Hacking Question Urgent - Can't boot on OFW after update

[chardido]

Hi everyone,

My switch had, with EmuNand, a 5.0.1 (CFW) and a 6.0.1 (OFW) installed (with the SX OS as payload and CFW).
I have accidentally updated OFW to the 6.2 version.

Now, after few days of searching for a solution (no boot in neither), I've deleted EmuNand with SX OS payload.

After that, I can't boot to the OFW in any way. I've tried different payload (hekate, sxos, ..) but when I select to boot into the firmware, the screen goes black, and the switch restart in RCM (AutoRCM on).

I've tried to reinstall the firmware through a tutorial found here, but I can't get the keys (how to get switch keys with hactool, i can't post the link) it gave me an error on phase #4 (I've post a reply, I'm waiting for solution right there).

I've also tried to install Atmosphere, with no luck (it gave me an error with Package2, i think there's a problem with this package since it get stuck when I try to dump it).

Now, my Switch is unusable and I don't know how to use it.

Any help?

 

[Cubuss]

Try to see if you can boot in to recovery mode,

 

[chardido]

Try to see if you can boot in to recovery mode,

I can't. Should I remove the AutoRCM option?

 

[Cubuss]

I can't. Should I remove the AutoRCM option?

Not if you used chourdouj in the past to update, it will burn your fuses,

 

[chardido]

Not if you used chourdouj in the past to update, it will burn your fuses,

I used the original system updater to upload 6.0.1 to the 6.2, and the chourdouj to upload 5.1 to 6.0 (on the EmuNAND, that now is deleted)

 

[Cubuss]

If you used only chourdouj for emunand then you can disable autorcm i think.
then try to boot into recovery, if you not able to boot into recovery you will need to recover from a nand backup probally,

 

[chardido]

If you used only chourdouj for emunand then you can disable autorcm i think.
then try to boot into recovery, if you not able to boot into recovery you will need to recover from a nand backup probally,

No, I can't boot into recovery mode, just tried.
I have only the backup of boot0/1, and nothing else..

 

[Cubuss]

No, I can't boot into recovery mode, just tried.
I have only the backup of boot0/1, and nothing else..

 

[chardido]

Yeah, i used this video to enter Recovery, but screen remains black.

I can only boot in RCM with some payloads..

 

[Cubuss]

If you got key deriviration failed that means you using old atmosphere,

Download atmosphere : Here
Download Payload: Here

Extract atmosphere zip to your sd card click yes if it ask to overwrite files,
Then push fusee-primary.bin to your switch when its in rcm mode.

 

[chardido]

If you got key deriviration failed that means you using old atmosphere,

Download atmosphere : Here
Download Payload: Here

Extract atmosphere zip to your sd card click yes if it ask to overwrite files,
Then push fusee-primary.bin to your switch when its in rcm mode.

It gave me this error:

Fatal error: Failed to decrypt the Package2 header (master key revision 5)!

I've also used biskeydump in order to get the keys