Was not comfortable exposing TWRP, Rooted phone without encryption. Averge Joe who knows TWRP can easily get into my phone. I also needed Verizon VoLTE which requires TWRP/Root. hence the research and results of the guide below.
Should applicable equally to S7/S8/N8
All instructions were taken from following threads.
N935F TWRP
S7 Encryption
Verizon CSC VoLTE
S7 CSC Selection
Start with a stock N935F/DS XME CSC and Verizon Sim Card already activated and provisioned for VoLTE
Although N935F/DS does not support CDMA, it does have all verizon LTE, can be used fully with VoLTE enabled
Basic Setup -- enable optional encryption
0. Copy files extracted from TWRP_Root.zip (attached) into SD card. insert SD card with Verizon Sim Card. Download TWRP image from N935F TWRP
1. Ensure RMM is not enabled
-- boot to download mode (vol down+home+power), if "RMM State: Prenormal", then you need keep phone on, connect to internet, wait for 168 hrs
2. If already on Stock ROM then skip to 3 below, otherise
-- Flash via ODIN Stock Rom, in ODIN, turn off auto-reboot, use CSC not HOME_CSC.
-- when finished, push vol. down+home+power until screen turns black
-- right when screen turns black, immediately re-push and hold vol. down+home+power again to get into download mode again
-- this is to avoid reboot the phone and potentially trigger RMM again
3. Flash via ODIN TWRP 3.2.1-0 (turn off auto-reboot) via AP
4. Disconnect USB, hold home+vol. down+power to exist download mode, when screen becomes blank, immediately hold vol.up+home+power to boot to TWRP
5. Install RMM-State_Bypass_Mesa.zip -- to fix RMM first
6. Format data partition
7. Install tweakpro-tima.zip -- to allow encryption
8. Install no-verity-opt-encyrpt-5.1.zip -- to diable verty and disabling enforce encryption. allow to choose encryption or not during initial setup
9. Format data partition !!
11. Reboot and run through setup wizard
-- when asked to "activating device protection features" it is asking if you want to encrypt the phone i.e. the data partition
-- set a PIN/password to enable. TWRP won't be able to read or backup data partition anymore (not possible on samsung devices)
you might still be able to use "adb pull /dev/block/dm-0 /tmp/dm0backup.img" to back up to PC, and use "push" to restore
12. Reboot once, and then reboot to TWRP. verify encryption was enabled a). ask for boot PIN/password b). can not mount data partition in TWRP
13. Install Magisk-v16.0.zip through TWRP.
-- Magisk must be installed AFTER encryption has been enabled via initial setup process.
-- with Magisk installed, data won't be encrypted even if you activate the device protection features during setup
[OEMXME-RMM-ENCRYPT-ROOT-SYS02]
14. reboot to system. Open Magisk Manager, and verify SafteyNet pass
15. download estrong file manager, turn on root access
16. open /system/built.prop to make sure/set
ro.security.vaultkeeper.feature=0
ro.config.tima=0
17. download "CSC feature expert for samsung"
DisableAntiMalware = TRUE
=== Profit, now you have a RMM removed, verity disabled, rooted, encrypted NoteFE===
=== NOTE: if ecryption was enabled, and you need to reset phone or format data partition:
-- once Magisk is installed, data partition will not be encrypted anymore during intial setup
-- if you want to encrypt, need to uninstall Magisk (zip included), setup phone, and install Magisk again
=== Optional - 1 ====
Enable Verizon VoLTE only, without installing US CSC
1. rename /system/csc/customer.xml to customer.xml.bak
2. copy vzw_customer.xml (attached, was extracted from S8 VZW CSC) to /system/csc/customer.xml and set chmod 755 (rw-r-r-)
3. download "CSC Features Expert for Samsung" (these are not neccessary, just good to have)
Message_DisableSmsToMmsConversionByTextInput = TRUE (disable auto convert long sms to mms)
Setting_CustNetworkSelMenu4 = LTEONLY (enable LTE only network mode)
SystemUI_SupportDataUsageViewOnQuickPanel = TRUE (data usage shown in quick panel)
Wifi_SupportAdvancedMenu = TRUE (advanced wifi options)
Wifi_SupportMobileApOnTrigger = TRUE
====== Optional -2 ====
Install US CSC and enable Verizon VoLTE. (it is safe to apply this after applying Option - 1 above "Enable Verizon VoLTE only without installing US CSC"
-- not needed to enable VoLTE, but might be needed to enable WifiCalling. I have not tested
-- this does mess with system files, and deletes all original CSC files under /system/csc and replace with /system/omc structure
-- might lose some dual sim functions, I only found one so far: native phone/contact app does not support dual sim
a). download CSC_selection v1.3.0 from S7 CSC Selection
b). replace updater-script and csc_script.sh with ones attached
c). copy to sd card and flash via TWRP
-- select XAA and XAA, DO NOT select VZW (in VZW CSC many dual sim functions gets messed up)
-- during flash, stay away from CSC tweaks that are related to phones. "Enable LTE only" is safe
d). after finish, DO NOT Reboot yet
e). rename /system/omc/XAA/customer.xml to customer.xml.bak and copy /system/omc/VZW/customer.xml to /system/omc/XAA/customer.xml
f). reboot
==== To upgrade ROM in future if you selected encryption ===
- Flash the latest full stock firmware package but this time use HOME_CSC
- Let it reboot into stock recovery and do the upgrade process.
- It should end up on the secure Startup page asking for your password. No password will work at this point because your data was encrypted in TIMA state "0".
- Reboot to download mode and flash TWRP.
- Reboot to TWRP
- Flash the TIMA prop and verity zips.
- Reboot into to Android (password should work now)
- Let it finish the upgrade.
Tmobile works too
Thanks a lot for the guide. I was able to get TWRP, encryption, Magisk, Xposed (non-systemless), and VoLTE on T-mobile USA working. I used the customer.xml located in "XAA/TMB" folder (located in zip file) from CSC selection 2.50 thread you have linked. I am on Android 7.0. Just wanted to post for those who were interested.
Only thing I changed was to keep the customer.xml file rw- r-- r-- 644 instead of the suggested 755. Don't think it makes a difference.
I did try multiple times to get Systemless Xposed working, but it would always freeze up on the screen with the unlocking icon when booting up. If anyone gets stuck there, just hold Vol Down + Home + Power until phone restarts. Power the device off when you can (will be able to access the power menu on the secure boot password screen). Go back to recovery -> format data -> go through setup process again. After setup is complete, the phone will not have an encrypted /data partition. You have to go back into recovery -> run Magisk uninstaller -> format data -> install tweakpro-tima.zip / no-verity-opt-encyrpt-5.1.zip -> go through setup again. You might be able to run Magisk uninstaller on the first boot to recovery, but I am just posting the process I went through.
If anyone is able to get Systemless Xposed working, please do share. I hate running phones without XPrivacyLua.
So I've hit a snag with this whole process, i waited for 7 days got TWRP installed, rooted and everything,(encryption was not important to me), but attempted option 1 for getting Verizon Volte working with no luck. (things never seem to work the easy way), so i did option 2 with installing the US CSC per the instructions and that went all fine and dandy.. but when I boot up the phone into the system and it ask me to choose the network for my sim it shows 2 options VZW and VZW. When selecting first option it says device needs to reboot to apply features so I click OK and it attempts to reboot but then goes straight into recovery blocking whatever process it was doing. If i select the second VZW it just does nothing. Was curious if any insight or advice can be given on this. I'm in no way at a pro at all this just want to enjoy a Samsung phone with a psychical home button and a none weird screen ratio haha. Thanks and much appreciated ahead of time!
Volte for india
Is it work for india to get the volte option...(where I can get the indian CSC)
Related
Hi,
I couldn't find any information about so I thought i'd share. I wanted Nougat with encryption and root! Finally managed it, probably didn't need all the steps but this is what worked for me after much trial and error.
You can transfer the zips to a SD card beforehand or just use adb sideload within TWRP.
You will have to go to developer options and enable OEM Modifications.
1. Get all the files needed
Magisk-v16.0.zip from XDA Dev Magisk
no-verity-keep-encrypt-6.0.zip This is my own file with the encryption script commented out. I had to open it and edit from the archive and NOT create a new zip as I got verify errors from TWRP
P580UEU1BQK1_P580XAR1BQK1_XAR.zip which I obtained from sam mobile
ODIN
2. Flash Nougat
AP = AP_P580UEU1BQK1_CL12479655_QB15699972_REV00_user_low_ship_meta.tar.md5
BL = BL_P580UEU1BQK1_CL12479655_QB15699972_REV00_user_low_ship.tar.md5
CSC = CSC_XAR_P580XAR1BQK1_CL12479655_QB15699972_REV00_user_low_ship.tar.md5 OR HOME_CSC_XAR_P580XAR1BQK1_CL12479655_QB15699972_REV00_user_low_ship.tar.md5
Let it boot the device.
EDIT
I flashed my phone after but decided not to flash the DM Verity; it is a Samsung A3 2017 so should be the same here. I basically flashed TWRP, then formatted Data, flashed Magisk and followed step 5 below.
3. Flash TWRP Recovery & DM Verity
Boot into download mode by holding down power + volume down + home
Press volume up
In ODIN put TWRP into the AP box and flash - remember to disable auto reboot
Press the download mode key combination and quickly press volume up when screen blacks while holding down the buttons
DO NOT SWIPE TO MAKE MODIFICATIONS
Format DATA
Flash the no verity zip file
Reboot
4. Magisk 16
Reboot to recovery DO NOT SWIPE TO MAKE MODIFICATIONS
Format DATA this might not be needed but I can't confirm
Flash the magisk zip
Format DATA doubt it is needed but this is what I did
Reboot
5. Enable Encrypt and Update Magisk
Encryption will be off, under security it will say Encrypt Device
Open Magisk App
Tick preserve encryption and untick preserve dm-verity
Update Magisk
Install and select direct Install
Reboot and Encryption should be enabled
Hope this helps! Good luck
First up - Let me say that the complete credit to the method goes to two members here as in the thread https://forum.xda-developers.com/galaxy-tab/help/galaxy-tab-active-2-forum-question-t3712591
BUT BUT BUT what the two experts have missed out is on explaining a clear step by step guide for a complete noob like me . So this is an attempt to explain every step. My tab had root in less than 10 mins .
why i needed the root ?
16gb is not enough for the tab so i wanted to apps and data to be moved to the sd card .
Here are the steps
On the Pc
1. Download the stock firmware (must be the same as in your tab) from samfirmware or any other source.
2. Extract the firmware and the extract archive called AP... . Once extracted you will have a boot.img file in it.
On the TAB
3. Activate developer options by clicking the software version 5 times.
4. In the developer options check OEM unlock and USB debugging
5. Download Magisk Manager v16 from xda and install on the TAB.
Connect the tab to the pc
6. Copy the boot.img file from pc to the tab.
7. Run Magisk Manager and in settings choose the output format as odin compatible tar,
8. Click the INSTALL button in the MAGISK manager and choose 'patch boot image file'
9. After a few minutes a dark screen will appear will read all ok boot image patched...now copy that patched_boot.img.tar file from the tab to the PC and rename it as boot.img.tar
On the Tab
10. Recheck under developer options if check OEM UNLOCK and USB DEBUGG
11. DELETE the GOOGLE account (crucial)
12. Switch of the tab
13. Go to download mode by holding vol down, menu and power together , once asked press vol up to go to the download mode.
14. Connect tab to PC.
On the PC
15. Download ODIN and once downloaded right click and run as administrator.
16. Choose AP and select the previously patched boot.img.tar file.
17. Click START
On the TAB
18. It will run the download and restart , restart will say "VERIFICATION FAILED and aask to RESET and erase .
19. CLICK RESET
20. wait for reset saying ERASING and let the tab restart.
NOW the next step is the most crucial one and it is where i got stuck as none of the members who have rooted their device mention it. I did all of the above procedures repeatedly and failed to get root until i realized there was one FINAL CRUCIAL STEP before enjoying the root.
LAST STEP
ON THE TAB
After the TAB restarts , fill in the initial details (google , samsung account, wifi etc) and before you do anything else INSTALL THE MAGISK MANAGER V16 app you downloaded from XDA .......thats it ....you have root access now . ENJOY!
How did you install Magisk?
When I open Magisk Manager v5.6.4, I get a "Magisk is not installed" and I only have the settings option.
No "install" options.
I have the same tablet. don't know of any twrp that can work with it, therefore leaving me with Magisk Manager only.
Id' be glad to get some help
Thanks,
SOLVED: You must have a functioning network interface in order for the "install" button to appear and you need internet connection to "install the v16 zip".
Magisk is OpenSource though, right? so probably it can be changed to allow offline installation as well.
Rooteed
Well Crap...I just got my Nice, New, Sparkleing Tab Active2 and cant root it yet. I have the New US version SM-T397U Unlocked model. cant find a Stock firmware on Sammobile as of yet...any ideas?
EDIT: Neeeevermind... I did a lil hacking and cracking (for about 26min, lol) to find the files I needed for the SM-T397U. If anyone is looking for em let me know and I'll shoot em' your way. Guessing I'm the first person to root a T397U, hope more will follow. I havent even had this thing 6 hours yet. Thanks for the write up and all those that contributed to the tools and info!
I followed every steps till the end and everything went smoothly. But once I rebooted the tablet, I got the red label on the top left corner: "custom binary blocked by OEM lock". The tablet won't boot properly anymore "OEM unlock" was enabled in the Developers options, I double checked to be sure before flashing.
Edit:
Actually, the "custom binary blocked by OEM lock" appears as soon as I modify the system partition (I wanted to modify the Generic.kl in the keylayout folder on the system partition). If you do not touch anything, everything is fine.
[X-POST from here ]
Worked perfectly, Thank you very much!
WARNING: THIS WILL WIPE EVERYTHING ON YOUR TABLET.
Backup all of your important files before you flash the patched boot.img using odin.
I tried to backup my app data using samsung switch and it worked, but didn't restore most of my device settings and all of my app data.
(Good thing I kept backups for my important apps that had in app backup functionality - like Nova launcher and Squid)
Keep in mind that you probably won't be able to get OTA updates after you perform these steps, it doesn't matter though since this tablet isn't going to be updated that frequently (The 8.0 update is going to come at the end of 2018, source)
Hello.
I tried this but when i using the magisk manager i have an error meassage and the following log:
- Copying image to cache
- Device platform: armeabi-v7a
- Existing zip found
1038+1 records in
1038+1 records out
1063528 bytes transferred in 0.022 secs (48342181 bytes/sec)
- Unpacking boot image
MagiskBoot v18.1(18100) (by topjohnwu)
- Boot Image Modification Tool
mmap failed with 12: Out of memory
! Unable to unpack boot image
! Installation failed
Can you help what i did wrong?
Thank you
oem unlock does not appear
SOLUTION FOUND
how do you oem unlock
I have wasted hours on this, waited weeks, tried the date trick with a legit setup, but the oem unlock never appears, running oldest version of firmware 7.1.1 feb 2018, what gives?
Tried reinstalling firmware via odin, successful flash but no factory reset. Suspect this made no difference. Got the security fail on PIT error, needed a new version of odin and selecting individual AP etc. files fixed this.
apparently you need a samsung or google account
So trying a samsung account... no dice
Now trying adding a sim card as well... success
OK after months of waiting and trying things, this just worked!
Update- I lost the date trick, have to wait 7 days after step 7 on auto date, just appears in developer options no need to press manual update.
https://forum.xda-developers.com/galaxy-s8+/how-to/guide-how-to-skip-rmm-prenormal-install-t3749468
- try downloading UK rom which was released before december '17 (october)
See if it lets the below process work again?
0/ install sim card (was not even the original carrier one in my case although my phone is not carrier locked)
1/ factory reset
2/ on reboot skip all accounts, do not enter a name do not turn on wifi, accept minimal amounts of things
3/ set date to 1/4/19 - turn off automatic date
4/ turn off automatic software updates
5/ enable developer options and turn off auto update system
6/ turn on wifi (date changes)
6b/ change date back
7/ Install samsung account (I went to samsung cloud) (date not changed but software update now triggered despite not touching manual update)
8/ (for interest look at manually check for software updates - it already says 1/4/19 last checked)
9/ reboot
10/ (date is now changed back to today again without my permission)
11/ (it pops up asking to install an update, despite auto updates turned off. - LATER)
12/ (last checked software date is now today (because I left wifi on I think through a reboot) this is 4/5/19 over 1 month later)
13/ go to developer options for the 27868745# time
OEM UNLOCK APPEARED HOLY ****
It is between Bluetooth HCI snoop log and Running services on the dev page, top of the developer options
Since the RMM prenormal thing triggered I had to do this again, so the above instructions do work.
If you stuff up the date just factory reset and start again. Reflash not required
I used a brand new throwaway samsung account for this but thats possibly up to you.
RMM state prenormal
OK now that I've jumped through hoops, installed TWRP
I go to reboot and it's locked recovery again - repeat above OEM unlock reappearing act steps fixes RMM=prenormal. Now it's official again.
Apparently you need to install an RMM patch as well which is not mentioned in this thread.
https://forum.xda-developers.com/showpost.php?p=75360965&postcount=22
So, odin -> ap -> TWRP download
quickly press power-up-home when it resets!!!
recovery is not seandroid enforcing appears and TWRP starts.
1. back up all partitions to microsd!
2. install
a TWRP -> magisk
b TWRP -> RMM disabler - this writes to /system defeating the purpose of magisk???
wipe cache/dalvik reboot
on boot:
"Verification failed"
"Unable to restart your device the integrity verification has failed.... erase all your data"
Well recovery boots this time not an RMM error thats nice... oh it runs a few commands and automatically restarts again.
"Verification failed..."
I guess that is a boot loop then, thanks TWRP for not stopping at a menu ffs.
Reflash TWRP with odin, now it halts at TWRP menu.
https://forum.xda-developers.com/ga...t/how-to-recover-verification-failed-t3775722
Apparently I should put in download mode and cancel - Result = fail & TWRP bootloop -> reinstall TWRP
unmountable /data partition - yep thats me - could try format to exfat - ext4 - Result = Verification failed ffs
---------- Post added at 01:52 PM ---------- Previous post was at 01:00 PM ----------
Take 3
"Looks like you didnt flash encryption breaker." no-verity-no-encrypt_ashyx.zip or no-verity-opt-encrypt-6.0 zip well duh of course but which one for t395
https://www.androidinfotech.com/no-verity-opt-encrypt-versions/
seems a few up to 6.0
BTW if you don't press reset and instead try and reboot into recovery you don't have to reflash TWRP
Verification FAIL.
https://forum.xda-developers.com/galaxy-note-8/how-to/guide-how-to-root-device-encryption-t3742493
Take 4 - try reinstating boot.img with no mods.
Try flashing stock AP -> twrp -> DMM fix -> magisk in quick succession & booting tablet
Verification Failed! Reset
Goes to recovery - less errors on TWRP (no mount errors like before) but verification failed again.
Because TWRP is installed I don't get the erasing screen as described by OP....? TWRP does something very quickly I think it says formatting cache, it is doing a standard factory reset. Trying manual factory reset with TWRP does not work.
So I think I need TWRP to prevent DMM tripping and install magisk but I need stock recovery to avoid the verification failing constantly.
Or a new version of TWRP that supports encryption? 3230+ I have 3230...?
Try Stock RO system - twrp - dm verity - magisk
Verification failed. Reset - no dmm error thats nice. TWRP did some extra stuff.
Verification failed again.
#&%^&^#%$#[email protected]#%[email protected]#%#$%
Option 556
Install dmverity patch using stock recovery.
Gives error can't find /misc partition - pretty sure these are TWRP zips only.
Magisk website says install TWRP so I can't see how to avoid TWRP and this annoying verification fail. Maybe try an older version of magisk???
Verification bootloop FIX:?
I tried booting stock, it says something like data corrupt on start, looks the same as the verification failed but with the different message. I let it erase/factory reset with stock recovery.
DMM preload did not trigger on this!
As soon as it succeeded I installed TWRP in case DMM triggers.
Now with fixed data partition (presumably) retry TWRP
1. no verity patch (6.0)
2. magisk
cannot install DMM as it alters system partition...?
No cache wipe.
Lets see what happens...... Black screen but this time
'encryption failed' reset. Press reset.... TWRP does a factory reset
'encryption failed'
LOL now I have an encryption failed bootloop.
Reinstall stock and use stock factory reset again - boot to recovery straight away, wipe data & cache
Now install TWRP (not booted once yet)
Install verity patch 6.0
install magisk 19.1
Boot system for the first time. - got a bootloop? no just taking it's sweet time. Fingers crossed!
Android is starting... WELCOME
HOLY **** IT WORKED
DMM patch not installed and it hasn't tripped DMM yet (the old 7 day wait issue)
SUMMARY:
1/ ensure DMM is official and not preload, OEM unlocked etc with above post steps
2/ flash stock AP - do NOT boot system yet
3/ stock recovery - wipe data and cache
4/ download odin mode - install twrp-3.2.3.0-gtactive2lte-7.1.2.tar
5/ twrp - install no-verity-opt-encrypt-6.0.zip
6/ twrp - install magisk 19.1
7/ Boot system for the first time
So I have not installed RMM patch (system untouched) but I did install the no encryption/dm verity patch.
It actually boots now.... will update if further problems
Interestingly OEM unlock has disappeared, so RMM must be prenormal so it will probably die on reboot. Argh. But everything is restoring OK for now. See what happens...
Magisk app auto installed and passes safetynet. Preserve force enctyption and AVB 2.0/dm-verity unchecked.
Annoyingly despite backing up all my messages to samsung they are not restoring past 20 april. Not the end of the world.
Skype keeps stopping.
Reboot and YES only officially released binaries are allowed to be flashed boot loop.
So lets do this again!
SUMMARY:
1/ ensure DMM is official and not preload, OEM unlocked etc with above post steps
8skip 2/ flash stock AP - do NOT boot system yet
8skip 3/ stock recovery - wipe data and cache
4/ download odin mode - install twrp-3.2.3.0-gtactive2lte-7.1.2.tar
5/ twrp - install no-verity-opt-encrypt-6.0.zip
6/ twrp - install magisk 19.1
7/ Boot system for the second time
Pretty sure I already tried this so it won't work. &^%#@&^$#$#%#$%@##%@
Oh great it has managed to install the update and now the date fix doesn't work. &^#%&^#$#@$%@#$
After waiting 7 days
1/ Use stock recovery factory reset, then immediately hold down-home-power download mode
2/ Odin TWRP, then immediately hold up-home-power to enter TWRP
2a/ TWRP swipe to allow modifications (for RMM patch)
3/ TWRP install RMM patch
4/ TWRP install no verity patch
5/ TWRP install latest Magisk
NB Magisk seems to install itself as an app - its just there.
...Safetynet pass despite RMM editing /system phew
Hello,
With the last version of Magisk, we no longer have the setting to choose the output format as odin compatible tar.
How can we deal with this, please ?
Regards,
Driss35 said:
Hello,
With the last version of Magisk, we no longer have the setting to choose the output format as odin compatible tar.
How can we deal with this, please ?
Regards,
Click to expand...
Click to collapse
You don't have to choose any file type. Magisk scans files automatically.
Also, if your file type is ".lz4", you have to change it to ".img". Unless, you can't continue.
@Drnms thanks for this thread. But, some places have to be updated because of new Magisk versions.
Did App data remain after rooting
Drnms said:
First up - Let me say that the complete credit to the method goes to two members here as in the thread https://forum.xda-developers.com/galaxy-tab/help/galaxy-tab-active-2-forum-question-t3712591
BUT BUT BUT what the two experts have missed out is on explaining a clear step by step guide for a complete noob like me . So this is an attempt to explain every step. My tab had root in less than 10 mins .
why i needed the root ?
16gb is not enough for the tab so i wanted to apps and data to be moved to the sd card .
Here are the steps
On the Pc
1. Download the stock firmware (must be the same as in your tab) from samfirmware or any other source.
2. Extract the firmware and the extract archive called AP... . Once extracted you will have a boot.img file in it.
On the TAB
3. Activate developer options by clicking the software version 5 times.
4. In the developer options check OEM unlock and USB debugging
5. Download Magisk Manager v16 from xda and install on the TAB.
Connect the tab to the pc
6. Copy the boot.img file from pc to the tab.
7. Run Magisk Manager and in settings choose the output format as odin compatible tar,
8. Click the INSTALL button in the MAGISK manager and choose 'patch boot image file'
9. After a few minutes a dark screen will appear will read all ok boot image patched...now copy that patched_boot.img.tar file from the tab to the PC and rename it as boot.img.tar
On the Tab
10. Recheck under developer options if check OEM UNLOCK and USB DEBUGG
11. DELETE the GOOGLE account (crucial)
12. Switch of the tab
13. Go to download mode by holding vol down, menu and power together , once asked press vol up to go to the download mode.
14. Connect tab to PC.
On the PC
15. Download ODIN and once downloaded right click and run as administrator.
16. Choose AP and select the previously patched boot.img.tar file.
17. Click START
On the TAB
18. It will run the download and restart , restart will say "VERIFICATION FAILED and aask to RESET and erase .
19. CLICK RESET
20. wait for reset saying ERASING and let the tab restart.
NOW the next step is the most crucial one and it is where i got stuck as none of the members who have rooted their device mention it. I did all of the above procedures repeatedly and failed to get root until i realized there was one FINAL CRUCIAL STEP before enjoying the root.
LAST STEP
ON THE TAB
After the TAB restarts , fill in the initial details (google , samsung account, wifi etc) and before you do anything else INSTALL THE MAGISK MANAGER V16 app you downloaded from XDA .......thats it ....you have root access now . ENJOY!
Click to expand...
Click to collapse
Hi Dmms,
Please confirm if the data remained (i.e. was not erased) after the rooting?
Thanks in advance.
Hi, in case it is still relevant:
- Tab does a factory reset when booting first time after the boot img is flashed, data on the device is lost. Data on the SD card is not affected
- In my case, flashing boot.img with Odin didn't work. Odin said success, but no root. Heimdall worked fine, tab was rooted at first attempt
Does this guide also work for Android 9 ?
Edit: So it works with Android 9 also but I had to unpack the boot.img with 7zip ZS according to this post https://forum.xda-developers.com/t/samsung-a40-how-to-root.3929496/post-79902328
and re-pack it with normal 7zip according to these steps:
Do you have the boot.img.lz4 file to boot.img unpacked?
You have renamed the magisk_patched.img to boot.img?
You used the normal 7zip to package into a .tar file? Not the 7zZs?
You used the normal Odin 3.14?
Hello, did you manage to remove the "format as internal" lock?
Hi guys,
Trying to root this tablet, when I load the patched magisk file in Odin and perform the download. The tablet restarts and loads like normal but the tablet isn't rooted.
Any ideas?
alguma fortma?
How to Root Note 9 with Magisk on Android 10 (Q) without Custom Recovery (Eg.. TWRP)
This method will work with most of the latest Samsung devices running Android 9/10. (Tested and Working on Galaxy Note 9 (Exynos) with Android 10 Q).
WARNINGS: I am not responsible for any damage made. Your device warranty will be void. Do it at your own risk.
Warning: Before Installing Magisk
Installing Magisk WILL trip KNOX
Installing Magisk for the first time REQUIRES a full data wipe. Backup before continue.
You have to have your bootloader unlocked before following the instructions
REQUIREMENTS: (Basic knowledge about android rooting.)
Stock Firmware
Odin v3.14.1
Magisk Manager (You can find in Downloads section of Magisk Thread, I used Magisk Manager v7.5.1)
STEP 1 Unlocking Bootloader (This may need to Wipe your Data/Factory Reset.)
Enable Developer Mode on the Galaxy Note 9
To Enable Developer Mode Open Settings option.
Under Settings option, select About phone, then choose Software Information.
Scroll down the screen and tap Build number several times until you see a message that says "Developer mode has been enabled".
Tap on the Back button and you will see the Developer options menu under Settings, and select Developer options.
Toggle the OEM Unlock option on
Then tap on the Turn On button
STEP 2 Patching and Flashing (This may need to Wipe your Data/Factory Reset.)
Download the firmware for your device.
Unzip the firmware and copy the AP tar file to your device. It is normally named as AP_[device_model_sw_ver].tar.md5
Install the latest Magisk Manager
In Magisk Manager: Tap Install → Install → Select and Patch a File and select the AP tar file.
Magisk Manager will patch the whole firmware file and store the output to [Internal Storage]/Download/magisk_patched.tar
Copy the patched file to your PC with adb pull /sdcard/Download/magisk_patched.tar. Do not use MTP as it is reported to corrupt files. (I have copied with MTP)
Reboot to download mode, and flash magisk_patched.tar as AP in Odin, together with the BL, CP and HOME_CSC files (I have used CSC instead of HOME_CSC). (Never flash only an AP file, as Odin can shrink your /data file-system if you do). Important: Uncheck “Auto Reboot” in Odin Options!
Magisk is now successfully flashed to your device! But there are still several steps before you can properly use the device.
STEP 3 Wipe data/factory reset (This may need to Wipe your Data/Factory Reset. : D)
We now want to boot into the stock recovery to factory reset our device. Full data wipe is mandatory! Do not skip this step.
Press Power + Volume Down to exit download mode. As soon as the screen turns off, immediately press the combo key to boot to recovery (e.g. on the Note 9 it is Power + Bixby + Volume Up). Since we want to boot into stock recovery, continue pressing the volume up button until you see the stock recovery screen. (I had to release power button when Note 9 logo appeared).
Use volume buttons to navigate through the stock recovery menu, and the power button to select an option. Choose Wipe data/factory reset to wipe the data of the device.
This time, we can finally boot to the system with Magisk. Select Reboot system now, and immediately press the combo key to recovery. After seeing the bootloader warning screen, release all buttons so it can boot to the system. (Just select Select Reboot system now)
The device will automatically reboot for the first time it boots. This is completely normal and done by design.
After the device is booted up, do the usual initial setup. The following steps will need an internet connection.
You shall see Magisk Manager in your app drawer; if not, manually install the Magisk Manager APK and continue to the next step. The app would be a stub and it shall automatically upgrade to the full Magisk Manager when you open it.
Magisk Manager will ask to do additional setups. Let it do its job and the app will automatically reboot your device.
Voila! Enjoy Magisk
How to Root Note 9 with Magisk on Android 10 (Q) with Custom Recovery (Eg.. TWRP)
This method will work with most of the latest Samsung devices running Android 10. (Tested and Working on Galaxy Note 9 (Exynos) with Android 10 Q).
WARNINGS: I am not responsible for any damage made. Your device warranty will be void. Do it at your own risk.
Warning: Before Installing Rooting your device
Rooting your device WILL trip KNOX
Rooting your device for the first time may REQUIRES a full data wipe. Backup before continue.
You have to have your bootloader unlocked before following the instructions
REQUIREMENTS: (Basic knowledge about android rooting.)
Stock Firmware
Odin v3.14.1
TWRP For Android 10
Magisk Latest Stable ZIP or (I used Magisk Canary from Github)
DM-Verity, Force Encryption, and Disc Quota Disabler (I used Dm-Verity & ForceEncrypt Disabler v02.02.2020)
STEP 1 Unlocking Bootloader (This may need to Wipe your Data/Factory Reset.)
Enable Developer Mode on the Galaxy Note 9
To Enable Developer Mode Open Settings option.
Under Settings option, select About phone, then choose Software Information.
Scroll down the screen and tap Build number several times until you see a message that says "Developer mode has been enabled".
Tap on the Back button and you will see the Developer options menu under Settings, and select Developer options.
Toggle the OEM Unlock option on
Then tap on the Turn On button
STEP 2 Flashing Stock Firmware (This may need to Wipe your Data/Factory Reset.)
Reboot to download mode
To Boot into the Download Mode Power Off your device
Make sure you have a USB Type-C cable connected to your PC
Then press and hold the Volume Down and Bixby buttons at the same time
Hold these two buttons down and you insert the USB Type-C cable
Continue holding these two buttons down until you are greeted with the splash screen for Download Mode
Press the Volume Up button to bypass the splash screen and enter the Odin Mode
Now open Odin on your PC, Flash your firmware AP, BL, CP and CSC files. Important: Check “Auto Reboot” in Odin Options and keep your device in your hand and eye on Odin.
After you get flash got PASS! in Odin your device will restart and you will see blue screen saying you device is updating (or similar statement) for 2-5 seconds and then your device will restart again. (Next Step is Very Importent).
As soon as the screen turns off for second restart you have to press Power + Bixby + Volume Up to boot into the stock recovery. (I had to release power button when Note 9 logo appeared).
Use volume buttons to navigate through the stock recovery menu, and the power button to select an option. Choose Power Off and remove your USB Type-C cable from your device.
STEP 3 Flashing TWRP(This may need to Wipe your Data/Factory Reset.)
Now your device is in power off state you have to boot into the Download Mode to flash TWRP. (You can get info on STEP 2 to boot into Download Mode)
Now open/reset Odin on your PC and go to the Odin option uncheck “Auto Reboot”
Click on the AP button to select TWRP file (Eg: twrp-3.3.1-r3.7-q-crownlte.tar) and click Start. (Next Step is Very Importent).
After you get flash got PASS! in Odin Press Power + Volume Down to exit download mode. As soon as the screen turns off, immediately press the combo key to boot to recovery (e.g. on the Note 9 it is Power + Bixby + Volume Up). Since we want to boot into TWRP recovery, continue pressing the volume up button until you see the TWRP recovery screen. (I had to release power button when Note 9 logo appeared).
STEP 4 Rooting You Device (This may need to Wipe your Data/Factory Reset.)
In TWRP you have to swipe to allow the modification
Now format your data Tap Wipe->Format Data and type yes to continue. (You can Skip step 2 and 3)
No go back to TWRP home screen by pressing back button multiple times and tap Reboot and then click Recovery. (Your device will restart to TWRP recovery mode).
Insert your USB Type-C cable to connect your device to PC.
You will get your device MPT drive in my computer, Copy Magisk Canary zip file and Dm-Verity & ForceEncrypt Disabler v02.02.2020 zip file to your device.
Now you have to flash Magisk Canary in TWRP click Install and select Magisk Canary zip and start flashing. Then flash ForceEncrypt Disabler in TWRP. (If you get the mount error whioe installing ForceEncrypt Disabler then just ignore it and move to next step).
Click reboot to boot your system.
Done! Enjoy
Biometrics and fingerprint work after root?
Trimis de pe al meu SM-N960F folosind Tapatalk
Detonatte said:
Biometrics and fingerprint work after root?
Trimis de pe al meu SM-N960F folosind Tapatalk
Click to expand...
Click to collapse
Yes it works
Guessing this is non snapdragon use only. I don't see any models this works with but root isn't possible with North American note9 as far as I know. The boot loader is locked down.
I don't understand...where, how flash magisk_patched.tar ????
Please edit title to say this is Exynos only
thanks ..
secure folder still work after root?
Detonatte said:
I don't understand...where, how flash magisk_patched.tar ????
Click to expand...
Click to collapse
Follow STEP 2 Patching and Flashing (This may need to Wipe your Data/Factory Reset.)
Download the firmware for your device from sammobile or via Frija
Unzip the downloaded firmware on your PC and copy the AP tar file to your mobile device. (It is normally named as AP_[device_model_sw_ver].tar.md5).
Install the latest Magisk Manager on you mobile device.
In Magisk Manager: Tap Install → Install → Select and Patch a File and select the AP tar file that you have copied from your pc.
Magisk Manager will patch the whole firmware file and store the output to [Internal Storage]/Download/magisk_patched.tar.
Copy the patched magisk_patched.tar file to your PC with adb pull /sdcard/Download/magisk_patched.tar. (Do not use MTP as it is reported to corrupt files. (I have copied with MTP)).
Reboot to download mode, and flash magisk_patched.tar as AP in Odin, together with the BL, CP and HOME_CSC files (I have used CSC instead of HOME_CSC). (Never flash only an AP file, as Odin can shrink your /data file-system if you do). Important: Uncheck “Auto Reboot” in Odin Options!
macgyver40 said:
Guessing this is non snapdragon use only. I don't see any models this works with but root isn't possible with North American note9 as far as I know. The boot loader is locked down.
Click to expand...
Click to collapse
Yes this is only for Exynos version, before posting this tutorials I don't have info about this.
TokedUp said:
Please edit title to say this is Exynos only
Click to expand...
Click to collapse
Done.
moaz1988 said:
thanks ..
secure folder still work after root?
Click to expand...
Click to collapse
Currently I am not using this System-as-root method to root my device because working version of Dm-Verity & ForceEncrypt Disabler is released so I am using TWRP method to root my device so I can't test secure folder on this rooting method. Now my device is rooted with Magisk via TWRP and secure folder is working without any issue so I think it will work with this method too.
Zer0De8th work perfect root with: twrp-3.3.1-r3.7-q-crownlte.tar, Magisk-v20.3(20300).zip and Disable_Dm-Verity_ForceEncrypt_02.02.2020.zip
Thx very much man!!!
Detonatte said:
Zer0De8th work perfect root with: twrp-3.3.1-r3.7-q-crownlte.tar, Magisk-v20.3(20300).zip and Disable_Dm-Verity_ForceEncrypt_02.02.2020.zip
Thx very much man!!!
Click to expand...
Click to collapse
Glad to know it works for you.
And SecureFolder work perfectly!
Trimis de pe al meu SM-N960F folosind Tapatalk
Hello
Thanks to the authors of this tutorial, and others on XDA, I completed a detailed procedure to Root the Galaxy Note 9 SM-N960F under Android 10 with the Recovery Custom TWRP which allows the backup and restoration of all partitions.
This procedure may seem long because it is very detailed because there are very important points not to miss so that the partitions are not locked by Android 10.
I hope the French / English translation is good because I am very bad in English
cordially
https://forum.xda-developers.com/showpost.php?p=81695605&postcount=324
Montero try backup and restore with TWRP? Work??
Trimis de pe al meu SM-N960F folosind Tapatalk
Yes work very fine for All partitions
Detonatte said:
Zer0De8th work perfect root with: twrp-3.3.1-r3.7-q-crownlte.tar, Magisk-v20.3(20300).zip and Disable_Dm-Verity_ForceEncrypt_02.02.2020.zip
Thx very much man!!!
Click to expand...
Click to collapse
Me too....
Restoring my data using Titanium Backup..
Samsung acc working
How to enable hidden menu since no more CSC folder (feature.xml)?
inamie said:
Me too....
Restoring my data using Titanium Backup..
Samsung acc working
How to enable hidden menu since no more CSC folder (feature.xml)?
Click to expand...
Click to collapse
Here is the new location for CSC feature.xml "/odm/etc/omc/XXX- your country code/conf/cscfeature.xml".
You have to Decode / Encode CSC files use OmcTextDecoder .
Many of the old CSC features don't work on Samsung Android Q
Zer0De8th said:
Here is the new location for CSC feature.xml "/odm/etc/omc/XXX- your country code/conf/cscfeature.xml".
You have to Decode / Encode CSC files use OmcTextDecoder .
Many of the old CSC features don't work on Samsung Android Q
Click to expand...
Click to collapse
Thanks,
Any idea how to set Magisk Manager.
New version 7.5.2 no option to hide selected application..
cant use certain apps like shopee pay and ewallet on rooted device.
Previous version 7.5.1 no problem.
Did google remove the option of adopted storage? I don't see it on my SM-T295. I rooted it so I was wondering if there is a Magisk Module that can make sd card act like adopted storage.
Thank you.
Can you tell how did you root your tab please.
Dharmtej said:
Can you tell how did you root your tab please.
Click to expand...
Click to collapse
I have tried many methods dude
Before Installing Magisk
Installing Magisk WILL trip KNOX
Installing Magisk for the first time REQUIRES a full data wipe (this is NOT counting the data wipe when unlocking bootloader). Backup your data before continue.
Download Odin (only runs on Windows) that supports your device.
Unlocking BootloaderUnlocking the bootloader on modern Samsung devices have some caveats. The newly introduced VaultKeeper service will make the bootloader reject any unofficial partitions in some circumstances.
Allow bootloader unlocking in Developer options → OEM unlocking
Reboot to download mode: power off your device and press the download mode key combo for your device
Long press volume up to unlock the bootloader. This will wipe your data and automatically reboot.
Go through the initial setup. Skip through all the steps since data will be wiped again in later steps. Connect the device to Internet during the setup.
Enable developer options, and confirm that the OEM unlocking option exists and is grayed out. This means the VaultKeeper service has unleashed the bootloader.
Your bootloader now accepts unofficial images in download mode
Instructions
Use either samfirm.js, Frija, or Samloader to download the latest firmware zip of your device directly from Samsung servers.
Unzip the firmware and copy the AP tar file to your device. It is normally named as AP_[device_model_sw_ver].tar.md5
Press the Install button in the Magisk card
If your device does NOT have boot ramdisk, check the “Recovery Mode” option
Choose “Select and Patch a File” in method, and select the AP tar file
Start the installation, and copy the patched tar file to your PC using ADB:
adb pull /sdcard/Download/magisk_patched_[random_strings].tar
DO NOT USE MTP as it is known to corrupt large files.
Reboot to download mode. Open Odin on your PC, and flash magisk_patched.tar as AP, together with BL, CP, and CSC (NOT HOME_CSC because we want to wipe data) from the original firmware.
Your device should reboot automatically once Odin finished flashing. Agree to do a factory reset if asked.
If your device does NOT have boot ramdisk, reboot to recovery now to enable Magisk (reason stated in Magisk in Recovery).
Install the Magisk app you’ve already downloaded and launch the app. It should show a dialog asking for additional setup.
Let the app do its job and automatically reboot the device. Voila!
I have tried this one
I have tried flashing unofficial twrp
unofficial twrp 3.4.0 Root Samsung SM-T295 - unofficial twrp
download twrp 3.4.0 root Samsung SM-T295, user who own Samsung SM-T295 can root it by following the below instructions
unofficialtwrp.com
Can you help me please ?
Here are the details of my issue,
When trying to encrypt through "Settings > Biometrics & Security > Encrypt device"
It shows an "encrypting" screen
Keeps working on encryption for 1-2 minutes
then Reboots
When I check status, it's not encrypted
Please help.
Also, other than the encryption issue, phone is functioning normally.
Note 8 Model: SM-N950F/DS
Android Ver: 9
Build: PPR1.180610.011.N950FXXUFDUE4
Kernel: 4.4.111-21737876
Knox Ver: Knox 3.2.1, API level: 27, TIMA 3.3.0
Rooting method: (Magisk, Twrp, Force encrypt disabler, KG/RMM lock remover)
twrp: twrp-3.5.2_9-0-greatlte.img
I attached the files used during rooting process.
As a reference, I am also adding the rooting process I followed.
----------------------------------------------------------------
Enable OEM unlocking from dev menu
Shutdown
Reboot into bootloader mode (hold Bixby + VolDown, then Power, all concurrently)
When bootloader appears, press Vol up to enable flashing mode
Run Odin, and connect phone, wait until connected com port is displayed
On Odin, select twrp image in “AP” field
On Odin, from options, unselect “Auto Reboot”
Start flashing. Wait until flash is “Passed”
Disconnect phone and close odin.
Reboot the phone into recovery mode (Warning: Failure to do so may trigger KG/RMM lock, which will lock down the phone for 7 days. It’s a safeguard against phone theft)
Shutdown from flashing mode (hold Bixby + VolDown, then Power, all concurrently)
As soon as the screen goes dark, release VolDown, while still holding Bixby and Power button, and at this moment, pres VolUp.
This should boot phone into TWRP recovery mode
Format /data partition (Format > Format Data)
Reboot > Recovery
Once recovery is complete, connect phone to computer
From Mount, ensure that MTP is enabled, and data partition is mounted
Data partition should be available on computer
In data partition, add
KG/RMM lock remover
Magisk
Force encrypt disabler
From TWRP, flash files in provided order
Phone is rooted
----------------------------------------------------------------
jeredralph said:
Here are the details of my issue,
When trying to encrypt through "Settings > Biometrics & Security > Encrypt device"
It shows an "encrypting" screen
Keeps working on encryption for 1-2 minutes
then Reboots
When I check status, it's not encrypted
Click to expand...
Click to collapse
I think the DM-Verity zip that you flashed has got something to do with re-encrypting your device. The zip is supposed to prevent re-encryption every time you boot your device.
Also TWRP won't work properly if you device is encrypted.
If you really want a rooted device with encryption then use the patch method with magisk.
Finally got it working! Required some brute force and two days of my time.
Thanks @spawnlives for the hint about DM-Verity zip. But, only removing the zip was not enough.
Here's how things worked out so far.
Trial series 1
Flash stock sim inserted (BL > AP > CP > CSC)
Flash TWRP
Format /data
Flash zips (KG/RMM lock remover, Magisk)
Boot system
Issue: Encryption doesn't work. Same as before (system works on encryption for a bit, reboots, not encrypted)
Additional issue: Region code got corrupted (got //BRI, instead of my region code XXV/XXV/BRI). Samsung refused to check for update due to invalid code (don't remember the specifics).
Magisk status (preserve DM Verity: off, preserve Force Encrypt: on)
Trial series 2
Flash stock with sim inserted (BL > AP > CP > CSC)
Boot system
1 issue fixed: region code is now valid
Flash TWRP
Flash zips from microsd (KG/RMM lock remover, Magisk)
Format /data and /preload
Boot system
Initialize (greetings > connect wifi > choose security scheme (pattern), choose secure startup)
Magisk status (preserve DM Verity: off, preserve Force Encrypt: on)
Notes
I noticed something strange. The Encrypt device option is now gone, and instead there is Secure startup, while I am not sure about the specific differences between these two options, the device appears to be encrypted on boot. Cause, it's asking for pattern on every startup (before activating cellular and other core features). Also, TWRP can not decrypt /data partition anymore.
Trial series 2 resolved my issue of having a rooted Android while still having the /data partition encrypted.
I guess, at least now my data is secured against device theft or loss, considering, thief has to erase the /data partition to use the device again. Please correct me if I am wrong.
Issues yet to resolve
On my OnePlus 3t, TWRP has a cool feature enabled, that can decrypt /data partition using pattern. I am not sure why TWRP on Note 8 doesn't prompt pattern for decrypting /data partition.
I encountered an error, "unable to find crypto footer". Could it be the reason? How could it be mitigated?
Data partition is encrypted. I can flash zip from microsd. But, didn't yet have the chance to check whether flashing another zip will trigger integrity violation during secure startup check (the step where I enter secure startup pattern).
Please help me with these issues.