How To Root Unisoc Android 11 (Easy Way)

Tested and work on Realme C11 2021 RMX3231 and Infinix Smart 6 Android Go unisoc . The process is quite complicated. Include bypass lock bootloder, pull boot img, patch boot.img  using magisk and inject boot.img with fingerprint.

This tutorial based on Grandmasters69, but i modified to make my life easier. To unlock the bootloader and pull boot.img i'm using Unlock Tools

Prerequisite

• Use at your own risk! I am not responsible for your actions
• Make sure backup nvram
• Make i sure install all the driver 

File Needed

• Qcom MTK Driver
• adb_fastboot_r33.0.3-windows
• Unisoc Driver SPD_Driver_R4.20.4201
• Unlock tool
• Python (I'm using Python 3.11.4)
• Android Image Kitchen v3.8-Win32 (AIK)
• Win64OpenSSL_Light-1_1_1a 
• avbtool.py
• rsa4096_boot.pem 

Set Enviroment

• Install python
• python -m pip install pycryptodome
• Install OpenSSL set the path manually

Get Current Fingerprint

 

• enable developer option and usb debugging
• open terminal run this command
  adb shell getprop ro.bootimage.build.fingerprint
•  it looks something like realme/RMX3231/RMX3231:11/<build_id>/<timestamp>:user/release-keys
•  this will be the fingerprint we sign our boot.img with so save it somewhere

Unlock Bootloader And Patch Magisk

• boot UT
• Check the slot
• BACKUP nvdata!
• UBL
• reboot system < it will show failed messages
• Unplug cable press power button until it turn on
• it will boot into no mode
• boot into recovery mode (press power + vol up once)
• factory reset
• reboot system
• install magisk apk
• open and patch the original boot.img 
• you will get patch_boot_magisk.img 

Modified Magisk Patch Boot

 

• Extract AIK
•  copy patch_boot_magisk.img into AIK folder
•  .\unpacking.bat patch_boot_magisk.img
• .\repacking.bat
• You will get new images "image-new.img"

Inject With Avbtool

 

• Create new folder e.g "bob"
• copy  "image-new.img", avbtool.py, rsa4096_boot.pem into one folder
• open terminal type this command
  python.exe avbtool.py add_hash_footer --image image-new.img --partition_name boot --partition_size 67108864 --key rsa4096_boot.pem --algorithm SHA256_RSA4096 --prop com.android.build.boot.fingerprint:realme/RMX3231/RMX3231:11/RP1A.201005.001/1696902632103:user/release-keys --prop com.android.build.boot.os_version:11 --salt 7A91E47F8D2CFB95DCCFF13305EE3F07EDCF83A42660A811F3724E1E8B463284
• You will get the new image-new.img with the same size as your stock recovery 

Flash Boot Image

 

• adb reboot bootloader
• fastboot flash boot_a image-new.img
• fastboot reboot
• open magisk apps
• done!