• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[GUIDE] How to change SKUID to Worldwide or China (Root required)

Search This thread

hikari_calyx

Senior Member
FIH made Android Phones with Android 8.0 out of factory installed can't switch SKUID by OST LA without service permission.
Changing SKUID will allow you pass SafetyNet, especially for the Nokia 7 plus converted from TA-1062 China Variant.

如果你来自中国,请看下面翻译成中文的教程:
If you're from China, Chinese translation of this guide:
https://dospy.wang/forum.php?mod=viewthread&tid=154&extra=page=1

Here's the procedure:

1. Bootloader must be unlocked and you must get your phone rooted.

2. Use a terminal emulator or adb shell to execute these commands:

Code:
$ su
(Accept root permission on your phone)
# dd if=/dev/block/bootdevice/by-name/deviceinfo of=/storage/emulated/0/deviceinfo.img

WARNING: YOU MUST USE YOUR OWN DEVICEINFO, DO NOT ASK ANY OTHERS FOR THIS DUMP.
THIS PARTITION CONTAINS YOUR IMEI AND SERIAL, AND CRUCIAL DRM KEY, SERVICE KEY THAT ALLOWS YOU TO FLASH PARTITION.

3. Use a Hex Editor to open deviceinfo.img placed at root directory of internal storage.

4. Goto offset 0x13B0, you should see data look like this:

Code:
Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F

00001380   53 4B 55 49 44 00 00 00  00 00 00 00 00 00 00 00   SKUID           
00001390   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00                   
000013A0   53 4B 55 63 68 61 6E 67  65 00 00 00 00 00 00 00   SKUchange       
000013B0   36 30 30 43 4E 00 00 00  00 00 00 00 00 00 00 00   600CN

On Nokia 6 (TA-1000) or any other variants, you may not see string "SKUchange" from offset 0x13A0 to 0x13A8, which is normal.

5. Modify the value of 0x13B3 and 0x13B4 to 57 which is ASCII "W".

Code:
Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F

00001380   53 4B 55 49 44 00 00 00  00 00 00 00 00 00 00 00   SKUID           
00001390   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00                   
000013A0   53 4B 55 63 68 61 6E 67  65 00 00 00 00 00 00 00   SKUchange       
000013B0   36 30 30 57 57 00 00 00  00 00 00 00 00 00 00 00   600WW

5. Save it as deviceinfo_mod.img.

6. Copy it to internal storage if you modify it on a PC, then execute these commands with a terminal emulator or adb shell:

Code:
$ su
# dd if=/storage/emulated/0/deviceinfo_mod.img of=/dev/block/bootdevice/by-name/deviceinfo

7. Reboot your phone, reflash global firmware and relock your phone if you wish:

Code:
fastboot flashing lock_critical
(Confirm on your phone)
fastboot oem lock-go
(Confirm on your phone again)

8. Now your phone is completely converted to global version which can pass SafetyNet - you can use Google Pay normally now.
 
Last edited:

hackjackyer

Member
Dec 23, 2011
12
1
FIH made Android Phones with Android 8.0 out of factory installed can't switch SKUID by OST LA without service permission.
Changing SKUID will allow you pass SafetyNet, especially for the Nokia 7 plus converted from TA-1062 China Variant.

Here's the procedure:

1. Bootloader must be unlocked and you must get your phone rooted.

2. Use a terminal emulator or adb shell to execute these commands:





3. Use a Hex Editor to open deviceinfo.img placed at root directory of internal storage.

4. Goto offset 0x13B0, you should see data look like this:



5. Modify the value of 0x13B3 and 0x13B4 to 57 which is ASCII "W".



5. Save it as deviceinfo_mod.img.

6. Copy it to internal storage if you modify it on a PC, then execute these commands with a terminal emulator or adb shell:



7. Reboot your phone, reflash global firmware and relock your phone if you wish:



8. Now your phone is completely converted to global version which can pass SafetyNet - you can use Google Pay normally now.
can use china sim card?
 

MUGIW

New member
Jul 2, 2018
1
0
I succeed and change my boot UI to Android One,then I flashed my phone to 213E by OST and got june patch ,but it still shows uncertified in playstore,will it effect OTA? (T1046 unlocked)
 

SUN Huayan

Member
Aug 25, 2016
22
6
I succeed and change my boot UI to Android One,then I flashed my phone to 213E by OST and got june patch ,but it still shows uncertified in playstore,will it effect OTA? (T1046 unlocked)

It won't affect OTA. If you wanna make it certified, you need relock bootloader. Just the same methods as unlock bl.
fastboot flash unlock unlock.bin
fastboot oem lock

fastboot flash unlock unlock.bin
fastboot flashing lock_critical
 

tomascivinod

Senior Member
Sep 2, 2009
62
2
Sydney
I broke it

Actually, I really stuffed up.

My TA-1062 was rooted and unlocked bootloader, went to follow the guide.
Updated and copied over the device_info.img
Then I did the steps out of order and my device is stuck in download mode.
I relocked my bootloader, which wiped the device, and I though this was reflashing global firmware, which is wasnt.
After the device had wiped itself, I then used magisk manager to remove root, which then caused the phone to only boot to download mode.
I then re-unlocked my bootloader, then I used the deprecated instructions here to try and reflash my device, but the vendor, e2p_script and formatuserdata commands failed. My phone is now still stuck in download mode.
I also tried to reflash using OST 6.1.2 patched, but it seems to get stuck on Reflash Service Bootloader (900sec)
Any tips on how to fix this?
Thanks,
Tom
 
Last edited:

shiftybugger

Member
Feb 27, 2010
18
0
Actually, I really stuffed up.

My TA-1062 was rooted and unlocked bootloader, went to follow the guide.
Updated and copied over the device_info.img
Then I did the steps out of order and my device is stuck in download mode.
I relocked my bootloader, which wiped the device, and I though this was reflashing global firmware, which is wasnt.
After the device had wiped itself, I then used magisk manager to remove root, which then caused the phone to only boot to download mode.
I then re-unlocked my bootloader, then I used the deprecated instructions here to try and reflash my device, but the vendor, e2p_script and formatuserdata commands failed. My phone is now still stuck in download mode.
I also tried to reflash using OST 6.1.2 patched, but it seems to get stuck on Reflash Service Bootloader (900sec)
Any tips on how to fix this?
Thanks,
Tom

Can you get into recovery mode? (Volume UP and Power until it buzzes, then Vol Up and power again to bring up the abd screen). If so you should be able to adb sideload from there.
 

Surgent

Senior Member
Jun 22, 2009
76
10
Sydney
I cant seem to get this to stick. My about phone still shows TA-1062.
How would i know if this worked?
Should i then flash the worldwide TWRP over the 1062 flash as well?
 

shiftybugger

Member
Feb 27, 2010
18
0
I cant seem to get this to stick. My about phone still shows TA-1062.
How would i know if this worked?
Should i then flash the worldwide TWRP over the 1062 flash as well?

Yeah it will still show TA-1062. The difference is that it will show the 'WW' model instead of 'CN'. I knew mine had stuck when the play SafetyNet checker showed a pass.

Here's what I did:
1. Unlocked bootloader and critical bootloader
2. Rooted.
3. Followed this guide to make the change.
4. Uninstalled Magisk (basically unrooting)
5. Relock bootloader and critical bootloader
6. Sideloaded the stock Oreo image

And everything is hunky dory. You could also sideload the P beta image from Nokia as well.
 

94burns

Senior Member
Dec 9, 2016
102
33
Yeah it will still show TA-1062. The difference is that it will show the 'WW' model instead of 'CN'. I knew mine had stuck when the play SafetyNet checker showed a pass.

Here's what I did:
1. Unlocked bootloader and critical bootloader
2. Rooted.
3. Followed this guide to make the change.
4. Uninstalled Magisk (basically unrooting)
5. Relock bootloader and critical bootloader
6. Sideloaded the stock Oreo image

And everything is hunky dory. You could also sideload the P beta image from Nokia as well.

Have you received the August ota since doing this?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 11
    FIH made Android Phones with Android 8.0 out of factory installed can't switch SKUID by OST LA without service permission.
    Changing SKUID will allow you pass SafetyNet, especially for the Nokia 7 plus converted from TA-1062 China Variant.

    如果你来自中国,请看下面翻译成中文的教程:
    If you're from China, Chinese translation of this guide:
    https://dospy.wang/forum.php?mod=viewthread&tid=154&extra=page=1

    Here's the procedure:

    1. Bootloader must be unlocked and you must get your phone rooted.

    2. Use a terminal emulator or adb shell to execute these commands:

    Code:
    $ su
    (Accept root permission on your phone)
    # dd if=/dev/block/bootdevice/by-name/deviceinfo of=/storage/emulated/0/deviceinfo.img

    WARNING: YOU MUST USE YOUR OWN DEVICEINFO, DO NOT ASK ANY OTHERS FOR THIS DUMP.
    THIS PARTITION CONTAINS YOUR IMEI AND SERIAL, AND CRUCIAL DRM KEY, SERVICE KEY THAT ALLOWS YOU TO FLASH PARTITION.

    3. Use a Hex Editor to open deviceinfo.img placed at root directory of internal storage.

    4. Goto offset 0x13B0, you should see data look like this:

    Code:
    Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F
    
    00001380   53 4B 55 49 44 00 00 00  00 00 00 00 00 00 00 00   SKUID           
    00001390   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00                   
    000013A0   53 4B 55 63 68 61 6E 67  65 00 00 00 00 00 00 00   SKUchange       
    000013B0   36 30 30 43 4E 00 00 00  00 00 00 00 00 00 00 00   600CN

    On Nokia 6 (TA-1000) or any other variants, you may not see string "SKUchange" from offset 0x13A0 to 0x13A8, which is normal.

    5. Modify the value of 0x13B3 and 0x13B4 to 57 which is ASCII "W".

    Code:
    Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F
    
    00001380   53 4B 55 49 44 00 00 00  00 00 00 00 00 00 00 00   SKUID           
    00001390   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00                   
    000013A0   53 4B 55 63 68 61 6E 67  65 00 00 00 00 00 00 00   SKUchange       
    000013B0   36 30 30 57 57 00 00 00  00 00 00 00 00 00 00 00   600WW

    5. Save it as deviceinfo_mod.img.

    6. Copy it to internal storage if you modify it on a PC, then execute these commands with a terminal emulator or adb shell:

    Code:
    $ su
    # dd if=/storage/emulated/0/deviceinfo_mod.img of=/dev/block/bootdevice/by-name/deviceinfo

    7. Reboot your phone, reflash global firmware and relock your phone if you wish:

    Code:
    fastboot flashing lock_critical
    (Confirm on your phone)
    fastboot oem lock-go
    (Confirm on your phone again)

    8. Now your phone is completely converted to global version which can pass SafetyNet - you can use Google Pay normally now.
    1
    Thank you, I have used your method to successfully modify my SKUID to 600WW.