Locking bootloader after decrypt - Nexus 5X Q&A, Help & Troubleshooting

Is it safe to lock the bootloader after data decryption?
I'm all stock except noforce-encryption kernel

Relocking the bootloader will wipe your phone.
You can skin the bootloader to "remove" the message on boot if that is annoying you.

Related

Question on boot.img

I have installed TWRP RC1 on my Verizon XL with unlocked bootloader.
When I re-flash back to stock using flash-all.bat, the stock recovery is not present anymore. I can put TWRP back on there if I choose, but if I re-flash boot.img (which I assume puts the stock recovery back), will that re-lock my bootloader, and then locking me out from root from then on?
Is there a way to put the stock recovery back without locking the bootloader? Thanks.
@Drashnar,
It's highly unusual for stock recovery not to be installed after flashing the flash-all. Stock recovery is included in the boot image. When you are in bootloader, if you select "Recovery" do you see Andy on his back? If so, at this screen hold the power button and briefly touch +volume. Voila, you're in stock recovery.
Your bootloader will not be relocked unless you specifically issue the fastboot command to relock it.
Once the bootloader is unlocked only you can relock it. Flashing ota's wont do it so your good going forward.
Sent from my Pixel XL using Tapatalk
cam30era said:
@Drashnar,
It's highly unusual for stock recovery not to be installed after flashing the flash-all. Stock recovery is included in the boot image. When you are in bootloader, if you select "Recovery" do you see Andy on his back? If so, at this screen hold the power button and briefly touch +volume. Voila, you're in stock recovery.
Your bootloader will not be relocked unless you specifically issue the fastboot command to relock it.
Click to expand...
Click to collapse
Oh. That's like no recovery I've ever seen then. I do get a small Andy on his back with "No command" below. I assumed (wrongly, it seems) that meant there was an issue getting stock recovery back. Thanks for the info.

Experience os 43 to completely stock

I'm on Experience OS 43 (OB) i wanted to go back to stock completely and lock the bootloader. If I do following can I completely go back to stock ?
Copy OB/OOS zip file to internal storage
Flash stock recovery (fastboot)
Clean Flash OOS from recovery
Setup the device
Lock bootloader
werty733 said:
I'm on Experience OS 43 (OB) i wanted to go back to stock completely and lock the bootloader. If I do following can I completely go back to stock ?
Copy OB/OOS zip file to internal storage
Flash stock recovery (fastboot)
Clean Flash OOS from recovery
Setup the device
Lock bootloader
Click to expand...
Click to collapse
First thing.. Never lock the bootloader. Unlocked bootloader comes bearing gifts. Eg: if you somehow face issues you can use unlocked bootloader to flash twrp to recover at least data.
Take a complete backup if all your data, internal storage , System partion just in case.
Now if you want to go back to stock, first flash twrp(if you dont have) , wipe data/cache/dalvik partition complete.
Donot wipe internal storage for now.
Now goto bootloader, flash stock recovery based on your OS version.
Now reboot to recovey.
Now flash stock OOS.
Now wipe everything if you donot want internal storafe data.
If you want it, try to boot. If everything goes good, its fine. Else. You have a encrypted internal storage and you have to wipe everything with stock recovey
Never lock bootloader if you unlocked it already.
Never lock bootloader if you unlocked it.already.
Never lock bootloader if you unlocked it already

Please i need urgent help

Yesterday i tried to flash rr custom rom on my honor 7x i wiped system cache divlk etc and tap on reboot recovery but after reboot it stucked on twrp opening screen i tried to get to fastboot mode and there my frp is locked i have seen some threads and relocked my bootloader now my bootlpader is locked and frp is also locked and on emui recovery please help me

How to resore full stock and lock bootloader?

Hi, i want to restore my device to fuull stock and lock the bootloader. How can I do it?
Turns out Miflash and fastboot oem lock are my only options, Have a nice day
Yep. Flash fastboot ROM using MiFlash and select clean all and lock option

Help needed in understanding bootloader.

So, I had an unlocked BL, rooted phone, with TWRP 3.3.1 deestroy.
For some reason, I booted into my recovery, wiped all my data, through format and advanced wipe feature. I even changed slots (just to make sure) and formatted data, and advanced wipe.
I then locked my bootloader, through adb fastboot command. Rebooted my phone, which had nothing to boot to. Then I unlocked my bootloader, rebooted my phone again, and it got booted into TWRP 3.3.1
Now my understanding is, unlocking bootloader, and using formatting options from TWRP should have wiped my data completely.
Then why did my phone boot into TWRP 3.3.1 after I unlocked the BL?
This might be helpful for you:
https://github.com/tkchn/daisyinstall
Lol. I didn't ask for how to flash a custom ROM.
Just need help understanding how the bootloader works? Where does TWRP get installed? Why after wiping did TWRP survive?
shazee666 said:
Now my understanding is, unlocking bootloader, and using formatting options from TWRP should have wiped my data completely.
Then why did my phone boot into TWRP 3.3.1 after I unlocked the BL?
Click to expand...
Click to collapse
Different things live on different partitions.
TWRP does not live on the userdata partition so wiping data cannot remove TWRP.
You need to use fastboot or miflash to do a full flash and restore a phone to stock.
Okay. This cleared somethings...
If you have tampered with the phone's partitions (TWRP patches itself into boot.img) you should never lock the Bootloader. Basically when the Bootloader is locked, the phone checks all the partitions of the phone if they've been tampered or still the same as Xiaomi designed it. In the case that they've been tampered, the phone won't boot itself, this helps with a lot of security issues. Never lock your Bootloader if you've made changes to the system, boot or other partitions (except userdata, this is why enabling cam2api and locking the BL won't mess up your device because the persist command stores the command in data partition). If you want to lock the BL, just flash the stock rom beforehand. Cheers.

Categories

Resources