How to Unlock Bootloader and Root ZTE Nubia Z60 Ultra

In this guide, we will show you the steps to unlock the bootloader and root your ZTE Nubia Z60 Ultra. This powerhouse of a device was launched a year and a half ago, but can still give many flagships a run for their money. However, for the tech enthusiast, the same old story continues. The stance from the OEM that it wouldn’t let users unlock the bootloader on its devices has left many with no choice but to skip this device as well, similar to how they are doing so with its predecessors.

But a developer finally took matters into its hands and found a nifty workaround [or leaking the engineering abl.img file to be more precise], using which you can now easily unlock the bootloader on your ZTE Nubia Z60 Ultra and carry out subsequent tweaks like rooting via Magisk, flashing custom recovery, flashing custom kernels, among others. So, without any further ado, let’s show you how all of this could be carried out.

  • How to Unlock Bootloader and Root ZTE Nubia Z60 Ultra METHOD 2
  • How to Install Official OTA Updates

How to Unlock Bootloader and Root ZTE Nubia Z60 Ultra

ZTE nubia Z60 Ultra unlock bootloader root - 1

The process will wipe off all the data and might nullify the device’s warranty as well. So proceed ahead with caution and at your own risk, and don’t forget to take a complete device backup as well. Droidwin and its members wouldn’t be held responsible in case of a thermonuclear war, your alarm doesn’t wake you up, or if anything happens to your device, and data by performing the below steps.

sm8650_v1 Device (public codename) (codename)Tested
ZTE nubia Z60 Ultra ( nx721j pq83a01 ) ( cerro )works
ZTE nubia Z60 Ultra Leading Edition ( nx721j pq83a01 ) ( cerro )works
  1. Download & extract Android SDK Platform Tools on the PC.
  2. Enable USB Debugging and OEM Unlocking on your device.
  3. Next up, download the Engineer ABL Package from GitHub.
  4. Once downloaded, extract it inside the platform-tools folder.
  5. Likewise, also install Python and then ‘Add it to Path’ as well.

Now refer to the flashing instructions depending on whether your device falls under sm8650_v1 or sm8650_v2 [see above table].

  1. First off, clone and install https://github.com/bkerler/edl
  2. Then reboot your device to the EDL Mode via the below command: adb reboot edl
  3. Now back up the stock abl file via the below command python3 edl r abl_a stock/abl_a.img –loader prog_ufs_firehose_sm8650_v1_ddr.elf python3 edl r abl_b stock/abl_b.img –loader prog_ufs_firehose_sm8650_v1_ddr.elf
  4. Then flash the engineer ABL file via the below commands python3 edl w abl_a eng_v1/abl.img –loader prog_ufs_firehose_sm8650_v1_ddr.elf python3 edl w abl_b eng_v1/abl.img –loader prog_ufs_firehose_sm8650_v1_ddr.elf
  5. Now reboot your device to Fastboot Mode using the below command or hardware keys python3 edl reset –loader prog_ufs_firehose_sm8650_v1_ddr.elf adb reboot bootloader fastboot flashing unlock
  6. If you get a prompt, use the Volume keys to highlight Unlock the Bootloader and press the Power key to confirm.
  7. Your device will undergo a reset, and the bootloader will be unlocked. It will then automatically boot to the OS.

METHOD 2

  1. First off, download and install Zadig drivers on your PC. After that, download and extract the toolbox on your PC [PASSWORD: xda].
  2. Then enable USB Debugging & OEM Unlocking on the device as well.
  3. Now turn off your phone, press and hold the Volume Up and Volume Down keys, and while holding both the keys, connect your phone to the PC via USB cable. Your device will now boot to EDL Mode [you can also try using the adb reboot edl command to boot to EDL Mode].
  4. Next, open Zadig, select Options, click “List all devices”, select the one that has QUSB_BULK, click Install Drivers, and wait for the drivers to install.
  5. Then open the toolbox, click “Flash ENG Bootloader” for unlocking the bootloader and “Get init_boot” to get the init_boot file for patching via Magisk.
  6. As soon as you click “Flash ENG Bootloader”, it will flash the leaked abl.img file on your device.
  7. Then press and hold the Power button for 10-15 seconds to turn on the phone. Then enable Developer Options from the Settings menu [if it has been turned off].
  8. Now, download and extract Android SDK Platform Tools. Then open Command Prompt inside it.
  9. Then type in the below command to boot your device to Fastboot Mode [make sure to enable USB Debugging beforehand]: adb reboot bootloader
  10. Now use the below command to unlock the bootloader [if you get a prompt, select Unlock the Bootloader via Volume keys and press the Power key to confirm]. fastboot flashing unlock
  11. Once done, you may now boot to the OS via the below command [if it doesn’t happen automatically]: fastboot reboot
  12. Now, verify that the init_boot.img that you have got from the toolbox is from the same firmware that is currently installed on your device.
  13. If that is not the case [or you are not able to verify], then download the currently installed firmware and extract the init_boot.img file.
  14. Now install Magisk and patch this init_boot.img file. Then transfer this file to the platform-tools folder and rename it to pib.img.
  15. Then boot your device to the Fastboot Mode via the below command: adb reboot bootloader
  16. Now type in the below command to flash this patched file: fastboot flash init_boot pib.img
  17. Then use the below command to reboot to the OS: fastboot reboot
  18. It’s recommended to install the Magisk APK as well. Then launch the app and carry out the additional setup [Direct Install], if asked.

How to Install Official OTA Updates

You will only be able to install official OTA updates after flashing the stock abl.img. Here’s how it can be done:

  1. First off, download the same firmware that is currently installed on your device.
  2. Now extract it, and get the abl.img file. Then transfer this file to the platform-tools folder.
  3. Now boot your device to Fastboot via the below command adb reboot bootloader
  4. Then flash the stock abl.img file via the below command: fastboot flash abl abl.img
  5. If you are rooted as well, then you’ll also have to flash the stock init_boot.img
  6. So, get that file from the same firmware above and transfer it to platform-tools.
  7. Then use the below command to flash it: fastboot flash init_boot init_boot
  8. Now use the below command to boot to the OS fastboot reboot
  9. You may now install official OTA updates without any issue.
  • How to Unbrick Red Magic 8 Pro via EDL Mode Firmware
  • How to Convert Nubia Red Magic 8 Pro from China to Global
  • Guide to Unlock Bootloader on Nubia Red Magic 8 Pro
  • Unbrick Nubia Red Magic 6/6 Pro/6R via Fastboot Commands
Google preferred - 2 Google preferred - 3

(Cancel Reply)

Δ