Discuss Tutorial: Jailbreak/Activate/Unlock a 1.0.2 or 1.1.1 iPhone using IPSF at the iPhone "2G" (Rev. 1) - Hackint0sh.org; Hey all I just wrote a huuuuge post containing step by step instructions on how ...
Tutorial: Jailbreak/Activate/Unlock a 1.0.2 or 1.1.1 iPhone using IPSF
Hey all I just wrote a huuuuge post containing step by step instructions on how to handle the upgrade and everything IF YOU USE IPHONESIMFREE (only).
Check it out at http://iphoneunlocked.mostofmymac.co...c.php?f=9&t=62 or below...
Here's the quick and dirty on how I took my Virgin 1.1.1 iPhone through the jailbreak, activate and unlock process to have a fully unlocked and functioning 1.1.1 iPhone with iPhone Sim Free. This guide is for MAC USERS ONLY (sorry, I have no PC)
NOTE: 1.1.1 JAILBREAK AND ACTIVATION GUIDE FROM IPHONE DEV TEAM: http://www.hackint0sh.org/forum/showthread.php?t=10622
YOU NEED ALL FILES FOUND AT http://tinyurl.com/254sse PLUS EVERYTHING LISTED IN THE README INSIDE THE ZIP FILE THERE. ALSO RECOMMENDED IS iNdependence from http://code.google.com/p/independence/.
NOTE 2: THIS *SHOULD* WORK REGARDLESS OF A FRIED BASEBAND, ANYSIM UNLOCK, ETC. YOUR MILEAGE MAY VARY!
** IF YOUR IPHONE IS 1.0.2 FIRMWARE, JAILBREAKED AND ACTIVATED, SKIP TO STEP 1.0
**Step 0.1: You must jailbreak and activate your iPhone with 1.0.2 software. If you have a 1.1.1 iPhone:
0.1.1. Make sure you have a copy of the v1.0.2 firmware handy. It can be downloaded here: http://appldnld.apple.com.edgesuite....8_Restore.ipsw
0.1.2. With the iPhone turned on, hold down the POWER and HOME buttons simultaneously for ten seconds (until the screen goes dark). Then release POWER while CONTINUING TO HOLD DOWN HOME for another 15 seconds.
At this stage, the iPhone WILL APPEAR TO BE POWERED DOWN, but it is actually in a special type of recovery mode allowing software downgrades. If you see the "Connect to iTunes" icon, you've placed the phone into the wrong recovery mode, and will need to try again.
0.1.3. While continuing to hold HOME, launch iTunes. You should be prompted to restore your iPhone. If your iPhone instead boots up, then you powered it down instead of putting it into downgrade mode, so give step 2 another try.
Once iTunes is up, you can now release HOME. You will be prompted to restore your iPhone (if you are not, try step 2 again). Hold down the OPTION key (or SHIFT if you're running Windows) and click RESTORE. You will then be prompted with a file selection window allowing you to select a firmware file. Select the 'iPhone1,1_1.0.2_1C28_Restore.ipsw' file you downloaded in step 1, and begin the restore.
0.1.4. After the restore is complete, you'll be told that the process failed, and the iPhone will be in recovery mode. This is normal. Grab a copy of NullRiver's Installer.app from http://iphone.nullriver.com/beta/ and attempt to install the Installer.app. This will cause your phone to boot again, however the installation of Installer.app will fail (it's OK).
0.1.5. Congratulations, you're now back at 1.0.2. You'll need to get shell access to move onto the next step. Since you have Installer.app right there, just run the installer again. This time it should succeed. Now load up iNdependence and activate. After you are activated, check to ensure that you are still Jailbroken. If not, Jailbreak the phone again. If there's any issues, unplug the phone, reboot the phone and plug it back in. Ensure iTunes and iTunesHelper processes are killed.
Drudge has prepared a package called Trip1Prepz, which is designed for people having to downgrade. It will perform all the necessary preparations from STEP 1 without needing to set SSH back up, etcetera.
**Step 1.0: IF YOUR PHONE WAS ALREADY 1.0.2 FIRMWARE, JAILBREAKED AND ACTIVATED OR YOU ARE NOW FINISHED WITH THE ABOVE STEPS, INSTALL APPTAPP: http://iphone.nullriver.com/
After Installer.app has been installed, go to Installer and install the BSD SubSystem (this seems to prevent Safari from giving you a download error). Once it is installed, you are going to install the iPhoneSimFree Installer:
Here is how to get SimFree.app on to your iPhone by using AppTapp Installer.
1) Run Installer.app from your iPhone and select to install "Community Sources" from the list
2) Open Mobile Safari from your iPhone and go to http://tinyurl.com/2uj9mc
3) You will get a notice asking you to add the iPhoneSimFree repository to your Installer. Just accept and Installer will open. Click "refresh" and you will now have SimFree.app in the * iPhoneSimFree * on the top in Installer
4) Select it and Install!
Return to SpringBoard and run the SimFree Application through this tutorial: http://www.iphonesimfree.com/cgi-bin...?page=tutorial
Note that it's best to power down, remove any SIM card, power up, load the SimFree application and then put the SIM you want the phone to use (i.e. your T-Mobile, Vodafone, Rogers, etc. SIM, not the AT&T one that came with your iPhone) in and click the big logo in the middle to start the process.
Once the unlocking is complete (if there's an error, stop here until you can fix it! Check the tutorial at the link above!!), remove your SIM and reboot again with the AT&T SIM that came with the phone, or no SIM if you haven't got one. Then, go to this URL in Safari: http://conceitedsoftware.com/iphone/beta
This will prompt you to add a community source to Installer. Once you've done this, you should see Trip1Prepz listed as a package. BEFORE INSTALLING IT, connect to iTunes, and ensure that you have an 'update' or 'check for updates' button. This is important, because once you install Trip1Prepz, iTunes will no longer give you an option to update, but only restore.
Once you're up in iTunes, stay connected and install Trip1Prepz from Installer.app.
**NOW, REFER TO THE README INCLUDED WITH THE DOWNLOADED DEV TEAM 1.1.1 JAILBREAK FILES UP UNTIL "STEP 5: ACTIVATING WITH A NON-AT&T SIM" - THEN FOLLOW THE GUIDE BELOW:
STEP 5: ACTIVATING WITH A NON-AT&T SIM (NOTE: YOU SHOULD ALREADY BE LOGGED IN THROUGH SSH TO YOUR IPHONE. IF YOU'RE NOT, FIRE UP TERMINAL AND SSH root@(your iphone IP address) - THE PASSWORD IS "alpine" WITH NO QUOTES)
First: INSERT YOUR NON-AT&T SIM (whatever SIM you used in the SimFree application earlier!!)
To activate with a non-AT&T SIM, we'll need to copy over that lockdownd binary and activation certification we backed up when we were on v1.0.2 (this was automatically backed up by Trip1Prepz) and do a little hackery, then copy the v1.1.1 lockdownd back when we're done.
NOTE: DO NOT REBOOT DURING THIS PROCESS!!! In order for afc to start, you must BOOT the phone with lockdownd v1.1.1, so do not reboot the phone during this process. If you have no choice, copy lockdownd v1.1.1 back after, then reboot again to make sure afc comes up.
From the SSH connection to your iPhone (from SSH means from the SSH connection, from your Mac means run it through Terminal locally!!)
1. Back up v1.1.1's lockdownd:
(from SSH) cp /usr/libexec/lockdownd /var/root/lockdownd.1.1.1
Now overwrite the iPhone's copy with your old v1.0.2 copy:
(from SSH) cp /var/root/lockdownd.1.0.2 /usr/libexec/lockdownd
And upload the certificate included in the 1.1.1 Jailbreak zip:
(from terminal on your Mac) scp iPhoneActivation.pem root@[IPHONE IP]:/System/Library/Lockdown/
Now back to SSH:
(from SSH) killall lockdownd
This will restart lockdownd with v1.0.2's version
2. Download iASign from http://iphone.fiveforty.net/wiki/index.php/IASign
tar -xf iASign-v0.2.tar
Overwrite iASign's iPhoneActivation.pem with the one provided in this package
(from your Mac) cp /path/to/1.1.1-jailbreak/iPhoneActivation.pem /path/to/iASign/bin/
Now run: ./iASign.mac --automatic iPhoneActivation_private.pem
After a while, it should complete and say "New State: Activated", but it
doesn't really work. Don't worry, we're almost there!
3. Now copy the v1.1.1 lockdownd back and restart it:
(from SSH) cp /var/root/lockdownd.1.1.1 /usr/libexec/lockdownd
(from SSH) killall lockdownd
*** STOP HERE! In the README included with the 1.1.1 jailbreak it asks you to run iASign again but I didn't need to. You should see that you get your signal bars in the top left corner, and you should be able to use the phone, activated and unlocked! Remember your iPhone is already unlocked to the SIM you used earlier with the SimFREE application.
STEP 6: PATCHING SPRINGBOARD
The new version of SpringBoard has been hard-coded to allow only factory
applications to run. We've coded up a patcher that will fix this "bug",
and back up your original SpringBoard app.
1. Upload the springpatch binary included with this distribution:
(From your MAC) scp springpatch root@[IPHONE IP]:/usr/bin
Then SSH into your iPhone and run it:
SpringBoard Patcher for iPhone v1.1.1
Brought to you by the iPhone Dev Team
Successfully patched /System/Library/CoreServices/SpringBoard.app/SpringBoard
Original backed up to:
Please reboot your iPhone or kill springboard for changes to take effect.
NOW REBOOT THE PHONE! Hold power for a few seconds, move the red slider, power off and then power back on.
You should now be completely activated, jailbreaked, unlocked and throwing yourself a huge party.
IF YOU WANT INSTALLER.APP (which of course you do!):
1) ssh root@(your iphone ip address) and run the below commands:
1a) cd /Applications/Installer.app/
2) Installer should fire up on your iPhone. The first thing you want to do is fix SpringBoard to enable you to have all the apps in there, so install the package "Trip1PogoStick"
3) Installer and any subsequent apps you install should show up on your SpringBoard!
(note: if Installer isn't in your Applications folder, download the Apptapp Installer package, right click, show package contents, go to Contents/Resources, drag Installer to your Desktop and then 1) scp -r Installer.app root@(your iphone ip address):/Applications/)
That's it folks! Some apps work, some don't, SummerBoard is currently busted. Good luck with things and if you didn't manage to get all this done, post here and I will try to swing by and answer it.
Obviouz - 1.1.1 Jailbroken, Activated, Fully Unlocked on Rogers Wireless and a Happy iPhoneSimFree Customer!!
Last edited by obviouz; 10-12-2007 at 03:04 AM.
thanks a lot for this guide , i needed it real bad
fixed a small error in the Installer.app post! And you're welcome, good sir!
Obviouz, I'm stuck on the activation process. Have tried both the single and double iAsign approach. In either case my operator's name appears, however my iPhone remains blocked at an Activate iPhone screen. My phone claims to be connected to my operator's network, but if I call the phone I go directly to my VM. Suggestions?
Snowbird, try this:
1) From the Activate iPhone screen, ensure you have your non-AT&T sim card in the slot
2a) cp /path/to/1.1.1-jailbreak/iPhoneActivation.pem /path/to/iASign/bin/
2a1) scp iPhoneActivation.pem root@[IPHONE IP]:/System/Library/Lockdown/
2b) SSH to the phone and:
cp /usr/libexec/lockdownd /var/root/lockdownd.1.1.1
cp /var/root/lockdownd.1.0.2 /usr/libexec/lockdownd
2c) from your iASign directory run:
./iASign.mac --automatic iPhoneActivation_private.pem
2d) then from your SSH run:
cp /var/root/lockdownd.1.1.1 /usr/libexec/lockdownd
Now - what does your iPhone screen look like / say? For me as soon as I killall lockdownd the phone goes from "Activate iPhone" to the green battery and I can use the phone
Last edited by obviouz; 10-12-2007 at 03:48 AM.
What is this Windows distribution package mentioned in the Dev Team's instructions and where can I download it?
Believe you missed a step after the downgrade of lockdownd
Originally Posted by obviouz
upload the certificate included in this distribution:
scp iPhoneActivation.pem root@[IPHONE IP]:/System/Library/Lockdown/
Perhaps the version of the PEM that was included in my package was not the good one? I'm showing 1537 bytes?
you're right, i missed it
and i have the same file 1537 bytes.
I would suggest just doing a full 1.0.2 restore and starting over, you just never know.
By Unlock in forum Genius Bar - HowTos, Guides and Tutorials
Last Post: 12-02-2012, 10:31 AM
By kkdool in forum iPhone "2G" (Rev. 1)
Last Post: 02-20-2008, 05:20 PM
By igu13 in forum iPhone "2G" (Rev. 1)
Last Post: 02-11-2008, 11:05 PM
Last Post: 10-15-2007, 06:58 PM