TB138FC Root Guide

Instructions for getting root on Lenovo TB138FC running ZUI 14

Read carefully:
​This will delete all of your data!!

All actions listed below are at your own risk. I did this and above posted the Magisk patched boot.img for firmware 14.0.820.​

UNLOCKING THE BOOTLOADER:

This will delete all you data

Step 1: Go to SETTINGS Menu and click multiple times on your ZUI version. This will give you Developer access.

Step 2: Go General Settings menu > Developer options

Step 3: Click to enable OEM unlocking, also enable debugging mode.

Step 4: Download platform-tools_r34.0.1-windows to your computer, you may also need usb_driver_r13-windows, unpack everything in a convenient place for you

Step 5: Go to the platform-tools folder and run the command prompt by writing CMD in the folder header and press Enter

Step 6: Connect your USB cable and run the following command:
adb reboot bootloader

Step 7: Run the following command:
fastboot flashing unlock

On your tablet Click volume UP to unlock your bootloader
Wait for the confirmation on the tablet screen

Step 8: Run command:
fastboot reboot

GETTING ROOT ACCESS:

Prep: Put your Qualcomm device in 9008 mode

  • You may need a qualcomm usb driver for 9008 mode to work properly

Step 1: Turn off the power, then hold Volume UP and insert the USB cable connected to the PC into the tablet
Step 2: Use the EMMCDL_GUI tool to dump partitions boot_a and boot_b

In the program, select the brand Lenovo, model TB-J716F and download the file 29-11-2022_19-32-13_prog_firehose_ddr.elf
Then you need to select the physical partition number 4, select the UFS memory type, and click get GPT partition table
In the list, select the boot_a and boot_b sections and click read from device in the context menu
The resulting partition dumps will be located at \EMMCDL_GUI_1.5\Temp
Disconnect the tablet from the PC, hold volume DOWN and power button for ~10 seconds until you feel the vibration

Step 3: When the tablet boots into the system, enable USB debugging via ADB in the developer settings

  • Go to the folder with platform tools and start the command line by writing CMD in the folder header
  • Enter the command to determine the effective slot:
    adb shell getprop | grep slot

Partition Info

If you see ro.boot.slot_suffix=_b, then the system is running on slot b.
If ro.boot.slot_suffix=_a then slot a
Note which partition the tablet is running on.

  • Install the latest version of MAGISK manager app on your tablet
  • Copy the current boot_*.bin to your tablet (Instead of an * , select your version received by the grep slot command)
  • Open MAGISK and click Select and patch a file. Find the boot_*.bin you copied and patch this file. Wait for the process to be completed
  • Copy Magisk patched boot from the Download folder on your device to the platform-tools folder on your PC, then rename it to boot.img

Step 4: In the command line window on the computer, enter the command:
adb reboot bootloader

When the tablet boots into fastboot mode, enter the command:
fastboot flash boot boot.img

Wait for it to complete then:
fastboot reboot

Done, your tablet is now rooted!

Edit
Pub: 30 Apr 2023 23:45 UTC
Edit: 01 May 2023 00:59 UTC
Views: 752