P20 Pro - Where is the encyryption status in EMUI - Huawei P20 Pro Questions & Answers

Hi,
I cant find anywhere in EMUI something along the lines
"Encrypt phone: encrypted." like I had with pretty much any of my other devices.
I don´t believe Huawei would release a 8.1 Android without encryption. It is mandatory by Google, isn´t it? Maybe it is on by default once a PIN is set and the menu is just not shown by EMUI as you can´t change it anyhow on other phones as well.
Guess it is File based encryption rather than full disk enc. as there is no password upon boot process. That would be fine but can I somehow check with ADB command or something like that?
If it really is unencrypted entirely that appears to affect all Huawei I had in my hands lately.

Related

[Q] Enable Encryption in EMUI 3?

Hi all,
I recently bought a P7 as my new smartphone. However, there is one thing missing. In the EMUI settings device encryption is not accesible, however this is a standard Android feature. I need this feature enabled because of enterprise policies otherwise I can't connect to our Exchange. Contact & agenda synchronization is necessary for me as my smartphone is a working device.
I tried updating to EMUI 3, but it's still not part of the ROM. It's a bit ridiculous Huawei isn't enabling this option within EMUI or doesn't even put encryption enabled by default.
Is their a workaround to enable this feature?
Thanks in advance.
Cerveza said:
Hi all,
I recently bought a P7 as my new smartphone. However, there is one thing missing. In the EMUI settings device encryption is not accesible, however this is a standard Android feature. I need this feature enabled because of enterprise policies otherwise I can't connect to our Exchange. Contact & agenda synchronization is necessary for me as my smartphone is a working device.
I tried updating to EMUI 3, but it's still not part of the ROM. It's a bit ridiculous Huawei isn't enabling this option within EMUI or doesn't even put encryption enabled by default.
Is their a workaround to enable this feature?
Thanks in advance.
Click to expand...
Click to collapse
I didn't find in setting but using the app "activity launcher" you can reach the hidden menu.
Open activity launcher>all activity>setting> encrypt phone
I don't know if encryption will work
Thank you for this interesting post usb2. I am able to open the Encrypt Phone activity and I can do all the prerequisites. When I start the encryption the phone gets "stuck" on a white screen with the green Android dude.
It's actually the same as the encryption screen on stock android, except without text and loading bar. Only the guy on a white background.
First I thought he was just busy encrypting but after 3 hours it was still like this. I just rebooted my phone and he is still working. Still not encrypted tho.
This is sad, I will need another ROM for this phone.

How to hide apps?

Hey, I have had my P10 for about a week now and I am unable to use the hide app feature which I used to use on my P9. I could even use it when I had EMUI 5 on my P9. I can not find anything related to it in the setting either. It is beginning to do my head in a bit :laugh:
Anyone managed to get it working?
IMO Huawei will add it in a future update.
I'm missing this feature on my P10 Lite as well. It was the first thing I looked for when I was setting up my launcher. It's silly that it wasn't added in the first place.

Encryption level - P20 Pro

Hey guys,
Does anyone know what's the encryption level supported by p20 pro and how do i check it?
My organization has disabled any mobile device to connect which does not support 256 bit encryption, this level of encryption is only on iphone's & knox enabled Samsung phones.
Hence wanted to know the encryption level supported by p20 pro.
Thanks in advance.
No one guys?
I've chased Huawei again for an answer, only been waiting since May and constantly chasing each month, so not sure when they will reply
Sent from my Huawei P20 Pro using XDA Labs
I've finally had an update from Huawei
In response to your question, please be informed that the Huawei P20 Pro device it is not encrypted. However, all the information you are saving on the "file safe" it is encrypted. This means that the information is private and it can be accessed only by you. This option it is secured and it can be accessed only with your fingerprint.
Click to expand...
Click to collapse
So by default the device is not encrypted
walkerx said:
I've finally had an update from Huawei
So by default the device is not encrypted
Click to expand...
Click to collapse
That's f*ing ridiculous!! It's 2018!!
krs360 said:
That's f*ing ridiculous!! It's 2018!!
Click to expand...
Click to collapse
another reason to not buy the next huawei device
walkerx said:
another reason to not buy the next huawei device
Click to expand...
Click to collapse
Really bizarre why full encryption is unavailable on the Pro. If there's no way to enable it, then ya, I might avoid Huawei for my next phone as well.
Me too, this is gonna be my last Huawei
Guys, are you sure this is correct? If you read the EMUI 8.0 Security Technology White Paper on consumer-img.huawei.com/content/dam/huawei-cbg-site/en/mkt/legal/privacy-policy/EMUI%208.0%20Security%20Technology%20White%20Paper.pdf it seems to indicate that the entire phone is encrypted using HW key (HUK):
"To ensure data security, user data is encrypted using a hardware-based hardware unique key
(HUK) and user lock screen passcode. Data files of different apps are stored in the directories
of the corresponding apps, so that the files of one app cannot be accessed by other apps. The
data erasure function is provided for permanently erasing data during device recycling or
factory default restoration to prevent illegitimate data restoration."
and then:
"The AES256 hardware encryption/decryption used by the secure storage function is
compatible with the GlobalPlatform TEE standard. The secure storage keys are derived by the
HUK and not sent outside of the TrustZone. Data encrypted using the keys cannot be
decrypted outside of the TrustZone"
soniva said:
Guys, are you sure this is correct? If you read the EMUI 8.0 Security Technology White Paper on consumer-img.huawei.com/content/dam/huawei-cbg-site/en/mkt/legal/privacy-policy/EMUI%208.0%20Security%20Technology%20White%20Paper.pdf it seems to indicate that the entire phone is encrypted using HW key (HUK):
"To ensure data security, user data is encrypted using a hardware-based hardware unique key
(HUK) and user lock screen passcode. Data files of different apps are stored in the directories
of the corresponding apps, so that the files of one app cannot be accessed by other apps. The
data erasure function is provided for permanently erasing data during device recycling or
factory default restoration to prevent illegitimate data restoration."
and then:
"The AES256 hardware encryption/decryption used by the secure storage function is
compatible with the GlobalPlatform TEE standard. The secure storage keys are derived by the
HUK and not sent outside of the TrustZone. Data encrypted using the keys cannot be
decrypted outside of the TrustZone"
Click to expand...
Click to collapse
Got the info from Huawei stating there is no default encryption on the device
walkerx said:
Got the info from Huawei stating there is no default encryption on the device
Click to expand...
Click to collapse
Yes, I saw that earlier in the thread. But as others are saying - "it's crazy not to support this"
Just wondering if I should trust Huaweis official white paper on security and privacy or a person in customer support. I would expect them to provide the same answer. Assuming I'm reading the white paper correctly, encryption is on by default for the entire phone, with some additional safety-level for personal files (i.e. docs and images).
We have similar policies for our company-services utilized on phones and I am allowed to download, read and send e-mails on my P20 Pro just as on phones I've used earlier (with explicit encryption). Which is also the reason for following up on this issue. Either my phone is ok, the policy is not working as intended or my phone is reporting the wrong answer when queried from the server "are you encrypted". The last one would be the most critical I guess.
Also note the last comment on this thread: forums.androidcentral.com/huawei-mate-10-mate-10-pro/865831-does-pro-have-full-device-encryption-like-most-phones-now-9-did-not.html
To put it bluntly, I wouldn't trust any Chinese device when it comes to encryption. I'm not surprised that the P20 Pro is unencrypted. I used to have a OnePlus 3 that was encrypted (according to OnePlus, anyway...), yet when I factory reset it through the bootloader and gave to a family member, half my apps and SMS messages were still on the phone. when they signed in with their own Google account.
If you want data security, I think Samsung and the Knox platform is about as good as you're going to get. Apple won't give governments advice on how to decrypt iPhones, but I'm pretty sure it's possible with the right third party equipment.
This is the answer I got from Huawei customer support:
Our devices are encrypted from the factory when they are made, a user can then also add passwords, fingerprints and facial recognition to allow access to the device but as a standard in the Android system the main security function is a password and this is required after a restart of the device even if you have other unlock functions.
The encryption from the factory is an encryption on the internal storage unit.
Click to expand...
Click to collapse
So based on this, and the white paper mentioned previously, the devices are encrypted.
soniva said:
This is the answer I got from Huawei customer support:
So based on this, and the white paper mentioned previously, the devices are encrypted.
Click to expand...
Click to collapse
I've replied to my email from Huawei advising to confirm as we are getting different answers from support staff (my updates are coming from the UK Technical Support Team)
Update: Further from my post earlier, I've now had more information back from Huawei who have confirmed there is encryption by default, so have asked them to ensure all staff know as I seem to be getting incorrect information (especially from one member of staff)

Worth updating to Pie?

Hi guys,
I have a debranded P10 c432 on emui 8. Firmware Finder report a VTR-LGRP2-OVS 9.0.1 Full OTA it's a strange name, very different from the one based on emui 8 that are somehting like "VTR-L09C432".
So:
Can I install that fw and go to emui 9?
Is it worth updating? the system is slow? battery life? how about the video stabilization?
Can I root?
Can I downgrade, eventually?
thank you in advance
This method work for my
https://forum.xda-developers.com/showpost.php?p=78850439&postcount=1334
1. The best you can do untill ota arrives is to try via hicare. That way i managed to install emui9 on my vtr-l29c432. The firmwares on ff might cause a brick if it's not the right one for your device so i don't think it's worth the risk.
2.In terms of performace i find the overall system a bit faster and smoother in transitions so for me it's a worth upgrade. No slowdowns or whatever, it's quick and stable with no issues so far (approx. 2weeks of use). Battery seems to be the same, depends on your usage, it may dry fast if you always on screen or it can last a full day if you don't stress it out. About the video i'm not so sure about it but on 1080p 60fps seems to be fine but again i'm not sure about it. I dont record that much on the phone, i ocasionally take some pictures and the camera seems to be fine. Maybe with future updates will be better. It's all about your preferences.
3. I don't use root but maybe it's possible with magisk.
4.Yes, with hisuite.
first thank you so much @Firicel69
then
Necrodaemon said:
This method work for my
https://forum.xda-developers.com/showpost.php?p=78850439&postcount=1334
Click to expand...
Click to collapse
mmmm why I need all these hisuite stuff for OVS if I have the unlocked bl and twrp installed? I don't understand this OVS thing...
RealPsygnosis said:
first thank you so much @Firicel69
then
mmmm why I need all these hisuite stuff for OVS if I have the unlocked bl and twrp installed? I don't understand this OVS thing...
Click to expand...
Click to collapse
When you have bootloader unlocked an TWRP installed make it easy
Look for upgrading to pie Tutorial at this Forum by @Jannomag!
Last Version to use on FF is 9.0.1.165...
I have a P10, rebranded from L09 to L29 with bootloader unlock...
@Jannomag s tutorial is working fine, no Problems with updating so far...
RealPsygnosis said:
Hi guys,
I have a debranded P10 c432 on emui 8. Firmware Finder report a VTR-LGRP2-OVS 9.0.1 Full OTA it's a strange name, very different from the one based on emui 8 that are somehting like "VTR-L09C432".
So:
Can I install that fw and go to emui 9?
Is it worth updating? the system is slow? battery life? how about the video stabilization?
Can I root?
Can I downgrade, eventually?
thank you in advance
Click to expand...
Click to collapse
To upgrade to EMUI 9, you need a full firmware - those are listed as VTR-L29C432E1R1P9B165 (9.0.1.165), as an example. The LGRP2 firmwares, those are core system update images for non-Chinese devices (the Bnnn portion of the build number); they split the pieces apart into separately versioned bits with Pie.
I can't say anything for EMUI 9 features specifically, as I installed it for the updated vendor image, not EMUI.
You can root, with Magisk. They removed the ability to boot with a ramdisk in a normal boot, so Magisk takes over recovery instead; newer releases can boot both ways by button detection at boot time.
Downgrade - hisuite.
My battery life went down, but to early to say, because theese Huaweis is smart and needs time to learn habits and battery use... In two weeks I know more.
I don't think it's worth it. Smoother animations and better zoom photo quality are the only upsides. Other than that:
- camera app is much less intuitive, swiping between modes is slow and irritating, that's one of the things that should not be copied from iOS
- no video stabilization whatsoever
- image color processing is a hit and miss (it hates nature), when it gets slightly darker images are too dark
- I lost 1 hour of screen on time
- gallery app is stupid, it lost all the customization. You can't change folders to a list, you can't even rearrange the order!
- screenshot "mechanic" is stupid, it adds one unnecessary step to the process if you want to edit it or something
- themes app is unuseable, it got worse going from Nougat to Oreo, now it's just a messy store. Keep the theme you're on right now and forget about it.
- NFC issues (file transfer works, mobile payments don't).
In short - If your P10 works fine don't bother with the update.
majaczos said:
I don't think it's worth it. Smoother animations and better zoom photo quality are the only upsides. Other than that:
- camera app is much less intuitive, swiping between modes is slow and irritating, that's one of the things that should not be copied from iOS
- no video stabilization whatsoever
- image color processing is a hit and miss (it hates nature), when it gets slightly darker images are too dark
- I lost 1 hour of screen on time
- gallery app is stupid, it lost all the customization. You can't change folders to a list, you can't even rearrange the order!
- screenshot "mechanic" is stupid, it adds one unnecessary step to the process if you want to edit it or something
- themes app is unuseable, it got worse going from Nougat to Oreo, now it's just a messy store. Keep the theme you're on right now and forget about it.
- NFC issues (file transfer works, mobile payments don't).
In short - If your P10 works fine don't bother with the update.
Click to expand...
Click to collapse
Can underline this.
Also the Memo-App is bad now, no more tick-boxes for quick notes (which is really annoying) and other small issues.
On of the most annyoing is the changing of notification colors on the lockscreen. This is so infuriating for me.....
I dig the Pie, better blutooth, and cams and gallery is nice here, also like the look on swipe menu, and maneuver...
The battery is better today.. I've blockcharged while I was in the shower and 50% now...
It's an old phone.. so I usually block charge abit on the night, in weekend I tend to stay up abit later also...
The phone is faster loading and multitasking.
Gallery is nice? What's nice about it? Blinding white background while viewing your pictures? Or the fact that you cannot do such basic thing as rearranging the order of your folders?
Pie on p10 is very battery efficient. It's so efficient at killing background processes that even calendar notifications won't work properly anymore. Last time I had alarm 22 hours and some minutes late. All other notifications appear at very random times, but always very late. Notifications work fine only for a few days until the app probably gets kicked out of ram. Completeley useless.
And then there is camera with much worse low light quality, bluetooth problems, useless themes app and bunch of other completely useless features and I'm slowly having enough of huawei and their updates. I've had my p10 since march 2017 and I don't think it ever worked without at least one major bug.
Ok I get the point, pie is for someone good and for - too many - a mess. But, maybe because it's a beta? On FF I cannot understand if it9s a beta release or not. Because some other versions of oreo are been released on April with Pie.
And BTW I have spend some time to read some threads here (dated March) and the @Jannomag scripts and it's obvious that it's too early to install it. There is no TWRP, and install magisk is completed and unreliable.
So maybe I will update oreo and wait that pie is mature enough at least that I could install twrp and magisk. Because, honestly, I don't care that gallery app or themes are worst, I could always replace them,the importance is that the system is usable.
It's not a beta. I got it through HiCare app, it's an official OTA update. Besides - most of the things I'm complaining about are present in P30 as well. That's how EMUI 9 is supposed to work.
@Imnotdriving, how is Bluetooth better? Asking because it might be a factor in my decision to upgrade ?
As it turns out, my phone got the pie update last night so I got my own answer. One previously stubborn to connect speaker now connects quickly with aptx Bluetooth hence confirming that Bluetooth is improved.
Otherwise I like the new gesture navigation option in this update. Beyond that, not much is different for the way I use the phone.
There are a lot of new services running and I disabled about a dozen of the low hanging fruit. There's more that I'm sure I'll disable over time once I find out what they do.
mattrask said:
@Imnotdriving, how is Bluetooth better? Asking because it might be a factor in my decision to upgrade [emoji6]
As it turns out, my phone got the pie update last night so I got my own answer. One previously stubborn to connect speaker now connects quickly with aptx Bluetooth hence confirming that Bluetooth is improved.
Otherwise I like the new gesture navigation option in this update. Beyond that, not much is different for the way I use the phone.
There are a lot of new services running and I disabled about a dozen of the low hanging fruit. There's more that I'm sure I'll disable over time once I find out what they do.
Click to expand...
Click to collapse
The information in the update link spesofic stated that blutooth functions would be better, I don't remember exactly what it said.
Guys what package should I use for upgrade?
VTR-LGRP2-OVS 9.0.1.203
Or
VTR-L29C432E1R1P9B185
Both full ota
The OVS one is just one package update_full_base. Zip but it seems newer then the b185
RealPsygnosis said:
Guys what package should I use for upgrade?
VTR-LGRP2-OVS 9.0.1.203
Or
VTR-L29C432E1R1P9B185
Both full ota
The OVS one is just one package update_full_base. Zip but it seems newer then the b185
Click to expand...
Click to collapse
For the initial update, the LGRP1/LGRP2 packages shouldn't be used - while it's marked FullOTA, it's not a complete build, as it's missing various partitions that need to be flashed in an upgrade from Oreo. (Basically, you'll brick if you flash one of those.)
If you're already on Pie, either works equally well.
irony_delerium said:
For the initial update, the LGRP1/LGRP2 packages shouldn't be used - while it's marked FullOTA, it's not a complete build, as it's missing various partitions that need to be flashed in an upgrade from Oreo. (Basically, you'll brick if you flash one of those.)
If you're already on Pie, either works equally well.
Click to expand...
Click to collapse
So I should use the VTR-L29C432E1R1P9B185 package with the script here? After that I can update pie with LGRP2? But is LGRP2-OVS a sort of beta?
Do you advise me to use the jannomag script or the hi suite trick with dns?
I hope everything goes fine, I want to do a full wipe and install magisk
RealPsygnosis said:
So I should use the VTR-L29C432E1R1P9B185 package with the script here? After that I can update pie with LGRP2? But is LGRP2-OVS a sort of beta?
Do you advise me to use the jannomag script or the hi suite trick with dns?
I hope everything goes fine, I want to do a full wipe and install magisk
Click to expand...
Click to collapse
I've done all of my updates to P using a nocheck recovery. I can't say anything about the tricks with HiSuite or the script you've mentioned, though they should work just fine.
As far as the build numbers go: LGRP1-CHN and LGRP2-OVS are the China and everywhere else builds, respectively. It's possible that some of them might be beta, though I suspect the release notes would give up some indication of that.

Question ColorOS 13 - Android 13 update issue

I was very happy with my find x3 neo... Until yesterday android 13 upgrade, now I'm getting this really annoying popup every ten minutes, no way to stop it or fix that (or disable) that app. It's a system app, in English is named Quick Device Connect i think, it's a feature like airdrop I think, something that I won't use at all and I'm totally not interested in using it.
Already chatted with official support, they suggested me to go back to factory defaults (lol) I have a lot of data and settings, I just don't want to do that, it would be sufficient to simply make this useless feature to no start at all or simply hide this error popup. I don't feel the need to fix this app since I'm not planning to use it at all.
Any new updates after android 13?
I've fixed by installing the oneplus version of quick device connect using an apk i found in the wild, if someone has the same problem can try this method

Categories

Resources