diff --git a/static/install.html b/static/install.html index 09cf2896..3f1e1148 100644 --- a/static/install.html +++ b/static/install.html @@ -306,6 +306,7 @@ TMPDIR="$PWD/tmp" ./flash-all.sh
In the bootloader interface, set it to locked:
fastboot flashing lock+
The command needs to be confirmed on the device since it needs to perform a factory reset.
@@ -352,10 +353,12 @@ TMPDIR="$PWD/tmp" ./flash-all.shInstallation of the stock OS via the stock factory images is the same process described above. However, before locking, there's an additional step to fully revert the device to a clean factory state.
+The GrapheneOS factory images flash a non-stock Android Verified Boot key which needs to be erased to fully revert back to a stock device state. After flashing the stock factory images and before locking the bootloader, you should erase the custom Android Verified Boot key to untrust it:
+fastboot erase avb_custom_key