[GUIDE][TOOL][ROOT]Cubot Note Plus (MTK6737T) Root with Magisk V0.3 - Android General

!!! YOUR WARRANTY IS NOW VOID !!!​
THIS TOOL IS FOR CUBOT NOTE PLUS ONLY.
neither I nor the XDA Forum is responsible for your phone brick or your cat triggers an atomic apocalypse. YOU has been responsible for your phone and you are doing everything at your own risk.​
This is a tool for rooting the CUBOT NOTE PLUS ONLY.
NOTE: THIS TOOL IS IN ALPHA STAGE
RoCuNo+_v0.3 is online.
Downloads see post 2
This tool can root your Cubot Note Plus and patch your boot.img for working with Magisk.
this tool can make this in seperate steps or All-In-One. For now the bootloader must stay UNLOCKED for root to work.
A guide to doing this by yourself with adb is also in this post.
NOTE: ALL YOUR DATA GET LOST. SAVE YOUR IMPORTANT DATA FIRST. (Videos, Pictures, Music and all you can save.)
What this tool can do:
Unlock/Relock your Bootloader
Root/Unroot your Cubot Note Plus (Unroot dont work for now)
[*]Make a Dump of your Boot Partition as boot.img
Install MagiskManager-v5.4.3 and Magisk-v14.0
Please download the attached zip and unzip it somewhere and rightclick on RoCuNo+_V*.bat and start as Administrator.
Read all carefully and choose your option. Follow the instructions on screen STEP BY STEP!!!
Better way is to choose the AIO because that makes all for you except a few steps.
Downloads see post 2
GUIDE
OEM UNLOCK + ROOT + MAGISKMANAGER APP
01. make sure you have installed ADB drivers
02. enable "Developer Options" Menu ("Menu --> Settings --> About Phone" tap "Built Number" 7 times.)
03. enable "USB DEBUGGING" and "OEM UNLOCKING" (Go to "Menu --> Settings --> Developer Options")
04. enable "UNKNOWN SOURCES" in "Menu --> Settings --> Security"
05. connect USB cable to PHONE and then connect to PC
06. make sure all Drivers are installed.
07. go in RoCuNo+ Directory on PC
08. press Shift + Right Mouse Click
09. Open Command Prompt here
10. type
Code:
adb reboot-bootloader
11. type [ODE]fastboot oem unlock[/CODE]NOTE: ALL YOUR DATA WILL BE DELETED
12. press VOL+ Button on phone to oem unlock
13. type
Code:
fastboot flash boot patched_boot.img
14. type
Code:
fastboot reboot
15. if you have unlocked your bootloader, make your setup
16. enable "Developer Options" Menu ("Menu --> Settings --> About Phone" tap "Built Number" 7 times.)
17. enable "USB DEBUGGING" (Go to "Menu --> Settings --> Developer Options")
18. type
Code:
adb install -r -d -g MagiskManager-v*.*.*.apk (set the Version numbers for *)
OEM LOCK
01. make sure you have installed ADB drivers
02. enable "Developer Options" Menu ("Menu --> Settings --> About Phone" tap "Built Number" 7 times.)
03. enable "USB DEBUGGING" and "OEM UNLOCKING" (Go to "Menu --> Settings --> Developer Options")
04. enable "UNKNOWN SOURCES" in "Menu --> Settings --> Security"
05. connect USB cable to PHONE and then connect to PC
06. make sure all Drivers are installed.
07. go in RoCuNo+ Directory on PC
08. press Shift + Right Mouse Click
09. Open Command Prompt here
10. type "adb reboot-bootloader"
11. type "fastboot oem lock"
12. press VOL+ Button on phone to oem lock
13. type "fastboot reboot"
UNROOT
01. make sure you have installed ADB drivers
02. enable "Developer Options" Menu ("Menu --> Settings --> About Phone" tap "Built Number" 7 times.)
03. enable "USB DEBUGGING" and "OEM UNLOCKING" (Go to "Menu --> Settings --> Developer Options")
04. enable "UNKNOWN SOURCES" in "Menu --> Settings --> Security"
05. connect USB cable to PHONE and then connect to PC
06. make sure all Drivers are installed.
07. Download SP Flashtool and Firmware for Cubot Note Plus
08. Start SP Flashtool and choose the MT6737T_Android_scatter.txt from the Cubot Note Plus Firmware Folder.
09. Turn off the Cubot Note Plus.
10. Click on Downloadbutton and connect the Cubot Note Plus to PC.
NOTE: ALL YOUR DATA WILL BE ERASED. MAKE A BACKUP IF YOU NEED.
11. After Flashing is complete, reboot Phone.
Old Guide
Save your data.
Connect your phone to PC and make sure all drivers are installed. (Boot up to normal system, recovery and fastboot to get sure.)
Open a CMD Prompt on your PC and switch to Directory where you have unzipped the RoCuNo+. (e.g. C:\Users\YourName\Desktop\RoCuNo+ or You can go to RoCuNo+ folder and Shift+Rightclick on empty space and click "open Command Prompt here".)
Type:
Code:
adb reboot-bootloader
Than:
Code:
fastboot oem unlock
NOTE: ALL YOUR DATA WILL BE DELETED
Press VOL+ on Phone if asked
wait for device for unlock
Type:
Code:
fastboot reboot
Setup your phone until you come to system.
Enable "Developer Options" Menu. Go to Menu --> Settings --> About Phone and tap Built Number 7 times until a message appears that you are now an Developer.
Enable USB DEBUGGING and OEM UNLOCKING in Menu --> Settings --> Developer Options.
Enable UNKNOWN SOURCES in Menu --> Settings --> Security
Copy MTK-Engineering-Mode.apk and MagiskManager-v5.4.0.apk on your and install this to apps.
open the MTK-Engineering-Mode app tap on MTK Settings and swipe to Log and Debugging.
Tap on User2Root and than the Root button.
NOTE: UNPLUG AND RECONNECT YOUR PHONE. DONT CLOSE THIS APP OR DO SOMETHING ON THE PHONE. YOU LOSE YOUR ROOT IF YOU DO SOMETHING.
Go back to CMD Prompt on PC and type:
Code:
adb root
adb shell dd if=/dev/block/mmcblk07p of=/sdcard/boot.img
Now open MagiskManager app and tap the Install button.
Choose to inject in boot.img
Point Magisk to the boot.img.
after Magisk has succssesfully patched the boot.img it will copy it to /sdcard/MagiskManager/patched_boot.img.
Copy your boot.img from sdcard AND the patched_boot.img from sdcard/MagiskManager to the RoCuNo+ folder on your PC.
Go to CMD Prompt and type:
Code:
adb reboot-bootloader
than type:
Code:
fastboot flash boot patched_boot.img
when flashing is ready, type:
Code:
fastboot reboot.
on phone go to MagiskManager app and check if Magisk and Root are on green state.
You succssesfully have rooted your Cube Note Plus.
Take care of the boot.img and the patche_boot.img in case we need them on some day.
DONT RELOCK YOUR PHONE BECAUSE YOU CANT WRITE ON /SYSTEM PARTITION WITH LOCKED BOOTLOADER. (for now.)
I hope that helps many people with his/her phone and maybe someone can make TWRP or a Custom Rom for our phone. Now the Door is Open.
if someone found better solution for some tasks here please let us know.
Changelog
RoCuNo+ v0.3
Delet the Unroot Section because it doesent work for now.
update Magisk Manager App to 5.4.3.
Update Guide.
Update patched_boot.img.
RoCuNo+ v0.2
complete rework.
all should now work.
now the original verified-boot.img from Cubot is implemented. so root and unroot works now.
ive patched the original verified-bood.img with magisk so no boot.img dump has to be made.
the tool now detects what state you are and boots the state needed for his job.
only magisk manager app has to be installed on device and the tool do this for you.
the tool detects if you are already oem unlocked or not. so if you already unlocked you dont
need to do that again. it also detects in witch state your phone and boots the right mode.
Credits to XDA-Developer Schwester_Gabi (https://forum.xda-developers.com/member.php?u=5264039) and the Flampinko.IT Team ([email protected])
you can use this tool on your own risk but its not allowed to share this tool in other forums or blogs or something. but you can write about this tool and link
than over to the XDA-Developer Forum under (https://forum.xda-developers.com/android/general/guide-cubot-note-plus-mtk6737t-root-t3695272)
it is also not allowed to copy the code or change anything in this programm. Only Schwester_Gabi or the Flampinko.IT Team is allowed to change the code.
If you have any Ideas to implement in this tool than post it over to XDA-Developers Forum (https://forum.xda-developers.com/android/general/guide-cubot-note-plus-mtk6737t-root-t3695272)
or send us an Email ([email protected]). If you like our work please make a donation to help us.
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=ZXVV3MZX2NVK6
please respect the developers work and stick to the rules.
Credits and special thanks to:
topjohnwu for the awesome Magisk
themonsterit for MTK-Engineering-Mode App
Schwester_Gabi for finding the way and coding the RoCuNo+ programm
all the people who write solutions for problems that i read to find the way too root.
XDA-Developer Team to giving us such a great Platform to share our stuff with the world.

Cubot Note Plus Stock Rom:
V8:
Mirror 1
V7:
Mirror 1 / Mirror 2
SP Flash Tool for Cubot Note Plus Stock Rom:
Mirror 1 / Mirror 2
Cubot Note Plus Stock Scatter File for flashing:
Mirror 1 / Mirror 2
RoCuNo+_v0.1(Alpha):
Mirror 1 / Mirror 2
RoCuNo+_v0.2:
Mirror 1 / Mirror 2
RoCuNo+_v0.3:
Mirror 1

Problems:
i got some problems with dumping boot.img. the partiton size is 16M and the dd dump is also 16M but if i try to flash it back fastboot says the file is to large for partition. thats why unroot doesent work for now. Magisk patch the boot.img and resize them to 8M. than flashing works fine and all works. if someone can point me in the right direction would be very nice. if you have some questions please write here or pm me.
if someone can make a scatter file for this phone or had the scatter file it would be nice to share so we can try to backup the phone with SP Flash Tool. thanks.
if you found some bugs please tell it here so i can fix it.

Nice

Thanks for this great work, worked flawlessly. Just wondered, now we've got this root, is there any custom recovery we can install for it? (I realise many things will be available through Magisk's modules already, but still just wondered.)

Matthius said:
Thanks for this great work, worked flawlessly. Just wondered, now we've got this root, is there any custom recovery we can install for it? (I realise many things will be available through Magisk's modules already, but still just wondered.)
Click to expand...
Click to collapse
not now. i hope that someone can make an TWRP or CWM for the Cubot and share it with us.

Matthius said:
Thanks for this great work, worked flawlessly. Just wondered, now we've got this root, is there any custom recovery we can install for it? (I realise many things will be available through Magisk's modules already, but still just wondered.)
Click to expand...
Click to collapse
did you use the RoCuNo+ Programm or have you done all by yourself ? what do you use ? step by step or the AIO routine ?

Schwester_Gabi said:
did you use the RoCuNo+ Programm or have you done all by yourself ? what do you use ? step by step or the AIO routine ?
Click to expand...
Click to collapse
I had already unlocked the bootloader myself prior to this, looking for a way to root it before I saw this article (I gather this is the first available root method for this device), and also manually installed MagiskManager and the MTK-Engineering-Mode apk's and from then on I used the ruCuNo+ bat to complete it.
I followed stage 6, then 7, then 3. Pointed the Magisk to the original boot img, got it patched, sent it to PC and flashed the boot image with ADB. After turning on the phone, Magisk ended up with two green ticks so everything was good to go.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Matthius said:
I had already unlocked the bootloader myself prior to this, looking for a way to root it before I saw this article (I gather this is the first available root method for this device),
Click to expand...
Click to collapse
yes it is. i searched over a week to find a root solution but nothing found. so i make it by my self and want to share this with the world :highfive:
Matthius said:
and also manually installed MagiskManager and the MTK-Engineering-Mode apk's and from then on I used the ruCuNo+ bat to complete it. I followed stage 6, then 7, then 3. Pointed the Magisk to the original boot img, got it patched, sent it to PC and flashed the boot image with ADB. After turning on the phone, Magisk ended up with two green ticks so everything was good to go.
Click to expand...
Click to collapse
thats also a way :good: maybe i implement this for users who already unlockt the bootloader. then the the phone must not be factory reset again. :good: thanks for telling me this way i dont think of bevor

Schwester_Gabi said:
yes it is. i searched over a week to find a root solution but nothing found. so i make it by my self and want to share this with the world :highfive:
thats also a way :good: maybe i implement this for users who already unlockt the bootloader. then the the phone must not be factory reset again. :good: thanks for telling me this way i dont think of bevor
Click to expand...
Click to collapse
No worries, great work - hopefully, we may see some custom recovery to come in the future from someone. Wish this phone actually had its own page on XDA, but I doubt it has enough widespread support for that, who knows.

Matthius said:
No worries, great work - hopefully, we may see some custom recovery to come in the future from someone. Wish this phone actually had its own page on XDA, but I doubt it has enough widespread support for that, who knows.
Click to expand...
Click to collapse
Yes. custom recovery for the phone would be great. if I knew better, I would make one myself. but I've read a lot. maybe I'll try it in future to make one.
i think this phone dont get his own page. but maybe the Cubot vendor get his own where we can put all related Cubot threads together in his own sub section. :good:

i got a error after "fastboot oem unlock" -> "FAILED (remote:Unlock operation is not allowed)". i think, bootloader is not unlocked, what can i do?
oops: had forget "OEM UNLOCKING in DevMenu"

spunky1a said:
i got a error after "fastboot oem unlock" -> "FAILED (remote:Unlock operation is not allowed)". i think, bootloader is not unlocked, what can i do?
oops: had forget "OEM UNLOCKING in DevMenu"
Click to expand...
Click to collapse
yes. that was the point. :good:

I think the sequence in the Guide is a bit wrong. In the Guide I read:
Schwester_Gabi said:
...
Type:
Code:
adb reboot-bootloader
Than:
Code:
fastboot oem unlock
NOTE: ALL YOUR DATA WILL BE DELETED Press VOL+ on Phone if asked wait for device for unlock...
... (this comes now after)
Enable USB DEBUGGING and OEM UNLOCKING in Menu --> Settings --> Developer Options
...
Click to expand...
Click to collapse
If I follow this I get (in very small fonts) as another user here in this thread:
Unlock failed...return to fastboot in 3s
Click to expand...
Click to collapse
And no unlock of the bootloader seems possible.
Because first I need to do OEM UNLOCKING in the Dev. Options, which seems very clear. Only after I can fastboot oem unlock
What I further not quite understand in this post, is it either the Guide or the Batchfile I have to follow? Or is it a mixture of both what I need to do?
As I think the Batchfile cannot enable the Developer Tools in the System, or?
Lastly and most important: on my phone I don't see a mmcblk07p only a mmcblk0p7, so this throws an error:
Schwester_Gabi said:
...
adb shell dd if=/dev/block/mmcblk07p of=/sdcard/boot.img
...
Click to expand...
Click to collapse
I guess that mmcblk0p7 is ment, so I did a dd with mmcblk0p7, and I let patch this file with Magisk to the file: patched_boot.img
But here I am very not sure and if I flash now a wrong img-file with this:
Schwester_Gabi said:
...
fastboot flash boot patched_boot.img
...
Click to expand...
Click to collapse
I strongly guess that is it with my new phone
So could you please confirm that it was just a typo in the first post here?
How can I know which of these files in /dev/block is the boot.img?
Thank!!!

francwalter said:
I think the sequence in the Guide is a bit wrong. In the Guide I read:
...
Type: Than:
If I follow this I get (in very small fonts) as another user here in this thread:
And no unlock of the bootloader seems possible.
Because first I need to do OEM UNLOCKING in the Dev. Options, which seems very clear. Only after I can fastboot oem unlock
Click to expand...
Click to collapse
For this Problem the batch says first enable dev options and OEM unlock and than go to next step.
francwalter said:
What I further not quite understand in this post, is it either the Guide or the Batchfile I have to follow? Or is it a mixture of both what I need to do?
As I think the Batchfile cannot enable the Developer Tools in the System, or?
Lastly and most important: on my phone I don't see a mmcblk07p only a mmcblk0p7, so this throws an error:
I guess that mmcblk0p7 is ment, so I did a dd with mmcblk0p7, and I let patch this file with Magisk to the file: patched_boot.img
But here I am very not sure and if I flash now a wrong img-file with this:
I strongly guess that is it with my new phone
So could you pleas confirm that it was just a typo in the first post here?
How can I know which of these files in /dev/block is the boot.img?
Thank!!!
Click to expand...
Click to collapse
Yes. Its a typo. You can flash it.
Btw i am on the way to rework the whole Programm for better use and better instructions. Give me some time because iam very busy at the moment. But I will update it soon.
And remember its an 0.1ALPHA for now. So its not perfect :angel:

Oh Great! It works
Thank a lot for your work!!!

As a noob, I did not get what to do after installing the Magisk manager. So I have it installed, but it shows no root. How can I then install the root?
I used the "RoCuNo+_v0.2.bat" in admin mode and although I got through the unlock and root, I am stuck on what to do on Magisk in the phone.
I was able to root my galaxy tab, but perhaps I am too noob for these instructions?
(Btw while booting I get the "this phone is unlocked and cannot be trusted" text)

Ran into a bit of an issue here, I received an official OTA so I uninstalled Magisk by clicking uninstall within the APK, now my phone is stuck on the boot logo. I've tried to flash the original boot img, but I can't get into the system to confirm flashing it on the device. It displays under <adb devices> but when issuing the <fastboot flash boot> command it says <waiting for any device> and nothing occurs.
Not sure how to proceed without wiping the whole thing. Anything I can try?

So I did a factory reset and used the "RoCuNo+_v0.2.bat" again as follows:
First enabled developer mode, USB Debugging unknown sources, OEM unlock
Then ran the tool:
1 - unlock bootloader - success
3 - root - success
5 - install magisk - here the phone first boots, then it erases data, then does again all the "setup your phone, wifi, accounts etc"
"Orange state - this device is unlocked..." appears in the boot
Magisk is not installed in the apps.
OEM unlock is greyed out (but enabled)
So the tool worked differently, or I am missing something.
Perhaps there are new versions of this phone?

...aaaand it's rooted.
I did everything again using the adb -command instructions.
So did not use the .bat tool.
Used the step-by-step instructions.
Thanks a lot! Finally I can use macrodroid properly.

Related

[GUIDE] Unlock/Root/Flash for Moto X Style/Pure

[SIZE=+3]Heisenberg's How-To Guide For Beginners[/SIZE]
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
[SIZE=+2]Moto X Pure[/SIZE]​
[SIZE=+1]Intro[/SIZE]
This thread will serve as a location for basic how-to guides for the Moto X Pure. I'm going to start off with a couple of the more obvious ones and go from there. If anyone has any suggestions for additions please feel free to let me know.
[size=+1]Prerequisites[/size]:
You'll need a working adb/fastboot environment on your PC to get through some of these guides. Go here to download the Android SDK, which will give you most updated version of adb and fastboot. Scroll to the bottom of the page and find Other Download Options>SDK Tools Only, and grab the right version for your OS. While it's downloading create a folder in C:\ called SDK (C:\SDK). Once you've downloaded the zip you can extract it into your C:\SDK folder. Navigate to C:\SDK\android-sdk-windows and open SDK Manager.exe. In SDK Manager you need to install the following packages:
Tools> Android SDK Tools, Android SDK Platform-tools
Extras> Android Support Library
Once you have installed those, inside C:\SDK you should see some new folders, one of them will be called platform-tools, within that folder you should see fastboot.exe and adb.exe. I'll refer to this as your fastboot folder/directory or working folder/directory during this guide. To make sure adb is correctly installed, open a command prompt from within your fastboot folder (hold shift + right click, select open command prompt here) and issue this command:
Code:
adb version
If it returns a version number for Android Debug Bridge then you're good to go.
You'll find Motorla drivers here, download it and install, then reboot your PC.
You can test adb by connecting your device to your PC while booted into Android (making sure that adb/usb debugging is enabled in Settings>Developer Options) with the screen unlocked and issuing this command:
Code:
adb devices
It should return your device serial number, if so, adb is working.
You can test fastboot by connecting your device to your PC while booted into fastboot mode (power + volume down) and issuing this command:
Code:
fastboot devices
It should return your device serial number, if so, fastboot is working.
By attempting any of the processes listed this thread you accept full responsibility for your actions. I will not be held responsible if your device stops working, catches on fire, or turns into a hipster and claims to have been modified before it was cool.
[SIZE=+1]Index[/SIZE]
How To Unlock Your Bootloader
How To Install A Custom Recovery On Your Device
How To Make A Nandroid Backup With TWRP Recovery
How To Root Your Stock Rom
How To Install A ROM with TWRP Recovery
How To Install A Custom Kernel With TWRP Recovery
How To Make Sure You Can Pretty Much Always Recover From An Accidentally Wiped System
[SIZE=+1]1. How To Unlock Your Bootloader[/SIZE]
Go into About Phone in Settings, click on Build Number 7 or 8 times until it says you have enabled Developer Options. Go back to Settings and enter the newly opened Developer Options section, scroll and click on the Enable OEM Unlock option.
Power off your phone then boot into fastboot mode (power + volume down).
Connect your phone to your PC via usb cable.
Open a command prompt from within your fastboot folder (navigate to where you have fastboot.exe located on your PC, shift + right click anywhere within that folder, select open command prompt here).
Check your fastboot connection by issuing this command:
Code:
fastboot devices
It should return your device serial number, if not you need to make sure your drivers are installed correctly.​
Once you've confirmed your fastboot connection issue this command:
Code:
fastboot oem get_unlock_data
It should return something like this:
Code:
(bootloader) 0A40040192024205#4C4D3556313230
(bootloader) 30373731363031303332323239#BD00
(bootloader) 8A672BA4746C2CE02328A2AC0C39F95
(bootloader) 1A3E5#1F53280002000000000000000
(bootloader) 0000000
Copy that code (with no spaces between the characters) and paste it somewhere for safekeeping, you'll use it in a minute.
Go to the Motorola bootloader unlocking page. You'll need to create an account with Motorola if you don't already have one. Once you're signed in you can scroll down to step 6 and paste the above code into the text field and hit the “can my device be unlocked” button.
Read the terms and conditions and accept them if you agree (you can't continue unless you accept).
Click the “request unlock key” button and an email with your unlock token will be sent to the email account that you signed up with.
Once you have retrieved the token from the email you can use it within the following command to unlock your bootloader:
Code:
fastboot oem unlock xxxxxxxxxx
(Replace the xxxxxxxx with your unique unlock token)​
Your bootloader is now unlocked!
Reboot with this command:
Code:
fastboot reboot
It's now safe to disconnect your usb cable.
Please note: this will erase all user data from your device, it is best to do this before you really start using the device and installing apps or putting data on the internal storage
[SIZE=+1]2. How To Install A Custom Recovery On Your Device[/SIZE]
Prerequisites: unlocked bootloader.
Download the recovery of your choice, here's TWRP.
Make sure you check the md5 to verify its integrity (where possible).
Place the file in your fastboot folder (this is where fastboot.exe is located on your PC).
Put the phone in fastboot mode and connect it to your PC via usb cable.
Open a command prompt from within your fastboot folder (shift + right click, select open command prompt here), and enter the following commands:
Code:
fastboot flash recovery <filename>.img
(Replace <filename> with the actual filename of the recovery, the recovery filename in the command will change depending on which recovery you're flashing)
Wait for the recovery to flash, it'll only take a few seconds, you'll get a finished message in your command prompt window once it's done.
It's now safe to disconnect your usb cable.
Don't reboot the phone normally, use the volume buttons to highlight recovery and press the power button to select it. This will stop the stock OS from patching it with the stock recovery in boot. Once you've booted into TWRP like this once, you can reboot normally.
[SIZE=+1]3. How To Make A Nandroid Backup With TWRP Recovery[/SIZE]
Prerequisites: unlocked bootloader, TWRP recovery.
A nandroid backup is a very important thing to have before installing any custom software on your device. It's basically a backup of your stock system that you can fall back on if anything goes wrong or if you just want your stock ROM back. You can also use the backup tool to create a backup of your favourite ROM set up exactly the way you like it. The backup you create can be easily restored using the restore tool in TWRP recovery.
All you need to do is enter TWRP recovery, select the backup option from the TWRP home screen, check the system/data/boot boxes, and swipe to backup. The process will take a few minutes.
[SIZE=+1]4. How To Root Your Stock Rom[/SIZE]
Prerequisites: unlocked bootloader, TWRP recovery.
Please note: this method is only valid for Lollipop, do not use this method on Marshmallow. You can find a systemless root method for Marshmallow here, big thanks to @ivcarlos!
Download SuperSU to your phone.
Boot into TWRP recovery.
Select the install option from the TWRP home screen.
Navigate to where you have SuperSU stored on your sd card and select it.
Swipe to install.
Once you've installed SuperSU you'll have an option to wipe cache/dalvik and an option to reboot system. Wipe the cache/dalvik, hit the back button, and hit the reboot system button. That's it.
[SIZE=+1]5. How To Install A ROM with TWRP Recovery[/SIZE]
Prerequisites: unlocked bootloader, TWRP recovery.
Installing a ROM is a pretty straight forward and easy process. Before you install anything you should make a nandroid backup (instructions above).
Download a ROM and appropriate Gapps package and place on your device.
Boot into your custom recovery.
Perform a full wipe.
Select the wipe option from the TWRP home screen.
Select advanced wipe.
Check the system, data, cache, and dalvik cache options.
Swipe to wipe.
Install the ROM.
Select the install option from the TWRP home screen.
Navigate to where you have the ROM zip stored on your sd card and select it.
Swipe to install.
Most ROMs will run an installer script at this point but some ROMs have what is called an Aroma Installer which allow you to choose some install options before the script runs.​
You will also need to install the appropriate gapps package directly after installing the ROM.
Once you've installed all necessary zips you'll have an option to wipe cache/dalvik and an option to reboot system. Wipe the cache/dalvik, hit the back button, and hit the reboot system button.
[SIZE=+1]6. How To Install A Custom Kernel With TWRP Recovery[/SIZE]
Prerequisites: unlocked bootloader, TWRP recovery.
A custom kernel can open up a new level of control over your device, such as overclocking/underclocking, undervolting, changing governors, changing I/O schedulers, adjusting colour calibrations, adjusting sound calibrations, and many other options.
Download a kernel that is compatible with your current ROM.
Check the md5 to verify its integrity.
Enter TWRP recovery.
Select the install option from the TWRP home screen.
Navigate to the kernel and select it.
Swipe to install.
You'll have an option to wipe cache/dalvik and an option to reboot system. Wipe the cache/dalvik, hit the back button, and hit the reboot system button.
Once your phone has booted up you can use a kernel tuning app to change governors, I/O scheduler, clock speed, and other options. Some of the popular kernel apps are Kernel Auditor, Trickster Mod, No Frills, Kernel Tuner, and many more.
[SIZE=+1]7. How To Make Sure You Can Pretty Much Always Recover From An Accidentally Wiped System[/SIZE]
Prerequisites: unlocked bootloader, TWRP recovery.
There may come a time when you accidentally wipe your OS while trying to perform a basic cache wipe in recovery. Don't laugh, it can happen to the best of us. The best way to insure yourself against being stuck in recovery is to keep a ROM zip or a TWRP/CWM backup (a nandroid backup) on your sd card at all times.
This solution seems like common sense but apparently there are quite a few people out there who don't store a ROM or backup on their phone. You might think it's easy to just mount the OTG storage and copy a ROM across to your phone from your PC (which is definitely an option), but there's always a chance that you won't be near your HDD or sd card at the time, or it won't recognise your phone properly. Basically you need to insure yourself against Murphy's law.
Donate To Me
This will be very helpful to many thanks for taking the time to put this together!
Sent from my XT1575 using Tapatalk
Thank you so much for taking the time on the guide. There will be many who will use it in the years to come! I'm just about at the verge of needing to root so I can get some insight into my battery life woes
This is much appreciated. All I did on my LG G2 was root as I did not see any roms that interested me since the bootloader is locked. I haven't used TWRP in a couple of years, so all this will help me clear the old cobwebs in my head.
Thank you so much for this! Exactly the kind of information I need. Can I trouble you to maybe add one more section to your guide: What to do when there's an OTA update from the manufacturer (Motorola)? I have concerns like:
- Would being rooted prevent OTA updates? (Assuming stock ROM).
- Would I need to "unroot" the phone to get the update? If so, how to unroot the the phone?
- Is the process to root the phone again after the the update the same, or could it possibly change?
- Would I need to wait until root is confirmed for the new version before attempting to re-root?
You said to "Make sure you check the md5 to verify its integrity".
What does this mean and how would I do this?
Thanks again for the guide. I went through this for my own unlock and root, so added a couple of minor things that will help noobs (and me!)
1. Add info on opening developer options, enabling ADB devices, and enable OEM unlock (in options screen)
2. Move this part to the start of the OEM unlock section : )
Please note: this will erase all user data from your device, it is best to do this before you really start using the device and installing apps or putting data on the internal storage
3. Add instructions to copy SuperSU zip file to internal storage and then flash in recovery
elitemeat said:
You said to "Make sure you check the md5 to verify its integrity".
What does this mean and how would I do this?
Click to expand...
Click to collapse
You can download an MD5 checker. They give you the MD5 checksum and you can compare when you run the utility. Just do a google search for md5 checker.
Oops
emailrob said:
Thanks again for the guide. I went through this for my own unlock and root, so added a couple of minor things that will help noobs (and me!)
1. Add info on opening developer options, enabling ADB devices, and enable OEM unlock (in options screen)
2. Move this part to the start of the OEM unlock section : )
Please note: this will erase all user data from your device, it is best to do this before you really start using the device and installing apps or putting data on the internal storage
3. Add instructions to copy SuperSU zip file to internal storage and then flash in recovery
Click to expand...
Click to collapse
Thanks for your suggestions.
1. This info has been added.
2. This section is in the same place in all of my guides, I see no problem (and have had no problems) with its location. Anyone following a guide should read it first before attempting it anyway.
3. I've added inductions to download the zip directly to the phone, less mess.
emailrob said:
Thanks again for the guide. I went through this for my own unlock and root, so added a couple of minor things that will help noobs (and me!)
1. Add info on opening developer options, enabling ADB devices, and enable OEM unlock (in options screen)
2. Move this part to the start of the OEM unlock section : )
Please note: this will erase all user data from your device, it is best to do this before you really start using the device and installing apps or putting data on the internal storage
3. Add instructions to copy SuperSU zip file to internal storage and then flash in recovery
Click to expand...
Click to collapse
This is already covered here:
http://forum.xda-developers.com/moto-x-style/help/root-to-updates-t3200588
Oaklands said:
You can download an MD5 checker. They give you the MD5 checksum and you can compare when you run the utility. Just do a google search for md5 checker.
Click to expand...
Click to collapse
If you're on Windows, I highly recommend this one, I've been using it for ages: http://code.kliu.org/hashcheck/
I flashed SU and it didn't give me root, any suggestions?
mxpxboi said:
I flashed SU and it didn't give me root, any suggestions?
Click to expand...
Click to collapse
Have you enabled root for apps (and adb if you wish) in Developer Options?
Heisenberg said:
Have you enabled root for apps (and adb if you wish) in Developer Options?
Click to expand...
Click to collapse
I don't see root for apps in Developer Options.
mxpxboi said:
I don't see root for apps in Developer Options.
Click to expand...
Click to collapse
Ok. I don't have this device yet (I have to jump through a few hoops to get it in my country), hopefully one of our other helpful members can lend a hand with your problem.
Heisenberg said:
Ok. I don't have this device yet (I have to jump through a few hoops to get it in my country), hopefully one of our other helpful members can lend a hand with your problem.
Click to expand...
Click to collapse
Well thanks for your help anyway. I followed the steps to a tee, and no root. So I was a little confused.
mxpxboi said:
Well thanks for your help anyway. I followed the steps to a tee, and no root. So I was a little confused.
Click to expand...
Click to collapse
It's a bit odd because this is definitely how to root this phone. Was the SuperSU flash successful in TWRP? Have you tried a second time?
Heisenberg said:
It's a bit odd because this is definitely how to root this phone. Was the SuperSU flash successful in TWRP? Have you tried a second time?
Click to expand...
Click to collapse
It did flash successfully, I flashed the one it linked to UPDATE-SuperSU-v1.94.zip, I'm going to try the newest one BETA-SuperSU-v2.49.zip. I'll report back.
---------- Post added at 10:57 PM ---------- Previous post was at 10:44 PM ----------
That worked, I would update your post with this link BETA-SuperSU-v2.49
Now if I can figure out how to remove the bootloader unlocked boot screen.
All root apps except Titanium Backup seem to be working for me.
mxpxboi said:
It did flash successfully, I flashed the one it linked to UPDATE-SuperSU-v1.94.zip, I'm going to try the newest one BETA-SuperSU-v2.49.zip. I'll report back.
---------- Post added at 10:57 PM ---------- Previous post was at 10:44 PM ----------
That worked, I would update your post with this link BETA-SuperSU-v2.49
Now if I can figure out how to remove the bootloader unlocked boot screen.
All root apps except Titanium Backup seem to be working for me.
Click to expand...
Click to collapse
Cool, I've updated the link. There's a thread discussing how to remove that boot screen in the q&a or general section. Not sure about your Titanium problem, if you have root access it should work.

[GUIDE]How to Root Honor 9 Oreo

!Disclaimer: You will void your warranty by proceeding with this process! Make sure to check every step and backup your own data. I am not responsible for you soft or hard-bricking your phone. This tutorial is for the Honor 9 STF-L09C432B36(0/2/3/4/5/6/7/8). Other versions may work or may not!
Pre requirements:
-A working pc with internet connection
-your phone
-pin set in android (lock screen)
-USB type c connector
-read everything carefully
-proceed with caution
-rather ask, than doing something you don't understand or you are unsure of
Credits go to:
-xzx0O0
-topjohnwu
-k1ks
1.UNLOCKING THE BOOTLOADER
!If the phone perfoms a bootloader unlock, a factory reset will be perfomed automatically. So you will have to backup your data to a sdcard or to the pc.!
Step 1.1 and 1.4 are hanging together. They can be skipped with no worries, but I would recommend to do it. !THIS IS NOT A FULL BACKUP!
1.1 [OPTIONAL]BACKING UP PHONE SETTINGS:
1.1.1 Download and install Hisuite on your pc: http://consumer.huawei.com/minisite/HiSuite_en/
1.1.2 Connect your pc with your phone
1.1.3a If you see a pop up like this,then choose transfer files and skip Step 1.1.3b
1.1.3b Go to your Notifications on your phone. There will be a settings notification. Press on it and select File transfer via USB.
1.1.4 On your phone go to Settings -> Security & privacy -> More -> and turn on allow Hisuite to use HDB (image)
1.1.5 The phone may ask you to trust the pc. Select always trust this pc (image)
1.1.6 Go to settings -> System -> About phone -> and press about 10 times on the build number.
1.1.7 Go to settings -> System -> Developer Options -> and turn on USB debugging (image)
1.1.8 Open Hisuite on pc
1.1.9 Choose Backup and select everything. Don't password protect it.
1.2 OBTAINING THE UNLOCK CODE
Everything you see below in pink does not work anymore since Huawei has officially stopped providing the bootloader unlock code on their website.
Instead please use this thread for obtaining your bootloader unlock code: https://forum.xda-developers.com/honor-7x/how-to/how-to-unlock-huawei-bootloader-removal-t3780903
1.2.1 Go to this website and press Unlock
1.2.2 Register a huawei id or login
1.2.3 Follow the steps until you see this page
1.2.4 Choose Since Emui 5.0
1.2.5 Fill out the rest of the information. (The IMEI can be found at settings -> System -> About Phone)
1.2.6 Press Commit. If every info was put in correct, A yellow message should appear saying: "Your unlocking password is: ..." Copy the code somewhere safe on your pc.
1.3 UNLOCKING THE BOOTLOADER
1.3.1 Download Minimal ADB and fastboot for your operating system. For windows 32 and 64bit: https://androidfilehost.com/?fid=746010030569952951
1.3.2 install and open the folder where you installed it to.
1.3.3 Run fastboot.exe and adb.exe once
1.3.4 Go to Settings -> System -> developer options turn on OEM unlocking. If you do not have developer options do step 1.1.6 and come back to 1.3.4.
1.3.5 Connect your phone with the pc and turn on USB Debbuging(Step 1.1.7) and file transfer via adb(Step 1.1.3b) on your phone
1.3.6 On your pc go to the folder where you have installed adb. Open a CMD Windows at this folder(For Windows hold leftshift and press right click. Then choose open cmd from this folder)
1.3.7 Make sure that usb debugging is still enabled. In CMD: type adb devices -> hit enter. It should say your serial number with the status "device" (image)
If that is not the case, check if 1.USB Debugging is enabled 2. Allow Transfer files in Notifications.
1.3.8 type in CMD adb reboot bootloader. Your device will reboot into the bootloader.
1.3.9 It should say FRP Unlock and PHONE locked.
If FRP is locked and green, you did not enable oem unlock. => Hold the power button to reboot and go back to step 1.3.4
1.3.10 type in CMD fastboot oem unlock code replace code with the number from Step 1.2.6. Hit enter.
1.3.11 A window will pop up asking you if you want to unlock the bootloader. !Pressing yes will void your warranty and perform a factory reset deleting all personal data on internal storage.! With your volume up and down keys navigate to yes and press the power button to proceed. Your device will automatically reboot and perform a factory reset and reboot again.
1.3.12 Put in all your information, so that the phone is fully usable again
[OPTIONAL]1.4 REAPLYING PHONE SETTINGS
1.4.1 Repeat Step 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7 and 1.1.8
1.4.2 In Hisuite press restore and choose the backup you have created in Step 1.1.9
2.FLASHING AND SETTING UP TWRP
2.1 FLASHING TWRP
2.1.1 Set a pin for your phone if you have not (lockscreen). Go to this thread and download stf-twrp-zxz-0.3.img and this kernel
2.1.2 Move both .img to your folder, where you have installed adb
2.1.3 Do Step 1.3.5, 1.3.6, 1.3.7 and 1.3.8
2.1.4 It should say FRP Unlock and PHONE Unlocked(image) => Step 2.1.5 . If Phone is locked and green, you did not unlock your bootloader => Step 1.3.
2.1.5 in CMD type fastboot flash recovery_ramdisk stf-twrp-zxz-0.3.img => hit enter.
2.1.6 type fastboot reboot in CMD to reboot. Do not close CMD window and do not unplug phone from pc if you continue with 2.2.
2.2 SETTING UP TWRP
2.2.1 Do Step 1.3.5, 1.3.6, 1.3.7
2.2.2 in CMD type adb reboot recovery_ramdisk => hit enter
2.2.3 wait for it to boot. It will ask you for a password. You can choose whatever you want. I would recommend you use your PIN to unlock your phone. REMEMEBER IT!
2.2.4 Then this screen will appear. Swipe to allow modifications.
2.2.5 Press Reboot -> System and do not install the twrp app.
2.2.6a If your on screen buttons and flash are working skip step 2.2.6b
2.2.6b If your on screen buttons are not working => connect phone to pc and connect with adb correctly. In CMD press adb reboot bootloader to reboot into the bootloader. Then flash the custom kernel in CMD , by pressing fastboot flash kernel KERNEL_B360a_TOUCH_FIX.img and hit enter to flash. Then reboot your phone with fastboot reboot
2.2.7 !Read through this whole thread to check which functions of TWRP are working and which not!
3. ROOTING WITH MAGISK
3.1.1 Download Magisk v-16.0 from here and the uninstaller from here.
3.1.2 Connect phone with PC. Activate file transfer via USB in Notifications. Move the Magisk-v16.0.zip and uninstaller.zip to the root of your internal storage or sdcard on your phone.
3.1.3 Do Step 1.3.5, 1.3.6 and 1.3.7 . Type in cmd adb reboot recovery_ramdisk => hit enter.
3.1.2 Type in your password from Step 2.2.3. Press on Install. Select the storage where you put both .zip from Step 3.1.2. Search and press on Magisk-v16.0.zip. Swipe to flash. Then press on reboot to System.
Nice thread. Good.
If the site is long or bug at wish , do not answer for ask code.
Use a VPn or Proxy.
Hi,
is this guide still valid? I will get my phone next weekend. I cannot find "Unlock" at https://emui.huawei.com/.
Saftpresse99 said:
Hi,
is this guide still valid? I will get my phone next weekend. I cannot find "Unlock" at emui huawei com/.
Click to expand...
Click to collapse
I've tried to get the unlock code from the site for three days to no avail. It always just redirects to front page as there doesn't seem to be any unlock page anymore. So if anyone has any better luck with this please share
Saftpresse99 said:
Hi,
is this guide still valid? I will get my phone next weekend. I cannot find "Unlock" at https://emui.huawei.com/.
Click to expand...
Click to collapse
anon9000 said:
I've tried to get the unlock code from the site for three days to no avail. It always just redirects to front page as there doesn't seem to be any unlock page anymore. So if anyone has any better luck with this please share
Click to expand...
Click to collapse
I wrote an email to my regional Huawei Support, and they replied that if i sent them my model, IMEI etc, they will resend unlock code. So try this guys
Saftpresse99 said:
Hi,
is this guide still valid? I will get my phone next weekend. I cannot find "Unlock" at https://emui.huawei.com/.
Click to expand...
Click to collapse
Yes I'm sorry that I am replying so late.
So noone really knows if it is going to come back, but here's what you can do:
1: Go to this site. Scroll down. Choose your country. Call the hotline. Give them the required info. They will send you the unlock-code via Email. I tried it with the German Number and they send it to me without a problem.
2: Try emailing the support from Honor or Huawei.
3: Try out this Thread. You will have to pay about 4 EUR ($5).
Lukalion said:
Yes I'm sorry that I am replying so late.
So noone really knows if it is going to come back, but here's what you can do:
1: Go to this site. Scroll down. Choose your country. Call the hotline. Give them the required info. They will send you the unlock-code via Email. I tried it with the German Number and they send it to me without a problem.
2: Try emailing the support from Honor or Huawei.
3: Try out this Thread. You will have to pay about 4 EUR ($5).
Click to expand...
Click to collapse
How long did it take for you to get the unlock? I just called and they told me it should take about two weeks
shiboby said:
How long did it take for you to get the unlock? I just called and they told me it should take about two weeks
Click to expand...
Click to collapse
Try calling different phone numbers. Some are willing to give you the unlock and some not. I think they also don't know whats really going on with the site etc. But as of right now the 3 ways mentioned above, are the only ways to get the unlock code. Maybe the Unlock site at https://emui.huawei.com/ will come back some time.
Thank you for writing this tutorial, it's really helpful to have all steps in one place to know what to do.
If you could include how to revert back to the locked bootloader with stock firmware, that can be sent back to Huawei for warranty repairs, that would be great!
Best,
Chris
Hi
I did everything like in instructions and its gone well.
then i decided to install module in magisk to hide navigation bar and now my phone has a black screen and i can only turn it off... anyone knows how to fix it?
KubaEM said:
Hi
I did everything like in instructions and its gone well.
then i decided to install module in magisk to hide navigation bar and now my phone has a black screen and i can only turn it off... anyone knows how to fix it?
Click to expand...
Click to collapse
1. Go this thread and download the Mount-Magisk.zip
2. Move it somewhere to your phone. (If you are unable to boot to system connect phone to PC. Reboot phone to twrp. Open a adb window on the PC. In twrp go to advanced. Start the adb sideload. Press on cancel and then on back. Move the Mount-Magisk.zip into your adb folder on the pc. In the cmd type adb push Mount-Magisk.zip /external_sd or which ever path you like. )
3. Boot to twrp.
4. Go to Install and choose the Mount-Magisk.zip . Flash it. After flash press on back.
5. Go to Advanced -> File Manager. At the very top/root of your system should now be a folder called Magisk. Open the folder. The next folders also should include your Modules. Hold the folder of the module and delete it.
6. Reboot and everything should be fixed.
Let me know if it worked! :good:
Just to let everyone know. The unlock page is back. :highfive::laugh::laugh::laugh: Happy Unlocking :good::victory::victory::victory:
Lukalion said:
Just to let everyone know. The unlock page is back. :highfive::laugh::laugh::laugh: Happy Unlocking :good::victory::victory::victory:
Click to expand...
Click to collapse
Yeah... Its back for about 2 months, and then it will be closed pernamently
click
So if I unlock bootloader, and then root my device then i won't receive any OTA update anymore... but how can I deal with this situation in order to re-lock when it's OTA time and unlock again when I got it?
ps. No OTA means only no firmware or it means also no security patches ??
ov3rlordRAGE said:
So if I unlock bootloader, and then root my device then i won't receive any OTA update anymore... but how can I deal with this situation in order to re-lock when it's OTA time and unlock again when I got it?
ps. No OTA means only no firmware or it means also no security patches ??
Click to expand...
Click to collapse
In case of Honor devices, to a certain point you are still getting ota updates. To check on the newest updates download the app Huawei Firmware Finder. Then follow the HuRUpdate Thread to update to the newest firmware without unrooting.
hi, magisk automatically closes after about 3 seconds, how can I solve this problem?
listo09 said:
hi, magisk automatically closes after about 3 seconds, how can I solve this problem?
Click to expand...
Click to collapse
Try reflashing Magisk in TWRP.
listo09 said:
hi, magisk automatically closes after about 3 seconds, how can I solve this problem?
Click to expand...
Click to collapse
Issue Magisk FC , when you open Magisk , go direct on 'About' .
This will keep it open.
Some solutions should be on official section for Magisk
Lukalion said:
Try reflashing Magisk in TWRP.
Click to expand...
Click to collapse
Funziona, grazie
Hi! I'm currently attempting to complete step 2.1, but I've run into a problem.. I've completed all the 1.-steps and added the twrp & kernel img-files to the adb folder, but when I attempt to use cmd fastboot flash recovery_ramdisk stf-twrp-zxz-0.3.img, I just get the response waiting for any device, and then nothing else happens. Any suggestions?

Yota 3+ root,twrp, updates

Please put in this thread all the news about our yota3+ so we can update and custom safely together.
This is the first update that i know, still not tested by me:
Originally Posted by Allleeexxx5
Who can try this files on his Y3+ ? It is a test version. It can break your phone.
Better ask to Allleeexxx5
Quote:
fastboot flash boot boot.img
https://drive.google.com/file/d/1Rez...RGc9WOKna/view
I have not still download the 2 OTA update.
Anyone has tested, any issues?
paolinger said:
This is the first update that i know, still not tested by me:
Originally Posted by Allleeexxx5
Who can try this files on his Y3+ ? It is a test version. It can break your phone.
Better ask to Allleeexxx5
Quote:
fastboot flash boot boot.img
https://drive.google.com/file/d/1Rez...RGc9WOKna/view
Click to expand...
Click to collapse
Ok How do I get this installed on my YotaPhone 3+ 64 Gb?
Please give me some instructions, I have updated from the YotaPhone 3 Chinees to the YotaPhone 3+ but after this update the IMEI's are empty and I need to add them it looks now I need to root to be able to add the IMEI from the box it came with.
If you have a tool to re-enter the IMEI without rooting is the best, but it look the only way to do this is to root the YotaPhone 3+
HvMES said:
Ok How do I get this installed on my YotaPhone 3+ 64 Gb?
Please give me some instructions, I have updated from the YotaPhone 3 Chinees to the YotaPhone 3+ but after this update the IMEI's are empty and I need to add them it looks now I need to root to be able to add the IMEI from the box it came with.
If you have a tool to re-enter the IMEI without rooting is the best, but it look the only way to do this is to root the YotaPhone 3+
Click to expand...
Click to collapse
https://forum.xda-developers.com/showthread.php?t=2317790
fastboot oem unlock-go
to unlock
Yota 3+ Root
Instruction 1: Magisk system-less root (ref: https://www.xda-developers.com/what-is-magisk/), which is less invasive as it doesn't have to remove user data, but more fragile if something goes wrong on your system (e.g you will attempt to modify your storage outside of booted OS), you will have to fully re-install your OS. But is less detectable by apps and playstore that your device is rooted, which is good.
Instruction 2: Full root which includes TWRP, Magisk and disabled storage encryption, meaning you can freely modify your storage outside of booted OS and if something goes wrong your will be able to boot into TWRP and potentially fix the issues / make or restore backups . But this method has to remove and fully re-install your system to work.
Note: leaving your device unencrypted is not secure as if your device is lost then your personal data can be retrieved from it. Hence, once you've done installation of all rooted apps and ensured that everything is working fine in long term (e.g couple of days) it is recommended to do following:
- Encrypt your device (Settings > Security & location > Encryption & credentials > Encrypt phone)
- Lock boootloader (Settings > System > Developer options > OEM unlocking > OFF)
This will make your device secure again, but note that you will not be able to modify / access user data from TWRP anymore. Moreover, you won't be able to successfully modify system partitions unless you re-apply Disable_Dm-Verity_ForceEncrypt_12.16.2018.zip (https://forum.xda-developers.com/android/software/universal-dm-verity-forceencrypt-t3817389)
Instruction 1 - System-less root method
Note: this is a system-less root method, meaning that if you attempt to modify your system partition from custom recovery, then it will fail to boot again!
Pre-reqs (important!):
All you personal data is backed up
Developer options is enabled:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
USBdebugging is on:
OEM unlocking is on:
adb, fastboot tools are installed on PC
Device pin is enabled (Settings > Security & location > Screen lock > PIN)
Steps:
Get new9008-0112.zip from: https://forum.xda-developers.com/yotaphone-3/development/yota-3-firmware-news-t3862999
Extract new9008-0112.zip > copy boot.img to your phone
Boot image is copied to phone:
Install Magisk. : https://forum.xda-developers.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445
Open Magisk > Install > Patch Boot Image File > direct to copied boot.img > It will generate a file > Close
Copy created patched_boot.img from device Downloads to your PC:
Run cmd on pc from place where you copied file > adb reboot bootloader > fastboot boot patched_boot.img
Device will boot > Open Magisk app > It will ask you to grant root permission > grant it > Click Install button again > Direct Install (Recommended) > Reboot
Grant permissions:
Click on install button:
Click on install in dialog:
Click on direct install in dialog:
It will patch your boot partition, click reboot:
Observe two green tick boxes are still green after reboot:
Congratulations, your device is now rooted!
Instruction 2 - Yota 3+ 8.1 System Root with TWRP recovery, Magisk and storage encryption disabled
I've managed to create a TWRP specific for Y3+ and wrote .bat script which automatically re-installs OS 8.1 with latest ota 54 update, magisk and root and disables storage encryption.
Pre-recs (Important!):
Your phone is charged to at least 50%
adb, fastboot installed on your pc and accessible through home path system environment variable
adb debugging enabled
Developer options > OEM unlocking > ON
backup all your personal data
Steps:
Download: mega.nz/#F!yMBGBYIY!24gGnv0DXNhqBvE7IbrEmA
Double click on install.bat
Follow on-screen instructions
Important! As soon as you are on home screen browse your e-ink screen at least once, otherwise the OS might crash after ~ 5-10 minutes due to inability to properly access its launcher. Once done, Reboot your device.
References:
The work is done based on:
- TWRP repacking using Android.Image.Kitchen.v3.4-Win32.zip from: https://forum.xda-developers.com/showthread.php?t=2073775 thanks to @osm0sis
- TWRP for Y3 from: https://forum.xda-developers.com/yotaphone-3/development/yota3-firmware-root-magisk-t3830405 thanks to @gor516don
- new9008-0112.zip from: https://forum.xda-developers.com/yotaphone-3/development/yota-3-firmware-news-t3862999 thanks to @paolinger
- Disabling storage encryption using Disable_Dm-Verity_ForceEncrypt_12.16.2018.zip from: https://forum.xda-developers.com/android/software/universal-dm-verity-forceencrypt-t3817389 thanks to @Zackptg5
vvinjj said:
Pre-reqs (important!):
All you personal data is backed up
Developer options is enabled
adb debugging is on
OEM unlocking is on
adb, fastboot tools are installed on PC
Steps:
Get new9008-0112.zip from: https://forum.xda-developers.com/yotaphone-3/development/yota-3-firmware-news-t3862999
Extract new9008-0112.zip > copy boot.img to your phone
Install Magisk: https://******************/downloading-magisk-manager
Open Magisk > Install > Path Boot Image File > direct to copied boot.img > It will generate a file > Close
Copy created patched_boot.img from device Downloads to your PC
Run cmd on pc > adb reboot bootloader > fastboot boot patched_boot.img
Device will boot > Open Magisk app > Install > Direct Install (Recommended) > Reboot
Congratulations, your device is now rooted!
Click to expand...
Click to collapse
Hi I have tried all but it is not clear to me I'm not able to root the YotaPhone 3+.
If it possible to give me a more clear instruction step by step. Also how to test if it is rooted?
It was a YotaPhone 3 and I updated it successful to the YotaPhone 3+ only I lost the IMEI 1 and 2. To add them I need to rood the Phone to add the EMEI or is there a option to add them NOT rooted.
Please help!!
vvinjj said:
Pre-reqs (important!):
All you personal data is backed up
Developer options is enabled
adb debugging is on
OEM unlocking is on
adb, fastboot tools are installed on PC
Steps:
Get new9008-0112.zip from: https://forum.xda-developers.com/yotaphone-3/development/yota-3-firmware-news-t3862999
Extract new9008-0112.zip > copy boot.img to your phone
Install Magisk: https://******************/downloading-magisk-manager
Open Magisk > Install > Path Boot Image File > direct to copied boot.img > It will generate a file > Close
Copy created patched_boot.img from device Downloads to your PC
Run cmd on pc > adb reboot bootloader > fastboot boot patched_boot.img
Device will boot > Open Magisk app > Install > Direct Install (Recommended) > Reboot
Congratulations, your device is now rooted!
Click to expand...
Click to collapse
All nice but if I do so on point 7. and it reboot it ask me for a pincode.
What is the pincode? or code I have to enter?
HvMES said:
All nice but if I do so on point 7. and it reboot it ask me for a pincode.
What is the pincode? or code I have to enter?
Click to expand...
Click to collapse
Before attempting to root the device I already had fingerprint / pin setup, hence just simply needed to re-enter the pin in that case. But, I was not sure if it is a must. Unfortunately, to fix it you will need to reset your os, using same steps as in https://forum.xda-developers.com/yotaphone-3/development/yota-3-firmware-news-t3862999. Then ensure your device has pin installed, and then re-try rooting steps. I've updated my post with pin pre-req step.
---------- Post added at 04:12 PM ---------- Previous post was at 04:06 PM ----------
HvMES said:
Hi I have tried all but it is not clear to me I'm not able to root the YotaPhone 3+.
If it possible to give me a more clear instruction step by step. Also how to test if it is rooted?
It was a YotaPhone 3 and I updated it successful to the YotaPhone 3+ only I lost the IMEI 1 and 2. To add them I need to rood the Phone to add the EMEI or is there a option to add them NOT rooted.
Please help!!
Click to expand...
Click to collapse
To determine if you're device is rooted you will see in Magisk app two green tickboxes (Latest Version: v18.0; Installed Version: v18.0) even after you reboot your device.
Please specify what steps you're unclear about, but before doing that please read through comments in: https://forum.xda-developers.com/yotaphone-3/development/yota-3-firmware-news-t3862999 or google the step you're unclear about (especially pre-req ones)
vvinjj said:
Before attempting to root the device I already had fingerprint / pin setup, hence just simply needed to re-enter the pin in that case. But, I was not sure if it is a must. Unfortunately, to fix it you will need to reset your os, using same steps as in https://forum.xda-developers.com/yotaphone-3/development/yota-3-firmware-news-t3862999. Then ensure your device has pin installed, and then re-try rooting steps. I've updated my post with pin pre-req step.
---------- Post added at 04:12 PM ---------- Previous post was at 04:06 PM ----------
To determine if you're device is rooted you will see in Magisk app two green tickboxes (Latest Version: v18.0; Installed Version: v18.0) even after you reboot your device.
Please specify what steps you're unclear about, but before doing that please read through comments in: https://forum.xda-developers.com/yotaphone-3/development/yota-3-firmware-news-t3862999 or google the step you're unclear about (especially pre-req ones)
Click to expand...
Click to collapse
Well I did now with a password and it looked OK but still it is not rooted.
has root been yota phone 3+ yet?
I have followed the instructions many times but still cannot succeed
Yota 3+ Stock Recovery access
1. On the phone off, press and hold the "Volume up" and "Power" keys
2. A robot will be lying with an open belly and an error on the lack of a command.
3. Lock the "Volume Down" and "Power" buttons, briefly pressing the "Volume Up" button
Yota 3+ 8.1 System Root with TWRP recovery, Magisk and storage encryption disabled
Merged 2nd instruction into 1st post.
I've tried the latest instruction; failed in cmd as following :
"Ensuring the bootloader is unlocked..."
...
FAILED (remote: Need wipe userdata. Do 'fastboot oem unlock-go')
Anyone?
nnlife82 said:
I've tried the latest instruction; failed in cmd as following :
"Ensuring the bootloader is unlocked..."
...
FAILED (remote: Need wipe userdata. Do 'fastboot oem unlock-go')
Anyone?
Click to expand...
Click to collapse
Can you check if in developer options OEM unlocking is ON (as in first instruction > pre-recs > step 4).
vvinjj said:
Can you check if in developer options OEM unlocking is ON (as in first instruction > pre-recs > step 4).
Click to expand...
Click to collapse
Yes, it's on.
So technically I don't have to unlock bootloader first right?
nnlife82 said:
Yes, it's on.
So technically I don't have to unlock bootloader first right?
Click to expand...
Click to collapse
If it was ON, the expected message in script should've been "Already unlocked" instead of message you've seen ("Need wipe userdata. Do 'fastboot oem unlock-go"). Maybe because in my case I had already unencrypted userdata at point of re-testing the script, it was working for me. Hence, I will fix the script by replacing "fastboot flashing unlock" to "fastboot oem unlock-go" to see if it fixes the issue for you.
---------- Post added at 02:25 PM ---------- Previous post was at 02:21 PM ----------
vvinjj said:
If it was ON, the expected message in script should've been "Already unlocked" instead of message you've seen ("Need wipe userdata. Do 'fastboot oem unlock-go"). Maybe because in my case I had already unencrypted userdata at point of re-testing the script, it was working for me. Hence, I will fix the script by replacing "fastboot flashing unlock" to "fastboot oem unlock-go" to see if it fixes the issue for you.
Click to expand...
Click to collapse
I've updated the script, please re-download install.bat
vvinjj said:
If it was ON, the expected message in script should've been "Already unlocked" instead of message you've seen ("Need wipe userdata. Do 'fastboot oem unlock-go"). Maybe because in my case I had already unencrypted userdata at point of re-testing the script, it was working for me. Hence, I will fix the script by replacing "fastboot flashing unlock" to "fastboot oem unlock-go" to see if it fixes the issue for you.
---------- Post added at 02:25 PM ---------- Previous post was at 02:21 PM ----------
I've updated the script, please re-download install.bat
Click to expand...
Click to collapse
Thx dude, trying it.:fingers-crossed:
ps I just tried instruction 1 . When it told me to enter the pin after reboot, I did, but it says it's wrong. Can't boot, so reflashing now:silly: My phone is absurd lol
nnlife82 said:
Thx dude, trying it.:fingers-crossed:
ps I just tried instruction 1 . When it told me to enter the pin after reboot, I did, but it says it's wrong. Can't boot, so reflashing now:silly: My phone is absurd lol
Click to expand...
Click to collapse
Before you did the instruction 1 attempt, one of pre-recs was that your device had already pin setup (Settings > Security > Screen lock > PIN), did you have it? As the only use case I am aware of this situation is if you didn't have pin setup before. It would still ask you for pin, but it does't exist, hence wrong.

[RECOVERY][TWRP][BV9100] TeamWin Recovery Project for Blackview BV9100

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Team Win Recovery Project 3.x, or twrp3 for short, is a custom recovery built with ease of use and customization in mind. Its a fully touch driven user interface no more volume rocker or power buttons to mash. The GUI is also fully XML driven and completely theme-able. You can change just about every aspect of the look and feel.
This is a customised version of TWRP specifically for the Blackview BV9100!​
Code:
#include <std_disclaimer.h>
/*
* Your warranty is now voided.
*
* I am not responsible for bricked devices, a meteorite crashing into your house,
* dead SD cards or thermonuclear war, YOU are choosing to make these modifications,
* and if you point the finger at me for messing up your device, I'll just ignore you.
*
*/
What works?
* Basic functions (Boot, Touch, ADB, Mount (internal/external), etc)
* Data decryption
What's broken?
* You tell me.
IMPORTANT - Disable dm-verity with the following fastboot command, or the recovery won't boot!
Make sure you use the vbmeta.img from stock rom!
Code:
fastboot flash --disable-verity --disable-verification vbmeta vbmeta.img
Downloads
Click here!
Device sources
Need help?
BV9100 Telegram Community
TWRP 3.5 - 28/02/2021
Download
Changelog:
Spoiler: Changelog
- Sync with latest TWRP changes
- Update encryption blobs
- Fix MicroSD/OTG mounting issue
Reserved #3
@bengris32
works but im unable to mount micro sd nor a usb stick in exfat nor making 2 partitions on one use (over 32gb) in 16k partitions less than 32 gigs.
may i ask how or where did you obtain the file?
mexamilian said:
@bengris32
works but im unable to mount micro sd nor a usb stick in exfat nor making 2 partitions on one use (over 32gb) in 16k partitions less than 32 gigs.
may i ask how or where did you obtain the file?
Click to expand...
Click to collapse
I didn't "obtain" the recovery, I made my own device trees for it, and built it from source.
As for the sdcard/usb mounting issue, I'll look into it.
@bengris32
Thanks for share
I noticed you are using BV9100_EEA_M860A_V1.0_20200430V19 in source files Where can i get BV9100 latest FW for non-EEA(non EU vs). Im on NON-EU version *NON-EEA* - notEU_BV9100_M860A_V1.0_20190910V2. Cant get my hands on their latest OTA updated FW. Maybe that's my problem? Does it even matter if its EEA on non EEA i mean they both run on same mk6765 platform.
There are 2 files i could find from official source, EU and non-EU versions, can be found here https://bbs.blackview.hk/viewtopic.php?t=532355 (version 20190910V2) kinda old but there is also the latest FW that goes OTA after u check for FW updates on bv9100. Blackview did not provide more recent updated one. Been working at it since Wednesday spending pretty much whole days figuring this out and back at it again atm
Not seeming to get this to work, but I'm not sure I know what I'm doing.
I took careful notes about what I did, anything look wrong wih the process?
First boot
► minimal set up then enable developer mode
(Settings 🞂 System 🞂 Advanced 🞂 About phone
▻ tap on "Build number" until unlocked, maybe 8 times
unlocks "Settings 🞂 System 🞂 Advanced 🞂 Developer options" menu
)
► In Developer options menu
▻ Select OEM unlocking (enter system password / pin)
▻ Turn on USB debugging (without cable attached)
► Connect USB cable
► On computer: "adb devices"
► On phone "Allow debugging" prompt comes up, allow it
► On computer: "adb devices"
▻ shows device "BV9100NEEA000..."
► Disconnect USB cable
► Power off phone
► Power on phone with volume down button pushed
► Connect USB cable
► On computer: "adb reboot bootloader"
► On computer: "fastboot devices"
▻ shows device "BV9100NEEA000..."
► On computer: "fastboot flashing unlock"
▻ computer shows "(bootloader) Start unlock flow"
▻ phone shows tiny text prompting for push volume up to allow
▻ push volume up
▻ computer shows "OKAY [ 23.545s]" (and some other stuff)
► On computer: "fastboot flash --disable-verity --disable-verification vbmeta vbmeta.img"
▻ using vbmeta.img from blackview forum link in post 6
▻ computer shows (about) OKAY ... sending ... OKAY ... writing ... OKAY
► On computer: "fastboot flash recovery recovery.img"
using recovery.img 3.4.0 linked from first post
▻ computer shows (about) OKAY ... writing ... OKAY
► On computer: "fastboot reboot"
▻ computer shows "rebooting..."
▻ phone shows tiny message about unlocked bootloader and delays boot 5 seconds
► Phone boots back into new system wizard
► Re-enable dev mode and reallow USB debugging
► On computer: "adb reboot recovery"
▻ seems to boot into an Android standard recovery, not TWRP
► Phone regular boot shows nothing different
neccowafer said:
Not seeming to get this to work, but I'm not sure I know what I'm doing.
Click to expand...
Click to collapse
What model of phone and FW are u running. I know u posted " BV9100NEEA000" but do u have the right FW on it that came witht he phone? There are 2 versions of this phone also FW files on official site are not updated to latest OTA update. Official FW for eu and non eu can be found here, but its old.
https://bbs.blackview.hk/viewtopic.php?t=532355 You can flash the older FW back and try again. If u have the original hardware FW on ur EU model phone then it could be possible for you
Ive made a post asking for the files, my message needs to be approved as a new registered user. You can bookmark the link below and wait for my post to appear and the files when and if they provide em.
official firmware - Page 2 - bbs.blackview.com
bbs.blackview.hk
Currently i reverted back to latest OTA stock FW till i get those new files.
I am at a standstill on the proper order to root and get twrp on this non eu model phone.
Magist guide says i need to flash to recovery partition (u need original to patch which i cant have without TWRP on the phone in the 1st place) Then there is another issue of getting TWRP onto the device before rooting which again u need the original vbmeta.img, i can do with a blank one but the problem comes to TWRP then setting an encrypted password provided by bengris32 which his twrp is for EU model of the phone. Headache
I'm on non EU FW, BV9100_M860A_v1.0_20200722V3
You can get SP Flash Tool thats needed to flash this phones FW, here https://spflashtool.com/ which has the latest version shown as V5.1924. There is also v5.2044 which i dont know how and where it came out, can be found here https://forum.hovatek.com/thread-13970.html @Hovatek seems reputable after me digging around for the past 3-4 days https://forum.xda-developers.com/m/hovatek.5636663/
Assuming you have MTK Drivers installed. if not https://forum.hovatek.com/thread-16640.html or find official site.
Open up SP Flash Tool,
Go to tab Download
Point Download Agent to where SP Flash Tool is installed to the file "MTK_AllInOne_DA.bin"
Load up you FWs scatter file in the 2nd box/line "Scatter-loading File.
***IMPORTANT! In the graph table below MAKE SURE U UNCHECK the preloader box. This will help getting TWRP as recovery later on.****
Klik box up top with green arrow that says "Download"
Phone is in off state.
Attach your USB cable to the phone, but NOT to the computer yet.
Hold VOLUME UP & DOWN at the same time then connect it to the PC.
On the SP Flash Tools you will see a long white bar on the bottom of the softwares window
It will turn RED then Yellow and will start flashing your phone.
You can RELEASE KEYS after you see the RED COLOR.
Once SP Flash Tools is done flashing a box will come up and say Done.
Close box, close SP Flash Tools.
Disconnect Phone from PC and Phone and u are on stock FW.
If u didnt uncheck the "preloader" box TWRP will not work on your phone
mexamilian said:
I'm on non EU FW, BV9100_M860A_v1.0_20200722V3
Click to expand...
Click to collapse
That's the same as mine: BV9100_M860A_V1.0_2020722V3, so I guess I'm waiting on BV to respond to your firmware update request.
neccowafer said:
Not seeming to get this to work, but I'm not sure I know what I'm doing.
I took careful notes about what I did, anything look wrong wih the process?
First boot
► minimal set up then enable developer mode
(Settings 🞂 System 🞂 Advanced 🞂 About phone
▻ tap on "Build number" until unlocked, maybe 8 times
unlocks "Settings 🞂 System 🞂 Advanced 🞂 Developer options" menu
)
► In Developer options menu
▻ Select OEM unlocking (enter system password / pin)
▻ Turn on USB debugging (without cable attached)
► Connect USB cable
► On computer: "adb devices"
► On phone "Allow debugging" prompt comes up, allow it
► On computer: "adb devices"
▻ shows device "BV9100NEEA000..."
► Disconnect USB cable
► Power off phone
► Power on phone with volume down button pushed
► Connect USB cable
► On computer: "adb reboot bootloader"
► On computer: "fastboot devices"
▻ shows device "BV9100NEEA000..."
► On computer: "fastboot flashing unlock"
▻ computer shows "(bootloader) Start unlock flow"
▻ phone shows tiny text prompting for push volume up to allow
▻ push volume up
▻ computer shows "OKAY [ 23.545s]" (and some other stuff)
► On computer: "fastboot flash --disable-verity --disable-verification vbmeta vbmeta.img"
▻ using vbmeta.img from blackview forum link in post 6
▻ computer shows (about) OKAY ... sending ... OKAY ... writing ... OKAY
► On computer: "fastboot flash recovery recovery.img"
using recovery.img 3.4.0 linked from first post
▻ computer shows (about) OKAY ... writing ... OKAY
► On computer: "fastboot reboot"
▻ computer shows "rebooting..."
▻ phone shows tiny message about unlocked bootloader and delays boot 5 seconds
► Phone boots back into new system wizard
► Re-enable dev mode and reallow USB debugging
► On computer: "adb reboot recovery"
▻ seems to boot into an Android standard recovery, not TWRP
► Phone regular boot shows nothing different
Click to expand...
Click to collapse
Hi, this is because android restores the original recovery when the device boots, you must not let your device boot into android until you boot TWRP for the first time, repeat all of your steps, but when you "fastboot reboot", hold the volume up button to access the boot menu, then select recovery mode. Once your device boots into TWRP, it will automatically patch the rom to prevent the original recovery from being restored on boot up.
bengris32 said:
Hi, this is because android restores the original recovery when the device boots, you must not let your device boot into android until you boot TWRP for the first time, repeat all of your steps, but when you "fastboot reboot", hold the volume up button to access the boot menu, then select recovery mode. Once your device boots into TWRP, it will automatically patch the rom to prevent the original recovery from being restored on boot up.
Click to expand...
Click to collapse
I confirm on my non EU bv9100 M860A
kept holding like you said then typed fastboot reboot and still held a selection menu popped up with 3 option on black background, i released the key then selected recovery, pressed the vol down to accept then quickly release it and went back to holding volume up and son of the devil it worked thanks, now i go back to messing with magisk installation.
Question though,
once booted into recovery following what u just said above, should vipe data factory be done like other (lineageOS) require or not? if it work it works just maybe thats where i had my issue with no mount for microsd and external
@neccowafer i can link you the official FW so u can flash what i have?
Latest stock rom link of BV9100 - bbs.blackview.com
bbs.blackview.hk
get the non-EEA version and flash it follow your own steps you mentioned
EDIT: Just did wipe data button bottom right on button [WIPE] then did factory wipe.
How access to internal and MTP on reboot into recovery with buttons, still can get micro sd mount
Got a reply from official blackview admin
official firmware - Page 2 - bbs.blackview.com
bbs.blackview.hk
looks like there wont be any updates to A10 and over. Gonna be trying out different CFW and see how it does, i managed to get unofficial lineage-17.1-20201215 unofficial with test keys flashed
I just got one of these phones today and I'm having a bear of a time getting into it with adb to install TWRP and hopefully flash a new ROM. I tried to follow the detailed instructions from neccowafer (thank you for those!) earlier in this thread, but adb returns the device as unauthorized when in recovery mode.
This phone seems to have two recovery modes. One is accessed by booting while holding vol-down and the other is loaded when you boot holding vol-up and choose recovery from the menu.
In either recovery mode, I run adb devices and get
List of devices attached
BV9100EEA00016800 unauthorized
While booted to Android, I run adb devices and get
List of devices attached
BV9100EEA00016800 device
I'm becoming a bit frustrated trying to figure it out on my own, and it's been a few years since I did any custom bootloader or custom ROM stuff with Android, so any help would be very much appreciated.
@JeffJK I have factory mode on my down key and recovery mode on up, you wanna do up. my model is NEEA
mexamilian said:
@JeffJK I have factory mode on my down key and recovery mode on up, you wanna do up. my model is NEEA
Click to expand...
Click to collapse
Oh good to know! I got the same error noted above in the up key mode, the unauthorized thing from adb. Any idea why?
did u enable dev mode then enabled usb debugging, boot loader unlocked?
when u got ur phone out of the box, skip everything and dont sim in, just skip things, make sure u dont set any pass and dont encrypt device, enable dev mode then enable debugging by tapping on ur build in settings all the way on bottom in about. make sure oem unlock is also enabled and greyed out if u done already so.
mexamilian said:
did u enable dev mode then enabled usb debugging, boot loader unlocked?
when u got ur phone out of the box, skip everything and dont sim in, just skip things, make sure u dont set any pass and dont encrypt device, enable dev mode then enable debugging by tapping on ur build in settings all the way on bottom in about. make sure oem unlock is also enabled and greyed out if u done already so.
Click to expand...
Click to collapse
Ah, I did set the phone up. Should I wipe and start over?
EDIT: I did a factory reset and booted into Android to turn on debugging, and even without setting up anything on the phone, encryption was enabled in the security settings and adb still lists the device as unauthorized while in recovery mode.
EDIT 2: Also tried wiping /data from the recovery mode menu, which put out the below lines but still did not allow adb access even after a kill-server
Code:
Formatting /data. . .
Formatting /cache. . .
Formatting /mnt/vendor/nvdata. . .
Data wipe complete.
@JeffJK To remove encryption meaning you had twrp installed and made it work or stock os?
Boot into recovery Format data / factory reset This will remove encryption and delete all files stored in the internal storage, as well as format your cache partition (if you have one).
*DONT set any passwords for lockscreen, dont login to google, pay attention to not encrypt device when setting up. just basic skip u dont even need wifi or sim in phone
Dont forget to unlock ur bootloader before flashing or doing anything. Follow post #7 thats exactly how you would do it then read up on post #10 and #11 and it will work.
Also did you install USB drivers?
Get android usb drivers https://developer.android.com/studio/run/win-usb
if that didnt work try the one below,
https://forum.hovatek.com/thread-16640.html (need to register) you want the " Auto Mediatek USB VCOM Drivers Signed"
If you messed up you just flash your legit FW back to stock and follow post #7 10 and 11
mexamilian said:
@JeffJK To remove encryption meaning you had twrp installed and made it work or stock os?
Boot into recovery Format data / factory reset This will remove encryption and delete all files stored in the internal storage, as well as format your cache partition (if you have one).
*DONT set any passwords for lockscreen, dont login to google, pay attention to not encrypt device when setting up. just basic skip u dont even need wifi or sim in phone
Dont forget to unlock ur bootloader before flashing or doing anything. Follow post #7 thats exactly how you would do it then read up on post #10 and #11 and it will work.
Also did you install USB drivers?
Get android usb drivers https://developer.android.com/studio/run/win-usb
if that didnt work try the one below,
https://forum.hovatek.com/thread-16640.html (need to register) you want the " Auto Mediatek USB VCOM Drivers Signed"
If you messed up you just flash your legit FW back to stock and follow post #7 10 and 11
Click to expand...
Click to collapse
I couldn't get TWRP because adb still reads the device as unauthorized. I wiped the data while in recovery mode, booted to the"Welcome" screen, and when I skipped everything in the setup wizard, the settings still show encryption as enabled, and I had no option to enable or disable it at any point. Bootloader also still showed as unlocked. This seems like a very unusual problem! I have drivers but will try the vcom ones.
if u are able to get into adb and fastboot then u dont need the VCOM drivers.
On device use "Revoke USB debugging authorizations" in "Developer Options"
then reconnect to phone to cable then pc
@JeffJK
Would you do me a favor, my current connected device sn is 123456789ABCDEF.
I messed up with flashing some roms and wiped the nvnand partition without making a backup of official stock one( didnt know about nvnand till issues started happening), been working on fixing S/N and device connected via adb to stock, currently have tee key and google key in red as overlay, i know ways of getting rid of it but id rather have the original back.
need some structural info, you can replace last 5 number from your serial with XXXXX if u want. i have some files i managed to scrape up digging around on how tos, just clueless on how to get tee key/google key and serial back onto device with proper format.
go into your phones setting>system>advanced>About phone. Post what what you see in the following:
*SIM Status (sim slot 1) klik on in and scroll down to EID (mine says unknown) and post (hide last 4 or so numbers but include full length) i will need to know what to look for when flashing mine back to my phones original status
*Model & Hardware klik on it my says for Model: BV9100 Serial number says 0123456789ABCDEF (again hide last 4 or 5 so i have an idea of what i need to look for in my files)
*WI-Fi MAC address and Bluetooth address all i need from this is do they match or are different, also post last 2 digits/bits in wifi and bt addresses ( i need this for to figure if multicast)
I REALLY RECOMMEND you write this info down before messing with roms and flashing or ull end up like me with blank IMEI (managed to flash fix it), serial of 123456789ABCEDF(still cant fix), and a permanent tee key google key in red(still cant perma fix, have to always remove factorymode). you can watch tutorials on how to use "Mtk Droid Tool to backup your nvnand IMEI serial, make a scatter file on updated OTA latest update of stock BV9100 rom (its really well optimized after trying Lineage unofficial 17.1, HavokOS 3.12 (I have files and sources)
I do not know where the official source for MTK DROID TOOLS is (the latest version i have found is Mtk_Droid_Tool_v2.5.3B some say 2.5.3 I have both if needed source to https://forum.hovatek.com/thread-15665.html) (bitdefender total security says clean on my pc before i installed, it does run sluggish on 10850k with 128gigs ram on nvme) I do recommend u scan with your AV and upload it also to https://www.virustotal.com/gui/ and any other files you get just do be safe
Heres a little write up on how to do so as i cannot cause my phone doesnt have proper setup on stock after a mess up
"
Requirement : Your Google android device should be rooted.(Officially provided with source if u need, DONT root it via the mtk droid tools, there is an option. Go with magisk official https://github.com/topjohnwu/Magisk/releases/tag/v21.2 After you have TWRP installed from this thread, download the 21.2 magisk zip file and install inside twrp reboot and configure it)
Download and open MTK droid tools application.
Enable USB debugging mode on your device. Settings > Developer Option > Click USB debugging mode.
SKIP THIS UNLESS YOU HAVE ISSUES(let me know)Then connect your android smartphone to the computer. Your device will detect by MTK droid tools within few minutes. If your mobile phone is not detected, then you have to install USB drivers on your device first. Right click on the “InstallDriver.exe” and select “Run As Administrator” and then restart your computer to install USB driver.
Click IMEI/NVRAM to backup android IMEI and then click backup. Your android backup will be stored in BackupNVRAM folder.
Continue to the backup system, firmware, data and etc (Android ROM) select on Root, backup, recovery tab and backup tab. The process will finish within few minutes.
"

How To Guide [All-in-One] Xiaomi 13 (fuxi): Unlock Bootloader, Root, Flash TWRP, Flash ROM

[All-in-One] Xiaomi 13 (fuxi): Unlock Bootloader, Root, Flash TWRP, Flash ROM
Dear Xiaomi 13 user,
I'm not responsible if anything happens to your device. If you execute these AiO procedures properly then you shouldn't face any problems. Before you proceed please back up all your important data and make sure that your phone battery is charged >80%!
A. Prerequisites:
1. Install ADB and Fastboot tools with drivers on Windows
How to do this please read here: https://forum.xda-developers.com/t/...vers-15-seconds-adb-installer-v1-4-3.2588979/
Restart your computer.
2. Enable "OEM unlocking" and "USB debugging" in your device
a. Enable Developer Options in: Settings/About Phone/MIUI version. Click on MIUI version 7 or 8 times
b. Now go to: Settings/Additional Settings/Developer Options and check "OEM unlocking" and "USB debugging"
3. Create a Mi Account
If you don’t have a Mi Account, then create one here: https://account.xiaomi.com
4. Connect your Mi Account to your device
Go to: Settings/Additional Settings/Developer Options/Mi Unlock status and check "Add account and device"
B: Unlock the Bootloader
Unlocking the bootloader will erase all your data! So please back up your data before you unlock the bootloader!
1. You must enable "OEM unlocking" and "USB debugging" as per point A.2.
2. You must connect your Mi Account with your device as per point A.4.
3. Download Mi Unlock Tool here: https://en.miui.com/unlock/index.html
4. Enter the fastboot mode by holding together "Volume Down + Power" and connect your device to your computer via USB cable (best would be the original cable)
5. Start the Mi Unlock Tool
6. Enter your eMail and your password of your Mi Account (the same account which you added to your device - Point A.4.)
7. Connect you device to your computer and start the unlock procedure
8. Follow the unlock tool instructions until the unlock procedure is finished
9. Reboot your device
C: Root Your MIUI ROM without TWRP
1. Your Bootloader must be unlocked (see Point B)
2. You must enable "OEM unlocking" and "USB debugging" as per point A.2.
3. Download the fastboot ROM (the same ROM currently installed in your device) from here: https://xiaomifirmwareupdater.com/miui/fuxi/ and unzip it.
4. Open the file and extract the "init_boot.img" on to your computer.
5. Transfer the “init_boot.img” from your computer on to your device
6. Download the latest Magisk manager App from here: https://github.com/topjohnwu/Magisk and install it on to your device.
7. Open Magisk App and click install, and then "select and patch a file" (of course you select “init_boot.img”)
8. Transfer the patched boot.img file from your device’s download folder on to the “ADB and Fastboot” folder in your computer. In the computer rename the patched file into: “patched_boot.img”
9. Switch off your device. Now enter the fastboot mode by holding together "Volume Down + Power" and connect your device to your computer
10. Go to “ADB and Fastboot” folder in your computer and open a command window inside that folder.
Enter the terminal command in command line: >>fastboot boot patched_boot.img<< and hit enter. Now the device will restart.
Attention your device is now only temporary rooted, so don’t restart your device just yet. Find Magisk app in your device, open it, click “install” and then check “direct install”, then press “let’s go”. Magisk will now install and make the root permanent. Now click “reboot” and the device will restart.
If this procedure doesn't work with the file “init_boot.img”, then use the file “boot.img” instead and follow the same procedure.
D: Install A Xiaomi.eu ROM
1. Your Bootloader must be unlocked (see Point B)
2. You must enable "OEM unlocking" and "USB debugging" as per point A.2.
3. Download and put onto your computer the Xiaomi.eu ROM (please select fuxi) from here: https://sourceforge.net/projects/xi...files/xiaomi.eu/MIUI-STABLE-RELEASES/MIUIv14/ and unzip it.
4. Switch off your device. Now enter the fastboot mode by holding together "Volume Down + Power" and connect your device to your computer.
5. In your computer (in the Xiaomi.eu ROM folder) please click the file: “windows_fastboot_first_install_with_data_firmat.bat" (if you’re using windows, or press the proper file if you’re using mac or linux) and computer will do the rest. The device will restart.
E: Root Your Xiaomi.eu ROM without TWRP
1. Your Bootloader must be unlocked (see Point B)
2. You must enable "OEM unlocking" and "USB debugging" as per point A.2.
3. Pls find in your computer the downloaded and unzipped hybrid Xiaomi.eu ROM from Point D.2.
4. Find the file “init_boot.img” and transfer it on to your device
5. Download the latest Magisk manager App from here: https://github.com/topjohnwu/Magisk and install it on to your device.
6. Open Magisk App and click install, and then "select and patch a file" (of course you select “init_boot.img”)
7. Transfer the patched “init_boot.img” file from your device’s download folder on to the “ADB and Fastboot” folder in your computer. In the computer rename the patched file into: “patched_boot.img”
8. Switch off your device. Now enter the fastboot mode by holding together "Volume Down + Power" and connect your device to your computer
9. Go to “ADB and Fastboot” folder in your computer and open a command window inside that folder.
Enter the terminal command in command line: >>fastboot boot patched_boot.img<< and hit enter. Now the device will restart.
Attention your device is now only temporary rooted, so don’t restart your device just yet. Find Magisk app in your device, open it, click “install” and then check “direct install”, then click “let’s go”. Magisk will now install and make the root permanent. Now click “reboot” and the device will restart.
If this procedure doesn't work with the file “init_boot.img”, then use the file “boot.img” instead and follow the same procedure.
F: Install TWRP
To be updated once the official TWRP for this device is available.
G: Install A Custom ROM
To be updated once official custom ROMs (Lineage etc.) for this device are available.
H: Return To MIUI
1. Your Bootloader must be unlocked (see Point B)
2. You must enable "OEM unlocking" and "USB debugging" as per point A.2.
3. Download and put onto your computer the latest fastboot ROM from here: https://xiaomifirmwareupdater.com/miui/fuxi/ and unzip it.
4. Switch off your device. Now enter the fastboot mode by holding together "Volume Down + Power" and connect your device to your computer.
5. In your computer (in the folder where you have put your ROM) please click the file:
a. “flash_all.bat" (if you want to make a clean install but keep the bootloader unlocked).
b. “flash_all_except_storage" (if you want to make a clean install but keep your data and maintain the bootloader unlocked).
c. “flash_all_lock" (if you want to make a clean install and lock the bootloader).
In all three cases (a., b., c.) when flashing is finished, restart your device.
If my guide helped you, please click "thanks" and enjoy your phone.
Frequently Asked Questions (FAQ):
1. Waiting time to unlock the bootloader
Q. If I receive the message: "unlocking can be done after 72h or 168h or 360h etc.". Is there a way to skip this waiting time?
A: Unfortunately you have to wait for that time to pass. There’s no way around it (that I know of). It seems like new and never used (to unlock bootloader) accounts receive a shorter waiting time.
2. Unlock procedure stops at 99%
Q: If my unlock procedure stops at 99%, what could be the problem?
A: Most problay you're using two different Xiaomi accounts. You have to use the same account that you have added into the device also in the unlock tool otherwise it will not work.
3. Recommended ad-blocker (for rooted devices)
Q: I want to block the advertisement in all apps, what app can you recommend?
A: If you decide to root your device, then you can install AdAway from here: https://adaway.org/. In order for AdAway to work properly please add in the Magisk App the Systemless Hosts (Magisk/Settings/Systemless Hosts).
4. Retaining the root after ROM update
Q: If I root my device as per point C, E of the AiO and I install a system update in my device, is the root still available?
A: Unfortunately root will be removed after the system update. So you have to repeat the procedure in point C, E.
I need to correct you, sorry. After manny tries, unlocking xiaomi 13 is:
you mod boot.img and init_boot.img with magisk
fastboot flash init_boot *init_boot_moded.img*
fastboot flash boot_ab *boot_moded.img*
fastboot reboot
Unfortunately root has no full access, no access to /system so android auto, even if moded to system app not working. build.prop also not editable by any way
I got stock builds from https://xiaomistockrom.com/xiaomi-13
tried on 14.0.4 and 14.0.9
At some point something went wrong and phone went in fastboot loop reboot. Susccesfully flashed using MiFlash20220218
me_Alex said:
I need to correct you, sorry. After manny tries, unlocking xiaomi 13 is:
you mod boot.img and init_boot.img with magisk
fastboot flash init_boot *init_bootmoded.img*
fastboot flash boot_ab *bootmoded.img*
fastboot reboot
Unfortunately root has no full access, no access to /system so android auto, even if moded to system app not working. build.prop also not editable by any way
Click to expand...
Click to collapse
With A13 the system remains in read only.
Twrp unofficial released
huntersun said:
Twrp unofficial released
Click to expand...
Click to collapse
Where?
NOSS8 said:
Where?
Click to expand...
Click to collapse
Xiaomi13-TWRP_3.7.0-A13.img
drive.google.com
NOSS8 said:
Where?
Click to expand...
Click to collapse
fastboot flash recovery_ab Xiaomi13-TWRP_3.7.0-A13.img
huntersun said:
fastboot flash recovery_ab Xiaomi13-TWRP_3.7.0-A13.img
Click to expand...
Click to collapse
If the link does not lead to the download and requires a subscription to TG, you must edit your post and delete the link. XDA rules.
But you can put it online via a cloud.
NOSS8 said:
If the link does not lead to the download and requires a subscription to TG, you must edit your post and delete the link. XDA rules.
But you can put it online via a cloud.
Click to expand...
Click to collapse
Already fixed
me_Alex said:
I need to correct you, sorry. After manny tries, unlocking xiaomi 13 is:
you mod boot.img and init_boot.img with magisk
fastboot flash init_boot *init_boot_moded.img*
fastboot flash boot_ab *boot_moded.img*
fastboot reboot
Unfortunately root has no full access, no access to /system so android auto, even if moded to system app not working. build.prop also not editable by any way
I got stock builds from https://xiaomistockrom.com/xiaomi-13
tried on 14.0.4 and 14.0.9
At some point something went wrong and phone went in fastboot loop reboot. Susccesfully flashed using MiFlash20220218
Click to expand...
Click to collapse
The reason behind the system partition being unreadable is that Xiaomi is using the new EROFS filesystem, instead of the old ext4. EROFS provides way faster reading and writing speeds, as well as saving space by compressing files dynamically. EROFS stands for Enhanced Read Only File System, so as the name suggests, there's no workaround to edit system files unless you have magisk.
More on EROFS:
EROFS - Wikipedia
en.wikipedia.org
huntersun said:
Twrp unofficial released
Click to expand...
Click to collapse
Do you have the device tree for TWRP? I want to build some ROMs for fuxi.
mnitpro said:
Do you have the device tree for TWRP? I want to build some ROMs for fuxi.
Click to expand...
Click to collapse
Please ask YuKongA, he have device tree, kernel,... But he was hide the gits.
YuKongA/kernel_xiaomi_fuxi
Contribute to YuKongA/kernel_xiaomi_fuxi development by creating an account on GitHub.
github.com
huntersun said:
Please ask YuKongA, he have device tree, kernel,... But he was hide the gits.
YuKongA/kernel_xiaomi_fuxi
Contribute to YuKongA/kernel_xiaomi_fuxi development by creating an account on GitHub.
github.com
Click to expand...
Click to collapse
Thanks a lot for sharing. I'll reach out to him.
mnitpro said:
Do you have the device tree for TWRP? I want to build some ROMs for fuxi.
Click to expand...
Click to collapse
Hey bro, does your build plan include pixel experience? I would love to experience it on Mi 13.
TWRP for FUXI
https://forum.xda-developers.com/t/shared-twrp-by-skkk.4549573/
Whats Xiaomis current policy about root and warranty, i remember they used to be "friendly" about it.
Wish they shortened the unlock waiting time to couple of hours, i'd consider another Xiaomi again. Last one was Xiaomi 9, I had to wait 2 weeks while phone being unused (not rooted = insecure).
Dumb question:
If i unlocked bootloader, flashed another rom (like global or EU) , can i relock it ?
And later, if i want to unlock it again, do i have to wait another 7 days?
Dark Hunter said:
Dumb question:
If i unlocked bootloader, flashed another rom (like global or EU) , can i relock it ?
And later, if i want to unlock it again, do i have to wait another 7 days?
Click to expand...
Click to collapse
You can lock the bootloader only with stock roms.
Chinese model, locking possible only with a CN rom.
Global model, all roms except CN.
No 7 day waiting period if you use the same account.
senerex said:
[All-in-One] Xiaomi 13 (fuxi): Unlock Bootloader, Root, Flash TWRP, Flash ROM
...
E. Install A Custom ROM
To be updated once official custom ROMs (Lineage etc.) for this device are available.
Click to expand...
Click to collapse
I'm holding off on buying a global device for if/when AOSP custom ROMs come out.
Thanks for the thread!

Categories

Resources