[F31xx][F32xx][Guide][MM] How to root your Xperia XA (as noob friendly as possible)

[caosugai]

i think i did install driver correctly
but running fastboot doesnt work, nothing happen, always <waiting for device>
does it need to enable debug and oem?

 

[rrvuhpg]

i think i did install driver correctly
but running fastboot doesnt work, nothing happen, always <waiting for device>
does it need to enable debug and oem?

You think bad, from Wikipedia:

Hardware not working properly

There are many reasons why hardware may not work properly. If Windows recognizes a problem with a device, it is denoted by a black exclamation point (!) on a yellow triangle in the lower right-hand corner of the device's icon.

Full page: https://en.m.wikipedia.org/wiki/Device_Manager

 

[caosugai]

You think bad, from Wikipedia:

Hardware not working properly

There are many reasons why hardware may not work properly. If Windows recognizes a problem with a device, it is denoted by a black exclamation point (!) on a yellow triangle in the lower right-hand corner of the device's icon.

Full page: https://en.m.wikipedia.org/wiki/Device_Manager

yeah finally find out my prob
so after install so0116 driver, i need to use it to recognise device for adb (http://forum.xda-developers.com/xperia-z/help/help-findiing-installin-s1boot-fastboot-t2218143)
root work well now :good::good:
and this is tut I found to custom stock rom, you may try this (https://www.youtube.com/watch?v=DpYxMRlBrR8)

 

[garikay]

I used this rootpack in my XA Ultra (install modified boot and TWRP and SU).This works well but now I would like to flash the stock boot and stock recovery to restore the TA partition. I saved earlier TA partition.
In the modified kernel TA is not restored. Anyone help me find a stock boot.img and fotakernel.img for my Sony Xperia XA Ultra Dual, please.

 

[rrvuhpg]

As I know you can't backup your TA partition on locked bootloader, your DRM keys are lost forever. You can use the workaround in the guide to "emulate" them. Please read carefully before playing with your phone

 

[anunknwon]

I cant unlock bootloader. I fixed fastboot driver (driver from developer.sonymobile.com), boot to fastboot mode. but I have message FAILED <remote: command not allowed> whenever I used oem, wipe, flash... only one command work is fastboot devices. anyone have any idea about this ?

 

[garikay]

No sir, it is not. I backuped TA partition on locked bootloader many times (I have 12 backups,1 in windows and 11 in Linux). When I do restore TA all goes well at the command prompt. But something is wrong, and when I check the status of DRM in the service menu bootloader is unlocked and the DRM keys are not installed. It may be different reasons, may be need to restore the TA on stock kernel, may be I do not correct. I wanted to try different methods and stock kernel including. Sorry for offtop.

 

[rrvuhpg]

I cant unlock bootloader. I fixed fastboot driver (driver from developer.sonymobile.com), boot to fastboot mode. but I have message FAILED <remote: command not allowed> whenever I used oem, wipe, flash... only one command work is fastboot devices. anyone have any idea about this ?

Verify in the hidden "service menu" if your bootloader can be unlocked and don't forget to enable "OEM unlock" in "developer settings".

 

[rrvuhpg]

No sir, it is not. I backuped TA partition on locked bootloader many times (I have 12 backups,1 in windows and 11 in Linux). When I do restore TA all goes well at the command prompt. But something is wrong, and when I check the status of DRM in the service menu bootloader is unlocked and the DRM keys are not installed. It may be different reasons, may be need to restore the TA on stock kernel, may be I do not correct. I wanted to try different methods and stock kernel including. Sorry for offtop.

If you can provide us the process to backup TA on locked bootloader you are not off topic. If you backed them after unlock you are fully off topic As I know you are the first user who can backup TA on locked bootloader on the XA.

 

[anunknwon]

Verify in the hidden "service menu" if your bootloader can be unlocked and don't forget to enable "OEM unlock" in "developer settings".

Mean root Status: Bootloader unlock allowed? It's says No so I can't do anything?

 

[garikay]

Yes, I did a backup of the TA on the locked bootloader using Universal (Dirtycow-based) TA Backup . First I do a backup in linux then in windows - creating OK. Then I wanted to restore the TA but failed. In the terminal TA recovery is OK, but in service menu - generic error. I have tried to do in the windows and linux in a terminal emulator on the device under root. Now I want to understand the reason why is not restored TA on my XA and it restored on other devices. On other devices, a different way to TA: /dev/block/platform/mtk-msdc.0/by-name/TA but on XA: /dev/block/platform/mtk-msdc.0/11230000.msdc0/by-name/TA (see screens) but I do not think that this is an obstacle. So I want to stock kernel to do experiments.

---------- Post added at 01:32 PM ---------- Previous post was at 12:48 PM ----------

Mean root Status: Bootloader unlock allowed? It's says No so I can't do anything?

Go to Settings-Options for developers - Factory Unlock - Enable

 

[rrvuhpg]

Mean root Status: Bootloader unlock allowed? It's says No so I can't do anything?

No you can't.

 

[rrvuhpg]

Yes, I did a backup of the TA on the locked bootloader using Universal (Dirtycow-based) TA Backup . First I do a backup in linux then in windows - creating OK. Then I wanted to restore the TA but failed. In the terminal TA recovery is OK, but in service menu - generic error. I have tried to do in the windows and linux in a terminal emulator on the device under root. Now I want to understand the reason why is not restored TA on my XA and it restored on other devices. On other devices, a different way to TA: /dev/block/platform/mtk-msdc.0/by-name/TA but on XA: /dev/block/platform/mtk-msdc.0/11230000.msdc0/by-name/TA (see screens) but I do not think that this is an obstacle. So I want to stock kernel to do experiments.

---------- Post added at 01:32 PM ---------- Previous post was at 12:48 PM ----------


Go to Settings-Options for developers - Factory Unlock - Enable

Very good news (for the dump)! I can't help you, as said before, for me you are the first user who dumped TA on XA.

EDIT: V2 of the TA backup tool officially supports XA and Ultra!
http://forum.xda-developers.com/crossdevice-dev/sony/universal-dirtycow-based-ta-backup-t3514236

 

[garikay]

EDIT: V2 of the TA backup tool officially supports XA and Ultra!
http://forum.xda-developers.com/crossdevice-dev/sony/universal-dirtycow-based-ta-backup-t3514236

Thanks for good news! I too have news. I restored a backup TA. But I did a backup even the first version of the exploit and the path to recovery different from other devices . The second version has not yet tried to use. Now we can safely rooting devices and then restore phone to factory condition any time.

 

[AnreJl]

Thanks for good news! I too have news. I restored a backup TA. But I did a backup even the first version of the exploit and the path to recovery different from other devices . The second version has not yet tried to use. Now we can safely rooting devices and then restore phone to factory condition any time.

can you tell, how you restored ta, i did a backup with first version too, and i used your guide,

Yes, I did a backup of the TA on the locked bootloader using Universal (Dirtycow-based) TA Backup . First I do a backup in linux then in windows - creating OK. Then I wanted to restore the TA but failed. In the terminal TA recovery is OK, but in service menu - generic error. I have tried to do in the windows and linux in a terminal emulator on the device under root. Now I want to understand the reason why is not restored TA on my XA and it restored on other devices. On other devices, a different way to TA: /dev/block/platform/mtk-msdc.0/by-name/TA but on XA: /dev/block/platform/mtk-msdc.0/11230000.msdc0/by-name/TA (see screens) but I do not think that this is an obstacle. So I want to stock kernel to do experiments.

but the same result

 

[garikay]

can you tell, how you restored ta, i did a backup with first version too, and i used your guide,

but the same result

It's simple. The first check on the device so the path to the file TA :

/dev/block/platform/mtk-msdc.0/11230000.msdc0/by-name/ta

This can be done Root explorer. Then copy your backupTA to root folder of device. Then turn off the phone and load the device in the recovery mode and connect to PC. Run command promt from folder ADB and promt:

 adb shell dd if=/sdcard/name your copy of backupTA.img of=/dev/block/platform/mtk-msdc.0/11230000.msdc0/by-name/ta

If everything is copied normally it will be like on the screenshot. After that, you need to click on the menu recovery turn off the phone, You can not be loaded into the system !!! You can not do it !!! Start FlashTool and click on the flashing icon, choose your firmware. Do not have to choose different items, especially MiscTA. You can only select items wipe. Then click Flash and when prompted, connect your turn off device. After flashing Disconnect your phone from cable and turn it on. The first boot is long. Make the first phone setup and when making your entry into the myXperia , if you are logged on with an account - I congratulate you. How to check in the service menu, you probably know. Now my friend is doing TWRP able to restore BackupTA. It will be enough just to copy the backupTA file to the phone directory. FlashTool I used 0.9.22.3

Good luck!

---------- Post added at 11:58 PM ---------- Previous post was at 11:46 PM ----------

Excuse me! Not someone else's backup restores! This will kill your phone! TA provides information on the serial number of the phone that is not the same as yours, even information when you upgrade or do a factory reset.

 

[cybershotwalkman]

I'm in 33.2.A.3.81 customized US firmware F3113. I've followed the steps. But after installing SuperSU in TWRP, when I press Reboot System, a Sony logo comes up, and the phone returned to TWRP. Bootloader is unlocked.
Although TWRP says supersu installation was successful, there is a message "failure, aborting" right after the line patching .init.*.rc, fstabs, dm-verity
Anyone can kindly highlight the possible reason?

Also, I am planning to repack kernel using rootkernel (I worked this before on Xperia Z5 and Z5 compact). However, I couldn't find kernel.sin in ftf...

 

[rrvuhpg]

I'm in 33.2.A.3.81 customized US firmware F3113. I've followed the steps. But after installing SuperSU in TWRP, when I press Reboot System, a Sony logo comes up, and the phone returned to TWRP. Bootloader is unlocked.
Although TWRP says supersu installation was successful, there is a message "failure, aborting" right after the line patching .init.*.rc, fstabs, dm-verity
Anyone can kindly highlight the possible reason?

Also, I am planning to repack kernel using rootkernel (I worked this before on Xperia Z5 and Z5 compact). However, I couldn't find kernel.sin in ftf...

Read the guide again I think you missed something.
If you need "kernel.sin" you can find it here: C:\Users\YOURSESSION\.flashTool\firmwares\Downloads\YOURFIRMWARE
The file is "boot_S1*****.sin"

I need this file too from XA/Ultra dual sim and from XA single sim (3 files) to update all boot.img with last kernel built from sources (for root users). If anyone can send them to me in PM I will update soon, all kernels are ready

 

[cybershotwalkman]

I ve successfully rooted. It seems that the latest firmware can't be rooted. So I used this step :
1. Flash store front firmware
2. Root following the steps.
3. Update to latest firmware. In Flash tool, I excluded boot.img and fotakernel.sin
4. Boot into recovery and flash super su.
The first time it wasn't rooted. So I repeat step 4 second time and finally root was successful.

Now, I want to restore TA key which I have backed up before I unlock the bootloader in order to have full drm functionalities.
I used rootkernel to make DK.ftf key, and I flash the key using flash tool. Flash tool has no error. But when I check security status in the service test menu using *#*#7378423#*#*, it seems that the key is not restored because unknown error is displayed.
May I know how can I restore DRM functions?

I will search for the kernel and update you.

 

[cybershotwalkman]

I ve successfully rooted. It seems that the latest firmware can't be rooted. So I used this step :
1. Flash store front firmware
2. Root following the steps.
3. Update to latest firmware. In Flash tool, I excluded boot.img and fotakernel.sin
4. Boot into recovery and flash super su.
The first time it wasn't rooted. So I repeat step 4 second time and finally root was successful.

Now, I want to restore TA key which I have backed up before I unlock the bootloader in order to have full drm functionalities.
I used rootkernel to make DK.ftf key, and I flash the key using flash tool. Flash tool has no error. But when I check security status in the service test menu using *#*#7378423#*#*, it seems that the key is not restored because unknown error is displayed.
May I know how can I restore DRM functions?

I will search for the kernel and update you.

Alright, I successfully restored DRM functions using the drm zip from http://forum.xda-developers.com/crossdevice-dev/sony/xperia-z1-z2-z3-series-devices-drm-t2930672.