Tutorial Update from iOS 10.x+ to 11.3.1

Kyle2100 · July 19, 2018

This will be an updated version of my other tutorial to help better understand the process and help with any errors.

Items that will be needed:

PC/Mac

ios device running 10.x+

Nonce Setter

ios 11.3.1 shsh blob

ios 11.3.1 ipsw

ios 11.4.1 ipsw

FutureRestore

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

What is a Nonce setter?

Lets you set your boot-nonce so you can restore with saved blobs.

iOS 10 nonce setter: https://mega.nz/#!EzwABYwA!_RAT-rlQrhTUrXIXBLrSqhNAlV35Nsr7pv1Ma6Au5yI

iOS 11 Nonce Setter:

Download IPA file (Official website

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Setting The Nonce

How to set Nonce in iOS 11.1.2

Step 1: Connect your device to your computer.

Step 2: Download and unzip Cydia Impactor, select Impactctor.exe, then you need to drop and drag Nonce. ipa to Cydia Impactor.

Step 3: Enter your Apple ID and passcode wait till this the installation is complete.

Step 4: Then there should be a Nonce app on your iPhone. Go to Settings app -> General -> Profile -> find your Apple ID and click Trust.

Step 5: Continue your operation till the Root Status turns into YES.

Step 6: Back to your PC, open the SHSH 2 blobs you have saved with Notepad or other third-party software.

Step 7: Search generator then you’ll find its value between <string> value </string>. Copy the value.

Step 8: Back to your iOS device, launch NonceSet1112 app, paste the value in SET/CHANGE NONCE under boot-nonce, the click Save/Restore Now.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Set Nonce with terminal

Make sure you have:

MTerminal from Cydia
Valid shsh2 blob(s) for iOS 10.2 (or whatever firmware you want to be able to restore to.
Computer (or filza, but only gonna have instructions for a computer. You'd pretty much just do everything I say to do on the computer, but in filza)

Instructions:

1) Move shsh2 blob(s) to computer

2) On Windows, open your blob, or a blob if you have multiple, with notepad. On Mac, change the extension from "shsh2" to "plist" (make sure you change it back to shsh2 on Mac when you're done!)

3) Scroll to the bottom and look for the word generator, to the right should be a code that as far as I know always starts with 0x, this is your nonce generator for that blob. On Windows you can also click ctrl + f and search "generator" and it will take you to it automatically (not sure how to do this on Mac if it's even possible).

4) in MTerminal sign into root by typing "su" then click enter and type in your password (default is "alpine", so if you haven't changed it this is what your password is)

5) type "nvram com.apple.System.boot-nonce=your generator" without the quotations

6) type "nvram -p" without the quotations

If all went well you should something similar to this when you run "nvram -p"

backlight-level <your backlight level> com.apple.System.boot-nonce <your generator> boot-args auto-boot true com.apple.System.tz0-size <your tz0 size? Not exactly sure what this is> <your username>:/var/mobile root#

If you see something like this

<your username>:/var/mobile root# nvram -p oblit-begins OblitType: ObliterateDataPartition. No reason given. obliteration handle_message: Obliteration Complete backlight-level <your backlight level> com.apple.System.boot-nonce <your generator> boot-args auto-boot true com.apple.System.tz0-size <your tz0 size? Not exactly sure what this is> <your username>:/var/mobile root#

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

What is a IPSW?

IPSW''' is a file format used in iTunes to install iOS firmware. All Apple Inc.Apple devices share the same IPSW file format for iOS firmware, allowing users to Flashing technology flash their devices through iTunes on OS X and Windows.

Where can I download the ipsw?

ipsw.me

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

What is FutureRestore??

futurerestore is a hacked up idevicerestore wrapper, which allows manually specifying SEP and Baseband for restoring

Where can I download FutureRestore?

https://github.com/encounter/futurerestore/releases

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ok, now that you know what everything is and have downloaded it all lets begin.

1. Open CMD/Terminal and cd to the future restore folder (I named mine futurerestore_windows)

example:

cd desktop/futurerestore_windows

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2. Open the future restore folder and drag the futurerestore.exe into the cmd

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3. Next type this command

-t (drag blob) -i (drag 11.4.1 ipsw) - -latest-baseband (drag 11.3.1 ipsw)

On devices with no sim (iPad/iPod) where it says latest baseband type:

- -no-baseband

when I say drag “item” that means drag the file from the desktop into the cmd/terminal and every time you do that hit space before entering anything else

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

4. Hit enter and the process will begin

CONGRATULATIONS YOU ARE ON IOS 11.3.1

if if you have any issues or errors send me a message and I can help you resolve it

Updated July 19, 2018 by Kyle2100

Joka · July 13, 2018

Nice!

trungnguyen160591 · July 13, 2018

iOS 11 Nonce Setter:

https://github.com/julioverne/NonceSet112/raw/master/NonceSet1112_v1.1.ipa

The link is dead and please make tutorial clip.

Thanks

Fadexz · July 13, 2018

Nice work!

Kyle2100 · July 13, 2018

5 hours ago, trungnguyen160591 said:

iOS 11 Nonce Setter:

https://github.com/julioverne/NonceSet112/raw/master/NonceSet1112_v1.1.ipa

The link is dead and please make tutorial clip.

Thanks

Ok will fix, thanks for letting me know

Kyle2100 · July 13, 2018

5 hours ago, trungnguyen160591 said:

iOS 11 Nonce Setter:

https://github.com/julioverne/NonceSet112/raw/master/NonceSet1112_v1.1.ipa

The link is dead and please make tutorial clip.

Thanks

UPDATED

Kolyei · July 18, 2018

Some people over on discord have been having the "32 bit device, phome not being detected" issue on Windows 10 machines. Can anyone test this process on a Windows 7 or 8.1 machine (making a second partition or using the second hard drive on a computer if you have the space)