" or any other root application, you want to see the window asking for superuser permissions. Once it installs, open it, go to settings, and turn on root browsing. If it asks for superuser permissions, you have root access, and you can move on to the next step. If the root programs say you have root, but you don't see the window asking for the permission, remember to go to the app listing, and tap on superuser to initialize the daemon, then try to check for root again.
Recap:
1. Download the root tools from the two threads
2. Proceed to root by using the provided tools
3. Check if you successfully have root access using any root application
Step 2: Grabbing Files and Backing Up​
Once you're rooted successfully, you need to grab the files we'll need for the installation. Go to Hashcode's thread: Kindle Fire 2nd-bootloader + TWRP for the Kindle Fire HD 7. Download ONLY two files: the TWRP recovery image, and the freedom-boot image. That's all, and transfer both of those to the root of the sdcard, now you can move on to Step 3: Installation if you wish to skip backing up.
I will go through the steps to backup. Remember that it is not mandatory that you do this; should you follow the guide very closely, you do not require backing up whatsoever. This just serves as an extraneous step for those who feel comfortable working with ADB and would like to participate in modding the device, in which case these files would come in handy in case the device is bricked. Again, it is NOT mandatory.
Connect the device to the computer through a normal USB cable, turn on ADB through settings. Open up the command prompt (CMD) on your computer: hold down the Windows key, and press R. This will open up Run, type "cmd" and hit Enter. Now, enter the following lines of code one-by-one, wait for a line to finish before going to the next one.
Code:
adb shell su -c "dd if=/dev/block/mmcblk0boot0 of=/sdcard/boot0block.img"
adb shell su -c "dd if=/dev/block/platform/omap/omap_hsmmc.1/by-name/boot of=/sdcard/stock-boot.img"
adb shell su -c "dd if=/dev/block/platform/omap/omap_hsmmc.1/by-name/recovery of=/sdcard/stock-recovery.img"
adb shell su -c "dd if=/dev/block/platform/omap/omap_hsmmc.1/by-name/system of=/sdcard/stock-system.img"
mkdir C:\KFHD7Backup
adb pull /sdcard/stock-boot.img/ [C:\KFHD7Backup]
adb pull /sdcard/stock-recovery.img/ [C:\KFHD7Backup]
adb pull /sdcard/stock-system.img/ [C:\KFHD7Backup]
Now open up the Computer folder, and in the C: drive you will find a folder called "KFHD7Backup" with all of those files that you just pulled in there. Once you're at this stage, you have finished backing up. Take that folder and put it somewhere safe, on a USB drive, or an external flash drive.
If you need to flash these to restore the device in case you have bricked it, boot into fastboot mode (if you have the fastboot cable, plug it into the device and the computer, if you don't have a fastboot cable, look at #7 above). Place the folder and the files back to the C: drive before attempting to restore (if you know how to use the cd command, feel free to change the location of the files). Once you're in fastboot, start with the first line of code to command CMD to locate the backups folder, then proceed with the second, one-at-a-time:
Code:
cd C:/KFHD7Backup
fastboot -i 0x1949 flash boot stock-boot.img
fastboot -i 0x1949 flash recovery stock-recovery.img
fastboot -i 0x1949 flash system stock-system.img
fastboot -i 0x1949 reboot
+Note: Be patient, as some of the codes take a while due to the amount of data being transferred between the device and your computer. If nothing happens after you hit Enter on a line of code or it just hangs at nothing, close the command prompt, open it up again, and retry. It might seem scary, but if there are no codes being executed in the command prompt (you'll see data transfers with kB/s and such if there's communication), it's safe to unplug the cable or close the command prompt. Feel free to reboot your computer, then plug the cable in and try again.
Also, know that these files, when flashed through fastboot, will revert your device back to the state of when these backups were made, so once you have TWRP, these files are no longer important. The backups you make in TWRP will be just as useful, and can save you both time and patience. If, however, you want to revert to a completely stock Amazon OS software for warranty purposes, or to redo this process for any reason, they will come into play because these backups retain your apps and your settings. Otherwise, use the KFHD System Restore Tool to go completely stock.
After you have backed-up (optional), and you have the two needed files on the sdcard (TWRP image and freedom-boot image, ignore the Amazon OS and the stack override files), you can move on to step three.
Recap:
1. Go to Hashcode's 2nd-bootloader thread
2. Download both the required files and move them to sdcard
3. Use ADB to make backups (optional)
4. Use fastboot to restore the images you backed up if there are issues
Step 3: Installation​
You might have noticed that Hashcode made a pretty extensive thread to help you flash the bootloader, but another coder has since developed an automatic app to do all the work for you: FireFlash. Go ahead and download the .apk file. Move that file to the sdcard, and on the device, install it using "ES File Manager" (tap on that file) or "Easy Installer" (after it finishes scanning, select it and install), both found on the Amazon Appstore. You will then find it in the applications listing, go ahead and open it.
The first thing you notice is that there are spots to plug in files for different partitions. This is where those files from Hashcode come into play. Plug the freedom-boot.img into the boot partition space, plug the TWRP recovery.img into the recovery partition, and make sure to hit "apply stack". If you are NOT on the 7.2.3 bootloader (you'll see red letters warning you), then hit the check box next to that to flash the 7.2.3 bootloader, otherwise you'll see a red screen after you reboot. If you don't see that warning, you're fine, move on.
Check that "disable recovery auto update" box, leave everything else alone, unplug the cable, and hit flash (the first option). You will see a progress window, and just hit OK. Then, turn off the device. Now, when you turn it on, this is the way to enter recovery every time: the moment you turn it on, you'll see the yellow Kindle title. Immediately hold down the Volume Up button (leftmost from the power button) before it turns blue, and once it does, count to three in your head and let go and you'll see the TWRP splash logo. Once you're in TWRP, you're done. Just hit reboot, and everything's finished. Now you can browse the 7" Development forum for custom ROMs.
If you want to save space, you can now go ahead and delete all the files we just used; you no longer have a need for any of them. Keep FireFlash, though, because in the future you might want to update TWRP, then leave everything blank, plug the update image into the recovery partition and hit flash. Only use Hashcode's TWRP builds as of now, because he specifically altered those builds to work on the Kindle Fire HD 7" and 8.9" so the official ones on the TWRP site won't work. If you flash those (especially the "blaze" codename), you will brick the device, so don't do it!
Recap:
1. Download FireFlash and install on device using file manager or installer
2. Plug in the required files in the correct areas, and check the necessary checkboxes
3. Flash, and boot into TWRP to confirm successful installation of both 2nd-Bootloader and TWRP recovery
Step 4: Flashing Custom ROMs​
This is what you've been waiting for, the ability to load custom ROMs. You have a few choices at this point in time. This list contains (somewhat, if not) stable releases only:
1. Kinology by psych0phobia & JulianPaoloThiry (Amazon OS base + ICS modifications)
2. CyanogenMod 11 by Hashcode (AOSP, Android 4.4 KitKat)
3. ParanoidAndroid Port by jb2kred (AOKP, Android 4.2.2 Jelly Bean)
4. PAC-man by goldflame09 (AOKP, Hybrid of CM and PA, Android 4.3 Jelly Bean)
Once you have the .zip files for the ROMs with GApps (Google apps, like Play Store), place them on the sdcard, and turn off the device. Turn it on, hold Volume-Up before the logo turns blue, and enter TWRP. Once there, immediately do two things: make a backup, and after that, wipes: system, factory reset, cache, and Dalvik cache. After these two things are done, go ahead and flash the .zip file, and wait for it to finish. After it finishes, go ahead and again, wipe cache and Dalvik cache, then reboot. After you rebooted, wait 5 minutes, then reboot again, and you're all done!
Now, in case your custom ROM doesn't automatically include GApps, and you would know if you boot up and you don't see Play Store or Google Maps in the app drawer, follow this. Go to this link. You will notice a table, and on the left side, you see the CM version that corresponds to the Android version number. All the custom ROMs should use the row that corresponds to the Android version. For example, CM10.1 runs 4.2.2, CM10.2 runs 4.3, so click on the one that corresponds. If your ROM runs 4.2.2, use the 4.2.2 row, etc. After you finish downloading that .zip file, move it to the sdcard, and boot into TWRP. From there, if you want to be fancy, wipe cache and Dalvik cache before flashing, but you don't have to unless there are problems after you restart. If there are problems, like freezing on boot, or crashing, then boot back into TWRP and wipe the two cache partitions.
Generally, you only need to flash the file and you're done, but you can never be too safe. This also applies to ROMs: if you're moving from ROM to ROM, say Kinology to CM10.1, you MUST wipe EVERYTHING except the sdcard itself, and this includes the "Factory Reset" option. However, if you're moving from one update of a ROM to another, say a nightly of CM10.1 to a newer nightly of CM10.1, you can just simply flash the update over the old one, no wiping needed (this is called dirty-flashing). However, again, if you notice problems afterward, simply boot back in TWRP and wipe the two cache partitions. Remember to always make backups before you make changes to an otherwise stable build. If there are issues that you can't seem to resolve, you can always restore back to the previous build.
Recap:
1. Download .zip for ROM + GApps and move to sdcard
2. Boot into TWRP, make backups, and wipe the necessary partitions
3. Flash ROM, and wipe cache + Dalvik cache, then reboot
4. Wait for 5 minutes after successful reboot, then reboot again
5. If there's no GApps for your ROM, use the link to download the proper version.
6. Move the file to sdcard, then boot into TWRP and flash.
7. Reboot, and if there are problems, reboot back into TWRP and wipe cache partitions.
Troubleshooting​
1. Red screen upon reboot: You didn't check the checkbox in FireFlash to flash the Amazon OS 7.2.3 bootloader, causing the 7.3.x bootloader to crash, hence the red screen.
Solution: Plug it factory cable, then follow #6. If you made backups using ADB in Step 2, then flash those image files using the commands provided in Step 2.
2. Bootloop after reboot: Commonly associated with not following instructions in FireFlash like ignoring the stack override or just forgetting to check the box, or being on Amazon OS 7.3.x+.
Solution: Plug it factory cable, then follow #6. If you made backups using ADB in Step 2, then flash those image files using the commands provided in Step 2.
3. Device fails to boot at all: You flashed the wrong version of an image for another device to your device. This is common with users who use Kindle Fire Utility or FireFireFire which were made for the 1st & 2nd gen devices on a 3rd gen device (KFHD 7" & 8.9").
Solution: Plug it factory cable, then follow #6.
4. Fastboot doesn't detect device: All the commands hang at "waiting for device" in the terminal, even if ADB worked before.
Solution: Make sure Android SDK is installed by going into command prompt and type "adb" then hit Enter. You should see a block of text instructing you to use ADB commands. Find a Windows computer, because ADB & fastboot works best on a Linux system, therefore Macs and OS X will not yield proper results.
Go to the QEMU root thread, and pick up the drivers. Then hold Windows key + R, type "devmgmt.msc" and hit Enter. In Device Manager, if Kindle shows up as "Tate-PVT-08" then right click on that item, Update Driver Software, choose Browse, and select the option to pick from a list. Now navigate to the Kindle drivers you downloaded, and install. Now your fastboot should work.
5. Stuck at boot logo: Device boots after flashing with FireFlash and hangs at the splash screen.
Solution: Plug it factory cable, then follow #6.
6. Wiped /sdcard, can't reboot from recovery: You thought you had the ROM file on the sdcard, but you didn't, and wiped everything, so without a ROM image, you can't boot into system.
Solution: Put the ROM file where your ADB binary is (usually inside platform-tools folder in Android SDK directory) and rename it rom.zip. On the device, boot into TWRP, select Advanced, then ADB Sideload. Connect device to PC. From here, run "adb" and hit Enter to check for your binary version, if it's anything lower than 1.0.3.0, you need to update the binaries by re-installing the latest Android SDK. Once the device is in sideloading mode and is connected to the PC, type "adb sideload rom.zip" and hit Enter. Now you'll find the ROM on the sdcard, flash, and you're done.
Credits: Hashcode, fattire, and verygreen for the work on the bootloader, stanga72 for the app FireFlash, sparkym3 & Bin4ry for their rooting methods, onemeila for the restore tool, and myself for the creation of this guide.​
If your video can help guide and more for noobs,many thanks.
quan_1986 said:
If your video can help guide and more for noobs,many thanks.
Click to expand...
Click to collapse
Unfortunately, I don't have a spare KFHD7 to do a video on. I can't start over on mine because I have too many things on there and starting over would mean losing absolutely everything and I can't afford that.
I did try to be as clear as possible in the instructions above, so point out any mistakes or anything confusing you can find. The goal is to help the people out.
WOW!
seokhun said:
Disclaimer: By following this guide, you understand and accepts that I, or any other developers mentioned in this guide, will NOT be held responsible in the event that your device stops functioning or dies. While I try my best to make everything as clear and concise as it can be, accidents will happen should you not follow everything like a hawk.
Installing Kindle Fire HD 7" 2nd-Bootloader + TWRP Complete Tutorial​
I'm going to lead you through installing Hashcode's 2nd-Bootloader and TWRP in order to start flashing custom ROMs and make backups. First, let's go over the basics and why I'm doing this in the first place.
===== 1. Why do we need a 2nd bootloader? =====
The stock Amazon bootloader doesn't play nice with Android even though it has Android at its core. We can still use fastboot commands with it, but other than that, it's quite locked-down. In other words, normal exploits used to unlock the bootloader on other Android devices, for example, like the Nexus series by Google or the handsets by HTC don't apply here. In order to use the same features, like a custom ROM, custom kernel, custom recovery, we must bypass Amazon's software by installing a 2nd bootloader.
===== 2. Why are you posting a tutorial? =====
I'm doing this because the lack of a guide means that people like myself, who are not proficient developers, keep running into issues and some ended up bricking their devices. This means that they end up with a heavy paperweight, with no chance of fixing, other than hoping that they're lucky with a fastboot cable (not the one that came with the device) and find their way back to the beginning. I'm sick of seeing so many questions about the exact same issues so I thought, why not just make a guide everyone can follow and thus make the world a better place.
===== 3. Do I need any special equipment/knowledge? =====
You don't need any special equipment, provided that you follow this guide word-for-word and be careful. I recommend a factory cable, just in case, which can be found in various online dealers, like eBay. This is just in case you make a mistake and you brick the device. I successfully installed the 2nd-Bootloader + TWRP and flashed CM10.1 without a factory cable, within minutes. The key is make sure you don't miss anything, and if you're not sure, don't make any random guesses. As far as knowledge, yes, and no. Know what you're dealing with. Anything underneath the ROM has the chance to brick the device, so know what you're getting into.
===== 4. Can't I just use FireFireFire or another automatic tool to install the bootloader + TWRP? =====
Definitely not. This is the exact reason why there are so many threads in the Q&A section about bricked devices in the first place. Never use a tool that wasn't made for the version of your tablet. The Kindle Fire (1st gen), the Kindle Fire 2 (2nd gen), and the Kindle Fire HD 7" & 8.9" (3rd gen) are not the same devices, at all. Due to the way the bootloader behaves, flashing the files that are only compatible for the Kindle Fire 2 on a Kindle Fire HD 7" will definitely brick it. This is because the bootloader is so-named for a program that checks the booting process before the device actually boots, and if there are any bad sectors that don't match, the device won't boot.
How do you avoid this? By following guides like mine, and first knowing exactly what model you have. Yes, the Kindle Fire 2 and the Kindle Fire HD look similar, and Amazon seriously have problems with their naming method, but a bit of research tells you that the Kindle Fire HD actually contains an HD resolution screen, 1280x800 for the 7" and 1920x1200 for the 8.9". Also, ONLY the Kindle Fire HD 7" and 8.9" models have a front-facing camera while the other models don't have one at all. If you want to be sophisticated about it, you can use working fastboot to identify the tablet.
In CMD, type: fastboot -i 0x1949 getvar product. Hitting enter will return with <waiting for device>. If you connect your powered-off Kindle Fire HD 7" or 8.9" at this point, it will reboot into fastboot mode, and on CMD, it will return with "tate-xxx-xxx" for the 7" and "jem-xxx-xxx" for the 8.9". I cannot stress this enough, please know your stuff before you end up crying about how you made a simple mistake that cost you $200, or however many in other currencies, but I do know that universally, it's quite a lot of money.
===== 5. I bricked my Kindle! Help! =====
Calm down. You know you have a brick when the Kindle dies completely. It doesn't respond in anyway, even plugging in the USB won't do anything. Your only hope is to purchase a factory cable (not the same one that came with your device in the box) and go from there. To restore the device to factory settings and unbrick, there are two methods:
1. Go to this thread: KFHD System Restore Tool and follow the directions.
2. Download this file: Amazon OS 7.2.3. Once it finishes, place that file in the same folder as your fastboot.exe (this is found in the Android SDK folder, so if you haven't installed the Android SDK, do so) which should be the platform-tools folder. Rename the file to amazon723.bin for easier flashing (or rename it however you want, but use that name later on).
Now plug the device into the computer using the factory cable, and the device should reboot into fastboot mode (you'll see "fastboot" in orange on the device). From there, type this command and hit enter:
fastboot -i 0x1949 flash boot amazon723.bin
Now the OS will be flashed, and after it finishes, type:
fastboot -i 0x1949 reboot
After the reboot completes, you'll be back at the very start.
===== 6. How do I get into fastboot mode without a factory cable? =====
This relies on you having a working device (as long as it can boot at all, you're good). If you wish to enter fastboot mode to flash system images like new versions of TWRP or restore Amazon OS 7.2.3 if you've got freezing or bootloops, then you need a regular USB cable that came with the device, or any other mini-USB cable that fits the device and the computer. Turn the device off, and leave it unplugged. Go to your computer, open command prompt, and type this:
fastboot -i 0x1949 getvar product
Hit enter, and it should return with <waiting for device>. If it doesn't, your fastboot drivers aren't working. Install Android SDK and go from there. If it does, connect your turned-off Kindle to the computer. Two things will happen: one, the command prompt will show "Tate-xxx-xxx" (something there), and two, your Kindle should reboot into fastboot mode. To exit fastboot mode, after you finished flashing what you needed, type this:
fastboot -i 0x1949 reboot
And that's all for the basics! Let's move on to the actual process.
Step 1: Rooting​
+Note: Some users reported not being able to root on 7.3.1, so go into Settings and check your software version. 7.2.3 is what you want to see. I provided two root methods in case one doesn't work.
Before you can do anything else, you need to root the device first. Rooting is the process of acquiring superuser (administrator) access on a Linux system, allowing you to modify just about anything with regards to software. It is generally very safe to do, provided you follow the correct guides and you use the correct tools, and if there are no tools, the knowledge to manually root the device. On many other Android devices, rooting also installs a custom recovery, but the Kindle Fire HD 7" is different. You must root first before you do any modifications.
Go to this thread: QEMU Root by sparkym3, and download the necessary attachments. Use any decompressing software to unzip the files, and install the Kindle Fire HD 7" ADB drivers (this may fail, no need to worry). Then jump to your device, go to Settings and turn on ADB, then plug it into your computer. At this time, your computer should report that the ADB Composite Interface has been installed. What this means is that your ADB drivers work. Go ahead and use that thread's instructions to root the device. Alternatively, you can use this if the first method failed: Root_with_Restore_by_Bin4ry, same idea.
To check if you're rooted, when the device is on, go to the Amazon Appstore, install "ES File Manager". Once it installs, open it, go to settings, and turn on root browsing. If it asks for superuser permissions, you have root access, and you can move on to the next step.
Recap:
1. Download the root tools from the two threads
2. Proceed to root by using the provided tools
3. Check if you successfully have root access using any root application
Step 2: Grabbing Files and Backing Up​
Once you're rooted successfully, you need to grab the files we'll need for the installation. Go to Hashcode's thread: Kindle Fire 2nd-bootloader + TWRP 2.4.4.0 for the Kindle Fire HD 7. If you have ADB installed (you should), then use the command prompt (CMD) to make backups just in case things go wrong. It's not required, but if you want to be safe, follow Hashcode's step 1 in that thread. Open CMD, connect the Kindle with ADB turned on, copy-paste the first line, hit enter, wait, then do the same thing for the remaining 4 lines of code. Otherwise, download all the files from step 2, except the stack.
Now, after you have backed-up (optional), and you have downloaded all the needed files (freedom-boot.img and TWRP recovery.img, you don't need the stack override file because that's provided in FireFlash, read Step 3), go ahead and transfer all of those to the root of the sdcard. Once that's done, you can move on to step three.
Recap:
1. Go to Hashcode's 2nd-bootloader thread
2. Use ADB to make backups (optional)
3. Download the required files and move them to sdcard
Step 3: Installation​
You might have noticed that Hashcode made a pretty extensive thread to help you flash the bootloader, but another coder has since developed an automatic app to do all the work for you: FireFlash v1.1. Go ahead and download the .apk file. Move that file to the sdcard, and on the device, install it using "ES File Manager" (tap on that file) or "Easy Installer" (after it finishes scanning, select it and install), both found on the Amazon Appstore. You will then find it in the applications listing, go ahead and open it.
The first thing you notice is that there are spots to plug in files for different partitions. This is where those files from Hashcode come into play. Plug the freedom-boot.img into the boot partition space, plug the TWRP recovery.img into the recovery partition, and make sure to hit "apply stack". If you are NOT on the 7.2.3 bootloader (you'll see red letters warning you), then hit the check box next to that to flash the 7.2.3 bootloader, otherwise you'll see a red screen after you reboot. If you don't see that warning, you're fine, move on.
Leave that "disable recovery auto update" function checked, leave everything else alone and hit flash. You will see a progress window, and just hit OK. Then, you will either be automatically rebooted into TWRP, in which case skip to step 4, or you will do it manually: go ahead and turn off the device, you no longer need the computer. When you turn it on, here's how to do it: push the power button, and the instant you see the orange "Kindle" logo, hold down the volume-up button (leftmost from the power button) while the orange turns into blue, then you can let go. This will enter you into TWRP, and it will take a minute, so be patient.
Once you're in TWRP, you're done. Just hit reboot, and everything's finished. Now you can browse the 7" Development forum for custom ROMs.
Recap:
1. Download FireFlash v1.1 and install on device using file manager or installer
2. Plug in the required files in the correct areas, and check the necessary checkboxes
3. Flash, and boot into TWRP to confirm successful installation of both 2nd-Bootloader and TWRP recovery
Step 4: Flashing Custom ROMs​
This is what you've been waiting for, the ability to load custom ROMs. You have a few choices at this point in time:
1. Kinology by psychophobia (Amazon OS 7.3.1 base + Android Ice Cream Sandwich modifications)
2. CyanogenMod 10.1 by Hashcode (AOSP with custom 1.5GHz kernel, Android Jelly Bean 4.2.2) *read below
3. ParanoidAndroid Port by -a- (CM10.1 base, AOKP, Android Jelly Bean 4.2.2)
4. CyanogenMod 10.1 Tablet UI by Jester6 (same properties as Hashcode's CM10.1 build, Tablet UI = just looks nicer with dual-pane)
5. ParanoidAndroid Port by jb2kred (same properties as -a-'s ParanoidAndroid build)
Once you have the .zip files for the ROMs with GApps (Google apps, like Play Store, found on goo.im, use the top row), place them on the sdcard, and turn off the device. Turn it on, hold Volume-Up before the logo turns blue, and enter TWRP. Once there, immediately do two things: make a backup, and after that, wipes: system, factory reset, cache, and Dalvik cache. After these two things are done, go ahead and flash the .zip file, and wait for it to finish. After it finishes, go ahead and again, wipe cache and Dalvik cache, then reboot. After you rebooted, wait 5 minutes, then reboot again, and you're all done!
+If you want to use CM10.1, be sure to also download the alternate 1.2GHz kernel, as myself and some others have experienced some freezing on the 1.5GHz kernel. Flashing the 05/08 alpha will automatically install the 1.5GHz kernel, and if it freezes on the boot animation, simply turn it off, turn it on, boot into TWRP, and flash the 1.2GHz kernel and reboot. Alternatively, this is where the backup you made comes in handy, in case you forgot to download the 1.2GHz.
Recap:
1. Download .zip for ROM + GApps and move to sdcard
2. Boot into TWRP, make backups, and wipe the necessary partitions
3. Flash ROM, and wipe cache + Dalvik cache, then reboot
4. Wait for 5 minutes after successful reboot, then reboot again
Credits: Hashcode, fattire, and verygreen for the work on the bootloader, stanga72 for the app FireFlash v1.1, sparkym3 and Bin4ry for their rooting methods, and myself for the creation of this guide.​
Click to expand...
Click to collapse
You have made my day... Thanks A LOT!!!!:victory:
vlavlix said:
You have made my day... Thanks A LOT!!!!:victory:
Click to expand...
Click to collapse
I made the guide with people like you in mind. Thank you for trusting it
This post needs to be pinned!
Awesome work, Keep it up! :good:
One last question.
seokhun said:
Disclaimer: By following this guide, you understand and accepts that I, or any other developers mentioned in this guide, will NOT be held responsible in the event that your device stops functioning or dies. While I try my best to make everything as clear and concise as it can be, accidents will happen should you not follow everything like a hawk.
Installing Kindle Fire HD 7" 2nd-Bootloader + TWRP Complete Tutorial​
I'm going to lead you through installing Hashcode's 2nd-Bootloader and TWRP in order to start flashing custom ROMs and make backups. First, let's go over the basics and why I'm doing this in the first place.
===== 1. Why do we need a 2nd bootloader? =====
The stock Amazon bootloader doesn't play nice with Android even though it has Android at its core. We can still use fastboot commands with it, but other than that, it's quite locked-down. In other words, normal exploits used to unlock the bootloader on other Android devices, for example, like the Nexus series by Google or the handsets by HTC don't apply here. In order to use the same features, like a custom ROM, custom kernel, custom recovery, we must bypass Amazon's software by installing a 2nd bootloader.
===== 2. Why are you posting a tutorial? =====
I'm doing this because the lack of a guide means that people like myself, who are not proficient developers, keep running into issues and some ended up bricking their devices. This means that they end up with a heavy paperweight, with no chance of fixing, other than hoping that they're lucky with a fastboot cable (not the one that came with the device) and find their way back to the beginning. I'm sick of seeing so many questions about the exact same issues so I thought, why not just make a guide everyone can follow and thus make the world a better place.
===== 3. Do I need any special equipment/knowledge? =====
You don't need any special equipment, provided that you follow this guide word-for-word and be careful. I recommend a factory cable, just in case, which can be found in various online dealers, like eBay. This is just in case you make a mistake and you brick the device. I successfully installed the 2nd-Bootloader + TWRP and flashed CM10.1 without a factory cable, within minutes. The key is make sure you don't miss anything, and if you're not sure, don't make any random guesses. As far as knowledge, yes, and no. Know what you're dealing with. Anything underneath the ROM has the chance to brick the device, so know what you're getting into.
===== 4. Can't I just use FireFireFire or another automatic tool to install the bootloader + TWRP? =====
Definitely not. This is the exact reason why there are so many threads in the Q&A section about bricked devices in the first place. Never use a tool that wasn't made for the version of your tablet. The Kindle Fire (1st gen), the Kindle Fire 2 (2nd gen), and the Kindle Fire HD 7" & 8.9" (3rd gen) are not the same devices, at all. Due to the way the bootloader behaves, flashing the files that are only compatible for the Kindle Fire 2 on a Kindle Fire HD 7" will definitely brick it. This is because the bootloader is so-named for a program that checks the booting process before the device actually boots, and if there are any bad sectors that don't match, the device won't boot.
How do you avoid this? By following guides like mine, and first knowing exactly what model you have. Yes, the Kindle Fire 2 and the Kindle Fire HD look similar, and Amazon seriously have problems with their naming method, but a bit of research tells you that the Kindle Fire HD actually contains an HD resolution screen, 1280x800 for the 7" and 1920x1200 for the 8.9". Also, ONLY the Kindle Fire HD 7" and 8.9" models have a front-facing camera while the other models don't have one at all. If you want to be sophisticated about it, you can use working fastboot to identify the tablet.
In CMD, type: fastboot -i 0x1949 getvar product. Hitting enter will return with <waiting for device>. If you connect your powered-off Kindle Fire HD 7" or 8.9" at this point, it will reboot into fastboot mode, and on CMD, it will return with "tate-xxx-xxx" for the 7" and "jem-xxx-xxx" for the 8.9". I cannot stress this enough, please know your stuff before you end up crying about how you made a simple mistake that cost you $200, or however many in other currencies, but I do know that universally, it's quite a lot of money.
===== 5. I bricked my Kindle! Help! =====
Calm down. You know you have a brick when the Kindle dies completely. It doesn't respond in anyway, even plugging in the USB won't do anything. Your only hope is to purchase a factory cable (not the same one that came with your device in the box) and go from there. To restore the device to factory settings and unbrick, there are two methods:
1. Go to this thread: KFHD System Restore Tool and follow the directions.
2. Download this file: Amazon OS 7.2.3. Once it finishes, place that file in the same folder as your fastboot.exe (this is found in the Android SDK folder, so if you haven't installed the Android SDK, do so) which should be the platform-tools folder. Rename the file to amazon723.bin for easier flashing (or rename it however you want, but use that name later on).
Now plug the device into the computer using the factory cable, and the device should reboot into fastboot mode (you'll see "fastboot" in orange on the device). From there, type this command and hit enter:
fastboot -i 0x1949 flash boot amazon723.bin
Now the OS will be flashed, and after it finishes, type:
fastboot -i 0x1949 reboot
After the reboot completes, you'll be back at the very start.
===== 6. How do I get into fastboot mode without a factory cable? =====
This relies on you having a working device (as long as it can boot at all, you're good). If you wish to enter fastboot mode to flash system images like new versions of TWRP or restore Amazon OS 7.2.3 if you've got freezing or bootloops, then you need a regular USB cable that came with the device, or any other mini-USB cable that fits the device and the computer. Turn the device off, and leave it unplugged. Go to your computer, open command prompt, and type this:
fastboot -i 0x1949 getvar product
Hit enter, and it should return with <waiting for device>. If it doesn't, your fastboot drivers aren't working. Install Android SDK and go from there. If it does, connect your turned-off Kindle to the computer. Two things will happen: one, the command prompt will show "Tate-xxx-xxx" (something there), and two, your Kindle should reboot into fastboot mode. To exit fastboot mode, after you finished flashing what you needed, type this:
fastboot -i 0x1949 reboot
And that's all for the basics! Let's move on to the actual process.
Step 1: Rooting​
+Note: Some users reported not being able to root on 7.3.1, so go into Settings and check your software version. 7.2.3 is what you want to see. I provided two root methods in case one doesn't work.
Before you can do anything else, you need to root the device first. Rooting is the process of acquiring superuser (administrator) access on a Linux system, allowing you to modify just about anything with regards to software. It is generally very safe to do, provided you follow the correct guides and you use the correct tools, and if there are no tools, the knowledge to manually root the device. On many other Android devices, rooting also installs a custom recovery, but the Kindle Fire HD 7" is different. You must root first before you do any modifications.
Go to this thread: QEMU Root by sparkym3, and download the necessary attachments. Use any decompressing software to unzip the files, and install the Kindle Fire HD 7" ADB drivers (this may fail, no need to worry). Then jump to your device, go to Settings and turn on ADB, then plug it into your computer. At this time, your computer should report that the ADB Composite Interface has been installed. What this means is that your ADB drivers work. Go ahead and use that thread's instructions to root the device. Alternatively, you can use this if the first method failed: Root_with_Restore_by_Bin4ry, same idea.
To check if you're rooted, when the device is on, go to the Amazon Appstore, install "ES File Manager". Once it installs, open it, go to settings, and turn on root browsing. If it asks for superuser permissions, you have root access, and you can move on to the next step.
Recap:
1. Download the root tools from the two threads
2. Proceed to root by using the provided tools
3. Check if you successfully have root access using any root application
Step 2: Grabbing Files and Backing Up​
Once you're rooted successfully, you need to grab the files we'll need for the installation. Go to Hashcode's thread: Kindle Fire 2nd-bootloader + TWRP 2.4.4.0 for the Kindle Fire HD 7. If you have ADB installed (you should), then use the command prompt (CMD) to make backups just in case things go wrong. It's not required, but if you want to be safe, follow Hashcode's step 1 in that thread. Open CMD, connect the Kindle with ADB turned on, copy-paste the first line, hit enter, wait, then do the same thing for the remaining 4 lines of code. Otherwise, download all the files from step 2, except the stack.
Now, after you have backed-up (optional), and you have downloaded all the needed files (freedom-boot.img and TWRP recovery.img, you don't need the stack override file because that's provided in FireFlash, read Step 3), go ahead and transfer all of those to the root of the sdcard. Once that's done, you can move on to step three.
Recap:
1. Go to Hashcode's 2nd-bootloader thread
2. Use ADB to make backups (optional)
3. Download the required files and move them to sdcard
Step 3: Installation​
You might have noticed that Hashcode made a pretty extensive thread to help you flash the bootloader, but another coder has since developed an automatic app to do all the work for you: FireFlash v1.1. Go ahead and download the .apk file. Move that file to the sdcard, and on the device, install it using "ES File Manager" (tap on that file) or "Easy Installer" (after it finishes scanning, select it and install), both found on the Amazon Appstore. You will then find it in the applications listing, go ahead and open it.
The first thing you notice is that there are spots to plug in files for different partitions. This is where those files from Hashcode come into play. Plug the freedom-boot.img into the boot partition space, plug the TWRP recovery.img into the recovery partition, and make sure to hit "apply stack". If you are NOT on the 7.2.3 bootloader (you'll see red letters warning you), then hit the check box next to that to flash the 7.2.3 bootloader, otherwise you'll see a red screen after you reboot. If you don't see that warning, you're fine, move on.
Leave that "disable recovery auto update" function checked, leave everything else alone and hit flash. You will see a progress window, and just hit OK. Then, you will either be automatically rebooted into TWRP, in which case skip to step 4, or you will do it manually: go ahead and turn off the device, you no longer need the computer. When you turn it on, here's how to do it: push the power button, and the instant you see the orange "Kindle" logo, hold down the volume-up button (leftmost from the power button) while the orange turns into blue, then you can let go. This will enter you into TWRP, and it will take a minute, so be patient.
Once you're in TWRP, you're done. Just hit reboot, and everything's finished. Now you can browse the 7" Development forum for custom ROMs.
Recap:
1. Download FireFlash v1.1 and install on device using file manager or installer
2. Plug in the required files in the correct areas, and check the necessary checkboxes
3. Flash, and boot into TWRP to confirm successful installation of both 2nd-Bootloader and TWRP recovery
Step 4: Flashing Custom ROMs​
This is what you've been waiting for, the ability to load custom ROMs. You have a few choices at this point in time:
1. Kinology by psychophobia (Amazon OS 7.3.1 base + Android Ice Cream Sandwich modifications)
2. CyanogenMod 10.1 by Hashcode (AOSP with custom 1.5GHz kernel, Android Jelly Bean 4.2.2) *read below
3. ParanoidAndroid Port by -a- (CM10.1 base, AOKP, Android Jelly Bean 4.2.2)
4. CyanogenMod 10.1 Tablet UI by Jester6 (same properties as Hashcode's CM10.1 build, Tablet UI = just looks nicer with dual-pane)
5. ParanoidAndroid Port by jb2kred (same properties as -a-'s ParanoidAndroid build)
Once you have the .zip files for the ROMs with GApps (Google apps, like Play Store, found on goo.im, use the top row), place them on the sdcard, and turn off the device. Turn it on, hold Volume-Up before the logo turns blue, and enter TWRP. Once there, immediately do two things: make a backup, and after that, wipes: system, factory reset, cache, and Dalvik cache. After these two things are done, go ahead and flash the .zip file, and wait for it to finish. After it finishes, go ahead and again, wipe cache and Dalvik cache, then reboot. After you rebooted, wait 5 minutes, then reboot again, and you're all done!
+If you want to use CM10.1, be sure to also download the alternate 1.2GHz kernel, as myself and some others have experienced some freezing on the 1.5GHz kernel. Flashing the 05/08 alpha will automatically install the 1.5GHz kernel, and if it freezes on the boot animation, simply turn it off, turn it on, boot into TWRP, and flash the 1.2GHz kernel and reboot. Alternatively, this is where the backup you made comes in handy, in case you forgot to download the 1.2GHz.
Recap:
1. Download .zip for ROM + GApps and move to sdcard
2. Boot into TWRP, make backups, and wipe the necessary partitions
3. Flash ROM, and wipe cache + Dalvik cache, then reboot
4. Wait for 5 minutes after successful reboot, then reboot again
Credits: Hashcode, fattire, and verygreen for the work on the bootloader, stanga72 for the app FireFlash v1.1, sparkym3 and Bin4ry for their rooting methods, and myself for the creation of this guide.​
Click to expand...
Click to collapse
Once I've flashed the cm10.1 zip and installed the 1.2GHz kernel, how do i install the GAPPS? because I didn't install them meanwhile I was in TWRP..
vlavlix said:
Once I've flashed the cm10.1 zip and installed the 1.2GHz kernel, how do i install the GAPPS? because I didn't install them meanwhile I was in TWRP..
Click to expand...
Click to collapse
Simply go to the goo.im page, and click on Gapps. Go back up to step 4, I've added an explanation.
Thanks for the guide, I have been away from this area of the community for awhile, and have gotten lost with what has happened. Spent hours, looking for what I had missed. Got everything working :good:
iMJets said:
Thanks for the guide, I have been away from this area of the community for awhile, and have gotten lost with what has happened. Spent hours, looking for what I had missed. Got everything working :good:
Click to expand...
Click to collapse
You sure? If you installed a custom ROM, change your signature, haha. I'm glad it worked out fine!
Can someone just make then video how to I'm tire of amazon I want cm 10 I'm my kindle thanks
Sent from my Nexus 7 using Tapatalk 2
Cheers mate, followed to a tee and now have my Kindle Fire HD 7" OC'ed to 1500MHz and jester's TabUI CM 10.1 ROM on. Sweetness....
esema1o said:
Can someone just make then video how to I'm tire of amazon I want cm 10 I'm my kindle thanks
Sent from my Nexus 7 using Tapatalk 2
Click to expand...
Click to collapse
I already went out of my way to create a super-extensive guide for you. If you need a video, go bother someone else to do it. My instructions are as clear and as simple as they could get.
Katalystik said:
Cheers mate, followed to a tee and now have my Kindle Fire HD 7" OC'ed to 1500MHz and jester's TabUI CM 10.1 ROM on. Sweetness....
Click to expand...
Click to collapse
I'm glad! Enjoy the custom ROMs!
esema1o said:
Can someone just make then video how to I'm tire of amazon I want cm 10 I'm my kindle thanks
Sent from my Nexus 7 using Tapatalk 2
Click to expand...
Click to collapse
You actually need to read the tutorial. Its word for word, there's no video needed. If you are scared to do this don't do it. You will just mess up your device, which is more of a pain to fix. As always make sure you have a fastboot cable.
iMJets said:
You actually need to read the tutorial. Its word for word, there's no video needed. If you are scared to do this don't do it. You will just mess up your device, which is more of a pain to fix. As always make sure you have a fastboot cable.
Click to expand...
Click to collapse
Yea I'm lil nerves well I'm not gone do it I all ready got me Google table nexus 7 so I'm just gone leave this table like this oh well thanks
Sent from my Nexus 7 using Tapatalk 2
maybe I'm being stupid but when I try this on my rooted kfhd7 and type fastboot -i 0x1949 getvar product I get <waiting for device> then connect my device and nothing happens. tried this when device powered off as well. Any ideas?
thanks
rhodri11 said:
maybe I'm being stupid but when I try this on my rooted kfhd7 and type fastboot -i 0x1949 getvar product I get <waiting for device> then connect my device and nothing happens. tried this when device powered off as well. Any ideas?
thanks
Click to expand...
Click to collapse
You don't have fastboot drivers. Did you install Android SDK and configure it properly? By that I mean installing the package, downloading the required components using the installer, and adding the path to system.
seokhun said:
You don't have fastboot drivers. Did you install Android SDK and configure it properly? By that I mean installing the package, downloading the required components using the installer, and adding the path to system.
Click to expand...
Click to collapse
Hmm strange one this. I have tried using fastboot on my windows and linux system with the KFHD off and the when connected they still don't go into fastboot. Been told I could probably get away with using root toolbox and rebooting into fastboot that way?
In the mean time I have just followed step 2, backup the images on the kindle, and now it says to use FireFlash v1.1. I am running 7.3.0. Is FireFlash v1.1 okay to use with my version or will I have to do it the manual way?
Thanks
rhodri11 said:
Hmm strange one this. I have tried using fastboot on my windows and linux system with the KFHD off and the when connected they still don't go into fastboot. Been told I could probably get away with using root toolbox and rebooting into fastboot that way?
In the mean time I have just followed step 2, backup the images on the kindle, and now it says to use FireFlash v1.1. I am running 7.3.0. Is FireFlash v1.1 okay to use with my version or will I have to do it the manual way?
Thanks
Click to expand...
Click to collapse
As I previously said, you don't have working fastboot drivers. Go back to the guide, in #5, and install Android SDK. Then the commands will work.
You can use FireFlash, but if you see the red letters warning you to flash the 7.2.3 bootloader once you open up the app, CHECK THAT BOX. The rest of the guide applies.
seokhun said:
As I previously said, you don't have working fastboot drivers. Go back to the guide, in #5, and install Android SDK. Then the commands will work.
You can use FireFlash, but if you see the red letters warning you to flash the 7.2.3 bootloader once you open up the app, CHECK THAT BOX. The rest of the guide applies.
Click to expand...
Click to collapse
I am able to communicate with the kindle through adb commands but fastboot still not working. Have installed AndroidSDK on my windows 7 machine, extracted it, run and and made sure the tools, platform tools, and usb drivers were installed, which they are. Fastboot does run.. it just hangs there "waiting for device"
Sorry but have I missed a crucial step?
edit:
Have also tried fastboot using Linux android bundle (again, adb devices shows the kindle, but nothing from fastboot) and then tried sudo add-apt-repository ppa:nilarimogard/webupd8, updated everything then apt-get install android-tools-adb android-tools-fastboot. Again, run adb devices and it shows up, but fastboot doesn't work.

Root for US Asus MeMO FHD 10 build v5.0.21

Well... Here it is.
I also have some script files i found and all the info you need to create your own pre-rooted rom using your current system files if you like that option better. I am currently working on a custom 5.0.1 rom.
READ THE WHOLE POST BEFORE YOU DO THIS!!!
I am only giving you a step by step process put into a easy to use reference guide to help you obtain "root" on your device. I am providing this "As-Is". If you read the whole guide and decide to try it on your own device just know that It may/will void any product warranty that you may have on the device if any. Any time you do anything to your tablet via fastboot or any other means you run the risk of "bricking" your device, or loosing all of your data. I am not responsible for any damage to your device, and i will not be responsible for any damage or loss that you may have as a result of this post, or any instructions that i give here. If you have any questions feel free to send me a message and I will try to help you out, if i can....
I looked and looked and looked through many forums without much luck, and I finally found out how to root the U.S. version ASUS MEMO FHD 10 that has been updated to 4.3 - V5.0.21 by using a pre rooted system rom. If you are not running that version you can go to” Settings - About Tablet - System Update” to update it to 5.0.21
First things first...
Fully charge your tablet, and make a backup of your system!!!
1. Make sure the tablet has a good charge. It will not charge while you are doing this, and who knows what will happen if it dies halfway through the process.
2. Turn USB debugging mode on in the "Developer Options" menu under settings on your tablet.
If you do not have the "Developer Options" menu just go down to "About Tablet" and click the "Build Number" button six or seven times and it will say "developer mode enabled", or something to that effect, and it will unlock the "Developer Options" menu for you.
3. Turn off your tablet.
4. Hold down the volume up button , and press the power button until your tablet turns on. It will boot into fastboot for you.
Connect your tablet via USB cable to your computer, and set it aside.
Now your tablet is ready to go and it is time to set up your computer.
1. To get your computer to recognize your tablet in usb debugging mode you need to install the intel drivers.
2. Download and install minimal adb fastboot.
3. Download the pre-rooted system rom, and then put that rom into the folder that you installed fastboot in on your computers hard drive.
4. I used minimal_adb_fastboot_v1.1.3_setup.exe to do this next part with no problems whatsoever. the only thing was I needed to type the .exe from the command prompt for it to work on my laptop. You might not need to.
Now you have your computer all set up, your tablet is all ready, and it is time to finally do some rooting.
1. On your computer, open up a command prompt, and navigate to the folder that you installed fastboot to.
2. Enter the following commands one line at a time into your fastboot window. (See transcript below)
fastboot.exe devices (Just to make sure your device is connected properly.)
fastboot.exe erase system (Optional I think? I didn't use it and mine works great)
fastboot.exe flash system us_me302c-v5.0.21-jb_4.3-system.gz (Replace with your image file name if you are using a different one)
If done right it should look something like this.
C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot.exe devices
1111111111111111 fastboot
C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot.exe flash system us_me302c-v5.0.21-jb_4.3-system.gz
sending 'system' (771129 KB)...
OKAY [ 95.862s]
writing 'system'...
OKAY [ 74.116s]
finished. total time: 169.978s
C:\Program Files (x86)\Minimal ADB and Fastboot>
Click to expand...
Click to collapse
And guess what. You're all done…
Now just sit back and let it reboot a few times.
You are going to want to make sure you have a superuser app and enjoy…
Im not an expert but after a few weeks of hunting for it i finally found out how to do it.
Many thanks go out to everyone who worked on this for all of us, and if you found this post helpful please feel free to add some thanks.

Need Serious help Rooting the K1 Nvidia Shield Tablet on Linux MInt 18

(first, If im on the wrong thread can you help with asking a moderator to move it to the correct place, or how ever that would work? Thanks!!)
Im on Linux Mint 18 Sarah Cinnamon 64 bit
I'm trying to root my Nvidia K1 shield tablet. no idea what im doing and the more I research this the more confusing it gets. Seems like If you ran windows theres "Clear Cut & Right to the Point" instructions about how to do this on about 14 hundred pages of great info including great you tube videos which heavily explain it, in great easy to understand detail.
What Ive done so far.
installed ADB and BootLoader (but ive no idea how to actually use these programs yet, still figuring that one out)
I have sucessfully Unlocked the Device
Now im trying to flash the .img I hit this command (from terminal) and get this result
$ fastboot flash recovery recovery.img
target reported max download size of 100663296 bytes
sending 'recovery' (16384 KB)...
OKAY [ 0.658s]
writing 'recovery'...
OKAY [ 0.651s]
finished. total time: 1.309s
Now following these steps at this website http://developer.download.nvidia.co.../0_0_0_Factory/HowTo-Flash-Recovery-Image.txt
im on the:
$ fastboot flash boot boot.img
error: cannot load 'boot.img'
Now ive no idea what to do, how to fix this ,or even if im following the right directions. what I need is (im going to throw a nice Trump statement here)
Can someone explain how you root a Nvidia shield K1 tablet, start to finish, ON LINUX, and every step simplified along the way explained, PERIOD!!!!
Everyone starts to tell you how to do this, then they jump on a windows PC throwing me all off...
now my .img file is from this website https://www.androidfilehost.com/?fid=24269982087005399
its in my downloads folder if that matters??? Not sure but i think it does. If i need to move this .img file somewhere please explain how to do it, don't just say "oh your problem is you need to move it to /usb/local/ or something," and just leave it there. remember i need help, so if I need to move things and use commands please help me with that. thank you
You know I got my MCSE, MCSA, A+ SERVER+ NET+ NOVEL and I can write python Programs and im getting into Julia. I know DOS, & I feel im a power User on Andriod, and ive been using personal computers since the 1970's. But when it comes to linux, I cant even google my way out of anything, even if the problem is very minor and simple, still, I cant google my way out of anything on linux its crazy. I keep having to write on forums on threads to find the answer. Someone with my Creds, granted most were aquired in 2002, shouldnt struggle like I do with linux, the support is terrible, and I dont mean updates for software and hardware, im sure thats fine. But when it comes to user support and the documentation for instruction, you get pages of results that have more links then answers on the page to other peoples help pages, that link more to other pages. You cant just goto 1 page, get the answer, done finished your allset, NOPE LINUX does not work that way and its to bad, I see why most of the world doesn't use it.
Good analogy right here, if someone in your neighborhood is giving out free gold to anyone, you know ya whole villiage or town is going to be there getting free gold, ya well, if Linux was that good, the whole world would be using it, and there not, and its free just like the gold. So does that tell you anything?
settled that, smashed the tablet, going to mount it on my wall as a reminder for tech not to mess with me. and yes linux sucks balls!!!!
Maverick617 said:
settled that, smashed the tablet, going to mount it on my wall as a reminder for tech not to mess with me. and yes linux sucks balls!!!!
Click to expand...
Click to collapse
I suggest anger management and growing some sort of ability to wait periods of time before going all hulk smash... You waited all of 2 hours for someone to tell you you had already finished all you needed a pc for... After flashing the twrp recovery over adb all you needed to do was boot into it. you could have done so by shutting it off then holding vol down and power to get you to the fastboot menu then use the volume rockers to go to recovery the power button will be enter in this case and it should boot the recovery you just loaded.
From there you flash the super su binary you already downloaded and when you boot into the tablet after that you can load a apk from the google play store supersu is what i use then you are rooted...
mirrin said:
I suggest anger management and growing some sort of ability to wait periods of time before going all hulk smash... You waited all of 2 hours for someone to tell you you had already finished all you needed a pc for... After flashing the twrp recovery over adb all you needed to do was boot into it. you could have done so by shutting it off then holding vol down and power to get you to the fastboot menu then use the volume rockers to go to recovery the power button will be enter in this case and it should boot the recovery you just loaded.
From there you flash the super su binary you already downloaded and when you boot into the tablet after that you can load a apk from the google play store supersu is what i use then you are rooted...
Click to expand...
Click to collapse
Also just going to add the process is the same in mint/ubuntu as it is in windows. Getting fastboot/adb is the only difference, and it basically tells you how to do if you try using fastboot without it installed. Also make sure you are in the right directory and type the correct name or you get the cant load message.
Additionally as someone who had to learn linux cli on Red hat i would have to say vs ms dos about the same... if the op thinks mint is bad i have some old yellow dog and mandrake 7.0 disk i can send him. He does not know the pain of trying to find the drivers on repositories and such just to get the sound and Ethernet working... Had the issue of my realtek 10/100 card not working under linux but my 3com card would if i had preloaded the drivers...
I have tried unbuntu and mint both gave a very similar experience to installing windows. With the exception unlike windows i did not need to patch 1000 things before using it and everything just worked.
Also Android is linux...
SHIELD TABLET K1 RECOVERY IMAGE FLASHING INSTRUCTIONS
To follow the instructions in this guide, you will need adb and fastboot.
These tools are provided as part of the Android SDK:
http://developer.android.com/sdk/index.html
Before flashing this recovery image to your SHIELD TABLET, connect your SHIELD TABLET
via USB to the PC where you downloaded this recovery image.
Next, put your SHIELD TABLET into fastboot mode using one of the following methods:
SW method:
- Boot to android home screen
- Connect the device to linux/windows system
- Open terminal (on linux); command prompt (on windows).
- Type "adb reboot bootloader" in terminal/command prompt
HW method: (If you had done this after the part you loaded what ever recovery nvidia tried pushing on you it should have worked)
- Turn off the device
- Press "Volume Down" -> "Power", hold "Volume Down" and leave Power buttons till device boots
(I dont even know what this from nvidia is talking about)http://forum.xda-developers.com/shi...recovery-twrp-2-8-7-0-touch-recovery-t3257172 <--go to the xda first next time...
To flash this recovery image to your SHIELD TABLET, run the following commands from
the directory where you extracted the recovery image package. If this is the
first time you have done this procedure, you must unlock the bootloader (see
below):
fastboot flash recovery recovery.img
fastboot flash boot boot.img
fastboot flash system system.img
fastboot erase userdata
fastboot flash staging blob
(Better instructions that i found on this place)
https://twrp.me/devices/nvidiahshieldtablet.html
adb reboot bootloader
(https://dl.twrp.me/shieldtablet/) Download latest here rename the .img file twrp.img maesure the file is in the adb folder...
fastboot flash recovery twrp.img
fastboot reboot
After boot you can issue this command
adb rebooot recovery
or
shut off the tablet
hold vol down then hold power
then press vol down until recovery is highlighted then push power button...
Unlocking the Bootloader<you needed to do this first>
Your SHIELD TABLET may have shipped with a locked bootloader. To update the device,
you must unlock the bootloader using the following:
- fastboot oem unlock
- Press the "Volume Down" button to select "Unlock bootloader" option on device
- Press the "Power" button to confirm the unlock. Your device's bootloader is now unlocked.
Click to expand...
Click to collapse

How to unroot, lock bootloader and go back to stock?

For background, I have Verizon pixel 2 and am using a Mac.
I went down a massive rabbit hole last night reading through these forums and all the posts and was able to unlock bootloader, flash the January OTA and then root by doing the modified boot file with magisk. (interestingly enough the booting into recovery gives me red ! Over a dead Android and I could not load the OTA that way, nor did the adb sideload OTA comand work either, I had to push the extracted walleye img and then the zip file as discussed in one of the steps in some other thread here)
So anywho, in the end I now have a phone that gives me 2 errors when it reboots, one for unlocked bootloader and another for root telling me something is wrong with my phone and i should contact the manufacturer (which I read on here is normal), but my biggest issue is that my ADT alarm app doesn't work anymore (even if i check it off for hide in magisk). I feel like the root is just not worth it for me and I want to revert to completely stock image, even if it resets my phone and I have to re back everything up all over again like did when i had to do the unlocking of the boot loader.
So -- What are the steps I should take?
1)uninstall magisk from magisk manager?
2)delete magisk manager?
The above will unroot me, correct?
3)Do I push the stock boot image file onto the phone?
4) do I have to repush the latest OTA walleye image and zip file onto the phone again?
5) do I then do the adb reboot and do the flashing lock command (same command i did to unlock the boot loader) to lock up the bootloader and reset to stock?
If someone could be as explicit as possible in correctiong or validating my steps above it would be much, much appreciated.
I don't want to do any more unnecessary steps in flashing things than is needed so if I have extra steps above (perhaps 4 is not needed?) Let me know.
Thanks
Proceed with Caution
I am not an expert by any means, but can speak from personal experience. I was in the exact same situation as you. I followed the detailed steps to unlock the bootloader on my pixel 2, received similar issues, and the same prompt when the phone rebooted. All that to say proceed with caution.
My thoughts on questions 1 & 2: I personally wouldn't recommend you remove or delete magisk from the manager. When I did i had to reinstall it via twrp. My phone functioned fine, apart from the error at reboot.
My thoughts on questions 3 -5: When I followed the steps on XDA for your questions here I ended up bricking my Pixel 2 with locked bootloader from Verizon. Probably an error on my part, but wouldn't want someone else to go through the headache, hours of issues, and then an expensive paper weight.
My suggestion would be to:
1. Leave your phone as is and attempt to trouble shoot the app or apps you are having issue with
2. contact Google support on your phone and see if they would replace it
3. wait for an established method to unroot the pixel 2 here
Thankfully Google replaced my phone due to the error after rebooting, prior to me bricking it. I knew I had a replacement phone coming. So I attempted to go back to stock and that is when I messed it up.
Note sure this is exactly what you were looking for, but hope this helps you.
Dozens of posts with hundreds of pages on how to root but no advice on how to go back to stock cleanly?
iridium7777 said:
Dozens of posts with hundreds of pages on how to root but no advice on how to go back to stock cleanly?
Click to expand...
Click to collapse
Your version is Verizon which is making things more complicated. Generally when the bootloader is unlocked, you just hit flash-all.bat and then relock the phone. Given that the Verizon I'm not sure.
So you are on stock ROM with all these apks loaded ? If you go to settings, then do a factory data reset, you'll reset the phone back to stock and completely wipe the phone and return it to stock, at that point you can go into bootloader mode and relock.
Again your bootloader is unlocked, so the flash-all is your best option. If you see the red exclamation point with the error android laying on his back, you press power and up volume and toggle that and it will bring in the stock recovery which you can sideload the OTA however it may fail since you have magisk.
I bought my phone stock last year and have not rooted it or modified it in anyway. Too many problems and it only gets harder and harder as Google releases a new phone.
@mikeprius -- thank you for replying. after reading more on here, it seems like that's the way to go -- flash-all script, seems like i don't really need to do 1&2 that i wrote above as the flash-all will wipe that out by itself.
at that point i should be running the latest stock 8.1 but with an unlocked bootloader (and according boot up message screen) and i should be able to re-do the fastbook unlocking command to lock the phone back up.
(and yes, after reading even more now -- and i tried this yesterday -- i completely missed the portion about PWR + Vol Up button, that's why i think i had that issue, but still, i was able to push the update by pushing img and then the zip through).
iridium7777 said:
@mikeprius -- thank you for replying. after reading more on here, it seems like that's the way to go -- flash-all script, seems like i don't really need to do 1&2 that i wrote above as the flash-all will wipe that out by itself.
at that point i should be running the latest stock 8.1 but with an unlocked bootloader (and according boot up message screen) and i should be able to re-do the fastbook unlocking command to lock the phone back up.
(and yes, after reading even more now -- and i tried this yesterday -- i completely missed the portion about PWR + Vol Up button, that's why i think i had that issue, but still, i was able to push the update by pushing img and then the zip through).
Click to expand...
Click to collapse
If I were in your situation and the bootloader is unlocked, just use flash-all which has a wipe script then call it a day. I think trying to screw around even more is just a waste of time and I wouldn't even bother with the OTA, just erase and flash stock. You don't have to relock your bootloader if you don't want to, if you stay fully stock you may still be able to get OTA updates. I'm not sure if a bootloader locked is required someone can chime in as it has been awhile since I've done this, but over 1 yr ago, I just kept the bootloader unlocked, kept things stock and everything was good to go. Obviously there are security issues with an unlocked bootloader, but I'm sure you know this already
@mikeprius you keep saying reset/erase, do you suggest i re-set the phone and then flash the stock image?
i was just going to flash the stock image, i figured it already wipes the phone, and locking the bootloader would wipe it again, so what's the point of erasing all data prior?
Not to hijack this thread, but a question to add... I thought that there were kernels that would mask certain things to allow all of those apps to work, and get rid of the "problem with device" message.
Is that correct?
iridium7777 said:
@mikeprius you keep saying reset/erase, do you suggest i re-set the phone and then flash the stock image?
i was just going to flash the stock image, i figured it already wipes the phone, and locking the bootloader would wipe it again, so what's the point of erasing all data prior?
Click to expand...
Click to collapse
Just flash the stock images. It will auto reset.
Again, don't mess with anything just flash stock images, then go from there.
Also flash the newest version of the stock images out there. The pixel 2 will error if you try to downgrade any version.
here are all the steps to UNROOT and LOCK the boot loader on your Pixel 2 on a Mac (windblows users simply ignore all the "./" references).
1) download the latest ADB tools from google
2) download the latest factory Walleye image
3) unzip files from 1&2 into a common directory
4) edit flash-all.sh file and add "./" infront of every instance of "fastboot" in the script [windows users ignore this step]
5)hook up your phone to your computer in debug and file transfer mode. check that "./adb devices" loads your devide
6)type " ./adb reboot bootloader"
7) check that your device is still connected by typing "./fastboot devices"
8) type "./flash-all.sh"
===the script will run and your phone will be restored to stock, and UNROOTED. upon boot up skip through all of the setup steps and get to the phone settings as fast as you can. enable developer option, enable debug mode, set phone to data transfer ====
9) check that your phone is connect to your computer by "./adb devices"
10) type "./adb reboot bootloader"
11) check your devices is still connected by "./fastboot devices"
12) type "./fastboot flashing lock"
===== this will re-wipe your device again, you'll see the circle of death, and this will LOCK your boot loader back up again======
side note, feel free to skip over the steps where you check that your phone is still connected to the computer (./fastboot devices) if you're less paranoid and comfortable.
iridium7777 said:
here are all the steps to UNROOT and LOCK the boot loader on your Pixel 2 on a Mac (windblows users simply ignore all the "./" references).
1) download the latest ADB tools from google
2) download the latest factory Walleye image
3) unzip files from 1&2 into a common directory
4) edit flash-all.sh file and add "./" infront of every instance of "fastboot" in the script [windows users ignore this step]
5)hook up your phone to your computer in debug and file transfer mode. check that "./adb devices" loads your devide
6)type " ./adb reboot bootloader"
7) check that your device is still connected by typing "./fastboot devices"
8) type "./flash-all.sh"
===the script will run and your phone will be restored to stock, and UNROOTED. upon boot up skip through all of the setup steps and get to the phone settings as fast as you can. enable developer option, enable debug mode, set phone to data transfer ====
9) check that your phone is connect to your computer by "./adb devices"
10) type "./adb reboot bootloader"
11) check your devices is still connected by "./fastboot devices"
12) type "./fastboot flashing lock"
===== this will re-wipe your device again, you'll see the circle of death, and this will LOCK your boot loader back up again======
side note, feel free to skip over the steps where you check that your phone is still connected to the computer (./fastboot devices) if you're less paranoid and comfortable.
Click to expand...
Click to collapse
hey there. what is the command suppose to look like? every combination I try gives me an error:
first, I don't even enter the Fastboot command the same wayit given me an error:
Asads-MacBook:~ asad$ ./fastboot devices
-bash: ./fastboot: No such file or directory
so I try this: Asads-MacBook:~ asad$ fastboot devices
[serial #] fastboot
these are all the errors I get:
Asads-MacBook:~ asad$ cd /Users/asad/Desktop/walleye-opm1.171019.021
Asads-MacBook:walleye-opm1.171019.021 asad$ ./flash-all.sh
./flash-all.sh: line 21: fastboot./: No such file or directory
...
Asads-MacBook:walleye-opm1.171019.021 asad$ ./flash-all.sh
./flash-all.sh: line 21: ./fastboot: No such file or directory
...
Asads-MacBook:walleye-opm1.171019.021 asad$ ./flash-all.sh
fastboot: usage: unknown command ./flash
...
Asads-MacBook:walleye-opm1.171019.021 asad$ ./flash-all.sh
./flash-all.sh: line 21: fastboot./: No such file or directory
...
how is the command suppose to look that I can edit it the right way?
"fastboot: No such file or directory" means that you didn't do step 1, step 3 on the file you didn't download, and there should probably be a "cd /<whatever the 'common directory'>" is. (I just created a directory named adb. That's good enough for me to know what it's for.)
You have to download adb and fastboot (which come in the adb tools file), unzip them to whatever directory you're going to use for flashing the phone, and cd to that directory.
Then, since you're evidently on MacOS, each command has to have ./ in front of it (that says "the current directory"). Try all that, then see what happens.
Rukbat said:
"fastboot: No such file or directory" means that you didn't do step 1, step 3 on the file you didn't download, and there should probably be a "cd /<whatever the 'common directory'>" is. (I just created a directory named adb. That's good enough for me to know what it's for.)
You have to download adb and fastboot (which come in the adb tools file), unzip them to whatever directory you're going to use for flashing the phone, and cd to that directory.
Then, since you're evidently on MacOS, each command has to have ./ in front of it (that says "the current directory"). Try all that, then see what happens.
Click to expand...
Click to collapse
yayy! that worked!
so i had adb and fastboot in a folder (platform-tools) and i had the factory image in its own seperate folder (walleye-files). i was making the cd; walleye folder and trying to flash-all.sh there.
so i had to put the files from the walleye folder into the platform-tools folder. Then I made platform-tools the cd. now when . i could now follow all the steps from 4-12 and got the pixel 2 the way it was OTB.
thanks!
Great! I'm not a Mac expert (last time I used one was the 128K Mac in 1985), so I'm not sure how to export a path in MacOs, so I gave you the complicated way, but you got it done anyway. (If you ever find out how to add the platform-tools folder to your path, you can leave adb and fastboot in there and keep the ROMs [walleye] in their own folder, cd to it and adb and fastboot will still work.)

Categories

Resources