三星设备 root 之路

写在前面

务必退出三星及 Google 账户

刷机前备份重要文件，解锁会清除数据

三星设备解锁引导加载程序（Bootloader）会使 KNOX 熔断，导致保修失效及某些功能无法使用（部分可以通过 LSPosed 模块 KnoxPatch 及其增强模块修复），此过程不可逆。

不可使用的功能有：（参考 KnoxPatch 介绍）

Auto Blocker （可恢复）
Galaxy Wearable （可恢复）
Samsung Cloud （可恢复）
Samsung Flow （可恢复）
Samsung Health （可恢复）
Samsung Health Monitor （可恢复）
Secure Folder （可恢复）
Secure Wi-Fi （可恢复）
Smart View （可恢复）
Private Share （可恢复）
Samsung Notes （可恢复）
Samsung Pass
Samsung Wallet

LSPosed <-- 下载

KnoxPatch <-- 下载

Magisk <-- 下载

Shamiko <-- 下载

Samsung USB Driver <-- 下载

本文以 Tab S7(SM-T870) 为例

制作修补镜像

使用 Frija 下载镜像

设备型号可以在 设置-关于平板电脑-型号名称 的类似路径查看，Frija v2.0.23262.4 版本开始可以自动识别设备（需安装好驱动）。

如有不同地区需求，CSC 如下：（CN 为 CHN，HK 为 TGY）

List of Samsung CSC Codes

AFG = Afghanistan
AVF = Vodafone Albania (Branded)
TMC = Algeria
ANC = Argentina
ARO = Argentina
CTI = Argentina (Claro)
UFN = Argentina (Movistar)
PSN = Argentina (Personal)
XSA = Australia
OPS = Australia (Optus)
TEL = Australia (Telstra)
HUT = Australia ( Three/Vodafone)
VAU = Australia (Vodafone)
TTR = Austria
ONE = Austria
DRE = Austria (3 Hutchison)
MOB = Austria (A1)
ATO = Austria (Open)
TRG = Austria (Telering)
MAX = Austria (T-Mobile)
SEB = Baltic
BNG = Bangladesh
ETR = Bangladesh
TML = Bangladesh
XEB = Belgium
PHB = Belgium
PRO = Belgium (Proximus)
BVO = Bolivia
BVT = Bolivia
BVV = Bolivia
TEB = Bosnia and Herzegovina
ERO = Bosnia and Herzegovina
BHT = Bosnia and Herzegovina (BH TELECOM)
ZTO = Brazil
ZTA = Brazil (Claro)
ZTR = Brazil (Oi)
ZTM = Brazil (TIM)
ZVV = Brazil (VIVO)
BGL = Bulgaria
GBL = Bulgaria
MTL = Bulgaria (MTL)
VVT = Bulgaria (VVT)
CAM = Cambodia
MTB = Belarus
BMC = Bell Mobile
XAC = Canada (Unbranded)
CHR = Chatr Mobile
ESK = EastLink
FMC = Fido Mobile
GLW = Globalive Wind Mobile
KDO = Koodo Mobile
RWC = Rogers
BWA = SaskTel
TLS = Telus
VTR = Vidéotron
VMC = Virgin Mobile Canada
CAU = Caucasus Countries
CHO = Chile
CRC = Chile
CHL = Chile (Claro)
CHE = Chile (Entel PCS)
CHX = Chile (Nextel)
CHT = Chile (Telefonica)
CHV = Chile (VTR)
CHN = China
CHM = China (China Mobile)
CTC = China (China Telecom)
CHC = China (Open China)
COO = Colombia
COL = Colombia
COM = Colombia (Comcel)
COE = Colombia (ETB)
COB = Colombia (Movistar)
ICE = Costa Rica
TRA = Croatia
CRG = Croatia
DHR = Croatia (Bonbon)
TWO = Croatia (TELE2)
CRO = Croatia (T-Mobile)
VIP = Croatia (VIPNET)
CYO = Cyprus (Cytamobile Vodafone)
CYV = Cyprus Vodafone
ETL = Czech Republic
XEZ = Czech Republic
O2C = Czech Republic (O2C)
TMZ = Czech Republic (T-Mobile)
VDC = Czech Republic (Vodafone)
TDC = Denmark
CDR = Dominican Republic
DOO = Dominican Republic
DOR = Dominican Republic (Orange)
ALE = Ecuador
EBE = Ecuador
ECO = Ecuador
EGY = Egypt
ETE = El Salvador
VFJ = Fiji (Vodafone)
XEF = France
ORC = France
VGF = France
FTB = France
ORN = France
NRJ = France
BOG = France (Bouygues)
FTM = France (Orange)
SFR = France (SFR)
DBT = Germany
XEG = Germany (1&1)
EPL = Germany (E-Plus)
DDE = Germany (Congstar)
VIA = Germany (O2)
DTM = Germany (T-Mobile)
VD2 = Germany (Vodafone)
EUR = Greece
COS = Greece (Cosmote)
VGR = Greece (Vodafone)
PGU = Guatemala
TGU = Guatemala
CGU = Guatemala (Tigo)
CTE = Honduras
TGY = Hong Kong
XEH = Hungary
PAN = Hungary (Telenor)
TMH = Hungary (T-mobile)
VDH = Hungary Vodafone
INS = India
INU = India
XID = Indonesia
XSE = Indonesia
THR = Iran
MID = Iraq
ANP = Ireland
TSI = Ireland
O2I = Ireland O2
EIR = Ireland (eMobile)
MET = Ireland (Meteor)
3IE = Ireland (Three)
VDI = Ireland (Vodafone)
ILO = Israel
CEL = Israel (Cellcom)
PTR = Israel (Orange/Partner)
PCL = Israel (Pelephone)
ITV = Italy
HUI = Italy (H3G)
TIM = Italy (TIM)
OMN = Italy (Vodafone)
WIN = Italy (Wind)
CWW = Jamaica
JDI = Jamaica
SKZ = Kazakhstan
AFR = Kenya
KEN = Kenya
KTC = Korea (KT Corporation)
LUC = Korea (LG Uplus)
SKC = Korea (SK Telecom)
BTC = Libya
LYS = Libya
LUX = Luxembourg
VIM = Macedonia
MBM = Macedonia (T-Mobile)
XME = Malaysia
MRU = Mauritius
IUS = Mexico
BAT = Mexico
MXO = Mexico
TMM = Mexico (Movistar)
TCE = Mexico (Telcel)
TMT = Montenegro
MAT = Morocco (MAT)
MED = Morocco
MWD = Morocco (MWD)
NPL = Nepal
PHN = Netherlands
XEN = Netherlands
DNL = Netherlands (Ben NL)
KPN = Netherlands (KPN)
TNL = Netherlands (T-Mobile)
TPD = Netherlands
VDF = Netherlands (Vodafone)
NZC = New Zealand
TNZ = New Zealand
VNZ = New Zealand (Vodafone)
ECT = Nigeria
NEE = Nordic countries
TEN = Norway (Telenor)
PAK = Pakistan
PBS = Panama
TPA = Panama
PCW = Panama (Cable & Wireless)
CPA = Panama (Claro)
PNG = Papua New Guinea
CTP = Paraguay (Claro)
PSP = Paraguay (Personal)
TGP = Paraguay (Tigo)
PET = Peru
PNT = Peru (Nextel)
SAM = Peru (SAM)
PVT = Peru (Viettel)
GLB = Philippines (Globe)
XTC = Philippines (Open Line)
SMA = Philippines (Smart)
XTE = Philippines (Sun Cellular)
XEO = Poland
DPL = Poland (Heyah)
IDE = Poland (Orange)
PRT = Poland (Play)
PLS = Poland (PLUS)
ERA = Poland (T-Mobile)
TPL = Poland (T-Mobile)
MEO = Portugal
OPT = Portugal (Optimus)
TMN = Portugal (TMN)
TPH = Portugal (TPH)
TCL = Portugal (Vodafone)
PCT = Puerto Rico
ROM = Romania
HAT = Romania
COA = Romania (Cosmote)
ORO = Romania (Orange)
CNX = Romania (Vodafone)
SER = Russia
ACR = Saudi Arabia
JED = Saudi Arabia
KSA = Saudi Arabia
WTL = Saudi Arabia
XFU = Saudi Arabia (STC)
SMO = Serbia
TSR = Serbia (Telekom)
MSR = Serbia (Telenor)
TOP = Serbia (VIP)
MM1 = Singapore
XSP = Singapore
XSO = Singapor (Singtel)
SIN = Singapore (SingTel)
STH = Singapore (StarHub)
ORS = Slovakia
ORX = Slovakia
SIO = Slovakia
TMS = Slovakia
IRD = Slovakia (Orange)
MOT = Slovenia (Mobitel)
SIM = Slovenia (Simobil)
XFA = South Africa
XFE = South Africa
XFC = South Africa
XFM = South Africa
XFV = South Africa (Vodafone)
CRM = South America (Moviestar)
NBS = South America (Open Line)
SEE = South East Europe
PHE = Spain
FOP = Spain
XEC = Spain (Movistar)
AMN = Spain (Orange)
AMO = Spain (Orange)
ATL = Spain (Vodafone)
YOG = Spain (Yoigo)
SLK = Sri Lanka
VDS = Sweden
XEE = Sweden
HTS = Sweden (Tre)
AUT = Switzerland
SUN = Switzerland
ORG = Switzerland
MOZ = Switzerland
SWC = Switzerland (Swisscom)
BRI = Taiwan
WAN = Taiwan
CWT = Taiwan
THL = Thailand
EON = Trinidad and Tobago
TTT = Trinidad and Tobago
TUN = Tunisia
TUR = Turkey
TRC = Turkey
SEK = Ukraine (Kyivstar)
XSG = United Arab Emirates
XSS = United Arab Emirates
BTU = United Kingdom
VIR = United Kingdom
EVR = United Kingdom (EE)
H3G = United Kingdom (H3G)
O2U = United Kingdom (O2)
ORA = United Kingdom (Orange)
TMU = United Kingdom (T-Mobile)
VOD = United Kingdom (Vodafone)
XEU = United Kingdom / Ireland
CPW = United Kingdom (Carphone Warehouse)
ATT = AT&T USA
LRA = Bluegrass Cellular
BST = Boost Mobile
CCT = Xfinity Mobile (Comcast)
XAR = Cellular South US
AIO = Cricket Wireless
GCF = Global Certification Forum
TMK = MetroPCS USA
ACG = Nextech / C-Spire
CHA = Spectrum Mobile (Charter)
SPR = Sprint (CDMA)
TMB = T-Mobile USA
TFN = Tracfone
USC = US Cellular
XAS = USA (Unbranded/Unlocked)
XAA = USA (Unbranded/Unlocked)
VZW = Verizon
VMU = Virgin Mobile USA
UFU = Uruguay
UPO = Uruguay
UYO = Uruguay
CTU = Uruguay (Claro)
CAC = Uzbekistan
XXV = Vietnam
MTZ = Zambia (MTN Zambia)

也可以在 SamFw 下载：

SamFw 界面

使用 Magisk 修补镜像

将下载好的压缩包解压，得到如下文件：（Wifi 版无 CP 开头文件）

解压所得文件

将 AP 开头的文件复制到三星设备中。

安装 Magisk App 后在 Magisk 安装选项选择选择并修补档案，选择的文件为 AP，Magisk 会在 Download 文件夹生成 magisk_patched 开头的 .tar 文件。（后面会用到）

解锁 BL

如果仅仅想刷不同地区版本系统，不需要解 BL

没有 OEM 选项可能是因为设备未联网

连续点击内部版本号，提示已是开发人员后进入选项找到 OEM 解锁选项，打开（允许）。
关闭设备并连接电脑后重启，同时按住电源 + Vol Up + Vol Down 进入 Download 模式。
根据屏幕提示进入解锁模式完成解锁后自动重启。
三星的 VaultKeeper 服务会尝试在数据擦除后重新为 Bootloader 上锁，所以解锁完成重启后需联网通知 VaultKeeper 设备已解锁，再次进入开发模式即可，确保 OEM 选项为允许。否则仍无法刷写非官方镜像。