Table of Contents
If you update a 2.1.0 New 3DS using the built-in System Update, you will BRICK. Follow the steps as written!
If you downgrade to 2.1.0 on New 3DS or 2DS and left Wireless Communication off, you can re-enable the wireless by removing the battery for several seconds then booting back up.
Overview of steps
The OTP is a console unique region from which console specific keys seem to be derived, although it is unknown how.
The OTP is a requirement to use arm9loaderhax, which gets you, among other things, 100% boot rate and very early ARM9 kernel access allowing you to unbrick yourself without a hardmod and use other awesome tools.
Since version 3.0, the OTP is locked out early in sysNAND boot. There is a New 3DS only exploit that works on 9.6, but it requires extra hardware. The solution we are using is to flash a 2.1.0 CTRNAND partition and firmware to the device, allowing us to retrieve the OTP.
In this section, we will be flashing your console's CTRNAND partition to 2.1.0 in order to take advantage of an oversight in 2.1.0 for the purpose of extracting the OTP unique to your console. This OTP file is required to install arm9loaderhax, and cannot be shared with other consoles.
This is accomplished by installing a premade ctrtransfer image containing 2.1.0, copying your console specific files (such as moveable.sed and SecureInfo_A) to it, then fixing the title databases. On New 3DS, it also swaps CTRNAND's encryption slot and installs an Old 3DS NCSD header to NAND, allowing it to boot the Old 3DS only 2.1.0 firmware.
What you need
- You will need to have booted into Decrypt9 via one of the Part 1 - Decrypt9 entrypoints
- The 2.1.0 ctrtransfer image for your device and region
(if your device is not from one of these regions, just pick one):
Instructions
You should be in Decrypt9 for these steps. If you are not in Decrypt9, follow Part 1 - Decrypt9
- Copy the 2.1.0
.binand.bin.shafrom the ctrtransfer zip to the/files9/folder on your SD card - Reinsert your SD card into your 3DS
- Go to "SysNAND Options", then "CTRNAND Transfer", then "Auto CTRNAND Transfer"
- Select the 2.1.0 ctrtransfer image when prompted by pressing (A)
- Backup SysNAND to
NANDmin.binwhen prompted by pressing (A)- If you don't have enough space and this is skipped, just continue with the instructions; Part 3 accounts for this possibility
- Allow the transfer process to proceed automatically, this may take some time
- Once the transfer is complete, press (Select) to eject your SD card
- Delete the 2.1.0 ctrtransfer image
.binand.bin.shafrom the/files9/folder on your SD card - Leave your SD card out of your 3DS
- Press (Start) to reboot with no SD card inserted
- You can insert the SD card on 2.1 after the device has reached the home menu, but it will not complete the bootup process if you insert it before then
(Screen distortions or discolorations are normal for some devices while on 2.1.0, they will go away once you restore your backup)
Putting a New 3DS on 2.1.0 in sleep mode is known to cause an UNRECOVERABLE brick! You should avoid closing your device and, without delay, go directly to Part 3 - arm9loaderhax to prevent this!
You can now continue from Part 3 - arm9loaderhax.
OTP Info
NAND Size
Geräteinformationen
Part 1 - Decrypt9
Part 2 - 2.1.0 ctrtransfer
Part 3 - arm9loaderhax
For support, ask for help at #3dshacks on Rizon IRC.
If you appreciate this guide, I accept donations through both Bitcoin and PayPal.