• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[HOW-TO][Root+TWRP Recovery][LB]Stock Marshmallow 6.0.1 (23.5.A.0.575/.291)

Search This thread

ChiDi9901

Senior Member
Sep 20, 2012
446
165
Wien
Hello everyone,

Update 27.08.2016: It also works for version 23.5.A.1.291 (OS update that includes STAMINA). The procedure is identical, you just have to use the latest firmware available and create a pre-rooted .zip to update your tablet device.

I am pretty sure that I couldn't find a how-to guide anywhere that explains how rooting our precious Xperia Z3 Tablet Compact on Android 6.0.1 with locked bootloader works. This post simply shows the process of how I got root on my device (SGP611) and I am going to write the steps only in moderate detail so that hopefully everyone can follow without hassle. There are some steps that I'm not going to explain too much in detail but instead I highly recommend you to look around a bit on XDA to find theses already explained steps (I just want to get to the point on how to get root so that's why it may not be super noob friendly).
Edit: A little bit more info and additional steps that might help you further can be read in post #5.

Standard disclaimer:
Your warranty is now void.
I am not responsible for bricked devices, dead SD cards, or any other issues that may arise from not following the steps correctly/carefully.

Also, I am not a developer so I am very sorry if I can't give you an answer to questions relating to problems with the tools we are going to use in this tutorial. It's better to ask the developers directly( I will link you to the needed threads).

Steps:
1. Downgrade device if necessary
2. Root using KingRoot exploit
3. Install XZDualRecovery custom recovery
4.1 Get the latest Marshmallow firmware and create FTF file
4.2 Create the pre-rooted .zip file
5. Flashing the pre-rooted .zip file correctly
Extra: Already created pre-rooted .zip file download for the lazy ones ;) (At the very bottom)

1. First thing you need to know is that if you're device is currently bootloader locked and on Android Marshmallow 6.0.1 (23.5.A.0.575), as of the time I am writing this, you will not be able to achieve root directly through some kind of rooting tool. What you need to do now is to downgrade your device to an older version of Android, e.g. Android 5.0.2 or KitKat are good enough.
To do this you need to find the older firmware:
-Try this link to look for it: http://xperiafirmware.com/ (If you can't find Android 5.0.2 for example, use Google or look around XDA)
-Downgrading the device will wipe data/factory reset, so BACK UP YOUR STUFF before downgrading.
-Use flashtool to flash the firmware and downgrade: http://www.flashtool.net/index.php (I will expect you to know how to use flsahtool to flash ftf. files, there are many tutorials on how to do this)

2. Why you have to downgrade is because older firmwares have an exploit that can be used to root the device even when the bootloader is locked. So yes, something like a one-click root method is possible now.
-You may use this tool called KingRoot to root your tablet: http://forum.xda-developers.com/android/apps-games/one-click-root-tool-android-2-x-5-0-t3107461
Read the info carefully before doing anything.

3. Now, you should have managed to root your device with Android version other than 6.0.1. That is when another great tool comes in which is called XZDualrecovery. XZDualRecovery is "a" custom recovery that you'll need to be able to proceed from here.
-Install XZDualRecovery using the root method. That's the only way to get it onto the device.
-Link: http://forum.xda-developers.com/showthread.php?t=2261606 (Read the instruction there carefully)

4. Great! Now you should have root and custom recovery. If not, you did something wrong.
This is when you can create something called a "pre-rooted" firmware which is basically all you need to get root on Marshmallow 6.0.1.
4.1
-Use the tool called Xperifirm to download the Android 6.0.1: http://forum.xda-developers.com/cro...xperifirm-xperia-firmware-downloader-t2834142
-Launch Xperifirm and on the left hand side browse to "Xperia Z3 Tablet Compact -> the model number of your device (look under settings on your device to find out model number)"
-On the right side top you'll see "Check all", click it to let it check for latest firmware number
-Android 6.0.1 would be 23.5.A.0.575 23.5.A.1.291 (latest firmware). You can choose any Market or Operator you want (Tip: Use "Customized XXX" and avoid carriers)
-After downloading you'll need flashtool again to convert those downloaded files to .ftf format (Again, there are instrutions on the internet that you can look for)
4.2
-Make sure you have the .ftf file
-Get two .zip files
--1) RecRoot: http://forum.xda-developers.com/z3/general/wip-sony-android-6-0-mm-t3337357
--2) A dummy flashable file: http://forum.xda-developers.com/z3/...oid-6-0-mm-t3337357/post66569699#post66569699
-Get PRFCreator: http://forum.xda-developers.com/crossdevice-dev/sony/tool-prfcreator-easily-create-pre-t2859904
-Open PRFCreator and put the .ftf file to FTF, the RecRoot .zip file to RECOVERY, and the dummy_flashable.zip to SUPERSU. Don't do any other way!
-Tick Kernel, FOTAKernel, Modem, LTALable and Sign Zip
-Click "Create" to create the pre-rooted Marshmallow firmware

5. You should have created the pre-rooted Android 6.0.1 firmware now.
-Put the pre-rooted .zip file and the RecRoot .zip file onto your device's SD card/storage (anywhere where you can find them later)
-Reboot your tablet into TWRP recovery. (XZDualRecovery even provides you an app to choose and reboot to recovery) Don't reboot into any other recovery!
-Now, in TWRP recovery, erase dalvik cache, cache and system just to be clean.
-FIRSTLY, flash the pre-rooted.zip that you have put on your device. After flashing successfully, DON'T REBOOT YET!
-SECONDLY, flash the RecRoot.zip file
-Now you can reboot and if you did everything correctly, your Z3 Tablet Compact should boot up with Chainfire's SuperSU root and TWRP recovery (to access TWRP recovery, you have to reboot the device and while a green LED light appears for a moment, press and hold the volume down button. Then you will enter TWRP recovery. As for now, you cannot access the recovery any other way like using a reboot app, it will not work!).

CONGRATULATIONS! You have a rooted Z3 tablet with locked bootloader and you haven't lost Sony features. :laugh::good:

Thank you for reading this tutorial. And don't forget to thank all these devs that provided us the needed tools.

Extra: I will also put a link here where you can download my created pre-rooted Marshmallow firmware. It's build 23.5.A.0.575 Customized Germany and for SGP611 only!
https://mega.nz/#!TQ4AwbSZ!LNw11quAWurER_Tl9zHDyX_TiwZnzeVM1M0s10eyt4g
 
Last edited:

Teella

Senior Member
Dec 9, 2011
58
14
Great!
Would you be so kind and share your pre-rooted SGP621 ROM?

I would love too, but my upload is very very slow and would take week to upload. Follow the instructions it's very easy, it was the first time I've ever touched and FTF or made a prerooted rom. Well not really made, just clicked a few buttons in flashtool and waited. :)
 

pull.me.under

Member
Feb 11, 2012
17
13
Heidelberg
SGP621 additions

Hey man,

thanks for this concise guide to unroot our beloved tablet! I tried a few times before, but always gave up under the flood of outdated info available. With your guide, I successfully rooted my SGP621 (= Sony Z3 Tablet Compact with LTE).
Since you refer to "available info on the net" quite often, I had a few moments where I was unsure what to do exactly. Maybe the following hints can help others like me who are new to the world of Sony android devices.

Step 1:
You could probably also downgrade to 5.1, but to be safe, I chose 5.0.2. The needed ftf files for SGP621 as well as the SGP611 and SGP612 are avilable here.
I used the most current version of the flashtool, which is 0.9.22.3 as of this posting. I followed this (German) guide for installing and using the flashtool. To install the needed drivers, you'll have to navigate to wherever you installed the Flashtool to, there to the subfolder drivers, and execute the driver installer you find there. In the driver selection dialog install the first two, and of course the Z3TC driver you find somewhere in the list. Got two errors during the driver installs, ignored them, all went well.

Step 2:
Kingroot is a one-click-rooting solution you install directly on the phone, no pc connection necessary. After the tool is installed, you have to start it, swipe up a couple of times, and then tap on "Purify". The description in the xda thread made me think "Purify" is just an ad for an additional app, but it does start the rooting process.

Step 3:
After downloading and extracting XZDualRecovery, start the install.bat (under Windows, obviously). Connect your tablet, then choose menu item 1 (Install with SuperSU).

Step 4.1:
Many guides describe a decrypt / unpack step, you don't need this. The files are already unpacked after the download through XperiFirm. I did, however, delete the file "fwinfo.xml" from the downloaded files. No idea if that's needed, but it didn't hurt either.
To convert the downloaded files into an ftf file in the flashtool, select "Tools > Bundles > Create".
  • As "Source Folder" select the folder that XperiFirm created in the download path you specified. You'll then see a bunch of files in the "folder list" - select everything but the ".ta"-files (there were 5 ta-files in my case).
  • Doubleclick the empty "Device:" line, select the correct device.
  • I guess you can enter whatever in Branding and Version, I entered "German" and "23.5.A.1.291".

Step 4.2:
The "RecRoot"-File mentioned is indeed called "RecRoot_combined.zip". If you download that file, you're good to go. The PRFCreator tool needs to have Java installed for the last step (signing the prerooted rom). The file with the prerooted rom is saved in the PRFCreator dir itself.

Hoping this'll help someone!
 
Last edited:

ChiDi9901

Senior Member
Sep 20, 2012
446
165
Wien
@pull.me.under I am glad that I could help. Also, I'll thank you for your time extending my guide a bit with more detailed steps. That'll help users who are new to this stuff for sure. ?

Gesendet von meinem SGP611 mit Tapatalk
 
  • Like
Reactions: Dr.Thrilla

bozo13

Member
Jul 8, 2016
7
0
Hi,

If I follow this way, can I restore my tablet in stock settings if I have any trouble?

cheers
 

ChiDi9901

Senior Member
Sep 20, 2012
446
165
Wien
Hi,

If I follow this way, can I restore my tablet in stock settings if I have any trouble?

cheers

For restoring your tablet to stock, you only need flashtool with Xperifirm. It's like the first step where you have to download the stock firmware from Xperifirm and flash it with flashtool. Then you only have stock and clean operating system on your device. Unless, I'm not sure what you mean with stock settings?

Sent from my Sony E6553 using XDA Labs
 
Mar 4, 2016
39
4
Thanks for the guide. Using this guide, how can i install xposed on prerooted MM.
Shud i flash it after flashing recroot. Or shud i enter the system and then do it.
Following these steps will i lose recovery once i reboot to the system?
 

leo72793

Senior Member
Nov 3, 2010
1,346
190
Jacksonville
worked for me but god i kept soft bricking it. twrp kept wanting to reboot after wiping. now to wait and see if it will charge above 49%
 

tzitzi2

New member
Aug 1, 2016
3
0
Thank you for your efforts and detailed instructions. I did it smoothly on my 612. In my case the RecRoot was named as RecRootV4_combined.
Oddly, MobileUncle does not restart device to TWRP recovery, although it is doable the hard way :)
 

WanderMax

Senior Member
Aug 7, 2016
57
2
Thank you for your efforts and detailed instructions. I did it smoothly on my 612. In my case the RecRoot was named as RecRootV4_combined.
Oddly, MobileUncle does not restart device to TWRP recovery, although it is doable the hard way :)

Yes.
SGP612, can not enter TWRP recovery.
 
Last edited:

duartix

Member
Mar 18, 2013
29
1
Thanks for the Guide.
Post #5 is almost as important. It goes through a lot of details and problems I encountered (like the no neede to decrypt or the need to install Java to sign it).
For those who like the shortest path, here's a pre-rooted flashable zip:
Customized IBE Version 23.5.A.0.575 R8D for the SGP621
Decrypt key is:
!8G97O9eDtnF-_PntdsGh8uoRo7KQFpS7_D2c_FNaI-I

(edit) Lost root and I can't figure out why. :(
One moment I had 5.0.2 rooted with XZDualRecovery the next moment after step 5, I had 6.0.1 but root was lost. :(
XZDualRecovery is still there. I tried booting into TWRP and re-flashing RecRootV4_combined.zip to no avail. I had already done it according to the instructions right after the pre rooted ROM.
Anyone has an idea of what I could have missed?
 
Last edited:

gauthamsv

Senior Member
Mar 9, 2009
93
13
Woodbridge
Samsung Galaxy S20
Thanks for this wonderful guide:good:. I was able to install MM .291 to my SGP612 without any issues. I am attaching a picture of the PRF creator instruction followed if it might help others.
The install process after creating the prf zip file was quick. Also I noticed that I still have small apps after upgrading :)
 

Attachments

  • Capture.PNG
    Capture.PNG
    21.9 KB · Views: 420

Top Liked Posts

  • There are no posts matching your filters.
  • 40
    Hello everyone,

    Update 27.08.2016: It also works for version 23.5.A.1.291 (OS update that includes STAMINA). The procedure is identical, you just have to use the latest firmware available and create a pre-rooted .zip to update your tablet device.

    I am pretty sure that I couldn't find a how-to guide anywhere that explains how rooting our precious Xperia Z3 Tablet Compact on Android 6.0.1 with locked bootloader works. This post simply shows the process of how I got root on my device (SGP611) and I am going to write the steps only in moderate detail so that hopefully everyone can follow without hassle. There are some steps that I'm not going to explain too much in detail but instead I highly recommend you to look around a bit on XDA to find theses already explained steps (I just want to get to the point on how to get root so that's why it may not be super noob friendly).
    Edit: A little bit more info and additional steps that might help you further can be read in post #5.

    Standard disclaimer:
    Your warranty is now void.
    I am not responsible for bricked devices, dead SD cards, or any other issues that may arise from not following the steps correctly/carefully.

    Also, I am not a developer so I am very sorry if I can't give you an answer to questions relating to problems with the tools we are going to use in this tutorial. It's better to ask the developers directly( I will link you to the needed threads).

    Steps:
    1. Downgrade device if necessary
    2. Root using KingRoot exploit
    3. Install XZDualRecovery custom recovery
    4.1 Get the latest Marshmallow firmware and create FTF file
    4.2 Create the pre-rooted .zip file
    5. Flashing the pre-rooted .zip file correctly
    Extra: Already created pre-rooted .zip file download for the lazy ones ;) (At the very bottom)

    1. First thing you need to know is that if you're device is currently bootloader locked and on Android Marshmallow 6.0.1 (23.5.A.0.575), as of the time I am writing this, you will not be able to achieve root directly through some kind of rooting tool. What you need to do now is to downgrade your device to an older version of Android, e.g. Android 5.0.2 or KitKat are good enough.
    To do this you need to find the older firmware:
    -Try this link to look for it: http://xperiafirmware.com/ (If you can't find Android 5.0.2 for example, use Google or look around XDA)
    -Downgrading the device will wipe data/factory reset, so BACK UP YOUR STUFF before downgrading.
    -Use flashtool to flash the firmware and downgrade: http://www.flashtool.net/index.php (I will expect you to know how to use flsahtool to flash ftf. files, there are many tutorials on how to do this)

    2. Why you have to downgrade is because older firmwares have an exploit that can be used to root the device even when the bootloader is locked. So yes, something like a one-click root method is possible now.
    -You may use this tool called KingRoot to root your tablet: http://forum.xda-developers.com/android/apps-games/one-click-root-tool-android-2-x-5-0-t3107461
    Read the info carefully before doing anything.

    3. Now, you should have managed to root your device with Android version other than 6.0.1. That is when another great tool comes in which is called XZDualrecovery. XZDualRecovery is "a" custom recovery that you'll need to be able to proceed from here.
    -Install XZDualRecovery using the root method. That's the only way to get it onto the device.
    -Link: http://forum.xda-developers.com/showthread.php?t=2261606 (Read the instruction there carefully)

    4. Great! Now you should have root and custom recovery. If not, you did something wrong.
    This is when you can create something called a "pre-rooted" firmware which is basically all you need to get root on Marshmallow 6.0.1.
    4.1
    -Use the tool called Xperifirm to download the Android 6.0.1: http://forum.xda-developers.com/cro...xperifirm-xperia-firmware-downloader-t2834142
    -Launch Xperifirm and on the left hand side browse to "Xperia Z3 Tablet Compact -> the model number of your device (look under settings on your device to find out model number)"
    -On the right side top you'll see "Check all", click it to let it check for latest firmware number
    -Android 6.0.1 would be 23.5.A.0.575 23.5.A.1.291 (latest firmware). You can choose any Market or Operator you want (Tip: Use "Customized XXX" and avoid carriers)
    -After downloading you'll need flashtool again to convert those downloaded files to .ftf format (Again, there are instrutions on the internet that you can look for)
    4.2
    -Make sure you have the .ftf file
    -Get two .zip files
    --1) RecRoot: http://forum.xda-developers.com/z3/general/wip-sony-android-6-0-mm-t3337357
    --2) A dummy flashable file: http://forum.xda-developers.com/z3/...oid-6-0-mm-t3337357/post66569699#post66569699
    -Get PRFCreator: http://forum.xda-developers.com/crossdevice-dev/sony/tool-prfcreator-easily-create-pre-t2859904
    -Open PRFCreator and put the .ftf file to FTF, the RecRoot .zip file to RECOVERY, and the dummy_flashable.zip to SUPERSU. Don't do any other way!
    -Tick Kernel, FOTAKernel, Modem, LTALable and Sign Zip
    -Click "Create" to create the pre-rooted Marshmallow firmware

    5. You should have created the pre-rooted Android 6.0.1 firmware now.
    -Put the pre-rooted .zip file and the RecRoot .zip file onto your device's SD card/storage (anywhere where you can find them later)
    -Reboot your tablet into TWRP recovery. (XZDualRecovery even provides you an app to choose and reboot to recovery) Don't reboot into any other recovery!
    -Now, in TWRP recovery, erase dalvik cache, cache and system just to be clean.
    -FIRSTLY, flash the pre-rooted.zip that you have put on your device. After flashing successfully, DON'T REBOOT YET!
    -SECONDLY, flash the RecRoot.zip file
    -Now you can reboot and if you did everything correctly, your Z3 Tablet Compact should boot up with Chainfire's SuperSU root and TWRP recovery (to access TWRP recovery, you have to reboot the device and while a green LED light appears for a moment, press and hold the volume down button. Then you will enter TWRP recovery. As for now, you cannot access the recovery any other way like using a reboot app, it will not work!).

    CONGRATULATIONS! You have a rooted Z3 tablet with locked bootloader and you haven't lost Sony features. :laugh::good:

    Thank you for reading this tutorial. And don't forget to thank all these devs that provided us the needed tools.

    Extra: I will also put a link here where you can download my created pre-rooted Marshmallow firmware. It's build 23.5.A.0.575 Customized Germany and for SGP611 only!
    https://mega.nz/#!TQ4AwbSZ!LNw11quAWurER_Tl9zHDyX_TiwZnzeVM1M0s10eyt4g
    9
    SGP621 additions

    Hey man,

    thanks for this concise guide to unroot our beloved tablet! I tried a few times before, but always gave up under the flood of outdated info available. With your guide, I successfully rooted my SGP621 (= Sony Z3 Tablet Compact with LTE).
    Since you refer to "available info on the net" quite often, I had a few moments where I was unsure what to do exactly. Maybe the following hints can help others like me who are new to the world of Sony android devices.

    Step 1:
    You could probably also downgrade to 5.1, but to be safe, I chose 5.0.2. The needed ftf files for SGP621 as well as the SGP611 and SGP612 are avilable here.
    I used the most current version of the flashtool, which is 0.9.22.3 as of this posting. I followed this (German) guide for installing and using the flashtool. To install the needed drivers, you'll have to navigate to wherever you installed the Flashtool to, there to the subfolder drivers, and execute the driver installer you find there. In the driver selection dialog install the first two, and of course the Z3TC driver you find somewhere in the list. Got two errors during the driver installs, ignored them, all went well.

    Step 2:
    Kingroot is a one-click-rooting solution you install directly on the phone, no pc connection necessary. After the tool is installed, you have to start it, swipe up a couple of times, and then tap on "Purify". The description in the xda thread made me think "Purify" is just an ad for an additional app, but it does start the rooting process.

    Step 3:
    After downloading and extracting XZDualRecovery, start the install.bat (under Windows, obviously). Connect your tablet, then choose menu item 1 (Install with SuperSU).

    Step 4.1:
    Many guides describe a decrypt / unpack step, you don't need this. The files are already unpacked after the download through XperiFirm. I did, however, delete the file "fwinfo.xml" from the downloaded files. No idea if that's needed, but it didn't hurt either.
    To convert the downloaded files into an ftf file in the flashtool, select "Tools > Bundles > Create".
    • As "Source Folder" select the folder that XperiFirm created in the download path you specified. You'll then see a bunch of files in the "folder list" - select everything but the ".ta"-files (there were 5 ta-files in my case).
    • Doubleclick the empty "Device:" line, select the correct device.
    • I guess you can enter whatever in Branding and Version, I entered "German" and "23.5.A.1.291".

    Step 4.2:
    The "RecRoot"-File mentioned is indeed called "RecRoot_combined.zip". If you download that file, you're good to go. The PRFCreator tool needs to have Java installed for the last step (signing the prerooted rom). The file with the prerooted rom is saved in the PRFCreator dir itself.

    Hoping this'll help someone!
    4

    Well, whatever.

    Here are links for the pre-rooted Marshmallow firmwares of the SGP621 only :
    Go to mega dot nz then copy/paste the text.

    - UNITED STATES :
    /#!K0QTmDAB!tTrnmyOfXCcUDHCwyAvEKt7cxH0BIWE6ccE_MPWrXjo

    - UNITED KINGDOM:
    /#!TgQGERbC!sKOHVWhngzeTYHLBmEQlN9cNKKmnxoDUhn_Lg9n2tqI

    - GERMANY :
    /#!G4pHHLSQ!IXwDZN2gCAG17JN-oWM-vU1DGGFHUL50ufwOXevXnVE

    - FRANCE :
    /#!2hhm1a5A!n06ypoAwdLwqIvlILpaKvgn4nT6g5z47WpLUvXNhey8
    4
    Prerooted, flashable, Android 6.0.1 for SGP621 (locked bootloader)

    Hallo all,

    to save your time I prepared this version (in September 2016).
    Now You can use it too:

    It's based on original stock ROM version (DE_1290-4945_23.5.A.1.291_R3D) of Android 6.0.1 for Z3 Tablet Compact LTE.
    So this version is builded for Germany, but with Global LTE, so should work everywhere and in all languages of course (here in Czech Rep. and in Czech language works delightfully).

    To downloaded original ROM I just added:
    - prerooted (SuperSU)
    - DualRecovery with TWRP
    - OpenGAPPS

    Installation (not remember all detail already):
    - prerequisites: already rooted tablet with older system, working custom recovery (I had TWRP 2.8.7.0), no manipulation with bootloader needed
    - put to SDcard both files
    - boot to TWRP
    - Factory Reset (Wipe Dalvik, System, Cache, Data)
    - install SGP621_Customized DE_1290-4945_23.5.A.1.291_R3D flashable-prerooted-signed.zip
    - simultaneously (without reboot!) install RecRootV4_combined.zip
    - reboot tablet


    Everything works on my tablet almost half a year without any technical issues.
    Good Luck!

    kiwii.cz

    PS: As a novice in posting here I see that without more then 10 posts I have no rights to share links, so try to mix this info together to URLs:
    https + :// + drive.google.com + / + open + ? + id= + 0B2vQXfgLrKmmc0dYMnc2MmtpaDA
    https + :// + drive.google.com + / + open + ? + id= + 0B2vQXfgLrKmmX1lhVWRMV2xqSUE
    3
    Hi, I am also looking for prerooted .291 zip ROM for my SGP621. Can you share yours?

    This is the latest update pre-rooted flashable with recovery

    https://desycloud.desy.de/index.php/s/AdLwrenKF5L9LES

    You have to install SuperSU from Play Store to allow root access to apps and upgrade the SU binary (choose Normal instead of TWRP/CWM).