Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate instructions for disabling RO FW WP on Ti50 Chromebooks from chrultrabook docs #10

Closed
wants to merge 2 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion .vuepress/config.js
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,11 @@ export default defineUserConfig ({
{
text: 'Disabling FW WP',
link: '/docs/firmware/wp/disabling',
}
},
{
text: 'Disabling RO WP on Ti50',
link: '/docs/firmware/wp/ti50-ap-ro',
},
]
},
{
Expand Down
53 changes: 53 additions & 0 deletions docs/firmware/wp/ti50-ap-ro.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
# Disabling RO firmware protection on Ti50

::: tip
This is only applicable to devices with a Ti50 security chip, which is typically found in devices released during or after mid-2023.
:::

::: tip
If you disabled WP via CCD and reset your CCD flags with `ccd reset factory`, you can skip this step.
:::

<br>

## Step 1: Verify the device has a Ti50

1. Open VT-2 terminal: press `[CTRL+ALT+F2]` (F2 is the right arrow or refresh key).
2. Login as `root`.
3. Run `gsctool -a -I | grep AllowUnverifiedRo`.
4. If that command has any output, your device has a Ti50. If you get no output or an error, your device either has a Cr50 or no GSC at all.

## Step 2: Disable RO verification

1. Unlock the GSC by running `gsctool -a -o`.
2. Run `gsctool -a -I AllowUnverifiedRo:always`.
3. Press the power button when prompted.

::: warning
If your device has a Ti50 and you don't disable RO verification, flashing full rom will brick the device (can be recovered with steps listed below).
:::

## Recovering a device bricked due to RO verification

### Chromebooks

1. Press and hold the `Power` button.
2. Press `[F2]` twice.
3. Release the `Power` button.
4. Repeat the above steps a second time.

### Chromeboxes

1. Press and hold the `Power` button.
2. Press the recovery pinhole button twice.
3. Release the `Power` button.
4. Repeat the above steps a second time.

### Tablets

1. Press and hold the `Power` button.
2. Press and hold `Volume Up` for 10+ seconds. Release and repeat it a second time.
3. Release the `Power` button.
4. Repeat the above steps a second time.

This will disable RO verification for 15 minutes, allowing you to permanently disable it.