Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
iOS/iPadOS 14.3 OTA

Upgrading to iOS/iPadOS 14.3 NOW

make sure you read the WHOLE THING

APPLE SERVERS HAVING ISSUES

A14 BUGGED

UPDATE REGARDING A13 AND BELOW VERIFY ISSUES

"lies ur trolling stop"

Don't believe me? Look at r/jailbreak, or the r/jailbreak Discord. Try it yourself on a phone you don't care about jailbreaking. I can't make you believe me, but do your own research.

ok damn you better EXPLAIN buddy

ok for future reference assume iOS = iOS/iPadOS

note: all day counts are written as if the current date is April 7th. so adjust appropriately for current date


Apple has a feature where you can defer updates if your phone is supervised, intended for situations with corporate devices. The intention was to delay updates so that your company could properly test and validate them before allowing company devices to install it. However, you don't actually need an MDM (mobile device management) to use this - you just need your phone to be supervised and you can push a profile to it.

Specifically, this features allows you to defer updates for a configurable period between 1 and 90 days (inclusive). Let's assume we set this delay to 90 days. Here's Apple's update table: https://support.apple.com/en-us/HT201222

Specifically, let's look at the iOS portion:

header 14.4.2 14.4.1 14.4 14.3

Now look at when iOS 14.4 and when iOS 14.3 were released. As of the time of this post (April 7th), 14.3 was released on December 14th. That's about 114 days (given my math is right) from today. Now, 14.4 was released on January 26th. That's 71 days from today. Do you know what that means?

If you defer for 72 days or more, you can install 14.3 now.

Still don't get it? Imagine you moved back in time 90 days and checked for updates.

Now, if you wanted to go to 14.4.1 for some reason, it was released on March 8th, so 30 days ago. 14.4.2 was released on March 26th, or 12 days ago. So you'd have to defer updates for between 29 days (so you can install 14.4.1) and 13 days (so you can't install 14.4.2).

ok but whats the catch cuz there's gotta be one

You can only install the latest version available that complies with your deferral.

For example, you can't install 14.1. Since 14.3 was released over 90 days ago, since the max delay is 90 days, any update older than 90 days will not be delayable, and the latest update that satisifies that criteria is 14.3.

As this method is time based, you need to do it before 14.4 hits 90 days old.

That's April 26th.

You need to get your iPhone supervised.

What is supervision? Basically, it's a way for enterprises to have more granularity over their Apple devices. As Apple puts it: "During the setup of a device, an organization can configure the device to be supervised. Supervision denotes that the device is owned by the organization, which provides additional control over its configuration and restrictions." You can control features like disabling iMessage/Apple Music/AirDrop/etc, disabling Erase All Content and Settings, disabling modification of settings, global proxies, and key for use, enabling deferment of software updates.

However, you need to either wipe your phone to be able to supervise it, or if jailbroken, use a tweak (or edit a plist directly - see below) to toggle supervision.

More info on this below.

OK HOW DO DIS

Now there's two options here. Credit to Tanbeer on the r/jailbreak Discord for the latter.

  1. If you're not jailbroken - wipe your phone and supervise it with Apple Configurator 2 (on macOS, free), or with iMazing (on Windows, might be paid).
    • Already have data already? No problem. Back up your phone, wipe and prepare, update, then restore backup.
    • DON'T BACKUP IF YOU'RE JAILBROKEN
    • Restoring a backup will unsupervise your phone (unless you made the backup while supervised), so make sure you update before you restore your backup.
    • This is personally what I used, as I had a new in box iPhone SE with 13.4 installed.
    • more on how to do this later
  2. If you are jailbroken (or can jailbreak) - use a tweak that can spoof supervision. I've heard MyBloXX works. There's a good guide covering this here: https://ios.cfw.guide/updating-to-14-3.
    • I haven't tried this myself, but many people in the Discord are reporting success.
    • You will likely need to restore rootFS.
    • Instead of using the tweak, you can also edit /var/containers/Shared/SystemGroup/systemgroup.com.apple.configurationprofiles/Library/ConfigurationProfiles/CloudConfigurationDetails.plist. Find isSupervised and toggle it to on. Thanks to whoever found this first

Once you're supervised, it's fairly smooth sailing. You need to push a profile that will delay software updates: you can do this with Apple Configurator 2, or use this link from Froggy, which will delay for 90 days (so you'll end up seeing 14.3): https://cdn.discordapp.com/attachments/688122301975363591/829232841774596096/90_Day_Delay.mobileconfig

Once you do this, you should be seeing 14.3 (or if you included a different delay in your profile, some other version) in Settings.

Making your own profile and installing it

This uses Apple Configurator 2, which is only available on macOS. If someone can contribute a guide using iMazing that would be helpful.

  1. Download Apple Configurator 2
  2. Open it
  3. Click File > New Profile
  4. Change the name if you want
  5. Click on the Restrictions tab, then click Configure.
  6. Scroll down to "Defer software updates for days" and enable it.
    • Leave the defaults for all the other options here so no other restrictions get enabled (unless you want them).
  7. Set the limit to your desired value, between 1 and 90 (inclusive).
  8. Save the profile and close the window

You have two options here now:

a. Transfer profile to iPhone through some other method

b. Use Apple Configurator 2 since you already have it open

  1. Plug in your iPhone and double click it in Apple Configurator 2
  2. Click Profiles at left
  3. Drag in the profile that you just created
  4. Wait for it to install. If using a tweak to spoof supervision, Apple Configurator 2 will probably prompt you to accept installing the profile on device as it thinks you aren't supervised, but it'll work fine.
  5. Profit

FAQ (credit to nyuszika7h#0001 on Discord for part of this section)

Does this work on all devices?

It's supposed to, as it's a feature built in to iOS 11.3 and up. However, A14 is having issues due to a personalization error when attempting to install. There are no current known workarounds for this.

For other devices, see the next entry.

It says "Unable to verify update"

This started happening after this blew up, so I'm guessing it's server load. A VPN may work.

A14 is having issues, no known workaround

If not on A14, make sure you restored rootFS.

It also appears that being on an SEP higher thsn your target OS may cause this issue. Specifically, iOS 14.4+ SEP when trying to OTA to 14.3 appears to be causing issues. Since the OTA cannot downgrade the SEP, an error results.

So basically if you used futurerestore with --latest-sep after January 26th, or manually specified a iOS 14.4+ SEP, you're on iOS 14.4+ SEP and this won't work for you. If you're on iOS 14.3 SEP or lower, you are fine and you should retry instead.

iOS 14.4.1+ SEP and trying to OTA to 14.4 does not seem to have issues. This is because iOS 14.4 and 14.4.2 have the same SEP.

Is erasing after required

No, this was thought to be needed to remove supervision spoofing but there are other ways to do it (scroll down).

It says iOS is up to date

Remove any beta profiles (including tvOS profiles) - these profiles will block updates. Delete /var/mobile/Library/Preferences/com.apple.MobileAsset.plist and ldrestart/userspace reboot. or Install OTADisabler and uninstall it, then ldrestart/userspace reboot.

"Software Update Failed: An error occurred downloading iOS X"

Apple servers seem to have issues, I couldn't download 12.5.1 on a test iPhone 6+ but I couldn't download 12.5.2 either, so it doesn't seem like they intentionally killed the method

If it says "Unable to check for updates"

Grab OTAEnabler or Restore rootfs, rejailbreak with u0 and have "Disable updates" turned off

It just freezes

Re-enable OTA daemon using iCleaner Pro

It shows 14.4.2

Make sure you're supervised - there should be text at the top of settings. Also make sure you installed the right profile. The PAC profile from MYbloXX settings is not what you want, use the profile linked above or the instructions to make your own.

Can I remove the profile after I do this?

Yes

Will this work for downgrades?

No, see SEP info above.

Does this work for ie. updating to an older iOS 13 version?

No, as the latest iOS 13 update is over 90 days old, you can't delay it.

However this does work to delay 12.5.2 as it's under 90 days old

Does this work for iOS 14.3 RC to stable iOS 14.3?

Maybe, maybe not. Some people have reported success, others failure. ymmw

This has now been found to be tied to SEP as explained above; if you futurerestored and ended up on 14.4+ SEP you cannot do this.

Can you save blobs?

You can dump your blobs right now but you can’t use them with futurerestore without a bootrom exploit, which means they would not work for A12 and above.

How do I get rid of this supervision thing

You can install whatever tweak you installed to spoof supervision again, and disable it from there. You can also edit /var/containers/Shared/SystemGroup/systemgroup.com.apple.configurationprofiles/Library/ConfigurationProfiles/CloudConfigurationDetails.plist again and disable isSupervised. Otherwise, (but this is the nuclear option, unless you did this unjbed, in which this is the only option) Erase All Content and Settings.

OK but how does this work if the OTA is unsigned

Alright it appears a request is made to Pallas with 3 extra keys being the clincher: DelayPeriod (integer between 1-90), DelayRequested (true), and Supervised (true). The server will return with a 400 if your delay period is not between 1 and 90 (inclusive). This is how the OTAs are being found, so delayed software update handling seems to be entirely serverside.

Still don't know how signing is validated though.

Credits

Apple: implementing this in the first place

Tanbeer#4750 on Discord: Realizing spoofing also works and figuring out you can do this with iMazing

CoocooFroggy#7742 on Discord: Providing a profile link for others to use

dabezt#2228 on Discord: Helping prove this actually works

MasterOfMike#8063 and CoolStar: Connecting the verify errors to higher SEP

@midi1996

This comment has been minimized.

Copy link

@midi1996 midi1996 commented Apr 7, 2021

Yes.

@kmutahar

This comment has been minimized.

Copy link

@kmutahar kmutahar commented Apr 7, 2021

Why shouldn't you backup if jailbroken?

@AzzouDuGhetto

This comment has been minimized.

Copy link

@AzzouDuGhetto AzzouDuGhetto commented Apr 7, 2021

Why shouldn't you backup if jailbroken?

Restoring a backup made in jailbroken state will result in a Bootloop

@TimeDiver0

This comment has been minimized.

Copy link

@TimeDiver0 TimeDiver0 commented Apr 7, 2021

Someone should add: A14-based devices (iPhone 12 series, notably) don't (seem to) work with this method.

@kmutahar

This comment has been minimized.

Copy link

@kmutahar kmutahar commented Apr 7, 2021

Why shouldn't you backup if jailbroken?

Restoring a backup made in jailbroken state will result in a Bootloop

Okay that makes sense but for me what I normally do (haven't tried with a jailbroken device)

using imazing (also heard 3utools windows can also do this) is make a back up and extract certain apps such as whatsapp and then restore that data only to the phone after upgrade and before jailbreak, so that I dont lose any chats

In any matter will probably wait until Saturday to do anything until more people test everything out.

@yonigold1

This comment has been minimized.

Copy link

@yonigold1 yonigold1 commented Apr 7, 2021

Will this work in the future for when other ios are released? ultimately giving the jailbreak community a larger upgrade (only) window?

@AdamKxZ

This comment has been minimized.

Copy link

@AdamKxZ AdamKxZ commented Apr 7, 2021

Successfully updated to 14.3 from 14.1 on my 11 Pro (A13). Super happy!

@dhinakg

This comment has been minimized.

Copy link
Owner Author

@dhinakg dhinakg commented Apr 7, 2021

Will this work in the future for when other ios are released? ultimately giving the jailbreak community a larger upgrade (only) window?

If Apple doesn't change anything.

@SpaceMember

This comment has been minimized.

Copy link

@SpaceMember SpaceMember commented Apr 7, 2021

for 6s and se "unable to verify update", as on A14.

@astrosfan1996

This comment has been minimized.

Copy link

@astrosfan1996 astrosfan1996 commented Apr 7, 2021

Has anyone tried using futurerestore to downgrade a checkra1n-vulnerable device to pre-14.3 and then upgrading it to 14.3 with this method?

@JesseB0rn

This comment has been minimized.

Copy link

@JesseB0rn JesseB0rn commented Apr 7, 2021

Have you tried manipulating the parsable file in /var/mobile/Library/UserConfigurationProfiles/EffectiveUserSettings.plist? The delay has minimum and maximum amount for the days value, so maybe by manipulating this value, you can delay past 90 Days.

edit: that is after installing a profile with Configurator 2

@Dani20000

This comment has been minimized.

Copy link

@Dani20000 Dani20000 commented Apr 7, 2021

I dm you on reddit for the iMazing guide
By the way, awesome work!

@kmutahar

This comment has been minimized.

Copy link

@kmutahar kmutahar commented Apr 7, 2021

I dm you on reddit for the iMazing guide
By the way, awesome work!

@Dani20000
Why not post the guide here to help all of us or post it on reddit and share the link here

@Co2333

This comment has been minimized.

Copy link

@Co2333 Co2333 commented Apr 8, 2021

Any body get this to work with futurerestored devices? I got 14.2 iPadOS with 14.4 sep firmware stuck at verifying update.

@imReker

This comment has been minimized.

Copy link

@imReker imReker commented Apr 8, 2021

Have you tried manipulating the parsable file in /var/mobile/Library/UserConfigurationProfiles/EffectiveUserSettings.plist? The delay has minimum and maximum amount for the days value, so maybe by manipulating this value, you can delay past 90 Days.

edit: that is after installing a profile with Configurator 2

Maybe you can edit 90_Day_Delay.mobileconfig directly? There is enforcedSoftwareUpdateDelay with value 90 at line 182.

@Hinkiii

This comment has been minimized.

Copy link

@Hinkiii Hinkiii commented Apr 8, 2021

Any body get this to work with futurerestored devices? I got 14.2 iPadOS with 14.4 sep firmware stuck at verifying update.

I've got the same problem on iPhone SE 2020, futurerestored to 14.2 and I can't verify the update.

@dhinakg

This comment has been minimized.

Copy link
Owner Author

@dhinakg dhinakg commented Apr 8, 2021

Have you tried manipulating the parsable file in /var/mobile/Library/UserConfigurationProfiles/EffectiveUserSettings.plist? The delay has minimum and maximum amount for the days value, so maybe by manipulating this value, you can delay past 90 Days.
edit: that is after installing a profile with Configurator 2

Maybe you can edit 90_Day_Delay.mobileconfig directly? There is enforcedSoftwareUpdateDelay with value 90 at line 182.

Tried it doesn't work, you just get 90

@JesseB0rn

This comment has been minimized.

Copy link

@JesseB0rn JesseB0rn commented Apr 8, 2021

Have you tried manipulating the parsable file in /var/mobile/Library/UserConfigurationProfiles/EffectiveUserSettings.plist? The delay has minimum and maximum amount for the days value, so maybe by manipulating this value, you can delay past 90 Days.
edit: that is after installing a profile with Configurator 2

Maybe you can edit 90_Day_Delay.mobileconfig directly? There is enforcedSoftwareUpdateDelay with value 90 at line 182.

Actually, lets try. Probably blocked from server but why not try. Theres a second value withthe max value, probably change this as well

@dhinakg

This comment has been minimized.

Copy link
Owner Author

@dhinakg dhinakg commented Apr 8, 2021

Have you tried manipulating the parsable file in /var/mobile/Library/UserConfigurationProfiles/EffectiveUserSettings.plist? The delay has minimum and maximum amount for the days value, so maybe by manipulating this value, you can delay past 90 Days.
edit: that is after installing a profile with Configurator 2

Maybe you can edit 90_Day_Delay.mobileconfig directly? There is enforcedSoftwareUpdateDelay with value 90 at line 182.

Actually, lets try. Probably blocked from server but why not try. Theres a second value withthe max value, probably change this as well

Ended up testing Pallas directly. If it's not between 1 and 90 (inclusive) you'll just get a 400 error (Bad Request) back

@JesseB0rn

This comment has been minimized.

Copy link

@JesseB0rn JesseB0rn commented Apr 8, 2021

Have you tried manipulating the parsable file in /var/mobile/Library/UserConfigurationProfiles/EffectiveUserSettings.plist? The delay has minimum and maximum amount for the days value, so maybe by manipulating this value, you can delay past 90 Days.
edit: that is after installing a profile with Configurator 2

Maybe you can edit 90_Day_Delay.mobileconfig directly? There is enforcedSoftwareUpdateDelay with value 90 at line 182.

Actually, lets try. Probably blocked from server but why not try. Theres a second value withthe max value, probably change this as well

Ended up testing Pallas directly. If it's not between 1 and 90 (inclusive) you'll just get a 400 error (Bad Request) back

:( tough luck

@bigrich0272

This comment has been minimized.

Copy link

@bigrich0272 bigrich0272 commented Apr 8, 2021

Wish I could down grade from 14.4 to 14.3 thus way

@jalsco

This comment has been minimized.

Copy link

@jalsco jalsco commented Apr 10, 2021

Hey - today is April 10 - Not working for me... yet...
I am using Iphone11ProMax (i.e A13) , and am only on 13.5 (already JB) .. have not done any updates or futurerestores since going to 13.5 in Oct 2020.. it only shows 14.4.2 as the available update.... The problem seems to be something about the config file. it loaded onto iphone successfully and phone shows as "supervised"... I also checked that profile.... The profile seems correct.. It contains:
<key>enforcedSoftwareUpdateDelay</key> <integer>90</integer>

BUT on the iPhone about that Profile, it says it has 2 restrictions, "Delayed Software Updates enforced" and "Delay period for Delayed Software Updates is 0 days" .... WTF ?? -zero days - the profile I am loading clearly says 90. Maybe configurator2 is changing it ?? Any thoughts ??

edit: I also tried loading that profile by windows pc using iMazing... same result... I also tried make own profile, same result. Even the JSON clearly says 90, once on the iPhone the profile says "zero days".. What is going on here ???

That issue Solved: Need to ALSO update /var/mobile/Library/UserConfigurationProfiles/EffectiveUserSettings.plist BEFORE loading the profile.. then it correctly shows 14.3 for download

this is making me nervous It fully downloaded 14.3 (taking about 45 minutes) , then began doing "Processing update" , then about 5 minutes later I looked at the screen, nothing was happening... it was still displaying the same screen as before ....But "Download and Install" was highlit again... oh no... So I tapped that (for the second time), and it has started to download it - again - ... Currently it is showing "about 1 hour" in the progress bar... This is looking like a loop, I hope not, as least there was no error messages about verifying....

Yay ! I am now on 14.3 ... now to JB and restore all my tweaks etc.. ... Am going to stay with Unc0ver. Whoever discovered this loophole is a total genius ! Thank you, whoever you are !

@Dani20000

This comment has been minimized.

Copy link

@Dani20000 Dani20000 commented Apr 10, 2021

I dm you on reddit for the iMazing guide
By the way, awesome work!

@Dani20000
Why not post the guide here to help all of us or post it on reddit and share the link here

Sure! https://www.reddit.com/r/jailbreak/comments/mm0g3f/news_new_method_of_updating_to_ios_143_if_you_are/gtq7lj9?utm_source=share&utm_medium=web2x&context=3
Direct link: https://pastebin.com/4h5HHcEY

@joshuaseltzer

This comment has been minimized.

Copy link

@joshuaseltzer joshuaseltzer commented Apr 11, 2021

Are there any updates on A14? I’ve got an iPhone 12 on 14.1 that’s never been jailbroken before. Would like to bring it to 14.3 first but it doesn’t seem possible. I find it odd since this should be an Apple-supported feature that simply isn’t working...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment