Xperia XZ2 Bootloader Firmware

This repository contain script and proprietary bootloader firmware to flash Xperia XZ2 S1 proprietary bootloader firmware in recovery mode (without Flash mode)

Purpose

• Upgrade latest bootloader firmware to boot Android 10+ custom ROMs
• Who have Xperia XZ2 with Oreo/Pie bootloader want update to latest Q bootloader without flash mode
• Reflash/refresh bootloader partition
• Fix fastboot mode issue on X_BOOT_SDM845_LA2_0_1_Q_206 (52.1.A.0.618) Q Bootloader
• Fix fastboot mode issue WITH USB 3.0 ports on X_BOOT_SDM845_LA2_0_1_Q_207 (52.1.A.3.49) Q Bootloader

Bootloader Information

XBoot (S1) version :

1310_7079_X_BOOT_SDM845_LA2.0.1_Q_208

Bootloader Android version :

Android 10

Supported HW Config Revision :

HWC_Tama_Com_001 - COMMERCIAL_0008B0E1

HWC_Tama_Dev_001 - DEVELOPMENT

WARNING !

Before flashing bootloader, please make sure flash correct bootloader with correct specific HW Config Revision above! If not, your device will can't verify bootloader signature and goes hard brick state!

To determine what HW Config Revision your device using, there are two way to check :

Method 1 (device with working Android OS and running stock fw) :

• Open dialer and type *#*#7378423#*#*, Service Menu will open.
• Go to Service Info -> Configuration or Security
• Look at HW Config rev
• If it is HWC_Tama_Com_001, flash bootloader with HWC_Tama_Com_001 variant
• If it is HWC_Tama_Dev_001, flash bootloader with HWC_Tama_Dev_001 variant

Method 2 (determine from flash mode) :

Linux (Debain based) :

• Put your device to proprietary flash mode and connect with PC using USB cable
• Open terminal and type sudo apt install -y fastboot to install fastboot
• After installed fastboot, type fastboot getvar Security-state
• If security-state value is U0vSz8eM1gk1FZup2A6hQlhcZnS9ZR3Up1pg2aPJewY=, flash bootloader with HWC_Tama_Com_001 variant
• If security-state value is wSaq4guKAposHQYWumdHOVvrDFlLAbDib7JISLENTVc=, flash bootloader with HWC_Tama_Dev_001 variant

Linux (Arch Linux based) :

• Put your device to proprietary flash mode and connect with PC using USB cable
• Open terminal and type sudo pacman -S android-tools to install fastboot
• After installed fastboot, type fastboot getvar Security-state
• If security-state value is U0vSz8eM1gk1FZup2A6hQlhcZnS9ZR3Up1pg2aPJewY=, flash bootloader with HWC_Tama_Com_001 variant
• If security-state value is wSaq4guKAposHQYWumdHOVvrDFlLAbDib7JISLENTVc=, flash bootloader with HWC_Tama_Dev_001 variant

Windows :

• Put your device to proprietary flash mode and connect with PC using USB cable
• Download and install Sony Xperia driver from here : Windows 32bit | Windows 64bit
• After installed driver, download newflasher and extract then open newflasher.exe
• Press F then N, its will read all info of device in proprietary flash mode and reboot device to fastboot mode
• Scroll up and look the Security state
• If Security state value is U0vSz8eM1gk1FZup2A6hQlhcZnS9ZR3Up1pg2aPJewY=, flash bootloader with HWC_Tama_Com_001 variant
• If Security-state value is wSaq4guKAposHQYWumdHOVvrDFlLAbDib7JISLENTVc=, flash bootloader with HWC_Tama_Dev_001 variant

How to Flash

• Boot into any custom recovery available for Xperia XZ2 such as TWRP,OrangeFox and copy bootloader flashable zip to storage then flash using install zip/sideload function (TWRP,OrangeFox).
• For LineageOS Recovery, use sideload function.

Why not flash bootloader in fastboot?

• Fastboot mode in Sony Xperia devices are have limitations, only boot dtbo system userdata vendor dtbo oem are allowed to flash even with unlocked bootloader state, so only proprietary flash mode, recovery mode and Android shell can flash to bootloader partition as they not protected like fastboot mode.

DISCLAIMER

Xperia XZ2 bootloader binary are proprietary and protected with RSA2048 signature by Sony Mobile Communications Inc and Qualcomm Incorporated. Source code are not available and bootloader binary cannot be modified to flash into device because RSA2048 signature key will change in modified binary so device will reject modified bootloader binary with Secure boot check on Primary Bootloader (PBL) burned to Snapdragon CPU.

If you want or need to modify bootloader binaries and want to flash it, you must need to change the original SDM845 CPU from Xperia XZ2 mainboard to other or generic one that come with NO SECURE BOOT (If PBL able to load generic or any unsigned oem SDM845 firehose loaders, then CPU are SECURE BOOT NO) or WITH SECURE BOOT (if you have its PBL BootROM RSA2048 signature)