[Red Magic 8 pro] ghettiguru:
**Edit, I ran across this looking for something else it just might help you if you didn't find it already I'll leave my rent down there just in case though voice typing this morning on the way to work

Thread 'FIX fingerprint - rm8p series - nx729j' https://xdaforums.com/t/fix-fingerprint-rm8p-series-nx729j.4615331/

Lol, if you meant that you did relock the bootloader and it's still failing for CTS all I can say is make sure you format data all the way and relock it one more good time if it does the same thing you're going to have to do what Media teck crap makes you do.. a couple random horrible devices I had laying around I would root just to get refer installs of mega for more storage or whatever, and just because you couldn't do anything like for instance there's an app on the Play store one of the very few vpns that can get around like the hardcore DNS live monitoring going on with something like assurance wireless, when my girlfriend was pregnant like 8 years ago she had one of these and they do not allow for connecting to a VPN but it was a government issued phone and it was completely free and unlimited.. put the monitoring is insane, even coming here to XDA to look for root or guides around it one on that device would find them blocking XDA from me for about 2 hours. So they're like live watching you, they're watching your every move selling it to the highest bidder all your data, your demographic, where you're from your age you're everything, what purchases you make what sites you frequent, that's how they make money, and that's why they're not allowing any vpns. The only way I have found and I tried many many ways is either DNS crypt 2 proxy and going out through about a thousand different anonymizers, which the initial setup it'll take something like an hour before it'll connect but after that it connects instantly. Or number two is something like TLS tunnel or the only other one I found is windscribe VPN, we'll both allow you to connect over Port 80, your standard HTTP internet port they can't block that. That's why TLS tunnel is so popular in all these VPN unsafe countries like mainland china, like especially with the DNS plug-in it's got no choice it's going to hard tunnel through DNS server and then out through Port 80 and it's got to connect. But that app being used to bypass captive portal and get free internet in many countries as well is very locked down. Looks for any form of developer options or unlocked bootloader until magisk Delta came along, root/unlock couldn't be hidden from.. leaving to buy it legit literally you cannot hit the purchase button from a brand new out of the box Media tek because of those anti fastboot patched bootloaders detectors unlocked even though I just took it out of the box brand new. They leave you no choice but to do what they're protecting against and go with root unlocked but hiding it as you can hide it with various safety net patches and bootloader spoofer exposed and a lot of stuff depending on your device. Developer options hide exposed and why not I mean they're leaving you with the only option out is to go with what they're trying to protect against I know it's not what you want to hear but at least if you're rooted you can use a fingerprint and pass CTS from a fingerprint with another device with something like XML a road to vendor apps or magisk hide props config modules, safety net patches ECT..good luck . And I hope I don't face this because I was wondering if I could do what the pixels do with kernel su, if you can get the OTA update zip you can make a custom certificate and relock your bootloader with root fully in there and pass... But if there's going to be CTS troubles I suppose I can fix it as I'll have root. 🤷‍♂️