How to Root the Boox Palma and Bypass Play Integrity


The Boox Palma is a fantastic E Ink Android device, but its lack of Play Integrity support makes it impossible to run certain apps like Authy out of the box. The only real solution? Rooting. Here’s how I did it, with full steps to decrypt the firmware, patch the boot image, and restore Play Store functionality.

Note: This method only helps pass the basic and device integrity checks in Play Integrity. It does not restore Strong Integrity, meaning certain high-security apps may still not work.

Step 1: Download and Decrypt the Firmware

Since the Palma’s stock firmware isn’t readily available, we need to fetch it manually using the API, which provides the firmware download link.

  1. Use the following API to retrieve the latest firmware update:

    http://data.onyx-international.cn/api/firmware/update?where={%22buildNumber%22:0,%22buildType%22:%22user%22,%22deviceMAC%22:%22%22,%22lang%22:%22en_US%22,%22model%22:%22Palma%22,%22submodel%22:%22%22,%22fingerprint%22:%22%22}

  2. Parse the response and locate the downloadUrlList field to get the firmware URL.

  3. Download the update.upx file from the provided URL.

  4. Download and use decryptBooxUpdateUpx to extract the contents:

    • Get it from here

    • Run:

    python3 DecryptBooxUpdateUpx.py Palma update.upx

  5. Extract the payload using extract_android_ota_payload:

    • Get it from here

    • Install dependencies and extract:

    pip install protobuf==3.20.3
python3 extract_android_ota_payload.py update.zip

Step 2: Install and Configure Magisk

Magisk is required for rooting and Play Integrity bypass.

  1. Download the latest Magisk from here.

  2. Install the Magisk APK on your Palma.

  3. Download Android Platform Tools from here and extract it.

  4. Push the boot image to the device:

    adb push boot.img /sdcard/Download

  5. Open Magisk on your device and select Patch Boot Image.

  6. Locate and patch the boot.img.

  7. Pull the patched image back to your computer:

    adb pull /sdcard/Download/magisk.img

  8. Reboot the Palma into fastboot mode:

    adb reboot fastboot

  9. Flash the patched boot image:

    fastboot flash boot magisk.img

  10. Reboot the device:

fastboot reboot

At this point, Magisk should be installed, and you should have full root access.

Step 3: Install and Configure Play Integrity Fix

To pass Play Integrity checks, we need Play Integrity Fix (PIF):

  1. Download PlayIntegrityFix from here.

  2. Install it as a Magisk module:

    • Open Magisk.

    • Go to Modules.

    • Tap Install from Storage and select the downloaded Play Integrity Fix module.

    • Reboot the device once installation is complete.

  3. Open the Play Store and check if the device passes Play Integrity:

    • Open Play Store.

    • Tap on your profile icon in the top-right corner.

    • Go to Settings > About.

    • Scroll down and check Play Protect certification.

    • If it still says Device is not certified, - If it still says, click Fix device issue.

Step 4: Install Authy (or Other Apps That Require Play Integrity)

Now that your device fakes Play Integrity, you can install Authy (or any app that previously refused to run, that's just where I was running into issues). Just install it via the Play Store, and you’re good to go!

This method should make the Boox Palma a much more capable device while still keeping the experience intact. If you run into any issues, let me know in the comments!

Comments

Post a Comment