How to Root Xiaomi TV Box S 2nd Gen (2025) with Magisk

Tired of the limitations imposed on your Xiaomi TV Box S 2nd Gen (Jaws)? Yearning for more control, customization, and access to advanced features? Rooting your Android TV device can unlock a whole new world of possibilities, allowing you to optimize performance, remove bloatware, and install custom ROMs. This comprehensive guide provides a detailed, step-by-step process for rooting your Xiaomi TV Box S 2nd Gen, ensuring a safe and successful experience. While rooting can offer incredible benefits, it’s important to understand the risks involved. Proceed with caution and at your own risk.

⚠️ WARNING BEFORE ROOTING YOUR XIAOMI TV BOX S 2ND GEN ⚠️

Rooting your device involves significant risks. Please read the following carefully before proceeding:

1. Warranty Void:
   Rooting your Xiaomi TV Box S 2nd Gen will immediately void the manufacturer’s warranty. You will lose any official support from Xiaomi.
2. Bricking Risk:
   Incorrect steps during the rooting process may brick your device, rendering it completely unusable or unable to boot.
3. No Official Method Available:
   As of now, Xiaomi does not provide an official method to unlock the bootloader for this TV box. Any attempt to root relies on unofficial and unstable methods.
4. Loss of OTA Updates:
   Rooted devices often lose access to official OTA (Over-the-Air) updates, leaving you stuck on outdated firmware versions.
5. DRM Limitations:
   Rooting can disable DRM (Digital Rights Management), resulting in the loss of HD playback on streaming services such as Netflix, Amazon Prime Video, and Disney+.
6. Security Risks:
   Root access gives apps system-level privileges. If misused, it can expose your device to malware and put your personal data and home network at risk.
7. Limited Community Support:
   Unlike smartphones, Android TV boxes receive very limited support from the rooting community. If something goes wrong, finding a fix may be difficult or impossible.

❗ By proceeding with root access, you accept full responsibility for any consequences that may occur. Do not attempt to root unless you fully understand the risks and have a valid technical reason to do so.

Prerequisites: What You’ll Need

Before diving in, gather these essential tools and prepare your Xiaomi TV Box S 2nd Gen:

• Basic Command Line Knowledge: Familiarity with basic commands like cd and ls is helpful.
• ADB and Fastboot: Download and install the Android Debug Bridge (ADB) and Fastboot tools on your computer.
• Android OTA Payload Extractor: Obtain an Android OTA payload extractor tool. You can find one in the “Release” section of this [link to a reliable source, e.g., a GitHub repository]. Extract it using tar or your operating system’s file explorer.
• USB-A Male to Male Cable: This cable is critical for connecting your Mi Box to your computer. You can make one yourself by twisting and soldering the wires inside two charging cables with same color together, or buy one.
• USB Keyboard: Connect a USB keyboard to your Mi Box for easier navigation during recovery mode.
• Developer Options and OEM Unlocking: Enable Developer Options and switch on OEM unlocking in your Mi Box’s settings.
• USB Debugging: Enable USB debugging within the Developer Options.
• Magisk Manager and File Manager: Install the Magisk Manager app and a file manager with a file picker (e.g., FX File Explorer) on your Mi Box.
• Backup Your Data: Rooting requires a factory reset. Back up all important data from your Mi Box before proceeding.

Step 1: Download the Stock ROM for Xiaomi TV Box S 2nd Gen

The first step is to obtain the stock ROM for your Xiaomi TV Box S 2nd Gen. This allows you to extract the necessary boot image.

1. Go to the 4pda.to website (you might need to use Google Translate).
2. Locate the Firmware section and download the latest OTA (Over-The-Air) zip file for your device.

Step 2: Extract the Boot Image from the OTA Archive

Now, we’ll extract the crucial boot image from the downloaded OTA archive.

1. Extract the payload.bin file from the OTA archive using your file explorer or the unzip command.
2. Extract all partition images from the payload.bin using the Android OTA extractor: /path/to/android-ota-extractor payload.bin
3. (Optional) Delete all extracted images except boot.img and vbmeta.img. These are the only images we need.

Note: If you are receiving an error like this: Update package is older than the current build, expected a build newer than timestamp 1723513642 but the package has timestamp 1697102071 and downgrade is not allowed. Read this guide

Step 3: Update Your System with the Downloaded OTA Archive

Flashing the OTA ensures the extracted boot image matches your current system build.

1. Reboot to Recovery Mode: Use ADB to reboot your device into recovery mode: /path/to/adb reboot recovery
2. Select “Apply update from ADB”: Using the arrow keys on your USB keyboard, navigate to and select the “Apply update from ADB” option.
3. Connect and Sideload the OTA: Reconnect your Mi Box to your computer with the USB-A cable. Then, use ADB to sideload the OTA zip file: /path/to/adb sideload <REPLACE ME WITH THE PATH TO THE OTA ZIP>
4. Reboot: After the update completes, reboot your Mi Box.
   • Troubleshooting: If you encounter an error like “Update package is older than the current build…”, you might need to manually flash the extracted images via fastboot. Refer to resources like the “Flash all the necessary images” section of a reliable guide.

Step 4: Patch the Boot Image Using Magisk

This step involves patching the boot image with Magisk, which grants root access.

1. Push the Boot Image: Use ADB to transfer the extracted boot image to your Mi Box:/path/to/adb push boot.img /sdcard/boot.img
2. Open Magisk and Patch: Open the Magisk Manager app on your Mi Box. Tap “Install” and select the boot.img file you just transferred.
   • Note: If the file picker doesn’t appear, ensure you have a file manager with a file picker installed (e.g., FX File Explorer).
3. Pull the Patched Image: The patched boot image will be saved in the /sdcard/Download folder (the path will be displayed in the Magisk app). Use ADB to retrieve the patched image: /path/to/adb pull <PATH SHOWN IN MAGISK> patched-boot.img This will create a patched-boot.img file on your computer.

Step 5: Unlock the Bootloader with Fastboot

Unlocking the bootloader is essential for flashing a custom boot image. Warning: This step will wipe all data on your device.

1. Reboot to Fastboot Mode: Use ADB to reboot your Mi Box into fastboot mode: /path/to/adb reboot bootloader
2. Unlock the Bootloader: Execute the following command to unlock the bootloader: /path/to/fastboot flashing unlock 2/path/to/fastboot flashing unlock_critical
   • Important: Unlocking the bootloader will trigger a factory reset!
3. Verify Bootloader Status: After the reboot, run this command to confirm the bootloader is unlocked: /path/to/fastboot getvar all Look for “unlocked” in the output.

Step 6: Reboot and Complete Initial Setup

Your Mi Box will now reboot and erase all user data. Follow the on-screen setup instructions to configure your device as you normally would.

Step 7: Re-enable Developer Options and USB Debugging

After the factory reset, you’ll need to re-enable Developer Options and USB Debugging:

1. Go to “Settings” > “About” on your Mi Box and tap on “Build number” repeatedly until developer mode is enabled.
2. Go to “Settings” > “Developer options” and enable “OEM unlocking” and “USB debugging.”

Step 8: Disable AVB (Android Verified Boot) and Flash the Patched Boot Image

Android Verified Boot (AVB) needs to be disabled before you can flash the modified boot image.

1. Reboot to Fastboot Mode: /path/to/adb reboot bootloader
2. Flash vbmeta with Verification Disabled: /path/to/fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img
3. Flash the Patched Boot Image: /path/to/fastboot flash boot patched-boot.img
4. Reboot: /path/to/fastboot reboot

Important Considerations and Safety Measures

• Warranty: Rooting your device may void its warranty.
• Bricking: Incorrect use of fastboot commands can potentially brick your device, rendering it unusable.
• Data Loss: Unlock bootloader and rooting procedures will result in data loss.
• Research: Always research and understand the risks before proceeding.
• Backups: Always back up your data before starting.
• Specific Instructions: Strictly follow the instructions for your device model.
• Check this XDA post about debricking Xiaomi TV Box S 2nd Gen if you accidentally bricked your box 😛

Conclusion:

Congratulations! You have successfully rooted your Xiaomi TV Box S 2nd Gen. You can now explore a world of customization options, including removing bloatware, installing custom ROMs, and fine-tuning performance. Remember to always exercise caution, back up your data, and research any modifications you plan to make. Enjoy the enhanced functionality and the freedom that rooting provides!