Widewine L1 in Custom Rom with TWRP

[voetbalremco]

How about the Xiaomi.eu beta roms?
Do they include the full vendor as they are based on xiaomi beta roms?

Or is flashing the original beta required?

To answer my own question:
On Xiaomi.eu beta 9.1.3, Widevinde DRM is L1.

 

[tejjoshii]

Try magisk hide with them you see l1 certification is useless if the bootloader is unlocked . Thumbsup if helpful

Why is that? What does bootloader unlock have to do with that certificate?
BTW guys i don't use Netflix or hotstar or any other streaming app but on facebook i can't play any video above 640p even after flashing the 9.2.25 closed beta or even 9.3.4(latest). Does FB's video resolution have anything to do with l1 support or what?
And a friend of mine also has poco and he can play upto 1080p in fb so i asked him and he said flash the 9.2.25 beta so i did but nothing happened.
Also i have the BL unlocked. And twrp and force encryption disabler 18.1

 

[Ezio123456]

Why is that? What does bootloader unlock have to do with that certificate?
BTW guys i don't use Netflix or hotstar or any other streaming app but on facebook i can't play any video above 640p even after flashing the 9.2.25 closed beta or even 9.3.4(latest). Does FB's video resolution have anything to do with l1 support or what?
And a friend of mine also has poco and he can play upto 1080p in fb so i asked him and he said flash the 9.2.25 beta so i did but nothing happened.
Also i have the BL unlocked. And twrp and force encryption disabler 18.1

Nope ,fb videos have nothing to do with widevine l1

 

[shivanand.shetti1]

hi guys, I flashed the miui beta ROM and I now have l1 certification. then I unlocked my bootloader, installed twrp, flashed PE. I read somewhere that if we unlock bootloaders then we can't watch prime or Netflix in HD. I wanted to know if there is workaround for this

 

[donk165]

So if im already running crDroid on my phone, what is the proceedure to get certified?

Take a full backup with TWRP, do all the wipes, install latest beta ROM, go through initial setup, connect to internet and leave phone for a bit to get certified. And then I can wipe and restore my backup of crDroid install ?

Thanks!

 

[Negi9]

So if im already running crDroid on my phone, what is the proceedure to get certified?

Take a full backup with TWRP, do all the wipes, install latest beta ROM, go through initial setup, connect to internet and leave phone for a bit to get certified. And then I can wipe and restore my backup of crDroid install ?

Thanks!

It's not worth getting L1 on custom roms, L1 requires a locked bootloader to play DRM protected HD content.

 

[donk165]

It's not worth getting L1 on custom roms, L1 requires a locked bootloader to play DRM protected HD content.

Ah, fair enough then ill leave it, unless anything changes to allow L1 in custom ROMs.

Thanks

 

[Midomad]

It's not worth getting L1 on custom roms, L1 requires a locked bootloader to play DRM protected HD content.

Use Magisk hide and DRM protected HD content will work.

 

[Negi9]

Use Magisk hide and DRM protected HD content will work.

The following security level definitions are used by Widevine:
Security Level 1 (L1)
Widevine DRM keys and decrypted content are never exposed to the host CPU. Only security
hardware or a protected security co-processor uses clear key values and the media content is
decrypted by the secure hardware.
Key requirements of this security level:
● Device manufacturers must provide a secure bootloader. The chain of trust from the
bootloader must extend through any software or firmware components involved in the
security implementation, such as the ARM TrustZone protected application and any
components involved in the enforcement of the secure video path.
● The Widevine keybox must be encrypted with a device-unique secret key that is not
visible to software or probing methods outside of the TrustZone. The Widevine key-box
must be installed in the factory or delivered to the device using an approved secure
delivery mechanism.
● Device manufacturers must provide an implementation of the Widevine Level 1
OEMCrypto API that performs all key processing and decryption in a trusted
environment.

Source attached

Need secure bootloader (locked bootloader) to decrypt.

 

[Midomad]

The following security level definitions are used by Widevine:

Security Level 1 (L1)

Widevine DRM keys and decrypted content are never exposed to the host CPU. Only security

hardware or a protected security co-processor uses clear key values and the media content is

decrypted by the secure hardware.

Key requirements of this security level:

● Device manufacturers must provide a secure bootloader. The chain of trust from the

bootloader must extend through any software or firmware components involved in the

security implementation, such as the ARM TrustZone protected application and any

components involved in the enforcement of the secure video path.

● The Widevine keybox must be encrypted with a device-unique secret key that is not

visible to software or probing methods outside of the TrustZone. The Widevine key-box

must be installed in the factory or delivered to the device using an approved secure

delivery mechanism.

● Device manufacturers must provide an implementation of the Widevine Level 1

OEMCrypto API that performs all key processing and decryption in a trusted

environment.

Source attached

Need secure bootloader (locked bootloader) to decrypt.

Yes this in theory,
But with magisk hide it just works.
It's like the Google Play certification once you unlock the bootloader you'll see device is not certified but if you hide the Playstore using Magisk hide it will show certified again.

 

[Negi9]

Yes this in theory,
But with magisk hide it just works.
It's like the Google Play certification once you unlock the bootloader you'll see device is not certified but if you hide the Playstore using Magisk hide it will show certified again.

Hmm, never worked for me. Can you confirm it's working on your side? (Amazon Prime will show around 2gb/hour of data at highest setting)

 

[mrturcot]

Use Magisk hide and DRM protected HD content will work.

What app do I hide for Netflix HD to work? Netflix? I have L1 with unlocked bootloader

Sent from my Poco F1 using Tapatalk

 

[Midomad]

Hmm, never worked for me. Can you confirm it's working on your side? (Amazon Prime will show around 2gb/hour of data at highest setting)

I can't test since Amazon prime is not available in my country.

What app do I hide for Netflix HD to work? Netflix? I have L1 with unlocked bootloader

Sent from my Poco F1 using Tapatalk

AFAIK Netflix still doesn't support HD playback on the Pocophone F1, even with widevine L1 certification.

 

[nissan skyline]

Use Magisk hide and DRM protected HD content will work.

Is it working ? I am on CAF PE and I want L1 so can you please confirm your method is working or not ...so that I can wipe and flash miui for L1

 

[Midomad]

Is it working ? I am on CAF PE and I want L1 so can you please confirm your method is working or not ...so that I can wipe and flash miui for L1

I made some research on Oneplus forum, and unfortunately it seems Netflix and others VOD services has implemented a way to "protect" their Widevine L1 content (AKA HD Content) that doesnt work with unlocked phones even if it is stock but only unlocked (it is protected by signed bootloaders) and the hide Magisk option doesn't work,because Widevine isn't linked to root or OS! It's encoded directly in the chip and is only linked to bootloader status, which can't be hidden. @Negi9

 

[mastermoon]

i'm on Resurrection Remix v.7.0.1 and have L1... look the screenshot

 

[jeezyscry]

yea but can you stream hd vids on netflix or amazonn prime?

 

[voetbalremco]

Support for Widevine L1
Update: Our DEV team is still trying to work with Netflix on Widevine L1 certification.POCO F1and POCOPHONE F1 both support DRM-protected content from Amazon Prime Video and HotStar for now.

Note: Please read following steps if the content still does not play in Full HD:
* Ensure you are connected to the Internet
* Ensure at least one fingerprint has been enrolled
* Go to Settings - Lock screen & password - Manage fingerprints - Fingerprint payments - Widevine (L1)
* Click “Certificate” button to download widevine certification key

From the latest community update
https://forum.poco.in/forum.php?mod=viewthread&tid=1512&page=1&view=discuz

 

[AstroBiswas]

How about the Xiaomi.eu beta roms?
Do they include the full vendor as they are based on xiaomi beta roms?

Or is flashing the original beta required?

From the latest community update
https://forum.poco.in/forum.php?mod=viewthread&tid=1512&page=1&view=discuz

Thank you!
Op updated with latest method for getting L1 with TWRP
Go to first post for it

 

[cRaWnEr]

...
.
Done! U can reflash all partitions of all your backup in twrp now, your certification is permanent

..

Hii. I just wanted to ask, do we really need to reflash ALL partitions? I had a bad experience doing this for a rollback and other users recommended me to just flash boot+system+data+cache and not the rest of the partitions

I'm on LineageOS 17.1 and I just want to confirm if I could just flash .EU, get the DRM and restore my LOS as it was without having to reconfigure everything