Database Info

Question Lenovo TB-J716F: Keeping Widevine L1 when rooting

Hello everyone,
it seems that it's currently not possible to root the Lenovo XiaoXin Pad Pro 2021 (TB-J716F) and keep Widevine L1 at the same time. Once the bootloader is unlocked, the tablet seems to lose Widevine L1 and falls to L3.
As soon as someone finds a way to root the device and not lose L1, please post it in this thread.
Thanks a lot! Have a nice day
HANN1860BAL

I have had some luck with some Magisk modules on my Xiaomi Mi 9T pro which is unlocked, rooted and still has L1. I will post the modules I installed when I get home so you can try it.
EDIT:
Universal safetynet fix by kdrag0n
MagiskHide Props Config by Didgeridoohan
Not sure if it supports this tablet yet but I think there's a way to copy your L1 devices fingerprint and then put it on the rooted/unlocked one.

Thank you, I will check this modules for compatibility. It is hard to get the official ROMs currently, so I'm not going to "try & error" at the moment.

Is it possible to restore L1 on a locked/unrooted device when one doesn't have the original QCN file anymore?
(I did "reset all before download" in QFIL configuration)

Sorry, I didn't try to root so far.

Question Restore stock fw + widevine

Hi guys
I just bought my P11 pro from AliExpress with the not so good global ROM and unlocked bootloader. Also, L3 widevine.
Is there a way to put the stock fw back and restore the widevine L1?
Is the stock fw better than the global fw?
Thanks in advance

Install Stock ROM - Xiaoxin Pad Pro 2021 [TB-J716F]
How to install Stock ROM - Xiaoxin Pad Pro 2021 [TB-J716F] I tried installing a GSI-ROM on this tablet, which basically worked except for three/four bugs I coulnd't solve. So I tried to restore the Stock ROM in the meantime and will share my...
forum.xda-developers.com

Thanks! I read it but still got questions.
Is the stock fw fully translated to English?
Re-installing the stock fw will allow for OTA updates?
Is there a downside to the stock fw?
Also, as I can understand, there is no way to restore widevine L1 once the bootloader has been unlocked. Does anyone know anything about that?

renan.kunst said:
Thanks! I read it but still got questions.
Is the stock fw fully translated to English?
Re-installing the stock fw will allow for OTA updates?
Is there a downside to the stock fw?
Also, as I can understand, there is no way to restore widevine L1 once the bootloader has been unlocked. Does anyone know anything about that?
Click to expand...
Click to collapse
English is my native language and the Chinese ROM on this 2021 Pad Pro 11" is actually pretty decent. I have no translation issues. There are a few apps you will want to disable and you will have to manually install the play store but once you’ve done that it works fine. Its fully google certified and Netflix etc shows up in a search. I use Nova Launcher rather than the Lenovo launcher which I would also recommend.
Mine came with the Chinese firmware so I didn’t have to do any messing about and my widevine L1 is intact, I have received x2 OTA’s an I manually flashed to update to ZUI13. I believe other people eventually received those updates via OTA as well.
I’m sure I’ve seen people on the thread who have successfully flashed back to the Chinese ROM, locked bootloader and regained Widevine L1.

I can confirm this.
I recently ordered the P11 Pro from bangood.
This also came with a outdated global ROM and Widevine L3.
After Installing the Chinese ROM with above guide and locking the bootloader I got Widevine L1.
I hope this helps.

.

greenautumn said:
I can confirm this.
I recently ordered the P11 Pro from bangood.
This also came with a outdated global ROM and Widevine L3.
After Installing the Chinese ROM with above guide and locking the bootloader I got Widevine L1.
I hope this helps.
Click to expand...
Click to collapse
That's great! How did you relock the bootloader?
I was able to reinstall the stock fw witch already received OTA update to ZUI 13 (yay!)

renan.kunst said:
That's great! How did you relock the bootloader?
I was able to reinstall the stock fw witch already received OTA update to ZUI 13 (yay!)
Click to expand...
Click to collapse
I used the script shared by Tropaion in his post on how to unlock/lock the boot loader:
https://forum.xda-developers.com/t/lock-unlock-bootloader-xiaoxin-pad-pro-2021-tb-j716f.4347321/
What is important is that you have to install ADB fast boot and for me I also had to install the lenovo driver shared by zeroflame15 in his reply to the post:
https://forum.xda-developers.com/t/...n-pad-pro-2021-tb-j716f.4347321/post-85850437
When you have all drivers installed all you have to do is run the script and follow the steps.
I hope this helps!

Thank you guys!
I was able to re-lock the bootloader and restore widevine L1
Turns out that even though I have the L1 certification, Netflix , Amazon and Disney will limit the quality of the streaming because it is a portable device. No HDR on Netflix too... Bummer. Still, I managed to install stremio and get the quality I pay for.

renan.kunst said:
Thank you guys!
I was able to re-lock the bootloader and restore widevine L1
Turns out that even though I have the L1 certification, Netflix , Amazon and Disney will limit the quality of the streaming because it is a portable device. No HDR on Netflix too... Bummer. Still, I managed to install stremio and get the quality I pay for.
Click to expand...
Click to collapse
That's odd. As you can see in the screenshot attached I do have the option to stream in full HD via Netflix now. You might want to try reinstalling Netflix via the Google play store as this should now also be certified. (At least it is for me) HDR capabilities I am still missing however.

renan.kunst said:
Thank you guys!
I was able to re-lock the bootloader and restore widevine L1
Turns out that even though I have the L1 certification, Netflix , Amazon and Disney will limit the quality of the streaming because it is a portable device. No HDR on Netflix too... Bummer. Still, I managed to install stremio and get the quality I pay for.
Click to expand...
Click to collapse
You can get Dolby Vision on the P12 but as you say HD only. Stremio is the way forward. I have kept my subs live for use on the TV but at least we can watch in full quality in bed.

Widevine L3

After new year or 11.0.5.1 update, widevine certificate went from L1 to L3. I never unlocked, rooted or modded my phone. Model is Oneplus 7 Pro GM1910 256gb. What is your widevine level?

Same for me, although I am not sure of the timing. Ever find a fix?

Try flashing latest OOS 11 image from MSM tool. Internet says it fixes the L3 issue.
Note:
1) Flashing ROM from MSM tool will wipe data so backup first.
2) The image necessarily needs to be Oxygen OS 11. Version 10 won't fix anything.
I have this issue as well. But I am living with it as I don't use Netflix stuffs. Let the community know if it fixes

Lenovo ThinkShield Security & bootloader unlock?

Hello,
A couple of days ago, a member of my family wanted to unlock their Motorola Edge 30 Fusion's bootloader, to be able to decrypt the data. They brought it to me, since they knew I had some experience with doing so and because I got their bootloader unlocked Galaxy Note9 working with Netflix in full quality (WideVine L1).
This time around, after unlocking the bootloader, installing Magisk and decrypting the data partition, Netflix (and other DRM software) would fully refuse to work. So I took a LogCat read & a DRM info report and saw this:
SafetyNet BASIC is passed (MagiskHideProps & SafetyNet fix + Zygisk & MagiskHide)
WideVine reported level is L1
However! Logcat reports WVCdm being unable to locate & download a certificate for L1. So I checked /data/vendor/mediadrm and the reported error was correct.
However, there is a certificate for L3, but the phone refuses to fall back to L3 for some reason.
liboemcrypto disabler has been unsuccessful, since, from what I can tell, the phone does not use that library.
These same symptoms occur when the userdata partition is encrypted.
Does anybody have any suggestions? I used the exact same steps to get WideVine L1 on the Galaxy Note9.
My opinion is that it has to do with ThinkShield somehow. Can someone advise, please?
Thank you!

antoniu200 said:
Hello,
A couple of days ago, a member of my family wanted to unlock their Motorola Edge 30 Fusion's bootloader, to be able to decrypt the data. They brought it to me, since they knew I had some experience with doing so and because I got their bootloader unlocked Galaxy Note9 working with Netflix in full quality (WideVine L1).
This time around, after unlocking the bootloader, installing Magisk and decrypting the data partition, Netflix (and other DRM software) would fully refuse to work. So I took a LogCat read & a DRM info report and saw this:
SafetyNet BASIC is passed (MagiskHideProps & SafetyNet fix + Zygisk & MagiskHide)
WideVine reported level is L1
However! Logcat reports WVCdm being unable to locate & download a certificate for L1. So I checked /data/vendor/mediadrm and the reported error was correct.
However, there is a certificate for L3, but the phone refuses to fall back to L3 for some reason.
liboemcrypto disabler has been unsuccessful, since, from what I can tell, the phone does not use that library.
These same symptoms occur when the userdata partition is encrypted.
Does anybody have any suggestions? I used the exact same steps to get WideVine L1 on the Galaxy Note9.
My opinion is that it has to do with ThinkShield somehow. Can someone advise, please?
Thank you!
Click to expand...
Click to collapse
Let's take a step back a moment. You're assuming the SafetyNet attestation is a good measure of the platform integrity - which it no longer is, because it has been replaced by Play Integrity. More information here.
That would be my first step, to ensure the device is passing BASIC and DEVICE attestation.

V0latyle said:
Let's take a step back a moment. You're assuming the SafetyNet attestation is a good measure of the platform integrity - which it no longer is, because it has been replaced by Play Integrity. More information here.
That would be my first step, to ensure the device is passing BASIC and DEVICE attestation.
Click to expand...
Click to collapse
Thank you for your reply!
I didn't know that was a thing. I installed the SafetyNet fix from Displax and BASIC and DEVICE tests are now passed, exception being the STRONG test. However, WideVine still refuses to fall back to L3.

OnePlus 8T Widevine Issues (L3 or L1 with bad system id)

I have an International KB2005 OnePlus 8T. I had it working great on official Evolution X, F15 firmware copied to both slots, rooted with Magisk Delta 6, passing SafetyNet, banking apps, streaming apps EXCEPT for Netflix. I turned on Netflix spoof in The Evolver settings but this only let it install, when I launched it it would just hang forever.
I checked my Widevine info with DRM info. At the time I had L1 but an invalid System ID (very long digit, way longer than 5 numbers but I don't remember.) I'm pretty sure that was the issue based on some conversations I had.
Ok so I want to fix my widevine giving it L1 with a valid system ID. So I do the "nuclear" option and msmtool back to OOS 11.0.7.9. msmtool completes successfully, bootloader is locked but now widevine is L3 with System ID 8159.
I don't have any original backup files from the phone, I also didn't try the older msmtool to the earlier OOS release. What is the correct way to not only get L1 widevine with a valid system ID on OOS, but what's the correct procedure to unlock bootloader, install a ROM and still retain L1?
TL;DR: how to get L1 widevine with valid system id on KB2005?

I was on the same page as you. I tried searching everywhere and didn't find about it anywhere. There isn't any way to fix the system id as of now. However there is a workaround to get netflix working, if thats what you are trying to do.
Step 1: MSMtool back to oos 11.0
Step 2: Unlock bootloader. (it changes the system id to 4 digit number which is L1 secrity)
Step 3: Install netflix and other apps that dont work with broken system ID. Log in your account.
Step 4: Update your rom.
System ID breaks but your apps works fine.

AstronxD said:
I was on the same page as you. I tried searching everywhere and didn't find about it anywhere. There isn't any way to fix the system id as of now. However there is a workaround to get netflix working, if thats what you are trying to do.
Step 1: MSMtool back to oos 11.0
Step 2: Unlock bootloader. (it changes the system id to 4 digit number which is L1 secrity)
Step 3: Install netflix and other apps that dont work with broken system ID. Log in your account.
Step 4: Update your rom.
System ID breaks but your apps works fine.
Click to expand...
Click to collapse
So when going from OOS 11.0 to a custom ROM, are you suggesting to dirty flash and not wipe data (I always thought this was a terrible idea)? Or still do a clean flash of the ROM then re-install those apps and it will work?

It is a terrible for some ROM
Dopamin3 said:
So when going from OOS 11.0 to a custom ROM, are you suggesting to dirty flash and not wipe data (I always thought this was a terrible idea)? Or still do a clean flash of the ROM then re-install those apps and it will work?
Click to expand...
Click to collapse
I had tried restoring with titanium backup but the results were same, they dont work. So yeah dirty flash is a terrible idea for some rom while some ROM allow dirty flashing. I have only tested on updating ROM from OOS 11 to OOS 13 and its working.

AstronxD said:
It is a terrible for some ROM
I had tried restoring with titanium backup but the results were same, they dont work. So yeah dirty flash is a terrible idea for some rom while some ROM allow dirty flashing. I have only tested on updating ROM from OOS 11 to OOS 13 and its working.
Click to expand...
Click to collapse
I've never ever ever seen a ROM that doesn't require a wipe when going from stock to the ROM. However once you're on the ROM, you can usually dirty flash updates unless the maintainer specifically says a new build requires a clean flash. Maybe this would work if there was a modified ROM based on OOS.
I appreciate your responses, but OOS 13 is the worst version of Android I've ever tried. I guess my dream of getting the 8T working with an A13 AOSP/LOS based ROM is still dead (with the valid L1 cert, otherwise it works fine).
I'm sticking with Pixels from now on. On every Pixel I've ever messed with (3a XL, 5a 5G RIP mobo, 6a, 7 Pro) I've been able to do anything- unlock the bootloader, try any custom ROM and/or kernel, use a custom recovery, have safetynet passing or failing and the valid L1 widevine cert just persists. Seems like a silly reason to dump OnePlus, but I need that valid L1 cert and I'm not willing to stay on the good, outdated OOS 11 or use the terrible, new OOS 13.