Boot Flow

LOCKED devices with custom root of trust

Example YELLOW screen:

Show a YELLOW screen on every boot if the device is LOCKED, a custom root of trust has been set, and the image was signed with this custom root of trust. The YELLOW screen is dismissed after ten seconds and the device continues booting. If the user presses the power button, the "Press power button to pause" text changes to "Press power button to continue" and the screen is never dismissed (though the device may dim or turn off the screen to protect against burn-in). If pressed again, the screen is dismissed and the phone continues booting.

For the hex-number, use the first 8 digits of the sha256 of the libavb representation of the public key used for verification, for example d14a028c.

Suggested text:

Your device has loaded a different operating system.

Visit this link on another device to learn more:

g.co/ABH

ID: hex-number

power_settings_new Press power button to pause

UNLOCKED devices

Example ORANGE screen:

Show an ORANGE screen on every boot if the device is UNLOCKED. The ORANGE screen is dismissed after ten seconds and the device continues booting. If the user presses the power button, "Press power button to pause" text changes to "Press power button to continue" and the screen is never dismissed (the device may dim and/or turn off the screen if needed to protect against burn-in or similar). If pressed again, the screen is dismissed and the phone continues booting.

For the hex-number, use the first 8 digits of the sha256 of the libavb representation of the public key used for verification, for example d14a028c.

Suggested text:

The boot loader is unlocked and software integrity cannot be guaranteed. Any data stored on the device may be available to attackers. Do not store any sensitive data on the device.

Visit this link on another device to learn more:

g.co/ABH

ID: hex-number

power_settings_new Press power button to pause.

dm-verity corruption

Example RED eio screen:

Show a RED eio screen if a valid version of Android is found and the device is currently in the eio dm-verity mode. The user needs to click the power button to continue. If the user hasn't acknowledged the warning screen within 30 seconds, the device powers off (to protect the screen against burn-in and save power).

Suggested text:

Your device is corrupt. It can't be trusted and may not work properly.

Visit this link on another device to learn more:

g.co/ABH

power_settings_new Press power button to continue.

No valid OS found

Example RED screen:

Show a RED screen is shown if no valid version of Android can be found. The device cannot continue booting. If the user hasn't acknowledged the warning screen within 30 seconds, the device powers off to protect the screen against burn-in and save power).

For the hex-number, use the first 8 digits of the sha256 of the libavb representation of the public key used for verification, for example d14a028c.

Suggested text:

No valid operating system could be found. The device will not boot.

Visit this link on another device to learn more:

g.co/ABH

ID: hex-number

power_settings_new Press power button to power off.

Unlock confirmation

Example screen:

Show an unlock confirmation screen in response to the fastboot flashing unlock command being executed via the fastboot interface. Focus is initially on Don't unlock. If the user hasn't interacted with the warning screen within 30 seconds, the screen disappears and the command fails.

Suggested text:

If you unlock the bootloader, you will be able to install custom operating system software on this phone. A custom OS is not subject to the same level of testing as the original OS, and can cause your phone and installed applications to stop working properly. Software integrity cannot be guaranteed with a custom OS so any data stored on the phone while the bootloader is unlocked may be at risk.

To prevent unauthorized access to your personal data, unlocking the bootloader will also delete all personal data on your phone.

Press the Volume Up/Volume Down to select whether to unlock the bootloader, then the power button to continue.

Unlock

Unlock bootloader.

Don't unlock

Do not unlock bootloader and restart phone.