Re-Lock Bootloader after rooting - Nexus 5 Q&A, Help & Troubleshooting

If I rooted my Nexus 5 and stayed on Stock ROM, would it be possible to re-lock the bootloader for security purposes (such as preventing cold-boot attacks) while still having root?
I would try it myself, but unfortunately, the bootloader is still locked on my Nexus and losing all data (even temporary) is no option.
Thanks in advance!

Get BootUNlock app from play

GR0S said:
Get BootUNlock app from play
Click to expand...
Click to collapse
Couldn't find an app named exactly like this, but another one built for the same purpose. However, thanks a lot!

GR0S said:
Get BootUNlock app from play
Click to expand...
Click to collapse
https://play.google.com/store/apps/details?id=net.segv11.bootunlocker
https://code.google.com/p/boot-unlocker-gnex/

to do it manually, all you do is type via fastboot.. fastboot oem lock.

Related

[Q] Remove the lock?

Hello, on all the phones I've rooted before and had a tampered logo somewhere on the boot screen, I was able to remove it, but on this phone I have no idea how to get rid of the unlocked lock on the Google boot screen, anyone know how to fix this? Or is it impossible?
Giston141 said:
Hello, on all the phones I've rooted before and had a tampered logo somewhere on the boot screen, I was able to remove it, but on this phone I have no idea how to get rid of the unlocked lock on the Google boot screen, anyone know how to fix this? Or is it impossible?
Click to expand...
Click to collapse
fastboot oem lock
Or since you're rooted, try BootUnlocker and lock/unlock the bootloader whenever you want...
https://play.google.com/store/apps/details?id=net.segv11.bootunlocker
STi_Fanatic said:
fastboot oem lock
Click to expand...
Click to collapse
phazerorg said:
Or since you're rooted, try BootUnlocker and lock/unlock the bootloader whenever you want...
https://play.google.com/store/apps/details?id=net.segv11.bootunlocker
Click to expand...
Click to collapse
But if I lock the bootloader wont I not be able to flash things without unlocking it again? I flash things way to often, I figured there'd be a way to just simply hide it. I've accomplished this on other phones.
Giston141 said:
But if I lock the bootloader wont I not be able to flash things without unlocking it again? I flash things way to often, I figured there'd be a way to just simply hide it. I've accomplished this on other phones.
Click to expand...
Click to collapse
You can still flash from recovery with a locked bootloader, just not from the bootloader itself (fastboot). And you can just unlock it using BootUnlocker anytime you want to flash with fastboot... it's that easy.
I don't know if you can just hide the icon without locking... most of us here don't care about the icon... it's just part of what makes a Nexus a Nexus. I personally enjoy seeing it when my devices boot up - it reminds me that I bought a device that supports unlocking and flashing out of the box without hacks.
Giston141 said:
Hello, on all the phones I've rooted before and had a tampered logo somewhere on the boot screen, I was able to remove it, but on this phone I have no idea how to get rid of the unlocked lock on the Google boot screen, anyone know how to fix this? Or is it impossible?
Click to expand...
Click to collapse
Hi. I've just found a material theme for the nexus 5 bootloader and i've asked the developer if he can remove the lock icon under the google logo and he did it. You can find the flashable zip on the fourth page of this thread: http://forum.xda-developers.com/goog...t3118100/page4
Cheers!

Nexus 5 - No Lollipop yet. Manual install?

Hi guys,
I've just bought a Nexus 5 that got updated first to 4.4.3 and then 4.4.4 pretty much straight away.
But now I'm stuck, doesn't get Lollipop at all. I've tried the Google Services Trick, I've rebooted, I've tried without sim, I've tried another phone carrier (I'm in Australia and looks like my provider is still testing Lollipop and not sure WHEN it will release it at all).
Any other suggestions on what to try to get Lollipop? I'm an IT guy but I've never done the manual install or that kinda of stuff.. I had so far the Galaxy Nexus with 4.4.3.
If I install manually Lollipop and everything goes fine, what happens next? I mean, when a new version comes out, do I have to do it AGAIN manually? Losing all the data and stuff? Or ....?
Please advise
Nexus 5 4.4.4
Baseband version
8974A-2.0.50.1.16
Kernel version
3.4.0-gd59db4e
Build number
KTU84P
If you're 100% stock, download the OTA and manually flash it using the 'adb sideload' command - you won't lose anything
I bought it through ebay, how do I know if it's 100% stock?
More than losing data now (nothing on, it's brand new) what will happen when the next update will come out? I'll have to do it manually every time?
thanks for the help
If you are sstock there's not going to be any issues - and you'll continue to get the updates as they appear.
Look for the big OTA thread here on the forums.
Edit : You ain't going to lose data if you sideload the OTA - it keeps your storage intact. You only lose data when unlocking your bootloader for flashing factory images . Unlocked bootloader is not a requirement for sideloading OTAs
ok, understood. But to do the "sideloading OTA" the only requirments it to be 100% stock?
how do I find out if my phone is 100% stock?
blekm said:
ok, understood. But to do the "sideloading OTA" the only requirments it to be 100% stock?
how do I find out if my phone is 100% stock?
Click to expand...
Click to collapse
reboot to bootloader ( volume down and power pressed ). On the bottom of the screen it will say if the bootloader is locked or not . If it's locked , there's a very good chance the phone is stock. If it isn't you OTA will fail but it should not affect anything.
Niflheimer said:
reboot to bootloader ( volume down and power pressed ). On the bottom of the screen it will say if the bootloader is locked or not . If it's locked , there's a very good chance the phone is stock. If it isn't you OTA will fail but it should not affect anything.
Click to expand...
Click to collapse
it says
FASTBOOT MODE
Product name hammerhread
bootloader version HHZ11k
Carrier info none
signing Production
Secure boot enabled
Lock state Locked
so what is it?
blekm said:
it says
FASTBOOT MODE
Product name hammerhread
bootloader version HHZ11k
Carrier info none
signing Production
Secure boot enabled
Lock state Locked
so what is it?
Click to expand...
Click to collapse
Bootloader locked , and you have the stock kernel and rom. Sideload that OTA and you are ready to go !
ok, sounds awesome. I think I'll give it a try over the weekend!
Any other advise? I'll look for a guide or something to sideload the OTA and I'll cross my fingers
http://forum.xda-developers.com/google-nexus-5/general/info-nexus-5-ota-help-desk-t2523217
and http://forum.xda-developers.com/showpost.php?p=58017996&postcount=3700
You will need to do 2 otas , from 4.4 to 5.0 and 5.0 to 5.01
Essentials for all Google Nexus owners:
Factory Images for Nexus Devices:
developers.google.com/android/nexus/images
Google USB Driver:
developer.android.com/sdk/win-usb.html
WugFresh Nexus Root Toolkit: (Not just for rooting, this tool can unlock/relock the bootloader, flash factory images, a lot more)
Gus.Ottawa said:
Essentials for all Google Nexus owners:
Factory Images for Nexus Devices:
developers.google.com/android/nexus/images
Google USB Driver:
developer.android.com/sdk/win-usb.html
WugFresh Nexus Root Toolkit: (Not just for rooting, this tool can unlock/relock the bootloader, flash factory images, a lot more)
Click to expand...
Click to collapse
And another one for all the scepticals: You can allways lock your bootloader back, if you need a phone in factory state. So, flash people, flash.
Niflheimer said:
http://forum.xda-developers.com/google-nexus-5/general/info-nexus-5-ota-help-desk-t2523217
and http://forum.xda-developers.com/showpost.php?p=58017996&postcount=3700
You will need to do 2 otas , from 4.4 to 5.0 and 5.0 to 5.01
Click to expand...
Click to collapse
ok, thanks. So the 5.0.1 is already out? Is this the version with plenty bug fix?
Gus.Ottawa said:
Essentials for all Google Nexus owners:
Factory Images for Nexus Devices:
developers.google.com/android/nexus/images
Google USB Driver:
developer.android.com/sdk/win-usb.html
WugFresh Nexus Root Toolkit: (Not just for rooting, this tool can unlock/relock the bootloader, flash factory images, a lot more)
Click to expand...
Click to collapse
thanks for the links
I have a mac (no access at Windows machine) and I've found this guide, is it good enough?
http://www.redmondpie.com/how-to-install-android-5.0-lollipop-on-nexus-5-using-mac-the-easy-way/
thanks for the help guys, I appreciate a lot
blekm said:
I have a mac (no access at Windows machine) and I've found this guide, is it good enough?
http://www.redmondpie.com/how-to-install-android-5.0-lollipop-on-nexus-5-using-mac-the-easy-way/
thanks for the help guys, I appreciate a lot
Click to expand...
Click to collapse
Yes, it will work. Note that unlocking the bootloader and/or flashing the flash-all.sh will wipe your device so backup first off your device
Sent from my Nexus 9 using XDA Free mobile app
jd1639 said:
Yes, it will work. Note that unlocking the bootloader and/or flashing the flash-all.sh will wipe your device so backup first off your device
Sent from my Nexus 9 using XDA Free mobile app
Click to expand...
Click to collapse
but I won't have to unlock the bootloader, from what I understood, no?
Anyway, I got no data on it so for now it's not a problem. I'm more concerned for future manual updates, when I'll start having data on it
blekm said:
but I won't have to unlock the bootloader, from what I understood, no?
Anyway, I got no data on it so for now it's not a problem. I'm more concerned for future manual updates, when I'll start having data on it
Click to expand...
Click to collapse
You will be master till new version released and there will be no problem for you. You will flash image without wipe or copy data to PC and make a full install or unlock bootloader and wait for OTA again. Even it is possible that you will be on some custom rom.
Just stop to be so scared about anything - the world of android is yours.
Regards, Zagor
I'll do it over the weekend, I'll keep you posted.
Thanks guys
hi guys,
thanks to everyone for the help, I've sideload the OTA 5.0, so easy I couldn't believe it. Reboot the phone, command in terminal and that's it!
As soon as the phone started it found immediately the 5.0.1 update on its own, so I didn't have to do it manually.
AWESOME, I love Lollipop already!
you're welcome!

[Q] I want to get my hotspot enabled, so do I need to root to do this?

Hey all, just got my pixel. Wanna stay on stock, but maybe root? I want to get my hotspot enabled, so do I need to root to do this? I'm on sprint. Any guidance! Thank you!
If you don't or can't get hotspot enable you may have to root to get it. Plenty of info on how.
FYI
Since you are on Sprint I'm going to guess you bought directly from Google. To my knowledge you can disregard any convos about updates locking you down. That only seems to affect devices bought through Verizon.
FernBch said:
If you don't or can't get hotspot enable you may have to root to get it. Plenty of info on how.
FYI
Since you are on Sprint I'm going to guess you bought directly from Google. To my knowledge you can disregard any convos about updates locking you down. That only seems to affect devices bought through Verizon.
Click to expand...
Click to collapse
Yes sprint and bought directly from play store.
Guess I'll start with this tool eH?
forum.xda-developers.com/pixel/development/tool-skipsoft-android--google-t3482761
Problem is, I already updated via OTA to latest version. Am I screwed?
Screwed?? If you mean BL locked, no. I have the Verizon branded variant but unlocked, rooted, and flashed SU. When I saw NMF26Q was available from Google I downloaded it, installed via flash-all from fastboot, then rerooted and flashed SU again no problem.
chugger93 said:
Hey all, just got my pixel. Wanna stay on stock, but maybe root? I want to get my hotspot enabled, so do I need to root to do this? I'm on sprint. Any guidance! Thank you!
Click to expand...
Click to collapse
Please look at OP install instructions in this thread.
Please look at OP install instruction in TWRP thread.
I guess you aren't on Telus in Canada or your hotspot would work. When you give no information, too hard to help. But I read this forum so even though I don't have Sprint or Verizon as my provider, I know there are many threads about turning hotspot on for unlimited data plans. Guidance: read those threads too!
Then ask for specific guidance. I don't want to reread for 25 min to find and copy and paste to spoonfeed when you should read. Much nicer to fill in a few missing spots than hold your hand not having a clue of your technical knowledge and skills.
Happy holidays.
Specific guidance: update SDK tools before you start!
Sent from my sailfish using XDA Labs
so I managed to unlock and run the fastboot command to push SuperSU to my new pixel. All seems good so far...but when I restart my device I get a "your device software cant be checked for corruption" message. What is that all about? Assuming from unlocking the bootloader. Is this permanent? or can I now relock bootloader since I'm rooted?
chugger93 said:
so I managed to unlock and run the fastboot command to push SuperSU to my new pixel. All seems good so far...but when I restart my device I get a "your device software cant be checked for corruption" message. What is that all about? Assuming from unlocking the bootloader. Is this permanent?
Click to expand...
Click to collapse
It just means your bootloader is unlocked and isn't anything to be worried about. As long as your bootloader is unlocked it will show.
Sent from my Pixel using Tapatalk
chugger93 said:
so I managed to unlock and run the fastboot command to push SuperSU to my new pixel. All seems good so far...but when I restart my device I get a "your device software cant be checked for corruption" message. What is that all about? Assuming from unlocking the bootloader. Is this permanent?
Click to expand...
Click to collapse
joetheshmo said:
It just means your bootloader is unlocked and isn't anything to be worried about. As long as your bootloader is unlocked it will show.
Sent from my Pixel using Tapatalk
Click to expand...
Click to collapse
Nothing to worry about. I just ignore it.
joetheshmo said:
It just means your bootloader is unlocked and isn't anything to be worried about. As long as your bootloader is unlocked it will show.
Sent from my Pixel using Tapatalk
Click to expand...
Click to collapse
That's Verizon's equivalence of "Sorry sucka, you're on your own!"
chugger93 said:
so I managed to unlock and run the fastboot command to push SuperSU to my new pixel. All seems good so far...but when I restart my device I get a "your device software cant be checked for corruption" message. What is that all about? Assuming from unlocking the bootloader. Is this permanent? or can I now relock bootloader since I'm rooted?
Click to expand...
Click to collapse
Do not relock your bootloader unless you are fully 100% stock or you run the risk of bricking your phone
Sent from my Pixel using Tapatalk
joetheshmo said:
Do not relock your bootloader unless you are fully 100% stock or you run the risk of bricking your phone
Sent from my Pixel using Tapatalk
Click to expand...
Click to collapse
That makes sense. Ya havnt used a ROM or anything, do not plan on it. So for now I'm stock. So I can relock it though, get rid of that message but still maintain SuperSU/root right?
My only goal is to get hotspot working (sprint)
chugger93 said:
That makes sense. Ya havnt used a ROM or anything, do not plan on it. So for now I'm stock. So I can relock it though, get rid of that message but still maintain SuperSU/root right?
My only goal is to get hotspot working (sprint)
Click to expand...
Click to collapse
If you're rooted and have done the tether hack you're no longer stock. Don't lock the bootloader unless you are COMPLETELY stock.
robocuff said:
If you're rooted and have done the tether hack you're no longer stock. Don't lock the bootloader unless you are COMPLETELY stock.
Click to expand...
Click to collapse
Which tether hack? This one? http://forum.xda-developers.com/pixel-xl/themes/mod-tethermod-systemless-install-guide-t3501448
If so, I have not done any tether hack yet....still reading since there are multiple ways to do it. (sprint variant/google play store)
chugger93 said:
That makes sense. Ya havnt used a ROM or anything, do not plan on it. So for now I'm stock. So I can relock it though, get rid of that message but still maintain SuperSU/root right?
My only goal is to get hotspot working (sprint)
Click to expand...
Click to collapse
No, having SuperSU means you are no longer stock. You need all stock images to lock bootloader.
If you need a locked bootloader for Android Pay or some other apps. Install one of the customer kernels, they hide it. You still need to remove SuperSU though. From what I've seen its a bit harder to hide that for now. So you can root, make change for hotspot and remove root.
Otherwise nothing hurts to have your bootloader unlocked. It gives you more options if anything ever goes wrong. You need unlocked bootloader to even load Google factory images.
PS. I'd recommend Franco kernel as it imporoves battery life.
Sent from my Pixel using Tapatalk
chugger93 said:
Hey all, just got my pixel. Wanna stay on stock, but maybe root? I want to get my hotspot enabled, so do I need to root to do this? I'm on sprint. Any guidance! Thank you!
Click to expand...
Click to collapse
No you don't have to root to have hotspot enabled, it's a build-in function. Simply set it up in “wireless & networks” and you are ready to go:laugh:
eos9d said:
No you don't have to root to have hotspot enabled, it's a build-in function. Simply set it up in �wireless & networks� and you are ready to go[emoji23]
Click to expand...
Click to collapse
Depending on his plan, he may not have that option. Many do not, hence still need the tether hack.

Google Pixel Verizon bootloop, Lock bootloader

I lock bootloader on Verizon Google Pixel when my device have TWRP and i have brick! Device Loading up to logo Google on 1 sec and reboot. Fastboot work, but i don't unlock bootloader. In recovery is don't enter. Please help me!
https://forum.xda-developers.com/pixel/how-to/psa-read-relocking-bootloader-t3494614 ....very important advice. With my limited knowledge NEVER relock unless you have signed OEM images correctly reloaded into device before locking.
kkjb said:
https://forum.xda-developers.com/pixel/how-to/psa-read-relocking-bootloader-t3494614 ....very important advice. With my limited knowledge NEVER relock unless you have signed OEM images correctly reloaded into device before locking.
Click to expand...
Click to collapse
There is still no solution to this problem? ((
Unlock again.
lafester said:
Unlock again.
Click to expand...
Click to collapse
how can I unlock it now?
I already wrote to a man who used to be for money unlocked Verizon bootloader, but he says "No solution for this problem yet"
Groh12 said:
how can I unlock it now?
I already wrote to a man who used to be for money unlocked Verizon bootloader, but he says "No solution for this problem yet"
Click to expand...
Click to collapse
Put the phone in fastboot mode, then run `fastboot flashing unlock` from a PC. If it says unlocking not allowed, you're out of luck, it's a brick now. Never lock your phone without being 100% stock on both slots
Groh12 said:
how can I unlock it now?
I already wrote to a man who used to be for money unlocked Verizon bootloader, but he says "No solution for this problem yet"
Click to expand...
Click to collapse
No idea. I've never relocked unless I am completely stock and take at least one ota first to make sure, along with full factory resets before and after updating.
There are others here that claim they where able to unlock again and save their phones though so maybe it's possible.
lafester said:
No idea. I've never relocked unless I am completely stock and take at least one ota first to make sure, along with full factory resets before and after updating.
There are others here that claim they where able to unlock again and save their phones though so maybe it's possible.
Click to expand...
Click to collapse
In this topic https://forum.xda-developers.com/pi...bootloader-t3540772/post77016940#post77016940 man has unbrick Pixel XL, but i think that method will work on Pixel.

Question Re-lock bootloader after root?

Hi folks,
I've managed to stumble my way through using pixel flasher to update my P7Pro to the latest fw with root. Only need root so I can record calls, should I lock the bootloader now I'm done?
Also how do I update in future please without having to wipe, use pixel flasher and patch as I've just done?
I like to think I'm quite tech savvy but the guides for the P7Pro have gone over my head :/
Connorsdad said:
Hi folks,
I've managed to stumble my way through using pixel flasher to update my P7Pro to the latest fw with root. Only need root so I can record calls, should I lock the bootloader now I'm done?
Click to expand...
Click to collapse
Not unless you want to brick your device. You need to be completely stock before relocking your bootloader (unless using avbroot, but you should have a deep understanding about how it works beforehand).
Connorsdad said:
Also how do I update in future please without having to wipe, use pixel flasher and patch as I've just done?
Click to expand...
Click to collapse
Pixel Flasher will work fine for updating.
Lughnasadh said:
Not unless you want to brick your device.
Click to expand...
Click to collapse
Huh, learn something new every day I guess...
Lughnasadh said:
Not unless you want to brick your device. You need to be completely stock before relocking your bootloader (unless using avbroot, but you should have a deep understanding about how it works beforehand).
Pixel Flasher will work fine for updating.
Click to expand...
Click to collapse
Awesome, thanks a lot for your reply, much appreciated.
never ever* lock bootloader on google devices. fastboot only works on unlocked bootloader and there is no alternative to fastboot.
* exception
alecxs said:
never ever lock bootloader on google devices. fastboot only works on unlocked bootloader and there is no alternative to fastboot.
Click to expand...
Click to collapse
And you can't flash a factory image to fix a phone on your own when it's soft bricked. It might have to go to a shop for repairs.
Connorsdad said:
Hi folks,
I've managed to stumble my way through using pixel flasher to update my P7Pro to the latest fw with root. Only need root so I can record calls, should I lock the bootloader now I'm done?
Also how do I update in future please without having to wipe, use pixel flasher and patch as I've just done?
I like to think I'm quite tech savvy but the guides for the P7Pro have gone over my head :/
Click to expand...
Click to collapse
AFAIK, relocking the bootloader requires wiping the device -- much like unlocking does -- and if you're unwilling to set everything (including anything on your /sdcard internal storage, not to mention all apps and their settings & system settings) back up from scratch (as any good complete backups require root access), this might not be what you wish to do.
And, if you had managed to successfully relock the bootloader, you could simply run the in-system update (OTA) that would update without wiping -- or even manually applying OTA from the recovery.
But there are hardly any benefits in re-locking the bootloader (after unlocking it) -- even if one was to a paranoid degree of security; which is the only major reason to (I can point you to the discussions that had taken place on it here, if you wish). If you don't want to run into any issues, you could simply run the stock ROM without root and be hardly impacted by it; with the added benefit of having the option to advanced recovery options and/or rooting options open to you in the future if need be...
alecxs said:
never ever lock bootloader on google devices. fastboot only works on unlocked bootloader and there is no alternative to fastboot.
Click to expand...
Click to collapse
*it just occurs to me you meant to never lock bootloader because it limits options; not the risk of hard-bricking the device -- in which I wrote the following with that assumption. I'll leave the following comment as it is still sound advice, but I apologize in advanced that it doesn't quite relate to what you meant...
I mean, I feel doing Google's official Android Flash Tool is a safe enough method; it wouldn't do well if Google's own tool bricked their devices using their tool...at the very least the tool ensures that the stock factory firmware flashed matches the bootloader version and automates the fastboot commands so when re-locking the bootloader, it has the least potential to brick the device...
Exactly. there is no official flash tool from google, that's why I personally won't recommend to keep bootloader locked. If it's bricked with no working recovery mode, not even repair shop can fix it. all you can do is RMA to google get new device. no edl mode or anything else will help, fastboot is the official flashing method.
If you're referring to the "Android Flash Tool" that's no flash tool at all. I haven't tested it, but to me it looks like a WebUSB browser plugin. Reading the requirements it works with adb commands, usb-debugging and fully booted android is required. Therefore cannot unbrick devices.
Doesn't unlocking the bootloader break saftynet so then you have to root to use gpay?
iRhyiku said:
Doesn't unlocking the bootloader break saftynet so then you have to root to use gpay?
Click to expand...
Click to collapse
I'll just chime in here because I have recently unlocked my bootloader but I haven't been able to root it yet and I haven't had any issues with safety net.
Trippyy Doee said:
I'll just chime in here because I have recently unlocked my bootloader but I haven't been able to root it yet and I haven't had any issues with safety net.
Click to expand...
Click to collapse
Interesting, I thought unlocking would break it. I'll have to unlock then for the extra safty!
iRhyiku said:
Interesting, I thought unlocking would break it. I'll have to unlock then for the extra safty!
Click to expand...
Click to collapse
That's of course another aspect. Good point. If you rely on SafetyNet or it's successor Play integrity, do not unlock bootloader. AFAIR the latter one can't be cheated.
simplepinoi177 said:
But there are hardly any benefits in re-locking the bootloader (after unlocking it)
Click to expand...
Click to collapse
There are some benefits like some banking apps, streaming apps and games beginning to work. So it really depends on what is important for the user. I don't like flashing random mods to make apps work on rooted/ bootloader unlocked devices, primarily banking apps.

Categories

Resources