SafeCTRTransfer (Browser)

If you have already hacked your device before and have a EmuNAND based CFW setup, this guide deals exclusively with SysNAND and you should follow all instructions from within or applying to SysNAND. Note that the terms EmuNAND and RedNAND refer to slightly different implementations of the same concept.

If you downgrade to 2.1.0 on a 2DS or New 3DS and leave Wireless Communication off, you can re-enable the wireless by removing the battery and unplugging the charger for several seconds then booting back up.

If you’ve been using the New 3DS’s microSD Management to transfer files to your SD card, this will no longer work on 2.1.0. Ensure you have a microSD card reader available before proceeding.

To use the magnet links on this page, you will need a torrent client like Deluge

For now, connecting your device to the internet is REQUIRED to continue after the 2.1.0 CTRTransfer.

Disable the parental controls of your device before doing the 2.1.0 CTRTransfer. If you do not know the password, see this site. If you cannot disable parental controls because the linked NNID is for a child under 13, you can instead set all parental control options to “do not restrict”.

Performing a CTRTransfer will remove all user-installed tickets (which allow access to games) from your device until the created backup is restored.

Never format a 2DS while on a version <6.0.0 or you will be unable to complete initial setup and will BRICK!

Never update a New 3DS running 2.1.0 (an Old 3DS firmware) or you will BRICK! You MUST restore a NAND backup or CTRTransfer back to standard New 3DS firmware first!

Overview of steps

In this section, we will be flashing your device’s CTRNAND partition to 2.1.0 in order to take advantage of an oversight in 2.1.0 for the purpose of extracting the OTP unique to your device. This OTP file is required to install arm9loaderhax, and cannot be shared with other consoles.

This is accomplished by installing a premade CTRTransfer image containing 2.1.0, copying your device specific files (such as moveable.sed and SecureInfo_A) to it, then fixing the title databases.

What you need

• The latest release of SafeCTRTransfer
• The 2.1.0 CTRTransfer image for your device and region
  (if your device is not from one of these regions, just pick one):
  • - New 3DS or Old 3DS or 2DS 2.1.0 - EUR - CTRTransfer
  • - New 3DS or Old 3DS or 2DS 2.1.0 - JPN - CTRTransfer
  • - New 3DS or Old 3DS or 2DS 2.1.0 - USA - CTRTransfer

Instructions

Section I - Prep Work

1. Power off your device
2. Insert your SD card into your computer
3. Create a folder named CTRTransfer on the root of your SD card if it does not already exist
4. Copy the 2.1.0 .bin and .bin.sha from the CTRTransfer .zip to the /CTRTransfer/ folder on your SD card
5. Copy Launcher.dat and SafeCTRTransfer.dat from the SafeCTRTransfer .zip to the root of your SD card
6. Reinsert your SD card into your device
7. Power on your device

Section II - Launch SafeCTRTransfer

1. Launch the browser and go to one of the following URLs on your device
   • https://dukesrg.github.io/?SafeCTRTransfer.dat
   • http://go.gateway-3ds.com/
   • http://www.reboot.ms/3ds/load.html?Launcher.dat
   • http://dukesrg.dynu.net/3ds/rop?GW17567.dat&Launcher.dat
   • Make sure to try each URL if the first one doesn’t work (some versions cannot use the first one, and some versions cannot use the last three)
   • If you get an error, follow this troubleshooting guide
2. If the exploit was successful, you will have booted into SafeCTRTransfer

Section III - CTRTransfer

1. Allow the SafeCTRTransfer initialization and safety checks to proceed automatically
   • If you get an error, ensure you have all files in the correct locations and that you have enough free space on your SD card as detailed in Get Started
2. When prompted, input the key combo given to confirm CTRTransfer to 2.1.0
   • This process will take some time
   • This process will automatically create a backup of your device’s NAND at /ctrtransfer/<serialnumber>_nand.bin
   • If you get a critical error, follow this troubleshooting guide
3. Once this process has completed, remove your SD card from your device to reboot
   • The reboot will take about 2 seconds to trigger
   • While on 2.1.0, your device will black screen on boot if your SD card is inserted before the home menu loads
   • Every time your device is rebooted on 2.1.0, you will need to take out your SD card before boot and put it back in after the home menu loads
   • For now, leave your SD card out as you will be copying files to it in the next page
   • This will be fixed once you restore your device in the next page

(Screen distortions or discolorations are normal for some devices while on 2.1.0, they will go away once you restore your backup)

Continue to Installing arm9loaderhax