yashsingh1/xdaforums huggingface dataset:
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] lekofraggle:
Okay, so here is the rollback file, but I urge you to proceed with caution. If you let Amazon update this build, you are ensured a brick. You need to use the hdx toolkit to block OTA on *.3.2.8.

http://xdaforums.com/showthread.php?p=59220996

Good luck.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Relevant thread here. Basic procedure is described in the first post. Take care to insure your device can not connect after rolling back to 3.2.8. Keep the device in airplane mode and/or disable wifi. Depending on the method used to root 3.2.8 and 4.5.2 you may need to enable network connectivity momentarily during the rooting process (typically no longer than 30-60 sec). Be sure to turn it off immediately after. There is no need to block OTA on 3.2.8 if your intent is to immediately upgrade to 4.5.2. That said, if you do receive an OTA update on 3.2.8 your device will brick (unrecoverable). The consequences on 4.5.2 aren't as grave: you'll simply be updated to 4.5.4 and have to start the whole process over again. Ultimately you will need to block OTA once on 4.5.2 but that can only be done after obtaining root.

BTW - once on 4.5.2 (rooted) you now have an option to run a custom version of Nexus 7 which presents a much different interface than FireOS. Risks are low and you can always return to FireOS if you don't care for Nexus. There are several distinct advantages to Nexus including full access to Google Services (including play store) and no worries about blocking OTA and/or receiving an update that breaks root. Everything works except LTE; that's being worked on now. More info here.

Good luck.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Zman8881:
One Last Question...

Thanks for all of the help... Just one last question. What is the name of the internal storage folder on the kindle that I should put the file in? Sorry, I'm new to Android. Believe it or not, I won my Kindle Fire from an arcade machine! Sorry again.

-Zman8881
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Hey - congrats on the win! The rollback file goes in the root of sdcard when viewed from a tool such as ES File Explorer. If you have tethered your Kindle drop it into "internal storage" which is the base folder when viewed from Windows. After the file is in place reboot. If nothing seems to happen (give it 5-10 min) use the 'check for updates' function from within FireOS (located somewhere under settings). At some point the file will either be recognized/processed, recognized/rejected or ignored all together. Post back your results.

Although it has probably been burned into your brain be sure to do whatever is necessary to prevent network access if your Kindle rolls back to 3.2.8.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Zman8881:
I thought I did it, but after I hit update, I was stopped by an error message telling me that an update isn't possible because the update I'm trying to install is an earlier version than what I have on my device. Oh well, I guess it will be a long wait until someone finds a root exploit for 4.5.4. Thanks for all of your help!

-Zman8881
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Sorry it didn't work. There is a way around that message but you need root to make the change. Catch 22.

The wait may not be that long. Fingers crossed :)
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
Couple more questions

Hey, Davey126, sorry to post here again quite a while after it's relevant, but I had a couple more questions.

You state here that you just have to make sure the wifi is not enabled, so OTAs aren't pushed. But another user (below) seems to push that I'll have to use the HDX Toolkit--which I can't seem to figure out how to actually use; is just disabling the wifi enough to keep it from bricking from an immediate OTA after the rollback?

I haven't actually tried to get the update to be recognized yet, because I want everything to be sorted out question wise before diving in, but let's say it works and I get my kindle to roll back. How would I then get it up to 4.5.2?

Sorry for the questions! I just can't seem to find the answers anywhere else.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Good questions; I appreciate you looked around before posting. If your intent is to rollback to 3.2.8 and then immediately upgraded to 4.5.2 there is no need to block OTA updates on 3.2.8 provide WiFi remains off (as an added precaution I would keep your device in Airplane mode). However, you'll need to enable WiFi for a few seconds while rooting. While that's not enough time to download a complete update a file fragment could potentially cause complications. Hence an OTA block could be beneficial. Really depends how fast you work and whether you can detect an incoming OTA update. You'll need to remove the block before upgrading to 4.5.2.

HDX Toolkit is a tethered solution. It runs on a Windows host and requires USB debugging to be enabled. Commands are issued to your device via the tether. Nothing needs to be installed on your device. You will also want a working tether to copy the 4.5.2 bin and possibly other files to your device when it's time to upgrade. Some folks load everything on the device in advance but I prefer to copy files as they are needed.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
Gotcha!

Actually, thanks a bunch for not only explaining the tool a bit, but prompting me to go take another look at it. Turns out I was downloading the wrong batch of files--everything seems to be working now. You just tether your kindle and tell it to block OTA, right? Don't have to worry about version number or anything like that?

So with upgrading to 4.5.2, is the process pretty well the same as with downgrading to 3.8.2? If so, where can I find the update file?

Thanks a million!
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
HDX Toolkit only works on FireOS v3 (3.2.8 and below). After rolling back to 3.2.8 tether your Kindle and use the toolkit to block OTA. Once OTA is blocked you can enable WiFi and use towelroot to root. Gather any other files you may need on your device, disable WiFi (also recommend 'airplane mode') and then use the toolkit to reenable OTA (under '5 More'). Move the 4.5.2 bin (here) to the root of sdcard and check for updates. Once on 4.5.2 you'll need to root and block OTA once again. Check the forums for the appropriate tools and method for FireOS v4. Kingroot and renaming DeviceSoftwareOTA.apk seem to be the most reliable.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
Okay, thanks so much for all the information! I actually just got my kindle to rollback to 3.2.8, but this brought up two more questions for me.

With the HDX Toolkit, it's asking me to grant root access on the device, which I can't do yet until it blocks OTAs; despite this message, it seems to go through and, after displaying the same message 5 times, state that OTAs are blocked. Is there anyway to safely check that they've actually been blocked? Also, is doing it twice okay? The message seemed less than assuring, so I did it again, but it displayed a different message 5 times on the second attempt.

Lastly, I want to root 3.2.8 and /then/ update to 4.5.2, right?

Thanks so much!
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
The OTA blocker in HDX Toolkit is very comprehensive (probably overkill). Some actions require root, others do not. I suspect OTA is effectively blocked but there is no way to conclusively test. Suggest rooting with towelroot (you'll need to toggle WiFi momentarily) and then run the OTA blocker again. Multiple executions should have no adverse consequences. While unlikely to happen watch for any signs of a download in progress. If you see it turn off WiFi and post back for further instructions.

Remember to undo the OTA block after the 4.5.2 bin is in place; otherwise your device won't 'see' it.

Technically you don't absolutely have to root 3.2.8 to upgrade to 4.5.2 but I find it much easier to move files around and take corrective action if something goes wrong. Downside is root gives you unfettered access to everything; navigate carefully.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
Gotcha!

Alright. I think this is the final question before I go through with everything: on rooting with Towelroot, can I just use the HDX Toolkit for that? It says it only works up to 13/14.3.2.6 and below, so I just want to be safe.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Neither Towelroot nor HDX toolkit has changed much (if at all) in the past 12-18 months. The version range was likely current when coded. It can't hurt to try; it will either work or not with no side effects. If it doesn't work head off to towelroot.com for the official variant. Obviously this means keeping WiFi on for a longer period.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
Got Towelroot to go through, despite a weird error the first execution. I didn't seem to have to enable wifi at all, believe it or not, and HDXTools said I was properly rooted.

I've been searching for the past hour or so, but I can't for the life of me find anything that clearly states how to go about rooting 4.5.2 once I get my kindle updated. I've found the supposed root file through the rollback thread, but I can't find out how to actually use it. As for Kingroot, I can only seem to find threads for 4.5.3. Can you impart any knowledge to me about this?

Also, in trying to find the solution, I found another post by you:

From all that I've read, it seems like we can only go back as far as 3.2.8 now. Is it too late to unlock the bootloader? Sorry for bringing an entirely different thread here, haha--I just want to make sure I get everything done in one fell swoop.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Surprised about that but glad it worked! Perhaps the version built into HDX Toolkit contains the bits & pieces that normally require online access.

Kingroot works great on 4.5.2 and is far easer than the alternative methods. Some question the origins of Kingroot (China) but the tool is widely used across a variety of platforms. Personally I could care less where it comes from as long as the reputation is solid. Sharing this in case you have a different perspective.

As your start point was FireOS v4 your device was never eligible for bootloader unlocking. More specifically, Amazon fixed the vulnerability that allowed bootloader signature forging in 3.2.4. Clever folks figured out how to roll back to 3.2.3 up through 3.2.6. Starting with 3.2.7 Amazon became aggressive about blocking rollbacks. Any attempt to do so will blow an efuse which is equivalent to a brick. It's always possible another vulnerability will be discovered in higher firmware levels that permits bootloader unlocking. Don't hold your breath.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
Yeah! Either way, it certainly saved me some stress.

I swear that you're a good luck charm: right after you mentioned kingroot working fine for 4.5.2, I was actually able to find a thread that talked about in that context. One you posted a bit in, no less. With these root APKs--Kingroot especially--do you simply side load it and run it on the device?

Alright, that makes sense. At least it's one less thing I have to stress (probably too much) over in this process.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Yep - just side load and execute. You can either install via adb or copy/download the apk to a temp folder and run. Use a tool like es file explorer to locate apks if they go missing.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
Thanks so much for the information. I think I'm just going to go with the side load and execute plan, but for reference, how does one go about installing via adb? I've seen that as the method for a lot of things here, but I, again, can't find anything detailing it too well. Maybe I just suck as using the search function. I know you've mentioned that it's not really a clean cut process in some other threads, but is there a general process to it all?
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Assuming your have adb access simply open a command prompt (assuming Microsoft Windows) and issue the commmand "adb install <apk>" where <apk> is the name of installation package. If this makes little sense or you don't have adb working then that's another topic. Let that one go for now. :)
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
That makes total sense. Thanks for explaining it! I'll return with results or any questions that pop up suddenly.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
And an immediate question pops up. What's the process for actually using the Kingroot application? I can't read Chinese, so I don't really know what I'm getting into. At this point, I've ran the application for the first time--it's displaying some Kanji in a blue box at the bottom and a circle with a wifi sign up top.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
I have not used kingroot; you're going to have to work through that one on your own. A Google search should get you the answer.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
I wasn't able to find anything in English about Kingroot, but I did find a German thread about the other root exploit. Three cheers for German skills. I was able to get it rooted and am currently in the Safestrap interface, lost as to how I'm supposed to do a factory restore to finish things up after flashing the Nexus and GAPPS rom, as per instructions in the thread. Post here.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
From twrp menu hit wipe. Default swipe action will be a factory restore/reset. It is equivalent to wiping cache, dalvik and data partitions.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] budroid:
Just wanted to say that this process worked perfectly for me. I have a Kindle Fire HDX 7" that was on 4.5.4 and is now rooted on 4.5.2. I've disabled OTA updates and going to install GApps. I have also installed SafeStrap and tested booting to recovery. I may go to the Nexus ROM but haven't decided yet.

Anyway, thank you so very much. I have a new toy!
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
It's very nice to hear that I didn't mess up my documentation anywhere. I'm very glad it worked out for you! Are there any spots you found confusing/you'd recommend changing/what have you?

I only got the Nexus ROM yesterday, but it's extremely nice thus far. I hadn't used a pure android environment much before; however, it's quite intuitive, and most importantly, it really shows you how much Amazon neutered the HDX with FireOS. So, I'd heavily recommend flashing it, but be careful!

Enjoy your new toy either way :) Glad to be of help!
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] techmanc:
I accidentally copied the 4.5.2 bin instead of the kindle-thor-13.3.2.8 file and it wants to update using that file.

Would that save me some steps going right to the 4.5.2 bin and go from there or do I need to use the older bin first?

Hope someone can let me know soon so I know how to proceed. Be nice to save some steps but to new to this to know how to proceed TIA!

I also want to add that I am using Fire OS 4.5.4 but if this works I would then try to use kingroot as my next step after rebooting my blocked WIFI access 4.5.2 bi.

I am guessing the downgrade wont stick from other comments here saying this might fail but would not harm by trying.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
No, you can't go from 4.5.4 -> 4.5.2; Amazon blocks consumer rollbacks. The rollback 3.2.8 bin (make sure you get the right one) is an exception which was captured by some crafty folks when an Amazon tech rolled back a device at the owners request (they no longer honor such requests). Because this 'special' variant of 3.2.8 was never designed to be upgraded is also carries a huge brick risk. If your device receives and processes and OTA update from amazon after rollback to 3.2.8 is will hard brick; no recovery possible. Follow instructions carefully to prevent this from happening.

If you are new to HDX modding you should know that these devices are rather sensitive (understatement), brick easily and have limited recovery capabilities. Deviate from the script at your own risk. Most who have done so now own an expensive paperweight.

Because your device is unrooted there is little risk in trying Kingroot. It will either work or not with no adverse consequences other than the potential for some unwanted additions if you download it from an untrustworthy source.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] techmanc:
Ok I will follow your recommendations after I see if Kingroot works. I new to these tablet mods but modded 3 phones in the past so when I decided to buy this tablet it was with the intention of getting it rooted and add a kitkat or lollipop rom and GAPPS for google play store and any other apps that come with that install. The HDX seems to be great tablet but I dont like being restricted by my out of the box Amazon setup. I want to be able to change the ROMs if I want and to have my titanium backup working and be able to make image backup s of my system and looks if I can get that done then this will be great tablet for me to own.

Every file I downloaded for this project came from the links here so if there good then I am good also.

The Kingroot from link seems to be older version in Chinese so cant tell whats going on so I found this link looks to have newer versions and assume I get the latest one there any idea which Kingroot I should use?

I used the latest one from my link was in english and it failed to root my device.

Link Here

http://androidxda.com/download-kingroot-application
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Unfortunately no as I have not used Kingroot (my devices are unlocked). Even if you are sucessful in rooting 4.5.4 you still have to roll back to 4.5.2 for Safestrap v4 which can only be done via 3.2.8. I strongly advise against installing GAPPS on FireOS. Yes, some have got it mostly working but it is a fragile combination that is likely to break again with future updates. Again, Kindles are not like any other device you have messed with. Your best course of action is to run Nexus v4 or CM11 under Safestrap. Lollipop is not an option at this time for locked devices (and may never be unless Amazon releases a LP based variant of FireOS and HDX devs are still around to make necessary accommodations ... it is a pretty small community).

Once Safestrap is installed you won't need Titanium as you can capture a full system image from within twrp. Titanium is great but you have to be a little careful with Safestrap due to they layers of abstraction. That will become clearer as you progress.

BTW - since you have messed with other Android devices be aware bootloader unlocking, 'factory cables' and fastboot recovery are not options for your device given it came with 4.5.4 which can not be rolled back to the level needed to unlock the bootloader. Factory cables never work and useful fastboot capability is only available on unlocked devices. Sorry ...
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] budroid:
The only thing I had to work around at all was that the link for the Nexus ROM in your instructions was for the Apollo (8") and I have the Thor (7") model. Other than that, everything was easy to follow...and even that wasn't an issue. For reference, I used your root method #1.

Also, I ended up going with the Nexus ROM and I'm glad I did. I really was OK with the stock Kindle Fire OS but having a Nexus ROM is so much better. Thanks again. Also also, it's good to have a device I can flash again. My AT&T Note4 is locked down tight and my One X died.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] techmanc:
I got to step 29 having a rooted 4.5.2 setup and unable to get installed SafeStrap 4.01 to install the Nexus ROM and the GAPPS ROM which I want.

This is my first time using SafeStrap 4.01 app and not clear to me what part I am messing up. I get some safe message when I boot up I forget the exact wording but I end up back where I was before I flashed / wiped and rebooted. Can anyone help get me to the finish line with this I like to get to the part where the new ROM is installed and working.

So I get Safestrapdisabled message I see now and have Recovery and Continue options.

When I boot up system looks like it was before I had to add ES File Explorer and that app is no longer installed.

The KingRoot is there and I can go into recovery the system pretty funky right now and cant get back to main screen once I go off of it so cant do much there and hoping I can get this new ROM and GAPPS installed

Playing around with Recovery I can see the files I was supposed to use and was wondering looking at boot options am I supposed to choose a slot to install new ROM and GAPPS as its now pointing to use the stock ROM slot.

Thats the only thing I can think of as its says I am using the stock slot now. is this for multi-booting ROMs or is that not a feature of my setup?
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] techmanc:
I had replied to another thread and just now realizing that I just wanted to say found my problem was from the ROM link pointing to the Apollo rom and not the needed Thor rom I saw by reading some errors showing on install with SafeStrap.

Also on step 12 Optional, but recommended) Once they install, choose option 8 to Towelroot is actually choice 1 am pretty sure as there is no 8 for choice.

Only Kingroot worked for me after trying the first root option and it was tricky as needed enable the Wireless to let it connect to work and it was starting to d/l the 4.5.4 patch. I just killed Wifi as soon as it was completed.

I could not get ES Explorer to want to active root its root function I could not follow those instructions but side loaded another root apps to test.

---------- Post added at 11:37 PM ---------- Previous post was at 11:28 PM ----------

TIA!
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Hm, interesting list of issues. I rechecked the guide; all links seem correct although on some pages both Thor and Apollo downloads are shown. Option #8 is most definitely towelroot in the latest version of HDX toolkit (v0.95). Wonder if you somehow snagged an earlier version. Not sure what was going on with ES File Explorer. From thr description it sounded like your device wasn't rooted at the time. Perhaps a reboot was needed. Glad all is working now.
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] techmanc:
When I click line 27 link for rom it opens the and

HDX_Nexus_ROM_Apollo-v4.0.2.zip

and I need the Thor ROM
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] DB126:
Ahh - I see the problem now. Sorry to have overlooked that :(. I'm sure the author will see this exchange and fix up that link ASAP.

If you haven't found it yet you can grab Nexus v4 for Thor here: http://xdaforums.com/showthread.php?p=61127440
[Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot] Rvby1:
Sorry about my lack of response here--I have been caught up in a few things. I have updated the guide with some new feedback, but feel free to report any new issues that arise.

Very sorry for the link mishap! Don't know how that slipped my proofreading.

Would anyone be against me posting this guide to /r/KindleFire? I'm sure there'd be a few who'd appreciate it, but I want to leave it up to you guys to decide.