Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
How to downgrade checkm8 devices from iOS 15/16

Important: Please don't use the comment section to ask for help. Join r/jailbreak (#genius-bar) or FDR Bureau (#futurerestore-support) instead.

How to downgrade checkm8 devices from iOS 15/16

This is a guide for downgrading (or upgrading) to unsigned versions with futurerestore on checkm8 devices (A11 and below). You must have blobs for the version you want to go to, and SEP/BB compatibility may limit how far you can go.

Current SEP compatibility

The latest SEP/BB as of right now is iOS 15.6.

  • iPhone X: Breaks Face ID when downgrading to 15.3.1 or below. Causes more breakage when downgrading to 14.8 or below, but issues apart from Face ID can be fixed by jailbreaking with unc0ver/checkra1n and then installing OTAEnabler.
  • iPhone 8: Fully compatible down to 14.3
  • A10 and below: Fully compatible down to 14.0 (NOTE: Some issues have been reported, may only work down to 14.3)

SEP/BB Compatibility Chart

Prequisites

Notes

  • If the exploit fails even after multiple attempts or your device reboots out of DFU mode, you'll have to start over from the beginning and be quicker next time. (You don't have to redownload anything though.) You may have to force restart your device if it's stuck in DFU.
  • checkm8 is known to have issues on AMD CPUs and may not work if you have one.

Instructions

Table of Contents
A11
A10(X)
A9X
A8(X)

A11

Compatible versions: 14.3 and above

IMPORTANT: On the iPhone X, downgrading to iOS 14.x will break Face ID. The only way to fix it is by updating/restoring to iOS 15.

With iOS 15.4 or newer SEP, downgrading to 15.0-15.3.1 will also break Face ID, and you have to update to 15.4 or above to fix it.

Part 1/4: Entering pwned DFU

  1. Put your device in DFU mode.
  2. Install Python 3.8 or newer.
  3. Run python3 -m pip install --user --force-reinstall https://github.com/hack-different/ipwndfu/archive/main.zip.
  4. Run (cd "$(python3 -m site --user-base)/bin"; ./ipwndfu -p; ./ipwndfu --patch-sigchecks; ./ipwndfu --repair-heap). (If you get a "device has no langid" error but then it's successful, then you can ignore the error.)

Part 2/4: Setting nonce

Note: If you want to use OTA blobs, don't tick "Set Nonce" and restore straight from pwned DFU mode. (Ignore this if you don't know what it is.)

  1. Download and open FutureRestore GUI.
  2. Click "Settings", enable "FutureRestore Beta", then click "Save".
  3. Click "Download FutureRestore".
  4. Download the desired version's IPSW from https://ipsw.me/ and select it along with your blobs.
  5. Click "Next", enable "Pwned Restore" and "Set Nonce", and leave SEP and Baseband on latest. (If you see a "64 Bit Checkm8" option, update FRGUI. You should not use that option.)
  6. Click "Next", and then "Start FutureRestore".

Part 3/4: Restoring

  1. Your device should now be in recovery mode. If not, enter it manually.
  2. Go back to the previous tab in FutureRestore GUI and uncheck both "Pwned Restore" and "Set Nonce".
  3. Click "Next", and "Start FutureRestore" again.

Part 4/4: Fixup (iPhone X 14.x restores only)

If you have an iPhone 8, or are restoring to 15.0 or above, you can skip this section.

  1. Once the restore starts looping at "No data to read (timeout)", force restart your device.
  2. When you see the recovery mode screen, press "Exit Recovery".
  3. Go through with setup as usual.
  4. Jailbreak your device with checkra1n or unc0ver (not Odysseyra1n or Taurine). This will create an initial RootFS snapshot, as it doesn't get created when the restore is interrupted. If checkra1n complains about the missing snapshot, tap "Create".
  5. Install OTAEnabler 0.4.0 or newer from https://repo.cadoth.net/ to fix the broken preboot volume which causes issues with OTA updates and Taurine.
  6. (Optional) Uninstall OTAEnabler and install your preferred OTA blocker.
  7. If you want to jailbreak with Odysseyra1n or Taurine, restore RootFS and go ahead with installing your preferred jailbreak.

Note that this is not a complete fix, as Face ID will still be broken. That is most likely not possible to fix as it's due to a firmware incompatibility.

A10(X)

Compatible versions: 14.0 and above

Part 1/3: Entering pwned DFU

macOS
  1. Put your device in DFU mode.
  2. Download and extract Fugu.
  3. Open the extracted folder in a terminal.
  4. Run ./Fugu rmsigchks.
Linux
  1. Put your device in DFU mode.
  2. Download and extract patched ipwndfu for A10.
  3. Open the extracted folder in a terminal.
  4. Run python2 ipwndfu -p.
  5. Run python2 rmsigchks.py.

Part 2/3: Setting nonce

Note: If you want to use OTA blobs, don't tick "Set Nonce" and restore straight from pwned DFU mode. (Ignore this if you don't know what it is.)

  1. Download and open FutureRestore GUI.
  2. Click "Settings", enable "FutureRestore Beta", then click "Save".
  3. Click "Download FutureRestore".
  4. Download the desired version's IPSW from https://ipsw.me/ and select it along with your blobs.
  5. Click "Next", enable "Pwned Restore" and "Set Nonce", and leave SEP and Baseband on latest. (If you see a "64 Bit Checkm8" option, update FRGUI. You should not use that option.)
  6. Click "Next", and then "Start FutureRestore".

Part 3/3: Restoring

  1. Your device should now be in recovery mode. If not, enter it manually.
  2. Go back to the previous tab in FutureRestore GUI and uncheck both "Pwned Restore" and "Set Nonce".
  3. Click "Next", and "Start FutureRestore" again.

A9X

Coming soon...

A8(X)-A9

Requires macOS.

Compatible versions: 14.0 and above

Part 1/3: Entering pwned DFU

  1. Put your device in DFU mode.
  2. Download Eclipsa.
  3. Open the folder in a terminal.
  4. Run killall -STOP AMPDevicesAgent AMPDeviceDiscoveryAgent MobileDeviceUpdater.
  5. Run make and wait for it to compile. (You need to have Xcode installed.) If you cannot compile Eclipsa for some reason, download and extract this zip instead (only compatible with Intel Macs).
  6. If compiled manually, run ./eclipsa. Otherwise, you will need to run the appropriate version for your SoC:
    • A8: ./eclipsa7000
    • A8X: ./eclipsa7001
    • A9: ./eclipsa8000 or ./eclipsa8003
  7. Run killall -CONT AMPDevicesAgent AMPDeviceDiscoveryAgent MobileDeviceUpdater.

Part 2/3: Setting nonce

Note: If you want to use OTA blobs, don't tick "Set Nonce" and restore straight from pwned DFU mode. (Ignore this if you don't know what it is.)

  1. Download and open FutureRestore GUI.
  2. Click "Settings", enable "FutureRestore Beta", then click "Save".
  3. Click "Download FutureRestore".
  4. Download the desired version's IPSW from https://ipsw.me/ and select it along with your blobs.
  5. Click "Next", enable "Pwned Restore" and "Set Nonce", and leave SEP and Baseband on latest. (If you see a "64 Bit Checkm8" option, update FRGUI. You should not use that option.)
  6. Click "Next", and then "Start FutureRestore".

Part 3/3: Restoring

  1. Your device should now be in recovery mode. If not, enter it manually.
  2. Go back to the previous tab in FutureRestore GUI and uncheck both "Pwned Restore" and "Set Nonce".
  3. Click "Next", and "Start FutureRestore" again.
@OGB3AST
Copy link

OGB3AST commented Apr 25, 2022

@xrotorhead
I used this gui to do the restore
https://github.com/CoocooFroggy/FutureRestore-GUI/releases

And it looks like you need to install libirecovery it’s showing no such file found on the pics you showed
So generator wasn’t really never set
Install libirecovery and try to set generator again
https://formulae.brew.sh/formula/libirecovery

@xrotorhead
Copy link

xrotorhead commented Apr 25, 2022

@xrotorhead I used this gui to do the restore https://github.com/CoocooFroggy/FutureRestore-GUI/releases

And it looks like you need to install libirecovery it’s showing no such file found on the pics you showed So generator wasn’t really never set Install libirecovery and try to set generator again https://formulae.brew.sh/formula/libirecovery

OMG...you did it!!!

The libirecovery dependency did the trick. With this libirecovery now installed, I was able to set the nonce and run the FutureRestore script, enabling me to restore this iPad7,4 from iOS 15.2 down to iOS 14.8 -- and accomplished this on 25 April 2022 when iOS 15.4.1 was the only firmware being signed by Apple !!

IMG_0001 2

@xrotorhead
Copy link

xrotorhead commented Apr 25, 2022

So, in summary, what I did to FutureRestore an iPad7,4 from iOS 15.2 down to iOS 14.8 (this all assumes you have your saved blobs for the firmware you are trying to downgrade to):

  1. Installed 3 dependencies in macOS Monterey:
  1. Download and extract the iPad 10.5 NonceRegulator.

  2. Drag NonceRegulator "main.sh" into a terminal window.

  3. Input your generator (0x1111111111111111 in most cases).

  4. Follow script instructions to put device into DFU mode (helper). When done, it should look something like this:
    Screenshot 2022-04-25 at 10 26 25 AM

  5. Then in terminal window, drag the Nightly "Futurerestore -t BLOB.shsh2 FIRMWARE.ipsw --latest-sep --latest-baseband". In my case, it looked like this...
    Screenshot 2022-04-25 at 10 35 26 AM

  6. Hit enter and hope for the best

@xrotorhead
Copy link

xrotorhead commented Apr 25, 2022

Okay, now the next challenge. I can't find a JB that works with the iPad7,4 when on iOS 14.8. Both Unc0ver and Taurine appear unsupported and Checkra1n appears to support only iPads with iOS 14.3 and below (and of course I only have saved blobs going back as far as 14.7)

Disregard above. I found the Checkra1n 12.4 beta with Options to "Allow untested iPadOS versions" to install Cydia works well.

@xrotorhead
Copy link

xrotorhead commented Apr 25, 2022

Bummer that Unc0ver and/or Taurine don’t work on iPadOS 14.8

@OGB3AST
Copy link

OGB3AST commented Apr 25, 2022

Bummer that Unc0ver and/or Taurine don’t work on iPadOS 14.8

Checkrain works fine on ios 14
I prefer to install odysseyra1n tho
https://ios.cfw.guide/installing-odysseyra1n/

@iH8Crypt
Copy link

iH8Crypt commented Apr 26, 2022

Gentlemen... in short, there was an iPhone XS on iOS 13.5 and everything worked stably except for updates to some applications from the appstore.

But my hands are itching, so I decided to upgrade to 14.8. of course through FutureRestore.

And everything seems to be successful, everything was successful, even there were no special dances with a tambourine. Yes, Face ID as it turned out does not work, even xs how to solve it now...

I continue to understand iPhone building. Here is such a thought appeared. Download Baseband and SEP from iOS 14.8 (via a bot, if it takes a ride, I'll tell you)
Here are the settings I set in FR. But there is no time yet to roll back, I just set it up for JB, but the story with the missing Face ID has been terribly boring for a day.
Need some advice, do you think it will take a ride or will it still give an error?? I will be able to check only in a couple of days, tell the experts. Mb what other settings should I set at home?

Now I have iOS 14.8 with jailbreak on uncover v. 8.0.2...

Снимок экрана 2022-04-26 в 00 00 11

?

@xrotorhead
Copy link

xrotorhead commented Apr 26, 2022

iH8Crypt,

As I understand it, the SEP and Baseband files you patch during the FR process NEED to be currently signed by Apple. This is how I understand it, but I could be wrong on this tho 🙄

In my case, when I did a restore to 14.8, the FR process patches in the currently signed SEP/Baseband from Apple (15.4.1 as of this writing) into your device. Not sure what would happen if you manually tried to patch non-signed SEP/BB - perhaps a failure of the entire process or at least a device that is not fully functional.

It should be expected the FaceID be broken when restoring an iPhone XS to 14.8 according to this chart…
https://docs.google.com/spreadsheets/d/1Mb1UNm6g3yvdQD67M413GYSaJ4uoNhLgpkc7YKi3LBs/edit#gid=0

@iH8Crypt
Copy link

iH8Crypt commented Apr 27, 2022

iH8Crypt,

As I understand it, the SEP and Baseband files you patch during the FR process NEED to be currently signed by Apple. This is how I understand it, but I could be wrong on this tho 🙄

In my case, when I did a restore to 14.8, the FR process patches in the currently signed SEP/Baseband from Apple (15.4.1 as of this writing) into your device. Not sure what would happen if you manually tried to patch non-signed SEP/BB - perhaps a failure of the entire process or at least a device that is not fully functional.

It should be expected the FaceID be broken when restoring an iPhone XS to 14.8 according to this chart… https://docs.google.com/spreadsheets/d/1Mb1UNm6g3yvdQD67M413GYSaJ4uoNhLgpkc7YKi3LBs/edit#gid=0

Hello,
And if, after the rollback, try to use Shift + restore to try to put 14.8? In fact, now it costs 14.8 and all processes except Face ID are working properly. JB also got up smoothly and all the tweaks got up without any problems. Is it possible that none of the masters could prescribe a bypass of SEP if there is available access to the root folder of the device? Or fix the work of Face iD with some kind of tick...

@redapple0204
Copy link

redapple0204 commented May 7, 2022

Hi !
I have an A10 device and I have saved shsh blobs, I would like to ask if there is a way to upgrade from an older version to a specific version?

@robi62
Copy link

robi62 commented May 7, 2022

@ redapple0204 Unfortunately not You have to upgrade normally first , then downgrade to desired version. I did this on both my 6s that where on ios 12 and now im on 14.4 At the time latest ios was 15.4

@xrotorhead
Copy link

xrotorhead commented May 7, 2022

Blobs are saved for a specific version of iOS firmware. You should be able to revert to that saved version using the methods described here. i.e. if you have blobs saved only for iOS 14.7, you should be able to futurerestore to 14.7 (and 14.7 only).

And as robi62 said, if you’re currently at 13.7 or below, you’ll need to upgrade to the current (15.4.1 as of today) first, then run the futurerestore process to downgrade to whichever blobs version you have saved.

EE58F74E-47E3-4B1A-BE0D-AC54EFB39A04

@redapple0204
Copy link

redapple0204 commented May 7, 2022

@robi62 @xrotorhead thanks a lot !!

@jhay76
Copy link

jhay76 commented May 10, 2022

I got an iphone se (A9) with ios 15.4.1 is it possible to downgrade to ios 14 without having a blob file ?

@xrotorhead
Copy link

xrotorhead commented May 11, 2022

I got an iphone se (A9) with ios 15.4.1 is it possible to downgrade to ios 14 without having a blob file ?

Unfortunately, I’ve never heard of a way to successfully use futurerestore without having saved blobs.

@jhay76
Copy link

jhay76 commented May 11, 2022

@xrotorhead how did you downgrade to 14.8 when you got 15.0.2 blobs ?

@xrotorhead
Copy link

xrotorhead commented May 11, 2022

@xrotorhead how did you downgrade to 14.8 when you got 15.0.2 blobs ?

Sorry for the confusion. I have all saved blobs for most ios versions going back as far as 14.7.1 on that iPad.

@jhay76
Copy link

jhay76 commented May 11, 2022

@xrotorhead so downgrading without blobs seems to be impossible. Thanks.

@xrotorhead
Copy link

xrotorhead commented May 11, 2022

@xrotorhead so downgrading without blobs seems to be impossible. Thanks.

That’s probably a true statement unfortunately. I’ve heard of something called “Delayed OTA Profiles”, but have never tried and don’t know if it would be applicable in your case.

@xrotorhead
Copy link

xrotorhead commented May 17, 2022

Blobs are saved for a specific version of iOS firmware. You should be able to revert to that saved version using the methods described here. i.e. if you have blobs saved only for iOS 14.7, you should be able to futurerestore to 14.7 (and 14.7 only).

And as robi62 said, if you’re currently at 13.7 or below, you’ll need to upgrade to the current (15.4.1 as of today) first, then run the futurerestore process to downgrade to whichever blobs version you have saved.

I must update the above statement that "you’ll need to upgrade to the current (15.4.1 as of today) first, then run the futurerestore process" - - THIS IS INCORRECT.

For example, last weekend I had another iPad on iOS 13.3.1 with an Unc0ver JB and the nonce generator set. I also had saved iOS 14.8 blobs for that iPad. With that, I was able to FutureRestore directly from 13.3.1 to 14.8 and did so using the FutureRestore GUI - and did so without having to go to 15.4.1 first. Easy.

@robi62
Copy link

robi62 commented May 17, 2022

@xrotorhead Thats great news I didnt know you could update

@Popsi101
Copy link

Popsi101 commented May 24, 2022

Hey guys! Im currently on ios 15.0 using an iphone x, do you guys think i should wait for the jailbreak, or do i just downgrade? and also, if i did downgrade and then a ios 15.0 jailbreak released, can i upgrade to specifically ios 15.0? if so, how? thank you

@Popsi101
Copy link

Popsi101 commented May 24, 2022

and also, do i lose all my data if i downgrade?

@pubglovee
Copy link

pubglovee commented May 24, 2022

hello everyone, i've an 6s plus its A9 device i guess, im on ios 15.2 version. i want to downgrade ios 15.1 i have blobs saved, but i dont have an macOs device, is it possible to make macos usb stick then downgrade will it work?

@pubglovee
Copy link

pubglovee commented May 24, 2022

or can we do it with linux for a9 device?

@xrotorhead
Copy link

xrotorhead commented May 24, 2022

Hey guys! Im currently on ios 15.0 using an iphone x, do you guys think i should wait for the jailbreak, or do i just downgrade? and also, if i did downgrade and then a ios 15.0 jailbreak released, can i upgrade to specifically ios 15.0? if so, how? thank you

As of this writing, you can downgrade as low as 14.3 on iPhone X (but will break faceID) provided you have your blobs saved for the specific iOS version you are trying to downgrade to. And when you wanna upgrade to a higher version, that will also be possible provided (again) that you have your saved blobs for the version you are trying to futurerestore to AND the SEP/BB files that Apple is currently signing are compatible with the iOS version you are trying to futurerestore to.

@xrotorhead
Copy link

xrotorhead commented May 24, 2022

hello everyone, i've an 6s plus its A9 device i guess, im on ios 15.2 version. i want to downgrade ios 15.1 i have blobs saved, but i dont have an macOs device, is it possible to make macos usb stick then downgrade will it work?

My only experience is in macOS. I’ve heard of ways on other OS’s, but can’t say for sure if it will work. Mac won’t boot to the full OS from a usb stick like Linux can. I have come across several guides to futurerestore using Linux in the past. Every time I’ve done a futurerestore downgrade, I’ve lost all data, but I believe the FutureRestore GUI has some options to try to preserve data (untested by me of course).

@pubglovee
Copy link

pubglovee commented May 25, 2022

hello everyone, i've an 6s plus its A9 device i guess, im on ios 15.2 version. i want to downgrade ios 15.1 i have blobs saved, but i dont have an macOs device, is it possible to make macos usb stick then downgrade will it work?

The only experience is in macOS. I’ve heard of ways on other OS’s, but can’t say for sure if it will work. I don’t think Mac will work from a usb stick like Linux can. Theres lots of guides using Linux. And every time I’ve done a futurerestore downgrade, I’ve lost all data, but I believe the FutureRestore GUI has some options to try to preserve data (untested by me of course).

So unless i've a macOS device i can't downgrade right now, unless there is a working version on Linux, thank you i am out of luck sadly.

@lex77794
Copy link

lex77794 commented Jun 13, 2022

photo_2022-06-13_10-32-40
iPhone 8+ When rolling back from 15.5 to 14.8, the process is interrupted. What could be the matter, blobs workers, before everything worked with them

@xrotorhead
Copy link

xrotorhead commented Jun 13, 2022

Using the futurerestore script vs the GUI works for me. Here’s a summary of that:

https://gist.github.com/nyuszika7h/aac55c97f7925cddcf5ec3167f85dfe8?permalink_comment_id=4144634#gistcomment-4144634

@NikitaChuprin228
Copy link

NikitaChuprin228 commented Jul 11, 2022

Hi all. Phone iPhone 7 IOS 15.3. Faced such a problem that when rolling back from 15.3 to 14.7, the ipwndfu patch does not see the connected phone in dfu mode, although the system sees it, changed wires, connectors, python versions, but all in vain, the Linux mint cinnamon system is the latest version, if anyone has come across, please tell me, I will be very grateful. Error: ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. I'm attaching a screenshot of the error.
Снимок+экрана+от+2022-07-10+15-00-18

@fund2022
Copy link

fund2022 commented Jul 12, 2022

hello i have iphone 8 and ios 15.5 haw i can downgrade ios 14.7? please help

@deargosep
Copy link

deargosep commented Jul 13, 2022

I can't pwn dfu on iPad 6th gen iOS 15.5, macOS big sur

@xrotorhead
Copy link

xrotorhead commented Jul 13, 2022

They fist question is were blobs saved for the iOS version you are trying to downgrade to? If not, I’m afraid you’re out of luck until a JB is released compatible with the iOS version you are currently on.

@deargosep
Copy link

deargosep commented Jul 13, 2022

I have blobs saved

@xrotorhead
Copy link

xrotorhead commented Jul 13, 2022

I can't pwn dfu on iPad 6th gen iOS 15.5, macOS big sur

Getting the device into pwn/ dfu mode is one of the most challenging parts. I’d look up the procedures for your exact device on YouTube. This one worked for some of the devices I was using: https://youtu.be/IMaD_vz5O3Q

@xrotorhead
Copy link

xrotorhead commented Jul 13, 2022

I have blobs saved

This post (below) summarized step-by-step what worked for me. Hope it helps in your case...

https://gist.github.com/nyuszika7h/aac55c97f7925cddcf5ec3167f85dfe8?permalink_comment_id=4144634#gistcomment-4144634

@deargosep
Copy link

deargosep commented Jul 13, 2022

I have blobs saved

This post (below) summarized step-by-step what worked for me. Hope it helps in your case...

https://gist.github.com/nyuszika7h/aac55c97f7925cddcf5ec3167f85dfe8?permalink_comment_id=4144634#gistcomment-4144634

when I'm using noncergulator from your post, it says that libirecovery is not installed. first three times macOS thrown me an error message saying libirecovery is corrupted and should be deleted. after that it asks me for shsh2 file path, I paste it and then there is this error:

Continuing with given SHSH
File verified as SHSH2 file, continuing
Getting generator from SHSH
Your generator is: 0x1111111111111111
 
Either unsupported device or no device found.
Exiting..

@xrotorhead
Copy link

xrotorhead commented Jul 13, 2022

I have blobs saved

This post (below) summarized step-by-step what worked for me. Hope it helps in your case...
https://gist.github.com/nyuszika7h/aac55c97f7925cddcf5ec3167f85dfe8?permalink_comment_id=4144634#gistcomment-4144634

when I'm using noncergulator from your post, it says that libirecovery is not installed. first three times macOS thrown me an error message saying libirecovery is corrupted and should be deleted. after that it asks me for shsh2 file path, I paste it and then there is this error:

Continuing with given SHSH
File verified as SHSH2 file, continuing
Getting generator from SHSH
Your generator is: 0x1111111111111111
 
Either unsupported device or no device found.
Exiting..

In my case, I needed both ldid and libirecovery installed via homebrew for it to work in macOS Monterey.

@deargosep
Copy link

deargosep commented Jul 14, 2022

I have blobs saved

This post (below) summarized step-by-step what worked for me. Hope it helps in your case...
https://gist.github.com/nyuszika7h/aac55c97f7925cddcf5ec3167f85dfe8?permalink_comment_id=4144634#gistcomment-4144634

when I'm using noncergulator from your post, it says that libirecovery is not installed. first three times macOS thrown me an error message saying libirecovery is corrupted and should be deleted. after that it asks me for shsh2 file path, I paste it and then there is this error:

Continuing with given SHSH
File verified as SHSH2 file, continuing
Getting generator from SHSH
Your generator is: 0x1111111111111111
 
Either unsupported device or no device found.
Exiting..

In my case, I needed both ldid and libirecovery installed via homebrew for it to work in macOS Monterey.

I installed both via homebrew. Also I have Big Sur, could it be a problem? On homebrew page it says it is supported on Big Sur. Also i have M1 chip on my mac

@xrotorhead
Copy link

xrotorhead commented Jul 15, 2022

I have blobs saved

This post (below) summarized step-by-step what worked for me. Hope it helps in your case...
https://gist.github.com/nyuszika7h/aac55c97f7925cddcf5ec3167f85dfe8?permalink_comment_id=4144634#gistcomment-4144634

when I'm using noncergulator from your post, it says that libirecovery is not installed. first three times macOS thrown me an error message saying libirecovery is corrupted and should be deleted. after that it asks me for shsh2 file path, I paste it and then there is this error:

Continuing with given SHSH
File verified as SHSH2 file, continuing
Getting generator from SHSH
Your generator is: 0x1111111111111111
 
Either unsupported device or no device found.
Exiting..

In my case, I needed both ldid and libirecovery installed via homebrew for it to work in macOS Monterey.

I installed both via homebrew. Also I have Big Sur, could it be a problem? On homebrew page it says it is supported on Big Sur. Also i have M1 chip on my mac

You can try some basics like make sure the Mac sees and “trusts” the phone. Also, I remember once having major issues with a usb-c to lightning cable for JB purposes; and using a usb-a to lightning cable fixed communications between the Mac and the phone. Not sure what kind of ports you have on an M1, but you may need an intermediary usb-c to usb-a (female) adapter to test this.

@deargosep
Copy link

deargosep commented Jul 15, 2022

I have blobs saved

This post (below) summarized step-by-step what worked for me. Hope it helps in your case...
https://gist.github.com/nyuszika7h/aac55c97f7925cddcf5ec3167f85dfe8?permalink_comment_id=4144634#gistcomment-4144634

when I'm using noncergulator from your post, it says that libirecovery is not installed. first three times macOS thrown me an error message saying libirecovery is corrupted and should be deleted. after that it asks me for shsh2 file path, I paste it and then there is this error:

Continuing with given SHSH
File verified as SHSH2 file, continuing
Getting generator from SHSH
Your generator is: 0x1111111111111111
 
Either unsupported device or no device found.
Exiting..

In my case, I needed both ldid and libirecovery installed via homebrew for it to work in macOS Monterey.

I installed both via homebrew. Also I have Big Sur, could it be a problem? On homebrew page it says it is supported on Big Sur. Also i have M1 chip on my mac

You can try some basics like make sure the Mac sees and “trusts” the phone. Also, I remember once having major issues with a usb-c to lightning cable for JB purposes; and using a usb-a to lightning cable fixed communications between the Mac and the phone. Not sure what kind of ports you have on an M1, but you may need an intermediary usb-c to usb-a (female) adapter to test this.

Thank you, gonna try with USB a

@deargosep
Copy link

deargosep commented Jul 15, 2022

I have blobs saved

This post (below) summarized step-by-step what worked for me. Hope it helps in your case...
https://gist.github.com/nyuszika7h/aac55c97f7925cddcf5ec3167f85dfe8?permalink_comment_id=4144634#gistcomment-4144634

when I'm using noncergulator from your post, it says that libirecovery is not installed. first three times macOS thrown me an error message saying libirecovery is corrupted and should be deleted. after that it asks me for shsh2 file path, I paste it and then there is this error:

Continuing with given SHSH
File verified as SHSH2 file, continuing
Getting generator from SHSH
Your generator is: 0x1111111111111111
 
Either unsupported device or no device found.
Exiting..

In my case, I needed both ldid and libirecovery installed via homebrew for it to work in macOS Monterey.

I installed both via homebrew. Also I have Big Sur, could it be a problem? On homebrew page it says it is supported on Big Sur. Also i have M1 chip on my mac

You can try some basics like make sure the Mac sees and “trusts” the phone. Also, I remember once having major issues with a usb-c to lightning cable for JB purposes; and using a usb-a to lightning cable fixed communications between the Mac and the phone. Not sure what kind of ports you have on an M1, but you may need an intermediary usb-c to usb-a (female) adapter to test this.

I tried with usb a adapter, Mac is trusted on iPad, even reinstalled ldid and libirecovery via rosetta 2, still doesn't work

@showmak
Copy link

showmak commented Jul 15, 2022

hello i have iphone 8 and ios 15.5 haw i can downgrade ios 14.7? please help
Do you have blobs for 14.7?

@xrotorhead
Copy link

xrotorhead commented Jul 15, 2022

hello i have iphone 8 and ios 15.5 haw i can downgrade ios 14.7? please help
Do you have blobs for 14.7?

I’m afraid your stuck until a JB is released for your iOS version. Blobs are device-specific. Perhaps somebody (before you) has saved the blobs for your individual handset - you can go here to investigate; otherwise somebody else’s blobs will not work on your device.

@ceson-l
Copy link

ceson-l commented Jul 29, 2022

hi all. iphone7 ios15.2 can I downgrade the system to any version? like 10.x.x or something. please help

@iyedess
Copy link

iyedess commented Jul 31, 2022

NO SOLUTION FOR A9X IPAD PRO 9.7

@joshuah345
Copy link

joshuah345 commented Aug 11, 2022

NO SOLUTION FOR A9X IPAD PRO 9.7

there's gaster now, so a9x is fine
https://github.com/joshuah345/gaster/tree/imagefix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment