Hi, I'm new to the forum and was wondering if someone could help me just clarify a few things specific to my S9 that I am trying to remove frp from.After trying a lot of the youtube guides on bypassing the FRP using the "easy tools" and failing I thought of reflashing the OS. Since that doesn't exactly just work and you need a combination file, I was looking to figure out what combo file I need. The number from recovery menu is 10/QP1A.###/G960WVLS7ETH1 and the IC on the back of the phone is 649E-SMG960U.I found a tutorial saying you can make the combination file from the official firmware, but after getting that from SamMobile I could not find the sboot.bin.Iz4 in BL section. Then I tried looking online for a faster download of my firmware but none had the exact numbers right or the correct files in BL. (They had the right Ap files though). I also tried looking for a combo file directly but the same problem is I don't know the exact numbers/version that I need to make sure its correct for me to apply it into ODIN.I found a few links to combo files but they are all usually for android 8
Samsung SM-G960W Combination File ROM (Flash File)
Download Samsung SM-G960W Combination File (original flash file, rom) without any password for Free. We also provide the combination file for all Samsung devices.
samsungcombinationfile.com
Samsung Galaxy S9 SM-G960W Combination Firmware
Samsung Galaxy S9 SM-G960W Combination Firmware Samsung G960W Galaxy S9 Combination Firmware is a stable
www.full-repair-firmware.com
I just need to figure out what the software version (or baseband version?). Some threads say your phone model number must be the same and others say it only matters for the processor to be the same. Can I download the G960U files instead of a G960W or am I reading the wrong thing. Also can someone help with the bootloader version / build version. I think it is bootloader version 7 but its in place of the U that is written in most guides. and then the revision would be 1 right?Just would like some confirmation that I am looking for the right file. By what I have looked into so far the combo file with version G960U + android 8, bootloader version 7, and revision 1 will work regardless of the other numbers. or does it have to be G960W? F? X? any letter that has the same processor? Anything else I need to make sure of, is there an easier way to remove frp?Any help is appreciated, Thanks!
Update: Finally got into my frp locked S9. For anyone wondering I went with the combination file titled: COMBINATION_FAC_FA80_G960USQU7ASJ1_FACFAC_CL13230190_QB26521439_REV01_user_mid_noship_MULTI_CERT.tar that I got from the second link above.
I can conclude that the version of android does not make a difference since the combination file is simply like entering safe mode on your device. I'm not an expert but the SM-G960U file worked on SM-G960W phone and I made sure to get a file with same boot loader version and revision number, ignoring the letters that tell dates. From there I was able to OEM unlock and then reinstall the latest firmware I got from SamMobile.
Hi, I also needed to remove the google frp on my phone. I've tried so many different solutions online but nothing would work. ive tried every file in the link you've posted. a lot would Fail when it was loading it into my phone through Odin. always got Auth Fail or some other failure. some would cause infinite boot loop. some i couldnt use because it had password protection to unzip, i doubt it would have worked anyway lol.
My phones recover screen code or PDA? was G960WVLU9FUE2 I do not know what any of the letters or numbers mean after G960w, but i assume the 9 and the 2 are what are important and no files online match those numbers in the same file. I actually didnt find any combination files for U9 without needing to pay for it.
In the end i ended up just guessing the pattern password. I found a glitch that lets me keep guessing without a timer cool down. Now idk if this glitch is caused by my attempts of using these combination files then restoring it with the files from sammobile. but the glitch is easy to do.
First i did a factory reset. then when it boots up it asks to enter a network then to enter the pattern or sign into google. i dont know both so i started guessing the pattern. after a few tries it starts giving a timer cool down. I noticed you can bypass this timer by simply turning the screen off and on, then u can attempt again. when you fail the timer is still counting down from the previous attempt. like a 30 second cool down, but after screen turn off and a failed guess, the timer would be counting from like 22 seconds. then another attempt the timer would be at like 8 seconds until it resets back to 30 seconds when the timer runs out after another failed attempt.
I hope this info helps others get into their phones if Odin can't help you. Even if guessing passwords is a long tedious task.
Here's a tip for guessing node patterns. most people start from the top left corner and usually only use 5 maybe 6 nodes.
Related
My SGH-T999 ids itself as SGH-i747 in download mode. Is this typical/normal? I'm having trouble flashing full ROM tars with Odin. I can flash other things with it, like CM, but never a full ROM. I'd appreciate it if one or more people could check theirs and report back, or if you just know this is normal (or isn't!) if you could please just let me know.
If you're curious and want more background, look in this thread here where we're trying to troubleshoot:
http://forum.xda-developers.com/showthread.php?t=2672790&goto=newpost
Thanks, all.
UPDATE:
Just thougth I'd update this for anyone who stumbles on this thread in the future.
While everything about the phone from the outside and most of the stuff shown by Device Info indicated it was in fact a T999, apparently it did have an SGH-i747 bootloader. I overwrote that bootloader with an SGH-T999 bootloader, and hardbricked it.
So don't do that.
Talked to a JTAG-er who said that if the download screen says SGH-i747, it has an i747 motherboard.
Word of caution to others who end up with a refurb frankenphone.
Well, it looks like it happens sometimes, anyway.
But this solution won't help me, as the problem is bigger than this.
http://forum.xda-developers.com/showthread.php?t=2088220
What is the Model Number Listed behind the Battery on the White Sticker ? Also which TAR packages you have been trying to flash ?
Sticker says SGH-T999
When you say its i747 in Download mode, did you mean the "Downloading" screen on the phone ? If that's not it, then please specify.
Perseus71 said:
When you say its i747 in Download mode, did you mean the "Downloading" screen on the phone ? If that's not it, then please specify.
Click to expand...
Click to collapse
Sorry, I didn't see this thread update. I thought we were talking on the other thread once I saw you posting over there.
Yes, that is the screen I mean. The downloading screen. (vol down, center-button, power, little android guy, yellow "you've modified this puppy" triangle, flash count=1, QUALCOM SECUREBOOT, etc etc) That's the ONLY place I see i747. Sticker and build.prop file both say t999.
The build.prop file that came with it also identified it as a t999, but I got that replaced when I flashed a TMO image with CM. Did NOT change what shows up in download mode.
My theory is that the previous owner flashed an ATT image to the phone since the settings in the "original" build.prop file were for ATT in Canada, region was set to CN, and the language was set to zl or something similar. That file is on my machine at work ... don't have access to it right now, but point being, that build.prop also had the device properties set to a t999, i747 appeared nowhere in the file.
So, something on the phone is causing the download screen to show up as an i747. I'm thinking -- but I'm looking for alternate theories if someone doesn't think this is right -- that it's in one of the initial boot files. I don't know where the binaries are that run the download screen, but I think it's a good bet it's in aboot or one of the sbl files. I'm hoping someone can help confirm or deny or say "nobody knows, let's have a beer" or whatever.
I've tried to flash the TMO-UVDMD5 firmware (which does replace those files -- or it *would* if it would flash) from a zip file in CM ... but it fails on the assert(getprop... which is checking for d2tmo in either one of two properties. It's obviously not getting d2tmo. Whatever it's getting can't be getting it from the build.prop file, as both of those properties are set to d2tmo in /system/build.prop
My bet is that the Odin flashes are failing for the same/similar reason. There is something in the binaries on the phone that the flashing software doesn't like. I know it's safety checks trying to save me from myself, but this is not a normal situation - good chance the programmers did not anticipate this.
Now ... the long of it is, my IMEI was wiped and I need to restore it. But the IMEI restoring software won't talk to my phone because it uses RMNET and the RMNET driver loads and then dies within a minute after the phone connects. I suspect for the same/similar reasons that Odin won't flash a whole ROM and CM scripts cack out on checking to see what kind of phone it is through getprop.
I'm looking to build the phone from as low a level as I can to its original state as an SGH-T999. And then restore my IMEI.
Just thougth I'd update this for anyone who stumbles on this thread in the future.
While everything about the phone from the outside and most of the stuff shown by Device Info indicated it was in fact a T999, apparently it did have an SGH-i747 bootloader. I overwrote that bootloader with an SGH-T999 bootloader, and hardbricked it.
So don't do that.
Talked to a JTAG-er who said that if the download screen says SGH-i747, it has an i747 motherboard.
Word of caution to others who end up with a refirb frankenphone.
Hi there,
I recently purchased a Tab S 10.5 off of eBay from a seller that said they'd messed up a custom ROM installation and with a cursory amount of research I saw that it was possible to return it to factory and had no issue putting in the leg work to get it done. However, I'm finding that my own knowledge of rooting and custom ROMs isn't sufficient for this situation now that I've gotten stuck into it. The tablet shows the Tab S logo and then immediately displays a message that says the software isn't official ATT and to return to a store for assistance. When I try to boot into the recovery menu I'm met with a screen that has a large android and says, 'Downloading...' and I can't get any further there either.
I've tried flashing recovery files with Odin but they have all failed and have also tried the Turkish image and it just sits at, '<ID:0/004> SetupConnection.." and doesn't initialize.
I've also gotten a, 'NAND StartWrite FAIL!!' notice as well.
I got the thing for a steal and would love it if it were possible to return it to factory and was just curious what kind of options I had at this point. Are there any program alternatives to Odin or different recovery files to use mayhaps?
I'm wondering if buying a new logic board would fix the issue at this point but, wanted to double check that it wouldn't cause any differing problems than the issue I'm experiencing now.
Edit: Odin finally got passed the, 'SetupConnection' line for the Turkish image and displayed this next: '<ID:0/004> Can't open the serial(COM) port.' - This is the first time it's displayed this message and I'm not sure what to do about this either.
T807a firmware isn't available afaik.
ashyx said:
T807a firmware isn't available afaik.
Click to expand...
Click to collapse
Are there any other versions of the firmware that would work instead?
Regarding the rest of my questions, I'm really just interested at this point if replacing the logic board would fix the issue. If anyone has tried that at least.
So I found this Tab S4 on eBay... and I got it for $330! And the only reason why it was so cheap is because it had a Google Account Lock, and no S Pen or accessories or anything (but mostly because of the Google account lock).
*And by the way: Mod's, if you're not okay with this post, just get rid of everything except the combination ROM*
He titled it "* BROKEN Samsung Galaxy Tab S4 64GB, Wi-Fi, 10.5 in - Black, SM-T830, AS-IS" and listed it as "For parts or not working." which... who knows why when it's not broken or anything, but he put in the description "This unit is Google Account Locked due to an abnormal factory reset. We cannot get past the Google account screen to test any further. It could have other problems. It is sold for Parts use only.", but I knew I could bypass it myself. I've had experience with people locking themselves out, or buying something locked. But if it had Samsung Reactivation Lock, I wouldn't of been able to pass it.
Anyways... I was looking for a combination ROM but the only one I found was on a paid website called Firmware Gem Flash, so I'm going to upload it to a cloud sharing website so you can get it for free since that's not even okay that you have to pay for a file made by Samsung even though I did, but uploaded by a different person. And I'm not sure if that's even allowed. (The combination ROM here at the time of this is the latest Combination ROM for the latest installed update which works on older update's: U2)
So here's how to bypass the Google Account Lock. If you have a different model number, let me know in the comments below, and I'll download & upload the file for you. I still have their subscription package.
Step 1: Download the files (Combination firmware (broken link updated... if the link is broken again, go here), stock firmware, and modded Odin, then extract the ZIP's.
NOTE: There are now 4 combination ROM files in the OneDrive folder. There's U1, U2, U3, and U4. Whatever version your Galaxy Tab is (the binary version, aka the number that shows after the letter U, download that file. The U number is near the end of the file name. You can find out which binary version you have by going to recovery and looking at the top.)
Step 2: Power your Tab S4 down and press and hold the volume up and down buttons at the same time, then plugging it into the computer. When a blue screen appears, press volume up
Step 3: Flash the combination ROM firmware in Odin in the AP slot on your Tab S4, and when it's finished, reset it through recovery by pressing and holding volume up + power
Step 4: When it boots up, get to the settings by getting to the notifications, and tapping settings. Then, look for reset. And reset it.
Step 5: Once it boots up again after the reset, power it down, then press and hold volume up + down, then plugging in the cable again into the computer. When the blue screen appears, press volume up.
Step 6: Reset Odin by clicking reset at the bottom, load the stock firmware files by clicking BL and selecting the file with BL, and so on. Ignore the HOME file. Then flash. Tip: You should see the FRP status be "Off" at the top left of the tablet. That means you're in the clear!
After that, you should be able to use your Tab. So if you run into a situation where you find one of these on eBay, or you forget your password and lock yourself out, this should help. Thanks for reading! Hope I helped!
i found this page with U4 base https://firmwarex.net/samsung-tab-s4-sm-t830-9-0-official-firmware/ Wrong link delete post please
question about step 3
Step 3: Flash the combination ROM firmware in Odin on your Tab S4, and when it's finished, reset it through recovery by pressing and holding volume up + power
What is the combination ROM firmware and where do I get it?
I went through all the steps and still have the google lock
marvinc said:
Step 3: Flash the combination ROM firmware in Odin on your Tab S4, and when it's finished, reset it through recovery by pressing and holding volume up + power
What is the combination ROM firmware and where do I get it?
I went through all the steps and still have the google lock
Click to expand...
Click to collapse
It's there now.
I got to the factory binary .. but cant load the final files
the combination rom downloaded and install and I get the factory biniary boot
the XEF-T80xxuar ..... will not download in windows with firefox
when I download in linux and transfer it it will not install.
I seems to be downloading now with chrome
nothing will install ... I am using odin v.3.13.1 might that be the problem?
Modded Odin v3.13.1 Raymonf.zip
I was able to reload the combination file again ... no problem
when I tried to install the other files
this is what happened :
The firmware that you posted the link to was too old for my tab S4 I downloaded the latest version and it worked
I now have the latest US version, others can save the 4 to 8 hrs of download
XAR-T830XXU2ARK4_T830OXM2ARK4-20181203.zip
https://drive.google.com/file/d/1hvf4ge2o0UkzOcAzEjKFkuEzrJP1OTjK/view?usp=sharing
thanks for the help
The tab S4 is a great table ... a step up form the S3
Question
@marvinc do you think you could share that file via google drive?
marvinc said:
The firmware that you posted the link to was too old for my tab S4 I downloaded the latest version and it worked
I now have the latest US version if you tell me where and how to post it, others can save the 4 to 8 hrs of download
XAR-T830XXU2ARK4_T830OXM2ARK4-20181203.zip
thanks for the help
The tab S4 is a great table ... a step up form the S3
Click to expand...
Click to collapse
I now have the latest US version if you tell me where and how to post it, others can save the 4 to 8 hrs of download
XAR-T830XXU2ARK4_T830OXM2ARK4-20181203.zip
https://drive.google.com/file/d/1hvf4ge2o0UkzOcAzEjKFkuEzrJP1OTjK/view?usp=sharing
Question
@marvinc Do you have a google drive link for this firmware? XAR-T830XXU2ARK4_T830OXM2ARK4-20181203.zip
XAR-T830XXU2ARK4_T830OXM2ARK4-20181203.zip
@smack22
sorry I uploaded the wrong one. This is the correct one :
https://drive.google.com/file/d/1hvf4ge2o0UkzOcAzEjKFkuEzrJP1OTjK/view?usp=sharing
Hey if your still able to obtain it could you get me a link for the combination file for a sm-t837t tab 4, I would really appreciate it, thank you... I cant find one anywhere
dannydmit said:
Hey if your still able to obtain it could you get me a link for the combination file for a sm-t837t tab 4, I would really appreciate it, thank you... I cant find one anywhere
Click to expand...
Click to collapse
The one I used is listed in the first post of this thread "Step 1".
marvinc said:
The one I used is listed in the first post of this thread "Step 1".
Click to expand...
Click to collapse
The onedrive folder is empty and does not contain the combination rom. I attempted to download it also.
Problems with SM-T837P
Can anyone help me find the firmware for the SM-T837P model of the Samsung Galaxy tab S4? I just got one that was locked for 190$, but am having trouble finding the firmware, and going through the process of flashing it. Thanks ahead of time!
Is there an new combination Rom for devices on Android 9.0 pie the COMBINATION_FAC_FA81_T830XXU1ARG4 Rom seems be failing for me is there a newer one out?
I'm looking for the combination ROM too. Will appreciate a download link.
I also picked up the S4 Tab from a second hand shop in the Middle East and hence do not know which country's ROM is on it. I guess the country will not matter for now as I can always put on another ROM later, right?
After a bit of a search, for Combination File Samsung S4 Tab, I managed to get hold of 2 combination files for my T835. The files were named:
COMBINATION_FAC_FA81_T835XXU1ARG4 &
COMBINATION_FAC_FA81_T835XXU2ARI2
Would someone let me know which of the 2 is the latest and will the method in post 1 work for the T835?
For those looking for the combination files, I got it from here:
https://combinationfirmware.com/combination-samsung-galaxy-tab-s4/
As mentioned above, I got those 2 combination files (about 2.5GB each) and am currently downloading the stock firmware for my T835.
Can someone please let me know in odin, do I load the combination file under BL or AP or CP or CSC?
The stock firmware I note has to be loaded through BL.
Edit: I just finished downloading the stock firmware and see that it includes the BL, AP, CP, CSC & HOME files. Do I load each in their respective slot or should I just flash only the BL file?
Please help. Thanks
Edit 2: Ok! Never mind ... I got to do it myself. Checked out a video on Youtube in a language I did not understand but still managed to figure out that the combination file has to be selected from AP in Odin.
A big thank you to the original poster from whom I understood the possibility of doing it this way.
i have been trying to fix my tab s4 by flashing T830XXU1ARG4 but keep getting FAIL! (Auth) errors. can anyone help? my tab is a SM-T830 wifi usa model. i have found a few other combination ROMs but im too confused atm.
Combination for SM-T830:
COMBINATION_FAC_FA81_T830XXU4ASH1
COMBINATION_FAC_FA81_T830XXU3ASG1
COMBINATION_FAC_FA81_T830XXU2ARI2
COMBINATION_FAC_FA81_T830XXU1ARH2
droidbot1337 said:
i have been trying to fix my tab s4 by flashing T830XXU1ARG4 but keep getting FAIL! (Auth) errors. can anyone help? my tab is a SM-T830 wifi usa model. i have found a few other combination ROMs but im too confused atm.
Combination for SM-T830:
COMBINATION_FAC_FA81_T830XXU4ASH1
COMBINATION_FAC_FA81_T830XXU3ASG1
COMBINATION_FAC_FA81_T830XXU2ARI2
COMBINATION_FAC_FA81_T830XXU1ARH2
Click to expand...
Click to collapse
Hello, I just finished the process with some difficulties but in the end I succeeded.
My tablet is SM-T830 WIFI only
To perform the first step: did the thing, "Factory binary" I had to used the file COMBINATION_FAC_FA81_T830XXU2ARI2, Because the file COMBINATION_FAC_FA81_T830XXU1ARH2 failed for me. Always shows something like check fail device 2 binary 1.
Than i downloaded this T830XXU2ARK4_T830OLM2ARK4_XNZ using odin.
Compatible Firmware versions
Hello, I just joined and have been doing research on FRP bypass. I can't seem to find the info I need . I'm trying to find the right firmware for my Galaxy tab S4, wifi only 64GB. It is model t830xxu4bsj6.
I see different stock and combination roms in this thread and elsewhere but none match my exact model: t830xxu4bsj6. Can anyone confirm that other T830 roms will work with this version and/ or know of a specific one that has worked in the past.
Thank you for any help you can provide!
Sorry if I'm posting in the wrong forum here, but I wasn't sure where to start.
I got an ATT Note 8 unlocked running Nougat that would not come up on the Verizon network using my working SIM card. I had read that there were known issues with this and that an upgrade to oreo would fix things. Googling around I found an upgrade zip file from N950USQS2BQK2 to N950USQU2CQL1. I used the recovery method to upgrade from that file and at first things seems to be fine. I started having lots of issues with apps dying, eg Contacts, Phone and Bixby and started to wonder if perhaps the OS could be further upgraded. I hunted around and installed the samfirm tool and downloaded the file
SM-N950U_1_20181126150901_ouxwmh265r_fac.zip and extracted out all the parts. Using Odin (13.1) I tried to install this file but it got hung installing
system.img.ext4. Realizing that it would likely cause problems I powered off the phone after a couple of hours with no progress. As expected the phone was pretty pissed off when I tried to boot it up. It was stuck in trying to upload a crash file and took a lot of fiddling around to convince it to go back to download mode, thanks to one of the posts from this site I was able to make it work.
I've tried the same file again and it is stuck again at the same place. So the question is should I be using a different file? If at all possible I'd just like to run the standard Verizon load, in hunting around it seems for the latest Oreo I should use N950USQS5CRK1. but I can't figure out where to get that file in the format that Odin uses I've looked on the firmware.science website but have only come up with the zip version that would work with the recovery mode. Unfortunately with the state my phone is currently in I don't think I can get to recovery mode. It is in the endless upload mode, hitting the down & power button will shut it down but it comes right back to the upload screen. Any advice would be greatly appreciated. Sorry for the rambling post.
rphaddad said:
Sorry if I'm posting in the wrong forum here, but I wasn't sure where to start.
I got an ATT Note 8 unlocked running Nougat that would not come up on the Verizon network using my working SIM card. I had read that there were known issues with this and that an upgrade to oreo would fix things. Googling around I found an upgrade zip file from N950USQS2BQK2 to N950USQU2CQL1. I used the recovery method to upgrade from that file and at first things seems to be fine. I started having lots of issues with apps dying, eg Contacts, Phone and Bixby and started to wonder if perhaps the OS could be further upgraded. I hunted around and installed the samfirm tool and downloaded the file
SM-N950U_1_20181126150901_ouxwmh265r_fac.zip and extracted out all the parts. Using Odin (13.1) I tried to install this file but it got hung installing
system.img.ext4. Realizing that it would likely cause problems I powered off the phone after a couple of hours with no progress. As expected the phone was pretty pissed off when I tried to boot it up. It was stuck in trying to upload a crash file and took a lot of fiddling around to convince it to go back to download mode, thanks to one of the posts from this site I was able to make it work.
I've tried the same file again and it is stuck again at the same place. So the question is should I be using a different file? If at all possible I'd just like to run the standard Verizon load, in hunting around it seems for the latest Oreo I should use N950USQS5CRK1. but I can't figure out where to get that file in the format that Odin uses I've looked on the firmware.science website but have only come up with the zip version that would work with the recovery mode. Unfortunately with the state my phone is currently in I don't think I can get to recovery mode. It is in the endless upload mode, hitting the down & power button will shut it down but it comes right back to the upload screen. Any advice would be greatly appreciated. Sorry for the rambling post.
Click to expand...
Click to collapse
Download this odin firmware and FIRST extract it one time and the files for odin will be in the extracted folder and flash. You must flash AP, BL, CP and CSC all at the same time. Fill all the slots in odin.
https://androidfilehost.com/?fid=11410963190603879881
MrMike2182 said:
Download this odin firmware and FIRST extract it one time and the files for odin will be in the extracted folder and flash. You must flash AP, BL, CP and CSC all at the same time. Fill all the slots in odin.
Thanks for this. One question, I had the same issue the last time, there is a CSC and a HOME-CSC file included in the zip archive, which of these should be used with Odin?
thanks again
Click to expand...
Click to collapse
rphaddad said:
MrMike2182 said:
Download this odin firmware and FIRST extract it one time and the files for odin will be in the extracted folder and flash. You must flash AP, BL, CP and CSC all at the same time. Fill all the slots in odin.
Thanks for this. One question, I had the same issue the last time, there is a CSC and a HOME-CSC file included in the zip archive, which of these should be used with Odin?
thanks again
Click to expand...
Click to collapse
Never mind found that in another post.
thx
Click to expand...
Click to collapse
if I wanna odin without losing data I use home instead of CSC correct?
I would suggest also using Samsung Smart Switch before doing it. It gives you the option to back up pretty much your whole phone including just about all your apps, settings and customizations to an SD card. It also saves your custom icon groups too if you do that. The it makes it a breeze to restore after doing an Odin flash. It has helped save me a time or 2.
Eta: After rereading the OP, looks like you may not be able to use this as you need to be able to boot all the way up.
Right, I was not able to boot so smart connect isn't an option, but luckily it's a new phone so no data to transfer. I did run into an issue using Odin with USB C on my laptop to the phone, I think that is how I got into that predicament in the first place with Odin downloads failing to complete. Works fine with USB 2.
Phone is all set now and working fine. Thanks for your help.
Edit 3: USIC, after further investigation, has confirmed the tablet was actually one lost in shipment and compensated for by insurance, the sale was legitimate (not a stolen device) and they unenrolled it from KNOX before I could ask if they would do so. So, overall a satisfactory outcome, even if the tech part of me wanted to find a way to defeat a technical challenge.
EDIT 2: The device may not be stolen after all, seller has given a plausible explanation. Withholding further judgement until more information comes in.
EDIT: I was originally thinking of 'USIC' as a subsystem of Android or KNOX. A user on Reddit suggested I reach out to the company USIC and see if the tablet was stolen from them. I did. It was. Will be getting the tablet back into their hands and pursuing a refund from the eBay seller. Will leave this post up in case anyone has a use for the technical rabbit hole I went down.
Backstory: Found a good deal on a new Galaxy Tab Active Pro from an IT liquidator company on eBay, it was listed as locked and price reduced because of that. I thought along the lines of 'hardware access is total access' and figured I would be able to wipe / reset it.
Device arrived today, the crippleware (MDM or administration software actually, but I'm feeling ornery at it) installed is Soti Mobicontrol. I can boot into the OS but a bunch of stuff is disabled. First I initiated a factory reset from Settings - it resets and during setup lists "This tablet is protected by Knox Cloud Service. To continue setup, connect to a Wi-Fi or mobile network." From there it states "Your admin can monitor and manage settings".... a bunch of stuff ending with "USIC will manage and monitor this device using the following app: MobiControl" with the only option being 'Accept & continue'.
Tried another factory reset through the boot menu (hold down vol down and power to reboot followed by hold down vol up) - same result.
Found and downloaded the same version firmware the tablet currently has: SM-T540_XAR_T540XXU2BTG5_fac.zip where XAR appears to be the US/Canada region code and T540XXU2BTG5 is the exact version of firmware the tablet currently has installed (verified by going to 'Software information' in settings).
Downloaded latest version of Odin (3.13), booted the tablet into the correct mode and flashed clean firmware (just the AP firmware) to the device. Went through first install sequence to no change in behavior, still installs Soti Mobicontrol as a device admin.
I've looked into maybe getting TWRP installed (so I can delete KNOX from TWRP file browser perhaps as demonstrated here:
) but as far as I can tell there isn't a build for this version of the tablet - closest I can get is for the SM-T547 XDA forum post on it here: https://forum.xda-developers.com/t/...alaxy-tab-active-pro-10-1-snapdragon.4284347/. Also not sure how I would get it installed since I can't enter dev options in the tablet (tapping on Build number, even in safe mode, results in a popup: Action not allowed This action is disabled by MobiControl. Contact your organization's administrator to learn more.)
I've found someone on YouTube (
) who removed the software just by intentionally entering a wrong password until a factory reset tripped - but I am already able to use the factory reset option and the software comes back. I'm thinking Soti Mobicontrol and the KNOX service are separate issues and in this person's example he was only dealing with Soti and not KNOX Enrollment.
Next I found this gentleman on Youtube:
who specifically mentions using the 'Nand erase' option in Odin along with flashing all files in the stock firmware to remove management software. Tried that, no luck. Same as each install I get the message 'Updating... Updating Knox Enrollment Service... X%' after being required to connect to wifi to continue setup with the 'Skip' option greyed out.
So, that's where I am right now with it, and I refuse to give up. Ideas?
@studentoflife don't know this device but might be a chance to flash the multiple part stock ROM you can get via Samfirm_reborn.
bmwdroid said:
@studentoflife don't know this device but might be a chance to flash the multiple part stock ROM you can get via Samfirm_reborn.
Click to expand...
Click to collapse
I am unfamiliar with Samfirm_reborn. What is this project? I can't seem to find much in the way of descriptive notes.
Edit: apologies, did some googling and now know what Samfirm_reborn is. I'm pretty sure I've already flashed all parts of the stock ROM - downloaded the T540XXU2BTG5 version firmware and flashed the BL, AP and CSC images. No CP image given this version of the device does not have a cellular modem.
Hm. I suddenly wonder what will happen if I reflash with the earliest version instead of the current one. I know I don't want to update it to the latest firmware in case that applies some security patch that can't be downgraded and locks out some workaround I haven't found yet, but downgrading... maybe.
I have a similar tablet with mobicontrol. I can't unlock OEM so all the methods of flashing new firmware I tried, failed. Have you had any luck since your last post?