diff --git a/static/install.html b/static/install.html index 09cf2896..3f1e1148 100644 --- a/static/install.html +++ b/static/install.html @@ -306,6 +306,7 @@ TMPDIR="$PWD/tmp" ./flash-all.sh

In the bootloader interface, set it to locked:

fastboot flashing lock
+

The command needs to be confirmed on the device since it needs to perform a factory reset.

@@ -352,10 +353,12 @@ TMPDIR="$PWD/tmp" ./flash-all.sh

Installation of the stock OS via the stock factory images is the same process described above. However, before locking, there's an additional step to fully revert the device to a clean factory state.

+

The GrapheneOS factory images flash a non-stock Android Verified Boot key which needs to be erased to fully revert back to a stock device state. After flashing the stock factory images and before locking the bootloader, you should erase the custom Android Verified Boot key to untrust it:

+
fastboot erase avb_custom_key