Rumrunner copyright notice: As per the license terms on the official Rumrunner site (http://rumrunner.us/) mirror download links of Rumrunner software are not allowed. Using Rumrunner packages hosted on other sites or uploaded by other forum members is risky as they may be outdated or modified and you may end up bricking your device. Always download the latest Rumrunner from the official site: http://rumrunner.us/downloads-2/
Update: There is an alternative tool to S-OFF your HTC devices by the developers of Rumrunner called Firewater. The procedure prior to using Firewater is almost identical to Rumrunner, so you can follow the same detailed instructions below. The main difference when using Firewater is that there is no executable file, so you first have to "push" the downloaded file onto your HTC device's internal memory and then manually execute it via the Command Prompt. Firewater supports a larger number of HTC devices and has the ability to temporarily root your device before attempting to S-OFF, so you do not have to first unlock the bootloader via the HTCdev site. Here is the official site for Firewater: http://firewater-soff.com/. If you need any help, just hit the reply button.
Step-by-step procedure before attempting to S-OFF (with the universal Rumrunner version for international variants):
1. Your HTC One must be rooted.
If it's not rooted, the bootloader must first be unlocked. Follow the instructions in the "Unlocking bootloader" section in this guide: http://forum.xda-developers.com/show....php?t=2265618. Then, flash a custom recovery and root your device: http://www.xda-developers.com/androi...-developer-tv/. At this point, you can leave your device unlocked or relock it. It is advised to leave it unlocked.
2. Go to Settings > Developer options > check USB debugging. (If you cannot see Developer options, go to Settings > About > Software information > More > tap on Build number 7 times until you get a pop-up message saying: You are now a developer!)
3. Go to Settings > Power > uncheck Fast boot.
4. Uninstall HTC Sync if you have it, as well as all other phone software (Samsung Kies, PDANet, etc.)
5. Disable all your internet security software (antivirus, antispyware such as Windows Defender, etc) and disable firewall (you need unrestricted internet access otherwise Rumrunner will fail).
6. Disable Screen lock security on your HTC One. (Go to Settings > Security > Screen lock > select None)
7. Install latest HTC One drivers: http://forum.xda-developers.com/show....php?t=2191279 and drivers for Windows 8: http://forum.xda-developers.com/show....php?t=2232799. Hint: If you previously had HTC Sync installed, you should have the drivers already. You can uninstall HTC Sync separately, without removing the drivers.
8. You need ADB and fastboot. Download both in a single package: http://d-h.st/6hF
9. Use your HTC USB cable to connect the device to a USB 2.0 port on your PC. (Do not connect through USB hubs or USB 3.0 ports)
10. Connect to FASTBOOT USB mode and test if your phone is accessible via adb fastboot. (Hold the power button down until the phone powers off. Press Volume Down and Power buttons to start the device into Bootloader mode. Use the Volume buttons to select up or down. Highlight Fastboot and press the Power button. Connect the device via the original HTC USB cable to a USB 2.0 port in your PC . Now, click on Start > Run > Type "CMD". This will open the DOS Command Prompt window. Navigate through DOS to your adb folder. Mine is located at C:/mini-sdk so i type in the following order:
cd c:\ cd mini-sdk fastboot devices
C:\Documents and Settings\Administrator>cd c:\ C:\>cd mini-sdk C:\mini-sdk>fastboot devices FA36PW****** fastboot
11. Charge your HTC One to 100%. Some users have reported that if the battery level is below 50%, the S-OFF procedure will sometimes fail.
12. Download the universal version of Rumrunner according to your OS: http://rumrunner.us/downloads-2/. Connect your HTC One using the HTC USB cable via a USB 2.0 port and boot up the phone. Leave it on its homescreen. Close any open Command Prompt windows. Unzip the Rumrunner file on your desktop. Make sure that you have administrator rights on the computer. Double-click on soju.exe to start the S-OFF operation. Follow the on-screen progress and allow any requests for root access, etc. Good luck!
Note: S-OFF will not wipe any data from your phone (unlike unlocking bootloader). Having custom ROM does not affect the S-OFF procedure if using the universal Rumrunner version. Your phone's MID & CID do not matter for S-OFF.
Step-by-step procedure before attempting to S-OFF (with previous non-universal builds of Rumrunner and for HTC One Verizon):
Note: I've successfully used Rumrunner to S-OFF (on the first attempt) using stock ROM with software version same as my firmware number. I cannot guarantee that the procedure would be 100% the same for different variants of the HTC One, although it should be 99% similar. For this guide, i have used my European HTC One M7_U and Windows XP SP3 32-bit to test the whole procedure. Read carefully, proceed with caution and use at your own risk!
1. Your HTC One must be on hboot 1.54 or 1.55 (if you have hboot 1.44, you should use other tools to S-OFF, like moonshine or revone). You can check the hboot version easily by going to the bootloader. Power off. Press Power and Volume Down buttons.
2. The bootloader must be unlocked. Follow the instructions in the "Unlocking bootloader" section in this guide: http://forum.xda-developers.com/show....php?t=2265618 (Note: unlocking the bootloader will wipe a special section of the data partition that contains four pre-installed applications: the Calculator, Flashlight, Ringtone Trimmer and Sound Recorder application. Since you need to have all stock files for OTA updates, you will therefore lose the functionality of future software updates. However, this can be easily fixed by flashing a stock ROM, RUU or simply the latest custom ROM).
3. Go to Settings > Developer options > check USB debugging. (If you cannot see Developer options, go to Settings > About > Software information > More > tap on Build number 7 times until you get a pop-up message saying: You are now a developer!)
4. Go to Settings > Power > uncheck Fast boot.
5. Uninstall HTC Sync if you have it, as well as all other phone software (Samsung Kies, PDANet, etc.)
6. Disable all your internet security software (antivirus, antispyware such as Windows Defender, etc) and disable firewall (you need unrestricted internet access otherwise Rumrunner will fail).
7. Disable Screen lock security on your HTC One. (Go to Settings > Security > Screen lock > select None)
8. Install latest HTC One drivers: http://forum.xda-developers.com/show....php?t=2191279 and drivers for Windows 8: http://forum.xda-developers.com/show....php?t=2232799. Hint: If you previously had HTC Sync installed, you should have the drivers already. You can uninstall HTC Sync separately, without removing the drivers.
9. You need ADB and fastboot. Download both in a single package: http://d-h.st/6hF (there is no need to re-download this package if you used the "Unlocking bootloader" guide from step 2.)
10. Use your HTC USB cable to connect the device to a USB 2.0 port on your PC. (Do not connect through USB hubs or USB 3.0 ports)
11. Connect to FASTBOOT USB mode and test if your phone is accessible via adb fastboot. (Hold the power button down until the phone powers off. Press Volume Down and Power buttons to start the device into Bootloader mode. Use the Volume buttons to select up or down. Highlight Fastboot and press the Power button. Connect the device via the original HTC USB cable to a USB 2.0 port in your PC . Now, click on Start > Run > Type "CMD". This will open the DOS Command Prompt window. Navigate through DOS to your adb folder. Mine is located at C:/mini-sdk so i type in the following order:
cd c:\ cd mini-sdk fastboot devices
C:\Documents and Settings\Administrator>cd c:\ C:\>cd mini-sdk C:\mini-sdk>fastboot devices FA36PW****** fastboot
12. Charge your HTC One to 100%. Some users have reported that if the battery level is below 50%, the S-OFF procedure will sometimes fail.
13. You need to find your firmware version so as to know which Rumrunner version to download. Go to your Bootloader, set to FASTBOOT USB and in adb type:
fastboot getvar mainver
14. You should know your ROM version. Boot up your phone and go to Settings > About > Software information > Software number. This is your ROM version. You should preferably be on stock ROM and its version should match your firmware version in order to minimize the risks of failure when using Rumrunner. If you're using custom ROM (especially if the base version of the ROM doesn't match your firmware), it is recommended to download and flash the correct stock ROM version: http://forum.xda-developers.com/show....php?t=2428276.
15. Download the version of Rumrunner according to your firmware version and OS: http://rumrunner.us/downloads-2/. Connect your HTC One using the HTC USB cable via a USB 2.0 port and boot up the phone. Leave it on its home-screen. Close any open Command Prompt windows. Unzip the Rumrunner file for your firmware version on your desktop. Make sure that you have administrator rights on the computer. Double-click on soju.exe to start the S-OFF operation. Don't touch anything. Let the program do its job. Good luck!
Note: S-OFF will not wipe any data from your phone (unlike unlocking bootloader). Having custom recovery and being rooted do not affect the Rumrunner S-OFF procedure. Your phone's MID & CID do not matter for S-OFF.
Here is my complete log from successful Rumrunner S-OFF execution:
(For my firmware, i used Rumrunner HTC One Windows 2.24.401.9).
==================== rumrunner S-OFF 0.0.3 ==============================
rumrunner S-OFF comes with NO WARRANTY (express or implied)
and NO GUARANTEE OF FITNESS for any particular task.
We have made every effort we can to make this a safe process for users
however the authors disclaim any liability for damage to your phone
or other materials or devices used during this process.
The entire risk of running rumrunner S-OFF lies with you, the user.
By using this software you acknowledge and accept that the authors
are not liable for any loss, material or otherwise howsoever caused.
Do you understand the implications of this warning?
Dear User: We will expect that YOU:
(1) Know how to use ADB and FASTBOOT binaries
---- [Yes, use these tools to test USB connection BEFORE running rumrunner] ----
(2) Realize that rumrunner S-OFF cannot support every CUSTOM rom in this world
(3) Understand that irc support IS NOT A GENERAL HELPDESK
(4) Are able to identify and download the CORRECT package for YOUR device
(5) Know how to enable USB-debugging on YOUR device (Yes, do that now)
(6) Understand that you may NOT repack or redistribute rumrunner S-OFF
!! Do NOT for any reason taunt, unplug, drop, eat or pet your device !!
Checking for updates......
Test 1: Rebooting into bootloader
Waiting for fastboot (8/120)
Test 2 (ALT): Booting device
Rebooting from fastboot
Waiting for ADB (23/120)
Test 3: Rebooting into bootloader (again)
Waiting for fastboot (8/120)
Waiting for ADB (29/120)
Waiting for device
Waiting for ADB (26/120)
Waiting for device
Powering off device, UNPLUG your device, then press VOL-DOWN & Power to enter hb
All Done, hope you enjoyed the rum!
Press ENTER to exit
How to verify if your HTC device is now S-OFF
If S-OFF is successful, you can verify by going to the bootloader and at the top, under "*** UNLOCKED ***", you will see something like this: "M7_U PVT SHIP S-OFF RH". Or you can simply reboot your phone and in the splash screen, you will see a brief red warning message: "This build is for development purposes only...". Don't worry about that - it's just proof that you have successfully S-OFF'ed your HTC One! You will also find some red text warning when you boot your phone and in Settings > About > Tell HTC and error reporting.
How to get rid of S-OFF warnings
There are two visual differences that will indicate that your device is S-OFF (other than checking in the bootloader):
1. Go to Settings > About. You should see "Tell HTC and error reporting" option right under "Software updates".
If you don't see that option, then you're already using a custom ROM and you can skip this step. But if you see the "Tell HTC and error reporting" option, select it and scroll down to read a warning message in red text. The "Tell HTC" option is permanently enabled and cannot be turned off without flashing a custom ROM. If you are not comfortable with HTC collecting information from your device, you can load your custom recovery, wipe data, cache, dalvik and install a custom ROM - the "Tell HTC and error reporting" option will be gone.
2. Boot up or restart your phone. In the boot splash screen, if you see a warning message in red text: "This build is for development purposes only..." you can remove it by flashing a custom hboot, now supplied by the developers of Rumrunner: http://rumrunner.us/hboots/. If your phone's firmware and carrier are not listed, the custom Hboots provided on the Rumrunner site will not work and you will likely brick your device. But you can look for other sources. Try this one: http://forum.xda-developers.com/show....php?t=2316726. Alternatively, you can request for a custom Rumrunner Hboot for your specific firmware and carrier. Instructions: Do fastboot getvar all and don't forget to remove your serialno and imei. Paste the info into an email. Upload your RUU or firmware.zip from OTA to dropbox and add link in email and don't forget to mention your carrier, if any. Send to: firstname.lastname@example.org. Then, check the Rumrunner Hboots page regularly for the update: http://rumrunner.us/hboots/.
New possibilities with S-OFF
Now that you're S-OFF, there is one more thing you need to know if you want to preserve your One's software freedom:
Question: if s-off with rumrunner then s-on, will it be possible to s-off again?
beaups: "those situations are hard to predict. best to not do s-on."
There you have it - directly from the developer of Rumrunner.
What can you do now that you're S-OFF? There are many new exciting options available to you but let's start off with the basics and possibly the most interesting advantages of having S-OFF:
1. Get SuperCID 11111111 (this will remove the region lock on your phone)
2. Remove "Tampered" flag in your bootloader.
3. Firmware upgrade to the latest available for optimal performance.
Just skip to section 2 which deals with "Firmware Upgrade".
There are several additional possibilities with S-OFF: changing your phone's MID/CID to any region, flashing any RUU (Sense or GPE), downgrading your firmware, flashing any mod, custom kernels, etc. Have your pick in the Android Development sections!
How to go back to 100% stock
If for some reason (warranty, selling, etc) you need to return your HTC One to 100% stock condition (restore stock ROM and firmware, remove Tampered, set Locked, S-ON, etc), check out this guide: http://forum.xda-developers.com/show....php?t=2358738
Troubleshooting Rumrunner S-OFF errors:
The number of pourings may vary. But if it's successful, the number is usually 3 or 4. If it goes beyond that, there is a higher chance of Rumrunner encountering some error and/or not being compatible with your HTC One variant. But some people have tried the program several times before it finally worked. There is no standard results log due to all the HTC One variants, with the added inconsistency of custom ROMs. If you don't want to wait for your specific Rumrunner version to be released, you can try the available builds on the Rumrunner download page (test the closest available Rumrunner version to your firmware version) and maybe the right/lucky combination of Rumrunner and ROM will work for your device. According to beaups (quoted above), there is no risk of bricking. Ideally, to S-OFF without any hiccups, you need to have the same software version across the firmware, ROM and Rumrunner. But if you have managed to successfully S-OFF with different versions of firmware and/or ROM and/or Rumrunner, please reply and share that information so others won't need to experiment or wait for their specific Rumrunner version.
In case of failure (errors, endless pourings, etc), make sure that you have read and understood and successfully gone through every step in this guide in the given order. Verify if you have fulfilled the prerequisites on the Rumrunner site: http://rumrunner.us/instructions/. If Rumrunner is still not working for you, here are some basic instructions quoted from beaups, which can be used as a quick FAQ for some of the most common problems:
1.) mainver, rom ver, recovery ver, etc matter very little. it's about the rest of the firmware. ruu is best to make sure on proper firmware
2.) if you are on wrong firmware version and try, it *probably* won't work. it will not brick
3.) "fatal" (error) it is network authorization issue. firewall/bad download/virus on your pc/etc may cause
4.) windows is next to impossible to troubleshoot. if getting "fatal:**** it" error or other adb errors, try linux live
5.) if you are on unsupported fw, send request email to request address. if you cannot link to ruu, we will need partitions 1 through 13 pulled, zipped, and linked in that email request, along with a dump of the STOCK kernel (see the header below for more detailed instructions on how to request a custom Rumrunner version for your specific HTC One variant).
Is the official Rumrunner website not accessible or you cannot download Rumrunner?
If you cannot browse the official rumrunner.us site on your computer, then the software will simply not work. Even if you have someone download the rumrunner file and forward it to you, the software will need access to the official rumrunner.us website before it proceeds to S-OFF your device. In that case, your ISP is most probably limiting your access. Try setting up your network to connect via a stable proxy or connect to a different ISP (at work, public Wi-Fi hotspot, at friend's place, etc). To check if your connection is successfully unrestricted, simply open your browser and see if it loads the rumrunner.us site.
There will most likely be other questions and issues which are not answered here. Please don't rage or nag or complain to beaups or me about this. I wrote this guide only to avoid people from asking the same questions and to spare the need to go through dozens of threads and read hundreds of replies. beaups is not affiliated with this guide. I tried to put together all the essential information that would be required to easily S-OFF from my experience with Rumrunner. If there are any changes to Rumrunner that divert from this guide, feel free to reply.
How to request Rumrunner version for your unsupported HTC firmware (Verizon variant)
Note: The universal Rumrunner package supports all HTC One variant firmwares, except for the Verizon variant.
Quote from the Rumrunner site: Device/Firmware not listed? Send a request to email@example.com with your full mainver (from fastboot getvar mainver) and a link to ruu or ota firmware package. Do not send requests without ALL of this required information!!!
The first requirement is easy - just get your firmware version as explained in the sections above using "fastboot getvar mainver". The second requirement involves a link to RUU or OTA firmware which is not available for some HTC variants. In the latter case, there is a solution, but it involves the need for you to have your stock ROM. Let me elaborate a bit more on this: when you first got your HTC One, it was hopefully 100% stock, so you unlocked the bootloader, flashed custom recovery, rooted, and then hopefully, you did a nandroid backup before flashing a custom ROM. If you have that nandroid backup, restore it. If you never installed a custom ROM, then you should have your stock ROM already. Now, if you don't have your stock ROM anymore (some of you may not have made or kept your original stock nandroid backup), there isn't anything that you can do at this point, except wait for someone else with the same M7 variant as you, to follow the procedures in this guide and email the developers with all the necessary files. You can then try Rumrunner for your firmware version when it's available.
Assuming that your device is rooted and on stock ROM with software version from the settings which matches exactly your "mainver" (firmware version) from earlier, here's how to proceed - you need to dump partitions 1 through 13 and the kernel as well (partition 33).
First, make sure your phone is booted up and connected to USB. Leave it on its homescreen.
In Command Prompt, go to your adb and fastboot folder. Mine is located at C:/mini-sdk so i type in the following order:
cd c:\ cd mini-sdk adb shell su (this will change the $ symbol to #) dd if=/dev/block/mmcblk0p1 of=/sdcard/p1
256+0 records in 256+0 records out 131072 bytes transferred in 0.064 secs (2048000 bytes/sec)
dd if=/dev/block/mmcblk0p2 of=/sdcard/p2 dd if=/dev/block/mmcblk0p3 of=/sdcard/p3 etc
dd if=/dev/block/mmcblk0p13 of=/sdcard/p13
dd if=/dev/block/mmcblk0p33 of=/sdcard/p33
exit exit exit
If you navigate to your HTC One > Internal Memory, you should see the files p1 through p13 and p33. If they are not visible, unplug your M7 from the USB cable and plug it back in. Now, check your HTC One's Internal Memory and you should see all the files. Copy them to a folder on your desktop. These are the precious files that you need to attach to your email and which will allow a custom Rumrunner version to be built for your specific HTC variant.
Note: Some of the partition dump files can be quite bulky. In my case, p3 was 127 MB and the other files ranged from 1 KB to 15.2 MB. In total, the dumps amounted to 169 MB which might exceed your attachment file size limit and can also be time-consuming to upload. In that case, just use Winrar and select best compression method from its settings. My rar file containing all the p1 to p13 and p33 files went down to just 7.34 MB.
You will also need to specify exactly the Kernel version from the Settings > About > Software information > More. If you don't want to take any risks with possible typing errors or missing Kernel info, it's probably best if you just do a screenshot and attach it to your email as well.
Now, all you have to do is just email all these files to firstname.lastname@example.org. There is no ETA, so don't harass the developers. It will be released when it's ready. Instead, check the Rumrunner downloads page regularly to know when Rumrunner for your firmware version is available: http://rumrunner.us/downloads-2/.
Official support available on IRC
Quoted from: http://rumrunner.us: "support for rumrunner s-off is available at #rumrunners on the freenode and andirc networks. Please make sure you meet all of the requirements before contacting support. Do NOT come to support to request new devices to be added to the supported device list."
If Rumrunner has helped you to achieve S-OFF, please support the developers for all their hard work by sending a donation via PayPal to: email@example.com
Credits: @beaups and @Fuses for Rumrunner, and @lollylost100 for his help with partition dumps.
If this guide was helpful, just press the "THANKS" button!