[xsemaphorex]

@bernatpujol - I've updated tinytss. go back to my site and download version 217. You have uncovered a fairly annoying bug. Thanks

[jennw2n]

Hey,

I was on
MAC
3.1.2
5.11.07
ECID SHSH on file with Saurik (3.0)

I tried to follow the tutorial, but what i have now is a 3.0 3gs with baseband 5.11.07 still. Trying to unlock, please let me know what you guys think.

Thanks

[L00i3]

Originally Posted by jennw2n

Hey,

I was on
MAC
3.1.2
5.11.07
ECID SHSH on file with Saurik (3.0)

I tried to follow the tutorial, but what i have now is a 3.0 3gs with baseband 5.11.07 still. Trying to unlock, please let me know what you guys think.

Thanks

There is no unlock solution since your baseband got updated. Maybe there will be eventually, but no guarantees.

[RGee]

so i cant downgrade/restore to 3.0 because cydia has my 3.1 ECID stored instead of 3.0
so im just curious why would cydia saved my 3.1 and not 3.0?

[yngdiego]

Originally Posted by RGee

so i cant downgrade/restore to 3.0 because cydia has my 3.1 ECID stored instead of 3.0
so im just curious why would cydia saved my 3.1 and not 3.0?

Because there was only a windows of a few days where Apple was signing 3.0 and Cydia had the ability to store your SHSH file. Apple stopped signing 3.0, so it's impossible to get that on file.

[baybarsturan]

Firstly, I did successfully restore process with using Saurik's server.

Now, I tried this method and I did successfully restore process with my verification server.(for future problems when Saurik's server down)

I have iPhone3GS ver 3.0 with baseband 04.26.08 and backedup my ECID SHSH via Cydia. So, Cydia says "This device has a 3.0 ECID SHSH on file."

My operating system is Windows 7 Ultimate - 32 bit.
My java version is version 6 update 16.
My iTunes version is 8.2.1.6

During restoring process, there was no any error code.
Just successfully restored. Thanks for this personal verification server explanations.

[Kapolani]

Hello -

I have 3.0 ECID SHSH on file with Cydia.

I also downloaded umbrella and captured my shsh files.

I'm curious though:

I can get shsh files when I select 3.0 and 3.1, but I can't get anything when I select 3.0.1.

Why is that?

Does this mean that I can restore to 3.0 and 3.1 at anytime, but not 3.0.1?

Thank you.

[cls0711]

My iphone says "This device has a 3.1 ECID SHSH on file" what does that mean for my iphone which has 3.0.1 version carrier version 4.0.

Originally Posted by iGuru

For anyone interested, i've just written a 710 word article about how the iTunes restore verification system works. You can access it via iGuru's Articles and you will need a PDF viewer to read it, until I get round to making a HTML version too.

---

This guide explains how to use Umbrella and TinyTSS by Semaphore to create your own 3GS restore verification server.

First of all, let's get something straight.

It is not possible to downgrade/restore your iPhone 3GS to 3.0/3.0.1 unless you backed up your 3.0/3.0.1 ECID SHSH via Cydia.

So unless it says "This device has a 3.0 ECID SHSH on file." when you open Cydia (or 3.0.1) at the top of the web page above "Welcome to Cydia" you will only be able to back up your 3.1 ECID SHSH

The random blog/website article/whatever that you happened to find on Google will not work. Sure, it might have when Apple were still allowing you to restore to 3.0/3.0.1, but they are not any more. There is currently no known way around this. Sorry.

Background

Ok, no doubt you guys have heard that Saurik recently started collecting ECID SHSH's via Cydia.

All well and good, but what happens if it's down when you need to restore? That's where two tools by semaphore (known as xsemaphorex on this forum) come in. Combined you can not only get your ECID SHSH files, but setup a server on your computer that will allow iTunes to verify restores to previous versions.

The majority of people will use this to back up their ECID SHSH for 3.1, to be able to go back to it if they update to 3.1.2/3.2 when 3.1 restores stop getting signed by Apple.

However the lucky few that backed up their 3.0/3.0.1 SHSH using Cydia will be able to restore back to 3.0/3.0.1 - if you have, when you start Cydia it will say "This devices has a 3.0 ECID SHSH on file." (or 3.0.1 instead of 3.0) at the top of the Cydia webpage on start up.

Prerequisites:

Mac users will already have Java 1.5 or later on their system, and do not need to download anything extra.

Windows users will need to download and install Java Runtime Environment 5 or higher if you do not already have it installed on your system.

You can check this by: Start -> Run -> cmd.exe and then typing: java -version
If it is Java Version 1.5 or higher, you're good to go - if not, download and install Java from the link above.

Howto:

Ok, so first things first, you will need your iPhone 3GS ECID.
If you already have this, skip to Part 2.

Part 1 - Getting your ECID:

Put your iPhone 3GS into Recovery mode - switch it off, hold down the Home button, and plug the USB cable in. When it shows a picture of the iTunes logo and a USB cable, stop holding down home.

Windows:

1) Download USBView
2) Start USBView on your PC.
3) In “options”, check off ”config descriptors” (enable).
4) Hit F5 on your keyboard to refresh.
5) Scroll down until you see ”Apple Recovery (iBoot) USB drive”, and click on it.
6) Look for ECID in right navigation pane.
7) Copy the 16 digits that follow the ECID.

Mac:

1) Open System Profiler.app (In Applications -> Utilities)
2) Click USB and select the iPhone from the list, it will show the ECID there.

To get out of recovery mode, simply hold down Home + Power until your phone reboots.

Part 2 - Getting your ECID SHSH

Windows Users: Make sure you have Java Runtime Environment 5 or higher installed.

Download Umbrella and extract to desktop.

1) Double click umbrella.jar
2) Enter your ECID in the box provided
3) Select Device Version from the list
4) Select SHSH Repository from the list
5) Click Submit

A file ending in ".shsh" should appear in the folder.

Check your shsh file is approx 64-66 KB, if it is not, it is not a valid ECID SHSH file.

Note: If you wish to get your 3.0/3.0.1 SHSH file from Saurik's server, make sure to select "Saurik - Cydia" from the SHSH Repository list.


======== You have now backed up your ECID SHSH, you can stop now unless you need to restore ========


Part 3 - Using TinyTSS to Restore

Windows:

1) Find the shsh file you want to use (e.g. 1111111111111-iphone-3.0.shsh for 3.0)

2) Open cmd.exe and cd to the fw-umbrella-semaphore directory (cd Desktop/fw-umbrella-semaphore)

3) Important! Disable any other servers using port 80 (usually webservers). TinyTSS needs to use it to create it's mini-webserver.

4) If you installed 32bit Java type: tinytss.exe -f 1111111111111-iphone-3.0.shsh
If you installed 64bit Java type: tinytss64.exe -f 1111111111111-iphone-3.0.shsh
Where 1111111111111-iphone-3.0.shsh is the name of the shsh file you want to use.

Now you need to edit your etc/hosts:

1) Start -> Run -> C:WindowsSystem32driversetc
2) Right click "hosts" and click "Open" when the Open With box appears, select Notepad
3) Comment out 74.208.105.171 gs.apple.com if it exists by putting a # in front so it looks like:
#74.208.105.171 gs.apple.com
4) Add this to a new line at the bottom: 127.0.0.1 gs.apple.com
5) Save the file

Open cmd.exe, and run ping gs.apple.com
It should respond:

Pinging gs.apple.com [127.0.0.1] with 32 bytes of data

If it does not say [127.0.0.1] you've not set hosts correctly, if it does, you can go ahead and restore to the version that matches your SHSH files using iTunes (See Part 4)

Mac:

1) Find the shsh file you want to use (e.g. 1111111111111-iphone-3.0.shsh for 3.0)

2) In Terminal.app type: cd Desktop/fw-umbrella-semaphore

3) Important! Disable any other servers using port 80 (usually webservers). TinyTSS needs to use it to create it's mini-webserver.

4) Run: sudo java -jar tinytss.jar -f 1111111111111-iphone-3.0.shsh
Where 1111111111111-iphone-3.0.shsh is the name of the shsh file you want to use.

Now you need to edit your etc/hosts:

1) Open Terminal.app (In Applications -> Utilities) and do: sudo nano /etc/hosts
2) Comment out 74.208.105.171 gs.apple.com if it exists by pressing the down arrow until you get to it, then by putting a # in front so it looks like: #74.208.105.171 gs.apple.com
3) Press the down arrow until you get to the bottom (empty) line
4) Type: 127.0.0.1 gs.apple.com
5) Press Ctrl + O, press enter, then Ctrl + X.

In terminal run ping gs.apple.com
It should respond:

Pinging gs.apple.com (127.0.0.1) with 56 bytes of data.

If it does not say (127.0.0.1) you've not set hosts correctly, if it does, you can go ahead and restore to the version that matches your SHSH files using iTunes (See Part 4)

Part 4 - Using iTunes to downgrade

Please Note: The downgrade process currently seems to fail if you are running Windows 7. Please try using a different machine/operating system to downgrade.

After checking the server is running, and gs.apple.com resolves to 127.0.0.1 as explained above, open iTunes 9
Note: 9.0.1 works fine, and I would recommend updating to 9.0.1 if you have not already.

Now we need to enter DFU Mode to downgrade.

1) Plug up iPhone to computer.
2) Switch your iPhone off.
3) Hold power and home together for *exactly* 10 seconds
4) Release power but keep holding home until the pc beeps as a USB device is recognized.
Note: At this point nothing should be showing on the screen - if you see a picture of the iTunes logo and a USB cable, you did it wrong so try again.
5) When iTunes opens and tells you your phone is in Recovery mode, hold down shift (Windows) option (Mac) then click Restore.
6) Now browse to the firmware you need to restore.
7) After selecting it, click Open.

If you are restoring from 3.1 with the 04.26.08 baseband the restore should complete successfully and you can ignore the bit about the error (1015) you do not need to restore twice, just go ahead and jailbreak as explained below.

If you are downloading from 3.1 with the updated (05.11.07) baseband, you need to use the above method to restore your phone twice.

The first time it should fail with "An unknown error occurred (1015)", basically, what has happened is that some of the NAND storage has been slightly reorganized in 3.1, and the 3.0 iBoot can no longer parse it.

Now, try again, this second restore is also going to fail with "An unknown error occurred (1015)", this is normal behaviour, don't worry. However, this second restore re-formats the NAND fixing the previous problem.

Important (the last step) - Now, you need to re-jailbreak 3.0 and you're done:

If you are using an official carrier (Such as o2 in the UK, AT&T in the US, etc.) and have activated the firmware version you are restoring to previously you can use RedSn0w, as MuscleNerd kindly mentioned that if it has been officially activated before for that firmware version it will not hacktivate the phone.

However, if you are going to be using the official carrier and have not done so on that version before, you will need to use Purplera1n.

Anyone using unofficial carriers should use RedSn0w instead (though if you updated to 3.1, your baseband will have been updated and you will have lost the ability to use ultrasn0w to unlock).

Part 5 - Troubleshooting Errors

I get error 1604 when trying to downgrade, what should I do?
Try a different computer or operating system. I found that I was unable to downgrade due to this error on Windows 7, where as it worked fine on Vista + my Mac.

I get error 3002, what gives?
If you get error 3002 the ECID SHSH for that version does not exist/is malformed, this means you will not be able to downgrade to this version. Sorry!

I get some error not listed here!
First, try using the Search This Thread feature and type in the error number (e.g. 3002), if there are no results try googleing it e.g. iPhone restore error 3002

I have a question that hasn't been answered anywhere in this post!
Go ahead and ask it, either myself or someone else will answer it if we can.

That's all folks. Hope this clears up some of your questions!

[Backslash786]

is all of the below what i need to do , phone is on 3.1.2 i have and ecid sshh on file on cydia? , once i back this up if there is a new firmware out OR if my phone needs a restore if it gets messed up do i just do the other steps as normail will it be possible to do them even if say iphone is stuck at apple logo?

thanks






Part 1 - Getting your ECID:

Put your iPhone 3GS into Recovery mode - switch it off, hold down the Home button, and plug the USB cable in. When it shows a picture of the iTunes logo and a USB cable, stop holding down home.

Windows:

1) Download USBView
2) Start USBView on your PC.
3) In “options”, check off ”config descriptors” (enable).
4) Hit F5 on your keyboard to refresh.
5) Scroll down until you see ”Apple Recovery (iBoot) USB drive”, and click on it.
6) Look for ECID in right navigation pane.
7) Copy the 16 digits that follow the ECID.

Mac:

1) Open System Profiler.app (In Applications -> Utilities)
2) Click USB and select the iPhone from the list, it will show the ECID there.

To get out of recovery mode, simply hold down Home + Power until your phone reboots.

Part 2 - Getting your ECID SHSH

Windows Users: Make sure you have Java Runtime Environment 5 or higher installed.

Download Umbrella and extract to desktop.

1) Double click umbrella.jar
2) Enter your ECID in the box provided
3) Select Device Version from the list
4) Select SHSH Repository from the list
5) Click Submit

A file ending in ".shsh" should appear in the folder.

Check your shsh file is approx 64-66 KB, if it is not, it is not a valid ECID SHSH file.

Note: If you wish to get your 3.0/3.0.1 SHSH file from Saurik's server, make sure to select "Saurik - Cydia" from the SHSH Repository list.

well when i do step 1 i cannot find ECID in usb in right navigation pane , but in cydia it says i have 3.1 ecid shsh on file why is this how can i get it?

Thanks

[kanes824]

i'm having error 1601 can anybody guide me how to solve this.
my iphone is new 3gs with new iboot version (tethered jailbreak only)
Thanks so much

[sina149]

HiThere...
I tried this for a whole day... After All, I am getting Error# 3014. Already Checked TINYTSS is responding Itunes and all are configured correctly... PLEASE HELP ME ON THIS...
iPhone 3GS 32GB V. 3.1 ==> Need to Restore 3.1 as well due to CRASH

[Dyphen]

I currently have an iPhone 3GS fw 3.0.1 stuck on the apple boot logo. I've tried using ireb / irecovery to fix it but neither have prevailed. On other threads people have said to just upgrade it to 3.1.2 and use blackra1n, but would I be able to use this method to upgrade it to 3.1? I have my 3.1 ECID SHSH, so instead of downgrading would I be able to upgrade and go from 3.0.1 -> 3.1 and then jailbreak it from there?

Thank you, and if anyone has any other ideas on how to fix the apple logo loop feel free to help :/.

[vokut]

blackra1n works for both 3.1 and 3.1.2, so you can upgrade to 3.1.2 and go ahead and jailbreak

[alf69mi]

Got fw-umbrella-semaphore-217.zip
and retrieved a 64k shsh file for my 3GS 3.1.2 iphone from App.e
when i try to start tinytss.exe i am getting the following error on bot win7 and winxp sp3.
On xp java is
java version "1.6.0_17"
Java(TM) SE Runtime Environment (build 1.6.0_17-b04)
Java HotSpot(TM) Client VM (build 14.3-b01, mixed mode, sharing)

Any help?

tinytss.exe -f 4...6-iphone-3.1.2.shsh
TinyTSS[INFO|main|11:52:23]: Caching blobs...
TinyTSS[INFO|main|11:52:23]: Cached 4...6-iphone-3.1.2.shsh
java.lang.NullPointerException
at com.semaphore.TinyTSS.mergeFiles(TinyTSS.java:434)
at com.semaphore.TinyTSS._cacheFiles(TinyTSS.java:353 )
at com.semaphore.TinyTSS.cacheFiles(TinyTSS.java:264)
at com.semaphore.TinyTSS.<init>(TinyTSS.java:121)
at com.semaphore.TinyTSS.main(TinyTSS.java:79)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Nativ e Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknow n Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Un known Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.exe4j.runtime.LauncherEngine.launch(Unknown Source)
at com.exe4j.runtime.WinLauncher.main(Unknown Source)
TinyTSS[INFO|main|11:52:23]: Finished caching blobs
TinyTSS[INFO|TinyTSS-Service|11:52:23]: Starting TinyTSS service on port 80