Tutorial  Updated

OTP Guide

Full Guide Release!

https://plailect.github.io/OTP/

All regions now supported!

If you appreciate this guide and the work I put into maintaining it, I accept donations through both Bitcoin and PayPal.

If you felt like the guide helped you out then I'd really appreciate it! If I get enough I may buy a 2DS for testing hardware stuff so I don't break another N3DS.

If the guide didn't help you out then I'm really sorry about that :(
 
Last edited by Plailect,
Just a reminder, when you're restoring your sysnand backup, rename it to NAND.bin
just got my otp after using the "updated" guide with @Urbanshadow 's Windows.py
Thanks for the great work guys!
 
  • Like
Reactions: Urbanshadow
So, what is the success rate then for old 3ds. I'm thinking about doing this on my brother's so I don't want to brick it
 
So, what is the success rate then for old 3ds. I'm thinking about doing this on my brother's so I don't want to brick it
Apparently its high. You can wait till a release with more stability or you can yolo it and risk the brick. Besides, worst case scenario you get a hardmod
 
noobish question: can i use arm9loaderhax to directly boot gateway CFW or i can perma-boot on reinand only?
 
I was reading the arm9loaderhax page

  • otp.bin : A dump of your console OTP data from region 0x10012000-0x10012100; in order to dump it you must downgrade to a system version below 3.0, or exploit the New3DS-only vulnerability (This will just give you the hash of it, so you'll need to change the python script). it is console unique, and as such it cannot be shared from other people, because it will cause a brick!

What about the second option?
Can we dump our OTP file from a N3DS without the need of a downgrade in a N3DS console?
 
I was reading the arm9loaderhax page



What about the second option?
Can we dump our OTP file from a N3DS without the need of a downgrade in a N3DS console?
right now you have to downgrade, maybe in the future you can somehow extract it from the N3ds without downgrading (doubt this can happen though!).
 
I was reading the arm9loaderhax page



What about the second option?
Can we dump our OTP file from a N3DS without the need of a downgrade in a N3DS console?
Kernel9Loader does not clear the SHA_HASH register after use. As a result, the data stored here as K9L hands over to Kernel9 is the hash of OTP data used to seed the console-unique NAND keystore decryption key set on keyslot 0x11.
It could allow installing arm9loaderhax, yes, as only the SHA hash is needed IIRC.
But this here totally requires an hardmod, or to already have a sort of "arm9loaderhax".
 
Last edited by Mrrraou,

Site & Scene News

Popular threads in this forum