Teclast M40 How to unlock bootloader?

Search This thread

blaze2051

Senior Member
Jul 26, 2010
372
37
LG G7 ThinQ
LG V40
has anyone unlocked the bootloader for the unisoc t310 alldocube t803? i use the command

./fastboot flashing unlock_bootloader signature.bin with my own token and it says unlock_message unlocking bootloader FAILED (remote: unlock bootloader fail)
 

NightLord

Senior Member
Sep 8, 2007
75
26
My thanks also for the maxpad i11 root! Works perfectly, even when flashed over the v1.15 OTA fw upgrade (the other way around does not work, as flashing the root will kill OTA capability).

Could it also be possible that you make a variant where boot.img is patched with magisk from the canary channel instead of the usual v23? That way it may be possible to boot also A12 GSI roms (with root), because A12 wont boot with these patched images (they do boot however with the stock boot.img).
 

NightLord

Senior Member
Sep 8, 2007
75
26
avb disabled zero vbmeta, just flash the patched boot, you don't need to sign anything
Is this how you created the zero vbmeta?

 

NightLord

Senior Member
Sep 8, 2007
75
26
Just wondering.. if the patched boot.img does no longer need to signed, upgrading magisk might even work from inside the application, right? Without needing to be reflashed..
 

AllexBast

Senior Member
Feb 15, 2013
184
114
Is this how you created the zero vbmeta?

Yes, this is a zero vbmeta. But it didn't work on an encrypted disk.
Just wondering.. if the patched boot.img does no longer need to signed, upgrading magisk might even work from inside the application, right? Without needing to be reflashed..
Try reinstalling magisk and patching boot.img
 
Last edited:

NightLord

Senior Member
Sep 8, 2007
75
26
Yes, this is a zero vbmeta. But it didn't work on an encrypted disk.

Try reinstalling magisk and patching boot.img
I could actually set the update channel to beta, and do an in-app upgrade, and it rebooted OK with magisk v24.

Unfortunatelly though, A12 still wont boot, only with stock boot / vbmeta / vendor.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    If you suceeded to runlock bootloader, You can replace stock system to gsi system. You need to prepare linux PC (or live usb) and vbmeta.img (included in stock rom).

    When you flash, you should use linux PC (Windows pc won't recognize fastbootd mode) and android SDK's adb/fastboot (do not use apt-get install adb/fastboot.).
    Download from here -> https://developer.android.com/studio/index.html#downloads

    If you want to repalce to Gapps included rom, you need to delete product partiton
    > ./fastboot delete-logical-partition product

    I tried Android 11 GSI, but boot-looped in OS. Android 10 GSI rom works fine and less error happens.
    3
    I got Havoc installed successfully following your method. I also learned that it is not necessary to flash vbmeta-custom.img for installation of magisk to ShapeShift-OS.

    For Havoc (without root), the steps are:-
    # ./fastboot erase system
    # ./fastboot delete-logical-partition product (for stock rom with gapp only)
    # ./fastboot flash system havoc.img
    -> recovery -> wipe data/factory rest -> reboot

    For ShapeShift-OS (with root), the steps are:-
    Install stock rom without gapp (no delete-logical-partition product)
    # ./fastboot erase system
    # ./fastboot flash system havoc.img
    # ./fastboot flash boot boot_magisk.img
    -> recovery -> wipe data/factory rest -> reboot

    Thats it!! Thanks a lot.
    The ShapeShift-OS to Havoc part works also on my N9H1 to flash from Stock-Rom to CrDroid with root.

    Here's my way to get rooted CrDroid starting from new flashed Stockfirmware M40(N9H1)_Android 10.0_V1.03_0D24 without GAPPs:

    Rooting des M40 N9H1 if all Files created
    Recomended:
    OEM unlocked
    USB debugging activited
    Bootloader unlocked (Hovatec modified fastboot for linux)

    modified Files (from Stockrom M40(N9H1)_Android 10.0_EEA_V1.00_SZ):
    vbmeta-sign.img -> vbmeta—sign-custom.img
    boot.img -> magisk_patched_boot_repacked.img

    Save these files!! you don’t have create it new since Android 10 Firmware in use
    Create Working Dir and put all files into it, includig adb/fastboot. Open terminal in this folder


    1. for rooting 1.a and 1.b use always first:

    ./adb devices
    ./adb reboot-bootloader
    sudo -i
    sudo usermod -aG plugdev root
    cd /Rooting_Workfolder/
    ./fastboot reboot fastboot

    1.a Rooting Stock-ROM:

    ./fastboot --disable-verification flash vbmeta vbmeta-sign-custom.img
    ./fastboot flash:raw boot magisk_patched_boot_repacked.img
    ./fastboot reboot

    that’s it!!!

    1.b Rooting Custom Image (CrDroid) without GAPPS*:

    Install stock rom without gapps M40(N9H1)_Android 10.0_V1.03_0D24
    (no delete-logical-partition product)
    root it with saved files

    ./fastboot erase system
    ./fastboot flash system CrDr-system.img
    ./fastboot flash:raw boot magisk_patched_boot_repacked.img
    -> recovery -> wipe data/factory reset -> return fastbootd
    ./fastboot reboot

    that’s it!!!


    Thanks a lot once more to jngiag

    Joerg
    3
    This is how I install. Please fine tune it if needed.

    Flashing Gsi Image without root
    -------------------------------

    1) Bootloader unlocked.
    2) Download "platform-tools_r30.0.5-linux" and extracted it in Ubuntu & named folder as "adb" (or any name)
    3) Copy gsi rom (ShapeShiftOS-1.2.1_arm64-ab_gapps.img) & rename it as "system.img" (or any name) to adb folder
    4) Copy vbmeta-sign.img to "adb" folder
    5) Enable Usb Debugging in Developer option (in stock rom)
    6) In Ubuntu
    # ./adb devices -> Enable authorisation in tablet
    # ./adb reboot-bootloader (boot into fastboot, not fastbootd)
    # ./fastboot devices
    # ./fastboot reboot fastboot (this will boot into fastbootd mode)
    -> Enter Recovery (tablet) -> wipe data/factory reset (format data as necessary)
    (keep stock rom setting if not format - works but not the best)
    -> Enter fastboot
    # ./fastboot --disable-verity --disable-verification flash vbmeta vbmeta-sign.img
    # ./fastboot erase system
    # ./fastboot delete-logical-partition product (for stock rom with gapp only)
    # ./fastboot flash system system.img
    # ./fastboot reboot

    # = linux command prompt
    3
    Install gsi rom (ShapeShift-OS) with root
    -----------------------------------------

    1) Stock rom installed with root (magisk)
    2) Go to fastbootd (don't wipe data/factory reset in recovery)
    # ./fastboot erase system
    # ./fastboot delete-logical-partition product (for stock rom with gapp only)
    # ./fastboot flash system ShapeShift-OS.img
    # ./fastboot --disable-verification flash vbmeta vbmeta-sign-custom.img
    (skip this if booted with unrooted boot.img earlier)
    # ./fastboot flash boot boot_magisk.img ("boot_magisk.img" created in 2b)
    # ./fastboot reboot

    3) Go to fastbootd -> recovery -> wipe data/factory rest -> reboot

    4) In ShapeShift-OS -> Uninstall magisk manager -> install app-debug.apk
    (magisk manager canary) -> Additional steps -> Done

    vbmeta-sign-custom.img and boot_magisk.img to be prepared separately following
    guides provided on Hovatek website.
    2
    I have found a method of Teclast P20HD to unlock bootloader which can be found in "https://forum.xda-developers.com/android/help/teclast-p20hd-android-10-tablet-4g-t4141997" and "https://forum.hovatek.com/thread-32287.html", but I'm not sure if that method also works on Teclast M40. If that method works can I restore the bootloader to lock state instead of relock state so I can keep the warranty.

    I succeeded in unlocking bootloader of M40 by hovatek's method, but didn't try rooting it.(https://forum.hovatek.com/thread-32674.html)

    Here's M40 stock rom. In case you need to recover it...
    https://1drv.ms/u/s!AtprAlErUyChn0V0socBsjcnolp8?e=DkJfUa