Tutorial  Updated

How to transplant savedata (system and user) from other switches

All firmware versions, guide here, kinda obsolete now that we have ChoiDujour which does this as the first step automatically:
https://pastebin.com/hXs4VCgs

Lets you transplant savedata as raw files (including system savedata) which means you can recover these consoles by using other people's firmware/partition images (restored with proper BIS keys, of course), except for PRODINFO/PRODINFOF which is absolutely console specific and you should never replace.
It also means you can get fakenews installed on your 1.0.0 console without PPT JPN, simply by replacing your SYSTEM:/save/8000000000000090 file with a friend's who already has it (make sure to back yours up first) using HacDiskMount after mounting SYSTEM partition, then launching 1.0.0 using Hekate and this FS.kip1 patch applied, using the fake news entry to launch the browser and install fake news AGAIN via pegaswitch, which should fix the CMAC so you don't have to boot using Hekate anymore.
 
Last edited by rajkosto,

Xandroz

Well-Known Member
Member
Joined
Mar 19, 2018
Messages
872
Trophies
0
Age
35
XP
1,625
Country
Egypt
either thats complicated or some bad luck going on.

anyone got it working help the remaining guy s and make a youtube tutorial if you can of course.
noob friendly guide.
i dont understand anything but i guess if i followed the typed guide ill get it working.
 

SocraticBliss

Well-Known Member
Member
Joined
Jun 3, 2017
Messages
130
Trophies
0
Age
36
XP
273
Country
United States
either thats complicated or some bad luck going on.

anyone got it working help the remaining guy s and make a youtube tutorial if you can of course.
noob friendly guide.
i dont understand anything but i guess if i followed the typed guide ill get it working.

I managed to help him out in PM's, he got it all working from what it seems, hactool.exe seemed to be having issues on his end, not really sure why, but the keys generated were different, which is a bit bizarre, but I guess a weird bug.
 
  • Like
Reactions: Xandroz

snam11

Well-Known Member
Member
Joined
Jan 10, 2007
Messages
108
Trophies
1
XP
1,130
Country
United States
without the help of @SocraticBliss i couldn't do it. he did the most part of it.
i suppose it must be an issue with system+python.
i did noticed a huge difference in keys.txt that hactool build:

in my case using the command
Code:
hactool.exe -tkeygen --sbk=key --tseckey=key BOOT0.bin > keys.txt
i get this kind of output file
Deriving keys...
--
All derivable keys (using loaded sources):

secure_boot_key = xxxxx
tsec_key = xxxxx




encrypted_keyblob_00 = xxxxxxx
encrypted_keyblob_01 = xxxxxxx
...
...
...
encrypted_keyblob_1f = xxxxxx














Done!

checking the file SocraticBliss built:

secure_boot_key = xxx
tsec_key = xxx

keyblob_mac_key_source = xxx
keyblob_key_source_00 = xxx
keyblob_key_source_01 = xxx
keyblob_key_source_02 = xxx
keyblob_key_source_03 = xxx
keyblob_key_source_04 = xxx

keyblob_key_00 = xxx
keyblob_key_01 = xxx
keyblob_key_02 = xxx
keyblob_key_03 = xxx
keyblob_key_04 = xxx

keyblob_mac_key_00 = xxx
keyblob_mac_key_01 = xxx
keyblob_mac_key_02 = xxx
keyblob_mac_key_03 = xxx
keyblob_mac_key_04 = xxx

encrypted_keyblob_00 = xxxxxxx
encrypted_keyblob_01 = xxxxxxx
...
...
...
encrypted_keyblob_1f = xxxxxx

master_key_source = xxx

master_key_00 = xxx
master_key_01 = xxx
master_key_02 = xxx
master_key_03 = xxx
master_key_04 = xxx

package1_key_00 = xxx
package1_key_01 = xxx
package1_key_02 = xxx
package1_key_03 = xxx
package1_key_04 = xxx

package2_key_source = xxx

package2_key_00 = xxx
package2_key_01 = xxx
package2_key_02 = xxx
package2_key_03 = xxx
package2_key_04 = xxx

aes_kek_generation_source = xxx
aes_key_generation_source = xxx
titlekek_source = xxx

titlekek_00 = xxx
titlekek_01 = xxx
titlekek_02 = xxx
titlekek_03 = xxx
titlekek_04 = xxx

key_area_key_application_source = xxx
key_area_key_ocean_source = xxx
key_area_key_system_source = xxx
sd_card_kek_source = xxx
sd_card_save_key_source = xxx
sd_card_nca_key_source = xxx

encrypted_header_key = xxx
header_key = xxx

key_area_key_application_00 = xxx
key_area_key_application_01 = xxx
key_area_key_application_02 = xxx
key_area_key_application_03 = xxx
key_area_key_application_04 = xxx

key_area_key_ocean_00 = xxx
key_area_key_ocean_01 = xxx
key_area_key_ocean_02 = xxx
key_area_key_ocean_03 = xxx
key_area_key_ocean_04 = xxx

key_area_key_system_00 = xxx
key_area_key_system_01 = xxx
key_area_key_system_02 = xxx
key_area_key_system_03 = xxx
key_area_key_system_04 = xxx


now i have fakenews installed but i have to fix the reboot issues (switch just reboots after typng the evalfile usefulscripts/installFakeNews.js script)
 

snam11

Well-Known Member
Member
Joined
Jan 10, 2007
Messages
108
Trophies
1
XP
1,130
Country
United States
means the sbk/tsec keys arent right or its not using them
if the keys aren't right how come SocraticBliss did the job? i meant he did the keys extraction with my dumps/keys...
there is something wrong with our pc or we miss something in the steps to dump keys ?
 
Last edited by snam11,

SocraticBliss

Well-Known Member
Member
Joined
Jun 3, 2017
Messages
130
Trophies
0
Age
36
XP
273
Country
United States
without the help of @SocraticBliss i couldn't do it. he did the most part of it.

now i have fakenews installed but i have to fix the reboot issues (switch just reboots after typng the evalfile usefulscripts/installFakeNews.js script)

You should be fine now, the installFakeNews.js script does a reboot at the end of the script, as long as it is able to boot into the Switch OS and you don't get an immediate error when loading the Switch OS then the procedure has completed successfully :)
 
  • Like
Reactions: snam11

snam11

Well-Known Member
Member
Joined
Jan 10, 2007
Messages
108
Trophies
1
XP
1,130
Country
United States
You should be fine now, the installFakeNews.js script does a reboot at the end of the script, as long as it is able to boot into the Switch OS and you don't get an immediate error when loading the Switch OS then the procedure has completed successfully :)

now is time to test the fusee payload to launch rcm with no jig :)

thanx a lot for your help/support
 

SocraticBliss

Well-Known Member
Member
Joined
Jun 3, 2017
Messages
130
Trophies
0
Age
36
XP
273
Country
United States
Is there anything obvious that we could be missing/not have installed that we've overlooked?

apart from python?

Ensure the following...

1) Latest version of Hactool.exe
2) Python 2.7.15 (including being in the path)
3) Using your correct BOOT0.bin and biskeydump's keys

That's all I can think of off the top of my head...
 
  • Like
Reactions: Xandroz

Blackfall

Well-Known Member
Newcomer
Joined
Oct 24, 2017
Messages
75
Trophies
0
Age
32
XP
1,823
Country
Germany
I'm using my 4.1.0 savegames on my 2.3.0 console just with using checkpoint. I tried the games zelda botw and mario kart and both worked. Is there any difference at 5.1.0? I guess the meaning of savedata here isn't only meant for saved things like games?
 
Last edited by Blackfall,

rajkosto

Well-Known Member
OP
Member
Joined
Apr 6, 2017
Messages
819
Trophies
1
XP
2,775
Country
I'm using my 4.1.0 savegames on my 2.3.0 console just with using checkpoint. I tried the games zelda botw and mario kart and both worked. Is there any difference at 5.1.0? I guess the meaning of savedata here isn't only meant for saved things like games?

there's a difference between using Horizon OS functions to extract FILES out of SAVEDATA, and then using those same functions to PUT THE FILES BACK INTO SAVEDATA, vs just trying to use a SAVEDATA file directly from another console.
and this is meant for system savedata mostly (which you cant explore with homebrew such as Checkpoint), I didn't even test it with game savedata...
 
  • Like
Reactions: Blackfall

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: 16 is becoming bare minimum for today's gaymes +1