Motorola Community

Unlockable PhonesMOTOROLA Android Developer Community
All Forum Topics

5 Posts



10 Signins

105 Page Views

  • Posts: 5
  • Registered: ‎09-25-2018
  • Location: DE
  • Views: 105
  • Message 1 of 1

Bootloader unlock help for Moto G5S XT 1799-2

2018-09-27, 10:37 AM

Hi there,

I ordered the latest version of Moto G5S - Green Pomelo and got welcomed by the warning notficition: "Your device failed verfication.." (as in attachment). Well, I was decided to root the phone anyway, so that discovery was not that painful. However, I found the bootloader locked and when tried to unlock it using following data and corresponding key, I got invalid boot state error.

(bootloader) Unlock data:
(bootloader) 3A95650508046259#
(bootloader) 5A5933323244344A4D37005854313739392D0000#
(bootloader) 21C7637812609711BC6CAF8EA69DD810DF0AE659#
(bootloader) AC71A4BE000000000000000000000000

C:\Minimal ADB and Fastboot>fastboot oem unlock EG2Q6NB37LSZ2RHIX6KZ
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
(bootloader) invalid boot state
OKAY [  0.016s]
finished. total time: 0.016s

C:\Minimal ADB and Fastboot>fastboot getvar all
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
(bootloader) version: 0.5
(bootloader) version-bootloader: moto-msm8937-BC.06(*)
(bootloader) product: montana
(bootloader) board: montana
(bootloader) secure: yes
(bootloader) hwrev: P3
(bootloader) radio: 7
(bootloader) storage-type: emmc
(bootloader) emmc: 32GB SAMSUNG RX64MB RV=08 PV=03 FV=0000000000000003
(bootloader) ram: 4GB SAMSUNG LP3 DIE=8Gb M5=01 M6=06 M7=00 M8=5F
(bootloader) cpu: MSM8937
(bootloader) serialno: ZY322D4JM7
(bootloader) cid: 0x000B
(bootloader) channelid: 0xc1
(bootloader) uid: AC71A4BE00000000000000000000
(bootloader) securestate: flashing_locked
(bootloader) verity-state: enforcing
(bootloader) iswarrantyvoid: yes
(bootloader) max-download-size: 536870912
(bootloader) reason: Volume down key pressed
(bootloader) imei: 359565080402695
(bootloader) meid:
(bootloader) date: 10-08-2017
(bootloader) sku: XT1799-2
(bootloader) battid:
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Mon Dec 21 19:25:12 UTC 1970"
(bootloader)[0]: motorola/montana_retcn_n/montana_n
(bootloader)[1]: :7.1.1/NZS26.86-108/112:user/relea
(bootloader)[2]: se-keys
(bootloader) poweroffalarm: 1
(bootloader)[0]: Blur_Version.26.11.112.montana_re
(bootloader)[1]: tcn.retcn.en.US
(bootloader) LA.UM.5.6.r1-03800-89xx.0
(bootloader) version-baseband: M8937_37.13.03.53R MONTANA_CHINADSDS_CUST
(bootloader) kernel.version[0]: Linux version 3.18.31-perf-g647ff94-0000
(bootloader) kernel.version[1]: 7-g13fa5e2 (hudsoncm@ilclbld32) (gcc ver
(bootloader) kernel.version[2]: sion 4.8 (GCC) ) #1 SMP PREEMPT Thu Mar
(bootloader) kernel.version[3]: 1 20:32:27 CST 2018
(bootloader) sbl1.git: git=MBM-NG-VBC.06-0-g518a6f1
(bootloader) rpm.git: git=aa33522-dirty
(bootloader) tz.git: git=1fe3cc8-dirty
(bootloader) devcfg.git: git=1fe3cc8-dirty
(bootloader) keymaster.git: git=1fe3cc8-dirty
(bootloader) cmnlib.git: git=1fe3cc8-dirty
(bootloader) cmnlib64.git: git=1fe3cc8-dirty
(bootloader) prov.git: git=1fe3cc8-dirty
(bootloader) aboot.git: git=MBM-NG-VBC.06-0-g865eb9a-dirty
(bootloader) qe: qe 0/0
(bootloader) frp-state: no protection (77)
(bootloader) ro.carrier: retcn
all: listed above
finished. total time: 0.109s

I assume that CID 0x000B means that it can be unlocked, but how is a mystery to me now.

I will be grateful for any help





Edited: Moved thread to the correct phone community.-Sandip

Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop