[T-Mobile myTouch 4G Slide] Blue6IX:
Return to Contents Page - doubleshot Developers Reference

In This Post I channeled the info I found for making S-ON for the sensation - the posts leading up to this I had a halfway decent idea on how to do it but here's where the info came from:

Guide to Installing S-off, Unlocking, ClockWork, Root, SuperCID & S-on

Thanks to the people over in the Sensation forums who mostly figured this out.

Specifically, this post was the piece of info needed, everything else is a detail:

There is a warning surrounding all S-ON how-to's that i've seen that says you could brick. Consider yourself warned.

I personally was willing to risk my device even though I was kinda making it up as I go - the risk was worth the potential gain. Sometimes you just gotta lay it on the line for the greater good.

I had to try this without an official (or any...) RUU as every instruction calls for so I Kinda took the plunge with the best of what I had available. I managed to make it work without an RUU and in my search for one turned up a more recent PG59IMG.zip file we didn't yet know about, so it was a win.

I've been flipping S-ON and S-OFF (rev method) back and forth now for a couple of resets/restores etc... on the device, and no brick even without the RUU we don't have.

Here's how...

NOTE: Only have done this with a device with no SIM so far.

First - you need to do this:

Step-by-Step:

What you need:

- MicroSD card.

- A PG59IMG.zip file ( Links here )

How to make it:

[1] - Download an image linked here.

[2] - Rename it to PG59IMG.zip

[3] - Format your MicroSD card in the computer.

[4] - Transfer the image from the computer to the MicroSD card.

[5] - SAFELY EJECT the MicroSD card from the computer.

How to use it:

NOTE: Make sure you have a full battery!!!​

[1] - Power off the doubleshot. Remove the battery and MicroSD card.

[2] - Insert new card from above. ( or back up current card, make, and re-insert )

[3] - Replace battery and backplate.

[4] - Holding the 'Volume Down' button, press the 'Power' button.

[5] - Wait for the loading bar to fill.

[6] - When ready, it will ask you if you want to start the update.

[7] - Select yes by pressing the 'Volume Up' button. Press 'Volume Down' if you just realized you have a low battery.

[8] - Allow the update time to flash to your doubleshot.

[9] - Let it sit for a minute or two after it says finished, then press power to reboot.

[10] - Follow on-screen instructions until finished.

Then:

[1] - Reboot the doubleshot.

[2] - When fully booted, open the settings menu.

[3] - Go to "SD & phone storage" and choose "Factory data reset"

[4] - Yes, wipe the sdcard too.

[5] - Follow on-screen instructions until finished.

You now have your doubleshot returned to 'factory fresh' for whatever software package you chose to download, through and through. We showed the method to include the sdcard so you would have the device in a state as close to:

"Just like new!!"

...as possible.​

This is very important to do. The factory reset after the flash is mandatory and must include the sdcard.

If you have a partition mis-match for your version at this point, then you may not be able to fix it, and you could brick unintentionally.

Make sure to minimize this possibility as much as possible by wiping the sdcard with the factory reset so that you don't have any stray files floating around that could cause you harm!​

You should have already backed up the stuff on your sdcard you wanted to keep, that should go without saying for doing this kind of stuff?​

Once this is done, you want to boot up to the stock ROM.

Then go to settings -> power -> uncheck fastboot

Then power off the device.

Give it a minute to settle down, then hold the 'Volume Down' key and press "Power' to boot into the hboot menu.

Choose 'fastboot' by pressing the power button while the highlight box is around that word in the hboot menu.

Once in the fastboot menu, plug into your computer.

Open a terminal window and get to the fastboot directory.

Type:

fastboot devices

...and make sure your device is listed.

Then type:

fastboot oem readsecureflag

should come back with secure_flag: 0

Now type:

fastboot oem writesecureflag 3

and then type:

fastboot oem powerdown

Now the device is powered off.

When next you power on, you will be S-ON with 1.44.0007 hboot and 1.28.531.9 software - back to retail launch condition. Completely.

Power on and get to the stock ROM.

Then go to "Settings" -> "SD & phone storage" and choose "Factory data reset" - Yep, sdcard too - and when this is done:

Congratulations - you are now factory fresh S-ON retail launch.

Check by booting into hboot and seeing it say S-ON or in fastboot mode issuing the command:

fastboot oem readsecureflag

----

What you do next is up to you - you can:

- S-OFF with the rev method

- Return to HTC in S-ON status (warranty?)

- Update your system to come forwad from stock retail.

----

STOP HERE IF JUST FOR HTC SERVICE

--------

SERIOUSLY, DON'T GO FURTHER IF THIS IS JUST FOR SHIPPING BACK TO HTC

----

Let's update:

Reboot your doubleshot to come back up to the full stock ROM.

Turn on wifi if necessary, add to a network and then:

Go to Settings -> About phone -> HTC software updates and then tap "check now"

It will tell you you have an update available, this will be the 1.28.531.10 update.

Follow the instructions for the update, let it install and when it is all finished and boots back up to the stock ROM you will be greeted with the popup:

"updated to 1.28.531.10"

Go to "SD & phone storage" and choose "Factory data reset" (yes for sdcard)

...and when that finishes:

Now you are at the last stopping point for S-OFF right now - you can either run the rev method and get S-OFF again, do nothing, or apply the next update.

----

Let's apply the next update:

(this is the point of no return - once you do this update you are stuck.)

This file was found on a quest for an RUU.

OTA 1.55.531.3 - Install as a PG59IMG.zip file.

When flashing the 1.55.531.3_Update_PG59IMG.zip file:

...on booting into hboot it loaded and then verified the package. Then asked me to update, I said yes and it immediately skipped:

- adsp.img

- boot_signed.img

- dzdata.img

- pg2fs_spcustom.img

- radio.img

- rcdata.img

- recovery_signed.img

- splash1.nb0

- system.img

- tp_atmelc12_20aa.img

...and installed:

- hboot_8x60_DOT_1.45.0013_20111121_signedbyaa.nb0

- ramdisk.img

- rpm.img

- sbl1.img

- sbl2.img

- sbl3.img

- tz.img

...then rebooted to hboot again, reloaded and re-verified the package, automatically continued the install and wrote all the partition images it skipped the first round.

It's obvious that the:

- hboot_8x60_DOT_1.45.0013_20111121_signedbyaa.nb0

- ramdisk.img

- rpm.img

- sbl1.img

- sbl2.img

- sbl3.img

- tz.img

...partition images had to be in place before the other ones could be written.

After it finished and booted all the way up again, I did a factory reset (yep, sdcard too) and then rebooted the device once it was finished that.

Which puts us right here, square at a 1.45.0013 hboot S-ON LOCKED device with 1.55.531.3 software.

For more detail on the whole process, see this posting:

1.45.0013 S-ON locked