[GUIDE][Nougat & Oreo] How to flash TWRP and Magisk with locked bootloader

Search This thread

JonnyTech

Senior Member
Dec 4, 2013
133
46
DoubleCat said:
I just want to replace 8.1 with 8.0? I am desperate, 8.1 is bad on so many levels

The latest release, as far as I am aware, and as offered by the OTA is Android 8.0.0 November 2018 build. Not sure how you got 8.1 for your device. There is a link to the full ROM (September 2018 build) a few posts back.
Flash that with SP Flash Tools then do an OTA update to get to the forementioned current release.
 
  • Like
Reactions: DoubleCat

bubba1601

Senior Member
Aug 23, 2016
1,886
1,191
50
Nokia G10/G20
This guide is interesting and the steps are probably easy enough for me to follow, but I don't need nor want twrp/magisk, I don't plan to root my phone, I just want vanilla Android 8.0, how should I proceed if I just want to replace 8.1 with 8.0? I am desperate, 8.1 is bad on so many levels :(

Also, even if I lose all my data and settings, shouldn't app settings be automatically restored since Google claims to back them up on the cloud? What's the best way to manually back up as many things as possible? If there's no way, fine with me. Wasting half a day setting everything back is an acceptable price to pay if I can get rid of 8.1.


It was only announced the Nokia 3 was getting 8.1 here on XDA 6 days ago (see screenshot below) so I'm not quite sure how anyone managed to get the update so quick.

If the 8.1 update takes as long in the UK as the 8.0 update did, I can expect the 8.1 update on my TA1020 by July or August 2019 :eek:
 

Attachments

  • Screenshot_20181227-163243.png
    Screenshot_20181227-163243.png
    144.9 KB · Views: 146

DoubleCat

Member
Dec 23, 2018
9
2
The latest release, as far as I am aware, and as offered by the OTA is Android 8.0.0 November 2018 build. Not sure how you got 8.1 for your device.
It was only announced the Nokia 3 was getting 8.1 here on XDA 6 days ago (see screenshot below) so I'm not quite sure how anyone managed to get the update so quick.
Feel free not to believe me, but I got it almost a week ago by now:
xAb0cqV.png


I hate it more and more, unfortunately I am poor or I'd just buy another phone and forget about all this.
 

bubba1601

Senior Member
Aug 23, 2016
1,886
1,191
50
Nokia G10/G20
Feel free not to believe me, but I got it almost a week ago by now:

I hate it more and more, unfortunately I am poor or I'd just buy another phone and forget about all this.


I never said I didn't believe you, I commented on the fact it was only announced a week ago.

If you have it, great - as I said, when Europe got the 8.0 update in February this year, the UK still had not got it by June, so I used a Finnish VPN to get it.
Edit
There are people claiming they are still on nougat on their N3s in the nokia support forums.....
 

DoubleCat

Member
Dec 23, 2018
9
2
There is a link to the full ROM (September 2018 build) a few posts back.
Flash that with SP Flash Tools then do an OTA update to get to the forementioned current release
@DoubleCat the instructions in my last post will work. Just do not update when 8.1 is offered.
I see, so it is simple as that? I only need to download the SP thing and to flash one rom? That sounds like something even I can do, thanks a lot :)
I'm sorry if I've been a pain in the xxx about this, but I really know nothing about phones; I usually wouldn't mind doing some experiments on my own, but the fact that I might permanently ruin my phone scares me a lot. Also, I can't use my own computer for this, since I run Windows XP and it doesn't even see the Nokia 3 (the driver included with the phone itself doesn't work), so I have to use my girlfriend's computer, which means that I have a very limited time to do things, and only every few days. I'll give your method a try as soon as I'll have a chance, maybe tomorrow.

I never said I didn't believe you, I commented on the fact it was only announced a week ago.
I'm sorry, I didn't mean to sound rude, especially not towards people who are trying to help me, and for that I apologise. I've been feeling bad and nervous the whole past week due to the fact that the phone I'm holding in my hands right now might as well be the world's most expensive paperweight, but I'm calmer now that I see a faint light at the end of the tunnel.

Don't hold your breath for 8.1, by the way. I, too, welcomed it in a heartbeat because I knew it promised to restore the black menus from 7.0, which were turned to blinding white in 8.0 as you surely know, but that's pretty much the only good thing that it does, so I'd rather have 8.0's white menus over this monstrosity.
 
  • Like
Reactions: bubba1601

donrisotto

New member
Apr 6, 2011
4
0
Having a hard time using OST to flash back to stock 7.0... during initialisation the phone seems to disconnect, disappears to fastboot/adb as well. Thought it might just be my pc so I tried a win 8.1 laptop but same problem. SP flash tool does something similar. "was device unplugged or lost power?" etc. Very strange. It's now unlocked and in red state, but eh, it still works so not really a big deal. on 8.0
 

JonnyTech

Senior Member
Dec 4, 2013
133
46
donrisotto said:
during initialisation the phone seems to disconnect

Very strange. Althogh you tried another computer, did you try another cable? Also, as you run Windows then try different USB/device drivers. No such issues with Linux.

OST has never worked for me, I recommend SPFT.
 

Annan Denis

Member
Mar 17, 2018
8
1
Invalid IMEI and lost original serial number

well it should work for them too, but where to find someone who never unlocked bootloader.

I flashed nbo file 7.1.1 ,but by bad luck i had clicked on format+download so my bootloader was locked again and now i have invalid IMEI and the serial number changed to 0123456789ABCDEF. How can i solve this issues and unlock the bootloader again.
 

Annan Denis

Member
Mar 17, 2018
8
1
Unlocking bootloader

Before following guide check this:

If you never unlocked bootloader or you flashed Android 7.1.1 nb0 with locked bootloader, then you need to go back to Android 7.0, after that unlock then lock bootloader. If you want to update, use OTA, don't flash nb0 because it have stock LK inside.
Here is the explanation why:

Downloads:
SP Flash Tool:
https://spflashtool.com/download/
VCOM Drivers:
https://spflashtool.com/download/MediaTek_USB_VCOM_drivers.zip
Scatter file (extracted from nb0, use this scatter to avoid renaming issue):
https://mega.nz/#!qJh1TSLL!5afi-7NYqKT3H62tqBISYSAdBDgN6eIM20WRSbtq3qE
Compatible DA (Download Agent):
https://mega.nz/#!xd8B3AJQ!PW82IpLzMzyNQk55BdwMnRMPlKQA0Yzj_8k_xN5r9XM
Stock boot.img and Stock recovery.img:
https://forum.xda-developers.com/nokia-3/development/link-stock-boot-img-stock-recovery-img-t3785576
TWRP 3.1.0-0 by mediafire007:
https://onedrive.live.com/?authkey=...126&parId=768DA1AA966F93C9!3122&action=locate
TWRP 3.2.1-0 by SkaboXD:
https://mega.nz/#!qIhFkKia!AkUMvQJ0PGVnSePabTvOgO-oUAMZahlCNaZfy2gE4vE
Magisk ZIP:
https://github.com/topjohnwu/Magisk/releases/download/v16.0/Magisk-v16.0.zip
Magisk Manager APK:
https://github.com/topjohnwu/MagiskManager/releases/download/v5.7.0/MagiskManager-v5.7.0.apk
unSU script:
https://forum.xda-developers.com/attachment.php?attachmentid=4410561&d=1517853382

First Step: Installing and setting SP Flash Tools
Install VCOM Drivers (video tutorial): https://youtube.com/watch?v=w3whZ2QMGvo
Then extract SP Flash Tool to Desktop. Open extracted folder and open flash_tool.exe. Create new folder on Desktop and call it ''magisk twrp sp flash tool'' or something like that and move scatter to that folder. Then go back to SP Flash Tool and load scatter file. Close SP Flash Tool. Now copy/move DA_SWSEC_CRYPTO20.bin (Compatible DA that you downloaded) and replace it to sp flash tool folder. Then open sp flash tool and load DA that you replaced.

Second Step: Flashing TWRP and Magisk
Extract twrp to ''magisk twrp sp flash tool'' folder. Rename it to NE1-0-215H-00WW-recovery so SP Flash Tool can recognize it. Turn off your phone. Now open SP Flash Tool, tick recovery, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. Now you have TWRP. Rename NE1-0-215H-00WW-recovery to twrp-recovery.img so you can remember file name.

If you don't have root, just flash Magisk ZIP with TWRP.
If you have SuperSU and you want to switch to Magisk, flash unSU script with TWRP which uninstalls SuperSU, then you need to flash stock boot.img. Switch from install zip to install image and click on stock boot.img. Tick boot partition and flash. When it's done with flashing, you can flash Magisk.

OPTIONAL
If you are for some reason scared to flash TWRP or don't want to mess with recovery partition, this is step for you.

Second Step: Flashing Magisk without touching recovery partition
If you want to switch from SuperSU to Magisk, unroot SuperSU in SuperSU options. Transfer stock boot.img to your device from PC. Go to your phone and install Magisk Manager APK and open it. Click install then click "Patch boot image file" then select stock boot.img then it starts downloading Magisk ZIP and patching boot.img. You will get patched_boot.img in /sdcard/MagiskManager. Now transfer stock boot.img and patched boot.img back to PC and move it to "magisk twrp sp flash tool" folder. Rename stock boot.img to NE1-0-215H-00WW-boot. Turn off your phone. Now open SP Flash Tool, tick boot, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. Close SP Flash Tool. Rename NE1-0-215H-00WW-boot to stock-boot.img and rename patched-boot.img to NE1-0-215H-00WW-boot. Turn off your phone. Now open SP Flash Tool, tick boot, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. TA-DA you have Magisk root. Rename NE1-0-215H-00WW-boot to patched-boot.img so you can remember file name.

What about OTA?:
If you want to have OTA updates, remember to flash stock recovery back if you flashed TWRP. With installed update you will not lose:
- Data (apps, internal storage data)
- Xposed framework (if flashed directly to system)
- Xposed modules

you will lose:
- Magisk
- Magisk modules
- Xposed framework (if you flashed it systemlessly)

To gain root, just flash Magisk again.

Comment if links need to be updated.

Credits:
@sp flash Tool developers for providing SP Flash Tool
@blackpanther0582 for nb0 and scatter file
@Max brackenz for Download Agent
@mediafire007 for TWRP
@topjohnwu for Magisk
@osm0sis for unSU script
@bigrammy for useful tips
I flashed nbo file 7.1.1 ,but by bad luck i had clicked on format all +download using sp flash tool so my bootloader was locked again and now i have invalid IMEI and the serial number changed to 0123456789ABCDEF. How can i unlock the bootloader again. I need help.
 

bubba1601

Senior Member
Aug 23, 2016
1,886
1,191
50
Nokia G10/G20
I flashed nbo file 7.1.1 ,but by bad luck i had clicked on format all +download using sp flash tool so my bootloader was locked again and now i have invalid IMEI and the serial number changed to 0123456789ABCDEF. How can i unlock the bootloader again. I need help.


You already asked this yesterday.
Unfortunately people have lives away from here and can't answer you straight away and sometimes can't answer you for a day or so.
Please don't flood the thread with the same questions and please don't quote the whole original post, it's against the rules here.

Wait for a reply like everyone else does, and someone will answer you when they are ready.
 

DoubleCat

Member
Dec 23, 2018
9
2
Hello, I'm sorry to post again, but I finally had a chance to use a compatible computer to try some things on my Nokia 3.

First of all, I tried SP Flash Tool. I downloaded everything, but it still complained about a missing authorization file. I tried various images from various posts from this forum, but none worked. I plugged and unplugged the phone several times, but it looks like it can't even be completely turned off with 8.1 now, so that might have been a factor as well. And no, I didn't feel like removing the battery as I'm nowhere near expert enough to open a phone by my own. So yeah, SP Flash Tool gave me a variety of errors and never worked.

I went on, and I tried OST. I followed a tutorial on another website, which was very clear, I have to admit. But it didn't work, either. At some point, the "next" button has to lite up, but it never does. Again, I tried several times, plugging and unplugging the phone, turning it off, rebooting, holding volume up / down / both, nothing worked.

After a couple of hours I had to give up because I couldn't use my girlfriend's computer anymore, as she had to go to work.

At that point I decided to ask some expert in a local store, and no, before someone asks, it's not an Official Nokia Store™, it's one of those "nerds that will do any kind of black magic for you" kind of store, which is the best kind of store. They told me that they can do it for €20, which isn't as much as I feared (but still more than I'd like to spend since I don't even have a job), but they also told me that it's not as simple as it was mentioned here, and also there's a chance that the phone will lose its actual telephone capabilities, e.g. making phone calls, because I should have backed up something with a weird name before I upgraded from 8.0 to 8.1, so I don't really know what to do now, maybe it's a good thing that my own attempts failed.

If only I had money, maybe I could sell my phone and buy another Nokia 3 (or something else) with a small price difference. But I just can't keep 8.1, seriously, it stutters when I play music, it randomly disconnects when I use the hotspot, and, most of the times, notifications don't even play any sound (and yes, this includes phone calls, sometimes I receive them with no ringtone, and if I check the notification log it says no sound, indeed).

I hate my life. And I'm starting to hate Nokia, I've been happy with 5 phones in a row (including a 3210 and a Lumia 630), but now everything is ruined.

Thanks for your time and sorry for my rant.
 

arsalan j

New member
Nov 16, 2018
3
0
Before following guide check this:

If you never unlocked bootloader or you flashed Android 7.1.1 nb0 with locked bootloader, then you need to go back to Android 7.0, after that unlock then lock bootloader. If you want to update, use OTA, don't flash nb0 because it have stock LK inside.
Here is the explanation why:
Quote:
Originally Posted by bigrammy
In theory and put simply as possible it should not work on a never unlocked before device if the LK does it's job properly.
The LK does all the checking down the secure boot chain prior to allowing the recovery or boot.img to boot.
If a device has been officially Unlocked then the LK should write (normally hidden) 1 bite identifiers to partitions like secro, misc, oem, etc etc (Depends on the OEM where and how) so when you flash a new ROM the new LK should still look for these bite's and if it see's them then it will allow the none stock .img's like twrp to boot normally.
So to sum up
1. Nokia made a huge screw up and the Nokia 3 is a totally insecure device like most of cheap MediaTek Chinese phone's out there.
2. The LK knows the bootloader was officially Unlocked before and therefore ignores the secure boot chain.

i really dont understood properly what shaboXD is trying to say here can any one explain.

and also look at the steps that i followed and where i got stuck after each progress.
1) Have Nokia 3 ta-1032 oreo (8.0.0)
2)unlocked bootloader got orange warning on starting( cant be trusted)
3)downloaded spflash tool and TWRP.img
4)loaded scatter file NE1-0-215H-MT6737M and replace DA_SWSEC_CRYPTO20.bin inside spflashtool
5)copied TWRP.img to folder so spflash tool recognizing it and rename TWRP.img to NE1-0-215H-00WW-recovery.img
6)got TWRP but nokia phone wont start only on fast boot loader TWRP was showing.
7)Tried to flash magisk but there was no magisk there.
(here i got stuck so tell me that do i have copy magisk.zip to phone downloads folder)

8) after getting stuck i flashed nokia 3 8.0.0 which on starting updated to 8.1.0
9)even after flashing firmware with OST Tools i was seeing orange screen of unlocked bootloader
10) i tried rooting again by using SPflashtools and following above step 4.
11)on first try red and on second try it gives yellow with tick successful.
12)but issue was mobile stuck and was not opening and on "pressing power button only once" it tries to boot but only boot sound and vibration happen s for 2 seconds which means boot is failing
and device does not even open and this happens in a loop it will fail to boot and then tries tries again and again.
13)tried to flash firmware again this time of 7.1.1 now device opens but without any orange screen warning so bootloader is locked but on going to developer options i see "OEM unlocking on and off" options available does it mean that i do not have to unlock bootloader any more.
so my questions are
A) first explain the above skaboXD has said which is confusing.
B)where to put magisk and magisk manager
C)on installing TWRP does nokia normal boot does not happen
D)the last question is if nokia 3 7.1.1 is giving me OEM unlocking on option so do i have unlock bootloader again and follow the guide.
 
Last edited:

Annan Denis

Member
Mar 17, 2018
8
1
Stuck in red state warning

Before following guide check this:

If you never unlocked bootloader or you flashed Android 7.1.1 nb0 with locked bootloader, then you need to go back to Android 7.0, after that unlock then lock bootloader. If you want to update, use OTA, don't flash nb0 because it have stock LK inside.
Here is the explanation why:

Downloads:
SP Flash Tool:
https://spflashtool.com/download/
VCOM Drivers:
https://spflashtool.com/download/MediaTek_USB_VCOM_drivers.zip
Scatter file (extracted from nb0, use this scatter to avoid renaming issue):
https://mega.nz/#!qJh1TSLL!5afi-7NYqKT3H62tqBISYSAdBDgN6eIM20WRSbtq3qE
Compatible DA (Download Agent):
https://mega.nz/#!xd8B3AJQ!PW82IpLzMzyNQk55BdwMnRMPlKQA0Yzj_8k_xN5r9XM
Stock boot.img and Stock recovery.img:
https://forum.xda-developers.com/nokia-3/development/link-stock-boot-img-stock-recovery-img-t3785576
TWRP 3.1.0-0 by mediafire007:
https://onedrive.live.com/?authkey=...126&parId=768DA1AA966F93C9!3122&action=locate
TWRP 3.2.1-0 by SkaboXD:
https://mega.nz/#!qIhFkKia!AkUMvQJ0PGVnSePabTvOgO-oUAMZahlCNaZfy2gE4vE
Magisk ZIP:
https://github.com/topjohnwu/Magisk/releases/download/v16.0/Magisk-v16.0.zip
Magisk Manager APK:
https://github.com/topjohnwu/MagiskManager/releases/download/v5.7.0/MagiskManager-v5.7.0.apk
unSU script:
https://forum.xda-developers.com/attachment.php?attachmentid=4410561&d=1517853382

First Step: Installing and setting SP Flash Tools
Install VCOM Drivers (video tutorial): https://youtube.com/watch?v=w3whZ2QMGvo
Then extract SP Flash Tool to Desktop. Open extracted folder and open flash_tool.exe. Create new folder on Desktop and call it ''magisk twrp sp flash tool'' or something like that and move scatter to that folder. Then go back to SP Flash Tool and load scatter file. Close SP Flash Tool. Now copy/move DA_SWSEC_CRYPTO20.bin (Compatible DA that you downloaded) and replace it to sp flash tool folder. Then open sp flash tool and load DA that you replaced.

Second Step: Flashing TWRP and Magisk
Extract twrp to ''magisk twrp sp flash tool'' folder. Rename it to NE1-0-215H-00WW-recovery so SP Flash Tool can recognize it. Turn off your phone. Now open SP Flash Tool, tick recovery, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. Now you have TWRP. Rename NE1-0-215H-00WW-recovery to twrp-recovery.img so you can remember file name.

If you don't have root, just flash Magisk ZIP with TWRP.
If you have SuperSU and you want to switch to Magisk, flash unSU script with TWRP which uninstalls SuperSU, then you need to flash stock boot.img. Switch from install zip to install image and click on stock boot.img. Tick boot partition and flash. When it's done with flashing, you can flash Magisk.

OPTIONAL
If you are for some reason scared to flash TWRP or don't want to mess with recovery partition, this is step for you.

Second Step: Flashing Magisk without touching recovery partition
If you want to switch from SuperSU to Magisk, unroot SuperSU in SuperSU options. Transfer stock boot.img to your device from PC. Go to your phone and install Magisk Manager APK and open it. Click install then click "Patch boot image file" then select stock boot.img then it starts downloading Magisk ZIP and patching boot.img. You will get patched_boot.img in /sdcard/MagiskManager. Now transfer stock boot.img and patched boot.img back to PC and move it to "magisk twrp sp flash tool" folder. Rename stock boot.img to NE1-0-215H-00WW-boot. Turn off your phone. Now open SP Flash Tool, tick boot, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. Close SP Flash Tool. Rename NE1-0-215H-00WW-boot to stock-boot.img and rename patched-boot.img to NE1-0-215H-00WW-boot. Turn off your phone. Now open SP Flash Tool, tick boot, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. TA-DA you have Magisk root. Rename NE1-0-215H-00WW-boot to patched-boot.img so you can remember file name.

What about OTA?:
If you want to have OTA updates, remember to flash stock recovery back if you flashed TWRP. With installed update you will not lose:
- Data (apps, internal storage data)
- Xposed framework (if flashed directly to system)
- Xposed modules

you will lose:
- Magisk
- Magisk modules
- Xposed framework (if you flashed it systemlessly)

To gain root, just flash Magisk again.

Comment if links need to be updated.

Credits:
@sp flash Tool developers for providing SP Flash Tool
@blackpanther0582 for nb0 and scatter file
@Max brackenz for Download Agent
@mediafire007 for TWRP
@topjohnwu for Magisk
@osm0sis for unSU script
@bigrammy for useful tips
I flashed twrp as guided above but when i rebooted to recovery there was a red state warning that failed verification your device will boot in 5sec but it stucked there
 

Top Liked Posts

  • There are no posts matching your filters.
  • 10
    Before following guide check this:

    If you never unlocked bootloader or you flashed Android 7.1.1 nb0 with locked bootloader, then you need to go back to Android 7.0, after that unlock then lock bootloader. If you want to update, use OTA, don't flash nb0 because it have stock LK inside.
    Here is the explanation why:
    In theory and put simply as possible it should not work on a never unlocked before device if the LK does it's job properly. :confused:
    The LK does all the checking down the secure boot chain prior to allowing the recovery or boot.img to boot.
    If a device has been officially Unlocked then the LK should write (normally hidden) 1 bite identifiers to partitions like secro, misc, oem, etc etc (Depends on the OEM where and how) so when you flash a new ROM the new LK should still look for these bite's and if it see's them then it will allow the none stock .img's like twrp to boot normally.
    So to sum up
    1. Nokia made a huge screw up and the Nokia 3 is a totally insecure device like most of cheap MediaTek Chinese phone's out there.
    2. The LK knows the bootloader was officially Unlocked before and therefore ignores the secure boot chain.
    Downloads:
    SP Flash Tool:
    https://spflashtool.com/download/
    VCOM Drivers:
    https://spflashtool.com/download/MediaTek_USB_VCOM_drivers.zip
    Scatter file (extracted from nb0, use this scatter to avoid renaming issue):
    https://mega.nz/#!qJh1TSLL!5afi-7NYqKT3H62tqBISYSAdBDgN6eIM20WRSbtq3qE
    Compatible DA (Download Agent):
    https://mega.nz/#!xd8B3AJQ!PW82IpLzMzyNQk55BdwMnRMPlKQA0Yzj_8k_xN5r9XM
    Stock boot.img and Stock recovery.img:
    https://forum.xda-developers.com/nokia-3/development/link-stock-boot-img-stock-recovery-img-t3785576
    TWRP 3.1.0-0 by mediafire007:
    https://onedrive.live.com/?authkey=...126&parId=768DA1AA966F93C9!3122&action=locate
    TWRP 3.2.1-0 by SkaboXD:
    https://mega.nz/#!qIhFkKia!AkUMvQJ0PGVnSePabTvOgO-oUAMZahlCNaZfy2gE4vE
    Magisk ZIP:
    https://github.com/topjohnwu/Magisk/releases/download/v16.0/Magisk-v16.0.zip
    Magisk Manager APK:
    https://github.com/topjohnwu/MagiskManager/releases/download/v5.7.0/MagiskManager-v5.7.0.apk
    unSU script:
    https://forum.xda-developers.com/attachment.php?attachmentid=4410561&d=1517853382

    First Step: Installing and setting SP Flash Tools
    Install VCOM Drivers (video tutorial): https://youtube.com/watch?v=w3whZ2QMGvo
    Then extract SP Flash Tool to Desktop. Open extracted folder and open flash_tool.exe. Create new folder on Desktop and call it ''magisk twrp sp flash tool'' or something like that and move scatter to that folder. Then go back to SP Flash Tool and load scatter file. Close SP Flash Tool. Now copy/move DA_SWSEC_CRYPTO20.bin (Compatible DA that you downloaded) and replace it to sp flash tool folder. Then open sp flash tool and load DA that you replaced.

    Second Step: Flashing TWRP and Magisk
    Extract twrp to ''magisk twrp sp flash tool'' folder. Rename it to NE1-0-215H-00WW-recovery so SP Flash Tool can recognize it. Turn off your phone. Now open SP Flash Tool, tick recovery, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. Now you have TWRP. Rename NE1-0-215H-00WW-recovery to twrp-recovery.img so you can remember file name.

    If you don't have root, just flash Magisk ZIP with TWRP.
    If you have SuperSU and you want to switch to Magisk, flash unSU script with TWRP which uninstalls SuperSU, then you need to flash stock boot.img. Switch from install zip to install image and click on stock boot.img. Tick boot partition and flash. When it's done with flashing, you can flash Magisk.

    OPTIONAL
    If you are for some reason scared to flash TWRP or don't want to mess with recovery partition, this is step for you.

    Second Step: Flashing Magisk without touching recovery partition
    If you want to switch from SuperSU to Magisk, unroot SuperSU in SuperSU options. Transfer stock boot.img to your device from PC. Go to your phone and install Magisk Manager APK and open it. Click install then click "Patch boot image file" then select stock boot.img then it starts downloading Magisk ZIP and patching boot.img. You will get patched_boot.img in /sdcard/MagiskManager. Now transfer stock boot.img and patched boot.img back to PC and move it to "magisk twrp sp flash tool" folder. Rename stock boot.img to NE1-0-215H-00WW-boot. Turn off your phone. Now open SP Flash Tool, tick boot, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. Close SP Flash Tool. Rename NE1-0-215H-00WW-boot to stock-boot.img and rename patched-boot.img to NE1-0-215H-00WW-boot. Turn off your phone. Now open SP Flash Tool, tick boot, select Download only mode and click Download. Hold power + vol up button at the same time and quickly connect phone to USB. Then it will go to META mode and downloading will begin first with red bar and second with yellow bar. When download completes, green tick/circle mark will appear. TA-DA you have Magisk root. Rename NE1-0-215H-00WW-boot to patched-boot.img so you can remember file name.

    What about OTA?:
    If you want to have OTA updates, remember to flash stock recovery back if you flashed TWRP. With installed update you will not lose:
    - Data (apps, internal storage data)
    - Xposed framework (if flashed directly to system)
    - Xposed modules

    you will lose:
    - Magisk
    - Magisk modules
    - Xposed framework (if you flashed it systemlessly)

    To gain root, just flash Magisk again.

    Comment if links need to be updated.

    Credits:
    @sp flash Tool developers for providing SP Flash Tool
    @blackpanther0582 for nb0 and scatter file
    @Max brackenz for Download Agent
    @mediafire007 for TWRP
    @topjohnwu for Magisk
    @osm0sis for unSU script
    @bigrammy for useful tips
    2
    well it should work for them too, but where to find someone who never unlocked bootloader.
    In theory and put simply as possible it should not work on a never unlocked before device if the LK does it's job properly. :confused:
    The LK does all the checking down the secure boot chain prior to allowing the recovery or boot.img to boot.
    If a device has been officially Unlocked then the LK should write (normally hidden) 1 bite identifiers to partitions like secro, misc, oem, etc etc (Depends on the OEM where and how) so when you flash a new ROM the new LK should still look for these bite's and if it see's them then it will allow the none stock .img's like twrp to boot normally.
    So to sum up
    1. Nokia made a huge screw up and the Nokia 3 is a totally insecure device like most of cheap MediaTek Chinese phone's out there.
    2. The LK knows the bootloader was officially Unlocked before and therefore ignores the secure boot chain.

    I've never unlocked a Nokia (HMD) device bootloader and to be honest, after reading all the issues and problems some have been having trying to unlock their Nokia 3's, I don't think I want to try.

    I am getting very frustrated about the fact my TA 1020 (UK) is still stuck on Android 7.1.1 and the march security update.

    I've tried all the hacks suggested like taking the Sim out and resetting, connecting to Indian vpns and pressing check for updates every hour over a 14 hour period.
    My Nokia 3 is an unlocked (Sim free) version as well.

    Your not the Only one bubba1601 both mine and a friends TA 1020 still have not received the official Oreo update yet. :(
    My Friends phone is 100% pure stock and never been rooted or bootloader unlocked both of us have sim free devices too so not sure why UK users are not getting the update yet. :silly:
    2
    Works in variant TA-1028 on official Oreo. Great guide tnx
    2
    I waited a week for this guide when I saw you talking to each other in the Nokia 3 TWRP thread..
    And when I lost hope that you're going to make the thread I had to break down what you were saying amd make my own way..
    It took me 6 hours to get all the tools and files and figure it out.. :)
    Thank you anyways <3
    2
    did you cleaned Google services data after that?

    Flashing ost will work on TA-1020 right? Now I wonder if that's the reason why the vpn thing has been working for most people. Perhaps since it's the nb0 files are Asian (India and UAE)
    @bubba1601 maybe flashing OST is the only way to go.