RSA Removal And Dualboot Installation Using Soft TP ::N00b Friendly::

[kn100]

Removing RSA

Guide by KN100.

Disclaimer: This method was tested by myself and many others, It works fine for me, but there maybe complications which we can iron out in this thread. This guide was originally posted by rodrigocastrillo, I have just broke it down to each step to make it user friendly.

------

Introduction to RSA
Your Z3's Firmware is made up of lots of CodeGroups.
CG1 is the most important CG. Its what controls your phone and allows you to use the other CG. Motorola, by default, lock down CG1 so you can not modify them. Removing RSA removes this lock.
After RSA removal, you can ONLY flash RSA removed packs.

-------

get yourself these files:
RSA removal pack
http://www.modmymoto.com/forums/down...=file&id=24131
RSD lite 3.9 and up
http://www.google.com/
Flash and Backup 3
http://www.modmymoto.com/forums/down...o=file&id=6464


Now to remove RSA:
1. Put your phone into boot loader and connect it to your pc.
To get your phone into boot loader, hold down star + hash + red button while the phone is off.


2. open up ramdlr (in the pack we downloaded earlier)
Now click on set blank from 0300
then disconnect your phone and close ramdlr.



Then reconnect your phone and open ramdlr. You should see this

3. Now close ramdlr and open RSD lite Make sure it reads S Blank Neptune LTE2. If you don't see this, it wont work and I suggest you either try again, or just ask!

4. In RAMLDR2, click Send loader, WAIT for 'ready' Make sure you do.
It will appear, just will take a while.

5.In RAMLDR2, click Write Boot and choose: Boot_0AC0_Patch, its in the pack we got earlier. WAIT for confirmation its done. Leave it for about 30 seconds here, and continue.

6.When the phone turns off, disconnect and reconnect the battery. it will show up 's blank Neptune LTE2' in RSD lite.
Be sure you check. If it doesn't, retry from step 1.

7.Open F&B3, then flash RSA FREE REFLASH Z3.0DR in the usual way as you would flash anything else.

8.when the phone shuts down disconnect and reconnect battery and it will show up 's blank Neptune' in RSD lite

9.In Fb3, flash 'm3 modded dual boot 3.3' the same way as before

10.when the phone shuts down after flashing, disconnect and reconnect the battery so it shows 's blank Neptune' in RSD lite

11.Open RAMLDR2, click Send Loader, wait for 20 seconds.

12.RAMLDR2, click Write Boot and choose: Boot_Start_SW.bin,
Wait for about 60 seconds, or until you get confirmation its done.

13. Just disconnect your phone, remove and insert the battery, and turn it on! As its turning on, if you still see the default hellomoto turn on, and nothing referencing to a dual boot or anything, this has not worked. Post a thread.

Usage:

To get into BLANK mode
1. turn your phone off
2. Hold down star + power for 5 seconds. Your screen doesn't say anything but don't worry, your in blank. Then connect your usb cable and do your work!

To Back up:
Use your standard bootloader (star, hash and red) and do as normal. If your bootloader gets vertical coloured lines while your backing up,just let it finish. it does it to me.
I would also Like to thank:-

Clarkey (for testing out this method for me)
Gandjafuzz + Vilko (for providing the Dualboot 3.3)
Rodrigocastrillo (For providing the original soft TP guide)
BF ( For bricking his phone many times, attempting RSA removal for us at M3)
All the guys at motofan for making this possible
All the guys in Team Rizr.

[FrankTheTank5421]

Nice guide! I'm sure when I finally get around to removing RSA I will use this guide. :]

Edit: @ motomudder: Yes, it's already been posted, but IMO this is easier to follow

And one question. Why does it have to be 3.9? o.O

[MotoMudder]

might want to mention that after RSA removal you can only flash CG2,CG4,CG15 in normal bootloader the rest have to be done in blank mode

[BudmannG]

I love guides with pictures. It helps explain it more.

[sstroud]

might want to mention that after RSA removal you can only flash CG2,CG4,CG15 in normal bootloader the rest have to be done in blank mode

what about adding the patches? can you just do it normally with F&B?

[MotoMudder]

yep patching is normal.

[aznkiller]

How can i tell if i removed the RSA?? and do i have to do anything special to back up my phone after i removed the rsa???

[amenkcool]

How can i tell if i removed the RSA?? and do i have to do anything special to back up my phone after i removed the rsa???

when ur phone have finished RSA removal guide steps j/k.. to make sure is.. u apply patch to ur phone,n install Virtual corellet..if its works,so ur phone is RSA removed. maybe someone can explain more..

yeah..u must backup before doing all mods..if ur mod failed n ur phone have problem,so u just flash the backup to make it normally again..

[aznkiller]

to backup do i have to be BLANK mode???

[amenkcool]

no..take full back up in normal bootloader using FB3 registered. if its unregistered,CG2 will not include in ur back up.

[Clarkey]

Actually you are wrong, the newer version (3.07) will back up CG2 when it's a trial, although you only get 30 days

[amenkcool]

thx clarkey for ur information.

[Clarkey]

Anytime, just thought i'd point it out to you

[alwarnecke]

speaking of which, do i have to use f&b? my trial expired, could i just use rsd lite?

[CandymanMike]

speaking of which, do i have to use f&b? my trial expired, could i just use rsd lite?

nope! rsd lite doesn't do backups. and it only flashes full mp's. you need to flash the seperate code groups once rsa is removed. otherwise you will your phone! no one want's that! the registered version is only $10 bucks. and it's floating around somewhere i'm sure.

EDIT: i phrased that wrong. it can flash the seperate code groups if you seperate them first and flash them individually. but you can't select and deselect code groups as you can in f&b.