[ZTE Axon 7 Guides, News, & Discussion] Oki:
This guide provides all the steps and patches required to root the Stock system and having Xposed installed while maintaining SafetyNet (Android Pay, Pokemon Go, etc) compatibility. There are some problems of this method that Magisk is supposed to fix, however the latest Magisk v10 is not supporting our stock ROM yet.

The prerequisites of this guide is to have the bootloader unlocked and TWRP recovery.

DOWNLOADS

The recipe require the following ingredients to be downloaded to your internal or external storage:

1. TWRP 3.0.3 (This is the last release at this moment). more info in the Official Thread. Thanks to [MENTION=5672995]jcadduono[/MENTION] . TWRP 3.0.2 can't succesfully flash SuperSU 2.79

2. Default Stock ROM for your phone (Required only if you have modified your system or boot partition). You can download them from this thread. Thanks to [MENTION=3044858]DrakenFX[/MENTION] . You can alsouse any other custom ROM based on stock such as ZADMix or HelsAx7 SubMix (both tested).

3. SuperSU v2.79. more info in its official thread.

4. SUhide 0.55. More info in its official thread. Thanks to Chainfire.

5. SafetyNet-KCAL Kernel patch, thanks to [MENTION=5672995]jcadduono[/MENTION] also for this one!

6. Xposed v86.2 So far only this version is compatible with SUhide.

7. Material Design Xposed Manager app by DVDandroid. More info about this release in its official thread.

8. Root Switch 1.3.3.2 app. Thanks to shakalaca. More info in its official thread.

INSTALLATION

1. Do a backup of your system, I recommend Boot+System+Data partitions. The next steps will modify at least your boot and data partitions, and some Xposed modules will modify also your system partition.

2. If you already have TWRP 3.0.3 then just boot to recovery and proceed to step 3. If you are still using TWRP 3.0.2 please upgrade to the latest TWRP 3.0.3 and reboot to recovery again.

3. I recommend to flash the default Boot and System Partitions and reboot directly to recovery. You can also use any other custom ROM based on the stock ROM such as ZADMix or HelsAx7.

4. All this step must be done without leaving TWRP. Flash SuperSU 2.79 adding also the zips for SUhide 0.55, Xposed v86.2 and the SafetyNet Kernel patch in that order. They must be flashed together. Without leaving TWRP, navigate from the main menu to Advanced > Terminal, introduce the command reboot disemmcwp and the system will reboot by itself once or twice while configuring the settings for SuperSU. Do not be alarmed.

5. Install Xposed Manager and Root Switch apps.

6. Now you have your system fully rooted and you can now install Xposed modules. However you will see the test app SafetyNet Helper reporting a validation failure. Do not worry about it anymore! When you want to initiate a SafetyNet sensitive application (Android Pay or Pokemon Go among others), just open Root Switch and disable root,

no need to reboot

. SafetyNet will pass and all your apps will work. You can see that Xposed continue working even after disabling root since it was started before. Do not forget to enable root again otherwise new apps requiring root won't load.

Magisk v10+ promises auto root hide per app, but sadly our stock ROM is not yet supported and the method psoposed here requires the user to disable root before loading any SafetyNet protected app.

Enjoy