FORUMS
Remove All Ads from XDA

[GUIDE] How to flash a custom recovery and root a Nokia 6 Retail Phone

337 posts
Thanks Meter: 485
 
Post Reply Email Thread
WARNING: This method currently doesn't work on Nokia 6 TA-1000 with latest Android O Update! Finding workaround.
Workaround found on leaked Android 8.1 Update, with Magisk Systemless Root Method.

ROOT YOUR PHONE MAY VOID YOUR WARRANTY, DO IT AT YOUR OWN RISK

You can download new recovery from this post: https://forum.xda-developers.com/nok...droid-t3752006
Changes in new TWRP Recovery 3.2.1-0:
1. Add English Interface.
2. Use Magisk ROOT instead of SuperSU ROOT.
3. You can backup EFS. However you can't backup modem or the procedure will break.

Thanks to @xinkid 's effort, we can finally root Nokia 6 on Android Oreo again.

Procedure for non TA-1000 users:

0. Backup your phone and remove your lock screen password before proceed! If your phone get stuck at "Powered by Android" splash after the procedure, you may need to format userdata.

1. Sideload the PLE-372B ota package in recovery, which you can download from here:
https://forum.xda-developers.com/nok...-ddls-t3721424

Refer this guide's part 2 to downgrade.
https://forum.xda-developers.com/nok...-oreo-t3752393

2. Flash the service bootloader and grant service permission

Reboot to bootloader, then flash the service bootloader with following commands. Service bootloader file (D1C-emmc_appsboot.mbn attached in this topic)

Code:
fastboot oem dm-verity [md5_of_your_device_serial_number]
fastboot flash aboot D1C-emmc_appsboot.mbn
fastboot reboot-bootloader
fastboot oem dm-verity [md5_of_your_device_serial_number]
For example, if your serial number is PLEABCD123456789, and the md5 checksum of your serial number is 5f47b9a8dc1da1873c12945cf806691e, then type this command:

Code:
fastboot oem dm-verity 5f47b9a8dc1da1873c12945cf806691e
fastboot flash aboot D1C-emmc_appsboot.mbn
fastboot reboot-bootloader
fastboot oem dm-verity 5f47b9a8dc1da1873c12945cf806691e
You can google a website to calculate md5 checksum of a string.

3. Reflash newer firmware basis to your phone except aboot

After you grant service permission, Extract the newer one OTA package on your PC, in this case, PLE-558B.
Everything you need are placed at firmware-update folder that you extracted.

Take PLE-558B for example, type these commands (commands need to be changed if newer firmware released):
Code:
fastboot flash sbl1 D1C-0-558B-sbl1.mbn
fastboot flash keymaster D1C-0-558B-keymaster.mbn
fastboot flash devcfg D1C-0-558B-devcfg.mbn
fastboot flash cmnlib64 D1C-0-558B-cmnlib64.mbn
fastboot flash rpm D1C-0-558B-rpm.mbn
fastboot flash tz D1C-0-558B-tz.mbn
fastboot flash cmnlib D1C-0-558B-cmnlib.mbn
fastboot flash modem D1C-0-558B-NON-HLOS.bin
fastboot flash dsp D1C-0-558B-adspso.bin
fastboot flash default_nv D1C-0-558B-NV-default.mbn
fastboot flash persist D1C-0-558B-00WW-persist.img
fastboot flash hwcfg D1C-0-558B-hwcfg.img
fastboot flash mdtp D1C-0-558B-00WW-mdtp.img
fastboot flash systeminfo fver
fastboot flash sec D1C-0-558B-sec.dat
fastboot flash cda PLE-00WW-013-cda.img
You'll also need the boot img in the extracted ota package:
fastboot flash boot boot.img

Then flash the custom recovery:
fastboot flash recovery nokia-6-ta-1000-8_0-twrp3.2.1-7to-recovery-magisk-root-2018.3.15.img

Power off your phone (case sensitive). Disconnect your phone after execute this command:
fastboot oem HALT

4. Connect your phone to a charger. When charging animation appears, press and hold Volume Up and Power until you see "7to.com" logo. Tap the white cog to choose English language, tap Advanced - Magisk Root, and wait for the procedure complete.

========================SEPARATOR================= ===

This new guide is only based and tested on Nokia 6 TA-1000. Non TA-1000 (e.g. TA-1021) users need to find their own old OTA package to downgrade.
1. Downgrade the bootloader according to this guide: https://forum.xda-developers.com/nok...-oreo-t3752393
If you've flashed my homebrew Android O firmware, skip this step.

2. Use old method below to flash the new recovery again. You must use this recovery, otherwise you can't mount and root.
If you've flashed my homebrew Android O firmware, type this command will allow you to flash recovery:
Code:
fastboot-android oem dm-verity (your_serial_number's_md5_checksum)
3. Use old method below to enter recovery. To load English interface, tap the white cog on the top-right corner, then tap "English" and OK button, just wait few seconds.

4. Tap "Advanced" - "Magisk ROOT" and swipe.

5. If you meet recovery loop after rooted, flash the package misc_initial.zip attached below to escape from recovery loop.
That's it. It's not recommended to receive any newer OTA update since it will overwrite bootloader to patched state.
If you're using TA-1000, you can also try to flash Android 8.1 Homebrew Firmware before rooting.

I'm sorry if you found the guide looks confusing.


Following method for Nougat is archived, only for reference.


Yesterday, I got my own Nokia 6 Retail Phone. Since I’ve already rooted Nokia 5, 6 and 8 Prototype, now it’s time to find out how to root retail Nokia 6 without involving risky Qualcomm EDL Mode.
It works on any variant of Nokia 6 in theory, but I only tested it on D1C/TA-1000.
If there’s a custom recovery for Nokia 2/3/5 released, the guide also works on them. But I’ve tested it on a Nokia 8 retail phone, it doesn’t work on it.

Quote:

To Nokia 7 and 8 Users, You may want to read this topic: https://forum.xda-developers.com/sho....php?t=3729396

First, you need to download OFW of Nokia 6, install OST LA and patch it.
You can download them from here: https://forum.xda-developers.com/nok...dated-t3678487

(Although the link is for Nokia 8, firmware for Nokia 6 is still available)


Quote:

如果你是中国用户,诺6固件的下载和使用方法请看本文:
https://www.ithome.com/html/android/328333.htm

Quote:

If you own an unlocked prototype device, just skip to step 6.

1. Open OST LA from INSTALLATION DIRECTORY DIRECTLY instead of Start Menu.
2. Load your OFW you downloaded with extension name nb0.
3. Power off your phone, then connect it to your PC. This will boot your phone to “Download mode” directly, in fact it’s fastboot mode.
4. Click “Edit Phone Info” on OST LA. This will load a service purposed bootloader. When your phone reboots and re-enters the Download mode, the service purposed bootloader is now loaded.
5. You can close OST LA when it prompts “Boot FTM mode fail”, or just kill it in task manager if it’s not responding.
6. Open a command prompt or PowerShell in OST LA Installation Directory, then execute this command to flash a custom recovery:
Code:
.\fastboot-android flash recovery E:\recovery.img
I assume that you put the custom recovery in drive E and named as recovery.img.
You can also use your own fastboot if you want, but I’ll prefer the one provided along with OST LA.
I used the recovery from here: https://forum.xda-developers.com/nok...kia-6-t3650499

7. Type this command but do not execute right now:
Code:
.\fastboot-android reboot
8. Now this step is a little tricky. Press and hold [Volume Up] and [Power] on your phone, then execute the command above at the same time. DO NOT RELEASE both keys on your phone until your phone entered the custom recovery.
9. Now your phone has entered a custom recovery. In this example, we’re using TWRP from Chinese 7to forum, only Chinese is available. I believe most of members on XDA can’t read Chinese, so I’ll attach screenshots. Simply tap “Advanced” – “SuperSU ROOT” will root your phone. If you prefer your own root zip update package, tap “Install Zip” then flash your own zip package in your storage, or tap “Advanced” – “ADB Sideload” then use ADB to sideload a zip package.

Quote:

You can install the Materialized Theme for TWRP to get English interface from https://forum.xda-developers.com/and...-play-t2915584 by @z31s1g

Quote:

Currently, DO NOT FLASH Magisk, or your phone will brick as Qualcomm 900E.

You can only use Magisk Root method in latest Android O Update, which I'll cover later.

10. After your phone rooted, you can reboot your phone. DO NOT INSTALL ANY OTA UPDATES OR YOUR PHONE WILL GET STUCK AT STOCK RECOVERY, but I’ll recommend you to disable automatic update in settings.

That’s wraps up the whole guide. Please do feedback if there’s something wrong.
Here' the video of how to root a Nokia 6: https://youtu.be/24b-49qTheg

Special thanks:
@blackpanther0582 for Nokia 3/5/6/8 Official Firmware.
@xinkid from Chinese 7to forum for his TWRP.
@hawwin88 for providing info about adding English Interface to recovery.

UPDATE: Uploaded the SuperSU ZIP (verify-xinkid.zip) used in this recovery.
Attached Thumbnails
Click image for larger version

Name:	00001.jpg
Views:	12968
Size:	48.0 KB
ID:	4327160   Click image for larger version

Name:	00002.jpg
Views:	12754
Size:	31.1 KB
ID:	4327161   Click image for larger version

Name:	00003.jpg
Views:	12726
Size:	254.2 KB
ID:	4327162  
Attached Files
File Type: zip verify-xinkid.zip - [Click for QR Code] (4.89 MB, 1990 views)
File Type: zip misc_initial.zip - [Click for QR Code] (555.3 KB, 896 views)
File Type: zip D1C-emmc_appsboot.zip - [Click for QR Code] (401.9 KB, 938 views)
The Following 22 Users Say Thank You to hikari_calyx For This Useful Post: [ View ] Gift hikari_calyx Ad-Free
 
 
9th November 2017, 12:44 AM |#2  
Member
Thanks Meter: 7
 
More
Thank you it worked on nokia6 ta-1000 chinese. I rooted the phone successfully
9th November 2017, 03:42 PM |#3  
Junior Member
Thanks Meter: 1
 
More
Finally!
Boy O Boy!
Finally, after a long, long wait, Got my Nokia 6 Rooted! (TA-1000)
Thanks a LOT, Man!
The Following User Says Thank You to humpro8247 For This Useful Post: [ View ] Gift humpro8247 Ad-Free
9th November 2017, 05:59 PM |#4  
Senior Member
Thanks Meter: 7
 
More
Anyone tried it on any other variant yet?
10th November 2017, 03:11 PM |#5  
Member
Flag saghez,iran
Thanks Meter: 35
 
More
Hi .i am 1st root my ta1021 with Android 7.1.2 .f**k me
but your method have some problems ...
1. I can't find powershell or anything else in ost la folder.
2.fastboot-android not working....
Now I want complete your method from 6.


6. Before you must install adb and fastboot tools and drivers and use command prompt ,
copy recovery.img to drive c
After ost la changeing phone to edit mod wait 10 second and type this command
Fastboot flash recovery c:\recovery.img
And after flashing completed hold both volume+ and power button and type this command
Fastboot reboot
Don't release buttons and after few seconds you enter Chinese recovery swipe it to right and use screen shots to root your device, after that reboot to system you can find it from screenshot, it go to download mod and then type
Fastboot continue
And enter congratulations, your phone go to normal boot.
Bla bla super su installed....
Thanks, hikari_calyx. For this thread..
Some errors happend when I use rill but after reboot again it is not happening....
10th November 2017, 03:24 PM |#6  
hikari_calyx's Avatar
OP Senior Member
Flag Wuhan
Thanks Meter: 485
 
Donate to Me
More
Quote:
Originally Posted by same6630

Hi .i am 1st root my ta1021 with Android 7.1.2 .f**k me
but your method have some problems ...
1. I can't find powershell or anything else in ost la folder.
2.fastboot-android not working....
Now I want complete your method from 6.


6. Before you must install adb and fastboot tools and drivers and use command prompt ,
copy recovery.img to drive c
After ost la changeing phone to edit mod wait 10 second and type this command
Fastboot flash recovery c:\recovery.img
And after flashing completed hold both volume+ and power button and type this command
Fastboot reboot
Don't release buttons and after few seconds you enter Chinese recovery swipe it to right and use screen shots to root your device, after that reboot to system you can find it from screenshot, it go to download mod and then type
Fastboot continue
And enter congratulations, your phone go to normal boot.
Bla bla super su installed....
Thanks, hikari_calyx. For this thread..
Some errors happend when I use rill but after reboot again it is not happening....

If you're running Windows Vista or Windows 7, you can open a command prompt from installation directory by click right button on the mouse while holding Shift key on the keyboard.
If you're running Windows 8/8.1 or Windows 10, you can open a command prompt or PowerShell from the left corner "File" button. Administrators privilege is optional.

Also, as I mentioned:

Quote:

You can also use your own fastboot if you want.

11th November 2017, 04:05 AM |#7  
Junior Member
Thanks Meter: 0
 
More
IDK but you should have change/put the title of this topic as Nokia 6 - TA 1000 (Chinese variant) rather than Retail Phone.

Well, getting root is definitely a temptation but since I'm just a noob and the HMD hasn't release any official firmware/tool yet to recover the phone if thing goes wrong, I guess I'll wait a little bit longer then.
11th November 2017, 04:32 AM |#8  
hikari_calyx's Avatar
OP Senior Member
Flag Wuhan
Thanks Meter: 485
 
Donate to Me
More
Quote:
Originally Posted by lips_1234

IDK but you should have change/put the title of this topic as Nokia 6 - TA 1000 (Chinese variant) rather than Retail Phone.

As I mentioned on the topic, it works on any variant, not only China Variant TA-1000 and Hong Kong Variant TA-1003.
@same6630 tested on a TA-1021 which is a global variant.

Quote:
Originally Posted by lips_1234

Well, getting root is definitely a temptation but since I'm just a noob and the HMD hasn't release any official firmware/tool yet to recover the phone if thing goes wrong, I guess I'll wait a little bit longer then.

HMD released official firmware of Nokia 6 of course, and it's needed to flash a recovery.
11th November 2017, 10:26 AM |#9  
Member
Flag saghez,iran
Thanks Meter: 35
 
More
Mine
I got some screenshots....
Attached Thumbnails
Click image for larger version

Name:	Screenshot_20171111-135443.png
Views:	2874
Size:	132.5 KB
ID:	4329293   Click image for larger version

Name:	Screenshot_20171111-135450.png
Views:	2840
Size:	161.3 KB
ID:	4329294   Click image for larger version

Name:	Screenshot_20171111-140055.png
Views:	2810
Size:	119.1 KB
ID:	4329303  
12th November 2017, 07:44 AM |#10  
Senior Member
Flag Paris
Thanks Meter: 12
 
More
Did someone successfully rooted his Nokia 6 TA-1033?
The Following User Says Thank You to Yakia For This Useful Post: [ View ] Gift Yakia Ad-Free
12th November 2017, 11:06 AM |#11  
Member
Flag Singapore
Thanks Meter: 4
 
More
So just to be clear before I do this to my TA-1000; how do I go about to update it later if I want to update it? For example, my TA-1000 still don't have the 7.1.2 update, and the 8.0 update coming later would be something I want as well.

Do I just update through zip files, or will I simply not be able to update?
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes