There is currently no official way to unlock the bootloader of the ZenPad 3S 10. The bootloader on this device does not let you start any unofficial (i.e. rooted) images. Worst of all, it's impossible to start even Yellow State images, which are self-signed. That is bad news if you want to have persistent root on your tablet. It does, however, let you do tethered boot.
That kind of behavior is not acceptable. I've developed a clever way to put a Mediatek bootloader into an unlocked state by using this software in root access. This results in the standard Orange State boot mode, which disables boot partition verification. As a bonus, this procedure does not erase your data like a typical unlock routine does. It also does not require a PC except to start the temporary rooted image. Note that your tablet will still not have fastboot flashing functionality. But flashing by other means is still possible.
WARNING: Running this tool should be pretty safe. But I don't encourage anyone to try this. This is still new, so unforeseen problems might arise. It cannot be ruled out that your device will become bricked. Before trying this out, consider the risks and drawbacks involved. By unlocking, you are essentially giving up the security of your device. It's also possible that a future firmware update will relock the bootloader or become incompatible with this tool.
This software is only for ASUS model Z500M/P027. Do not try it on any other device. It will not work. Support for other Mediatek devices may be added in the future. (That's why this is posted in the general forum rather than the ZenPad 10 one.)
And by the way, I don't own this tablet.
This software is for educational purposes only. Anything you do that is described in this post is at your own risk. No one else is responsible for any data loss, corruption or damage of your device, including that which results from bugs in this software.
- A ZenPad Z500M tablet upgraded to Android N
- A rooted/patched boot image such as one made by Magisk Manager
- Temporary root with Magisk or other superuser manager installed
- Knowledge of adb/fastboot and of basic Linux command shell
- Read all of these instructions and make sure you understand them before starting
- If you don't have an offline patched boot image, use Magisk Manager to make one from the stock boot.img of your current firmware
- Reboot into fastboot mode, and do a fastboot boot patched_boot.img from your PC to start the rooted image
- Download the tool zip file to your tablet.
- Extract the zip to your /data/local/tmp folder. (Other folders may work as well.)
- Open a root shell with adb shell, then run 'su'
- Change your shell to that folder (cd /data/local/tmp)
- Run this script to unlock or lock the BL
- Follow the instructions on the screen and type the requested confirmation into the prompt.
- Check for completion or any error messages. Report them here.
- If no errors, you are unlocked and may modify your boot partition (e.g. install root).
Unlock Tool v0.5
- Major overhaul to remove the need for kernel module
- Made compatible with other FW versions
- First release
@amartolos for being a kick-ass tester
If anyone wants to develop a full Android app around this script, be my guest.
Also, that Thanks button will not click itself...