13

[GUIDE] How to root Redmi 9C and pass SafetyNet (tested)

 2 years ago
source link: https://forum.xda-developers.com/t/guide-how-to-root-redmi-9c-and-pass-safetynet-tested.4251085/page-6#post-87020991
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

[GUIDE] How to root Redmi 9C and pass SafetyNet (tested)

I am not responsible for your actions, but I will try to help.


I'm going to assume you have unlocked bootloader and ADB/Fastboot tools installed.

1. Download latest Magisk and make 2 copies of it. Install one of them on your phone. Change the extension of 2nd from .apk to .zip, then move it to your phone`s storage

2. Download Pitch Black recovery for Redmi 9C

3. Move recovery.img to both your ADB folder (can be found at C:\adb) and phone`s storage

5. Download DM-VERITY, FORCED ENCRYPTION

6. Rename it to enfec.zip and place in phone`s storage

4. Download attached vbmeta.img and place it in your ADB folder

5. Go into fastboot mode

5. On your PC, open cmd-here.exe in adb folder

6. fastboot flash recovery recovery.img

7. fastboot flash vbmeta vbmeta.img

8. fastboot reboot recovery

9. Sometimes recoveries don't work with touchscreen. In this case, flash other region's ROM. To do this, find and download fastboot version of ROM. Unzip it, run flash_all.bat while being in a fastboot mode (this will erase all data). WARNING: DO NOT RUN flash_all_and_lock.bat. THIS WILL LOCK THE BOOTLOADER AND YOU WILL HAVE TO WAIT ANOTHER WEEK!
Next retry again the whole tutorial. You can also use USB-OTG mouse.

10. Navigate to 'Install' section. Check every option except 'Reboot after installation is complete', 'Zip signature verification' and 'Advanced remove of Forced Encryption'. Select recovery image that you previously moved to your storage and install it 'as Recovery'.

11. In recovery, move to 'backup' and make a backup to your SD card (optional, but highly recommended). Usually, it doesn`t work out of the box. Try searching for guides.

12. In the same section install enfec.zip and then Magisk.zip. If you get errors like 'Failed to mount /nv_data', ignore them.

13. Reboot to system, copy external_sd/PBRB/tools -> storage/0/emulated/PBRB/

Done!


How to pass SafetyNet (tested on 05.05.21 dd/mm):

Simply enable MagiskHide. This will only work if you haven`t modified the /system with modules that don`t hide themselves.

If you did heavy modifications, install UniversalSafetyNetFix (USNF) (repo) or install both MagiskHide Props Config (can be found in Magisk`s modules) and USNF. Instructions to installation of Props Config can be found in the README or on the web. Experiment with it, this is device specific.
View attachment 5264521
View attachment 5264523

so apparently, the miui 12.0.10 indonesia is so damn hard to root. it just stays in logo and repeats the same thing all over and over again once the boot image gets modified. i tried flashing magisk on recovery in which your steps indicated and i also tried flashing patched boot image and none of them works, i assume i get bootloops although i can still install custom recoveries like pbrp. It's just weird.

PS: i switched to indonesian version because i dont like google apps replacing xiaomi apps like MIUI Dialer, Messages, Contacts and Browser. Indonesia ROM comes with its own MIUI apps unlike Global, which comes with google apps.


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK