Pixel XL Bootloader Unlock Codes... What to do with KS TOKEN? (Verizon)

ryandward

Member
Oct 18, 2010
8
0
0
Long story short, my OG Pixel XL got an upgrade from Verizon today, and died, one day out of warranty.

Anyhow, I have been searching through the strings in the bootloaders, and I have found some interesting things. There is the option to get unlock tokens.

HTML:
$ fastboot oem get_ks_token

(bootloader) INFO< Please cut following message >
(bootloader) INFO<<<< Identifier Token Start >>>>
(bootloader) INFO70719A130CC737A62AD9E8684FFDF272
(bootloader) INFO6A56EB4CFBD864CE8E8FC43D872F66F4
(bootloader) INFO965A23766AEF80A54BD01A78BE8F018C
(bootloader) INFO99520E4305AA4DA779DA0D948F6F2768
(bootloader) INFO75923D3E2A4662600AFDC3AC357F989C
(bootloader) INFOA0BABDCAB822D06A62FD6AB998954BE5
(bootloader) INFO97CF6B1B29B5651444B3F348AB683C48
(bootloader) INFO9167DBB49A01D526D9895E597C0ADB08
(bootloader) INFO4F9E8C2A306579D4C2392E5776FB67F1
(bootloader) INFO04EDC3D42CA543CFDD5657AD6AF4026A
(bootloader) INFO3B7C2F2B40CD3C5D72D95636377C6F21
(bootloader) INFO520168A6B71480A4BC4C2BCEC13DCD40
(bootloader) INFODBE9CD17162EC0A51C474AFA20FCCC64
(bootloader) INFO4E2C1E22619423C09C6344FB5606C5D8
(bootloader) INFOE180EAF191C69D54272BE57022F11A3C
(bootloader) INFO3D15D1BE88971E43792968A07CA5081A
(bootloader) INFO<<<<< Identifier Token End >>>>>
OKAY [  0.601s]
Finished. Total time: 0.623s
There is also the option to unlock the bootloader, but the codes just aren't available... When I try the following on a random file, I get...

HTML:
$ fastboot flash kstoken test.txt

target reported max download size of 536870912 bytes
Sending 'kstoken' (0 KB)...
OKAY [  0.090s]
Writing 'kstoken'...
(bootloader) flash KStoken
FAILED (remote: unlock token check failed)
Finished. Total time: 0.319s
I tried sending the token to HTC at https://www.htcdev.com/bootloader/unlock-instructions/page-2, and they won't help. I get this error:
HTML:
We're sorry, but it appears your attempt to unlock the bootloader on this device has failed. This could be caused by several factors including simple errors in the entry of the unlock token, problems with your device, or a lack of manufacturer support for the unlocking process. Please see the specific error code listed below, and try again if necessary.

Error Code: 150.
Error Reason: Extract Token Information Fail.
I am wondering if anybody knows what a code LOOKS like, so I can ask Verizon about the codes, or are the codes programatically generated from the token?
 

ryandward

Member
Oct 18, 2010
8
0
0
Unfortunately, I can't use this method because the phone is unable to turn on adb, since it is currently soft-bricked.

[How-to] Unlock bootloader on Verizon Pixel/XL by burduli
If you have a Google Pixel XL, I don't think this applies.
Right

I heard from a guy that I will need to disassemble the phone and short out the test points. I have been trying to research about this, but I can't really understand what it is that I am trying to short out. The phone is currently disassembled, and I'm waiting to hear back from him. But, I would like to do some reading beforehand.
 

Homeboy76

Senior Member
Aug 24, 2012
2,365
1,114
188
I heard from a guy that I will need to disassemble the phone and short out the test points. I have been trying to research about this, but I can't really understand what it is that I am trying to short out. The phone is currently disassembled, and I'm waiting to hear back from him. But, I would like to do some reading beforehand.
Good luck!
 

ryandward

Member
Oct 18, 2010
8
0
0
Hey Waseem, one of us must be confused.

I can't turn my phone on, and the USB debugging option was disabled by the latest update.

Am I following the wrong Guide???

I can't turn my phone on, so I can't enable USB debugging, therefore I can't use ADB.
 

blueyes

Senior Member
Dec 1, 2014
1,217
777
0
Baton Rouge
Long story short, my OG Pixel XL got an upgrade from Verizon today, and died, one day out of warranty.

Anyhow, I have been searching through the strings in the bootloaders, and I have found some interesting things. There is the option to get unlock tokens.

HTML:
$ fastboot oem get_ks_token(bootloader) INFO< Please cut following message >(bootloader) INFO>(bootloader) INFO70719A130CC737A62AD9E8684FFDF272(bootloader) INFO6A56EB4CFBD864CE8E8FC43D872F66F4(bootloader) INFO965A23766AEF80A54BD01A78BE8F018C(bootloader) INFO99520E4305AA4DA779DA0D948F6F2768(bootloader) INFO75923D3E2A4662600AFDC3AC357F989C(bootloader) INFOA0BABDCAB822D06A62FD6AB998954BE5(bootloader) INFO97CF6B1B29B5651444B3F348AB683C48(bootloader) INFO9167DBB49A01D526D9895E597C0ADB08(bootloader) INFO4F9E8C2A306579D4C2392E5776FB67F1(bootloader) INFO04EDC3D42CA543CFDD5657AD6AF4026A(bootloader) INFO3B7C2F2B40CD3C5D72D95636377C6F21(bootloader) INFO520168A6B71480A4BC4C2BCEC13DCD40(bootloader) INFODBE9CD17162EC0A51C474AFA20FCCC64(bootloader) INFO4E2C1E22619423C09C6344FB5606C5D8(bootloader) INFOE180EAF191C69D54272BE57022F11A3C(bootloader) INFO3D15D1BE88971E43792968A07CA5081A(bootloader) INFO>OKAY [  0.601s]Finished. Total time: 0.623s
There is also the option to unlock the bootloader, but the codes just aren't available... When I try the following on a random file, I get...

HTML:
$ fastboot flash kstoken test.txttarget reported max download size of 536870912 bytesSending 'kstoken' (0 KB)...OKAY [  0.090s]Writing 'kstoken'...(bootloader) flash KStokenFAILED (remote: unlock token check failed)Finished. Total time: 0.319s
I tried sending the token to HTC at https://www.htcdev.com/bootloader/unlock-instructions/page-2, and they won't help. I get this error:
HTML:
We're sorry, but it appears your attempt to unlock the bootloader on this device has failed. This could be caused by several factors including simple errors in the entry of the unlock token, problems with your device, or a lack of manufacturer support for the unlocking process. Please see the specific error code listed below, and try again if necessary.Error Code: 150.Error Reason: Extract Token Information Fail.
I am wondering if anybody knows what a code LOOKS like, so I can ask Verizon about the codes, or are the codes programatically generated from the token?
I pulled my Pixel xl's unlock token. Bunch of random alpha numericals. Gave it to my sister after she dropped her phone so can't pull it now. Have a 2xl but the command doesn't run on LG but should on the 2. If I'm remembering correctly the command is fastboot oem get_ks_token. You can get all the oem commands by running "strings bootloader.xyz123 | grep oem".

Sent from my Pixel 2 XL using Tapatalk

Sorry if it's already been stated.
 

WaseemAlkurdi

Senior Member
Apr 3, 2014
711
527
0
Amman
Hey Waseem, one of us must be confused.

I can't turn my phone on, and the USB debugging option was disabled by the latest update.

Am I following the wrong Guide???

I can't turn my phone on, so I can't enable USB debugging, therefore I can't use ADB.
Dear @ryandward,
Sorry for the late reply ... Didn't know that you responded (you didn't quote me so I didn't get a notification :( )
Yes indeed, this is the correct guide.
But why can't you power on your phone? Can't factory reset or downgrade? Or you could power on, but can't toggle USB Debugging or OEM Unlocking? (The former is unnecessary, the latter is normal)
Another point: You only need USB Debugging as to disable com.android.phone ... You can simply type the command on a Terminal Emulator shell.
But again, can you turn on the phone? If not, focus on fixing the bootloop, not on the unlock, at least for now.
Please reply soon.