FORUMS
Remove All Ads from XDA

How-To: S-ON from S-OFF (backwards)(Solved)

1,771 posts
Thanks Meter: 1,144
 
By Blue6IX, Senior Member on 19th February 2012, 07:44 PM
Post Reply Email Thread
Return to Contents Page - doubleshot Developers Reference

In This Post I channeled the info I found for making S-ON for the sensation - the posts leading up to this I had a halfway decent idea on how to do it but here's where the info came from:

Guide to Installing S-off, Unlocking, ClockWork, Root, SuperCID & S-on

Thanks to the people over in the Sensation forums who mostly figured this out.

Specifically, this post was the piece of info needed, everything else is a detail:
Quote:
Originally Posted by Jimmy Flip

Has anyone tried 'fastboot oem writesecureflag 3' to get S-ON after everything else has been returned to stock? If it works at all, you'd definitely want to do this as the very last step so all partitions pass signature checking. I don't have phone insurance so I'm not keen to try it myself just yet

There is a warning surrounding all S-ON how-to's that i've seen that says you could brick. Consider yourself warned.

I personally was willing to risk my device even though I was kinda making it up as I go - the risk was worth the potential gain. Sometimes you just gotta lay it on the line for the greater good.

I had to try this without an official (or any...) RUU as every instruction calls for so I Kinda took the plunge with the best of what I had available. I managed to make it work without an RUU and in my search for one turned up a more recent PG59IMG.zip file we didn't yet know about, so it was a win.

I've been flipping S-ON and S-OFF (rev method) back and forth now for a couple of resets/restores etc... on the device, and no brick even without the RUU we don't have.

Here's how...

NOTE: Only have done this with a device with no SIM so far.

First - you need to do this:

Step-by-Step:
What you need:
  • - MicroSD card.
  • - A PG59IMG.zip file ( Links here )
How to make it:
  • [1] - Download an image linked here.

    [2] - Rename it to PG59IMG.zip

    [3] - Format your MicroSD card in the computer.

    [4] - Transfer the image from the computer to the MicroSD card.

    [5] - SAFELY EJECT the MicroSD card from the computer.
How to use it:
NOTE: Make sure you have a full battery!!!
  • [1] - Power off the doubleshot. Remove the battery and MicroSD card.

    [2] - Insert new card from above. ( or back up current card, make, and re-insert )

    [3] - Replace battery and backplate.

    [4] - Holding the 'Volume Down' button, press the 'Power' button.

    [5] - Wait for the loading bar to fill.

    [6] - When ready, it will ask you if you want to start the update.

    [7] - Select yes by pressing the 'Volume Up' button. Press 'Volume Down' if you just realized you have a low battery.

    [8] - Allow the update time to flash to your doubleshot.

    [9] - Let it sit for a minute or two after it says finished, then press power to reboot.

    [10] - Follow on-screen instructions until finished.
Then:
  • [1] - Reboot the doubleshot.

    [2] - When fully booted, open the settings menu.

    [3] - Go to "SD & phone storage" and choose "Factory data reset"

    [4] - Yes, wipe the sdcard too.

    [5] - Follow on-screen instructions until finished.
You now have your doubleshot returned to 'factory fresh' for whatever software package you chose to download, through and through. We showed the method to include the sdcard so you would have the device in a state as close to:
"Just like new!!"
...as possible.
This is very important to do. The factory reset after the flash is mandatory and must include the sdcard.
If you have a partition mis-match for your version at this point, then you may not be able to fix it, and you could brick unintentionally.

Make sure to minimize this possibility as much as possible by wiping the sdcard with the factory reset so that you don't have any stray files floating around that could cause you harm!
You should have already backed up the stuff on your sdcard you wanted to keep, that should go without saying for doing this kind of stuff?
Once this is done, you want to boot up to the stock ROM.

Then go to settings -> power -> uncheck fastboot

Then power off the device.

Give it a minute to settle down, then hold the 'Volume Down' key and press "Power' to boot into the hboot menu.

Choose 'fastboot' by pressing the power button while the highlight box is around that word in the hboot menu.

Once in the fastboot menu, plug into your computer.

Open a terminal window and get to the fastboot directory.

Type:
Code:
fastboot devices
...and make sure your device is listed.

Then type:
Code:
fastboot oem readsecureflag
should come back with secure_flag: 0

Now type:
Code:
fastboot oem writesecureflag 3
and then type:
Code:
fastboot oem powerdown
Now the device is powered off.

When next you power on, you will be S-ON with 1.44.0007 hboot and 1.28.531.9 software - back to retail launch condition. Completely.

Power on and get to the stock ROM.

Then go to "Settings" -> "SD & phone storage" and choose "Factory data reset" - Yep, sdcard too - and when this is done:

Congratulations - you are now factory fresh S-ON retail launch.

Check by booting into hboot and seeing it say S-ON or in fastboot mode issuing the command:
Code:
fastboot oem readsecureflag
----

What you do next is up to you - you can:
  • - S-OFF with the rev method
  • - Return to HTC in S-ON status (warranty?)
  • - Update your system to come forwad from stock retail.

----

STOP HERE IF JUST FOR HTC SERVICE

--------

SERIOUSLY, DON'T GO FURTHER IF THIS IS JUST FOR SHIPPING BACK TO HTC

----

Let's update:

Reboot your doubleshot to come back up to the full stock ROM.

Turn on wifi if necessary, add to a network and then:

Go to Settings -> About phone -> HTC software updates and then tap "check now"

It will tell you you have an update available, this will be the 1.28.531.10 update.

Follow the instructions for the update, let it install and when it is all finished and boots back up to the stock ROM you will be greeted with the popup:

"updated to 1.28.531.10"

Go to "SD & phone storage" and choose "Factory data reset" (yes for sdcard)

...and when that finishes:

Now you are at the last stopping point for S-OFF right now - you can either run the rev method and get S-OFF again, do nothing, or apply the next update.

----

Let's apply the next update:

(this is the point of no return - once you do this update you are stuck.)

This file was found on a quest for an RUU.

OTA 1.55.531.3 - Install as a PG59IMG.zip file.

When flashing the 1.55.531.3_Update_PG59IMG.zip file:

...on booting into hboot it loaded and then verified the package. Then asked me to update, I said yes and it immediately skipped:
  • - adsp.img
  • - boot_signed.img
  • - dzdata.img
  • - pg2fs_spcustom.img
  • - radio.img
  • - rcdata.img
  • - recovery_signed.img
  • - splash1.nb0
  • - system.img
  • - tp_atmelc12_20aa.img

...and installed:
  • - hboot_8x60_DOT_1.45.0013_20111121_signedbyaa.nb0
  • - ramdisk.img
  • - rpm.img
  • - sbl1.img
  • - sbl2.img
  • - sbl3.img
  • - tz.img

...then rebooted to hboot again, reloaded and re-verified the package, automatically continued the install and wrote all the partition images it skipped the first round.

It's obvious that the:
  • - hboot_8x60_DOT_1.45.0013_20111121_signedbyaa.nb0
  • - ramdisk.img
  • - rpm.img
  • - sbl1.img
  • - sbl2.img
  • - sbl3.img
  • - tz.img

...partition images had to be in place before the other ones could be written.

After it finished and booted all the way up again, I did a factory reset (yep, sdcard too) and then rebooted the device once it was finished that.

Which puts us right here, square at a 1.45.0013 hboot S-ON LOCKED device with 1.55.531.3 software.

For more detail on the whole process, see this posting:
1.45.0013 S-ON locked
The Following 8 Users Say Thank You to Blue6IX For This Useful Post: [ View ] Gift Blue6IX Ad-Free
 
 
19th February 2012, 08:36 PM |#2  
Blue6IX's Avatar
OP Senior Member
Thanks Meter: 1,144
 
Donate to Me
More
I was unable to install either of the OTA updates we captured through the stock recovery once S-ON. Tried applying as-is and renaming to update.zip, multiple times, wouldn't take.

I have had no issues installing these updates without renaming them through the stock recovery when S-OFF. I would have preferred to install the OTA updates through recovery and use the PG59IMG.zip file afterwards, but it didn't want to do it that way.

I ended up getting the first one through HTC download, and using the new 1.55.531.3 PG59IMG.zip I found to bring me current.

----

Apparently this leaked PG59IMG.zip file, if flashed to a device, will solve the problem with the HTC Unlock-Bootloader tool and allow users to complete the process.

(Confirmed! - Sweet.)
The Following 2 Users Say Thank You to Blue6IX For This Useful Post: [ View ] Gift Blue6IX Ad-Free
19th February 2012, 08:44 PM |#3  
AgentCherryColla's Avatar
Senior Member
Flag Carpentersville
Thanks Meter: 511
 
More
Finally I can send phone in to be fixed, and not worry about not having S-Off.

Sent from my HTC myTouch_4G_Slide using Tapatalk
19th February 2012, 11:54 PM |#4  
Emmanuel U's Avatar
Inactive Recognized Developer
Flag Chi-Town Suburbs
Thanks Meter: 2,608
 
More
Do u mind if I add this to Mr root?
19th February 2012, 11:58 PM |#5  
Blue6IX's Avatar
OP Senior Member
Thanks Meter: 1,144
 
Donate to Me
More
Quote:
Originally Posted by xmc wildchild22

Do u mind if I add this to Mr root?

Go for it man - I was actually just about to message you about it and let you know we could do it, i'm eating my dinner and trying to clean up some loose ends in threads with the new knowledge we have now.

If you (or anyone) can figure out how to take something i've done and make it easier for other people to do - i'm all about it - that's progress!

Just link back to this thread so if people get stuck they can view the process and troubleshoot if necessary.
The Following 2 Users Say Thank You to Blue6IX For This Useful Post: [ View ] Gift Blue6IX Ad-Free
20th February 2012, 12:06 AM |#6  
Emmanuel U's Avatar
Inactive Recognized Developer
Flag Chi-Town Suburbs
Thanks Meter: 2,608
 
More
btw 2 questions.....
1. could you s-on then go stock (or would it brick)
2. if you do fastboot oem write secureflag 0....wouldn't it S-off?
20th February 2012, 12:16 AM |#7  
Blue6IX's Avatar
OP Senior Member
Thanks Meter: 1,144
 
Donate to Me
More
for the first one - no, it doesn't but you MUST absolutely MUST flash to STOCK RETAIL first, then do a factory reset and wipe the sdcard BEFORE writing the command.

If you are not 100% stock and do it, you will have security mis-match errors and probably brick.

Do not use the new PG59IMG.zip file I found today that is for the most recent OTA update - use the old one we've been that's linked in this thread. That'll bring you back to stock for retail launch.

----

for the second:

Yep - but you can't use a write command if you are S-ON.

I think it's more forgiving going back to S-ON then going to S-OFF - you might brick doing it that way. Somehow the rev method prevents the other checks (like from radio) from working - just setting it to S-OFF might not work the same way.

Going backwards to S-ON is fine as long as you are completely stock when you do it. Any custom anything and you have a world of trouble.

(exception would be SuperCID - not sure if there are any other exceptions)

( and it's: fastboot oem writesecureflag 3 - you put an extra space in.

hboot commands in the bottom half of this post:
http://forum.xda-developers.com/show...86&postcount=4 )
The Following User Says Thank You to Blue6IX For This Useful Post: [ View ] Gift Blue6IX Ad-Free
20th February 2012, 02:17 AM |#8  
CoNsPiRiSiZe's Avatar
Senior Member
Flag Roseville
Thanks Meter: 344
 
More
Quote:
Originally Posted by AgentCherryColla

Finally I can send phone in to be fixed, and not worry about not having S-Off.

Sent from my HTC myTouch_4G_Slide using Tapatalk

+1

Just my spare change.
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes