SM-T295 - Finally rooted tablet!! (updated 19-March-2021)

Search This thread
I do have TWRP on the device. Though its pain to get to it with the nonsense bootlock warning message getting in the way lol.
Yeah, it is very stupid that the firmware is now signed and can't be edited..., but, if you need to flash an older bootloader which does allow the installation of TWRP and that things, doesn't it also allow modified firmware???
 
I do have TWRP on the device. Though its pain to get to it with the nonsense bootlock warning message getting in the way lol.
By the way, does it really take that long to boot the device? My device has a lot of apps and games (SM-T290 model) and still boots very fast, although the apps are installed to an SD card (main reason for root, also use other interesting stuff)...
 
You could try to take a look at this:
Back to another topic I'm confused about. Magisk is sat on my rooted device and was added as part of the instructions I followed in this thread. Somebody else said DON'T update Magisk , others said do....

So see this pic : What do I do? update both listed apps? What about the options on recovery/boot ? preserve force encryption / preserve AVB 2.0/dm-vertity whatever that means
 

Attachments

  • IMG20230206214206.jpg
    IMG20230206214206.jpg
    238.1 KB · Views: 6

J.Michael

Recognized Contributor
Jan 20, 2018
1,815
2,060
Samsung Galaxy Tab A series
Back to another topic I'm confused about. Magisk is sat on my rooted device and was added as part of the instructions I followed in this thread. Somebody else said DON'T update Magisk , others said do....

So see this pic : What do I do? update both listed apps? What about the options on recovery/boot ? preserve force encryption / preserve AVB 2.0/dm-vertity whatever that means
Of course some people say update Magisk. There have been changes, some might be good for you. On the other hand, why bother? Why did you install Magisk?

I installed Magisk as the first way I found to get setuser privilege. Maybe the only way. That's all I want.

If you are not trying to use Magisk's other capabilities -- being able to "modify" /system, being able to install "modules" that do magic things -- why bother? Especially since you say you tried once and had problems.

(If you are really interested in updating Magisk, it might be that the version you started with is so old that the direct update through the manager just won't work. You might have an easier time if you uninstall Magisk, restore the original ROM, then install the latest version of Magisk.)

As for your struggles to do what you think should be simple things -- eliminate nag screen, boot when power applied -- I don't think it's a matter of your technical expertise. I think it just can't be done.
 
  • Like
Reactions: Talich52
Of course some people say update Magisk. There have been changes, some might be good for you. On the other hand, why bother? Why did you install Magisk?

I installed Magisk as the first way I found to get setuser privilege. Maybe the only way. That's all I want.

If you are not trying to use Magisk's other capabilities -- being able to "modify" /system, being able to install "modules" that do magic things -- why bother? Especially since you say you tried once and had problems.

(If you are really interested in updating Magisk, it might be that the version you started with is so old that the direct update through the manager just won't work. You might have an easier time if you uninstall Magisk, restore the original ROM, then install the latest version of Magisk.)

As for your struggles to do what you think should be simple things -- eliminate nag screen, boot when power applied -- I don't think it's a matter of your technical expertise. I think it just can't be done.
On the Magisk issue, the only reason its on my tablet is purely because on page #1 of this thread on instruction #18 it said install the Magisk file attached on the header post. Thats literally how its there...not because I was doing anything clever, just following instruction. Totally happy to uninstall it providing I keep root ( can I keep root ..because the moment I trigger uninstall..the first warning I get is that Root will be removed.. ??? )
 
Last edited:
What exactly goes wrong at the installation of the auto boot part? Let's include a screenshot where possible, and some text???
This is the supplied instruction per your recommended thread about the param file, also what my PC session shows when I try. Just the word "soc" and a fresh prompt "gto: / $" whatever that means

Also ,the device is definitely listed when I type adb devices


1675981099979.png
1675981118499.png
 

J.Michael

Recognized Contributor
Jan 20, 2018
1,815
2,060
Samsung Galaxy Tab A series
On the Magisk issue, the only reason its on my tablet is purely because on page #1 of this thread on instruction #18 it said install the Magisk file attached on the header post. Thats literally how its there...not because I was doing anything clever, just following instruction. Totally happy to uninstall it providing I keep root ( can I keep root ..because the moment I trigger uninstall..the first warning I get is that Root will be removed.. ??? )
The point of this thread was to celebrate being able to get "root". Magisk was the means to obtaining root.

If you want root, do not uninstall Magisk -- keep Magisk.
If all you want is root, I do not think you will be missing anything if you use the old Magisk, so do not update Magisk.

Also, do not allow your tablet to update: It is bad news if a system update is run while the things changed while installing Magisk are changed. It is also possible (likely?) that an update will drag you kicking and screaming to a version of the bootloader that is not even as cooperative as the one that you have now.
 
  • Like
Reactions: ebod

J.Michael

Recognized Contributor
Jan 20, 2018
1,815
2,060
Samsung Galaxy Tab A series
This is the supplied instruction per your recommended thread about the param file, also what my PC session shows when I try. Just the word "soc" and a fresh prompt "gto: / $" whatever that means

Also ,the device is definitely listed when I type adb devices


View attachment 5832179View attachment 5832181
Add the "-l" option to "ls" to get more information:
Bash:
ls -l /dev/block/platform
If the first letter of a line of output is a "d", the item is a directory. It might be useful to see what's in the directory:
Bash:
ls -l /dev/block/platform/soc
 
The point of this thread was to celebrate being able to get "root". Magisk was the means to obtaining root.

If you want root, do not uninstall Magisk -- keep Magisk.
If all you want is root, I do not think you will be missing anything if you use the old Magisk, so do not update Magisk.

Also, do not allow your tablet to update: It is bad news if a system update is run while the things changed while installing Magisk are changed. It is also possible (likely?) that an update will drag you kicking and screaming to a version of the bootloader that is not even as cooperative as the one that you have now.
Thanks J.Michael , all above now makes perfect sense to me. Just on the stock rom side, mine is presently on an older "TI4" rom at Andriod 10 from Sept 2020. There are newer ones if I chose to upgrade and try go through the whole root process again, but I remember somebody posting at note saying don't allow bootloader version 4 or 5? otherwise root or bootloader access gets blocked? So going off the enclosed list there is a 'Security Patch level column displaying 3/4/5 values. So am I right to conclude DON'T upgrade beyond rom "UA6" ?
1676014067901.png
 

Talich52

Senior Member
Dec 24, 2010
476
249
There are newer ones if I chose to upgrade and try go through the whole root process again, but I remember somebody posting at note saying don't allow bootloader version 4 or 5? otherwise root or bootloader access gets blocked? So going off the enclosed list there is a 'Security Patch level column displaying 3/4/5 values. So am I right to conclude DON'T upgrade beyond rom "UA6" ?
Yes, do not update above UA6, because on T295XXU4CUD4 already version 4 of the bootloader cannot go back to 3. And besides, on the 4th and 5th bootloader, even if the bootloader is unlocked, you still cannot install any custom file such as a patched kernel for Root or custom TWRP recovery.
 
  • Like
Reactions: ebod

J.Michael

Recognized Contributor
Jan 20, 2018
1,815
2,060
Samsung Galaxy Tab A series
Thanks J.Michael , all above now makes perfect sense to me. Just on the stock rom side, mine is presently on an older "TI4" rom at Andriod 10 from Sept 2020. There are newer ones if I chose to upgrade and try go through the whole root process again, but I remember somebody posting at note saying don't allow bootloader version 4 or 5? otherwise root or bootloader access gets blocked? So going off the enclosed list there is a 'Security Patch level column displaying 3/4/5 values. So am I right to conclude DON'T upgrade beyond rom "UA6" ?
View attachment 5832407
I advise not updating at all. What new feature or so-called security patch is worth the risk?

I think you are right about which update is the most recent but still at rev. 3 for the bootloader.

There has been talk of using a rev. 3 bootloader file with the other three files from a later ROM when running Odin. Read the thread, it's in there somewhere.

I will leave it to someone like @Talich52 to tell you what, how, and how safe.
 
  • Like
Reactions: ebod

Talich52

Senior Member
Dec 24, 2010
476
249
There has been talk of using a rev. 3 bootloader file with the other three files from a later ROM when running Odin. Read the thread, it's in there somewhere.
I wrote about it somewhere in this or another topic. You can even upgrade to the latest firmware with bootloader 5, but first replace the aboot.mbn & vaultkeeper.mbn files from Android 9 in the BL part. Then it is possible to rewrite, install TWRP ...
Here is such a modified BL file,use it instead of the regular BL when updating via ODIN :
 

Attachments

  • BL_T295XXS5CWA1_OS9.tar
    24.3 MB · Views: 9
Last edited:
  • Like
Reactions: J.Michael
I wrote about it somewhere in this or another topic. You can even upgrade to the latest firmware with bootloader 5, but first replace the aboot.mbn & vaultkeeper.mbn files from Android 9 in the BL part. Then it is possible to rewrite, install TWRP ...
Here is such a modified BL file,use it instead of the regular BL when updating via ODIN :
Okay, so I must flash every file as the update like normal, but flash that BL files instead of the other one? Will download it as soon as the update comes available in my country.
 

Talich52

Senior Member
Dec 24, 2010
476
249
Okay, so I must flash every file as the update like normal, but flash that BL files instead of the other one? Will download it as soon as the update comes available in my country.
Yes, yes. Upon the release of the full firmware T295XXS5CWA1 for your region, use the AP; CP; HOME_CSC files and the attached BL file from the firmware zip-archive. For rooting, if the bootloader was unlocked, it is enough to patch the boot.img & vbmeta.img files from the AP part and flash the tar archive with these files via ODIN. Or install TWRP and apply Magisk.zip ... It is possible to save data at the same time if you do not let the device boot before applying multidisabler and Magisk.zip from TWRP.
 
  • Like
Reactions: J.Michael
Yes, do not update above UA6, because on T295XXU4CUD4 already version 4 of the bootloader cannot go back to 3. And besides, on the 4th and 5th bootloader, even if the bootloader is unlocked, you still cannot install any custom file such as a patched kernel for Root or custom TWRP recovery.
OK just a quick check. Yesterday to was clear to me that in my image share, I should not attempt to install anything above UK image 'UA6' as that was highest image with Bootloader v#3 ? But there is now other replies saying its possible to get newer Android 11 stock roms ( in UK case 'WA1 ) providing the BL file is swapped out for a modded v3 BL version. Is that correct or am I totally misunderstanding what posts I've seen?
 
  • Like
Reactions: J.Michael
I wrote about it somewhere in this or another topic. You can even upgrade to the latest firmware with bootloader 5, but first replace the aboot.mbn & vaultkeeper.mbn files from Android 9 in the BL part. Then it is possible to rewrite, install TWRP ...
Here is such a modified BL file,use it instead of the regular BL when updating via ODIN :
I've tried to change my CSC code using the SamFW FRP Tool without losing data, and it looks like it worked as my device lists 'XER' CSC instead of 'PHN' CSC at 'Software Provider' section. I think I will update tomorrow, also: my phone gives the error "The operating systemm on your device has been modified in an unauthorised way" when I try to search for updates.
 

Talich52

Senior Member
Dec 24, 2010
476
249
But there is now other replies saying its possible to get newer Android 11 stock roms ( in UK case 'WA1 ) providing the BL file is swapped out for a modded v3 BL version. Is that correct or am I totally misunderstanding what posts I've seen?
Yes, that's right. In the modified BL file, the aboot.mbn (bootloader) and vaultkeeper.mbn files are taken from android 9. You do the same replacement when rooting Android 10 ... But if the bootloader of version 4 or 5 is already installed, then the replacement cannot be made. I repeat - you cannot update the bootloader to version 4 or 5 ...
 
  • Like
Reactions: J.Michael

Talich52

Senior Member
Dec 24, 2010
476
249
I think I will update tomorrow, also: my phone gives the error "The operating systemm on your device has been modified in an unauthorised way" when I try to search for updates.
On the T290 model, the bootloader has been updated to version 4 and there is no rollback. Therefore, do not update the firmware over the air, only through ODIN with a preliminary modification of the BL file, or do not flash it at all so that version 3 remains.
Even with stock firmware, there will be an error when trying to update due to an unlocked bootloader.
 
  • Like
Reactions: J.Michael
On the T290 model, the bootloader has been updated to version 4 and there is no rollback. Therefore, do not update the firmware over the air, only through ODIN with a preliminary modification of the BL file, or do not flash it at all so that version 3 remains.
Even with stock firmware, there will be an error when trying to update due to an unlocked bootloader.
Yes, I was not planning to update using OTA. I just wanted to test whether the new CSC could find the new update, so to know that it could work to update using Odin.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    I have root on my SM-T295 A8 tablet!!

    See my new post: How to Install TWRP and Root T295


    Update 19 March 2021
    Tested on T295XXU3BUC3 ROM

    Prerequisites:
    Bootloader unlocked - search forums.xda-developers for instructions how to do this.
    OEM unlock on. In Settings/developer options, OEM Unlock slider should be to the right.


    I see people still trying to patch files to get root.
    If you flash the TWRP posted by @Talich52, with reboot unchecked you can install Magisk from TWRP.

    1. If prerequisites met: install Android 9 bootloader through ODIN
    2. Reboot to system
    3. Go into download mode.
    4. Open ODIN and in the AP slot put TWRP (see attachment below)
    5. Uncheck auto reboot
    6. Flash TWRP
    7. Press vol dn + pwr keys.
    8: When screen goes blank, press vol up + pwr keys.
    9. Keep holding down both keys after reboot.
    10. Tablet will reboot again.
    11. When Samsung logo appears stop pressing pwr key.
    12. When bootloader msg appears, release vol up key, quickly press & release pwr key, and quickly press vol up key until in TWRP.
    13. You will then format (NOT WIPE) data. Answer yes to the format prompt
    14. Clear dalvik/cache if prompted
    15. Install Fix_vendor_9.0.zip or Fix_vendor_10.0.zip. See attached files.
    16. Clear dalvik and cache.
    17. Reboot back into recovery.
    18. Install magisk - see attached
    19. Reboot into system. May reboot again - that's okay
    20. Enjoy!!


    Updated (23 March 2020) my Tab A with XXS3ATB2 and got it rooted!!

    Attached AP.tar file is for XXU2ASL3 only.

    T295-Magisk-AP.tar

    Okay, after multiple failed attempts, I read about a method to root my T295. It did not work!! But, I decided to just use Magisk Manager on the boot.img file only. The resultant file would not flash - it will fail. The original boot.img & recovery.img files are 65,536K bytes each. I had to take the Magisk modified boot.img and overlay it onto the original boot.ing file. I did the same for the recovery.img. Then the files would flash successfully. The first thing after booting was to check Magisk Manager. It showed I have Magisk 20.3 installed. So, I tested this with Root Explorer. I did have root!!

    If you are going to try this, you need to unlock your boot loader, I think. I have not tried this with a locked bootloader.


    Basic instructions


    PLEASE READ ALL OF THIS BEFORE STARTING!! VERY IMPORTANT!!

    Here are the steps to root your tablet:
    Make a backup of you apps & data before doing this. This procedure will
    wipe all you data.

    Go to settings.
    Select software info
    Tap build number 7 times to get into developer mode
    Go back to main settings page.
    Scroll to bottom and select developer mode
    In middle of page find OEM unlocking
    Make sure slider is all the way to the right (should say allow bootloader to be unlocked)

    Unlock bootloader:
    1. turn off tablet
    2. press and hold down vol up & vol down keys together
    3. insert usb cable (should already be connected to computer)
    4. when bootloader screen appears, release all keys
    5. press and hold vol up key for 5 seconds, then release
    6. read instructions on screen to unlock bootloader (this will wipe all your data)

    After reboot, go through normal setup.

    Now for the hard part.

    You need to download the complete ROM you have installed on your Tablet.
    It will be better if you have the same ROM version as I do in post in this post (#1).
    You need to unzip the ROM so you can flash it in ODIN.

    If you are on the same ROM version as in my post #1, then you can just download my rooted files.

    Unzip my downloaded root files zip file.
    Unzip the downloaded ROM files.

    In the AP* file, you need to replace my files in the zip: boot.img, recovery.img & vbmeta.img

    Start ODIN. Select files for BL*, AP*, CSC* & CP*
    For CSC file, select HOME_CSC*
    *** Uncheck auto reboot ***

    Flash ROM.
    After flashing ROM. press vol dn + pwr key
    As soon as screen goes blank press vol up key and hold
    When get into recovery, select data wipe, then reboot
    Set up phone as you normally would.
    After setup, go to Play store and install Magisk Manager. Run Magisk Manager to see if you have root.


    Do It Yourself Instructions
    You need to do some research before doing this. This is NOT a walk you by the hand tutorial. You need to learn some things before following these instructions. Learn how to use lz4.exe. Learn how to use simg2img. Learn how to make a .tar file.



    Make a backup of you apps & data before doing this. This procedure will
    wipe all you data.

    Go to settings.
    Select software info
    Tap build number 7 times to get into developer mode
    Go back to main settings page.
    Scroll to bottom and select developer mode
    In middle of page find OEM unlocking
    Make sure slider is all the way to the right (should say allow bootloader to be unlocked)

    Unlock bootloader:
    1. turn off tablet
    2. press and hold down vol up & vol down keys together
    3. insert usb cable (should already be connected to computer)
    4. when bootloader screen appears, release all keys
    5. press and hold vol up key for 5 seconds, then release
    6. read instructions on screen to unlock bootloader (this will wipe all your data)

    After reboot, go through normal setup.

    Now for the hard part.

    You need to download the complete ROM you have installed on your Tablet.
    Extract ROM files
    Extract system.*.lz4, recovery*.lz4 and vbmeta*.lz4
    Use tar to make an AP.tar file with the 3 above files. **Search the Internet if you do not know how to use tar.
    Copy the AP.tar file to your phone. It is better to use adb push to prevent file correuption.
    Install Magisk Manager from Play store.
    Run Magisk Manager. Select install Magisk. Choose Select and Patch a file. Follow directions on screen to patch the AP.tar file.
    Once the AP.tar file has been patched, use adb to pul the file to yur computer.
    Extract the file from the AP.tar file.

    Now come the hard part:

    You cannot edit .lz4 directly. You have to decompress them. After decompressing system*, use simg2img to decompress the sparse file. Search the Internet if you do not know how to do this.

    Now we make our modified files so they will flash in ODIN.

    Instructions:
    I used hex editor neo - a windows 10 app
    I opened the stock kernel & recovery files in hex editor neo
    I opened the Magisk modified kernel & recovery files in hex editor neo
    I copied the modified kernel & recovery code onto their respective stock files in hex editor neo
    I saved the stock files & closed hex editor neo.
    I used cygwin to create a tar file: boot.img, recovery.img, vbmeta.img plus other files in original AP*.MD5 file.
    You should also flash all ROM *.MD5 files (BL, CP, CSC) per Magisk instructions.
    New AP.tar contents:
    boot.img
    dtbo.img.lz4
    meta-data
    recovery.img
    system.img.ext4.lz4
    userdata.img.ext4.lz4
    vbmeta.img
    vendor.img.ext4.lz4

    I used Odin to flash the tar file

    Flash ROM.
    After flashing ROM. press vol dn + pwr key
    As soon as screen goes blank press vol up key and hold
    When get into recovery, select data wipe, then reboot
    Set up phone as you normally would.
    After setup, go to Play store and install Magisk Manager. Run Magisk Manager to see if you have root.

    After installing Magisk:

    (Powering up normally) → (System with NO Magisk)
    (OEM Recovery Key Combo) → (Splash screen) → (Release all buttons) → (System with Magisk)
    (OEM Recovery Key Combo) → (Splash screen) → (Keep pressing volume up) → (Actual recovery)

    Please follow my instructions and the install instructions from Magisk web page.

    Magisk Installation
    3
    What system do you use to manipulate the files? (Windows? Linux? Android?)

    What is "overlay"? Do you extract the boot.img from the original AP.tar.md5, and from the magisk-patched.tar, copy the magisk-patched-boot.img to the beginning of the original-boot.img, and then replace the boot.img in magisk-patched.tar?

    Do you give Odin four files, or just AP? Do you use CSC or HOME_CSC?

    In answer to your question, basically, yes.
    I only flash the 3 files in the .tar file

    I am on a Windows 10 laptop. Only 3 files need to be modified by Magisk: boot.img, recovery.img, vbmeta.img
    I use Hex Editor Neo for overlaying the modified kernel and recovery files..
    At the end of these 2 stock files is code that needs to be there, thus the 65 MB file size.
    So I open the stock .img files (boot, recovery) in Hex Editor Neo, and copy the modded boot, recovery code into each stock .img file..
    I use cygwin to create the .tar file, then flash with ODIN 3.1.14
    3
    Many thanks for the recompiled BL file --upgrading done!
    Next step will try twrp-3.5 + magisk --for rooting rights.
    If you plan to use TWRP, then you need to disable encryption. To do this, install multidisabler and make format data-yes (no wipe data). Well, then install Magisk.zip for rooting.
    3
    Better Android 9 or Android 10 to root? Which firmware is better and faster for this device (SM-T295)?


    Are there any problems with knox for downgrade or root?
    To root 10 android, you need to install the bootloader from the previous firmware 9 android, and then the rooting itself is the same - either patch the kernel and flash, or install TWRP and root the device from it ... The TWRP option is easier, but there is some difficulty in entering TWRP after it installation ...
    On this KNOX device, cropped ...
    In particular, there is no KNOX counter, that is, you can root the device, and then flash the stock firmware and there will be no traces ...
    There is no KNOX flag as such 0x0 and 0x1 ...
    Here find the SM-T295 model: https://www.samsungknox.com/en/knox-platform/supported-devices/2.5+
    Our model does not support KNOX function ...
    There is really a KNOX Guard application in the system, but if you Disable or Remove it, the device will be locked ...
    It is not KNOX that prohibits downgrading the firmware version, but the bootloader. The version of the bootloader cannot be downgraded. From the 10th android you can return to the 9th android, since the version of the bootloader is 3 both there and there, but below you will not be able to install the firmware with versions 2 and 1 of the bootloader ...
    3
    Ok, its been some time since i last played with my SM-T295 and now i am thinking of updating it. Just need @Talich52 , @gcrutchr , @J.Michael or anybody else to help me out so that i dont mess it up !

    * First my current status:

    Device: SM-T295
    Bootloader: Unlocked and Rooted with TWRP and + Magisk 23.0
    CSC: INS
    BL VersionL T295XXS3ATB2
    CSC: T295ODM3ATC1
    Android Version: P-9

    * I have already downloaded the latest update (R-11) through Frija - T295XXU4CUF7/T295ODM4CUF8 (INS)


    ## Now, i know that i need to keep BL version at 3 for root rights. My questions are:

    1) Can i replace the BL file (.tar) in R-11 firmware by simply unpacking and repacking the .RAR or it requires linux for .lz4?

    2) From which specific firmware should i extract the BL Version 3 file to be used as replacement?

    3) Is there any specific Odin version which works best for flashing or should i just use the latest v3.14.1?

    3) From what i gather, patching files is no longer required to get root. But i think my preinstalled TWRP will be wiped during update through Odin so i should flash TWRP again ? Will reflashing TWRP also require formatting data again to read storage files?

    4) Do i need to flash specific vendor_fix zip for R-11 or can i simply flash multidisabler-samsung-2.7_test zip ?

    1: Use the attached BL
    2. See #1
    3. Use attached TWRP & disabler...yes formatinfgis required - SAVE YOUR DATA
    4. the attached disabler will fix everything

    See this link for install instructions: