• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

Coustom twrp image for Moto e6 MetroPCS

Search This thread

svoc

Member
Oct 5, 2015
37
12
Moto E6
Moto G9 Power
This is newest just flash the motorom.zip not system.zip right now and it sounds like your device is not found by fastboot run fastboot devices and make shur you have USB debugging on in delvoper settings
 

droidparanoid

Member
Feb 3, 2014
7
0
DFW
Moto G7 Power
Moto E6
I'm having the same issue, fastboot is working and debugging is on. I am trying to follow the instructions in the motorom.zip using the img files contained within.

adb reboot bootloader

K:\Tools\Moto e6\MotoROM>K:\Tools\platform-tools\fastboot.exe -w flash boot boot.img
(bootloader) is-logical:boot: not found
Sending 'boot' (32768 KB) OKAY [ 1.056s]
Writing 'boot' (bootloader) Image boot failed validation
(bootloader) Preflash validation failed
FAILED (remote: '')
fastboot: error: Command failed

K:\Tools\Moto e6\MotoROM>K:\Tools\platform-tools\fastboot.exe devices
ZF6523HSBS fastboot

Figured this might help:
K:\Tools\Moto e6\MotoROM>K:\Tools\platform-tools\fastboot.exe getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: MBM-2.1-surfna_vzw-6aba00ea6d1-210209
(bootloader) product: surfna
(bootloader) board: surfna
(bootloader) secure: yes
(bootloader) hwrev: PVT
(bootloader) radio: 5
(bootloader) storage-type: emmc
(bootloader) emmc: 16GB SKHYNIX HAG4a2 RV=08 PV=A5 FV=00000000000000A5
(bootloader) ram: 2GB SKHYNIX LP3 DIE=8Gb M5=06 M6=03 M7=01 M8=1F
(bootloader) cpu: MSM8940
(bootloader) serialno: ZF6523HSBS
(bootloader) cid: 0x0002
(bootloader) channelid: 0x98
(bootloader) uid: 551B55F400000000000000000000
(bootloader) securestate: oem_locked
(bootloader) factory-modes: disabled
(bootloader) iswarrantyvoid: no
(bootloader) max-download-size: 535822336
(bootloader) reason: Reboot mode set to fastboot
(bootloader) imei: 352176102805498
(bootloader) meid:
(bootloader) date: 07-16-2020
(bootloader) sku: XT2005-1PP
(bootloader) carrier_sku: XT2005-1PP
(bootloader) battid:
(bootloader) iccid: 89148000005710774951
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Fri Feb 12 2:57:18 UTC 2021"
(bootloader) ro.build.fingerprint[0]: motorola/surfna_vzw/surfna:9/PCBS2
(bootloader) ro.build.fingerprint[1]: 9.73-81-18-7/a2beff:user/release-k
(bootloader) ro.build.fingerprint[2]: eys
(bootloader) poweroffalarm: 0
(bootloader) ro.build.version.full[0]: Blur_Version.29.201.8.surfna_vzw.
(bootloader) ro.build.version.full[1]: verizon.en.US
(bootloader) ro.build.version.qcom: LA.UM.7.6.2.r1-08100-89xx.0
(bootloader) version-baseband: M8940_43.192.01.165R SURF_NA_CUST
(bootloader) kernel.version[0]: Linux version 4.9.112-perf+ ([email protected]
(bootloader) kernel.version[1]: clbld176) (gcc version 4.9.x 20150123 (p
(bootloader) kernel.version[2]: rerelease) (GCC) ) #1 SMP PREEMPT Tue Fe
(bootloader) kernel.version[3]: b 9 22:54:24 CST 2021
(bootloader) sbl1.git: MBM-2.1-surfna_vzw-461a42d348-210209
(bootloader) rpm.git: MBM-2.1-surfna_vzw-d84d6494-dirty-210209
(bootloader) tz.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) devcfg.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) keymaster.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) cmnlib.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) cmnlib64.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) prov.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) aboot.git: MBM-2.1-surfna_vzw-6aba00ea6d1-210209
(bootloader) frp-state: no protection (210)
(bootloader) ro.carrier: vzwpre
(bootloader) current-slot:
(bootloader) running-boot-lun: 0
(bootloader) running-slot:
(bootloader) slot-suffixes: _a
(bootloader) slot-count: 1
(bootloader) slot-successful:_a: INVALID
(bootloader) slot-successful:_b: INVALID
(bootloader) slot-bootable:_a: INVALID
(bootloader) slot-bootable:_b: INVALID
(bootloader) slot-retry-count:_a: unknown
(bootloader) slot-retry-count:_b: unknown
(bootloader) pcb-part-no: SB28C58466
all: listed above
Finished. Total time: 0.076s
 

gwgw

Member
Mar 8, 2008
11
0
HTC Leo
Moto E (2020)
It's the fastboot telling me the error.
So, it's not the problem at that level.



I found "twrp_device_motorola_surfna", which is for XT2005-1PP.




I'll try to compile twrp with it.
I think I have downloaded all tools and studying how to do it as I don't know android build method.


I found "unofficial TWRP 3.31 for moto e6", as well, but it's for RETUS.
And no source code or build info.
 

gwgw

Member
Mar 8, 2008
11
0
HTC Leo
Moto E (2020)
I'm having the same issue, fastboot is working and debugging is on. I am trying to follow the instructions in the motorom.zip using the img files contained within.

adb reboot bootloader

K:\Tools\Moto e6\MotoROM>K:\Tools\platform-tools\fastboot.exe -w flash boot boot.img
(bootloader) is-logical:boot: not found
Sending 'boot' (32768 KB) OKAY [ 1.056s]
Writing 'boot' (bootloader) Image boot failed validation
(bootloader) Preflash validation failed
FAILED (remote: '')
fastboot: error: Command failed

K:\Tools\Moto e6\MotoROM>K:\Tools\platform-tools\fastboot.exe devices
ZF6523HSBS fastboot

Figured this might help:
K:\Tools\Moto e6\MotoROM>K:\Tools\platform-tools\fastboot.exe getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: MBM-2.1-surfna_vzw-6aba00ea6d1-210209
(bootloader) product: surfna
(bootloader) board: surfna
(bootloader) secure: yes
(bootloader) hwrev: PVT
(bootloader) radio: 5
(bootloader) storage-type: emmc
(bootloader) emmc: 16GB SKHYNIX HAG4a2 RV=08 PV=A5 FV=00000000000000A5
(bootloader) ram: 2GB SKHYNIX LP3 DIE=8Gb M5=06 M6=03 M7=01 M8=1F
(bootloader) cpu: MSM8940
(bootloader) serialno: ZF6523HSBS
(bootloader) cid: 0x0002
(bootloader) channelid: 0x98
(bootloader) uid: 551B55F400000000000000000000
(bootloader) securestate: oem_locked
(bootloader) factory-modes: disabled
(bootloader) iswarrantyvoid: no
(bootloader) max-download-size: 535822336
(bootloader) reason: Reboot mode set to fastboot
(bootloader) imei: 352176102805498
(bootloader) meid:
(bootloader) date: 07-16-2020
(bootloader) sku: XT2005-1PP
(bootloader) carrier_sku: XT2005-1PP
(bootloader) battid:
(bootloader) iccid: 89148000005710774951
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Fri Feb 12 2:57:18 UTC 2021"
(bootloader) ro.build.fingerprint[0]: motorola/surfna_vzw/surfna:9/PCBS2
(bootloader) ro.build.fingerprint[1]: 9.73-81-18-7/a2beff:user/release-k
(bootloader) ro.build.fingerprint[2]: eys
(bootloader) poweroffalarm: 0
(bootloader) ro.build.version.full[0]: Blur_Version.29.201.8.surfna_vzw.
(bootloader) ro.build.version.full[1]: verizon.en.US
(bootloader) ro.build.version.qcom: LA.UM.7.6.2.r1-08100-89xx.0
(bootloader) version-baseband: M8940_43.192.01.165R SURF_NA_CUST
(bootloader) kernel.version[0]: Linux version 4.9.112-perf+ ([email protected]
(bootloader) kernel.version[1]: clbld176) (gcc version 4.9.x 20150123 (p
(bootloader) kernel.version[2]: rerelease) (GCC) ) #1 SMP PREEMPT Tue Fe
(bootloader) kernel.version[3]: b 9 22:54:24 CST 2021
(bootloader) sbl1.git: MBM-2.1-surfna_vzw-461a42d348-210209
(bootloader) rpm.git: MBM-2.1-surfna_vzw-d84d6494-dirty-210209
(bootloader) tz.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) devcfg.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) keymaster.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) cmnlib.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) cmnlib64.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) prov.git: MBM-2.1-surfna_vzw-4a1620691c-210209
(bootloader) aboot.git: MBM-2.1-surfna_vzw-6aba00ea6d1-210209
(bootloader) frp-state: no protection (210)
(bootloader) ro.carrier: vzwpre
(bootloader) current-slot:
(bootloader) running-boot-lun: 0
(bootloader) running-slot:
(bootloader) slot-suffixes: _a
(bootloader) slot-count: 1
(bootloader) slot-successful:_a: INVALID
(bootloader) slot-successful:_b: INVALID
(bootloader) slot-bootable:_a: INVALID
(bootloader) slot-bootable:_b: INVALID
(bootloader) slot-retry-count:_a: unknown
(bootloader) slot-retry-count:_b: unknown
(bootloader) pcb-part-no: SB28C58466
all: listed above
Finished. Total time: 0.076s

You have Verizon version (XT2005-1PP), like me.
Have you unlocked bootloader?

They say we can do nothing with this version...
Let's see what we can do with it.

I'm not in US, so I can't activate it to unlock SIM.
I don't have verizon test SIM (yet), so I can't get into developer mode, either.
But I can go into fastboot (with Vol- + power key combo).
Also, I can go into QR code zero touch enterprise setup mode by tapping 6 times on startup screen (just before moto e6 tells me I don't have SIM, or Verizon SIM).

I could flash gpt and other img files from different stock ROM, but some images didn't get flashed.
I'm hoping to trick LMSA to flash wrong img on my verizon version, or to find out why LMSA can flash stock ROM when I could not do using same fastboot taken out from LMSA folder.
 

gwgw

Member
Mar 8, 2008
11
0
HTC Leo
Moto E (2020)
I'm having the same issue, fastboot is working and debugging is on. I am trying to follow the instructions in the motorom.zip using the img files contained within.

Can you post the result of following command (when you have time, if it's not too much)?
adb pull /system/build.prop


Our stock ROM version is slightly different, as mine is SURFNA_VZW_PCBS29.73_81_18_9 vs yours is PCBS29.73_81_18_7.
But pretty close.

If something works for me, it would work for you and vice versa.


I took wireshark capture of USB communication between LMSA and the phone during rescue.
Also, I found the log with detailed info of what LMSA was doing in "C:\ProgramData\LMSA\DotNetBrowserLogs"

It's pretty much the same thing as what we can extract from flashfile.xml in stock ROM zip.
But it might be doing something else to be able to flash some files I could not (with error).
 

VelvetB

Member
Jan 5, 2018
15
3
Boca Raton, FL
Moto E6
I tried it and I am now running my T-Mobile version fully rooted with a fully operating TWRP touch working recovery!
The system.img would not install, and that was a very good thing. It was not needed. Everything works. I have done full backups, including non-encrypted data, using the Batik-TWRP. I did update to Magisk 23 and that worked just fine as well. Thank you so much for finally giving us a way to fully root and backup this phone!
Hi scottyrick2,
I've got my 2005-5 E6 rooted with Magisk recovery as per your idiot proof instructions and it runs flawlessly. Thank you! If possible, could you please post, (or point to), step by step directions for this one also. Thanks!
 

scottyrick2

Senior Member
Dec 2, 2020
59
25
Lenovo Thinkpad Tablet
Moto E6
This is an easy 6-step guide to installing Batik-TWRP recovery on an unlocked-bootloader Moto E6 (T-Mobile Version)
This may work on other unlocked-bootloader varieties, but "may" is the operative word. You have been warned.
Be prepared to restore all of your apps and settings, as this will absolutely wipe your data.
IMPORTANT: If this doesn't work, just fastboot flash your stock boot, dtbo, vbmeta, vendor, and recovery partitions.

All credit goes to "svoc" for providing modified partition image files and a procedure to make this work (post #11 in this thread). This was an amazing amount of work and effort.

Anyway, here goes.

1. download and extract MotoROM.zip from

2. put the extracted boot.img, dtbo.img, vbmeta.img, vendor.img, and recovery.img into your pc's adb folder

3. make certain your phone has adb enabled in developer options

4. connect your phone via usb to pc

5. type the following from an adb terminal

adb devices
adb reboot bootloader
fastboot -w flash boot boot.img
fastboot flash dtbo dtbo.img
fastboot flash vbmeta vbmeta.img
fastboot flash vendor vendor.img
fastboot flash recovery recovery.img

6. disconnect usb, boot into Batik-TWRP recovery from the bootloader menu, and do the following steps

format data partition
reboot Batik-TWRP recovery
install Magisk.zip
reboot system

Restore all of your apps and settings. Note that all Batik-TWRP recovery backups are stored in the batik directory, not TWRP.
Also, when you update the firmware in the future, NEVER flash the boot, dtbo, vbmeta, vendor, or recovery partitions!
Have fun!
 
Last edited:

VelvetB

Member
Jan 5, 2018
15
3
Boca Raton, FL
Moto E6
This is an easy 6-step guide to installing Batik-TWRP recovery on an unlocked-bootloader Moto E6 (T-Mobile Version)
This may work on other unlocked-bootloader varieties, but "may" is the operative word. You have been warned.
Be prepared to restore all of your apps and settings, as this will absolutely wipe your data.
IMPORTANT: If this doesn't work, just fastboot flash your stock boot, dtbo, vbmeta, vendor, and recovery partitions.

All credit goes to "svoc" for providing modified partition image files and a procedure to make this work (post #11 in this thread). This was an amazing amount of work and effort.

Anyway, here goes.

1. download and extract MotoROM.zip from

2. put the extracted boot.img, dtbo.img, vbmeta.img, vendor.img, and recovery.img into your pc's adb folder

3. make certain your phone has adb enabled in developer options

4. connect your phone via usb to pc

5. type the following from an adb terminal

adb devices
adb reboot bootloader
fastboot -w flash boot boot.img
fastboot flash dtbo dtbo.img
fastboot flash vbmeta vbmeta.img
fastboot flash vendor vendor.img
fastboot flash recovery recovery.img

6. disconnect usb, boot into Batik-TWRP recovery from the bootloader menu, and do the following steps

format data partition
reboot Batik-TWRP recovery
install Magisk.zip
reboot system

Restore all of your apps and settings. Note that all Batik-TWRP recovery backups are stored in the batik directory, not TWRP.
Also, when you update the firmware in the future, NEVER flash the boot, dtbo, vbmeta, vendor, or recovery partitions!
Have fun!
Hi scottyrick,
Got brave and installed, working great, thank you. I made a mistake in thinking motorom.zip would apply the latest system update for my XT2005-5, which is PPB29.73-81-5-14-5-4-2-6 but I ended up with PPB29.73-81-5-14-5-4-2, so I want to update it. Before, I would uninstall Magisk and do an OTA update, but I'm afraid that would flash one of the NEVER flash partitions above. Understanding that I alone am responsible for anything bad happening, may I ask what you would suggest trying 1st?
 

VelvetB

Member
Jan 5, 2018
15
3
Boca Raton, FL
Moto E6
I think if you extract this batch file, it can be adapted to help you do the proper update. I just copy the dll and exe files from c:\adb to the firmware folder myself to make this work.
Do you understand what OP svoc means in post 19, "You are welcome sir Al software updates will work just remember to go in magisk manger and keep magisk after update"? Unclear to me if he's saying to patch updated boot.img in Magisk then fastboot flash it to phone or if there's some way to have Magisk do the update? Obviously, I wouldn't want to overwrite batik-twrp.
 
Last edited:

VelvetB

Member
Jan 5, 2018
15
3
Boca Raton, FL
Moto E6
I finally hit the right combination of keywords and found the below. Unfortunately it appears to only work on A/B devices using Magisk module "TWRP A/B Retention Script" which won't install on a moto e6 as not A/B. Below also states on non A/B, only option is to uninstall Magisk and TWRP, update and reinstall. I've asked svoc to update motorom.zip, which if he does I'm hoping will allow us to just flash over current motorom.zip, flash magisk.zip and restore data from TWRP backup. Do you think that will work?

How to Install OTA Updates on Rooted Android Devices using Magisk [Without Losing Root] here https://www.thecustomdroid.com/install-ota-update-rooted-android-device-guide/

 
Last edited:

scottyrick2

Senior Member
Dec 2, 2020
59
25
Lenovo Thinkpad Tablet
Moto E6
I finally hit the right combination of keywords and found the below. Unfortunately it appears to only work on A/B devices using Magisk module "TWRP A/B Retention Script" which won't install on a moto e6 as not A/B. Below also states on non A/B, only option is to uninstall Magisk and TWRP, update and reinstall. I've asked svoc to update motorom.zip, which if he does I'm hoping will allow us to just flash over current motorom.zip, flash magisk.zip and restore data from TWRP backup. Do you think that will work?

How to Install OTA Updates on Rooted Android Devices using Magisk [Without Losing Root] here https://www.thecustomdroid.com/install-ota-update-rooted-android-device-guide/

I don't think there is a better way to update than the one I suggested. As long as you install the OTA firmware, in any manner, you will lose the working batik-twrp recovery. Download the latest firmware zip and use that .The OTA file should never be used for this phone.
 

VelvetB

Member
Jan 5, 2018
15
3
Boca Raton, FL
Moto E6
I don't think there is a better way to update than the one I suggested. As long as you install the OTA firmware, in any manner, you will lose the working batik-twrp recovery. Download the latest firmware zip and use that .The OTA file should never be used for this phone.
YOU DA MAN!! Worked great. I'm CompTIA A+ certified, whille that's more hardware related, I still didn't think of myself as an Android newbie until I wasted today away. If you're ever in or around Boca Raton I'd like to take you and partner out to dinner, no BS. Thanks
 
Last edited:
  • Like
Reactions: scottyrick2

svoc

Member
Oct 5, 2015
37
12
Moto E6
Moto G9 Power
Just downloaded the ota and flash all the files except the recovery.img and repatch boot.img with magisk and you will be good to go but you will lose rw support right now I ha e no way of fixing that for a while with out time on my hands for this phone right now.im.on a new device
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    I can add your Moto e6 on here if you send me a copy of your recovery.img so o can port it it only takes me a few minutes now to port to new device I will be uploading more this weekend if you want one for your device send me your recovery.img and I will port it to you real fast

    Thanks to A-Team Digital for all there help
    1
    I tried it and I am now running my T-Mobile version fully rooted with a fully operating TWRP touch working recovery!
    The system.img would not install, and that was a very good thing. It was not needed. Everything works. I have done full backups, including non-encrypted data, using the Batik-TWRP. I did update to Magisk 23 and that worked just fine as well. Thank you so much for finally giving us a way to fully root and backup this phone!
    1
    I don't think there is a better way to update than the one I suggested. As long as you install the OTA firmware, in any manner, you will lose the working batik-twrp recovery. Download the latest firmware zip and use that .The OTA file should never be used for this phone.
    YOU DA MAN!! Worked great. I'm CompTIA A+ certified, whille that's more hardware related, I still didn't think of myself as an Android newbie until I wasted today away. If you're ever in or around Boca Raton I'd like to take you and partner out to dinner, no BS. Thanks