GETTING YOUR ULTRA ROOTED AND
READY FOR FLASHING
This guide should in theory make your Ultra ready for flashing custom ROMs, and with that said...
...here comes the warning: If you follow the steps contained herein
Your warranty is now voided. I/we are not responsible for bricked devices, or whatever you might end up with.
TABLE OF CONTENTS
Warnings
ROOT KitKat (Android 4.4.4)
Back up TA Partition
Install Recovery
Unlock the Bootloader
Install Custom ROM
Using Flashtool
Back to Stock
Handy Links
Glossary
Misc.
Warnings:
Backup your TA partition before unlocking your bootloader - you will lose DRM keys and other stuff during the unlock
Unlocking the Bootloader will wipe your phone, so backup your stuff
Never Flash a FTF to a ZU GPe - it will kill it
Your warranty is now VOID
ROOT KitKat (Android 4.4.4):Rooting 4.4.4
FTFs
14.4.A.0.108
14.4.A.0.118
To root KitKat we have a handy tool called Easy Root by @zxz0O0. This tool will root all modern Xperia devices running KitKat. Please read the thread.
To use this tool first upgrade to one of the above FTFs or use Sony's PC companion to update the phone to Android 4.4.4
Instructions:
What you get
Root
Access to /system rw
Requirements
USB debugging enabled
Settings => About phone => Click 7 times on Android Build to unlock developer options
Unknown sources enabled
Settings => Security
adb drivers installed
How to use
Download the latest version and extract it
Start your device and plug it to your computer
Run install.bat and follow the instructions on screen
Install SuperSU by Chainfire (recommended!)
Congratulations! You should now be rooted.
Don't forget to make a donation or thank the OP in the original thread
Rooting Pre 4.4.4
Upgrade to one of the 4.4.4 FTFs listed above to save any hassle
Rooting The GPe
GPe Owners: Do not try and flash any FTFs to your device. You will BRICK it with no way to recover it.
Go to this thread and follow the steps.
Back up TA Partition:The TA partition is the "Trim Area". There are lots of things stored in here like root certs, revoked certs, DRM keys, current firmware version,... the list goes on. What we are concerned about here is with the DRM keys. Some service centres will not service a Sony device if these are missing. Unlocking the BL will erase these.
Once you lose these keys, you can't get them back, so backup the TA and upload it to your Dropbox etc
You will need Backup TA for Sony Xperia by @DevShaft Please read the thread.
Instructions:
Download the latest version of Backup TA.
Extract the ZIP file to a folder location of your choosing.
Navigate to the folder location of Backup TA.
Make sure no other script or application which is using ADB is running.
Make sure the device is booted in normal mode (the way you normally use it).
Run Backup-TA.bat
Read the last paragraph of the license before continuing.
Read the information and follow the instructions given by the tool.
Don't forget to make a donation or thank the OP in the original thread
Install Recovery:
Download the latest version of @[NUT]'s Dual Recovery
Instructions:
Make sure you have USB debugging turned ON.
download ZU-lockeddualrecovery[VERSION]-BETA.installer.zip from http://nut.xperia-files.com
Windows:
unpack at C: or somewhere you will remember!
navigate to the resulting directory and look for install.bat, double click it to run;
Linux:
unpack in your home folder with 'unzip ZU-lockeddualrecovery[VERSION]-BETA.installer.zip'
navigate to the resulting directory and 'chmod +x install.sh', then execute it, follow instructions.
Your phone WILL reboot when installation has completed and it will go into the default recovery for the first boot.
Reboot to system from recovery to allow the installer to clean up after installation (it is safe to skip this step).
Enjoy DUAL RECOVERY!
Don't forget to make a donation or thank the OP in the original thread
Unlock the Bootloader:This will wipe your phone, so backup your stuff
You only need to unlock the bootloader if you want to run either a custom kernel or a custom ROM. Most ROMs based on the Sony releases will run on a locked bootloader.
Instructions:
Go to Sony's Developer site
Request the unlock key and check your mail straight away. Email is quick these days.
Open the latest Flashtool on your computer
Click the "BLU" icon
Follow the steps and enter your unlock key
Install Custom ROM:To install a custom ROM you will have to complete the steps above (ROOT, Back up the TA Partition, and Unlock the Bootloader) you dont need to have installed recovery but it will help you make a backup of the current state of your device.
After the above are done:
Backup current software with custom recovery (TWRP or cwm - use the same recovery the the new ROM uses*)
Downlod ROM
Extract boot.img from within the .zip
Flash the boot.img (not absolutely necessary but will mean you are on a recovery that is tested to work with the ROM)
In fastboot mode use either flashtool or the fastboot commands
- If you want to use the boot.img's recovery to make a back up of the current software/state of the device use:
Code:
fastboot boot boot.img
- or if you just want to flash the kernel and recovery to flash the ROM use:
Code:
fastboot flash boot boot.img
fastboot reboot
Wipe Data
Wipe Cache
Wipe Delvik Cache
Flash ROM
Reboot
*CM based ROMs normally use CWM. Slim and Omni based normally use TWRP
Using flashtool:Please use this very good guide: Flashtool XZU
Back to Stock:
To get back to pure stock Sony there are several things that need to be done:
Make sure you have root
Backup any data/photos/etc on the phone
Restore your TA backup with the TA backup tool above
If you are on a custom kernel or ROM you ZU will not boot at this stage
Start flashtool and load a FTF
Start the flash and wait for the onscreen instructions to connect the ZU
Connect your ZU in flashmode
With the ZU powered off
Connect to PC while holding the volume down key
Flash will start
Wait for flash to complete
Handy Links:FTFs: The FTF depository thread
Flashtool: http://flashtool.net
SuperSU: https://play.google.com/store/apps/details?id=eu.chainfire.supersu&hl=en
Glossary:FTF: A flashable package of Sony's stock firmware. These can be found in The FTF depository thread
TA Partition: The TA partition is the "Trim Area" there are lots of things stored in here like root cert, revoked certs, DRM keys, current firmware,... the list goe on. What we are concerned with is the DRM keys. Some service centres will not service a Sony device if these are missing. Unlocking the BL will erase these.
Bootloader or BL: This is the thing that loads Android. To run a custom ROM (non Sony) you have to unlock this
Root: You are GOD
boot.img: The kernel and recovery (on Xperia)
XDA:DevDB Information
Z-Ultra Root Guide, Tool/Utility for the Sony Xperia Z Ultra
Contributors
blueether, H. E. Pennypacker, adfurgerson, LordManhattan, [NUT], geohot, many others
Version Information
Status: Stable
Created 2014-11-13
Last Updated 2015-01-01
Reserved
As always, very informative blueether.
Questions:
(1) Does this mean we no longer need to downgrade/upgrade/restore imei etc?
(2) Unlocking the bootloader is a requirement for installing any rom? No way around this?
(3) I understand the need for the disclaimers but rooting/unlocking BL doesn't automatically void your warranty does it?
unidentifier said:
As always, very informative blueether.
Questions:
(1) Does this mean we no longer need to downgrade/upgrade/restore imei etc?
(2) Unlocking the bootloader is a requirement for installing any rom? No way around this?
(3) I understand the need for the disclaimers but rooting/unlocking BL doesn't automatically void your warranty does it?
Click to expand...
Click to collapse
1/ was only needed on 4.2
2/ added a line
3/ ring Sony and say this: "I rooted my ZU, and now it won't boot. Can you fix it for me?" what do you think their response will be?
With the warranty question: I asked because I'm more concerned about the cracked glass issues than bricking the device because I couldn't follow instructions. Thanks again for the instructions.
I may sound dumb but if I am only interested in root just for link2sd feature & foldermount to overcome internal storage limitation by transfering to SD card then do I have to follow all steps ? or only first 2 step will do i.e. Root & install SU.
I will just root it & don't want to touch TA or Bootloader as not planning to update with custom rom. please suggest that even for rooting do I need to backup TA / unlock bootloader.
also will new update of Android Lollipop will wipe my root or will I be able to upgrade to lollipop in later on stage with Root.
please reply on this.
Nice with an updated version. Do speak up if you need some help with anything.
anandbohra said:
I may sound dumb but if I am only interested in root just for link2sd feature & foldermount to overcome internal storage limitation by transfering to SD card then do I have to follow all steps ? or only first 2 step will do i.e. Root & install SU.
I will just root it & don't want to touch TA or Bootloader as not planning to update with custom rom. please suggest that even for rooting do I need to backup TA / unlock bootloader.
also will new update of Android Lollipop will wipe my root or will I be able to upgrade to lollipop in later on stage with Root.
please reply on this.
Click to expand...
Click to collapse
My XZU hasn't arrived but my experience with other phones is that root alone should allow you to use link2sd and fouldermount.
Can't speak to OTA updates being blocked on rooted phones..
anandbohra said:
I may sound dumb but if I am only interested in root just for link2sd feature & foldermount to overcome internal storage limitation by transfering to SD card then do I have to follow all steps ? or only first 2 step will do i.e. Root & install SU.
I will just root it & don't want to touch TA or Bootloader as not planning to update with custom rom. please suggest that even for rooting do I need to backup TA / unlock bootloader.
also will new update of Android Lollipop will wipe my root or will I be able to upgrade to lollipop in later on stage with Root.
please reply on this.
Click to expand...
Click to collapse
Yes if you just need root the only go that far
OTA will probably fail with root, and flashing a FTF will wipe root when L arrives
rooting is not working. stops as there is no tr.apk included. In the guide there is nothing about tr.apk needed to be downloaded as well as that you need to donate before you can download. I dont mind to donate but I need to know it will work.
krystan said:
rooting is not working. stops as there is no tr.apk included. In the guide there is nothing about tr.apk needed to be downloaded as well as that you need to donate before you can download. I dont mind to donate but I need to know it will work.
Click to expand...
Click to collapse
Are you only wanting to root, or do you plan to install recovery also?
blueether said:
Yes if you just need root the only go that far
OTA will probably fail with root, and flashing a FTF will wipe root when L arrives
Click to expand...
Click to collapse
Thank you very much for your prompt reply.
will post my experience once I receive my piece & just plain root it.
anyhow as per google Lollipop might take another 4-5 months for Xperia Z Ultra (might be May-15)
Thanks every one.
anandbohra said:
Thank you very much for your prompt reply.
will post my experience once I receive my piece & just plain root it.
anyhow as per google Lollipop might take another 4-5 months for Xperia Z Ultra (might be May-15)
Thanks every one.
Click to expand...
Click to collapse
Just roo should be fine
We are getting close to haveing a working AOSP L, give it a few days I guess (but pleas dont clog this thread up with L stuff for now
All my previous Sumsang phones were on custom ROMs.
But with SonyXZU I just want to root, for now
krystan said:
All my previous Sumsang phones were on custom ROMs.
But with SonyXZU I just want to root, for now
Click to expand...
Click to collapse
Darn I was going to suggest using the dualrecovery installer for locked bootloaders and then flashing supersu from here.
http://forum.xda-developers.com/xpe...de-root-android-4-4-4-ver-14-4-0-108-t2801587
I have the towelroot apk that I downloaded a few days ago, but not sure what you would need to do with it.
adfurgerson said:
Darn I was going to suggest using the dualrecovery installer for locked bootloaders and then flashing supersu from here.
http://forum.xda-developers.com/xpe...de-root-android-4-4-4-ver-14-4-0-108-t2801587
I have the towelroot apk that I downloaded a few days ago, but not sure what you would need to do with it.
Click to expand...
Click to collapse
Thank you adfurgenson
If I do dualrecovery will I be able to get 5.0?
Or only manually?
krystan said:
Thank you adfurgenson
If I do dualrecovery will I be able to get 5.0?
Or only manually?
Click to expand...
Click to collapse
I am pretty certain that you have to go back to stock to receive the OTA, but I think that would apply also if you only rooted. Flashing an ftf file with flashtool without checking the boxes to wipe data is what I have seen recommended to get back to stock. I hate giving an answer I am not one hundred percent sure is correct so I will call on some experts, @blueether or @HEPennypacker can you confirm this is correct please.
adfurgerson said:
I am pretty certain that you have to go back to stock to receive the OTA, but I think that would apply also if you only rooted. Flashing an ftf file with flashtool without checking the boxes to wipe data is what I have seen recommended to get back to stock. I hate giving an answer I am not one hundred percent sure is correct so I will call on some experts, @blueether or @HEPennypacker can you confirm this is correct please.
Click to expand...
Click to collapse
meh, can't be bothered writing a reply. What you said will work if/when the OTA fails
OK more of a reply...
unless the OTA is only very minor it will normally fail even if the ZU just rooted
ADB Drivers and Sony PC Companion
ADB
Trying to prep the computer before the XZU arrives. The sticky mentions ADB drivers.
Are these the best ways to get them or are there better options?:
15 Second ADB Installer: http://goo.gl/ixQyom
Minimal ADB and Fastboot: http://goo.gl/EuGtRo
PC COMPANION
Link to Sony PC Companion
http://support.sonymobile.com/global-en/xperiazultra/tools/pc-companion/
Hey guys,
I am new to the Z2 and Sony devices in general. I rooted and flashed Samsung and HTC devices before, so I am not a total beginner.
Basically what I wanna do is: Flash the eXistenz Rom with locked BL.
1. Flashtool
Okay, so I need to downgrade. I already downloaded the flashtool + a .314 firmware for my phone.
Do I leave the flashtool flashing options just at the defaults? I mean do I really don't wanna check things like partition and TA in the "exlude" field.
Wouldn't that mean that it is going to flash TA and re-partition the storage (doesn't really sounds like what I want). I read some threads,
but they're always like "Yeah, just click flash", so I thought I doublecheck.
2. Rooting
Okay, so theres many root methods out there, which one can you guys recommend? What root method does flashtool use?
3. Nut's
If I do all the above mentioned, I could just flash a ftf file and my phone would be completely stock right? Nut's is also some sort of hack which doesn't alter the original recovery in the recovery partition on my phone, right?
Thanks in advance.
Kamairo said:
Hey guys,
I am new to the Z2 and Sony devices in general. I rooted and flashed Samsung and HTC devices before, so I am not a total beginner.
Basically what I wanna do is: Flash the eXistenz Rom with locked BL.
1. Flashtool
Okay, so I need to downgrade. I already downloaded the flashtool + a .314 firmware for my phone.
Do I leave the flashtool flashing options just at the defaults? I mean do I really don't wanna check things like partition and TA in the "exlude" field.
Wouldn't that mean that it is going to flash TA and re-partition the storage (doesn't really sounds like what I want). I read some threads,
but they're always like "Yeah, just click flash", so I thought I doublecheck.
2. Rooting
Okay, so theres many root methods out there, which one can you guys recommend? What root method does flashtool use?
3. Nut's
If I do all the above mentioned, I could just flash a ftf file and my phone would be completely stock right? Nut's is also some sort of hack which doesn't alter the original recovery in the recovery partition on my phone, right?
Thanks in advance.
Click to expand...
Click to collapse
1. yes leave flashtool options at default (it will wipe your internal storage)
TA partition isnt touchable realy, if your DRM keys exist they arent affected by using flashtool
2. Rooting depends on your firmware, 167 or newer isnt rootable via tool so you will have to folow a slightly longer task to root, easy root tool is recomended (check the info thread near the top of QnA section)
3. [NUT] Is a user who makes recovery for locked bootloaders, You need to be rooted to be able to install his recoveries
flashing a FTF will completly reset your device to stock
[NUT]'s Recovery for locked bootloader doesnt affect the boot or Recovery partition hence its ability to run on a locked bootloader
Envious_Data said:
1. yes leave flashtool options at default (it will wipe your internal storage)
TA partition isnt touchable realy, if your DRM keys exist they arent affected by using flashtool
2. Rooting depends on your firmware, 167 or newer isnt rootable via tool so you will have to folow a slightly longer task to root, easy root tool is recomended (check the info thread near the top of QnA section)
3. [NUT] Is a user who makes recovery for locked bootloaders, You need to be rooted to be able to install his recoveries
flashing a FTF will completly reset your device to stock
[NUT]'s Recovery for locked bootloader doesnt affect the boot or Recovery partition hence its ability to run on a locked bootloader
Click to expand...
Click to collapse
1. Okay, yeah, that makes sense if the BL is locked
2. So I'll check out Easy root tool, thx
3. That's what I thought, thank you
I have found many sites with conflicting answers, so please don't tell me "google is your best friend" for my silly/already asked questions...
So first what I have: a 5 month old, non modified M4 aqua (E2306), bought from a Canadian carrier. The firmware version is 26.1.A.3.111 (bootloader locked). My goal is to root my phone when I update to MM (using the method PiSpecialist has posted, I cannot post links), but I haven't done so for the fear of losing TA partition when unlocking BL. There is currently no way to root MM with locked bootloader.
Now, my questions:
1. When I unlock my BL, I will lose the TA partition (DRM keys) of the device. Yet to back these up, I need root access. Should I root my device while it is still on Lollipop? There are ways to root BL Lollipop correct? If so, please link a preferable way to do this.
2. Will I receive OTA updates after rooting my phone? If not, I should download and flash firmware from Xperifirm?
3. Will I lose root when flashing new firmware (e.g. flashing MM to a rooted Lollipop device)?
4. Is it dangerous to flash official firmware to a rooted phone? What is a safe way?
I found that dealing with TA is dangerous and can hard brick a phone. Anybody found a reliable script/tool to do this?
So this is pretty much what I am planning to do so far, if the above is correct:
Root my phone while it is still on Lollipop with a locked bootloader.
Backup my TA partition.
Get MM (from either flashing, or OTA, depending if I still get OTA updates)
Unlock bootloader (as there is no way to root for locked bootloaders in MM)
Root phone while it is on MM (if I don't keep the root after updating from lollipop)
Restore TA partition
DONE!
Not as many questions as I thought.... Any other advice/things to look out for would be appreciated
Theres no way yet to have root in mm /system, it needs to be in kernel and you cant use custom kernel and restore ta. All the questions you did are already answered in forums.
But in case your interested ill tell you what i did step by step to have original TA part with drm and "tunned" but unrooted /system.
Keep in mind that your warranty is void, you will loose all your data and you may brick your device. Messing up with TA partition is serious and dangerous stuff. The following steps are just to tell you what i did.
If you want to do so, do it at your own risk.
1. Clean install LP 3.120 via flashtool wipping user data.
2. Root with rootkit 3.xxx and installed twrp for BL
3. Backup TA
4. Unlock bootloader and install MM fw via flashtool
5. Now with BU installed boot.img and recovery.img
6. Now with root, deleted unwanted apps, installed adblocker, installed xposed, tunned some settings/apps etc.
7. When /system was how i wanted, i made a backup via twrp (data, system, cache).
8. Clean install LP 3.120 again via flashtool, wipping user data.
9. Root via rootkit and installed twrp for BL.
10. Restored TA partition
11. Restored the backup via twrp and SHUTTED DOWN the phone because itll not match with the rest of the fw.
12. Installed MM fw again via flashtool but this time, excluded /system part and DID NOT WIPE user data nor Apps log. (as ive restored MM /data backup before)
13. Started the phone.
Now i have MM with drm, locked bootloader, unrooted, xposed working with few modules, adblocker applied and some other mods. Also i receive updates via sony apps such as whats new. And the low speaker volume seems to be fixed.
thewailer said:
Theres no way yet to have root in mm /system, it needs to be in kernel and you cant use custom kernel and restore ta. All the questions you did are already answered in forums.
But in case your interested ill tell you what i did step by step to have original TA part with drm and "tunned" but unrooted /system.
Keep in mind that your warranty is void, you will loose all your data and you may brick your device. Messing up with TA partition is serious and dangerous stuff. The following steps are just to tell you what i did.
If you want to do so, do it at your own risk.
1. Clean install LP 3.120 via flashtool wipping user data.
2. Root with rootkit 3.xxx and installed twrp for BL
3. Backup TA
4. Unlock bootloader and install MM fw via flashtool
5. Now with BU installed boot.img and recovery.img
6. Now with root, deleted unwanted apps, installed adblocker, installed xposed, tunned some settings/apps etc.
7. When /system was how i wanted, i made a backup via twrp (data, system, cache).
8. Clean install LP 3.120 again via flashtool, wipping user data.
9. Root via rootkit and installed twrp for BL.
10. Restored TA partition
11. Restored the backup via twrp and SHUTTED DOWN the phone because itll not match with the rest of the fw.
12. Installed MM fw again via flashtool but this time, excluded /system part and DID NOT WIPE user data nor Apps log. (as ive restored MM /data backup before)
13. Started the phone.
Now i have MM with drm, locked bootloader, unrooted, xposed working with few modules, adblocker applied and some other mods. Also i receive updates via sony apps such as whats new. And the low speaker volume seems to be fixed.
Click to expand...
Click to collapse
Thank you.
What adblocker can be install?
Btw, false alarm regarding speaker volume, it still saturate with bass at higher volume resulting in a lower and kinda cracked volume output, it may need to be tweaked, or even try to port LP audio parametres to MM rom, if thats even a thing and possible, until sony fix it (if they do lol). Ive tested a variety of songs
thewailer said:
Now i have MM with drm, locked bootloader, unrooted, xposed working with few modules, adblocker applied and some other mods. Also i receive updates via sony apps such as whats new. And the low speaker volume seems to be fixed.
Click to expand...
Click to collapse
Is there possibility for system to stay rooted? Btw how do u enter into recovery on MM ?
Tnx
harisdelic said:
Is there possibility for system to stay rooted? Btw how do u enter into recovery on MM ?
Tnx
Click to expand...
Click to collapse
Theres no method at this moment to put su binaries in /system, but if you dont mind you can keep the root as long as you dont restore your TA / lock bootloader as it needs a stock kernel signed by sony.
I enter twrp recovery in MM by holding power+vol down
---------- Post added at 09:42 PM ---------- Previous post was at 09:41 PM ----------
sucsong said:
Thank you.
What adblocker can be install?
Click to expand...
Click to collapse
Ive installed adaway that blocks via host file.
thewailer said:
Theres no method at this moment to put su binaries in /system, but if you dont mind you can keep the root as long as you dont restore your TA / lock bootloader as it needs a stock kernel signed by sony.
I enter twrp recovery in MM by holding power+vol down
Click to expand...
Click to collapse
Thanks man. I will try metod you write above right now
harisdelic said:
Thanks man. I will try metod you write above right now
Click to expand...
Click to collapse
No problem . Here in m4 aqua forums you have everything you need to backup TA, unlock bootloader, flash, drowngrade etc. Just follow all the tutorials carefully good luck
thewailer said:
Theres no method at this moment to put su binaries in /system, but if you dont mind you can keep the root as long as you dont restore your TA / lock bootloader as it needs a stock kernel signed by sony.
I enter twrp recovery in MM by holding power+vol down
---------- Post added at 09:42 PM ---------- Previous post was at 09:41 PM ----------
Ive installed adaway that blocks via host file.
Click to expand...
Click to collapse
I don't understand about "excluded /system part"? Flash only system file or everything
sucsong said:
I don't understand about "excluded /system part"? Flash only system file or everything
Click to expand...
Click to collapse
No, you exclude system as you restored it early via twrp, flash the rest of the firmware like modem, kernel etc. Remember to dont wipe data and apps log also
Edit: if you flash system youll loose the changes you did thats why you need to exclude from bundle when choosin in flashtool
thewailer said:
Theres no way yet to have root in mm /system, it needs to be in kernel and you cant use custom kernel and restore ta. All the questions you did are already answered in forums.
But in case your interested ill tell you what i did step by step to have original TA part with drm and "tunned" but unrooted /system.
Keep in mind that your warranty is void, you will loose all your data and you may brick your device. Messing up with TA partition is serious and dangerous stuff. The following steps are just to tell you what i did.
If you want to do so, do it at your own risk.
1. Clean install LP 3.120 via flashtool wipping user data.
2. Root with rootkit 3.xxx and installed twrp for BL
3. Backup TA
4. Unlock bootloader and install MM fw via flashtool
5. Now with BU installed boot.img and recovery.img
6. Now with root, deleted unwanted apps, installed adblocker, installed xposed, tunned some settings/apps etc.
7. When /system was how i wanted, i made a backup via twrp (data, system, cache).
8. Clean install LP 3.120 again via flashtool, wipping user data.
9. Root via rootkit and installed twrp for BL.
10. Restored TA partition
11. Restored the backup via twrp and SHUTTED DOWN the phone because itll not match with the rest of the fw.
12. Installed MM fw again via flashtool but this time, excluded /system part and DID NOT WIPE user data nor Apps log. (as ive restored MM /data backup before)
13. Started the phone.
Now i have MM with drm, locked bootloader, unrooted, xposed working with few modules, adblocker applied and some other mods. Also i receive updates via sony apps such as whats new. And the low speaker volume seems to be fixed.
Click to expand...
Click to collapse
Thanks! This was what I was looking for!
Also, will you be able to root after this? (If someone comes up with a method)
DarkerJava said:
Thanks! This was what I was looking for!
Also, will you be able to root after this? (If someone comes up with a method)
Click to expand...
Click to collapse
Your welcome. Yeah if someones finds a way to do the classic root like in LP this will be rootable for sure.
At least in the meanwhile we can have ads blocked and xposed with some modules and still keep bootloader locked with drm keys to keep functions and receive updates.
thewailer said:
Your welcome. Yeah if someones finds a way to do the classic root like in LP this will be rootable for sure.
At least in the meanwhile we can have ads blocked and xposed with some modules and still keep bootloader locked with drm keys to keep functions and receive updates.
Click to expand...
Click to collapse
This is what im going to do...
Root bootloader locked in LL
Back up TA
Unlock bootloader
MM through flashtool
Root MM (boot.img , recovery.img) (This IS what you did by flashing these, right?)
http***://forum.xda-developers.com/m4-aqua/general/root-t3421932 (going to use this boot and recovery .img)
Chang/add to Marshmallow firmware
At this point, the device should be rooted on MM, with UB TWRP and SuperSU.
Now, is it okay if I just restore TA partition NOW, instead of going back to LL? I'm not really interested in saving OTA updates... speaking of which, how did you manage to still get them? I thought as soon as you modify your device, you are excluded from OTA updates...
DarkerJava said:
This is what im going to do...
Root bootloader locked in LL
Back up TA
Unlock bootloader
MM through flashtool
Root MM (boot.img , recovery.img) (This IS what you did by flashing these, right?)
http***://forum.xda-developers.com/m4-aqua/general/root-t3421932 (going to use this boot and recovery .img)
Chang/add to Marshmallow firmware
At this point, the device should be rooted on MM, with UB TWRP and SuperSU.
Now, is it okay if I just restore TA partition NOW, instead of going back to LL? I'm not really interested in saving OTA updates... speaking of which, how did you manage to still get them? I thought as soon as you modify your device, you are excluded from OTA updates...
Click to expand...
Click to collapse
Yeah you root mm by flashimg boot.img.
First, some people reported that is recommended to restore TA partition in the same firmware as you backed them up. Second, if you restore your TA and you have custom boot.img (like that one to get the root) your device will not boot
thewailer said:
Theres no way yet to have root in mm /system, it needs to be in kernel and you cant use custom kernel and restore ta. All the questions you did are already answered in forums.
But in case your interested ill tell you what i did step by step to have original TA part with drm and "tunned" but unrooted /system.
Keep in mind that your warranty is void, you will loose all your data and you may brick your device. Messing up with TA partition is serious and dangerous stuff. The following steps are just to tell you what i did.
If you want to do so, do it at your own risk.
1. Clean install LP 3.120 via flashtool wipping user data.
2. Root with rootkit 3.xxx and installed twrp for BL
3. Backup TA
4. Unlock bootloader and install MM fw via flashtool
5. Now with BU installed boot.img and recovery.img
6. Now with root, deleted unwanted apps, installed adblocker, installed xposed, tunned some settings/apps etc.
7. When /system was how i wanted, i made a backup via twrp (data, system, cache).
8. Clean install LP 3.120 again via flashtool, wipping user data.
9. Root via rootkit and installed twrp for BL.
10. Restored TA partition
11. Restored the backup via twrp and SHUTTED DOWN the phone because itll not match with the rest of the fw.
12. Installed MM fw again via flashtool but this time, excluded /system part and DID NOT WIPE user data nor Apps log. (as ive restored MM /data backup before)
13. Started the phone.
Now i have MM with drm, locked bootloader, unrooted, xposed working with few modules, adblocker applied and some other mods. Also i receive updates via sony apps such as whats new. And the low speaker volume seems to be fixed.
Click to expand...
Click to collapse
i have locked bootloader and its not unlockable (buyed to a company) and after some test i can tell you that don't need to unlock bootloader to do this
you can do it from rooted LP with twrp, first wipe data , system and cache, install MM fromzip (you can create the zip with PRF creator using the dummy_flashable.zip instead supersu zip) after MM its installed you can now install xposed, and other kind of flashable mods, lastly, power off phone and flash tft skipping system.sin
you will have android modded and untouched bootloader without root
sergioslk said:
i have locked bootloader and its not unlockable (buyed to a company) and after some test i can tell you that don't need to unlock bootloader to do this
you can do it from rooted LP with twrp, first wipe data , system and cache, install MM fromzip (you can create the zip with PRF creator using the dummy_flashable.zip instead supersu zip) after MM its installed you can now install xposed, and other kind of flashable mods, lastly, power off phone and flash tft skipping system.sin
you will have android modded and untouched bootloader without root
Click to expand...
Click to collapse
id rather prefer to do the system changes with root in the mm firm, but sounds like a good method for those ones that cant unlock the BL.
sergioslk said:
i have locked bootloader and its not unlockable (buyed to a company) and after some test i can tell you that don't need to unlock bootloader to do this
you can do it from rooted LP with twrp, first wipe data , system and cache, install MM fromzip (you can create the zip with PRF creator using the dummy_flashable.zip instead supersu zip) after MM its installed you can now install xposed, and other kind of flashable mods, lastly, power off phone and flash tft skipping system.sin
you will have android modded and untouched bootloader without root
Click to expand...
Click to collapse
Can't everyone unlock from the Sony website?
DarkerJava said:
I have found many sites with conflicting answers, so please don't tell me "google is your best friend" for my silly/already asked questions...
So first what I have: a 5 month old, non modified M4 aqua (E2306), bought from a Canadian carrier. The firmware version is 26.1.A.3.111 (bootloader locked). My goal is to root my phone when I update to MM (using the method PiSpecialist has posted, I cannot post links), but I haven't done so for the fear of losing TA partition when unlocking BL. There is currently no way to root MM with locked bootloader.
Now, my questions:
1. When I unlock my BL, I will lose the TA partition (DRM keys) of the device. Yet to back these up, I need root access. Should I root my device while it is still on Lollipop? There are ways to root BL Lollipop correct? If so, please link a preferable way to do this.
2. Will I receive OTA updates after rooting my phone? If not, I should download and flash firmware from Xperifirm?
3. Will I lose root when flashing new firmware (e.g. flashing MM to a rooted Lollipop device)?
4. Is it dangerous to flash official firmware to a rooted phone? What is a safe way?
I found that dealing with TA is dangerous and can hard brick a phone. Anybody found a reliable script/tool to do this?
So this is pretty much what I am planning to do so far, if the above is correct:
Root my phone while it is still on Lollipop with a locked bootloader.
Backup my TA partition.
Get MM (from either flashing, or OTA, depending if I still get OTA updates)
Unlock bootloader (as there is no way to root for locked bootloaders in MM)
Root phone while it is on MM (if I don't keep the root after updating from lollipop)
Restore TA partition
DONE!
Not as many questions as I thought.... Any other advice/things to look out for would be appreciated
Click to expand...
Click to collapse
If on rooted 5.0 all you need to do is flash a pre-rooted mm zip via recovery on lollipop, no need to unlock the Bootloader for root unless you have a device that has drm-verity security activated.
Sent from my Xperia XA using XDA Labs
aidy.lucas said:
If on rooted 5.0 all you need to do is flash a pre-rooted mm zip via recovery on lollipop, no need to unlock the Bootloader for root unless you have a device that has drm-verity security activated.
Sent from my Xperia XA using XDA Labs
Click to expand...
Click to collapse
Oh yeah I completely forgot about that... someone released a prerooted rom about a week ago on the forums. This will less complicate the process for bl locked rooted MM, thanks!
So, I backed up the DRM keys, rooted, installed custom recovery and kernel. Now I want to bring the phone back to the same status as it was when I received it. I thought I start by restoring the DRM keys that should also lock the BootLoader, but I'm a bit stuck and have 3 questions.
1. I bought the US variant, flashed an European one to get the fingerprint sensor - is it enough to flas the US firmware to make the phone the same way as when I got it?
2. How to get rid of custom recovery, will flashing the original US firmware take care of that?
There is a thread about restoring TA, you need also flash stock fw.
mele80 said:
There is a thread about restoring TA, you need also flash stock fw.
Click to expand...
Click to collapse
True, but this is all it says. Says nothing about flashing anything or how to restore original recovery.
===================================How To Restore TA Partiton?==================================
Note : Restoring TA Partiton Will Re-Lock The Boot-Loader And You Will Loose Root Access.
* Copy your TA partition backup to the TA tool's extracted folder.
* Connect your device with USB Debugging Enabled
* Open up a command prompt to the extracted folder and type in the following:
tarestore.bat {Your TA Backup File}
Example :
tarestore.bat TA-14102016.img
This new restored TA partition should persist across device wipes and Android upgrades.
Well you will just need to restore To ( relock bootloader) and then flash stock rom with flashtool ( wipe all, but take backups)
I was in ur shoes last week. First, if u backed up ur TA, downgrade to the firmware u did d backup (lollipop i presume), then restore ur TA, it will not restore on Marshmallow, after that then upgrade to marshmallow, u will bun-rooted n stock with ur drm keys.
Is there a way to restore back to normal if you didn't backup a TA?
I just want to unroot mine and relock the bootloader.
Root back
Hello, i tried root my phone but did not get any luck. As i understand i did not root it but changed kernel to Androplus. I want back to stock but not sure which steps i should make. At the moment i don't have rooted device also cant get sony updates as it is modified.
This is my phones data
Model E5823
Baseband version 8994-FAAAANAZQ-00033-25
Kernel version 3.10.84-v23 Androplus
Build number 32.1.A.1. 185
1) How much far i did got to root my phone?
2) What should i do get back stock firmware?
Thanks!