Xiaomi Mi MIX2 working encryption with latest Android 9 (Pie) ROM

[raupe]

(short) Tutorial in getting your Xiaomi Mi MIX2 encrypted with latest Android 9 (Pie) ROM released by xiaomi.eu (and propably also with the beta ROMs released by Xiaomi/miui.com)

Preparations:
- your phone is unlocked
- a custom recovery is installed on your phone already
- download OrangeFox recovery 9.0-1 or later (others may work too but had not tested for this tutorial / TWRP 3.3.0-0 may produce errors)
- download force-enryption script for Mi MIX2 Android Pie
- download NO enryption restore script for Mi MIX2 Android Pie (reverts fstab config to default - wipe of data needed)
- download latest Android 9 Pie based MIUI ROM (tested only with the modified ROM from xiaomi.eu - official beta ROM may work too)
- optional: download latest Magisk to receive root (may needed by your backup/recovery app to restore your apps within android)

CAUTION!

1. When folliging this procedure you will loose all current data on your device! DO A APP-BASED BACKUP IN ANDROID FIRST!!! (TWRP or OrangeFox recovery based backups won't work for this procedure!)
   Have done your Backup? No? DO IT NOW! really!
2. Let the phone boot and encrypt itself after flashing the scipt linked in HowTo.
   Up to now (bug has been reported) it is to be mentioned that encrypting Xiaomi.EU rom via setting/privacy/encrypt leads direct to PHONE RESET.
   FORMAT DATA is required then to get it back to life. @lolo9393 thanks for that hint!

Exact proceedings:
1. you've done a backup eh? - good
2. ... did you save that backup on a other device than your phone? Remember you'll loose all data stored on the phone!!!
3. reboot your phone in your currently installed recovery
3.1 copy the OrangeFox recovery to your device
3.2 select "Install" and choose the OrangeFox recovery .zip file to install (replace your current recovery)
3.3 OrangeFox installer will reboot the recovery after its install
4. Select "Wipe"
4.1 Select "Advanced Wipe"
4.2 Select every Partition exept USB-OTG
4.3 Swipe to Wipe
5. reboot your recovery to recovery again
6. Select "Wipe"
6.1 Select "Advanced Wipe"
6.2 Select "Format Data"
6.3 type in "yes" and confirm that step
7. reboot your recovery to recovery again
8. copy the latest Android 9 Pie based MIUI ROM to your phone
9. copy the latest version of the force-enryption script to your phone
10. Select "Install" and select the Android ROM first then "Add to queue" and select the force-encryption script as second item to flash
10.1 Swipe to Install
11. reboot to system
11.1 go to "Settings"
11.2 scroll down to "SYSTEM SETTINGS" area
11.3 select "Additional settings"
11.4 select "Privacy"
11.5 scroll down to "ADVANCED" area
11.6 check the status of "Encryption & credentials" - it should state "Encrypted"
12. now continue in setting up your system (e.g. enable developer mode, enable advanced power menu, usb debugging if needed, ...)
13. DONE ...

... ok, maybe you're missing your apps and settings - here is a possible way to restore them ... (i personally prefer Titanium Backup)

Root & how to restore apps & app data
14. copy Magisk installer to your device
14.1 reboot your device to recovery
14.2 select "Install" and choose the Latest Magisk-vXX.X.zip file to install (in the log you should read something about "keep forced encryption" - this is good )
14.3 when done - reboot to system again
15. Install Titanium Backup (from a store or as APK from file)
15.1 copy your Titanium Backup or TWRP backup (that could be restored by Titanium Backup Pro) to insternal storage
15.2 restore apps & app data with Titanium Backup (for a detailed HowTo please visit official Titanium Backup Website: https://www.titaniumtrack.com/kb/titanium-backup-kb/titanium-backup-user-guide.html#restore)
15.3 Profit!

That guide may has helped you ...
... say thanks and/or donate for my massive Whiskey consumption -> https://forum.xda-developers.com/donatetome.php?u=496297 :fingers-crossed:

FAQ

Q: Is that procedure ROM update safe? / What if xiaomi.eu releases an ROM update or my ROM has to be reinstalled?
A: When Xiaomi.eu releases an update you have to flash that script right afterwards that update in your favorite recovery. - No further actions should be needed. This procedure has to be repeated for every ROM update or reinstall.
Procedure is verified as working with update 9.5.9 up to 9.6.27​

Q: Does TWRP recovery work also?
A: There is feedback that TWRP 3.3.0-0 does not work as intended (THX @mguz on post 11 for the feedback)
Maybe TWRP 3.3.1-0 that was released short ago solves that problem ...​

 

[cineq]

How to update later?

 

[raupe]

How to update later?

... hmm sorry did not get what you like to do - could you please describe in detail what you mean/like to achieve?

 

[cineq]

When there will be next build of xiaomi.eu what is the procedure to update it? Just install new in recovery without any wipes? Is force-encryption script needed when updating?

 

[raupe]

When there will be next build of xiaomi.eu what is the procedure to update it? Just install new in recovery without any wipes? Is force-encryption script needed when updating?

When Xiaomi.eu releases an update you have to flash that script right afterwards that update in your favorite recovery.
No further actions should be needed.

Thanks for the hint - will update the guide with that question/answer

 

[raupe]

When Xiaomi.eu releases an update you have to flash that script right afterwards that update in your favorite recovery.
No further actions should be needed.

Thanks for the hint - will update the guide with that question/answer

Procedure is verified as working with update 9.5.9 -> 9.5.16

 

[lolo9393]

(short) Tutorial in getting your Xiaomi Mi MIX2 encrypted with latest Android 9 (Pie) ROM released by xiaomi.eu (and propably also with the beta ROMs released by Xiaomi/miui.com)
@raupe

VERY good work.

Very useful for people having security concern when using a TWRP.
My comments:
-This procedure is valid with any latest 3.3. TWRP version that can decrypt now. (?)

- This is applicable to all XIAOMI phone under PIE. (Fstab must be exchanged in the zip tool in order to fit with the phone model)

- NOTE :
Up to now (bug has been reported) it is to be mentioned that encrypting EU rom via setting/privacy/encrypt leads direct to PHONE RESET and FORMAT DATA required.
Regards

 

[flux1982]

Hi,

- download force-enryption script for Mi MIX2 Android Pie
- download NO enryption restore script for Mi MIX2 Android Pie

both links are down, re-upload possible ?

EDIT: Links are working now

 

[stoshie]

Help out a noob. Why would one need to have phone encrypted? Whats the purpose of encryption?
I'd like to update to 9.5.x Xiaomi.eu Pie but hear complaints of GCam, SuperSU, FindDevice, fingerprint, etc not working. Would encryption help these issues?

 

[Bluezzy]

Help out a noob. Why would one need to have phone encrypted? Whats the purpose of encryption?
I'd like to update to 9.5.x Xiaomi.eu Pie but hear complaints of GCam, SuperSU, FindDevice, fingerprint, etc not working. Would encryption help these issues?

Its not about encr. Problems.Pie uses vendor for most stuff now and for gcam is needed additional line in build prop to make it work.magisk 19 can root it without problems

 

[mguz]

Hi,

thank you for this helpful tutorial.

First time I tried with TWRP 3.3.1-0 and it did not work (Bootloop).
With OrangeFox Recovery it works as described.

Regards

 

[kostekzg]

On official TWRP-3.3.1-1 works as intended, thanks!