Related
** DISCLAIMER: I AM NOT A DEV AND THIS IS MY HOBBY. I ASSUME NO RESPONSIBILITY IF THIS BREAKS YOUR DEVICE **
The following is tested on model E6553. This may work for the dual sim model too but I have not verified it. Do not flash the ftf and kernel files intended for one model onto another.
I am not taking credit for any of the tools and kernels here. They are all developed by others. I am only telling you how to use them.
Credits: @zxz0O0, @tobias.waldvogel
0- Prerequisites
You need to have a functioning installation of adb and fastboot tools. You need to have proper Sony drivers installed on your PC to detect your phone when it is connected to the PC. You should be able to flash an ftf file using flashtool. If any of these sound unfamiliar to you, stop reading, go learn about them, and then come back.
1- How to unlock your bootloader without losing the DRM keys
Sony has designed this phone such that if you unlock your bootloader you lose your TA partition PERMANENTLY which includes some of the Xperia features and licenses that have to do with image processing etc. forever. You will also no longer receive OTAs. So in theory, without a copy of this TA partition (which is unique to each device and cannot be copied over from another) unlocking the bootloader results in an irreversible loss of some of your phone's features. Relocking the bootloader will not bring them back.
A hack exists that allows you to backup the TA partition before you unlock the bootloader. This backup will make the process completely reversible so if you ever need to send the tablet to Sony for repair or just want to return it to its original state you have a way. Follow these instructions carefully:
1.0- Before you begin keep in mind that this procedure, especially the unlocking step, completely erases your tablet. Disable myXperia and remove your google account before proceeding. The following will likely not work well with encryption.
1.1- Start by clean flashing any 28.0.A.8.266 firmware, For this tutorial I used the Customized NL ftf that you can get from here.
1.2- Enter service Mode by dialing *#*#7378423#*#* -> Service info -> configuration, and make sure the device is unlockable.
Also check -> Service Tests -> Security and you will see a bunch of "active" and "OK" attributes. You can take screenshots for your reference.
1.3- Turn on usb debugging mode on your phone.
1.4- Download iovyroot zip v0.4 or higher from here.
1.5- Unzip this zip file into a folder of your choice and open a command terminal there.
1.6- Connect the phone which is now in USB debugging mode to your PC and answer yes when the phone asks to authorize the PC to access it in USB debugging mode. You can check that the PC indeed sees the phone by running this command
Code:
adb devices
1.7- Run the following command:
Code:
tabackup
1.8- VERY IMPORTANT: Make sure the command completes with no errors. If all goes well you will have a file with a name like TA-05052016.img (the name may be different for you) with a size of 2MB in your folder.
1.9- Save this file in a very safe place. Save it on your hard disk, AND email it to yourself, AND put it on your google drive. If you lose this file you can never reverse the bootloader unlocking process.
1.10- Reboot the device.
1.11- Now you can unlock the bootloader. Follow the instructions at Sony's official website at http://developer.sonymobile.com/unlockbootloader Also save your unlock code that you obtain in this step somewhere. You may need it some day.
1.12- Reboot the device and it will briefly enter recovery and then start the phone initial setup.
1.13- (Optional) you can easily verify that your bootloader is unlocked by entering the fastboot mode, obtaining any boot image, and running the following command to boot your tablet with that image:
Code:
fastboot boot boot.img
1.14- (Optional) you can see that the DRM keys are erased from your tablet by repeating step 1.2 but this time you will see a bunch of errors under Service Tests -> Security.
1.15- As a side effect of unlocking the bootloader you lose the ability to receive OTA updates. Clean flash a Marshmallow ftf to continue. For this tutorial I used Marshmallow 6.0 E6553_Customized HK_1294-9654_32.1.A.1.185_R7C (the latest firmware at the time of this writing.)
2- How to emulate DRM keys and/or root and/or add recovery after unlocking the bootloader.
A hack exists that can emulate the DRM keys:
2.1- Extract the boot image from the 32.1.A.1.185 marshmallow ftf that you installed in step 1.15. Here are the steps to take:Open the ftf file with 7-zip or any zip program that you have at your disposal
Look for a file called kernel.sin and extract it.
Start flashtool and from Tools menu choose Sin Editor.
Select the kernel.sin that you extracted in the previous step and hit Extract data.
Flashtool will create a file called kernel.elf which you will use in the next step.2.2- Download rootkernel_v4.42_Windows_Linux.zip (or a higher version) from http://forum.xda-developers.com/xperia-z5/development/root-automatic-repack-stock-kernel-dm-t3301605 and unzip it in a folder of your choice.
2.3- Copy the kernel.elf that you got in step 2.1 to this folder. If you want root, follow this guide through to section 5 place SuperSU 2.71 (or higher) in this folder as well. Make sure the name of the SuperSU zip starts with letters "SuperSU". The latest SuperSU can be obtained from: http://forum.xda-developers.com/apps/supersu/2014-09-02-supersu-v2-05-t2868133 (The rootkernel tool has a bug in its built-in SuperSU integration. See: http://forum.xda-developers.com/showpost.php?p=67485478&postcount=838)
2.4- Open a command terminal in this folder and run the rootkernel script. Your command should look similar to this:
Code:
rootkernel.cmd kernel.elf boot-patched.img
When prompted, answer as follows:- Sony RIC is enabled. Disable? [Y/n] Y (if you want root plus write access)
- Install TWRP recovery? [Y/n] Y (if you want to have recovery)
- Install busybox? [Y/n] Y (if you want busybox. It is very useful)
- Found SuperSU-v2.71-20160331103524.zip. Install? [Y/n] Y (if you want root)
- Install DRM fix? [Y/n] Y (if you want DRM emulation)This will create a new kernel image called boot-patched.img which you will now flash on your phone.
2.5- Boot the phone in the fastboot mode and flash your patched image using the following fastboot command:
Code:
fastboot flash boot boot-patched.img
2.6- (Optional) You can reboot the phone and see that the DRM keys are indeed retrieved by repeating step 1.2. You can also open settings -> display, and look under Image Enhancement. If the DRM emulation is successful you will see this.
3- How to flash a custom or stock kernel
3.0- If you have already flashed the patched kernel in part 2 you will skip this part.
3.1- Whether you want to use a custom kernel or stock, and whether you have done the DRM patch described above or not, to flash a boot image (i.e. kernel) on your phone you need to restart the tablet in fastboot mode.
3.2- To flash the kernel use this command:
Code:
fastboot flash boot [I]name_of_your_kernel[/I]
You will replace name_of_your_kernel with whatever your kernel is called (e.g. boot.img, kernel.elf, etc.)
4- How to add and use recovery
4.1- Recovery is added to your kernel in step 2.4.
4.2- To enter recovery reboot the phone and touch the volume up key when the LED turns yellow during the boot splash screen.
5- How to root
5.1- Place SuperSU 2.71 zip (or higher) on the phone's sdcard. The latest SuperSU can be obtained from: http://forum.xda-developers.com/apps/supersu/2014-09-02-supersu-v2-05-t2868133
5.2- Reboot to recovery and flash the zip file.
6- How to relock bootloader and return it to original factory state
6.0- To relock the bootloader along with restoring the DRM keys the phone must have unmodified stock firmware.
6.1- Repeat step 1.1
6.2- Repeat steps 1.3, 1.4, and 1.5
6.3- Copy the TA backup image that you had obtained in section 1 in the iovyroot folder and use the tarestore command to flash the TA partition back onto the phone. The command will look similar to this:
Code:
tarestore TA-05052016.img
Make sure the command completes with no error. If it fails the first time try again. Reboot the phone. Your bootloader is now locked and your DRM keys restored.
6.4- (Optional) You can verify that you are back to the original locked state by repeating step 1.2.
Whoa Great
---------- Post added at 01:32 AM ---------- Previous post was at 12:50 AM ----------
najoor said:
** DISCLAIMER: I AM NOT A DEV AND THIS IS MY HOBBY. I ASSUME NO RESPONSIBILITY IF THIS BREAKS YOUR DEVICE **The following is tested on model E6553. This may work for the dual sim model too but I have not verified it. Do not flash the ftf and kernel files intended for one model onto another.I am not taking credit for any of the tools and kernels here. They are all developed by others. I am only telling you how to use them.
Credits: @zxz0O0, @tobias.waldvogel
0- Prerequisites
You need to have a functioning installation of adb and fastboot tools. You need to have proper Sony drivers installed on your PC to detect your phone when it is connected to the PC. You should be able to flash an ftf file using flashtool. If any of these sound unfamiliar to you, stop reading, go learn about them, and then come back.
1- How to unlock your bootloader without losing the DRM keys
Sony has designed this phone such that if you unlock your bootloader you lose your TA partition PERMANENTLY which includes some of the Xperia features and licenses that have to do with image processing etc. forever. You will also no longer receive OTAs. So in theory, without a copy of this TA partition (which is unique to each device and cannot be copied over from another) unlocking the bootloader results in an irreversible loss of some of your phone's features. Relocking the bootloader will not bring them back.
A hack exists that allows you to backup the TA partition before you unlock the bootloader. This backup will make the process completely reversible so if you ever need to send the tablet to Sony for repair or just want to return it to its original state you have a way. Follow these instructions carefully:
1.0- Before you begin keep in mind that this procedure, especially the unlocking step, completely erases your tablet. Disable myXperia and remove your google account before proceeding. The following will likely not work well with encryption.
1.1- Start by clean flashing any 28.0.A.8.266 firmware, For this tutorial I used the UK Generic ftf that you can get from here.
1.2- Enter service Mode by dialing *#*#7378423#*#* -> Service info -> configuration, and make sure the device is unlockable.
Also check -> Service Tests -> Security and you will see a bunch of "active" and "OK" attributes. You can take screenshots for your reference.
1.3- Turn on usb debugging mode on your phone.
1.4- Download iovyroot zip v0.4 or higher from here.
1.5- Unzip this zip file into a folder of your choice and open a command terminal there.
1.6- Connect the phone which is now in USB debugging mode to your PC and answer yes when the phone asks to authorize the PC to access it in USB debugging mode. You can check that the PC indeed sees the phone by running this command
Code:
adb devices
1.7- Run the following command:
Code:
tabackup
1.8- VERY IMPORTANT: Make sure the command completes with no errors. If all goes well you will have a file with a name like TA-05052016.img (the name may be different for you) with a size of 2MB in your folder.
1.9- Save this file in a very safe place. Save it on your hard disk, AND email it to yourself, AND put it on your google drive. If you lose this file you can never reverse the bootloader unlocking process.
1.10- Reboot the device.
1.11- Now you can unlock the bootloader. Follow the instructions at Sony's official website at http://developer.sonymobile.com/unlockbootloader Also save your unlock code that you obtain in this step somewhere. You may need it some day.
1.12- Reboot the device and it will briefly enter recovery and then start the phone initial setup.
1.13- (Optional) you can easily verify that your bootloader is unlocked by entering the fastboot mode, obtaining any boot image, and running the following command to boot your tablet with that image:
Code:
fastboot boot boot.img
1.14- (Optional) you can see that the DRM keys are erased from your tablet by repeating step 1.2 but this time you will see a bunch of errors under Service Tests -> Security.
1.15- As a side effect of unlocking the bootloader you lose the ability to receive OTA updates. Clean flash a Marshmallow ftf to continue. For this tutorial I used Marshmallow 6.0 E6553_Customized HK_1294-9654_32.1.A.1.185_R7C (the latest firmware at the time of this writing.)
2- How to emulate DRM keys and/or root and/or add recovery after unlocking the bootloader.
A hack exists that can emulate the DRM keys:
2.1- Extract the boot image from the 32.1.A.1.185 marshmallow ftf that you installed in step 1.15. Here are the steps to take:
Open the ftf file with 7-zip or any zip program that you have at your disposal
Look for a file called kernel.sin and extract it.
Start flashtool and from Tools menu choose Sin Editor.
Select the kernel.sin that you extracted in the previous step and hit Extract data.
Flashtool will create a file called kernel.elf which you will use in the next step.2.2- Download rootkernel_v4.42_Windows_Linux.zip (or a higher version) from http://forum.xda-developers.com/xperia-z5/development/root-automatic-repack-stock-kernel-dm-t3301605 and unzip it in a folder of your choice.
2.3- Copy the kernel.elf that you got in step 2.1 to this folder. If you want root, place SuperSU 2.71 (or higher) in this folder as well. Make sure the name of the SuperSU zip starts with letters "SuperSU". The latest SuperSU can be obtained from: http://forum.xda-developers.com/apps/supersu/2014-09-02-supersu-v2-05-t2868133
2.4- Open a command terminal in this folder and run the rootkernel script. Your command should look similar to this:
Code:
rootkernel.cmd kernel.elf boot-patched.img
When prompted, answer as follows:
- Sony RIC is enabled. Disable? [Y/n] Y (if you want root plus write access)
- Install TWRP recovery? [Y/n] Y (if you want to have recovery)
- Install busybox? [Y/n] Y (if you want busybox. It is very useful)
- Found SuperSU-v2.71-20160331103524.zip. Install? [Y/n] Y (if you want root)
- Install DRM fix? [Y/n] Y (if you want DRM emulation)This will create a new kernel image called boot-patched.img which you will now flash on your phone.
2.5- Boot the phone in the fastboot mode and flash your patched image using the following fastboot command:
Code:
fastboot flash boot boot-patched.img
2.6- (Optional) You can reboot the phone and see that the DRM keys are indeed retrieved by repeating step 1.2. You can also open settings -> display, and look under Image Enhancement. If the DRM emulation is successful you will see this.
3- How to flash a custom or stock kernel
3.0- If you have already flashed the patched kernel in part 2 you will skip this part.
3.1- Whether you want to use a custom kernel or stock, and whether you have done the DRM patch described above or not, to flash a boot image (i.e. kernel) on your phone you need to restart the tablet in fastboot mode.
3.2- To flash the kernel use this command:
Code:
fastboot flash boot [I]name_of_your_kernel[/I]
You will replace name_of_your_kernel with whatever your kernel is called (e.g. boot.img, kernel.elf, etc.)
4- How to add and use recovery
4.1- Recovery is added to your kernel in step 2.4.
4.2- To enter recovery reboot the phone and touch the volume up key when the LED turns yellow during the boot splash screen.
5- How to relock bootloader and return it to original factory state
5.0- To relock the bootloader along with restoring the DRM keys the phone must have unmodified stock firmware.
5.1- Repeat step 1.1
5.2- Repeat steps 1.3, 1.4, and 1.5
5.3- Copy the TA backup image that you had obtained in section 1 in the iovyroot folder and use the tarestore command to flash the TA partition back onto the phone. The command will look similar to this:
Code:
tarestore TA-05052016.img
Make sure the command completes with no error. If it fails the first time try again. Reboot the phone. Your bootloader is now locked and your DRM keys restored.
5.4- (Optional) You can verify that you are back to the original locked state by repeating step 1.2.
Click to expand...
Click to collapse
Very usefull step by step guide.. But is there is any method to root phone without unlocking Bl? Quite curious to know from you.
arokososoo said:
Whoa Great
---------- Post added at 01:32 AM ---------- Previous post was at 12:50 AM ----------
Very usefull step by step guide.. But is there is any method to root phone without unlocking Bl? Quite curious to know from you.
Click to expand...
Click to collapse
Not yet, atleast for my Dual SIM Version.
njaya95 said:
Not yet, atleast for my Dual SIM Version.
Click to expand...
Click to collapse
So you mean there is a way to root single sim version without unlocking BL?
Thanks ú so much! this is well writen, i will try this when i get the time to do a fresh install. Cheers mate
@arokososoo
Please, in the future never quote long OP and any other long posts. This is very annoying for mobile and desktop users to scroll to the next post. Thanks.
Sent from my Sony E6553 using XDA Labs
I wonder if E6533 can use this guide
Got as far as going to the sony website, there's no mention of phones that can be unlocked there and for some reason Ive got bootloader unlock allowed no, even with a sim free phone and my xperia turned off.....bummer
Stoneybridge said:
Got as far as going to the sony website, there's no mention of phones that can be unlocked there and for some reason Ive got bootloader unlock allowed no, even with a sim free phone and my xperia turned off.....bummer
Click to expand...
Click to collapse
I also unlocked my Z3+, although it wasn't supported. I just picked Z4 Tablet since it is the "nearest" one. Worked Got MM rooted now.
How long did that take on your devices? 1.1- Start by clean flashing any 28.0.A.8.266 firmware, For this tutorial I used the UK Generic ftf that you can get from here.
I am waiting for half an hour now...
Spoiler
Trilliard said:
How long did that take on your devices? 1.1- Start by clean flashing any 28.0.A.8.266 firmware, For this tutorial I used the UK Generic ftf that you can get from here.
I am waiting for half an hour now...
Spoiler
Click to expand...
Click to collapse
I can't see your picture, but I assume you have that stucking at modem/system ?
If so, downgrade Flashtool to 0.9.19
Well i got a soft brick, but was able to restore it trough Sony Companion. Here is the picture on another hoster http://fs5.directupload.net/images/160529/gr5fpf8t.png dont know on what point it stuck.
Funfact that two germans writting in english
Edit, big thanks version 0.9.19 worked perfect. Cant understand why the newest one doesnt work
Edit 2: System boots up, but when the setup start the process com.android.phone stops instant and if i hit ok the message comes instantly again after about ten times the phone reboot, i cant do anything else... next repair through sony companion and back to stock german 6.0. I´ll stop try it for today.
Trilliard said:
Well i got a soft brick, but was able to restore it trough Sony Companion. Here is the picture on another hoster http://fs5.directupload.net/images/160529/gr5fpf8t.png dont know on what point it stuck.
Funfact that two germans writting in english
Edit, big thanks version 0.9.19 worked perfect. Cant understand why the newest one doesnt work
Edit 2: System boots up, but when the setup start the process com.android.phone stops instant and if i hit ok the message comes instantly again after about ten times the phone reboot, i cant do anything else... next repair through sony companion and back to stock german 6.0. I´ll stop try it for today.
Click to expand...
Click to collapse
Did you forget to wipe?
In a thread i opened in Q&A a user said that even though service info reported bl unlock allowed NO, he managed to unlock it anyways using standard procedure, what do you think?
it seems like Sony RIC is not fully disabled with this patch.
Finally ! Works like a charm in my E6533 (Dual sim) !!! Thanks a lot !!!
Hi thiefxhunter,
How you do this? could you explain us step by step. I like to root my dual sim model.
Thanks.
Hi.. I am stuck in 2.5
My device is unlocked, It is connected in fastboot mode (blue led).
error msg
'Fastboot is not recognised as an internal or external command, operable program or batch file'
Please help me in this.
Solved..
Thanks for this post..
Thanks for this guide, it worked like a charm on my E6553 with 32.2.A.0.224
CorzCorry said:
I also unlocked my Z3+, although it wasn't supported. I just picked Z4 Tablet since it is the "nearest" one. Worked Got MM rooted now.
Click to expand...
Click to collapse
Can you please explain how did you do that? Thanks
Before we start let’s do some preparations:
1. Find your IMEI Number, open the phone dialer on your device and enter *#06# . Write the number down for later.
2. Download SuperSU.zip file by chainfire, and copy it to the root of you phone external SDCARD.
3. Download and install ADB and Xperia XZ drivers .
4. Download TWRP recovery twrp-3.0.2-0-kagura.img .
How to Unlock your device:
Go to Sony Developer World Mobile website;
Select your device model and then provide your device IMEI number. You'll get your unlocking code after verifying your email.
Write the number down for later.
Next, Connect to Fastboot;
1. Turn off phone.
2. Connect USB.
3. Press VOLUME UP & at the same time CONNECT USB CABLE to computer.
4. Go to your ADB folder and open CMD in elevated mode, and then enter the following commands:
To verify your device is discoverable enter
CODE;
fastboot devices
* You should see your device serial number. If not, reconnect to Fastboot and make sure your USB cable is in good shape and mounted properly.
To unlock your device enter you unlocking code as follow
CODE;
fastboot -i 0x0fce oem unlock 0xYOURCODE (0xYourCodeAfterThe 0x)
* Verify you get answer back without any errors.
Next, Boot your device into bootloader,
CODE;
adb reboot bootloader
Install TWRP* now:
To flash TWRP recovery,
CODE;
fastboot flash recovery twrp-3.0.2-0-kagura.img
Install SuperSU now:
Assuming you Have already installed TWRP, and SuperSUfile.zip is in the device SDCARD,
boot into TWRP using ADB,
CODE;
adb reboot recovery
OR manually;
Shutdown the device -> Hold the volume button down & the Power button at the same time -> Once power up you can release the power button but keep holding the volume button down until TWRP opened.
Once in TWRP, install/flash UPDATE-SuperSU-vX.zip and reboot. It will take up to 10min for the first boot possibly with additional boot loop.
If its fail, flash your UPDATE-SuperSU-vX.zip again and make sure System Partition is in RW mode (read write).
*If you don’t have already a copy of SuperSU on your SDCARD, you can try use ADB to Push it.
CODE;
adb push YourSuperSUfileName.zip /sdcard
If it doesn’t work, power the phone normally, copy the file from your computer to the SDCARD, then reboot back to TWRP and continue.
To reboot your device,
CODE;
fastboot reboot
Troubleshoot:
1. *TWRP - Fix READ ONLY when try to mount System Partition;
If you see that the System Partition is mount as Read Only (you’ll see a checkmark next to read only) you must correct it before flashing SuperSU. From within TWRP go to the File Manager and look for TWRP folder, typically you'll find it in /sdcard/TWRP/ and then DELETE the file ".twrps". You may have to do it several time (reboot after each delete) until it works!
2. It taken me some time to do it successfully. Be patient and persistent - the sequence is working.
Good luck to all.
Sorry, no URL's.
Also, if you curious to know, I bought Xperia XZ with preinstalled US rom and I’ve successfully activated the finger print sensor. Here is how;
Activate Finger Print Sensor:
If you have the US version of XZ, you have to install the UK CUSTOMIZED version.
1. Download UK F8331_39.0.A.1.250_1305-2216_R5B.ftf or the most current file.
2. Use Flashtool to install (place the ftf file in C:/Users/CurrentUserName/.flashTool/firmwares).
If it worked for me it should work for you.
which funktions do we lose when we unlock the BL.
i remember when i unlocked my Z3 i lost the DRM Keys and the camera quality get worse.
also the DRM Keys were necessary to relock the BL.
I would also like to know that myself. It is the same thing as it was with the z5.
feritlt said:
which funktions do we lose when we unlock the BL.
i remember when i unlocked my Z3 i lost the DRM Keys and the camera quality get worse.
also the DRM Keys were necessary to relock the BL.
Click to expand...
Click to collapse
Tjoohej said:
I would also like to know that myself. It is the same thing as it was with the z5.
Click to expand...
Click to collapse
Yes, nothing has changed - compared to the Z-series: In case of unlocking the bootloader, your DRM-keys are lost forever. You only can reactivate a few features with a drm fix (e.g. with the tool of @tobias.waldvogel).
@Carlobatusi
Please add a warning at your op!
Klaus N. said:
Yes, nothing has changed - compared to the Z-series: In case of unlocking the bootloader, your DRM-keys are lost forever. You only can reactivate a few features with a drm fix (e.g. with the tool of @tobias.waldvogel).
@Carlobatusi
Please add a warning at your op!
Click to expand...
Click to collapse
Thank you for the quick reply, take care.
How did you get the unlock code?
amuzavali said:
How did you get the unlock code?
Click to expand...
Click to collapse
Xperia XZ isn't under the supported devices yet, but you can choose Xperia X. But keep in mind, that you'll lose your DRM-keys forever!
Ok
Trimis de pe al meu F8331 folosind Tapatalk
Anyone tried? Can we backup DRM keys before do it?
Hi
anyone tried this method? what problems will come after doing it
x-reality will work?
camera?
can we backup DRM key in case of need to relock bootloader?
sorry for English :cyclops:
Klaus N. said:
Xperia XZ isn't under the supported devices yet, but you can choose Xperia X. But keep in mind, that you'll lose your DRM-keys forever!
Click to expand...
Click to collapse
Now Xperia XZ is listed under device selection for unlock bootloader.
lianzen said:
Hi
anyone tried this method? what problems will come after doing it
x-reality will work?
camera?
can we backup DRM key in case of need to relock bootloader?
sorry for English :cyclops:
Click to expand...
Click to collapse
No, you can't backup your DRM keys as of now, there is no way to root with locked bootloader.
And YES, installing androplus kernel v4 you will recover x-reality. and camera functions. The only thing that you will loose is the warraty, but if you don't have any issues with your phone, there is no problem.
My phone is stuck on the Sony logo after I installed SuperSU. I tried installing it again, but no luck
Danchou-san said:
My phone is stuck on the Sony logo after I installed SuperSU. I tried installing it again, but no luck
Click to expand...
Click to collapse
The guide in post #1 is old and flawed that I even suppose it did not work in 2016.
You need a custom kernel otherwise DM-Verity and RIC are freaking out -> bootloop.
The instructions are updated as of 11-20-17. Win7 only cause Win10 sucks and uses powershell and the fastboot commands don't work in powershell.
These are the proper files and procedures for installing Root, the latest Kernel, the best Superuser version and TWRP.
This is for NOUGAT 7.1.1. (and possibly beyond) There is a special procedeur to make flashtool work with the latest firmwares for Nougat ..
Before you Root and install TWRP you need to go back to my link and unlock bootloader..
You also need to download and install Android Studio Software and install it. Back to this portion of the install later.
You also need a special kernel to allow things on the phone to keep working.
This will work only for Nougat firmware.
You will need to download Boot img, TWRP img, SuperSu
Save TWRP and boot img files to the Android Platform folder in your PC here C:\Users\enter the current pc users log in name here\AppData\Local\Android\sdk\platform-tools . Save the Kernel zip and SUperSU zip file to an SD card and put the card inside your phone to access it through TWRP later in the process. Keep in mind that the Kernel may be updated. Check for updates herel here. Do a "date last modified" list of the files on that page by clicking on the grid view box on the upper right portion of the screen just under the "sign in" button. This helps you see what files have been updated in most recent order.
You will need to download the special Flashtool file here Install it.
Download the .jar patch file that makes the software version updated to the latest 9.23.2 and place it in this location C:\flashtools.
Now, download the special .fsc file and paste it in C:\Users"current user that is logged in"\.flashTool\devices\F81XX. Without this file you will not beable to update the device to nougat.
Goto C:\Flashtool\drivers and click on this file which was installed during the Flashtool installation.
Check off these boxes to install the drivers for the device you will be rooting. "Flash Boot Drivers, Flash Mode Drivers"
Now download and install these special ADB drivers to allow it to perform the Firmware update. Without it you wont beable to install the FTF file.
Open Sony Flash tool. Click on XI button. A window open. Click on Xperia Performance and then a small menu open under that. Choose F8132 ( i choose dual for my device)
If you can not get the newest firmware to show up for your device.( mine is 41.2.A.7.8 aka Nougat 7.1.1) then you can download it here Close Sony Flashtool.
Copy this FTF file and place it in folder C:\Users"The user you are currently logged into your pc with"\.flashTool\firmwares. Open Sony flash tool. Click on lightning bolt. Choose Flash mode in the small popup box. Window opens and shows your formware in the "firmwares" box. Click on plus symbol to the left of that firmware and it opens to the bottom to show the device model ( mine is F8132)/ Click on that plus symbol to the left of the model number to show the location of your firmware origination. Click on plus symbol and it then shows the firmware number 41.2.A.7.8. Click on the firmware and the entire window will populate a bunch of new options. If you want to wipe everythign on your phone then you need to check off the boxes "SSD and UserData" in the "wipe" box. Leave everythign else unchecked. Click the flash button at the bottom and it will start to prepare the files for installation onto yout device.
A window pops up that tells you to turn off your phone.
Turn your phone off. After its turned off, hold the volume down button while plugging the phone into your pc to get into fastboot mode. Your computer should be looking for the correct drivers to allow the device to work in this Flashboot mode. Once the flashing is done just close the flashtool. Turn your phone on. Go into settings and scroll down to "about phone then click on "build number" about 7 times. You will get a new optioon back in settings menu called "developer option". Click on that tabturn on "usb debugging" and turn off "verify apps over usb". Turn off phone.
Hold volum button UP this time while plugging phone back into pc.
Now go back to the folder C:\Users" name of user that is logged into the pc"\AppData\Local\Android\Sdk\platform-tools. You will open a cmd prompt in this folder by holding down your right mouse button and click on the shift key then release the mouse button. This will open a pop up window where you can choose to " open command window here" when the cmd window opens, copy and paste this "fastboot devices" press enter button, your computer should respond with this ......CB512A697c fastboot.......This lets you know that your phone is in the correct mode and ready to be programmed.
Now you will install the boot img by copy and pasting this in cmd line "fastboot flash boot boot.img" The PC should tell you OKAY with some other irrelevant info.
Now you will install the twrp img by copy and pasting this in cmd line "fastboot flash recovery TWRP-3.0.3-0-dora.img" The PC should tell you OKAY with some other irrelevant info.
Now you will install Kernel, and SuperSU. Turn on phone while pushing power button holding volume down button for about 5 secnds then release the bottom volum button then after 5 seconds release the power button to initiate TWRP.
Swipe to allow modifications then choose "Install" to install the zip files. Navigate to the SD card that has the kernel and SU zip files. Click on them to install. Reboot. TWRP might ask if you want to install the TWRP app before the phone starts to reboot. Just say no. After that, a few seconds later, the device reboots and then the Phone might go throw optimization process which takes some time. You will notice the counting of optimized files. Be patient.
When phone is booted and running, you might have to reinstall SuperSU via the Operating system as a APK like you would a normal app just to get root going. No big deal.
A caution...
When doing a backup with Twrp you should only backup System and Data
When doing a full restore, wipe only System, Data and the cache files. Do not ever delete your SDcard with the backups on it.
THIS IS THE VERY LAST UPDATE FOR ROOTING THE X Performance. IT IS NOUGAT 7.1.1
FORGET ABOUT ROOTING OREO>> ITS NOT GOING TO HAPPEN. PLUS IT IS NOT A DECENT UPDATE TO BE HONEST> IT JUST CHANGES A BUNCH OF MENUS AROUND AND LOCKS DOWN YOUR PHONE MORE>
Please do not upload my kernel to other hostings!
Official website for my kernel is
https://kernel.andro.plus/tone.html
So, if I was to relock my bootloader after installing TWRP and rooting, what would happen? Would TWRP go away? I'd like to let the phone OTA update to nougat, and you can't do that with an unlocked bootloader....
jakebriggs said:
So, if I was to relock my bootloader after installing TWRP and rooting, what would happen? Would TWRP go away? I'd like to let the phone OTA update to nougat, and you can't do that with an unlocked bootloader....
Click to expand...
Click to collapse
your phone will soft brick..or rather bootloop..if you're still on MM,do a nandroid backup..& here's what you do:
-relock phone using Flashtool.
-repair device using Xperia Companion(it will update automatically to Nougat).
-unlock phone again using Flashtool.
-install AndroPlus Kernel through command prompt(or you can also use Flashtool to do it.however you prefer).
-install TWRP recovery..you're all set!
P.S.
on steps i said(this is optional),you may not turn on your device along the process..that's what i do & i find it easier that way..goodluck!
Arturiuz! said:
your phone will soft brick..or rather bootloop..if you're still on MM,do a nandroid backup..& here's what you do:
-relock phone using Flashtool.
-repair device using Xperia Companion(it will update automatically to Nougat).
-unlock phone again using Flashtool.
-install AndroPlus Kernel through command prompt(or you can also use Flashtool to do it.however you prefer).
-install TWRP recovery..you're all set!
P.S.
on steps i said(this is optional),you may not turn on your device along the process..that's what i do & i find it easier that way..goodluck!
Click to expand...
Click to collapse
Thanks heaps! Now, to find a couple hours spare
Arturiuz! said:
your phone will soft brick..or rather bootloop..if you're still on MM,do a nandroid backup..& here's what you do:
-relock phone using Flashtool.
-repair device using Xperia Companion(it will update automatically to Nougat).
-unlock phone again using Flashtool.
-install AndroPlus Kernel through command prompt(or you can also use Flashtool to do it.however you prefer).
-install TWRP recovery..you're all set!
P.S.
on steps i said(this is optional),you may not turn on your device along the process..that's what i do & i find it easier that way..goodluck!
Click to expand...
Click to collapse
Following this left me with a phone that boots to a screen "To start Android, enter your password". I don't have a password to enter :/
jakebriggs said:
Following this left me with a phone that boots to a screen "To start Android, enter your password". I don't have a password to enter :/
Click to expand...
Click to collapse
that occured to me too!my apologies but i forgot mention about that..but you could try again that after you fixed/updated your phone using Xperia Companion to turn your phone first & set up everything.then unlock using Flashtool.install kernel & recovery.. :good:
Arturiuz! said:
that occured to me too!my apologies but i forgot mention about that..but you could try again that after you fixed/updated your phone using Xperia Companion to turn your phone first & set up everything.then unlock using Flashtool.install kernel & recovery.. :good:
Click to expand...
Click to collapse
I did try that - although, I set it up with a pin rather than a password. It didn't accept my pin when asking for the password.
Now I have a phone with a locked bootloader, running nougat, and I set it up with a password. I wonder if that password you use on the lock screen is the same password that Android is asking for when I unlock my bootloader?
I also could not seem to get the phone to boot into recovery after rebooting when I got the password screen. So weird....
jakebriggs said:
I did try that - although, I set it up with a pin rather than a password. It didn't accept my pin when asking for the password.
Now I have a phone with a locked bootloader, running nougat, and I set it up with a password. I wonder if that password you use on the lock screen is the same password that Android is asking for when I unlock my bootloader?
I also could not seem to get the phone to boot into recovery after rebooting when I got the password screen. So weird....
Click to expand...
Click to collapse
you can't use recovery or root your phone when bootloader is locked..could you try now unlock your phone using Flashtool?then install kernel & recovery?mind that data will be wiped..
Arturiuz! said:
you can't use recovery or root your phone when bootloader is locked..could you try now unlock your phone using Flashtool?then install kernel & recovery?mind that data will be wiped..
Click to expand...
Click to collapse
So if unlocking the boot loader wipes data, how can android ask for my password when I reboot? I am a little mystified at how this is supposed to work Rooting Marshmellow was easier than Nougat....
jakebriggs said:
So if unlocking the boot loader wipes data, how can android ask for my password when I reboot? I am a little mystified at how this is supposed to work Rooting Marshmellow was easier than Nougat....
Click to expand...
Click to collapse
true!MM was easier but Nougat is a bit complicated..however,you could still make changes on Nougat when phone is rooted.anyway,try again from the very beginning then this time after fixing phone using Xperia Companion,do the steps i mentioned..i myself couldn't figure out how it's asking for any password at first.AndroPlus also mentioned it before but didn't explain further.but it's alright coz i got it working now.
Arturiuz! said:
true!MM was easier but Nougat is a bit complicated..however,you could still make changes on Nougat when phone is rooted.anyway,try again from the very beginning then this time after fixing phone using Xperia Companion,do the steps i mentioned..i myself couldn't figure out how it's asking for any password at first.AndroPlus also mentioned it before but didn't explain further.but it's alright coz i got it working now.
Click to expand...
Click to collapse
I think my issue with the unknowable password after unlocking the bootloader on Nougat could have been fixed by wiping data+dalvik cache. I was having issues with the camera under nougat so I flagged trying to get it going and flashed MarshMellow. Once that was done, I got the bloody password prompt again, so I wiped data + cache and it booted correctly.
Anyway, gonna ignore Nougat until fastboot supports nougat
Issues with passwords kept / unknown and blocked are due to the fact the security portion is stored
next to the data partition area, in what we call the footer, and that area was wrong for you.
By wiping data completely (most reliably, a factory reset which will format the data partition),
the footer is also erased instead of simply deleting the files like a Wipe would do.
lost system?
I got as far as getting boot.img and twrp.img in my phone, and then appeared to lose my system since it stuck on the Sony logo and wouldn't boot into the system despite several tries. Idiot that I am, I panicked and come onto the forum to post a plead for help. I've managed to get my system back on now and feel very foolish, so just editing the post to remove the request for help. Thank you so much for the guide, very greatly appreciated! Looking forward to upgrading to Nougat.
Will this guide work with Nougat? I have a F8132 with 39.2.A.0.327
mongastein said:
I got as far as getting boot.img and twrp.img in my phone, and then appeared to lose my system since it stuck on the Sony logo and wouldn't boot into the system despite several tries. Idiot that I am, I panicked and come onto the forum to post a plead for help. I've managed to get my system back on now and feel very foolish, so just editing the post to remove the request for help. Thank you so much for the guide, very greatly appreciated! Looking forward to upgrading to Nougat.
Click to expand...
Click to collapse
Don't feel like a fool. I'm panicing right now.
Can flash boot.img and twrp.img and even enter twrp to flash su and kernel. But thats it. When done i reboot and i can pass SONY logo and enter bootanimation but it stucks here forever. Been trying with everything exept flashing official MM.
You did get the system back. So I'm the fool
---------- Post added at 07:45 AM ---------- Previous post was at 07:40 AM ----------
chiobesek said:
Will this guide work with Nougat? I have a F8132 with 39.2.A.0.327
Click to expand...
Click to collapse
Didn't for me. Have a softbricked phone in front of me since yesterday. Going to try to flash MM soon but my internet is terrible slow. Won't give up.
chiobesek said:
Will this guide work with Nougat? I have a F8132 with 39.2.A.0.327
Click to expand...
Click to collapse
It works if you get updated files. I struggled a bit before I finally extracted the boot.img from the AndroPlusKernel for my version which I flashed in fastboot and flashed the kernel and supersu in twrp. I think that's what did it. I was so eager to root that I missed that I was using MM-files at first. :silly:
Edit: oh I answered a pretty old post. Anyway, this is another way https://forum.xda-developers.com/xp...ment/mod-sony-stock-patcher-xperia-x-t3528148
Wimz3n said:
Don't feel like a fool. I'm panicing right now.
Can flash boot.img and twrp.img and even enter twrp to flash su and kernel. But thats it. When done i reboot and i can pass SONY logo and enter bootanimation but it stucks here forever. Been trying with everything exept flashing official MM.
You did get the system back. So I'm the fool
---------- Post added at 07:45 AM ---------- Previous post was at 07:40 AM ----------
Didn't for me. Have a softbricked phone in front of me since yesterday. Going to try to flash MM soon but my internet is terrible slow. Won't give up.
Click to expand...
Click to collapse
I ended up finding a way to downgrade to marshmallow following some instructions from from @sdugoten
The instructions are updated.. With proper files for the latest and greatest kernel and SuperSU and TWRP. NOUGAT Only .. Will not work for any other OS versions
AS flashtool does not work for 7.1.1 how to proceed to install nougat 7.1.1 and enable root and install twrp?
Ladies & Gents, please buckle up for liftoff.
Code:
[COLOR="Red"][B]/* Disclaimer
* You are choosing to test this software as-is & accept full responsibility in case
* it will not work as expected. Or for WW3. Or dead kittens, whichever is worse.
*/[/B][/COLOR]
Instructions 1/2 = Bootloader Unlock:
Code:
[b]1: DOWNLOAD[/b] the [URL="https://drive.google.com/file/d/0B8rpJsF4EG0YUHh4UEo5ZExHWjg"]> prerequisites <[/URL]
[b]2: UNZIP[/b]
You will have 3 folders for zs550kl, zs570kl & zs570klpro containing:
UL-Z016-WW-4.12.40.9999-user.zip -> unlock-capable firmware update
UL-Z016_1-WW-4.12.40.9999-user.zip -> unlock-capable firmware update for the zs570kl PRO variant (in its own folder)
UnlockTool.apk -> unlock app, needed for the actual operation
PDF with Instructions in CN & EN (for zs570kl/pro only)
- bootroot.img - rooted boot image (bootrootn.img for ZS550KL Nougat)
- bootstock.img - stock boot image, if you want to return to stock or if something went wrong (bootstockn.img for ZS550KL Nougat)
- Superuser.apk - superuser app
[b]3: FACTORY RESET[/b] via Settings -> Backup & Reset
This usually solves the issue with not being able to unlock due to a "missing PIN"
Do through initial setup - no need to configure anything as the following factory reset will erase everything again.
Just click through the options to access the app drawer asap.
[b]4: COPY Files:[/b]
ZS570KL - Copy UL-Z016-WW-4.12.40.9999-user.zip to your internal storage
ZS570KLpro - Copy UL-Z016_1-WW-4.12.40.9999-user.zip to your internal storage
[COLOR="DarkOrchid"]ZS550KL - no files needed at this stage. Just ensure you are on the latest firmware: (Marshmallow: v12.40.108.29; Nougat: v22.40.26.43); update otherwise.
[URL="http://dlcdnet.asus.com/pub/ASUS/ZenFone/ZS550KL/UL-Z018-WW-12.40.108.29-user.zip"]> latest MM firmware <[/URL] put it in the root of your internal storage.
[URL="http://dlcdnet.asus.com/pub/ASUS/ZenFone/ZS550KL/UL-Z018-WW-22.40.26.43-user.zip"]> latest N firmware <[/URL] put it in the root of your internal storage.[/COLOR]
Copy & install UnlockTool.apk
[b]5: REBOOT[/b]; You should have a notification about a new firmware.
No notification for ZS550KL if you were already on the latest firmware.
Install & reboot again.
[b]6: Run the UNLOCK[/b] App
It should do another factory reset on success.
Instructions 2/2 = ROOTING:
Code:
[b]7:[/b] Copy/install Superuser.apk
[b]9:REBOOT into BOOTLOADER[/b]; either holding volume up + power from a powered down state or typing the following in a console (assuming you have ADB enabled in developer options)
adb reboot bootloader
[b]9: FLASH[/b] bootroot.img via fastboot
fastboot flash boot bootroot.img (you can also do a fastboot boot bootroot.img without flashing to check if the boot image works for you)
fastboot reboot
note: change the filename to bootrootn.img if you want to test the ZS550KL Nougat version.
[b]10:[/b] Check for root via adb shell; su or via any app requiring root, on device (terminal, titanium backup, etc...)
- in case something goes wrong, flash the stock boot via fastboot.
- report success/failure in this thread.
[b]11:[/b] BUSYBOX (Optional):
I've bundled busybox with the boot image; follow the commands below to install (in an adb shell or terminal session):
mount -o remount,rw /system
busybox --install -s /system/xbin/
[b]12: RECOVERY[/b] (Optional):
[URL="https://drive.google.com/file/d/0B8rpJsF4EG0YZ1FQSkUxRW9TdWs"]> stock dump <[/URL]
> twrp < / WIP
What it does mean to us? Can someone create some tutorial?
Wysłane z mojego ASUS_Z016D przy użyciu Tapatalka
squo_85 said:
What it does mean to us? Can someone create some tutorial?
Wysłane z mojego ASUS_Z016D przy użyciu Tapatalka
Click to expand...
Click to collapse
It means we have the bootloader unlock.
The tutorial/instructions are contained in a PDF in the zip.
English instructions at the end of the PDF.
Three is one more question?
Hot to root it?
Like for 520kl with changed according to 570kl files
Spoiler
https://youtu.be/hg77b8o8Jk4
Or just use universal tool e.g. Autoroot tool?
Spoiler
https://youtu.be/UYTCRhg0SCw
can confirm working on zs570kl/256GB (yes I knew it was dangerous, I used fastboot boot instead of fastboot flash - be wiser)
Chaosruler said:
can confirm working on zs570kl/256GB (yes I knew it was dangerous, I used fastboot boot instead of fastboot flash - be wiser)
Click to expand...
Click to collapse
Thanks for testing ;]
Were you thus able to achieve root from within an app on the system?
adwinp said:
Thanks for testing ;]
Were you thus able to achieve root from within an app on the system?
Click to expand...
Click to collapse
yeah, Titanium Backup (PRO)
thank you very much for your hard work, let the custom android era begin!
Chaosruler said:
yeah, Titanium Backup (PRO)
thank you very much for your hard work, let the custom android era begin!
Click to expand...
Click to collapse
Great, thank you for the confirmation & enjoy ;]
Let the fun begin ^^
Do you think I can flash with fastboot flash instead of running it with fastboot boot? The latter let's me have root until I restart my device( temp root)...
Maybe fastboot flash will perma root it
Chaosruler said:
can confirm working on zs570kl/256GB (yes I knew it was dangerous, I used fastboot boot instead of fastboot flash - be wiser)
Click to expand...
Click to collapse
Hey there,
How did you achieve root? How did you achieve unlocking bootloader. I have followed the instructions and all I have was my data erasing. How can I confirm if my bootloader is unlocked and what did you do to get root. OneClickRoot stated my phone could not be rooted.
I have the zs570kl/256gb phone too.
jmoricone said:
Hey there,
How did you achieve root? How did you achieve unlocking bootloader. I have followed the instructions and all I have was my data erasing. How can I confirm if my bootloader is unlocked and what did you do to get root. OneClickRoot stated my phone could not be rooted.
I have the zs570kl/256gb phone too.
Click to expand...
Click to collapse
bootloader unlock is not root... its what is required to root... to confirm your bootloader is unlocked use adb to get device info, it will say if its unlocked there
What I did to root is run fastboot boot bootroot.img to temporarily use the ops boot image
Chaosruler said:
bootloader unlock is not root... its what is required to root... to confirm your bootloader is unlocked use adb to get device info, it will say if its unlocked there
What I did to root is run fastboot boot bootroot.img to temporarily use the ops boot image
Click to expand...
Click to collapse
Wow, i guess i am a newbie here.. I have heard adb but dont remember what where or how i got it fo rmy zen2. can you provide instructions how how to check, access, use adb to confirm unlocked bootloader. Also can you provide instructions on to to run the boot image for rooting.
thanks
For some reason, i can't get to fastboot, i was able to get it before unlocking this device, now after unlocking, i can't get to fastboot, unless i'm missing something here. I can get to recover mode, but that all.
EDIT: Ok i got into boot loader, which my fastboot was able to detect the device, but the commands are unknown, search it up saying it;s locked, but i just did the installment above for updating it to make it unlock, am i missing something here? (I might do this over again later on tonight)
We may need screenshots of making sure to see the oem unlocking.
Darkdragontc said:
For some reason, i can't get to fastboot, i was able to get it before unlocking this device, now after unlocking, i can't get to fastboot, unless i'm missing something here. I can get to recover mode, but that all.
EDIT: Ok i got into boot loader, which my fastboot was able to detect the device, but the commands are unknown, search it up saying it;s locked, but i just did the installment above for updating it to make it unlock, am i missing something here? (I might do this over again later on tonight)
We may need screenshots of making sure to see the oem unlocking.
Click to expand...
Click to collapse
I updated post #1 with step by step instructions.
Follow.
I also went through the process myself, as described in OP & everything went fine.
Confirmed working.
adwinp said:
I updated post #1 with step by step instructions.
Follow.
I also went through the process myself, as described in OP & everything went fine.
Confirmed working.
Click to expand...
Click to collapse
Yup Confirmed Working, no more problems. Thank you! Now i hope we can make some custom roms and get twrp on here when we can. (820 that what i have)
Just to be clear, on the SD821 variant is this a permanent root or just a temp root?
ultramag69 said:
Just to be clear, on the SD821 variant is this a permanent root or just a temp root?
Click to expand...
Click to collapse
temp root if you use fastboot boot command
Perma root of you use fastboot flash boot command
Step 7 says the rooted image is only for the sd820 variant. It looks like people with the sd821 are having success so I guess it works for both?
pacattack81 said:
Step 7 says the rooted image is only for the sd820 variant. It looks like people with the sd821 are having success so I guess it works for both?
Click to expand...
Click to collapse
I can confirm it with my device...
pacattack81 said:
Step 7 says the rooted image is only for the sd820 variant. It looks like people with the sd821 are having success so I guess it works for both?
Click to expand...
Click to collapse
I used a SD820 boot image as base & don't have a SD821 variant to test on thus didn't want to mislead the community.
But @Chaosruler tested & it seems to work.
[UPDATE]: USE THIS ONLY FOR NOUGAT 7 OR 7.1! THERE IS A DIFFERENT GUIDE FOR ANDROID OREO!
https://forum.xda-developers.com/xperia-x/how-to/root-xperia-x-f5122-android-n-34-2-2-47-t3594502 (Written by YasuHamed, not me!)
If you are not interested in android Oreo, or you want to go back to Nougat, this guide is still valid! [End of Update]
This is a guide for newbies or for people that are simply confused. If you have any questions, you can always ask me, and I will reply. but please make sure you haven't made mistakes and do not ask about things that are already stated here. Let's go!
BEFORE DOING ANYTHING, NOTES
-make sure you have installed ADB : https://forum.xda-developers.com/showthread.php?t=2588979
-make sure ADB can read your phone with the correct drivers installed. If you have trouble with that, read "DRIVERS" section
!It is absolutely necessary to install the drivers correctly!
-Backup your stuff if you have any, you will need to delete everything from the phone
-Enable USB debugging
-Note: some of these instructions apply to Windows OS only!
-Note: links to downloads have been shortcutted as much possible to make it easier for you!
-Find some stock roms here! https://forum.xda-developers.com/xperia-x/how-to/sonyx-f5121-downgrade-8-0-0-to-7-1-1-to-t3754986
(Credit: HEKER510)
-Warning: you will lose your warranty!
-I am not responsible for any damage done to your device.
BACKUP DRM KEYS (OR WORKAROUND)
You may want to unlock your bootloader. If you unlock it without backing up the DRM keys, you will lose them. I did that mistake and I regret it. If you already did, there is an alternative solution, skip to step 8.
1) If you are running android 7 nougat, you will need to downgrade to MM. If you are running MM, skip to step 7.
2) You will need to wipe everything before rolling back, so if you have any data back it up
3) Download any stock MM 6.0.1 firmware for the xperia X. You can find one here : https://mega.nz/#!1xRj2CYS Decryption key: !qBVi7yky8AL84eUF3bpTTGQ2YmN0ePCjc-eSDZGIZCI
Watch out: if you have the dual SIM model, F5122, you need to download accordingly!
For more firmwares, check "BEFORE DOING ANYTHING"
4) Download the latest flashtool: http://www.flashtool.net/downloads.php
Upon installation, tick on fastboot, flashmode drivers! If it didn't ask you, go to the installation folder and run Flashtool-drivers.exe. Please read "DRIVERS" section!
5) Flash the .tft file
How to flash?
0. Go to "C:\Users\[Your PC Name]\.flashTool\firmwares" , and put your firmware .ftf file in there!
1. Open Flashtool and click on the lightning bolt icon (first one from the left)
2. In the prompt, choose flashmode.
3. Under firmware, click on the version you put (It should probably only be one option)
4. Under wipe , tick everything. Under the others, do not make any changes.
5. Click "Flash"
6. When the popup appears, connect your device. It needs to be powered off, and connected while you are holding the
"volume down" button.
7. Wait for it to finish.
8. Done. Boot up the device, it might take some time to open so don't worry.
Click to expand...
Click to collapse
6)If your phone bootloops, try flashing again or a different firmware and make sure you followed the steps correctly.
7) Once your phone successfully boots android MM, use Dirtycow to get your DRM keys out: https://forum.xda-developers.com/crossdevice-dev/sony/universal-dirtycow-based-ta-backup-t3514236
8) If you unlocked the bootloader before backing up your keys, you can use DRM kernel fix. You can get it here: https://forum.xda-developers.com/xperia-x/development/kernel-drm-fix-nougat-t3530849 Before using it check out the custom rom that includes this fix and other things.
UNLOCK BOOTLOADER
This is relatively easy and you can follow official sony instructions to do it.
1) Go to your phone settings, developer options, and enable OEM unlock
"But there is no developer options!" -Go to the bottom of your settings, system, about phone, and tap multile times on "Build Number", also at the bottom.
Click to expand...
Click to collapse
2) If you haven't already , install ADB fastboot and configure drivers (Link on top )
3) Follow the steps on the Sony website to get your unlock code: https://developer.sonymobile.com/unlockbootloader/email-verification/
4) After unlocking, a warning message on boot is normal!
INSTALL RECOVERY
Installing TWRP on your xperia X is very important, since you can flash zips and img files so easily, plus wipe, backup and other features.
1) Download the TWRP .img file: https://androidfilehost.com/?w=files&flid=197369 (Credit: eagleeyetom )
2) Make sure you have USB debugging enabled
3) Open your downloaded twrp folder
4) Run CMD in that folder (shift + right click inside the folder, Open CMD here )
5) Connect your Xperia X to your PC
6) Type these lines:
adb reboot bootloader
fastboot flash recovery recovery.img [where recovery.img is your twrp file name]
fastboot reboot
7) If no errors, twrp is now installed. Once your phone boots , turn it off,. To access TWRP recovery hold power button and volume down button until the TWRP menu appears.
STOCK ROM, ROOT
If you just want to root and not interested in additional features and tweaks, you can simply flash SU through TWRP to get your phone rooted.
Note: Current best stock ROM available: 7.1.1 (252) - better features than older ver, and good battery life.
0) Install your desired stock firmware using the exact same previous instructions, (under DRM section) with flashtool.
1) Download SuperSu
Or magisk, using YasuHamed guide mentioned on top, but I have not tested with anything other than Oreo 8.0
Use magisk if you want more stability / root features (like hide root from apps, modules )
2) copy it anywhere on your phone
3) Run TWRP
4) Tap on install
4) Flash the file
5) Reboot, you are now rooted
6) Insert your DRM keys if you have them
Custom ROMS
After unlocking the bootloader and installing TWRP this is the best way to go in order to get full root, tweaks.
https://forum.xda-developers.com/xperia-x/development/rom-xperia-x-pexorom-v1-0-0-f5122-f5121-t3590552
^ This is a very good custom ROM made by prmk74. You can see its features in his thread.
1) Download the rom and copy it to your phone
2) Run TWRP
note: It is recommended to wipe dalvik, cache, data ( your storage partition doesn't need to be wiped)
3) Tap install, find your downloaded file and execute
note: It is recommended to wipe dalvik, cache, data ( your storage partition doesn't need to be wiped)
4) Follow on-screen instructions, do not stop the booting after finishing the installation, it will take some time
5) Insert your DRM keys if you have them
6) For those who lost their keys: Now the functions like vivid image mode are working properly.
DRIVERS
For Windows 8/8.1/10 users, how to solve driver problems:
1) Press the Windows key + R together and in the ‘Run’ box type: shutdown.exe /r /o /f /t 00
– Now make the following selections to boot into the Start Up Setting Screen: Troubleshoot > Advanced options > Start Up Settings > Restart
– Then, when the machine restarts, select number 7 i.e. “Disable driver signature enforcement”. Your machine will start with Driver signing enforcement disabled until the next reboot.
B) Now you can install the Flashtool drivers. Go to the flashtool install location and run the drivers.exe again, check fastboot and flashmode
– Windows will warn that the driver is not signed and will require you to confirm the installation.
– Once the installation is complete, reboot the machine
TO CONCLUDE:
This is what you may want to do to get the most out of your new xperia x:
1) Backup DRM
2) Unlock BL
3) Install TWRP
4) Flash Persian (or a different rom) through TWRP (And subscribe to the thread so you receive updates)
5) Restore DRM
Notes:
None of the links, tools are of my work, I'm just writing a guide for my fellow XX owners
^^ this guide is so really good :3. I post flash script for someone dont know how to find it ^^
unzip it in this position.
C:\Users\[user-name]\.flashTool\mydevices
max26292 said:
^^ this guide is so really good :3. I post flash script for someone dont know how to find it ^^
unzip it in this position.
C:\Users[user-name]\.flashTool\mydevices
Click to expand...
Click to collapse
Thanks!
Thanks for this, I need some help!
All was fine until I tried flashing the recovery, comes back "partition unknown" error. I was unable to bring the device up under an adb device only as a fastboot device.
34.0.A.1.264_R3A firmware.
Different official sony driver (Sony bootloader guide driver didn't work)
Device now hangs on the Sony logo after boot messgae warning "OEM bootloader unlocked, device not trusted," any help would be appreciated.
brianx87 said:
Thanks for this, I need some help!
All was fine until I tried flashing the recovery, comes back "partition unknown" error. I was unable to bring the device up under an adb device only as a fastboot device.
34.0.A.1.264_R3A firmware.
Different official sony driver (Sony bootloader guide driver didn't work)
Device now hangs on the Sony logo after boot messgae warning "OEM bootloader unlocked, device not trusted," any help would be appreciated.
Click to expand...
Click to collapse
These USB drivers are very annoying to work with. I got mine to finally work using a program called ADB driver installer. http://adbdriver.com/downloads/ Choose automated installation and try what I said. I believe it should fix your problem, after installing the drivers reboot and flash again.
Other than that, I have to ask are you 1000% sure you used the exact commands?
I saw another thread someone mistook
"flash recovery recovery.img" for "flash recovery.img"
"recovery" should be included before the recovery file name
brianx87 said:
Thanks for this, I need some help!
All was fine until I tried flashing the recovery, comes back "partition unknown" error. I was unable to bring the device up under an adb device only as a fastboot device.
34.0.A.1.264_R3A firmware.
Different official sony driver (Sony bootloader guide driver didn't work)
Device now hangs on the Sony logo after boot messgae warning "OEM bootloader unlocked, device not trusted," any help would be appreciated.
Click to expand...
Click to collapse
Why didn't the sony guide work? It worked for me. Just so you know, the "device cant be trusted" message is appearing on everyones' phones after unlocking the bootloader, it's not a problem or something
the part of restoring DRM is skipped,
please xplain
YasuHamed said:
the part of restoring DRM is skipped,
please xplain
Click to expand...
Click to collapse
I know, as I said there is room for improvement. The reason I did not include it is because I never did it myself, so I don't want to write something wrong or something that could lead to problems. I write something only if I am 100% sure. If anyone of you is kind to offer that piece so the guide is complete I will be glad
FoxTheLegend said:
Why didn't the sony guide work? It worked for me. Just so you know, the "device cant be trusted" message is appearing on everyones' phones after unlocking the bootloader, it's not a problem or something
Click to expand...
Click to collapse
Ok I figured out what I did wrong and was able to amend another issue I edited out of this post.
brianx87 said:
Ok I figured outwhat I did wrong (able to boot into the os and warning message no longer an issue ) and the issue I am now facing is that twrp is hanging on the boot screen. Is this version of twrp built to a specific version of android?
Click to expand...
Click to collapse
What do you mean hanging? the twrp logo frozen?
FoxTheLegend said:
What do you mean hanging? the twrp logo frozen?
Click to expand...
Click to collapse
Working now, used a previous version of twrp by mistake. Using latest build works fine now, have to wait to get home from work to proceed with the rest, annoying procedures this stuff but your guide is great.
brianx87 said:
Working now, used a previous version of twrp by mistake. Using latest build works fine now, have to wait to get home from work to proceed with the rest, annoying procedures this stuff but your guide is great.
Click to expand...
Click to collapse
Thanks, Im glad to it works now
FoxTheLegend said:
I know, as I said there is room for improvement. The reason I did not include it is because I never did it myself, so I don't want to write something wrong or something that could lead to problems. I write something only if I am 100% sure. If anyone of you is kind to offer that piece so the guide is complete I will be glad
Click to expand...
Click to collapse
thank you for the answer sir
i am unable to find any twrp that work for my F5122, it always bricks and i have to reset.
is there any twrp recovery image that works correctly with f5122?
YasuHamed said:
thank you for the answer sir
i am unable to find any twrp that work for my F5122, it always bricks and i have to reset.
is there any twrp recovery image that works correctly with f5122?
Click to expand...
Click to collapse
Hmm.. Did you try the one from the poison thread? I myself have still the old version installed (not 3 or 3.1) if I find it on my pc I will share it with you
FoxTheLegend said:
Hmm.. Did you try the one from the poison thread? I myself have still the old version installed (not 3 or 3.1) if I find it on my pc I will share it with you
Click to expand...
Click to collapse
I have to modified kernel
all i want is to boot it via fastboot command
for example i have the rooted kernel SU installed (but battery drain is high) so i what wana do is flashing kernel with all securities OFF and then with twrp image i will do
Code:
fastboot boot twrp.img
i will boot the X in to twrp and i will flash SUPERSU via twrp.
thanks all
YasuHamed said:
I have to modified kernel
all i want is to boot it via fastboot command
for example i have the rooted kernel SU installed (but battery drain is high) so i what wana do is flashing kernel with all securities OFF and then with twrp image i will do
i will boot the X in to twrp and i will flash SUPERSU via twrp.
thanks all
Click to expand...
Click to collapse
I see, but don't you want to figure out why it's not working normally? Noone has reported a similar problem
FoxTheLegend said:
I see, but don't you want to figure out why it's not working normally? Noone has reported a similar problem
Click to expand...
Click to collapse
since there is no offcial twrp for X out yes and only DORA (XA) is available) even XA don't work for X
so either twrp 2.8, 3.0 or 3.1 any should just boot in order to let us flash superSU.
YasuHamed said:
since there is no offcial twrp for X out yes and only DORA (XA) is available) even XA don't work for X
so either twrp 2.8, 3.0 or 3.1 any should just boot in order to let us flash superSU.
Click to expand...
Click to collapse
=-= try to use this command fastboot flash recovery [your_recovery_name].img
I use f5122 and flash successfull twrp 3.0.2 and 3.1. with this, i flash some kernel and rom without any problem.
Everything is working good for me now, the only issue now is restoring the DRM keys, has anyone found a credible source for doing this on this device?
How can I be sure I have a full root? I can't seem to be able to uninstall some of the bloatware only disable it!
brianx87 said:
Everything is working good for me now, the only issue now is restoring the DRM keys, has anyone found a credible source for doing this on this device?
How can I be sure I have a full root? I can't seem to be able to uninstall some of the bloatware only disable it!
Click to expand...
Click to collapse
Well titanium backup can assure you but I don't see why you wouldn't have full root... You need an app uninstaller to uninstall bloatware, it can't be done through the settings you know that right