Tested. Mac Guide to unlock iPhone 1.1.1 with phone function (with pics) [IPSF paid solution]

(mac only, win user may also follow. We hope to write a windows guide, but we still try to figure out how to by-pass activation. )

EDIT: This guide will not work for iPhone 1.1.2. ONLY for iPhone 1.1.1 or lower.

UPDATE: Follow this easier guide with iNdependence. Note, you don’t need to run anySIM program. Your iPhone will be activated once you finished step 13.

I read there are so many people face problems when they want to unlock their iPhone 1.1.1. I decided to write this little guide to show you how to unlock iPhone 1.1.1.

The guide is for Mac OS X. Windows user can be used by Putty. You need iPhoneSimFree.com paid program. It is intended to show you iPhone 1.1.1 is fully unlocked and able to make calls with native applications. But, I do not recommend you to buy it now cause I am sure free solution will come out very soon. I purchased it long time ago.

Note my iPhone has the following history:

Unlocked by IPSF > flash baseband > unlock by AnySIM again > flash the baseband twice

It all starts when my iPhone bricks at iPhone 1.1.1.

Note after you upgrade to iPhone 1.1.1, you may not be able to use:

1. Custom ringtones

But this will let you to use most of the functions of iPhone 1.1.1 including phone function and native application support.

Don’t reboot or switch off your iPhone unless you are told to do so. Don’t try this if you are not comfortable, this guide can brick your iPhone. Do it at your own risk.

Stage 1 – Downgrading iPhone to 1.0.2

You can read the guide from Dev Team.

Stage 2 – Before upgrading

Step 1. Activate and Install SSH by using iNdependence. You also need to install AppTapp. Install Community Resources and BSD system under AppTapp Installer. Remember the iPhone IP address.

Step 2. Open the iTunes first, make sure it is in the following state:

Step 3. Keep iTunes open. SSH into your iPhone now under Terminal, and type the follow 2 command lines:

mv /var/root/Media /var/root/Media.old
ln -s / /var/root/Media

Step 4. Type the following command line as we would like to use other SIM.

cp /usr/libexec/lockdownd /var/root/lockdownd.1.0.2

Stage 3 – Upgrading and iPHUC

Step 5. Proceed to upgrade if your iTunes is the same as we saw in Step 2.

Step 6. After you upgraded, quit iTunes. From now on, don’t open iTunes unless it is told to do so. Quit both iTunes and iTunesHelper using Activity Monitor of Mac OS X. Download and extract the new iPHUC. Navigate to the folder, and type:

./iphuc-jailbreak.osx

Step 7. Type ‘ls’, if it looked like this, all are okay.

Step 8. Type the following to enable the read write mode:

putjailbreak rdisk0s1 /dev/rdisk0s1

Reboot the iPhone.

Step 9. Type:

getfile /etc/fstab fstab

Step 10. Check the file ‘fstab’ from jailbreak folder. Open it using TextEdit, if it looks the same as following, than go on. Note that it should be ‘rw’ instead of ‘ro’:

Stage 4 – Installing SSH (iPhone still in ‘Activate iPhone’ screen)

Step 11. Run iNdependence. DON’T CLICK Activate iPhone tab. We should click ‘SSH’ Tab. Click ‘Install SSH’. Follow the on-screen guide. Note we suggest you to change the password by clicking ‘Change Password’. Type ‘root’ as username.

Step 12. Clean the known SSH host history first under Fugu. Than, login to SSH. Noted we wrote down the iPhone IP address in Step 1, right? Type in the required information and login.

Step 13. Download the BSD-Base right here. Copy the ‘cp’, ‘mv’ and ‘rm’ binary from the ‘bin’ and copy ‘killall’ from the ‘usr/bin’ (of the extracted package). Put those copied files on ‘/usr/bin’ folder of iPhone.

Stage 5 – Activating Non-ATT SIM

Step 12. SSH your iPhone using Terminal. And, type the command to backup lockdownd file:

cp /usr/libexec/lockdownd /var/root/lockdownd.1.1.1

Step 13. Type to overwrite your previous lockdownd:

cp /var/root/lockdownd.1.0.2 /usr/libexec/lockdownd

Step 14. In the local iPHUC folder, you will find the iPhoneActivation.pem. Copy it to iPhone’s ‘/System/Library/Lockdown’. You can use Fugu or SSH it with the command:

scp iPhoneActivation.pem root@[iPhone IP]:/System/Library/Lockdown/

Step 15. Type the following under Terminal to reload the lockdown:

killall lockdownd

Step 16. Download iASign and extract it. Replace the iASign’s ‘bin’ folder ‘iPhoneActivation.pem’ file with the one in iPHUC extracted folder.

Step 17. Navigate to the iASign folder, under terminal, type: ‘cd bin’ and also the following command:

Step 18. Type the following restore the original lockdownd file. You iPhone now activated. Don’t open iTunes, reboot iPhone nor run iASign again. Keep your iPhone freeze a little while, it will be fine. :

cp /var/root/lockdownd.1.1.1 /usr/libexec/lockdownd

Stage 6 – Clean up and finalization

Step 19. SSH using Fugu. Upload the included ’springpatch’ binary to iPhone’s ‘/usr/bin’

Step 20. Execute it using Terminal.

Step 21. Don’t use killall to restart Springboard. Instead, you reboot the iPhone by turning it off and on again.

Step 22. SSH to your iPhone using Terminal, type:

rm /var/root/Media
mv /var/root/Media.old /var/root/Media

Finished!

You can now open iTunes again and all things should be able to sync. To be able to use the AppTapp Installer, you may need to follow the additional guide right here.

• Previous Entry: Liveblogging: iPhone 1.1.1 fully unlocked (or not?) [IPSF Solution]
• Next Entry: Watch “another Joost” anytime anywhere