{"id":51480514,"url":"https://github.com/realdtn2/xiaomi-unlocking-rooting-guide","last_synced_at":"2026-07-07T01:01:45.024Z","repository":{"id":264291875,"uuid":"892947642","full_name":"realdtn2/xiaomi-unlocking-rooting-guide","owner":"realdtn2","description":"Guide on Bootloader Unlock / Root / Hide Root/ Play Integrity/ Spoof Bootloader Status as Locked (Key Attestation) for Xiaomi devices (HyperOS/HyperOS 2.0/HyperOS 3.0) (Global) [2026]","archived":false,"fork":false,"pushed_at":"2026-06-05T17:28:45.000Z","size":10300,"stargazers_count":101,"open_issues_count":1,"forks_count":13,"subscribers_count":4,"default_branch":"main","last_synced_at":"2026-06-05T18:40:18.125Z","etag":null,"topics":["2026","android","bootloader","bootloader-unlock","guide","hyperos","hyperos-2","hyperos-3","kernelsu","key-attestation","magisk","magisk-alpha","play-integrity","play-integrity-fix","play-integrity-fix-guide","root","xiaomi","xiaomi-bootloader-unlock"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/realdtn2.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-11-23T05:48:16.000Z","updated_at":"2026-06-05T17:28:49.000Z","dependencies_parsed_at":"2025-01-11T05:18:28.966Z","dependency_job_id":"2b18ad7c-9cdc-4d03-aa77-bc74cb6a669d","html_url":"https://github.com/realdtn2/xiaomi-unlocking-rooting-guide","commit_stats":null,"previous_names":["realdtn2/xiaomi-14t-hide-root","realdtn2/xiaomi-unlocking-rooting-guide"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/realdtn2/xiaomi-unlocking-rooting-guide","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/realdtn2%2Fxiaomi-unlocking-rooting-guide","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/realdtn2%2Fxiaomi-unlocking-rooting-guide/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/realdtn2%2Fxiaomi-unlocking-rooting-guide/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/realdtn2%2Fxiaomi-unlocking-rooting-guide/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/realdtn2","download_url":"https://codeload.github.com/realdtn2/xiaomi-unlocking-rooting-guide/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/realdtn2%2Fxiaomi-unlocking-rooting-guide/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35210429,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-06T02:00:07.184Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["2026","android","bootloader","bootloader-unlock","guide","hyperos","hyperos-2","hyperos-3","kernelsu","key-attestation","magisk","magisk-alpha","play-integrity","play-integrity-fix","play-integrity-fix-guide","root","xiaomi","xiaomi-bootloader-unlock"],"created_at":"2026-07-07T01:01:37.446Z","updated_at":"2026-07-07T01:01:44.871Z","avatar_url":"https://github.com/realdtn2.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003ch1 align=\"center\"\u003e\nBootloader Unlock and Root for Xiaomi devices (HyperOS / HyperOS 2.0 / HyperOS 3.0) (Non-Mainland China Devices)\n\u003cbr\u003e\n\u0026\n\u003cbr\u003e\nHide Root / Play Integrity / Spoof Bootloader Status as Locked (Key Attestation) for most Android devices\n\u003c/h1\u003e\n\n# Bootloader Unlock\n\n## Warning\n- **BACK UP ANY DATA YOU MAY HAVE ON YOUR PHONE**\n- **ALL OF YOUR DATA WILL BE WIPED**\n\n## Requirements\n- Your **Xiaomi account** must be over **30 days old**\n- Enable **Find device** in **Xiaomi Cloud** in **Settings** (might not be necessary, but enable for certainty)\n\n### Step 1: Enable OEM Unlocking\n- In **Settings**, press **About phone** and tap **OS version** 5 times to unlock **Developer Options**\n- In **Developer Options**, enable **OEM Unlocking**\n\n### Step 2: Reinstall Xiaomi Community\n- Uninstall **Xiaomi Community** and reboot\n- Install the **latest version** of **Xiaomi Community** on the **Play Store**\n\n### Step 3: Account Region\n- Sign in with your **Xiaomi account** in **Xiaomi Community**\n- In the **Me** tab, find **Set up** and press it\n- Press **Change region** and choose **Global**\n\n### Step 4: Apply for unlocking\n- Press \"Apply for unlocking\" at exactly **12:00 AM GMT+8** (pressing it too late will cause the **\"application quota limit reached\"** error. Use this [website](https://time.is/GMT+8) to check the time)\n- **\"Account Error\"** might show up. If that happens, retry after 10 days\n- **Tip:** If it keeps failing, try another method using this [Python automation script](https://xdaforums.com/t/how-to-unlock-bootloader-on-xiaomi-hyperos-all-devices-except-cn.4654009/#post-89311595)\n\n### Step 5: Bootloader Unlock Preparation\n- Logout of your **Xiaomi account** in **Settings**\n- Reboot\n- Login again with your **Xiaomi account** in **Settings**\n\n### Step 6: Add account to Mi Unlock\n- Turn off **Wi-Fi** and make sure a **working mobile data connection** is available\n- In **Developer Options**, find **Mi Unlock status** and press it\n- Press **Add account and device**\n\n### Step 7: Mi Unlock tool\n- Download the **latest version** of it from [here](https://miuirom.org/updates/mi-flash-unlock)\n\n### Step 8: Sign in to your Xiaomi account\n- After download, extract and navigate to its folder\n- Open **miflash_unlock.exe**, you will be prompted to sign in\n- After signing in, **agree to the disclaimer**\n\n### Step 9: ADB and Fastboot\n- Enter this [site](https://developer.android.com/tools/releases/platform-tools?hl=en) and select the one for **Windows**\n- After download, extract and navigate to its folder\n- Click on the **address bar** of the folder and replace everything with **cmd**\n- Press enter and a **CMD window** should pop up\n\n### Step 10: USB Debugging\n- In **Developer Options**, enable **USB Debugging**\n\n### Step 11: Bootloader Unlock\n- Plug in your phone and press **allow computer** when prompted on the phone\n- In the **CMD window** opened in **Step 9**, type `adb.exe reboot fastboot` and press enter\n- Your phone should reboot and display **FASTBOOT**\n- In the Mi Unlock app, it should display **phone connected**\n- Press **unlock** and then press **unlock anyway**\n- It might say **couldn't unlock**; wait for the amount of time displayed (during this time, **DO NOT** log out of your **Xiaomi account** on the phone or in **Xiaomi Community**)\n- When **enough time** has passed, repeat **this Step** and your phone should be unlocked\n\n---\n\n# Root\n\n## Disclaimer: `init_boot` is for newer devices. Older devices do not have `init_boot`, so only use `boot` on those\n\n## Tip: Disable auto-update in the Settings to prevent losing root\n\n\u003e \u003cdetails\u003e\n\u003e \u003csummary\u003e\u003cb\u003eKernelSU (recommended — install to check if your phone is supported) (Android 12+) \u003c/b\u003e\u003c/summary\u003e\n\u003e\n\u003e ### Step 1: Obtain ROM Files\n\u003e 1. Navigate to **About phone** on your device\n\u003e 2. Download the firmware **(Fastboot ROM)** from [miuirom.org](https://miuirom.org/) that matches **your device** and **OS version**\n\u003e\n\u003e ### Step 2: Extract Firmware\n\u003e - After download, extract and navigate to its folder\n\u003e\n\u003e ### Step 3: Locate the `images` Folder\n\u003e - Find the `images` folder and enter it\n\u003e\n\u003e ### Step 4: Backup `init_boot.img`\n\u003e 1. In the folder, copy `init_boot.img` to the `platform-tools` folder in **Step 9 of unlocking the bootloader**\n\u003e 2. Rename the copied file to `init_boot_stock.img` (DO NOT DELETE IN CASE OF A BRICK)\n\u003e\n\u003e ### Step 5: Transfer to Phone\n\u003e - Transfer the `init_boot_stock.img` file to your phone\n\u003e\n\u003e ### Step 6: Install KernelSU\n\u003e - Download and install the **latest APK** from their **releases**    \n\u003e https://github.com/tiann/KernelSU/releases\n\u003e\n\u003e ### Step 7: Check KernelSU compatibility\n\u003e 1. Open **KernelSU**\n\u003e 2. If the app shows **Not installed**, then your device is **officially supported** by **KernelSU**      \n\u003e    If the app shows **Unsupported**, it means that you should **compile the kernel yourself**, **KernelSU** won't and never provide files for you to flash\n\u003e\n\u003e ### Step 8: Patch the `init_boot_stock.img`\n\u003e 1. Open **KernelSU**\n\u003e 2. Click on **Not installed - Tap to install** -\u003e **Select a file**.\n\u003e 3. Choose `init_boot_stock.img`\n\u003e 4. Click on **Next** and choose the option with **This device KMI**\n\u003e 5. Press **Confirm**\n\u003e 6. The **patched file** should be something like `kernelsu_patched_20260605_045957.img` in the **Download** folder of your phone\n\u003e\n\u003e ### Step 9: Transfer Patched File to PC\n\u003e - Move the **patched file** (`kernelsu_patched_20260605_045957.img`) to `platform-tools`\n\u003e\n\u003e ### Step 10: Reboot to Fastboot\n\u003e 1. Plug in your phone\n\u003e 2. Navigate to `platform-tools`, click on the **address bar** of the folder and replace everything with **cmd**\n\u003e 3. Press enter and a **CMD window** should pop up\n\u003e 4. Run the following command in CMD:\n\u003e    ```\n\u003e    adb.exe reboot fastboot\n\u003e    ```\n\u003e\n\u003e ### Step 11: Flash Patched `init_boot`\n\u003e 1. In the same CMD window, execute the following commands using it as an example:\n\u003e    ```\n\u003e    fastboot.exe flash init_boot_a kernelsu_patched_20260605_045957.img\n\u003e    fastboot.exe flash init_boot_b kernelsu_patched_20260605_045957.img\n\u003e    fastboot.exe reboot\n\u003e    ```\n\u003e\n\u003e 2. Your device should reboot into the system and be rooted\n\u003e\n\u003e \u003c/details\u003e\n\n\u003e \u003cdetails\u003e\n\u003e \u003csummary\u003e\u003cb\u003eMagisk Alpha\u003c/b\u003e\u003c/summary\u003e\n\u003e\n\u003e ### Step 1: Obtain ROM Files\n\u003e 1. Navigate to **About phone** on your device\n\u003e 2. Download the firmware **(Fastboot ROM)** from [miuirom.org](https://miuirom.org/) that matches **your device** and **OS version**\n\u003e\n\u003e ### Step 2: Extract Firmware\n\u003e - After download, extract and navigate to its folder\n\u003e\n\u003e ### Step 3: Locate the `images` Folder\n\u003e - Find the `images` folder and enter it\n\u003e\n\u003e ### Step 4: Backup `init_boot.img`\n\u003e 1. In the folder, copy `init_boot.img` to the `platform-tools` folder in **Step 9 of unlocking the bootloader**.\n\u003e 2. Rename the copied file to `init_boot_stock.img` (DO NOT DELETE IN CASE OF A BRICK)\n\u003e\n\u003e ### Step 5: Transfer to Phone\n\u003e - Transfer the `init_boot_stock.img` file to your phone\n\u003e\n\u003e ### Step 6: Install Magisk Alpha\n\u003e - Download and install the **latest version** of Magisk Alpha from their [Telegram Channel](https://t.me/magiskalpha)\n\u003e\n\u003e ### Step 7: Patch the `init_boot_stock.img`\n\u003e 1. Open **Magisk Alpha**\n\u003e 2. Tap **Install** -\u003e **Select and Patch a File**\n\u003e 3. Choose `init_boot_stock.img`\n\u003e 4. The **patched file** should be something like `magisk_patched-XXXXX_xxxxx.img` in the **Download** folder of your phone\n\u003e\n\u003e ### Step 8: Transfer Patched File to PC\n\u003e - Move the **patched file** (`magisk_patched-XXXXX_xxxxx.img`) to `platform-tools`\n\u003e\n\u003e ### Step 9: Reboot to Fastboot\n\u003e 1. Plug in your phone\n\u003e 2. Navigate to `platform-tools`, click on the **address bar** of the folder and replace everything with **cmd**\n\u003e 3. Press enter and a **CMD window** should pop up\n\u003e 4. Run the following command in CMD\n\u003e    ```\n\u003e    adb.exe reboot fastboot\n\u003e    ```\n\u003e\n\u003e ### Step 10: Flash Patched `init_boot`\n\u003e 1. In the same CMD window, execute the following commands\n\u003e    ```\n\u003e    fastboot.exe flash init_boot_a magisk_patched-28001_xxxxx.img (e.g., fastboot.exe flash init_boot_a magisk_patched-28001_p5r8c.img)\n\u003e    fastboot.exe flash init_boot_b magisk_patched-28001_xxxxx.img (e.g., fastboot.exe flash init_boot_b magisk_patched-28001_p5r8c.img)\n\u003e    fastboot.exe reboot\n\u003e    ```\n\u003e    **Only** for **OLD DEVICES** without `init_boot` ***(DO NOT FOLLOW IF YOUR DEVICE HAVE `init_boot`)***\n\u003e    ```\n\u003e    fastboot.exe flash boot_a magisk_patched-28001_xxxxx.img (e.g., fastboot.exe flash boot_a magisk_patched-28001_p5r8c.img)\n\u003e    fastboot.exe flash boot_b magisk_patched-28001_xxxxx.img (e.g., fastboot.exe flash boot_b magisk_patched-28001_p5r8c.img)\n\u003e    fastboot.exe reboot\n\u003e    ```\n\u003e    **Only** for **OLD DEVICES** without `init_boot`, if there's an **error**, try running this command ***(DO NOT FOLLOW IF YOUR DEVICE HAVE `init_boot`)***\n\u003e    ```\n\u003e    fastboot.exe --disable-verity --disable-verification flash vbmeta vbmeta.img (vbmeta.img is from the firmware you downloaded)\n\u003e    ```\n\u003e\n\u003e 2. Your device should reboot into the system and be rooted\n\u003e\n\u003e \u003c/details\u003e\n\n---\n\n# Hide Root / Play Integrity Fix / Spoof Bootloader Status as Locked (Key Attestation)\n\n## Requirements\n\n\u003e \u003cdetails\u003e\n\u003e \u003csummary\u003e\u003cb\u003eKernelSU\u003c/b\u003e\u003c/summary\u003e\n\u003e\n\u003e ### Step 1: Install Required Magisk / KernelSU Modules\n\u003e Install the **latest release version** of the following modules in this order:\n\u003e - Hybrid Mount (reboot your phone)  \n\u003e   https://github.com/Hybrid-Mount/meta-hybrid_mount/releases\n\u003e - Zygisk Next (reboot your phone)  \n\u003e   https://github.com/Dr-TSNG/ZygiskNext/releases\n\u003e - TEESimulator-RS (Way Better Alternative to Tricky Store)  \n\u003e   https://github.com/Enginex0/TEESimulator-RS/releases\n\u003e - Tricky Addon Enhanced (auto-fetch keyboxes)  \n\u003e   https://github.com/Enginex0/tricky-addon-enhanced/releases (press Vol+ when asked)\n\u003e - Vector (LSPosed fork)  \n\u003e   https://github.com/JingMatrix/Vector/releases\n\u003e - PlayIntegrityFix (inject-s)  \n\u003e   https://github.com/KOWX712/PlayIntegrityFix/releases\n\u003e\n\u003e ### Step 2: Reboot\n\u003e\n\u003e \u003c/details\u003e\n\n\u003e \u003cdetails\u003e\n\u003e \u003csummary\u003e\u003cb\u003eMagisk Alpha\u003c/b\u003e\u003c/summary\u003e\n\u003e\n\u003e ### Step 1: Install Required Magisk Modules\n\u003e Install the **release version** of the following modules in this order:\n\u003e - Zygisk Next (reboot your phone)  \n\u003e   https://github.com/Dr-TSNG/ZygiskNext/releases\n\u003e - TEESimulator-RS (Way Better Alternative to Tricky Store)  \n\u003e   https://github.com/Enginex0/TEESimulator-RS/releases\n\u003e - Tricky Addon Enhanced (auto-fetch keyboxes)  \n\u003e   https://github.com/Enginex0/tricky-addon-enhanced/releases (press Vol+ when asked)\n\u003e - Vector (LSPosed fork)  \n\u003e   https://github.com/JingMatrix/Vector/releases\n\u003e - PlayIntegrityFix (inject-s)  \n\u003e   https://github.com/KOWX712/PlayIntegrityFix/releases\n\u003e - Shamiko  \n\u003e   https://github.com/LSPosed/LSPosed.github.io/releases\n\u003e\n\u003e ### Step 2: Reboot\n\u003e\n\u003e \u003c/details\u003e\n\n## Hide Root (should be compatible with most Android devices like Xiaomi, Samsung, etc.)\n\n\u003e \u003cdetails\u003e\n\u003e \u003csummary\u003e\u003cb\u003eKernelSU\u003c/b\u003e\u003c/summary\u003e\n\u003e\n\u003e ### Step 1: Install KsuWebUI\n\u003e - Download and install the latest version of KsuWebUI from  \n\u003e   https://github.com/5ec1cff/KsuWebUIStandalone/releases\n\u003e\n\u003e ### Step 2: Set up KernelSU\n\u003e 1. Open **KernelSU**\n\u003e 2. Go to **Settings** → Turn off **Kernel unmount**\n\u003e\n\u003e ### Step 3: Configure Zygisk Next\n\u003e 1. Open **KsuWebUI**\n\u003e 2. Click on the **Zygisk Next** module\n\u003e 3. Set **Denylist Policy** to **Unmount Only**\n\u003e 4. Turn on **Use anonymous memory**\n\u003e\n\u003e ### Step 4: Install Hide My Applist\n\u003e - Install Open Source HMA-OSS  \n\u003e   https://github.com/frknkrc44/HMA-OSS/releases\n\u003e - Enable it in the **LSPosed Manager** notification, select **Recommended**\n\u003e - Reboot\n\u003e\n\u003e ### Step 5: Configure \"Manage templates\"\n\u003e 1. Open **HMA-OSS**\n\u003e 2. Go to **Manage templates**\n\u003e 3. Create a **blacklist template**\n\u003e 4. Name it anything\n\u003e 5. Edit list of **0 apps invisible**, add:\n\u003e    - HMA-OSS  \n\u003e    - KernelSU  \n\u003e    - All LSPosed modules installed\n\u003e 6. If new LSPosed modules are installed later, update this template again\n\u003e\n\u003e ### Step 6: Configure \"Manage apps\"\n\u003e 1. Open **HMA-OSS**\n\u003e 2. Go to **Manage apps**\n\u003e 3. Select the app(s) detecting root\n\u003e 4. Turn on **Enable hide**\n\u003e 5. Press **Template config**\n\u003e 6. Make sure **Work mode** is **Blacklist**\n\u003e 7. Press **Using 0 templates** and select your **blacklist template**\n\u003e 8. Confirm\n\u003e\n\u003e \u003c/details\u003e\n\n\u003e \u003cdetails\u003e\n\u003e \u003csummary\u003e\u003cb\u003eMagisk Alpha\u003c/b\u003e\u003c/summary\u003e\n\u003e\n\u003e ### Step 1: Install KsuWebUI\n\u003e - Download and install the latest version of KsuWebUI from  \n\u003e   https://github.com/5ec1cff/KsuWebUIStandalone/releases\n\u003e\n\u003e ### Step 2: Hide Magisk App\n\u003e 1. Open **Magisk Alpha**\n\u003e 2. Go to **Settings** → **Hide Magisk App** (you can name it anything, e.g., `Settings`)\n\u003e 3. Disable **Zygisk**\n\u003e 4. Turn **Enforce Denylist** OFF\n\u003e\n\u003e ### Step 3: Configure DenyList\n\u003e 1. Navigate to **Configure DenyList**\n\u003e 2. Select the app(s) you want to **hide root** from (tap app first, then checkbox)\n\u003e\n\u003e ### Step 4: Configure Zygisk Next\n\u003e 1. Open **KsuWebUI**\n\u003e 2. Click on **Zygisk Next** module\n\u003e 3. Set **Denylist Policy** to **Enforced**\n\u003e 4. Turn on **Use anonymous memory**\n\u003e\n\u003e ### Step 5: Install Hide My Applist\n\u003e - Install Open Source HMA-OSS  \n\u003e   https://github.com/frknkrc44/HMA-OSS/releases\n\u003e - Enable it in the **LSPosed Manager** notification, select **Recommended**\n\u003e - Reboot\n\u003e\n\u003e ### Step 6: Configure \"Manage templates\"\n\u003e 1. Open **HMA-OSS**\n\u003e 2. Go to **Manage templates**\n\u003e 3. Create a **blacklist template**\n\u003e 4. Name it anything\n\u003e 5. Edit list of **0 apps invisible**, add:\n\u003e    - HMA-OSS  \n\u003e    - Settings (hidden Magisk app or renamed one)  \n\u003e    - All LSPosed modules installed\n\u003e 6. If new modules are installed later, update this template again\n\u003e\n\u003e ### Step 7: Configure \"Manage apps\"\n\u003e 1. Open **HMA-OSS**\n\u003e 2. Go to **Manage apps**\n\u003e 3. Select the app(s) detecting root\n\u003e 4. Turn on **Enable hide**\n\u003e 5. Press **Template config**\n\u003e 6. Make sure **Work mode** is **Blacklist**\n\u003e 7. Press **Using 0 templates** and select your **blacklist template**\n\u003e 8. Confirm\n\u003e\n\u003e ### Step 8: Make sure Shamiko is toggled ON\n\u003e\n\u003e \u003c/details\u003e\n\n---\n\n## Play Integrity Fix\n\n### Step 1: Configure PlayIntegrityFix\n1. Open the KsuWebUI app.\n2. Click on the **Play Integrity Fix [INJECT]** module.\n3. Make sure **Spoof Build** and **Spoof Build (Play Store)** is enabled\n4. Click on **Fetch** and choose **GitHub** to get the **latest one**\n\n### Step 2: Check the Integrity\n- Use this [app](https://play.google.com/store/apps/details?id=gr.nikolasspyr.integritycheck\u0026hl=en) to check it\n\n### Note: If you suddenly fail to pass Play Integrity, do Step 1 again\n\n\u003cp\u003e\n   \u003cimg src=\"https://github.com/user-attachments/assets/af8dcfd8-8ffa-4694-b500-63b78e527316\" alt=\"Image 1\" width=\"200\"\u003e\n\u003c/p\u003e\n\n\u003e \u003cspan style=\"opacity:0.6\"\u003e Some old custom ROMS spoof old fingerprints (PIF's) by default, you'd need to disable that functionality if your ROM has it built in, I can't help much for this part\u003c/span\u003e\n\n\n---\n\n## Spoof Bootloader Status as Locked (Key Attestation)\n\n### Step 1: Keybox Automation\n1. Open **KsuWebUI**\n2. Click on the **TEESimulator-RS** module\n3. Click on the **3 dots** on the top right corner\n4. Press **Keybox Automation**\n5. You can set **Fetch Interval** to your liking or just leave it as it is\n6. Find **Manual Actions** and click on **Fetch Key**\n\n### Step 2: Select your app(s)\nSearch for the app(s) you want to **spoof bootloader status as locked**, then click on the checkbox for it\n\n---\n\n## Tested / Working on the following devices (I'd appreciate it if you could report your device back to me in **Issues** if it works)\n- Xiaomi 14T (HyperOS)\n- Xiaomi Redmi K60 Ultra 5G (HyperOS/HyperOS 2.0)\n- Xiaomi Mi 11 Ultra (HyperOS)\n- Xiaomi 12 (Lineage OS 22.2)\n- Xiaomi 13 Ultra (HyperOS 2.0)\n- Xiaomi Redmi Note 15 5G (HyperOS 2.0)\n- Poco F8 Pro (HyperOS 3.0)\n\n---\n\n## Images\n\u003cp\u003e\n   \u003cimg src=\"https://github.com/user-attachments/assets/6cb09d52-a83b-4308-beab-364c1fc42baf\" alt=\"Image 1\" width=\"200\" style=\"margin-right: 150px;\"\u003e\n   \u003cimg src=\"https://github.com/user-attachments/assets/4134ecbb-c89c-4e69-82ec-b00429ab0839\" alt=\"Image 2\" width=\"200\" style=\"margin-right: 150px;\"\u003e\n   \u003cimg src=\"https://github.com/user-attachments/assets/cf09561f-9642-4c08-8260-b8f2c70869e5\" alt=\"Image 3\" width=\"200\" style=\"margin-right: 150px;\"\u003e\n   \u003cimg src=\"https://github.com/user-attachments/assets/0dffcdaa-2921-4e10-aa1b-40b2f2f9427e\" alt=\"Image 4\" width=\"200\"\u003e\n\u003c/p\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frealdtn2%2Fxiaomi-unlocking-rooting-guide","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frealdtn2%2Fxiaomi-unlocking-rooting-guide","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frealdtn2%2Fxiaomi-unlocking-rooting-guide/lists"}