Part 4 (Getting the OTP) 获取OTP - dalphyx/Guide-3ds-Chinese GitHub Wiki

如果你卡在了2.1.0这里，在进行任何操作之前请阅读这个[页面](https://github.com/Plailect/Guide/wiki/3DS- Stuck-(2.1.0-Without-Functional-Browser))的全部信息。这可能会帮你拯救一个砖机

OTP是一块设备独特区域，从这个区域中可以获得设备独特的字段，虽然方法还是未知的。

The OTP is a requirement to use arm9loaderhax, which gets you, among other things, 100% boot rate, RedNAND boot speed almost as fast as regular sysNAND (using something like CakesFW or Luma3DS), and very early Arm9 access. In the future, this will allow for running things like Decrypt9 to unbrick yourself without a hardmod and other awesome tools.

Since version 3.0, the OTP is locked out early in sysNAND boot. There is a New 3DS only exploit that works on 9.6, but it requires extra hardware. The solution we are using is to downgrade RedNAND (to ensure we don't partial downgrade) to 2.1, then flash RedNAND to sysNAND to get the OTP.

If you have an existing EmuNAND, you can follow this part without switching to RedNAND by following all RedNAND steps as if they said EmuNAND.

更多相关信息在这里 和这里.

你的RedNAND区域必须和你的SysNAND区域一样，否则你的设备会变砖。如果你已经改了RedNAND的区域了，你必须重新制作一个新的RedNAND ，否则你的设备会变砖

你必须用对应你设备和区域的正确安装包来降级，否则你的设备会变砖

需求

• 一个可用的RedNAND和CFW （你应该在Part 3中得到这两个东西了）
• 最新版Decrypt9WIP
• 最新版PlaiSysUpdater
• 最新版TinyFormat
• 最新版OTPHelper
• 最新版FBI
• 最新版Universal Inject Generator
• 一份对应你设备和区域的2.1.0的固件压缩包：

• New 3DS / Old 3DS or 2DS 2.1.0 - EUR (Mirror)
• New 3DS / Old 3DS or 2DS 2.1.0 - JAP (Mirror)
• New 3DS / Old 3DS or 2DS 2.1.0 - USA (Mirror)

步骤

板块I - 准备工作

1. Right now is a good time to use a save manager to backup any saves you care about (do steps 10 - 18 then install the hblauncher_loader CIA)
2. Copy both the OTPHelper folder from the OTPHelper zip and the Decrypt9WIP folder from the Decrypt9 zip to the /3ds/ folder on your SD card
3. Copy PlaiSysUpdater.cia from the PlaiSysUpdater zip, TinyFormat.cia from the TinyFormat zip, and arm11.bin and arm9.bin from the OTPHelper zip to the root of your SD card
4. Copy and merge the 3DS folder from the FBI zip to the root of your SD card
5. Reinsert your SD card into your 3DS, then boot your 3DS into RedNAND using any CFW (if you followed Part 3 of this guide, you can do this by launching Luma3DS from the HomeBrew Launcher)
6. MAKE SURE YOU ARE IN RedNAND (IF YOU FOLLOWED PART 3, MAKE SURE THAT YOU SEE "EMU" IN FRONT OF THE VERSION NUMBER)
7. Update your RedNAND to the latest version using system settings if it is not already (DO NOT ENTER DATA MANAGEMENT OR EXIT SYSTEM SETTINGS AS THIS WILL REBOOT YOU INTO SYSNAND)
8. Reboot into SysNAND
9. Make sure your WiFi is on (it has not been disabled from the SysNAND home menu settings), you can only toggle it by pulling the battery which resets it to be on
10. Get into the Homebrew Launcher on SysNAND through the entrypoint of your choice
11. Open Decrypt9 (This can sometimes take a few tries), then go to "EmuNAND Options", then select the "Health & Safety Dump" option to dump Health & Safety to hs.app (you can use Up and Down / Left and Right to change the name)
12. Press Select to eject your SD card, then put it in your computer
13. Extract Universal Inject Generator, then copy both hs.app from your SD card and FBI.cia from the FBI zip to the input folder
14. Double click go.bat (or execute go.shwith Terminal on Linux / Mac)
15. Copy FBI_inject_with_banner.app to the root of your SD card and reinsert your SD card into your 3DS
16. Press B on Decrypt9, then go to "EmuNAND Options" and select the "Health & Safety Inject" option
17. Press down once to select FBI_inject_with_banner.app, then press A to inject
18. Go to the main menu, then press Start to reboot
19. Get into the Homebrew Launcher on SysNAND through the entrypoint of your choice
20. Open OTPHelper
21. Go to "NAND Backup & Restore"
22. Backup EmuNAND to emuNAND_original.bin (you can use Up and Down / Left and Right to change the name)
23. Go to the SysNAND options menu on the main menu
24. Backup SysNAND to sysNAND_original.bin
25. Press Select on the main menu to eject your SD card
26. Put your SD card in your computer, then copy over sysNAND_original.bin and emuNAND_original.bin to a safe folder on your computer, you will need them later (Your backups should match one of the sizes on this page; if they do not, you should delete them and make new ones!)
27. Delete emuNAND_original.bin and sysNAND_original.bin from your SD card
28. Reinsert your SD card into your 3DS, press Start and right at the same time to reboot, then boot your 3DS into RedNAND using any CFW (if you followed Part 3 of this guide, you can do this by launching Luma3DS from the HomeBrew Launcher)
29. Launch the Health and Safety Application (which is now FBI) on RedNAND
30. Navigate to TinyFormat.cia and press A to install
31. Press home to exit FBI, then launch TinyFormat using the home menu icon
32. Press Y to format RedNAND
33. Reboot back into RedNAND and complete initial setup without signing into your Nintendo Network ID
34. Repeat steps 29 through 34, this is not optional (in other words, you must TinyFormat your RedNAND twice - if you do not, your device may brick when you downgrade)
35. Remove any TWL modifications done to the device or PlaiSysUpdater will throw an error
    (if you have no idea what this is, don't worry about it; most users will not need to do this)
36. Launch the Health and Safety Application (which is now FBI)
37. Navigate to PlaiSysUpdater.cia and press A to install

板块II - 降级

26. Reboot into SysNAND, then get into the Homebrew Launcher through the entrypoint of your choice
27. Open OTPHelper, then go to "NAND Backup and Restore", then select the "EmuNAND Backup" option
28. Backup your RedNAND to emuNAND_formatted.bin
29. Press Select on the main menu to eject your SD card
30. Put your SD card in your computer, then copy over emuNAND_formatted.bin to a safe folder on your computer
31. Delete any existing updates folder from your SD card root that may be left over from a previous downgrade or update
32. Copy the updates folder from the 2.1.0 firmware zip to the root of your SD card
33. Reinsert your SD card into your 3DS, press Start and right at the same time to reboot, then boot your 3DS into RedNAND using any CFW
34. Open PlaiSysUpdater on RedNAND
35. Press X to downgrade RedNAND to 2.1.0
36. If you encounter an error at any point during the downgrade, restore your RedNAND backup from emuNAND_formatted.bin using OTPHelper through the Homebrew Menu on SysNAND. Afterwards, you can retry the downgrade on RedNAND, restoring from backup whenever it fails until it goes through successfully. This downgrade process can take many many tries in some situations, just keep trying until it works
37. RedNAND will be bricked by the downgrade on New 3DS (not on Old 3DS), but you will no longer be able to get into it on either since no current CFW can boot a 2.1.0 RedNAND (a black screen when you try to load RedNAND is normal)
38. Reboot into SysNAND, then get into the Homebrew Launcher through the entrypoint of your choice
39. Open OTPHelper
40. Select "One Click Setup" and confirm. This can take a while.
    (If this fails or gives you an error do NOT continue or you may BRICK; you should follow this troubleshooting guide)
41. Cross your fingers
42. Reboot
43. If you get a black screen, boot with the SD card remove then reinsert when you see the home menu. If this fails, follow this troubleshooting guide

板块III - 获取OTP

(在2DS2.1.0版本中，屏幕被拉伸是正常的)

1. 在你的3DS上打开http://dukesrg.github.io/2xrsa.html?arm11.bin 这个链接
2. 之后会运行OTPHelper，然后选择"Dump otp.bin (0x100)"选项
3. 在主菜单按Select键弹出SD卡
4. 把SD卡插入电脑，然后把SD卡上的otp.bin文件拷贝到电脑上安全的地方
5. 确认 otp.bin文件的大小是235字节（bytes）
6. 备份你的 otp.bin文件到多个地方（比如网盘）

板块IV - 恢复系统

1. 拷贝你在板块I中备份的 sysNAND_original.bin文件到你的SD卡根目录
2. 把SD卡插入3DS，然后按B键返回到主菜单
3. 选到"NAND Backup & Restore"
4. 选择从sysNAND_original.bin恢复你的SysNAND
5. 撸一管
6. 重启设备