Problems enabling encryption on Xiaomi.EU ROM


Gandhi70

Members
Jul 3, 2017
34
20
During the last days I tried to enable encryption on my Mi Mix 2 without success.
I tried the following:

- boot to TWRP
- format data
- install latest Xiaomi.EU ROM
- flash forceencrypt.zip (https://forum.xda-developers.com/attachment.php?attachmentid=4732092&d=1553709437)
- reboot to system

Result: No encryption. Enabling encryption in Miui options results in unbootable phone.

Then I tried to edit the fstab.qcom file under /system/vendor/etc. Here I failed, because I was not able to replace the original file with the TWRP file manager. Somehow, the system partition stayed read only.

Can someone here lend me a hand and tell me what I did wrong?
 

LOLO9393

Members
Feb 8, 2016
552
82
During the last days I tried to enable encryption on my Mi Mix 2 without success.
I tried the following:

- boot to TWRP
- format data
- install latest Xiaomi.EU ROM
- flash forceencrypt.zip (https://forum.xda-developers.com/attachment.php?attachmentid=4732092&d=1553709437)
- reboot to system

Result: No encryption. Enabling encryption in Miui options results in unbootable phone.

Then I tried to edit the fstab.qcom file under /system/vendor/etc. Here I failed, because I was not able to replace the original file with the TWRP file manager. Somehow, the system partition stayed read only.

Can someone here lend me a hand and tell me what I did wrong?
Put the modified fstab in SDcard folder and in TWRP you select it and copy to vendor/etc folder. Easy!
Don't forget to MOUNT system and vendor partition before!
reboot.
 
Last edited:
  • Like
Reactions: Eclipse1991

Eclipse1991

Members
Aug 12, 2018
182
40
Could someone post his modified fstab file or tell me what exactly do put into the fstab file ?

Gesendet von meinem MI 8 mit Tapatalk
 

LOLO9393

Members
Feb 8, 2016
552
82
Could someone post his modified fstab file or tell me what exactly do put into the fstab file ?

Gesendet von meinem MI 8 mit Tapatalk
You should keep your own fstab in order to avoid possible disorder.
Just by changing "encryptable=ice" to "fileencryption=ice" in a simple text editor does the job.
Then reinject the file into vendor/etc.
 
  • Like
Reactions: Eclipse1991

Eclipse1991

Members
Aug 12, 2018
182
40
You should keep your own fstab in order to avoid possible disorder.
Just by changing "encryptable=ice" to "fileencryption=ice" in a simple text editor does the job.
Then reinject the file into vendor/etc.
After recplacing that file, the system automatically encrypts by booting ?

Gesendet von meinem MI 8 mit Tapatalk
 

Eclipse1991

Members
Aug 12, 2018
182
40
But first I need to create a password somewhere , in a setting or somewhere.

Gesendet von meinem MI 8 mit Tapatalk
 

LOLO9393

Members
Feb 8, 2016
552
82
But first I need to create a password somewhere , in a setting or somewhere.

Gesendet von meinem MI 8 mit Tapatalk
No special PW creation, It will be the phone pin password ( pin you defined before finger print setup) or nothing if you don't set it. (Tested myself)
If you are with EU rom you just have to modify fstab as said and replace it via TWRP. At boot it should encrypt directly if no issue with TWRP you are using. (I don't know because I don't have this phone model)
Next time you will go using fcencript.zip given in XDA link in earlier post.
 

Eclipse1991

Members
Aug 12, 2018
182
40
No special PW creation, It will be the phone pin password ( pin you defined before finger print setup) or nothing if you don't set it. (Tested myself)
If you are with EU rom you just have to modify fstab as said and replace it via TWRP. At boot it should encrypt directly if no issue with TWRP you are using. (I don't know because I don't have this phone model)
Next time you will go using fcencript.zip given in XDA link in earlier post.
And when exactly do I have to flash that file ? I guess I need to mount vendor then to make it work ?

Gesendet von meinem MI 8 mit Tapatalk
 

LOLO9393

Members
Feb 8, 2016
552
82
And when exactly do I have to flash that file ? I guess I need to mount vendor then to make it work ?

Gesendet von meinem MI 8 mit Tapatalk
Fcencrypt.zip is to be flashed via twrp every time you update the rom. You just add the zip file before reboot (vendor is mounted in process.
You may mount vendor if you make fstab hand modification.
fstab can be aslo pulled via ADB if you like.
 

Soebianto

Members
Sep 15, 2017
1,118
222
No special PW creation, It will be the phone pin password ( pin you defined before finger print setup) or nothing if you don't set it. (Tested myself)
If you are with EU rom you just have to modify fstab as said and replace it via TWRP. At boot it should encrypt directly if no issue with TWRP you are using. (I don't know because I don't have this phone model)
Next time you will go using fcencript.zip given in XDA link in earlier post.
Does the encryption works with the Pattern lock screen password (not PIN) ? tks
 

LOLO9393

Members
Feb 8, 2016
552
82
Does the encryption works with the Pattern lock screen password (not PIN) ? tks
This is a good question! I didn't test it..
it is to be tested. I will not do it because i would avoid to reset my phone now, but i can test it next time I flush it.
For help, It exists a pattern/ number converter.
 
  • Like
Reactions: Soebianto

sangie

Members
May 27, 2018
20
15
YES!
with your PIN PW included.
You check it it going back to TWRP, it should ask for your PW.
edit: Back tomorrow, it's diner here.
On my Mi 8 Lite TWRP don't ask for password. What I done:

1.Format data, coming from 10.3.7 pie eu stable. TWRP latest 0517.
2. Flashed fcencript.zip, replacing encryptable=footer with fileencryption=ice in fstab.qcom. fileencryption=footer results phone boot only on recovery (tested)
3. Installed the same ROM, added PIN.

On settings I get phone encrypted.
Booting to recovery don't ask for password and the data is visible.

Any idea what happened and how to fix?

Thanks.
 

LOLO9393

Members
Feb 8, 2016
552
82
On my Mi 8 Lite TWRP don't ask for password. What I done:

1.Format data, coming from 10.3.7 pie eu stable. TWRP latest 0517.
2. Flashed fcencript.zip, replacing encryptable=footer with fileencryption=ice in fstab.qcom. fileencryption=footer results phone boot only on recovery (tested)
3. Installed the same ROM, added PIN.

On settings I get phone encrypted.
Booting to recovery don't ask for password and the data is visible.

Any idea what happened and how to fix?

Thanks.
This procedure is the good one if TWRP doesn't encrypt.
- Did you modify your own phone fstab file or just the one already in the zip? you must take your own it's better.
- Yous said "installed the sam rom", you mean rom set up? not flash it again? if you reflash the rom you loose fstab modification.
- check fstab via twrp file explorer in order to be sure it is well copied in system/vendor directory.
Are you sure latest TWRP version for your phone are not upgraded with encrypt fonction as it is the case for most of them now.
 
  • Like
Reactions: sangie

sangie

Members
May 27, 2018
20
15
- I modified my own fstab. I changed encryptable=footer with fileencryption=ice. I tried fileencryption=footer, but the ROM didn't boot, reverts to recovery. So I kept fileencryption=ice in my replaced fstab.

- ROM boots Ok, installed fine, added PIN. Not reflashed. Settings reports Phone encrypted. /system/vendor/etc/fstab exist with new value, perm. 644.

- magisk with checked option preserve force encryption. Unchecked dm verify.

Are you sure latest TWRP version for your phone are not upgraded with encrypt fonction as it is the case for most of them now.
I am not sure what exactly this mean. I searched and read all I found on this topic.

If phone really encrypted, as report settings, TWRP shouldn't read the data partition. I read some versions of TWRP not support encryption but in this case mine shouldn't read the data, isn't it?

Will dive more in this today and will report.
Thanks for your support. Really appreciated.
 
Last edited: