[Samsung Galaxy S9 & S9+ Cross Device Development] _alexndr:
How to fix "KG STATE: Prenormal" / "only official binaries allowed"

Some time ago, when I started working on v6.x and before I realized that even playing with /odm with incorrect SELinux contexts for files may lead to "KG STATE: Prenormal" in Pie - my personal device has also been locked...

There are 2 working solutions (tested both personally):

1. FAST AND SAFE SOLUTION, BUT IT WILL NOT SOLVE PROBLEM PERMANENTLY - in case you will see "only official binaries allowed" - do not flash full firmware with PC Odin - it is enough to flash BRJ6 bootloader using PC Odin and your phone will boot normally

The disadvantage of the above solution is that you are advised to use the Oreo bootloader with Pie (forever, until you unlock your device permanently). There is another solution which I performed personally:

2. PERMANENT BUT RISKY SOLUTION (by "risky" I mean that in the worst case you will need to wait 7 days to re-appear OEM unlock toggle). Fact that it worked for me does not mean that it solve your problem - do it at your own risk. Some steps probably were not necessary, but I decided to give an exact description of the steps I have done myself (

be prepared and before you start

- copy update.zip mentioned below (you can download it from HERE) and also my the newest DevBase Pie ROM to External SD Card):

- Flash full OXM BRJ6 firmware using PC Odin (I used CSC_*.tar.md5 file, NOT HOME_CSC_*.tar.md5) and stay tuned for next step below

- Let it (auto)reboot ONCE to stock recovery, to complete operation, but DO NOT let it boot to system - when it will (auto)reboot second time - you need to IMMEDIATELY press Recovery Mode keys combination

- In stock recovery flash ZRKA OTA update.zip - open it from external SD card

- Wait patiently - it may take several minutes and will (auto)reboot at the end

- LET IT FULLY BOOT TO PIE - perform initial setup - log in Google & Samsung account, etc...

- You can check if OEM unlock is present but for me it wasn't here at this stage. However - I haven't checked it second time after a few minutes, didn't know yet that it could help (as it turned out after the next setup - described below)

If there is "OEM Unlock" visible and enabled - you can skip next steps (wipe data + performing initial setup again) and go directly to last three steps related to TWRP. Otherwise:

- Go to Pie stock recovery and perform "wipe data/factory reset", then reboot

- Perform (again) initial setup - log in Google & Samsung account, etc...

- Activate and go to Developer Options - for me there was no OEM unlock when I went to Dev Options first time... but then magic has become - when I went to Developer Options second time (not rebooted phone in the meantime, nothing, just waited maybe 2-3 minutes) - OEM Unlock toggle WAS THERE (and enabled already) :D

At this stage you are ready to go with TWRP:

- Go to Download Mode and flash TWRP using PC Odin, but DO NOT LET IT BOOT to system - when it will (auto)reboot - you need to IMMEDIATELY press Recovery Mode keys combination

- Perform "Format /data" (MANDATORY)

- Flash my the newest Pie DevBase ROM

That's all :cool: :cowboy: Congratulations :D you just solved problem and you are using Pie bootloader + TWRP + Pie DevBase ROM

Screenshoths in my previous post (#84) prove that it helped for me :cool:

(... but I will repeat again - no guarantee !!!

do it at your own risk !!!

in the worst case you will need to wait 7 days)

EDIT: Above solutions will not help if you panicked, flashed full Oreo firmware, let it fully boot and in result you lost "OEM unlock" toggle in the Developer options @ Oreo stock ROM. In such case you will need to wait 7 days anyway...