Erecovery through FF - Honor 9 Questions & Answers

Right so am making this to see if anyone has tried this new add-on feature and if people have tried this if so has it worked for them.
Am just interested in if this feature actually did a job for some honor 9 users as I tried myself and it sadly failed

Didn't work for me either using the Win10 hotspot method. I have a router BT HomeHub where you cannot access the DNS settings.
My device is currently uncertified in playstore so cannot use GPay. Any help on how I can update my firmware without unlocking bootloader/root etc?
Sent from my STF-L09 using Tapatalk

Related

Root/Updates/Rebranding/Unbricking - Official FunkyHuawei Support Thread for P10

This is the official FunkyHuawei support thread.
FunkyHuawei is a (mostly) paid service which allows you to do the following:
1. Install the latest system software, even before it's released by OTA.
2. Install beta/prerelease system software, without needing to be a beta tester.
3. Recover a bricked phone.
4. Rebranding / Change the region of your phone (China -> Europe, for example, to get Google and so on.)
5. Root your EMUI 8 phone, even with stock recovery (This feature is free)
Except for rooting, all of these features are supported even if you cannot unlock your phone's bootloader.
To find FunkyHuawei, please Google it. Or you can find a link to the service within the following XDA Portal article.
https://www.xda-developers.com/android-oreo-emui-6-huawei-mate-9/
We are pleased to announce FHUnbrickFlashTool -- You can now repair any recent Huawei phone via fastboot, even if you cannot access eRecovery or boot the phone! Even if it doesn't show the Huawei logo, as long as you can get a fastboot connection to your computer, you can recover the phone! Google FHUnbrickFlashTool or check FunkyHuawei's reddit for details.
In cooperation with XDA, FunkyHuawei is offering a free credit to Recognized Developers and Recognized Contributers on XDA.
Please PM me for more details.
We will continue posting in this thread with updates regarding new software versions and releases regarding this device.
We will also be monitoring it so we can help anyone who has issues.
For device-specific information, please see the next post.
P10 Device-Specific Information
The P10 now has a relatively mature community with many methods to do many things.
However, there are still some things only possible with FunkyHuawei, so it would be most useful for:
1. Installing updates on bootloader-locked devices, even if the update is not approved by Huawei for your device.
2. Rebranding bootloader-locked devices, or rebranding to obscure carrier brandings.
3. Restoring bricked devices.
Note that even though the Mate 10 Root tool is designed for the Mate 10, it works perfectly on the P10 running Android O betas.
This tool is FREE, and might be easier than installing TWRP and rooting that way.
Frequently Asked Questions
Q: How much does FunkyHuawei cost?
A: You need to buy credits on the FunkyHuawei website. The price per credit varies depending on the number of credits you buy. Different operations cost different amounts of credits. However, the Root feature of the Mate 10 tool is free, and as mentioned above, Recognized Developers/Contributors of XDA can ask for a free credit.
Q: My phone is bootloader locked, and FRP locked. My bootloader unlock code dosen't work. It won't boot. eRecovery doesn't work. Can you help?
A: Yes. With the Mate 10 this is now a common situation. Contact FunkyHuawei for help in this situation. We'll need to access your computer remotely and the procedure is a little bit complicated, but the phone can be unbricked.
Q: I can't get my bootloader unlock code/don't want to unlock my bootloader, but I want to change my phone to something other than Chinese. Can you help?
A: Yes. Our new FunkyHuawei Rebrand Tool works on ALL recent Huawei phones, to rebrand them to another region even when the bootloader is locked.
Q: I'm not seeing the latest version listed on FunkyHuawei or elsewhere as an OTA. Why not?
A: Huawei has a very odd and unpredictable way of rolling out OTA updates. You can use FunkyHuawei to install the new version immediately, or can wait for the update to be rolled out. It might be a month or more after release until the update reaches your device from Huawei directly. We have no idea why.
Q: Why isn't FunkyHuawei free?
A: Because many of FunkyHuawei's features cost FunkyHuawei money to provide. Features that don't cost FunkyHuawei money to provide, like rooting the Mate 10 or our TWRP build for Mate 9/Oreo, for example, are generally made available for free. There are also bills to pay, kids to put through school, and so on.
Q: I noticed FunkyHuawei in an XDA Portal article!
A: FunkyHuawei loves XDA, and is cooperating with them as much as possible. Recognized Developers and Contributors on the XDA forums are welcome to claim a free credit from FunkyHuawei as well.
Q: I have a different question.
A: This is what this thread is for! Post away!
duraaraa said:
P10 Device-Specific Information
The P10 now has a relatively mature community with many methods to do many things.
However, there are still some things only possible with FunkyHuawei, so it would be most useful for:
1. Installing updates on bootloader-locked devices, even if the update is not approved by Huawei for your device.
2. Rebranding bootloader-locked devices, or rebranding to obscure carrier brandings.
3. Restoring bricked devices..
Click to expand...
Click to collapse
Luckilly the P10 community here is mature enough that there is no longer a need for Funky's services. However effective Funky may be, we can save ourselves the 30bucks and do it ourselves
We are pleased to announce FHUnbrickFlashTool -- You can now repair any recent Huawei phone via fastboot, even if you cannot access eRecovery or boot the phone! Even if it doesn't show the Huawei logo, as long as you can get a fastboot connection to your computer, you can recover the phone! Google FHUnbrickFlashTool or check FunkyHuawei's reddit for details.
We have added a brand new Android O build for the Chinese P10.
You will need to rebrand your phone to VTR-AL00 (all/cn) to install it.
Best to use HiSuite to install it -- check out Mate 10 rebranding information to find the correct version of HiSuite and instructions.
We now have Android O for International P10 and P10 Plus.
Check FunkyHuawei reddit for install instructions, or google for "Android O Builds for International P10 and P10 Plus now available! Instructions inside"
This is great news!!
If I only got some $:crying: but nice news
Does this include Treble?
tiktok1 said:
Does this include Treble?
Click to expand...
Click to collapse
Yes, of course.
Hey all, I'm having a problems to which i've been pulling my hair out and not sure what to do. Essentially, I had my phone rooted, although later decided I wanted to unroot. To unroot I used an app called "simply unroot" however it did not fully unroot my device, just made it worse, my phone does not pass the safety net, however "root checker apps" suggest my phone is not rooted, although some apps recognise my phone as being rooted. My phone bootloader is unlocked, but the OEM toggle in the developer options is not set as enabled, and is NOW greyed out so i cant click it, meaning i do not have access to any fastboot commands and thus cannot flash a recovery.img. Although, believe after having trying to unroot it had automatically disable OEM. I have tried to lock the bootloader in the hopes that OEM toggle would no longer be greyed out, but cannot do this as i dont have access to fastboot commands. Even with TWRP i cannot flash anything just promps me with Error 9. I have tried storing the UPDATE.app within the dload folder, but that doesnt work either. I have no idea how i can recover this device. Fell like i've tried everything. Please help.
rustymole said:
Hey all, I'm having a problems to which i've been pulling my hair out and not sure what to do. Essentially, I had my phone rooted, although later decided I wanted to unroot. To unroot I used an app called "simply unroot" however it did not fully unroot my device, just made it worse, my phone does not pass the safety net, however "root checker apps" suggest my phone is not rooted, although some apps recognise my phone as being rooted. My phone bootloader is unlocked, but the OEM toggle in the developer options is not set as enabled, and is NOW greyed out so i cant click it, meaning i do not have access to any fastboot commands and thus cannot flash a recovery.img. Although, believe after having trying to unroot it had automatically disable OEM. I have tried to lock the bootloader in the hopes that OEM toggle would no longer be greyed out, but cannot do this as i dont have access to fastboot commands. Even with TWRP i cannot flash anything just promps me with Error 9. I have tried storing the UPDATE.app within the dload folder, but that doesnt work either. I have no idea how i can recover this device. Fell like i've tried everything. Please help.
Click to expand...
Click to collapse
Why you pose this question in the "official funkyhuawei support" thread is beyond me....
Only thing that comes to mind is: do you have USB debugging enabled in the developers options? It should be enabled if you want to use ADB or Fastboot.
rustymole said:
Hey all, I'm having a problems to which i've been pulling my hair out and not sure what to do. Essentially, I had my phone rooted, although later decided I wanted to unroot. To unroot I used an app called "simply unroot" however it did not fully unroot my device, just made it worse, my phone does not pass the safety net, however "root checker apps" suggest my phone is not rooted, although some apps recognise my phone as being rooted. My phone bootloader is unlocked, but the OEM toggle in the developer options is not set as enabled, and is NOW greyed out so i cant click it, meaning i do not have access to any fastboot commands and thus cannot flash a recovery.img. Although, believe after having trying to unroot it had automatically disable OEM. I have tried to lock the bootloader in the hopes that OEM toggle would no longer be greyed out, but cannot do this as i dont have access to fastboot commands. Even with TWRP i cannot flash anything just promps me with Error 9. I have tried storing the UPDATE.app within the dload folder, but that doesnt work either. I have no idea how i can recover this device. Fell like i've tried everything. Please help.
Click to expand...
Click to collapse
You can use FunkyHuawei eRecovery method to return it to stock.
I recently updated my P10 VTR L29 C432 from nougat to Oreo B360 via oreoupgrade script method as posted in forum but after update my bootloader seems to be locked again i wanted to root my phone via installing TWRP but it's not allowed by fastboot
Any solution or any solution to unlock bootloader or root the phone without losing data !? I have too much files and apps on phone that i won't lose

Is a VPN still needed for Bootloader Unlocking?

If you are not in China is a VPN still needed (or preferred) when trying to unlock the Bootloader? I have received permission to unlock. I'm in North America and have tried about 25 different VPN's and have only one or two that seem to have a possibility to connect to a VPN server in China.
Since I started the process without a VPN I am hoping to complete it without using one as I saw one user say they got locked out of their phone when deleting their Mi account to rebind it from a VPN.
If it fails without a VPN would I need to wait several days again to try with a VPN? I hope to try unlocking today (5-3-2018) as the first try said to wait about 3 days. Any thoughts or suggestions very much appreciated.

Running MI8 Chinese Rom want to switch to international rom

Hello fellow Mi8 owners.
I just got my MI8 via aliexpress. The phone came with the chinese rom. Thankfully English could be used as the default language and I was able to get around the phone that way.
However, Google play and services are obviously missing. Is there a way to get a global rom?
I tried to unlock the bootloader for 3h yesterday, however, there was no way to get it to work.
Things I did:
0) Login with Xiaomi account.
1) enabled developer options.
2) Enable USB debugging.
3) Enable the OEM Unlock toggle.
4) Request Unlock via the phone (where you can check if the bootloader is locker or not).
On the PC:
- I downloaded the MI Unlocker software (latest version). Checked for version update to be sure.
- Downloaded mi PC suite (I keep reading that it's deprecated so not sure if it's useful or not). Updated to latest version.
- connected and let drivers update. Initially it showed as a generic android phone in device manager. After some uninstall of drivers and trying to install Xiaomi Drivers, it shows up as LePhone or something like that. It does show the Mi8 under it though.
Issue:
- When I tried to unoock bootloader via the Mi Unlocker, it checked if I have permission, then it went to the screen where it asks me to connect phone, there is no way for me to make it visible int the app. I can see it in ADB (shows phone ID and sideload). But the Mi unlocker does not identify the device/cannot unlock it.
- Mi PC Suite also can't identify the phone.
Any ideas on what I'm missing? I keep seeing that some 10-12 days need to be waited since you get the phone and connect it to Xiaomi, but it's not clear why that is, nor where I can see this wait period.
This is my first Xiaomi phone/experience. Ideally I don't want to do anything too dangerous that could brick the phone. Just want a clean global version of MiUi (with OTA updates) and Google Play/Services.
Any clear guides are much appreciated.
Thank you.
www.reddit.com/r/Xiaomi
See the sidebar of that sub all the information is there .
Just to give you a brief , 360 hours is needed to unlock bootloader , globalrom is not available yet only xiaomi.eu ROM is . Also if you want to get Google services in Chinese ROM then inside MI app store application search for Google . The first application result install that and keep saying yes for everything you will get Google on China ROM
pntba said:
www.reddit.com/r/Xiaomi
See the sidebar of that sub all the information is there .
Just to give you a brief , 360 hours is needed to unlock bootloader , globalrom is not available yet only xiaomi.eu ROM is . Also if you want to get Google services in Chinese ROM then inside MI app store application search for Google . The first application result install that and keep saying yes for everything you will get Google on China ROM
Click to expand...
Click to collapse
Thank you very much for the response.
Do you know what the difference between Xiaomi.eu rom and global rom is? For the most part I want a stable rom that isn't bloated. Any other "extras" I would either do via Root and Magisk if I need to. Skins and various modifications don't really interest me.
I'll also check the sidebar on Reddit for more info.
LE: Is there any way to know how much I have left from those 360h of being locked? Or any way to see that this period is over once the time passes? I was a bit dumbfounded that I didn't get any error stating that I must wait 360 hours. I just read about it in various posts.
Hi,
I have the same problem with windows 10.. I tried all but the mi unlock do not verify the mi8.
After different days(of test) I try with windows 7 and all work well the first time ?
I hope this help you
ILoveSteamSales said:
Thank you very much for the response.
Do you know what the difference between Xiaomi.eu rom and global rom is? For the most part I want a stable rom that isn't bloated. Any other "extras" I would either do via Root and Magisk if I need to. Skins and various modifications don't really interest me.
I'll also check the sidebar on Reddit for more info.
LE: Is there any way to know how much I have left from those 360h of being locked? Or any way to see that this period is over once the time passes? I was a bit dumbfounded that I didn't get any error stating that I must wait 360 hours. I just read about it in various posts.
Click to expand...
Click to collapse
You can visit xiaomi.eu they have it listed the differences between their ROM and global . ROM is stable not an issue other than few minor .
Just read the sidebar and follow the steps listed you will find all the answers
onecryon said:
Hi,
I have the same problem with windows 10.. I tried all but the mi unlock do not verify the mi8.
After different days(of test) I try with windows 7 and all work well the first time
I hope this help you
Click to expand...
Click to collapse
Wow, that's good to know. Never thought it might be from the Windows version + driver compatibility.
I might just use Win 7 to test it out. I'll wait for the 360h to pass first.
How did you test with Win7? Fresh install or some Virtual Machine?
I have a different PC, one desktop with w10 and one laptop with w7
ILoveSteamSales said:
Wow, that's good to know. Never thought it might be from the Windows version + driver compatibility.
I might just use Win 7 to test it out. I'll wait for the 360h to pass first.
How did you test with Win7? Fresh install or some Virtual Machine?
Click to expand...
Click to collapse
You need to bind your MI account with your phone first . Have you done that ? Till the time you don't do that then even if you wait 1 year you won't be able to unlock bootloader
pntba said:
You need to bind your MI account with your phone first . Have you done that ? Till the time you don't do that then even if you wait 1 year you won't be able to unlock bootloader
Click to expand...
Click to collapse
I'm pretty sure I did It shows the account number next to the Mi Account option and if I enter it, I have the sign out option.
But I can't connect to network when I try to request unlock.
Also nothing via browser.
ILoveSteamSales said:
I'm pretty sure I did It shows the account number next to the Mi Account option and if I enter it, I have the sign out option.
But I can't connect to network when I try to request unlock.
Also nothing via browser.
Click to expand...
Click to collapse
Can't help you mate told you enough just read the sidebar . Good luck unlocking
Is the bootloader unlocking absolutely required to install the global rom?
joseph_s1lva2 said:
Is the bootloader unlocking absolutely required to install the global rom?
Click to expand...
Click to collapse
To install custom rom such as xiaomi.eu, yes.
For official roms, of course not.
_katho_ said:
To install custom rom such as xiaomi.eu, yes.
For official roms, of course not.
Click to expand...
Click to collapse
But the official global rom isn't out yet is it?
ILoveSteamSales said:
But the official global rom isn't out yet is it?
Click to expand...
Click to collapse
That's correct.

How do i proceed with Firmware Finder when i own a rebranded Honor 9?

Pretty straight forward question. My phone is rebranded as I bought it off Banggood. The box says STF-TL10, my settings say STF-LO9. What phone version do I choose in order to download the according firmware? Also, will this change my language settings or/and delete any files/settings from my phone? Could I mess this up? Haven't been active in flashing in a while. Any help would be greatly appreciated.
I'm not 100% on flashing a rebranded phone but i've read a few horror stories about failed flashing . Have you looked at https://4pda.ru/
I got some OTAs when i first bought it but it has been silent since july i think :/. Also i just checked the site and im not sure to what am i searching there
paste the link into google search and it can translate the site to whichever language you prefer
XperiaNoobie said:
Pretty straight forward question. My phone is rebranded as I bought it off Banggood. The box says STF-TL10, my settings say STF-LO9. What phone version do I choose in order to download the according firmware? Also, will this change my language settings or/and delete any files/settings from my phone? Could I mess this up? Haven't been active in flashing in a while. Any help would be greatly appreciated.
Click to expand...
Click to collapse
You use STF-L09 if your settings says so.
Does your settings state 6 GB ram ?
I'm in same case scenario with a STF-L09 which is in fact a STF-AL00 4GB/64GB.
Hicare can state your IMEI's are in huawei database a STF-TL10 but it does not matter for ota or anything else.
If you use FF to OTA with DNS or VPN, if it's still working, you'll have to use aproved firmware or it will just failed.
If your bootloader is already unlock download STF-L09 via FF and use HURUPDATER.
TL10 is better than ALx0
Ok so actually this happened. I tried to find an OTA through the OS without tampering with anything. After 3-4 refreshes a new update appeared around 3.2GB. I downloaded it and installed it and it worked pretty much how it should. The whole thing with the bootloader is another thing. Whenever I try to find my bootloader ID through apps it says unknown, I also missed the deadline when Huawei offered the bootloader codes, I tried the one that XDA offered got no response and now all that is left is DC phoenix or something related to that. Any tips?

[GUIDE] Xiaomi Redmi 9 Pro EEA (joyeuse) [Global] FRP Bypass and Reset [Android 10] [Miui 12] [Android 11] [Miui 12.5] [Software Testpoint]

Hello Fellows,
I've got a Redmi 9 Pro for Linux purposes, but the phone came with FRP triggered and of course, I couldn't get access to the sellers
account. I spare you the details, because I am sure, every one knows a story like that.
I checked xda and the web about guides for quite some time, and actually found a lot of them, but none of them worked. At the end I could combine
some of these guides to actually make it happened. I've created a little screen recording to show all the steps that worked for my device.
Yes you can actually install and open almost every apk even with a triggered FRP. Almost means, you can even enable the developer options, but
they don't show anything for that user.
Initial situation:
Xiaomi Redmi 9 Pro EEA (joyeuse)
Bootloader Locked
triggered FRP Lock
find my device - OFF
No MI-Account
Software Variant 1:
Firmware: MIUI V12.0.2.0.QJZEUXM Stable Official Update for Redmi Note 9 Pro EEA (joyeuse)
Android 10 - Miui 12
Android Security Patch Date: 2021-01-21
Software Variant 2:
Firmware: MIUI V12.5.8.0.RJZEUXM Stable Official Update for Redmi Note 9 Pro EEA (joyeuse)
Android 11 - Miui 12.5
Android Security Patch Date: 2022-03-01
FRP Bypass start conditions:
Wifi is connected
The basic idea and steps:
Get into System Settings via the Help & Feedback from Gmail to disable and stop certain apps.
Only for this is the wifi needed, if you type delete, the right help topic will show up
2x Android Setup
Carrier Dafault App
Google Play Services (must be disabled at the very last)
enable the Accessibility Suite to re-enable Google Play Services at the right moment
Continue the actually process to setup the phone, the procedure will stuck at "Just a sec..." "Checking for updates..."
now try to re-enable the Google Play Services, once this is done, the FRP Bypass will take place the next step
One important note, after enabling Google Play Services, its Storage and Cache must be deleted!
This is one of the main reasons why it didn't worked for me the first 100 times i tried.
It does go through though, but right at the moment the setup is finished, the FRP Lock gets triggered and
we are back at the beginning.
Enabling the Google Play Services can be annoying, because the screen is flashing/changing so fast, that the touch
will not be accepted right away. But there is plenty of time to try until it hits.
Finish the setup process until you see the home screen
Execute the factory reset over the settings menu and the FRP is gone for good
Optional, you can enable oem unlock before you factory reset the phone
With oem unlock enabled, the phone can't get FRP Lock on.
Spoiler: FRP Bypass and Reset Android 10 - Miui 12
Spoiler: FRP Bypass and Reset Android 11 - Miui 12.5
Regarding Bootloader Unlock, which es mandatory to install Linux (Ubuntu Touch) on this phone.
I couldn't found any free way to either unlock the bootloader without Mi-Account, or reboot the phone into EDL.
They are some Apps I tried so far:
Xiaomi Sideload Tool and ROM2box from Romprovider.com
But they need MIUI Recovery 5.0, and I only have MIUI Recovery 3.0
And don't want to upgrade, because Ubuntu Touch need Android 10
Does anybody have more information about that exploit these Sideload Apps are using?
I don't get how you can read data from and adb sideload connection, where you just can upload zip files
for updates
EDL from the famous Bjoern Kerler "bkerler" (MTK-Client)
For this tool the phone must be in EDL Mode, which I can't get into it
Does anybody know a way how to do that without Test Point? I tried so many ways, but none worked.
I even compiled fastboot and adb from AOSP, but the "old" ways like reboot-edl don't work.
My last hope is a USB-C V2 Cable/Dongle from Team Hydra.
Updates will follow...
[Update 1: 2023-04-25]
The FRP Bypass Procedure also works on Android 11 MIUI 12.5
[Update 2: 2023-04-25]
I've built the EDL Cable/Dongle, but it didn't work. I've bought the official
Hydra EDL Cable V2, exact same result, it also didn't work. Hydra refuses to give me a straight answer to this issue, even as a customer. The shop I've bought it
from, asked Hydra as well, with the feedback, this could be a SPD issue.
But still, they refuse to tell me, which SPD I need to get it working. At this
time I was on SPD 2021-01-21, and they published the EDL Cable Pinouts in Dec. 2022 [Latest Security]. So this was a very false promise from Hydra or rather mobilerdx, not sure who's to blame here, perhaps myself.
[Update 3: 2023-04-25]
I've wrote an ADB and Fastboot Sniffer for Windows. Which worked
pretty well, and I was able to get the ADB commands from the Xiaomi Sideload Tool. So the Exploit is basically, that you can perform ADB PULL and ADB PUSH while your in SIDELOAD Mode, that's it. And that it uses a built-in command to gather the partition structure while you are in the
normal ADB Mode.
With that knowledge now, I've also wrote a Bash pendant from the Xiaomi Sideload Tool -> Xiaomi SideLoad Terminal Tool (xsltt). Which inherits all its functions plus a bit more user comfort.
With this tool, I was able to delete my xloader, and the device now boots
straight into EDL Mode. Which is great, you can call this a Software Testpoint.
But, there is always a but, it seems that there is still no proper firehose file out there, that bypasses this annoying EDL authentication. And no, I will not even try to bypass that myself, this is way over my head.
So I would very much appriciate it, if someone can point me to a working firehose file that bypasses the EDL authentication for the Redmi Note 9 Pro (joyeuse).
I am facing the same problem, can not find the right firehose tool.
And all the apps that claim they have proper firehose file are all paid service.
since you have hydra tool, did they work for the edl? since they said they have the right firehose file.
ccaye said:
I am facing the same problem, can not find the right firehose tool.
And all the apps that claim they have proper firehose file are all paid service.
since you have hydra tool, did they work for the edl? since they said they have the right firehose file.
Click to expand...
Click to collapse
Haha, no they don't. They even recommended me the hydra dongle in their own telegram support channel. Now i have this dongle since a day, they say it is not supported in EDL Mode, only Sideload mode. And now i have to find someone who can fix the phone remotely with a auth service account. Isn't it great?
I'
newbit said:
Hello Fellows,
I've got a Redmi 9 Pro for Linux purposes, but the phone came with FRP triggered and of course, I couldn't get access to the sellers
account. I spare you the details, because I am sure, every one knows a story like that.
I checked xda and the web about guides for quite some time, and actually found a lot of them, but none of them worked. At the end I could combine
some of these guides to actually make it happened. I've created a little screen recording to show all the steps that worked for my device.
Yes you can actually install and open almost every apk even with a triggered FRP. Almost means, you can even enable the developer options, but
they don't show anything for that user.
Initial situation:
Xiaomi Redmi 9 Pro EEA (joyeuse)
Bootloader Locked
triggered FRP Lock
find my device - OFF
No MI-Account
Software Variant 1:
Firmware: MIUI V12.0.2.0.QJZEUXM Stable Official Update for Redmi Note 9 Pro EEA (joyeuse)
Android 10 - Miui 12
Android Security Patch Date: 2021-01-21
Software Variant 2:
Firmware: MIUI V12.5.8.0.RJZEUXM Stable Official Update for Redmi Note 9 Pro EEA (joyeuse)
Android 11 - Miui 12.5
Android Security Patch Date: 2022-03-01
FRP Bypass start conditions:
Wifi is connected
The basic idea and steps:
Get into System Settings via the Help & Feedback from Gmail to disable and stop certain apps.
Only for this is the wifi needed, if you type delete, the right help topic will show up
2x Android Setup
Carrier Dafault App
Google Play Services (must be disabled at the very last)
enable the Accessibility Suite to re-enable Google Play Services at the right moment
Continue the actually process to setup the phone, the procedure will stuck at "Just a sec..." "Checking for updates..."
now try to re-enable the Google Play Services, once this is done, the FRP Bypass will take place the next step
One important note, after enabling Google Play Services, its Storage and Cache must be deleted!
This is one of the main reasons why it didn't worked for me the first 100 times i tried.
It does go through though, but right at the moment the setup is finished, the FRP Lock gets triggered and
we are back at the beginning.
Enabling the Google Play Services can be annoying, because the screen is flashing/changing so fast, that the touch
will not be accepted right away. But there is plenty of time to try until it hits.
Finish the setup process until you see the home screen
Execute the factory reset over the settings menu and the FRP is gone for good
Optional, you can enable oem unlock before you factory reset the phone
With oem unlock enabled, the phone can't get FRP Lock on.
Spoiler: FRP Bypass and Reset Android 10 - Miui 12
Spoiler: FRP Bypass and Reset Android 11 - Miui 12.5
Regarding Bootloader Unlock, which es mandatory to install Linux (Ubuntu Touch) on this phone.
I couldn't found any free way to either unlock the bootloader without Mi-Account, or reboot the phone into EDL.
They are some Apps I tried so far:
Xiaomi Sideload Tool and ROM2box from Romprovider.com
But they need MIUI Recovery 5.0, and I only have MIUI Recovery 3.0
And don't want to upgrade, because Ubuntu Touch need Android 10
Does anybody have more information about that exploit these Sideload Apps are using?
I don't get how you can read data from and adb sideload connection, where you just can upload zip files
for updates
EDL from the famous Bjoern Kerler "bkerler" (MTK-Client)
For this tool the phone must be in EDL Mode, which I can't get into it
Does anybody know a way how to do that without Test Point? I tried so many ways, but none worked.
I even compiled fastboot and adb from AOSP, but the "old" ways like reboot-edl don't work.
My last hope is a USB-C V2 Cable/Dongle from Team Hydra.
Updates will follow...
[Update 1: 2023-04-25]
The FRP Bypass Procedure also works on Android 11 MIUI 12.5
[Update 2: 2023-04-25]
I've built the EDL Cable/Dongle, but it didn't work. I've bought the official
Hydra EDL Cable V2, exact same result, it also didn't work. Hydra refuses to give me a straight answer to this issue, even as a customer. The shop I've bought it
from, asked Hydra as well, with the feedback, this could be a SPD issue.
But still, they refuse to tell me, which SPD I need to get it working. At this
time I was on SPD 2021-01-21, and they published the EDL Cable Pinouts in Dec. 2022 [Latest Security]. So this was a very false promise from Hydra or rather mobilerdx, not sure who's to blame here, perhaps myself.
[Update 3: 2023-04-25]
I've wrote an ADB and Fastboot Sniffer for Windows. Which worked
pretty well, and I was able to get the ADB commands from the Xiaomi Sideload Tool. So the Exploit is basically, that you can perform ADB PULL and ADB PUSH while your in SIDELOAD Mode, that's it. And that it uses a built-in command to gather the partition structure while you are in the
normal ADB Mode.
With that knowledge now, I've also wrote a Bash pendant from the Xiaomi Sideload Tool -> Xiaomi SideLoad Terminal Tool (xsltt). Which inherits all its functions plus a bit more user comfort.
With this tool, I was able to delete my xloader, and the device now boots
straight into EDL Mode. Which is great, you can call this a Software Testpoint.
But, there is always a but, it seems that there is still no proper firehose file out there, that bypasses this annoying EDL authentication. And no, I will not even try to bypass that myself, this is way over my head.
So I would very much appriciate it, if someone can point me to a working firehose file that bypasses the EDL authentication for the Redmi Note 9 Pro (joyeuse).
Click to expand...
Click to collapse
I'm ready to fund for research cause. I will invest in the tool that I know which allows EDL authentication so that we can verify if it works with your device.
Please let me know so that together we can succed in fixing your phone.
mvikrant97 said:
I'
I'm ready to fund for research cause. I will invest in the tool that I know which allows EDL authentication so that we can verify if it works with your device.
Please let me know so that together we can succed in fixing your phone.
Click to expand...
Click to collapse
Thank you for your generous offer, I am not sure If I understand you right, plus I don't have the need
for charity. To be honest, I don't even have a clue, what to believe now. They all promise you honey
flowing in rivers, but can't really deliver.
They are tools called EMT and UAT Pro. Never heard about them before. But they claim they have
auth support for this model in EDL mode. UAT even offers a pure software solution for an affordable price.
If you are willing to fund your self, please try it out, and report back.
newbit said:
Thank you for your generous offer, I am not sure If I understand you right, plus I don't have the need
for charity. To be honest, I don't even have a clue, what to believe now. They all promise you honey
flowing in rivers, but can't really deliver.
They are tools called EMT and UAT Pro. Never heard about them before. But they claim they have
auth support for this model in EDL mode. UAT even offers a pure software solution for an affordable price.
If you are willing to fund your self, please try it out, and report back.
Click to expand...
Click to collapse
I won't be investing in those tools. Both EMT and UAT allow auth flashing however I know a tool called Xiaomi Pro tool which supports auth flashing and it works and the investment is pretty low so I can invest in that tool to help you out with auth flashing.
I cannot discuss any further as XDA does not allow that.
mvikrant97 said:
I won't be investing in those tools. Both EMT and UAT allow auth flashing however I know a tool called Xiaomi Pro tool which supports auth flashing and it works and the investment is pretty low so I can invest in that tool to help you out with auth flashing.
I cannot discuss any further as XDA does not allow that.
Click to expand...
Click to collapse
Yeah that's weird, I've read this a lot, never had any issues with XDA about that.
Anyways, I can't find any manufacture website to the Xiaomi Pro Tool, so I cannot compare.
I think 15 bucks for are 3 Months time period is much cheaper compared to the 110 I've paid
for this Hydra Dongle, which brings me zero yet. So please, write me a PM with a link to a shop.
Just a little Update.
Thank your @mvikrant97, Xiaomi Fire Tool did the trick. They don't unlock bootloader,
but flash firmware with EDL auth. And now my phone is back to life. Support was very good, in fact,
they were the only ones who responded at all. Very patience and polite as well. Plus, very affordable.
Once my phone is fully charged, battery was totally drained since it was in EDL Mode for weeks, I will see
what Hydra has to offer. Btw: They've banned me from their Support Channel, without any explanation.
I guess I asked the wrong questions, pitty.
newbit said:
Just a little Update.
Thank your @mvikrant97, Xiaomi Fire Tool did the trick. They don't unlock bootloader,
but flash firmware with EDL auth. And now my phone is back to life. Support was very good, in fact,
they were the only ones who responded at all. Very patience and polite as well. Plus, very affordable.
Once my phone is fully charged, battery was totally drained since it was in EDL Mode for weeks, I will see
what Hydra has to offer. Btw: They've banned me from their Support Channel, without any explanation.
I guess I asked the wrong questions, pitty.
Click to expand...
Click to collapse
I'm very happy to learn that your phone is fixed.
While the rest we can discuss in PM!

Categories

Resources