I read in the Developers forums that you can get Cwm for Locked Bootloaders. Ive been trying to get it for a week and can this be done? I bought the Ultra at Bell and it says its model number c6806 and its locked.
dvella21 said:
I read in the Developers forums that you can get Cwm for Locked Bootloaders. Ive been trying to get it for a week and can this be done? I bought the Ultra at Bell and it says its model number c6806 and its locked.
Click to expand...
Click to collapse
Yes. here it is:
http://forum.xda-developers.com/showthread.php?t=2426739
However just because you have CWM, doesn't mean you can flash ROM's.
All you can do is flash Root, and other mods.
hamdogg said:
Yes. here it is:
http://forum.xda-developers.com/showthread.php?t=2426739
However just because you have CWM, doesn't mean you can flash ROM's.
All you can do is flash Root, and other mods.
Click to expand...
Click to collapse
sorry for the quick question, but would that work on the C6802 on .257, with locked bootloader? i've been wondering if i could get root without unlocking the bootloader(to preserve warranty).
yogi2010 said:
sorry for the quick question, but would that work on the C6802 on .257, with locked bootloader? i've been wondering if i could get root without unlocking the bootloader(to preserve warranty).
Click to expand...
Click to collapse
yes you can root with a locked bootloader.
to unlock your bootloader you need to have root access.
You can always backup your TA partition, and then unlock bootloader, and then restore the TA partition and restore bootlock as well.
many possibilitites
hamdogg said:
yes you can root with a locked bootloader.
to unlock your bootloader you need to have root access.
You can always backup your TA partition, and then unlock bootloader, and then restore the TA partition and restore bootlock as well.
many possibilitites
Click to expand...
Click to collapse
hey thank you sir for the response. I got my phone with .257 version already on it tho, and from what I'm reading, I can't find a way to root on .257 without unlocking the boot loader. is this correct?
as I see it, the only option I have on .257 is to unlock the bootloader with the Sony method, but no way to root first. am I mistaken? thanks!
lmemma16 said:
hey thank you sir for the response. I got my phone with .257 version already on it tho, and from what I'm reading, I can't find a way to root on .257 without unlocking the boot loader. is this correct?
as I see it, the only option I have on .257 is to unlock the bootloader with the Sony method, but no way to root first. am I mistaken? thanks!
Click to expand...
Click to collapse
What you could do is use flash tool to go back to another firmware, then root, and then update to the newest version. But not flashing the kernel. then you can flash the modified kernel with CWM, and then flash the new kernel afterwards.
I think there is a tutorial on here that tells you how to do it.
hamdogg said:
What you could do is use flash tool to go back to another firmware, then root, and then update to the newest version. But not flashing the kernel. then you can flash the modified kernel with CWM, and then flash the new kernel afterwards.
I think there is a tutorial on here that tells you how to do it.
Click to expand...
Click to collapse
ah yes, OK, that's what I was wondering, whether it is possible to downgrade the firmware with a locked boot loader, using Flashtool. perhaps I will try.. thanks
I just remember on some other devices I've had, a locked boot loader wouldn't allow a firmware downgrade.
Related
Ive got an unlocked XZU, its the c6806 version, and its running 4.3. Anyone know a root method for this? I am also trying to flash custom roms as well.
Phaze1585 said:
Ive got an unlocked XZU, its the c6806 version, and its running 4.3. Anyone know a root method for this? I am also trying to flash custom roms as well.
Click to expand...
Click to collapse
Since you have unlocked bootloader flash boot image of desired custom rom using fastboot and then flash rom and gapps via recovery.
Phaze1585 said:
Ive got an unlocked XZU, its the c6806 version, and its running 4.3. Anyone know a root method for this? I am also trying to flash custom roms as well.
Click to expand...
Click to collapse
There is a whole thread or three devoted to this, have a good read through the stickies in the general section
techpal said:
Since you have unlocked bootloader flash boot image of desired custom rom using fastboot and then flash rom and gapps via recovery.
Click to expand...
Click to collapse
I dont quite understand. Are you saying, that sense my bootloader is already unlocked, that I dont even need to root my device?
Phaze1585 said:
I dont quite understand. Are you saying, that sense my bootloader is already unlocked, that I dont even need to root my device?
Click to expand...
Click to collapse
You don't need to run an exploit to gain root.
Once you have an unlocked bootloader all you have to do is flash a kernel with recovery, boot into recovery and then flash SuperSU - more or less
Phaze1585 said:
I dont quite understand. Are you saying, that sense my bootloader is already unlocked, that I dont even need to root my device?
Click to expand...
Click to collapse
Ya you dont need to root before installing Roms like CM,PA,etc. as they are already prerooted.
For safer side you can always flash Super Su.zip in recovery after flashing custom rom like CM,PA.
techpal said:
Ya you dont need to root before installing Roms like CM,PA,etc. as they are already prerooted.
For safer side you can always flash Super Su.zip in recovery after flashing custom rom like CM,PA.
Click to expand...
Click to collapse
Thank you. Does my phone already come with its own recovery? I know im coming off as a noob, but this is my first time trying to do his for anything besides a samsung Note.
techpal said:
Ya you dont need to root before installing Roms like CM,PA,etc. as they are already prerooted.
For safer side you can always flash Super Su.zip in recovery after flashing custom rom like CM,PA.
Click to expand...
Click to collapse
But you do need root to back up the TA partition before unlocking the bootloader before being able to boot roms like PA, CM etc
I don't want to open another threat but is there any way to root 290 (4.3) on my C6833? Do I need to go down first? My bootloader is still locked and I would like to backup TA partition firs just in case. So first I need to do is get SU in somehow to be able to backup TA. After that I will be rrady for bootloader I guess.
So is there any way to rot 290? I did try some methods but non of them works. I really need that GPE on me ZU. :fingers-crossed:
simunovic said:
I don't want to open another threat but is there any way to root 290 (4.3) on my C6833? Do I need to go down first? My bootloader is still locked and I would like to backup TA partition firs just in case. So first I need to do is get SU in somehow to be able to backup TA. After that I will be rrady for bootloader I guess.
So is there any way to rot 290? I did try some methods but non of them works. I really need that GPE on me ZU. :fingers-crossed:
Click to expand...
Click to collapse
Read the stickies in the general section, that is what they are there for...
blueether said:
Read the stickies in the general section, that is what they are there for...
Click to expand...
Click to collapse
None if that is working on 290. I can not unlock bootloader before I make backup of TA. So that I did not try. I simply can not find any root that works on 290. I love my Zu but I already missing my N5.
simunovic said:
None if that is working on 290. I can not unlock bootloader before I make backup of TA. So that I did not try. I simply can not find any root that works on 290. I love my Zu but I already missing my N5.
Click to expand...
Click to collapse
READ THE STICKY
it is all explained here http://forum.xda-developers.com/showthread.php?t=2569904
Do the first two orange steps
Then the three purple
Then move on to flashing roms etc
Simples
blueether said:
READ THE STICKY
it is all explained here http://forum.xda-developers.com/showthread.php?t=2569904
Do the first two orange steps
Then the three purple
Then move on to flashing roms etc
Simples
Click to expand...
Click to collapse
Root with restore by byn4ry v33 did not work on my c6833 (option 3). The proces just stopped after restore screen on Zu. If I downgrade my Zu then I will also have older baseband. If i downgrade, root and go back to 290 will i loose root? Is there any way to keep it? All I am trying to do is keep latest baseband with GPE rom.
simunovic said:
Root with restore by byn4ry v33 did not work on my c6833 (option 3). The proces just stopped after restore screen on Zu. If I downgrade my Zu then I will also have older baseband. If i downgrade, root and go back to 290 will i loose root? Is there any way to keep it? All I am trying to do is keep latest baseband with GPE rom.
Click to expand...
Click to collapse
<SIGH>
Downgrade to .532 ftf (you will lose IMEI and cell reception if on .290)
Root with Bin4ry's tool - option 0
Back up TA
Unlock bootloader
Flash .290 ftf (all of it)
install recovery (look in the general thread for jackies post - read the unlocked BL thread) or flash the one in the rom if it has recovery
boot into recovery
flash GPe ROM
???
proffit
all of the above is off the top of my head as I cant be buggered to look it all up, but YOU should. Don't blame me if you brick the phone etc
Do all of the above with the latest flashtool etc and a full battery - avoid black cats
blueether said:
<SIGH>
Downgrade to .532 ftf (you will lose IMEI and cell reception if on .290)
Root with Bin4ry's tool - option 0
Back up TA
Unlock bootloader
Flash .290 ftf (all of it)
install recovery (look in the general thread for jackies post - read the unlocked BL thread) or flash the one in the rom if it has recovery
boot into recovery
flash GPe ROM
???
proffit
all of the above is off the top of my head as I cant be buggered to look it all up, but YOU should. Don't blame me if you brick the phone etc
Do all of the above with the latest flashtool etc and a full battery - avoid black cats
Click to expand...
Click to collapse
That's my ultimate fear in all of this with a locked BL - I have had way too many black cats in my life in the past year... I just can't bring myself to take the plunge after all the bricks.
blueether said:
But you do need root to back up the TA partition before unlocking the bootloader before being able to boot roms like PA, CM etc
Click to expand...
Click to collapse
But since he already has unlocked bootloader it doesnt matter if he doest TA partition. Thts why I didn't said about TA partition,
Anyways after unlocking bootloader its of no use if has backed TA partition or no.
techpal said:
But since he already has unlocked bootloader it doesnt matter if he doest TA partition. Thts why I didn't said about TA partition,
I also assumed as he has unlocked bootloader so he would have done TA partition.
Click to expand...
Click to collapse
It was more as a warning to others, there has been a spat of people in the last two weeks that can't/won't read stickies and have unlocked the BL with no backup - so the more places people see the instructions the better
blueether said:
It was more as a warning to others, there has been a spat of people in the last two weeks that can't/won't read stickies and have unlocked the BL with no backup - so the more places people see the instructions the better
Click to expand...
Click to collapse
Agree with you on this
help needed as i am really lost
i am new to sony x z ultra, tried for 2 days to use the little piece left in my brain to root my device and went through a lot and nothing!
my request is simple I need a one click rooting procedure (device data: model(c6833) - android 4.3 - build # 14.2.A.0.290) or detailed steps for noops
sorry for being so dum but where else to go or who I can ask for help except here
123eb said:
i am new to sony x z ultra, tried for 2 days to use the little piece left in my brain to root my device and went through a lot and nothing!
my request is simple I need a one click rooting procedure (device data: model(c6833) - android 4.3 - build # 14.2.A.0.290) or detailed steps for noops
sorry for being so dum but where else to go or who I can ask for help except here
Click to expand...
Click to collapse
There's no 'one-click' rooting procedure.
There are, however, very detailed, in-depth, easy-to-follow instructions at http://forum.xda-developers.com/showthread.php?t=2569904
It takes the slightest bit of effort to find all the information you're looking for - at least try.
I've looked around and googled but all the the threads/results are filled with broken links or out of date info, but is there any method to Relock the BL on the C6833?
joegill97 said:
I've looked around and googled but all the the threads/results are filled with broken links or out of date info, but is there any method to Relock the BL on the C6833?
Click to expand...
Click to collapse
yep.
Flash a Stock FTF via flashtool (if not on one already)
Flash recovery for locked BL (if wanted/needed)
Use the same too that you used to back up the TA to restore it http://forum.xda-developers.com/showthread.php?t=2292598
Check that it is again locked (test xreality or use the service code that I cant remember)
blueether said:
yep.
Flash a Stock FTF via flashtool (if not on one already)
Flash recovery for locked BL (if wanted/needed)
Use the same too that you used to back up the TA to restore it http://forum.xda-developers.com/showthread.php?t=2292598
Check that it is again locked (test xreality or use the service code that I cant remember)
Click to expand...
Click to collapse
Sorry, I'm pretty new to root etc., but where can I get a recovery for a locked BL?
joegill97 said:
Sorry, I'm pretty new to root etc., but where can I get a recovery for a locked BL?
Click to expand...
Click to collapse
Try this one http://forum.xda-developers.com/showthread.php?t=2647492
Hello dear XDA Community,
- Xperia Z Ultra
- 4.4.2
- 14.3.A.0.681
- C6833
I have a big problem with understanding all of this tutorials. I read everything about rooting and unlocking the Bootloader.
I understood that I need to backup my TA Partition for Unlocking my Bootloader so I can continue to use Sony technology.
Requirements ? Root. Okay that was my first problem. So i looked up how to root my phone and what do i need ? A phone with a unlocked bootloader. great! Sure you can say "look at this topic and carefully read" but I really did that and I am really helpless. Thanks for any help!
What did I read ?
- http://forum.xda-developers.com/showthread.php?t=2292598&nocache=1 (requires root)
- http://forum.xda-developers.com/showthread.php?t=2569904 (requires unlocked bootloader)
- watched severel youtube videos and encountered the same problem
Greets
tr0teK
When your bootloader is unlocked, you can never use X-Reality and any other item which requires the DRM in the Trim Area partition,
Restoring the TA partition without relocking the bootloader will not result in the return of X-Reality and such even if you are using a Sony ROM. This situation appears to have changed since the release of 4.4.
Backing up the TA partition is only good for relocking the bootloader on a Stock ROM (any custom AOSP, CM, AOSPA etc will fail to boot on a locked bootloader), for personal choice or returning the phone under warranty.
You can unlock the bootloader when not rooted, in fact you don't do it with the phone running normally anyway so root or not rooted, it does not matter in that sense.
You don't need to unlock the bootloader to root, if you are willing to re-set up your phone again. What you need to do is downgrade to 4.2, which is rootable, root, install recovery and flash the 681 pre-rooted zip, and use flashtool to flash the associated ftf file to get rooted on 681.
Follow the instructions in Lord Manhattan's thread that you linked to,in order to downgrade and install a recovery, then visit the following link to get the zip & ftf to re-up to 4.4 (681). You most likely will lose cellular connectivity whilst you are downgraded (there is a way around this, but as you are only going down to 4.2 to get a recovery, maintaining your IMEI for that short period of time is just a waste of effort), but it will return when you are back on 681 (4.4).
http://forum.xda-developers.com/showthread.php?t=2687848
- Downgrade to 532
- Root it using Bin4ry's tool
- Backup the TA partition
- Unlock bootloader
- Either update to 681 again and take it from there or flash a kernel with recovery/TWRP and flash a pre-rooted 681. It's easy to root 681, so whatever floats your boat.
Don't mean to hijack this topic but I don't want to open another thread,
if I back up the TA partition, unlock bootloader, root the phone, then relock bootloader, then restore TA partition to bring back the xreality,
I am not going to install custom recovery and Roms.
Thanks for the Informations. I will give it a try the next days and report you if it worked.
coolmingli said:
Don't mean to hijack this topic but I don't want to open another thread,
if I back up the TA partition, unlock bootloader, root the phone, then relock bootloader, then restore TA partition to bring back the xreality,
I am not going to install custom recovery and Roms.
Click to expand...
Click to collapse
Technically it'll work, but i have never done it before. Everything should go smoothly until you're going to re-lock the bootloader. You can't re-lock it on a custom kernel, and you'll be on a custom kernel once you flash Jackie's kernel with recovery, so you'll have to flash a complete stock kernel, then restore the TA partition with the TA Backup Tool, which will also automatically re-lock the bootloader. You should in theory end up with a complete stock ROM with root. That's on paper.
Worst case scenario? If you re-lock the bootloader while you're on a custom kernel, it'll explode it won't power on at all, and all you'll get is a blinking red LED and death. To fix this, just unlock the bootloader in Flashtool again and you're back to start again. It's not dangerous, but it's nerve wrecking to see it there, just blinking without any sign of life. I almost crapped my pants the first time i experienced it, and had no clue what was happening or what to do.
LordManhattan said:
Technically it'll work, but i have never done it before. Everything should go smoothly until you're going to re-lock the bootloader. You can't re-lock it on a custom kernel, and you'll be on a custom kernel once you flash Jackie's kernel with recovery, so you'll have to flash a complete stock kernel, then restore the TA partition with the TA Backup Tool, which will also automatically re-lock the bootloader. You should in theory end up with a complete stock ROM with root. That's on paper.
Worst case scenario? If you re-lock the bootloader while you're on a custom kernel, it'll explode it won't power on at all, and all you'll get is a blinking red LED and death. To fix this, just unlock the bootloader in Flashtool again and you're back to start again. It's not dangerous, but it's nerve wrecking to see it there, just blinking without any sign of life. I almost crapped my pants the first time i experienced it, and had no clue what was happening or what to do.
Click to expand...
Click to collapse
Thanks for the reply, I think I will ditch rooting from this phone, too much troubles, I don't understand why Sony put the DRM key in a trim partition, perhaps they don't want us to root the phone after all.
I did it guys. It worked!
My steps:
- Downgraded to 4.2.2 with Flashtool (.532)
- Rooted with Bin4ry's tool
- Installed CWM and TWRP Dual Recovery for Xperia Z locked Bootloader by krabappe12548
- Flashed to 4.4.2[rooted] (http://forum.xda-developers.com/showthread.php?t=2687848)
Now I have the newest version with Root Access. Everything works great
Greets
tr0teK
tr0teK said:
I did it guys. It worked!
My steps:
- Downgraded to 4.2.2 with Flashtool (.532)
- Rooted with Bin4ry's tool
- Installed CWM and TWRP Dual Recovery for Xperia Z locked Bootloader by krabappe12548
- Flashed to 4.4.2[rooted] (http://forum.xda-developers.com/showthread.php?t=2687848)
Now I have the newest version with Root Access. Everything works great
Greets
tr0teK
Click to expand...
Click to collapse
is this witout unlock the bootloader?
MjsNL said:
is this witout unlock the bootloader?
Click to expand...
Click to collapse
Yep, that will work well on a locked BL
If you are only downgrading to flash the current rooted firmware, you don't even need to root 532, as [nut]'s dual recovery can be installed by the same method that bin4ry's root is delivered, just install the recovery, flash the zip, flash the ftf and away you go
The other day, I set about installing Cyanogenmod 11 on my Xperia Z2 D5603. I was already rooted on the stock rom 4.4.4 Kitkat 23.0.1.A.0.167. I used flashtool to downgrade to 4.4.2 17.1.2.A.0.314, rerooted it, and installed dualrecovery from this link: http://forum.xda-developers.com/showthread.php?t=2785598
But upon choosing reboot after flashing the custom ROM via TWRP, the phone went dark, and wouldn't turn on. The only response I got was a quick vibration every second or two if I hold down the power button. I could not access recovery either.
I was able to revive it by using flashtool to reflash 4.4.2 17.1.2.A.0.314. I tried the same procedure with AOKP ROM, which had the same result. After trying many different things, I realized that factory reset, or wiping 'system' under advanced wipe would cause this to happen. Flashing without factory reset either returns an error, or finishes, but doesn't actually flash the ROM (stock ROM boots)
How to I flash a ROM without this happening? Any help is appreciated.
Have you unlocked your bootloader? It doesn't sound like it.
These roms require another kernel and you need to unlock your bootloader to install it.
o0 Matt 0o said:
Have you unlocked your bootloader? It doesn't sound like it.
These roms require another kernel and you need to unlock your bootloader to install it.
Click to expand...
Click to collapse
I thought that the fact that it was successfully rooted meant that the bootloader was unlocked. Is this not the case?
How do I unlock the bootloader and install whatever kernel I need?
ljapplebaum said:
I thought that the fact that it was successfully rooted meant that the bootloader was unlocked. Is this not the case?
How do I unlock the bootloader and install whatever kernel I need?
Click to expand...
Click to collapse
Hmm no.
Root ! = unlocked bootloader.
Go to the sony website ( http://developer.sonymobile.com/unlockbootloader/unlock-yourboot-loader) to get instructions to unlock your bootloader.
But with your first assumption in mind, I suggest you read up about it first. Understand the risks and limitations.
o0 Matt 0o said:
Hmm no.
Root ! = unlocked bootloader.
Go to the sony website to get instructions to unlock your bootloader.
But with your first assumption in mind, I suggest you read up about it first. Understand the risks and limitations.
Click to expand...
Click to collapse
Perfect! I unlocked the bootloader by using the instructions on sony's website. It did the trick, and CM11 is running successfully.
Thanks so much!
I have mine updated to 5.1.1 and the bootloader is unlockable. However, the rooting instruction is confusing for this version.
I am looking for the definite solution for rooting (if it is required to unlock the bootloader, should I backup TA partition first?) 100% stock 5.1.1.
Frankly, I don't want to mess with Kingroot or similar tools from China.
I'm interested in this as well. Sent for warranty repair and came back with 5.1.1. Looking for recommended way to root and backup TA (though I have the original backup somewhere)
http://forum.xda-developers.com/xperia-z-ultra/general/guide-how-to-root-install-recovery-t3210207
I managed to root the device. Here is a guide:
http://forum.xda-developers.com/xperia-z-ultra/general/comprehensive-guide-rooting-5-1-x-t3219502
This is how i did it...downgraded to 4.4.4 and root it,TA backup, unlocked the device, updated to 5.1.1 with stock ftf installed the new recovery an flashed the TWRP after that flash the SuperSU zip and done...
fnldstntn said:
This is how i did it...downgraded to 4.4.4 and root it,TA backup, unlocked the device, updated to 5.1.1 with stock ftf installed the new recovery an flashed the TWRP after that flash the SuperSU zip and done...
Click to expand...
Click to collapse
That's a waste of time. OP has an unlockable bootloader, so he just has to:
- Flash recovery
- Flash SuperSU
- Reboot
Klaos3000 said:
That's a waste of time. OP has an unlockable bootloader, so he just has to:
- Flash recovery
- Flash SuperSU
- Reboot
Click to expand...
Click to collapse
unlockable =/= unlocked
mingkee said:
unlockable =/= unlocked
Click to expand...
Click to collapse
Unlocking the BL is still FAR quicker than going through that hellish process for locked bootloaders. It's like trying to juggle with your hands tied to your back, but they're not really tied. Not sure why WE are arguing though. You provided a guide for a locked bootloader, while I gave one for unlocked. What OP decides to do is currently a mystery.
Klaos3000 said:
Unlocking the BL is still FAR quicker than going through that hellish process for locked bootloaders. It's like trying to juggle with your hands tied to your back, but they're not really tied. Not sure why WE are arguing though. You provided a guide for a locked bootloader, while I gave one for unlocked. What OP decides to do is currently a mystery.
Click to expand...
Click to collapse
Here is a deal: unlocking bootloader will remove DRM key. The only workaround is to backup TA partition. However, doing such also requires root, so you have to root before unlocking bootloader.
Don't you know your method is no brainer???! But dealing with DRM key is another story.
Hello !
Frankly you should try with kingroot it's not really a big deal it's quicker and don't worry you will not mess up your phone. I did the same on mine, and it's quick...
LordBli said:
Hello !
Frankly you should try with kingroot it's not really a big deal it's quicker and don't worry you will not mess up your phone. I did the same on mine, and it's quick...
Click to expand...
Click to collapse
Kingroot does not work with 5.1.x, sorry.
I still have to rollback to 4.4.x and use dualrecovery method 3.
mingkee said:
Kingroot does not work with 5.1.x, sorry.
I still have to rollback to 4.4.x and use dualrecovery method 3.
Click to expand...
Click to collapse
Okay, so roll back to KitKat, root, backup your TA, unlock bootloader, and then update to 5.1.1 again. You'll then be able to just flash a recovery and root. If you don't care about the TA partition, then unlock bootloader and flash recovery and root.
Be aware that if your device is still under warranty, it'll be voided the second you lose the DRM keys (TA). If you're not under warranty anymore, it doesn't make any difference. If your device has to go into repairs down the road, it won't matter since you don't have warranty either way. But if you have, it's a good idea to back it up.
Also, the X-Reality engine etc. were at one point dependent on the TA partition, but this changed on KitKat, so X-Reality still works on an unlocked bootloader (even though it's really bad).
Klaos3000 said:
Okay, so roll back to KitKat, root, backup your TA, unlock bootloader, and then update to 5.1.1 again. You'll then be able to just flash a recovery and root. If you don't care about the TA partition, then unlock bootloader and flash recovery and root.
Be aware that if your device is still under warranty, it'll be voided the second you lose the DRM keys (TA). If you're not under warranty anymore, it doesn't make any difference. If your device has to go into repairs down the road, it won't matter since you don't have warranty either way. But if you have, it's a good idea to back it up.
Also, the X-Reality engine etc. were at one point dependent on the TA partition, but this changed on KitKat, so X-Reality still works on an unlocked bootloader (even though it's really bad).
Click to expand...
Click to collapse
Here is what I did as mentioned on the post linked on earlier post.
Download the latest ROM with Xperifirm, and 4.4.x ROM found in a sticky on the general section.
Pack the 5.1.X ROM as flashable pre-rooted.
Use Flashtool to rollback to 4.4.x, completely wipe, made initial setup and enable debug, and install recovery.
Install pre-rooted ROM through TWRP.
Backup TA partition and device data.
Unlock bootloader.
Restore TA partition and device data.
Done.