DA, SLA and Auth File on MediaTek: what they are and how to clear the error
DA, SLA and Auth File are key concepts when working with MediaTek. If you see DA download fail, SLA, or STATUS_SEC_AUTH_FILE_NEEDED, the phone is protected and will not accept a plain loader.
What a DA (Download Agent) is
A DA is a small loader the service tool sends to the phone in BROM mode. The DA then performs partition reads and writes. Without a successful DA load, the operation will not start.
What SLA and DAA are
SLA (Serial Link Authentication) and DAA (Download Agent Authentication) are MediaTek protections. They require the DA to be signed and accompanied by authorization. On protected chips the phone rejects an unsigned DA — hence the errors.
What an Auth File is
An Auth File authorizes the DA load and operations on a protected model. Service tools have their own authorization for supported models, so they connect where plain SP Flash Tool reports Auth File needed.
Typical errors and meaning
| Error | Meaning | Fix |
|---|---|---|
| DA download fail | DA did not load | signed DA / service tool |
| STATUS_SEC_AUTH_FILE_NEEDED | authorization file required | a tool with model support |
| SLA / DAA error | authentication failed | bypass in a service tool |
| BROM error 2005 | phone did not answer start | connection issue |
Why SP Flash Tool is not always enough
SP Flash Tool with a plain DA works on older unprotected chips. On modern MediaTek (recent Helio G, Dimensity) SLA/DAA are on, and a plain DA is rejected. Service tools use their own signed DA and authorization, so they connect to protected models.
Step-by-step fix
- Identify the chip by model code.
- Install MediaTek VCOM, disable signature enforcement if needed.
- Enter BROM: Start, both volume keys, cable.
- If you see SLA/DAA/Auth File, use a service tool with model support.
- Check the model is in the tool list.
Telling protection from connection problems
If the phone does not enter BROM at all (no MediaTek USB Port), it is a connection problem: driver, cable, order, test point. If BROM is reached but SLA/DAA/Auth File appears, it is protection, needing a bypass in a service tool. Do not confuse them.
Why no universal Auth File works
An Auth File is tied to a specific protection and model. There are no universal forum files for modern chips: they either do not fit or are dangerous. The right path is a tool that officially supports your model and has its own authorization.
MediaTek diagnosis order
- Check the chip by model code.
- Install VCOM and reach BROM (MediaTek USB Port).
- No port means a connection issue: driver, cable, order, test point.
- Port present but SLA/DAA/Auth File means use a service tool with model support.
- Check the model list and server status.
Why protection keeps growing
Makers enable SLA/DAA to hinder unauthorized flashing and lock bypass. So with each MediaTek generation the plain SP Flash Tool path works less often, and the share of jobs needing a service tool with authorization grows. It is a normal trend, not a broken phone.
What not to do
- do not hunt for a universal Auth File on forums — it will not help and may harm;
- do not flash someone else's DA for a bypass;
- do not run two tools at once.
Real-world example
A phone on Helio G99 gave STATUS_SEC_AUTH_FILE_NEEDED in SP Flash Tool, as expected for a protected chip. A service tool with model support passed authorization and connected to BROM with no extra files from the user.
Glossary
- DA — Download Agent, the operations loader.
- SLA/DAA — MediaTek protections.
- Auth File — authorization file.
- BROM — MediaTek boot ROM.
Which tool fits
For protected MediaTek: TSM Tool Pro rental, UnlockTool rental, Cheetah Tool Pro rental. Check the model in the list before paying.
Bottom line
A DA is the operations loader, SLA/DAA are the protection, and an Auth File is the permission. On modern MediaTek a plain DA is rejected, so you need a service tool with model support, not plain SP Flash Tool.
Link to error 2005 and modes
DA/SLA/Auth File errors come after entering BROM, while error 2005 is at the entry itself. First get a stable BROM entry, then address protection with a service tool. Separating these two stages finds the cause faster.
Future tip
Remember the chain: no BROM port means a connection issue; BROM reached but SLA/DAA means protection, needing a service tool with model support. This logic covers most MediaTek cases.
What not to do
- do not search for a universal Auth File on forums;
- do not flash someone else's DA for a bypass;
- do not run two tools at once.
FAQ
- Can I disable SLA? — the user cannot; a service tool bypasses it for supported models.
- Why no error on an old phone? — older chips without SLA/DAA accept a plain DA.
FAQ
What is a DA?
Download Agent — the loader a tool sends to the phone in BROM for operations.
What are SLA/DAA?
MediaTek protections requiring a signed DA and authorization to write.
What does Auth File needed mean?
The phone needs an authorization file; a plain DA will not work on a protected model.
Why will SP Flash Tool not connect?
Protected chips need a bypass that plain SP Flash Tool lacks.
Where do I get a signed DA?
It is inside a service tool with model support; no need to find it separately.
Are all new MediaTek protected?
Most current Helio G and Dimensity, yes.