Q&A for FireTV Full Bootloader Unlock
Some developers prefer that questions remain separate from their main development thread to help keep things organized. Placing your question within this thread will increase its chances of being answered by a member of the community or by the developer.
Before posting, please use the forum search and read through the discussion thread for FireTV Full Bootloader Unlock. If you can't find an answer, post it here, being sure to give as much information as possible (firmware version, steps to reproduce, logcat if available) so that you can get help.
Thanks for understanding and for helping to keep XDA neat and tidy!
Worked perfectly for me. Just wanted to say thanks!
Stuck at CHMOD step...
I've rooted my Fire TV, but when I try to unlock the bootloader I can't get past the step:
chmod 755 /data/local/tmp/aftv-full-unlock
I've tried on both OSX and Windows. It tell me that "No such file or directory". I know that the file is on the FireTv, bc when I issue a Pull command through adbFire, it gives a list of files in that directory on the Fire TV, and aftv-full-unlock is one of them.
I do have BusyBox installed and I granted permission in SuperSU
My version is 51.1.0.1_user_510055620
What am I missing here...?
RuffRhyno said:
I've rooted my Fire TV, but when I try to unlock the bootloader I can't get past the step:
chmod 755 /data/local/tmp/aftv-full-unlock
I've tried on both OSX and Windows. It tell me that "No such file or directory". I know that the file is on the FireTv, bc when I issue a Pull command through adbFire, it gives a list of files in that directory on the Fire TV, and aftv-full-unlock is one of them.
I do have BusyBox installed and I granted permission in SuperSU
My version is 51.1.0.1_user_510055620
What am I missing here...?
Click to expand...
Click to collapse
I don't know your level of experience so I'm going back to basics.
You mentioned that you tried in Windows and OSX.
Where exactly are you issuing the command?
Are you in the adb shell?
Did you type 'adb shell' after pushing the file to the FTV?
After full unlocking of boot loader and using an ssh server on the firetv, when I connect I am stuck with a root prompt. is there a way to step down the shell to manage package installations. for some reason "pm" command is not functioning correctly with root. I wish to use this for remote administration, I suppose, using the commands "start adbd" and "stop adbd" from within an ssh term session and then connecting to adb port might suffice but I would prefer to keep adb service stopped since it is not password protected. campuses are always full of prowlers and pranksters at all times. thanks
Hey Guys,
I have followed all steps and rebooted my FireTV using "adb reboot bootloader". The FireTV did reboot on command and has stopped on the white Amazon logo. I then unplugged the usb A to A cable and rebooted the device via hard reset. The FireTV did start up normally upon plugging the device back in the AC adapter.
My main concern is if I did in fact fully unlock the bootloader. After rebooting the FireTV there was no other information on the command prompt after running the command "adb reboot bootloader" so this is why I question it. I did enter command "adb shell" which then gives me "[email protected]".
Just a noob (I know you heard that before) looking for reassurance. Thank you in advance. You all do amazing work!
mozzer27 said:
Hey Guys,
I have followed all steps and rebooted my FireTV using "adb reboot bootloader". The FireTV did reboot on command and has stopped on the white Amazon logo. I then unplugged the usb A to A cable and rebooted the device via hard reset. The FireTV did start up normally upon plugging the device back in the AC adapter.
My main concern is if I did in fact fully unlock the bootloader. After rebooting the FireTV there was no other information on the command prompt after running the command "adb reboot bootloader" so this is why I question it. I did enter command "adb shell" which then gives me "[email protected]".
Just a noob (I know you heard that before) looking for reassurance. Thank you in advance. You all do amazing work!
Click to expand...
Click to collapse
That is normal and yes your root is fully unlocked if you get [email protected] when adb shell command is being sent.
Could this be used on the fire TV stick? version 54.1.0.2_user_102018720?
I still have a sealed german fire tv, which came with 51.1.3.0_user_513010720, for which no software root is known.
After having studied the unlock-code at the original Fire HDX thread and the modified tool for the Fire TV I wonder if the following might be possible.
From the hdx thread the first steps:
Code:
adb shell
cat /sys/block/mmcblk0/device/manfid
cat /sys/block/mmcblk0/device/serial
create a file unlock.img with following content:
0xmmssssssss
where mm=manfid and ss=serial
encrypt it with my vortox fork of signing tool at
https://github.com/dpeddi/Cuber
./cuber_unlockbl --sign ./unlock.img ./unlock.signed
This seems identical, what the routine at https:// github.com/androidrbox/aftv-full-unlock/blob/master/jni/aftv-full-unlock.c does.
rbox said:
For now, this requires root. Apparently, the IDs that are required for this can be gotten through fastboot, so if someone can figure that out, then brand new Fire TVs with 51.1.0.2 or older can be unlocked and have recovery installed before booting the first time.
Click to expand...
Click to collapse
For what exactly is root necessary? You can get the manfid and serial without root.
The fire-tv-tool then base64 encodes the signed result from cuber.
Code:
snprintf(idme_cmd, sizeof(idme_cmd), "idme unlock_code %s\n", bptr->data);
system(idme_cmd);
That should be also possible without uid 0.
Before I brick my fire tv. I wondered if someone could shed some light, if I might succeed trying
a) using cuber manually to sign the unlock data, base64-encode it and unlock my bootloader with idme unlock
b) using cuber manually to sign the unlock data and use ./fastboot flash unlock unlock.signed like it is possible with the Fire HDX-devices.
After that I could fastboot boot twrp and finally get root and downgrade. Possible or did I miss something?
The bootloader on your fire tv is not vulnerable to this exploit so it is not going to work. That is the reason "Fire TVs with 51.1.0.2 or older" is stated.
adb after full-unlock-bootloader
Can someone please help me? AFTER installing unlocked bootloader, when connected to fire tv via adb, I no longer get a pop up window for Superuser request: Adb on the fire tv. I need to know if that is normal and if ADB automatically gets SuperSu rights?
PS: Adb still works fine just no popup asking me for Superuser request or a pop up saying saying Adb has been granted permission. Thanks
Hey guys I was able to install latest recovery on 8520, my ? is, when I go to check unlock status I still get [email protected], I thought you couldnt install recovery if loader was locked, and am I safe to install boot menu
goodbye hppalm said:
Hey guys I was able to install latest recovery on 8520, my ? is, when I go to check unlock status I still get [email protected], I thought you couldnt install recovery if loader was locked, and am I safe to install boot menu
Click to expand...
Click to collapse
You most probably have a partial not a full unlock bootloader, that is why. CWM only needed a partial bootloader and so is boot menu however go ahead a fully unlock it, will help you later if for some reason box gets bricked.
Ty bula for comments, I think I screwed my firetv, by the thread it said if u have recovery working everything should be fine, I tried the boot menu, now stuck on white logo and no response, is it hard bricked now
Downgrading AFTV using a Mac
PLEASE HELP!
Has there been any update to AFTVnews posting titled "How to manually upgrade or downgrade the amazon fire tv". The instructions are old (June 2014)and don't seem to work. I've searched the internet and can't seem to find any way to downgrade AFTV before unlocking the bootloader.
Also, I can't find anything detailing how to use adbfire in order to downgrade AFTV.
In addition, I found information on how to downgrade AFTV firmware, but nothing for Mac users.
Your help would be greatly appreciated!!
i used the guides on aftvnews.com to unlock the bootloader on my original firetv. they worked great and I was using a mac
I'm running Pre-rooted 51.1.4.0_user514006420 and I'm fairly certain I need to update my Clockwork which is why i'm trying to follow the unlock guide online to fully unlock from following instructions.
However I hit a dead wall when just getting the process going. I've been stuck here long ago and I'm not revisiting this same issue once again.
When running the command.
Code:
[email protected]:/ adb push aftv-full-unlock /data/local/tmp/
My return is
Code:
adb push aftv-full-unlock /data/local/tmp/
cannot stat 'aftv-full-unlock' : No such file or directory
1|[email protected]:/ $
I have the file in the adb directory as instructed.
I really hope someone has some insight. I can't go beyond this version unless figured out to maintain root and when getting to this current firmware I'm on my FireTV doesn't ever sleep anymore.
Thanks!
May I suggest using this utility to automate the procedure?
http://forum.xda-developers.com/showthread.php?t=2736774
is this for aftv2 also???
i'm rooted at 5.2.1 r2 . twrp 3.0.0 recovery . disabled all updates app and blocked address in router setting.
if yes i should downgrade to 5.0.5.1?
thanx
htchd2fix said:
is this for aftv2 also???
i'm rooted at 5.2.1 r2 . twrp 3.0.0 recovery . disabled all updates app and blocked address in router setting.
if yes i should downgrade to 5.0.5.1?
thanx
Click to expand...
Click to collapse
No
OK so I installed the system update recently. I already had Kodi all set up on my Fire stick. When the RC1 update was released I set about updating Kodi.
I followed the guide here:
http://www.tweaking4all.com/home-theatre/xbmc/kodi-on-amazon-fire-tv/
Eventually I got adbfire to connect (had to turn adb debugging on and off first though). I pushed the Kodi RC1 apk over as advised on the guide (near the bottom). However when I open ADB Shell and attempt to install using
adb install -r kodi.apk
I get an error saying the device is offline. It mentions emulator-5554. I'm at a loss what to do to solve this. I'm half tempted to try install the Kodi.apk using Total Commander but am unsure whether all my Kodi addons and settings will be retained.
Any advice please before I go and possibly make things worse!?!?! Thanks!
Hi, do you guys know if it's possible to bypass amazon account login screen on a blacklisted fire tv stick?
I've managed to skip the update screen using Fire Tv Remote app but now it's stucked asking to login to an amazon account, but it fails when I try.
There is a way to maybe install a custom rom on this stick to make it usable?
Goku.95 said:
Hi, do you guys know if it's possible to bypass amazon account login screen on a blacklisted fire tv stick?
I've managed to skip the update screen using Fire Tv Remote app but now it's stucked asking to login to an amazon account, but it fails when I try.
There is a way to maybe install a custom rom on this stick to make it usable?
Click to expand...
Click to collapse
Unlock it first, then disable obbe and install custom launcher.
https://forum.xda-developers.com/fir...antis-t3978459
After rooting do the following
From recovery shell
adb push ~/.android/adbkey.pub /data/misc/adb/adb_keys
adb shell settings put secure install_non_market_apps 1
adb shell settings put global adb_enabled 1
adb shell settings put global setup_wizard_has_run 1
adb shell settings put secure user_setup_complete 1
adb shell settings put global device_provisioned 1
pm disable com.amazon.tv.oobe
adb install anyTVLauncher.apk
ranjeet choudhary said:
Unlock it first, then disable obbe and install custom launcher.
https://forum.xda-developers.com/fir...antis-t3978459
After rooting do the following
From recovery shell
adb push ~/.android/adbkey.pub /data/misc/adb/adb_keys
adb shell settings put secure install_non_market_apps 1
adb shell settings put global adb_enabled 1
adb shell settings put global setup_wizard_has_run 1
adb shell settings put secure user_setup_complete 1
adb shell settings put global device_provisioned 1
pm disable com.amazon.tv.oobe
adb install anyTVLauncher.apk
Click to expand...
Click to collapse
Thanks for reply. This guide you linked is for unlocking the 4K version of the stick, mine is the 1st gen. I've take it apart and took a photo of the board. I see some difference between my board and the one present in the guide.
Can I use that guide to unlock my 1st gen stick?
https://imgur.com/0c02HFU
Goku.95 said:
Thanks for reply. This guide you linked is for unlocking the 4K version of the stick, mine is the 1st gen. I've take it apart and took a photo of the board. I see some difference between my board and the one present in the guide.
Can I use that guide to unlock my 1st gen stick?
https://imgur.com/0c02HFU
Click to expand...
Click to collapse
No, you can't.
But your picture shows a 'tank' device (i.e. the 2gen stick), not the old 1gen montoya stick...
You can use that guide to root/unlock it. :good:
Hi All,
First, i'd like to thank you all in advance for your help.
I have Gen 1 FIre TV that was working fine, so i thought i'd update the firmware to latest using rbox prerooted image. I was running bueller-5.2.6.7-rooted_r1 but YouTube wasn't working. So i downloaded the latest and just adb pushed into the box. Then i issued adb reboot command, and somehow the box bricked.
Now No Power Light, No HDMI signals, when i connect with Computer, it shows as Qualcomm hs-usb qdloader 9006 fire and opens the drive with files in it.
I did some research and came across, that i need to manually dd=if all 8 partitions and i need to have linux installed. I managed to download a firmware update-kindle-bueller-51.6.3.2_user_632552020 extracted it all.
Question - Can i use the update-kindle-bueller-51.6.3.2_user_632552020 to dd=if?
Second, can someone please confirm the partition layout or provide commands to view the layout.
Or Perhaps guide me to a direction which i can follow to fix this.
Thank you,
I bricked my FireTV twice and just resurrected it with the expert/relentless help from "Sus_i" using rbox's https://forum.xda-developers.com/showpost.php?p=66961740&postcount=676.
I read thru page 55 to 110 of rbox's thread https://forum.xda-developers.com/fire-tv/development/prerooted-stock-images-t2882337 and those with unlocked bootloader and have an "Image" folder with a bunch of files inside the FireTV are most likely to bring their FireTV back but losing the unlocked bootloader in the process (mine included). https://forum.xda-developers.com/fire-tv/help/firetv-1-gen-rooted-running-pre-rooted-t4035609/page6
1st gen FireTV is built tough, don't give up and all the best to you.
Question - Can i use the update-kindle-bueller-51.6.3.2_user_632552020 to dd=if?
I used this one "update-kindle-bueller-51.6.4.8_user_648594820.bin" credit to "Sus_i"
https://d1s31zyz7dcc2d.cloudfront.n...te-kindle-bueller-51.6.4.8_user_648594820.bin
@Matt_7 when I connect to Linux box, I'm terminal
Do I just issue dd=if NON-HLOS.bin of=/dev/sda3
Or do I need to do additional commands to make sure it is connected like adb stuff.
And thank you very much for replying
nycelitemaster said:
@Matt_7 when I connect to Linux box, I'm terminal
Do I just issue dd=if NON-HLOS.bin of=/dev/sda3
Or do I need to do additional commands to make sure it is connected like adb stuff.
And thank you very much for replying
Click to expand...
Click to collapse
For mine, I entered:
Sudo su
dd if=NON-HLOS.bin of=/dev/sdb3
dd if=sbl1.mbn of=/dev/sdb4
dd if=sbl2.mbn of=/dev/sdb5
dd if=sbl3.mbn of=/dev/sdb6
dd if=tz.mbn of=/dev/sdb7
dd if=rpm.mbn of=/dev/sdb8
dd if=emmc_appsboot.mbn of=/dev/sdb9
dd if=boot.img of=/dev/sdb10
sudo eject /dev/sdb
Make sure you read rbox post https://forum.xda-developers.com/showpost.php?p=66961740&postcount=676 regarding the correct partitions (in my case /dev/sdb (sdb1 to sdb20). Details instructions provided by "Sus_i" here https://forum.xda-developers.com/fire-tv/help/firetv-1-gen-rooted-running-pre-rooted-t4035609/page5, just make sure to check and double check which partition is OK to ignore (if mounted).
Thank you very much. I'll try today.
@Matt_7; thank you so much. I used the Ubuntu Live USB.
Sudo SU did not work, so i used sudo bash which did the job
When i did df -h, it showed my fire tv as sdc1
then i ejected those, and did the commands, it did not work.
I replugged them, some drives populated and i ran the commands it worked
At the end, i issued command eject /dev/sdc, it didn't work, but i ejected by right clicking, then i powered the fire tv box and it booted.
Luckily it showed TWRP as recovery.
I ran the command in adb
C:\Program Files (x86)\Minimal ADB and Fastboot>adb shell
SU prompted on fire tv to accept, which i did then it showed
C:\Program Files (x86)\Minimal ADB and Fastboot>adb shell
[email protected]:/ $ su
[email protected]:/ # cat /proc/cmdline
androidboot.hardware=qcom user_debug=22 msm_rtb.filter=0x3F ehci-hcd.park=3 maxcpus=2 androidboot.selinux=enforcing androidboot.emmc=true androidboot.serialno=709xxxxxxxx301G7 androidboot.prod=1 androidboot.baseband=apq
[email protected]:/ #
Does this mean, it is unlocked?
a) if it is not unlocked, is it possible for me to unlock bootloader again?
b) if not, can I go restore to stock w/o root?
if yes, can i follow the guide on aftvnews?
http://www.aftvnews.com/how-to-fully-unlock-the-amazon-fire-tv-bootloader/
Btw, i was able to update to 5.2.7.2 r1 latest using pre-rooted from TWRP.
Hey, great to hear that you got your FireTV back, another success story! (credit to Sus_i & rbox)
This is what Sus_i told me:
For checking bootloader status, simply run
adb shell
su
cat /proc/cmdline
Bootloader is unlocked if you see: androidboot.unlocked_kernel=true
Yes, its good to have unlocked bootloader (I've no clue if that's possible again after doing the dd). Sus_i will most likely give us an answer on this thread or mine.
Best regards.
Matt_7 said:
Hey, great to hear that you got your FireTV back, another success story! (credit to Sus_i & rbox)
This is what Sus_i told me:
For checking bootloader status, simply run
adb shell
su
cat /proc/cmdline
Bootloader is unlocked if you see: androidboot.unlocked_kernel=true
Yes, its good to have unlocked bootloader (I've no clue if that's possible again after doing the dd). Sus_i will most likely give us an answer on this thread or mine.
Best regards.
Click to expand...
Click to collapse
I can't thank you enough for guiding me into the right direction. You saved me lot of aggravation and going out and spending money on new crappy versions.
Thank you sooooo much to you and sus_i and rbox.
Hi i need some help here with my fire tv2 i reset the device and with a first gen remote since i lost the original.now after reset is stuck on alexa screen and remote wont connect no matter what i do.the cec from the tv remote works because the white light blinks when i press a button i attached a pic where is stuck
Anyone can help me fix this.thanks in advance
If rooted.
You can try to move the apk in twrp to /sdcard.
By your own Risk!!!!
com.amazon.tv.oobe under priv-app
and delete under /data/data/com.amazon.tv.oobe
and delete under /data/app/com.amazon.tv.oobe
maybe.
To pair remote and mark Setup Wizard as completet.
adb shell settings put secure install_non_market_apps 1
adb shell settings put global adb_enabled 1
adb shell settings put global setup_wizard_has_run 1
adb shell settings put secure user_setup_complete 1
adb shell settings put global device_provisioned 1
adb shell am start -n com.amazon.tv.settings.v2/.tv.controllers_bluetooth_devices.ControllersAndBl uetoothActivity
0815hoffi said:
If rooted.
You can try to move the apk in twrp to /sdcard.
By your own Risk!!!!
com.amazon.tv.oobe under priv-app
and delete under /data/data/com.amazon.tv.oobe
and delete under /data/app/com.amazon.tv.oobe
maybe.
To pair remote and mark Setup Wizard as completet.
adb shell settings put secure install_non_market_apps 1
adb shell settings put global adb_enabled 1
adb shell settings put global setup_wizard_has_run 1
adb shell settings put secure user_setup_complete 1
adb shell settings put global device_provisioned 1
adb shell am start -n com.amazon.tv.settings.v2/.tv.controllers_bluetooth_devices.ControllersAndBl uetoothActivity
Click to expand...
Click to collapse
Thanks for the advice but the box is not rooted any other way or at least root the box on the state it is now?
brigantti said:
Thanks for the advice but the box is not rooted any other way or at least root the box on the state it is now?
Click to expand...
Click to collapse
Hi there,
If it's the FTV2 (not stick) codenamed sloane you could try this https://forum.xda-developers.com/fire-tv/development/unbrick-fire-tv-stick-2-anti-rollback-t3986303
Regards!
Rortiz2 said:
Hi there,
If it's the FTV2 (not stick) codenamed sloane you could try this https://forum.xda-developers.com/fire-tv/development/unbrick-fire-tv-stick-2-anti-rollback-t3986303
Regards!
Click to expand...
Click to collapse
Try that no go only worked once throw ans error about serial something and never wanted to connect again with pc. I should trash this thing or theres any other option to try.thanks for your help