[GUIDE] Unlock/Root Lenovo Smart Tab P10 (TB-X705F) by Chaser42

Search This thread

Yahoo Mike

Senior Member
Apr 3, 2011
468
221
Tamworth
Hello
I've just bought the TB X606F tablet a few days ago.
Wondering if all this stuff for the 605-705 would work on the 606.
Great thread :good:!
Unfortunately, it won't work for you.

The TB-X606F uses a Mediatek SOC. The TB-X605 & TB-X705 have Qualcomm SoCs. The kernels will not be compatible.

However, assuming you can unlock the bootloader, the principles to create rooted images should be the same. So you could make your own patched boot.img. There are instructions earlier in the thread.
 
  • Like
Reactions: aftnoon2

aftnoon2

Senior Member
Unfortunately, it won't work for you.

The TB-X606F uses a Mediatek SOC. The TB-X605 & TB-X705 have Qualcomm SoCs. The kernels will not be compatible.

However, assuming you can unlock the bootloader, the principles to create rooted images should be the same. So you could make your own patched boot.img. There are instructions earlier in the thread.

OK, thank you so much. This was what I was afraid of.
It's very tricky for me to patch the boot.img, but maybe I will try one of these days.
 
  • Like
Reactions: Yahoo Mike

DemonBlu3000

Member
Apr 30, 2020
9
0
Comment obtenir le "Hardware Code" ?

Bonjour,
J'ai suivi vos étapes pour rooter ma TB-X605F, mais dans le Lenovo Moto Assistant, on me demande le "Hardware Code" de ma tablette. J'ai le choix entre 60, 63, 64 ou 80. Il est dit que ce code doit être 2 chiffres entre parenthèses après le numéro de série (S/N) sur la boîte et dans les paramètres. Cependant, dans les deux cas il n'y a pas de parenthèses et le code ne se termine même pas par des chiffres. Comment avez vous fait ?
Merci d'avance pour votre aide !
 

Yahoo Mike

Senior Member
Apr 3, 2011
468
221
Tamworth
Bonjour,
J'ai suivi vos étapes pour rooter ma TB-X605F, mais dans le Lenovo Moto Assistant, on me demande le "Hardware Code" de ma tablette. J'ai le choix entre 60, 63, 64 ou 80. Il est dit que ce code doit être 2 chiffres entre parenthèses après le numéro de série (S/N) sur la boîte et dans les paramètres. Cependant, dans les deux cas il n'y a pas de parenthèses et le code ne se termine même pas par des chiffres. Comment avez vous fait ?
Merci d'avance pour votre aide !
Have a look on the back of the tablet. There is a sticker there. The hardware code (HC) is on the sticker, in brackets after the serial number (S/N).

Regarde à l'arrière de la tablette. Là, il y a une étiquette. Le HC est sur cette étiquette, entre parenthèses après le S/N.
 

clsA

Senior Member
Aug 28, 2010
9,926
3,547
Central Florida
Has anyone tried flashing a GSI ROM yet?

I never really saw the need, The tablet works great as an Amazon Echo rooted on android 9
it does Facebook video calls and plays the few games I play just fine.

Lenovo did a real nice job on this Tab at this price point. I wish it had a Snapdragon 6xx or 7xx but it works pretty well the way it is.
It also has a built in battery protection mode that keeps the battery at 60% that should give the Tab and battery a nice long Life.
 
Last edited:

SniperJunkie

Senior Member
Jul 2, 2007
163
41
Samsung Galaxy S22 Ultra
Please try the Treble builds :)

I've opened a chat for our devices on https://github.com/phhusson/treble_experimentations please contribute to get newer Android build by helping test the Treble images.


I tried using Treble Images but it wouldn't boot. Had to restore stock as my TWRP backups wouldnt fix the thing either.

I used the images at...

https://github.com/phhusson/treble_experimentations/releases

The device is "Arm64" "A Only" if anyone wants to give it a better go than I did :)

Good Luck :)
 

Mr. Jedge

Senior Member
Jul 31, 2007
353
53
I tried fastboot oem unlock-go, and the command failed. When i restarted the device, now it is not accepting my PIN. Any ideas?
 

Mr. Jedge

Senior Member
Jul 31, 2007
353
53
I tried doing the QDownloader, but I kept getting a 'Send Result' Progress but nothing ever happened. I was able to do a factory reset so that I could start over, and to my surprise it said that my bootloader was already unlocked. Now the proud owner of a rooted device.

In regards to Ambient Mode, the Google App shows Ambient Mode if you search for it, but there is no selector to enable it. I am suspsecting this device isn't "supported". I was thinking maybe if the build.prop was edited so that the device identifies as a device that has Ambient Mode.. Like the Yoga Smart Tab. Any ideas?
 

Mr. Jedge

Senior Member
Jul 31, 2007
353
53
You're doing this on a P10 (TB-X705F)?

Chaser

Yes. The command failed over and over again, so I restarted the device. Booted and asked for my pin but it wouldn't accept it. I am running the most recent update. I did a factory reset in the hopes of trying again, and to my surprise it said my bootloader was already unlocked. My device is now rooted.

I was trying to get the hang of QDownloader to that I can try and test some treble but no matter what u do, it won't work. Holding down volulme down while plugging in the device doesn't do anything for me. To get the light to flash, i have to be on the original boot IMG but even then, it never connects. I I hold down volume up, it will connect on either port 11 or 12, but only shows "send result" as the status and never does anything. I must be missing something.
 

Yahoo Mike

Senior Member
Apr 3, 2011
468
221
Tamworth
Yes. The command failed over and over again, so I restarted the device. Booted and asked for my pin but it wouldn't accept it. I am running the most recent update. I did a factory reset in the hopes of trying again, and to my surprise it said my bootloader was already unlocked. My device is now rooted.

I was trying to get the hang of QDownloader to that I can try and test some treble but no matter what u do, it won't work. Holding down volulme down while plugging in the device doesn't do anything for me. To get the light to flash, i have to be on the original boot IMG but even then, it never connects. I I hold down volume up, it will connect on either port 11 or 12, but only shows "send result" as the status and never does anything. I must be missing something.
If the P10's TWRP has a reboot to EDL option, try that.
 

Mr. Jedge

Senior Member
Jul 31, 2007
353
53
This is as far as I can ever get. Never progresses from this screen.

Thanks for all your help so far guys! It is much appreciated!!
 

Attachments

  • lenovop10.png
    lenovop10.png
    23.3 KB · Views: 93

Chaser42

Senior Member
Jun 11, 2015
114
89
Houston, TEXAS
This is as far as I can ever get. Never progresses from this screen.

Thanks for all your help so far guys! It is much appreciated!!

I think I've seen this problem before. Can you take a screenshot of what comes up when you click on the configure button? I populated the settings.ini file with the proper settings for the P10, but I think it requires you to click on the configure button it's actually load the settings. Then hit okay and try the connection.

I'll take some screenshots on my end it so that this is better documented. I remember it was a pain in the ass get working. It was the same with the LMSA tool. There's some kind of magic required when pressing the power and volume keys to make it work. Perhaps my fingers are fat because I only get it to work like one in ten times. It's actually a little bit easier with the QcomDLoader because it only requires you to press and hold volume down. It's just timing on when exactly to release it...

A while back one of the IT guys for the schools in France was having the same problem. He was convinced his advice was dead bricked. I told him that it's practically impossible to brick this device and to just keep trying even if it takes hours. So he got busy grading papers while attempting it over and over again. After few hours he got it to connect. Evidently his fingers are fat like mine. :)

Chaser
 
Last edited:

Chaser42

Senior Member
Jun 11, 2015
114
89
Houston, TEXAS
This is as far as I can ever get. Never progresses from this screen.

Thanks for all your help so far guys! It is much appreciated!!

OK. I took some screenshots and put together a single image information sheet for the QcomDLoader settings. Make sure you've got the correct path for your unzipped stock ROM. Then make sure you are settings look what I've got in the yellow circle. Then you hit the button to start the flash process. And finally you perform button magic with the power and volume keys from a powered off state and connect the USB cable.

Chaser
 

Attachments

  • Screenshot_20200524_200524.jpg
    Screenshot_20200524_200524.jpg
    123 KB · Views: 89
Last edited:
  • Like
Reactions: Yahoo Mike

Mr. Jedge

Senior Member
Jul 31, 2007
353
53
How long does the validation process take? I had it sitting for an hour and a half, and it still showed the same screen. "Send Result".

I feel like i'm cursed lol.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 23
    This guide will show you how to unlock the bootloader and root Android 9.0 (Pie) with Magisk on the Lenovo Smart Tab P10 (TB-X705F).

    This guide is written for Lenovo Smart Tab P10 (TB-X705F). However, it can also be used for the Smart Tab P10 LTE (TB-X705L), the M10 (TB-X605F), and the M10 LTE. All of these devices are essentially identical plus or minus a couple bells and whistles. The only real important technical difference is that each Smart Tab model uses its own specific stock ROM. Keeping up with each stock ROM can be quite a chore, so I will only provide information and links specific to the P10 (TB-705F) stock ROM in this guide.

    All software links including stock ROM files, TWRP, Magisk, etc. can be found at the bottom of this post.

    @abramxx has a thread for the TB-X605L: HERE

    NOTE THAT THIS GUIDE IS ONLY APPLICABLE IF YOUR DEVICE IS RUNNING ANDROID 9.0 (PIE). If your device shipped with Android 8.0 (Oreo), you must upgrade because the Oreo bootloader does not allow a permanent unlock.

    You can determine what version the stock ROM you are running by opening Android Settings -> About Tablet. So far Lenovo has released 9 versions the P10 stock ROM:

    TB-X705F_S000017_20180831_ROW (8.0 - Oreo)
    TB-X705F_S000037_20181220_ROW (8.0 - Oreo)
    TB-X705F_S200095_190528_ROW (9.0 - Pie)
    TB-X705F_S210068_190904_ROW (9.0 - Pie)
    TB-X705F_S210120_191029_ROW (9.0 - Pie)
    TB-X705F_S210135_191212_ROW (9.0 - Pie)
    TB-X705F_S210137_200407_ROW (9.0 - Pie)
    TB-X705F_S210154_200910_ROW (9.0 - Pie)
    TB-X705F_S210164_201119_ROW (9.0 - Pie)
    TB-X705F_S210214_220725_ROW (9.0 - Pie) <current version>

    If your device has not yet been unlocked and you are not running the current version, I highly recommend that you upgrade by using the Lenovo Moto Smart Assistant (LMSA) tool to perform a "rescue". The LMSA tool will download the full TB-X705F_S210120_191029_ROW stock ROM and flash it to the tablet. This will result in the loss of all data on the tablet. That's fine because unlocking the device will again clear all data (with the exception of the brand new stock ROM that you have just installed).

    NOTE: If you can't make the rescue operation work using the LMSA tool, don't feel bad. Half the time I can't get it working either. As an alternative you can eliminate the LMSA tool all together by using the QComDLoader tool directly. You can find a link to the tool with instructions at the bottom of this post.

    PREREQUISITES:
    • The understanding that by making these modifications, specifically unlocking the bootloader, will likely void the warranty of your device.
    • Be aware that when you modify your device you do so at your own risk. Be sure to follow all steps carefully or you could end up losing all of your data or bricking your device. IF YOU ARE UNSURE ABOUT WHAT YOU'RE DOING THEN STOP NOW.
    • As stated above, your device needs to be running Android 9.0 - Pie.
    • You need to make sure you have developer settings turned on so that you can enable the "OEM unlocking" setting and the "USB debugging" setting. There are many guides available on how to turn on developer settings, so that is beyond the scope of this guide.
    • The fastboot tool must be installed on the device that will be connected to the tablet via a USB cable. Your USB device drivers need to be up to date on that device. In most cases that will be a Windows 10 PC, but the fastboot tool can also be used from devices running Linux or Android. There are a lot of resources already available on how to install the fastboot tool and USB drivers, so that is beyond the scope of this guide.
    • You should have a basic familiarity with the fastboot tool and the flashing of image files via the command line.
    • BACK UP ALL OF YOUR DATA THAT YOU WANT TO KEEP ON THE TABLET. WHEN YOU UNLOCK THE BOOTLOADER, EVERYTHING ON THE TABLET WILL BE WIPED. THAT INCLUDES THE INTERNAL SD CARD AS WELL AS ANDROID AND APP SPECIFIC DATA. ALL THAT WILL REMAIN IS STOCK ANDROID PIE THAT HAS BEEN FACTORY RESET.

    HOW TO UNLOCK:
    1. Turn the tablet off.
    2. Hold down the volume down button along with the power button so that the tablet goes into fastboot mode.
    3. Using the USB cable, connect the tablet to the device with the fastboot tool installed.
    4. Launch the command line or terminal emulator from the device with the fastboot tool installed.
    5. Unlock the bootloader with the command:
      Code:
      fastboot oem unlock-go
      This will begin the system wipe process and will take around 5 minutes to complete. Once it is complete, the tablet will boot up into Android starting at initial configuration wizard.

    HOW TO ROOT:
    1. Power the device off. Don't bother with the initial configuration wizard.
    2. Hold down the volume down button along with the power button so that the tablet goes into fastboot mode.
    3. From the command line, navigate to the directory containing the Magisk prepatched bootloader image (magisk_patched.img) that you downloaded in the prerequisites.
    4. Flash the Magisk prepatched bootloader image with the command:
      Code:
      fastboot flash boot magisk_patched_boot-TB-X705F_SXXXXXX_XXXXXX_ROW.img
    5. Boot normally into Android with the command:
      Code:
      fastboot reboot
    6. Go through the Android setup wizard making sure that you at least configure your Wi-Fi connection.
    7. Once you're done with the Android setup wizard, find Magisk Manager in the app drawer and open that app. Download and install the latest release of Magisk Manager from GitHub: LINK
    8. You will be prompted to download and install the latest full version of the Magisk Manager. You will also need to grant permission allowing the APK file you just downloaded to be installed.
    9. Once the newest version of Magisk Manager has been installed, open that app.
    10. Magisk Manager will state that it needs to complete the Magisk setup. Begin that process. It will take a minute or two to complete and then will automatically reboot the tablet.

    Congratulations. Your Lenovo Smart Tab P10 (TB-X705F) should now be fully rooted with Magisk. As a final task, it would probably be a good idea to install your favorite version of BusyBox. I highly recommend that you use the systemless version that can be downloaded and installed directly from Magisk Manager.

    HOW TO INSTALL OTA UPDATES

    If you are rooted with a bootloader that is patched with Magisk, then you will not be able to install OTA updates. The OTA update will look for the original unpatched bootloader image for the current build. If it is not installed then the update will simply fail.

    INSTRUCTIONS:
    1. Check to make sure which version of the stock ROM you are currently running.

      TB-X705F_S000017_20180831_ROW (8.0 - Oreo)
      TB-X705F_S000037_20181220_ROW (8.0 - Oreo)
      TB-X705F_S200095_190528_ROW (9.0 - Pie)
      TB-X705F_S210068_190904_ROW (9.0 - Pie)
      TB-X705F_S210120_191029_ROW (9.0 - Pie)
      TB-X705F_S210135_191212_ROW (9.0 - Pie)
      TB-X705F_S210137_200407_ROW (9.0 - Pie)
      TB-X705F_S210154_200910_ROW (9.0 - Pie) <current version>

    2. Download the original bootloader image for the version of the stock ROM your are currently on.
    3. Flash that bootloader image to the device.
    4. Install the OTA update. You can use the automatic update app inside of Android. You can also install the update manually. Download the OTA update file you need from the software links at the end of this post. Copy that file to your external SD card. Boot the tablet up into recovery (hold power, volume up, and volume down). Choose to apply update from SD card.
    5. Download the Magisk patched bootloader image for the version of the stock ROM your are upgrading to.
    6. Flash that bootloader image to the device. Reboot to system and you're all done.
    * NOTE: Installing an OTA update on a device running TWRP with a DECRYPTED data partition, you must follow a few extra steps. @clsA has documented that process HERE.

    STOCK ROM FILES

    TB-X705F_S000017_20180831_ROW:
    Full Stock ROM
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S000037_20181220_ROW:
    OTA Update From Previous Version
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S200095_190528_ROW:
    OTA Update From Previous Version
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S210068_190904_ROW:
    OTA Update From Previous Version
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S210120_191029_ROW:
    Full Stock ROM
    OTA Update From Previous Version
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S210135_191212_ROW:
    Full Stock ROM
    OTA Update From Previous Version
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S210137_200407_ROW:
    OTA Update From Previous Version
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S210154_200910_ROW:
    OTA Update From Previous Version
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S210164_201119_ROW:
    OTA Update From Previous Version
    Original Bootloader Image
    Magisk Patched Bootloader Image

    TB-X705F_S210214_220725_ROW: <=== LATEST VERSION
    Full Stock ROM
    Original Bootloader Image
    Magisk Patched Bootloader Image

    MISC HELPFUL LINKS

    Latest Magisk Releases: LINK
    Latest TWRP Custom Recovery the P10: LINK *** Many Thanks to @clsA and @drmarble ***
    QComDLoader Tool v1.06 with Settings Preconfigured: LINK
    SEE ATTACHED QUICK REFERENCE IMAGE FOR THE QCOMDLOADER TOOL.
    QComDLoader Tool Info: You can use this tool to perform a rescue without the LMSA tool. I zipped up the tool so that it is pre-configured with the proper settings. It should work with the P10 and the M10. All you have to do is tell the tool where you have unzipped the full stock ROM to. Then in order to actually perform the flash operation, tell QComDLoader tool to start listening for connections. With the tablet powered off, press volume down and simply plug in the USB cable. Keep volume down pressed for about five or six seconds until you see the red LED blink a couple times. Then just let it sit there. It will appear to be doing nothing for a couple minutes. And then all of a sudden the tool will show that it is connected and will start the flash process.
    5
    I built another 'TWRP for the P10 X705F. This one has the correct build fingerprint to flash the new update.
    TWRP-3.3.1-TB-X705F_USR_S210120_191029.img
    With this you should be able to install the update.zip that came out this month. I let my tablet download the update but not install it. The zip is located at: /data/data/com.lenovo.ota/fileslenovoota/*.zip
    I have uploaded my version and you can get it here: c70574e81a1c6dcbb0d5e18c83b6a5a9_lenovoota.zip
    As yet, I have not installed it. I have the flu and don't want to mess up my comic book graphic novel reader. I expect that you need to fastboot flash the stock bootimage (available on page 10 of this thread), reboot to recovery (vol+ and vol- and power, all three at the same time until twrp starts) and install the update. I tried installing the original image to the boot sector using twrp's install .img function and the recovery won't install and complains about the wrong boot image. I hope that fastboot flashing will fix that. I am currently too ill to figure it out.
    5
    TWRP 3.3.1-0 TB-X705F Lenovo Smart Tab P10

    First off big thanks to @Yahoo Mike and @turboperson123 and @Chaser42 for all the Help and work you have done.

    This is TWRP 33.1-0 for the TB-X705F

    I used the twrp port from stock recovery method here > https://xdaforums.com/android/general/guide-porting-twrp-source-t3843473
    Along with Yahoo Mike's twrp_x605f.img as the source.

    Instructions:

    Unlocking the bootloader
    (This will Wipe your Tablet / Backup everything to your PC first, also note what version firmware is on your tab)
    You need to have adb and fastboot installed on your PC
    and enable developer options on the tablet, then go to developer options / enable usb debugging and enable oem unlocking Now connect the Tablet to the PC (Note: when you connect the tablet to pc with usb cable you will see usb debugging authorizations, click on allow always to make the device work with adb)
    now type adb reboot bootloader
    once the tablet is in fastboot type
    Code:
    fastboot oem unlock-go
    after its done use fastboot reboot

    Flashing TWRP
    After you have setup your Tablet again (skip all if your going to format data later in the next section), and just enable developer options on the tablet, then go to developer options / enable usb debugging and enable oem unlocking. Now download TWRP and put it with your adb and fastboot files

    On the PC open the command from adb folder again and do the following commands
    Code:
    adb reboot bootloader
    fastboot flash recovery TWRP_P10_x705f.img
    fastboot reboot

    Correction:
    reboot into recovery using power + Volume up and down right after flashing TWRP, or it gets overwritten by the stock recovery

    This takes you to TWRP - on the first screen choose Keep System Read Only
    Congratulations you now have TWRP

    At this point you need to Flash Magisk.zip
    then Reboot Recovery and do a Full Backup of all partitions.

    Optional
    Your internal storage will not be available in TWRP until you choose Wipe / format data / Type - Yes
    for the change's to stick you'll need to flash the newest Disable-dm-verity-forceencryption.zip - read more and download it here
    Thanks go to @Zackptg5

    Its also Very Important that you have a Stock backup of System_image and Vendor_image and boot.img so you can take any future OTA that come along.

    Now you can reboot system / give it time you just wiped data and it takes a few to rebuild it

    If you get stuck you can use these key combo's to get back to TWRP and the bootloader
    Volume Down + Power = fastboot mode
    Volume Up + Volume Down + Power = recovery mode
    Volume Up + Power = EDL (Rescue mode)

    Downloads

    TWRP_P10_x705f.img > https://androidfilehost.com/?w=files&flid=303337
    Or here > https://drive.google.com/open?id=1PYY20GgP3lbI8okV085UOh9JoYSMLPPs

    Or all my P10 files > https://androidfilehost.com/?w=files&flid=303336

    Notes
    Because I used Yahoo Mikes source we still don't have /data Decryption/Encryption, the only way to use the Internal sd in TWRP is to format data as I described above.

    If for any reason your tablet boots to a black screen or just sits on the lenovo screen for a long time you can always reboot to TWRP
    and flash the patched_boot.img again or restore your backup and flash magisk again.

    I keep the following files on my external_sdcard at all times :
    Magisk-v20.1.zip
    Magisk-uninstaller-20191102.zip
    The current Stock and Patched boot.img
    TWRP_P10_x705f.img
    Disable_Dm-Verity_ForceEncrypt_12.18.2019.zip
    and my original TWRP Backup + any newer backups
    These files should get you out of any mess you may run into

    That's all for now ...Enjoy
    4
    Success. After an enormous amount of research and trial and error, I was able to create the new bootloader image by manually applying boot.img.p with the Android applypatch tool. Many thanks to @acwodc for recommending this method. I pulled an all nighter and took another HARD look into making applypatch work. I finally found that the tool was modified by Google in 2017 so that it no longer works with files. You can only patch the memory segments directly. Precompiled binaries of older versions of the applypatch tool don't seem to exist anywhere for download. So I had an idea. I dusted off an older Android device that runs Marshmallow. I found the pre 2017 version of the applypatch tool on that device. Sure enough, that version of the tool works with files! After that, it didn't take long for me to create the shiny new boot.img file for OTA update #3.

    Here are links to the new bootloader image along with the bootloader image prepatched with Magisk:

    boot-S210068_190904.img
    boot_magisk_patched-S210068_190904.img

    While the prepatched bootloader is the important file to have now to have root with the newest update, the original bootloader is important to have as you will have to flash that version in order to apply any additional OTA updates.

    Enjoy!

    Chaser
    4
    In case anyone still uses this tablet... There is new version;

    Original Boot Image: boot-TB-X705F_S210240_220725_ROW.img
    Magisk 26.4 Patched Boot Image: magisk_patched-boot-TB-X705F_S210240_220725_ROW.img