Pages

Monday, 15 July 2024

PotatoNV

 Unlock bootloader of Huawei devices.

PotatoNV

GitHub release (latest by date including pre-releases) GitHub GitHub All Releases

Get binaries for Windows in the releases section. For Linux or macOS consider using the PotatoNV-crossplatform.

User manual

Follow the video guide or read the manual below.

Make sure your device is compatible

  1. Are you sure you're actually using a Huawei/Honor device?
  2. Open the Settings → About phone. Check the CPU: it should be HiSilicon Kirin ***. If it is not your case (MediaTek, Qualcomm), then alas, your device is not supported. :(
  3. Okay, now you know CPU model. It should be one of these modification:
    • Kirin 620
    • Kirin 650
    • Kirin 655
    • Kirin 658
    • Kirin 659
    • Kirin 925
    • Kirin 935
    • Kirin 950
    • Kirin 960
  4. 100% incompatible CPUs with PotatoNV: Kirin 710, 710A, 710F, 810, 970, 980, 985, 990 & newer.
  5. As for Kirin 710, 710F, 970 & 980, there is an alternative paid option — see the "Alternatives" section below.

Getting inside

The first step is the most difficult thing to do. You need to disassemble your device: this is necessary in order to access the contacts on the motherboard.

If you're not sure that you have enough experience to disassemble the device, then consider using paid software, that supports "software testpoint".

Warning

I strongly recommend watching video manuals for disassembling your device.

Warning

Be extremely careful with planar cables!

These cables are used in tablets, as well as in phones with a fingerprint scanner on the back cover.

You will need: a hair dryer, a guitar pick or a plastic card, conductive tweezers and maybe a screwdriver.

  1. Turn off the device.
  2. Heat the back cover evenly with a hair dryer.
  3. After a couple of minutes, try to stick the plastic card into the corner between case and lid, try to lift the edge and then deepen the card.
  4. Move around the perimeter of the back cover, peeling off glue.
  5. Now you can remove the back cover.

Entering download mode

It's time to Google. You need to find the location of a special point on the motherboard – testpoint.

Note

If you are wondering why you need to do something with the unfortunate testpoint, then read the contents of the spoiler below.

To search, use the model name before the hyphen + "testpoint". For example for Honor 9 Lite (LLD-L31) you should Google "lld testpoint".

An example how a typical testpoint photo looks like.

The marks may vary:

  1. Only one point is marked in the photo.
  2. In the photo, a line is drawn between the point and the metal shield.
  3. In the photo, a line is drawn between two points.

Here you will need sleight of hand: try to short-circuit the point and the metal shield (in option 1 and 2), or short-circuit both points (option 3) with tweezers. Without removing the tweezers, connect the USB cable to the computer.

After 3 seconds, the tweezers can be removed.

Open the "Device Manager" – you should see an unknown device named USB SER, or Serial Port HUAWEI USB COM 1.0.

If the device has not been detected, make sure you are using a good cable, the tweezers are not a dielectric, and you are shorting the desired point.

Unlocking the bootloader

Note

All bootloaders are flashing to RAM, so an incorrect bootloader cannot harm the device.

Note

Disable FBLOCK checkbox disables a special securtiy check. That modification allows you to flash/erase secure partitions or execute oem commands, that are not available with normal unlocking by unlock code [USERLOCK].

Warning

FBLOCK unlocking works correctly only on devices with Kirin 960 or Kirin 65x. Disabling this option can cause serious problems on legacy devices.

Okay, now refer to this table and select the appropriate bootloader.

Press the Start button. 🪄

The procedure will take no more than a minute. The program should write a new unlock code, keep it in a safe place.

Reboot your device to fastboot mode and execute following command on the host machine:

fastboot oem unlock YOUR_CODE_HERE

have fun.

How it works

Tested devices

Device Model Bootloader
Huawei P8 Lite (2015) ALE Kirin 620
Huawei Y6II CAM Kirin 620
Honor 5C / 7 Lite NEM Kirin 65x (A)
Honor 6X BLN Kirin 65x (A)
Honor 7X BND Kirin 65x (A)
Honor 9 Lite LLD Kirin 65x (A)
Huawei MediaPad T5 AGS2 Kirin 65x (A)
Huawei Nova 2 PIC Kirin 65x (A)
Huawei P10 Lite WAS Kirin 65x (A)
Huawei P20 Lite / Nova 3e ANE Kirin 65x (A)
Huawei P8 Lite (2017) PRA Kirin 65x (A)
Huawei P9 Lite VNS Kirin 65x (A)
Huawei Y9 (2018) FLA Kirin 65x (A)
Huawei MediaPad M5 Lite BAH2 Kirin 65x (B)
Huawei Nova 2i / Mate 10 Lite RNE Kirin 65x (B)
Huawei P Smart 2018 FIG Kirin 65x (B)
Honor 6 Plus PE Kirin 925
Honor 7 PLK Kirin 935
Huawei P8 GRA Kirin 935
Honor 8 Pro / V9 DUK Kirin 950
Honor 8 FRD Kirin 950
Huawei P9 Standart EVA Kirin 950
Honor 9 STF Kirin 960
Huawei Mate 9 Pro LON Kirin 960
Huawei Mate 9 MHA Kirin 960
Huawei MediaPad M5 CMR Kirin 960
Huawei Nova 2s HWI Kirin 960
Huawei P10 VTR Kirin 960

Alternatives

HCU Client

As far as I know, there is currently only one tool that can deal with newer CPUs — HCU Client.

This software requires a license, the most affordable plan is 3 days of access for €19.

See supported models by HCU Client here.

Note

Timed licenses locked to first used PC for two days. Therefore, it would be problematic to use such a license on more than one phone.

Disclaimer: I am not affiliated, associated, authorized, endorsed by, or in any way officially connected with UAB Digiteka, or any of its subsidiaries or its affiliates, including DC-Phoenix and HCU Client.
from https://github.com/mashed-potatoes/PotatoNV

No comments:

Post a Comment