How to activate a device on iOS 15 that was futurerestored on 16 sep

15on16sepactivationguide.md

HOLY SHIT is this original guide outdated and broken as fuck

Credits to OrangeRa1n for the original guide

YOLOOOOOOOOO?

This is a guide on how to activate ur idevice on ios 15 (maybe ios 14 idk) when its futurerestored on 16 sep.

DISCLAIMER: I am very aware people might use this to bypass icloud, but I am NOT encouraging you to bypass icloud.

ALSO: THIS IS RECOMMENDED FOR ADVANCED USERS ONLY, i am not responsable for ur device being broken (tho idk how it becomes broken via this)

also, i've only tested this on macOS, might work on linux tho if u replace darwin with linux and shit.

if you need halp, joion this: https://discord.gg/BNXR8EjETH

You will need

The sshrd script: git clone https://github.com/verygenericname/SSHRD_Script --recursive

Important info

I am NOT (yet) aware of this working on iOS 14 but it prob will cause ios 14 suffers from the same issue, but the solution is diffirent.

this ONLY works on checkm8 devices, meaning iPhone XS/XR and up, iPad mini 5 and up, iPad air 3 and up, iPad pro 2018 and up, and iPad 8th gen and up are NOT supported. This will NOT work on the iPhone X due to 16 sep breaking restores on it for 15/14.

If you erase all contents and settings, you'll have to do Part 3 all over again. Keep the Activation files created for backup use.

also, don't use this for bypassing icloud, thanks

Part 1: Preparing.

1st step, unless ur using a tethered downgrade, if ur already on ios 14/15, DUMP BLOBS via ./sshrd.sh dump-blobs, if you already have blobs, copy em.

Restore ur idevice to 16.7.4 or whatever the latest version of 16 is, because we will need to activate the device to get records.

Then activate device, as we are legimately activiting to grab a few files.

Part 2: grabbing files

after cloning sshrd_script and cding into the direcrtory, run

./sshrd.sh <your ios 16 version>

./sshrd.sh boot

./sshrd.sh ssh

You will then need to run: mount_filesystems

You will need to run: mkdir ~/Desktop/Activation

You will also need FileZilla and put these settings:

Password is alpine

You need to go to /mnt2/containers/Data/System and enter each folder, then the Library folder, until you see the folders called activation_records and internal, and download the files inside both folders to the Activation folder on ur desktop.

You also need to go to /mnt2/mobile/Library/Fairplay and download the whole folder.

You also need to go to /mnt2/wireless/Library/Preferences/ and download the com.apple.commcenter.device_specific_nobackup.plist file to the folder.

The resulting file structure should look something like this:

Prep done, now we do the actual activation.

Part 3: Activating

First futurerestore to whatever 14/15 ver u have, using this guide

Next step, run sudo chmod -R 755 [drag n drop activation folder from desktop] and enter ur password

Now rerun these commands: ./sshrd.sh <your ios 15 version>

./sshrd.sh boot

./sshrd.sh ssh

mount_filesystems

Leave the SSH Ramdisk open, we'll need it later

Open a new terminal window, then download the script linked below. Copy it to the Darwin folder in SSHRD_Script directory.

cd into the Darwin directory

Run each of the commands in activate_fixed.sh one by one. DO NOT try to run the file with bash. I recommend opening an editor like VS Code and copying each of the commands to the Darwin terminal window.

Commands marked with run this command in the SSH Ramdisk should be pasted into the SSH Ramdisk window.

You should reboot when pasting the last command. Activated!

activate_fixed.sh

# WARNING: DO NOT RUN THIS FILE DIRECTLY FROM TERMINAL/BASH/ZSH!
# Commands in this file should be run one by one

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 rm -rf /mnt2/mobile/Media/Downloads/1

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 rm -rf /mnt2/mobile/Media/1

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 mkdir /mnt2/mobile/Media/Downloads/1/Activation

./sshpass -p alpine scp -rP 2222 -o StrictHostKeyChecking=no ~/Desktop/Activation root@localhost:/mnt2/mobile/Media/Downloads/1

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 mv -f /mnt2/mobile/Media/Downloads/1 /mnt2/mobile/Media

# run this command in the SSH Ramdisk
chown -R mobile:mobile /mnt2/mobile/Media/1

# keep running these in the Darwin directory
./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chmod -R 755 /mnt2/mobile/Media/1

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chmod 644 /mnt2/mobile/Media/1/Activation/activation_record.plist 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chmod 644 /mnt2/mobile/Media/1/Activation/data_ark.plist 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chmod 644 /mnt2/mobile/Media/1/Activation/com.apple.commcenter.device_specific_nobackup.plist 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 killall backboardd sleep 12 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 mv -f /mnt2/mobile/Media/1/Activation/FairPlay /mnt2/mobile/Library/FairPlay 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chmod 755 /mnt2/mobile/Library/FairPlay

ACT1=$(./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 find /mnt2/containers/Data/System -name internal) 

ACT2=$(./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 find /mnt2/containers/Data/System -name activation_records) 

echo $ACT1 

ACT2=${ACT1%?????????????????} 

echo $ACT2 

ACT3=$ACT2/Library/internal/data_ark.plist 

echo $ACT3

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chflags nouchg $ACT3 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 mv -f /mnt2/mobile/Media/1/Activation/data_ark.plist $ACT3 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chmod 755 $ACT3 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chflags uchg $ACT3

ACT4=$ACT2/Library/activation_records 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 mkdir $ACT4 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 mv -f /mnt2/mobile/Media/1/Activation/activation_record.plist $ACT4/activation_record.plist 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chmod 755 $ACT4/activation_record.plist 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chflags uchg $ACT4/activation_record.plist 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chflags nouchg /mnt2/wireless/Library/Preferences/com.apple.commcenter.device_specific_nobackup.plist

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 mv -f /mnt2/mobile/Media/1/Activation/com.apple.commcenter.device_specific_nobackup.plist /mnt2/wireless/Library/Preferences/com.apple.commcenter.device_specific_nobackup.plist 

# run this command in the SSH Ramdisk
chown root:mobile /mnt2/wireless/Library/Preferences/com.apple.commcenter.device_specific_nobackup.plist 

# keep running these in the Darwin directory
./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chmod 755 /mnt2/wireless/Library/Preferences/com.apple.commcenter.device_specific_nobackup.plist 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 chflags uchg /mnt2/wireless/Library/Preferences/com.apple.commcenter.device_specific_nobackup.plist 

# these might throw an error, not a big deal
./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 launchctl unload /System/Library/LaunchDaemons/com.apple.mobileactivationd.plist 

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 launchctl load /System/Library/LaunchDaemons/com.apple.mobileactivationd.plist

./sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 2222 ldrestart

# run this command in the SSH Ramdisk to reboot
reboot