How To Guide Root Guide for Galaxy Tab S8/S8+/S8Ultra

[Vinsang]

See post #3 for in depth guide !

->insert usual general disclaimer of liability

Required:
Odin3_v3.14.1 flash tool
Samsung USB Driver installed
Frija or something else, to download stock files
7zip or similar

1: Unlock bootloader (will wipe your precious data, void warranty, break Knox e-fuse and who knows what else !)
-unlock dev option (just harass your Build number in settings)
-be connected to the internet (WiFi or 5g)
-allow USB debugging
-OEM unlock
-be warned that this might cause WWIII
-Power off your device. Press Volume Up + Volume Down THEN plug your Tablet lnto a PC to boot into download mode.
-Release buttons immediately when the blue screen shows itself.
-Long press volume up to unlock the bootloader. This will wipe your data and automatically reboot
-Go through the initial setup.
-Skip through all the steps except wifi or 5g
-sign into your Google or Samsung account
-Enable Developer options & USB debugging
-reboot
-You have an unlock bootloader and have control over your device, (it is unfair that this voids your warranty as you should be able to use your hardware as you please).


2: Root install:
-Install Magisk
-use frija or something else to get the latest file according to your device and your CSC :
-patch the whole AP file with magisk (transfer of big files can be tricky, using SD card to transfer file from computer to tablet and vice versa seems like one if the easiest way)
-use odin to flash AP (the patched one), CP, BL and CSC (will wipe once again and reboot)
-Open magisk to finish install (reboot)
-You have root

3: Root update:
-use Frija or something else to get the latest file according to your device and your CSC :
-patch the whole AP file with magisk
-use Odin to flash AP (the patched one), CP, BL and Home_CSC (using CSC will wipe)
-Press and hold Vol-down and Power let go of all buttons once the screen turn on.
-You have root, data kept and update


Please let me know if something should be added or edited.

 

[roirraW "edor" ehT]

Hi @Vinsang! Thanks for the nice post. I'd like to suggest you edit the type of thread this is and make it a "How To Guide" instead of "Question" thread. That will help it stand out, especially if anyone uses the Quick Filters at the top of the list of threads in this section.

Edit: Thanks for changing it. Cheers!

 

[skrowl]

How to Root (or update an already-rooted device)​

​

Prereqs​

1. Install the USB driver from https://developer.samsung.com/android-usb-driver
2. Get the latest Odin from https://odindownloader.com/category/download and unzip it
3. Get the latest Frija from https://github.com/SlackingVeteran/frija/releases and unzip it
4. Start Frija and begin downloading the latest firmware for your Model and CSC:
   
   1. Model Numbers
      • S8 Ultra 5G: SM-X906
      • S8 Ultra Wifi: SM-X900
      • S8+ 5G: SM-X806
      • S8+ Wifi: SM-X800
      • S8 5G: SM-X706
      • S8 Wifi: SM-X700
   2. CSC: Settings > About Tablet > Software Information > Service provider software version

​

Step 1 - Prepare your Tablet (only necessary for first install on unrooted device)​

1. While Frija is downloading the firmware, prepare your device by doing the following:
2. Settings > About Tablet > Software Information > Click Build Number 7 times quickly
3. Developer Options (just below About Tablet on the left column)
   • Turn on USB Debugging
   • Turn on OEM unlocking
     • NOTE: If the OEM Unlocking option doesn't appear, connect the device to the internet, wait a few minutes, then try again
4. Power tablet completely off (Hold volume down + power button if you haven't changed the Bixby settings)
5. While holding volume up and volume down, plug the tablet into your PC via USB
   • Let go of volume keys as soon as the blue-green screen shows up
6. Press and hold volume up for 5 seconds, the screen will change to a confirmation prompt
7. Press volume up again to confirm, the tablet will reboot
8. Unplug your tablet from USB
9. Go through initial setup. Don't bother copying files or installing anything.
10. Skip signing in to your Google account and Samsung account. You won't be using them for this step.
11. Settings > About Tablet > Software Information > Click Build Number 7 times quickly
12. Developer Options (just below About Tablet on the left column)
    • Turn on USB Debugging
13. Reboot the tablet

​

Step 2 - Patch the stock firmware to make it rooted​

1. Frija should have finished downloading by now, unzip the file (remember where you unzipped it to)
2. Plug your tablet in to your computer via USB and click Allow if it prompts to allow data access
3. If this is your first install / you're rooting the tablet for the first time:
   1. Download Magisk-vXX.XX.apk from the topmost release at https://github.com/topjohnwu/Magisk/releases
   2. Copy the Magisk-vXX.XX.apk and the AP_xxx_xxx_tar.md5 from the zip file Frija downloaded to:
      • This PC > Galaxy Tab S8 Ultra > Internal Storage > Download
   3. Open the My Files app on the tablet and browse to Downloads
   4. Click the Magisk-vXX.XX.apk and it will prompt you to click Settings
   5. In Settings, turn on My Files, then it will give you a prompt to Install
   6. When Magisk is done installing, click Open
4. If your tablet was already rooted, and you're just updating:
   1. Copy the AP_xxx_xxx_tar.md5 from the zip file Frija downloaded to:
      • This PC > Galaxy Tab S8 Ultra > Internal Storage > Download
5. After the file is done copying, unplug your tablet from USB
6. In Magisk, click Install in the top Magisk area, then the option for Select and Patch a file
7. Click My Files > Downloads, select the AP_XXX_XXX.tar.md5 file and click Done at the bottom
8. Click Lets Go -> After a few moments, it should display this (ignore 'Installation failed' at the top, it always does that):
   

Step 3 - Apply the rooted firmware​

1. Plug your tablet back in to USB, then on your PC, go back to This PC > Galaxy Tab S8 Ultra > Internal Storage > Download and copy the magisk_patched-xxx.tar file back to the folder where you unzipped the zip file from Frija
2. After the copy is finished, unplug your tablet from your PC and turn the tablet off
3. While holding volume up and volume down, plug the tablet into your PC via USB
   • Let go of volume keys as soon as the blue-green screen shows up
4. Click volume up briefly (don't hold it) to go into download mode
5. Start Odin and accept the disclaimer prompt.
6. Click BL and select the BL_XXX_XXX.tar.md5 file where you unzipped the zip file from Frija
7. Click AP and select the magisk_patched-XXX.tar file
8. If this is your first install / you're rooting the tablet for the first time (this WILL wipe your data):
   • Click CSC and select the CSC_XXX_XXX.tar.md5
9. If your tablet was already rooted, and you're just updating (this WILL NOT wipe your data):
   • Click CSC and select the HOME_CSC_XXX_XXX.tar.md5
10. Odin should now look like this:
    
11. Click Start. When it's finished, Odin will display "PASS!" and the tablet will automatically reboot.

Step 4 - Verify and finalize​

1. Go through the normal setup, signing in to your Google and Samsung accounts this time
2. Click on Magisk that is now pre-installed, and go through the Settings step to allow it to install again
3. It should prompt you that your device needs additional setup and one more reboot, click OK
4. After rebooting, your device should be fully rooted. Use a root checker app if you want to verify.

​

Step 5 (optional) - Get Netflix (and banking apps etc) working with root​

1. Install https://github.com/Fox2Code/FoxMagiskModuleManager/releases and run it
2. Search for Universal Safetynet Fix by kdrag0n and install it
3. In Magisk settings click Systemless hosts, turn on Zygisk, turn on Enforce Denylist
4. Click Configure Denylist, then the 3 dot menu and Show System Apps
   1. Search for Google Play Store, click it, check the check and turn on all options underneath
   2. Search for Google Play Services, click it, turn on .gms and .gms.unstable ONLY
   3. Search for Netflix, click it, check the check and turn on all options underneath
   4. (optional) Add your bank / pay app, etc here if you'd like
5. In Settings > Apps, search for Google Play Services and Google Play Store and clear all data (not just cache) for each
6. Reboot
   1. NOTE - This is currently only passing Widevine level 3, so Netflix is limited to SD. I'm still trying to figure out how to get L1 / full HD.

 

[SavXL]

Is there currently any way to make nandroid backups without TWRP since there isn't a build of it for the Tab S8 line yet?

 

[Vinsang]

Is there currently any way to make nandroid backups without TWRP since there isn't a build of it for the Tab S8 line yet?

Not you can't make a full nandroid back up without TWRP for the moment. You can use Swift backup or something similar to backup some things in particular, Google backup is also pretty convenient.

 

[skrowl]

Anyone work out how to get Netflix working with root yet? Also, is Magisk manager showing any modules to download in the Magisk app for you guys? I can install from file, but the downloading functionality doesn't seem to be working.

 

[Vinsang]

Dunno about Netflix, but this worked for banking apps:
Add this module : https://github.com/kdrag0n/safetynet-fix

Zigisk and enforced denylist on and add Netflix (or other) in the deny list. Reboot and tryout.

It seemed that the download section isn't there anymore on the latest magisk, same on other devices. You gotta download them separately.

 

[SavXL]

Anyone work out how to get Netflix working with root yet? Also, is Magisk manager showing any modules to download in the Magisk app for you guys? I can install from file, but the downloading functionality doesn't seem to be working.

Not sure when, but somewhere in an update, the ability to download modules from magisk directly was removed. You can download them using an app called Fox's Magisk Module Manager. You can search for modules just like you could on Magisk, and they'll be added once you install them and reboot. Also, for the netflix thing, your device may not be passing safetynet. Checking this was also remove in an update, but you can check it with YASNAC.

Edit: I just did this with my rooted Tab S7+, but it should work with the S8+ and S8U as well. Doing this should let you pass safetynet and be able to use Netflix.
1. Enable Zygisk in Magisk settings, then reboot.
2. Enable Enforce DenyList in Magisk settings, then go to Configure DenyList.
3. Enable show system apps with the menu on the top-right, then search "google play services".
4. Enable DenyList for com.google.android.gms & com.google.android.gms.unstable, then reboot.
5. Open YASNAC to run safetynet attestation, you should be passing basic integrity but failing cts profile match.
6. Download and install the latest version of the safetynet fix for zygisk module, then reboot.
7. Check YASNAC again, you should now be passing basic integrity and cts profile match.
8. Go to settings > apps, find google play service & google play store, clear data for both of them, reboot.
9. Go to the play store > settings, play protect certification should now say "device is certified".
10. Open Magisk > Configure DenyList, search for Netflix (enable show system apps if you need to), enable DenyList for everything, reboot.
11. Update Netflix if it's not up to date. If the play store is allowing you to update Netflix at all, then you're good to go.

Now you have Netflix running on your rooted tab!

Edit 2: Accidentally saved my first edit before I finished the instructions, my bad.

 

[lloydsw]

Prereqs​

1. Install the USB driver from https://developer.samsung.com/android-usb-driver
2. Get the latest Odin from https://odindownloader.com/category/download and unzip it
3. Get the latest Frija from https://github.com/SlackingVeteran/frija/releases and unzip it
4. Start Frija and begin downloading the latest firmware for your Model and CSC:View attachment 5574197
   1. Model Numbers
      • S8 Ultra 5G: SM-X906
      • S8 Ultra Wifi: SM-X900
      • S8+ 5G: SM-X806
      • S8+ Wifi: SM-X800
      • S8 5G: SM-X706
      • S8 Wifi: SM-X700
   2. CSC: Settings > About Tablet > Software Information > Service provider software version

​

Step 1 - Prepare your Tablet​

1. While Frija is downloading the firmware, prepare your device by doing the following:
2. Settings > About Tablet > Software Information > Click Build Number 7 times quickly
3. Developer Options (just below About Tablet on the left column)
   • Turn on OEM unlocking
   • Turn on USB Debugging
4. Power tablet completely off (Hold volume down + power button if you haven't changed the Bixby settings)
5. While holding volume up and volume down, plug the tablet into your PC via USB
   • Let go of volume keys as soon as the blue-green screen shows up
6. Press and hold volume up for 5 seconds, the screen will change to a confirmation prompt
7. Press volume up again to confirm, the tablet will reboot
8. Unplug your tablet from USB
9. Go through initial setup. Don't bother copying files or installing anything.
10. Skip signing in to your Google account and Samsung account. You won't be using them for this step.
11. Settings > About Tablet > Software Information > Click Build Number 7 times quickly
12. Developer Options (just below About Tablet on the left column)
    • Turn on USB Debugging
13. Reboot the tablet

​

Step 2 - Patch the stock firmware to make it rooted​

1. Frija should have finished downloading by now, unzip the file (remember where you unzipped it to)
2. Plug your tablet in to your computer via USB and click Allow if it prompts to allow data access
3. If this is your first install / you're rooting the tablet for the first time:
   1. Download Magisk-vXX.XX.apk from the topmost release at https://github.com/topjohnwu/Magisk/releases
   2. Copy the Magisk-vXX.XX.apk and the AP_xxx_xxx_tar.md5 from the zip file Frija downloaded to:
      • This PC > Galaxy Tab S8 Ultra > Internal Storage > Download
   3. Open the My Files app on the tablet and browse to Downloads
   4. Click the Magisk-vXX.XX.apk and it will prompt you to click Settings
   5. In Settings, turn on My Files, then it will give you a prompt to Install
   6. When Magisk is done installing, click Open
4. If your tablet was already rooted, and you're just updating:
   1. Copy the AP_xxx_xxx_tar.md5 from the zip file Frija downloaded to:
      • This PC > Galaxy Tab S8 Ultra > Internal Storage > Download
5. Open Magisk
6. In Magisk, click Install in the top Magisk area, then the option for Select and Patch a file
7. Click My Files > Downloads, select the AP_XXX_XXX.tar.md5 file and click Done at the bottom
8. Click Lets Go ->. After a few moments and it should give you a screen like this:View attachment 5574199

Step 3 - Apply the rooted firmware​

1. On your PC, go back to This PC > Galaxy Tab S8 Ultra > Internal Storage > Download and copy the magisk_patched-xxx.tar file back to the folder where you unzipped the zip file from Frija
2. After the copy is finished, unplug your tablet from your PC and turn the tablet off
3. While holding volume up and volume down, plug the tablet into your PC via USB
   • Let go of volume keys as soon as the blue-green screen shows up
4. Click volume up briefly (don't hold it) to go into download mode
5. Start Odin and accept the disclaimer prompt.
6. Click BL and select the BL_XXX_XXX.tar.md5 file where you unzipped the zip file from Frija
7. Click AP and select the magisk_patched-XXX.tar file
8. If this is your first install / you're rooting the tablet for the first time:
   • Click CSC and select the CSC_XXX_XXX.tar.md5
9. If your tablet was already rooted, and you're just updating:
   • Click CSC and select the HOME_CSC_XXX_XXX.tar.md5
10. Odin should now look like this:View attachment 5574201
11. Click Start. When it's finished, Odin will display "PASS!" and the tablet will automatically reboot.

Step 4 - Verify and finalize​

1. Go through the normal setup, signing in to your Google and Samsung accounts this time
2. Click on Magisk that is now pre-installed, and go through the Settings step to allow it to install again
3. It should prompt you that your device needs additional setup and one more reboot, click OK
4. After rebooting, your device should be fully rooted. Use a root checker app if you want to verify.

Edit - Thanks OP, but I don't think of this as a better guide. I just took really careful notes of what I was doing, so that I'd be able to reproduce it in 6 months when my brain had completely forgotten all the buttons!

Excellent guide. I just had my OOBI this morning & I forgot about having to change the date to an earlier one, check for a software update, etc before being able to see OEM unlock in developer settings. But that's a one & done.

 

[innit]

Anyone work out how to get Netflix working with root yet? Also, is Magisk manager showing any modules to download in the Magisk app for you guys? I can install from file, but the downloading functionality doesn't seem to be working.

To download magisk modules use this app; https://github.com/Fox2Code/FoxMagiskModuleManager


To hide root you can try this:

1. Magisk -> Settings -> Hide the Magisk app (It will get a new random package name so other apps won't see that it's actually Magisk and additionally you can choose a new name for the app as well.)
2. Open the newly created magisk app, install extra files when prompted and tab will reboot automatically.
3. Flash MagiskHide Props Config https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf/releases
4. Reboot
5. Flash Universal Safetynet Fix https://github.com/kdrag0n/safetynet-fix/releases
6. Reboot
7. Add any app you want to hide root from to DenyList: Google Play Store, Google Play Services, Google Services Framework, Netflix, banking apps etc.
8. Enforce DenyList MUST stay turned off!
9. Flash Shamiko module to hide root properly.

Releases · LSPosed/LSPosed.github.io

Contribute to LSPosed/LSPosed.github.io development by creating an account on GitHub.

github.com

10. Reboot

 

[Vinsang]

After checking Frija, found that an update was available fro my SM-X906B EUX, Just updated to X906BXXU1AVCD/X906BOXM1AVCD/X906BXXU1AVCD using step 3 of the guide without issue (root and data kept).
Is there a way to be notify when an update is out ? Or do i have to manually check every month?
Do we have changelog or something similar?

 

[roirraW "edor" ehT]

After checking Frija, found that an update was available fro my SM-X906B EUX, Just updated to X906BXXU1AVCD/X906BOXM1AVCD/X906BXXU1AVCD using step 3 of the guide without issue (root and data kept).
Is there a way to be notify when an update is out ? Or do i have to manually check every month?
Do we have changelog or something similar?

Someone else had given the link to this site (for your model) https://samfw.com/firmware/SM-X906B.

No automatic notifications, but I use a Windows program that checks sites for updates (https://samfw.com/firmware/SM-X900 for my model, which won't arrive for another 12 days).

Might also be able to use https://www.sammobile.com/firmwares/

Somewhere on this site might occasionally be generic changelogs https://www.sammobile.com/news/galaxy-tab-s8-ultra-february-2022-security-update-released/#

Samsung Galaxy Tab S8 Ultra

Introduction Samsung is making no secret of the fact that it wants to offer the best Android tablet on the market. ...

www.sammobile.com

Samsung Galaxy Tab S8+

Introduction Prior to the Galaxy Tab S8 series, the

www.sammobile.com

Samsung Galaxy Tab S8

Introduction Samsung's flagship tablet lineup was due for a major refresh and the company came through with the Galaxy Tab S8 ...

www.sammobile.com

 

[SavXL]

Quick question. If another software update were to come out, could I update it and still have magisk and root access afterwards? My Tab S8+ says its device status is official, and it doesn't tell me that my device is rooted when I connect to the server to check for updates. So, if I updated this way, would that remove the whole patching the AP file with magisk and flashing it with Odin thing? It'd be awesome to have the latest updates and such while maintaining root access.

 

[Vinsang]

To keep root and your data while updating, follow the step 3 of the guide in post #1( it requires that you look manually for updates).
I wouldn't advise to update via OTA while rooted. I don't even think you'll get the prompts.

 

[SavXL]

To keep root and your data while updating, follow the step 3 of the guide in post #1( it requires that you look manually for updates).
I wouldn't advise to update via OTA while rooted. I don't even think you'll get the prompts.

That's odd because I got the prompt to update on my rooted Tab S7+ (it also says the device status is official) when the OneUI 4.1 update came out for it. I haven't tested to see if that would change anything, but since the S7+ has TWRP, I can just restore a backup Incase something doesn't turn out well.

 

[brunosilvauk]

Hi all. I purchased a SM-X900 from the Samsung website(UK). I am having a serious problem with getting the OEM unlocking option to display in the developer options menu. I have tried the known workarounds (change date/disable automatic updates, etc) but had no success. Does anyone have any other methods/ideas? I previously had the tab s7+ and had no problems with this.

Any tips would be much appreciated!

 

[SavXL]

Hi all. I purchased a SM-X900 from the Samsung website(UK). I am having a serious problem with getting the OEM unlocking option to display in the developer options menu. I have tried the known workarounds (change date/disable automatic updates, etc) but had no success. Does anyone have any other methods/ideas? I previously had the tab s7+ and had no problems with this.

Any tips would be much appreciated!

I've had some issues where after enabling OEM Unlocking and going through the process, after Unlocking and resetting, the option disappears, but OEM is still unlocked. Not sure what causes this, but after rebooting for some root-required things and checking again, the option was there and changeable. I actually went throught the normal initialization process on my Tab S7+ and Tab S8+ (wifi, clock, samsung account, etc) and never had any issues. Maybe try either factory resetting again or flashing latest stock firmware (you can flash official firmware even if oem is locked). YMMV though. This specific issue of the option not showing up at all never happened for me, so I'm not sure how much help my suggestions will be.

 

[brunosilvauk]

I've had some issues where after enabling OEM Unlocking and going through the process, after Unlocking and resetting, the option disappears, but OEM is still unlocked. Not sure what causes this, but after rebooting for some root-required things and checking again, the option was there and changeable. I actually went throught the normal initialization process on my Tab S7+ and Tab S8+ (wifi, clock, samsung account, etc) and never had any issues. Maybe try either factory resetting again or flashing latest stock firmware (you can flash official firmware even if oem is locked). YMMV though. This specific issue of the option not showing up at all never happened for me, so I'm not sure how much help my suggestions will be.

Thanks, in my case, I have not seen this OEM option at all, since I received the device. I have not been able to root it.

 

[SavXL]

Thanks, in my case, I have not seen this OEM option at all, since I received the device. I have not been able to root it.

Well, something I can recommend is downloading the latest firmware update for your specific device (use either frija or samfw), going into download mode by holding vol+ and vol- while connecting the device to a PC, and flashing it with Odin, or you can update officially since your device hasn't been rooted yet. Maybe the current version you're on is affecting it somehow? No clue man. This issue is brand new to me.

 

[brunosilvauk]

Well, something I can recommend is downloading the latest firmware update for your specific device (use either frija or samfw), going into download mode by holding vol+ and vol- while connecting the device to a PC, and flashing it with Odin, or you can update officially since your device hasn't been rooted yet. Maybe the current version you're on is affecting it somehow? No clue man. This issue is brand new to me.

No joy, have no idea how to fix this. Thank you for your input anyway! Maybe someone else has any other ideas?