Exynos 8890 - International Ver. [SM-N935F/DS]
Last Version of TWRP: v3.2.1-0
1 - ▼ DISCLAIMER ▼
- I DECLINE TOTAL RESPONSIBILITY IF YOU DAMAGE OR BRICK YOUR PHONE WHILE TRYING THIS METHOD ! YOU'RE DOING IT AT YOUR OWN RISKS !
- THIS METHOD IS ONLY VALID FOR THE GALAXY NOTE FAN EDITION (EXYNOS Ver.) SM-N935F/DS VERSION ! IT'S NOT SUITABLE FOR THE KOREAN VARIANTS ! (N935S/N935L/N935K)
- FLASHING ANY CUSTOM BINARY WILL IRREMEDIABLY VOID YOUR WARRANTY AND KNOX COUNTER WILL BE TRIGGERED (0x1).
- MAKE SURE THAT YOUR DEVICE HAS AT LEAST 70% BATTERY BEFORE ATTEMPTING ANY STEPS !
- ALL THE DATA ON THE INTERNAL STORAGE WILL BE DELETED ! BACKUP ALL YOUR FILES IN A SAFE PLACE BEFORE PROCEEDING !
To avoid making any mistakes, I HIGHLY recommend you to READ CAREFULLY the WHOLE guide BEFORE attempting anything! Prevention is better than cure remember
The Galaxy Note FE (like many other Samsung devices) use dm-verity and data partition encryption.
dm-verity will be disabled when you'll flash Magisk and the data partition encryption will be removed with TWRP during the process.
► About RMM State :
The Note FE (International Ver.) is shipped with something called "RMM".
This component is able to prevent the end-user from flashing any custom binary on the device while it's active.
You can check if your RMM is enabled or disabled by putting your device in Download Mode :
- If the line "RMM State: Prenormal" is present, then RMM is enabled and you won't be able to flash any custom binary.
- If it's absent, then it has already been disabled which means that you'll be able to flash any custom binary.
This component suddenly disable itself after 7 days of continuous uptime since the device has been last powered on.
You can check your device actual uptime by going into : "Settings" > "About phone" > "Status" > "Uptime"
Or use CPU-Z : "System" tab and "System Uptime". (I prefer CPU-Z, as it's displayed in days rather than hours.)
Once 7 days are elapsed, it will be desactivated BUT! If you format the data partition for example, which's required to disable data encryption for rooting, it will be back!
Even worse, if you reboot once you've setup your phone, you'll get blocked with a message when you'll powering it on saying ("custom binary has been block due to remaining installment balance") and you'll have to reflash stock to get your device working again...
(January 9th 2018) To this day, the purpose of this feature remains unknown. I've asked Samsung personally, they've never wanted to answer me about it.
The error message when flashing any custom binary while this thing is active ("custom binary has been block due to remaining installment balance") is still a mystery and seems to be rare. Google is almost silent as there's only a few cases and further more, they're recent, meaning that this is some new stuff from Samsung. Why is it enabled by default ? No one knows. (Not even me)
(February, 25th 2018) RMM has been largely documented now. A fix provided by an XDA user seems to be working to avoid RMM to be able to reboot directly after flashing and to relock itself. Although, there is still no way to totaly bypass the first 7 days wait.
- A SAMSUNG Galaxy Note FE [SM-N935F/DS]
- Install Samsung USB Drivers (If not already installed, HERE)
- Download the lastest Odin (v3.12) [HERE]
- Download TWRP for the Galaxy Note7 [SM-N930F] (v3.2.1-0.img.tar) [HERE]
- Download Magisk (v16.0) [HERE]
- Download the RMM Patch [HERE]
- A PC with USB-C Cable
- A Brain, a pair of eyeballs and some fingers (Yeah, that could help... Maybe)
- Make sure to enable "USB Debugging" and "OEM Unlock" in the Dev Options.
- Connect your phone to your PC and drag and drop the Magisk package and the RMM fix at the root of your microSD card.
- Wait 7 days (or 168 hours) while maintaining your device up and running. (NEVER REBOOT DURING THIS TIME ! IT WILL RESET THE RMM TIME COUNTER!)
- Once the 7 days (168h) are elapsed, turn off your device.
- Enter the Download Mode by pressing simultaneously the "Home" + "Vol. Down" + "Power" buttons for 5 sec. Read the warning message and just answer "Continue".
- Launch Odin and select TWRP 3.2.1-0 archive by clicking on the "AP" button.
- Go to the "Options" tab and untick "Auto-reboot"
- Connect your phone which is in DL Mode to your PC.
- /IMPORTANT!\ Make sure Odin is seeing your device properly.
(Once connected, you should see the box under the "ID:COM" tab displaying "0:[COM*]" in blue, meaning your phone has been detected successfully. If not, Install the Samsung USB Drivers, link available in the prerequisites section.)
- Flash TWRP.
- Wait while Odin in flashing the recovery. /AVOID TOUCHING ANYTHING DURING FLASH PROCESS\
- When Odin shows "PASS", take your device in hands, disconnect the USB-C cable and press simultaneously the "Home" + "Vol. Down" + "Power" buttons until the DL mode disappears.
- When at the precise moment the screen becomes black, immediately release the "Vol.Down" button and press the "Home" + "Vol. UP" + "Power" buttons during 10 to 15sec to enter TWRP recovery.
- You should see TWRP logo just after the Note FE splash-screen.
- Once TWRP is showing up, tick the option labeled "Never show this screen during boot again" and slide the cursor to allow modifications.
- On the main menu, tap on "Wipe"
- Then, tap on "Format Data" and confirm that you want to erase data by entering "YES" in the text box and validate.
- Data is now wiped and encryption is removed ! Yay!
- Return to the main menu and tap "Reboot" and then "Recovery"
- Once the device has rebooted in Recovery again, tap "Install" and install Magisk package from your SD card.
- Once it's done, wipe cache & dalvik and return to the main menu.
- Install the RMM fix package.
- Once it's done, wipe cache & dalvik and return to the main menu.
- Last step, tap "Reboot" and then "System"
Once you've booted up and setup your device, do not reboot immediately! We still have to edit the build.prop. So download BuildProp editor (or use a file manager) :
- At the line "ro.security.vaultkeeper.feature=" change the value to 0.
- Once done, you can reboot.
Note : All Samsung Pay, Pass, Knox etc.. features and Secure Folder won't be usable anymore as Knox as been triggered. For Samsung Health, there is a easy fix. Just read the whole guide
Samsung provides an anti-malware on their phones and the Note FE is one of them. The system will detect that Magisk has been installed and a service called "SecurityLogAgent" will regularly
pop-up in your notification bar to invite you to launch the Device Maintenance app and reboot the device using an orange button to "eliminate" the threat. => DO NOT REBOOT USING THIS BUTTON ! <=
You'll end up soft-brick your phone. And this, won't disappear on it's own. (It's not like the RMM component.)
To disable and definitively hide that anti-malware crap from the Device Management app :
- Download "CSC Features Expert for Samsung" on the Play Store (Free)
- Launch the app and give it the root rights
- In the search bar, type "DisableAntiMalware" (Without commas)
- Click on the item and enter the value "TRUE" (Same)
- Click on "Save"
For whatever reasons, Samsung locks-up Samsung Health once Knox has been triggered.. But go figure why, there's only a simple thing to do to re-enable the app and be able to use it again easily.
You can either use a file manager or the app "BuildProp Editor".
- Download MiXplorer v6.22.1 HERE (Or any file manager of your choice if you're more familiar with it. I recommend MiXplorer because I use it everyday, it's lightweight, really nice to use, free and it's made by a great guy on XDA )
- Access root partition and go into the "/system" folder
- Open the file "build.prop" with a text editor.
- Simply change the line "ro.config.tima=1" to "ro.config.tima=0"
- Save the changes, and close the app.
You have a problem with your Note FE ? Take a look at those answers before posting :
- Q: I try to flash TWRP with Odin but a message pops up on my device and says "custom binary has been block due to remaining installment balance". What's happening ?
A: RMM. This message is more likely to appear if you still have RMM enabled. Boot your phone, keep it powered on and running and never reboots during 7 days and it should disappear.
- Q: I've flashed TWRP with success, formatted data and stuff but I see the message "custom binary has been block due to remaining installment balance" at boot and I can't boot ! What's happening ?
A: RMM again ! Once data has been formatted and Android first reinstalled, RMM state is back! You need to wait 7 days before reboot/shutdown your device. Now, to unbrick it, you have 2 options : 1 - Flash stock BUT with HOME_CSC. (It will keep the RMM elasped time, but you'll have to keep in mind since how much time has elapsed already.) or 2 - Reflash stock and follow the entire procedure again and the waiting again.
- Q: I've managed to install TWRP, root and get my phone up and running but I've clicked on the orange "Reboot" in the Anti-Malware tab in the Device Management app.
Now my phone bootloops (or) shows the message "custom binary has been block due to remaining installment balance" and I'm stuck with it.
A: You've got trapped into Samsung Anti-Malware crap. This utility can't delete Magisk. Only solution ? Re-flash stock, repeat the entire procedure, disable SecurityEventLog service to get rid of those annoying security pop-ups AND stay away from the anti-malware utility !
Thanks. If there is any mistakes or errors, please feel free to report them to me, I'll correct them
Credits goes to :
- Magisk (@topjohnwu & @phhusson, @Chainfire, @nkk71, @osm0sis, @Captain_Throwback, @Didgeridoohan, @jenslody, @digitalhigh, @DVDandroid)
- TWRP Recovery (@TeamTWRP)
- The RMM Fix (@BlackMesa123)
- Odin Soft (@anycallmongolia)
- MiXplorer File Manager (@HootanParsa)
- How to keep the elasped time (@societyragdoll)
- SAMSUNG... (@Samsung) (duh)