These are instructions on how to downgrade an iPhone that was accidentally upgraded to 1.1.3 Firmware. If your iPhone has the 3.9 Bootloader then it is possible to downgrade the firmware then downgrade the baseband and get a working phone again.
If you have the 4.6 Bootloader then you must downgrade your iPhone firmware and then you can follow the 1.1.2, 1.1.3 OTB unlock tutorial:
How to Unlock Your 1.1.2 - 1.1.3 OTB iPhone
DOWNGRADE TO 1.1.1
Step One
For this you will need iNdependance 1.3.1, iTunes 7.5, and iPhone Firmware 1.1.1.
- Get iTunes 7.5 from: here
- Download iNdependance from here: here
- Download iPhone Firmware 1.1.1 from: here
Step Two
Double click iNdependence_v1.3.1.dmg to mount the disk image. Drag the iNdependence application to your Applications folder.
Step Three
Connect your iPhone to your Mac. Press and hold Home and Power button of your iPhone at the same time. Once the screen turns black, release the power button but keep on holding the Home button until Apple logo changes to the restore screen.
Step Four
iTunes will then detect an iPhone in restore mode.
Hold down the Option key and click Restore.
A dialog window will appear asking you to select the firmware to restore to. Select the 1.1.1 firmware we downloaded earlier (iPhone1,1_1.1.1_3A109a_Restore.ipsw)
At the end of the restore you will get Error 1015. This is okay. Simply click the Ok button.
Step Five
Press and hold Home and Power button of your iPhone at the same time. Once the screen turns black, release the power button but keep on holding the Home button until Apple logo changes to the restore screen.
Step Six
iTunes will then again detect an iPhone in restore mode.
Step Seven
Eject your iPhone and Quit iTunes.
Step Eight
Open iNdependance by double clicking its icon in Applications.
Step Nine
iNdependence will after a short time take your iPhone out of recovery mode. If you get an error or it doesn't seem to be working then restart the iPhone and try it again. You might also try to disconnect the usb cable and plug it back in. If its really being difficult then just re-restore to 1.1.1 and try again.
Once it is successfully out of DFU mode you will see the Activate Phone screen displayed on your iPhone.
Step Ten
Quit Independence.
JAILBREAK 1.1.1
Step One
At the "Activate iPhone" screen move the slider to the right for emergency calling.
Step Two
Dial "*#307#" then press the Call button.
Step Three
You will hear the phone call itself. Use the back arrow to clear the number you just enter. Now dial "0" then press the Call button.
Step Four
Now you will be able to see the incoming call. Press the Accept button.
Step Five
Now press the Hold button to put the call on hold.
Step Six
The phone will call itself again. This time press the Decline button.
Step Seven
We are now presented with the keypad again. Press the Contacts tab at the bottom. We now are presented with an empty contacts menu. Click the plus(+) button to add a new contact.
Step Eight
Press Add New URL.
Step Nine
Input prefs: as the url then press the Save button.
Step Ten
Press Add New URL again.
Step Eleven
Input http://jailbreakme.com as the url then press the Save button.
Press the Done button to finish adding the contact.
Step Twelve
Now in the contact view you will see the 2 urls. Press the prefs: url.
Step Thirteen
This will bring up the iPhone's Settings Menu. Select your wireless network from the Wi-Fi category. Press the Settings button at the top left to go back to the Settings Menu.
Step Fourteen
Select the General category from the Settings Menu. Then select the Auto-Lock subcategory.
Press to select Never from the list of Auto-Lock times.
Press the Settings button at the top left to return to the settings window.
Step Fifteen
Press the Home button. At the "Activate iPhone" screen move the slider to the right for emergency calling.
Step Sixteen
Now dial "0" then press the Call button.
Step Seventeen
Now you will be able to see the incoming call. Press the Accept button.
Step Eighteen
Now press the Hold button to put the call on hold.
Step Nineteen
The phone will call itself again. This time press the Decline button.
Step Twenty
We now are presented with our contacts menu. Press to select the contact we added.
Step Twenty One
Press the http://jailbreakme.com url. This will open Safari and take you to jailbreakme.com
Step Twenty Two
Scroll down to the bottom of the page and press Install AppSnapp.
Phone will return to activation screen, but don't panic, just wait. iPhone should automatically restart after almost a minute. When the phone starts again, it should no longer say Slide to emergency, but rather Slide to Unlock. This means it was successful!
I've had a few reports of the emergency slider not changing to the unlock slider. The best suggestion so far has been to keep the iPhone connected to the computer and make sure its detected in iTunes. Otherwise it seems to work if you retry installing AppSnapp till it works. Don't know what the issue is exactly (maybe a server load issue) but if it doesn't work immediately then try again.
DOWNGRADE THE BASEBAND
At this point if you have a 4.6 Bootloader iPhone you cannot continue any further. You can stay at 1.1.1 or you can install OktoPrep and update to 1.1.2 then 1.1.3.
How to Activate and Jailbreak Your OTB 1.1.2 iPhone Using Windows
Once in 1.1.2 or 1.1.3 with a 4.6 BL you can perform the Geohot Unlock:
How to Unlock Your 1.1.2 - 1.1.3 OTB iPhone
If you have the 3.9 Bootloader then you can continue to downgrade your baseband and get full phone functionality.
Step One
Press to select Settings on your Springboard.
Step Two
Press to select General from the Settings Menu.
Step Three
Press to select Auto-Lock from the General Menu.
Step Four
Press to select Never from the list of Auto-Lock times!
Step Five
Press the Home button to return to your Springboard. Now press the Installer icon to launch Installer app.
Step Six
Press the Sources tab at the bottom of the screen.
Step Seven
Press the Edit button at the top right of the screen.
Step Eight
Press the Add button at the top left of the screen.
Step Nine
Enter http://i.unlock.no as your new source and press the large OK button.
Step Ten
Press the Done button at the top right of the screen.
Step Eleven
Press the Install tab at the bottom of the screen.
Step Twelve
Press to select Unlocking Tools from the Category list.
Step Thirteen
Press to select Baseband Downgrader from the list of Packages.
Step Fourteen
Press the Install button at the top right of the screen.
Step Fifteen
Press the large Install button that appears at the bottom of the screen.
Step Sixteen
A Notice will appear asking you to make sure that Auto-Lock is set to Never. Since we already did this we can press the large OK button.
Step Seventeen
Once completed you will receive Notice that your Baseband is now downgraded! Press the large OK button.
At this point if you can stay at 1.1.1 or you can install OktoPrep and update to 1.1.2 then update 1.1.3.
Jailbreak 1.1.2: How to Activate and Jailbreak Your OTB 1.1.2 iPhone
Update to 1.1.3: How to Officially Update and Jailbreak to 1.1.3 iPhone Firmware Using Installer
THANKS***: Thanks to i.unlock.no for adding the baseband downgrade to their repository. Also thanks to hacktheiphone for a couple of the screenshots.
If you have the 4.6 Bootloader then you must downgrade your iPhone firmware and then you can follow the 1.1.2, 1.1.3 OTB unlock tutorial:
How to Unlock Your 1.1.2 - 1.1.3 OTB iPhone
DOWNGRADE TO 1.1.1
Step One
For this you will need iNdependance 1.3.1, iTunes 7.5, and iPhone Firmware 1.1.1.
- Get iTunes 7.5 from: here
- Download iNdependance from here: here
- Download iPhone Firmware 1.1.1 from: here
Step Two
Double click iNdependence_v1.3.1.dmg to mount the disk image. Drag the iNdependence application to your Applications folder.
Step Three
Connect your iPhone to your Mac. Press and hold Home and Power button of your iPhone at the same time. Once the screen turns black, release the power button but keep on holding the Home button until Apple logo changes to the restore screen.
Step Four
iTunes will then detect an iPhone in restore mode.
Hold down the Option key and click Restore.
A dialog window will appear asking you to select the firmware to restore to. Select the 1.1.1 firmware we downloaded earlier (iPhone1,1_1.1.1_3A109a_Restore.ipsw)
At the end of the restore you will get Error 1015. This is okay. Simply click the Ok button.
Step Five
Press and hold Home and Power button of your iPhone at the same time. Once the screen turns black, release the power button but keep on holding the Home button until Apple logo changes to the restore screen.
Step Six
iTunes will then again detect an iPhone in restore mode.
Step Seven
Eject your iPhone and Quit iTunes.
Step Eight
Open iNdependance by double clicking its icon in Applications.
Step Nine
iNdependence will after a short time take your iPhone out of recovery mode. If you get an error or it doesn't seem to be working then restart the iPhone and try it again. You might also try to disconnect the usb cable and plug it back in. If its really being difficult then just re-restore to 1.1.1 and try again.
Once it is successfully out of DFU mode you will see the Activate Phone screen displayed on your iPhone.
Step Ten
Quit Independence.
JAILBREAK 1.1.1
Step One
At the "Activate iPhone" screen move the slider to the right for emergency calling.
Step Two
Dial "*#307#" then press the Call button.
Step Three
You will hear the phone call itself. Use the back arrow to clear the number you just enter. Now dial "0" then press the Call button.
Step Four
Now you will be able to see the incoming call. Press the Accept button.
Step Five
Now press the Hold button to put the call on hold.
Step Six
The phone will call itself again. This time press the Decline button.
Step Seven
We are now presented with the keypad again. Press the Contacts tab at the bottom. We now are presented with an empty contacts menu. Click the plus(+) button to add a new contact.
Step Eight
Press Add New URL.
Step Nine
Input prefs: as the url then press the Save button.
Step Ten
Press Add New URL again.
Step Eleven
Input http://jailbreakme.com as the url then press the Save button.
Press the Done button to finish adding the contact.
Step Twelve
Now in the contact view you will see the 2 urls. Press the prefs: url.
Step Thirteen
This will bring up the iPhone's Settings Menu. Select your wireless network from the Wi-Fi category. Press the Settings button at the top left to go back to the Settings Menu.
Step Fourteen
Select the General category from the Settings Menu. Then select the Auto-Lock subcategory.
Press to select Never from the list of Auto-Lock times.
Press the Settings button at the top left to return to the settings window.
Step Fifteen
Press the Home button. At the "Activate iPhone" screen move the slider to the right for emergency calling.
Step Sixteen
Now dial "0" then press the Call button.
Step Seventeen
Now you will be able to see the incoming call. Press the Accept button.
Step Eighteen
Now press the Hold button to put the call on hold.
Step Nineteen
The phone will call itself again. This time press the Decline button.
Step Twenty
We now are presented with our contacts menu. Press to select the contact we added.
Step Twenty One
Press the http://jailbreakme.com url. This will open Safari and take you to jailbreakme.com
Step Twenty Two
Scroll down to the bottom of the page and press Install AppSnapp.
Phone will return to activation screen, but don't panic, just wait. iPhone should automatically restart after almost a minute. When the phone starts again, it should no longer say Slide to emergency, but rather Slide to Unlock. This means it was successful!
I've had a few reports of the emergency slider not changing to the unlock slider. The best suggestion so far has been to keep the iPhone connected to the computer and make sure its detected in iTunes. Otherwise it seems to work if you retry installing AppSnapp till it works. Don't know what the issue is exactly (maybe a server load issue) but if it doesn't work immediately then try again.
DOWNGRADE THE BASEBAND
At this point if you have a 4.6 Bootloader iPhone you cannot continue any further. You can stay at 1.1.1 or you can install OktoPrep and update to 1.1.2 then 1.1.3.
How to Activate and Jailbreak Your OTB 1.1.2 iPhone Using Windows
Once in 1.1.2 or 1.1.3 with a 4.6 BL you can perform the Geohot Unlock:
How to Unlock Your 1.1.2 - 1.1.3 OTB iPhone
If you have the 3.9 Bootloader then you can continue to downgrade your baseband and get full phone functionality.
Step One
Press to select Settings on your Springboard.
Step Two
Press to select General from the Settings Menu.
Step Three
Press to select Auto-Lock from the General Menu.
Step Four
Press to select Never from the list of Auto-Lock times!
Step Five
Press the Home button to return to your Springboard. Now press the Installer icon to launch Installer app.
Step Six
Press the Sources tab at the bottom of the screen.
Step Seven
Press the Edit button at the top right of the screen.
Step Eight
Press the Add button at the top left of the screen.
Step Nine
Enter http://i.unlock.no as your new source and press the large OK button.
Step Ten
Press the Done button at the top right of the screen.
Step Eleven
Press the Install tab at the bottom of the screen.
Step Twelve
Press to select Unlocking Tools from the Category list.
Step Thirteen
Press to select Baseband Downgrader from the list of Packages.
Step Fourteen
Press the Install button at the top right of the screen.
Step Fifteen
Press the large Install button that appears at the bottom of the screen.
Step Sixteen
A Notice will appear asking you to make sure that Auto-Lock is set to Never. Since we already did this we can press the large OK button.
Step Seventeen
Once completed you will receive Notice that your Baseband is now downgraded! Press the large OK button.
At this point if you can stay at 1.1.1 or you can install OktoPrep and update to 1.1.2 then update 1.1.3.
Jailbreak 1.1.2: How to Activate and Jailbreak Your OTB 1.1.2 iPhone
Update to 1.1.3: How to Officially Update and Jailbreak to 1.1.3 iPhone Firmware Using Installer
THANKS***: Thanks to i.unlock.no for adding the baseband downgrade to their repository. Also thanks to hacktheiphone for a couple of the screenshots.