From ded89166a0d7dcf96d0c9bd072e5cb3e7d30c369 Mon Sep 17 00:00:00 2001
From: WeirdTreeThing <bradyn127@protonmail.com>
Date: Sat, 20 Apr 2024 23:55:32 -0400
Subject: [PATCH] Add Ti50 AP FW RO verification page

---
 src/docs/firmware/ti50-ap-ro.md    | 56 ++++++++++++++++++++++++++++++
 src/docs/firmware/write-protect.md |  4 +++
 src/docs/unbricking/index.md       |  4 +++
 3 files changed, 64 insertions(+)
 create mode 100644 src/docs/firmware/ti50-ap-ro.md

diff --git a/src/docs/firmware/ti50-ap-ro.md b/src/docs/firmware/ti50-ap-ro.md
new file mode 100644
index 00000000..dc187ec6
--- /dev/null
+++ b/src/docs/firmware/ti50-ap-ro.md
@@ -0,0 +1,56 @@
+---
+prev: write-protect
+next: false
+---
+# Disabling RO firmware protection on Ti50
+
+::: tip
+This is only applicable to devices with a Ti50 security chip, which is typically found in devices released during or after mid-2023.
+:::
+
+::: tip
+If you disabled WP via CCD and reset your CCD flags with `ccd reset factory`, you can skip this step.
+:::
+
+<br>
+
+## Step 1: Verify the device has a Ti50
+
+1. Open VT-2 (`ctrl` + `alt` + `f2` (right arrow)).
+2. Login as `root`.
+3. Run `gsctool -a -I | grep AllowUnverifiedRo`.
+4. If that command has any output, your device has a Ti50. If you get no output or an error, your device either has a Cr50 or no GSC at all.
+
+## Step 2: Disable RO verification.
+1. Unlock the GSC by running `gsctool -a -o`.
+2. Run `gsctool -a -I AllowUnverifiedRo:always`.
+3. Press the power button when prompted.
+
+::: warning
+If your device has a Ti50 and you don't disable RO verification, flashing full rom will brick the device (can be recovered with steps listed below).
+:::
+
+## Recovering a device bricked due to RO verification.
+### Chromebooks
+
+1. Press and hold the `Power` button.
+2. Press the `Refresh` (arrow icon) button twice.
+3. Release the `Power` button.
+4. Repeat the above steps a second time.
+
+### Chromeboxes
+
+1. Press and hold the `Power` button.
+2. Press the recovery pinhole button twice.
+3. Release the `Power` button.
+4. Repeat the above steps a second time.
+
+### Tablets
+
+1. Press and hold the `Power` button.
+2. Press and hold `Volume Up` for 10+ seconds. Release and repeat it a second time.
+3. Release the `Power` button.
+4. Repeat the above steps a second time.
+
+This will disable RO verification for 15 minutes, allowing you to permanently disable it.
+
diff --git a/src/docs/firmware/write-protect.md b/src/docs/firmware/write-protect.md
index 8409f522..b2dbc7ea 100644
--- a/src/docs/firmware/write-protect.md
+++ b/src/docs/firmware/write-protect.md
@@ -15,3 +15,7 @@ Depending on your device, you will need to do **one** of the following:
 * [Unplug your battery](battery.md)
 * Bridge two jumpers
 * [Use a SuzyQable](suzyq.md) (A cable that enables CCD (Closed Case Debugging))
+
+::: warning
+On devices with a Ti50 security chip (2023+), you will additionally need to [disable RO verification](ti50-ap-ro.md).
+:::
diff --git a/src/docs/unbricking/index.md b/src/docs/unbricking/index.md
index 75e39ad1..30325760 100644
--- a/src/docs/unbricking/index.md
+++ b/src/docs/unbricking/index.md
@@ -10,6 +10,10 @@ If your device's firmware got into a bad state (won't POST), you can try unbrick
 Try performing a EC reset beforehand to see if your device can recover.
 :::
 
+::: tip
+If your device has a Ti50 chip and you didn't disable RO verification before flashing, follow [this guide](../firmware/ti50-ap-ro.md#recovering-a-device-bricked-due-to-ro-verification) to recover it.
+:::
+---
 Here is the following ways that you can unbrick your device:
 
 ### [Unbricking with a ch341a USB programmer](unbrick-ch341a)