yashsingh1/xdaforums huggingface dataset:
[ZTE Axon 7 Guides, News, & Discussion] Unjustified Dev:
How did you lose system? Anyway you all have a full zip you can flash the system.img from here

http://www.myzte.cn/resource.php?mod=category&catid=196&netid=0&softid=0
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
So was all the code in the fastboot.img that was in the B20_Boot OTA enough? What was the reason to patch system and boot (recovery i get for the extra screens)? NVM, it was to change the fingerprint and upadte system signature in boot most likely.

BTW, did you find where the bootloader state is saved, it not in aboot anymore

------------------------------------------------

I posted an untouched B20 full system image in Dev section for those who need to get back to hash consistent /system. This is the full 6GB dd dump via TWRP in read-only

http://xdaforums.com/axon-7/development/a2017u-stock-image-b20-stock-restore-t3461357
[ZTE Axon 7 Guides, News, & Discussion] blessingme:
Please i need a functioning system.img! chinese side dont get through please!!!
[ZTE Axon 7 Guides, News, & Discussion] rikin93:
Anyone tried this yet on A2017G?
[ZTE Axon 7 Guides, News, & Discussion] xtermmin:
http://xdaforums.com/axon-7/development/axon-7-chinese-stock-roms-t3436817

Check the Mega Mirror
[ZTE Axon 7 Guides, News, & Discussion] tupirujp:
OK OK OK I'm gonna ask for toooooooo much now ???? but can some one make a video of all these how to do it please
[ZTE Axon 7 Guides, News, & Discussion] blessingme:
Never give up

I used the MEGA MIRROR and i even registered by MEGA now thanks.

TWRP worked NOW!!!!

Im still on DEVICE STATE - UNLOCKED.

Maybe someone should try to help me, no WLAN. I will surely appreciate it.

Big thanks for you all xtermmin TeutonJon78 DrakenFX Unjustified Dev tenfar

AXON ZTE 7 CHINA MODEL

Axon ZTE 7 6 GB Ram @ 128 Intern + Sandisk 200 GB MicroSDXC Ultra Disk
[ZTE Axon 7 Guides, News, & Discussion] vadsvads:
I'm on the verge of buying the Axon 7 as my new phone here in Germany - did anyone try this method for a German model?
[ZTE Axon 7 Guides, News, & Discussion] blessingme:
http://www.android-hilfe.de/forum/zte-axon-7-forum.2803/

Meine ist zwar AXON ZTE 7 China Model mit 6GB RAM aber es geht gut auch mit Deutsch.

Its working fine with EU MODEL too.
[ZTE Axon 7 Guides, News, & Discussion] jpde:
Noone at android-hilfe has confirmed it working (or tried it, for that matter). It's just a translation of the post from here.
[ZTE Axon 7 Guides, News, & Discussion] blessingme:
No risk no fun. First buy it and try.
[ZTE Axon 7 Guides, News, & Discussion] jpde:
The point was that you said it was working with the EU model when in fact that hasn't been confirmed yet.
[ZTE Axon 7 Guides, News, & Discussion] SinisterXReaper:
I came from the droid turbo and was able to keep everything.
[ZTE Axon 7 Guides, News, & Discussion] xtermmin:
Droid Turbo launched with kitkat and was later updated to lollipop, don't think it ever got marshmallow.
[ZTE Axon 7 Guides, News, & Discussion] blessingme:
I need help for MODEM. No wifi !!!

mm
[ZTE Axon 7 Guides, News, & Discussion] DrakenFX:
Download you latest Full Factory image (B09 or B10) when you get that file send me a PM.
[ZTE Axon 7 Guides, News, & Discussion] blessingme:
Case solved!!!

I thank you so much. I solved the problems!!! I installed the a2017u :B20_blunlockedhttp://d-h.st/KaaQ crossed. Turned to Stock Recovery and format, reboot and then Full Factory image (B09) Update-zip B09 installed. Thank you Bro.

Never give up:cool:
[ZTE Axon 7 Guides, News, & Discussion] Unjustified Dev:
Awesome, so now we know every variant can unlock their bootloader.
[ZTE Axon 7 Guides, News, & Discussion] MaxRink:
now we just need a alternative for EDL-Mode on the G-Versions and basically any case of accidentally bricking is covered
[ZTE Axon 7 Guides, News, & Discussion] Unjustified Dev:
How do you all install recovery if edl isn't there?
[ZTE Axon 7 Guides, News, & Discussion] MaxRink:
you can aceess edl-mode via adb, but the HW-Mode to enter it leaves you in ZTEs flashmode (which usually is even more powerfull, on older ZTE-Devices you were able to swap IMEIs with that mode for example), which needs another tool to "unbrick" as tenfars tool does not allow flashing anything in that mode. So the second smth goes wrong and you a) not have working twrp or b) a booting ROM ur ****ed atm
[ZTE Axon 7 Guides, News, & Discussion] Unjustified Dev:
Does the same on A2017U
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
This was noted only on EU models so far, Vol + & - puts you into ZTE DFU mode but it seems like it's not always the case. It might have to do something with damaged partitions or so... I tried on US model and even from hard-reboot(power button 10 sec) it goes to EDL mode as longs as i hold Vol buttons prior to reboot. G models might have the separate DFU mode as default for HW key recovery

Edit:

Would adb edl reboot work from fastboot mode, is the ADB interface up? Fastboot can be accessed by Power + Volume Down, should be on all devices

Edit2:

Seems like someone has done it, needs modified fastboot.exe so it send proper command, hopefully the fastboot image on phone accepts it

http://xdaforums.com/redmi-note-3/how-to/guide-reboot-to-edl-mode-fastboot-test-t3398718

Edit3:

Hmmm, Power +Vol Down puts me in FTM mode.... i am sure i accessed fastboot the other day when testing the EDL somehow, just though i did not hold both vol buttons, but i was definitely in device status screen for fastboot

Edit4:

Ok so this is how you get in. Start the phone normally, when red led turns on and right when zte logo is to show up, hit both vol keys, that gets into bootloader and i can see it in fastboot devices, but command from above doesn't work...looks like it's striped from fastboot

FAILED (remote: unknown command)

even fastboot reboot doesen't reboot the phone

C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot reboot

rebooting...

finished. total time: 0.006s

but nothing happens it just stays in fastboot
[ZTE Axon 7 Guides, News, & Discussion] Unjustified Dev:
It's unavailable in the stock fastboot you have to install the A2017U file and oem unlock before any commands are available.
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
I though at least the reboot commands would work but yeah the seems it's all set to ignore even for valid commands

---------- Post added at 12:55 PM ---------- Previous post was at 12:34 PM ----------

BTW, even with A2017U B20_boot fastimage, how is oem unlock working on B02 EU models, their aboot is striped of these. also there is no fastboot key detection in B02 version so it's probably the same for EDL mode or rather it puts phone in DFU mode when it detects it (it's that dlmode key detection on the left)

Diff of aboot (left is B02, right is B20)
[ZTE Axon 7 Guides, News, & Discussion] MaxRink:
ya, i noticed that already. im sitting here with a device without boot and recoveryimage (damn typo) and i am unable to flash it back.

Replacement should come tomorrow morning though :P
[ZTE Axon 7 Guides, News, & Discussion] JKSurf:
If you already have TWRP and root access, why unlock the bootloader?
[ZTE Axon 7 Guides, News, & Discussion] Unjustified Dev:
Unless tenfar signs every custom image we make then there's a reason. Plus things like multirom won't work with locked bootloader it modifies the boot every time you need to update it therefore ruining the signature each time.
[ZTE Axon 7 Guides, News, & Discussion] blessingme:
It's Awesome and Magic, Tenfars Root. With DrakenFX and Unjustified Dev Unlocked sources, super. Oh yell yeah i rooted and Unlocked my Device Axon ZTE 7 A2017 China Model with 6GB through this ways!!! TWRP, TITANIUM BACKUP are so much working well. Thank you so much DrakenFX for your assistance yesterday. No issues, no worries with my Monster AXON 7!!! l'm very proud of you guys. Keep it up guys. Thank you all so much. I used this magic in my Monster Axon ZTE 7 China Model 6GB RAM 128 GB intern disc. It's goes too with SanDisk either 200GB or 256 GB Extern Disc. I'm using 200GB SanDisk right now. I've bought you some Cold Beer Bro DrakenFX (Paypal)
[ZTE Axon 7 Guides, News, & Discussion] Starvirus:
is it possible that it is not possible to unlock with the b02 boot from the twrp/root manual (even though my understanding would be that it is not necessary, just the recovery from there) since i still get unknown command for fastboot oem unlock with bootloader unlock enabled in the dev setting and the fastboot still looks like the stock one

Talking about a A2017G with b03 firmware - factory resetet
[ZTE Axon 7 Guides, News, & Discussion] Keiler90:
Does anybody tried this on the Europe A2017G phone?

Does it worked without any problems?
[ZTE Axon 7 Guides, News, & Discussion] aPexalpha:
Do you have to enable "OEM unlocking" in Dev options? Because right now im in Bootloop, but do have TWRP.
[ZTE Axon 7 Guides, News, & Discussion] xtermmin:
Yes.

"2- Enable "OEM UNLOCKING" under Developer Options"
[ZTE Axon 7 Guides, News, & Discussion] aPexalpha:
That'd be unfortunate because I can't seem to get out of my bootloop.

Can you not enable it in TWRP (with ADB or terminal emulator or so)?

EDIT:

If anyone has done this on the Chinese model. Could you upload your stock boot.img for me please? I pulled mine before using tenfar's tool before rooting but after restoring it, my phone still doesn't boot. Maybe I made a mistake.

If anyone could upload to B09 stock boot.img I'd be very happy. I could enable OEM Unlock and unlock this phone! (finally!)
[ZTE Axon 7 Guides, News, & Discussion] xtermmin:
Can probably get it from the full stock image.

http://xdaforums.com/axon-7/development/axon-7-chinese-stock-roms-t3436817

Mega link > Full Update Images > A2017-B09
[ZTE Axon 7 Guides, News, & Discussion] Kadenlam:
I am on A2017G B03.

I can't even get into the bootloader.

Tried all button combinations and commands. Still no luck.
[ZTE Axon 7 Guides, News, & Discussion] aPexalpha:
Oh I tried those. And the B07 once, even though I officially updated to B09. But no luck. :(
[ZTE Axon 7 Guides, News, & Discussion] celoxocis:
I don't own the A2017G but if you have root and have adb enabled. Try "adb reboot bootloader" or "adb reboot fastboot".

If both just simply reboot your phone then "fastboot binarys" have been removed.
[ZTE Axon 7 Guides, News, & Discussion] Mash87:
since when is root required to reboot phone via adb?
[ZTE Axon 7 Guides, News, & Discussion] celoxocis:
Adb reboot fastboot is an privileged command. You can't issue it without root.
[ZTE Axon 7 Guides, News, & Discussion] DrakenFX:
You DON'T need root to execute " adb reboot bootloader " command, what you need and always will need is the need to enable " USB Debugging " in see developers option...

Root is not require for such thing.
[ZTE Axon 7 Guides, News, & Discussion] celoxocis:
I was taking about "adb reboot fastboot".

The last time I issued it even with debugging enabled it shows a messages "permission denied". Try it yourself.
[ZTE Axon 7 Guides, News, & Discussion] DrakenFX:
You realize that Booting to Bootloader/Fastboot mode is the same right? fasstboot is more like the commands you use when you are in bootloader/fastboot mode, Anyone feel free to correct me if I'm wrong.
[ZTE Axon 7 Guides, News, & Discussion] celoxocis:
Instead of first going into bootloader and then choosing fastboot, you can issue the above command (adb reboot fastboot), and it will take your device directly to fastboot mode.

"adb reboot bootloader" takes you into the bootloader where you then can choose to enter fastboot.

Its different therefore there are two different commands. I have no idea why "adb reboot fastboot" requires root permission or the adb daemon to be restarted into root mode.

I didn't implement it (obviously) I just remember when I was porting my device to CM. I was sick off hit/holding the button combination required to enter fastboot every time. (I was flashing between different aboots, systems,modems, etc) to properly use "adb reboot fastboot" I had to be rooted or adb would feedback "permission denied" every time.

There are devices with removed "fastboot binarys" from the LK which will simply reboot the device when the above command is issued.

It's just a way to confirm for the A2017G user I replied to. If that happens than ZTE has indeed removed those binarys in the G version.
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
It is most likely so, see my post here on the diff between B02 G and B20 U aboot image

http://xdaforums.com/showpost.php?p=68689867&postcount=55

In addition to missing fastboot keypress detection, the G version also has dload mode that is ZTE DFU mode for Vol UP&Down instead getting the QCOM EDL mode. Missing oem unlock from aboot makes me thing G version can;t unlock even with fastboot image from B20 U
[ZTE Axon 7 Guides, News, & Discussion] DrakenFX:
the only 2 ways I been able to access QCOM EDL Mode is by either using adb and manually, but been thinking something and I'm not so sure about it, so I'll ask : is aboot.img device specific? Just ask cuz you been looking into it...

-Can you Flash stock b20 aboot.img from a U to the G , and without doing reboot system flash the fbop.img (All this done using TWRP) theN boot to bootloader from TWRP and proceed with the unlock command? " fastboot oem unlock " but of course having OEM unlocking check under developers option.

Just saying cuz all 3 variants share many, many things.

Ideas like this one is the reason this thread is here. :D
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
See here for nice graphs and code execution order of secure boot, APPSBL is the aboot btw

http://xdaforums.com/showthread.php?p=30056934#post30056934

This part is important in our case

SBL3/APPSBL/HLOS

• SBL3 (Krait SBL) loads and authenticates APPSBL and apps kernel
• Krait executes APPSBL and HLOS
• Krait loads and authenticates modem Hexagon firmware and
Hexagon software images, then takes them out of reset as needed
• Krait loads and authenticates LPA Hexagon image, then takes it out
of reset as needed
• Krait loads and authenticates DSPS ARM7 images, then takes them
out of reset as needed
• Krait loads and authenticates RIVA ARM9 images, then takes them
out of reset as needed
• Order of loading modem Hexagon, LPA Hexagon, and DSPS ARM7
can be decided by HLOS

Assuming the certificate chain is same an all editions, this might work, but if SBL3 checks against a hash as well then it won't match and will most likely just boot loop. There is also a part abut download modes being disabled by Qfuse
[ZTE Axon 7 Guides, News, & Discussion] MaxRink:
Shouldnt we be able to check and compare the signatures on the U and G version to find that out?
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
That's above my crypto-fu, maybe [MENTION=7134811](dylanger)[/MENTION] could tell us. I'll attach them for his convenience. I still don't know if all it relies is same certificate and matching signature or if there is more to it. Just flashing to try might leave you with the phone that goes only to DFU, i don't know
[ZTE Axon 7 Guides, News, & Discussion] strifej:
Just did this process and everything works perfect.

Just one note for those who had the encrypted TWRP problem. When you go to format dalvik/cache/data/internal, you'll get the encrypted error (cannot read data). Don't worry. Go back and do a factory wipe first. Then format dalvik/cache/data. It should work. Then format internal.
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
Which model, U, G or V ?
[ZTE Axon 7 Guides, News, & Discussion] Guido83:
just successfully tested on G model
[ZTE Axon 7 Guides, News, & Discussion] jpde:
Any changes from the instructions in the OP? Which software version were you on, B02 or B03 (if that makes any difference)?
[ZTE Axon 7 Guides, News, & Discussion] regenwurm16:
Hi strifej,

do you mean you unlocked your EU version bootloader by just flashing the fastboot.img from OP and then doing the commands or did you have to flash an aboot.img aswell?
[ZTE Axon 7 Guides, News, & Discussion] strifej:
I'm on U (North America), so, sorry, didn't do any of that aboot stuff. I was only mentioning it because I know a few people got TWRP encryption issues where it couldn't read your key. When I saw the same problem when trying to format, I freaked out too thinking it's over.. lol. But did a factory reset then went back to test and it low and behold, it worked, so wanted to share it right away. This way others hitting this issue can finally use SuperSU and Xposed without flashfire, etc.
[ZTE Axon 7 Guides, News, & Discussion] Guido83:
hmm but after a reboot, twrp is again asking for password. so it just worked omce
[ZTE Axon 7 Guides, News, & Discussion] strifej:
I just confirmed mine is still ok by booting into recovery. Maybe it's a Europe version problem?

Also, are you using the last TWRP posted by tenfar in his thread? Not sure if OP was updated to the newest (3.0.2-2) so you may have to look through the thread to find the post by tenfar.

I first did tenfar's method, which led to twrp encrypted. When I did this method, I did NOT reflash recovery. Only boot.

I would pm all the people that thanked you when you said G because they must have the same version and same problem. See if they're ok or not now.

Good luck :)
[ZTE Axon 7 Guides, News, & Discussion] Guido83:
yes I am using 3.0.2-2
[ZTE Axon 7 Guides, News, & Discussion] strifej:
Oh, I did one thing not in the instructions. In my eagerness seeing I could write to data, I flashed supersu 65 right away before booting into a clean rom. After booting into the ROM, I rebooted back to recovery to make backups of all my partitions.. I doubt it'd make any real difference, but at this point you're formatted, so you might as well try.. haha

Also, during initial setup of the phone, don't set fingerprint. Leave all security stuff unset so it's swipe only. Maybe if you set fingerprint first thing that causes the TWRP encryption bug? Because that's what happened to me using tenfar's method. I set fingerprint during rom setup, then I had the encryption bug. Sooo.. maybe after 1 or 2 reboots into twrp with NO security set, it avoids the problem.
[ZTE Axon 7 Guides, News, & Discussion] Guido83:
which super su exactly did you flash?
[ZTE Axon 7 Guides, News, & Discussion] blessingme:
UPDATE-SuperSU-v2.65-20151226141550:cool:
[ZTE Axon 7 Guides, News, & Discussion] Guido83:
For me its not working at all. Whenever I boot once the system, TWRP is encrypted again, even when skipping the fingerprint/security settings.

The supersu patches also the boot image, so the device does not boot anymore until i restore the boot image.
[ZTE Axon 7 Guides, News, & Discussion] strifej:
I can only suggestion restoring your phone to full stock using a factory image then try again. I used supersu 2.65 as noted a few posts above.
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
Can you reboot to bootloader and confirm it shows unlocked
[ZTE Axon 7 Guides, News, & Discussion] regenwurm16:
OH MY MOTHERF***ING GOD!!!

I used tenfar's tool to flash the TWRP recovery and then I flashed the modified fastboot.img from this thread and after trying the unlock command in fastboot it didn't work of course. So I became adventurous (even though I already ****ed up one phone) and flashed the aboot.img from the B20 stock thread http://xdaforums.com/axon-7/development/untouched-b20-boot-recovery-files-t3443818 to my phone and low and behold I could actually UNLOCK my B02 EU version without even touching the boot.img!!!

And it still booted, Wi-Fi is still working and it's really saying "DEVICE STATE - unlocked"

I'm so fu**ing happy!!!
[ZTE Axon 7 Guides, News, & Discussion] DrakenFX:
So my idea of flashing aboot.img from b20 (U) to G to unlock BOOTLOADER came to fruition hehehe...cool thank for been brave and posting the results,

If someone else with the G can test this for 2nd confirmation ,I'll be adding the changes to my OP.
[ZTE Axon 7 Guides, News, & Discussion] regenwurm16:
I can furthermore confirm that mobile data works as well so I think every possible problem did not occur to me.

Now the next adventure is to update to B03. I suppose I would just need to reflash the old stock recovery. Can I do this while being in TWRP via the adb dd commands?
[ZTE Axon 7 Guides, News, & Discussion] DrakenFX:
if you already have TWRP and unlock bootloader no NEED to do that.... just hold in there, i'll be creating a Flashable B03 zip (Been testing it for A2017U and i have use B03 on my USA version hehehe),

just give me little time or PM if you want to create one your self.
[ZTE Axon 7 Guides, News, & Discussion] regenwurm16:
Thanks for your effort most probably this will be the route to go now as ZTE is providing full OTA images it should pose no problem to make them into a TWRP flashable zip without the need to revert anything back to stock(recovery, fastboot or aboot).
[ZTE Axon 7 Guides, News, & Discussion] Starvirus:
Hi guys,

finally i got my B03 A2017G bootloader unlocked. Here is how I did it:

1. enable developer menu -> settings -> about phone tap 7 times on the build number

2. go to developer options -> enable oem unlock

3. backup your recovery and boot with axon7backup (axon7backup -d -p X) - get axon7backup from here: http://d-h.st/Ienb

4. flash twrp-3.0.2-2 with axon7root (rename the file as recovery.img and put it in the same directory as the axon7root.exe and execute axon7root -p X -r) - get axon7root from here: http://d-h.st/aPiC get twrp-3.0.2-2 from here: http://d-h.st/dgWW

5. boot into twrp, hold power and volume up until you are in twrp

6. execute: - get the aboot.img from here: https://mega.nz/#F!rcFCQZ7C!vn457hU1zDwc0uVpvm5otw

#copy necessary files to internal sd card
adb push aboot.img /sdcard/
adb push fastboot_unlock.img /sdcard/

#make a backup to your internal sd of the partitions we are going to modify
adb shell dd if=/dev/block/bootdevice/by-name/fbop of=/sdcard/fbop_lock.img
adb shell dd if=/dev/block/bootdevice/by-name/aboot of=/sdcard/aboot_lock.img

#copy them to your pc
adb pull /sdcard/fbop_lock.img
adb pull /sdcard/aboot_lock.img

#flash the proper fastboot and aboot file
adb shell dd if=/sdcard/fastboot_unlock.img of=/dev/block/bootdevice/by-name/fbop
adb shell dd if=/sdcard/aboot.img of=/dev/block/bootdevice/by-name/aboot

#boot to fastboot
adb reboot bootloader

7.

fastboot oem unlock

8. follow instructions on your phone

9. boot into twrp -> vol up + power button

10. wipe data

11. enjoy the unlocked device

Hope this helps a few guys
[ZTE Axon 7 Guides, News, & Discussion] DrakenFX:
Thank you I'll be adding this and update OP in findings.

[MENTION=1150948]Starvirus[/MENTION] you can use this on your steps base on B03 TWRP Flashable package instead of

#flash the proper fastboot and aboot file
adb shell dd if=/sdcard/fastboot_unlock.img of=/dev/block/bootdevice/by-name/fbop
adb shell dd if=/sdcard/aboot.img of=/dev/block/bootdevice/by-name/aboot

i already updated the OP and adding the flashable zip will cut the command line and the way of flashing the files
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
So that answers the question if they were signed by same cert chain. You are a brave soul to attempt this considering what happened by the first one, we salute you. BTW do key presses for EDL and fastboot work now? I wonder if it's all in aboot or if there is more
[ZTE Axon 7 Guides, News, & Discussion] DrakenFX:
he already unlock bootloader when B02 and updated to B03 via TWRP flashable zip using the B03_Full Update and haven't had any sort of issues (Wifi,Modem, etc working so far for him) and he is the 3er user doing it (2 users on B02 and 1 user on B03) .....
[ZTE Axon 7 Guides, News, & Discussion] peramikic:
Yeah i got that, i was wondering if keypress detection changed as well on the G models since before they could not get in to fastboot or EDL with Vol up and down
[ZTE Axon 7 Guides, News, & Discussion] Starvirus:
nope key patterns didn't change, vol up still recovery, vol down still FTM...