yashsingh1/xdaforums huggingface dataset:
[Motorola Droid RAZR] whirleyes:
@leisures

Since you've wipe your cid partition..

I think you can root by downgrading kernel to xt912 4.0.3 kernel..

You need either boot.img from 6.14.84 or 6.14.85..

then root using the old way.. see xt912 thread for more detail

After finish root.. upgrade your kernel back to EU
[Motorola Droid RAZR] leisures:
I didn't try that kernel.... But Chinese didnt work wont let me flash it.

Enviado desde mi XT910 usando Tapatalk 2
[Motorola Droid RAZR] whirleyes:
The chinese kernel is on old "secure version"...

6.14.84 or 6.14.85 is using current "secure version" & it's the kernel 4.0.3..

If you gonna try, post the result here
[Motorola Droid RAZR] dtrail1:
I will try that too.

@leisures: did you get a fastboot file or even the boot.img?

Gesendet von meinem XT910 mit Tapatalk 2
[Motorola Droid RAZR] leisures:
:D that worked out :D

im back with root again! , omg u rly smart! i didnt even think about vz kernel:eek:

Here is the root script ONLY FOR PEOPLE WITH WIPED CID PARTITION!

http://www.mediafire.com/?4tnq7v4w657wsv7

IF IT WORKED FOR YOU THX TO whirleyes!
[Motorola Droid RAZR] whirleyes:
great!

that just proof my theory here.. [DOWNGRADE INFO] CDT Parser - Secure Versions Checker

We can bypass CID check!

Btw, what's your CID now?
[Motorola Droid RAZR] leisures:
C:\adb>fastboot getvar cid

cid: dead

finished. total time: 0.006s

LOL?!
[Motorola Droid RAZR] whirleyes:
dead = freedom??

I think I'm going to wipe my CID partition too..

If my phone screwed up, at least I still can flash other region ROM :D

But booting with bp-tools seems like an annoyance task.. I do a lot boot :o
[Motorola Droid RAZR] leisures:
i do boot a lot as well....u get used :p is worth it.
[Motorola Droid RAZR] spawns:
Could someone explain that?

We can get root if it was lost by bypassing CID num?

Mini tutorial please?? :p

Thanks!!!

Sent Via XT910 con tapatalK2
[Motorola Droid RAZR] lukas77:
What does it mean? If we wipe CID partition we can only boot via BP Tools? Is it reversible?
[Motorola Droid RAZR] whirleyes:
Some notes from my research. Beware, it may contain(s) incorrect information.

Filesystem signatures on Motorola Spyder includes a Secure Version(SV) number, security certificate & Customer ID(CID) number.

The XT912 had a lof of ICS leaks.(ICS 4.0.3, 4.0.4). Between the 4.0.3 release, M decide to upgrade SV & that SV happen to match current XT910, XT909 ICS leaks.

Infact, all current ICS is on the same SV.

Sometimes ago, someone from china tell a way to flash China ICS leaks by wiping CID partition.

With this finding, now we know that with a wiped CID, bootloader ignores CID check. This allow any CID rom to be flash.

To conclude, with a same SV & a bootloader that ignore CID, we can flash any CID rom.

That's why he is able to flash a VZW kernel on his LATAM device running a EU ICS leak. Owh.. Nice mixed-up

Credit goes to http://and-developers.com/ & http://droid-developers.org/ team for their research on Motorola Phones.

(p/s : This works for current bootloader(0A74), M still can patch it on future release, because now they know we've already figured out this.

I'll edit this post in future. I don't know how to write a good explanation in English :p )
[Motorola Droid RAZR] whirleyes:
You need root to wipe CID.. I'm still unsure if it can be erase externally by fastboot.

Does "allow-mbmloader-flashing-mbm.bin" bootloader allow erasing this partition? Someone need to do the test..
[Motorola Droid RAZR] lukas77:
I didn't express myself clear: is wiping CID partition is reversible? For example: I have ICS leak and CIDv4, if I wipe it, as I understand, I can flash ROM from different region.

1. Can I also flash 2.3.6 and run it by BP Tools?

2. If I want go back to ICS and boot my phone normally, can I flash wiped CID partition and restore CIDv3 or v4?
[Motorola Droid RAZR] linusmax:
Wipe CID is possible !! I have Wipe It on EU 4.0.4 Retail and have do ROOT :-)

But now i can put back mmcblk1p18. I have tried with backup downloaded from forum for european p18 but nothing, I can boot only via Boot Tool

I need backup 4.0.4 EU Retail of the mmcblk1p18 partition. I mind ?!?
[Motorola Droid RAZR] lukas77:
I've got only my mmcblk1p18 backup from 2.3.6 EU Retail, I can post it if you want.
[Motorola Droid RAZR] linusmax:
OK I can try it and if work post all root procedure with all file. Put on share website.

Thanks

---------- Post added at 05:08 PM ---------- Previous post was at 04:58 PM ----------

YES !! bootloader allow permit to erasing this partition !! I have do it 10 minute past.

After flash "allow-mbmloader-flashing-mbm.bin" reboot and do command

fastboot erase cid

fastboot reboot

And now you have CID erased

I have do root but now i can't restore CID and i can boot only via Boot Tool option.

!!!!!! ATTENTION NOT IS POSSIBLE RESTORE CID !!!!!!!

or if any have idea please help me, i can try.
[Motorola Droid RAZR] HSD-Pilot:
So, what is the worst case with an erased CID- Partition?

Is it worth it to have root for an couple of days, before ICS will be released?

Gesendet von meinem XT910 mit Tapatalk 2
[Motorola Droid RAZR] leisures:
I didn't try from ics but i did from gb and i restore trough connectbot, i dont think u can do it from fastboot.

Caution don't restore it if u have kernel or anything wich shouldn't be on your phone!

Enviado desde mi XT910 usando Tapatalk 2
[Motorola Droid RAZR] lukas77:
Here ya go but before restore it make sure it is right thing you do.
[Motorola Droid RAZR] linusmax:
because what's the difference? when ICS comes out what changes? I have 4.0.4 now, and works perfectly, I miss the root permissions ... nothing else. When ICS comes out for me, nothing changes, always since ROOT i still.

---------- Post added at 05:48 PM ---------- Previous post was at 05:46 PM ----------

Yes i have root permission and the restore command work widthout any error, but after reboot the CID is not correct or blank.

NOW try with your file and reply to you.

Thanks
[Motorola Droid RAZR] HSD-Pilot:
Ok, but I'm fully into Custom Roms. Stock is just an way to get my Widow back. So, if something went wrong and I have to go back to Stock via RSD, will I run into trouble with an erased CID? Also CWM on Boot and stuff won't work with boot over BP Tools, or I'm wrong?

Gesendet von meinem XT910 mit Tapatalk 2
[Motorola Droid RAZR] m3ta:
With that logic, then any 20€ bucks phone will be sufficient for you - "it works, it makes phone calls", you don't need a smartphone.
[Motorola Droid RAZR] HSD-Pilot:
Keep cool, these guys're doing research for all of us :p ;)

Gesendet von meinem XT910 mit Tapatalk 2
[Motorola Droid RAZR] linusmax:
I have Tried. Not Work.

1) Via adb shell i have restored your p18 file and reboot. Same error. i can boot only via BP Tool.

2) Via adb shell i have do copy of the new my p18 block and compare with your file. IS SAME.

conclusion. Restore works great but your p18 block not is view properly.

What can I do?

PS: for more try i need backup of p18 block from 4.0.4 EU Retail user's ..i mind
[Motorola Droid RAZR] m3ta:
Oh. You're right, what I said /did/ look awfully.. erm, harsh.

But honestly, it wasn't said in a bad way.... if anyone got pissed at it, i apologize.

And i DO have a cheap phone myself that I use as my backup when something is not working with a ROM or firmware - which is more common that i'd like, but hey.. heh.
[Motorola Droid RAZR] Lakshay Sethi:
Need help

Hey guyz i wanted to know that the dev support for motorola droid razr is mor than the galaxy S2? what about the updates both phones will be getting.? n about the bootloader. please help in choosing either one. Please
[Motorola Droid RAZR] whirleyes:
I think it's worth this way, you can't predict what they put in future release.

Thanks for doing the test :)

Now we know that CID(mmcblk1p18) is erasable by fastboot.

I think that chinese guy did say that CID partiton is unique to each phone.

He also did say that you can only restore your own backup.

Maybe that explain your result.

@lukas77: I don't think CID partition is change when we upgrade. (Plausible)

You have a backup of your phone own CID partition, so maybe you have a higher chance to restore it back.

@HSD-Pilot: I got a unique phone, I need to have a deep understanding in order to survive my Razr days. Knowledge saves my phone.
[Motorola Droid RAZR] risingsun91:
I've flashed "allow-mbmloader-flashing-mbm.bin",but I failed to fastboot erase cid,can you help me?
[Motorola Droid RAZR] linusmax:
After flash allow-mbmloader-flashing-mbm.bin

Do fastboot reboot and after

Fastboot erase cid

After

Fastboot reboot

This is my procedure for erase it.

Now i not have copy of my p18 area and i can't restore it forever? :banghead:

Fantastic

Inviato dal mio XT910 con Tapatalk 2
[Motorola Droid RAZR] whirleyes:
Details content of CID partition is unknown.

It could be a content generated at factory base on CPU serial number or radio serial number or the IMEI number.

p/s:Backup is rule no 1 before doing any mod. :D
[Motorola Droid RAZR] risingsun91:
I've found the reason.after flashing allow-mbmloader-flashing-mbm.bin,we should erase cid directly without fastboot reboot.Still thanks!
[Motorola Droid RAZR] whirleyes:
Isn't that because you've already flash it before??
[Motorola Droid RAZR] linusmax:
Ok, but you have backup of your p18 area ?
[Motorola Droid RAZR] risingsun91:
Yeah:D
[Motorola Droid RAZR] lukas77:
I have no guts to try it, don't want to stuck with booting via bp tools, but if I have my own CID backup and I erase CID partition, then I root my phone and after that restore CID from backup my phone will be fine?

It seems we found a way for downgrade RAZR from ICS but it is not confirmed and I afraid I can stuck with erased CID for good.
[Motorola Droid RAZR] whirleyes:
ask risingsun91 whether he/she have successfully restore his phone CID.
[Motorola Droid RAZR] lukas77:
risingsun91 has confirmed that restore CID partition works and his phone boot up normally. It's a good news.

I'm on 4.0.4 672.180.17.xt910.Retail.en.EU without root but I have backed up mmcblk1p18 from 2.3.6 en.EU (I did the backup before I installed ICS Chinese leak). Now I want to do following steps:

1. Format CID partition

2. Install 2.3.6 en.EU and ROOT it

4. Protect root via Voodoo OTA root keeper

5. Upgrade to ICS 672.180.17.xt910

6. Restore ROOT

7. Restore mmcblk1p18 CID backup

I only afraid that my mmcblk1p18 is backed up when I was on 2.3.6 so CID version supposed to be 3 but now my CID is 4. If I successfully restore CID I will be on ICS with CID 3 but in other way I can restore CIDv3 when on 2.3.6 which supposed to be v3.

Before I proceed I want ask everyone what could go wrong in my case? Let's discuss it.

Edit: We can also find out if downgrading system is possible
[Motorola Droid RAZR] ellopr:
But why you want to do that, if you erase the p18 partition you can flash the droid 4.0.3 kernel and root the phone. The script to do this was posted some pages back. The end result will be the same as the procedure you wrote.
[Motorola Droid RAZR] lukas77:
yes, you're right. But with this procedure we can also find out if downgrade is possible on xt910.
[Motorola Droid RAZR] whirleyes:
You got the information mixed-up..

What you talking about is SV.

CID contains no SV (I mean it has no security traces like CDT, BOOT or any other partition).

If you've used my CDT analyzer, you can see that CID partition is not signed.

Erasing CID only fools the bootloader to think it is in factory setting mode? & allow you to boot to bp-tools to complete the installation process??

Downgrade is still not possible, because the SV is written to OMAP eFUSE. For this we may need a bootloader that ignore this?
[Motorola Droid RAZR] stkiswr:
208 is out. Anyone test it yet?
[Motorola Droid RAZR] whirleyes:
208 is reffering to xt912??
[Motorola Droid RAZR] linusmax:
Is right. I have also edit with hex editor sample cid partition and send to my phone. It ignore this change. If cid partition is zero or not original backup of your phone or manually changed not change nothing... the message error is the same.

If will be possible mind the strutture i can do any try. I not mind cdn partition is have same data or part of cid partition.

Inviato dal mio XT910 con Tapatalk 2
[Motorola Droid RAZR] stkiswr:
Yes. I may have posted in wrong place opps
[Motorola Droid RAZR] whirleyes:
@linusmax

If you do binary comparison between lukas77 CID & others.. You'll noticed that the difference between them is only from address 0x00 to 0x400. Above this address, it's all the same. Hope this help
[Motorola Droid RAZR] linusmax:
Yes i have look this.

Inviato dal mio XT910 con Tapatalk 2
[Motorola Droid RAZR] dtrail1:
@lukas77: were you able to flash the 4.0.3 kernel? If so, root shouldn't be a problem anymore. I have still the Chinese p18 file installed. Did I understand right that I could wipe that partition where the p18 is located, then be able to flash the older kernel? The kernel must match with its secure version? If so, then there is no need to wipe cid. But if wiping makes possible to downgrade kernel without matching its secure version, we also could try wipe another partition to go forward and downgrade Android. But I think that we need unlocked bootloader for that.

Did anyone successfuly root his device running on ICS?

Gesendet von meinem XT910 mit Tapatalk 2
[Motorola Droid RAZR] leisures:
Chinese trick had a blank cid(erased cid) u can flash it as yiu are now and u didnt understand rly.....

Erase cid=flash any country stuffs, it doesn't bypass signature check, it will just let u flash something like Verizon kernel 4.0.3 with the new sign and then root with that kernel.

I hope i made that clear now.

And yes i jut rooted it yesterday on eu retail ics.

Check out the script with the new kernels http://xdaforums.com/showthread.php?p=26790898

Enviado desde mi XT910 usando Tapatalk 2
[Motorola Droid RAZR] dtrail1:
Many thanks, now I understand why doing this wipe in our case. Just knew that the cid is responsible for region check, but didn't know why wiping it here. Thanks

Gesendet von meinem XT910 mit Tapatalk 2
[Motorola Droid RAZR] lukas77:
To clear all doubts:

mmcblk1p18 = CID partition content (different for each phone)?

Format/Clear CID partition = flash any kernel?

restore mmcblk1p18 = restore CID partition?

Same method like flashing Chinese ICS leak on european RAZR?
[Motorola Droid RAZR] farhanito:
Will this work with latest Chinese ICS leak (4.0.4-145)?
[Motorola Droid RAZR] leisures:
I think it should. You will end with eu kernel but i think they the same on last leaks.

Enviado desde mi XT910 usando Tapatalk 2
[Motorola Droid RAZR] lukas77:
Yes I've got my own backup when I flashed ICS Chinese leak some time ago.

So I can use CDMA ICS 4.0.3 kernel to root the phone.

Anyone has CDMA vulnerable boot.img or point me right direction? I can't find it.
[Motorola Droid RAZR] thepsen:
Guy, just update that i can root with chinese Blur_Version.67.145.3.XT910.ChinaRetail.en.CN

my english is not good please see my step.

1.I have 2.3.6 Asia at first buy Razr.

2.i root 2.3.6 with chinese trick and flash Blur_Version.67.2.120.XT910.ChinaRetail.en.CN after that i root it with old way that chinese root.

4. i flash with RSD with Blur_Version.67.145.3.XT910.ChinaRetail.en.CN then i lost root and all gapps not working.

5. i go this link download new kernels

Original Post

http://xdaforums.com/showthread.php?p=26790898

Here is the root script

http://www.mediafire.com/?4tnq7v4w657wsv7

6.i follow the step root.bat.

7. My root is back yeah !!!!

thanks for this post i'm able to root chinese retail again.
[Motorola Droid RAZR] dtrail1:
Your link doesn't work, you didn't copy the whole link, dude!
[Motorola Droid RAZR] whirleyes:
Just flash back what ever kernel you was before you downgrade.
[Motorola Droid RAZR] dtrail1:
I can't wipe the cid partition. It says: command restricted.

Edit: I have to flash allow-mbmloader-flashing-mbm.bin first? Where can I get it?

Edit again: I got this file from the 2.3.6 fastboot. Can I use this one?
[Motorola Droid RAZR] Sh4itan:
Flashing ICS right now! :D

Used the same ROM you've linked

Got some space error, but after cleaning some apps and wiping cache it's flashing :D

I'll tell you more after it's finished!
[Motorola Droid RAZR] draga277:
Wait wait a moment...but are you able to downgade from thid ICS rom and reflash again??
[Motorola Droid RAZR] Sh4itan:
It's Working!!!

It's RUNNING!!

ICS is so tasty :D

was able to restore my root, now nothing can stop me ;)

Just do these steps:

download the 2.3.6 version of GB

download the ICS files

unroot your device (can prevent errors)

flash it via RSD

reboot

root it via MotoFail

create su backup vie Voodoo Rootkeeper

temp unroot your device

be sure you have enough space (more than 2gb for temp data)

reboot to revocery (PWR + VOLUP + VOLDWN)

flash the ICS

Enjoy :D
[Motorola Droid RAZR] beastie-boy:
Heh, I knew that flashing T-Mobile ICS leak has a side effect. I hope someone figure out how to upgrade our razors now.
[Motorola Droid RAZR] pswin09:
Can someone upload this ota leak to multiupload or other host. I cannot download from the link in this post.
[Motorola Droid RAZR] danbmore:
why the system won't boot ?
[Motorola Droid RAZR] desmonexus:
I have t-mobile version

if I do I install GB flash version en.EU?
[Motorola Droid RAZR] wabbitinspace:
So is it safe to assume, we most likely will not be getting the rumored May 21 ota today? Usually they say something a day before?
[Motorola Droid RAZR] beastie-boy:
Maybe we can upgrade our t-mobile ics with nandroid of this rom?
[Motorola Droid RAZR] theZest:
And of course it cannot be applied to LATAM RAZRs - they usually suck. Just hope that at last someone will find any way to bypass or disable region check.
[Motorola Droid RAZR] pty.ltd:
This worked beautifully, THANKS!!
[Motorola Droid RAZR] Sh4itan:
all thanks goes to spryte, i just wrote a manual for his leak :)
[Motorola Droid RAZR] blisslove:
Would you mind sharing EU	ICS on your GSM experiences? Such as battery life, 3G signal and etc...

Cuz I was facing SMS delay and weak/not stable 3G signal on Chinese leak. Battery life and data speed was good though. Lucky, I could go back to GB ROM from Chinese leak.

My phone provider uses 850mhz and 2100mhz for 3G.
[Motorola Droid RAZR] blisslove:
Thank you for sharing your experiences. I also found out that connection is better on GB ROM. So I better stay on with GB ROM ATM.
[Motorola Droid RAZR] ectodroid:
I have a similar experience as someone above.

Signal seems good, I get good speeds on 3G even tho it's sometimes missing 1 bar. Batterylife is "ok" , was better in GB.

All the bloatware apps are eating _alot_ of ram. around 250 mb more than stock GB I would say.
[Motorola Droid RAZR] desmonexus:
is there a way to switch from t-mobile to en.EU?
[Motorola Droid RAZR] blisslove:
So, the same as the Chinese leak. Yes, I did like that leak. The only one thing I had to go back to GB was SMS delay (3/4 days or 3/4 hours). I thought that's my phone provider problem but no delay if I put my Sim card into my spare phone.

Have you got SMS delay on EU ICS?
[Motorola Droid RAZR] pswin09:
I think so. I will try tomorrow (now at work) because mine already lost root. I am able to go back toT Mobile ics any time. Will report back. Still trying to download en.EU ota.
[Motorola Droid RAZR] pedrotorresfilho:
spryte

I've cheesecake app. Is it possible to get the leak in a Latam?

edit:

Mean, get the file for share?

Edit2: whats the server?
[Motorola Droid RAZR] BATC42:
Hey guys !

I might install the latest ICS leak since I already have the right GB rom on my phone. But I have a few questions before :

Is everything working fine ? Like Bluetooth, camera, ...

I assume the rom is not only limited to English, I can switch to another language, like French ?

Thank you :)
[Motorola Droid RAZR] thepsen:
sorry

here is original post

http://xdaforums.com/showthread.php?p=26790898

and here root script download

http://www.mediafire.com/?4tnq7v4w657wsv7
[Motorola Droid RAZR] dtrail1:
I still cannot erase the cid partiton. After flashing the allow-mbmloader-flashing-mbm.bin I tried fastboot erase cid and got command restricted. Anyone could help me, please?

Edit: Ok, afer reboot bootloader it worked.

BUT which allow-mbmloader-falshing-mbm.bin did you use??? I guess this one from 2.3.6 is the 0A.6C and it won't work...right? Did you use that one from the chinese leak?

OK, It worked!! Many Thanks!!
[Motorola Droid RAZR] lukas77:
fastboot flash mbm allow-mbmloader-flashing-mbm.bin

fastboot reboot

[vol+ vol- power]

fastboot erase cid

---------- Post added at 03:30 PM ---------- Previous post was at 03:24 PM ----------

I can also confirm that wipe and restore CID partition works!

Only if you have mmcblk1p18 backed up

I'm rooted now!

Thanks guys :) Beer for everyone.
[Motorola Droid RAZR] SoulGraphicsBrand:
I need a backup of mmcblk1p18 of eu ics or other ??

Enviado desde mi XT910 usando Tapatalk 2
[Motorola Droid RAZR] whirleyes:
Of your own phone. Not from others
[Motorola Droid RAZR] thepsen:
one question are you still boot in bptools ? if not please guide me . cuz im still can boot normal thanks
[Motorola Droid RAZR] dtrail1:
Are you sure that someone else can't use my p18 backup file for his device?? We also could use the chinese p18 file, or will the customer ID error persist if someone uses my p18 backup file?

@thepsen: I had the chinese p18 file on my device before, so I always had to boot via BP tools...And you can boot normal, you wrote. So what do you need to be guided for?
[Motorola Droid RAZR] whirleyes:
I made that conclusion based on linusmax findings. The chinese file is just an empty file.
[Motorola Droid RAZR] dtrail1:
So what happens if someone uses my p18 backup file on his device? CustomerID error?
[Motorola Droid RAZR] thepsen:
sorry i gonna type i can't boot as normal. i also boot as BP tool too.
[Motorola Droid RAZR] dtrail1:
I don't know what to do in your case. If you have a backuped p18 file from your device, follow these steps:
[Motorola Droid RAZR] leisures:
Dont restore it if the kernel u flashed is not for your phone, if you do you will be fukd up rly hard!

My script flash the eu kernel so if u phone is eu you fine to restore it

My case is on latam phone if i restores the latam cid... Im dead, it won't boot cause it will check cid.

Enviado desde mi XT910 usando Tapatalk 2
[Motorola Droid RAZR] SoulGraphicsBrand:
So no matter which version of android are. Anyway to make the backup of p18 file need to be root and I'm not.

Enviado desde mi XT910 usando Tapatalk 2
[Motorola Droid RAZR] dtrail1:
http://xdaforums.com/showthread.php?p=26853951#post26853951
[Motorola Droid RAZR] linusmax:
YES ! I have used the p18 file of other device and NOT WORK. The same process do from other user with own p18 file WORK.
[Motorola Droid RAZR] SoulGraphicsBrand:
:(

Enviado desde mi XT910 usando Tapatalk 2
[Motorola Droid RAZR] stangri:
Just to double-check: will erasing CID help me downgrade from the secure 4.0.4 kernel?
[Motorola Droid RAZR] dtrail1:
no, you are just able to flash a kernel from another region with the same secure version. So you can downgrade to 4.0.3 kernel (has to match the sv) but nothing else.
[Motorola Droid RAZR] stangri:
Has anyone tried to downgrade from the secure kernel and wiped CID?
[Motorola Droid RAZR] sonicfishcake:
Hi everyone. I feel like a right c**k. Was on the T-mobile leak and tried to do the update to the newest leak. I'm certain I've done everything right but it just didn't work. I'm sure I've tried all the options and keep getting assert failed apply_patch_check (Status 7). So after trying what I thought was everything decided to try re-flashing the SPDREM_U_01.6.5.1-167_SPU-15-M2-1-DE_1C.91P_0A.6C_TMDE_CFC_HWp2b_SIGNED then the t-mobile OTA again but I'm still getting the same error. Please help!
[Motorola Droid RAZR] pedrotorresfilho:
You're flashing wrong rom. Look for the M3 version. This iis the correct rom AFAIK

Enviado de meu XT910 usando o Tapatalk 2