Sony KD-55A9G Root

Search This thread

josonxie

New member
Feb 13, 2020
4
1
china
My sony TV KD-55A9G 。
My TV is not working properly anymore, I have removed the TV Main board。
Who has sony's Flahs programming program ?
Who can provide Sony service manual for this 55A9G ?

TUu3vW2.jpg


ZAxY25c.jpg


QZqRRen.jpg


QP5LUxG.jpg
 

josonxie

New member
Feb 13, 2020
4
1
china
Recently, I re-ordered the motherboard from the SONY repair department. At present, I have a bad SONY 55A9G motherboard. I copied the Emmc software from the new motherboard to the mirror file. The old motherboard is currently working properly.

I am looking for methods to get root on my Sony TV KD-55A9G. Anyone have any ideas?

The following files are currently extracted from sony's upgrade files:
3rd.img
boot.img
dtbo.img
linux_rootfs.img
recipe.img
system.img
tzbp.img
upgrade.img
vbmeta.img
vendor.img

I'm looking for a way to repackage bootimg, but after I modify the boot and repackage it, most tools don't support it.

Next,
Solve the modification and repackaging of bootimg... ...
 

yylyyl

Member
Aug 26, 2008
17
4
Recently, I re-ordered the motherboard from the SONY repair department. At present, I have a bad SONY 55A9G motherboard. I copied the Emmc software from the new motherboard to the mirror file. The old motherboard is currently working properly.

I am looking for methods to get root on my Sony TV KD-55A9G. Anyone have any ideas?

The following files are currently extracted from sony's upgrade files:
3rd.img
boot.img
dtbo.img
linux_rootfs.img
recipe.img
system.img
tzbp.img
upgrade.img
vbmeta.img
vendor.img

I'm looking for a way to repackage bootimg, but after I modify the boot and repackage it, most tools don't support it.

Next,
Solve the modification and repackaging of bootimg... ...

How did you extract these files from sony's upgrade files?
 

enixspike

Member
Nov 27, 2010
7
1
Modding emmc with ufi box and root the system manual

BTW, I just saw some people post on a chinese forum, link below:
https://tieba.baidu.com/p/6536366728?pn=1

The poster have a SONY BRAVIA 65X8500G Chinese version(x850G in US), running Android TV 9.0 but no GSM, no youtube, no netflix,no Alexa nor Airplay2.
So they want to root the TV and add the GSM and Airplay. or even more.

The poster did not say much how he do that, but as we can see from the photo, he root it and modify the firmware with other regional firmware.
7307109b033b5bb50b8cea9e21d3d539b600bc2f.jpg

ca10b3dda144ad3480fa4de7c7a20cf431ad8539.jpg

I find some resualt in his other thread that he flash different firmware on his chinese version 65X8500G hardware.
China Frimware (cna)(1603610100): boot normally, works fine
China Frimware(cna)(1603590100)(downgrade): boot normally, works fine
US Frimware(naa)(1603598100): boot normally, can't finish initial setup wizard
EU Frimware(eua)(1603598100): black screen after SONY logo,can't enter the system
Ph Frimware(laa)(1603598100): black screen after SONY logo,can't enter the system
Japan Frimware(jpa)(1603598100): black screen after SONY logo,can't enter the system
APAC (paa): no android 9 firmare yet
HK (hka): no android 9 firmare yet
TW (twa): no android 9 firmare yet

Here is how he root the tv
1. use A male -A male USB Cable physical contect the PC and TV,using adb to enter the fastboot mode, unlock bootload, there is no code needed.
after you enter the fastboot mode, all the button combinations are invalid,if anything goes wrong, noway to fix it by yourself.
1a. after unlock, disable the verify boot
1b. there is anti rollback,ab slot, you can not boot the slot with low firmware version, change the vb index, you can bypass the anti rollback
2. you can use Magisk to root it now.
3. after root the TV you can use Magisk to patch the boot,and flash it under recovery mode. Do NOT wipe data, otherwise you will have bootanimation loop.
4. do not forget set_active/setActiveBootSlot after you flash the boot, also reset retry count and unmark curent slot successful mark

I am not an Android developer, I just try to translate the Chinese into English.
Hope someone can understand this, and make it more easier for people to root their Sony bravia android TV.
 
Last edited:
  • Like
Reactions: sosimple

SonyBraviauser

New member
Aug 3, 2020
2
0
BTW, I just saw some people post on a chinese forum, link below:
]

The poster have a SONY BRAVIA 65X8500G Chinese version(x850G in US), running Android TV 9.0 but no GSM, no youtube, no netflix,no Alexa nor Airplay2.
So they want to root the TV and add the GSM and Airplay. or even more.

The poster did not say much how he do that, but as we can see from the photo, he root it and modify the firmware with other regional firmware.

I find some resualt in his other thread that he flash different firmware on his chinese version 65X8500G hardware.
China Frimware (cna)(1603610100): boot normally, works fine
China Frimware(cna)(1603590100)(downgrade): boot normally, works fine
US Frimware(naa)(1603598100): boot normally, can't finish initial setup wizard
EU Frimware(eua)(1603598100): black screen after SONY logo,can't enter the system
Ph Frimware(laa)(1603598100): black screen after SONY logo,can't enter the system
Japan Frimware(jpa)(1603598100): black screen after SONY logo,can't enter the system
APAC (paa): no android 9 firmare yet
HK (hka): no android 9 firmare yet
TW (twa): no android 9 firmare yet

Here is how he root the tv
1. use A male -A male USB Cable physical contect the PC and TV,using adb to enter the fastboot mode, unlock bootload, there is no code needed.
after you enter the fastboot mode, all the button combinations are invalid,if anything goes wrong, noway to fix it by yourself.
1a. after unlock, disable the verify boot
1b. there is anti rollback,ab slot, you can not boot the slot with low firmware version, change the vb index, you can bypass the anti rollback
2. you can use Magisk to root it now.
3. after root the TV you can use Magisk to patch the boot,and flash it under recovery mode. Do NOT wipe data, otherwise you will have bootanimation loop.
4. do not forget set_active/setActiveBootSlot after you flash the boot, also reset retry count and unmark curent slot successful mark

I am not an Android developer, I just try to translate the Chinese into English.
Hope someone can understand this, and make it more easier for people to root their Sony bravia android TV.

Hi!

I have managed to connect the TV using the adb connect "IP" Method, I can see the device when I put the adb devices in adb shell but, the problem is, when I put the TV into bootloader mode, there is nothing on the screen just a black screen. I also have only tv plugged into my PC im gonna have to get some other display and try unlocking the bootloader command after I boot into the fastboot. Did anyone root their TV already with this method? Im trying to rollback the android version on my Bravia X900F from 8 back to nougat.


Greetings fromo a newbie.
 

SonyBraviauser

New member
Aug 3, 2020
2
0
Hi!

I have managed to connect the TV using the adb connect "IP" Method, I can see the device when I put the adb devices in adb shell but, the problem is, when I put the TV into bootloader mode, there is nothing on the screen just a black screen. I also have only tv plugged into my PC im gonna have to get some other display and try unlocking the bootloader command after I boot into the fastboot. Did anyone root their TV already with this method? Im trying to rollback the android version on my Bravia X900F from 8 back to nougat.


Greetings fromo a newbie.

I have Also figure out, if you rename the old firmware file ( nougat 7 ) to a newer firmware name, the TV will copy the files succesfully to the TV but after updating around 5 minutes, TV just restarts and boots into newest installment of Android ( 8 ) thats probably due to A/B Partitioning the chinesse guy is refering in his post, android 7'+ uses A/B partitioning for the OTA updates and is some kind of a rollback protection, so you cant instal older android. I dont have the USB cable to try and figure out the method that guy on chinese site came up with. I know its possible, just had to do some internet research and you have all the needed commands. I went ahead and bought brand new SONY XF9005 motherboard and replaced it, since those have the older android 7 on it, everything works the picture and everything but the problem is, now everytime i restart the TV, ( plugged out) at the startup there is green and red light blinking that probably due to T con board, when the firmware has been updated to the latest android 8 the T con board has been updated along, now Im thinking buying the brand new T con board if I get is cheap, so I can report here. ( I bought brand new XF90 Motherboard for around 75euros + shipping ) It was factory sealed and newer used.
Greetings from Slovenia.
Newbie.
 
Last edited:

Sonyledlcdtv

New member
Jun 2, 2021
2
0
Recently, I re-ordered the motherboard from the SONY repair department. At present, I have a bad SONY 55A9G motherboard. I copied the Emmc software from the new motherboard to the mirror file. The old motherboard is currently working properly.

I am looking for methods to get root on my Sony TV KD-55A9G. Anyone have any ideas?

The following files are currently extracted from sony's upgrade files:
3rd.img
boot.img
dtbo.img
linux_rootfs.img
recipe.img
system.img
tzbp.img
upgrade.img
vbmeta.img
vendor.img

I'm looking for a way to repackage bootimg, but after I modify the boot and repackage it, most tools don't support it.

Next,
Solve the modification and repackaging of bootimg... ...
Whatsapp me 8826711619
 

coolek33

Senior Member
Jul 15, 2012
2,195
1,809
Zadupie
Huawei P30
Hi. I'm attempting to downgrade from android 10 to 9 mine sony tv x900h via fastboot. I don't know if it's a good idea. Got images from payload.bin as on the photo. Maybe someone could point me the correct order to manual flash/commands. It has 2 slots and "b" is active one. I want "a" to be flashed with android 9.
 

Attachments

  • IMG_20220126_115726_edit_157027275580205.jpg
    IMG_20220126_115726_edit_157027275580205.jpg
    2.9 MB · Views: 14

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Modding emmc with ufi box and root the system manual

    BTW, I just saw some people post on a chinese forum, link below:
    https://tieba.baidu.com/p/6536366728?pn=1

    The poster have a SONY BRAVIA 65X8500G Chinese version(x850G in US), running Android TV 9.0 but no GSM, no youtube, no netflix,no Alexa nor Airplay2.
    So they want to root the TV and add the GSM and Airplay. or even more.

    The poster did not say much how he do that, but as we can see from the photo, he root it and modify the firmware with other regional firmware.
    7307109b033b5bb50b8cea9e21d3d539b600bc2f.jpg

    ca10b3dda144ad3480fa4de7c7a20cf431ad8539.jpg

    I find some resualt in his other thread that he flash different firmware on his chinese version 65X8500G hardware.
    China Frimware (cna)(1603610100): boot normally, works fine
    China Frimware(cna)(1603590100)(downgrade): boot normally, works fine
    US Frimware(naa)(1603598100): boot normally, can't finish initial setup wizard
    EU Frimware(eua)(1603598100): black screen after SONY logo,can't enter the system
    Ph Frimware(laa)(1603598100): black screen after SONY logo,can't enter the system
    Japan Frimware(jpa)(1603598100): black screen after SONY logo,can't enter the system
    APAC (paa): no android 9 firmare yet
    HK (hka): no android 9 firmare yet
    TW (twa): no android 9 firmare yet

    Here is how he root the tv
    1. use A male -A male USB Cable physical contect the PC and TV,using adb to enter the fastboot mode, unlock bootload, there is no code needed.
    after you enter the fastboot mode, all the button combinations are invalid,if anything goes wrong, noway to fix it by yourself.
    1a. after unlock, disable the verify boot
    1b. there is anti rollback,ab slot, you can not boot the slot with low firmware version, change the vb index, you can bypass the anti rollback
    2. you can use Magisk to root it now.
    3. after root the TV you can use Magisk to patch the boot,and flash it under recovery mode. Do NOT wipe data, otherwise you will have bootanimation loop.
    4. do not forget set_active/setActiveBootSlot after you flash the boot, also reset retry count and unmark curent slot successful mark

    I am not an Android developer, I just try to translate the Chinese into English.
    Hope someone can understand this, and make it more easier for people to root their Sony bravia android TV.