Tutorial  Updated

Backup/Restore your Nand + Get your biskeys+tseckeys+keys.txt Guide

This Multi-Guide provides instruction for the following:

Back up your NAND,
Backup your system information,
Restore your NAND,
Make exFAT work on lower system versions


Please read and follow the following disclaimer before attempting to follow this guide:

Only use the files attached, I update these when needed to ensure that they are functioning. Failure to use the attached files may result in issues.

I take no responsibility for issues you may have as a result of the use of the files or instructions contained within these guides. You execute this/these guide(s) at your own risk. I'm happy to help with any questions. Please review the comments and answers on this thread as well. I try to provide assistance when requested.

Before any modification of your system, I recommend you back-up your NAND (to make yourself a clean back-up and/or a virgin NAND). Don’t use Auto RCM until after you complete your back-up.

To follow the below guides, you will need the following:
  • A micro SD card formatted to exFAT or FAT32 with at least 32 GB of free space
  • All files attached at end of this guide, extracted to your PC
  • Fully charged Switch (or the ability to keep the Switch plugged into a power source during the restore process)
  • USB to USB-c cable (short is better)
This guide assumes you have some method of entering into RCM. (e.g. RCM jig installed or shorting pins 1+10 on the Joy-Con rail.)
You may also run the "Hekate.bin" from your own dongle or method from the
"Payloads to be used with tegra.zip" if you do not wish to use TegraGUI



For Fat32 users only >>Join RawNand Parts Mini Guide
Download this first click here > >joiner_scripts_for_windows_linux_macos.zip
to combine the 15 parts or 30 parts of rawnand00.bin etc into 1 rawnand.bin file
Place the correct script into the folder where you have the 15 or 30 parts backed up.
example
If you have 15 parts rawnand files use the join_15_2GBparts_linux_macosx.bat For Mac
or for windows use the join_15_2GBparts_windows.bat
Simply move the desired script that matches your system windows or mac 15 or 30 parts to the folder where you have your rawnand in parts 15 or 30 double click the bat file and it will merge/join those into one file called rawnand.bin
Backup Guide

In order to run the "Hekate.bin", you first need to setup and install a payload sender and the apx driver. I have provided an application (TegraRcmGUI) in the zip files at the end of this post.


You may also run the "Hekate.bin" from your own dongle or method from the "Payloads to be used with tegra.zip" if you do not wish to use TegraGUI



Steps for this are as follows:
  1. Extract TegraRcmGUI_v#.#_Installer.zip on your PC and install

  2. In TegraRcmGUI, select the “Settings” tab and then click “Install Driver”
    tegragui.png



  3. Place the contents of “SDFILES PART 1.zip” and “SDFILES PART 2.zip” and also “SDFILES PART 3.zip” onto the root of the SD card
    - Remember to format your 32 GB SD card to exFAT or FAT32 first

  4. Place the SD card into the Switch

  5. Put your Switch into RCM by holding volume up + power
    - Click this link for instructions for entering >RCM<

  6. With TegraRcmGUI open, connect the Switch to the PC
    - Before injecting, the Switch Icon will change to green and indicate “RCM OK” if Switch was
    connected correctly in RCM mode


  7. In TegraRcmGUI: Payload tab, navigate to the location of the hekate.bin on your PC and Inject payload
    (the hekate.bin is in the payloads to be used with tegra.zip)

    - The Switch Icon in TegraRcmGUI will change to orange hourglass during injection
    - If payload is sent correctly, Switch Icon in TegraRcmGUI will change to green checkmark
    - If the payload is not sent, try using a different (shorter) cable and repeat from step 5.

  8. Switch will automatically boot into Hekate bootloader (steps 9-24 take place on the Switch)

  9. From the hekate main menu, select “Console Info”
    qAGf4GB.png



  10. Select “Ipatches & bootrom info” (this isn’t in the screenshot above but should be in the Hekate Console info menu.)

  11. Follow the instructions to dump to SD card

  12. Return to Console info menu

  13. Repeat steps 10-12 for “Print fuse info”, “Print kfuse info” and “Print TSEC keys”

  14. Return to Hekate main menu (by selecting “Back” at the top)

  15. From the hekate main menu, Select “Tools”
    DvXS7dy.png



  16. Select “Dump package1/2” and allow this to run

  17. When complete, return to Tools menu

  18. “Select “Backup”
    pK6vWea.png



  19. Select “Backup eMMC BOOT0/1” and allow this to run

  20. When complete, return to “Backup options” menu (by selecting “Back” at the top)

  21. Repeat steps 19 & 20, selecting “Backup eMMC RAW GPP”, “Backup eMMC SYS” & “Backup eMMC USER” instead of “Backup eMMC BOOT0/1”
    - These may take some time so be patient. The result will be a
    - dump of Full NAND Minus the boot0/1


    - (I RECOMMEND YOU BACKUP EMMC SYS , YOU WILL NEED A EXTRA 2.61GB ON SD CARD FOR THIS..
    Used so you can recover switch in case of bad rawnand)
    ANOTHER COPY OF YOUR SYS FILES THE SAME IN YOUR RAWNAND.BIN Basically



    - (Backing up EMMC USER is Your Choice as it requires 26gb Extra)
    Used to backup your User files saves games etc


    emmc user and emmc sys are in your rawnand.bin > (eMMC RAW GPP)



  22. Return to Hekate main menu (by selecting “Back” at the top)


  23. From the hekate main menu, Select “Launch”
    SB5LCUe.jpg



  24. Select “BisKeyDump" from the Tools section

  25. Your keys will display on the screen. Follow the onscreen instructions to dump keys to SD card
    - Resulting file, on the root of the SD card, will be named device.keys
    - Rename to “biskeys.txt” if you wish.

  26. With TegraRcmGUI open, connect the Switch to the PC

  27. In TegraRcmGUI: Payload tab, navigate to the location of the Lockpick_RCM.bin on your PC and Inject payload... (Lockpick_RCM.bin is in the payloads to be used with tegra.zip)
    - You should now be presented with a freaking rainbow
    - It will automatically dump your keys to your SD card to the "switch folder" the file will be named "prod.keys"

  28. Press the power button on your switch.
    - Once powered off remove your SD card and put it into your pc.
    -You can now close Tegra and remove USB cable from switch to pc, if still connected.

You could also read the exFAT guide on my main post if you're having trouble running CFW or accessing Homebrew menu to update your lower system version to have exFAT support


If you have an error when trying to use Goldleaf, please try the Goldleaf Error Guide below.
If you don't, you can skip Goldleaf Error Guide


Goldleaf error guide
A Big Thanks @shchmue for sorting out the bugs and for her work on the Goldleaf issues.

Ensure you have a complete set of dump files:


Dump all the console info using the payload I included hekate.bin
(the hekate.bin is in the payloads to be used with tegra.zip)


  1. From the hekate main menu, select “Console Info”



    - Console Info -> Print fuse info -> Press power button
    - Console Info -> Print kfuse info -> Press power button
    - Console Info -> Print TSEC keys -> Press power button

  2. From the hekate main menu, Select “Tools"


    - Tools -> Backup -> Backup eMMC BOOT0/1

    - Tools -> Dump package1/2
  3. Ensure all of the following files are on your SD card:
    - /switch/Goldleaf.nro

  4. In the backup folder on the SD card, inside the letter and number folder, open folder dumps. Confirm the following files are present:


    - fuses.bin
    - kfuses.bin
    - tsec_key.bin


    If you’re missing one of the above .bin files, follow the Console Info instructions (above) to dump them again.
  5. In the pckg1 and pckg 2 folders on the SD card, confirm the following files are present:


    pckg1 folder
    - nxloader.bin

    - pkg1_decr.bin
    - secmon.bin
    - warmboot.bin

    pckg2 folder
    - ini1.bin
    - kernel.bin
    - pkg2_decr.bin


    If you’re missing one of the above .bin files, follow the Tools -> Dump package 1/2 instructions (above) to dump them again.
  6. On the SD Root, confirm the following files are present:


    - Boot0
    - Boot1
  7. In the backup random number letters folder, confirm the above files are present as well.



    If you’re missing one of the above files, follow the Tools -> backup emmc BOOT0/1 instructions (above) to dump them again.

    If they are missing from one location or the other, they can be copied to the location where they are missing.
Try the Goldleaf.nro again


Before you continue



It has come to my attention that some windows 10 operating systems with builds 1507/1511/1607 will experience an issue transferring nand or switch system files from PC to your SD card or Switch. This issue results in missing bits in the copies of the archive bits, needed for the switch to operate correctly or restore of nand to work.

Our member here @Draxzelex was nice to point this out :teach:, so I thought I would add it to the guide.

If you’re on one of the affected versions of Windows 10, before transferring your files, it is recommended to use a third party application called Total commander to transfer the backups to your SD card or even when you’re moving the backup folders on PC

To check your windows 10 version:

Go to windows search by clicking the windows key (start)

Search for ‘about your PC’ in the search bar, and select ‘About your PC’ in the search results

On the right-hand side scroll down to Windows Specifications

In this section, you will see your build version

If you are above build 1607 you can ignore this information in blue.
If you are not above version 1607 then either please use Windows Update to update your build or use Total commander to move your backups around your PC or to SD card


Instead of using Total commander, you could try a method of using a compression zip/rar program like WinRAR to archive or compress the backup folder on your SD before you even think about transferring to PC, and when you go to move backup back to SD card transfer your zip or RAR to SD then extract it from there
clip_image002.png
(Not tested )



You may Continue


29. On your PC make a folder where you're going to place your backup switch nand and files



30. If you used lockpick to backup your prod.keys then Open your SD card on your PC and copy the prod.keys from the switch folder on the SD card to the folder.



31. Copy the entire backup folder from SD card to your backup folder on PC.



32. Please zip or rar the backup folder once you have transferred it on your PC
this will also save space.



Also, save the biskey.txt and prod.keys You made earlier to your backup folder
Once you backed up to your PC

And that's it.


I hope this may of helped you all or i just wasted hours of my life here


You can skip the guide below if your only backing up your nand and keys

Restore Nand Guide
I take no responsibility for issues you may have or if your system fails to boot after restoring your NAND.
You do this at your own risk!

Please make sure to read the blue text in my Backup guide above when you made your backup

To follow the below guide, you will need the following:

Make sure your battery is charged (at least enough to complete the restore process) or keep the switch plugged into a power source (USB cable should be fine)

Restoring your nand.....

Providing you have followed my guide above to back-up your NAND, you should have the 3 required files in your backup folder
(Plus some other files we won't be using for your restore)


- boot 0

- boot 1

- rawnand.bin

If you do not have these files please do not continue

  1. From your number and letters folder inside the backup folder on pc, copy the below files to the restore folder on your SD card


    - Boot 0
    - Boot 1
    - rawnand.bin



    Example on sd card
    inside The folder on SD card Backup>numberletter folder>restore folder <....place files here...
  2. Place the SD card into the Switch

  3. Put your Switch into Rcm Mode

  4. Boot into the hekate bootloader *Hekate.bin* By using tegrarcmsmashGUI
    SB5LCUe.jpg


  5. From the bootloader hekate main screen, select tools option with the volume +/- buttons and press power button to select




  6. In the tools section, Select Restore
    DvXS7dy.png





  7. In the restore options screen, select “Restore eMMC BOOT 0/1”
    - You will be warned and asked if you are sure. To continue, press the power button and wait for the process to finish.
    - Once finished press any key to go back (do not power off at any time)

    cwvD6Db.png





  8. Still in the restore options screen, select “Restore eMMC RAW GPP”
    - You will be warned and asked if you are sure. To continue, press the power button and wait for the process to finish. This will take some time.

    - Once finished press any key to go back (do not power off at any time)
    cwvD6Db.png





    Now assuming all the processes went smoothly and you got no errors you should now be restored!
  9. Go back to the Hekate main menu by selecting back
    SB5LCUe.jpg





  10. On the main menu select power off.




  11. Reboot your switch as normal with the power button


If all went well, you should now see the Nintendo logo and should boot back into the main OS of the switch.


Well done you successfully restored your NAND!!

Did you sh*t your pants ??? :shit::lol:



Again I take no responsibility For backing up and or restoring your NAND, this is a dangerous process and you do it at your own risk.


If I have helped you and this worked for you please hit that like button.


Thanks, and have a good day!

Exfat Update Guide For
Lower System Versions
At this time I have not made the exFAT guide myself so until I do I thought I’d link to another exFAT guide,
Please like his thread if it helps you and mine if you like the information I’ve provided


Method 1 (Not as easy but doable)
Method 1 Link
Method 2 (A lot easier)
Method 2 Link



Info taken from Method 2


Q: I just want to install exFAT on the current firmware version I already have. Can I do this using ChoiDujourNX?


A: Absolutely, just place a folder containing the exFAT version of the firmware you are currently running and choose it inside ChoiDujourNX. It will only install the required couple of packages needed for exFAT, and you can even disable the AutoRCM option (if you are sure the firmware you are installing is the same burned fuse count as the one you are currently running).

If i have helped you, Or you like my post
Then Please hit that like button it will help me a'lot thank you



 

Attachments

  • TegraRcmGUI_v2.4_Installer.zip
    8.9 MB · Views: 3,216
  • joiner_scripts_for_windows_linux_macos.zip
    1,016 bytes · Views: 1,770
  • Payloads to be used with Tegra.zip
    170.4 KB · Views: 2,493
  • SDFILES Part 2 (Place the contents of this zip onto root of your sdcard).zip
    8.6 MB · Views: 2,269
  • SDFILES Part 3 (Place the contents of this zip onto root of your sdcard).zip
    9 MB · Views: 2,407
  • SDFILES Part 1 (Place the contents of this zip onto root of your sdcard).zip
    7.7 MB · Views: 1,351
Last edited by Canna,

OrGoN3

Well-Known Member
Member
Joined
Apr 23, 2007
Messages
3,241
Trophies
1
XP
3,258
Country
United States
Alright. I got the very nice author of TegraRCMGUI, @eliboa , to update their project! It now includes biskeydumpv9 for 8.1.0!!!! While I'm not trying to make Canna's post obsolete, I am trying to get everyone updated methods for backing up their Switches. So, if you need to dump biskeys and you're on 8.1.0, load up TegraRCMGUI and press the button for biskeydump! That's it! https://github.com/eliboa/TegraRcmGUI/releases/tag/2.6

Hekate or the NX Nand Manager (also written by @eliboa ) I posted can dump the rest for ya through their menus. NX Nand Manager requires a Windows PC, but dumps directly to your hard drive, not to the SD card. https://github.com/eliboa/NxNandManager/releases
 
Last edited by OrGoN3, , Reason: updated to add links and correct the name. It's TegraRCMGUI, not TegraSmashGUI.

bird333

Well-Known Member
Member
Joined
Aug 13, 2018
Messages
118
Trophies
0
Age
55
XP
600
Country
United States
I don't see an option under tools for backing up biskeys. Is the 'biskeydump.bin' payload the same thing?
 
Last edited by bird333,

barelynotlegal

Well-Known Member
Member
Joined
Mar 30, 2016
Messages
224
Trophies
0
Age
54
XP
530
Country
United States
quick question, was wondering waht option to choose if im not using the boot files? restoring same firmware just want to "clean" the console as im going to try sxos for a minute . thanX in advance
 

ColasBCK

New Member
Newbie
Joined
Aug 8, 2019
Messages
1
Trophies
0
Age
30
XP
55
Country
France
Hi guys, I'm new here and have a "simple" (not for me) question :)
I'd like to restore my NAND (which is clean) and my switch is in autoRCM.
Do I have to disable autoRCM before doing it ?
Or will the backup "delete" the autoRCM since it will bring my switch to its "clean" state ?
Thank's in advance for your answer :)
 

Draxzelex

Well-Known Member
Member
Joined
Aug 6, 2017
Messages
19,011
Trophies
2
Age
29
Location
New York City
XP
13,378
Country
United States
Hi guys, I'm new here and have a "simple" (not for me) question :)
I'd like to restore my NAND (which is clean) and my switch is in autoRCM.
Do I have to disable autoRCM before doing it ?
Or will the backup "delete" the autoRCM since it will bring my switch to its "clean" state ?
Thank's in advance for your answer :)
Well you do not have to disable AutoRCM to restore your NAND. If your NAND was dumped before AutoRCM was enabled, then restoring your NAND will return it to the state before AutoRCM was enabled.
 

junk18993

New Member
Newbie
Joined
Aug 11, 2019
Messages
3
Trophies
0
Age
34
XP
54
Country
Australia
This guide is really really bad. If you extract the SD Files to your SD card when you run Hekate.bin instead of Hekate running it will attempt to boot something else (SX I think) and you get an error screen with a red pixel emoji and the word boot.dat (something like that) which almost certainly puts entries in the Switch's log ruining your chance of getting a clean backup.

Don't use the SD Files just use the Tegra payloads for biskey and lockpick.

You should probably edit your guide or fix the SD Files before you ruin even more peoples clean backups.
 
Last edited by junk18993,
  • Like
Reactions: Ottoclav

Canna

Bad Ass Poisonous Mushroom
OP
Member
Joined
Jul 14, 2018
Messages
1,396
Trophies
0
Age
36
Location
AZ
XP
1,539
Country
United States
This guide is really really bad. If you extract the SD Files to your SD card when you run Hekate.bin instead of Hekate running it will attempt to boot something else (SX I think) and you get an error screen with a red pixel emoji and the word boot.dat (something like that) which almost certainly puts entries in the Switch's log ruining your chance of getting a clean backup.

Don't use the SD Files just use the Tegra payloads for biskey and lockpick.

You should probably edit your guide or fix the SD Files before you ruin even more peoples clean backups.

you should learn about how logs are created, and learn to not be such a rude little sh^t..

The problem was the autoboot setting of hekate. but your know that if you knew anything .... do some research, learn and then tell me im wrong and my guide and files are worthless...

The issue of the autoboot was fixed, and i have updated my files so no autoboot occurs... im sorry ctcaer updated his ini in hekate and it had autoboot enabled.. i cant catch everything...

im sorry if this has ruined anyone else's delicate little lifes...
 

ganons

Well-Known Member
Member
Joined
Jun 12, 2005
Messages
3,290
Trophies
1
XP
3,102
Country
Would like to make suggestion on step 21.
Please add - (Backing up EMMC USER is Your Choice as it requires 26gb Extra)
Used to backup your User files saves games straigher after where you wrote “Backup eMMC USER”

Went onto backup emmc user to only then read it is optional. Since this is optional and no way to cancel, you will have to wait for a long time for it to finish.
 

bitofaloser

New Member
Newbie
Joined
Aug 14, 2019
Messages
2
Trophies
0
Age
50
XP
47
Country
Canada
Thanks very much for this guide, and thanks to anyone who is contributing their time and effort.

I am on firmware 8.1.0. I followed the Backup Guide on the first page using the attached files. I got to Print TSEC keys in Step 13 and got a message to the effect of "unknown pkg1". After some poking around a couple forums, I decided to try to inject the latest hekate from github (hekate_ctcaer_5.0.1.bin) and inject that while keeping everything else the same as it is in the guide.

This got me past the TSEC keys part and they successfully dumped, however now I am on Step 16 Select “Dump package1/2” and allow this to run, but my Switch doesn't seem to be doing anything. I selected this option and the screen says:

Found pkg1 ('20190531152432').

sept will run to get the keys.
Then rerun this option.


...but the screen is just sitting here doing nothing. It has been like this for a really long time. Probably an hour or so now. Am I supposed to do something else here now? Do I need to update more of the software that I am running to get this all working?
 

bitofaloser

New Member
Newbie
Joined
Aug 14, 2019
Messages
2
Trophies
0
Age
50
XP
47
Country
Canada
OK. Did a bunch of reading on Hekate and realized that I don't really need to dump package1/2, but just in case I ever need it for any other tools or software I want to run, It seemed like a good idea to keep trying. Realizing that 'sept' is something that comes with atmosphere, I downloaded the latest version of atmosphere and after extracting the contends of the sdfiles attached to the first post onto my card, I the copied the latest version of atmosphere onto it as well.

I got to the screen that says

"Found pkg1 ('20190531152432').

sept will run to get the keys.
Then rerun this option."

I pressed the power button (even though the instructions above don't say to, and the instructions on page one don't say to) and this loaded something called sept and returned me to the menu. I went back into the "Dump package1/2" option, but this time it said

"Found pkg1 ('20190531152432').

Kernel size: 0x2C2000
INI1 size: 0x00000

pkg2 dumped to pkg2_decr.bin
Kernel dumped to kernel.bin
INI1 dumped to ini1.bin

Done. Press any key..."

So I guess I am good? Hope so! Hope this helps someone else if they are stuck.

Off to complete the rest of my backups now...

EDIT:

"Failed on step 24 "Select "BisKeyDump" from the Tools section".

Grabbed biskeydumpv9, replaced it in the bootloader\tools folder and ran it again. It worked this time.

I also grabbed the newest lockpick_RCM for step 27. Not sure I needed to, but it seems to make sense that I do.

Success! All backed up on firmware 8.1.0."
 
Last edited by porkiewpyne, , Reason: As per request

WiseFool

Well-Known Member
Member
Joined
Sep 3, 2018
Messages
144
Trophies
0
Age
33
XP
432
Country
India
Quick question.

My switch came on 4.1.0. Have a clean nand backup before hacking using a exfat card.

Now I want to create emummc and my sd is on fat32. How do I split my nand backup. I read everywhere that if backup was done on fat32 you will get 15 or 30 files.

I used the NSP splitter to make it into 8 parts. Will this work for restoring my clean nand?
 

SixthElvis

New Member
Newbie
Joined
Oct 28, 2019
Messages
1
Trophies
0
Age
39
XP
51
Country
Aruba
Hi, tried to follow the Guide but it says "unknown pkgi version for reading tsec firmware" when trying to print TSEC keys.
My Switch is on 9.0.1 - is this method even possible with this FW?
 

Canna

Bad Ass Poisonous Mushroom
OP
Member
Joined
Jul 14, 2018
Messages
1,396
Trophies
0
Age
36
Location
AZ
XP
1,539
Country
United States
Hi, tried to follow the Guide but it says "unknown pkgi version for reading tsec firmware" when trying to print TSEC keys.
My Switch is on 9.0.1 - is this method even possible with this FW?
update hekate , drag to sd. do not replace hekate.ini

At this time i have not updated all files to latest i will get around to this at some point.
Canna is getting married soon so super busy, only pop on now and then.
Will update when i get a lazy day.
 
  • Like
Reactions: Drillakilla

tonyzuka

New Member
Newbie
Joined
Nov 10, 2019
Messages
1
Trophies
0
Age
42
XP
54
Country
France
Hello, Thx for your work, but I'm unable to extract SDF Files (Part 1 is corrupted) (Wirar 5.00, Win 7 sp1).
Sorry, it works with 7zip ^^
 
Last edited by tonyzuka,
  • Like
Reactions: Canna

ioshi

Member
Newcomer
Joined
Feb 11, 2016
Messages
15
Trophies
0
Age
34
XP
121
Country
Italy
Hi bro i follow your guide,but after a nand restore when switch booting up stuck on black screen after nintendo logo.
I can enter in rcm but when try to boot up anytime nintendo logo->black screen.
Can you help me?
 

Canna

Bad Ass Poisonous Mushroom
OP
Member
Joined
Jul 14, 2018
Messages
1,396
Trophies
0
Age
36
Location
AZ
XP
1,539
Country
United States
Hi bro i follow your guide,but after a nand restore when switch booting up stuck on black screen after nintendo logo.
I can enter in rcm but when try to boot up anytime nintendo logo->black screen.
Can you help me?


If upgrading or downgrading
did you put the FSkip on your sd card and the hekate ini ?

And launch the fs kip from launch in hekate ?


If you just restored then you should be fine,
as a restore is a backup of nand and just a restore with hekate no file changes,


How did you restore your backup ??

Did you restore the boot 0 and boot 1 also ? as u need to restore those for it to work as well.
 
Last edited by Canna,
  • Like
Reactions: ioshi

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: https://www.youtube.com/watch?v=pkYA4rALqEE