Tutorial  Updated

How to install the exFAT driver without updating!

This guide is outdated, use this easier guide instead: guide, original thread: ChoiDujourNX

*************

Warning: Use at your own risk, using a wrong version of a game dump could prevent the console from booting.

Warning: Because we install the driver without ever requesting this from Nintendo, this could be detected if you go online and result in a ban.



Intro:

How to install the exFAT driver without updating you console.
I used the game dump "Penny.Punching.Princess.NSW-BigBlueBox" on my 3.0.2 Switch.
I'm assuming you know how FG works and how to send payloads to the console before proceeding.

There are two methods of installing this:
1, Stock: Installing it to the system like a cartridge would. This works on stock firmware but exFAT support would be lost after a system update.
2, CFW: When booting Horizon via hekate, a .kip1 file will be injected. The console's eMMC remains unaltered and will not have the driver loaded when booting normally and not via hekate.

Method 1, Stock:

Necessities:

- A console with firmware version 2.0 or higher (does not work on 1.0.0)
- A Game dump with an update on it that is the same version as the console (tested: trimmed xci works)
- Switch encryption keys (these can't be shared, Google 'nswroms' to find them)
- patch.zip: link
- TegraRcmGUI / TegraRcmSmash (TegraRcmGUI)
- memloader (https://switchtools.sshnuke.net/)
- HacDiskMount (https://switchtools.sshnuke.net/)

Steps:

step 1: Copy the contents of the sample directory of memloaderv1.zip to the root of your SD card.
step 2: Enter RCM using your prefered method: how-to-test-fusee-gelee.
step 3: Inject the memloader.bin payload that is located inside of memloaderv1.zip.
step 4: Select 'ums_emmc.ini' by navigating with the volume buttons and confirming with the power button.
step 5: open HacDiskMount as administrator and select 'Linux UMS disk 0':
9niP3aA.png
step 6: Double click BCPKG2-1-Normal-Main and a window will pop-up:
jl6PSBZ.png
step 7: Use the 'Start' button in the 'Dump to file' section to extract the partition.
step 8: (!) Create a backup of BCPKG2-1-Normal-Main.bin and store it somewhere safe.
step 9: Create a new directory and extract the contents of patch.zip into it.
step 10: Copy the game dump and BCPKG2-1-Normal-Main.bin to the same directory.
step 11: Create a file named keys.txt in the same directory.
step 12: Copy all of the Switch encryption keys to this file.
The keys.txt file should contain at least the following keys, replace the ... with the keys you found online.

master_key_00 = ...
master_key_01 = ...
master_key_02 = ...
master_key_03 = ...
master_key_04 = ...
aes_kek_generation_source = ...
aes_key_generation_source = ...
key_area_key_application_source = ...
header_kek_source = ...
header_key_source = ...
step 13: Inside of the directory we created, drag the game dump .xci onto the patch.bat file.
step 14: If the process executed successfully you should see something like this:
qfxpqd7.png

(The number of bytes can vary)
(Don't worry about the 'Failed to match key' warnings)
step 15: Go back to HacDiskMount and click on 'Browse' in the 'Restore from file' section and select BCPKG2-1-Normal-Main.bin that we just patched.
step 16: Close the pop-up window and doucle click on BCPKG2-2-Normal-Sub.
step 17: Repeat step 15 and restore the same BCPKG2-1-Normal-Main.bin file (optional, but advised).
step 18: Hold the power button on your Switch for 12 seconds to turn it off and then boot it again to see the results!

Results:

Before:
eJvxiBb.jpg

H0NszhP.jpg

After:
B5BL3UT.jpg

dqmIIc4.png

Credits:

@Raugo for creating the original Spanish tutotial: link

Method 2, CFW:

Necessities:

- Everything from method 1, except: memloader and HacDiskMount
- sdfiles.zip (https://github.com/tumGER/SDFilesSwitch/releases)
- hekate (https://github.com/CTCaer/hekate/releases)

Steps:

step 1: Create a new directory and extract the contents of patch.zip into it.
step 2: Copy the game dump to the same directory.
step 3: Create a file named keys.txt in the same directory.
step 4: Copy all of the Switch encryption keys to this file.
The keys.txt file should contain at least the following keys, replace the ... with the keys you found online.

master_key_00 = ...
master_key_01 = ...
master_key_02 = ...
master_key_03 = ...
master_key_04 = ...
aes_kek_generation_source = ...
aes_key_generation_source = ...
key_area_key_application_source = ...
header_kek_source = ...
header_key_source = ...
step 6: Inside of the directory we created, drag the game dump .xci onto the patch-cfw.bat file.
step 7: If the process executed successfully you should see something like this:
8tVdyio.png

step 8: Copy the file FS.kip1 that was just created in the 'out' directory, to the root of your SD card.
step 8: Copy the contents of sdfiles.zip to the root of your SD card.
step 9: On your SD card, open hekate_ipl.ini inside of a text editor.
step 10: Add the following line below each boot entry that you want to inject:
Code:
kip1=FS.kip1
A boot entry is a line that starts with [ and ends with ], for example:
Code:
[CFW]
kip1=modules/newfirm/loader.kip
kip1=modules/newfirm/sm.kip
kip1=FS.kip1
step 11: Put the SD card back into your Switch.
step 12: Enter RCM using your prefered method: how-to-test-fusee-gelee.
step 13: Inject the hekate.bin payload

After booting hekate and selecting either 'stock' or 'CFW' from the 'Launch firmware' section, the exFAT driver will be injected!
 
Last edited by Quantumcat,

ErTa

Member
Newcomer
Joined
Jan 3, 2019
Messages
12
Trophies
0
Age
33
XP
63
Country
Germany
Okay i will try it after work. What do i have to do after this?
Is it possible to use a NAND backup from someone else?
 

Adran_Marit

Walküre's Hacker
Member
Joined
Oct 3, 2015
Messages
3,781
Trophies
1
Location
42*South
XP
4,558
Country
Australia
I saved the biskeys. what should i do now?

Now this is the hard part, you basically need to reflash the firmware using the old choidujour method. (This guide)

Provided you have the get the same firmware version you had (5.1 = 5.1 6.1 = 6.1 etc) you should be able to skip steps
8.1 8.2 and 8.3. BE WARNED IF YOU MESS UP THIS YOU DON'T GET A SECOND CHANCE
 

ErTa

Member
Newcomer
Joined
Jan 3, 2019
Messages
12
Trophies
0
Age
33
XP
63
Country
Germany
Now this is the hard part, you basically need to reflash the firmware using the old choidujour method. (This guide)

Provided you have the get the same firmware version you had (5.1 = 5.1 6.1 = 6.1 etc) you should be able to skip steps
8.1 8.2 and 8.3. BE WARNED IF YOU MESS UP THIS YOU DON'T GET A SECOND CHANCE

Okay, thanks. I will try this one, but before I do it, i will do a NAND backup this time ^^. Thank you for you help, i will tell you if it works or not.

I need a game to do this guide, right? I have 6.2.0 on my Switch. Is there any game i can use for it?
 
Last edited by ErTa,

Adran_Marit

Walküre's Hacker
Member
Joined
Oct 3, 2015
Messages
3,781
Trophies
1
Location
42*South
XP
4,558
Country
Australia
Okay, thanks. I will try this one, but before I do it, i will do a NAND backup this time ^^. Thank you for you help, i will tell you if it works or not.

Do a nand backup AFTER you get it working. Basically if you follow that guide and you get a pop up DO NOT CLICK FORMAT WHATEVER YOU DO

If you click format there is no coming back
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Psionic Roshambo @ Psionic Roshambo:
    When I worked for Dell we had access to data about military contracts and addresses for high ranking people.
  • Psionic Roshambo @ Psionic Roshambo:
    I personally handled a call from the second highest person at Raytheon. That call bothered me a lot... The guy was nice and smart what bothered me was the way management basically just blew him off instead of going the extra mile to help him.
  • Psionic Roshambo @ Psionic Roshambo:
    In the end that call ended up costing Dell millions in lost contracts with Raytheon, and really the issue could have been solved for like 450 bucks lol
  • NinStar @ NinStar:
    sometimes I wonder why anyone would ever buy mega man x legacy collection 2
  • NinStar @ NinStar:
    I always thought that capcom shuffled the games in these collection, but apparently they are all in chronological order, which makes legacy collection 2 worthless
  • BakerMan @ BakerMan:
    guys, i want to start singing pirate metal songs and sea shanties if i play sea of thieves
  • The Real Jdbye @ The Real Jdbye:
    find a pirate metal playlist
    +2
  • The Real Jdbye @ The Real Jdbye:
    and sing along
  • BakerMan @ BakerMan:
    nevermind i just learned swearing is against the rules in sea of thieves

    i was about to start singing the song i last put in "what song are you currently listening to" yesterday
  • BakerMan @ BakerMan:
    but yeah ig so
  • The Real Jdbye @ The Real Jdbye:
    swearing not allowed in a pirate game? what has the world come to
  • BakerMan @ BakerMan:
    (here's the song for context)
  • BigOnYa @ BigOnYa:
    Just add -izle to the end of every curse word, you will be fine.
    +2
  • The Real Jdbye @ The Real Jdbye:
    i like alestorm
    +1
  • The Real Jdbye @ The Real Jdbye:
    @BigOnYa too many syllables
    +1
  • BakerMan @ BakerMan:
    same lmao
  • BigOnYa @ BigOnYa:
    hi, welcome to the Temp!
    +1
  • BakerMan @ BakerMan:
    Welcome to the Underground!
    +1
  • BakerMan @ BakerMan:
    the booty boogie from (once again) the donkey kong country cartoon could also be a good song to sing while playing sea of thieves
  • BigOnYa @ BigOnYa:
    Please insert 25 cents for an additional 30 minutes of talk time.
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    It's the Switcheroo
    Psionic Roshambo @ Psionic Roshambo: It's the Switcheroo