HTC Desire Z: Rooting

 

This guide will walk you through the process of taking the HTC Desire Z from stock to having the ability to flash a custom recovery image & the latest version of CyanogenMod.
For other related guides please view the following:

• for the TMobile G2, see the TMobile G2 instructions.

Contents [hide] 1 Before you do anything — Make a backup 2 Downgrade to an exploitable Firmware 3 Root, S-OFF, the ClockworkMod Recovery & the Engineering HBoot for the HTC Desire Z 4 Flashing CyanogenMod

Before you do anything — Make a backup

Don't forget to back up your data. If you have synced the device with a Google account, then the contacts, calendar, Gmail, & select other Google-related data will not be lost and will come back after the next sync. However, you should backup anything you want to keep that is not stored on the SD card:

• SMS/MMS messages,
• Call Log,
• Bookmarks,
• Applications; use Titanium Backup or the Astro File Manager, for example,
• Any application data not on the SD card.

It would also be a good idea to backup everything stored on the SD card in the rare case the SD card must be formatted to resolve any major problems.
MyBackup Root, SMS Backup & Restore, and Call Backup & Restore are all free applications that can assist with backing up your data.

Downgrade to an exploitable Firmware

Firmware Downgrade: Froyo, Gingerbread

Root, S-OFF, the ClockworkMod Recovery & the Engineering HBoot for the HTC Desire Z

Warning: Rooting the HTC Desire Z will void the warranty.

Before you begin, if VISIONary is installed on the HTC Desire Z, uninstall it before continuing.

1. You will need ADB on the computer to root the HTC Desire Z and to flash the necessary files for radio S-OFF. Follow the Android SDK guide, to get the ADB shell on the computer.
2. Download busybox, the ClockworkMod Recovery, the Engineering HBoot, gfree 1.0, psneuter, root_psn, Superuser package:
   • busybox: Download

     md5: 25c5db694c987995909cc3166d4f01b0

   • ClockworkMod Recovery: Download

     md5: cbc776e7941ebf030e9fa39473d5b6f1

   • Engineering HBoot: Download

     md5: d8f61830f104ff5d48b855bbe0d95f56

   • gfree 1.0: Download

     md5: 0bc9fc22bda897c765b02066f8a3c83b

   • psneuter: Download

     md5: 89c2dec8d72d87b4c669f44dd31c8d17

   • root_psn: Download

     md5: c8fe38ef55eb8951def9ff17b2eb99c1

   • Superuser package: Download

     md5: 43d9a40b63e916635d5ad7ca32433fab

3. Unzip the zip files and copy the contents to the same folder as adb (the /platform-tools folder within the Android SDK folder).
4. Connect the HTC Desire Z to the computer via USB.
5. Make sure USB debugging is enabled on the HTC Desire Z by checking Settings » Applications » Development » USB debugging.
6. On the computer, open terminal and run the following commands:

   adb push busybox /data/local/tmp/

   adb push gfree /data/local/tmp/

   adb push hboot-eng.img /data/local/tmp/

   adb push psneuter /data/local/tmp/

   adb push recovery-clockwork-3.0.2.4-vision.img /data/local/tmp/recovery.img

   adb push root_psn /data/local/tmp/

   adb push su /sdcard/

   adb push Superuser.apk /sdcard/

   adb shell

   chmod 755 /data/local/tmp/*

   /data/local/tmp/psneuter

   NOTE: You will drop out of the shell after this command. Restart the shell using:

   adb shell

   cd /data/local/tmp

   ./gfree -f -b hboot-eng.img -y recovery.img

7. As it is very important that the hboot was installed correctly gfree calculates md5sums of the partition. It will calculate the following 3 checksums

   • md5sum #1 - checksum of partition 18 before the installation
   • md5sum #2 - checksum of the hboot image that should be installed
   • md5sum #3 - checksum of partition 18 after the installation

8. The messages that you what to see are either/or

   • md5sum #1 == md5sum #2 - the hboot image is already installed -> skipping installation
   • md5sum #3 == md5sum #2 - the hboot image was successfully installed -> OK!

9. If you get a different error message then DO NOT REBOOT and join #G2Root on Freenode for further help.
10. If gfree worked correctly continue with:

    ./root_psn

    sync

    reboot

11. The HTC Desire Z is now rooted with S-OFF, the Engineering HBoot & the ClockworkMod Recovery. Continue to the next section.

Flashing CyanogenMod

Please follow the CyanogenMod guide to continue.