Recovery of Xiaomi’s smartphone when software stops responding or the device goes into an endless restart often requires drastic measures. Owners of popular models such as the Redmi 6, Redmi 6A and Mi Play face the need to completely reinstall the operating system. A key problem in 2021 and later became the device’s binding to the Mi service account, blocking standard recovery methods.
The process of firmware via SP FlashTool allows you to bypass many software limitations, but requires strict adherence to the sequence of actions. Errors at any stage can lead to complete inoperability of the gadget or inability to activate it after turning on. Understanding the architecture of the MediaTek processor on which these models are based is critical to a successful result.
This guide describes the firmware reflashing procedure in detail, with a focus on bypassing authorization checks. We will discuss the preparation of the work environment, installing the necessary drivers and working with the firmware utility. It is important to be aware of the risks and strictly follow the technical recommendations, since interfering with the system partition is responsible.
Preparation of equipment and software
Before you start manipulating system files, you need to ensure a stable connection between the computer and the smartphone. For models based on MediaTek, which include Redmi 6 and Mi Play, quality is not limited to the system. USB-Cheap charging cables often don't provide data transmission, which causes the connection to break at a critical point in data recording.
You will need a Windows computer, as the drivers and utility SP FlashTool are optimized for this platform. on macOS or Linux, it is much more difficult to start the process and requires emulation of the environment. Also make sure that the battery charge of the smartphone is at least 50-60% so that the device does not turn off in the middle of the process.
Download the original firmware for your particular model. Redmi 6A versions won't work for a regular Redmi 6, despite the similarities. The firmware files should be in.zip or.tgz format and contain a folder with a system image, usually marked as images.
💡
Use it. USB-ports soldered directly on the computer motherboard (behind the system unit), avoiding front ports and USB-hubs for maximum voltage stability.
Check the integrity of the downloaded files. A damaged firmware archive could cause checksum checksum error, which would interrupt the installation at an early stage.
Installation of MediaTek drivers and setting up the environment
The computer must correctly recognize the smartphone in boot mode. Xiaomi devices on chips MT6762 (Helio P22) need special drivers VCOM and Preloader. Without them, the firmware utility simply will not see the connected device, even if it is in the right mode.
The driver installation process often requires disabling the driver digital signature check in Windows. This is standard for low-level software. After restarting the system, install the MediaTek USB VCOM Drivers driver package.
- 📱 Connect the switched off smartphone to the PC through USB-cable.
- 💻 Open Windows Device Manager and check for new hardware.
- 🔌 If the device is defined as "MT65xx Preloader, drivers installed correctly.
- 🛠 In case of an unknown device, update the driver manually through the Device Manager.
Make sure that antivirus software does not block the work of SP FlashTool. Sometimes security mechanisms mistakenly classify the actions of the firmware as suspicious and interrupt its work.
Bypassing the lock Mi Account and choosing the firmware mode
The hardest part is bypassing your account binding. If the device has enabled Find Device, standard firmware via Fastboot will not remove the activation lock. Using SP FlashTool allows you to rewrite the partitions responsible for authorization, but only with the right method.
In the interface, you need to select Format All + Download mode, which completely clears the device memory, including the frp (Factory Reset Protection) and misc sections, where the binding data is stored. The normal Download Only mode will not affect these areas and will not solve the problem.
⚠️ Note: Format All mode completely erases IMEI and the serial number of the device, unless you use the saved backups NVRAM. Without the data recovery, the phone will not work on mobile networks.
For safe bypassing, it is recommended to pre-backup the NVRAM partition using an engineering menu or special utilities if you have access to the system.
Why is there a mistake? S_BROM_CMD_STARTCMD_FAIL?
If the goal is to simply reflash the system without losing your IMEI, choose Download Only mode, but remember that the Mi Account may remain tied, requiring you to enter a password on the first activation.
Step-by-step instructions for firmware via SP FlashTool
Launch the file. flash_tool.exe The "Download Agent" field must have the file specified by default. MTK_AllInOne_DA.bin. If it's not there, select it manually in the program folder. Then click the "Scatter-loading" button and select the file. MT6765_Android_scatter.txt folder.
☑️ Algorithm of actions before the start
Once you select a scatter-file, you'll see all the memory partitions in the list. Make sure the boxes are in front of all the items, especially the preloader, lk, boot and system. Only tick the partitions you're not sure about, but you'd better flash everything for a complete reset.
Now the most important thing is to plug the phone off. Press both volume buttons (or just one, depending on the modification) and hold them back and plug them in. USB-cable. SP FlashTool should automatically detect the device and start the firmware process, which will herald the progress bar of red, then yellow and purple.
Do not unplug the cable until the green ring is displayed, which symbolizes the successful completion of the process, taking from 3 to 10 minutes depending on the speed of the port and the amount of data.
Compatibility table and typical errors
When working with different versions of the Redmi 6 and Mi Play, you can encounter different error codes, and understanding their meaning helps you quickly diagnose the problem.
| Error code | Description | Probable cause | Decision |
|---|---|---|---|
| S_BROM_CMD_STARTCMD_FAIL (2008) | Team error kick-off | Blocking the loader or drivers | Change the SP version of FlashTool, reconnect the cable |
| S_DA_SEC_BOOTLOADER (3149) | Safe loader | Downgrade firmware attempt | Use the same or newer version of the firmware |
| S_FT_READ_MEM_FAIL (4015) | Memory reading error | Wrong Scatter file. | Check the compliance of the firmware model |
| S_BROM_CMD_CHALLENGE_FAIL (2021) | Authorization error | Account authorization is required | Use an Authorized Account in DA Settings |
Errors related to authorization (e.g, 2021), Often require the use of special patched versions of boot agents (DA), They have a digital signature. MTK_AllInOne_DA.bin You may not pass security checks on new versions of the bootloader.
💡
Successful firmware is not only the absence of errors in the log, but also the correct operation of IMEI, WiFi and Bluetooth after the first turn on.
IMEI's first launch and recovery
When the green ring appears, turn off your smartphone and press the power button. The first run can last up to 10-15 minutes as the system optimizes applications. If the device is stuck on the Redmi or Mi logo, try resetting the recovery settings (Wipe Data/Factory Reset).
If you have used full formatting, check for network availability. Enter *#06#. If IMEI is displayed as "Null" or a string of zeros, you need to restore the NVRAM partition. To do this, select the Format All + Download mode in SP FlashTool, but add the pre-saved NVRAM.img file to the file list, marking only this partition.
- 📶 Absence IMEI Makes it impossible to register online GSM/LTE.
- 💾 File. NVRAM It is unique to each device and cannot be taken from another phone.
- 🔧 Recovery IMEI without backup is possible only in specialized services via abox or Z3X.
Make sure that the touch screen and multi-touch are running after the firmware, and sometimes the touchscreen calibration gets confused and you need to recalibrate through the engineering menu.