Xperia XZ2 Bootloader

This is repository contain script and proprietary bootloader binary to flash Xperia XZ2 S1 proprietary bootloader in recovery mode (without Flash mode)

Bootloader Information

XBoot (S1) version :

1310_7079_X_BOOT_SDM845_LA2.0.1_Q_207

Bootloader Android version :

Android 10

Supported HW Config Revision :

HWC_Tama_Com_001 - COMMERCIAL_0008B0E1

HWC_Tama_Dev_001 - DEVELOPMENT

WARNING !

Before flashing bootloader, please make sure flash correct bootloader with correct specific HW Config Revision above! If not, your device will can't verify bootloader signature and goes hard brick state!

To determine what HW Config Revision your device using, there are two way to check :

Method 1 (device with working Android OS and running stock fw) :

• Open dialer and type *#*#7378423#*#*, Service Menu will open.
• Go to Service Info -> Configuration or Security
• Look at HW Config rev
• If it is HWC_Tama_Com_001, flash bootloader with HWC_Tama_Com_001 variant
• If it is HWC_Tama_Dev_001, flash bootloader with HWC_Tama_Dev_001 variant

Method 2 (determine from flash mode) :

Linux (Debain based) :

• Put your device to proprietary flash mode and connect with PC using USB cable
• Open terminal and type sudo apt install -y fastboot to install fastboot
• After installed fastboot, type fastboot getvar Security-state
• If security-state value is U0vSz8eM1gk1FZup2A6hQlhcZnS9ZR3Up1pg2aPJewY=, flash bootloader with HWC_Tama_Com_001 variant
• If security-state value is wSaq4guKAposHQYWumdHOVvrDFlLAbDib7JISLENTVc=, flash bootloader with HWC_Tama_Dev_001 variant

Linux (Arch Linux based) :

• Put your device to proprietary flash mode and connect with PC using USB cable
• Open terminal and type sudo pacman -S android-tools to install fastboot
• After installed fastboot, type fastboot getvar Security-state
• If security-state value is U0vSz8eM1gk1FZup2A6hQlhcZnS9ZR3Up1pg2aPJewY=, flash bootloader with HWC_Tama_Com_001 variant
• If security-state value is wSaq4guKAposHQYWumdHOVvrDFlLAbDib7JISLENTVc=, flash bootloader with HWC_Tama_Dev_001 variant

Windows :

• Put your device to proprietary flash mode and connect with PC using USB cable
• Download and install Sony Xperia driver from here : Windows 32bit | Windows 64bit
• After installed driver, download newflasher and extract then open newflasher.exe
• Press F then N, its will read all info of device in proprietary flash mode and reboot device to fastboot mode
• Scroll up and look the Security state
• If Security state value is U0vSz8eM1gk1FZup2A6hQlhcZnS9ZR3Up1pg2aPJewY=, flash bootloader with HWC_Tama_Com_001 variant
• If Security-state value is wSaq4guKAposHQYWumdHOVvrDFlLAbDib7JISLENTVc=, flash bootloader with HWC_Tama_Dev_001 variant

How to Flash

• Boot into any custom recovery available for Xperia XZ2 such as TWRP,OrangeFox and copy bootloader flashable zip to storage then flash using install zip/sideload function (TWRP,OrangeFox).
• For LineageOS Recovery, use sideload function.

Why not flash bootloader in fastboot?

• Fastboot mode in Sony Xperia devices are have limitation, only boot dtbo system userdata vendor dtbo oem are allowed to flash even with unlocked bootloader state, so only proprietary flash mode, recovery mode and Android shell can flash to bootloader partition as they not protected like fastboot mode.

DISCLAIMER

Xperia XZ2 bootloader binary are proprietary and protected with RSA2048 signature by Sony Mobile Communications Inc and Qualcomm Incorporated. Source code are not available and bootloader binary cannot be modified to flash into device because RSA2048 signature key will change in modified binary so device will reject modified bootloader binary with Secure boot check on Primary Bootloader (PBL) burned to Snapdragon CPU