fastboot flash vbmeta vbmeta_custom.img --disable-verity --disable-verification --flags 0x2 This keeps the bootloader unlocked but restores verified boot checks. It doesn't fix SafetyNet but removes the orange state warning.

fastboot oem device-info # Or for newer devices: fastboot getvar all Look for: (bootloader) unlocked: no and (bootloader) verity-state: verified (167z) Depending on your OEM, use one of these:

(bootloader) unlocked: no (bootloader) verity-state: green (locked & verified) | Error Message | Cause | Solution | |---------------|-------|----------| | Flashing lock is not allowed | Modified system partition | Re-flash full stock ROM | | Image is not signed | Custom kernel or recovery | Find official 167z images | | Verity failed (hash mismatch) | vbmeta mismatch | Use OEM's vbmeta with disable flags removed | | Device rolled back | Downgraded to older build | Must flash exactly 167z or newer | Part 5: Verified vs. Unverified – Real-World Consequences After unlocking a "167z Verified" device:

Se Bootloader Unlocking Relocking 167z Verified -

fastboot oem device-info # Or for newer devices: fastboot getvar all Look for: (bootloader) unlocked: no and (bootloader) verity-state: verified (167z) Depending on your OEM, use one of these: se bootloader unlocking relocking 167z verified