Tutorial  Updated

Edit OFW clean Switch save data from NAND backup/restoring via Fusee Gelee payloads

#BLACKLIVESMATTER
UPDATE:
I am currently still not banned utilizing this method as of 1/16/2022!
THIS METHOD CURRENTLY WORKS WITH POKEMON SWORD AND SHIELD USING PKHEX AS WELL AS ANIMAL CROSSING: NEW HORIZONS USING NHSE
THANKS TO @Kaphotics FOR BOTH EDITORS


Hello! This tutorial will share how I managed to successfully edit my games' save data from OFW NAND and play them without any issue after restoring. When I initially began searching for info on how to do this, it wasn't as readily available as it could've been. Because of that, the process was not very easy to figure out; however, I hope this tutorial can be a useful "all-in-one" reference for anyone looking to do the same! If anything is unclear or missing, always feel free to reply below or send me a PM. Enjoy!

What you'll need:
  • A Nintendo Switch system that has not been physically patched for the Fusee Gelee exploit (firmware version won't matter)
  • Preferably a microSD card large enough to fit an entire NAND backup onto (I use a 128gb card) to save a TON of time
  • A way to connect your Switch to your computer (I have a USB-C MacBook charging cable)
  • A method of booting the Switch into RCM mode (I use a bent paperclip) which user @Technicmaster0 has a great list of here
  • A Fusee Gelee payload exploit program like TegraRcmGUI (fusee-launcher for macOS/Linux)
  • Lockpick_RCM for your Switch's console keys
  • hekate for NAND backup and restoring
  • HacDiskMount found here for mounting NAND backups
  • hactoolnet found here for extracting/injecting editable save data (WARNING: hactoolnet v0.7.0 is BROKEN and will not consistently resign)
  • A save editor(s) for the game(s) of your choice
  • OPTIONAL: I don't use this myself, but if you prefer, you can use memloader to read the microSD card while your Switch is connected instead of taking the card out and inserting it into your computer (found here with a tutorial here)
The process:
Following this guide got me into the Switch hacking scene in the first place. I was curious and found it during a Google search, and I found it to be very helpful! It outlines how to boot your Switch into RCM mode, how to find out if your Switch can use the Fusee Gelee exploit for payloads, how to prepare your microSD card, and how to create a NAND backup (Safety Precautions page)! My advice is to follow this guide to the point where a NAND backup is created on your microSD card, as that's the point where this tutorial will begin. The backup process does take time. Always remember to hold the volume down button when injecting the hekate payload as well.

Something very important to ensure you include during this initial setup is the sept folder on your microSD card. It is included in the Kosmos Defaults ZIP build, and you must include everything within the sd folder from the ZIP build you download. This helps guarantee that you have the appropriate and correct prod.keys for successful save data signing. You likely cannot do this guide correctly without the sept folder on your microSD card.

Once a rawnand.bin (~30gb) has been created in the root\backup\XXxXXXXX folder of your microSD card utilizing hekate, you will also want to run the Lockpick_RCM payload via TegraRcmGUI in order to obtain all the console-specific keys you'll need. This will create a prod.keys file within the root\switch folder of your microSD card. Once you've successfully gotten your rawnand.bin NAND backup and prod.keys console keys file, you can proceed to your computer.

Take your microSD card from the Switch and insert it into your computer (or utilize memloader as mentioned above in the What you'll need section). CREATE A BACKUP OF YOUR RAWNAND.BIN AND BOOT0 AND BOOT1 FILES SOMEWHERE SAFE (you should have the two boot files if you followed the sdsetup guide mentioned at the start of this section). I cannot stress this enough. If something goes wrong, these will be what saves your system from becoming a brick.

Open HacDiskMount and select File > Open file, and then get to the rawnand.bin in the root\backup\XXxXXXXX folder and Open. Scroll all the way down until you find the USER partition and open it via double-click. At this point, you will need the specified BIS Key X indicated in the top-left corner of the Operations on USER window. For example: mine needed BIS Key 3, the Crypto (Upper) and Tweak (Lower) keys. To get those, go to the root of your microSD card, then the switch folder, and prod.keys should be located there. Right-click prod.keys and Open with Notepad. Locate the necessary key (in my case this was bis_key_03), and copy the first 32 characters, then paste them into the Crypto (Upper) field back in HacDiskMount (spaces will automatically populate every two characters), and then do the same thing for Tweak (Lower) except copy and paste the remaining 32 characters. Once done, press the Test button to make sure you've copied correctly, and then Save so you don't have to copy and paste every time later on.

Under the Virtual drive section of the Operations on USER window, click on the Install button to get the appropriate driver for mounting NAND backups. Once it's finished installing the driver, press Mount. After about 10 seconds or so, you can find your NAND has been mounted as drive A: on your computer. Its files can now be explored! Navigate to the A:\save folder. All of the files listed here are your games' save data files. They aren't easily discernible, so some trial and error is required for locating the right game save you want to edit. Here's a guide on a pretty great method for extracting all the data at once. I used this and then figured out Let's Go only has a file called savedata.bin, and FFX has ffx_00X files and a GameSettings file where X is the save slot in the game. Every game probably has its own distinguishing characteristics, so you might have to get creative in order to find out which save file is the game you want to edit for.

Once you know exactly which file in A:\save is the one of the game you want to edit, this is where hactoolnet comes in. I currently have individual hactoolnet folders for EVERY game whose saves I edit. You can come up with your own system, but to keep it organized, I have a main hactoolnet folder, and within that, folders of all the games I edit such as FFX hactoolnet and LGE hactoolnet. Then within each of those folders (FFX hactool for example), my setup looks as follows:

tGxos7U.jpg

Notice the out and sav folders, the extract.bat and inject.bat, and the prod.keys files. These are all required for this to work properly if you follow my method. Everything else should come with the hactoolnet download in the What you'll need section. The extract.bat and inject.bat files will be edited via Notepad. To create them from scratch, right click in your hactoolnet folder window and go to New > Text Document and rename it appropriately. The files will contain the following:

extract.bat:
Code:
hactoolnet.exe -k prod.keys -t save sav/savefilename --outdir out/savefilename
pause

For this example, my FFX save data file in A:\save is 0000000000000019, so my script would be:
Code:
hactoolnet.exe -k prod.keys -t save sav/0000000000000019 --outdir out/0000000000000019
pause

inject.bat:
Code:
hactoolnet.exe -k prod.keys -t save sav/savefilename --replacefile /savefile out/savefilename/savefile
pause

To maintain the example, the FFX save data I want to edit is specifically the ffx_002 file WITHIN the 0000000000000019 save data file found in the NAND backup, so the script I use would be:
Code:
hactoolnet.exe -k prod.keys -t save sav/0000000000000019 --replacefile /ffx_002 out/0000000000000019/ffx_002
pause

prod.keys:
This is just your prod.keys file from earlier. Copy and paste it here from your microSD card root\switch folder.

Once this has been set up, we can run a test to make sure it works properly. Go back to A:\save and copy the save data file of the game you want to edit. Paste it in the sav folder in our hactoolnet setup. I also recommend making a backup somewhere safe just in case you wreck the save data. After that, run the extract.bat file. This will execute the script we wrote which extracts an editable save file from the save data in the sav folder, and then place it in the out folder. The resulting command prompt window should look similar to this to indicate success (sensitive data removed):
...\Desktop\Switch\hactoolnet\FFX hactoolnet>hactoolnet.exe -k prod.keys -t save sav/0000000000000019 --outdir out/0000000000000019
Failed to match key eticket_rsa_kek_source
Failed to match key eticket_rsa_kekek_source
Failed to match key rsa_oaep_kek_generation_source
Failed to match key rsa_private_kek_generation_source
Failed to match key ssl_rsa_kek_source_x
Failed to match key ssl_rsa_kek_source_y
/ffx_002
/ffx_001
/GameSettings

Savefile:
CMAC Signature (GOOD):
Title ID:
User ID:
Save ID:
Save Type:
Owner ID:
Timestamp:
Save Data Size:
Journal Size:
Free Space:
Header Hash (GOOD):
Number of Files:
Magic:
Version:
Salt Seed:
Level 0:
Data Offset:
Data Size:
Hash Offset:
Hash BlockSize:
Level 1:
Data Offset:
Data Size:
Hash Offset:
Hash BlockSize:
Level 2:
Data Offset:
Data Size:
Hash Offset:
Hash BlockSize:
Level 3:
Data Offset:
Data Size:
Hash Offset:
Hash BlockSize:


...\Desktop\Switch\hactoolnet\FFX hactoolnet>pause
Press any key to continue . . .
Ignore the "Failed" signals at the very top, because as long as your CMAC Signature and Header Hash are both (GOOD), that should be indicative of a successful extract.

After you get a successful extraction, head into the out folder. There you will now see a folder with the same name as the save data file we took from the NAND's A:\save folder. For me, the folder was 0000000000000019. When I go into that folder, I can see my ffx_002, ffx_001, and GameSettings files. These are the editable save files at this point. If a save editor exists for your game, you'll want to open these files with that program now and make your changes. I will stick to editing just my ffx_002 file in this instance as that's what's outlined in my inject.bat script.

Once I'm finished making my changes, I overwrite the ffx_002 file and save it. I am now ready to inject it back into the 0000000000000019 file in the sav folder. To do so, all I have to do at this point is run the inject.bat file. This will replace the ffx_002 file inside the 0000000000000019 file and sign the save correctly. Again, the resulting command prompt window should look similar to this to indicate success:
...\Desktop\Switch\hactoolnet\FFX hactoolnet>hactoolnet.exe -k prod.keys -t save sav/0000000000000019 --replacefile /ffx_002 out/0000000000000019/ffx_002
Failed to match key eticket_rsa_kek_source
Failed to match key eticket_rsa_kekek_source
Failed to match key rsa_oaep_kek_generation_source
Failed to match key rsa_private_kek_generation_source
Failed to match key ssl_rsa_kek_source_x
Failed to match key ssl_rsa_kek_source_y
Replaced file /ffx_002
Successfully signed save file

...\Desktop\Switch\hactoolnet\FFX hactoolnet>pause
Press any key to continue . . .
Again, you can ignore the "Failed" signals. If you see Replaced file /savefile and Successfully signed save file, then those are very good signs! All that's left to do is get it back into the NAND and then restore.

In order to successfully inject and sign save data correctly for a game like Animal Crossing: New Horizons, you must use the repack function as opposed to the replacefile function. The extract.bat is the same, but here is the appropriate inject.bat:
Code:
hactoolnet.exe -k prod.keys -t save sav/00000000000000xx --repack out/00000000000000xx
pause
Where you replace "xx" with your own appropriate save file name. Special thanks to this post as well as this one, both by @Max89, for the information!

Once the inject.bat is finished, you'll be able to go into the sav folder and see your save data file still there; only this time, it's been injected with your edited save file! Copy the save data file (in my example it's the 0000000000000019 file) and go back to the NAND's A:\save folder. Once there paste and overwrite the save data file. After that's finished, go back to HacDiskMount and click Unmount, and close the Operations on USER window. Click File > Close, and then go to root\backup\XXxXXXXX on your microSD card. Move the rawnand.bin file into the restore folder.

Eject your microSD card from your computer, insert it back into your Switch, and go back to TegraRcmGUI if your Switch isn't still running the hekate payload. Inject the hekate payload while holding the volume down button on the Switch, but skip this step if hekate is still up and running on your Switch from when you made the NAND backup.

Go to Tools > Restore > Restore eMMC RAW GPP to restore the NAND we pasted our edited and signed save data file into. This, like the NAND backup process, will take some time to complete. Once it's done, though, you're all set! Start the game whose save data file(s) you edited, and see the results of your hard work!

Some notes:
As you can probably tell, this process isn't simple by any means. Due to this, and the amount of time it takes to just make a NAND backup and then restore it, I recommend you make a list of edits you'd like to do beforehand in order to make the most of this process each time you do it. To make future save edits, you will have to make another NAND backup again and repeat this process. With my 128gb microSD card, it takes roughly 30 minutes to make a backup, and roughly 30 minutes to restore a backup.

Thanks for checking out my tutorial! Let me know if it's helpful, and if anyone has anything they'd like to add to the tutorial, please send a PM my way or make a reply here with your recommendation!

Here are nearly all the resources I found while figuring all of this out for myself:

FAQ:
Unfortunately, you need a Switch specifically susceptible to the Fusee Gelee exploit. Until a new exploit is discovered on newer consoles, this can only be done on consoles manufactured prior to Nintendo's hardware patching. Refer above in this guide to What you'll need.
You can, however, use the official save file transfer service Nintendo implemented in a firmware update to move save data from older, exploitable consoles to newer ones.
Of course! I am myself taking a risk by doing this, but I understand that the risk is spectacularly low with this specific method. As long as you aren't making outrageous edits, you should be fine. That is the entire reason I drummed up this tutorial is to provide a ridiculously safe method outside the realm of CFW. Do NOT do this if you are uncomfortable with the process or its potential consequences.
Absolutely. But using CFW is naturally riskier than this method. If you have a safe way of doing so and are comfortable, more power to you! I personally do not wish to dabble in CFW on my main, clean Switch.
Yes! As long as the clean Switch is exploitable via Fusee Gelee, you can put save files onto its NAND from a CFW Switch, and, of course, vice versa. Just make sure you've played the game on the receiving console so there is save data to replace.
Sure! Make sure the console you're injecting the external save into has played the game at least once so you have something to replace. Crossing user profiles does not matter.
If your microSD card is not large enough to have your entire NAND on it, it was probably broken up into many bin files. To create your single NAND file with them, go to this releases page for hekate and find and download the latest joiner_scripts_for_windows_linux_macos.zip file. Make sure to move the appropriate bat file to your folder with all your NAND bin files. If you have 15 bin files, run the join_15_2GBparts_windows.bat file. If 30, run the join_30_1GBparts_windows.bat file.
Likely because you forgot to include the sept folder when generating your prod.keys console file. Refer above early on to The process.
Don't be concerned. In more recent releases of hactoolnet, the dll files were embedded, so you won't see them in your hactoolnet folder.
Yes, but it's slightly riskier since there's not a backup every time. When you have TegraRcmGUI open with your Switch connected in RCM mode, go to the Tools tab and select "eMMC rawNAND (DANGEROUS)" from the drop down menu, and click the USB icon button to the left. This will allow you to then use HacDiskMount normally as stated above under The process. This directly mounts and edits the NAND without a backup, so please do this at your own risk and only if you know exactly what you're doing.
I have only tried this on Windows, so I really don't know. Sorry!
 
Last edited by kimbra,

bootmonster

Well-Known Member
Member
Joined
Oct 26, 2002
Messages
477
Trophies
2
XP
1,756
Country
United States
Some people saying stuff about SSBU in the first page or something, but also I have been reading into transferring save from CFW to OFW using checkpoint mostly. I should have specified that.

Did you hack your save? Or was it a straight transfer from one switch to another?

I would say the ban risk increases if you have edited the save, but if it’s a legit save it’s unlikely Nintendo would detect it is anything other than a normal save.

If you have used checkpoint on your switch I hope you have a nand backup as I would be wiping and restoring your switch before going online.
 

andzalot55

I'm very delicious. mmmm.
Member
Joined
Nov 14, 2014
Messages
808
Trophies
0
Location
Mc Donalds.
XP
2,104
Country
Canada
Did you hack your save? Or was it a straight transfer from one switch to another?

I would say the ban risk increases if you have edited the save, but if it’s a legit save it’s unlikely Nintendo would detect it is anything other than a normal save.

If you have used checkpoint on your switch I hope you have a nand backup as I would be wiping and restoring your switch before going online.
No edit was made for the save. I only transferred the save because of the stages that I had made in CFW that could've been made in OFW.

and I do have a NAND backup. Should I restore the NAND backup and follow this tutorial to properly transfer my save from CFW to OFW?
 

vermili0n

Member
Newcomer
Joined
Feb 13, 2013
Messages
6
Trophies
0
Age
40
XP
101
Country
United States
(...)

What you'll need:
  • A Nintendo Switch system that has not been physically patched for the Fusee Gelee exploit (firmware version won't matter) (...)
I will get a SWITCH soon, and I have a few questions on this matter. Rather than getting “freebies”, my purpose is basically acquiring the save data from my console.

I have installed CFW in other systems, such as the 3DS; usually you run a "temporary" CFW. Most of the time, this means you can eventually restore the OFW and play with your console as if nothing happened.

I have not tried CFW in the SWITCH, but as I see it, it should be the same. Is it?

I understand this process (this post) is about dumping the save file from a vulnerable console, editing it and restoring it to somewhere else. But I get lost between the comments and the guide…

Do I need 2 systems to do this? Or can I do this with a single, vulnerable console?
I want to get the save file, edit it, and restore it to the same console under OFW.

Thanks!
 
Last edited by vermili0n,

kimbra

Well-Known Member
OP
Newcomer
Joined
Jun 6, 2019
Messages
49
Trophies
0
Age
29
Location
United States
XP
1,203
Country
United States
I will get a SWITCH soon, and I have a few questions on this matter. Rather than getting “freebies”, my purpose is basically acquiring the save data from my console.

I have installed CFW in other systems, such as the 3DS; usually you run a "temporary" CFW. Most of the time, this means you can eventually restore the OFW and play with your console as if nothing happened.

I have not tried CFW in the SWITCH, but as I see it, it should be the same. Is it?

I understand this process (this post) is about dumping the save file from a vulnerable console, editing it and restoring it to somewhere else. But I get lost between the comments and the guide…

Do I need 2 systems to do this? Or can I do this with a single, vulnerable console?
I want to get the save file, edit it, and restore it to the same console under OFW.

Thanks!
Specifically, this guide is only for one console. The idea was to backup the original NAND, do what you want with your saves (backup, edit, etc.), and then restore them to your console’s NAND without ANY custom firmware whatsoever (to make it as undetectable as possible, in theory).
It just so happens that you’re able to use this guide as a resource for the transferring capabilities mentioned in earlier posts, which is great!
 

Golden_Landscape

New Member
Newbie
Joined
Jan 19, 2017
Messages
2
Trophies
0
XP
51
Country
United States
Thanks for the tutorial. I'm trying to pull saves off my emuNAND and inject them into the regular NAND. Is there any reason I can't take a clean NAND backup, use Checkpoint to import the saves from emuNAND, then just copy over the save directory of the tainted CFW NAND to the clean NAND?

The reason I ask is because obviously since the NANDs aren't linked, the profile IDs are going to be different. For example on my emuNAND the Sword and Shield save files exist in two seperate profiles, but on my the normal NAND they will exist on the same profile. Checkpoint seems easier for that method, but feel free to correct me if I'm wrong.
 
Last edited by Golden_Landscape,

bootmonster

Well-Known Member
Member
Joined
Oct 26, 2002
Messages
477
Trophies
2
XP
1,756
Country
United States
Thanks for the tutorial. I'm trying to pull saves off my emuNAND and inject them into the regular NAND. Is there any reason I can't take a clean NAND backup, use Checkpoint to import the saves from emuNAND, then just copy over the save directory of the tainted CFW NAND to the clean NAND?

The reason I ask is because obviously since the NANDs aren't linked, the profile IDs are going to be different. For example on my emuNAND the Sword and Shield save files exist in two seperate profiles, but on my the normal NAND they will exist on the same profile. Checkpoint seems easier for that method, but feel free to correct me if I'm wrong.

The profiles don’t need to match and are irrelevant when following this method.

You have to launch the game once on the console/profile you want to inject into, to create a save file that you will then overwrite.

Then, since you are injecting into an already existing save it will be attached to whichever user’s save that you are overwriting.
 
Last edited by bootmonster,
  • Like
Reactions: kimbra

Zkajavier

Well-Known Member
Member
Joined
Sep 13, 2009
Messages
358
Trophies
1
XP
1,334
Country
Costa Rica
Thank you very much for this guide, prior to this I used to Backup my Sysnand, then go offline and use checkpoint, edit and restore with checkpoint, then backup Sysnand again, use hacdiskmount to take the save files from the second backup and then move them to the original backup, then restore the original backup and go online.

This new method is essentially the same thing but way faster since you can extract and inject the save files without even running CFW.

Just as a side note: I made sure I generated the prod.keys properly (several times, the sept folder was there), but it kept saying CMAC Signature (Fail) for both injecting and extracting. Using hactoolnet_native.exe from v0.5.0 was the only way to get it to sign the save successfully, so you should try adding some information to the OP about that.

Basically this (Thank you Sh00tstyle!):
If anybody is having troubles signing their savegames with the latest version of hactoolnet (v0.7.1), the hactoolnet_native.exe from the v0.5.0 github release page worked like a charm for me! I was stuck for quite some time, but this is what made it work in my case :D
 

Globodus

Member
Newcomer
Joined
Dec 6, 2019
Messages
14
Trophies
0
Age
29
XP
174
Country
Aruba
2 weeks im using this method to edit Pokemon Swors Saves, works like a charm and still not banned despite being online almost everytime. It sure take a lot of time of process but being able to edit saves without cfw is really great. Ty so much!
 

UnknownOne111

New Member
Newbie
Joined
Dec 7, 2019
Messages
3
Trophies
0
Age
32
XP
49
Country
United States
2 weeks im using this method to edit Pokemon Swors Saves, works like a charm and still not banned despite being online almost everytime. It sure take a lot of time of process but being able to edit saves without cfw is really great. Ty so much!

Hey dude, what edits did you exactly make to your save?

I'm currently thinking of editing my sword save to just give myself 999 items in a bunch of slots such as TRs, battle items, etc. I'm going to legitimately breed my pokes for battle online and ofc won't use any cheats there, just want to make the grind to raising pokes easier with having access to all items. I'm just concerned of the risks of getting banned for making such modifications. It's good to know you haven't been banned though while playing online.
 

Thanatos Telos

random stuff
Member
Joined
Sep 13, 2009
Messages
848
Trophies
1
Age
25
XP
577
Country
United States
I'm getting this error for editing my Pokemon Shield save:

Code:
Failed to match key rsa_oaep_kek_generation_source
Failed to match key rsa_private_kek_generation_source
Replaced file /main

ERROR: ResultFsPreconditionViolation (2002-6000)

Additional information:
   at LibHac.ThrowHelper.ThrowResult(Result) + 0x2c
   at hactoolnet.ProcessSave.Process(Context) + 0x664
   at hactoolnet.Program.Run(String[]) + 0x2d1
   at hactoolnet.Program.Main(String[]) + 0x1a

With this inject.bat script:
Code:
hactoolnet.exe -k prod.keys -t save sav/000000000000001e --replacefile /main out/000000000000001e/main

I'd really appreciate any help.

EDIT:

Tried the hactoolnet_native program, and it gave:

Code:
Failed to match key rsa_oaep_kek_generation_source
Failed to match key rsa_private_kek_generation_source
Replaced file /main
Unable to sign save file. Do you have all the required keys?

I'm pretty sure I have all the required keys...

EDIT: Fixed it by redumping keys after redownloading sept onto the sd card.
 
Last edited by Thanatos Telos,

Stefnao

Member
Newcomer
Joined
Jul 9, 2018
Messages
7
Trophies
0
Age
29
XP
87
Country
Italy
I'm getting this error for editing my Pokemon Shield save:

Code:
Failed to match key rsa_oaep_kek_generation_source
Failed to match key rsa_private_kek_generation_source
Replaced file /main

ERROR: ResultFsPreconditionViolation (2002-6000)

Additional information:
   at LibHac.ThrowHelper.ThrowResult(Result) + 0x2c
   at hactoolnet.ProcessSave.Process(Context) + 0x664
   at hactoolnet.Program.Run(String[]) + 0x2d1
   at hactoolnet.Program.Main(String[]) + 0x1a

With this inject.bat script:
Code:
hactoolnet.exe -k prod.keys -t save sav/000000000000001e --replacefile /main out/000000000000001e/main

I'd really appreciate any help.

EDIT:

Tried the hactoolnet_native program, and it gave:

Code:
Failed to match key rsa_oaep_kek_generation_source
Failed to match key rsa_private_kek_generation_source
Replaced file /main
Unable to sign save file. Do you have all the required keys?

I'm pretty sure I have all the required keys...

EDIT: Fixed it by redumping keys after redownloading sept onto the sd card.

Hi, I have the same problem. I use hekate and Lockpick_RCM payload to extract the prod.keys, but I get the same error, editing Pokemon Shield save. I do not have sept on sd card, because I use sx os. Can you help me?
Thanks
 

Thanatos Telos

random stuff
Member
Joined
Sep 13, 2009
Messages
848
Trophies
1
Age
25
XP
577
Country
United States
Hi, I have the same problem. I use hekate and Lockpick_RCM payload to extract the prod.keys, but I get the same error, editing Pokemon Shield save. I do not have sept on sd card, because I use sx os. Can you help me?
Thanks
You need sept on the SD card. The keys won't dump completely otherwise. Just delete it when you're done.
 

Stefnao

Member
Newcomer
Joined
Jul 9, 2018
Messages
7
Trophies
0
Age
29
XP
87
Country
Italy
You need sept on the SD card. The keys won't dump completely otherwise. Just delete it when you're done.
Ok, copied the sept folder into the root of my sd card. I took it from the last Kosmos release (14.2)
The folder contains payload.bin, sept-primary.bin, sept-secondary.bin, sept-secondary_00.enc, sept-secondary_01.enc.
Still, the lockpick gives me the error "put current sept files on sd and retry"
Am I missing something?
 

bootmonster

Well-Known Member
Member
Joined
Oct 26, 2002
Messages
477
Trophies
2
XP
1,756
Country
United States
Ok, copied the sept folder into the root of my sd card. I took it from the last Kosmos release (14.2)
The folder contains payload.bin, sept-primary.bin, sept-secondary.bin, sept-secondary_00.enc, sept-secondary_01.enc.
Still, the lockpick gives me the error "put current sept files on sd and retry"
Am I missing something?

Is your SD card formatted as fat32 or exfat?
 

zigma

New Member
Newbie
Joined
Dec 19, 2019
Messages
1
Trophies
0
Age
28
XP
43
Country
Mexico
i didn't get the message "Successfully signed save file" only "save file replaced" in pokemon sword, i'm working on "main" file
 

stebrick

Well-Known Member
Newcomer
Joined
Mar 6, 2016
Messages
64
Trophies
0
Age
36
XP
128
Country
Hong Kong
Sorry I'm still little bit confused.

Is OP's tutorial only for backing up and restoring SYSNAND with edited save files?

I'm still not sure what NAND backup includes. Does it include sysnand or emunand? I'm asking more specifically the steps enlisted here:

1. Backup: https://nh-server.github.io/switch-guide/user_guide/emummc/making_emummc/

2. Screenshot here only says emmc (implying backup of Emunand?): https://1.bp.blogspot.com/-uJzZ8_KY...QEVfnB0G0_2v839KwOBACLcBGAs/s320/hekate_3.jpg

3. Restore: https://nh-server.github.io/switch-guide/extras/nandrestore/

What IF, purely for my reference, I want to back up and restore only Emmunand? What should I do?
 

Stefnao

Member
Newcomer
Joined
Jul 9, 2018
Messages
7
Trophies
0
Age
29
XP
87
Country
Italy
Is your SD card formatted as fat32 or exfat?

It is in exfat

--------------------- MERGED ---------------------------

i didn't get the message "Successfully signed save file" only "save file replaced" in pokemon sword, i'm working on "main" file
the same for me, and it is not working


Ok, solution found. Keys are not the problem, the 80 keys that are extracted by Lockpick are enough.
The problem is hactool: as said in another post, its 0.70 version doesn't sign files correctly (at least in pokemon SWSH).
A workaround is to use hactoolnet_netcore 0.5, renaming it only to "hactoolnet.exe" and using the same extract and inject files.
 
Last edited by Stefnao,

radiocaf

Member
Newcomer
Joined
Sep 12, 2009
Messages
5
Trophies
0
XP
39
Country
United States
Forgive me for the noob question, but I am literally that, a noob. This is the first I've ever seen in regards to details on how CFW on the Nintendo Switch works.

I want to take advantage of this method and I have a RCM capable Nintendo Switch, but it's my only Switch, so I don't want to risk a ban of any sort. By following the instructions in the original post, this isn't installing anything that would consider my Switch as CFW or modified, is it? It would still be a legitimate Nintendo Switch once I restart the console to 'reset' the CFW, right?
 

Black ace

Well-Known Member
Member
Joined
Mar 1, 2010
Messages
490
Trophies
0
Age
26
XP
1,554
Country
Forgive me for the noob question, but I am literally that, a noob. This is the first I've ever seen in regards to details on how CFW on the Nintendo Switch works.

I want to take advantage of this method and I have a RCM capable Nintendo Switch, but it's my only Switch, so I don't want to risk a ban of any sort. By following the instructions in the original post, this isn't installing anything that would consider my Switch as CFW or modified, is it? It would still be a legitimate Nintendo Switch once I restart the console to 'reset' the CFW, right?
Nothing is installed onto the Switch using this method. You're only booting into its recovery mode and running a payload (then backing up and restoring your switch's NAND).
 
  • Like
Reactions: radiocaf

Site & Scene News

Popular threads in this forum

Recent Content

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: Sorry for accidentally bending over