How to Root Locked Redmi Note 3 (Snapdragon)

Normally, you won’t be able root access on MIUI device with locked bootloader including on Redmi Note 3. Luckily, some heavy users of MIUI users have managed various method to come up with workarounds for the situation. There is a method to unlock Redmi Note 3 unofficially with no official permission required. However, the method is, apparently, difficult at too risky for some users. Many of them ended up in bootloop or even soft-bricked.

In this article, you will see a method to: temporarily unlock bootloader, flash TWRP, and root your Redmi Note 3 Snapdragon (RN3SD). What’s the difference between this method and another one (the previous one)? This method, discovered by and thanks to Raaj52, is said to be a brick-free method and it utilizes a Windows-based tool (command prompt script) to make the process may easier than the previous one – Read: How to unlock Redmi Note 3 Bootloader Without Official Permission.

And here’s what you gonna need..

Requirements

• A Redmi Note 3 Qualcomm Snapdragon device (not the MTK one) with bootloader locked.
• A Windows based PC/laptop running Windows 7/8/8.1/10 64-bit system.
• A USB cable. Just use the one comes shipped with your phone.
• Download any version of MIUI Fastboot ROM (.tgz file) for RDN3SD : Latest – MIUI 7.3.2.0.LHOMIDD Global Stable.
• Download MiFlash Tool v20160401.
• Download safe_emmc_apsboot.mbn file and root_folder.zip file. Both are downloadable here.
• Download SuperSU v2.71 flashable .zip file.

Prerequisites

• Make sure your RN3SD has enough battery power (more than 75% is advised).
• Extract the downloaded Fastboot ROM (.tgz) using either WinRAR or 7zip. You may need to extract several times until you have the images folder.
• Enable USB debugging on your phone. Follow these direction: simply go to Settings >> About Phone >> tap 7 – 10 time on the MIUI version. That will activate Developer Options menu. Now go to Settings >> Developer Options then enable USB Debugging.
• Enable OEM Unlock option as well. This is available in Developer Options as well.
  
• Install MiFlash tool on your PC.
• Extract the downloaded root_folder.zip file in your PC.
• Backup all your important data of your phone. This method involves wiping all data so obviously all data will be erased.
• Copy SuperSu .zip file to your phone and place it at external SD Card / storage.
• Disable driver signature enforcement in your PC. You can do that by pressing Windows button + i on keyboard to reveal the Settings page. From there you can choose Update & Security >> Recovery >> Advanced startup >> Restart now. Wait a moment for your computer to restart. Next, go to Troubleshoot >> Advanced options >>Startup settings >> Restart. Once your computer restarts, now choose Disable driver signature enforcement which is option number 7. See the video below for more details :

Some Known Limitations

As what Raaj52 mentioned, this method has some known limitations that every user implementing it need to aware. Therefore, before you continue, please read the limitations first :

• This method is a temporary unlock method. It means you are advised to keep trying your best applying for official permission.
• You will not be able to flash any Custom ROMs using TWRP even if the phone has been rooted. The biggest risk of doing so is bootloop. Sadly, the only solution to kick your phone out of bootloop is only testpoint unbrick method.
• Flashing official MIUI Fastboot ROM through MiFlash tool is, however, still possible but it may relock the bootloader again.

The Method

Stage 1 – Flashing Fastboot ROM

Step 1 – Open up File Explorer on your PC and navigate to the folder where you have downloaded safe_emmc_appsboot.mbn file.

Step 2 – Rename that file from safe_emmc_appsboot.mbn to emmc_appsboot.mbn.

Step 3 – Open up another File Explorer window and navigate to the folder of where you have extracted the Fastboot ROM.

Step 4 – Find the original safe_emmc_appsboot.mbn file and copy it to somewhere else for a backup.

Step 5 – Now copy the downloaded – and renamed – safe_emmc_appsboot.mbn file to the same location of original safe_emmc_appsboot.mbn inside extracted Fastboot ROM files.

Step 6 – Connect your phone to your PC using its USB cable. Just wait the authorization pops up in your phone, otherwise you can follow these additional steps (or you can simply continue to step 7 if you do not face the problem) :

Step 6.1 – Disconnect your device from PC.

Step 6.2 – On your PC, go to C:\Users\”your pc name here”\.android

Step 6.3 – Delete adbkey file and adbkey.pub file.

Step 6.4 – Open up Command Prompt window and issue command below :

adb kill-server
adb start-server

Step 6.5 – Try connecting your device to PC again.

Step 6.6 – Type this in command prompt window:

adb devices

Step 6.7 – You should now see the authorization popup in your phone and your phone is recognized properly by your PC.

Do not forget to tick “Always allow from this PC” on your device.

Step 7 – In Windows Explorer window, go to the location of where you have extracted the root_folder.zip file. Open up the README.txt file and understand all the instruction.

Step 8 – Still in the same location, hold down the Shift button on your keyboard and right-click o any empty space in the same folder. Now choose “Open command window from here.”

Step 9 – Issue this command (type in then press Enter) :

adb reboot edl

Failed to do so? You may also try this method of booting Redmi Note 3 to EDL mode.

Step 10 – EDL mode is indicated by a blinking red LED. Now you can open up MiFlash tool.

Step 11 – Click the Browse button then locate the location of Fastboot ROM folder.

Step 12 – Make sure the “Flash All” option in the bottom is selected, and then click the Flash button to start installing MIUI7 Fastboot ROM on your locked Redmi Note 3. Pay attention to the screenshot below..

Step 13 – Just wait till the flashing process finished. Once it’s completed, you can now disconnect your phone from your PC but do not switch your phone ON. Otherwise, it will end up in a bootloop mode.

Stage 2 – Unlocking Bootloader

Step 14 – Now put your device into Fastboot mode by pressing Volume Down (-) button and Power button at once until you see the Bunny mechanic (Fastboot logo).

Step 15 – Connect your phone to the PC again.

Step 16 – On your PC, open up Windows Explorer (if you haven’t done so) and go to the folder of where you have extracted root_folder.zip file. You’ll see several files there such as adb.exe, aapt.exe, emmc_patch_twrp.img, fastboot.exe, and so on.

Step 17 – Now double-click on Root.bat file to run it. Read all displayed instruction thoroughly and proceed as instructed which in this case you may only need to press any key on your keyboard. That’s an easy task to do.

Step 18 – You’ll see something similar to this one indicating information of initial state of your device. Now just press any key again.

Step 19 – Upon hitting another button on your keyboard, the tool will unlock your phone bootloader. See? How cool is that to unlock your phone in just one single press of a button.

Stage 3 – Installing TWRP Recovery

Step 20 – Next, just press any key again and the tool should automatically flash TWRP on your Redmi Note 3.

Rooting Redmi Note 3

Step 21 – Again, just press any key to reboot your device into TWRP.

Step 22 – Once your phone entering TWRP, you can now flash SuperSU.zip file that you have copied early. To make the task easier, you should firstly change the language to English (unless you understand Chinese).

Step 22 – Now in TWRP’s main menu, choose Install >> look for the SuperSU .zip file >> then Swipe right to flash. Once done, choose Wipe Cache/Dalvik the Reboot.

Step 23 – Just wait for the first reboot sequence. It may take a little bit longer than usual but that’s normal. Upon rebooting, your phone is now rooted. Congratulation.

Error in Flashing Fastboot ROM?

Just follow these steps:

1. Disconnect your phone from PC
2. Press Volume Down (-) and Power button simultaneously to enter Fastboot mode.
3. Connect your device to PC again.
4. Launch MiFlash tool up and click the Refresh button.
5. You’ll now see your device name displayed. It’s something like “5dfe6hg“.
6. Click the Browse button and locate the Fastboot ROM folder you’ve extracted. Make sure you have replaced the emmc_appsboot.mbn file with the one modified/downloaded.
7. Finally click the Flash button to start installing MIUI Fastboot ROM.
8. Once done flashing, your phone should reboot.Your phone will end up in bootloop mode but it’s normal. Therefore, please no worries!
9. Put your device into Fastboot mode again by pressing Volume Down (-) and Power button simultaneously.
10. Now run Root.bat tool again and proceed accordingly.
11. Your RN3SD should now reboot successfully. Enjoy!

Congratulation! Your Redmi Note 3 Qualcomm Snapdragon is now rooted and hey! It also has TWRP installed. However, do not try to flash any Custom ROM through usual method.