[GUIDE] [T-Mobile] Unlock Bootloader, Install Custom Recovery, Root, S-Off

Search This thread

SeVIIn

Senior Member
Jul 13, 2011
308
141
I literally just got this phone today with 4.4.2 on it, if I take the update will I be able to root and install recovery? Or should I avoid the update and install recovery, root, and s-off first? I assume I would need to manually update the firmware afterward then....Just a little confused I'm use to simply rooting and installing recovery then being good to go.
 

uoY_redruM

Senior Member
May 1, 2010
3,469
1,941
Longwood, FL
I literally just got this phone today with 4.4.2 on it, if I take the update will I be able to root and install recovery? Or should I avoid the update and install recovery, root, and s-off first? I assume I would need to manually update the firmware afterward then....Just a little confused I'm use to simply rooting and installing recovery then being good to go.

If you know how to adb push, you're fine.

Update then after its done, push the TWRP recovery. Boot into recovery and when you go to reboot from recovery, it'll say no root was found and ask if you want to install it.

Sent from my HTC One_M8
 
  • Like
Reactions: SeVIIn

SeVIIn

Senior Member
Jul 13, 2011
308
141
If you know how to adb push, you're fine.

Update then after its done, push the TWRP recovery. Boot into recovery and when you go to reboot from recovery, it'll say no root was found and ask if you want to install it.

Sent from my HTC One_M8

That sounds a lot more simpler that I was making it haha. So, just to clarify, unlock the bootloader push TWRP and good to root from there (flash SU)?

I just want to get it up and running with a good ol' AOSP ROM :fingers-crossed:

Edit: everything went fine updated via OTA then unlocked and rooted with recovery, now to decided if I should S-Off....
 
Last edited:
  • Like
Reactions: uoY_redruM

uoY_redruM

Senior Member
May 1, 2010
3,469
1,941
Longwood, FL
That sounds a lot more simpler that I was making it haha. So, just to clarify, unlock the bootloader push TWRP and good to root from there (flash SU)?

I just want to get it up and running with a good ol' AOSP ROM :fingers-crossed:

Edit: everything went fine updated via OTA then unlocked and rooted with recovery, now to decided if I should S-Off....

haha, glad you got it all worked out.

Sorry, I have my XDA linked to my old e-mail account. I didn't see you quoted me.
 

cygnus56

Senior Member
Apr 11, 2010
464
25
Oaxaca
I was able to get a new M8, but I find the problem with this I can not get s-off, the first thing I had is manufacturing in April, and this new one is June, have the same hboot, but I can not get s-off, any ideas?

My first M8, to achieve S-OFF
version: 0.5
version-bootloader: 3.16.0.0000
version-baseband: 1.14.21331931.LA02_2G
version-cpld: None
version-microp: None
version-main:
version-misc: PVT SHIP S-OFF
serialno: FA44PWM07455
imei:
imei2: Not Support
meid: 00000000000000
product: m8_ul
platform: hTCBmsm8974
modelid: 0P6B13000
cidnum: T-MOB010
battery-status: good
battery-voltage: 0mV
partition-layout: Generic
security: off
build-mode: SHIP
boot-mode: FASTBOOT
commitno-bootloader: 0a41237a
hbootpreupdate: 11
gencheckpt: 0

My seconf M8, with this achievement not have s-off
version: 0.5
version-bootloader: 3.16.0.0000
version-baseband: 1.16.21331931.LA24G
version-cpld: None
version-microp: None
version-main:
version-misc: PVT SHIP S-ON
serialno: FA46JWM11908
imei:
imei2: Not Support
meid: 00000000000000
product: m8_ul
platform: hTCBmsm8974
modelid: 0P6B13000
cidnum: T-MOB010
battery-status: good
battery-voltage: 0mV
partition-layout: Generic
security: on
build-mode: SHIP
boot-mode: FASTBOOT
commitno-bootloader: c3d94491
hbootpreupdate: 11
gencheckpt: 0

I am using the method of firewater
 
Last edited:

ned4spd8874

Senior Member
Dec 29, 2008
307
16
Chicago Area
AfterCredits.com
This guide is for the T-Mobile HTC One M8. Bootloader Version: 3.16.0.0000

So I have my M8 and am getting tired of stock already. So I think I'm getting close to rooting this puppy. I do have one question before I continue however.

Can someone please explain why we should choose "All Other Supported Models" on HTC's Unlock Bootloader page and not our actual phone? I see it's listed and just don't understand why we wouldn't choose the correct option.

Also, I've been using Cyanogenmod on my other rooted devices. Anyone have feedback on that with this phone? Is there a ROM that might work better or is more highly recommended with this device?
 
Last edited:

wizardfingers

Senior Member
Apr 27, 2013
120
45
Ok so let me get this straight...
I have a M8 Tmo and the HBOOT is 3.18.0.000 the HBOOT required to make use of this thread is 3.16.0.0000 and from googling it seems the only way to achieve s-off is to purchase Sunshine http://theroot.ninja/ $25
Is there no other way? I just asking for my sake and anyone else that might be concern as there's no indication in OP about it.
 

ned4spd8874

Senior Member
Dec 29, 2008
307
16
Chicago Area
AfterCredits.com
Ok so let me get this straight...
I have a M8 Tmo and the HBOOT is 3.18.0.000 the HBOOT required to make use of this thread is 3.16.0.0000 and from googling it seems the only way to achieve s-off is to purchase Sunshine http://theroot.ninja/ $25
Is there no other way? I just asking for my sake and anyone else that might be concern as there's no indication in OP about it.

I just got this phone from Tmo as well and although I haven't rooted it yet, yes, this is what I have found in preparation. Sunshine is the only way for us.
 
Nov 23, 2014
6
0
Unable to Unlock Bootloader

**Solved - and OTA update to 4.4.4 made it possible to update on HTCdev site.

I've been trying to unlock the bootloader on my new HTC M8 from T-mobile. Manufacture date is 9/10/2014. I'm using the HTCdev unlock site. I've attempted numerous times on several machines. When I boot into fast boot after doing the unlock procedure I still see LOCKED at the top of the screen and I can't flash a recovery. When I attempt to flash a recovery I get the following message:

target reported max download size of 1830608896 bytes
sending 'recovery' (16576 KB)...
OKAY [ 1.479s]
writing 'recovery'...
(bootloader) signature checking...
FAILED (remote: signature verify fail)
finished. total time: 2.093s

Any help on this would be appreciated. Thanks in advance.
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 10
    This guide is for the T-Mobile HTC One M8. Bootloader Version: 3.16.0.0000

    Disclaimer: I am not responsible for your device. You are performing the steps detailed in this post at your own risk. Support for any phone unlocked through this method falls upon you. Assume that this method voids any warranty that may have come with your phone. Also, currently there is no known way to restore the T-Mobile variant to complete stock settings after using HTC Dev Unlock and/or achieving S-Off. Maybe at a later date this could be possible, but not yet.
    *Please do not quote this post. It's so long.*
    Support for recoveries, firewater, or other tools used herein should be asked in their respective thread or forum.
    Firewater does not work on every T-Mobile M8. If, when running firewater, you see "Whelp, this sucks..." firewater will not work on your phone. Right now firewater is the only method to achieve S-Off on our M8 variant.

    There was speculation that the phone's build date might be a reference for who's phone was compatible with firewater. This is not the case. There is no correlation between build date and compatibility. A further explanation is given under the S-Off instructions.

    This thread is for people that understand what this whole post means. If you are unsure of the terms, please search. The terminology is readily available and nothing should be difficult to find.

    I work and go to graduate school, so this thread will be updated periodically, but I will not be able to provide a lot of support. This guide reflects my steps to achieve root and S-Off, and is just intended to give someone new to the phone an easy to read step-by-step guide of what the process will be.

    I also hope we can condense the large amount of information floating around about achieving S-Off on our variant into one thread.

    Required Files:
    HTC Dev Unlock Process:
    Google Android SDK zip:
    http://developer.android.com/sdk/index.html
    Java Runtime Environment:
    http://java.com
    HTC Sync (Windows Only):
    http://www.htc.com/www/help/

    Recovery (choose one):
    Team Win Recovery Project (TWRP) 2.7.x for GSM Phones
    http://teamw.in/project/twrp2/225
    PhilZ Touch ClockworkMod (CWM) Recovery
    http://xdaforums.com/showthread.php?t=2703223

    S-Off:
    Firewater
    http://firewater-soff.com/instructions/
    Firewater M8 Original Thread
    http://xdaforums.com/showthread.php?p=51698035

    Useful Commands:
    adb devices
    (after installing adb, this will tell you if your phone is detected by the computer)
    expected output:
    Code:
    C:\sdk\platform-tools>adb devices
    List of devices attached
    FAXXXXXXXXXXdevice

    fastboot devices
    (after copying the fastboot utility downloaded during the HTC Dev Unlock process to your sdk\platform-tools\ directory, this will tell you if your phone is detected by the computer)
    expected output:
    Code:
    C:\sdk\platform-tools>fastboot devices
    List of devices attached
    FAXXXXXXXXXXfastboot


    1. Unlock bootloader via HTC Dev Unlock (http://www.htcdev.com/bootloader)
    a. At the top of the page, either register for a new account or log in with an existing one
    b. Under "Supported Devices" choose "All Other Supported Models"
    c. Click "Begin Unlock Bootloader"
    d. A prompt will ask you to continue. Read this. If this prompt scares you, stop immediately. Otherwise, press "Yes" to continue
    e. Accept the legal terms and conditions.
    f. Follow the on-screen steps provided.
    Step 1
    After powering down, press Volume Down and while pressing Volume Down, press Power holding both buttons to start the device into Bootloader mode. If you have difficulty, power up normally, go to Settings->Battery and deselect Fast boot. Power down and try again.
    Step 2
    Use the Volume buttons to select up or down. Highlight Fastboot and press the Power button.
    Step 3
    Connect the device to the computer via a usb cable
    Step 4
    Download the fastboot binary for your OS using the provided links​
    g. Follow the on-screen steps provided
    Step 5
    Open a command Prompt: Windows: Start->"cmd" Mac: Applications->Utilities->Terminal.app Linux: Terminal
    Type in Command Prompt: fastboot oem get_identifier_token.
    Step 6
    You will see a long block of text. Copy and paste this text into the the token field below (in the Windows command prompt: Right Click > Mark > highlight the block of text > Right click to copy. Mac users can use cmd-option to mark and select text.).
    When copying the token, start with this line:
    >
    And end with this line:
    >
    (Note: Do not copy the INFO or (bootloader) prefix)
    Step 7
    Paste this string of text into the token field and hit Submit in order to receive your unlock code binary file. You will receive this information in your email.​
    h. After hitting submit, HTC will send you an email. Sender is HTC-Unlockbootloader. Subject is "The key to unlocking your HTC Device."
    Email Message:
    Hi Recipient

    Attached in this mail is your unlock bootloader key file. To use this file to unlock your device, simply follow the remaining instructions on the website to complete the process and successfully unlock your bootloader.

    Please remember that unlocking your bootloader may void all or parts of your warranty and your device may not function as intended by HTC. Unlocking the bootloader is for development purposes only.

    * Click here to continue the bootloader unlocking process.

    The bootloader unlock key file can only be applied to the device with which you generated the token.

    Please do not reply to this email which is auto-sent by server.
    If you need to contact us with questions please click here.

    Sincerly,
    HTC
    Attached to the email is Unlock_code.bin. This is the file you will need to download in order to unlock your bootloader. This file is device specific. You cannot use this file to unlock any other HTC phone. Please do not try as this will probably result in a brick.
    Click the link provided in the email to continue the steps to unlock your bootloader​
    i. Follow the on-screen steps provided
    Step 8
    You will receive an email with the attachment: Unlock_code.bin. Save this file in the same folder as your fastboot files (For Example: C:\Android).
    If, after a short period of time, you have not yet received the mail, or you have received an email from HTC, but does not contain an attached file, it is possible that more stringent spam filters and anti-virus programs will block this mail or attachment.
    In order to ensure that you receive the email with the attachment, we suggest you consider using a non-corporate email server as corporate servers tend to have more stringent attachment policies. If you have not received the email at all, please check your spam folder in your email client to check if the email was filtered out.
    Step 9
    In the command prompt type: fastboot flash unlocktoken Unlock_code.bin. In the command prompt you will see the following message:
    Code:
    fastboot flash unlocktoken Unlock_code.bin
    sending 'unlocktoken' ...
    OKAY [ 0.151s]
    writing 'unlocktoken'...
     unlock token check successfully
    OKAY [0.006s]
    finished. total time: 0.158s
    Step 10
    On your phone you will now see the disclaimer. Please read this carefully as this action may void your warranty. Use the Volume buttons to highlight your choice, and the Power button to make your selection. If you select Yes, your phone will be reset to its’ factory default settings, and your bootloader will be unlocked. If you select No, your phone will reboot and no modifications will have been made.
    Step 11
    To re-lock your bootloader, in the command prompt, type: fastboot oem lock.
    Note: This will not restore the factory default lock, but will simply re-lock the bootloader so no further changes can be made. Furthermore, if you want to unlock your bootloader again, simply repeat step 9 with your original unlock key file to unlock your phone again.​
    j. Congratulations, your phone now has an unlocked bootloader! If your phone hasn't done so already, reboot it and let it sit at the welcome screen for the requisite 5-10 minutes to settle. Turn off your phone, and reboot to HBOOT with volume down + power button. Select fastboot.

    2. Install a custom recovery
    As far as I know, there are two recoveries that are fully functional with our M8 variant:
    TWRP
    PhilZ Touch CWM​
    a. Download your chosen recovery from the above links.
    b. Rename it recovery.img
    c. Drop it in the same folder as your adb and fastboot binaries.
    d. After booting to fastboot mode, make sure your device is still plugged in and run the following command in your command window:
    fastboot devices
    Your computer shouldn't have any troubles recognizing your phone since we just went through the bootloader unlock, but it's always best to be safe.​
    e. Now run the command:
    fastboot flash recovery recovery.img
    Expected output:
    Code:
    C:\sdk\platform-tools>fastboot flash recovery recovery.img
    sending 'recovery' ...
    OKAY [ 0.871s]
    writing 'recovery'...
    OKAY [ 1.501s]
    finished. total time: 2.543s
    f. Congratulations! You now have a custom recovery installed.
    g. I recommend immediately making a backup of your fresh operating system (pre-root) by selecting HBOOT from the fastboot menu, then selecting and booting into recovery
    h. After booting into your new custom recovery select backup from your list of options and proceed to select your backup location (internal or micro sd) and continue to the backup. It will be quite large, but this will provide you a good starting point should you ever need to restore to factory settings for any reason.
    i. I use TWRP, because it will automatically prompt you to install root and SuperSU upon rebooting from recovery.
    I am unsure how to achieve root after flashing PhilZ Touch. If anyone provides the info I will add it to this guide.

    3. Achieve S-Off (Hopefully!)
    The instructions to attaining S-Off are listed on the firewater s-off page linked above. They are really comprehensive and you should follow them to the letter. Make sure that you read through their prerequisites as well.
    Note: On prerequisite number four, it states that you must be "HTCDEV unlocked/rooted." Please read this as you must be HTCDEV unlocked AND rooted.​

    I didn't want to post the firewater team's instructions here (I didn't ask permission yet), so this section will be more for information regarding the S-Off process that I have gathered from other threads and this one going forward.

    Issues seen with Firewater:
    Firewater does not work on every T-Mobile M8. If, when running firewater, you see "Whelp, this sucks..." firewater will not work on your phone.

    There was speculation that the build date was an indicator of compatibility with firewater's S-Off method. As several people expected, there is no correlation. There are batches of components that HTC purchased from various manufacturers that vary in compatibility with the firewater exploit. At this point there is no known method to determine if your phone will be compatible with firewater. Unfortunately, it's just a shot in the dark. So, if you're comfortable, give it a shot and hopefully you're compatible.

    Issue: Firewater hangs but does not give the "Whelp this sucks..." message:
    Possible Solutions: Your device is likely compatible. You must be persistent. Keep trying.
    Hit Ctrl+C to exit the exploit and try again starting from "adb reboot" (from @Fenny)
    Unplug your USB cable, reboot your phone manually. Once it boots up, plug in your USB cable (from @epsix)
    Plug in your USB cable, adb reboot. Once it boots, go to Developer Options and uncheck and recheck USB Debugging (from @epsix)
    Install BusyBox (from @renn9420)​
    Issue: After running adb reboot command and pushing firewater phone shows up as "offline"
    Possible Solutions: Make sure that you granted su permissions to your adb shell through SuperSU
    I had this happen to me. I would go to run the command and suddenly, the phone is disconnected. I ran through the adb reboot steps a couple of times and finally when executing firewater it ran. Went through the steps 3 times before it ran.​

    4: Other
    a. @Fenny noticed that /data/preload/ gets emptied after HTC Dev Unlock. If you're hanging onto your stock ROM and don't plan to change to a custom OS you'll want to replace these files. Go here to replace them: http://xdaforums.com/showthread.php?t=2714522
    Thanks go to:
    @beaups - firewater
    @Dees_Troy - TWRP
    @Phil3759 - PhilZ Touch
    @Fenny - Stock + ROM, Hacked HBOOT, Preload data & more
    @Turge - ViperOneM8
    @Chainfire - SuperSU
    @jcase - for looking into getting weaksauce working on our phones
    3
    FYI I didn't develop firewater, just weaksauce. That is @beaups baby

    Sent from my HTC One_M8 using XDA Premium 4 mobile app
    3
    So, is this update gonna affect the S-Off status?

    When I achieve S-Off, is it a permanent thing or should I worry about official OTA updates breaking the S-Off?

    S-off is permanent until you turn security back on via command line
    2
    What's going on fellas, so just got the M8, understand all the processes just not seeing a lot of clarification if this is working on the 1.57 build, phone build says is may 16th... Thanks for the info...and if s~off is not possible with firewater, is sunshine working for this latest version....

    You have to use Sunshine for latest 1.57 ......

    Sent from my HTC One_M8 using XDA Premium 4 mobile app
    2
    Not sure if it'll go S-On, but why worry. Just flash radio separately and use Fenny's Stock+ rom. It's updated with the OTA.

    The advice above is not the same as taking the full OTA. If you only flash the radio you are not receiving the improvements to wifi stability and other firmware improvements. WiFi firmware is contained in wcnss.img. That image can only be flashed via official updates if s-on or via flashing firmware packages if s-off. Most of the improvements in this software build come from the firmware not the software. The main internment to software in this build is extreme power saver mode. The rest are small tweaks to code meant to work better with the new firmware.