Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,736,165 Members 44,049 Now Online
XDA Developers Android and Mobile Development Forum

[ROOT][10-29-13]How to Manually Root the Nvidia Shield

Tip us?
 
shimp208
Old
(Last edited by shimp208; 29th October 2013 at 08:12 PM.) Reason: Updated to add support for OTA Update 63
#1  
shimp208's Avatar
Recognized Contributor - OP
Thanks Meter 1490
Posts: 2,196
Join Date: Jan 2011
Location: Boston

 
DONATE TO ME
Angry [ROOT][10-29-13]How to Manually Root the Nvidia Shield

Introduction

The following procedure will walk you through the step-by-step process for gaining root access on the Nvidia Shield.

Note: You must have an unlocked bootloader before you can proceed with this tutorial!
A tutorial on how to unlock your Shield's bootloader can be found here.

This tutorial also assumes how have the correct ADB and Fastboot drivers installed for your device, for a tutorial on how to install the ADB and Fastboot drivers for the Shield please look here.

Due to the nature of modifying devices system files the standard XDA disclaimer applies: I take no responsibility for bricked devices due to the following rooting procedure, no warranty express or implied is given, I will not be held responsible if you mess up your device by following this procedure!

Procedure

Before you begin please make sure to read and re-read the whole procedure, making sure you understand the directions.

1. Download the "Superuser-su.zip" file and the "roth-insecure-boot-63.img" file that are attached to this post. After you have downloaded the files, extract the contents of the "Superuser-su.zip" file which contains Superuser.apk and the su binary, and move them to your ADB and Fastboot folder on your computer. Also transfer the "roth-insecure-boot-63.img" to your computer's ADB and Fastboot folder.

MD5 Checksum for "roth-insecure-boot-63.img": F8BA5C48D0323D99E2A748C77BF647F6

2. Connect your Shield to your computer using your USB cable. For maximum reliability please connect the USB cable to a USB 2.0 port directly connected to the motherboard as USB ports on the front of a case panel or USB 3.0 ports can sometimes be unreliable.

3. Now that your Shield is connected to your computer make sure that "USB debugging" is enabled under the Developer Options section in the system settings menu (If the Developer Options section is hidden, go to the About Phone/About Tablet section of the system settings and then tap on the item that lists the Build number 7 times or until it says "You are now a developer" and the Developer Options section becomes visible in the system settings).

4. Open a command prompt window (cmd) in your ADB and Fastboot folder on your computer and issue the following commands (If you are new to using ADB and Fastboot I would recommend checking out this excellent guide to get you up and running):

Code:
adb reboot bootloader
Now that you are in fastboot mode let's make sure that the computer see's our device:

Code:
fastboot devices
If the computer see's our device then we can proceed, if it doesn't see your device make sure you are in fastboot mode and have the correct ADB and Fastboot drivers installed for the Shield.

Now we will be booting an insecure boot.img (ro.secure = 0) to our device to allow us to gain root acess:

Code:
fastboot boot roth-insecure-boot-63.img
After the insecure boot.img finishes flashing the device will automatically boot up using the insecure boot.img.

5.First we need to mount the /system partition as read/write so we can modify it:

Code:
adb shell
mount -o rw,remount -t ext4 /dev/block/platform/sdhci-tegra.3/by-name/APP /system
exit
6. Now we need to run the following commands to push the Superuser.apk and su binary to there correct positions and set the proper file permissions:

Code:
adb push su /system/xbin
adb push Superuser.apk /system/app
adb shell
chmod 6755 /system/xbin/su
chmod 644 /system/app/Superuser.apk
mount -o ro,remount -t ext4 /dev/block/platform/sdhci-tegra.3/by-name/APP /system
sync
reboot
7. After the device reboots and power on into the Android Operating System you should see Koush's Superuser app in your app-drawer and you should be rooted. If you would like to verify root access you can download and run Root Checker Basic from the Play Store here. Enjoy!

Credits: Koush for his open source Superuser.apk and the su binary (https://github.com/koush/Superuser)

If users would like me to create a 1-click root process of this please let me know and I will do so .

If you are stuck with the rooting procedures I would recommend checking out this great video tutorial by wwjoshdew.

Attached Files
File Type: zip Superuser-su.zip - [Click for QR Code] (1.58 MB, 1073 views)
File Type: img roth-insecure-boot-63.img - [Click for QR Code] (5.89 MB, 703 views)
The Following 5 Users Say Thank You to shimp208 For This Useful Post: [ Click to Expand ]
 
Gnurou
Old
#2  
Gnurou's Avatar
Member
Thanks Meter 46
Posts: 77
Join Date: Aug 2010
Location: Tokyo
Alternatively the following works in almost one click (one fast boot, actually): https://github.com/linux-shield/shield-root
 
wwjoshdew
Old
#3  
wwjoshdew's Avatar
Recognized Contributor
Thanks Meter 1386
Posts: 1,365
Join Date: Dec 2008
Location: KCMO
Quote:
Originally Posted by Gnurou View Post
Alternatively the following works in almost one click (one fast boot, actually): https://github.com/linux-shield/shield-root
It's just whole unlocking thing and giving up your devices warranty. NVIIDA being able to decline your RMA if your fan goes out and the unit overheats. Or if the scree dies (for example). I'll do it, just gotta grow a pair first.
http://www.youtube.com/user/wwjoshdew

Below are links to some of the devices I've done videos on,
Behold... The Sprint HTC One: http://goo.gl/3Q6nP
Transformer Prime TF201: http://goo.gl/GtxzA
Galaxy Note II L900: http://goo.gl/06zdk
Galaxy S III L710: http://goo.gl/0X5KW
Galaxy Nexus: http://goo.gl/rxUgv
EVO 4G LTE: http://goo.gl/VaoeU
EVO 3D: http://goo.gl/rmdoA
 
blinkdragonid
Old
#4  
Member
Thanks Meter 2
Posts: 34
Join Date: Apr 2010
Quote:
Originally Posted by wwjoshdew View Post
It's just whole unlocking thing and giving up your devices warranty. NVIIDA being able to decline your RMA if your fan goes out and the unit overheats. Or if the scree dies (for example). I'll do it, just gotta grow a pair first.
I did my RMA and nvidia sent me a new 1. So you should get your new shield b4 you send it back if you happen to root it and the screen dies.
 
dark42
Old
(Last edited by dark42; 11th August 2013 at 04:48 AM.)
#5  
Member
Thanks Meter 1
Posts: 51
Join Date: Aug 2010
This is a pretty complicated way of rooting. All I did was unlock the bootloader, flashed Clockworkmod Recovery, and then flashed the SuperSu zip with that. Rooted! As easy as a Nexus.
Nexus 4 - CM10.2
EVGA Tegra Note 7 - stock fw, rooted
 
shimp208
Old
#6  
shimp208's Avatar
Recognized Contributor - OP
Thanks Meter 1490
Posts: 2,196
Join Date: Jan 2011
Location: Boston

 
DONATE TO ME
Quote:
Originally Posted by dark42 View Post
This is a pretty complicated way of rooting. All I did was unlock the bootloader, flashed Clockworkmod Recovery, and then flashed the SuperSu zip with that. Rooted! As easy as a Nexus.
I hear yeah, this procedure is meant for those that really want to understand how the basic rooting process works and who want to gain experience manually performing these types of procedures .

Sent from my SCH-I535 using xda premium
 
agrabren
Old
#7  
agrabren's Avatar
Recognized Developer
Thanks Meter 9607
Posts: 1,442
Join Date: Mar 2011
Location: Pflugerville, TX

 
DONATE TO ME
Quote:
Originally Posted by shimp208 View Post
I hear yeah, this procedure is meant for those that really want to understand how the basic rooting process works and who want to gain experience manually performing these types of procedures .

Sent from my SCH-I535 using xda premium
This method is actually nearly the same. It's a bootable self-contained image (like recovery is) that mounts the correct partitions, installs the necessary bits, and is done.
 
i00
Old
#8  
i00's Avatar
Senior Member
Thanks Meter 366
Posts: 781
Join Date: May 2008
Location: Brisbane

 
DONATE TO ME
I haven't done this yet ... but could you also provide instructions on how to revert? I ask this as it would be nice to know that there is a back-out plan.

Kris
My "Smart" Devices (By purchase date):
HP hw6510, HTC Kaiser, HTC Touch Pro, i-mate Ultimate 9502, HTC Shift, HTC Desire, HTC Desire HD, HTC Flyer, Samsung Galaxy SII, HTC Evo3D, HTC Explorer
HTC Explorer ROM - i00 Flyer ROM - i00 Desire HD ROM - i00 Shift ROM
Donate a beer
Found this useful? Remember to say thanks
 
shimp208
Old
#9  
shimp208's Avatar
Recognized Contributor - OP
Thanks Meter 1490
Posts: 2,196
Join Date: Jan 2011
Location: Boston

 
DONATE TO ME
Quote:
Originally Posted by i00 View Post
I haven't done this yet ... but could you also provide instructions on how to revert? I ask this as it would be nice to know that there is a back-out plan.

Kris
To unroot your Shield since you are only temporarily booting an insecure boot image rather then flashing it, if you run the following commands in either ADB shell or terminal emulator will unroot your device:

Code:
$ su
# mount -o rw,remount -t ext4 /dev/block/platform/sdhci-tegra.3/by-name/APP /system
# rm -f /system/app/Superuser.apk
# rm -f /system/xbin/su
# mount -o ro,remount -t ext4 /dev/block/platform/sdhci-tegra.3/by-name/APP /system
Then after you have entered those commands reboot your device and you'll be unrooted.
 
i00
Old
#10  
i00's Avatar
Senior Member
Thanks Meter 366
Posts: 781
Join Date: May 2008
Location: Brisbane

 
DONATE TO ME
Quote:
Originally Posted by shimp208 View Post
To unroot your Shield since you are only temporarily booting an insecure boot image rather then flashing it, if you run the following commands in either ADB shell or terminal emulator will unroot your device:

Code:
$ su
# mount -o rw,remount -t ext4 /dev/block/platform/sdhci-tegra.3/by-name/APP /system
# rm -f /system/app/Superuser.apk
# rm -f /system/xbin/su
# mount -o ro,remount -t ext4 /dev/block/platform/sdhci-tegra.3/by-name/APP /system
Then after you have entered those commands reboot your device and you'll be unrooted.
OK ... well lets say after rooting we install an app that uses root access to stuff up your device ... how do you restore the original image?

Kris
My "Smart" Devices (By purchase date):
HP hw6510, HTC Kaiser, HTC Touch Pro, i-mate Ultimate 9502, HTC Shift, HTC Desire, HTC Desire HD, HTC Flyer, Samsung Galaxy SII, HTC Evo3D, HTC Explorer
HTC Explorer ROM - i00 Flyer ROM - i00 Desire HD ROM - i00 Shift ROM
Donate a beer
Found this useful? Remember to say thanks

Tags
root, root acess, root nvidia shield, root shield, superuser
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes