[Galaxy Tab 2 7" Android Development] BigBot96:
The Verizon Galaxy Tab 2 7.0 LTE now has an unlocked bootloader!

****

!!!!WARNING!!!!

Many of you have been complaining about broken wifi and other issues.

I do not own this tablet anymore, which means I can no longer support it.

Verizon/Samusung released a new update: VRBMI1

Check your firmware version

THE LAST VERSION SUPPORTED BY THIS GUIDE IS VRBLL2.

IF VERIZON/SAMSUNG CHANGED THE KEYS THEY SIGN THEIR FIRMWARE WITH, THAN ANY ATTEMPT TO DOWNGRADE/UNLOCK

MAY POTENTIALLY

BRICK YOUR DEVICE.

This has been seen on the VZW Galaxy S4 and just recently the VZW Galaxy S3 (The VZW Tab 2 is a clone of the S3!)

If you are on the latest build (VRBMI1), then it is entirely possible things will not work.

It is also possible

the bootloader unlock may brick your device.

If you are on VRBMI1 and have semi-bricked using this method, flash this stock ODIN image using ODIN 3.04 if you are able to get to download mode.

DO NOT CHECK RE-PARTITION, FLASH LOCK, OR LED CONTROL

VRBMI1

http://garrettek.com/android/SCH-I705/ROMs/4.1.2/HOME_I705VRBMI1_1415457_REV02_user_low_ship.tar.md5

The above information is unknown to me. Do all at your own risk!

YOU HAVE BEEN WARNED
​

****

READ FIRST

*** *** *** *** Disclaimer *** *** *** ***

I am not responsible if you break your stuff. READ READ READ

If you DO NOT own a

VERIZON

Galaxy Tab 2 7.0 SCH-I705 then DO NOT flash this! If you have not verified and flash this on a p3xxx tab, something

will

break and I

will not

help you!

Verizon MAY find a way to block this in the future. But for now, it works.
​

We have gained access to an insecure bootloader (aboot.img) from a "prototype" VZW Galaxy Tab 2 7.0 obtained by XDA user id_ram.

How to unlock:

1. Root your device using my guide How to root your VZW G Tab 2 7.0 LTE

2. Download this insecure aboot.img to the root of your SD Card Insecure aboot.img

3. Make sure the MD5 of the above image matches this: f4fbc4c5056f62498b378873bf8e3dca

4. Turn ON USB Debugging: settings > developer options > USB Debugging (checked) [Should have already been done when you rooted!]

5. From Terminal emulator or ADB do the following:

6. MAKE SURE TO VERIFY BOOT LOADER STATE

BEFORE

FLASHING ANYTHING ELSE!

-Download mode will appear landscape

-SAMSUNG boot screen will flash very quickly

Don't confuse the L with a 1 !!!

CORRECT: mmcb

l

k0p5

INCORRECT: mmcb

1

k0p5​

If you want to verify p5 is your bootloader (aboot), run the following command as root

cat /sys/block/mmcblk0/mmcblk0p5/uevent

If you see this: PARTNAME=aboot, listed in the output you can continue.

If it does not say PARTNAME=aboot, STOP HERE

​

From ADB

adb shell
su
cd /sdcard/
dd if=aboot.img of=/dev/block/mmcblk0p5
reboot download

From Terminal Emulator

su
cd /sdcard/
dd if=aboot.img of=/dev/block/mmcblk0p5
reboot download

Congratulations, you now have an insecure bootloader!

NOTE: Download mode will always display QUALCOMM SECURE BOOT: ENABLE regardless of bootloader state. Don't know why, but my VZW GS3 is the same way.

NOTE2: #1 way you can tell your bootloader is unlocked is that you can dump your stock recovery.img, repackage into ODIN flashable tar (unsigned tar) and flash it with ODIN. #2 way you can tell your bootloader is unlocked is that the initial SAMSUNG splash screen display time is reduced to less than 1 second.

Once you got custom, NEVER accept an OTA!. Verizon released an OTA for the SCH-I705 that makes changes to recovery, boot, and aboot, THIS WILL MOST LIKELY BREAK YOUR ROOT AND UNLOCKED BOOTLOADER! DO NOT ACCEPT!

TO RETURN TO STOCK BOOTLOADER

Visit the original ROOT BOOTLOADER RECOVERY STOCK thread and go to the bottom of the OP:

http://xdaforums.com/showpost.php?p=31523463&postcount=1

Thanks to:

id_ram - for his "prototype" tab and his insecure bootloader!

AdamOutler - for SGS3 bootloader unlock method, which is where I got the information needed to flash this one
​