Hacking Question Emunand, Certificates and Banning

Kadji · Aug 17, 2018

This is a thing that just came to my mind:

If we have a CFW that supports Emunand (whenever that may be) we are still not Save from a Ban because our Emunand would still use the same certificate, that should be common knowledge by now.
We also can not forge our own Certificate, and even if we could I am not sure if PRODINFO is even writeable.
Keeping the Switch offline in a Emunand Setting is to dangerous for me (don't want to unplug that Ethernet Cable all the time).

With that in mind I got thinking...since Bans are handled by the unique console certificate - what would happen if we REMOVED the certificate from our Emunand?
Of course that would kill any onlineservices - but on the other hand Nintendo would have no Idea which Switch to Ban.

So my question is:
- Can we remove (in theory) our console certificate from our Emunand?
- Would the Console still work? (obviously no online)
- Would this be a save way to "hide" the Identity of your switch, not having to worry about disabling Internet whenever using CFW / Homebrew / Backups?

windhazard · Aug 17, 2018

What you said is true, but you missed the point. People are going to go full CFW on Emunand and never go online with it, so you can enjoy the benefits of CFW without sending suspicious activities to Nintendo. Sysnand will be used for going online with purchased games only. Hence you can have the best of both world. Playing online with pirated contents is still impossible.

Kadji · Aug 17, 2018

Thanks for the answer but you may have misunderstood me:

I do not want to play online in my CFW environement.
I want to disable all possible Online Activities on the CFW Environement, that even when somebody TRIED to play online the switch could not be banned because of the missing certificate.

I share my Switch with some friends and I can not be 100% sure that they would NOT try to play online in the CFW environement. Thats why I want my certificate removed from the CFW Emunand.

No Certificate -> No chance for Nintendo to identify the console but in return absolutely no online play.
That was my thought process.

Edit: We can never be 100% sure what Nintendo uses to figure out who is running CFW so removing the one thing that Nintendo uses to identify each Console seems like the most secure way to prevent a consoleban.
Since I plan to use CFW mostly for Emulators / my official Firmware for Onlinegames I don't want to risk a Console Ban - and buying a second switch just for some emulators is a bit too pricey at the moment.

GothicIII · Aug 17, 2018

Kadji said:
Thanks for the answer but you may have misunderstood me:

I do not want to play online in my CFW environement.
I want to disable all possible Online Activities on the CFW Environement, that even when somebody TRIED to play online the switch could not be banned because of the missing certificate.

I share my Switch with some friends and I can not be 100% sure that they would NOT try to play online in the CFW environement. Thats why I want my certificate removed from the CFW Emunand.

No Certificate -> No chance for Nintendo to identify the console but in return absolutely no online play.
That was my thought process.

Edit: We can never be 100% sure what Nintendo uses to figure out who is running CFW so removing the one thing that Nintendo uses to identify each Console seems like the most secure way to prevent a consoleban.
Since I plan to use CFW mostly for Emulators / my official Firmware for Onlinegames I don't want to risk a Console Ban - and buying a second switch just for some emulators is a bit too pricey at the moment.

If emunand is available just dont set up wifi.
No way is it safe to remove the cert and be unbannable. Nintendo made the switch transparent for them so it is very much possible to ban the switch without knowing the cert. We just don't know yet how because the traffic to nintendos server is encrypted and cannot be analysed in its current state.

Kadji · Aug 17, 2018

Well gues my friends can no longer borrow my switch then (I don't trust them to not try and go online).
Thanks for the answers, thread may be closed.

xabier · Aug 17, 2018

Kadji said:
This is a thing that just came to my mind:

If we have a CFW that supports Emunand (whenever that may be) we are still not Save from a Ban because our Emunand would still use the same certificate, that should be common knowledge by now.
We also can not forge our own Certificate, and even if we could I am not sure if PRODINFO is even writeable.
Keeping the Switch offline in a Emunand Setting is to dangerous for me (don't want to unplug that Ethernet Cable all the time).

With that in mind I got thinking...since Bans are handled by the unique console certificate - what would happen if we REMOVED the certificate from our Emunand?
Of course that would kill any onlineservices - but on the other hand Nintendo would have no Idea which Switch to Ban.

So my question is:
- Can we remove (in theory) our console certificate from our Emunand?
- Would the Console still work? (obviously no online)
- Would this be a save way to "hide" the Identity of your switch, not having to worry about disabling Internet whenever using CFW / Homebrew / Backups?

Set up an ethernet connection con emunand with wrong settings. To me it seems easier than removing the device or deleting stuff from emunand.

Hacking Question Emunand, Certificates and Banning

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Similar threads

Popular threads in this forum