This article offers a detailed step-by-step instruction on how to install Secure OS on HTC One M8 and M9 devices. To install Secure OS means that you will replace the stock Android distribution with the Secure OS version of your choice. Actually, the installer does not give you the option to choose which Secure OS version to install, however, you can easily set that in an OS policy.
The installation process is similar and a bit simpler with LG Nexus 5/5X – the other supported devices for a Secure Phone upgrade. This is why no special article is dedicated to the Nexus models.
In order to install Secure OS on your HTC M8, HTC M9, LG Nexus 5 or LG Nexus 5X device, you need:
- SAS access to download the installer.
- Windows PC to run the installer on (no other OS supported)
- your device connected to your PC USB 2.0 port using its original USB cable
- HTC devices need to be S-OFF
- Log into SAS, and go to OS > Installer.
- Click to download the latest installer build and run the application.
By default, on Windows machines, downloaded files are located in the Downloads folder of your PC.
Once launched, the installer will guide you through each step of the installation process. It includes a detailed log of all actions it performs and instructions for you what to do.
- Choose the installation location.
- Run the installer.
- Plug the device (dev options enabled, USB debugging enabled) into your PC USB.
- Click on Flash device.
Here is the difference between the installer for flashing Secure OS v1.0 and Secure OS v2.0 on your device. With the new version installer, clicking on Flash Device button will bring up an updater login, asking you for your Secure Phone account and password as an extra validation.
If you get the following message at this stage, you need to S-Off your device.
- The process keeps rolling until a screen notifies you of the required install components.
- Click Download + Update All File Dependencies: the application starts downloading and installing the needed files.
- When finished, the installer will notify you it is ready to begin the device flash procedure. Up to this moment, your device is with its previous installations. Click OK.
- Unlock the bootloader. The unlock process will begin automatically with the new version of the installer.If using an old version of the installer, follow the instructions
- Log in to HTC Dev. If you do not have a registered HTC dev account, then create it and log in.
- Click the Copy Identifier Token to Clipboard.
- Paste your ID token on the newly opened page and then Submit.
- Now enter the email address you used with your HTC Dev registration. You will have received an email with the following attachment: Unlock_code.bin file. Download it (in your Downloads folder) and then paste it on the respective web page as shown on screen.
- Click Next.
The OS 2.0 Installer will automatically acquire the unlock_code.bin and apply it to your device. Proceed with unlocking the bootloader by choosing “yes” on the screen (via Volume+Power buttons).
- Click Next.
- When your device reboots, it will prompt you to enable dev settings and USB debugging again. Click OK.
- A new command prompt window will appear on display and perform the device flash. When ready, the device will boot, and the installer will display a new set of instructions for you.
- Again, you must enable developer options, USB debugging and RSA fingerprint authorization. Click OK to the intermediary pop-up notifications until the log displays the message for success.
- The installer finalizes the process and displays a message for a successful installation. You can choose to copy the log if you want to.
Once succeeded with the install, HTC M8/M9 reboots again and enters the Secure Phone account setup wizard. The installation of Secure OS on LG Nexus 5 is pretty much the same. It is a bit quicker since no special bootloader procedures are performed.
Secure Phone is now ready for enrollment. At this stage, you can turn off your Secure Phone device until needed. On next boot, it will enter the setup process again.
When you complete the setup process, the device will reboot into Secure OS, ready for action.