Support request: DIGMA Pro Prime 18 (UMS9230/T606 UFS) bootloader unlock

[MrGamer4814]

Hello!

I would like to request bootloader unlock support for the DIGMA Pro Prime 18 tablet.

Device information

• Manufacturer: DIGMA
• Model: Pro Prime 18
• Model code: MS1002PL
• SoC: Unisoc T606 / UMS9230
• Platform: ums9230_1h10
• Storage type: UFS
• Android version: Android 13
• Active slot: _a
• Firmware build:
  S427_SZY_T30-T606-DIGMAPRO-PRIME-18_MS1002PL_20231214_003

Bootloader state

The "OEM unlocking" switch immediately turns itself off after I enable it.

Android properties:

ro.boot.flash.locked=1
sys.oem_unlock_allowed=0
ro.oem_unlock_supported=

Fastboot results:

fastboot flashing get_unlock_ability
FAILED (remote: 'Not implement.')

fastboot getvar unlocked
unlocked:

fastboot getvar is-userspace
is-userspace: no

fastboot oem device-info
FAILED (remote: 'unknown cmd.')

The bootloader provides a very limited Fastboot implementation and does not support the standard unlocking commands.

Original firmware files

I extracted the following files from the original PAC firmware:

fdl1-sign.bin
lk-fdl2-sign.bin
u-boot-spl-16k-ufs-sign.bin
lk-sign.bin
ums9230_1h10.xml
boot.img
vendor_boot.img
vbmeta-sign.img

The device uses the UFS SPL. I am not using the EMMC SPL.

Addresses from the original firmware XML:

FDL1: 0x65000800
FDL2: 0x9EFFFE00

Partition layout

The partition table was read successfully from the device.

Relevant partitions:

uboot_a: 3 MiB
uboot_b: 3 MiB
boot_a: 64 MiB
boot_b: 64 MiB
vendor_boot_a: 100 MiB
vendor_boot_b: 100 MiB
init_boot_a: 8 MiB
init_boot_b: 8 MiB

The init_boot_a and init_boot_b partitions are present but contain only zeroes.

The current boot_a and boot_b images were read successfully and are identical.

Download mode and spd_dump

Download mode works with WinUSB.

Tool version:

spd_dump_it oldpath
ver: 229
sha1: ad0ce43b210ebd0e0ffc4e436b0f350922304a3f

The read-only test using:

exec_addr: 0x65015f08
FDL1 address: 0x65000800
FDL2 address: 0x9EFFFE00

completed successfully.

The generated partition XML is valid and does not contain the following error:

Wrong unit size, do not use this table!

Backups

I have successfully backed up:

splloader
uboot_a
uboot_b
boot_a
boot_b
init_boot_a
init_boot_b
prodnv
miscdata

The active slot is _a.

I have NOT erased splloader.

I have NOT written a modified uboot.

I have NOT used the universal UFS package or files from another device.

Request

Could you please help add safe bootloader unlock support for this DIGMA UMS9230 UFS device?

I need help with:

1. Verifying whether this device needs an SPL-based or FDL1-based unlock method.
2. Creating or verifying a device-specific do_cboot patch.
3. Verifying the correct modified FDL2/UBOOT file before anything is written.
4. Providing a safe restore procedure using my original SPL and UBOOT backups.
5. Confirming whether the existing UMS9230 UFS method is compatible with this device.

I can provide the original FDL1, FDL2, UFS SPL, LK/UBOOT, firmware XML, partition XML, hashes and complete spd_dump logs.

Please tell me which files you need.

Thank you!

patched_test.xml
ums9230_1h10.xml