Runnymede S-OFF

Search This thread

tasz

Member
May 22, 2007
33
4
I don't have my computer with me for a while, why don't you use unlimited.io HBOOTs? They also by pass the CID check and you don't need sigtool if you use them, if you already have my HBOOT installed, you can upgrade to unlimited.io HBOOTs by executing fastboot flash hboot <NAME OF THE FILE> or following the instructions in their site.
Anyways if you really need sigtool, you can compile it from source.


New link

https://www.box.com/s/77d2187400b5cece5daa
 

jamaljmys

Senior Member
Dec 16, 2007
911
48
my device is bootloader unlocked, rooted, S-Off and still gett 155 error whin trying to flash RUU rom for different region.
any idea please?
 

abusseemkh

Senior Member
May 9, 2012
145
27
Beirut
Samsung Galaxy S21 FE
thr is no way u can flash a Rom from another region without flashing a custom boot and recovery

Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2

---------- Post added at 09:01 PM ---------- Previous post was at 08:58 PM ----------

thr is no way u can flash a Rom from another region without flashing a custom boot and recovery

Sent from my HTC Sensation XL with Beats Audio X315e using XDA Premium HD app
 
  • Like
Reactions: jamaljmys

jamaljmys

Senior Member
Dec 16, 2007
911
48
thr is no way u can flash a Rom from another region without flashing a custom boot and recovery

Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2

---------- Post added at 09:01 PM ---------- Previous post was at 08:58 PM ----------

thr is no way u can flash a Rom from another region without flashing a custom boot and recovery

Sent from my HTC Sensation XL with Beats Audio X315e using XDA Premium HD app

yes i have custom recovery but boot?
 

abusseemkh

Senior Member
May 9, 2012
145
27
Beirut
Samsung Galaxy S21 FE
you are going thru the same thing i went thru .. i got my SXL which was from the Korean region but i wanted a full arabic support i went thru hell but i managed to change the region in the end.. First u need ADB tools which is a kit tht's gonna help u flash ur roms, recoveries.. etc among other things and u need to download the rom of the specific region u want ... tell me wht u've got so tht i can tell u wht to do.

Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2
 

jamaljmys

Senior Member
Dec 16, 2007
911
48
you are going thru the same thing i went thru .. i got my SXL which was from the Korean region but i wanted a full arabic support i went thru hell but i managed to change the region in the end.. First u need ADB tools which is a kit tht's gonna help u flash ur roms, recoveries.. etc among other things and u need to download the rom of the specific region u want ... tell me wht u've got so tht i can tell u wht to do.

Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2

yes boss i have this case exactly.

iam good in adb and i have all tools needed, jut go ahead and tell me the procedures.

thanks in advance
 

abusseemkh

Senior Member
May 9, 2012
145
27
Beirut
Samsung Galaxy S21 FE
Here is what you need

First sorry about being late coz i needed some time to recover all necessary info to get what u need.. if u r running GB(Gingerbread) then go ahead and download the Runnymede S-OFF protected HBOOT (GB) from this link http://unlimited.io/runnymede.htm .. if u r running ICS thsn download Runnymede S-OFF protected HBOOT (ICS) from the same link ... then u can flash any RUU u want whatsoever .. All needed steps are written in details in Unlimited.IO website ..
P.S. If u r running ICS i'd highly suggest u download Runnymede ICS Recovery from the same link ... Please tell me about any promblems u might encounter I'll be glad to help .. this method is 100 % guaranteed coz im already running a stock RUU which is different from the shipped RUU I had first. :D
 
  • Like
Reactions: jamaljmys

Lexmazter

Retired Recognized Developer
Aug 7, 2011
1,082
870
Timisoara
ASUS ZenFone 7/7 Pro
First sorry about being late coz i needed some time to recover all necessary info to get what u need.. if u r running GB(Gingerbread) then go ahead and download the Runnymede S-OFF protected HBOOT (GB) from this link http://unlimited.io/runnymede.htm .. if u r running ICS thsn download Runnymede S-OFF protected HBOOT (ICS) from the same link ... then u can flash any RUU u want whatsoever .. All needed steps are written in details in Unlimited.IO website ..
P.S. If u r running ICS i'd highly suggest u download Runnymede ICS Recovery from the same link ... Please tell me about any promblems u might encounter I'll be glad to help .. this method is 100 % guaranteed coz im already running a stock RUU which is different from the shipped RUU I had first. :D

You can also use the tool provided in my signature (XL Multi Tool) to flash S-OFF and recoveries needed. Just saying :)
 

sohail667

Account currently disabled
Jul 10, 2011
1,768
257
GB
i trying to s-off via cmd
fastboot flash hboot hboot_7230ddr2_Runnymede_6.28.6667.nb0
got error remote signature varify fail
plz help
i am using insanly cool v3 ics
phone is rooted
hboot 1.28.006
 

Attachments

  • Untitled.jpg
    Untitled.jpg
    57.4 KB · Views: 268
Last edited:

sohail667

Account currently disabled
Jul 10, 2011
1,768
257
GB
Runnymede S-OFF HBOOTS currently support the following Android devices:
HTC Sensation XL (Runnymede)

Instructions:

To load the first of these HBOOTS on your phone if you are on a HTC factory HBOOT you must be rooted, either by using a temporary root such as zergRush, tacoroot or sparkyroot or by performing the bootloader unlock and flashing superuser. Installation is then performed using the following procedure:
adb push hboot_7230ddr2_Runnymede_6.25.4444.nb0 /data/local/tmp
adb shell
$ su
# dd if=/data/local/tmp/hboot_7230ddr2_Runnymede_6.25.4444.nb0 of=/dev/block/mmcblk0p18
# exit
$ exit
adb reboot-bootloader
If any of the HBOOTS from this page or the HBOOT from jardjadb's original thread have been previously flashed then it is not necessary to follow the above procedure, instead the new HBOOT can be flashed directly using fastboot using the follow command:
fastboot flash hboot hboot_name.nb0
for example:
fastboot flash hboot hboot_7230ddr2_Runnymede_6.25.4444.nb0


i cant understand the procedure plz explain from where i give these commands ??????
on phone or on pc cmd
plz solve my prob.??????/
 

abusseemkh

Senior Member
May 9, 2012
145
27
Beirut
Samsung Galaxy S21 FE
on pc cmd buddy but make sure u hv adb tools installed firsr

Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2

---------- Post added at 05:25 PM ---------- Previous post was at 05:17 PM ----------

if youbr running GB(Gingerbread) then move GB protected hboot to adb folder and follow the instructions .. if u r running ICS then move ICS protected hboot and flash it as instructed... last thing is pay attention to the name of the hboot u r flashing and change accordingly

Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2
 
  • Like
Reactions: rlamba

zeyadhan

Senior Member
Jul 4, 2012
485
129
31
tripoli
need help

when flash the null-signed rom zip file code fastboot flash zip rom-new.zip when finshed is say failed remote not allowed help me to fix this problem
my device unlocked runnymede pvt ship s-on hboot1.25.0004 radio 3831.15.00.20-m
:(:(:( :(
 

rlamba

Senior Member
Oct 8, 2011
254
20
Varna
Recovery not working

I have s-off phone with hboot 6.28.6667 unprotected ICS (from unlimited.io). Iam using ICS recovery from the same unlimited.io

My problem is when ever i try to install from a zip file on sdcard it fails. I have also tried CWM recovery (5.8.3.1) and this also fails.

Any help is greatly appreciated.
 

rlamba

Senior Member
Oct 8, 2011
254
20
Varna
You are genius

A wild guess would be by flashing an RUU or stock hboot?
Someone should confirm on this though, I'm not responsible of your device.

I have done s-off using unprotected hboot for ICS from unlimited.io site. My recovery is not working, can't install from zip file on sdcard.
I have user recovery from unlimted.io site and also CMW Recovery (Touch one). I got some pointers from your guide. Thank you very much.
 

abusseemkh

Senior Member
May 9, 2012
145
27
Beirut
Samsung Galaxy S21 FE
if you want the rom to be working flasha a "PROTECTED" hboot from unlimited.io then download a RUU.exe over the net no matter what region u choose; search for XSL RUUs .. they are hosted on formatfactory.com.. Or try the zip thing it may work just make sure if u r running GB (Gingerbread) flash GB PROTECTED Hboot . if u r running ICS flash ICS PROTECTED Hboot.. hope this helps

Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2
 

rlamba

Senior Member
Oct 8, 2011
254
20
Varna
if you want the rom to be working flasha a "PROTECTED" hboot from unlimited.io then download a RUU.exe over the net no matter what region u choose; search for XSL RUUs .. they are hosted on formatfactory.com.. Or try the zip thing it may work just make sure if u r running GB (Gingerbread) flash GB PROTECTED Hboot . if u r running ICS flash ICS PROTECTED Hboot.. hope this helps

Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2

I have tried with protected and also unprotected hboot for ICS from unlimited.io sit. I also used ICS recovery from the same site and also tried CWM touch recovery. I still can't install zip files from sdcard. It gives error (Status 0). This S-OFF business is a waling nightmare.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 27
    Runnymede S-OFF

    Since we didn't have S-OFF on Runnymede, I decided to work on it, and here is the result:

    attachment.php


    It's basically a patched bootloader that pretends S-OFF (not to be confused with Radio S-OFF.)

    The following commands have been tested and working correctly:

    erase (system, recovery, boot)
    flash (zip, system, recovery, boot, hboot, radio)
    boot
    It also by passes the CID check (See the next post for a workaround.)
    and here is the flash "zip", "hboot", and "recovery" demo:


    It's still under development; since many people asked me to release it, I decided to release a public beta:

    Download (Windows Only) (link removed, see below)

    Open the attached file and follow the instructions.
    You'll need to install a stock RUU (or if not available, you can flash this stock recovery posted by fshami on an unlocked device) and install HTC Sync Drivers.

    Note that this is not guaranteed to work and I won't take any responsibilities if something bad happened to your device.

    My farewells

    I had lots of fun modifying Runnymede HBOOT and it was a great experience. I want to say thanks to all of the testers for their feedback and also for being nice and patient (maybe I should have released this after my exams, so I'd have enough time to work on it), and I'm sorry for the problems you may have faced because of the incompleteness of my work.

    Recently unlimited.io guys (known for Juopunutbear S-OFF) provided their patched HBOOTs. Apparently these are available for GB and ICS, by-pass CID check and have optional update protection:
    http://unlimited.io/runnymede said:
    It was identified by XDA memeber fardjad that the hboot partition on the runnymede is not protected and can be written to with a rooted phone. One of the members of unlimited had for a short period of time the occasion to use a Sensation XL. Having seen the discovery made by fardjad and due to some limitations in the procedure, this memeber created hboots which provide more complete S-OFF functionality as well as providing overwrite protection. Almost immediately afterwards the European Sensation XL obtained an ICS update. Unfortunately for may users this meant that a new and backward incompatible hboot was introduced. The unlimited member again created modified hboots for his own use. It was not originally intended that these hboots would be released for general use, however we are aware that many users are unhappy with the limitations of unlock but have had to do this in order to make full use of ICS. We have therefore decided to release the GB and ICS versions of these hboots.

    See this post.
    14
    How to install RUUs with different CIDs

    You won't get Radio S-OFF with flashing this HBOOT. Having this said, even if you enable writeCID function in HBOOT you can't change the CID.

    I thought people prefer to install one of the custom ROMs floating around in Development Section and flashing the Radio separately rather than upgrading to ICS using RUUs... well I thought wrong :)
    And for those having problems with CID, here is a workaround:

    First thing you need to do is to extract the rom.zip file from the RUU. I believe Shen posted a video on XDA-TV showing this, here is a quick how-to however:

    1. Open the RUU.
    2. After the Welcome screen has shown up, open %temp% in explorer (ie. Meta/Win-Key + R, type %temp% and press enter)
    3. Sort items by Date modified and open the most recent modified folder having a name like {3F99782F-1E57-40F2-9F33-D48C3DC171C5}
    4. Search for rom.zip and move/copy it to somewhere else.
    5. Close the RUU.

    Now download SigTool (link removed, see the first post) and place it beside the rom.zip file. Open Command-Prompt, navigate to the relevant directory and execute the following:

    Code:
    SigTool rip rom.zip
    the expected output is:

    Code:
    Creating backup...
    Ripping signature...
    Done.
    Extract the signature-ripped rom.zip file.
    Open android-info.txt in a *nix end of line aware text editor (ex. Notepad++). You should see something like the following:

    Code:
    modelid: PI3920000
    cidnum: HTC__001
    cidnum: HTC__E11
    cidnum: HTC__203
    cidnum: HTC__102
    cidnum: HTC__405
    cidnum: HTC__Y13
    cidnum: HTC__A07
    cidnum: HTC__304
    cidnum: HTC__032
    cidnum: HTC__J15
    cidnum: HTC__016
    mainver: 1.05.111.8
    hbootpreupdate:12
    Add your phone CID

    If you don't know your CID you can get it this way:
    While your phone is in bootloader mode and connected in FASTBOOT-USB mode, execute this:

    Code:
    fastboot getvar cid
    it should output something like cid: T-MOB101

    then add a new line (cidnum: <YOURCIDNUM>) below the modelid in android-info.txt so it looks like:

    HTML:
    modelid: PI3920000cidnum: T-MOB101...
    Save changes and close the editor.

    This is very important:
    In extracted contents you should see a file with hboot name prefix, exclude/take it away and repack other files. I assume you'll choose rom-new.zip for the archive name.

    Now you should null sign (that's how I like to call it) the file:

    Code:
    SigTool nullsign rom-new.zip
    and flash the null-signed rom zip file:

    Code:
    fastboot flash zip rom-new.zip
    when finished, flash the 1.28 hboot you moved away before:

    Code:
    fastboot flash hboot hboot_*.nb0
    Reboot your device.

    I know this is not the easiest guide ever but I really don't have enough time to create a one-click tool for this. Needless to say that this is not guaranteed to work and I won't take any responsibilities if you bricked your phone.

    Take care :)
    7
    Yes older 1.25 as my phone is soft brick too. Unlike you I can't flash ruu as no Europe ics ruu file as yet. Hboot 1.28 can't be downgraded as when flash it replaces fard patch. Cid errors on official ruu and my old ruu won't flash as I now have newer hboot. Can we have a patched 1.28 hboot so I can downgrade back to 1.25 and bring phone back lol.

    Sent from my HTC One X using xda premium

    Guys please be careful when playing with HBOOT, Radio, etc.

    Here is the easy way to unbrick:

    1. Flash your unlock token on 1.28 if it's (re)locked.
    2. Boot into a working recovery.
    3. Download this and push it to /tmp (adb push fardjadb_runnymede.nb0 /tmp)
    4. get into adb shell and execute dd if=/tmp/fardjadb_runnymede.nb0 of=/dev/block/mmcblk0p18
    5. reboot bootloader
    6. Download this and flash it to the misc partition (fastboot flash misc supermisc)
    7. fastboot reboot-bootloader
    8. Install a stock RUU
    * As alfchin said, if you want to flash RUUs with different CIDs, extract the zip, open android-info.txt, change CID, repack and flash with fastboot flash zip ...
    6
    What don't you understand? S-Off means security off, the standard way of acheiving S-Off is by switching off the security flag held on the radio partition. This is commonly known as Radio S-Off. There is also another type of S-Off called engeneering S-Off, this is acheived by flashing a special engeering bootloader (hboot) after you already have standard S-Off.

    Now this is neither, This is a special modifed version of the standard HTC hboot by fardjab, this hboot tricks the device into thinking it is S-Off and allows end users to perform security protected actions. But unlike "real" S-Off this is not perm, flashing a stock HTC hboot or RUU will return you back to S-On status.

    Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2
    3
    What the hell are you on about?
    I don't even know who you, or this paul.robo are.
    Sorry, you fail to make any sense.

    mmhh..sorry ieftm...but i have a similiar thinking...maybe you can clear this..

    i had maked a donation thread...and some of us and also i maked a donation...but all response what i got from you guys was you kicked me from chat and say "read through the lines" this is not friendly....so maybe you can clear this situation...i also write emails and got no response...with kind regards...Alex