How i know is my htc desire hd is:
S-off
Eng off
thanks
"Checking the device state" instructions here:
http://forum.xda-developers.com/showpost.php?p=9525635&postcount=2
for first on .. it's OK
What about If it says ACE PVT ENG S-OFF, you have ENG S-OFF, go to System info
where i found it ?
thanks
In bootloader mode...
Sent from my HTC Desire HD using XDA App
Checking the device state:
- Go to the bootloader (turn fastboot off, turn off phone, hold vol- and power)
- If it says ACE PVT SHIP S-OFF in the first line, your device is Radio S-OFF
- If it says ACE PVT ENG S-OFF, you have ENG S-OFF, go to System info
- If system info CID is 11111111, your device is SuperCID
- And if you can verify either Radio S-OFF or SuperCID (and you did both), it worked fine and you have both of them
- You can check your original CID by going to radio tool folder with cmd and typing: "adb shell getprop ro.cid"
From: h**p://forum.xda-developers.com/showpost.php?p=9525635&postcount=2
Hi,
I have the following system configuration:
ACE PVT ship S-ON RL
HBOT-2.00.0027
RADIO -26.14.04.28_M
Android ver: 2.3.5
HTC Sense:3.0
SW ver: 3.13.161.3
carrier: Vodafone ES (Spain)
and I would like to root my terminal. I read that, first of all, I have to put in S-OFF mode and the only way to achieve it is using HTCDEV.com bootloader unlock
So, I followed the steps (without updating RUU as I saw I have the last SW version in RUU list) but when i'm going to generate the token, with
"fastboot oem get_identifier_token" it shows "(bootloader) [ERR] Command error !". ( I think the bootloader 2.00.0027 doesn't recognize option "get_identifier")
Should I download the "PD9810000_Ace_Sense30_S_hboot_2.00.0029.exe" from HTC Europe Carrier?
Has anybody tried to install this RUU with same configuration as mine?
Second question. If this RUU works, it performs a factory reset , isn't it? Are there any other alternatives in order not to wipe data?
And Third and last question. Which are the next steps I have to take to root my terminal?
Thx in advance.
You can unlock bootloader with Advanced Ace Hack Kit. First you need it's downgrade, then you will have have HBOOT 0.85 and then it's easy way to get S-OFF. All things will be done automatically by this application
Hi I have HTC Desire Z A7272 rooted with gfree, psneuter etc according to instructions on cyanogenmod wiki. Now I want to unroot my device, I've already succeed with OS return to stock by extracting zip from RUU exe. But now I have problem with S-ON flag and CID. My device wasn't branded by my operator. I fallowed instructions from this thread http://forum.xda-developers.com/wik..._gfree_to_get_radio_S-ON_and_the_original_CID and at the end I'm getting and I did everything in correct order but when I'm executing command /data/local/tmp/gfree -s on -c HTC__032 (my operator in Poland is PLAY)
at the end (when creating backup) error : Error opening backup file. So my CID is still 11111... and S-OFF is visible in my bootloader.
Please help.
is your phone in charge only mode? make sure it is.
gfree needs to be able to write to the sdcard to make the backup.
-Nipqer
I have just bought this phone, and i've rooted anothers, but i tried every guide, every tool (all of them no longer working), and not even HTCDev could help me.
On HTCDev's 1st step tells me to upgrade the RUU, and i tried with all versions, none worked out.
Some details of my Desire:
ACE PVT SHIP S-ON RL
HBOOT-2.00.0027
MICROP-0438
RADIO-26.14.52.27
eMMC-boot
Sep 7 2011,19:06:24
I can't find a guide to get my S-OFF, all of them fail. I tried too with VISIONary+ r14 and keep frozen on black screen when i attemp to temproot.
Followed this guide to get temporary root. Writing on cmd "adb shell" at last step I got "$" and cant do the downgrade. I have made my Goldcard too, but nothing works...
Please, tell me what should i do, i just want RADIO S-OFF and then i will be capable of root or whatever i like =). Thanks to all anyways.
S-Off takes a great deal of skill now that AAHK is retired. You can still unlock the bootloader though.
klaien said:
I have just bought this phone, and i've rooted anothers, but i tried every guide, every tool (all of them no longer working), and not even HTCDev could help me.
On HTCDev's 1st step tells me to upgrade the RUU, and i tried with all versions, none worked out.
Some details of my Desire:
ACE PVT SHIP S-ON RL
HBOOT-2.00.0027
MICROP-0438
RADIO-26.14.52.27
eMMC-boot
Sep 7 2011,19:06:24
I can't find a guide to get my S-OFF, all of them fail. I tried too with VISIONary+ r14 and keep frozen on black screen when i attemp to temproot.
Followed this guide to get temporary root. Writing on cmd "adb shell" at last step I got "$" and cant do the downgrade. I have made my Goldcard too, but nothing works...
Please, tell me what should i do, i just want RADIO S-OFF and then i will be capable of root or whatever i like =). Thanks to all anyways.
Click to expand...
Click to collapse
have you tried this as well?
http://forum.xda-developers.com/showthread.php?t=2168500
Mortal Eternity said:
have you tried this as well?
http://forum.xda-developers.com/showthread.php?t=2168500
Click to expand...
Click to collapse
Yes i tried it too, just the same. Bootloader dont give me the Unlock Token.
My Build v. is 3.13.161.5
Sense 3.0
Android 2.3.5
***********************************************
EASY UNLOCK BOOTLOADER TOOL
glevitan 2013
************************************************
This tool will help you to unlock / relock your bootloader
To succeed make sure:
1. HTC drivers are correctly installed
2. USB debugging is enabled
adb, fastboot, md5sum, wget other utilities will be installed
Checking adb connectivity....
-------------------------------------------
1. Unlock Bootloader
2. Relock Bootloader
3. Quit
-------------------------------------------
[What do you want to do]1
Detecting phone model
If your Device is an HTC Desire HD / Inspire 4G select yes to continue, if NOT j
ust quit. FLASHING THE WRONG PARTITION WILL BRICK YOUR DEVICE!!!
1. Yes
2. No
[Continue?]1
Getting Build version
your build version is 3.13.161.5
"""Your will reboot in fastboot again to continue the process
* server not running *
Obtaining Unlock Token
< waiting for device >
... INFO[ERR] Command error !!!
OKAY [ -0.000s]
finished. total time: -0.000s"""
klaien said:
Yes i tried it too, just the same. Bootloader dont give me the Unlock Token.
My Build v. is 3.13.161.5
Sense 3.0
Android 2.3.5
***********************************************
EASY UNLOCK BOOTLOADER TOOL
glevitan 2013
************************************************
This tool will help you to unlock / relock your bootloader
To succeed make sure:
1. HTC drivers are correctly installed
2. USB debugging is enabled
adb, fastboot, md5sum, wget other utilities will be installed
Checking adb connectivity....
-------------------------------------------
1. Unlock Bootloader
2. Relock Bootloader
3. Quit
-------------------------------------------
[What do you want to do]1
Detecting phone model
If your Device is an HTC Desire HD / Inspire 4G select yes to continue, if NOT j
ust quit. FLASHING THE WRONG PARTITION WILL BRICK YOUR DEVICE!!!
1. Yes
2. No
[Continue?]1
Getting Build version
your build version is 3.13.161.5
"""Your will reboot in fastboot again to continue the process
* server not running *
Obtaining Unlock Token
< waiting for device >
... INFO[ERR] Command error !!!
OKAY [ -0.000s]
finished. total time: -0.000s"""
Click to expand...
Click to collapse
What hboot version are you running? Check in fastboot usb
glevitan said:
What hboot version are you running? Check in fastboot usb
Click to expand...
Click to collapse
HBoot 2.00.0027
klaien said:
HBoot 2.00.0027
Click to expand...
Click to collapse
You need to update your hboot first to 2.00.0029
Sent from my Desire HD
yumm91 said:
You need to update your hboot first to 2.00.0029
Sent from my Desire HD
Click to expand...
Click to collapse
Done, I have unlocked bootloader succesfully =), thanks.
Now I need to downgrade from my 3.13.161.5 right? Any ideas?
klaien said:
Done, I have unlocked bootloader succesfully =), thanks.
Now I need to downgrade from my 3.0 right? Any ideas?
Click to expand...
Click to collapse
The answer is already above you from Mortal Eternity.
http://forum.xda-developers.com/showthread.php?t=2168500
As you can see in that post, you have already done no 1. Just proceed according to the steps mentioned to gain root.
Sent from my Desire HD
Root, Radio S-OFF, SuperCID, SIMUnlock for DHD
At last i got root, S-OFF SIM-Unlock and SuperCID
Just for DHD devices with Android 2.3.5, Sense 3.0, and Build version 3.x!!
Step by step:
0.- (ON YOUR PHONE) "Settings option -> Applications -> Development -> Check the box for USB Debugging to turn it on
1.- Upgrade HBOOT to 2.00.0029
- Download the HBOOTupdate 2.00.0029 (rom.zip) and put it on your C:/ drive.- Download the HBOOTUpdate kit, extract it, and run "hboot update by behtash.bat". Wait until hboot flash complete.
2.- Unlock your BootLoader
- Simple as following HTCDEV steps
3.- Flash CWM Recovery
- Download the Recovery Kit, extract it.- Download the SU flashable.- Put the SU flashable on your SDCard- "Only Charge" mode again and run "flash recovery.bat". Wait for it flash the recovery.- Reboot your phone to Bootloader Screen, go to the recovery and flash now the SU.--------------------------------------------------------------------------------------------------------------------------------------------------------
Once here you gained root access, the next steps are to get S-OFF, SuperCID, and SIMUnlock.
--------------------------------------------------------------------------------------------------------------------------------------------------------
4.- Flash a new Boot.img
- Download the UpdateBoot Kit, extract it- Run the "flash boot.bat".
5.- Get S-OFF, SuperCID, and SIM Unlock
- Follow the high-level DHD/Inspire manual S-OFF hack concept for advanced users.
All this stuff is a compilation of multiples guides, thanks to all for the support. Good luck with your DHD.
Or you could just head to this thread : http://forum.xda-developers.com/showthread.php?t=2184953 and do all of the above.
hacktrix2006 said:
Or you could just head to this thread : http://forum.xda-developers.com/showthread.php?t=2184953 and do all of the above.
Click to expand...
Click to collapse
Sure =), but that tuto was to compile all the guides in one. Thx for the link anyway.
I tired the steps above, but it still keeps going back to 2.00.0027, it refuses to update to 2.00.0029 help?
cre8ive65 said:
I tired the steps above, but it still keeps going back to 2.00.0027, it refuses to update to 2.00.0029 help?
Click to expand...
Click to collapse
Post some details about your phone please.
example:
ACE PVT SHIP S-ON RL
HBOOT-2.00.0027
MICROP-0438
RADIO-26.14.52.27
eMMC-boot
Sep 7 2011,19:06:24
successfull flashed...and now on ease....
klaien said:
Post some details about your phone please.
example:
ACE PVT SHIP S-ON RL
HBOOT-2.00.0027
MICROP-0438
RADIO-26.14.52.27
eMMC-boot
Sep 7 2011,19:06:24
Click to expand...
Click to collapse
If you're nearby, call out. I can lend a hand.
ACE PVT SHIP S-ON RL
HBOOT-2.00.0027
MICROP-0438
RADIO-26.14.04.28_M
eMMC-boot
My issue is that i can't get the identifier token, because I can't update to 2.00.009, because I can't make a gold card.
cre8ive65 said:
ACE PVT SHIP S-ON RL
HBOOT-2.00.0027
MICROP-0438
RADIO-26.14.04.28_M
eMMC-boot
My issue is that i can't get the identifier token, because I can't update to 2.00.009, because I can't make a gold card.
Click to expand...
Click to collapse
Why not?
glevitan said:
Why not?
Click to expand...
Click to collapse
I'm about to pull my hair out, this is so effing stupid. I keep getting stuck at step 1! I have a goldcard and it still wont update to 2.00.0029! I run the update tool, then when I go to fastboot it still says "2.00.0027" at the top. What am I doing wrong?
Read carefully : the unlockable bootloader update would seam to be region specific to make and model of phone, there are about 4 or 5 different versions on the htcdev website, please check the correct model and region of phone first...
Here's an idea try the PD98IMG.ZIP in this post, http://forum.xda-developers.com/showthread.php?p=40498764 it is the hboot 2.0.29 update you use via direct bootloader flashing.
Read the whole thread, it should help.... http://forum.xda-developers.com/showthread.php?t=2239497
You could also read this thread too.
http://forum.xda-developers.com/showthread.php?t=2221039
They are all good.
Sent from my HTC Desire HD using xda app-developers app
Hello,
I've encountered one stop point in my way to Jelly Bean. I'm playing with Desire HD, Android 2.3.5, HBOOT-2.00.0027. I've managed to get root by SuperOneClick, but I'm not able to flash the recovery. While I have root privs, I've downloaded "recovery-clockwork-touch-5.8.1.5-ace.img" and put it do sdcard as "recovery.img". Then I've tried to boot to hboot and through the fastboot run the following command:
fastboot flash recovery recovery.img
sending 'recovery' (3554 KB)...
OKAY [ 0.610s]
writing 'recovery'...
(bootloader) signature checking...
FAILED (remote: signature verify fail)
finished. total time: 1.220s
As you can see without success. Second try was updating the recovery partition with shell root privs through adb shell:
dd if=/sdcard/recovery.img of=/dev/block/mmcblk0p21
# dd if=/sdcard/recovery.img of=/dev/block/mmcblk0p21
dd if=/sdcard/recovery.img of=/dev/block/mmcblk0p21
7108+0 records in
7108+0 records out
3639296 bytes transferred in 2.905 secs (1252769 bytes/sec)
I've got no error, but partition wasn't updated. It still contains the same data as I wouldn't run dd command at all. Is the partition in some kind of read only mode or ? I don't understand how it it possible. I thought that with the root I can do everything.
Is there any other way how I can move image data to recovery partition with the dd?
Are you S-Off or is your bootloader unlocked? If you don't know, paste the contents of hboot here.
The bootloader is locked with security on. Doesn't it matter actually? I thought that if you havethe root privileges, you can flash custom recovery with no problems. Apparently not.
I prefer not to use the htcdev unlocker. So what to do?
Root is software; it has nothing to do with flashing to hardware partitions. You flashed root somehow; did you unlock and then relock your bootloader? How did you root? At this point the best S-Off tool is retired. Unless you want to doc it manually, you need to unlock the bootloader with HTCDEV.
bananagranola said:
Root is software; it has nothing to do with flashing to hardware partitions. You flashed root somehow; did you unlock and then relock your bootloader? How did you root? At this point the best S-Off tool is retired. Unless you want to doc it manually, you need to unlock the bootloader with HTCDEV.
Click to expand...
Click to collapse
I know linux a little bit. Simply as I have written already I've got the root by running SuperOneClick application. Not sure what exploit it uses (perhaps ZergRush).
>did you unlock and then relock your bootloader?
No. As I said, I thought that I can simply move data to eMMC partition while I'm root by dd command. I dunno why I need to unlock and lock the bootloader again.
>How did you root?
Run the SuperOneClick application and clicked the "Shell root" button, then connect to phone through the adb connection, wrote "adb shell" and voila got "#".
>At this point the best S-Off tool is retired. Unless you want to doc it manually, you need to unlock the bootloader with HTCDEV.
Mmm, could tell me how the bootloader blocks the "dd" command from rewriting data on the eMMC partitions?
Can I download the S-Off tool somewhere, or unlock bootloader somehow else, why the root privileges are not enough here?
I'd like to know more about that.
I don't know anything about SuperOneClick. If it S-Offs your phone you should be fine just fastboot flashing a recovery. Can I see what your hboot says? If your phone in fastboot mode?
It helps that you know Linux. The closest Linux analogy is UEFI v. su rights. Root gives the ROM partition su rights in software. However, the bootloader won't let you flash other stuff to the partitions in hardware. They're separate issues.
EDIT: I just reread your OP. You need to have the recovery.img on your computer, not your phone. Then run fastboot from the folder where that recovery.img is saved.
SuperOneClick is here: http://forum.xda-developers.com/showthread.php?t=803682
Bootloader:
ACE PVT SHIP S-ON RL
HBOOT-2.00.0027
etc...
Er, you are S-On and your bootloader is locked. Are you sure you have root?
SuperOneClick does nothing for HTC devices, AFAIK its simply designed for root and go Motorola and LG phones... same applies for Gingerbreak v1.20 or 1.5...i cant remember if its 1.2 or 1.5.... S-off is hard to obtain now that AAHK is retired, but there are advanced instructions on the developer of AAHK on his/her webpage
Sent from my Inspire 4G using xda premium
> Er, you are S-On and your bootloader is locked. Are you sure you have root?
Well, I have written already that I have security on and my bootloader is locked.
> SuperOneClick does nothing for HTC devices
why I got shell root with it then?
As I understand the issues:
Root - 'root' is linux super user that has all the privileges, if you are the root you are not limited by OS to do everything you want.
Bootloader lock - you can't flash custom ROMs in the fastboot mode, probably because of the fact that the custom ROM or the custom recovery are not signed
- what does it mean actually that the bootloader is unlocked? That it is rewrited by hacked version of bootloader where sign check is jumped? or I am wrong...
S-ON - hardware lock, probably you can't write to partitions ???
- probably that eMMC is set to be in read only mode by registry settings directly in eMMC chip? Am I right? And it is done in every boot when hw is initialized
As I said, I've got root privileges, so I am root in the Android and I can read from and write to everything in the Android. I've got it by some exploit (ZergRush / Gingerbreak). I'm not sure because it was set to "Auto" in the SuperOneclick app.
My situation:
Ok, I am able to obtain root privileges and I can rewrite eMMC partitions, but it has no effect probably because of S-ON (not sure here, nobody wants to tell me ).
I can't flash recovery through fastboot, probably because clockworkmod recovery is not signed by HTC.
As I understand, I can only follow the AAHK. It means downgrade to lower Android version where it is to possible get S-OFF and then it is possible to get root and rewrite eMMC.
I thought that obtaining the root is enough to rewrite the eMMC without S-OFF and/or unlocked bootloader, simply by rewriting block device in Linux.
AAHK is retired, but you can unlock your bootloader.
Ok.
I used AAHK to downgrade, S-OFF and root. Currently I'm running JellyTime 4.2...