Thursday, February 21, 2008

How to update your unlocked 1.1.2 iPhone, and make it function with 1.1.3 firmware and baseband (3.9 bootloader)

How to update your unlocked 1.1.2 iPhone, and make it function with 1.1.3 firmware and baseband (3.9 bootloader)(PPC & intel Mac)

I took my iPhone which was running 1.1.2 firmware and was unlocked (with anySIM 1.2.1u), and had a 3.9 bootloader and I updated it to run 1.1.3 firmware and 04.03.13_G baseband. This process took about 2 hours to complete.

Attention
You should read my Warning to all iPhone owners page before proceeding.

Step 1.
Plug in the iPhone to iTunes. Click update to install 1.1.3 firmware. Note: If newer firmware should come out at some point in the future, you will have to press Option and click Update to 1.1.3 firmware (which you will already need to have on your computer.)

Various messages will appear as this process continues.

When this has completed you'll see the edit home screen pop up on the iPhone.

The Welcome to your new iPhone screen will display in iTunes.

Step 2.
Now you need to downgrade to 1.1.1 firmware. Download the 1.1.1 firmware directly from Apple here. Do NOT allow your browser to decompress this file. When it is finished downloading you should have a file with a .ipsw extension. This is the firmware file.

Put the iPhone into DFU mode. Do this by pressing and holding both the Sleep/Wake button and the Home button for 10 seconds. At this point the screen will turn black, and the iPhone will appear to be off.

Let go of the Sleep/Wake button and continue to hold the Home button. In approximately 10 seconds iTunes will give an alert sound and a pop up will appear announcing that it has detected an iPhone in recovery mode.

Press the Option key and click the Restore button in iTunes.

A file browser window will open. Navigate to where you downloaded the 1.1.1 .ipsw file earlier. Select that file in the window and click Open.

iTunes will now restore this firmware to the iPhone. Once it has completed you will get an error message. Dismiss it.

You will also get a message.

In iTunes, eject the iPhone and then close iTunes.

Your iPhone should now be displaying a connect to iTunes graphic.

The iPhone is in recovery mode. You must exit recovery mode.

Download the program iNdependence here. With your iPhone still connected to your computer, launch iNdependence to kick the iPhone out of recovery mode. iNdependence will most likely do nothing and display the following. This is normal when downgrading 1.1.3 firmware.

At this point restore to 1.1.1 firmware again. When you are done, launch iNdependence again. This time it will work.

You are now out of recovery mode. You may get a message about an incorrect SIM in the iPhone.

Step 3.
Now it is time to jailbreak the 1.1.1 firmware. You should be at the activate iPhone screen. Slide the emergency slider. Enter the following into the keypad: *#307# then press Call.

The iPhone will ring, press the X button at the top to delete all the characters you just entered. Now enter: 0 then press Call again while it is still ringing. Now press Answer.

Press hold. Press Decline.

You will now be at the iPhone's main keypad.

Press the Contacts button below.

You are now at the contacts screen. Press the + in the upper right corner to make a new contact. Press the First Last button.

Enter A for the first name then press Save in the upper right corner. Now press the Add new URL button.

Enter: prefs: then press Save in the upper right corner. It will take you back a screen.

Press the Add new URL button. Enter http://jailbreakme.com Then press Save.

Press the Save button.

Press the home page prefs: button. You will now be at the Settings screen. Press General.

Press the Auto-Lock button. Now press Never.

Then go back to the Settings screen. Press the Wi-Fi button. Select your network from the list.

Enter your password and press Join. You should now be connected to your Wi-Fi network.

Press the Home button and you will be taken back to the activate iPhone screen. Slide the emergency slider again. Enter: 0 then press Call.

Now press Answer. Press hold.

Press Decline. You will now be at the contacts screen again. Press the A button.

Press the home http://jailbreakme.com button.

Here's the jailbreakme.com website. Scroll down the screen. Press the Install AppSnapp button. Safari should crash after a few seconds.

Once Safari crashes it will send you back to the activate iPhone screen. Wait about 20 seconds and the slide to unlock animation should freeze, then the iPhone will reboot. You'll see the Apple logo, then you will be at the screen with the slide to unlock slider again. Slide it and you will be at the SpringBoard.

You will now have access to the SpringBoard. The iPhone is now jailbroken and activated.

Step 4.
Launch the Installer. Press the Install button at the bottom, then scroll down to the Sources folder and press it. Install this.

Install Community Sources. Go to the Tweaks (1.1.1) folder and press it.

Install OktoPrep.

Step 5.
Launch iTunes and connect your iPhone. Since 1.1.3 firmware (or even newer) is available, you must ensure that you have already downloaded 1.1.2 firmware and saved it on your computer. This is an .ipsw file. Download 1.1.2 restore firmware here. Press the Option button on your keyboard and click Update.

A file browser window will appear. Navigate to where your 1.1.2 firmware file is, select it and click Open.

If you did this correctly you will see an updating message, and not a restoring message. Various messages will appear as the process continues.

Once it has completed you will get an error message. Dismiss it.

You will also get this message.

When the update completes, you'll see this screen in iTunes. You'll see this on the iPhone. Eject the iPhone from iTunes, then close iTunes.

Launch iNdependence to get the iPhone out of recovery mode.

Step 6.
Download the 1.1.2 jailbreak program here.

Double click the jailbreak.jar file.

This is the 1.1.2 jailbreak program. Click the Jailbreak! button.

A pop up will appear with a status bar, and several messages will appear. It will take about 6 minutes to read, patch and write data back to the iPhone.

A pop up will appear telling you to reboot the iPhone. It will reboot once on its own.

iTunes should recognize your iPhone.

You are now jailbroken and activated on 1.1.2.

Step 7.
Press Settings, General, Auto-Lock, and set it to Never. You should now plug in your iPhone to a power source as the next step could take up to an hour.

Step 8.
Launch the Installer and update the Installer.
When it has finished installing it will leave you at a blank Update page, so press the Home button. This will restart the SpringBoard and bring you back to the slide to unlock screen. Launch the Installer again. Go to the System folder and install the Official 1.1.3 Upgrader. Read the pop up message and click OK.

Press the Home button to reset the SpringBoard and slide to unlock to get back to the SpringBoard. You should now see a new icon: Upgrade. Launch it. At the patch lockdownd question, press Yes if you DO NOT use AT&T, or O2, or any other authorized Apple cell phone service provider. Press No if you do use an Apple authorized cell phone service provider. For most of us hackers out there, we do not use iTunes to activate our iPhones so you should press Yes.

You will then be asked if you would like to restore your iPhone first. If you performed a fresh jailbreak on 1.1.2 just to update to 1.1.3, then select No since your iPhone has nothing on it right now. If you have been using 1.1.2 for a while and have added applications and data (and don't mind losing it) then you should probably choose Yes to avoid any conflicts with this jailbreak. You will see a progress display for several processes.

Note: if your iPhone gets stuck at a message, Attempting to reboot, give it a minute then press and hold the Sleep/Wake button and the Home button until the screen turns black. Then press the Sleep/Wake button again. It will stay on the Apple logo for a minute and then bring you to the slide to unlock screen. The edit home screen pop up will appear next.

Step 9.
Launch the Installer and update it. Press the Install icon at the bottom and go to the Sources folder. Then install Community Sources.

Now go to the System folder and install BSD Subsystem and Term vt-100.

Back at the System folder, install OpenSSH. Now press the Sources icon at the bottom. Press Edit, then press Add which will appear in the top left corner.

Enter trejan.com/irepo and press OK. It will refresh the sources. When it completes, press Done, then press Refresh to reload the sources again. Press the Install icon at the bottom, and scroll to the Tweaks (1.1.3) folder and install the SUID Lib Fix.

Go to the Tweaks folder and install the BSD Subsystem 2.0 Termfix. Press the Home button when done. This will relaunch the SpringBoard.

Step 10.
You need to determine your iPhone's IP address. Press Settings, W-Fi (you should already be connected to your home network), you will then see your network's name in the Choose a Network... section. Press the blue arrow to the right of the name. In my example, my IP is 10.0.1.6.

Step 11.
Download Fugu here.Launch the program. Enter your IP in the Connect to box, enter root in the Username box, enter 22 in the Port box, and enter / in the Directory box, then click Connect.

At this prompt click Continue.

You will then be prompted for the password which is "alpine". Click Authenticate.

In the right side window, double click the usr folder. Then double click the bin folder. You should see this now.

Click the New Folder icon and name the directory "ipsf". Make sure the Remotely button is selected, then click Create.

Download this file. Decompress it and navigate to where you put this file in the left side window of Fugu. Then copy all the files over to the /usr/bin/ipsf folder.

Launch the Terminal on your Mac. Log in with the command

ssh -l root [your IP address]
alpine

Then enter:

cd /ur/bin/ipsf
chmod 777 *

Step 12.
Launch the Terminal on your iPhone. When prompted for a password enter "alpine".

Now enter:

cd /usr/bin/ipsf
./ipsf.sh

Code will fill the screen and scroll by for about five minutes. When it completes you'll have a new icon on your SpringBoard called Signal. If you do not see signal bars and your carrier name appear, launch Signal. After a minute it will send you back to the SpringBoard and your signal bars should appear.

I checked my AT&T SIM first, then my T-Mobile.

Make sure to try the locate me feature in Maps.

You should log back into the iPhone with Fugu and backup your ipsf directory, as there will be several new files in there that have critical backup data on them for your particular iPhone. Keeps these files in a safe place.

No comments: