List of fastboot oem commands on the Pixel 3 XL

Search This thread
Jun 29, 2014
38
310
I extracted the "fastboot oem" commands supported by the Pixel 3 XL from the firmware.

I haven't tested these, since most don't work when the bootloader is locked:

Code:
$ fastboot oem dmesg
FAILED (remote: 'Fastboot OEM command (dmesg) is not allowed when locked')
Finished. Total time: 0.081s

Note that fastboot commands can brick and damage your phone. Be careful when testing.

Here's the list of commands. You can run them with "fastboot oem <command>".

Code:
setbrightness
get_config
set_config
rm_config
get_platform_info
set_platform_info
select-display-panel
esim_erase
esim_atp
uart
off-mode-charge
sha1sum
ramdump
ramdump_sahara
rma
dump-chipid
check-hw-security
HALT
set_display_power_mode
citadel
enable-factory-lock
factory-lock
ddrtest
continue-factory
dmesg
 

npjohnson

Senior Member
May 3, 2014
1,560
2,252
St. Augustine, FL
I extracted the "fastboot oem" commands supported by the Pixel 3 XL from the firmware.

I haven't tested these, since most don't work when the bootloader is locked:

Code:
$ fastboot oem dmesg
FAILED (remote: 'Fastboot OEM command (dmesg) is not allowed when locked')
Finished. Total time: 0.081s

Note that fastboot commands can brick and damage your phone. Be careful when testing.

Here's the list of commands. You can run them with "fastboot oem <command>".

Code:
setbrightness
get_config
set_config
rm_config
get_platform_info
set_platform_info
select-display-panel
esim_erase
esim_atp
uart
off-mode-charge
sha1sum
ramdump
ramdump_sahara
rma
dump-chipid
check-hw-security
HALT
set_display_power_mode
citadel
enable-factory-lock
factory-lock
ddrtest
continue-factory
dmesg

Any idea what OEM citadel does? I have no clue from a precursory look.
 

xFirefly93

Senior Member
Jan 10, 2018
1,423
2,291
Timrå
I extracted the "fastboot oem" commands supported by the Pixel 3 XL from the firmware.

I haven't tested these, since most don't work when the bootloader is locked:

This is the message I am getting when trying to use anyone of the OEM commands, in this case, the possible adjustment of the display power mode.

FAILED (remote: Fastboot OEM command (set_display_power_mode) is not allowed)
finished. total time: 0.378s
PS C:\Users\Christofferwassberg\Downloads\platform-tools_r28.0.1-windows\platform-tools> fastboot oem set_display_power_
mode


Is it any secret restrictions enabled somewhere that is denying us from modifying, or checking the stats of phone, from the bootloader level?

EDIT: Yes, my bootloader is unlocked.
 
Last edited:

npjohnson

Senior Member
May 3, 2014
1,560
2,252
St. Augustine, FL
This is the message I am getting when trying to use anyone of the OEM commands, in this case, the possible adjustment of the display power mode.

FAILED (remote: Fastboot OEM command (set_display_power_mode) is not allowed)
finished. total time: 0.378s
PS C:\Users\Christofferwassberg\Downloads\platform-tools_r28.0.1-windows\platform-tools> fastboot oem set_display_power_
mode


Is it any secret restrictions enabled somewhere that is denying us from modifying, or checking the stats of phone, from the bootloader level?

EDIT: Yes, my bootloader is unlocked.

Yes, the device checks whether the PRODUCTION fuse, in our case, likely just QCOM_SEC_BOOT is blown, and if it is it restricts a whole number of commands/functions.
 

npjohnson

Senior Member
May 3, 2014
1,560
2,252
St. Augustine, FL
Sounds like something that only Samsung would add, but Google? Nah..

That wasn't said in a questioning way lol -- its just how it is.

Every non-Chinese phone has Qualcomm Secure Boot enabled by that exact means (the SEC_BOT Fuse row). If you Google it, you'll find such. It's why we can't run custom bootloader's (exempting S-OFF HTC devices which are an odd and interesting case where QCOM secureboot only verfies very specific chunks of the bootchain the user doesn't normally touch).

QCOM secure boot is literally the industry standard lol - using the production state to limit OEM commands is new as of the Pixel 2, and correctly restricting them is new to the 3 series.
 
  • Like
Reactions: Sam Nakamura

gee one

Senior Member
Jul 29, 2010
1,979
865
linux command line
Any idea what OEM citadel does? I have no clue from a precursory look.
This is from sargo. I tried some of the other oem commands that sounded non-destructive, but got a lot of invalid oem command errors.

I didn't try any of these citadel commands, but they do sound interesting. I have no idea if they will apply to the blueline/crosshatch.

Code:
[email protected]:# fastboot oem citadel
...
(bootloader) citadel <command>
(bootloader) Commands:
(bootloader) 	rescue       Try to rescue Citadel
(bootloader) 	state        Print current Citadel state
(bootloader) 	reset        Reset Citadel
(bootloader) 	reset-locks  Reset AVB locks
(bootloader) 	version      Print citadel OS version
(bootloader) 	reprovision  Reprovision device after a RMA unlock
(bootloader) 	suzyq on|off Enable or disable SuzyQable
FAILED (remote failure)
finished. total time: 0.060s
 

zimmie

Senior Member
Nov 12, 2015
58
6
Does anyone know how to use the citadel commands?

Im trying to restore a bricked 3a. so far here are my attempts

PS C:\Program Files (x86)\Minimal ADB and Fastboot> .\fastboot.exe oem citadel
(bootloader) citadel <command>
(bootloader) Commands:
(bootloader) rescue Try to rescue Citadel
(bootloader) state Print current Citadel state
(bootloader) reset Reset Citadel
(bootloader) reset-locks Reset AVB locks
(bootloader) version Print citadel OS version
(bootloader) reprovision Reprovision device after a RMA unlock
(bootloader) suzyq on|off Enable or disable SuzyQable
FAILED (remote: '')
fastboot: error: Command failed
PS C:\Program Files (x86)\Minimal ADB and Fastboot> .\fastboot.exe oem citadel rescue
FAILED (remote: 'no staged data, use fastboot stage <file>')
fastboot: error: Command failed
PS C:\Program Files (x86)\Minimal ADB and Fastboot> .\fastboot.exe stage bootloader-sargo-b4s4-0.2-5402313.img
Sending 'bootloader-sargo-b4s4-0.2-5402313.img' (8349 KB) OKAY [ 0.355s]
Finished. Total time: 0.413s
PS C:\Program Files (x86)\Minimal ADB and Fastboot> .\fastboot.exe oem citadel rescue
(bootloader) Recovering citadel - it may take a couple of minutes
FAILED (remote: 'failed to rescue citadel Bad Buffer Size')
fastboot: error: Command failed
PS C:\Program Files (x86)\Minimal ADB and Fastboot>
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    I extracted the "fastboot oem" commands supported by the Pixel 3 XL from the firmware.

    I haven't tested these, since most don't work when the bootloader is locked:

    Code:
    $ fastboot oem dmesg
    FAILED (remote: 'Fastboot OEM command (dmesg) is not allowed when locked')
    Finished. Total time: 0.081s

    Note that fastboot commands can brick and damage your phone. Be careful when testing.

    Here's the list of commands. You can run them with "fastboot oem <command>".

    Code:
    setbrightness
    get_config
    set_config
    rm_config
    get_platform_info
    set_platform_info
    select-display-panel
    esim_erase
    esim_atp
    uart
    off-mode-charge
    sha1sum
    ramdump
    ramdump_sahara
    rma
    dump-chipid
    check-hw-security
    HALT
    set_display_power_mode
    citadel
    enable-factory-lock
    factory-lock
    ddrtest
    continue-factory
    dmesg
    1
    Sounds like something that only Samsung would add, but Google? Nah..

    That wasn't said in a questioning way lol -- its just how it is.

    Every non-Chinese phone has Qualcomm Secure Boot enabled by that exact means (the SEC_BOT Fuse row). If you Google it, you'll find such. It's why we can't run custom bootloader's (exempting S-OFF HTC devices which are an odd and interesting case where QCOM secureboot only verfies very specific chunks of the bootchain the user doesn't normally touch).

    QCOM secure boot is literally the industry standard lol - using the production state to limit OEM commands is new as of the Pixel 2, and correctly restricting them is new to the 3 series.
Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone