• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

TWRP, ROOT and disable Encryption for Yoga Tab 3 Plus (YT-X703F/L)

Search This thread

matshias

Senior Member
Jan 20, 2015
224
256
TWRP is an open source, community project. TWRP development is done by roughly 4 people at this point. We also have a large support community with many people who are willing to answer questions and help people with their devices either through our IRC channel or on forums like xda-developers.

Team Win was originally formed to work on porting WiMAX to CM7 for the HTC EVO 4G. After our work on the EVO 4G we wanted to work on a project that would work on more devices than just the EVO 4G and we settled on working on a recovery. Today TWRP is the leading custom recovery for Android phones.

A custom recovery is used for installing custom software on your device. This custom software can include smaller modifications like rooting your device or even replacing the firmware of the device with a completely custom "ROM" like OmniROM

WARNING!!! Be careful what you do here. One mistake and the device is soft-bricked. I take no responsibility for bricked devices, lost warranty or even OTAs not working!! Booting and/or flashing files from this post is on your own risk.

Requirements
  • Unlocked bootloader
  • Yoga Tablet 3 Plus with and without LTE (YT-X703L and YT-X703F) are supported

Known Issues
  • WARNING! Our device uses dm-verity (verified boot). The system partition should remain read-only. Otherwise a bootloop will occur. You can flash my modified kernel or SuperSU to resolve this but OTA's are no longer possible! You have to restore a factory image or clean system backup to receive OTAs
  • Potentially DRM keys are lost! Pure unlocking and rooting does not cause the issue. However, there have been reports of lost DRM keys by some unknown action. It is advised to act with caution. Losing your DRM keys can lead to issues with some apps which use DRM which could then have limited or no functionality. E.g. Netflix will only stream in SD (480p). You can check with DRM info if you still have L1 security level which means DRM keys are intact.

Download
  • Official TWRP for YT-X703F (Wifi): twrp.me
  • Official TWRP for YT-X703L (LTE): twrp.me

Instructions
  1. Install fastboot and adb on your PC, e.g. from here
  2. Enable developer options and in there select to unlock your bootloader by enabling OEM unlock and enable USB debugging
  3. Connect your PC to your tablet and run
    Code:
    adb reboot bootloader
    using adb on command line. The tablet will reboot into bootloader mode where you will only see the Lenovo logo. Now you use
    Code:
    fastboot oem unlock-go
    to unlock. This will factory reset your device
  4. Setup the tablet again and reboot again to the bootloader
  5. Then run
    Code:
    fastboot boot twrp-3.2.1-0-yt_x703f.img
    to temporarily boot into TWRP. You can also flash if you are sure ;)
  6. Select to keep system read only when TWRP starts to avoid modification which will make OTAs impossible
  7. Optionally flash SuperSU or Magisk in TWRP which should install system less. Keep OEM unlock enabled if you flash or modify anything

Additional Downloads
  • Backup of original boot, recovery and system image for YT-X703F S000936: MEGA
  • Modified Boot image with forceencrypt disabled and it switches off CABC fully. You need to factory reset after flashing to format data without encryption boot_yt_x703f_s000963_noforceencrypt_cabc.img (YT-X703F S000963) / boot_yt_x703l_s000963_noforceencrypt_cabc.img (YT-X703L S000963) . Use
    Code:
    fastboot flash boot boot_yt_x703f_s000963_noforceencrypt_cabc.img
    to flash the kernel in fastboot. SuperSU or Magisk should be flashed afterwards if root is desired.
  • Full factory images with flash tool and instructions YT_X703F_S000689, YT_X703L_S000704, YT_X703F_S000725, YT_X703L_S000725, YT_X703F_S000734, YT_X703L_S000734, YT_X703L_S000744, YT-X703F_S000744, YT-X703L_S000963, YT-X703F_S000963 and OTA updates: MEGA (These images contain the individual boot, recovery and system images that you need to restore from any modification mentioned above)
System Updates (OTA)
In order to successfully apply Lenovo system updates after root you have to restore the original boot, recovery (if you flashed TWRP) and system partitions from your current installed version (e.g. S000744) for your variant of the tablet. This will NOT delete your apps and data but will unroot. Note that OTAs are block based and always check the contents of most of the partitions. This means that all of these partitions (except your data) have to be original and have to be on the exact same version (e.g. S000734) for the update to succeed.

See here for instructions how to restore the partitions with fastboot.

Credits
@pogo1975 - for providing the factory images and fixing the AV sync issue
@launcher20 and @deecept - for testing the LTE version
TeamWin

Changelog
v4:
  • Now official TWRP with version 3.0.3-0

v3:
  • enable full disk encryption for access to the encrypted data partition
  • update TWRP kernel to latest S000725 version

v2:
  • add support for LTE variant (YT-X703L)
  • add further mount points to be able to backup more data
 
Last edited:

wayney

Member
Mar 27, 2007
17
2
Thanks buddy! You are an absolute champion! Tell me what you need me to do and I'll do it before rooting and up load what you need.:D
 

kayakyakr

Senior Member
Jun 10, 2011
52
4
Doing good work here.

Who wants to bet on a race between matshias and Lenovo support for who can fix the issues with this device first?
 

Gogoho

Senior Member
Jul 5, 2016
87
26
Great to see there is something moving for the yoga now. You think it will support the lte Version anytime? Or maybee even lineageos?
 

matshias

Senior Member
Jan 20, 2015
224
256
Thanks buddy! You are an absolute champion! Tell me what you need me to do and I'll do it before rooting and up load what you need.:D
Well if you haven't modified anything yet then it'd be great if you can boot into TWRP with system read only and then connect via ADB to the tablet with a big SD card inserted which has enough free space (4 GB).

The run the following command
Code:
dd if=/dev/block/bootdevice/by-name/system of=/sdcard1/system.img

This will take a while. Then copy the file system.img from your SD card to a PC and zip it (or 7z, rar). Then upload it ;)
 

matshias

Senior Member
Jan 20, 2015
224
256
Great to see there is something moving for the yoga now. You think it will support the lte Version anytime? Or maybee even lineageos?

The LTE variant is probably very similar and it wouldn't be much work. But I don't own the device, so I would need some help. So someone with the LTE variant who is not afraid to experiment with fastboot and adb and who can provide me with the details needed I am happy to compile a TWRP for it.

LineageOS is much much more work than TWRP. For an experienced cyanogenmod/LineageOS dev it is not much of a thing and would take only a few days, especially since it is a Qualcomm device and there are already ports for devices with SD 652. But for me this is new as well so it'll take much longer. As soon as I have time I'll look into it.
 

wayney

Member
Mar 27, 2007
17
2
Well if you haven't modified anything yet then it'd be great if you can boot into TWRP with system read only and then connect via ADB to the tablet with a big SD card inserted which has enough free space (4 GB).

The run the following command
Code:
dd if=/dev/block/bootdevice/by-name/system of=/sdcard1/system.img

This will take a while. Then copy the file system.img from your SD card to a PC and zip it (or 7z, rar). Then upload it ;)

You forgot to tell me to go to adb shell :silly:

DD is currently doing a dump, non interactive so I hope it is still alive, it has been close to 1 hour so far. I will upload the clean image once it is done and await further instructions from you. :good:

I'm in Perth, Western Australia (UTC +8:00), so we might be playing timezone tag.
 

matshias

Senior Member
Jan 20, 2015
224
256
You forgot to tell me to go to adb shell :silly:

DD is currently doing a dump, non interactive so I hope it is still alive, it has been close to 1 hour so far. I will upload the clean image once it is done and await further instructions from you. :good:

I'm in Perth, Western Australia (UTC +8:00), so we might be playing timezone tag.

I think I forgot one more thing. The external SD card needs to be mounted in the TWRP menu. I believe it's not mounted automatically. So the DD command does nothing. It shouldn't take that long. Sorry about that!

It's UTC +1:00 here in Germany :)
 

wayney

Member
Mar 27, 2007
17
2
Well if you haven't modified anything yet then it'd be great if you can boot into TWRP with system read only and then connect via ADB to the tablet with a big SD card inserted which has enough free space (4 GB).

The run the following command
Code:
dd if=/dev/block/bootdevice/by-name/system of=/sdcard1/system.img

This will take a while. Then copy the file system.img from your SD card to a PC and zip it (or 7z, rar). Then upload it ;)

I think I forgot one more thing. The external SD card needs to be mounted in the TWRP menu. I believe it's not mounted automatically. So the DD command does nothing. It shouldn't take that long. Sorry about that!

It's UTC +1:00 here in Germany :)

I was wondering why nothing was happening after 3 hours. :confused:

I have rared it and it is uploading at the moment, it is going to take 5 hours. :eek:
 

wayney

Member
Mar 27, 2007
17
2
Unmodified System Image

Here is the vanilla image via DD of the system partition.

Software Version : YT-X703F_160817
Android Version : 6.0.1
Security Patch Level : 1 September 2016
Kernel Version : 3.10.84-perf
Build Number : YT-X703F_S000689_161105_ROW

Tablet purchased retail from Australia.

https://mega.nz/#!bos0GIjI!vcO9dpSJX...Grjb7k3z6mjnqA
 
Last edited:
  • Like
Reactions: novebis

matshias

Senior Member
Jan 20, 2015
224
256
In the depths of the Russian Internet i have found this
YT-X703F_USR_S000689_1611051146_Q00237_ROW.zip

https://drive.google.com/drive/folders/0B_jGuhC9WsNfYUZzZmhRY2NhQlU?usp=sharing

it is supose to be complete image to Wifi-Version.

I HAVE NOT FLASHED THIS YET. Do it on your risk.

If that's real it would have saved me a lot of time finding the loophole in the system to extract the boot and recovery image. But still a great find which will rescue some soft-bricked devices.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 29
    TWRP is an open source, community project. TWRP development is done by roughly 4 people at this point. We also have a large support community with many people who are willing to answer questions and help people with their devices either through our IRC channel or on forums like xda-developers.

    Team Win was originally formed to work on porting WiMAX to CM7 for the HTC EVO 4G. After our work on the EVO 4G we wanted to work on a project that would work on more devices than just the EVO 4G and we settled on working on a recovery. Today TWRP is the leading custom recovery for Android phones.

    A custom recovery is used for installing custom software on your device. This custom software can include smaller modifications like rooting your device or even replacing the firmware of the device with a completely custom "ROM" like OmniROM

    WARNING!!! Be careful what you do here. One mistake and the device is soft-bricked. I take no responsibility for bricked devices, lost warranty or even OTAs not working!! Booting and/or flashing files from this post is on your own risk.

    Requirements
    • Unlocked bootloader
    • Yoga Tablet 3 Plus with and without LTE (YT-X703L and YT-X703F) are supported

    Known Issues
    • WARNING! Our device uses dm-verity (verified boot). The system partition should remain read-only. Otherwise a bootloop will occur. You can flash my modified kernel or SuperSU to resolve this but OTA's are no longer possible! You have to restore a factory image or clean system backup to receive OTAs
    • Potentially DRM keys are lost! Pure unlocking and rooting does not cause the issue. However, there have been reports of lost DRM keys by some unknown action. It is advised to act with caution. Losing your DRM keys can lead to issues with some apps which use DRM which could then have limited or no functionality. E.g. Netflix will only stream in SD (480p). You can check with DRM info if you still have L1 security level which means DRM keys are intact.

    Download
    • Official TWRP for YT-X703F (Wifi): twrp.me
    • Official TWRP for YT-X703L (LTE): twrp.me

    Instructions
    1. Install fastboot and adb on your PC, e.g. from here
    2. Enable developer options and in there select to unlock your bootloader by enabling OEM unlock and enable USB debugging
    3. Connect your PC to your tablet and run
      Code:
      adb reboot bootloader
      using adb on command line. The tablet will reboot into bootloader mode where you will only see the Lenovo logo. Now you use
      Code:
      fastboot oem unlock-go
      to unlock. This will factory reset your device
    4. Setup the tablet again and reboot again to the bootloader
    5. Then run
      Code:
      fastboot boot twrp-3.2.1-0-yt_x703f.img
      to temporarily boot into TWRP. You can also flash if you are sure ;)
    6. Select to keep system read only when TWRP starts to avoid modification which will make OTAs impossible
    7. Optionally flash SuperSU or Magisk in TWRP which should install system less. Keep OEM unlock enabled if you flash or modify anything

    Additional Downloads
    • Backup of original boot, recovery and system image for YT-X703F S000936: MEGA
    • Modified Boot image with forceencrypt disabled and it switches off CABC fully. You need to factory reset after flashing to format data without encryption boot_yt_x703f_s000963_noforceencrypt_cabc.img (YT-X703F S000963) / boot_yt_x703l_s000963_noforceencrypt_cabc.img (YT-X703L S000963) . Use
      Code:
      fastboot flash boot boot_yt_x703f_s000963_noforceencrypt_cabc.img
      to flash the kernel in fastboot. SuperSU or Magisk should be flashed afterwards if root is desired.
    • Full factory images with flash tool and instructions YT_X703F_S000689, YT_X703L_S000704, YT_X703F_S000725, YT_X703L_S000725, YT_X703F_S000734, YT_X703L_S000734, YT_X703L_S000744, YT-X703F_S000744, YT-X703L_S000963, YT-X703F_S000963 and OTA updates: MEGA (These images contain the individual boot, recovery and system images that you need to restore from any modification mentioned above)
    System Updates (OTA)
    In order to successfully apply Lenovo system updates after root you have to restore the original boot, recovery (if you flashed TWRP) and system partitions from your current installed version (e.g. S000744) for your variant of the tablet. This will NOT delete your apps and data but will unroot. Note that OTAs are block based and always check the contents of most of the partitions. This means that all of these partitions (except your data) have to be original and have to be on the exact same version (e.g. S000734) for the update to succeed.

    See here for instructions how to restore the partitions with fastboot.

    Credits
    @pogo1975 - for providing the factory images and fixing the AV sync issue
    @launcher20 and @deecept - for testing the LTE version
    TeamWin

    Changelog
    v4:
    • Now official TWRP with version 3.0.3-0

    v3:
    • enable full disk encryption for access to the encrypted data partition
    • update TWRP kernel to latest S000725 version

    v2:
    • add support for LTE variant (YT-X703L)
    • add further mount points to be able to backup more data
    4
    Guys, the dsp partition is the file adspso.bin in the firmware. Just flash this
    Code:
    fastboot flash dsp adspso.bin
    and you'll be good to go for the update.

    So far Lineage OS mounts this partition writable, which is probably unnecessary. TWRP doesn't mount it by default. But maybe if you do a backup of this partition it gets mounted and maybe modified.

    Edit: You have to copy adspo.bin to dsp.img for fastboot to flash it
    3
    it seems that something will happen, i saw this now in Lenovo english Community:

    "...Lenovo has identified root cause of unexpected battery drain on Yoga Tab 3 Plus tablets, completed testing on a fix, and is now preparing it for release.
    The fix OTA is on track to be released by the end of next week...."
    3
    And one more thing could someone check this modification i made in build.prop file if it resolves YouTube sync issues

    Not all lines modified but for me issues resolved mostly offload options and buffer

    tunnel.audio.encode = false
    #Buffer size in kbytes for compress offload playback
    audio.offload.buffer.size.kb=8
    #Minimum duration for offload playback in secs
    audio.offload.min.duration.secs=30
    #Enable offload audio video playback by default
    audio.offload.video=false

    #Enable PCM offload by default
    audio.offload.pcm.16bit.enable=true
    audio.offload.pcm.24bit.enable=true

    #Enable audio track offload by default
    audio.offload.track.enable=false

    #Enable music through deep buffer
    audio.deep_buffer.media=false

    #Enable downsampling for multi-channel content > 48Khz
    audio.playback.mch.downsample=true

    #enable voice path for PCM VoIP by default
    use.voice.path.for.pcm.voip=true

    #System property for FM transmitter
    ro.fm.transmitter=false
    #enable dsp gapless mode by default
    audio.offload.gapless.enabled=true

    #multi offload
    audio.offload.multiple.enabled=false

    #enable pbe effects
    audio.safx.pbe.enabled=false
    #property for AudioSphere Post processing
    audio.pp.asphere.enabled=false
    2
    so you know, i've managed to install xposed thanks to this thread https://forum.xda-developers.com/xposed/unofficial-systemless-xposed-t3388268 and is working well.