Database Info

[Q] TA Restore got a bit scary. Future Advice?

Hi Guys,
So I managed to get my Z3 - D6603 to a state that I wanted: Lollipop, root and working Xposed. Only thing left to do was restore TA (Relock bootloader) so that I had all DRM functionality back - Perfect Device would result. I used Devshaft's tool to restore the backup I had taken before unlock of BL.
The fun started after the tool finished the restore and reboot the device, or rather, tried to reboot the device. The device was practically dead with only red LED visible with USB connected or a short vibrate when power button pressed. Nothing else (Very scary). Eventually managed to get the device to flash with flashtool in flashmode, no wipe. Device booted fine and on inspection I see the bootloader is infact relocked.
My question now is, what caused the 'Brick'? I would like to obtain root again by unlocking bootloader again, flashing Androplus and SuperSU, restore TA and relock. This time without getting the fright of my life thinking I had bricked my new and very expensive device. Any tips? Don't really want to data wipe again to go the PFCreator route.
Ch33rz,

Custom kernel and locked BL
Hey !
Relock bootloader (result of TA restore) with a custom kernel (Androplus,...) will soft brick the device. You can't boot a device with a locked bootloader and a custom kernel.
Don't panic, you can't hardbrick your device (but if you unplug your device during TA restore, you will brick it) !

DJPops said:
Hey !
Relock bootloader (result of TA restore) with a custom kernel (Androplus,...) will soft brick the device. You can't boot a device with a locked bootloader and a custom kernel.
Don't panic, you can't hardbrick your device (but if you unplug your device during TA restore, you will brick it) !
Click to expand...
Click to collapse
Thanks for the reply, man.
Okay, that makes sense. However, when I did the restore I had this "Stock" kernel flashed and not Androplus. Is this still not an acceptable kernel? What criteria does the kernel need to fulfil to allow a successful restore without a soft brick?

Kyle07 said:
Thanks for the reply, man.
Okay, that makes sense. However, when I did the restore I had this "Stock" kernel flashed and not Androplus. Is this still not an acceptable kernel? What criteria does the kernel need to fulfil to allow a successful restore without a soft brick?
Click to expand...
Click to collapse
No, that kernel has been modified so it is not stock
When on a locked bootloader you need the completely stock kernel, if it has been decompiled and recomiled (even with no changes) your phone will not boot on it.
Flash a FTF file or force a repair using PCComapnion to fix it

gregbradley said:
No, that kernel has been modified so it is not stock
When on a locked bootloader you need the completely stock kernel, if it has been decompiled and recomiled (even with no changes) your phone will not boot on it.
Flash a FTF file or force a repair using PCComapnion to fix it
Click to expand...
Click to collapse
Thank you. That clarifies it nicely.
Some sort of integrity check at play here?

Kyle07 said:
Thank you. That clarifies it nicely.
Some sort of integrity check at play here?
Click to expand...
Click to collapse
The fact is we do not know Sony keys, without them a locked bootloader will only boot a stock kernel

gregbradley said:
The fact is we do not know Sony keys, without them a locked bootloader will only boot a stock kernel
Click to expand...
Click to collapse
In hindsight that was a silly question. Appreciate your patience.
Still getting accustomed to modifying a Sony. Initially quite different to other Androids I've modded - mostly Samsungs.

Stock vs Custom ROM & Kernel

Hi,
Currently i'm on KitKat 4.4.4 with Unlocked Bootloader and no DRM keys/function.
I would like to upgrade to any version of lollipop and use the DRM restore function to improve my camera quality, whilst being able to use Xposed with no boot loops.
Does anyone know of a configuration of Kernels/ROM/DRM patch that will allow me to do this?
As far as I know the DRM restore will only work on stock based roms, which require a stock kernel.
Thanks

diazlol said:
Hi,
Currently i'm on KitKat 4.4.4 with Unlocked Bootloader and no DRM keys/function.
I would like to upgrade to any version of lollipop and use the DRM restore function to improve my camera quality, whilst being able to use Xposed with no boot loops.
Does anyone know of a configuration of Kernels/ROM/DRM patch that will allow me to do this?
As far as I know the DRM restore will only work on stock based roms, which require a stock kernel.
Thanks
Click to expand...
Click to collapse
DRM restore only works if you have previously backed them up from the same phone. You can backup and restore while being on either Kitkat or Lollipop given that you back them up before unlocking the bootloader. Don't try to restore keys from another phone, you will end up with permanent bricked phone.

DRM restore only works if you have previously backed them up from the same phone. You can backup and restore while being on either Kitkat or Lollipop given that you back them up before unlocking the bootloader. Don't try to restore keys from another phone, you will end up with permanent bricked phone.
Click to expand...
Click to collapse
I don't intend on actually restoring the DRM keys, only restoring the function such as the Camera's noise cancellation.
I haven't backed up anything specifically, all I've done is UL bootloader and flash XPOSED & TWRP.
Am I screwed?

diazlol said:
I don't intend on actually restoring the DRM keys, only restoring the function such as the Camera's noise cancellation.
I haven't backed up anything specifically, all I've done is UL bootloader and flash XPOSED & TWRP.
Am I screwed?
Click to expand...
Click to collapse
No. Well, you lost your DRM.And remember. Never flash someone else' s TA partition.

TheTeslaCoil said:
No. Well, you lost your DRM.And remember. Never flash someone else' s TA partition.
Click to expand...
Click to collapse
Ok so I'll definitley not do that then. I lost my DRM on unlocking the bootloader.
However can I use this thread to restore functionality AFTER installing this ROM?

diazlol said:
Ok so I'll definitley not do that then. I lost my DRM on unlocking the bootloader.
However can I use this thread to restore functionality AFTER installing this ROM?
Click to expand...
Click to collapse
Did you backed up your TA before unlocking?

TheTeslaCoil said:
Did you backed up your TA before unlocking?
Click to expand...
Click to collapse
When I bought the phone?
No

if you did not backup the TA partition BEFORE unlocking the bootloader then you have lost your drm keys forever

[Q] Locking bootloader

How Has anyone of you have any idea how to lock the bootloader on E3?

help3r said:
How Has anyone of you have any idea how to lock the bootloader on E3?
Click to expand...
Click to collapse
If you had made a backup of DRM keys before you unlocked, you can restore them and lock your bootloader.
If you hadn't done it, bad luck, they're lost, DRM keys are device specific and you can't restore them from another device.

I do not have a backup, made DRM keys, but do not want to restore them. I just wanted to lock the bootloader (factory Uploader software) because it resells the phone.

help3r said:
I do not have a backup, made DRM keys, but do not want to restore them. I just wanted to lock the bootloader (factory Uploader software) because it resells the phone.
Click to expand...
Click to collapse
They dont check the bootloader. I have sold many phones which were unlocked and rooted.

Yes, do not check, but if you need to give your phone under warranty then check if the bootloader is unlocked.

I ve backup my TA partition....then wanna restore...
but confused that which step is 1st Relock or restore..

So I have to do that without partition backup TA does not block the bootloader?

I repeat the question. Is it possible to lock the bootloader back without having done a backup TA?

help3r said:
I repeat the question. Is it possible to lock the bootloader back without having done a backup TA?
Click to expand...
Click to collapse
no

Help with Bacup TA > UL > Root > Unroot > ReLock BL/Restore TA

Hi all,
So I read people are now able to backup TA partition (DRM Keys) before Unlocking the Bootloader.
Keep in mind my aim for instance here is to install BBS (Better Battery Stats app) onto the system partition for full battery stats.
Now my question is can the below tasks be achieved in this order.:
1. Downgrade to an exploitable Firmware (MM?)
2. Backup TA partition
3. UL BL (Unlock Bootloader)
4. Root device
5. Install BetterBatteryStats onto System partition.
6. Unroot device
8. L BL (Lock Bootloader)
9. Restore TA partition.
And where in this list would be best to upgrade to Nougat.
I believe I achieved something similar on my z5c, but it's been a while now since I've wanted to root. But given the recent TA exploits I'm thinking it's time to geek again.
I believe if we can define the above process explicitly, many people would be happy.
As much information, direction, insight, instructions on all of the points above would be greatly appreciated by and for my.fellow XZ'ers :fingers-crossed:

I'm also curious on how to unlock, root and restore
I know it was possible to be rooted with locked bootloader on Z3 but have not seen how to on the XZ yet

Sonic Dash said:
I'm also curious on how to unlock, root and restore
I know it was possible to be rooted with locked bootloader on Z3 but have not seen how to on the XZ yet
Click to expand...
Click to collapse
Its not possible to have root on a locked bootloader on the XZ.
dillalade said:
Hi all,
Keep in mind my aim for instance here is to install BBS (Better Battery Stats app) onto the system partition for full battery stats.
And where in this list would be best to upgrade to Nougat.
Click to expand...
Click to collapse
Try this
Downgrade to MM
Backup TA
Upgrade to Nougat
Unlock bootloader and root
Install BBS
Remove root and relock bootloader
I have no guarantee it will work though and the DM-verity would probably lead to a bootloop or a non booting device. Be sure you know how to get out of this before you proceed.

gregbradley said:
Its not possible to have root on a locked bootloader on the XZ.
Click to expand...
Click to collapse
What's the reason for this?
Doesn't the Z3 have similar protection as the XZ?

Sonic Dash said:
What's the reason for this?
Doesn't the Z3 have similar protection as the XZ?
Click to expand...
Click to collapse
No, the XZ has verified boot security (DM-verity). The bootloader will not allow a non signed kernel to boot. Stock kernels will not allow a modified system to boot. Hence you need to unlock the boot for the phone to boot if you change the system partition by just one bit....

gregbradley said:
No, the XZ has verified boot security (DM-verity). The bootloader will not allow a non signed kernel to boot. Stock kernels will not allow a modified system to boot. Hence you need to unlock the boot for the phone to boot if you change the system partition by just one bit....
Click to expand...
Click to collapse
Okay that makes sense, so with it being unlocked is there any way to hide the device unlocked screen at boot?
Im sure I also have seen talks about DRM keys being flashed in and being possible to use with unlocked bootloaderers did anything ever come of that?

Sonic Dash said:
Okay that makes sense, so with it being unlocked is there any way to hide the device unlocked screen at boot?
Im sure I also have seen talks about DRM keys being flashed in and being possible to use with unlocked bootloaderers did anything ever come of that?
Click to expand...
Click to collapse
I do not know any way of hiding the screen. Also, the DRM fix that is used with an unlocked bootlader is not a full restore of the keys. DRM functionality is restores and to my knowledge it is not 100% the same as restoring the TA partition fully.

gregbradley said:
I do not know any way of hiding the screen. Also, the DRM fix that is used with an unlocked bootlader is not a full restore of the keys. DRM functionality is restores and to my knowledge it is not 100% the same as restoring the TA partition fully.
Click to expand...
Click to collapse
After some research it seems like this warning is stored in the logo.
I found a post from a few months back with a guide on how to remove it for the Moto G4
Maybe its the same for our XZ?

Sonic Dash said:
After some research it seems like this warning is stored in the logo.
I found a post from a few months back with a guide on how to remove it for the Moto G4
Maybe its the same for our XZ?
Click to expand...
Click to collapse
Yes, this can be changed in the kernel from what I remember.

gregbradley said:
Its not possible to have root on a locked bootloader on the XZ.
Try thisDowngrade to MM
Upgrade to Nougat
Install BBS
Remove root and relock bootloader
I have no guarantee it will work though and the DM-verity would probably lead to a bootloop or a non booting device. Be sure you know how to get out of this before you proceed.
Click to expand...
Click to collapse
Not sure I follow your procedure, seems redundant, I assume you've missed out a few steps there by accident.
But thanks anyway.
However, if the DM verity you mention does what it should then I guess by editing the system partition as I proposed and then relocking would cause a bootloop.
I hope there is a way and perhaps others can share more insight.

dillalade said:
Not sure I follow your procedure, seems redundant, I assume you've missed out a few steps there by accident.
But thanks anyway.
However, if the DM verity you mention does what it should then I guess by editing the system partition as I proposed and then relocking would cause a bootloop.
I hope there is a way and perhaps others can share more insight.
Click to expand...
Click to collapse
Your quote has missed some of the steps I mentioned...
•Downgrade to MM
•Backup TA
•Upgrade to Nougat
•Unlock bootloader and root
•Install BBS
•Remove root and relock bootloader
But yes, I presume a bootloop will result from it

dillalade said:
Hi all,
So I read people are now able to backup TA partition (DRM Keys) before Unlocking the Bootloader.
Keep in mind my aim for instance here is to install BBS (Better Battery Stats app) onto the system partition for full battery stats.
Now my question is can the below tasks be achieved in this order.:
1. Downgrade to an exploitable Firmware (MM?)
2. Backup TA partition
3. UL BL (Unlock Bootloader)
4. Root device
5. Install BetterBatteryStats onto System partition.
6. Unroot device
8. L BL (Lock Bootloader)
9. Restore TA partition.
And where in this list would be best to upgrade to Nougat.
I believe I achieved something similar on my z5c, but it's been a while now since I've wanted to root. But given the recent TA exploits I'm thinking it's time to geek again.
I believe if we can define the above process explicitly, many people would be happy.
As much information, direction, insight, instructions on all of the points above would be greatly appreciated by and for my.fellow XZ'ers :fingers-crossed:
Click to expand...
Click to collapse
It won't work! As @gregbradley said, dm-verity does not allow unsigned partitions (eg modified /system) to be loaded, and the procedure you wanna try will result in a bootloop for sure!
Now that we have a specific tool to perform backup of TA partition, "safe" root came true. So why not to do that?
You can always restore your original TA.img and flash full stock firmware, which will give you a locked device like the never-unlocked one!
Anyway... try it at your own risk!

gregbradley said:
Yes, this can be changed in the kernel from what I remember.
Click to expand...
Click to collapse
So who would be best to contact in regards to making this? @AndroPlus perhaps?

How to convert ta.img to file ta.zip flash twrp

s-6182 said:
How to convert ta.img to file ta.zip flash twrp
Click to expand...
Click to collapse
Just realised, you won't need to convert anything!
In TWRP, select - Install Image (under Install button on the home menu) and locate the TA.img from there.
Apparently, you might not need to flash stock firmware afterwards, but I would do that if I were you just to make sure everything works cleanly!

gregbradley said:
No, the XZ has verified boot security (DM-verity). The bootloader will not allow a non signed kernel to boot. Stock kernels will not allow a modified system to boot. Hence you need to unlock the boot for the phone to boot if you change the system partition by just one bit....
Click to expand...
Click to collapse
Why did Sony do that?
I just dont want to see ads in games and apps.
For these, root was enough. At least my old Z3 phone.
I do not want to open the unlock bootloader, because the device may have serious performance degradation especially on the camera, right?!
Is it possible in the near future to make root without unlock bootloader ?
P.S.: If I knew that, I would not buy XZ.

please stop the discussion on SONY's security measures here
FerhaDo said:
I do not want to open the unlock bootloader, because the device may have serious performance degradation especially on the camera, right?!
Is it possible in the near future to make root without unlock bootloader ?
Click to expand...
Click to collapse
This has been beaten to death in the post Z3 devices fora.
You can read A LOT about in e.g. the Z5 section.
Authorative Guide:
http://forum.xda-developers.com/crossdevice-dev/sony/noob-guide-to-sony-ericsson-xperia-t3209012

How do I revert back to stock and lock bl?

Will be selling my phone shortly and need to flash it back to a stock rom (UK) and lock the boot loader, I am getting a bit lost searching around trying to find the right files to flash with as from what I gather it has to be a UK stock file? I would also like to relock the bootloader / unroot so it's ready for sale.
Hope someone can help, thank you.

ryant71 said:
Will be selling my phone shortly and need to flash it back to a stock rom (UK) and lock the boot loader, I am getting a bit lost searching around trying to find the right files to flash with as from what I gather it has to be a UK stock file? I would also like to relock the bootloader / unroot so it's ready for sale.
Hope someone can help, thank you.
Click to expand...
Click to collapse
If you took a backup of your TA partition you just need to flash that back in order to relock the bootloader and restore your DRM keys.. If you didn't take a TA backup then you cannot restore your DRM keys anyway.
You can flash any FTF to go back to stock as all FTFs are stock, just from different regions and carriers. If you are from the UK then flash any UK FTF. Use flashtool to download the FTF and flash it.

gregbradley said:
If you took a backup of your TA partition you just need to flash that back in order to relock the bootloader and restore your DRM keys.. If you didn't take a TA backup then you cannot restore your DRM keys anyway.
You can flash any FTF to go back to stock as all FTFs are stock, just from different regions and carriers. If you are from the UK then flash any UK FTF. Use flashtool to download the FTF and flash it.
Click to expand...
Click to collapse
Thanks for the help, I don't believe I did do a backup so does that mean there is no way of getting rid of the message when the phone boots up?

ryant71 said:
Thanks for the help, I don't believe I did do a backup so does that mean there is no way of getting rid of the message when the phone boots up?
Click to expand...
Click to collapse
You can do it using flashtool. The warning will probably go (I have not done so cannot confirm) However, relocking the bootloader without the TA partition will not restore any of the DRM functionality you lost when unlocking the bootloader, and regained by flashing the DRM fix (which can only be used on an unlocked device). Therefore, if you sold me the device without telling me you had wiped the DRM keys I would be pretty annoyed and would come looking for you if you tried to charge me anything near the going rate.
I would leave it unlocked and advertise it as such.
Greg

If you use flashtool to relock your bootloader the message does go away I've done it before and can confirm that it does.

But you won't be able to patch DRM. Better stay unlocked and flash a patched kernel.