** DISCLAIMER: I AM NOT A DEVELOPER. I DO THIS AS A HOBBY AND SHARE MY FINDINGS IN CASE SOMEONE ELSE FINDS THEM USEFUL. **
** THIS WORKED ON MY DEVICE BUT IT MAY NOT WORK ON YOURS. APPLY AT YOUR OWN RISK **
Requirements:
Flashtool 0.9.15.0
Rooted SGP311 (on any other previous Android version) with custom recovery installed.
If you do not meet these conditions, for example, if you are on an unrooted 4.3 system, here is a guide to get you on a rooted 4.1.2 with recovery:
http://forum.xda-developers.com/showpost.php?p=53063218&postcount=14
This works on locked or unlocked bootloaders. This also works on any customization. Mine was US Generic before applying this. I used the UK customization because at the time of this posting that is the only English customization available. I can post the US root files later if need be.
The procedure should work with any pre-rooted Android version but I started with 10.1.C.0.370 (4.1.2) which was rooted with DooMLoRD_Easy-Rooting-Toolkit_v17, patched with remountrebootfix, and equipped with XZDualRecovery.
Limitations:
There is a small chance that the process would delete the files on your internal SDcard so back them up. Also, you will have to reinstall all your apps, as they get erased too.
Note that Sony has admitted that this release has a battery drain problem and has issued a workaround that involves disabling Google services:
http://talk.sonymobile.com/t5/Xperi...-Drain-issue-Workaround-Fix/m-p/708273#M42303
Download link:
Mega
https://mega.co.nz/#F!oxdFQLSa!2su-BTlYfaANi26VuV7o4w
You only need the zip and ftf files. The txt file is just the checksum if you want to verify that your download is error-free. I strongly recommend that you do the checksum before flashing.
Instructions:
1- Backup before you start messing with your tablet!
2- Put system.flashable.zip in /sdcard of your tablet.
3- Keep SGP311_10.5.A.0.230_R1D_VMo_UK_IE_NoSystem.ftf on your PC.
4- Disconnect any USB cable that may be attached to your tablet.
5- Reboot to recovery. Preferably to TWRP, but you can make CWM work too.
6- Do not wipe anything.
7- Once in recovery, flash system.flashable.zip.
8- It is important to NOT REBOOT the tablet after this step.
9- Find and use the Power Off option in the recovery and turn your tablet off. In CWM based PhilZ Touch it is under "Power Options" -> "Power Off". In TWRP it is under "Reboot" -> "Power Off". If you see your tablet rebooting, force it to turn off by pushing the power and volume up keys simultaneously (or however else you can!)
10- Open Flashtool 0.9.15.0 and click on the flash icon. Choose flash mode.
11- Navigate to where you have saved SGP311_10.5.A.0.230_R1D_VMo_UK_IE_NoSystem.ftf and flash this ftf with your tablet in flash mode. To put your tablet in flash mode, hold the volume down button when it is off and connect with the USB cable to the PC.
12- Reboot and enjoy!
Credits:
I only put the files together. All the credit should go to XDA's [NUT] and DooMLoRD and many others...
Thank you!
Worked perfectly fine and is rooted!
:good:
Thanks. Worked fine :good:
download from gdrive always fails.. is there a mirror?
Riekr said:
download from gdrive always fails.. is there a mirror?
Click to expand...
Click to collapse
Sorry about that. If you know a reliable server I can try and upload it there.
Ok
Riekr said:
download from gdrive always fails.. is there a mirror?
Click to expand...
Click to collapse
I'm uploading on mega now. Will post the link as soon as it's ready. Check back in about an hour.
hi najoor
my situation has as follow: tab z 4.3 non rooted running last FW.
i understood i have to downgrade to 4.1.2 and flash the build 10.1.C.0.370(i found a us version hope is ok) with flashtool, only then i can root with the doomlord link method.
after that i can start following this guide. can you confirm me it is correct?
also i assume i can use the version of flashtool you are mentioning.
thanks in advance.
mame3876 said:
hi najoor
my situation has as follow: tab z 4.3 non rooted running last FW.
i understood i have to downgrade to 4.1.2 and flash the build 10.1.C.0.370(i found a us version hope is ok) with flashtool, only then i can root with the doomlord link method.
after that i can start following this guide. can you confirm me it is correct?
also i assume i can use the version of flashtool you are mentioning.
thanks in advance.
Click to expand...
Click to collapse
Hello,
Yes, if you flash 4.1.2 on your unrooted 4.3 them you can use doomlord's method to root it. Once your 4.1.2 is rooted make sure you apply the remountrebootfix patch to it. Then install the XZDualRecovery or other recovery of your choice, then start my guide.
The flashtool version I mentioned should work for every thing.
Finally, if you are flashing a 4.1.2 ftf that you found online, exclude the ta partition, if it exists in the ftf, when flashing.
Many thanks for your reply. 2 questions where i can find the patch you mention and how i can install it? The ftf 4.1.2 i found here in xda i took from the thread in development used now to flash the 312 and to flash 311 are addressing to the thread you opened. I'll see how to use the flashtool since I'm new to xperia modding as i only did with Samsung devices.
Inviato dal mio GT-N5110 utilizzando Tapatalk
mame3876 said:
Many thanks for your reply. 2 questions where i can find the patch you mention and how i can install it? The ftf 4.1.2 i found here in xda i took from the thread in development used now to flash the 312 and to flash 311 are addressing to the thread you opened. I'll see how to use the flashtool since I'm new to xperia modding as i only did with Samsung devices.
Inviato dal mio GT-N5110 utilizzando Tapatalk
Click to expand...
Click to collapse
Ok give me a couple of hours to get back to my computer. I'll gather the files and post a mini guide for you.
Worked a treat so thanks for taking the time to write the tutorial and host the files.
A couple of times I was scratching my head.
First was that no dual recovery on my rooted system. All my fault from the last upgrade.
Second was "Shut-down..Don't reboot. but the big button said REBOOT.... It wasn't until I eventually clicked the reboot button in TWRP that it came up with Shutdown.
All in all a pretty straight forward upgrade (once I'd made good on my mistakes)
Great work and thanks again.
zach
najoor said:
Ok give me a couple of hours to get back to my computer. I'll gather the files and post a mini guide for you.
Click to expand...
Click to collapse
no rush and most of all many many thanks
How to Install a 4.1.2 stock rom on SGP-311 with root and recovery
One of the requirements for upgrading to new releases of Sony's Android for Tablet Z with root is to start with a previous Android version that has been rooted. At the time of this writing, I do not know of any easy method to root a 4.3 installation. For 4.2.2, there is always Vroot but over time I have become very skeptical of it. It certainly does root the rom but at the same time it behaves more and more like malware or at least bloatware so I don't use it unless I have to. Which leaves us with 4.1.2, which is the initial factory release version of Tablet Z, which also happens to be easily rootable.
So if you are on an unrooted ROM and want to upgrade to Kitkat with root, the reasonable way is to downgrade to 4.1.2, root and patch it, install recovery on it, and then try the instructions at the beginning of this thread. So here is a mini guide to:
How to install a 4.1.2 stock rom on SGP-311, root it, and add custom recovery
0- Always back up. Flashing an ftf likely erases your internal SDcard.
1- You need Flashtool by Androxyde (not attached to this posting) to put the rom on your tablet (Don't confuse it with Sony's official flash tool called Emma). I recommend Flashtool version 0.9.15.0.
2- You need an image of the 4.1.2 rom, which is an ftf file (not attached to this posting). You can get one from here: http://forum.xda-developers.com/wiki/Sony_Xperia_Tablet_Z_SGP311 The customization is not important so 10.1.C.0.370 USA version should do just fine.
3- Fire up the flashtool and flash the ftf file into your tablet. There is a ton of tutorials on line about how to do this. The only thing I should add to them is that if you get the ftf from a third party (i.e. you didn't build it with you own tablet) you should exclude the TA partition when flashing it. The reason is that, as I understand it, the TA partition has data that is unique to each individual tablet. So I never understood why people pack their TA partitions in the ftf that they publish. If you forget to exclude the TA partition when you flash you will end up overwriting your own unique TA partition with someone else's. While that is not gonna render your tablet unfunctional, you will lose your warranty and a few other things of less importance.
4- Once you get 4.1.2 on your tablet, go to settings and find Developer Options. Under that locate USB debugging and activate it.
5- Attach your tablet to the PC and make sure you have closed the flashtool on the PC.
6- Unzip DooMLoRD_Easy-Rooting-Toolkit_v17_perf-event-exploit (attached to this posting) on your PC and run runme_win.bat (I am assuming you are on Windows)
7- Let the code do its thing and if all goes well, your tablet will reboot by itself and you will see SuperSU added to your installed apps.
8- This particular rooting method must be patched immediately after so unzip remountrebootfix-windows (attached to this posting) on your PC and run install.bat. Pay close attention to your tablet display as you are going through the instructions because at some point you have to grant root rights to ADB on your tablet and come back to the PC and "press any key to continue". The patch will be applied and the tablet will reboot.
9- (Very optional) You can install joeykrim's Root Checker form Android Market to verify this process has indeed given you root privileges. You can also install something like Rhythm Software's File Manager HD (Explorer) from the Market, then go to settings, check "Root Explorer" and then check "Mount System Folders". Without the patch in step 8 the tablet crashes and reboots itself a few seconds after you perform this mounting.
10- You now need to add a recovery partition to your Tablet. XZDualRecovery is a great piece of work by none other than [NUT] of the xda. Unzip TabZ-lockeddualrecovery2.7.94-BETA.installer (attached to this posting) and run install.bat. Once it is installed, the Tablet will immediately reboot into the installed recovery. If all goes well, you will see the recovery menu. Click on reboot. In future, if you want to get to the recoveries that you just installed, reboot your tablet and wait for the LED next to the power button to turn green then press volume up for CWM Philz recovery or volume down for TWRP.
That is it folks. Now you have a 4.1.2, with root and recovery (in fact 3 recoveries) installed.
sd delete
Hi
Thank you very much for this ROM,and instructions,it's awsome.
I've got only one problem after installing it. I can't delete anything from my sd card.
What did I wrong? What can I do?
Thanks in advance
Tamás
many thanks, finally a clear guide!! great job.
@ Szata68, the proble you experience is a feature of kitkat unfortunately. but now that you are root you can easily getting rid of that restrictions implemented by google, don't rememebre the name but if you search on google restricion sd card kitktat, one of the first results shown is how to deal with that
@ Szata68
I've not tried with any stock file browsers but ES File Explorer deleted files on internal and external. I haven't given it root access yet either.
I've been testing this for a good few hours now and I've not experienced any of the problems other people are having (other releases) It all seems happy.
szata.68 said:
Hi
Thank you very much for this ROM,and instructions,it's awsome.
I've got only one problem after installing it. I can't delete anything from my sd card.
What did I wrong? What can I do?
Thanks in advance
Tamás
Click to expand...
Click to collapse
Tamas,
I don't suggest you change anything to fix this problem because there are tools that come standard in this rom that can delete files on the sdcard and move data between internal and external storage (file commander and Sony file transfer) but if you insist, here is how to fix it permanently:
http://technofaq.org/posts/2014/04/fixing-external-sd-card-write-issue-on-android-kitkat/
Thank you very much guys!
I normally use FX Explorer,and that can't delete,but from now I won't use that with this ROM.
Thanks again for everyone!
update also possible with cyanogenmod
will the update also work with cyanogenmod 4.3 installed?
As far as I can see it, it should work ( I have apps requesting root sometimes ).
Thanks!
Related
ROOT JB (101) AND KITKAT (230) FIRMWARE WITH LOCKED BOOTLOADER
This thread is now officially obsolete. There is a new, simple and efficient ROOT method created by @geohot, based on the asec exploit. This method is valid for all versions of android with kernel dates older(earlier) than 04 June. The method probably works on any phone / tablet device EXCEPT the HTC M8, Moto G & E, and devices with Intel chipsets. Go to this thread for details:
http://forum.xda-developers.com/showthread.php?t=2783863
The guide below is obsolete and remains only for info. Please do not follow?.
DISCLAIMER: The steps WILL INVOLVE OBTAINING BOOTLOADER UNLOCK CODE FROM SONY, However, after unlocking, you will be guided to re-lock bootloader so that the end result will be a phone with Marlin Keys, Bravia Engine2 and Bootloader INTACT (LOCKED).
Starting Assumptions:
1. You have a Sony Xperia Z (C66XX) L-39H (Duh! Obvious!)
2. You have some knowledge of Root, SUPERUSER and enabling developer options, enabling USB Debugging mode, switching off and connecting your phone to USB & Computer with vol Up / Down Pressed to enable Fastboot mode or Flash Mode. If not, then go slowly and patiently, read every screen that flashes in front of you on your PC/Laptop and choose dilligently.
3. The bootloader status of your phone is BOOTLOADER UNLOCK ALLOWED--YES. This is the general case if you are on a no-contract plan with your service provider, or you have brought the phone at a full premium price (No discounted price by your wireless service provider). US / Canadian users, please obtain your unlock codes before you proceed further, all your phone's bootloaders ARE LOCKED. If you have bought the phone second-hand or from a dubious source check the bootloader lock status by opening the dialler and entering *#*#7378423#*#* (star-hash-star-hash S E R V I C E hash-star-hash-star). You will see four options 1. Service Info, 2. Service Tests, 3. Calibrations and 4. Customisation Settings. To check the bootloader status tap on Service Info>(next page)>tap on configuration>(next page) the last item is your bootloader status. It must read bootloader unlock allowed-YES If it reads "bootloader unlock allowed-NO" then you need unlock codes from your wireless service provider. If it reads "bootloader-UNLOCKED", then you have lost your Marlin keys and bootloader (This also means you cannot flash Sony updates, but you have a wide open field to flash any ROM and kernel of your choice!).
4. Loads of Patience....
5. Some coffee / favourite non-alcoholic brew at hand for sustenance (alcoholic beverages can be for later, till you're done with the process / you are past the legal age. Until then go easy....)
6. It is assumed that you have a Windows PC / Laptop (Win32/64) with all necessary drivers loaded. If not just download and install PC Companion, it will install the necessary Sony drivers.
Step-1
Locked bootloader with 4.2.2 (67 or lower firmware) ROOT status idoesn't matter.
Locked Bootloader with 4.3 (.569 / Commercial & Journalist's firmware) rooted / unrooted.
If on 4.2 firmware, then ROOT your device using BINARY's Method or cubeundcube's method (DOOMLORD's method works below 67 firmware, but I may be wrong) Links:
Binary's Thread: http://forum.xda-developers.com/showthread.php?t=1886460
cubeundcube nethod: http://forum.xda-developers.com/showthread.php?t=2559009
DOOMLORD's thread: http://forum.xda-developers.com/showthread.php?t=2327472
If on 4.3 firmware and not rooted, then downgrade to 4.2.2 (67 firmware) by flashing a ftf file of your region. Links for flashtool thread is given below. Use thread search to find ftf file for your region and download it.
If you are already rooted on 4.3, 569 firmware AND have a locked bootloader, then start from this point.
Make a backup of your Trim Area (TA) by using the tool created by DevShaft at this thread: http://forum.xda-developers.com/showthread.php?t=2292598 This Step is VERY IMPORTANT!!!!!
Step-2
You now have a rooted phone on 4.2.2 (67 firmware) or 4.3 (569 firmware), AND you have made a backup of yourphone's TA.
Now, upgrade to 4.3 (101 firmware) by connecting your phone to the PC (USB cable) using PC Companion or by using SUS. Use the UPGRADE option and not the CLEAN INSTALL option to retain data. On the first boot after upgrade you will realize that you've lost ROOT and any recovery that you had earlier installed.
Make a FTF file of the upgraded ROM by following the instructions from this thread by deadmask (http://forum.xda-developers.com/xperia-u/general/guide-how-make-ftf-stock-firmware-sus-t2075736) or from Stage-3 of this thread by VipeR (http://forum.xda-developers.com/showthread.php?t=2188129)
Step-3
You now have a phone on the latest firmware (without root) AND you have a backup of TA from 4.2 firmware, AND ALSO have a FTF file for the latest firmware.
Obtain the unlock code for your bootloader from the Sony website. Link: http://unlockbootloader.sonymobile.com/
enter your phone's IMEI number and your email to recieve the unlock code. Legal eagles, obtaining an unlock code DOES NOT MEAN THAT you have actually used it!!! Open your e-mail inbox and check for mail from SONY containing your unlock code.
Custom Kernel Download First download a custom kernel by DOOMLORD (with CWM) recovery for use immediately after unlocking the bootloader from this thread by DOOMLORD: http://forum.xda-developers.com/showthread.php?t=2167381 . Download the custom kernel and place it on your computer's desktop/folder of your choice. Extract the contents of the zip file and we'll come back to it later.
ADB+Fastboot Tools Download a set of ADB and fastboot tools made by anonymous and hosted at the Dev-host site Download link : http://d-h.st/I8l
After the zip file has downloaded extract it to get a folder fastboot+ADB Now take out the boot.img file from the zip file containing DOOMLORD's kernel above, and copy it to the win32subfolder inside the fastboot+ADB folder. Make a note of the location (Drive/folder) where this folder has been saved. (preferred storage on the desktop)
CWM Flashable SuperSU Download Download the latest flashable Super SU by Chainfire from the OP of this thread: http://forum.xda-developers.com/showthread.php?t=1538053 . Download the latest cwm flashable superSU.zip and place it in your phone's external SD Card
Use Androxyde's Flashtool (thread link:http://forum.xda-developers.com/showthread.php?t=920746) to unlock your bootloader It is a painless one-click procedure using the BL button. follow the instructions in the flashtool and let the phone reboot (after unplugging USB) Now recheck if ADB debigging mode and Unknown sources are enabled in phone settings.
Now click START on your PC and enter 'cmd' in the search box. Right click on the command prompt / DOS box (cmd.exe) and choose "run as administrator". Enter the administrator password if prompted by the PC. In the command prompt window type the following commands:
cd\
cd users\(your login username)\desktop\fastboot+adb\win32\ (in case you stored the fastboot+adb file on your desktop) or navigate to the folder where you stored the extracted files....
fastboot flash boot boot.img (did you extract and store the boot.img file from doomlord's kernel to the win32 file of fastboot+adb?)
wait for the results to flash and then type fastboot reboot andWAIT before you hit ENTER
Click to expand...
Click to collapse
Hold the phone in your hand and do the reboot command. As soon as the blue light goes off and the SONY logo appears wait for the phone LED to turn violet. Press Vol UP button on seeing the violet LED and release-press-release-press two to three times for good measure (Sometimes a constant press also works) till the LED goes off and the phone boots into CWM. In the CWM menu use the Vol up/down to tab move between the options and use the power button to select. There is also a touch-swipe down/up to tab-move and swipe right to select or swipe left to go back, use this method only if you are confident/familiar with the touch-select method. Select flash a Zip from external SD card and navigate to the folder where you stored the update-superSU-1.93.zip and select it. confirm by moving down to select Yes, Flash update-supersu1.93.zip and let CWM finish flasing the SU. go back to the main page and reboot to system from CWM.
After the phone reboots check Super SU is loaded on your phone in /System/app/ and check full root access on your phone....
Step-4
You now have a rooted phone on the Latest 101 firmware, with unlocked bootloader, AND you have a backup of your phone's TA and also have a ftf file of the latest firmware.
Now you have one last step to go back to stock kernel for locking your bootloader. Start Flashtool and select the flash (lightning) button select flash mode. Now select the latest firmware, which you had converted to FTF and on the right side top, (wipe options) untick all wipe options. On the right bottom (exclude), tick mark to exclude everything EXCEPT kernel and fotakernel. See that the centre window (flash content) shows only kernel.sin, fotakernel.sin and loader.sin. (Check Screenshot for reference) Now hit the flash button and put the phone into flash mode.Unplug and Reboot
Step-5
Now you have a rooted phone with the latest firmware on stock kernel (no CWM) AND you have a backup of the TA from your phone.
Now's the time to flash the TA. Do you remember the steps of making backup/restoring TA. check DevShaft's thread again, and remember it is better to do a dry run for restoring TA, before the final restore. DO IT.
Finally, you have rooted the phone with the latest firmware, and relocked your bootloader, and all with a ROM/Kernel and customisation of your region/choice.
Future Steps:
Flash a recovery. [NUT]'s dual recovery for locked bootloader is the best. Thread link : http://forum.xda-developers.com/showthread.php?t=2261606
Acknowledgements:
All DEVs and OPs whose threads, posts, tools and files as mentioned in this post. I have only placed them in one order. You may thank each thread OP &/or Dev for their tools, files and guides.
Unlock bootloader?
And re-lock at the end.... You wanna?
Dead Cookies leave no trails...
In 67 you can root with Doomlord solution, no need to unlock the bootloader.
Then need to update with cwm method other than rom flash.
Simple and easy to follow I now have a rooted Xperia Z on Android 4.3
johan8 said:
In 67 you can root with Doomlord solution, no need to unlock the bootloader.
Then need to update with cwm method other than rom flash.
Click to expand...
Click to collapse
hi there, would you pls advise the step for Doomlord's solution? I follow this threat http://forum.xda-developers.com/showthread.php?t=2386405 but fail at step 2 flash older rootable version (tried XperiaZ_C660X_KernelOnly_10.3.A.0.423_Generic_NL.f tf - 7.12 MB and C6603_10.4.1.B.0.101_Stripped.ftf). phone boot loop.
That's why I didn't advise using doomlord's method in op. Read again. Root using bin4ry's method/cubeundcube method and proceed as per op. There's no need for striped and full ftf, just the ftf you create from your upgrade is enough.
Dead Cookies leave no trails...
If you're going to go back to 2.67 anyway its easier to just flash NUTs upgrade to 4.3.
You will also have root and no fiddling with bootloader required.
Managed it successful. Thanks for your detailed tutorial. Very nice, now let's look forward to KK!
Sent from my GT-I8160 using xda app-developers app
I got a question,Is there a way I can unlock my bootloader without losing all my data?
I posted this thread only after verifying the steps on my device. I was initially on 569 with locked bootloader and rooted. I did the exact steps and found that I had not lost any data, personal or on the internal sd card. Try... But Pls make a backup, just in case (I did it too).
Dead Cookies leave no trails...
Cookie Ninja said:
I posted this thread only after verifying the steps on my device. I was initially on 569 with locked bootloader and rooted. I did the exact steps and found that I had not lost any data, personal orion internal sd card. Try... But Pls make a backup, just in case (I did it too).
Dead Cookies leave no trails...
Click to expand...
Click to collapse
I have a nandroid backup of 4.2.2 so I guess I could just restore that If I happen to lose my stuff. Or maybe I have to downgrade and then restore?
Edit: But Honestly it's really risky. maybe I'll just wait till someone comes up with an exploit for 4.3.
May have to wait a long time till a roast duck flies into your open mouth.....
Dead Cookies leave no trails...
Cookie Ninja said:
May have to wait a long time till a roast duck flies into your open mouth.....
Dead Cookies leave no trails...
Click to expand...
Click to collapse
You don't have to be a **** about it
First thanks
If i had download 4.3 101 on my copmputer and flash it manual can i skip step 2
- And when i flash framework and electocity cut can damage my phone ??!!
Sent from my C6603 using XDA Premium 4 mobile app
Wow too BIG post for root 4.3 and also i didnt understand anything:silly:
Huh! With every new phone I bought,rooting is harder.Samsung phones was so easy to root.LG was a little bit harder,but this... :-S
Sent from my C6603 using Tapatalk
Guys, it is not sooo hard as it sounds. If you are familiar with the usage of the flashtool and have a little bit trust in yourself, then THIS is definitive the right thread to get root access and a relocked bootloader on your .101 firmware. Follow exactly the steps and don't - please don't - listen to some smart heads who suggest to flash a prerooted fw. Take the hard way and you'll be definitive successfull. I did so with this tut, and my Z is totally ok. Thanks to Cookie Ninja again.
Sent from my rooted C6603 using xda app-developers app
hi all
ive got xperia z 6603 with 101 firmware..i try to flash 569 stripped file and then when i check back it doest even change anything at about phone..it still on 101..please someone..please provide more detailed instructions..im on LB..
Great tutorial. I've been linking people to it fairly regularly.
Just some input; you're advising people to get unlock codes from their network provider when it states 'Bootloader unlock allowed : No' in the service menu.
I'm fairly (almost completely) certain that there is no way for people in that situation to get the status changed at all, including by their network provider or Sony. Network/sim unlocking the device does not affect the bootloader unlock status.
Also, Flashtool has a fastboot mode that allows flashing of the boot.img, which may be easier for some that aren't confident working with the command line.
Anyway, they're small issues in what is a thorough tutorial.
Sent from my C6603 using Tapatalk
By almost popular demand, making this a thread
This is a how-to root, install recovery, backup drm keys, etc. from scratch in a single thread since finding all threads can be daunting. That's basically all the things you generally want to do when you root the phone (WITHOUT UNLOCKING THE BOOTLOADER).
TL;DR - overview
If you know what you're doing, you really just need to read this part of the post. If you're unsure, read the step-by-step instead.
If you're running Android 6.0.1 MM with firmware .291 (and probably any other future firmware), want to root without unlocking the bootloader more quickly than the method below refer to this post: http://forum.xda-developers.com/z3-compact/general/recovery-root-mm-575-lb-t3418714 (get all 3 zips, rename the kernel zips to .ftf, flash kernel575.ftf with flashtool - reboot - enable dev mode, run bat script - reboot in recovery and flash supersu.zip - flash kernel291.ftf, reboot, done (for future versions you'll want to only flash the kernel from sony's ftf after rooting)
Downgrade the firmware, as the root exploit only works with older firmware such as 23.0.A.2.93.
Run the root exploit to get root
Backup the DRM keys
Upgrade the firmware to the latest version, while retaining root access (or by using a pre-rooted images that nice people made)
In the process, we'll install DualRecovery and SuperSu (having the custom recovery is what allows you to keep root as it let you flash a modified image that has SuperSU on it)
See the FAQ at the bottom in case you need additional help, about mounting /system read-write, fixing the sdcard issues, etc. These are not directly related to the rooting process, but you most likely want to perform these tasks anyway.
Step by step instructions
Read instructions carefully, there's many steps, making this slightly complex.
Ensure you backed up everything you need (files/apps/pictures/etc) first, these will be lost! - YOUR PHONE WILL BE WIPED.
-- FW DOWNGRADE AND INSTALL WITH FLASHTOOL --
Downgrade fw to 23.0.A.2.93 (Device D5803) or anything prior to 23.0.1.A.5.77 (december fw)
Global:https://mega.nz/#F!wdEG3aiD!Ej2S4hcMKGPgnmGudvAegg (look for 23.0.A.2.93) (or see http://forum.xda-developers.com/showpost.php?p=66275977&postcount=2030 for more links if this one no longer works)
Get and install Flashtool at http://www.flashtool.net/index.php
Move the fw into the C:/Flashtool/firmwares directory
Open Flashtool, click on the lightning symbol ("flash device"), select "Flashmode" and click on "OK"
Just select the name of the fw you downloaded and click on "Flash"
Wait for a window to pop up (it may take a few minutes, be patient)
Now everything is ready: turn off your phone
Push the volume DOWN button, connect the USB cable to your PC while still pushing the volume DOWN button
Once the flashing process has started, release the volume button
) Do not disconnect the USB cable, wait until flash completes (flashtool will indicate when you can unplug).
-- ROOTING W/ EXPLOIT --
Enable USB debugging on the phone (Settings => About phone => Click 7 times on Android Build to unlock developer options)
Allow mock locations (Settings => Developer Settings)
Ensure you have adb drivers installed (http://support.sonymobile.com/gb/tools/pc-companion/ don't use it to update
Download rooting tool (http://forum.xda-developers.com/devdb/project/dl/?id=10766&task=get) or latest from http://forum.xda-developers.com/crossdevice-dev/sony/giefroot-rooting-tool-cve-2014-4322-t3011598)
Unzip the rooting tool
Connect phone to your computer
Put phone in airplane mode
Run install.bat from the rooting tool (allow USB debugging when asked on the phone every time, also allow root prompt) and follow instructions from the tool
You should be rooted now, if you get an error "Device not rooted" trying running the tool once more
-- Backup DRM keys/TA Partition --
Get backup ta tool from https://github.com/DevShaft/Backup-TA/releases
Unzip it!
Ensure phone is still connected (or reconnect it)
Run Backup-TA.bat
Read the information and follow the instructions given by the tool.
-- Install latest firwmare with root, DRM keys, recovery --
Alternative 1: pre-made pre-rooted image (for fast internet, slow pc
Get a pre-rooted image:
For KitKat - fw 23.0.1.A.5.77 (android 4.4. dec 2014) at http://forum.xda-developers.com/z3-...ist-pre-rooted-firmwares-6-oct-2015-t32188206 then skip directly to step 33.
Or, for Lollipop - fw 23.1.A.0.690 (Android 5.0 March 2015) at http://forum.xda-developers.com/z3-compact/development/list-pre-rooted-firmwares-6-oct-2015-t3218820 then skip directly to step 33.
Or, for Marshmallow - fw 23.5.A.1.291 (Android 6.0 June 2016) at https://mega.nz/#!0JUA2DzR!5-5Tz1BRr3gkvrt_loqHzePsgfSeGKCD07xhQzugl4w or http://forum.xda-developers.com/z3-compact/development/list-pre-rooted-firmwares-6-oct-2015-t3218820 then skip directly to step 33.
Alternative 2, for newer fw for example - build your own pre-rooted image (fast pc, slower internet:
Get PRFC from http://forum.xda-developers.com/crossdevice-dev/sony/tool-prfcreator-easily-create-pre-t2859904
Get latest fw from http://forum.xda-developers.com/z3-compact/general/list-stock-firmwares-d5803-d5833-t2906706
Get latest SuperSU zip http://download.chainfire.eu/supersu
Get DualRecovery zip (the flashable zip, not the installer one) from http://nut.xperia-files.com/ you want Z3C-lockeddualrecoveryX.Y.Z-RELEASE.flashable.zip
Start PRFC and add the 3 zip (FTF file is the fw, SuperSU and Recovery)
Click "create" - this will take a while
Copy resulting "pre-rooted" fw to /sdcard0 on your phone (it means copy flashable.zip from the PRFC directory to the "internal storage" directory of the phone)
Get Dual Recovery installer this time, from http://nut.xperia-files.com/ you want Z3C-lockeddualrecoveryX.Y.Z-RELEASE.installer.zip notice how thats 'installer' this time, not the same file as in 30!
Unzip it
start install.bat and follow instructions (hit 1 (allow adb/root on the phone as needed)
You should be in recovery automatically now. (if not, reboot and when the LED change colors push volume UP repeatedly)
Flash the pre-rooted fw (flashable.zip) from the recovery (touch "install zip", select /storage/sdcard1/flashable.zip then confirm install) on the phone, then power off the phone (DO NOT REBOOT)
To power off, go into the "power options" and hit "power off" (dont do "reboot in flashmode" DO power off)
Unplug USB (yes this is required, DO IT)
Open Flashtool and select the non-pre-rooted fw (this is 23.5.A.1.291 for example), but DESELECT system: in "EXCLUDE" make sure you check the checkbox next to "SYSTEM", flash it.
press volume DOWN and plug USB cable while keeping volume DOWN pressed, when flashing starts, stop pressing the volume button
After flash is done and when flashtool tells you to, remove USB cable and start the phone
Congrats and enjoy, you made it to the end! you now have latest + recovery + root and backups of your DRM keys! (and of course all DRM functions enabled)
FAQ
- Some root apps don't work, because /system can't be remounted rw, what's up with that?
Sony has a special in kernel protection that disallow remounting /system read-write, even for root. Flash this in recovery (copy it to the sdcard and reboot in recovery with volume UP pressed, then install it): https://github.com/dosomder/SonyRICDefeat/raw/master/RICDefeat.zip
- I unlocked my boot loader, or lost my DRM keys some other way AFTER backing up as per above procedure. How to restore?
plug USB back in
re-enable usb debugging on the phone (Settings => About phone => Click 7 times on Android Build to unlock developer options)
Start backup TA again but this time hit restore
- I messed somewhere, phone doesn't boot or work properly, what to do!
unplug USB
if phone is on, long press the power button+volume UP until the phone turns off
go back to step 1 of the how to, follow the how to! Mainly - the howto makes you setup flashtool again, then boot the phone in flash mode with volume key and plugging in the USB cable.
- I forgot to backup DRM keys (backup ta program) but I never unlocked the bootloader, is it bad?
nope you're fine, just back them up now
- I really lost my DRM keys, can I recover them?
No you can't. But you can recover the features by using some modified software. Look for "DRM Fix" for example here.
- I don't want to wipe my phone!
Uncheck "data" before downgrading and then before upgrading in flashtool. You will get some errors when downgrading, which will go away when you revert back to .77 at the end of the process
This is at your own risk, data still risk being deleted if something goes wrong
Depending on the apps, etc. you have, there is a chance that some app would not work properly at the end of the process without a full wipe. If that's the case, you might need to go in settings>applications and "delete data" for that app.
- Some apps can't write to the sdcard!
install/run this https://play.google.com/store/apps/details?id=nextapp.sdfix&hl=en
- I don't have SuperSu on marshmallow+ ?!
It just didnt install properly into /system. That's ok. Just install it from the play store - you do have the su binary installed in /system so this will work
- Does this work on my SO-02G (Xperia Z3C Docomo NTT version) ?
@pngoc256 tested and yes, it works
- Does this work with lollipop (Android 5.0)?
- Does this work with Marshmallow (Android 6.0)?
- Will this work with Nougat (Android 7.0)?
- Will this always work?! (yes probably)
Yes.
If when doing the final reboot its stuck on the loading screen the first time, reboot again a last additional time with power + volume UP.
People who did the hard work/references thanks to them:
@istux (fw list, flashtool how to http://forum.xda-developers.com/z3-compact/general/list-stock-firmwares-d5803-d5833-t2906706)
@xzx0O0 (root exploit: http://forum.xda-developers.com/crossdevice-dev/sony/giefroot-rooting-tool-cve-2014-4322-t3011598)
@DevShaft (backup ta http://forum.xda-developers.com/showthread.php?t=2292598)
@serajr (install .77 fw http://forum.xda-developers.com/showpost.php?p=58395100&postcount=71)
dosomder (kmod for sony's RIC) https://github.com/dosomder/SonyRICDefeat
Everything worked. Thanks a ton!
Thanks for the detailed explanation with links, very thorough and helpful.
MODS PLEASE STICKY THIS THREAD, might just be the most important thread in the Z3 Compact forum.
If you're having trouble with step 34 opening a command prompt in the files folder, try pressing shift and right click on or in the "files" folder, you should see "Open command window here"
Unrelated: what's the purpose of steps 40-43 (reflashing non pre-rooted FW)?
Thanks for this manual, managed to get it work. Although if I start xposed, I get the error it can't mount the system partition. Titanium Backup works perfect. It seems the system partition is read only still? Any solution very welcome. Once again many thanks to the hard working people behind this exploit
wowz, it's finally here!!!
madlive said:
Thanks for this manual, managed to get it work. Although if I start xposed, I get the error it can't mount the system partition. Titanium Backup works perfect. It seems the system partition is read only still? Any solution very welcome. Once again many thanks to the hard working people behind this exploit
Click to expand...
Click to collapse
Follow this: http://forum.xda-developers.com/showpost.php?p=58400277&postcount=228
This is why I love this community, thanks mate, that completely fixed it
adamk7 said:
If you're having trouble with step 34 opening a command prompt in the files folder, try pressing shift and right click on or in the "files" folder, you should see "Open command window here"
Unrelated: what's the purpose of steps 40-43 (reflashing non pre-rooted FW)?
Click to expand...
Click to collapse
its here in case you need to restore DRM keys. for example if you unlocked your boot loader, or messed up something somewhere.
madlive said:
Thanks for this manual, managed to get it work. Although if I start xposed, I get the error it can't mount the system partition. Titanium Backup works perfect. It seems the system partition is read only still? Any solution very welcome. Once again many thanks to the hard working people behind this exploit
Click to expand...
Click to collapse
Fastest i found is to flash https://github.com/dosomder/SonyRICDefeat (the zip in there). its an extra protection on the sony kernel that makes /system non-remountable r/w, this module takes care of it. above post method would also work.
Hello,
Thanks a lot for this thread, but you made a typo in the step 37, in the command to remount /system: "mount -o remount,rw /system" instead of "mount -oremount,rw /system".
Had I known you were going to post such detailed instructions, I would have waited and saved tons of time!
Very helpful indeed, kudos for your work
steps 40-43
adamk7 said:
If you're having trouble with step 34 opening a command prompt in the files folder, try pressing shift and right click on or in the "files" folder, you should see "Open command window here"
Unrelated: what's the purpose of steps 40-43 (reflashing non pre-rooted FW)?
Click to expand...
Click to collapse
I think you are not suppose to open your phone until you flash the prerooted firmware since it says to turn off and not reboot. I dont know the purpose but still gonna follow.
---------- Post added at 04:58 AM ---------- Previous post was at 04:56 AM ----------
I just want to ask if its ok to flash a non-prerooted firmware that was not based on, or was not used to make the prerooted firmware that i will flash earlier in the step?
Any tips on backing up data before flashing .93?
bilboa1 said:
its here in case you need to restore DRM keys. for example if you unlocked your boot loader, or messed up something somewhere.
Fastest i found is to flash https://github.com/dosomder/SonyRICDefeat (the zip in there). its an extra protection on the sony kernel that makes /system non-remountable r/w, this module takes care of it. above post method would also work.
Click to expand...
Click to collapse
I flashed the zip in the recovery, but I still can't unintall the apps! I'm sure I have root because greenify and xposed works.
Since i have dual recovery now on my z3 compact, can i flash any zip including CM12 without unlocking the bootloader? I already backed up TA but still wondering?
I had a error when trying to flash CM12 without flashing the CM' boot.img (which asks to unlock the bootloader) because the phone codename is "aries" on Sony stock roms and CM12 want the codename "z3c". Flashing the boot.img contained in CM12 nightlies fixed the problem.
I have solve problem! Just need it to update the dual recovery by Nut with the 2.8.1 Now I can uninstall the system app (Finally)..
Thanks but TA
I make a TA backup in 23.0.A.1.93 in root.
And I changed the kernel to 23.0.A.5.77 with the root using PRFCreater.
and I unlocked my bootloader
and after that I need to re-lock the bootloader cause i need to go sony service center
i tryed the TA backup tool's restore option, but it saids that there is no TA-backup*.zip files
what should i do
reloadxero said:
Since i have dual recovery now on my z3 compact, can i flash any zip including CM12 without unlocking the bootloader? I already backed up TA but still wondering?
Click to expand...
Click to collapse
Any custom rom needs an unlocked bootloader.
Any custom kernel needs an unlocked bootloader.
Without unlocking, you can only install roms based on stock firmware with a stock kernel.
dshstudio said:
I make a TA backup in 23.0.A.1.93 in root.
And I changed the kernel to 23.0.A.5.77 with the root using PRFCreater.
and I unlocked my bootloader
and after that I need to re-lock the bootloader cause i need to go sony service center
i tryed the TA backup tool's restore option, but it saids that there is no TA-backup*.zip files
what should i do
Click to expand...
Click to collapse
Restoring the TA backup automatically relocks your bootloader.
Inside the folder where TA-backup.exe is located, you should find a sub-folder named "backup": do you see nothing within that?
Thank you so much for this thread, really easy this way. Only problem I had was in the last step when flashing version .98, which gave me a non-working wifi. Once reflashed with .77 this was resolved.
The objective of this post is to explain how to currently install a custom ROM in our device. (for total newbies like me, you can also refer -among others- to my previous post). I give the general procedure which wipes everything in your device, but you can check various precious posts in xda that variate this procedure.
The codename for our device is "pollux_windy", which is the Wifi-only version. The LTE version (I should probably get the LTE!) is "pollux" and I suppose the general procedure (with the corresponding firmwares to your specific device) will work for any Xperia device. You can also get the general idea from this post.
As a general rule of thumb do not forget after/before every firmware flashing to:
Enable developer mode (explained here)
Enable the USB Debugging mode (explained here)
Trust installation from unknown sources (explained here)
Steps.
A. Unlock the bootloader.
You can refer here and then check that it is successfully unlocked with these steps (taken from here ):
Open the Contacts app.
Click the menu button.
Click Settings.
Long press (for about 5 seconds) somewhere in the empty space just above status bar, as indicated by the red frame in the screenshot below, and then release your finger. A button named Enter service code will then appear in the same area (this may take a few tries).
Click Enter service code. A dialler will appear.
Dial *#*#7378423#*#* . Then go to -> "Service Info" -> "Configuration". If there is:
Bootloader unlock allowed - Yes << this means that your Bootloader is Locked
Bootloader Unlocked - Yes << this means that your bootloader is unlocked
B. Flash a firmware in which you will root the device
Download/install FlashTool.
Download and place to the FlashTool's folder "firmwares" the firmware "SGP312_10.5.A.0.230_VMo UK_IE.ftf". More information here . In sort, download and extract http://d-h.st/MrI and http://d-h.st/ULc
Open FlashTool and connect the powered-off device (USB cable) in Flashmode, holding the Volume Down button while you plugin the usb cable. The FlashTool should say that it is connected in Flashmode. Then flash the 10.5.A.0.230 firmware in it.
C. Gain root to the new firmware
Open the device, complete the setup wizard and connect to a wireless network. You do not have to setup the Google Account since you can download every application googling the respective APK files, but Google Play is easier to use.
Get (click λ) the towelroot APK, install it and run it (click "make it rain"). You should have root, which you can check with a Root Cheker like this one.
Download/Install SuperSU APK (this is actively developed, while SuperUser is abandoned at the moment) as described here.
D. Install a Recovery to easily flash new ROMs
NUT has done excellent work with XZDualRecovery.Follow the instructions for installing it in his thread. In short:
Download the installer, run it and follow its instructions.
Select SuperSU and of course grant access to your computer from your tablet (watch the tablet screen).
E. Download a Custom ROM and Google Apps
I had problems with Cyanogenmod (versions 11 and 12) that I cannot explain. I had no GPS and no media sound from the speakers, but I did have "notifications" sound! I could listen to "media" sounds using headphones, though. So I tried the nightly OmniROM which seems very stable and fast at the moment, with no sound problems and also has a working GPS! You can get it directly from their site (the NIGHTLY I downloaded is omni-4.4.4-20150223-pollux_windy-NIGHTLY.zip which runs just fine). Somewhere I read that PacMan ROM - also works perfectly but I have not tested it yet.
I had device recognition problems from the Recoveries ("Status 7 Error") that I think dear NUT will solve promptly. What I did to solve them is
Upack the ROM zip.
Remove the first line (from assert(...); till the column) of META_INF/com/google/android/updater-script and save the file.
repack the ROM to a zip.
Then copy this zip to your external SD card. If you need google apps (you probably do, to use Google Play instead of other applications like Aptoide), you will also need to download and place to your external SD card the corresponding google apps from here - (I found it in this post - which also explains the different gapps versions)
F. Install the Custom ROM
So now that both the ROM and (optionally) gapps are in the device's SD card:
Enter the Recovery while repeatedly pressing Volume Up or Down while the device boots.
Wipe everything (except the external SD card, obviously --- if you delete the zip files by mistake you must begin again from step B. using the FlashTool to flash the *.230* ftf).
Reboot and setup/enjoy your new ROM.
It seemed that with OmniROM I had lost root access so I had to reinstall SuperSU. I did this by downloading the flashable/installable zip - and flashing/installing it through the recovery.
In the end a did a full backup with the TWRP recovery and one with Titanium backup
Magnus_E said:
The objective of this post is to explain how to currently install a custom ROM in our device. (for total newbies like me, you can also refer -among others- to my previous post). I give the general procedure which wipes everything in your device, but you can check various precious posts in xda that variate this procedure.
Click to expand...
Click to collapse
For installing customs (CM/AOSP/GPe based ROM's), you don't need to install .230 firmware, furthermore you don't need root (except for backup TA procedure), furthermore you don't need XZDualRecovery (cause it works only for Stock and Custom STOCK based rom's - see this post).
So you you only need to flash kernel via fastboot, and then enter recovery (integrated in kernel), and install .zip with custom, SuperSU and Gapps from there.
hello i was following this guide but im stuck on status 7 error, i tried deleting assert but the twrp recovery dont get any answer to "getprop ro.product.device" and it just doesnt proceed...
and Rootk1t i cant find any kernels flashable via fastboot or flashtool can you point one to me? all of the kernels i see are in '.zip's .... i want to have android 6.0 so i think i should have black kernel but how?
bluealef said:
hello i was following this guide but im stuck on status 7 error, i tried deleting assert but the twrp recovery dont get any answer to "getprop ro.product.device" and it just doesnt proceed...
and Rootk1t i cant find any kernels flashable via fastboot or flashtool can you point one to me? all of the kernels i see are in '.zip's .... i want to have android 6.0 so i think i should have black kernel but how?
Click to expand...
Click to collapse
.zips are installed through recovery, .ftf through flashtool.
6.0.1 ROM you can find here.
Hey guys,
I jumped through several threads here until i found all steps needed to get my Z1 compact D5503 from my rooted KitKat 14.4.A.0.108 to a rooted 14.5.A.0.270,
[paranoia] without the need to install a firmware that someone manipulated for evil purposes[/paranoia]
In the end it was quite easy. I documented the steps - mostly for myself - and maybe someone can benefit from that.
No warranty, that it works the same flawless way for you or for any other Xperia model than Z1 compact D5503 (though it should...).
So just proceed with the steps if you know about the possible risks of killing your phone
If you find any mistakes please drop me a line...
For a cleaned up version go here - thanks
This brings your Z1 compact D5503 from a rooted 14.5.A.0.108 to a rooted 14.5.A.0.270 without any dataloss
User @codified also successfully updated a 14.4.A.0.157 with these steps (see here)
Just upgraded to 14.6.A.0.368 from 14.5.A.0.270 with these steps. Works like charm. And @JarrB reports success on upgrading from 14.4.A.0.157 to 14.6.A.0.368
Pre-requs:
- MS Windows - sorry, I don't do linuxes
- Xperia (Z1 compact) device stock(?) KitKat rooted (Newroot worked just fine without unlocking the boot loader )
- some custom recovery, the fancy dual recovery works just fine, install from rooted kitkat (dual recovery from http://nut.xperia-files.com/) - the installer.zip! not the flashable.zip
Tools needed:
- FlashTool: http://www.flashtool.net/index.php
- XPeriFirm: http://forum.xda-developers.com/cro...xperifirm-xperia-firmware-downloader-t2834142 ahh no longer needed as separate download, as it's integrated in FlashTool now
- PRFCreator: http://forum.xda-developers.com/crossdevice-dev/sony/tool-prfcreator-easily-create-pre-t2859904
Part 1: get a FTF file of the desired firmware
See also: http://www.xperiablog.net/2014/08/1...re-files-using-xperifirm-and-flashtool-guide/
UPDATED THIS PART - thanks to user codified
Open FlashTool and start XperiFirm (XF-button)
Download .270 (or .283/.368 if available) firmware with XperiFirm with auto-unpack (I chose to use the same carrier branded version that .108 was - USE Generic LAM for an unbranded version)
Have two cups of coffee - or tea if you prefer that
The .ftf is now in your .flashtool\firmwares subfolder
Original steps
Open FlashTool and start XperiFirm (XF-button)
Download .270 firmware with XperiFirm () with auto-unpack (I chose to use the same carrier branded version that .108 was)
Use FlashTool Bundle->Create
Select unpacked firmware path
Select Device From list
Add your branding info: Vodafone DE
add firmware version: 14.5.A.0.270
add all but the .ta files to the right listview
DELETE the fwinfo.xml in unpacked firmware folder THIS SEEMS TO BE ESSENTIAL - didn't dare to keep it
create
done. --> ftf file is in configured user home: C:\Users\USERNAME\.flashTool
Part 2: get your pre-rooted ftf file
Download latest SuperSU: http://download.chainfire.eu/supersu or the also as well/better working reported beta 2.49
Open PRFCreator
add D5503_14.5.A.0.270_Vodafone DE.ftf the .tft file you just created in part 1 as ftf file
add UPDATE-SuperSU-v2.46.zip as supersu zip
not needed, but also not wrong: add Z1C-lockeddualrecovery2.8.21-RELEASE.flashable.zip as recovery (dual recovery from http://nut.xperia-files.com/)
check all checkboxes, but the "sign zip"
maybe add extra zip
create
done. --> find flashable-prerooted.zip in PRFCreator folder
Part 3: flash your zip
nandroid-backup your phone
have 3 big cups of coffee - please, no tea at this step
get really nervous
wipe dalvik and cache only to get a better feeling
try dirty flash the new firmware with the pre-rooted zip via Recovery, not using Flashtool (OTA is also applied dirty, isn't it?)
whoa, flashing was fast
wipe dalvik and cache again. Could help prevent the unpredicted... could it?
AAAAHHH! booting takes so looohoooooong
Yeah! 386 Apps getting optimized...
looks good
hu? NFC firware update? OK. Go on.
Update for Google play services? YES. Go on.
done. --> be a happy Z1-compact-with-rooted-Android-5.0.2-user
totally optional part 4: Xposed
Now go on and install Xposed for Lollipop v69+ and hope for the best
rubbish! forget it for now, as it is bootlooping :/
done. --> still be a happy Z1-compact-with-rooted-Android-5.0.2-user with Xposed
regards!
done exactly this... rocking LP now
good to read, ltcdata! Happy I could provide sth. useful
While it optimizes the 327 apps in my case, I am wondering at what stage of the process does the firmware get rooted? Or is what is downloaded by Xperifirm already rooted? Very good guide BTW. Seems to go okay as long as you read everything carefully and in the right order. Thanks.
@nagusia thanks for liking my very first guide
Basically the root magic happens in part2 no 8 (pressing the create button in PRFCreator ):
PRFCreator unpacks the unrooted original stock fimrware that XPeriFirm downloaded and stuffs it into a new archive together with SuperSu and the other ZIPs you maybe added.
Code for that can be review in Job.cs at the projects GitHub repo: github.com/dosomder/PRFCreator (I'm still not allow to post outside-links here).
Pretty simple in the end...
I had a problem with charging reaching 89% and then the led randomly blinking. I did a restore to KitKat and there wasn't a problem. Then I thought I'd try flashing another of the DE generic pre-rooted roms posted on this forum. Here is where my problems started. It would get a upgrading - starting apps and then reboot. I tried making my own DE customized rom and the same problem. Then I went back to my orginal UK customized rom and ..... same problem. Finally did a factory reset in recovery and now it seems all good. I don't don't if I still have the charging issue yet. I have a theory that a dirty flash is OK the firs time, but a clean flash or factory reset after subsequent flashes may be necessary.
Dirty flashed from .242 to .270, without losing data. Only had to re-flash the Xposed alpha 4 zip (xposed-sdk21-arm-20150430.zip). It probably saves more time to just add this zip during part 2, step 7...
Thanks a lot for the guide.
Sweet guide dude. but I had trouble finding my region's KitKat firmware and downloading then rooting again seems like so much of a hassle so I did it the dirty way. Beware that this is very RISKY! I first downloaded Kingroot and rooted my device successfully, then installed NUT Recovery Installer version and installed TWRP via PC, then try to remove Kingroot using this guide. Thereafter, I followed your guide sans the flash KitKat step. And it works, Bootloader is still Unlocked. Thanks a lot dude!
uchihakurtz said:
Sweet guide dude. but I had trouble finding my region's KitKat firmware and downloading then rooting again seems like so much of a hassle so I did it the dirty way. Beware that this is very RISKY! I first downloaded Kingroot and rooted my device successfully, then installed NUT Recovery Installer version and installed TWRP via PC, then try to remove Kingroot using this guide. Thereafter, I followed your guide sans the flash KitKat step. And it works, Bootloader is still Unlocked. Thanks a lot dude!
Click to expand...
Click to collapse
The method is not at all risky, as long as You use the proper files!
Also, many people don't prefer using Kingroot as it is said that it shares Your phone information (like IMEI number) to some servers.
Hopefully You meant locked bootloader in last sentence!
Mirhawk said:
The method is not at all risky, as long as You use the proper files!
Also, many people don't prefer using Kingroot as it is said that it shares Your phone information (like IMEI number) to some servers.
Hopefully You meant locked bootloader in last sentence!
Click to expand...
Click to collapse
Actually by risky, I meant that part, you'll never know what Kingroot does, lol. Oh right, I meant the bootloader stays locked.
I already have updated to .270 via sony companion. Can I follow these same steps and replace current .270 with rooted .270?
@jooxxo
No, you need a custom recovery (root) to flash the resulting .zip file.
jooxxo said:
I already have updated to .270 via sony companion. Can I follow these same steps and replace current .270 with rooted .270?
Click to expand...
Click to collapse
No, but You can do this.
ok... well I took a nandroid backup of my kitkat (rooted & recovery obviously) before updating to .270 lollipop. If I restore that backup, will it restore recovery as well?
edit: I just dont want to lose all my apps & settings.
Any way to root if 5.0 is already on my phone?
Locked bootloader.
jooxxo said:
ok... well I took a nandroid backup of my kitkat (rooted & recovery obviously) before updating to .270 lollipop. If I restore that backup, will it restore recovery as well?
edit: I just dont want to lose all my apps & settings.
Click to expand...
Click to collapse
If You restore Your KitKat nandroid over backup (assuming the backup consists of system and data partitions), then it will cause You problems. The easiest way to keep Your apps and data is backing up them with an app since You are rooted, and then restoring them using the same app to restore apps and data on Lollipop. Don't use the Sony backup app, KitKat backups don't work on Lollipop. ALso to get a recovery after Lollipop, just simply install the XDualZRecovery.
EZY-E said:
Any way to root if 5.0 is already on my phone?
Locked bootloader.
Click to expand...
Click to collapse
Refer My post just 1 post before You.
Did it with latest 14.5.A.0.283 on my Z1C ... all good.
Thank you
Easy to follow tutorial for rooting your Z1's latest firmware Thanks!
@kalaja: 283? When did that happen?
sunbeam906 said:
Easy to follow tutorial for rooting your Z1's latest firmware Thanks!
@kalaja: 283? When did that happen?
Click to expand...
Click to collapse
from xperiablog net:
Xperia Z1 Compact sees new firmware (14.5.A.0.283) for carriers in Austria and Germany
by XB on 16/06/2015
in FIRMWARE, XPERIA Z1
Xperia Z1 Compact. A new firmware update with build number 14.5.A.0.283 has been released for the Sony Xperia Z1 Compact (D5503). The update has so far only been released for T-Mobile Austria and Telekom.de in Germany. However, users on these carriers were still rocking Android KitKat (14.4.A.0.157), so this update brings them a first taste of Android Lollipop. It is unclear whether this ‘283’ firmware will see a global release, the same build number has also been certified for the Xperia Z1 and Xperia Z Ultra, although those updates are not live right now.
Thanks for the info, kalaja Much appreciated.
Hello everyone,
Update 27.08.2016: It also works for version 23.5.A.1.291 (OS update that includes STAMINA). The procedure is identical, you just have to use the latest firmware available and create a pre-rooted .zip to update your tablet device.
I am pretty sure that I couldn't find a how-to guide anywhere that explains how rooting our precious Xperia Z3 Tablet Compact on Android 6.0.1 with locked bootloader works. This post simply shows the process of how I got root on my device (SGP611) and I am going to write the steps only in moderate detail so that hopefully everyone can follow without hassle. There are some steps that I'm not going to explain too much in detail but instead I highly recommend you to look around a bit on XDA to find theses already explained steps (I just want to get to the point on how to get root so that's why it may not be super noob friendly).
Edit: A little bit more info and additional steps that might help you further can be read in post #5.
Standard disclaimer:
Your warranty is now void.
I am not responsible for bricked devices, dead SD cards, or any other issues that may arise from not following the steps correctly/carefully.
Click to expand...
Click to collapse
Also, I am not a developer so I am very sorry if I can't give you an answer to questions relating to problems with the tools we are going to use in this tutorial. It's better to ask the developers directly( I will link you to the needed threads).
Steps:
1. Downgrade device if necessary
2. Root using KingRoot exploit
3. Install XZDualRecovery custom recovery
4.1 Get the latest Marshmallow firmware and create FTF file
4.2 Create the pre-rooted .zip file
5. Flashing the pre-rooted .zip file correctly
Extra: Already created pre-rooted .zip file download for the lazy ones (At the very bottom)
1. First thing you need to know is that if you're device is currently bootloader locked and on Android Marshmallow 6.0.1 (23.5.A.0.575), as of the time I am writing this, you will not be able to achieve root directly through some kind of rooting tool. What you need to do now is to downgrade your device to an older version of Android, e.g. Android 5.0.2 or KitKat are good enough.
To do this you need to find the older firmware:
-Try this link to look for it: http://xperiafirmware.com/ (If you can't find Android 5.0.2 for example, use Google or look around XDA)
-Downgrading the device will wipe data/factory reset, so BACK UP YOUR STUFF before downgrading.
-Use flashtool to flash the firmware and downgrade: http://www.flashtool.net/index.php (I will expect you to know how to use flsahtool to flash ftf. files, there are many tutorials on how to do this)
2. Why you have to downgrade is because older firmwares have an exploit that can be used to root the device even when the bootloader is locked. So yes, something like a one-click root method is possible now.
-You may use this tool called KingRoot to root your tablet: http://forum.xda-developers.com/android/apps-games/one-click-root-tool-android-2-x-5-0-t3107461
Read the info carefully before doing anything.
3. Now, you should have managed to root your device with Android version other than 6.0.1. That is when another great tool comes in which is called XZDualrecovery. XZDualRecovery is "a" custom recovery that you'll need to be able to proceed from here.
-Install XZDualRecovery using the root method. That's the only way to get it onto the device.
-Link: http://forum.xda-developers.com/showthread.php?t=2261606 (Read the instruction there carefully)
4. Great! Now you should have root and custom recovery. If not, you did something wrong.
This is when you can create something called a "pre-rooted" firmware which is basically all you need to get root on Marshmallow 6.0.1.
4.1
-Use the tool called Xperifirm to download the Android 6.0.1: http://forum.xda-developers.com/cro...xperifirm-xperia-firmware-downloader-t2834142
-Launch Xperifirm and on the left hand side browse to "Xperia Z3 Tablet Compact -> the model number of your device (look under settings on your device to find out model number)"
-On the right side top you'll see "Check all", click it to let it check for latest firmware number
-Android 6.0.1 would be 23.5.A.0.575 23.5.A.1.291 (latest firmware). You can choose any Market or Operator you want (Tip: Use "Customized XXX" and avoid carriers)
-After downloading you'll need flashtool again to convert those downloaded files to .ftf format (Again, there are instrutions on the internet that you can look for)
4.2
-Make sure you have the .ftf file
-Get two .zip files
--1) RecRoot: http://forum.xda-developers.com/z3/general/wip-sony-android-6-0-mm-t3337357
--2) A dummy flashable file: http://forum.xda-developers.com/z3/...oid-6-0-mm-t3337357/post66569699#post66569699
-Get PRFCreator: http://forum.xda-developers.com/crossdevice-dev/sony/tool-prfcreator-easily-create-pre-t2859904
-Open PRFCreator and put the .ftf file to FTF, the RecRoot .zip file to RECOVERY, and the dummy_flashable.zip to SUPERSU. Don't do any other way!
-Tick Kernel, FOTAKernel, Modem, LTALable and Sign Zip
-Click "Create" to create the pre-rooted Marshmallow firmware
5. You should have created the pre-rooted Android 6.0.1 firmware now.
-Put the pre-rooted .zip file and the RecRoot .zip file onto your device's SD card/storage (anywhere where you can find them later)
-Reboot your tablet into TWRP recovery. (XZDualRecovery even provides you an app to choose and reboot to recovery) Don't reboot into any other recovery!
-Now, in TWRP recovery, erase dalvik cache, cache and system just to be clean.
-FIRSTLY, flash the pre-rooted.zip that you have put on your device. After flashing successfully, DON'T REBOOT YET!
-SECONDLY, flash the RecRoot.zip file
-Now you can reboot and if you did everything correctly, your Z3 Tablet Compact should boot up with Chainfire's SuperSU root and TWRP recovery (to access TWRP recovery, you have to reboot the device and while a green LED light appears for a moment, press and hold the volume down button. Then you will enter TWRP recovery. As for now, you cannot access the recovery any other way like using a reboot app, it will not work!).
CONGRATULATIONS! You have a rooted Z3 tablet with locked bootloader and you haven't lost Sony features. :laugh::good:
Thank you for reading this tutorial. And don't forget to thank all these devs that provided us the needed tools.
Extra: I will also put a link here where you can download my created pre-rooted Marshmallow firmware. It's build 23.5.A.0.575 Customized Germany and for SGP611 only!
https://mega.nz/#!TQ4AwbSZ!LNw11quAWurER_Tl9zHDyX_TiwZnzeVM1M0s10eyt4g
Just followed your instructions with my SGP621, worked great!
Teella said:
Just followed your instructions with my SGP621, worked great!
Click to expand...
Click to collapse
Great!
Would you be so kind and share your pre-rooted SGP621 ROM?
janla said:
Great!
Would you be so kind and share your pre-rooted SGP621 ROM?
Click to expand...
Click to collapse
I would love too, but my upload is very very slow and would take week to upload. Follow the instructions it's very easy, it was the first time I've ever touched and FTF or made a prerooted rom. Well not really made, just clicked a few buttons in flashtool and waited.
SGP621 additions
Hey man,
thanks for this concise guide to unroot our beloved tablet! I tried a few times before, but always gave up under the flood of outdated info available. With your guide, I successfully rooted my SGP621 (= Sony Z3 Tablet Compact with LTE).
Since you refer to "available info on the net" quite often, I had a few moments where I was unsure what to do exactly. Maybe the following hints can help others like me who are new to the world of Sony android devices.
Step 1:
You could probably also downgrade to 5.1, but to be safe, I chose 5.0.2. The needed ftf files for SGP621 as well as the SGP611 and SGP612 are avilable here.
I used the most current version of the flashtool, which is 0.9.22.3 as of this posting. I followed this (German) guide for installing and using the flashtool. To install the needed drivers, you'll have to navigate to wherever you installed the Flashtool to, there to the subfolder drivers, and execute the driver installer you find there. In the driver selection dialog install the first two, and of course the Z3TC driver you find somewhere in the list. Got two errors during the driver installs, ignored them, all went well.
Step 2:
Kingroot is a one-click-rooting solution you install directly on the phone, no pc connection necessary. After the tool is installed, you have to start it, swipe up a couple of times, and then tap on "Purify". The description in the xda thread made me think "Purify" is just an ad for an additional app, but it does start the rooting process.
Step 3:
After downloading and extracting XZDualRecovery, start the install.bat (under Windows, obviously). Connect your tablet, then choose menu item 1 (Install with SuperSU).
Step 4.1:
Many guides describe a decrypt / unpack step, you don't need this. The files are already unpacked after the download through XperiFirm. I did, however, delete the file "fwinfo.xml" from the downloaded files. No idea if that's needed, but it didn't hurt either.
To convert the downloaded files into an ftf file in the flashtool, select "Tools > Bundles > Create".
As "Source Folder" select the folder that XperiFirm created in the download path you specified. You'll then see a bunch of files in the "folder list" - select everything but the ".ta"-files (there were 5 ta-files in my case).
Doubleclick the empty "Device:" line, select the correct device.
I guess you can enter whatever in Branding and Version, I entered "German" and "23.5.A.1.291".
Step 4.2:
The "RecRoot"-File mentioned is indeed called "RecRoot_combined.zip". If you download that file, you're good to go. The PRFCreator tool needs to have Java installed for the last step (signing the prerooted rom). The file with the prerooted rom is saved in the PRFCreator dir itself.
Hoping this'll help someone!
@pull.me.under I am glad that I could help. Also, I'll thank you for your time extending my guide a bit with more detailed steps. That'll help users who are new to this stuff for sure. ?
Gesendet von meinem SGP611 mit Tapatalk
Hi,
If I follow this way, can I restore my tablet in stock settings if I have any trouble?
cheers
bozo13 said:
Hi,
If I follow this way, can I restore my tablet in stock settings if I have any trouble?
cheers
Click to expand...
Click to collapse
For restoring your tablet to stock, you only need flashtool with Xperifirm. It's like the first step where you have to download the stock firmware from Xperifirm and flash it with flashtool. Then you only have stock and clean operating system on your device. Unless, I'm not sure what you mean with stock settings?
Sent from my Sony E6553 using XDA Labs
Thanks for the guide. Using this guide, how can i install xposed on prerooted MM.
Shud i flash it after flashing recroot. Or shud i enter the system and then do it.
Following these steps will i lose recovery once i reboot to the system?
worked for me but god i kept soft bricking it. twrp kept wanting to reboot after wiping. now to wait and see if it will charge above 49%
Thank you for your efforts and detailed instructions. I did it smoothly on my 612. In my case the RecRoot was named as RecRootV4_combined.
Oddly, MobileUncle does not restart device to TWRP recovery, although it is doable the hard way
tzitzi2 said:
Thank you for your efforts and detailed instructions. I did it smoothly on my 612. In my case the RecRoot was named as RecRootV4_combined.
Oddly, MobileUncle does not restart device to TWRP recovery, although it is doable the hard way
Click to expand...
Click to collapse
Yes.
SGP612, can not enter TWRP recovery.
Sgp612 enters TWRP just fine, it does not do so thru mobileuncle
tzitzi2 said:
Sgp612 enters TWRP just fine, it does not do so thru mobileuncle
Click to expand...
Click to collapse
steps in details?
just did it with 23.5.A.1.291_R2D. seems ok
thanks!
Thanks for the Guide.
Post #5 is almost as important. It goes through a lot of details and problems I encountered (like the no neede to decrypt or the need to install Java to sign it).
For those who like the shortest path, here's a pre-rooted flashable zip:
Customized IBE Version 23.5.A.0.575 R8D for the SGP621
Decrypt key is:
!8G97O9eDtnF-_PntdsGh8uoRo7KQFpS7_D2c_FNaI-I
(edit) Lost root and I can't figure out why.
One moment I had 5.0.2 rooted with XZDualRecovery the next moment after step 5, I had 6.0.1 but root was lost.
XZDualRecovery is still there. I tried booting into TWRP and re-flashing RecRootV4_combined.zip to no avail. I had already done it according to the instructions right after the pre rooted ROM.
Anyone has an idea of what I could have missed?
For those who like the shortest path said:
Customized IBE Version 23.5.A.0.575 R8D for the SGP621 [/URL]
Click to expand...
Click to collapse
Tnx for pre-rooted rom
Your link need Decryption key.
WanderMax said:
steps in details?
Click to expand...
Click to collapse
Sorry for late answer.
Nothing fancy, just the usual way. Power off, power on, when led is green press volume -. TWRP is there
blue8 said:
Tnx for pre-rooted rom
Your link need Decryption key.
Click to expand...
Click to collapse
Updated on OP. But beware that something isn't probably right. I lost root as soon as I flashed MM.
Thanks for this wonderful guide:good:. I was able to install MM .291 to my SGP612 without any issues. I am attaching a picture of the PRF creator instruction followed if it might help others.
The install process after creating the prf zip file was quick. Also I noticed that I still have small apps after upgrading