SM-N920T Cert_Write Success + DRK repair Full repair

[Stunman112]

1. Obtain Root (XDA Custom kernel or other method)

Flash Noble Kernel just for Permissive mode root in Odin AP slot:
(this Old Kernel Root is only temporary in these steps and has been tested on 5.1.1 firmware, see Step 5)

<ID:0/007> Added!!
<ID:0/007> Odin engine v(ID:3.1101)..
<ID:0/007> File analysis..
<ID:0/007> SetupConnection..
<ID:0/007> Initialzation..
<ID:0/007> Get PIT for mapping..
<ID:0/007> Firmware update start..
<ID:0/007> SingleDownload.
<ID:0/007> boot.img
<ID:0/007> NAND Write Start!!
<ID:0/007> recovery.img
<ID:0/007> RQT_CLOSE !!
<ID:0/007> RES OK !!
<ID:0/007> Removed!!
<ID:0/007> Remain Port .... 0
<OSM> All threads completed. (succeed 1 / failed 0)

Noble Kernel .Tar for Odin: https://drive.google.com/open?id=0B4...UNxZDJzelZvVDg

2. Reset EFS

Place in Download mode and connect USB, Samsung Modem port Select EXYNOS EFS Reset
Using Version...1.0.0.0044
Selected Port ssudmdm0000 = COM7
Selected Model SM-N920T
Selected Task SAMSUNG ExynosEFS RESET

Searching phone...
Device Found..
MODEL=SM-N920T;UN=0715F719032D2532;CAPA=32;VENDOR=SAMSUNG;F WVER=0301;PRODUCT=KLUBG4G1BD-E0B2;PROV=PASS;
Init ok..
Samsung Exynos EFS Reset Success..
Samsung Exynos CPEFS Reset Success..

!!! Success !!!!
Restart Phone if not auto...
Total Time Take...00:00:32
Log Saved

3. Prepare Cert Write

Most case KNOX = 1 Void after root (less use other root or file) so use Bypass_KNOX under Samsung tab to prepare cert write operation. Make sure USB debug is on.

Using Version...1.0.0.0044
Selected Model SM-N920T
Selected Task SAMSUNG Bypass Knox ADB

Searching ADB device Please wait..

Device Detected...
model:= SM-N920T
Androids Version:= 5.1.1
Description Version:= nobleltetmo-user 5.1.1 LMY47X N920TUVU2COI5 release-keys
Platform:= exynos5 [ samsungexynos7420 ] [ SHANNON333 ]
Baseband:= N920TUVU2COI5
VER:= N920TUVU2COI5/N920TTMB2COI5/N920TUVU2COI5/N920TUVU2COI5
Carrier := TMB_USA
EFS CSC := TMB
Network Mode := 0
Simstatus:= ABSENT
BusyBox version := 1.23.2
ANDROID-ID = 0715f719032d2532_0000CA60A0
Detected su binary at /xbin
type1 root exploit possible.
SU Version..2.79:SUPERSU
Device is Secure Rooted..uid=0
System Permission is Read/Write...

SAMSUNG Bypass Knox started...
Please Wait while...
Loader Ok Starting task...
!!! Success !!!!
Repair imeicert,meid cert,imei repair etc now without restarting phone...
Total Time Take...00:00:39


4. Write IMEI Cert

*This method used box with UART c3303k cable.
If have box: Dial *#0*# keep phone unplugged for now. Select correct box com port. Select Sam Cert Write and wait till you see searching phone in the log box and connect UART cable quickly.

If have dongle of GC Pro: only use USB and select IMEICERT Write USB and scan to select modem port

Select Valid Cert file for this model. (you can check with CERTFILE_Verify at bottom of list. Must know SKey ID number)

Using Version...1.0.0.0044
Selected Port VCP0 = COM3
Selected Model SM-N920T
Selected Task SAM CERT WRITE

ALL SAMSUNG CERT WRITE STARTED..

Searching Phone Please wait...

Phone Found Wait...
TEST MODE OK..
Details. SM-N920T,N,N920TUVU2COI5,N920TUVU2COI5,N920TUVU2COI5, N,
Model := SM-N920T
UNIQID := 0715F719032D253
Phone IMEI := 00000000000000
Device Knox Warranty is := Void
Default MSL NO NEED RESET EFS...
MSL Autho Pass..
Update SerialNumber ok..
Update IMEI Ok..
SKEY := 0448
EXYNOS Type Detected..
Checking imeicert...
IMEI-1 CERT PASS..
Update Simlock Ok..
Wifi_mac := EC1F72957E8B
Wifi_mac update ok.
ROOT KEY NOT GOOD..
Fixing FTM ok..
Repairing finish.

!!! SUCCESS !!!!
Total Time Take...00:00:36
Log Saved

5. Fix DRK and flash over full firmware

Notice if Root Key is shown Not Good in the cert write log. It was bad, so again we will use box port with UART cable in this method to fix DRK. Dial *#0*# press start with DRK_Repair, plug cable when it shows log moving.
If no box: Use DRK_Repair_ADB via USB cable.

Using Version...1.0.0.0044
Selected Port VCP0 = COM3
Selected Model SM-N920T
Selected Task SAMSUNG DRK FIX

Started Samsung DRK Fix...

Phone Found Wait...
TEST MODE OK..
Details. SM-N920T,N,N920TUVU2COI5,N920TUVU2COI5,N920TUVU2COI5, N,
Model := SM-N920T
UNIQID := 0715F719032D253
Phone IMEI := 35312007******
Phone MEID := 35312007******
Default MSL NO NEED RESET EFS...
ROOTKEY IS NOW GOOD..

!!! Success !!!!
Total Time Take...00:00:52
Log Saved


Place in Download mode and flash stock firmware set in Odin or upgrade to a new Rev version. SEAndroid will be back to Enforcing and stock with your chosen firmware. Factory reset could be recommended after flash. DONE with trusty GC PRO Box!

[stanner_austin]

Hello
You explained well but many solution is missed.
1) you do not need root if u gona use exynos efs reset. u can skip cf auto.

2) bypass knox & exynos efs reset can be skip if you use imeicert write ADB. may not work at 02-2017 or newer baseband at moment.

3) old basebands 08-2016 or older do not need root,do not need exynos efs reset, just use exynos unlock & imeicert write usb. no drk damage or warrnty void.

[Stunman112]

Originally Posted by stanner_austin

Hello
You explained well but many solution is missed.
1) you do not need root if u gona use exynos efs reset. u can skip cf auto.

2) bypass knox & exynos efs reset can be skip if you use imeicert write ADB. may not work at 02-2017 or newer baseband at moment.

3) old basebands 08-2016 or older do not need root,do not need exynos efs reset, just use exynos unlock & imeicert write usb. no drk damage or warrnty void.

Thank you for this clearing up. Can never stop learning from you Stanner. I should have never rooted to begin with.. Can you tell me what the best route would be for this task? It was on OI5 5.1.1 unrooted at the time. Exynos unlock and imeicert usb method or Imeicert ADB method requiring root?

[stanner_austin]

Hello
read point 3 for old basebands 08-2016 or older gcpro do not need root at all.