[Kindle Fire HDX 7" & 8.9" General] reggie9:
Rooting Kindle Fire HDX 7 32gb 3rd Gen Fire OS 13.3.2.1

Airplane Mode ON WIFI Off

Kindle Fire ADB Composite Drivers must be installed to working PC

In KFHDX Settings

Set Enable ADB - ON

Set Apps from unknown sources - ON

Faznx's KF-HDX Toolkit v0.95

https://www.androidfilehost.com/?fid=95832962473395302

KFHDX ToolKit v0.95.zip

MD5: 3C1D7DB855E54A39BF2FD59BE6ABA9DC

SHA-256: 614A0D077BEC8B85F6D6B377D2D18EB719AB9ED15B08B41CD5 8968BEED653C0C

Rooted KFHDX using Towelroot in above toolkit. - No Issues

Then applied:

1> SuperSU v2.14 installer in Faznx's KF-HDX Toolkit v0.95 - No Issues

2> Over the air update blocker and re-enabler for all current rootable versions in Faznx's KF-HDX Toolkit v0.95 - No Issues

Airplane Mode ON WIFI Off

Use adb to install ES File Explorer

http://www.howtogeek.com/125769/how-to-install-and-use-abd-the-android-debug-bridge-utility/

ADB install (installs application) -- adb install c:\com.estrongs.android.pop.apk - No Issues

Checked in ES File Manager to make sure I had root.

Next rename the /system/etc/security/otacerts.zip file - one issue - resolved

Even though I ran the disable OTA updates, I am concerned that some post I have read said their system was update even though they renamed.

I think now it's possible they get around us by running an MD5 hash on files in that folder and compare to the hash they store for that version.

The better idea may be to move that file out of that folder. I did just that.

Here are the directions to rename:

see the contents of that folder with adb shell ls -Ral /system/etc/security

Example:

C:\Users\davcam\AppData\Local\Android\sdk\platform-tools>adb shell ls -Ral /system/etc/security

/system/etc/security:

drwxr-xr-x root root 2014-02-07 04:23 cacerts

-rw-r--r-- root root 1337 2014-02-07 04:23 otacerts.zip

Before you can rename this file you must set the \ and \system file systems to r/w - then you can rename or mv the file.

When completed, change \ and \system file systems back to ro

Next : Safestrap

https://goo.im/devs/Hashcode/thor/safestrap/

I tried Safestrap-Thor-3.72.apk and it did not seem to work. I unistalled recovery and Safestrap-Thor-3.72.apk.

I was able to successfully install Safestrap-Thor-3.75-os3.2.4-B02.apk, install recovery, boot into recovery, backup up stock, create a new rom slot,

change to that Rom slot and restore stock backup into that slot.

Now on startup i get the Safestrap screen.

One thing I noticed was that the stock values for the rom slots are a little small, so keep that in mind.

Thanks to everyone on XDA Forums, especial to EncryptedCurse for the terse, meaningful tips., Faznx's KF-HDX Toolkit v0.95, Geohot's Towelroot,

hashcode0f's Safestrap, OTA disable, and Supersu.

Current Status:

Using a copy of stock on a somewhat larger partition, no otacerts.zip file

Next steps:

0> Thank and donate to the developers I mentioned above.

1> Airplane mode OFF, wifi ON , register with Amz

1.1> Get GAPPS installed on this copy of stock I'm booting into

2>to see if possible to load a CM11 image into one or my bran new slots.

Question: If Amazon were able to push an update to me, would I just be able to recover to my stock image and move on?

Thanks for the help and education!