RCM Replace eMMC (Nintendo Switch)
TODO: FINISH THIS GUIDE BETTER WITH MORE INFO :P
If you have a totally corrupt eMMC or want to replace it or re-make an eMMC for whatever reason, you can. All you need to do is have a complete eMMC backup of a working Switch, and the production keys extracted from the target Switch.
You will require to inject the Hekate payload via RCM or similar method.
Thanks to this guide for majority of these steps.
Firstly make sure you have:
- The prod.keys from the Backup Prod Keys step in the RCM Backup eMMC page, from the target Switch you wish to re-make an eMMC for.
- A full eMMC BOOT0 & BOOT1 and eMMC RAW GPP backup from a working Switch.
Basically, copy the contents of the working Switch backup/[some id] to a subfolder backup/[some id]/restore
Now insert this SD card into your target Switch, inject Hekate, then go to Tools > Restore eMMC to restore the working Switch eMMC data to the consoles eMMC.
Back in the Hekate menu, select Tools > USB Tools
Ensure Readonly to OFF
Click eMMC RAW GPP (sysNAND) and then open NxNandManager, select File > Open Drive then eMMC GPP hekate (double click it).
Then select Options > Configure keyset > Import keys from file and select the prod.keys file backed up from the target Switch.
Press Save. You will notice it will say Bad Crypto and Keyset Needed, this is normal.
Right click on Prodinfo then click on restore from file.
Choose PRODINFO.bin from Nand files folder and press yes.
Do the same (right click, restore, select file) for ProdInfoF, Safe and the other partitions including BPKG2 etc...
DO NOT do it on BOOT0 and BOOT1
Click Options > Configure Keyset, then Clear Keyset
Choose your working switch prod.keys from your working switch keys and click save.
Right Click on USER, click Decrypt & Dump to file save it somewhere on your PC. You should then have user.dec file.
Click File > Close Drive.
Then File > choose drive and select user.dec
Click Options > Configure Keyset > clear keyset
Choose your dead switch prod.keys from your dead switch keys folder
Right click on user, and choose encrypt & dump to file . Now you have a user.enc file
Now File > Choose drive and select user.enc
Right click on user > dump to file . Now you have a user.bin file encrypted with the dead switch own prod.keys.
Next File > Close file/drive, File > Open drive > eMMC GPP hekate
Right click on USER > Restore from file > user.bin you just created
If the restore finished, right click on USER again and choose Format partition (FAT32)
Close NXNandManager
Run HacDiskMount as an Administrator.
Click on File > Open physical drive > hekate eMMC GPP
Double click on system, install the driver and mount the partition to a drive letter.
At the top you will see Bis key 2 crypto upper and tweak lower, now you need your biskey2 from the dead switch prod.keys.
Open your dead switch prod.keys with notepad and copy the line: bis_key_02 = yourkeywouldbehere .
you need to cut the long line in half like this 40ac3d379c83b2fccdbb7e8b4906a099 - a6e7926c47cc415ae32c22f823eeabbe both of this is 32character long
copy the first half line like this 40ac3d379c83b2fccdbb7e8b4906a099
paste it in the Crypto (Upper)
copy the second half line like this a6e7926c47cc415ae32c22f823eeabbe
paste it in the Tweak (Lower)
Click on test you will see in green: OK! Entropy
Where you see the Virtual drive title select a drive letter you like and click on mount any letter is fine but please don't choose (A) because it will see as a floppy drive.
On the mounted drive goto the save folder and delete everything EXCEPT 8000000000000120
Unmount the drive
Close HacDiskMount.
Run balenaEtcher.
Unmount "eMMC RAW GPP" and Mount "BOOT 0" - you may need to unplug the switch from the usb and replug it to continue DO NOT CLICK FORMAT - Just close the popup box(s) and make sure Read-Only if turned off before you mounted
In the etcher click on flash from file and choose the boot0.bin file from the USE IT ON PC\Nand files folder it will harass you with a missing partition table warning, ignore it and click on continue.
Click on select target and choose hekate eMMC BOOT0 USB Device
Click on Flash if it ask anything just press ok or continue
Unmount "eMMC BOOT 0" and Mount "BOOT 1" - you may need to unplug the switch from the usb and replug it to continue DO NOT CLICK FORMAT - Just close the popup box(s) and make sure Read-Only if turned off before you mounted
In the etcher click on flash from file again and choose the boot1.bin file from the Nand files folder
Click on select target and choose hekate eMMC BOOT1 USB Device
Click on Flash
Unmount "eMMC BOOT 0 and Reboot to RCM
Inject TegraExplorer.bin onto your Switch and run it.
Place this file onto your SD card then it should show in Tegra list, go to systemRestoreV3.te and click Run Script. The scripts are here and hereīģŋ
it will ask you what you want to restore select BOTH and follow the on-screen instructions
Reboot back to RCM and Inject TegraExplorer.bin again
Run the systemwipe.te from the starting screen bottom.
Inject fusee, then reboot and you should have a fully working Switch with the new eMMC.