Unlocking redmi 4 pro bootloader (Unofficial way) - Xiaomi Redmi 4 Prime ROMs, Kernels, Recoveries, &

For all who are waiting for unlocking permission, you don't need to - if you'd like to root and install twrp.
Warning do not flash xiaomi.eu global or any other unofficial rom this way !
Good news - there is now patched aboot with installation instructions
I bought my redmi 4 pro from geekbuying and it came with preinstalled google play and semi mutlilingual (fake) Miui global 8.0.5.0.0(MBECNDG)
It seems geekbuying has installed a modifyed aboot (android bootloader), if you overflash it with xiaomi stock your device will check the rom for valid signing.
So you probably could flash unofficial rom if you don't flash aboot, but I can't test it anymore :/
btw I did this using linux and I used adb from Flashtool
As I still needed root so I tryed to unlock using fastboot :
First enable developer options by clicking on miui version in about phone menu
Go to Systems & Device > Additional Settings > Developers options
allow oem unlock and usb debugging
connect to the computer and allow access
turn off device
hold vol down and power - device reboots to fastboot
fastboot oem device-info
fastboot oem unlock-go
fastboot oem device-info < again, to check if its unlocked
restart device
Redo the setup and use browser to download supersu
get Recovery Flashable.zip
now download twrp to the computer
and follow the instructions how to install twrp.
Twrp started in chinese use, settings menu is second up from the right and last tab is language.
Flash supersu

I'll try this when I receive my Redmi 4.
Thanks for sharing!

It's that simple ?
I remember that my Redmi Note 3 Pro made some trouble with "unofficial" unlocking, when it comes to different ROMs...
Thanks anyway!

who checked this method?

Not working
FAILED (remote: Token verification failed, reboot the device)
finished. total time: 0.016s
Click to expand...
Click to collapse

Hi just to say this worked fine for me. Had a new Redmi 4 Prime bought from Gearbest. Fake global rom version exactly same as mentioned above. I used vanilla Minimal ADB and Fastboot.
NB when device arrived no setup ie fake ROM had already been installed and configed (presumably to install play store).
Went straight in and tried the instructions above. Worked fine. Fastbook unlock then TWRP then supersu. Dumped Chinese CM13 ROM on and we're all good.
Not sure why works for some and why doesn't. Perhaps the exact version of the global rom? Perhaps the fact hadn't done anything with ROM and dived straight in with the unlock?
Tx for kentaurest for the tip!
J

Did you check if bootloader was locked before? Maybe it was unlocked by Gearbest when flashing ROM?
PS. I'm waiting for delivery and I will check your method

mulat666 said:
Did you check if bootloader was locked before? Maybe it was unlocked by Gearbest when flashing ROM?
PS. I'm waiting for delivery and I will check your method
Click to expand...
Click to collapse
Yeah so device-info before unlock was:
(bootloader) Device tampered: false
(bootloader) Device unlocked: false
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: true
(bootloader) Display panel:
Afterwards it was:
(bootloader) Device tampered: false
(bootloader) Device unlocked: true
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: true
(bootloader) Display panel:
Screenshot here: https://photos.google.com/share/AF1QipMnl4IHWqsJ60emRL-bLFsPdzSRN3EQ-LO9aBR3KgdtH8OVBplWE_AKXuQva_05CA?key=T2dOREx6N2w0SE10SmV6NEJuWHlSWEVJaXUwNU1B
J

Tried with my Redmi 4 Pro who came straight stock from china. It worked. Be sure to install good adb and fastboot drivers and be sure to check the correct developers options.

jontseng said:
Yeah so device-info before unlock was:
(bootloader) Device tampered: false
(bootloader) Device unlocked: false
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: true
(bootloader) Display panel:
Afterwards it was:
(bootloader) Device tampered: false
(bootloader) Device unlocked: true
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: true
(bootloader) Display panel:
Screenshot here: https://photos.google.com/share/AF1QipMnl4IHWqsJ60emRL-bLFsPdzSRN3EQ-LO9aBR3KgdtH8OVBplWE_AKXuQva_05CA?key=T2dOREx6N2w0SE10SmV6NEJuWHlSWEVJaXUwNU1B
J
Click to expand...
Click to collapse
One interesting thing is mine device which is unlocked with miflash shows the second line like this
(bootloader) Device critical unlocked: true.

I've just received phone with the same ROM as in first post. Could you please share ADB drivers? With universal I had:
Code:
fastboot.exe oem unlock-go
...
FAILED (remote: Token verification failed, reboot the device)
finished. total time: 0.030s
The same issue on Ubuntu 16.04

Yeah mine is still "device critical unlocked: false" even after flashing other ROMS and mucking around.
Not quite sure what the issue is - did some quick google as maybe its some key system stuff still locked or because I didn't officially flash thru edl mode or something?
Not going to worry about it too much as I seem to be able to flash ROMs and stuff just fine (just flashed XPosed framework as well, FYI). Don't plan to go back to MIUI at any point anyhow - not really my cup of tea.
Would be interested if someone can explain more about this though. What am I missing out on?
PS Just for fun I ran the same fastboot device-info on my old redmi 3 (unlocked the official way) and it didn't have the "device critical unlocked" line at all (true or false..)

It is dangerous, you can install supersu and twrp this way, but don't flash non official roms.
Xiaomi roms should relock the bootloader.
Also don't try to install xposed, it didn't work for me.
After xposed made my phone bootloop I installed unofficial global and ended up with "bricked phone" left only with fastboot or black screen (qualcomm diagnostics interface 9000E) and couldn't turn off the phone.
I made deep flashing cable - usb cable where you can short GND and D+
http://xiaomitips.com/media/2016/08/Deep-FLash-Cable-Architecture-680x318.jpg
Connected phone to the computer (don't short the cables yet), used "fastboot reboot" to restart phone.
Quickly shorted GND and D+ for a few seconds, then windows installed HS-USB QDloader 9008 driver
and I could use Mi Flash to restore the phone, this time to the china developer rom
(fastboot version ends with .tgz) with clean all and locked options.
I was quite happy with fake global, twrp and supersu, pity xposed ruined it.

mulat666 said:
FAILED (remote: Token verification failed, reboot the device)
finished. total time: 0.030s[/CODE]
Click to expand...
Click to collapse
Use deep flashing usb cable to get to EDL (downloader) mode.

@kentaurest I have a cable, would it work with the same fastboot commands?

mulat666 said:
@kentaurest I have a cable, would it work with the same fastboot commands?
Click to expand...
Click to collapse
Use windows and Mi Flash... as I described or use official unlocking method.

Hi Kentaurest tx for this. Forewarned is forearmed I guess.
So I assume it was the fake global ROM you were having trouble with re: Xposed - you hadn't flashed and other ROMs right?
(I have Xposed working on the 25/11 CM13 ROM from the China MIUI forums... But I guess its something of a crapshoot which ROMs do and don't break the device..)
To clarify (for future) - when you say "don't flash unsupported non xiaomi roms" do you mean any third party ROM, or ROMs now built specifically for the redmi 4?
Tx
J

jontseng said:
To clarify (for future) - when you say "don't flash unsupported non xiaomi roms" do you mean any third party ROM, or ROMs now built specifically for the redmi 4?
Click to expand...
Click to collapse
To my understanding bootloader checks if the system is signed with xiaomi key or not... so all xiaomi stuff will load, but xiaomi.eu unofficial global would not.
Also there is special Xposed for Miui, which I didn't try, last pages in the thread seem to suggest to use v86.2
http://forum.xda-developers.com/xposed/unofficial-xposed-miui-t3367634

kentaurest said:
It is dangerous, you can install supersu and twrp this way, but don't flash non official roms.
Xiaomi roms should relock the bootloader.
Also don't try to install xposed, it didn't work for me.
After xposed made my phone bootloop I installed unofficial global and ended up with "bricked phone" left only with fastboot or black screen (qualcomm diagnostics interface 9000E) and couldn't turn off the phone.
I made deep flashing cable - usb cable where you can short GND and D+
http://xiaomitips.com/media/2016/08/Deep-FLash-Cable-Architecture-680x318.jpg
Connected phone to the computer (don't short the cables yet), used "fastboot reboot" to restart phone.
Quickly shorted GND and D+ for a few seconds, then windows installed HS-USB QDloader 9008 driver
and I could use Mi Flash to restore the phone, this time to the china developer rom
(fastboot version ends with .tgz) with clean all and locked options.
I was quite happy with fake global, twrp and supersu, pity xposed ruined it.
Click to expand...
Click to collapse
Some others used this method instead. for 900E problem. https://www.youtube.com/watch?v=j27x5iJSS40, seems to work for th. Just read it from other forums

kentaurest said:
To my understanding bootloader checks if the system is signed with xiaomi key or not... so all xiaomi stuff will load, but xiaomi.eu unofficial global would not.
Click to expand...
Click to collapse
Hmmm. Funny the CM13 ROM runs then.
I suspect given kernal sources haven't been released they are just using the official build kernel, hence it passes any checks?

Related

Have I managed to hard brick my mi5? [FIXED]

Hello
I recently got my mi5 after ordering from aliexpress and not a big fan of MIUI and wanting the cyanogenmod experience I applied for opening up the bootloader.
Today I recieved message that the request was granted and i happily started the progress with opening up the bootloader via the miflashunlock tool.
When I used the tool it gave me a message in lines of "No need to unlock this device" So i thought " Ok, maybe the seller had to unlock the bootloader to flash the global ROM or whatever.
I proceeed to flash TWRP and it flashed fine, so my bootloader must obviously have been open all the time?
Then I did a full wipe, instralled CM13 and opengapps and rebooted.
Now the trouble started.
All I boot into is a black screen, nothing happens.
If I try to boot into recovery I get a black screen.
I CAN boot to fastboot
So i go back to fastboot to check bootloader status.
(bootloader) Device tampered: false
(bootloader) Device unlocked: false
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: false
(bootloader) Display panel:
How can this happen? How the hell can flashing CM lock my bootloader? I never checked the bootloader in fastboot before this, but since I was able to flash TWRP I must have had an open bootloader.
I have tried to flash different ROMS via the MiFlash tool and it gives me message that the devices is locked (duh!)
I have tried to open the bootloader via the unlock tool but it says that the currenct account is different from the account info on the device. Not very strange since I installed CM13...
I have tried to both flash and boot into TWRP via fastboot but I can't do this since device is locked...
Is my only option to try this
http://en.miui.com/thread-299790-1-1.html
Or can i just throw the phone in the bin after three days and buy a new phone from another company that values openess a little more?
---------------
Booting to EDL-mode with this suggestion:
http://forum.xda-developers.com/redmi-note-3/how-to/guide-reboot-to-edl-mode-fastboot-test-t3398718
After this you can flash whatever rom you like with the miflash tool
I still end up in the same situation when trying to flash CM13
Phone boots to black screen, I boot back to fastboot and phone is locked gain.
But this is something I can try to figure out on my own
Just an update so if anyone else who ends up in my situation searches forums they might find answer here.
Every time i flash CM13 the same thing happens. Bootloader gets locked and phone can only start in fastboot.
I tried installing RessurectionRemix instead and it worked straight away.
Why the hell this happens I have no clue, but this some of you geniouses maybe knows.
Right now I really don't care since RR works just fine for me
any solution ? I have the same problem

[All-in-One] Redmi Note 7 (lavender): Unlock Bootloader, Flash TWRP, Root, Flash ROM

Dear Redmi Note 7 user,
I'm not responsible if anything happens to your device. If you execute these AiO procedures properly then you shouldn't face any problems.
Before you proceed please back up all your important data and make sure that your phone battery is charged >80%!
A. Prerequisites:
1. Disable driver signature enforcement in Windows
If your computer doesn’t recognize Xiaomi drivers then please disable driver signature enforcement. How to do this please read here: http://en.miui.com/thread-237673-1-1.html
2. Install ADB and Fastboot tools with drivers on Windows
How to do this please read here: https://forum.xda-developers.com/showthread.php?t=2588979
Restart your computer.
3. Enable "OEM unlocking" and "USB debugging" in your device
a. Enable Developer Options in: Settings/About Phone/MIUI version. Click on MIUI version seven times
b. Now go to: Settings/Additional Settings/Developer Options and check "OEM unlocking" and "USB debugging"
4. Check if your bootloader is locked
a. After successful installation of "ADB and Fastboot" enter the fastboot mode by holding together "Volume Down + Power" and connect your device to your computer via USB cable (best would be the original cable).
b. Go to the folder where you have put the "ADB and Fastboot" and open a command window inside that folder. To do that hold together "Shift + Right Click" on any empty white space inside the folder and then select "Open PowerShell Window Here" or "Open Command Window Here"
c. Enter the terminal command in command line: >>fastboot devices<<
If you don't see your device it means that the drivers weren't installed properly or the device wasn't connected properly. If this happens please reinstall your drivers from Point A. 2. or try these drivers here:
http://xiaomiadvices.com/download-xiaomi-usb-drivers/
d. If you see your device then enter the terminal command in command line: >>fastboot oem device-info<<
If your bootloader is locked, you'll get the following status (or something similar):
…………………………………………………………………….
(bootloader) Device tampered: false
(bootloader) Device unlocked: false
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: false
(bootloader) Display panel:
OKAY [ 0.058s]
finished. total time: 0.063s
………………………………………………………………………
If your bootloader is unlocked, you'll get following status (or something similar):
…………………………………………………………………….
(bootloader) Device tampered: false
(bootloader) Device unlocked: true
(bootloader) Device critical unlocked: true
(bootloader) Charger screen enabled: false
(bootloader) Display panel:
OKAY [ 0.053s]
finished. total time: 0.055s
………………………………………………………………………
5. Request Permission from Xiaomi to Unlock the Bootloader
a. Create a Mi Account: https://global.account.xiaomi.com/pass/register
b. Sign to Xiaomi and apply for unlocking https://en.miui.com/unlock/
6. Connect your Mi Account to your Device
Go to: Settings/Additional Settings/Developer Options/Mi Unlock status and check "Add account and device"
B: Unlock the Bootloader
Unlocking the bootloader will erase all your data! So please back up your data before you unlock the bootloader!
1. You must enable "OEM unlocking" and "USB debugging" as per point A. 3.
2. You must connect your Mi Account with your device as per point A. 6.
3. Download Mi Unlock Tool here: https://en.miui.com/unlock/
4. Enter the fastboot mode by holding together "Volume Down + Power" and connect your device to your computer via USB cable (best would be the original cable)
5. Start the Mi Unlock Tool
6. Enter your eMail and your password of your Mi Account
7. Connect you device to your computer and start the unlock procedure
8. Follow the unlock tool instructions until the unlock procedure is finished
9. Reboot your device
If you get the message, that the unlocking can be done after 72h or 360h or 720h etc., then you have to wait for that time to pass.
C: Install the TWRP Recovery
a. Your bootloader must be unlocked
b. The official twrp can be downloaded here: https://twrp.me/xiaomi/xiaomiredminote7.html. However the official twrp for Redmi Note 7 is not yet available. For the time being please download the latest unofficial "twrp-x.x.x.img" from here https://forum.xda-developers.com/re...overy-unofficial-twrp-touch-recovery-t3921637 and put it into a dedicated folder in your computer and rename it to "twrp".
c. Go to the folder where you have put the twrp-file. Now open a command window inside that folder. To do that hold together "Shift + Right click" on any empty white space inside the folder and then select "Open PowerShell Window Here" or "Open Command Window Here"
d. Enter fastboot mode by holding together "Volume Down + Power" and connect your device to your computer
e. Enter the terminal command in command line: >>fastboot flash recovery twrp.img<<. Attention: Do not restart your device otherwise Xiaomi's original recovery might overwrite the custom recovery twrp!
f. Boot your device into recovery (3 possible methods)
+ by entering terminal command in command line: >>fastboot boot twrp.img<<, or
+ by holding together "Volume Up + Power" until you see the MI logo, release "Power" button but keep pressing "Volume Up" until you see the recovery, or
+ by holding together "Volume Up + Volume Down + Power" until you see recovery
If you only want to root your smartphone, then please continue to point D
If you want to install a custom rom, then please continue to point E
D. Root Your Smartphone
a. Download latest Magisk from here: https://forum.xda-developers.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445 and put it into internal memory of your smartphone or into the micro sd-card or into on-the-go memory stick
b. In the main twrp screen please click "Install", search for the Magisk-*zip*-file and flash it
c. Restart your smartphone
E. Install A Custom Rom
1. Download the desired rom and put it into device's internal memory or into the micro sd-card or into on-the-go memory stick:
a. Lineage
The official Lineage for Redmi Note 7 is not yet available, but when it becomes available you can download it from here:
https://download.lineageos.org/lavender
Lineage roms don't have Google Apps integrated in them.
b. Resurrection Remix
Please download the official Resurrection Remix for Redmi Note 7 (lavender) from here:
https://get.resurrectionremix.com/?dir=lavender
Resurrection Remix roms don't have Google Apps integrated in them.
c. ATOM
Please download the official ATOM for Redmi Note 7 (lavender) from here:
https://sourceforge.net/projects/atom-os-project/files/Ten/lavender/
ATOM roms usually don't have Google Apps integrated in them but the developer of AOSP Extended for lavender is offering both versions, with and without Google Apps.
d. Xiaomi.EU
Download the latest rom (weekly or stable) from here: https://xiaomi.eu/community/
Global Xiaomi.EU roms already have Google Apps integrated in them.
2. (in case you want to have root on your device) Download "addonsu-arm64-signed.zip" (for Lineage: https://download.lineageos.org/extras) or (for other Roms) the latest Magisk (from here: https://forum.xda-developers.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445) and put it into device's internal memory or into the micro sd-card or into on-the-go memory stick.
3. If the rom doesn’t contain Google Apps then download Google Apps ARM64, Mini, Pico, Nano etc. from here www.opengapps.org and put them into device's internal memory or computer or on-the-go memory stick or micro sd-card.
4. Enter recovery mode:
+ by holding together "Volume Up + Power" until you see the MI logo, release "Power" button but keep pressing "Volume Up" until you see the recovery, or
+ by holding together "Volume Up + Volume Down + Power" until you see recovery
5. Wipe: Dalvik / Art Cache; System; Data; Cache; (be careful, don't wipe internal storage!)
6. Go back to main twrp screen and install the Rom, install Google Apps (if the Rom doesn’t contain them), install "addonsu-arm64-signed.zip" (in case of Lineage) or the latest Magisk (in case of other Roms).
7. Reboot. That's it, you are done.
F. Returning To The Original Xiaomi Rom, MIUI
for those users who would like to return to original Xiaomi rom MIUI, below the flashing instructions and download links for the Fastboot and Recovery roms:
1. Fastboot:
a. Download latest fastboot rom (*.tgz*-file) from here: https://c.mi.com/oc/miuidownload/detail?guide=2
b. Flash the rom as per instructions explained in the a.m. link.
2. Recovery:
a. Download latest recovery rom (*.zip*-file) from here: http://c.mi.com/oc/miuidownload/detail?device=1700360 and put it into device's internal memory or into the micro sd-card or into on-the-go memory stick
b. Enter recovery mode:
+ by holding together "Volume Up + Power" until you see the MI logo, release "Power" button but keep pressing "Volume Up" until you see the recovery, or
+ by holding together "Volume Up + Volume Down + Power" until you see recovery
c. Wipe: Dalvik / Art Cache; System; Data; Cache; (be careful, don't wipe internal storage!)
d. Go back to main twrp screen and install the rom
e. Reboot. That's it, you are done.
If my guide helped you please click "thanks" and enjoy your phone.
Frequently Asked Questions (FAQ):
Question:
My computer doesn't recognize my device. What can be the problem?
Answer:
1. Check your cable if it is the original one, and if not then use the original one.
2. Check you drivers if they are installed properly and if not, then re-install them.
3. If the problem is not with point 1 and 2 then please try another computer.
Question:
Can I bypass the waiting time to unlock the bootloader?
Answer:
No you can't. You have to wait for that time to pass.
You know you can probably root without recovery using Magisk Manager and fastboot. You'll just need the original boot image which you should be able to extract from Xiaomi's firmware downloads.
any confirmation how many hours to unlock this device (after 72h or 360h or 720h) ?
Cryslin111 said:
any confirmation how many hours to unlock this device (after 72h or 360h or 720h) ?
Click to expand...
Click to collapse
Unfortunatelly the waiting time varies from person to person and also which smarphone model we are talking about. Until now the longest time I waited to unlock a bootloader was 72h. In Xiaomi forums people are reporting that they are waiting btw. 72h - 720h, sometimes even more than 1000h.
TWRP for Redmi note 7 from LR.TEAM 21/1/2019
https://drive.google.com/file/d/1nYu4gbLnGcoWnfXTOONwJk4ifc82l-Sc/view
senerex said:
Unfortunatelly the waiting time varies from person to person and also which smarphone model we are talking about. Until now the longest time I waited to unlock a bootloader was 72h. In Xiaomi forums people are reporting that they are waiting btw. 72h - 720h, sometimes even more than 1000h.
Click to expand...
Click to collapse
I register my mi account by a google voice number,would it make the unlock process faster?OR perhaps I even could unlock my redmi note 7?
wangweitung said:
I register my mi account by a google voice number,would it make the unlock process faster?OR perhaps I even could unlock my redmi note 7?
Click to expand...
Click to collapse
No, I don't think so. No.
senerex said:
No, No.
Click to expand...
Click to collapse
I will soon check how long I will wait to unlock bootloader.
---------- Post added at 11:32 AM ---------- Previous post was at 11:12 AM ----------
senerex said:
No, I don't think so. No.
Click to expand...
Click to collapse
It's sad to see that I have to wait 360 hours before I can unlock.
wangweitung said:
It's sad to see that I have to wait 360 hours before I can unlock.
Click to expand...
Click to collapse
same here
Enddo said:
same here
Click to expand...
Click to collapse
Sam here (actuall 359h)
I've heard that Xiaomi's phone bought from mainland China can't unlock bootloader and flash global rom. Really?
ColtonDRG said:
You know you can probably root without recovery using Magisk Manager and fastboot. You'll just need the original boot image which you should be able to extract from Xiaomi's firmware downloads.
Click to expand...
Click to collapse
How would you flash the patched boot.img with a locked bootloader?
It shows this and blocks you from proceeding:
vEEGAZ said:
How would you flash the patched boot.img with a locked bootloader?
It shows this and blocks you from proceeding:
Click to expand...
Click to collapse
unlock bootloader first!
lehungit8 said:
I've heard that Xiaomi's phone bought from mainland China can't unlock bootloader and flash global rom. Really?
Click to expand...
Click to collapse
That's completely untrue. I do tutorials for these devices on my website Android Explained and have bought the latest ones from the Mi Global seller account on AliExpress.
All have been completely sealed devices, shipped a day or two after their Chinese launch, and once you can unlock the bootloader (you do have to wait a certain period of time), then you can flash the global fastboot ROM with either Mi Flash, or just using the flash_all.bat file
---------- Post added at 12:12 PM ---------- Previous post was at 12:10 PM ----------
vEEGAZ said:
How would you flash the patched boot.img with a locked bootloader?
It shows this and blocks you from proceeding:
Click to expand...
Click to collapse
the person you quoted said 'without recovery'. . .not 'with a locked bootloader'
You'll still need to unlock the bootloader, but once you do then you can patch the boot.img file for the device with Magisk and then load it onto the phone (instead of installing TWRP and then flashing Magisk) to gain root access
vEEGAZ said:
How would you flash the patched boot.img with a locked bootloader?
It shows this and blocks you from proceeding:
Click to expand...
Click to collapse
Yep, as the person above said, I said you could do it without recovery, not without unlocking the bootloader.
ColtonDRG said:
Yep, as the person above said, I said you could do it without recovery, not without unlocking the bootloader.
Click to expand...
Click to collapse
Alright, I misunderstood you.
Still more 14 days to go until I can unlock the bootloader
That's completely untrue. I do tutorials for these devices on my website Android Explained and have bought the latest ones from the Mi Global seller account on AliExpress.
All have been completely sealed devices, shipped a day or two after their Chinese launch, and once you can unlock the bootloader (you do have to wait a certain period of time), then you can flash the global fastboot ROM with either Mi Flash, or just using the flash_all.bat file
That sounds interesting - so - please state if I'm correct:
Once Redmi Note 7 Global version is out, I could install the official Global ROM and this one would work and have OTA upgrades in future on my Chinese Redmi Note 7?
Thank you in advance.
tomsag said:
Once Redmi Note 7 Global version is out, I could install the official Global ROM and this one would work and have OTA upgrades in future on my Chinese Redmi Note 7?
Click to expand...
Click to collapse
Global rom for Redmi Note 7 is not available yet, and thus I can't test it myself yet, but judging by all other Xiaomi Smartphones I had until now (Mi 5, Mi 6, Mix 2s, Redmi Note 4, Redmi Note 5 etc.) I was always able to flash the global rom on my Chinese version of these smartphones. Of course the bootloader will have to be unlocked. I'm quite sure that flashing the global rom on Chinese version of Redmi Note 7 will be possible too!
EDIT 1:
Thanhbat said:
Does OTA work on that ROM? And How about Android development on Chinese versions compare to Global versions? Can you flash global's ROM on Chinese version?
Thanks
Click to expand...
Click to collapse
Yes, OTA will work! Android development on Chinese versions compared to Global version is a prerogative of developers. They decide which version of MIUI (Chinese or Global) they take as basis for their further development.
senerex said:
Global rom for Redmi Note 7 is not available yet, and thus I can't test it myself yet, but judging by all other Xiaomi Smartphones I had until now (Mi 5, Mi 6, Mix 2s, Redmi Note 4, Redmi Note 5 etc.) I was always able to flash the global rom on my Chinese version of these smartphones. Of course the bootloader will have to be unlocked.
I'm quite sure that flashing the global rom on Chinese version of Redmi Note 7 will be possible! Pozdrav...
Click to expand...
Click to collapse
Does OTA work on that ROM?
And How about Android development on Chinese versions compare to Global versions? Can you flash global's ROM on Chinese version?
Thanks

Screen stays "System Has Been Destroyed"

My screen keep on showing "System Has Been Destroyed". The best I can do is to be at fastboot. When in fastboot mode I try to unlock the phone using CMD yet unsuccessfull. I can't get into developer option because it's stuck at "System Has Been Destroyed" screen.
Here's the message after input "fastboot oem device-info"
(bootloader) Verity mode: true
(bootloader) Device unlocked: false
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: false
OKAY [ 0.011s]
Finished. Total time: 0.015s
Have you flashed a rom with miflashtool? Probably you've not unchecked "clean all and lock".
I think you're phone is hard bricked
Sounds like hard brick indeed. Check this out: https://forum.xda-developers.com/showpost.php?p=80029403&postcount=22
overcustom said:
Have you flashed a rom with miflashtool? Probably you've not unchecked "clean all and lock".
I think you're phone is hard bricked
Click to expand...
Click to collapse
I have tried to flashed a rom with miflash tool. I've checked clean all only. And it showed "error FAILED (remote : Erase is not allowed in Lock State)".
Brays88 said:
I have tried to flashed a rom with miflash tool. I've checked clean all only. And it showed "error FAILED (remote : Erase is not allowed in Lock State)".
Click to expand...
Click to collapse
It means bootloader was already Locked.
On which rom were you before?
overcustom said:
It means bootloader was already Locked.
On which rom were you before?
Click to expand...
Click to collapse
I've forgot which rom i've been. Any idea how to unlock the bootloader?
Brays88 said:
I've forgot which rom i've been. Any idea how to unlock the bootloader?
Click to expand...
Click to collapse
Unfortunately you have to flash a rom using EDL mode with an authorized account, hard brick is a very awful thing.
Thats why you need to read before doing anything with your phone. Almost every thread has flashing guides and all say that you have to unlock bootloader first to flash with miflash or to flash with twrp to avoid hardbricks. Edl is the way to go, good luck mate
ef1x said:
Thats why you need to read before doing anything with your phone. Almost every thread has flashing guides and all say that you have to unlock bootloader first to flash with miflash or to flash with twrp to avoid hardbricks. Edl is the way to go, good luck mate
Click to expand...
Click to collapse
i m having same problem this morning after OTA update!!! my systeme was unlocked and everything goes well, they asked my to update i said yes as ever, but now i have screen Systeme as been Destroyed, i did everythings that i know but nothings worked, i m always blocked because any method i used to flash said can't flash, bootloader locked... WHO the [email protected]#K LOCKED MY BOOTLOADER,,,,, please help i m crying now, it's a 800 $phone useless now, my wife gonna killed me!!!! LOL

[GUIDE] hurdles and obstacles on the way to EDL mode with Mi locked phone

I bought a second hand lavender and want to share my adventure so far trying to unlock from mi cloud. I will update this post when something changes.
- Mi cloud is locked with another account
- bootloader is locked
- oem unlock status is unknown
- Mi recovery mode is possible (from there you only can wipe data, connect to mi cloud or reboot)
- fastboot is possible (from there you can reboot and read some phone vars)
- booting to system is possible but the lock screen only lets you connect to wifi and unlock via account
- miui 11 seems to be installed (you see it sometimes behind the lock screen)
- adb is disabled
- The former owner doesn't know the credentials (he says he got it from another person and lost the password.. who knows..)
- Xiaomi doesn't want to help (if the phone was stolen I would give it back for free, else they should please unlock, but they don't want to..)
- Local police can't help (IMEI is unknown, only parts of the phone number are known from the lock screen but they can't search for it)
- codes like *#06# don't work with emergency call in lock screen
- 'Check "Find device" status' on mi.com after entering the lock number (tap several times in the lock icon) says that the status is enabled
- I have no chance to find out who enabled it (maybe when I have the IMEI, local police can help). IMEI might have been changed already..
- I don't want to open the phone case yet
If someone knows a shortcut to my tries, please let me know!
the lock screen
With miui 11 it seems not possible to circumvent the lockscreen with any method I found in the net (pressing volume buttons, add network, switch between wifi and lock screen).
You can only connect to existing networks. 'Add network' switches back to lock screen immediately.
fastboot
You can read variables via 'fastboot getvars all'. You may need the info that the current rom has ARB4. I will try to flash the lowest possible version with ARB4. From mi.com I found global rom V10.2.7.0.PFGMIXM to have ARB4.
(bootloader) crc:1
(bootloader) anti:4
(bootloader) DP:0x0
(bootloader) token: ......
(bootloader) hw-revision:10000
(bootloader) unlocked:no
(bootloader) off-mode-charge:0
(bootloader) charger-screen-enabled:0
(bootloader) battery-soc-ok:yes
(bootloader) battery-voltage:4338
(bootloader) version-baseband:
(bootloader) version-bootloader:
(bootloader) erase-block-size: 0x200
(bootloader) logical-block-size: 0x200
(bootloader) variant:SDM EMMC
(bootloader) partition-type:userdata:ext4
...
(bootloader) partition-type:vendor:raw
...
(bootloader) secure:yes
(bootloader) serialno:...
(bootloader) product:lavender
(bootloader) kernel:uefi
test point
Finally the cable worked, so probably no need to open the phone
deep flash cable
I soldered a deep flash cable with a button. Please don't try without button, the effort is worth it. Or buy a cable for some bucks.
Test it for example in fastboot: press the button and fastboot doesn't work
switching off phone
Is not that easy or not possible via buttons and fastboot has no shutdown mode.
I found that waiting some minutes in fastboot mode with disconnected cable switches the phone off
(actually from there you can go nowhere, as the battery must be empty or disconnected)
(not) switching to EDL mode with battery (at least not empty battery)
In Windows I installed Qualcomm drivers (64bit exe package), it reboots and Windows is in 'test mode' then because of test certificates.
So far, when fastboot shuts down the phone, I am in 'Mass Storage' mode.
From there I tried to go into EDL mode via cable in 2 variants: pressing button, then plug in phone first and plug in PC first.
Windows device manager and linux see the same 05c6:f000 device, which seems to be some modem (for LTE-Sticks,..) according to net.
QFIL and QPST don't see anything.
Trying things found in the net:
- USB 2.0 only (already tested with USB2 hub and Raspberry USB2 port) / edit: eventually USB3 worked fine
- Wait x seconds (all possible x tested, it's always the charging mode) / edit: yes, you have to wait some seconds, but that doesn't help with 'charging mode'
- 'when charging mode appears, try again' or so.. well.. yes / edit: retrying doesn't seem to help getting out of 'charging mode'
- 'EDL timeout', 'hello packet': I think, that doesn't apply in my current state, there should be some xxxx:9008 device first
- 'only works when battery disconnected' or when battery is empty (because of EDL timeout or so) / edit: for me it really only works this way
- usb_modeswitch isn't able to switch from f000 to some other mode.
Finally, after draining the battery, it worked!
draining the battery
- flood pinging the phone (no ports open)
- USB-OTG stick on the phone
- Keep display active (tap on your connected wifi, the 'Share Wi-Fi network' window doesn't deactivate screen, also it seems to be the brightest level)
switching to EDL mode with empty battery
The phone shut down and I retried with the cable.
When the battery is too empty, the led is blinking. Wait some seconds or a minute until the screen turns on and shows loading icon, then try again. The led should turn off and the phone seems dead.
The phone is in 9008 now and actually seems to stay there even when pressing power button or reconnecting USB.
ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)
If the battery is too empty, charge it until it tries to start system. Then disconnect charger and try to switch mode.
I found that _only_ via "draining the battery" it is possible to get to the 9008 mode. Pressing power button, even with already empty battery does not work. While draining, android tries to shut down the phone (which could lead to non-9008 mode). As Xiaomi has locked the shutdown (it wrote "Can't power off, the device is locked" sometimes..) it can happily drain.
When you leave 9008 mode, you have to charge until system starts and then drain again.
Further, there seems to be some other mode, which "edl.py" recognizes as "memory dump mode". The USB ID is correct, but EDL commands are not possible.
Interestingly, I have no problems with the second hand device but my other lavender device bought from a..zon returns "Only nop and sig tag can be recevied before authentication" when trying, for example, "edl.py --loader=prog_emmc_firehose_Sdm660_ddr.mbn printgpt". As both should have the same PBL, I don't yet understand it..
There seems to be some timeout (seconds..) when switching to EDL mode, after that no commands are accepted.
I will stop here, as there are already tutorials how to unlock the mi lock in EDL mode and currently I don't want to just reflash via QFIL or QPST. I'm trying some reverse engineering meanwhile.
I can help you pm me ?
Sent from my Xiaomi Redmi Note 7 using XDA Labs
meeep said:
I bought a second hand lavender and want to share my adventure so far trying to unlock from mi cloud. I will update this post when something changes.
- Mi cloud is locked with another account
- bootloader is locked
- oem unlock status is unknown
- Mi recovery mode is possible (from there you only can wipe data, connect to mi cloud or reboot)
- fastboot is possible (from there you can reboot and read some phone vars)
- booting to system is possible but the lock screen only lets you connect to wifi and unlock via account
- miui 11 seems to be installed (you see it sometimes behind the lock screen)
- adb is disabled
- The former owner doesn't know the credentials (he says he got it from another person and lost the password.. who knows..)
- Xiaomi doesn't want to help (if the phone was stolen I would give it back for free, else they should please unlock, but they don't want to..)
- Local police can't help (IMEI is unknown, only parts of the phone number are known from the lock screen but they can't search for it)
- codes like *#06# don't work with emergency call in lock screen
- 'Check "Find device" status' on mi.com after entering the lock number (tap several times in the lock icon) says that the status is enabled
- I have no chance to find out who enabled it (maybe when I have the IMEI, local police can help). IMEI might have been changed already..
- I don't want to open the phone case yet
If someone knows a shortcut to my tries, please let me know!
the lock screen
With miui 11 it seems not possible to circumvent the lockscreen with any method I found in the net (pressing volume buttons, add network, switch between wifi and lock screen).
You can only connect to existing networks. 'Add network' switches back to lock screen immediately.
fastboot
You can read variables via 'fastboot getvars all'. You may need the info that the current rom has ARB4. I will try to flash the lowest possible version with ARB4. From mi.com I found global rom V10.2.7.0.PFGMIXM to have ARB4.
(bootloader) crc:1
(bootloader) anti:4
(bootloader) DP:0x0
(bootloader) token: ......
(bootloader) hw-revision:10000
(bootloader) unlocked:no
(bootloader) off-mode-charge:0
(bootloader) charger-screen-enabled:0
(bootloader) battery-soc-ok:yes
(bootloader) battery-voltage:4338
(bootloader) version-baseband:
(bootloader) version-bootloader:
(bootloader) erase-block-size: 0x200
(bootloader) logical-block-size: 0x200
(bootloader) variant:SDM EMMC
(bootloader) partition-type:userdata:ext4
...
(bootloader) partition-type:vendor:raw
...
(bootloader) secure:yes
(bootloader) serialno:...
(bootloader) product:lavender
(bootloader) kernel:uefi
test point
Finally the cable worked, so probably no need to open the phone
deep flash cable
I soldered a deep flash cable with a button. Please don't try without button, the effort is worth it. Or buy a cable for some bucks.
Test it for example in fastboot: press the button and fastboot doesn't work
switching off phone
Is not that easy or not possible via buttons and fastboot has no shutdown mode.
I found that waiting some minutes in fastboot mode with disconnected cable switches the phone off
(actually from there you can go nowhere, as the battery must be empty or disconnected)
(not) switching to EDL mode with battery (at least not empty battery)
In Windows I installed Qualcomm drivers (64bit exe package), it reboots and Windows is in 'test mode' then because of test certificates.
So far, when fastboot shuts down the phone, I am in 'Mass Storage' mode.
From there I tried to go into EDL mode via cable in 2 variants: pressing button, then plug in phone first and plug in PC first.
Windows device manager and linux see the same 05c6:f000 device, which seems to be some modem (for LTE-Sticks,..) according to net.
QFIL and QPST don't see anything.
Trying things found in the net:
- USB 2.0 only (already tested with USB2 hub and Raspberry USB2 port) / edit: eventually USB3 worked fine
- Wait x seconds (all possible x tested, it's always the charging mode) / edit: yes, you have to wait some seconds, but that doesn't help with 'charging mode'
- 'when charging mode appears, try again' or so.. well.. yes / edit: retrying doesn't seem to help getting out of 'charging mode'
- 'EDL timeout', 'hello packet': I think, that doesn't apply in my current state, there should be some xxxx:9008 device first
- 'only works when battery disconnected' or when battery is empty (because of EDL timeout or so) / edit: for me it really only works this way
- usb_modeswitch isn't able to switch from f000 to some other mode.
Finally, after draining the battery, it worked!
draining the battery
- flood pinging the phone (no ports open)
- USB-OTG stick on the phone
- Keep display active (tap on your connected wifi, the 'Share Wi-Fi network' window doesn't deactivate screen, also it seems to be the brightest level)
switching to EDL mode with empty battery
The phone shut down and I retried with the cable.
When the battery is too empty, the led is blinking. Wait some seconds or a minute until the screen turns on and shows loading icon, then try again. The led should turn off and the phone seems dead.
The phone is in 9008 now and actually seems to stay there even when pressing power button or reconnecting USB.
ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)
If the battery is too empty, charge it until it tries to start system. Then disconnect charger and try to switch mode.
I found that _only_ via "draining the battery" it is possible to get to the 9008 mode. Pressing power button, even with already empty battery does not work. While draining, android tries to shut down the phone (which could lead to non-9008 mode). As Xiaomi has locked the shutdown (it wrote "Can't power off, the device is locked" sometimes..) it can happily drain.
When you leave 9008 mode, you have to charge until system starts and then drain again.
Further, there seems to be some other mode, which "edl.py" recognizes as "memory dump mode". The USB ID is correct, but EDL commands are not possible.
Interestingly, I have no problems with the second hand device but my other lavender device bought from a..zon returns "Only nop and sig tag can be recevied before authentication" when trying, for example, "edl.py --loader=prog_emmc_firehose_Sdm660_ddr.mbn printgpt". As both should have the same PBL, I don't yet understand it..
There seems to be some timeout (seconds..) when switching to EDL mode, after that no commands are accepted.
I will stop here, as there are already tutorials how to unlock the mi lock in EDL mode and currently I don't want to just reflash via QFIL or QPST. I'm trying some reverse engineering meanwhile.
Click to expand...
Click to collapse
Hello,
My lavender was bricked two days ago and I managed to unbrick it.
I think my method will help you get rid of mi cloud.
pm me
Mi.bilel said:
Hello,
My lavender was bricked two days ago and I managed to unbrick it.
I think my method will help you get rid of mi cloud.
pm me
Click to expand...
Click to collapse
You can only resolve the Problem with mi acc with a unlocked bootloader, if you bypass & go online the device get closed
Snuk265 said:
You can only resolve the Problem with mi acc with a unlocked bootloader, if you bypass & go online the device get closed
Click to expand...
Click to collapse
Do you mean it gets closed by mi cloud or by google?
meeep said:
Do you mean it gets closed by mi cloud or by google?
Click to expand...
Click to collapse
If you use the phone to go online, it will be blocked again by your existing Mi account/ mi cloud so that you cannot use it. So you have to open the bootloader to install a custom rom or after you have completed the bypass you must first delete a few system apps via twrp so that the phone is not locked
Snuk265 said:
If you use the phone to go online, it will be blocked again by your existing Mi account/ mi cloud so that you cannot use it. So you have to open the bootloader to install a custom rom or after you have completed the bypass you must first delete a few system apps via twrp so that the phone is not locked
Click to expand...
Click to collapse
ok, thank you for the info!
I'm trying to get around the lock without 'magic tools', don't know how much is possible.
Meanwhile I found a great and simple way to remove at least the mi cloud lock:
romprovider com reset-frp-bypass-mi-account-redmi-note-7
To not change the UUID of the persist partition I just mounted it and removed everything but /sensors/sensors_settings and /lost+found.
But now I don't know how to get further. As mentioned by @Snuk265 I cannot just connect to mi cloud again. Or do I?
Btw, now that the phone is unlocked, I got informations online via IMEI:
Sales Region: Cambodia
MI Activation Lock: ON
Device Status: CLEAN
Find Device Status ON
Device Status This device is PROTECTED!
Blacklist Status: CLEAN
meeep said:
I cannot just connect to mi cloud again. Or do I?
Click to expand...
Click to collapse
Ok, I tried it, now the device is locked again
meeep said:
Ok, I tried it, now the device is locked again
Click to expand...
Click to collapse
I know hehe, I was already there so I told you so
Snuk265 said:
I know hehe, I was already there so I told you so
Click to expand...
Click to collapse
I had to test this by myself!
Now, if you can tell me why even with test point and patched programmer I always get "only nop and sig", _that_ would be nice! :laugh:
With deep flash it stop working ("only nop and sig")
So I opened the case.. Tried timings, battery on/off, lcd on/off, fingerprint on/off..
Maybe it's because I'm trying with a downgraded mi rom? But sahara is running in qualcomm rom, so I don't know why this should matter.
From internet:
- I had the same problem with mine, only it came to me after changing the recovery. I confused the version of the recovery because I did not read thoroughly which one to put.
How I fixed it - I downloaded the last stable fast rum rum, unzipped, booted the boot.img file, flashed it through fastboot, without restarting immediately flashed twrp version TWRP 3.2.2-0711, restarted by holding the buttons in the recovery. There was a full wipe of everything, a restart again in Rkavery, I uploaded the last developer rum and flashed with it.
Click to expand...
Click to collapse
After leaving the phone alone over night it finally worked! yay!
Phone is unlocked! Many thanks to @Snuk265 !
Not thanks to me xd?
I think I helped too
owl7 said:
I have a Redmi note 7 the bootloader is Unlocked and I managed to install a TWRP
The Mi account is Locked
Is there a Way to Bypass or Remove mi login via TWRP ?
I bought the phone on ebay .
Thanks
Click to expand...
Click to collapse
No you can use it only with a custom rom
hello,
My redmi 6a only lights the white led when connecting the usb cable and turns the screen completely black. I can't enter recovery mode nor fastboot.
I have the deep flash usb cable, but I can't make it work either. The adb driver was installed as well as the qualcomm.
Has anyone been through this? Do you have any tips?
Hello,
Maybe you can help me with my problem
I have Mi MAx 3 but the Thing is, the bootloader is locked and the device is locked also.
Sad
For your device i dont have the images sorry
I have basically the same problem with a Mi5. Everything worked fine of course until I tried to wiped everything to reinstall a clean system, couldn't unlock the bootloader, tried various things until I got the device "clean enough" that it would just lock when connecting to a network.
I have access to EDL and flashed it clean from there, but as far as I understand though, if the bootloader is locked there is just exactly nothing that can be done, right? There's a workaround so it doesn't lock on connecting to a network and I can use the system as is (a rather old MIUI10) but it will never be possible to unlock the bootloader (because it's still linked to another Mi account somehow) and install a custom ROM, get root access, etc.
Am I right, or is there somehow a way to still unlock the bootloader?
meeep said:
Phone is unlocked! Many thanks to @Snuk265 !
Click to expand...
Click to collapse
Finally, How did you unlocked the device bro?. Which flash tool did you use bro?. Please tell me the process short and simple. I have same problem but im confused because you have told lot of stuff that im messin around. Help me please. Explain step by step short and simple bro

Xiaomi Mi8 bricked by locking bootloader after running Lineage OS

After having problems restoring my Lineage OS (TWRP Restore), I found a guide that recommended to do a "fastboot flashing lock" and "fastboot flashing unlock" to delete the data partition. In a fit of mental derangement I did exactly did that. Well, at least the the first part. Stupid move - really. Now I'm stuck with a locked bootloader. I can't unlock it via fastboot commands:
c:\fastboot flashing unlock
FAILED (remote: 'Token Verify Failed, Reboot the device
')
fastboot: error: Command failed
Same results for "fastboot oem unlock".
Fyi:
c:\fastboot oem device-info
(bootloader) Verity mode: true
(bootloader) Device unlocked: false
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: false
The Mi Unlock tool gives me a charming "Please add your account in MIUI's Settings > Developer options > Mi Unlock status." Which isn't possible because I had Lineage OS running and I can only get into Fastboot now. If I try to boot regularly the phone says "The system has been destroyed".
Well, I almost accepted that I have to dismantle the phone to get into EDL mode, but then I discovered hints that I might need some kind of authorization to update the phone via EDL mode. And a lot of shady offers to do exactly that ...
Did I brick my phone for good, or is there any hope to fix it?
Thanks a lot!
Hi, did you solved it?
If not, try to ut the phone in fastboot mode, then download exactly stock firmware (global, india, china,...etc) version for this phone, then flash it via Miflash.

Categories

Resources