Encryption on custom ROMs? - Xperia Z2 Q&A, Help & Troubleshooting

I was able to enable Android encryption (/user partition) under a stock ROM, but I've tried several ROMs that where encryption fails. Specifically, when enabling encryption on AICP 4.4.4, the system reboots (as usual), then completely forgets that I asked it to get encrypted.
Semi-related, I'm having trouble installing TWRP onto the Xperia Z2. AFAIK it's the only recovery that supports encrypted partitions, and XZDualRecovery bundles a version of TWRP that may be too old to use the KK4.4 encryption.
(After installing TWRP based on directions from the site, booting into recovery via power + volume up buttons just hangs on a black screen.)
My phone is a Sony Xperia Z2 D6503, with unlocked bootloader.
Has anyone gotten this to work?

I have gotten this to work (sort of) with a two-kernel solution.
This post contains a stock kernel that has been modified to include TWRP 2.8.1.0 as its recovery (17.1.2.A.0.314-based, by Desperanto86). In combination with the TWRP image, encrypted partitions can be backed up:
Code:
fastboot flash boot boot.img
fastboot flash recovery openrecovery-twrp-2.8.1.0-sirius.img
If you enable encryption on top of this, the system no longer boots (I used custom ROM cm-11-20141206-NIGHTLY-sirius.zip). Flashing the CM boot.img allows the device to boot, but TWRP is no longer accessible.
It's probably possible to integrate TWRP into CyanogenMod's boot.img, but for now, I'm okay with just re-flashing the kernel at times when I need to back up my device (hopefully I don't burn through the flash memory with all the writes). So the process looks like this:
flash FTF firmware with Flashtool
enable developer options, then enable ADB in settings
install XZDualRecovery for root + recovery
copy custom ROM to /sdcard
boot into recovery, factory reset and install custom ROM
boot custom ROM, enable passcode, enable encryption
And when making backups:
power off phone
flash modded kernel + TWRP
take backup
flash original kernel boot.img from ROM (to restore boot ability)

Update for CM12/Lollipop: AOSP seems to enable hardware encryption for Qualcomm-based platforms, but this is not supported with TWRP (GitHub issue). Since hardware support is needed to decrypt storage, TWRP needs to load proprietary Qualcomm binaries to talk to the hardware (which are undocumented).
It seems like there will be no support for encrypted Lollipop backups, so I'll be sticking with 4.4.4.

Related

Re-flashing OPX ROM via fastboot

Hi
First a little history...
I recently got an OPX with the intention of installing Sailfish OS on it. So first I need to get CM 12.1 installed. Following the instructions here I flashed TWRP using fastboot, but the version of TWRP provided at the link would not find any system partitions on my device and therefore could not be used to flash any images. Newer versions of TWRP would simply not load.
Eventually, using the stock OPX recovery, I managed to upgrade Oxygen OS to the latest version. I then flashed the latest version of TWRP (3.1.1-1) again and it worked! It found my devices partitions and I could flash ROMs with it. But, it wouldn't flash CM 12.1. Something about a trustzone incompatibility...
So I got the idea to try and downgrade Oxygen OS, which I did via TWRP. But then TWRP stopped working... and here is my problem.
I'm now stuck in a situation where:
- I can access fastboot
- The only versions of TWRP which work (e.g. 3.0.2-0) fail to find my system partitions, and therefore can't be used to flash ROMs
- The stock recovery also seems to fail to find the system partitions (clicking on "install locally" does nothing), so I can't use that to flash ROMs either
So I really need to get a working image on my phone somehow... but how?? Is it possible to do this via fastboot only?
Cheers!
Is your bootloader unlocked? TWRP cannot see system partitions if so.
I unlocked it originally... but since then I have installed a new ROM (Oxygen OS 2.x). Would this overwrite the bootloader? Do I need to unlock again? I think I must be using the old OOS bootloader now...
I think you can see if it's unlocked if you boot into bootloader, connect to pc and write on cmd "fastboot devices".
Whenever you switch between android 5.0 roms and 6.0 and further you have to first use the correct recovery from oneplus, only then you can flash the correct twrp and the adequate roms
My bootloader is unlocked. I cannot flash a new ROM via recovery, because none of the recovery images (stock, TWRP) can see my system partitions (I don't know why). At this stage I would just like to know if there is a way to flash a stock ROM/recovery/bootloader via some other method (fastboot, or a special tool), so I can restore my phone back to factory state. I don't care about losing data. Thanks.
EDIT: Just to clarify, I believe this is my current situation (please correct me if something doesn't make sense):
- OOS has two different bootloaders, 2.x and 3.x.
- The phone originally had OOS 2.x on it. None of the TWRP images I installed recognized my system partitions, so I couldn't flash with TWRP.
- After re-installing the stock recovery (which happened automatically when I booted to the stock ROM), I was able to upgrade to OOS 3.x via stock recovery. Now recent TWRP versions were working (I assume because upgrading to OOS 3.x updated the bootloader too), and were recognizing my system partitions.
- Using a new version of TWRP (3.1.1-1), I re-flashed an older version of OOS 2.x again. I think this was my mistake, because I think this downgraded the bootloader to 2.x again. Now none of the TWRP versions recognize my system partitions, so I cannot flash ROMs.
- I have re-flashed the stock recovery from the OnePlus website, but not even this allows me to flash ROMs. The symptoms look like in TWRP, i.e. that it fails to recognize my system partitions. So I am stuck with no way to flash ROMs, or upgrade the bootloader.

Help how to do the Root on the Xiaomi Mi 8 device with the MIUI Global Stable!!

Hi everyone, I am recently registered on this site. from some days I have the desire to do the Root on the miui global stable, it is consequently on my beloved Xiaomi Mi 8, the problem is: when the device is turned off I turn on the device pressing it under volume key + ignition key at the same time to enter in recovery mode, the latter makes me enter in "Official" mode, in the sense that it does not let me enter twrp mode where there are install, settngs, advacend options, backup ... but in the official one with only 3 buttons: wipe , connect to mi account ... So I thought of flashing the twrp via fastboot, I finally entered it, but the problem is that when I go to Install, to install the root, I can't do that, because characters (alphanumeric) appear long and randomly, so I can't identify which folder I put the Magisk on, it appears in both folders and subfolders. somewhere I read to install a zip file called LazyFlasher, to avoid possible blocking at startup, in fact I try before installing this zip file, with various combinations (first rom, then magisk, both rom and magisk, first magisk then rom , first rom that gate at the end the cache then magisk) but all fail, so I am forced to flash through fastboot with the tool I flash, because at every start it always took me back to twrp without the possibility of moving, it seems that the touch does not respond at the user's commands. So I know that this LazyFlasher file causes me to "bypass" this problem, give me confirmation ??. Thank you. PS: so far I haven't managed to install the Magisk root yet, can you give me a hand, maybe the twrp has some problems? or is my device not compatible with this version of twrp ??, I tell you that in the past with the miui global beta it didn't give me this problem. Thank you all
Have you even unlocked your bootloader? If not look for the official Xiaomi tool, it's the only way how you are able to flash twrp and root your phone.
altae said:
Have you even unlocked your bootloader? If not look for the official Xiaomi tool, it's the only way how you are able to flash twrp and root your phone.
Click to expand...
Click to collapse
Thanks for the reply, I solved everything, unlocked BL, installed twrp (no stock) and installed root. but I have a problem, when I installed the root, every time I want to restart the device for a series of reasons (slowness, delete cache, rest ...) it starts in twrp not in the system, so I have to delete everything it's starting again. I heard that the LazyFlasher file makes it possible to remedy this problem, essentially it allows you to bypass the security of android to avoid bootloap, and I hope it also corrects this problem (which when I reboot the device, I want to install a zip file, I it always starts in twrp), but during the flash of this zip (LazyFlasher) I get an error: the Updater process ended with error: 1 Error installing zip '/sdcard/lazyflasher-no-verify-opt-encrypt.zip. Thanks a lot. PS: but this file, lazyflasher should be mounted on an SD card to work ?? I don't have it on my device
Paoloqu24 said:
Thanks for the reply, I solved everything, unlocked BL, installed twrp (no stock) and installed root. but I have a problem, when I installed the root, every time I want to restart the device for a series of reasons (slowness, delete cache, rest ...) it starts in twrp not in the system, so I have to delete everything it's starting again. I heard that the LazyFlasher file makes it possible to remedy this problem, essentially it allows you to bypass the security of android to avoid bootloap, and I hope it also corrects this problem (which when I reboot the device, I want to install a zip file, I it always starts in twrp), but during the flash of this zip (LazyFlasher) I get an error: the Updater process ended with error: 1 Error installing zip '/sdcard/lazyflasher-no-verify-opt-encrypt.zip. Thanks a lot. PS: but this file, lazyflasher should be mounted on an SD card to work ?? I don't have it on my device
Click to expand...
Click to collapse
Flash a DM-Verity No-Encryption ZIP to remove encryption and disable the Verity check. OR if you want to keep encryption and root -flash a 3rd party Kernel like MiPa or Sphinx after Magisk.
Agimax said:
Flash a DM-Verity No-Encryption ZIP to remove encryption and disable the Verity check. OR if you want to keep encryption and root -flash a 3rd party Kernel like MiPa or Sphinx after Magisk.
Click to expand...
Click to collapse
thank you. in the past I flamed DM-Verity No-Encryption ZIP to remove encryption and disable Verity checking. in fact after immediately this zip I put magisk. at the access of the dispay I saw a magisk icon, so it means root installed successfully. but the problem is: when I reboot the device to clear the cache ... or install a module on the magisk, it always starts in twrp, so I have to start all over again. there is a way to keep cryptography and root, without any booting going into twrp but into the system. thank you
Paoloqu24 said:
thank you. in the past I flamed DM-Verity No-Encryption ZIP to remove encryption and disable Verity checking. in fact after immediately this zip I put magisk. at the access of the dispay I saw a magisk icon, so it means root installed successfully. but the problem is: when I reboot the device to clear the cache ... or install a module on the magisk, it always starts in twrp, so I have to start all over again. there is a way to keep cryptography and root, without any booting going into twrp but into the system. thank you
Click to expand...
Click to collapse
You shouldn't have these problems:
Flash ROM and Keep Encryption:
Flash TWRP
Boot into TWRP and flash MIUI ROM
Flash TWRP again (select flash image, then select recovery partition, then select recovery file)
Flash DM-Verity ZIP here-->: DM-Verity (Make sure 'DM-Verity' file is the ONLY thing the file is named. The filename triggers what is installed during flash)
Flash MAGISK
Flash 3rd Party Kernel (I prefer MiPa or Sphinx found in other threads)
Reboot and enjoy!
Flash ROM and REMOVE Encryption: (Keeps Stock Kernel)
Flash TWRP
Boot into TWRP and flash MIUI ROM
Flash TWRP again (select flash image, then select recovery partition, then select recovery file)
Flash DM-Verity ZIP here-->: DM-Verity (Make sure 'verity' AND 'forceencryp' is in the file name. The filename triggers what is installed during flash)
Reboot and enjoy!
If you have problems with any of them, you might need to format internal storage first (where you have to answer 'yes' in TWRP)
/.
As far as I understand, you are having problems while booting into TWRP. You should boot into TWRP right after flashing it, and boot into OS once again and reboot to recovery. It should work. If you see the stock recovery, keep flashing TWRP. If you want to temporarily flash it, use "fastboot boot TWRP.img" command.
The War Profiteer said:
As far as I understand, you can't boot into TWRP. You should boot into TWRP right after flashing it, and boot into OS once again and reboot to recovery. It should work. If you see the stock recovery, keep flashing TWRP. If you want to temporarily flash it, use "fastboot boot TWRP.img" command.
Click to expand...
Click to collapse
No problems booting into TWRP.
You can use "fastboot.exe flash recovery twrp.img"
Then reboot phone and hold volume-up+power. When booting until TWRP appears. If you miss it and it tries to boot it will overwrite it. But I've never had issues otherwise.
Agimax said:
You shouldn't have these problems:
Flash ROM and Keep Encryption:
Flash TWRP
Boot into TWRP and flash MIUI ROM
Flash TWRP again (select flash image, then select recovery partition, then select recovery file)
Flash DM-Verity ZIP here-->: DM-Verity (Make sure 'DM-Verity' file is the ONLY thing the file is named. The filename triggers what is installed during flash)
Flash MAGISK
Flash 3rd Party Kernel (I prefer MiPa or Sphinx found in other threads)
Reboot and enjoy!
Flash ROM and REMOVE Encryption: (Keeps Stock Kernel)
Flash TWRP
Boot into TWRP and flash MIUI ROM
Flash TWRP again (select flash image, then select recovery partition, then select recovery file)
Flash DM-Verity ZIP here-->: DM-Verity (Make sure 'verity' AND 'forceencryp' is in the file name. The filename triggers what is installed during flash)
Reboot and enjoy!
If you have problems with any of them, you might need to format internal storage first (where you have to answer 'yes' in TWRP)
/.
Click to expand...
Click to collapse
Thanks for the reply. I will choose the first option, I replace the stock kernel with sphinx kerne, so I get more functionality, battery life, performance, fluidity ... also the developer has mentioned us, if any desired functionality is missing in this kernel, it is possible ask the developer to add us. so I choose the first option, I have some questions before replacing the stock kernel: 1) is it possible to restore the kernel stock, in case of problem, if yes, where can I get the kernel for Mi 8? 2) if in the future there will be a new update of sphinx kerne, how do I understand if a new update has been released? will you notify me ?? 3) are you sure that after these steps, upon restarting the phone, I will find the root installed ?, if I would like to restart the device, it will not boot in twrp but in the system, because I replaced the stock kernel, the same thing is also valid for the magisk modules, zip files ... 4) the last fundamental thing, will I receive updates via OTA ?? if not, is there a way to install future updates (I would like to try the latest magisk version, 19.3) ?. 5) it is safe if I install update via ota, it does not start in twrp, but system. 6) the steps to do are, flash twrp custom via fastboot, I choose to delete the memory, restart twrp, copy the files (MIUI global stable, sphinx kernel, dm-verify), flash rom, flash dm-verify, flash magisk, flash kernel, device reboot, all right. Thanks a lot for the questions
Agimax said:
You shouldn't have these problems:
Flash ROM and Keep Encryption:
Flash TWRP
Boot into TWRP and flash MIUI ROM
Flash TWRP again (select flash image, then select recovery partition, then select recovery file)
Flash DM-Verity ZIP here-->: DM-Verity (Make sure 'DM-Verity' file is the ONLY thing the file is named. The filename triggers what is installed during flash)
Flash MAGISK
Flash 3rd Party Kernel (I prefer MiPa or Sphinx found in other threads)
Reboot and enjoy!
Flash ROM and REMOVE Encryption: (Keeps Stock Kernel)
Flash TWRP
Boot into TWRP and flash MIUI ROM
Flash TWRP again (select flash image, then select recovery partition, then select recovery file)
Flash DM-Verity ZIP here-->: DM-Verity (Make sure 'verity' AND 'forceencryp' is in the file name. The filename triggers what is installed during flash)
Reboot and enjoy!
If you have problems with any of them, you might need to format internal storage first (where you have to answer 'yes' in TWRP)
/.
Click to expand...
Click to collapse
I get an error during the installation of sphinx: the Updater process ended with error: 1 Error installing zip '/sdcard/sphinx.zip
Agimax said:
You shouldn't have these problems:
Flash ROM and Keep Encryption:
Flash TWRP
Boot into TWRP and flash MIUI ROM
Flash TWRP again (select flash image, then select recovery partition, then select recovery file)
Flash DM-Verity ZIP here-->: DM-Verity (Make sure 'DM-Verity' file is the ONLY thing the file is named. The filename triggers what is installed during flash)
Flash MAGISK
Flash 3rd Party Kernel (I prefer MiPa or Sphinx found in other threads)
Reboot and enjoy!
Flash ROM and REMOVE Encryption: (Keeps Stock Kernel)
Flash TWRP
Boot into TWRP and flash MIUI ROM
Flash TWRP again (select flash image, then select recovery partition, then select recovery file)
Flash DM-Verity ZIP here-->: DM-Verity (Make sure 'verity' AND 'forceencryp' is in the file name. The filename triggers what is installed during flash)
Reboot and enjoy!
If you have problems with any of them, you might need to format internal storage first (where you have to answer 'yes' in TWRP)
/.
Click to expand...
Click to collapse
both methods don't work, the first one gives me error when I install kernel, the second one on startup gives me a lot of error
I managed to install the root, doing the following steps: flash twrp via fastboot, copy the files to the internal memory, install rom files, install magisk files, install dm-verify, then reboot, and it works perfectly. but I have some problems: when I reboot the device, it starts in twrp not in the system, and therefore I am forced to do it again. help me !! kernel replacement gives me error, both
Paoloqu24 said:
I managed to install the root, doing the following steps: flash twrp via fastboot, copy the files to the internal memory, install rom files, install magisk files, install dm-verify, then reboot, and it works perfectly. but I have some problems: when I reboot the device, it starts in twrp not in the system, and therefore I am forced to do it again. help me !! kernel replacement gives me error, both
Click to expand...
Click to collapse
You should not have errors flashing a kernel. Maybe you should flash all partition images from fastboot. Or maybe wrong recovery? What version are you using?
Agimax said:
You should not have errors flashing a kernel. Maybe you should flash all partition images from fastboot. Or maybe wrong recovery? What version are you using?
Click to expand...
Click to collapse
the kernel is: Sphinx-v2.9
Paoloqu24 said:
the kernel is: Sphinx-v2.9
Click to expand...
Click to collapse
I mean what version of recovery. You should use this one (v3.3.1) or newer: https://www.androidfilehost.com/?fid=3556969557455275724
It's from this thread: https://forum.xda-developers.com/mi-8/development/recovery-unofficial-twrp-recovery-t3893823
Agimax said:
I mean what version of recovery. You should use this one (v3.3.1) or newer: https://www.androidfilehost.com/?fid=3556969557455275724
It's from this thread: https://forum.xda-developers.com/mi-8/development/recovery-unofficial-twrp-recovery-t3893823
Click to expand...
Click to collapse
TWRP 3.3.1.1 https://eu.dl.twrp.me/dipper/
I followed in this guide "https://clk.ink/7q4SUR" but instead of installing Disable_Dm-Verity_FEC_v1.1.zip I downloaded Disable_Dm-Verity_ForceEncrypt_09.02.2018.zip, is it the same ?, also I saw that, when I go inside the magisk, and I click on uninstall> restore image, a warning appears "there is no original boot image", I also executed this command in powershell "fastboot getvar current-slot" but I get a "GetVar Variable Not found" error. I don't know how to solve. thank you

Correct Twrp recovery for Sgp611 MM

Hi, what is the correct version of Twrp recovery for 6.0.1 stock, since Nuts dualrecovery is not compatible? Thanks
https://eu.dl.twrp.me/scorpion_windy/
Please Help
So I am a total noob. Never rooted a device before. The only reason I'm doing it is cos my kid wants to do gps spoofing with pokemon go. I have already made a mistake as I have unlocked the bootloader without backing up the DRM keys. Now Im tyring to install twrp. On most tutorials it looks straight forward but on the TWRP official site it says....
The Xperia devices have a recovery-in-boot arrangement. This means that the recovery is booted using the regular kernel / boot image in the device. Team Win has worked with the FreeXperia device maintainers to come up with a way to extract the ramdisk from the FOTAKernel partition and use the ramdisk from that partition instead of the recovery that is included in the boot image of your device. This means that if you install current CM nightlies and flash TWRP to the FOTAKernel partition, you will be able to use TWRP instead of the CWM or CM recovery that normally comes in a CM boot image. Other boot images including stock kernels can be repacked to include this extraction utility to allow you to use TWRP from the FOTAKernel partition. This setup allows you to choose what recovery you want to have installed and allows you to update your recovery more easily. Unfortunately this setup requires that the boot image that you have installed include the ramdisk extraction utility. The source for this utility is here:
I really don't know what any of this means. Ive downloaded the utility but have no idea how to use it.
Oh and I also have a xperia z3 tablet sgp611.

Question How to install TWRP permanently for Redmi Note 10 (sunny)?

I am having a tough time installing TWRP on (sunny) as I am not used to A/B partitioned devices. The stock recovery is replaced every time once I boot back to system. I have been using fastboot to get the custom recovery. It would be helpful if someone could tell how to get it installed permanently as there is no recovery partition in A/B devices. There was no option for Recovery Ramdisk in TWRP.
Thank You
If you change the boot.img, the recovery is automatically changed. There is no other way.
The boot.img includes the recovery. This is the reason.
So is there no way to get recovery without altering the boot?
Once you install the ROM via TWRP, I believe you need to go to Advanced > Install Recovery Ramdisk > flash the TWRP image file from microSD.
I haven't gotten to test this myself since I am still waiting for the bootloader unlock, others can confirm if it is the case or if I said something false.
Alternatively, I think crDroid dev for this phone bundles it with TWRP... actually, I think dev dropped it in latest release.
syntheticdingo said:
Once you install the ROM via TWRP, I believe you need to go to Advanced > Install Recovery Ramdisk > flash the TWRP image file from microSD.
I haven't gotten to test this myself since I am still waiting for the bootloader unlock, others can confirm if it is the case or if I said something false.
Alternatively, I think crDroid dev for this phone bundles it with TWRP... actually, I think dev dropped it in latest release.
Click to expand...
Click to collapse
I am using an unofficial twrp and it is not having Install ramdisk option.
Unofficial Twrp 3.5.1 Sunny
1) Installing boot.img changes the recovery to the one it contains.
2) You can change the recovery by subsequently installing recovery on the ramdisk.
But whenever I flash the boot.img again, the recovery changes again.
Even version 3.5.1 of TWRP includes a ramdisk installation feature. Look for it in "Advanced".
StaryMuz said:
1) Installing boot.img changes the recovery to the one it contains.
2) You can change the recovery by subsequently installing recovery on the ramdisk.
But whenever I flash the boot.img again, the recovery changes again.
Even version 3.5.1 of TWRP includes a ramdisk installation feature. Look for it in "Advanced".
Click to expand...
Click to collapse
As I said before that option isn't available in the Advanced option despite me looking for it.
EDIT: I used a different recovery.img TWRP 3.5.2 for sunny, and it had the option. I am linking it here so you can use it.

After P.Experience Rom TWRP is gone and everything is encrypted

Hi. I installed Android 12 Pixel Experience rom and my TWRP gone after this. After installing the rom, TWRP replaced with Pixel Experience's own recovery mode. Currently, the ROM is installed and I can use it without any problems, but I cannot switch to a different ROM in any way. When I install TWRP with ADB, I cannot install the file named "DM Verity & ForceEncrypt disabler" because everything is encrypted. I do not use any passwords on the ROM (fingerprint, screen lock, etc.). I want to install new ROM so I need to make TWRP permanent and remove encryption on TWRP, because i can't see my files. As I said, the phone is can open and I can use it without problems. Looking forward to your help, thank you.
1) Backup everything
2) Install twrp and sideload the PE rom but don't boot into it
3) Flash the DFE (disable force encryption ) zip from twrp
4) Boot into the rom
Remember you won't get the ota updates if you disable the encryption and have to manually update the rom
easdasd617 said:
Hi. I installed Android 12 Pixel Experience rom and my TWRP gone after this. After installing the rom, TWRP replaced with Pixel Experience's own recovery mode. Currently, the ROM is installed and I can use it without any problems, but I cannot switch to a different ROM in any way. When I install TWRP with ADB, I cannot install the file named "DM Verity & ForceEncrypt disabler" because everything is encrypted. I do not use any passwords on the ROM (fingerprint, screen lock, etc.). I want to install new ROM so I need to make TWRP permanent and remove encryption on TWRP, because i can't see my files. As I said, the phone is can open and I can use it without problems. Looking forward to your help, thank you.
Click to expand...
Click to collapse
You need to read the instructions before you flash anything. PE A12 is encrypted by default and because TWRP can't handle the decryption of A12 ROMs, PE replacing the TWRP with PE Recovery, so to be able to get OTA updates. This is a workaround until TWRP fix the decryption issue.
To flash another ROM, take backup of the files you want from your Internal Storage, flash TWRP via ADB, wipe everything and format data. Then connect your device to PC and transfer the ROM and the files you want to flash into your Internal Storage and proceed with flashing.

Categories

Resources