Tutorial  Updated

Install developer firmware on retail 3DS

0.16.4_nobleed_rightcolor.png

Yes, I know, this guide already exists. However, the old guide is horribly out of date and doesn't show how to prepare your own dev firmwares... something relatively important when there are so few retail encrypted firmware archives online. Hopefully this helps anyone still looking to install development firmwares.
MAKE A NAND BACKUP BEFORE DOING ANYTHING TO YOUR 3DS

As the original guide says, @Konno Ryo is not responsible for any damages to your console, and neither am I. We are only providing a means for installing development firmware, and choosing to follow either guide is ultimately your choice and your responsibility. You, and you alone are responsible for what you do to your console. Make the proper NAND backups and don't complain if you forget.

Prerequisites
- Any 2/3DS
- CFW

You only need these if following method 2!
- Computer running linux. However, WSL can be used for windows (:shit:)
- Python 2

I highly using method 1 as it is much faster and will have 100% working firmware.
Method 2 is more to give an idea of how these firmwares are created.
Getting the firmware
I've uploaded an archive of development firmware somewhere online, though seeing as they break the TOS I can't share a link. You will likely have success searching something along the lines of "CTR SystemUpdater". Good luck! You should see a collection of CIAs, CSUs, and ZIPs. Download the ZIP file for your desired version.

Note: I have not uploaded n3DS/SNAKE firmwares yet. You will need to use method 2 if that is your console.

If you are using a new 3DS, you will need the SNAKE version of the firmware.
If you are using an old 3DS, you will need the CTR version of the firmware.
Using the wrong version will cause crashes. See this page for a complete list of dumped dev firmwares.

Putting the firmware on your SD
Make a new folder on the root of your 3DS SD card called "updates"

Extract the update CIAs from ZIP file you downloaded and copy them all to "updates". It should look something like this:
1694061092368.png


Installing the firmware
You will need to install sysUpdater in order to install the firmware. This can be done through GodMode9 or FBI.

Once installed, open sysUpdater from your home menu. If you are installing an older firmware version than what you currently have, press Y. Otherwise select upgrade.
Note: I've attached a table below to show which dev firmware pairs with what retail firmware. This should help in figuring out doing a downgrade vs upgrade.
Once complete, your 3DS will reboot and you're done!
Sourcing the firmware
Before anything we will need to get the firmware files from the SystemUpdaterForCTR/SNAKE programs.
Unlike retail consoles, devkits can't updated through system settings, so Nintendo created the 3DS SystemUpdater software. The updaters contain a complete set of firmware in RomFS, and when run the updaters will install that firmware to the devkit. Firmware can be extracted from the SystemUpdater cartrides and decrypted/re-encrypted to work on a retail 3DS.
I've uploaded a complete archive of SystemUpdaters somewhere online, though seeing as they break the TOS I can't share a link. You will likely have success searching something along the lines of "CTR SystemUpdater". Good luck! Wherever you get them from, they must be in either CSU or CIA format.

If you are using a new 3DS, you will need the SNAKE version of the updater.
If you are using an old 3DS, you will need the CTR version of the updater.
Using the wrong version will cause crashes. See this page for a complete list of dumped updaters.

Note: If you're using my archive, I've already prepared all the firmwares and compressed them to 7z. You can use those and skip to the "installing step."

Extracting/preparing the firmware
The SystemUpdater needs a few tools to decrypt/encrypt/extract the firmware. For this guide we will use the following programs:
- cia-unix (download "decrypt.py" from the root of the repository)
- CTRTool (download the ubuntu binary)
- CupTheCnt
- makerom (download the ubuntu binary)
- Decrypt9WIP

First we will need to change "decrypt.py" from cia-unix to use development keys for decryption. Change the line devkeys = 0 to devkeys = 1
1692215344802.png


Now run the script in your terminal. Important: make sure you have python 2. This script will not decrypt with python 3.
Note: you may need to install pycryptodome from the AUR for the script to work.
Code:
python2 decrypt.py <path_to_updater>

Next extract RomFS (this contains the update files) from the updater using CTRTool.
Code:
./ctrtool --romfs="romfs.bin" *".Main.ncch"
rm -f *".Main.ncch"
./ctrtool --romfsdir="romfs" "romfs.bin"
rm -f "romfs.bin"

Now we'll run the contents of RomFS through CupTheCnt.
Code:
./ctc "romfs/contents/CupList" "romfs/contents/Contents.cnt"
rm -r "romfs"

There should now be a folder called "updates" containing the CIA files that make up the firmware. These are still encrypted, so we'll have to use "decrypt.py" again. Note: If you can't read/write to the updates folder, please use sudo chmod 777 updates/
Code:
for CIA in updates/*.cia; do
    python2 decrypt.py ${CIA}
done
# Backup TWL titles since they can't be decrypted
mv updates/000480*.cia .
rm -r updates

The decrypted files are NCCH, so we'll need to use Decrypt9WIP on your 3DS to turn them back to CIA*. However, before that we need to rebuild titles to CIA if they specifically have a manual (see footnotes for why).
Note: you will get a "failed to sign header" warning. This is okay.
Code:
for NCCH_MANUAL in *.1.ncch; do
    ./makerom -f cia -ignoresign -target p -o "${NCCH_MANUAL//.1.ncch/.cia}" -i "${NCCH_MANUAL//.1.ncch/.0.ncch}":0:0 -i "${NCCH_MANUAL}":1:1
    rm -f "${NCCH_MANUAL//.1.ncch/.0.ncch}"
    rm -f "${NCCH_MANUAL}"
done

Next we'll move all the files into one folder to put on your SD card.
Code:
mkdir files9
# Properly rename ncch while moving
for NCCH in *.0.ncch; do
    mv "${NCCH}" files9/"${NCCH//.0.ncch/.ncch}"
done
mv *.cia files9

Copy the newly created "files9" folder to the root of your SD card. Important: make sure no "files9" folder already exists. If one is already there, back it up and remove it until this guide is completed.

Insert the SD card into your 3DS and open Decrypt9WIP. Select the menu options as shown below.
Content Decryptor Options --> CIA Builder Options --> Build CIA from NCCH/NCSD

After that is complete, choose the following to retail encrypt the firmware.
Content Decryptor Options --> CIA File Options --> CIA Encryptor (NCCH)

The tool used to install the firmware is very picky about file names, so we'll have to put the SD card back in your computer for one last operation. Navigate to the root of your SD card in your terminal. Important: make sure no "updates" folder already exists. If one is already there, back it up and remove it until this guide is completed.
Code:
mv files9 updates
for NCCH in updates/*.ncch; do
    rm -f "${NCCH}"
done
for CIA in updates/*.ncch.cia; do
    mv "${CIA}" "${CIA//.ncch.cia/.cia}"
done
rm -f updates/Decrypt9.log
NOTE: There's a high chance you'll need to download these titles from the CDN**

The firmware is finally ready to be installed!

Installing the firmware
You will need to install sysUpdater in order to install the firmware. This can be done through GodMode9 or FBI.

Once installed, open sysUpdater from your home menu. If you are installing an older firmware version than what you currently have, press Y. Otherwise select upgrade.
Note: I've attached a table below to show which dev firmware pairs with what retail firmware. This should help in figuring out doing a downgrade vs upgrade.
Once complete, your 3DS will reboot and you're done!

Test menu

Refer to @Konno Ryo's original information for entering the test menu. Just note that you will always need to enable developer UNITINFO in luma for test menu to work properly.

Hold select while booting and enable Set developer UNITINFO
If this option is not available to you, open SD:/luma/config.ini and set use_dev_unitinfo=1
To get Test Menu
  1. Once your at the home menu open "CONFIG", select "Menu Setting", select "Menu", press up to "test menu".
  2. Press B x2, press "Power" to reboot.
To get out of Test Menu
  1. Press Start to open DevMenu scroll to CTR-P-CFGO and press A to open "CONFIG"
  2. Select "Menu Setting", select "Menu", press down to "home menu"
  3. Press B x2, press "Power" to reboot.

Common issues

Test menu is frozen: Enable UNITINFO in luma.

Home menu crashes: Disable UNITINFO in luma.

Failed to apply X firm patch(es): You may need to get some titles from the NUS** and install them via gm9, see here for more info. If that does not work, please reply to this thread with your dev firmware region, version, and whether it's SNAKE/CTR.

Failed to decrypt the arm9 binary: See above ^

Footnotes for any nerds out there:

*In case you're wondering why I wouldn't just use makerom, system CIAs rebuilt with makerom caused my 3DS not to boot (luma failed to apply x firm patches). I do use makerom for titles like the camera which needs makerom to combine the executable NCCH and the manual NCCH, though those titles aren't as picky as things like system modules and so they won't cause problems.

**The titles in the link need to have a .firm image in RomFS decrypted, and this guide does not take that into account. You could probably fix that yourself easily enough, and if you want to go further and contribute the steps for my guide then that'd be much appreciated.
Also note that the n3DS has another layer of encryption on everything and so there's a smaller chance of success with the guide as it is now.
 

Attachments

  • CTR Update Table.png
    CTR Update Table.png
    335.1 KB · Views: 54
Last edited by rvtr,

Elckerlijc

Member
Newcomer
Joined
Aug 17, 2023
Messages
11
Trophies
0
XP
76
Country
France
Funny you should mention that, one friend and I were also discussing this, though we thought the bad firm was limited to emuNAND. We had a bad 0004013820000002 from 0.35.0 JPN and it worked on sysNAND but crashed on emuNAND. Are you on an emuNAND?

Sent someone else a good and bad copy of 0004013820000002. They compared them and had this to say:
View attachment 388965

It's 3 am right now but I'll look into this more in the morning.

Thanks, it definitely helps to know when these issues aren't just for one person.
This n3DS is on sysNAND.
Yesterday I also tried on o3DS emuNAND I had "Failed to apply 1 FIRM patch" error but I have not investigated yet on this one.

EDIT :
Tried on o3DS emuNAND, installed NATIVE_FIRM for o3DS title id 0004013800000002 downloaded from NUS and it works !
 
Last edited by Elckerlijc,
  • Like
Reactions: rvtr

rvtr

Nintendo DS hoarder
OP
Member
Joined
Oct 18, 2019
Messages
323
Trophies
2
Age
18
Location
$C000-CFFF
Website
randommeaninglesscharacters.com
XP
5,149
Country
Canada
This n3DS is on sysNAND.
Yesterday I also tried on o3DS emuNAND I had "Failed to apply 1 FIRM patch" error but I have not investigated yet on this one.

EDIT :
Tried on o3DS emuNAND, installed NATIVE_FIRM for o3DS title id 0004013800000002 downloaded from NUS and it works !
Did a little testing and seems like all of the following titles are bad
  • 0004013800000001.cia
  • 0004013800000002.cia
  • 0004013800000003.cia
  • 0004013800000102.cia
  • 0004013800000202.cia
I suppose until that's figured out, do what @Elckerlijc mentioned and get those titles from the NUS or elsewhere.

In a few hours I'm going to start uploading ZIPs of properly encrypted firmwares to that archive. I know 100% for sure they'll work on o3DS (sysNAND and emuNAND), though idk about n3DS. I suggest trying those once they're uploaded.
 

Elckerlijc

Member
Newcomer
Joined
Aug 17, 2023
Messages
11
Trophies
0
XP
76
Country
France
Did a little testing and seems like all of the following titles are bad
  • 0004013800000001.cia
  • 0004013800000002.cia
  • 0004013800000003.cia
  • 0004013800000102.cia
  • 0004013800000202.cia
I suppose until that's figured out, do what @Elckerlijc mentioned and get those titles from the NUS or elsewhere.

In a few hours I'm going to start uploading ZIPs of properly encrypted firmwares to that archive. I know 100% for sure they'll work on o3DS (sysNAND and emuNAND), though idk about n3DS. I suggest trying those once they're uploaded.
Looks like the same ones are broken on n3DS (different title ids because they are n3DS specific). You can download them depending your system from NUS or elsewhere to fix them :

o3DS

0004013800000001 v? dev_only ? (I have no info on this one)
0004013800000002 v31633 NATIVE_FIRM
0004013800000003 v5632 SAFE_MODE_FIRM
0004013800000102 v10864 TWL_FIRM
0004013800000202 v3665 AGB_FIRM

n3DS

0004013820000001 v? dev_only ? (I have no info on this one)
0004013820000002 v31633 NATIVE_FIRM
0004013820000003 v16081 SAFE_MODE_FIRM
0004013820000102 v10962 TWL_FIRM
0004013820000202 v4816 AGB_FIRM
 
Last edited by Elckerlijc,
  • Like
Reactions: rvtr and SylverReZ

rvtr

Nintendo DS hoarder
OP
Member
Joined
Oct 18, 2019
Messages
323
Trophies
2
Age
18
Location
$C000-CFFF
Website
randommeaninglesscharacters.com
XP
5,149
Country
Canada
Looks like the same ones are broken on n3DS (different title ids because they are n3DS specific). You can download them depending your system from NUS or elsewhere to fix them :

o3DS

0004013800000001 v? dev_only ? (I have no info on this one)
0004013800000002 v31633 NATIVE_FIRM
0004013800000003 v5632 SAFE_MODE_FIRM
0004013800000102 v10864 TWL_FIRM
0004013800000202 v3665 AGB_FIRM

n3DS

0004013820000001 v? dev_only ? (I have no info on this one)
0004013820000002 v31633 NATIVE_FIRM
0004013820000003 v16081 SAFE_MODE_FIRM
0004013820000102 v10962 TWL_FIRM
0004013820000202 v4816 AGB_FIRM
Someone I know has a private tool that properly gets retail encrypted firmware from the updaters. I can't share it, but that's what I'm using for the uploads to my archive. (or will be as I haven't gotten around to uploading yet)

My guide is just a cheap version that barely works lol

I mentioned to the creator @Elckerlijc's issue and apparently there's some thing where n3DS firmwares need extra encryption. There's not support in the tool for that yet, so I'll have to wait to upload the SNAKE archives until then. So ignore what I said about the archives in my last post. Sorry!

I'll get around to the CTR ones soon enough though.
 

Elckerlijc

Member
Newcomer
Joined
Aug 17, 2023
Messages
11
Trophies
0
XP
76
Country
France
Someone I know has a private tool that properly gets retail encrypted firmware from the updaters. I can't share it, but that's what I'm using for the uploads to my archive. (or will be as I haven't gotten around to uploading yet)

My guide is just a cheap version that barely works lol

I mentioned to the creator @Elckerlijc's issue and apparently there's some thing where n3DS firmwares need extra encryption. There's not support in the tool for that yet, so I'll have to wait to upload the SNAKE archives until then. So ignore what I said about the archives in my last post. Sorry!

I'll get around to the CTR ones soon enough though.
Oh yeah forgot that n3DS FIRMs are a little bit different from o3DS ones as explained here https://www.3dbrew.org/wiki/FIRM#New_3DS_FIRM
Btw I downloaded retail firms from NUS and everything works well apparently.
I'll wait your uploads archive to test on o3DS ;)
 
  • Like
Reactions: rvtr

rvtr

Nintendo DS hoarder
OP
Member
Joined
Oct 18, 2019
Messages
323
Trophies
2
Age
18
Location
$C000-CFFF
Website
randommeaninglesscharacters.com
XP
5,149
Country
Canada
Can you run retail CIAs on this firmware?
I've tried that and yes, they all work.

I'll get around to the CTR ones soon enough though.
Also small update on this, got everything below 0.30.0 uploaded and added 0.14.x + 0.16.4 firmwares. Will do the rest tomorrow.
 
  • Like
Reactions: Elckerlijc

Elckerlijc

Member
Newcomer
Joined
Aug 17, 2023
Messages
11
Trophies
0
XP
76
Country
France
I've tried that and yes, they all work.


Also small update on this, got everything below 0.30.0 uploaded and added 0.14.x + 0.16.4 firmwares. Will do the rest tomorrow.
Installed FW 11.8.0-41E on my 2DS and your SystemUpdater_CTR-0_28_0-EU_cias.7z. Everything works as intended at first try ;).
Thanks
 

Attachments

  • PXL_20230822_075419040.jpg
    PXL_20230822_075419040.jpg
    2.5 MB · Views: 36
  • Like
Reactions: rvtr

e4j6

New Member
Newbie
Joined
Aug 29, 2023
Messages
1
Trophies
0
Age
27
XP
13
Country
Netherlands Antilles
thank you kanye, very cool

no savedatafiler included in any of your archives? I was hoping there might be a version newer than 5.0.0/v53176... oh well
 
  • Like
Reactions: rvtr

rvtr

Nintendo DS hoarder
OP
Member
Joined
Oct 18, 2019
Messages
323
Trophies
2
Age
18
Location
$C000-CFFF
Website
randommeaninglesscharacters.com
XP
5,149
Country
Canada
Common question but can homebrew devs possibly uses this in an advantageous way?
Probably not, it's more to do things "because it's cool."

thank you kanye, very cool

no savedatafiler included in any of your archives? I was hoping there might be a version newer than 5.0.0/v53176... oh well
I might have a couple versions ;P
1693357119487.png


I'll create a new archive in 2-3 hours. It'll be on my userpage (IS1982) of the same site as my other archive so check back in then.
what about 11.17.0-50U and "0_35_0-US"
is that a downgrade (probably)
or an upgrade (no way)
Downgrade. 0.35.0 is 11.16.0. I've started working on a better list for all SystemUpdaters + what retail versions they match with. That table has been attached below.

SDK version generally matches with the retail version. If not then you can always see the release dates and compare those.
 

Attachments

  • complete_ctr_systemupdater_list.png
    complete_ctr_systemupdater_list.png
    654.2 KB · Views: 36

a_username_that_isnt_cool

Well-Hated Member (Also)
Member
Joined
Apr 22, 2023
Messages
560
Trophies
0
Location
gbatemp. where do you think you are
XP
836
Country
United States
Probably not, it's more to do things "because it's cool."


I might have a couple versions ;P
View attachment 391093

I'll create a new archive in 2-3 hours. It'll be on my userpage (IS1982) of the same site as my other archive so check back in then.

Downgrade. 0.35.0 is 11.16.0. I've started working on a better list for all SystemUpdaters + what retail versions they match with. That table has been attached below.

SDK version generally matches with the retail version. If not then you can always see the release dates and compare those.
got it
 
  • Like
Reactions: rvtr

DragonMals

6th-7th Gen Retro Gaming Entusiast
Member
Joined
Sep 23, 2022
Messages
686
Trophies
1
Location
XP
2,275
Country
United States
This looks great, but I don't think I'll need this cause this is just a gimmick for all of us unless we're making games. Who's making games on the 3ds to this day?

Anyways, this is awesome to see that it works.
 
  • Like
Reactions: rvtr

SylverReZ

Dat one with the Rez
Member
GBAtemp Patron
Joined
Sep 13, 2022
Messages
7,170
Trophies
3
Location
The Wired
Website
m4x1mumrez87.neocities.org
XP
22,011
Country
United Kingdom
For anyone who's wondering whether it is safe to update your 3DS: the answer is YES. However, it will update the firmware back to retail, so you'll loose the dev firmware once its finished.
 
  • Like
Reactions: Hayato213 and rvtr

Ryccardo

Penguin accelerator
Member
Joined
Feb 13, 2015
Messages
7,691
Trophies
1
Age
28
Location
Imola
XP
6,913
Country
Italy
this is just a gimmick for all of us unless we're making games
It's not for those who make games because the real advantages of a "Panda" console are limited and mostly in hardware (you won't get double the RAM and you probably don't have the CTR-UIC-MIDI card to connect it to a PC and use HostIO remote file access), you'd get a full size desktop box with video output and/or card emulation and hardware debugging for that :)

This is for people who want to experience a piece of history (after all nothing beat SaveDataFiler until the 2016 versions of JKSV, and DevMenu (renamed to BigBlueMenu) was similiarly the first publicly available title installer) and/or bragging rights :D
 
  • Like
Reactions: rvtr and DragonMals

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: Lol rappers still promoting crypto