Database Users

The right way to get back DRM keys if u unlock the bootloader for custom kernel

WHAT YOU WILL ONLY NEED:
- Windows 7/8 and Flashtool.
- .77 (KitKat) Firmware
- .690 Firmware
- DRM LP fix in your SD card (DRM Function Restoration for Xperia Lolipop V2)
- Androplus LP ADV Kernel (I used Z3_ADV_stock_LP_v2)
- THIS GUIDE WILL RESTORE THE DRM KEYS FOR THE SONY FEATURES TO WORK AGAIN(CAMERA X-REALITY ETC...)
NOT UR ORIGINAL KEYS,
Be sure to have the LP DRM FIX in your SD card prior to flashing stuff.
- If your Bootloader is UNLOCKED, LOCK IT (Relock).
- Don't turn it on. If somehow it turns on, hard turn off it by holding VOL UP and POWER until it vibrates 3 times.
- Flash the .77 FTF (Flashtool).
You're back to .77 (KitKat)
- Let it boot till the language selection screen.
- Power it off.
Now you will be going to Lollipop with old TA features, plus a custom kernel so you can use Recovery.
- UNLOCK your bootloader now and:
- Flash the .690 FTF checking the "TA" box. Which means you are EXCLUDING the TA partition from .690 in order to keep the .77's. This is where the magic lies!
- Right now, you are already on Lollipop.
- Right after flashing it, flash the Androplus ADV LP kernelV2 (get it from the Androplus kernel site). That means you are going to get Recovery functions.
- Right after flashing the kernel, access the Recovery screen (holding VOL UP/DOWN when the Z3's led is purple) and FLASH the DRM Fix which should be in your SD card.

I didn't backed up earlier, Already lost my DRM, can I restore it still :$ ?

shakkirk said:
I didn't backed up earlier, Already lost my DRM, can I restore it still :$ ?
Click to expand...
Click to collapse
yes
look post 1

dennis46419 said:
yes
look post 1
Click to expand...
Click to collapse
U shure? If he did no backup and unlocked bl, they are gone as far as i know

shakkirk said:
I didn't backed up earlier, Already lost my DRM, can I restore it still :$ ?
Click to expand...
Click to collapse
Same question here. It is not clear from the first post whether this restores DRM after losing it.

I'm guessing it will work without original backups as there is no part of the tutorial where you restore from a back up. Looks more like a return to stock from any state.
Not that I'm an expert, last Sony I had was a Z1.
Sent from my Nexus 5

This guide will restore the drm keys for the sony features to work again(camera x-reality etc...)
not ur original keys,,added zip drm restore zip in first post

Deleted

I'am not sure if I got this right, please correct me if I'm wrong:
So using this method I will end up with a custom kernel with custom recovery and still got all Sony DRM features that are usually lost when unlocking the bootloader. How exactly does this work? My guess is that the TA partition is not deleted directly by unlocking the bootloader but when booting into Android by the CredentialManagerService. And this hack simply prevents the CredentialManagerService from deleting the TA partition. Am I right?
Edit: I think I got it wrong. This will only restore the Camer and Display features, but not Miracast. Am I right?

Thenetstriker said:
I'am not sure if I got this right, please correct me if I'm wrong:
So using this method I will end up with a custom kernel with custom recovery and still got all Sony DRM features that are usually lost when unlocking the bootloader. How exactly does this work? My guess is that the TA partition is not deleted directly by unlocking the bootloader but when booting into Android by the CredentialManagerService. And this hack simply prevents the CredentialManagerService from deleting the TA partition. Am I right?
Edit: I think I got it wrong. This will only restore the Camer and Display features, but not Miracast. Am I right?
Click to expand...
Click to collapse
Yes i think, i didn't test miracast

I did this procedure and it seems to have worked. I had some trouble with flashing when the bl was locked. I had to keep it unlocked the whole time. I had to flash several times due to some error messages in the flash tool.
After doing this can I flash a different LP customization (the US one) while keeping the TA information or do I have to downgrade to KK first, then go back to LP, doing this whole process again?

scottjb said:
I did this procedure and it seems to have worked. I had some trouble with flashing when the bl was locked. I had to keep it unlocked the whole time. I had to flash several times due to some error messages in the flash tool.
After doing this can I flash a different LP customization (the US one) while keeping the TA information or do I have to downgrade to KK first, then go back to LP, doing this whole process again?
Click to expand...
Click to collapse
Glad hear that worked, now remember everytime u flash a lolipop rom u have to flash again the drm restore zip and then reboot from recovery

frago21ps said:
Glad hear that worked, now remember everytime u flash a lolipop rom u have to flash again the drm restore zip and then reboot from recovery
Click to expand...
Click to collapse
Thanks. Do I only have to flash Lollipop, excluding TA in Flashtool, then the DRM restore zip? Or do I have to go back to KitKat each time?

scottjb said:
Thanks. Do I only have to flash Lollipop, excluding TA in Flashtool, then the DRM restore zip? Or do I have to go back to KitKat each time?
Click to expand...
Click to collapse
No just flash the lop without ta in flastool, no need to go back

frago21ps said:
No just flash the lop without ta in flastool, no need to go back
Click to expand...
Click to collapse
Question, how can you relock your bootloader if you don't have your TA backup?
Sent from my D6603 using XDA Free mobile app

ondrejvaroscak said:
Question, how can you relock your bootloader if you don't have your TA backup?
Sent from my D6603 using XDA Free mobile app
Click to expand...
Click to collapse
From flastool

frago21ps said:
From flastool
Click to expand...
Click to collapse
Of course
Dumb me.
Sent from my D6603 using XDA Free mobile app

what if i directly flash the zip from cm12's recovery maintaining the bootloader locked? (lazyness over 9000)

Anyone tested going from .77 KK to 23.1.A.0.726 ? There's no .690 for D5833

Waiting for confirmation that the AndroPlus kernel will wok on .726.

[GUIDE] Lock/Unlock/Relock Bootloader Using TWRP With DRM keys

Hello Guys!
This Guide Is for those who use Computer,Laptops Rarely BUT For This u will Need A PC for First Step!
Lets Get started.
Requirements :-
Flashtool For PC.
Working TWRP Recovery.
Root Is Obvious.
Procedure :-
-First Backup your DRM Keys By Using Backup TA Tool.
-Then open flashtool and Hit The BLU button.
-Connect device In flashmode when it prompts.
-Then Unlock your Bootloader by the code you have received.
[Note - Unlocking bootloader for first time will wipe out your whole data including internal memory]
-After Unlocking Boot into TWRP recovery.
-Goto>Backup>Select TA and Start the process. (Rename the backup as UNlock BL if u want)
-Now Relock your Bootloader again by using Flashtool By hitting BLU button.
-Boot the phone into System and restore the drm keys [Must!]
-After that Reboot into recovery Goto>Backup>Select TA and BOOT IMAGE Also! and Start the process (Rename the backup as Lock BL if u want)
And Done!
Now there will be two backups Named UNLOCK BL and LOCK BL.
So Whenever you want to flash Kernels OR Custom Roms like AOSP,CM,PAC You wont Need a PC to unlock Bootloader!
And Whenever you want to Get back to stock just flash the Stock PRF or Stock Based Rom and Restore (Lock BL Backup) TA and Boot Image!
(Restoring TA From TWRP will also bring back your drm keys)
IF DRM KEYS ARE GONE THE CAMERA GETS WORST IN LOWLIGHT AND WARRANTY WILL ALSO BE VOIDED.
SO THIS GUIDE CAN HELP YOU IF YOU DONT USE PC MUCH AND IN FUTURE U WONT NEED A PC TO UNLOCK/RELOCK BL AND RESTORE DRM KEYS.
Njoy!
Hit Thanx If I helped!

Thnkx bro,worked perfectly for me

Hello working on "bootloader unlock allowed no" ??

daoskar said:
Hello working on "bootloader unlock allowed no" ??
Click to expand...
Click to collapse
Nope.

Quick question
does relocking your bootloader enables OTA updates from Sony !?

chawlasrijan said:
Quick question
does relocking your bootloader enables OTA updates from Sony !?
Click to expand...
Click to collapse
Yes!

SonyRiFle said:
Yes!
Click to expand...
Click to collapse
Thnx, was just making sure

chawlasrijan said:
Thnx, was just making sure
Click to expand...
Click to collapse
No problem As it restores the drm keys u'll get OTA updates and warranty will also b not voided

Never thought of unlocking and relocking this way
Thanks

sshivampp said:
Never thought of unlocking and relocking this way
Thanks
Click to expand...
Click to collapse
I also nvr thought of...Just gave a try n it worked... I Got this idea A year ago...Shared it now

daoskar said:
Hello working on "bootloader unlock allowed no" ??
Click to expand...
Click to collapse
You can unlock the bootloader by s1tools for xperia

SonyRiFle said:
You can unlock the bootloader by s1tools for xperia
Click to expand...
Click to collapse
Really? On which devices? How exactly?
And I have a question about OP.
Can I change the order the backuping TA partition in TWRP?
So may I make a backup from locked BL and TA before I unlocking my BL? Then I unlocking and making backup from unlocked TA or I just can make in your order? (Unloking - > making backup from unlocked BL -> relocking -> making backup from locked BL)
Thanks in advance.

air001 said:
Really? On which devices? How exactly?
And I have a question about OP.
Can I change the order the backuping TA partition in TWRP?
So may I make a backup from locked BL and TA before I unlocking my BL? Then I unlocking and making backup from unlocked TA or I just can make in your order? (Unloking - > making backup from unlocked BL -> relocking -> making backup from locked BL)
Thanks in advance.
Click to expand...
Click to collapse
First backup Locked BL...It will save your drm keys intact

Sony DRM Fix (NEW!) PoC -- Fantastic News!

none
Moderator edit: attachment removed at Developer's request. Please do not post work of other's without their express permission

I still dont understan how to use the tool, but gonna read it again later when Im home
So excited!
Gesendet von meinem E6653 mit Tapatalk

This was my personal history, but follow the link to the thread for more information regarding the tool sir

Sir to what i have Understood.
this TOOL makes your unlocked bootloader looks like bootloader was NEVER UNLOCKED
but in order to do that! you need to have Extracted original TA.img file of your device.
its like having Privelage over having original DRM keys with faking bootloader as locked...
since i unlocked by Bootloader and never backedup my TA so i cannot use this tool ( E6833)
Please correct me if i am wrong

Am i correct in thinking that there is no point using this if I unlocked my bootloader before it was possible to backup TA partitions

Millsy242 said:
Am i correct in thinking that there is no point using this if I unlocked my bootloader before it was possible to backup TA partitions
Click to expand...
Click to collapse
seems like that way!
when i lost my DRM KEYS i lost my TA (Trim Area) partition details with it
Had I Backed up my DRM KEYS, i would had automatically backedup my TA.img
I really sometime feel so angry at sony
everything about them is THE BEST but YET not PERFECT
why cant they make life simple? when I am paying for device and they are offering Unlock KEYS! why there is "DEAL WITH THE DEVIL" Catch !!!

Read original thread, all informations exist in thread.
IF YOU HAVE NOT TA BACKUP,
YOU CAN'T USE THIS TOOL.

sceryavuz said:
Read original thread, all informations exist in thread.
IF YOU HAVE NOT TA BACKUP,
YOU CAN'T USE THIS TOOL.
Click to expand...
Click to collapse
RIGHT.

Can you back up your ta partition without root though?

Good thing i backed up TA, i had no idea what it is, bt i backet it up haha. The thread says dont use drm fix, but what if i use kernel with drm fix and rom with drm fix, now what?

klemen241 said:
Good thing i backed up TA, i had no idea what it is, bt i backet it up haha. The thread says dont use drm fix, but what if i use kernel with drm fix and rom with drm fix, now what?
Click to expand...
Click to collapse
+1, whatif you re using a rom or kernel with drm fix and also tha tool only restores TA backup... So we still need to disable Sony RIC, DRM Verity, TWRP using another tool right cos in tha link posted, it shows dat we can't use with tobias tool!
Thanks!

So i still can't use this tool, and the reason for that is just like the other users have explained.
That tool restores the TA or short to say , only to fix the DRM.
But to have the root, we still need the patched kernels.
At the moment we dont have any patched kernel without the DRM Fix.
Thats why its still kinda pointless since we still dont have the patched kernel without the DRM fix.
I have already asked somebody to make a patched kernel without the DRM fix. And then we can use that kernel for the purpose of using the PoC DRM Fix.
If its susccessful, we have full drm fix and working root

chitose_ndy said:
So i still can't use this tool, and the reason for that is just like the other users have explained.
That tool restores the TA or short to say , only to fix the DRM.
But to have the root, we still need the patched kernels.
At the moment we dont have any patched kernel without the DRM Fix.
Thats why its still kinda pointless since we still dont have the patched kernel without the DRM fix.
I have already asked somebody to make a patched kernel without the DRM fix. And then we can use that kernel for the purpose of using the PoC DRM Fix.
If its susccessful, we have full drm fix and working root
Click to expand...
Click to collapse
lol, we have patched kernel without DRM fix.
use tobias one and just say NO when it asks: "Install DRM fix?"

Aklo01 said:
lol, we have patched kernel without DRM fix.
use tobias one and just say NO when it asks: "Install DRM fix?"
Click to expand...
Click to collapse
Oh im gonna try it now
---------- Post added at 06:15 PM ---------- Previous post was at 05:55 PM ----------
Incase somebody needs the patched kernel without drmfix also >>> https://www.mediafire.com/?q7a661a0aru0jk0
RIC Disabled
TWRP Installed
Busybox Installed
Superuser not yet installed

I recently got a Z5 and I just found this thread, I want to install an AOSP ROM and of course try this fix. Everybody mentions making a backup of the TA partitions (DRM keys) but all the guides I've found are for lollipop or rooted devices. Does anybody know how to backup the DRM keys on a Nougat stock kernel without root?

fcastillousfq said:
I recently got a Z5 and I just found this thread, I want to install an AOSP ROM and of course try this fix. Everybody mentions making a backup of the TA partitions (DRM keys) but all the guides I've found are for lollipop or rooted devices. Does anybody know how to backup the DRM keys on a Nougat stock kernel without root?
Click to expand...
Click to collapse
Reading is an Art
That isn't possible.
You need temp root on lollipop and backup ta then.
It's a Sony, one of the toughest phones

Duvel999 said:
Reading is an Art
That isn't possible.
You need temp root on lollipop and backup ta then.
It's a Sony, one of the toughest phones
Click to expand...
Click to collapse
I guess I'll have to downgrade and use an exploit to root (without unlocking bootloader) and then do the backup then? I was hoping for a different way, oh well.....

fcastillousfq said:
I guess I'll have to downgrade and use an exploit to root (without unlocking bootloader) and then do the backup then? I was hoping for a different way, oh well.....
Click to expand...
Click to collapse
Yes. The only way

Any methods of bringing Sony DRM Exclusive Features like BionZ, Steady Shot, Bravia to AOSP?

I have always used the rootkernel tool on my z5c. But i was curios to test this PoC out.
First i used the rootkernel tool and did not chose drm fix.
i run the PoC tool on the boot.img i just moded with rootkernel.
Flashed the boot.img, flashed recovery and flashed supersu to get root.
Here is my question:
i can´t see any differnece when i look in the service menu.
Look´s like the rootkernel tool and the PoC tool does the same.
Keys was activated with rootkernel tool and they are activated after i used the PoC tool.
Service menu shows, bootloader unlock allowed, with rootkernel drm fix boot.img and PoC boot.img
What am i missing here??

Camera broken after Bootloader Unlock & Relock

Yesterday i've unlocked the bootloader and try AOSP.
Then i go back to stock rom and relocked the bootloader.
Now camera app always say, another application uses the camera and won't start.
alternative camera apps also don't work.
don't backup any drm keys.
is there any chance to get it working?

[-silver-] said:
is there any chance to get it working?
Click to expand...
Click to collapse
You'll need to flash a stock rom and wipe everything in the process.

I had the same problem and flashing using the flashtool with all wipe options checked didn't fix the problem. Any other ideas?

mistarose said:
I had the same problem and flashing using the flashtool with all wipe options checked didn't fix the problem. Any other ideas?
Click to expand...
Click to collapse
I would assume that relocking it without the DRM keys has broken it. To rewrite the TA backup img to the phone you have to use flashtool version 922.3 If I was in your position with or without a drm backup I would try using that version of the flashtool to flash a FW and try the relock procedure again to see if it makes a difference. Have you unlocked it again to see if it brings the camera back?

XperienceD said:
I would assume that relocking it without the DRM keys has broken it. To rewrite the TA backup img to the phone you have to use flashtool version 922.3 If I was in your position with or without a drm backup I would try using that version of the flashtool to flash a FW and try the relock procedure again to see if it makes a difference. Have you unlocked it again to see if it brings the camera back?
Click to expand...
Click to collapse
Ok I unlocked the device again using Sony Mobile Flasher. I'm now flashing an Android 6 ftf file from the UK. I have the TA backup img but am not sure how to restore it. Apparently the Backup TA version 1 had a restore option in the CMD menu. But all the 2nd version does is backup a TA partition key from what I can tell.
Any help restoring the key would be greatly appreciated.
Edit: Ok now I've booted up without locking the boot loader and the camera is working. So now I should be able to lock the bootloader and have it stay working right? But how do I do that?

mistarose said:
So now I should be able to lock the bootloader and have it stay working right? But how do I do that?
Click to expand...
Click to collapse
Lets see. Download Flashtool version 9.22.3 and download Rootkernel, use RK to create a DK.ftf from your TA.img then flash that using the 9.22.3 version of the flashtool. To create a DK.ftf open a cmd window in the Rootkernel folder and enter flash_dk TA.img DK.ftf.

Thank you for the help.
I was using a higher version of the Flashtool so I found the 9.22.3 version and got that installed. I found the Rootkernel and used it to create a DK.ftf successfully from my TA.img.
I flashed that successfully and rebooted the phone but it didn't work. This also didn't automatically relock the device like I read it should of.
I then started over by flashing the Android 6.0 ftf file again. Then I used the flashtool to relock the device. Finally, I flashed the DK.ftf file one more time.
I just booted up the phone and now the camera isn't working with the same error I had before. I also checked the security menu of the phone and it still says the DRM files are not there.
I'm really not sure why it's not working.

EDIT: See below.

mistarose said:
I then started over by flashing the Android 6.0 ftf file again. Then I used the flashtool to relock the device. Finally, I flashed the DK.ftf file one more time.
Click to expand...
Click to collapse
Lets try one last thing. From reading the threads here apparently flashing the DK.ftf is only for those with an unlocked BL wanting to keep DRM functions so places the TA in a location that DRM-fix kernels can pickup. To rewrite the original partition you have to do the following...
shoey63 said:
CONFIRMATION OF TA RESTORE!
- Unlocked bootloader
- Flashed TWRP
- Pushed TAbackup.img (I renamed it) to /data/local/tmp
- Did
Code:
adb shell dd if=/data/local/tmp/TAbackup.img of=/dev/block/bootdevice/by-name/TA
- Rebooted
- Everything back as it was. Original TA restored and DRM keys all active:victory:
shoey63 said:
Then flash a stock ftf.
Click to expand...
Click to collapse
NOTE/EDIT: Due to dm-verity, you cannot restore TA on a rooted phone (Z3+ onwards). It won't boot up. Boot and system have to be pure untouched stock.
Click to expand...
Click to collapse
...if this way fails then it's time to talk to Sony or just run an unlocked BL permanently.

Flashing DK.ftf isn't enough. You need to make a boot.img with DRM fix as well using rootkernel.

shoey63 said:
Flashing DK.ftf isn't enough. You need to make a boot.img with DRM fix as well using rootkernel.
Click to expand...
Click to collapse
They're trying to relock but the camera stops working when they do so just trying any method at this point.

Need info in how to root the phone without losing DRM Keys/ TA Parition

Hello guys, I want to install a custom rom, but I'm aware of the losing of the drm keys when unlocking the bootloader.
I have found some info about downgrading the phone to Marshmallow version, installing a exploit in order to backup the DRM Keys and even rooting the phone, well I just want to create a backup from the TA partition and DRM Keys in order to restore in the case if I want to return to 100% stock.
Is there a way to create this backup on this phone? I have experience in flashing, downgrades, modding, etc... Any tip will be really appreciated!
Thanks!

nameless-- said:
Hello guys, I want to install a custom rom, but I'm aware of the losing of the drm keys when unlocking the bootloader.
I have found some info about downgrading the phone to Marshmallow version, installing a exploit in order to backup the DRM Keys and even rooting the phone, well I just want to create a backup from the TA partition and DRM Keys in order to restore in the case if I want to return to 100% stock.
Is there a way to create this backup on this phone? I have experience in flashing, downgrades, modding, etc... Any tip will be really appreciated!
Thanks!
Click to expand...
Click to collapse
https://forum.xda-developers.com/crossdevice-dev/sony/universal-dirtycow-based-ta-backup-t3514236

levone1 said:
https://forum.xda-developers.com/crossdevice-dev/sony/universal-dirtycow-based-ta-backup-t3514236
Click to expand...
Click to collapse
Thanks man!