Xiaomi Redmi Note 8t (willow) bootloader unlock failed. [Answered] - GSM-Forum

BxS4ever · 08-04-2022, 02:42

Hi. Bootloader unlock failed by using the One click unlock and it also corrupted the recovery menu.

Code:

XiaomiSpecial_OneClickUBL
PreOperation Configuration 
 Brand : XIAOMI Model : Redmi Note 8T (wiilow) Storage : Auto
 Loader: 0010A0E100720000_1bebe3863a6781db_76196dc8_XIAOMI.fhprg
 Port  : Auto

 Searching for Qualcomm 9008 Device...Found
 FriendlyName :Qualcomm HS-USB QDLoader 9008 (COM30)
 SymbolicName :\??\USB#VID_05C6&PID_9008#6&3577568&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
 Driver Ver   :03/25/2016,2.1.2.2

Getting device info......
Serial No.: 0xD525B3A1
HW_ID     : 0010A0E100720000
MSM ID    : 0x0010A0E1, SM6125-Qualcomm Snapdragon 665/NicobarPkgLAA
MODEL_ID  : 0x0000
OEM_ID    : 0x0072 - XIAOMI
PBL Ver   : 00000000
PK HASH   : 1bebe3863a6781db4b01086063007334de9e5ca14971c7c4f4358ec9d79cda46
 
Firehose Loader[0010A0E100720000_1bebe3863a6781db_76196dc8_XIAOMI.fhprg]
--------------------------------------------------
  Header Type    : New
  TargetMSM      : 
  Tag            : 
  Version        : 6
  Code_size      : 816
  Signature_size : 256
  fhVendor       : XIAOMI
  HW_ID          : 0010A0E100720000
  Vendor         : XIAOMI
  OEM_ID         : 0072
  MODEL_ID       : 0000
  SW_ID          : 00000003
  APP_ID         : 00000000
  pk_hash        : 1bebe3863a6781db4b01086063007334de9e5ca14971c7c4f4358ec9d79cda4692ce5e948c6fd409408f4c919fcadfe3
  OEM_VERSION    : cibuild
  IMAGE_VARIANT  : NicobarPkgLAA
  QC_VERSION     : BOOT.XF.4.0-00149-NICOBARLAZ-1
--------------------------------------------------

SaharaBoot... Ok
Sending ..............................Ok
Connecting to Firehose...
Ping..................... Ok 
Configuration.........
Identifying Chip....
Ok
Chip Configuration :
 MemoryName : eMMC
 MaxPayloadSizeToTargetInBytes : 16384
 MaxPayloadSizeToTargetInBytesSupported : 16384
 MaxPayloadSizeFromTargetInBytes : 
 MaxXMLSizeInBytes : 4096
 TargetName : 
 Version : 1
 DateTime : Jul  3 2019 - 22:23:56

*** STORAGE DEVICE INFO ***
Memory Type         : eMMC
Block Size in Bytes : 512
Page Size           : 512
Manufacturer ID     : 19
Serial Number       : 338050259
Firmware Version    : 4
Product Name        : S0J9K8
Physical Partitions : 4
Total Logical Blocks:
          Drive [0]  122142720[58,242 GB]
          Drive [1]  8192[4 MB]
          Drive [2]  8192[4 MB]
          Drive [3]  32768[16 MB]

Protocol : Universal
Running : Ok

Reading GPT[4]
          Drive [0] 88 Items
          Drive [1] 0 Items
          Drive [2] 0 Items
          Drive [3] 

 
Phone Information......
  Vendor         : Xiaomi
  ID             : QKQ1.200114.002
  SDK            : 29
  Release        : 10
  ABI            : arm64-v8a
  CPU abilist    : arm64-v8a,armeabi-v7a,armeabi
  Locale         : en-GB
  Miui Ver       : V12
  Mod_device     : willow_eea_ti_global
  Security Patch : 2021-07-01


Backup Security partitions...
Reading Security Items....
 > modemst1
 > modemst2
 > fsg
 > fsc
C:\Hydra Tool\Backup\Security_Backup\__10_Security_080422033126.sec
Backup Security Success....
 
Phone Information......
  Vendor         : Xiaomi
  ID             : QKQ1.200114.002
  SDK            : 29
  Release        : 10
  ABI            : arm64-v8a
  CPU abilist    : arm64-v8a,armeabi-v7a,armeabi
  Locale         : en-GB
  Miui Ver       : V12
  Mod_device     : willow_eea_ti_global
  Security Patch : 2021-07-01

Preparing Patching......
 - patching... [1]
 - patching... [2]
Action Result : Ok

Rebooting Phone.... Ok

Elapsed Time : 00:00:42

Searching Device By Fastboot
Device Found...
Searching Device By Fastboot
Device Found...

Reading Information...getvar:version FAILED (remote: GetVar Variable Not found)
Product    : laurel_sprout
version    : getvar:version FAILED (remote: GetVar Variable Not found)
Secure     : yes
Device Info: 
    Verity mode: true
    Device unlocked: false
    Device critical unlocked: false
    Charger screen enabled: true
    OKAY [  0.001s]
    Finished. Total time: 0.002s
Searching Device By Fastboot
Device Found...
Searching Device By Fastboot
Device Found...

Reading Information...getvar:version FAILED (remote: GetVar Variable Not found)
Product    : laurel_sprout
version    : getvar:version FAILED (remote: GetVar Variable Not found)
Secure     : yes
Device Info: 
    Verity mode: true
    Device unlocked: false
    Device critical unlocked: false
    Charger screen enabled: true
    OKAY [  0.002s]
    Finished. Total time: 0.002s

Elapsed Time : 00:00:55

Techy147 · 08-04-2022, 08:05

Hello first enable oem lock and do again

BxS4ever · 08-04-2022, 08:34

Quote:

Originally Posted by Techy147

Hello first enable oem lock and do again

You mean turning on the unlock oem under developer mode? As a default was already turned off which means oem lock.

BxS4ever · 08-04-2022, 09:05

Quote:

Originally Posted by Techy147

Hello first enable oem lock and do again

Ok tried again, now it says unlocked but it bricked completely. I can only enter in fastboot mode now.

Code:

XiaomiSpecial_OneClickUBL
PreOperation Configuration 
 Brand : XIAOMI Model : Redmi Note 8T (wiilow) Storage : Auto
 Loader: 0010A0E100720000_1bebe3863a6781db_76196dc8_XIAOMI.fhprg
 Port  : Auto

 Searching for Qualcomm 9008 Device...Found
 FriendlyName :Qualcomm HS-USB QDLoader 9008 (COM30)
 SymbolicName :\??\USB#VID_05C6&PID_9008#6&3577568&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
 Driver Ver   :03/25/2016,2.1.2.2

Getting device info......
Serial No.: 0xD525B3A1
HW_ID     : 0010A0E100720000
MSM ID    : 0x0010A0E1, SM6125-Qualcomm Snapdragon 665/NicobarPkgLAA
MODEL_ID  : 0x0000
OEM_ID    : 0x0072 - XIAOMI
PBL Ver   : 00000000
PK HASH   : 1bebe3863a6781db4b01086063007334de9e5ca14971c7c4f4358ec9d79cda46
 
Firehose Loader[0010A0E100720000_1bebe3863a6781db_76196dc8_XIAOMI.fhprg]
--------------------------------------------------
  Header Type    : New
  TargetMSM      : 
  Tag            : 
  Version        : 6
  Code_size      : 816
  Signature_size : 256
  fhVendor       : XIAOMI
  HW_ID          : 0010A0E100720000
  Vendor         : XIAOMI
  OEM_ID         : 0072
  MODEL_ID       : 0000
  SW_ID          : 00000003
  APP_ID         : 00000000
  pk_hash        : 1bebe3863a6781db4b01086063007334de9e5ca14971c7c4f4358ec9d79cda4692ce5e948c6fd409408f4c919fcadfe3
  OEM_VERSION    : cibuild
  IMAGE_VARIANT  : NicobarPkgLAA
  QC_VERSION     : BOOT.XF.4.0-00149-NICOBARLAZ-1
--------------------------------------------------

SaharaBoot... Ok
Sending ..............................Ok
Connecting to Firehose...
Ping..................... Ok 
Configuration.........
Identifying Chip....
Ok
Chip Configuration :
 MemoryName : eMMC
 MaxPayloadSizeToTargetInBytes : 16384
 MaxPayloadSizeToTargetInBytesSupported : 16384
 MaxPayloadSizeFromTargetInBytes : 
 MaxXMLSizeInBytes : 4096
 TargetName : 
 Version : 1
 DateTime : Jul  3 2019 - 22:23:56

*** STORAGE DEVICE INFO ***
Memory Type         : eMMC
Block Size in Bytes : 512
Page Size           : 512
Manufacturer ID     : 19
Serial Number       : 338050259
Firmware Version    : 4
Product Name        : S0J9K8
Physical Partitions : 4
Total Logical Blocks:
          Drive [0]  122142720[58,242 GB]
          Drive [1]  8192[4 MB]
          Drive [2]  8192[4 MB]
          Drive [3]  32768[16 MB]

Protocol : Universal
Running : Ok

Reading GPT[4]
          Drive [0] 88 Items
          Drive [1] 0 Items
          Drive [2] 0 Items
          Drive [3] 

 
Phone Information......
  Vendor         : Xiaomi
  ID             : QKQ1.200114.002
  SDK            : 29
  Release        : 10
  ABI            : arm64-v8a
  CPU abilist    : arm64-v8a,armeabi-v7a,armeabi
  Locale         : en-GB
  Miui Ver       : V12
  Mod_device     : willow_eea_ti_global
  Security Patch : 2021-07-01


Backup Security partitions...
Reading Security Items....
 > modemst1
 > modemst2
 > fsg
 > fsc
C:\Hydra Tool\Backup\Security_Backup\__10_Security_080422095134.sec
Backup Security Success....
 
Phone Information......
  Vendor         : Xiaomi
  ID             : QKQ1.200114.002
  SDK            : 29
  Release        : 10
  ABI            : arm64-v8a
  CPU abilist    : arm64-v8a,armeabi-v7a,armeabi
  Locale         : en-GB
  Miui Ver       : V12
  Mod_device     : willow_eea_ti_global
  Security Patch : 2021-07-01

Preparing Patching......
 - patching... [1]
 - patching... [2]
Action Result : Ok

Rebooting Phone.... Ok

Elapsed Time : 00:00:42

Searching Device By Fastboot
Device Found...
Searching Device By Fastboot
Device Found...

Reading Information...getvar:version FAILED (remote: GetVar Variable Not found)
Product    : laurel_sprout
version    : getvar:version FAILED (remote: GetVar Variable Not found)
Secure     : yes
Device Info: 
    Verity mode: true
    Device unlocked: false
    Device critical unlocked: false
    Charger screen enabled: true
    OKAY [  0.002s]
    Finished. Total time: 0.002s
Searching Device By Fastboot
Device Found...
Searching Device By Fastboot
Device Found...

Reading Information...getvar:version FAILED (remote: GetVar Variable Not found)
Product    : laurel_sprout
version    : getvar:version FAILED (remote: GetVar Variable Not found)
Secure     : yes
Device Info: 
    Verity mode: true
    Device unlocked: true
    Device critical unlocked: true
    Charger screen enabled: true
    OKAY [  0.002s]
    Finished. Total time: 0.002s

Elapsed Time : 00:01:10

Techy147 · 08-04-2022, 09:12

Hello reflash device

BxS4ever · 08-04-2022, 10:56

Quote:

Originally Posted by Techy147

Hello reflash device

Hi can you guide me a little bit? I'm not really an expert for xiaomi devices.

Even before the logs states that "Device critical unlocked: true", when I give the fastboot command in terminal I have this:

Code:

C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot oem device-info
...
(bootloader) Verity mode: true
(bootloader) Device unlocked: true
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: true
OKAY [  0.013s]
finished. total time: 0.014s

When I try to flash fastboot firmware both in hydra and with official xiaomi mi flash, It won't allow me to continue:

With official miflash I get:

"FAILED (remote: Flashing is not allowed for Critical Partitions)"

It is maybe that I forgot to enable before debug usb option?

**Hydra Tool** · 08-04-2022, 11:00

Quote:

Originally Posted by BxS4ever

Hi can you guide me a little bit? I'm not really an expert for xiaomi devices.

First even the logs states that "Device critical unlocked: true", when I give the fastboot command in terminal I have this:

Code:

C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot oem device-info
...
(bootloader) Verity mode: true
(bootloader) Device unlocked: true
(bootloader) Device critical unlocked: false
(bootloader) Charger screen enabled: true
OKAY [  0.013s]
finished. total time: 0.014s

When I try to flash fastboot firmware both in hydra and with official xiaomi mi flash, It won't allow me to continue:

With official miflash I get:

"FAILED (remote: Flashing is not allowed for Critical Partitions)"

It is maybe that I forgot to enable before debug usb option?

Hello,

Your device already unlocked.

Quote:

(bootloader) Device unlocked: true

That mean you can't write or Erase partitions on fastboot like (persist, security parts e.t.c), You can untick them and try again.

Quote:

"FAILED (remote: Flashing is not allowed for Critical Partitions)"

Best Regards | Hydra Team

BxS4ever · 08-04-2022, 15:23

Ok thanks phone fixed, very simple to write firmware via flash mode:

I hope there will be no issue to remove mi account with miui 12.5.5

Code:

PreOperation Configuration 
 Brand : XIAOMI Model : Redmi Note 8T (wiilow) Storage : Auto
 Loader: 0010A0E100720000_1bebe3863a6781db_76196dc8_XIAOMI.fhprg
 Port  : Auto

 Searching for Qualcomm 9008 Device...Found
 FriendlyName :Qualcomm HS-USB QDLoader 9008 (COM30)
 SymbolicName :\??\USB#VID_05C6&PID_9008#6&3577568&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
 Driver Ver   :03/25/2016,2.1.2.2

Getting device info......
Serial No.: 0xD525B3A1
HW_ID     : 0010A0E100720000
MSM ID    : 0x0010A0E1, SM6125-Qualcomm Snapdragon 665/NicobarPkgLAA
MODEL_ID  : 0x0000
OEM_ID    : 0x0072 - XIAOMI
PBL Ver   : 00000000
PK HASH   : 1bebe3863a6781db4b01086063007334de9e5ca14971c7c4f4358ec9d79cda46
 
Firehose Loader[0010A0E100720000_1bebe3863a6781db_76196dc8_XIAOMI.fhprg]
--------------------------------------------------
  Header Type    : New
  TargetMSM      : 
  Tag            : 
  Version        : 6
  Code_size      : 816
  Signature_size : 256
  fhVendor       : XIAOMI
  HW_ID          : 0010A0E100720000
  Vendor         : XIAOMI
  OEM_ID         : 0072
  MODEL_ID       : 0000
  SW_ID          : 00000003
  APP_ID         : 00000000
  pk_hash        : 1bebe3863a6781db4b01086063007334de9e5ca14971c7c4f4358ec9d79cda4692ce5e948c6fd409408f4c919fcadfe3
  OEM_VERSION    : cibuild
  IMAGE_VARIANT  : NicobarPkgLAA
  QC_VERSION     : BOOT.XF.4.0-00149-NICOBARLAZ-1
--------------------------------------------------

SaharaBoot... Ok
Sending ..............................Ok
Connecting to Firehose...
Ping..................... Ok 
Configuration.........
Identifying Chip....
Ok
Chip Configuration :
 MemoryName : eMMC
 MaxPayloadSizeToTargetInBytes : 16384
 MaxPayloadSizeToTargetInBytesSupported : 16384
 MaxPayloadSizeFromTargetInBytes : 
 MaxXMLSizeInBytes : 4096
 TargetName : 
 Version : 1
 DateTime : Jul  3 2019 - 22:23:56

*** STORAGE DEVICE INFO ***
Memory Type         : eMMC
Block Size in Bytes : 512
Page Size           : 512
Manufacturer ID     : 19
Serial Number       : 338050259
Firmware Version    : 4
Product Name        : S0J9K8
Physical Partitions : 4
Total Logical Blocks:
          Drive [0]  122142720[58,242 GB]
          Drive [1]  8192[4 MB]
          Drive [2]  8192[4 MB]
          Drive [3]  32768[16 MB]

Protocol : Universal
Running : Ok

Reading GPT[4]
          Drive [0] 88 Items
          Drive [1] 0 Items
          Drive [2] 0 Items
          Drive [3] 

 
Phone Information......
  Vendor         : Xiaomi
  ID             : QKQ1.200114.002
  SDK            : 29
  Release        : 10
  ABI            : arm64-v8a
  CPU abilist    : arm64-v8a,armeabi-v7a,armeabi
  Locale         : en-GB
  Miui Ver       : V12
  Mod_device     : willow_eea_ti_global
  Security Patch : 2021-07-01


Backup Security partitions...
Reading Security Items....
 > modemst1
 > modemst2
 > fsg
 > fsc
C:\Hydra Tool\Backup\Security_Backup\__10_Security_080422144739.sec
Backup Security Success....

Backup Security partitions...
Reading Security Items....
 > modemst1
 > modemst2
 > fsg
 > fsc
C:\Hydra Tool\Backup\Security_Backup\__10_Security_080422144808.sec
Backup Security Success....

----------------------------
Flashing Selected Partitions....
 - qupfw(0)[qupv3fw.elf]  Ok
 - qupfwbak(0)[qupv3fw.elf]  Ok
 - vbmeta(0)[vbmeta.img]  Ok
 - vbmetabak(0)[vbmeta.img]  Ok
 - xbl_config(0)[xbl_config.elf]  Ok
 - xbl_configbak(0)[xbl_config.elf]  Ok
 - devcfg(0)[devcfg.mbn]  Ok
 - devcfgbak(0)[devcfg.mbn]  Ok
 - storsec(0)[storsec.mbn]  Ok
 - rpm(0)[rpm.mbn]  Ok
 - rpmbak(0)[rpm.mbn]  Ok
 - hyp(0)[hyp.mbn]  Ok
 - hypbak(0)[hyp.mbn]  Ok
 - keymaster(0)[km4.mbn]  Ok
 - keymasterbak(0)[km4.mbn]  Ok
 - cmnlib(0)[cmnlib.mbn]  Ok
 - cmnlib64(0)[cmnlib64.mbn]  Ok
 - cmnlibbak(0)[cmnlib.mbn]  Ok
 - cmnlib64bak(0)[cmnlib64.mbn]  Ok
 - abl(0)[abl.elf]  Ok
 - ablbak(0)[abl.elf]  Ok
 - bluetooth(0)[BTFM.bin]  Ok
 - bluetoothbak(0)[BTFM.bin]  Ok
 - misc(0)[misc.img]  Ok
 - imagefv(0)[imagefv.elf]  Ok
 - imagefvbak(0)[imagefv.elf]  Ok
 - uefisecapp(0)[uefi_sec.mbn]  Ok
 - uefisecappbak(0)[uefi_sec.mbn]  Ok
 - xbl(0)[xbl.elf]  Ok
 - xblbak(0)[xbl.elf]  Ok
 - tz(0)[tz.mbn]  Ok
 - tzbak(0)[tz.mbn]  Ok
 - logfs(0)[logfs_ufs_8mb.bin]  Ok
 - metadata(0)[metadata.img]  Ok
 - dtbo(0)[dtbo.img]  Ok
 - dtbobak(0)[dtbo.img]  Ok
 - dsp(0)[dspso.bin]  Ok
 - dspbak(0)[dspso.bin]  Ok
 - persist(0)[persist.img]  Ok
 - boot(0)[boot.img]  Ok
 - bootbak(0)[boot.img]  Ok
 - recovery(0)[recovery.img]  Ok
 - modem(0)[NON-HLOS.bin]  Ok
 - modembak(0)[NON-HLOS.bin]  Ok
 - cache(0)[cache.img]  Ok
 - cust(0)[cust.img]  Ok
 - vendor(0)[vendor.img]  Ok
 - system(0)[system.img]  Ok
 - userdata(0)[userdata.img]  Ok
 - PrimaryGPT(0)[gpt_main0.bin]  Ok

Flashing Patch Configuration.. 
0 [NUM_DISK_SECTORS-34.]   OK
0 [NUM_DISK_SECTORS-34.]   OK
0 [NUM_DISK_SECTORS-34.]   OK
0 [NUM_DISK_SECTORS-34.]   OK
0 [NUM_DISK_SECTORS-1.]   OK
0 [NUM_DISK_SECTORS-1.]   OK
0 [NUM_DISK_SECTORS-33.]   OK
0 [CRC32(2,11264)]   OK
0 [CRC32(NUM_DISK_SECTORS-33.,11264)]   OK
0 [0]   OK
0 [CRC32(1,92)]   OK
0 [0]   OK
0 [CRC32(NUM_DISK_SECTORS-1.,92)]   OK
----------------------------
Done!
Operation : Setbootablestoragedrive: Drive 0
Set bootable storage drive 0 Ok

Rebooting Phone.... Ok

Elapsed Time : 00:57:37


Elapsed Time : 00:57:37

08-04-2022, 08:05	#2 (permalink)
Techy147 Product Supporter Join Date: Jan 2015 Location: Space Posts: 1,388 Member: 2331209 Status: Offline Thanks Meter: 2,728	Hello first enable oem lock and do again

08-04-2022, 09:12	#5 (permalink)
Techy147 Product Supporter Join Date: Jan 2015 Location: Space Posts: 1,388 Member: 2331209 Status: Offline Thanks Meter: 2,728	Hello reflash device