Restore Keyvault

Colanta

Noob Account
Dec 5, 2011
8
0
[SOLVED] Restore Keyvault

Hey,

I wish to restore my Xbox (Trinity) to retail for use it on XBL, however i didn't have the original Keyvault.

i've patch it to change my DVDDrive type from Hitachi 500 -> Sammy ms28

could i revert the patch with JRunner and use it?

also, i've another dump from another trinity with its CPU Key. it's possible to decrypt the donnor KV, and swap it on my other trinity?

Thanks
 
Last edited:

nofeloniesyet

VIP Member
Jan 16, 2011
4,830
128
Nowhere
Hey,

I wish to restore my Xbox (Trinity) to retail for use it on XBL, however i didn't have the original Keyvault.

i've patch it to change my DVDDrive type from Hitachi 500 -> Sammy ms28

could i revert the patch with JRunner and use it?

also, i've another dump from another trinity with its CPU Key. it's possible to decrypt the donnor KV, and swap it on my other trinity?

Thanks
afaik if you dont have the original kv you cannot build a retail image,im sure martin will correct me if im wrong :p
 
Last edited:

Colanta

Noob Account
Dec 5, 2011
8
0
afaik if you dont have the original kv you cannot build a retail image,im sure martin will correct me if im wrong :p
Thanks for answer,

i dont have the original one, but a modified one.

afaik it's hashed against the cpu key, and the only change was the DVD model, so idk if restoring the original DVD model will also restore the hash.

thanks again
 

Colanta

Noob Account
Dec 5, 2011
8
0
A Sammy ms28 in a trinity? o_O

Not to sound blunt, but why would you do that? :p


Sent from my GT-i9100 using Tapatalk
Original drive gets messed up in an accident involving a little girl and a bunch of caramel... long story

so i reuse an old xenon drive while the replacement drive arrives
 

nofeloniesyet

VIP Member
Jan 16, 2011
4,830
128
Nowhere
No original kv, no retail nand. The kv is hash checked against the cpukey and if it's been altered in any way, I don't think it will even boot. You will get Christmas lights.
correct
 
  • Like
Reactions: Martin C

Colanta

Noob Account
Dec 5, 2011
8
0
No original kv, no retail nand. The kv is hash checked against the cpukey and if it's been altered in any way, I don't think it will even boot. You will get Christmas lights.
i know that no kv.bin, no retail party

but as long as it is a hash value, it wouldn't be restored if i undo the change ?

well, i guess i should try it
 

dexxxterek

Full Member
Oct 11, 2011
36
0
Any modifications of kv change its hash, it will be wrong even you change drive osig and DVD key to previous value.

Wysłane z mojego GT-N7100 przy użyciu Tapatalka
 
  • Like
Reactions: Colanta

Colanta

Noob Account
Dec 5, 2011
8
0
why didnt you keep an original copy of the kv?

lesson learned here i hope
kv went lost during a computer manteinance, but i find an partial dump from the nand and it has the kv.bin :D

however, now i'm missing fcrt.bin from retail -_-

idk if it will be in custom nand as long as i change the OSIG and mark the no fcrt checkbox...

afaik the checkbox only patches the kernel, but idk if it also deletes the fcrt.bin file from filesystem
 

nofeloniesyet

VIP Member
Jan 16, 2011
4,830
128
Nowhere
kv went lost during a computer manteinance, but i find an partial dump from the nand and it has the kv.bin :D

however, now i'm missing fcrt.bin from retail -_-

idk if it will be in custom nand as long as i change the OSIG and mark the no fcrt checkbox...

afaik the checkbox only patches the kernel, but idk if it also deletes the fcrt.bin file from filesystem
if the box had a 9504/0272 drive it wouldnt have an fcrt.bin just so you know.
nofcrt will work,so long as box is left as rgh,but will not work as retail.

in short sounds like this console is good for rgh only at this point.
 
Last edited:

Colanta

Noob Account
Dec 5, 2011
8
0
Hey, Thanks to everyone for your advices... console is up and running on XBL.

BTW, Drive was a hitachi 500

What we learn about this:

-ALWAYS... keep a copy of your Retail NAND, also in the cloud if you could.
-Partial Dumps (1320Kb), contains your kv.bin, and smc.bin // nandpro lpt: -r2 nandext1.bin 0x000000 0x000050
-unless you modified it, smc_config.bin its the same in retail and glitched nands
-unless you manually deleted it fcrt.bin is preserved in glitched nands, even if you change the OSIG and check nofrct.bin option
-keep away curious childs with caramel from your dvd drive's

thanks again

someone, please mark this as solved
 
Last edited:

Martin C

VIP Member
Jan 10, 2004
35,981
0
Scotland, UK
www.team-xecuter.com
-unless you manually deleted it fcrt.bin is preserved in glitched nands, even if you change the OSIG and check nofrct.bin option
This isn't true. NOFCRT zeros out a copy of fcrt.bin, so it wouldn't work on a retail console.
 

Colanta

Noob Account
Dec 5, 2011
8
0
This isn't true. NOFCRT zeros out a copy of fcrt.bin, so it wouldn't work on a retail console.
Well, maybe Jrunner does it, but i did my rgh with another software and i was able to recover fcrt.bin

i'll do some test and upload the results
 

Colanta

Noob Account
Dec 5, 2011
8
0
Well, maybe Jrunner does it, but i did my rgh with another software and i was able to recover fcrt.bin

i'll do some test and upload the results

Well, i've done this:

Extract fcrt.bin from retail (Corona 16mb - Hitachi)
Patch retail OSIG and nofcrt, save and close
open patched nand and verify patches
extract fcrt.bin from patched

both files are identical (compared with total commander)
 

Newytni

Noob Account
Apr 23, 2014
1
0
Well, i've done this:

Extract fcrt.bin from retail (Corona 16mb - Hitachi)
Patch retail OSIG and nofcrt, save and close
open patched nand and verify patches
extract fcrt.bin from patched

both files are identical (compared with total commander)
it proceeds? Thx