[TOOL] Unlock bootloader in ASUS ZenPad 3S 10 Z500M (P027)

Search This thread

diplomatic

Senior Member
Mar 12, 2017
1,410
1,910
@Advanced Android User, that's cool, if that's what you want to do. The official unlock app uses a different method to unlock than this tool. It doesn't have an option to lock, because they don't want you to do that. But even that is reversible. The lock state is just a software state on the emmc.
 

NaibPlays

Member
Aug 5, 2019
12
1
stuck

im stuck after i say 'su', i said 'cd/data/local/tmp' but it replies with '/system/bin/sh: cd/data/local/tmp: not found'

help?
 

josiahlakoduk

New member
Sep 2, 2019
1
0
Hey guys. I've manage to boot with a temporary root, however I can't seem to figure out how to extract this tool to the /data/local/tmp folder. When I download it and hit extract, all it seems to do is let me input a file name (with no special characters such as "/"). Rookie question, but am I doing something wrong?
 

diplomatic

Senior Member
Mar 12, 2017
1,410
1,910
@josiahlakoduk, you can extract the zip on your PC and push all the files by adb, i.e. unzip to a new folder unlock_tool, then push with
adb push unlock_tool /data/local/tmp/

Then on the tablet side, open adb shell & do
cd /data/local/tmp/unlock_tool
 

Wilsonb

Senior Member
Nov 23, 2010
1,106
231
Austin
So, I asked a few months ago and hoping for some new news..
Since successful TWRP / Root on P027 model,

*ANY custom Roms available at all?
If not updated Android..

At least a reworked, cleaned up, reworked Android 7.0 ?



This thing is so lagy..

Stopped buying Asus computer related aince this bad support experience..
 
Last edited:
D

Deleted member 6129495

Guest
i cant get this to boot in to any boot.img. i have used twrp and i have also made a boot.img and all i ever get is FAILED ( remote: oem unlock is false)
anyone can help me?
 
D

Deleted member 6129495

Guest
yes

@jjdw1970, is your tablet updated to Android 7? That is the only OS version compatible with this method.

ys its updated but now i can get to the where i can run the scpit but when it runs after i type "yes, I want to unlock" it started then i get an Oops something wentr wrong and cant figure out what
 

diplomatic

Senior Member
Mar 12, 2017
1,410
1,910
@jjdw1970, have you copied all the contents of the zip to your /data/local/tmp folder, including the tool_bin_arc file? What is the log line before "Something went wrong"? That's what's important.
 
D

Deleted member 6129495

Guest
got it to root and everything but now when it reboots i just get en error saying google has stooped and when i try to open the play store say error. and now i cant flash the stock rom over it to see if i can fix it.. i even installed TWRP in recovery to see if i could even side load the rom from asus but i cant even do that. anyone that can give me a step by step to re-flash the stock rom. and no i never used a custom rom
 

globuslive

New member
Oct 25, 2010
1
0
Stuck on boot screen

Hi guys, messing with 3s 10 second night with no luck. Tried to root device, but at the moment of temporary root I missed to grant access for adb shell/SU
to make root permanent, thats where it all started...
Later it wont start on its own only with temp root flash (patched.img through magisk), but I went further and messed it even more by factory reseting device. So bootloader is locked, Recovery mode gives me warning android with triangle, under fastboot mode, abd wont recognize the device. Is there anything could be done to recover it?
I used SP flashtool package and stock firmware content which had flashall command. Thats the only thing somewhat worked, but in the end gave me a message "Bootloader is locked, cant flash system.img" . On the positive note, after running Flashall command, device gets charged, before that, it wont even charge, just grey battery icon. Any advice is so appreciated.
 
Last edited:

joshtb86

Senior Member
Apr 17, 2011
452
26
sorry if this is a stupid question. followed method 1 exactly using the temp rooted boot img, used the tool, it said successful.

i keep adb reboot bootloader to then flash the boot img to the boot partition and it tells me that the bootloader is locked

i went to try to re-do the bootloader unlock and it tells me that my bootloader is already unlocked

i have no idea what to do here - can anyone help? thanks a lot
 

NaibPlays

Member
Aug 5, 2019
12
1
will this let me access the android recovery mode? in my case, i just see a dead android bot with no command
 

NaibPlays

Member
Aug 5, 2019
12
1
Hi! Did you manage to solve your problem? I am experiencing the same thing with my z500m.
Would you mind to share the solution?
i did actually, i had a backup in my TWRP Recovery thing with my stock firmware. I just booted it up and it took me straight to bootloader dead bot screen. I waited a few seconds and clicked some buttons and the stock recovery was there
 
  • Like
Reactions: amunarjoh

striker59

Senior Member
Jun 6, 2011
227
29
70
Katy, TX
Moto G Power (2021)
I contacted Asus and asked them to help unlocking bootloader, told them it's out of warranty and since no more updates I wanted the bootloader unlocked. They said they couldn't help me, I told them when a phone is paid for the phone company can unlock why can't Asus? It's like banging my head against the wall. I'm wondering why I can't get my Windows 10 to recognize the tablet in fastboot mode? One video I watched said C++ had to be installed, did that. Found Asus drivers and installed them, still not recognizing once I get past ADB.
 
  • Like
Reactions: sronweb

striker59

Senior Member
Jun 6, 2011
227
29
70
Katy, TX
Moto G Power (2021)
Progress finally got fastboot working, using method 2 I got twrp working. Can't figure out the commands to use to get the unlock tool to work. I extracted the files to data/local/temp can't figure out how to get there?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 46
    Tool to Unlock Bootloader in ASUS ZenPad 3S 10 Z500M (P027)

    This software essentially unlocks the bootloader in your tablet. I've developed a way to switch a Mediatek bootloader into an unlocked state using root privileges. Luckily, the Z500M does give us temporary root access to run this tool. The result is an "Orange State" boot mode, which disables boot partition verification. As a bonus, this procedure does not erase your data like a typical unlock routine does. It also does not require a PC except to start the temporary rooted image. Note that your tablet will still lack fastboot flashing functionality. But flashing by other means is still possible.

    WARNING: Running this tool should be pretty safe. But I don't encourage anyone to try this. Before trying this out, consider the risks and drawbacks involved. By unlocking, you are essentially giving up the security of your device. It's also possible that a future firmware update will relock the bootloader or become incompatible with this tool.

    This software is only for ASUS model Z500M/P027. Do not try it on any other device. It will not work. Support for other Mediatek devices may be added in the future. (That's why this is posted in the general forum rather than the ZenPad 10 one.)

    And by the way, I don't own this tablet. :)

    DISCLAIMER
    This software is for educational purposes only. Anything you do that is described in this post is at your own risk. No one else is responsible for any data loss, corruption or damage of your device, including that which results from bugs in this software.

    REQUIREMENTS
    • A ZenPad Z500M tablet upgraded to Android N
    • A rooted/patched boot image such as one made by Magisk Manager (method 1)
    • Temporary root with Magisk or other superuser manager installed (method 1)
    • TWRP image (method 2)
    • Knowledge of adb/fastboot and of basic Linux command shell

    INSTRUCTIONS
    Method 1
    1. Read all of these instructions and make sure you understand them before starting
    2. If you don't have an offline patched boot image, use Magisk Manager to make one from the stock boot.img of your current firmware. Transfer it to your PC.
    3. Reboot your tablet into fastboot mode--either hold vol. down + power to power up, and select Fastboot. Or run 'adb reboot bootloader' while in Android.
    4. Connect your tablet to a PC and run fastboot boot patched_boot.img to start the rooted image in tethered mode
    5. Download the tool zip file to your tablet.
    6. Extract the zip to your /data/local/tmp folder.
    7. Open a root shell with adb shell, then run 'su'
    8. Change your shell current directory to that folder (cd /data/local/tmp)
    9. Run this command to unlock or lock the bootloader
      Code:
      sh unlockbl.sh
    10. Follow the instructions on the screen and type the requested confirmation into the prompt.
    11. Check for completion or any error messages. Report them here.
    12. If no errors, you are unlocked and may modify your boot partition (e.g. install root).

    Method 2
    1. Read all of these instructions and make sure you understand them before starting
    2. If you don't have TWRP for your tablet, download the latest image to your PC from this thread.
    3. Download the tool zip file to your tablet.
    4. Extract the zip to your /data/local/tmp folder. (For this method, most other folders should work as well due to permissive selinux mode)
    5. Reboot your tablet into fastboot mode--either hold vol. down + power to start up and select Fastboot, or run 'adb reboot bootloader' from Android
    6. Connect your tablet to a PC and run fastboot boot twrp-*.img to start TWRP in tethered mode
    7. At the TWRP welcome screen, do not select to modify the system partition and touch Keep System Read-only instead. Doing otherwise will render your tablet unbootable.
    8. Mount system in TWRP in read-only mode. Mounting in read/write mode will render your tablet unbootable.
    9. Open a shell with adb shell on your PC or open TWRP's built-in terminal
    10. Change your shell current directory to the folder that you extracted the tool zip into (cd /data/local/tmp)
    11. Run this command to unlock or lock the bootloader
      Code:
      sh unlockbl.sh
    12. Follow the instructions on the screen and type the requested confirmation into the prompt.
    13. Check for completion or any error messages. Report them here.
    14. If no errors, you are unlocked and may modify your boot partition (e.g. install root).

    DOWNLOAD

    Current Version
    Unlock Tool v0.6a


    Changelog
    v0.6a
    • Actually improve compatibility with TWRP
    v0.6
    • Handle units with blank bootloader configs
    • Improve compatibility with TWRP
    • Improve text wrapping for TWRP's terminal
    v0.5
    • Major overhaul to remove the need for kernel module
    v0.2
    • Made compatible with other FW versions
    v0.1
    • First release

    CREDITS
    @amartolos for being a kick-ass tester

    If anyone wants to develop a full Android app around this script, be my guest.

    Also, that Thanks button will not click itself...
    6
    Version 0.5

    New version uploaded. This one should have pretty universal compatibility because there is no more kernel module. Everything is done in userspace. It's a pretty significant overhaul. It might even work with other devices. ;)
    6
    By the way, guys, you can now skip dealing with the whole patched boot image part. Now that we have TWRP, you can use that to run the tool. Just boot it with 'fastboot boot twrp-xxx.img'. Mount System inside TWRP. Then open an adb shell on your computer and continue as if you were running a rooted image. I will update the instructions to include this later....
    6
    New version

    A new version of the tool has been posted that's compatible with patched images from FW 14.0210.1711.30. But it doesn't work with older releases. So pick the version that matches your image....