yashsingh1/xdaforums huggingface dataset:
[Android Q&A, Help & Troubleshooting] siskiou:
Awesome thread! Thanks for all the info!

I can get into the android desktop and have installed Smart Taskbar and App2SD.

Anything else i try to install either has a parsing error, or won't fit.

There is supposedly 2GB sd card space, that I cannot access to copy to, even with App2SD.

Any ideas how to access that space? What is it even there for if it can't be used?

If I add a micro sd to the slot, android boots from it, even if it is an empty sd card, and the card does not show up in the settings.

Also, the browser constantly has issues with supposedly outdated security certificates, even though time and date are set correctly, and thecertificate is within date.

The browser won't allow me to go to many websites, and often tells me it is outdated.

Netflix, for example.

Thanks for any help/ideas1
[Android Q&A, Help & Troubleshooting] Aqua1ung:
Got me a brand new NordicTrack Elliptical Commercial 14.9 (NTEL71517). Followed instructions, installed Smart Taskbar. Big thanks to whomever discovered this hack! Currently looking to tweak some of the built-in workout routines. Looks like they're all hosted on s3.amazonaws.com. I am guessing, however, that they should be downloaded/cached somewhere locally, as I cannot imagine one needs an internet connection to do one's workout. Any idea where these might be hosted locally?

Anyway, thank you all for your pioneering work! Someone should post a quick tutorial in the OP with steps on how to hack this machine. Here's a beginning:

Turn on machine.

Once you see ANDROID appear in the center of the screen, hold the menu button pressed ("the dashes button that is between the home and back buttons on the console") until you see "Unable to load widget" on the screen. This launches safe mode, hence bypasses the loading of the iFit application that steals focus.

Go to settings, and enable side loading.

Launch browser and download Smart Taskbar (or plug in a USB dongle containing the Smart Taskbar apk file to the USB port).

Install Smart Taskbar.

Reboot after installing Smart Taskbar.

Allow normal boot up, no safe mode required. You'll notice the trademark Smart Taskbar arrow on the screen. Launch Smart Taskbar. You're in. Feel free to kill the iFit process to restore Android desktop.

Next: root (how?) + install apps to USB dongle (how?). Someone else, please detail these steps.

Many thanks again!
[Android Q&A, Help & Troubleshooting] chuck1026:
This is very encouraging! I just set up our new c2950 (2017) and the first thing I noticed was the 22" tablet is Android based... the trouble is at / during boot I don't see any back, home or menu icons... no dash. It would be great to be able to use VLC to play MP4's from the USB port on the side of the console assembly while exercising! There must be a way to crack this thing!
[Android Q&A, Help & Troubleshooting] Aqua1ung:
Those are hardware buttons, they're not on the screen. You'll see a button labelled with a stylized house. To its right you should have a menu (bunch of dashes atop each other) that's the one you should hold hold down during boot.
[Android Q&A, Help & Troubleshooting] chuck1026:
I just looked again. No Android icons (no stacked bars for menu, nothing_ on the 22" screen or surround?!? [IMG="C2950 screen"]https://www.nordictrack.com/cmsstatic/NTL19117_galleryd@2x-2.jpg[/IMG]
[Android Q&A, Help & Troubleshooting] Aqua1ung:
Here's what you should be looking for: https://drive.google.com/file/d/1lgbNoQnc4SGwiBVHV5SvsmlNT20pFNYt/view
[Android Q&A, Help & Troubleshooting] chuck1026:
Yes, I was looking for those icons. They're not printed or displayed anywhere on the console. Thanks for the picture but the 2017 Commercial 2950's 22" display and bezel don't seem to have them. Dead in the water until I can find where they're hidden.

---------- Post added at 10:53 AM ---------- Previous post was at 10:31 AM ----------

So I went to maps and edit... along with the keyboard I found them

https://photos.app.goo.gl/4sCTPz1HjCym0TGm2 .

Too bad when I use any of them long press etc... I get nowhere --- when I press menu the background looks like Lollipop though https://photos.app.goo.gl/VE9vmOg5BH2bRtWE3 .

They don't appear during boot... getting closer but not there yet!
[Android Q&A, Help & Troubleshooting] chuck1026:
I got in. Turned on USB debugging... Can load apps but sadly Netflix won't run. Maybe root? Need to extract the iFit apps just in case.
[Android Q&A, Help & Troubleshooting] chuck1026:
Okay, I spoke with tech support today, which was very disappointing.

My neighbors heavy use of 2.4GHz have sucked up channels 1, 6 and 11... Buffering is an issue. I countered by moving my 2.4/5.0 WAP directly behind the treadmill. Now the bluetooth heart monitor craps out after 5 or so minutes of connecting. I suspect the 2.4GHz WAP is too damn strong in that close proximity.

My latest quest is to identify if the hardware has the capability to connect to a 5GHz wifi network because in settings only 2.4GHz is available. That seems crazy for a modern android tablet (or is it modern)? Plan B is to unlock use of the USB port to utilize a OTG USB to ethernet adapter so I can hardwire to the treadmill.
[Android Q&A, Help & Troubleshooting] snapper245:
Just for a funny test, you could create a faraday cage around the combined wifi and treadmill. A simple box box lined with aluminum foil should do the trick. Isolate that the issue is external to your system.

Just my 2 cents
[Android Q&A, Help & Troubleshooting] chuck1026:
I was thinking of just moving the WAP away slowly in stages... then out of the room and seeing what happens, but I like your suggestion!

Still, the hardware is unknown... I guess Nordictrack leaves me no choice but to grab some tools and peak, then use the info to research.
[Android Q&A, Help & Troubleshooting] zindine:
How did you get in your 2950?

How did you get in and turn on USB debugging?

Thanks
[Android Q&A, Help & Troubleshooting] ftsur:
Great thread, thanks to everyone for all the info!

[MENTION=5440087]chuck1026[/MENTION], how did you get in to settings?? I am able to get to the background like you show in your pic, but can't get any further. I would LOVE to know how you did it!

Thanks!
[Android Q&A, Help & Troubleshooting] chuck1026:
Power up the treadmill and immediately swipe up from the bottom center of the screen. The Lollipop icons will appear. If if it tries to open swipe it off to the right. Resume your mission to get to settings to change USB debugging and then security to allow unknown sources.
[Android Q&A, Help & Troubleshooting] bounty1342:
Any news on this ?

I would love to install connect blutooth headphone to the tablet !
[Android Q&A, Help & Troubleshooting] RyeBrye:
So it turns out on the newest ones there's a very easy easy to get into it.

Go to the settings mode, go to maintenance - then in the spot below the options there is a bunch of grey space.

Tap the same spot 10 times.

Wait 5-7 seconds

Tap the same spot 10 more times.

It will then pop up that "privileged mode is enabled"

When you enable it, you can drag down from the top and get access to the menu bar and go into android settings. You can also swipe up from the bottom and get to the default apps - it has a browser, camera, ifit admin, and the ifit cardio.

USB debugging was already enabled for me as was unknown sources - I'm not sure if that's because I activated privileged mode or not.

You can pair Bluetooth devices with it from the settings - I think it only works to send OUT sounds - it would be nice if you could connect audio to it via Bluetooth (they added that in the latest models, mind still just has aux in)
[Android Q&A, Help & Troubleshooting] RyeBrye:
Ok, it gets _even better_

after running nmap on my device's IP address, I saw it had 3 ports opened... 5009, 5555, 5000...

On a hunch, I decided to check if 5555 was setup for ADB in tcp mode... turns out it is.

`adb connect #.#.#.#:5555` (where the #'s are the IP address) works like a charm.

then `adb shell` - comes back with a _root shell_

`|root@byt_t_crv2:/ # `

I'm sure 5555 was open before I did the tapping-on-the-window thing, so it looks like these things _ship_ with TCP ADB enabled into a root shell for you.
[Android Q&A, Help & Troubleshooting] michaelF86:
This worked on my x22i commercial and was able to enter privileged mode. When I was trying to install Zwift from the Google Play store the treadmill restarted. Anyone know what can be done from here as far as "jailbreaking" goes?

Also in the settings it shows ethernet, does this thing have an RJ45 hiding under the plastic shell somewhere? Would be nice to hardwire it to the router.

Cheers,

Michael
[Android Q&A, Help & Troubleshooting] chuck1026:
I have a 2018 2950 commercial and can't get a USB to Ethernet adapter to work.
[Android Q&A, Help & Troubleshooting] michaelF86:
same on my 2018 x22i, the transmit and receive lights are active but doesn't seem to actually connect. Halfway tempted to take the screws out of the console and see if there's a hidden ethernet adapter somewhere.
[Android Q&A, Help & Troubleshooting] txotx:
Howdy,

I have a brand new x22i and apparently they still only connect to 2.4GHz wifi networks (ugh). I live in the middle of Manhattan where that frequency is flooded with a lot of interference, so I'm struggling with video buffering for the cloud-based workouts. If anyone has figured out how to increase the speed (or even better hardwire the tread -- any luck with USB-to-ethernet?), I'd love to hear about it.

Cheers!
[Android Q&A, Help & Troubleshooting] DaiC1:
Yea its a shame that development of this halted I was hoping to install the Less Mills app on the S22i.
[Android Q&A, Help & Troubleshooting] guyfromSF:
How do i go about rooting this tablet? I followed your steps and got into privileged mode. Before i do any changes, want to backup the ROM. But somehow cant seem to root it. Have tried kingoroot and lots of other software, but cant seem to get through. I cant seem to get the adb connect working either... Any ideas?
[Android Q&A, Help & Troubleshooting] chuck1026:
Nice to see this alive again. Has anyone found an Ethernet Port by opening up the tablet? The 2.4GHz WiFi is really a problem for cloud workouts. Also, the HDMI port doesn't seem to work either.
[Android Q&A, Help & Troubleshooting] guyfromSF:
I didn't have to open the tablet. The ethernet port is at the back of the tablet and it works. So does the hdmi port. Both work once you get pprivileged mode. I was also able to root the device using Kingroot via PC.

Now need to take a backup of the firmware and modify the elliptical tablet to use on Proform Tour de France bike using Zwift or Peleton app. That way theZwift or Peleton app can control the bike.
[Android Q&A, Help & Troubleshooting] chuck1026:
Looking at my 22 inch tablet.... No Ethernet Port on the external visible areas. I do see HDMI. I do have privileged mode enabled but still HDMI isn't working. I've tried with a known good cable.
[Android Q&A, Help & Troubleshooting] chuck1026:
I'm still unable to use a USB to ethernet adapter. Has anyone succeeded with the 2017 or newer 2950 commercial treadmill or maybe it's steeper sister the X22i?
[Android Q&A, Help & Troubleshooting] chuck1026:
Hello all... I need some help with rooting my 22 inch console on my 2017 Nordictrack 2950 Commercial. Has anyone done so and unlocked the USB so it can support a USB to ethernet dongle? That is my goal because my neighbor(s) - example - one has like 10 2.4GHz cameras and routers for some reason and he has crippled my treadmill - even with me moving the wifi access point directly next to the console! HELP!!!
[Android Q&A, Help & Troubleshooting] jx22i:
Once in privileged mode, can you open Chrome to access Youtube or Peleton videos?
[Android Q&A, Help & Troubleshooting] kzoojason76:
Hello everyone!! My wife and I just purchased the 2019 Commercial 1750. We would like to mirror the display to a larger TV. I was able to access "privileged mode" and get into the settings for Cast. However, for some reason, it won't detect the Chromecast that we have attached to the TV. I was thinking about sideloading the Google Home app to see if that would be able to see it.

Any thoughts?
[Android Q&A, Help & Troubleshooting] chuck1026:
My 2017 2950 has a HDMI out that doesn't work... I need to try one more time with a shorter HDMI cable...

As for casting, I haven't tried but I like the concept. I do have privileged mode enabled... I think there's something more to casting that may still be locked out without root? Wish I knew more but I nearly bricked the treadmill a while back playing around with the OS.....
[Android Q&A, Help & Troubleshooting] kzoojason76:
Hi Chuck. It looks like they took out the HDMI port (or at least hid it) on the post 2017 versions of the Commercial #### treadmills. That's what led me down the casting route. My first step is to get a more recent chromecast. The one I have is one of the very first ones, so it is possible I'm just not seeing it because the chromecast is too old. I know I have a newer generation laying around somewhere. If that doesn't work, then I think I may try to load the APK for Google Home and see if that will find it.

Wish me luck!! I don't think I can brick anything by just loading an APK for Google Home.
[Android Q&A, Help & Troubleshooting] chuck1026:
Hmmm. Before you do that, I suggest (at your own risk) loading a APK Export program and grab the existing apk's on the treadmill for safe keeping.
[Android Q&A, Help & Troubleshooting] griffiet:
There seem to be a couple of these tablets - I have a 2019 model NordicTrack C1750. The tablet is mounted in the user control panel in such a way that you can't get to the back - can I ask - is your setup more accessible? Or did you take off some of the console plastic to get at the back of the tablet and reach the Ethernet port? Is there a USB there, too? What about Micro SD?

Has root access given you the ability to side load or gain access to the workouts? On older versions of the tablet, users were able to add custom workout files. That's what I'd like to do.

Thanks for the help!

---------- Post added at 01:31 AM ---------- Previous post was at 01:23 AM ----------

It doesn't have much info in it, but I found a copy of the manual for the tablet in my treadmill (2019 NordicTrack C1750, the 10 inch model) online at "https://fccid.io/OMC402547/User-Manual/user-manual-4015020.pdf"

I see that this is produced as a product of Icon Fitness, and has a model name of MP10-ARGON. I would assume users with larger tablet sizes would find similiar manuals by googling MP22-ARGON, etc.

I did wonder how to get out of privileged mode so that the tablet boots to iFit Cardio automatically again. I used the system reset feature and the tablet acted as if I had plugged it in for the first time.

Someone else asked about Youtube video - I was able to fullscreen Youtube in the browser with no issues.
[Android Q&A, Help & Troubleshooting] jimbo913:
I accidentally turned on privileged mode after my screen froze and I tapped the same spot several times (the error box) and would rather my treadmill boot directly into iFit. How can you go back and turn off privileged mode?
[Android Q&A, Help & Troubleshooting] sushijim:
Nordictrack C9.5 Elliptical iFit Console - part 360526

just to put this info out there.

new Nordictrack C9.5 Elliptical iFit. On the outside the console ONLY has an audio jack, USB, and HDMI ports. The screen on the C9.5 is only a 7" display. After assembling I tested the HDMI to an external 24' 1080p screen and it worked great, sound also came through. However, I found the wireless connection having issues at times. Pulled console off and carefully opened it up. And found a lot of ports on the back of the iFit display unit, not exposed on the external case - MicroSD, Internet Jack, OTG, 2 UART, and others. The console has part no. 360526 and model no. MP7QCFS. I did test plugging an internet/LAN cable directly into the jack and then turned off the wireless and it worked fine. Internet cable is easy as you could snake it through the fan cover, not sure how you would access the microSD port. I have been taking photos to further analyze all the components. There is a manual online for the 360526 console model that outlines the ports.

[IMG="iFit console front view"]https://drive.google.com/file/d/1S-gBLtF5U2qG4fO6WLDCybmPmtfLk0aE/view?usp=sharing[/IMG]

[IMG="iFit console jacks"]https://drive.google.com/file/d/1TtaQq2mbeVUvYXNCewfiz9bEcYk5349h/view?usp=sharing[/IMG]

[IMG="Console Diagram"]https://drive.google.com/file/d/1ktB11ONdrFgzAHay0Y1ceLftFe2ChDx7/view?usp=sharing[/IMG]

Additional Information specific to the iFit Console model no. MP7QCFS in the Nordictrack C9.5 elliptical...

OS info:

Model Number – AOSP on Drone

Android Version – 5.1.1

Kernel Version 3.4.39

CPU:

Samsung Exynos 4412(POP) - side note, this is what powered the Samsung Galaxy S3
[Android Q&A, Help & Troubleshooting] chuck1026:
That's good information! I'm going to need to get to back of my treadmill and get to that hidden Ethernet Port because the 2.4 GHz wireless is horrible!
[Android Q&A, Help & Troubleshooting] jlear3:
Does anyone have any links to recoveries for these treadmills? My fiance just got one used but it does not boot past the IFIT logo. I have used adb quite a bit and was hoping I may be able to fix it but cannot find any recovery information anywhere. All of the earlier links in this post are dead.
[Android Q&A, Help & Troubleshooting] Mr.Dad:
Great info here. Going to try that method to get into privileged mode on my X22I. As for Zwift, it won't work as you need Android 6.0+. My NordicTrack X22i is running Android 5.1.1. Not sure if the newer treadmills come with an updated newer version of Android. Thanks for the good info!
[Android Q&A, Help & Troubleshooting] TC!!:
I just bought an ex display Pro-Form Studio Pro bike, the company behind iFit sells similar equipment badged as Pro-Form or NordicTrack.

I was able to use this to go into settings and connect to a cheap Wahoo Bluetooth heart rate monitor, half the price of the official iFit heart rate monitor.

I've got my bluetooth earphones working as well and it's great being able to use the browser to watch YouTube videos.

This guy was able to install apps onto his, does anyone know how we can install Apps?

I can't post links so search youtube for "How to access the iFit Admin Console on your NordicTrack treadmill"

Finally my family will be using this as well, is there a way to get out of admin mode so it goes back to booting straight into iFit Coach App?

It does launch it in the end after waiting but I know my kids won't be able to stop themselves from trying things in Android.
[Android Q&A, Help & Troubleshooting] griffiet:
I believe he is using the browser to visit an online APK site, something like APKMirror. There are several, which would allow you to D/L an APK for Hulu, for instance. You would then open the Downloads app, select the APK file, and choose to Install.
[Android Q&A, Help & Troubleshooting] narwal_nordictrack:
Successful casting on NordicTrack X22i?

I am the recent owner of an X22i treadmill. After watching a youtube video, I successfully put it into privileged mode and loaded up Netflix. All good.

However, I would like to cast my display to a large TV I have in my home gym so that my wife can do some non-treadmill-based workouts on iFit. At least some owners of the X22i have verified that they can do this via: Settings | Display | Cast and then selecting "Enable Wireless Screen", choosing their receiving device and off they go. My device (on Android 7.1.2, build number argon_20190521, X22i specific model is NTL29019.0) does not show the option. Is there a way to add that option? I'm new to Android and new to NordicTrack.

I've successfully loaded Google Home (thinking I could do it via the app) on the device via APKPure, but it won't run because the device isn't compatible with the Google Play Store (maybe there is a way to fool it?).
[Android Q&A, Help & Troubleshooting] DoctorNT:
Hi ntsteele. I too have messed around a bit with my NordicTrack X22i incline trainer treadmill. From the Android desktop I have installed Netflix, Amazon Prime Video, some other useful apps like ES File Explorer and even the Peloton app! It is fun seeing what I can and can't do, but at the same time frustrating because it is running an ancient Android version 5.1.1. Even worse the architecture is armeabi-v7a not arm64-v8a. I am limited on what I can install.

Good to see others are interested. I too want to crack open the display to show the inside but have not really had the urge as my older X22i comes with a visible USB port.

NordicTrack has customized this environment for their iFIT> app and you have to play around a bit to "discover" the privileged mode Android desktop. At least the newer machines have Android v7.0+ and an arm64-v8a CPU. It still is not great but then again, I doubt NordicTrack wants their customers to install other apps besides their iFIT> app. If someone only has the iCIT> app running and are not aware of the other options, they may be more inclined to sign up for another year of iFIT>. Me, i don't mind walking, running, hiking on my X22i while watching season 2 of the Umbrella Academy. ;o)
[Android Q&A, Help & Troubleshooting] cdworth:
I just purchased an x11i. It's got Android 7 on it. I was able to easily get into privileged mode with the 10 taps method and from there I used the browser to install F-Droid, then Aurora Store, and from there any apps. I'd like that are available in Google Play. Those are all working well, (only odd thing is that when I pair with wireless headphones in Android, any app that generates audio is still sending things out via the builtin speakers).

I haven't opened the case yet, but haven't been able to see any USB, RJ45, nor SD card ports. I verified with nmap that there are no open ports by default, so I'm not going to get the easy REST API with JSON for controlling the speed and incline remotely nor get an easy TCP-based ADB bridge to give me root.

I have installed termux and openssh so I can now ssh into this Android tablet on the treadmill, which is very convenient. What I want to do next is to figure out how to control the speed and incline of the treadmill from software. I'm capable of writing an Android application; I just need to figure out what it needs to do to make things happen. I think it will be much easier to figure that out if I can get root access first. Does anybody know a mechanism for doing that from this state?

Thanks in advance for any help.
[Android Q&A, Help & Troubleshooting] RyeBrye:
Did you try using wireless adb shell? My treadmill was unlocked and shipped with a shell in root mode - nothing special was needed to root it.

That being said I haven't done much with it. You can decompile their apk and see the control stuff it uses, iirc it has a native binary that it uses to handle the treadmill speed / incline settings.
[Android Q&A, Help & Troubleshooting] cdworth:
I definitely don't have any wireless adb running on my tablet unfortunately. I can enable USB debugging in the settings, which I would hope would let me access an adb shell (and hopefully with root) if I could access a USB port. But I haven't found any USB port yet. (If I tip the tablet to an extreme point I can see three connectors connected on the back---nothing consumer standard, just a few headers---presumably providing power and then sending signals out to the speed and incline controller.)

Those are definitely the next steps I'd be interested in doing, seeing the control stuff it's using and seeing if I could directly invoke their binary, (even better if I could do that without root access).

Any additional information you have would be great. And I really wish I had root access on this, the most expensive Android tablet I've ever purchased...
[Android Q&A, Help & Troubleshooting] fach1973:
Hello everybody!sorry to bring back this threat. If anybody has the fit-restore.zip and can share will befanrastic. My 1750 is stuck trying to install ifit, and it needs a restore. I hope anybody can help me out by sharing the file. Thank you