Konubinix' opinionated web of thoughts

Samsung Galaxy A7 Sm-T500

Fleeting

caffeine

[2025-04-20 Sun] tried without success enable wakelock, https://f-droid.org/fr/packages/com.github.muellerma.coffee/ (2.24), https://f-droid.org/fr/packages/com.hifnawy.caffeinate/ (2.1.0) but https://lab.zhs.moe/caffeine/ (2.0.8), from https://moe-zhs-caffeine.en.uptodown.com/android/download worked

root

upgraded the firmware from the tablet, got T500XXS8CXG1 in the build version

power off -> Vol Down+vol up + plug on the computer -> download mode long press vol up vol up

don’t enable the wifi connection (to be able to mess with the date later), make sure the date is at least 7 days in the past

following https://topjohnwu.github.io/Magisk/install.html#samsung-devices

using odin4 from https://xdaforums.com/t/official-samsung-odin-v4-1-2-1-dc05e3ea-for-linux.4453423/

odin4

using that version of magisk -> app-release.apk

got this version of the firmware (from https://samfw.com/firmware/SM-T500/EUX/T500XXS8CXG1) -> –progress SAMFW.COM_SM-T500_EUX_T500XXS8CXG1_fac.zip

adb -s R9TR3087Z2J push AP_T500XXS8CXG1_T500XXS8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT_meta_RKEY_OS12.tar.md5 /sdcard/Download/
adb -s R9TR3087Z2J install app-release.apk

in the device, install, select file, use that file

adb -s R9TR3087Z2J shell ls /sdcard/Download/|grep patched
magisk_patched-28100_tELz5.tar
adb -s R9TR3087Z2J pull /sdcard/Download/magisk_patched-28100_tELz5.tar magisk_patched.tar

power off -> Vol Down+vol up + plug on the computer -> download mode check the OEM value -> OEM LOCK : OFF (U) -> OK check the KG status -> PRENORMAL -> need to wait for 168h

Prenormal: your device is temporarily locked, reaching 168h of uptime should trigger unlock

https://topjohnwu.github.io/Magisk/install.html#samsung-devices ([2025-04-19 Sat])

boot on the device again -> enable the wifi and automatic date to get the date to today (hence more than 168h after the time the bootloader was unlocked from the point of view of the tablet).

odin4 -b BL_T500XXS8CXG1_T500XXS8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT.tar.md5 -a magisk_patched.tar -s CSC_OXM_T500OXM8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT.tar.md5

You get into the recovery mode, wipe user data wipe cache

reboot

I get into the “security error only official released binaries are allowed oto be flashed (vbmeta)”

In the download mode, I can see it is back in prenormal state

I put back the stock image with

odin4 -b BL_T500XXS8CXG1_T500XXS8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT.tar.md5 -a AP_T500XXS8CXG1_T500XXS8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT_meta_RKEY_OS12.tar.md5 -s CSC_OXM_T500OXM8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT.tar.md5

following https://wiki.lineageos.org/devices/gta4lwifi/install/#pre-install-instructions, I can see that vbmeta can be flashed separately.

vbmeta.img is part of Android Verified Boot (AVB) — a security feature that ensures the integrity of your device’s boot process. It’s like the bouncer at the club: if something sketchy (like a tampered kernel or system image) tries to get in, vbmeta will shut it down.

— chatgpt ([2025-04-19 Sat])

following lineage os instructions

Get vbmeta from https://download.lineageos.org/devices/gta4lwifi/builds (/ipfs/bafkreicsqdvj3kfdqrfzojtabvskuygvnnfspdjhkbe2okhgxylsojuun4?filename=vbmeta.img)

tar --format=ustar -cvf vbmeta.tar vbmeta.img

Do the same stuff to get the time to today and therefore get out of the prenormal state

odin4 -a vbmeta.tar

It asks to do factory reset in a recovery mode ish.

reboot

doing again the magisk steps, making sure to set the date to today again

adb -s R9TR3087Z2J push AP_T500XXS8CXG1_T500XXS8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT_meta_RKEY_OS12.tar.md5 /sdcard/Download/a
adb -s R9TR3087Z2J install app-release.apk

in the device, install, select file, use that file

adb -s R9TR3087Z2J shell ls /sdcard/Download/|grep patched
magisk_patched-28100_wapre.tar
adb -s R9TR3087Z2J pull /sdcard/Download/magisk_patched-28100_wapre.tar magisk_patched.tar
odin4 -b BL_T500XXS8CXG1_T500XXS8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT.tar.md5 -a magisk_patched.tar -s CSC_OXM_T500OXM8CXG1_MQB82507325_REV00_user_low_ship_MULTI_CERT.tar.md5

factory data reset

reboot

Now, that’s ok