Secure Boot is a built-in protection on Xiaomi devices that prevents unsigned software from running. It works as a digital “guardian” to check the integrity of boot files before starting the system. For most users, this feature remains invisible, but it becomes a serious obstacle if you decide to install custom firmware, obtain root rights or restore the device after a software failure.
Disabling Secure Boot on Xiaomi is not an easy procedure, but it requires understanding the consequences: without this protection, the device becomes more vulnerable to malware, and improper actions can lead to a “bricking” (complete inoperability) of the gadget. In this article, we will analyze which Xiaomi models support disabling Secure Boot through official and informal methods, what tools will be needed, and how to minimize risks at each stage.
What is Secure Boot and why you should turn it off
Secure Boot is a UEFI security standard that checks digital signatures of boot files. On Xiaomi devices (especially Mi TVs, Redmi TVs and some smartphones), this feature blocks:
- 🔧 Installation of unofficial firmware (for example, LineageOS or AOSP)
- 🔓 Getting root rights through Magisk or SuperSU
- 🛠️ Recovery of the system through custom Recovery (TWRP)
- 🖥️ Running alternative OSes (e.g. Ubuntu on the ARM-device)
The main reasons for disabling: 1. Install modified software to extend functionality (for example, adding Google Play to Mi TV, where it is not by default). 2. Restore the device after the "soft brick" (when the system is not booted, but fastboot is available). 3. Development or testing of software that requires low-level access.
⚠️ Attention: Disable Secure Boot on Xiaomi Mi TV 4S/5 And other models with Amlogic processors can cause the bootloader to lock after the firmware update, which requires physical intervention (flashing through the bootloader). USB Burning Tool).
Preparing for Secure Boot Disconnection: What You Need to Know
Before you start, make sure your device is unlocked for the developer. Without this step, no further action is possible. Most Xiaomi devices (except TVs) will require:
- Activate Developer Mode (7 times click on Build Number in Settings → About Phone).
- Enable USB Debugging and OEM Unlocking in the Developer Menu.
- Link your Mi Account to your device (required for official unlocking of the bootloader).
For Xiaomi TV, the process is more complicated: Amlogic models (Mi TV 4A, 4C, 4S, 5) require ADB connectivity and use the USB Burning Tool utility. Models on MediaTek (Redmi Smart TV X) can support fastboot unlocking, but there are no official tools for this.
Official method: unlock the bootloader through Mi Unlock
The only legal method to disable Secure Boot on Xiaomi smartphones is to use the Mi Unlock Tool utility.It only works for devices with official firmware and a tied Mi Account. The process takes up to 720 hours (30 days) due to the company's security policy.
Step-by-step:
- Download Mi Unlock Tool from the official website (the version must match your firmware).
- Launch the utility on behalf of the administrator and log in under the same Mi Account that is linked to the device.
- Transfer the smartphone to fastboot mode (turn off, then press Volume down + Power).
- Connect the device to the PC and wait for recognition in Mi Unlock.
- Press Unlock and confirm the action. If the device is new, a 3- to 30-day standby timer will appear.
Once successfully unlocked, Secure Boot will be disabled automatically, but this does not give full access to the firmware modification. Further actions will require the installation of a custom recover (TWRP) or manually disabling signature verification via fastboot.
☑️ Preparation for unlocking the loader
Unofficial methods: disabling Secure Boot on Xiaomi TV
Xiaomi TVs don't have official unlocking tools, and they use workarounds that require technical skills.
1. via ADB (for Android TV 9+ models):
adb shell
su
setprop sys.secureboot.disable 1
rebootThis command temporarily disables the check, but after restarting or updating the firmware settings will reset. For permanent effect, you need to modify the boot.img file.
2. via USB Burning Tool (for Amlogic processors):
- 📁 Download the firmware for your model from the forum 4PDA or XDA Developers (Look for versions marked with a note) no_secureboot).
- 🔌 Connect the TV to the PC via port OTG (Some models require a special Amlogic cable. USB).
- 🖥️ Launch it. USB Burning Tool, select the firmware file and press Start. wait for completion (process takes 5-10 minutes).
⚠️ Attention: Firmware through USB Burning Tool erases all data on TV, including licenses for Netflix, Disney+ And other services, and they're going to have to be manually restored through manufacturer support.
What if the TV doesn’t turn on after the firmware?
Risks and consequences of disabling Secure Boot
Disabling protection entails several critical changes:
| Consequence | Smartphones | Televisions |
|---|---|---|
| Vulnerability to malware | ✅ High risk (especially when installing pirates) APK) | ⚠️ Medium risk (limited to Android functionality) TV) |
| Loss of guarantee | ❌ 100% denial of service | ❌ Failure to do so if a modification is detected |
| Problems with OTA-update | ✅ No updates are being installed | ✅ Updates can "brick" the device |
| Lockdown DRM-key | ⚠️ Netflix, Widevine L1 They may stop working. | ❌ Loss of loss 4K HDR streaming |
On Xiaomi TVs with Secure Boot disabled, hardware decoding of H.265 (HEVC) and VP9 video formats via DRM will stop working. This means that Netflix, YouTube in 4K and Amazon Prime Video will play with artifacts or in low resolution.
For smartphones, the main problem is the inability to use banking applications (for example, SberBank Online or Tinkoff), since they detect the presence of root or modified firmware.
💡
If you want root rights, but stability is important, consider Magisk and MagiskHide, which hides the fact of unlocking from most applications, including banking.
Alternative solutions: when Secure Boot is not needed
Before you risk the device, check if you can do without disabling Secure Boot:
- 📱 For smartphones: Many custom firmware features (such as design themes or advanced settings) are available through MIUI Unlocked bootloader without disabling Secure Boot.
- 📺 For TVs: Install Google Play through ADB Unlocked: Adb install com.google.android.tvlauncher-123.apk (where 123 — launcher version for your model).
- 🖥️ For developers: Use Android emulators TV or Xiaomi devices with a pre-unlocked bootloader (for example, POCO F1 or Redmi K20 Pro).
If the goal is simply to remove embedded applications (bloatware), ADB rights are sufficient:
adb shell pm uninstall -k --user 0 com.mi.android.globalFileexplorerThis command will remove Xiaomi Explorer for the current user without compromising system integrity.
Frequent Mistakes and How to Avoid Them
Most of the problems with disabling Secure Boot are due to improper actions in the preparation stage.
1.Couldn't unlock error in Mi Unlock Tool
Reasons:
Mi Account is not tied to the device (you need to log in to Settings → Xiaomi account).
The device does not support unlocking (check the list of compatible models).
Mi Unlock is outdated (download the latest version from the official website).
2. TV is not defined in USB Burning Tool
Decisions:
Use the original USB-A → USB-A cable (not USB-C!)
Install Amlogic drivers manually through Device Manager (you can download it on 4PDA).
— Try another one. USB-port USB 2.0 on the back of the PC).
3. After firmware, the TV is loaded in a loop (bootloop)
Possible action:
Repeat the firmware with another version of the software (for example, from stable to developer).
Check the integrity of the firmware file (MD5-sum must match the original).
If nothing helps, contact the service center with a request to re-flash the eMMC (cost ~ 3-5 thousand rubles).
💡
Before any firmware manipulations, always back up the persist partition (for TVs) or EFS (It's for smartphones. It's going to keep it. IMEI, MAC-Addresses and other critical data.