[F31xx][F32xx][Guide][MM] How to root your Xperia XA (as noob friendly as possible)

garikay

Member
Nov 15, 2015
36
10
0
You have restored only function for a locked bootloader. But not restored DRM keys. I have tried many times to restore the TA on a modified kernel but it was not successful. TA is reversed only to the stock kernel. And you need to do a restore of TA and not boot the system to flash stock firmware. In the modified kernel does not receive dm-verification or hash does not match, I do not know that but the keys are not installed. Perhaps when that will be done to exploit root on a locked bootloader. In this project: https://gist.github.com/Arinerron/0e99d69d70a778ca13a0087fa6fdfd80 there is hope but I'm not a developer and does not know how to do for 64-bit systems.
 
Aug 17, 2015
23
2
0
You have restored only function for a locked bootloader. But not restored DRM keys. I have tried many times to restore the TA on a modified kernel but it was not successful. TA is reversed only to the stock kernel. And you need to do a restore of TA and not boot the system to flash stock firmware. In the modified kernel does not receive dm-verification or hash does not match, I do not know that but the keys are not installed. Perhaps when that will be done to exploit root on a locked bootloader. In this project: https://gist.github.com/Arinerron/0e99d69d70a778ca13a0087fa6fdfd80 there is hope but I'm not a developer and does not know how to do for 64-bit systems.
Can u guide us how u did it?
As mentioned by garikay, I only restored DRM functions, and not TA keys. If this is what you need, you may follow the steps below:
1. Download DRM.zip for Main restore for Z3+(confirmed on MM),Z5,Z5C,Z5P,Z5PD in this thread http://forum.xda-developers.com/crossdevice-dev/sony/xperia-z1-z2-z3-series-devices-drm-t2930672
2. Store the zip file into SD card.
3. Install the zip file using TWRP. Done.
 

mauryscr

New member
Sep 24, 2015
2
0
0
Can't flash anything

I have the same issue that @cafeeina had.

When I check if my bootloader is unlocked i got this:

C:\Flashtool\x10flasher_lib> fastboot oem unlock
...
FAILED <remote: Not necessary>
finished. total time: 0.002s


And the when I try to flash the boot and recovery i got this:
C:\Flashtool\x10flasher_lib> fastboot flash boot boot.img
target reported max download size of 124217728 bytes
sending 'boot' <11696 KN>
OKAY [ 0.440S ]
WIRTING 'boot' ...
OKAY [ 0.183S ]
finished. total time: 0.622s


And exactly the same when I try the recovery. Now I'm stucked in a boot loop at Sony logo and dont know what to do. I've already checked the file that @cafeeina said and it's all right writen.

Please help me buddies :(


***UPDATE***

I checked and i have the Custom Recovery but it stills get in a boot loop. It could be that maybe i dont have any OS installed or something?
 
Last edited:

Cyboy

Senior Member
Jul 2, 2013
436
53
0

rrvuhpg

Senior Member
Jan 2, 2009
712
657
113
any way to root my f3112 w/o unlocking the bootloader?
Every body can answer ?
No you can't, you can use the Drm fix to emulate them and restore features. I hope that an user will make a guide to dump the TA partition with Dirtycow exploit before unlocking the bootloader and release a modified boot to mount the TA backup during boot (near same result as flashing Drm fix), as I know you can't flash the TA backup on XA and Ultra.
 

aidy.lucas

Senior Member
Oct 8, 2014
1,866
610
0
No you can't, you can use the Drm fix to emulate them and restore features. I hope that an user will make a guide to dump the TA partition with Dirtycow exploit before unlocking the bootloader and release a modified boot to mount the TA backup during boot (near same result as flashing Drm fix), as I know you can't flash the TA backup on XA and Ultra.
Already supposed to be a working ta back up for the xa and xa ultra as well as all other x range models.

Sent from my Xperia XA using XDA Labs
 
Aug 17, 2015
23
2
0
It's simple. The first check on the device so the path to the file TA :
Code:
/dev/block/platform/mtk-msdc.0/11230000.msdc0/by-name/ta
This can be done Root explorer. Then copy your backupTA to root folder of device. Then turn off the phone and load the device in the recovery mode and connect to PC. Run command promt from folder ADB and promt:
Code:
 adb shell dd if=/sdcard/name your copy of backupTA.img of=/dev/block/platform/mtk-msdc.0/11230000.msdc0/by-name/ta
If everything is copied normally it will be like on the screenshot. After that, you need to click on the menu recovery turn off the phone, You can not be loaded into the system !!! You can not do it !!! Start FlashTool and click on the flashing icon, choose your firmware. Do not have to choose different items, especially MiscTA. You can only select items wipe. Then click Flash and when prompted, connect your turn off device. After flashing Disconnect your phone from cable and turn it on. The first boot is long. Make the first phone setup and when making your entry into the myXperia , if you are logged on with an account - I congratulate you. How to check in the service menu, you probably know. Now my friend is doing TWRP able to restore BackupTA. It will be enough just to copy the backupTA file to the phone directory. FlashTool I used 0.9.22.3

Good luck!

---------- Post added at 11:58 PM ---------- Previous post was at 11:46 PM ----------

Excuse me! Not someone else's backup restores! This will kill your phone! TA provides information on the serial number of the phone that is not the same as yours, even information when you upgrade or do a factory reset.
I tried to restore TA. I used your method and command prompt shows:
4096+0 records in
4096+0 records out
2097152 bytes (2.0MB) copied, 0.034396 seconds, 58.1MB/s

I think TA is successfully copied. However, when I open check the Security menu, it says:
WIDEVINE_TEST [Unknown Error]
CKB_TEST [Unknown Error]

Anyone can share how to restore TA keys?
 

garikay

Member
Nov 15, 2015
36
10
0
You do not carefully read what I wrote.
1)copy your backupTA to root folder of device. Then turn off the phone and load the device in the recovery mode and connect to PC. Run command promt from folder ADB and promt: adb shell dd if=/sdcard/name your copy of backupTA.img of=/dev/block/platform/mtk-msdc.0/11230000
2) click on the menu recovery turn off the phone, You can not be loaded into the system !!! You can not do it !!!
3) Start FlashTool and click on the flashing icon, choose your firmware. Do not have to choose different items, especially MiscTA. You can only select items wipe. Then click Flash and when prompted, connect your turn off device. After flashing Disconnect your phone from cable and turn it on.
4) The first boot is long. Make the first phone setup and when making your entry into the myXperia , if you are logged on with an account - I congratulate you. If you logged on account myXperia then you have restored TA. Go to service menu and check it. It is important after restored TA can not be loaded into the system! You must turn off your phone and flash stock firmware!!!
 
Aug 17, 2015
23
2
0
Thanks for the prompt reply.
I can log into my Xperia. But when I check in Security, there are still errors.
WIDEVINE_TEST [Unknown Error]
CKB_TEST [Unknown Error]
Is it normal?
 

garikay

Member
Nov 15, 2015
36
10
0
This not normal. You need to first restore the TA in recovery mode and not boot into system. In recovery you need choose power off. Then run flashtool ->press the flash button ->Select the stock firmware ->flash it. Only not boot into system and flash stock firmware you can restore your backupTA.
 

RowanG

New member
Jan 12, 2017
1
0
0
Noob tried rooting his phone, didn't accomplish

I didn't fully understand the tutorial and now my xa ultra is stuck in a boot cycle after flashing the phone.. I googled for days now and as a noob I don't really understand how this all works and what is the right thing to do

What I managed:
bootloader unlocked
developer mode
usb debugging
...

but then I got stuck at the boot cycle, I'm scared for the worst..

I tried recovery mode, but it just goes back to the boot cycle,
I tried flashing again with versions from the flashtool,
My phone isn't recognized if I plug it into the usb
It does get recognized in flashtool if its in flash mode
I'm able to put other roms on it (as far as i hardly understand) but it gets stuck at 5%? (or is this total nonsense..)

I think I ****ed up at stage 6, didn't understand that was an app in your phone.
I would really appreciate all the help I could get, even if it's just suggestions. I would owe you my life if it would work again
 
Aug 17, 2015
23
2
0
I think my Xperia XA is hard bricked. I chose No for FSC Script in Flashtool. After flashing done, the phone won't boot, no fastboot mode, no download mode. Only a constant red LED when plugged into the charger.

---------- Post added at 04:15 AM ---------- Previous post was at 04:14 AM ----------

I didn't fully understand the tutorial and now my xa ultra is stuck in a boot cycle after flashing the phone.. I googled for days now and as a noob I don't really understand how this all works and what is the right thing to do

What I managed:
bootloader unlocked
developer mode
usb debugging
...

but then I got stuck at the boot cycle, I'm scared for the worst..

I tried recovery mode, but it just goes back to the boot cycle,
I tried flashing again with versions from the flashtool,
My phone isn't recognized if I plug it into the usb
It does get recognized in flashtool if its in flash mode
I'm able to put other roms on it (as far as i hardly understand) but it gets stuck at 5%? (or is this total nonsense..)

I think I ****ed up at stage 6, didn't understand that was an app in your phone.
I would really appreciate all the help I could get, even if it's just suggestions. I would owe you my life if it would work again
Perhaps you can flash to store front firmware first. Then carry out root process in store front firmware.
 

rrvuhpg

Senior Member
Jan 2, 2009
712
657
113
I didn't fully understand the tutorial and now my xa ultra is stuck in a boot cycle after flashing the phone.. I googled for days now and as a noob I don't really understand how this all works and what is the right thing to do

What I managed:
bootloader unlocked
developer mode
usb debugging
...

but then I got stuck at the boot cycle, I'm scared for the worst..

I tried recovery mode, but it just goes back to the boot cycle,
I tried flashing again with versions from the flashtool,
My phone isn't recognized if I plug it into the usb
It does get recognized in flashtool if its in flash mode
I'm able to put other roms on it (as far as i hardly understand) but it gets stuck at 5%? (or is this total nonsense..)

I think I ****ed up at stage 6, didn't understand that was an app in your phone.
I would really appreciate all the help I could get, even if it's just suggestions. I would owe you my life if it would work again
You have a bootloop without flashing the modified boot??
If you flashed it, you must flash the recovery.img just after the boot.img. Go to the new recovery just after and flash SuperSu.zip, don't boot to Android before this step or you will have a bootloop.
 
  • Like
Reactions: garikay

3RW4NFR

New member
Jan 25, 2017
3
1
3
Password

Many thanks for the effort mate. Will try it.

Btw, what is the bug with google store and user data, right after root.

edit
01/039/2016 11:39:08 - ERROR - Processing of boot.sin finished with errors. As u said data wipe is needed when unlocking the bl, but i have my BL unlocked earlier without data wiped...so i started the flash method ,on my old version of flashtool.Now i have the newest version, so got to try it...or i should skip the flash and go to root step...

edit2
01/006/2016 13:06:39 - INFO - Ending flash session
01/006/2016 13:06:39 - INFO - Flashing finished.

For this phone use the newest version of flashtool.

Edit3: I need to enter some kind of password on boot menu.Now what ?
Isn't it the Bootloader password given by Sony when you go on developer.sonymobile.com/unlockbootloader/unlock-yourboot-loader ?
 

Cyboy

Senior Member
Jul 2, 2013
436
53
0
I want to root my X using bootloader unlocking but dont want to lose any drm keys, then I decided to backup my TA first ,but this proccess itself needs root access.
I'm pretty confused about how to keep or restore drm keys?