Problems enabling encryption on Xiaomi.EU ROM


Gandhi70

Members
Jul 3, 2017
41
20
During the last days I tried to enable encryption on my Mi Mix 2 without success.
I tried the following:

- boot to TWRP
- format data
- install latest Xiaomi.EU ROM
- flash forceencrypt.zip (https://forum.xda-developers.com/attachment.php?attachmentid=4732092&d=1553709437)
- reboot to system

Result: No encryption. Enabling encryption in Miui options results in unbootable phone.

Then I tried to edit the fstab.qcom file under /system/vendor/etc. Here I failed, because I was not able to replace the original file with the TWRP file manager. Somehow, the system partition stayed read only.

Can someone here lend me a hand and tell me what I did wrong?
 
During the last days I tried to enable encryption on my Mi Mix 2 without success.
I tried the following:

- boot to TWRP
- format data
- install latest Xiaomi.EU ROM
- flash forceencrypt.zip (https://forum.xda-developers.com/attachment.php?attachmentid=4732092&d=1553709437)
- reboot to system

Result: No encryption. Enabling encryption in Miui options results in unbootable phone.

Then I tried to edit the fstab.qcom file under /system/vendor/etc. Here I failed, because I was not able to replace the original file with the TWRP file manager. Somehow, the system partition stayed read only.

Can someone here lend me a hand and tell me what I did wrong?
Put the modified fstab in SDcard folder and in TWRP you select it and copy to vendor/etc folder. Easy!
Don't forget to MOUNT system and vendor partition before!
reboot.
 
Last edited:
  • Like
Reactions: Eclipse1991
Could someone post his modified fstab file or tell me what exactly do put into the fstab file ?

Gesendet von meinem MI 8 mit Tapatalk
 
Could someone post his modified fstab file or tell me what exactly do put into the fstab file ?

Gesendet von meinem MI 8 mit Tapatalk
You should keep your own fstab in order to avoid possible disorder.
Just by changing "encryptable=ice" to "fileencryption=ice" in a simple text editor does the job.
Then reinject the file into vendor/etc.
 
  • Like
Reactions: Eclipse1991
You should keep your own fstab in order to avoid possible disorder.
Just by changing "encryptable=ice" to "fileencryption=ice" in a simple text editor does the job.
Then reinject the file into vendor/etc.
After recplacing that file, the system automatically encrypts by booting ?

Gesendet von meinem MI 8 mit Tapatalk
 
But first I need to create a password somewhere , in a setting or somewhere.

Gesendet von meinem MI 8 mit Tapatalk
 
But first I need to create a password somewhere , in a setting or somewhere.

Gesendet von meinem MI 8 mit Tapatalk
No special PW creation, It will be the phone pin password ( pin you defined before finger print setup) or nothing if you don't set it. (Tested myself)
If you are with EU rom you just have to modify fstab as said and replace it via TWRP. At boot it should encrypt directly if no issue with TWRP you are using. (I don't know because I don't have this phone model)
Next time you will go using fcencript.zip given in XDA link in earlier post.
 
No special PW creation, It will be the phone pin password ( pin you defined before finger print setup) or nothing if you don't set it. (Tested myself)
If you are with EU rom you just have to modify fstab as said and replace it via TWRP. At boot it should encrypt directly if no issue with TWRP you are using. (I don't know because I don't have this phone model)
Next time you will go using fcencript.zip given in XDA link in earlier post.
And when exactly do I have to flash that file ? I guess I need to mount vendor then to make it work ?

Gesendet von meinem MI 8 mit Tapatalk
 
And when exactly do I have to flash that file ? I guess I need to mount vendor then to make it work ?

Gesendet von meinem MI 8 mit Tapatalk
Fcencrypt.zip is to be flashed via twrp every time you update the rom. You just add the zip file before reboot (vendor is mounted in process.
You may mount vendor if you make fstab hand modification.
fstab can be aslo pulled via ADB if you like.
 
No special PW creation, It will be the phone pin password ( pin you defined before finger print setup) or nothing if you don't set it. (Tested myself)
If you are with EU rom you just have to modify fstab as said and replace it via TWRP. At boot it should encrypt directly if no issue with TWRP you are using. (I don't know because I don't have this phone model)
Next time you will go using fcencript.zip given in XDA link in earlier post.

Does the encryption works with the Pattern lock screen password (not PIN) ? tks
 
Does the encryption works with the Pattern lock screen password (not PIN) ? tks
This is a good question! I didn't test it..
it is to be tested. I will not do it because i would avoid to reset my phone now, but i can test it next time I flush it.
For help, It exists a pattern/ number converter.
 
  • Like
Reactions: Soebianto
Does the encryption works with the Pattern lock screen password (not PIN) ? tks
check this video pattern lock in TWRP

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

Exact time 4.00 ~ 5.00 minutes in video
 
YES!
with your PIN PW included.
You check it it going back to TWRP, it should ask for your PW.
edit: Back tomorrow, it's diner here.

On my Mi 8 Lite TWRP don't ask for password. What I done:

1.Format data, coming from 10.3.7 pie eu stable. TWRP latest 0517.
2. Flashed fcencript.zip, replacing encryptable=footer with fileencryption=ice in fstab.qcom. fileencryption=footer results phone boot only on recovery (tested)
3. Installed the same ROM, added PIN.

On settings I get phone encrypted.
Booting to recovery don't ask for password and the data is visible.

Any idea what happened and how to fix?

Thanks.
 
On my Mi 8 Lite TWRP don't ask for password. What I done:

1.Format data, coming from 10.3.7 pie eu stable. TWRP latest 0517.
2. Flashed fcencript.zip, replacing encryptable=footer with fileencryption=ice in fstab.qcom. fileencryption=footer results phone boot only on recovery (tested)
3. Installed the same ROM, added PIN.

On settings I get phone encrypted.
Booting to recovery don't ask for password and the data is visible.

Any idea what happened and how to fix?

Thanks.
This procedure is the good one if TWRP doesn't encrypt.
- Did you modify your own phone fstab file or just the one already in the zip? you must take your own it's better.
- Yous said "installed the sam rom", you mean rom set up? not flash it again? if you reflash the rom you loose fstab modification.
- check fstab via twrp file explorer in order to be sure it is well copied in system/vendor directory.
Are you sure latest TWRP version for your phone are not upgraded with encrypt fonction as it is the case for most of them now.
 
  • Like
Reactions: sangie
- I modified my own fstab. I changed encryptable=footer with fileencryption=ice. I tried fileencryption=footer, but the ROM didn't boot, reverts to recovery. So I kept fileencryption=ice in my replaced fstab.

- ROM boots Ok, installed fine, added PIN. Not reflashed. Settings reports Phone encrypted. /system/vendor/etc/fstab exist with new value, perm. 644.

- magisk with checked option preserve force encryption. Unchecked dm verify.

Are you sure latest TWRP version for your phone are not upgraded with encrypt fonction as it is the case for most of them now.

I am not sure what exactly this mean. I searched and read all I found on this topic.

If phone really encrypted, as report settings, TWRP shouldn't read the data partition. I read some versions of TWRP not support encryption but in this case mine shouldn't read the data, isn't it?

Will dive more in this today and will report.
Thanks for your support. Really appreciated.
 
Last edited: