Jailbreaking the iPhone 3G – Part 2 – iPhone Firmware 2.2.1 / OS X 10.5.6
Well, that was easy.
All of the issues from the previous post (Jailbreaking the iPhone 3G – Part 1) are easily resolved now that Apple has released the official 2.2.1 firmware update.
I now have a fully working jailbroken unlocked iPhone 3G.
For a full walkthrough, with all options outlined, see this post by intomobile.com – very useful (I’ve copied and pasted the subset of their steps that I used). The Dev Team Blog page is useful too – particularly for the steps required to workaround the problems with 10.5.6 breaking DFU mode.
For the exact steps that I took, read on.
Step Zero – The Starting Point (and some info on getting Optus to carrier unlock your phone)
A note on the status of my phone / contract, as it matters when looking at the process to take (in short, I get the easy route, with least complications):
- My iPhone 3G has never been Jailbroken before.
- My iPhone 3G had Apple’s official 2.2 firmware loaded on it. It had NOT been upgraded to Apple’s 2.2.1 firmware (not that it matters, in my case).
- I’m on Optus Post-Paid.
- I have called Optus’ iPhone specific line (Australia 133 713) and requested that the phone be network unlocked, so that I can use any SIM, from any carrier (hello Telstra or 3).
- This carrier unlock is free for Optus post-paid subscribers. With a carrier-provided unlock, you have no need for the Dev Team’s yellowsn0w – your phone is already unlocked.
- For info, the process for getting the free carrier unlock (so that you can use your iPhone 3G with any carrier) is quite simple:
- Call 133 713.
- Specifically request that Optus unlock your iPhone.
- The Optus technician will confirm that your iPhone has been used to make at least one call using the Optus SIM.
- They’ll also check that they have the correct phone number for the phone you’re unlocking.
- They’ll ask you to provide your phone’s hardware specific IMEI number.
- They will then provide you with a confirmation number (mine was 5 digits).
- They will then inform you that within 10 business days you will receive an SMS from Optus confirming your iPhone has been unlocked.
- The SMS may include some instructions for what to do next, which is to connect the iPhone to your computer, running the latest version of iTunes, and Restore the phone.
I assume the restore will reset the Activation of the iPhone to be permanently Activated, but will see.
So, my iPhone is, in the terms used by the Dev Team on their iPhone Firmware 2.2.1 page:
SIM Free/SP Unlocked/Factory Unlocked iPhone 3G
This applies if you bought your iPhone 3G for $$$$$$$. This model of iPhone 3G doesn’t have an Service Provider lock (aka factory unlocked) and you are able to put any SIM card into the phone and get service. Your phone is already unlocked so you do not need to worry about baseband updates, simply upgrade to 2.2.1 using iTunes and then use QuickPwn to Pwn and Jailbreak. This will add Cydia and Installer too.
Step 1 – Deciding Whether To Upgrade The iTunes Way To Apple’s Vanilla 2.2.1 Firmware
According to the Dev Team post, I’m unconcerned by the radio baseband upgrade that is performed as part of Apples 2.2.1 firmware upgrade in iTunes, and I should simply connect my iPhone to iTunes and upgrade to 2.2.1 normally.
Done.
Step 2 – Fix The OS X 10.5.6 USB / DFU Mode Issue
As I’m running Mac OS 10.5.6, the update that broke DFU mode, I now need to temporarily re-enable DFU mode. This is accomplished by rolling back to the 10.5.5 USB setup, but not in the same way that broke USB on my BlackBook in Part 1. In this case the Dev Team guys have nailed it pretty simply:
Fixing DFU mode on 10.5.6
As noted previously OS X 10.5.6 introduced a bug that affected the use of DFU mode. with some Macs. There have been previously published hacks and techniques to fix this, but here is another method that can be used to temporarily restore DFU functionality in order to use QuickPwn or PwnageTool.
- You will need an account with ADC (Apple Developer Connection) this is free and takes a few minutes to sign up, you should read the terms and conditions carefully and you should only sign up if you are thinking of developing applications in the future – http://developer.apple.com/mac/
- Download the disk image “IOUSBFamily-315.4-log.dmg” for Mac OS X 10.5.5 Build 9F33” (yes, that is a “5” in 10.5.5 - this is a developer debug package of the USB kernel extension).
- Unplug non-vital USB equipment, such as external DVD writers, USB scanners, USB mass storage devices, at the most leave a Keyboard and Mouse connected.
- Install IOUSBFamily-315.4.1.pkg from within the disk image
- Reboot your system!
Now your Mac can work with an iPhone in DFU mode.
Sweet.
Step 3 – Use Pwnage Tool 2.2.5 To Prepare A Custom .ipsw Firmware File
All of the links that follow are as per the Dev Team’s links on their blog. Feel free not to trust me, go to their page on The Pirate Bay and use those links if you must!
- Not sure if it matters, but my iPhone was connected via USB, with iTunes running and open during this process. YMMV.
- Back up your iPhone in iTunes.
- You backed it up, right?
- Fire up your BitTorrent client of choice.
- We’re on a Mac, so download PwnageTool_2.2.5.dmg - you could just use QuickPwn_2.2.5.dmg, but using the full Pwnage Tool in expert mode gives you the opportunity to tweak things in a much more pleasing manner.
- Mount the .dmg file, and drag the PwnageTool pineapplesque icon out onto, say, your desktop.
- Doubleclick the PwnageTool icon on your desktop.
- Select “Expert Mode”.
- Select your iPhone version (iPhone 3G).
- Click “Next”.
- Allow Pwnage Tool 2.2.5 to find the vanilla Apple iPhone 2.2.1 OS firmware that was downloaded via iTunes when you upgraded to 2.2.1 in Step 1.
- Select the iPhone 2.2.1 OS firmware:
- iPhone 3G firmware filename – iPhone1,2_2.2.1_5H11_Restore
- Click “Next”.
- Select the “General” category.
- Click “Next”
- General Settings:
- If you have a legitimate iPhone contract with your carrier (for instance, an iPhone contract with Optus), you will need to uncheck the box next to “Activate”.
- Make sure you do this, otherwise you’ll end up with a successfully jailbroken iPhone, but the phone won’t work. Yep, happened to me, I had to re-do everything…
- Change Root Partition size to 1024MB, so you have more room to install applications off Cydia or Installer.
- Click “Next” (Keep clicking “Next” until you get back to the “Build” screen).
- Select “Build”
- Click “Next”.
- Save the custom restore file to your desktop (you can save it wherever you like, of course).
- For the iPhone 3G this should be named – iPhone1,1_2.2.1_5H11_Custom_Restore.ipsw
- Wait for PwnageTool 2.2.5 to build your custom iPhone 2.2.1 OS firmware file.
- When asked if the iPhone has been Pwned before, choose the appropriate option:
- iPhone 3G = “No”
- Connect your iPhone to your Mac, if it’s not already connected.
- Follow the directions in PwnageTool to enter “Restore Mode” (DFU).
- If for some reason you’re already running a “Pwned” iPhone, you don’t need to do this, and can just skip ahead to the iTunes restore sequence.
- Hint: Press the “Power” button slightly before pressing the “Home” button. Remember, press “Power” just a tick before pressing “Home”.
- If you followed the directions correctly, you will be rewarded with a blue window exclaiming your success – this is a good thing.
- Click “OK”
- You will see “I Can Haz Success”
- Quit Pwnage Tool 2.2.5
- Fire up iTunes
- You will be told your iPhone needs to be restored
- Click “OK”
- Option+Click the “Restore” button in iTunes
- Make sure you hold down the “Option” key on the keyboard while clicking on “Restore”, as this allows you to choose which .ipsw file to restore onto your iPhone 3G.
- Choose the “iPhone1,1_2.2.1_5H11_Custom_Restore.ipsw” that PwnageTool built (it’s probably on your desktop).
- Click “Open”.
- Wait.
- Wait some more
- After some more waiting, you will be told that your iPhone that your iPhone has been restored
- Click “OK”
- Disconnect iPhone AFTER iTunes recognizes it.
Reconnect the iPhone
- Restore your backup of your iPhone data.
- Start enjoying your jailbroken iPhone or iPhone 3G running iPhone 2.2.1 OS!
Part 4 – Undo the DFU Fix
- Download the disk image “IOUSBFamily-327.4.0-log.dmg” for Mac OS X 10.5.6 Build 9G55”
- Install IOUSBFamily-327.4.0.pkg from within the disk image
- Reboot your system!
Part 5 – Lessons Learned
If you have trouble doing something that’s currently quite popular and hacky, wait. Someone smarter than you (or, more likely, smarter AND with more time on their hands) will work it out, make it easier, and post a How To on the internet.
In: Cool Kit, Hardware, How To..., Software, iPhone · Tagged with: Apple, carrier unlock, firmware 2.2.1, iPhone, iphone 3g, jailbreak, optus, pwnage, pwnage tool, unlock
One Response
Subscribe to comments via RSS
Subscribe to comments via RSS
Leave a Reply
You must be logged in to post a comment.
on Tuesday, 3 February 2009 at 8:28
Permalink
[...] [Edit: However there's a happy ending, which you can read in Part 2] [...]