Question [TB-J706F] pre-installed Netflix app broken and black listed?

[CryptMan]

I have taken a look into the Logs on my device, here is where it ends.
Any body an idea what "keybox" is or where it is stored or how to replace it?

QCOM-OEMCrypto: Error at trusted_app_is_keybox_or_oemcert_valid : 735

 Code: WidevineOTAKeyboxProvisioner -> mediaDrm.getPropertyString(KEY_SECURITY_LEVEL).equals("L3")

com.widevine.otakeyboxprovisioner: L3 device

 

[Dektto]

I'm still waiting for the OTA...
There must be a way to fool the system...

With this request we can get the update zip

curl -X POST -d "ChecksumType=sha256&locale=en&pid=&curfirmwarever=TB-J706F_USR_S630229_2203120042_Q00067_ROW&deviceid=XXX&devicemodel=LenovoTB-J706F&action=querynewfirmware" https://ota.lenovo.com/ota-server/firmware/query/for-text-desc

So the download link is https://ota-cdn.lenovo.com/firmware/2022518154711722-3656.zip but it is not possible to install in recovery or sideload.

 

[Cyberfil]

I've received the update, and I have L1 now!!
I had to uninstall Netflix and reinstall again to get L1. Logging out was not enough for me.

 

[jjtav]

Hi all - the OTA fix seems to be for the P11 Pro and Xiaoxin Pad Pro versions? Does anyone happen to know if the fix extends also to the Xiaoxin P11 devices (i.e. not Pro version)? Apologies if this is covered under a separate thread.

 

[f1tm0t]

I have taken a look into the Logs on my device, here is where it ends.
Any body an idea what "keybox" is or where it is stored or how to replace it?

QCOM-OEMCrypto: Error at trusted_app_is_keybox_or_oemcert_valid : 735

 Code: WidevineOTAKeyboxProvisioner -> mediaDrm.getPropertyString(KEY_SECURITY_LEVEL).equals("L3")

com.widevine.otakeyboxprovisioner: L3 device

Look here, it's similiar: https://xiaomi.eu/community/threads/widevine-l3-without-any-flash.60858/page-2

 

[CryptMan]

Look here, it's similiar: https://xiaomi.eu/community/threads/widevine-l3-without-any-flash.60858/page-2

Thank you for this. It sounds very similar.
But their solution seems to be different and needs the vendor too.
As Lenovo has released a patch that checks and change Widevine ID every Boot and/or sends a request for new keys does not explain why it does not work on my device.

There must be someting wrong with my device that makes this check fail.

I consider to Smali-Patch the Lenovo Patch to skip the checks. But needs to root again to replace the "com.widevine.otakeyboxprovisioner" in ROM with mine with different APK Signing-Key.

And well, I don't know if that will work or if I'm overlook something ...

 

[Cyberfil]

Thank you for this. It sounds very similar.
But their solution seems to be different and needs the vendor too.
As Lenovo has released a patch that checks and change Widevine ID every Boot and/or sends a request for new keys does not explain why it does not work on my device.

There must be someting wrong with my device that makes this check fail.

I consider to Smali-Patch the Lenovo Patch to skip the checks. But needs to root again to replace the "com.widevine.otakeyboxprovisioner" in ROM with mine with different APK Signing-Key.

And well, I don't know if that will work or if I'm overlook something ...

Actually it looks exactly the same... But your tablet is failing to retrieve the keys for whatever reason...
Maybe comparing logs??
Or maybe reach out to that user, he may have something to say...

 

[jjtav]

Hi all - the OTA fix seems to be for the P11 Pro and Xiaoxin Pad Pro versions? Does anyone happen to know if the fix extends also to the Xiaoxin P11 devices (i.e. not Pro version)? Apologies if this is covered under a separate thread.

Anyone?

 

[Cyberfil]

Anyone?

Don't know, sorry

 

[jjtav]

Don't know, sorry

No worries thanks - seems like the rants on Lenovo forums are never ending. Lenovo moderators are providing vague answers and are leaving all non-pro model users in the lurch -> https://forums.lenovo.com/t5/Lenovo...-work-on-Lenovo-P11-Tablet/m-p/5133334?page=7

 

[CryptMan]

Hi all,

finally I will give up.
I got a new XiaoXin Pad Pro with preinstalled global ROM. I copied EVERTING I can (full ROM and QCN) and copied it to my broken device.

And ... Nothing. Still L3. What I can tell is, that some part of certification and attestation is saved in the "persist" partition. So what ever you do KEEP that partition.

I guess I have lost. The broken device also lost its safetynet CTS profile.

Think I will sell it to someone how does not need Widevine.

 

[f1tm0t]

I read somewhere that this key is stored in TEE and we don't have access to it.
I also apparently lost my Widevine key when I tried to trick Widevine with Magisk modules on rooted tablet.

 

[Unity Import Br]

I made the processor ####6030#, I updated it normally and it continues L1, but I don't use netflix (hihihi) - Xiaoxin Pad Pro TB-J706F
See the video: