Installing boot9strap (Frogminer)


For support in English, ask for help at Nintendo Homebrew on Discord.
If you appreciate this guide, I accept Donations.


Required Reading

To install boot9strap on your 11.9.0 device, we exploit an oversight in the security restrictions applied to “DSiWare” applications.

To accomplish this, we use a tool called Seedminer to calculate the DSiWare encryption key (movable.sed) for your device.

We then use this DSiWare encryption key to decrypt a compatible DSiWare application and inject an exploit into it to run our own code.

If this key were completely random, the encryption key would be impossible to break on current computing hardware. Fortunately, the first half of the key (movable_part1.sed) is actually mathematically related to your device’s Friend Code, allowing us to break the encryption. For information on how Seedminer works, please see this presentation.

Note that this tool requires a PC with a powerful graphics card to break your device’s DSiWare encryption. If you do not have access to one of these, there exists an online helper service where a volunteer running automated software will do this for you.

To use the magnet links on this page, you will need a torrent client like Deluge.

To extract the .7z and .rar files linked on this page, you will need a file archiver like 7-Zip or The Unarchiver.

This process will overwrite your game’s save file!

What You Need

Instructions

Section I - Prep Work

  1. Power off your device
  2. Insert your SD card into your computer
  3. Create a folder named 3ds on the root of your SD card if it does not already exist
  4. Copy boot.firm from the Luma3DS .7z to the root of your SD card
  5. Copy boot.nds (B9STool) to the root of your SD card
  6. Copy boot.3dsx to the root of your SD card
  7. Copy the steelhax folder from the Steelhax .rar to the root of your SD card
  8. Copy the otherapp payload to the steelhax folder on your SD card and rename it to payload.bin
  9. Copy Frogtool.3dsx to the /3ds/ folder on your SD card
  10. Copy frogcert.bin to the root of your SD card
  11. Navigate to the Nintendo 3DS folder on your SD card
  12. Copy the 32 character long name of the folder you see
    • If you see multiple folders like this, perform the following:
    • Rename the Nintendo 3DS folder to BACKUP_Nintendo 3DS
    • Reinsert your SD card into your device and power on your device
    • Wait for the device to generate the SD card data
    • Power off your device and reinsert your SD card into your computer
    • Navigate to the Nintendo 3DS folder on your SD card
    • Copy the 32 character long name of the folder you see
    • Delete the Nintendo 3DS folder
    • Rename the BACKUP_Nintendo 3DS folder to Nintendo 3DS
  13. Paste your 32 character long folder name into a document you can reference later
    • This folder name is also known as your “ID0”
  14. Reinsert your SD card into your device
  15. Power on your device
  16. Go to your Friend List (the orange Face Icon in the top row of your Home Menu)
    • If you receive an error and are kicked out of the menu, you either must create a new Mii or your console cannot connect to Nintendo’s servers (due to a ban or connection issues)
  17. Find your Mii profile, then find the “Friend Code” field on the top screen

Section II - Seedminer

  1. Open Bruteforce Movable on your computer
    • This site can automate the retrieval of movable_part1.sed (using a bot 3DS console) and the breaking of your device’s DSiWare encryption (using a volunteer’s computer to run Seedminer)
    • If you already have access to a 3DS capable of launching the Homebrew Launcher, you can manually retrieve your movable_part1.sed using that device by following these instructions
    • If you already have access to a PC with a powerful graphics card, you can manually calculate your movable.sed using it by following these instructions
    • If the automated service is nonfunctional and you cannot do one or both of those manually, join Nintendo Homebrew on Discord and ask (in English) for someone there to assist you
  2. Enter your device’s Friend Code (with no spaces or dashes) into the “Your friend code” field
  3. Paste your device’s 32 character long folder name into the “Your ID0” field
  4. Complete the “I’m not a robot” captcha
  5. Select “Go”
  6. When prompted, use the “Register Friend” button on your device to add the friend code of the bot 3DS console
  7. Wait for the site to update
    • If it does not, wait a few minutes before refreshing the page once
  8. Select “Continue”
  9. Wait for the process to complete
    • This can take a while (up to an hour in some cases)
    • If you are still waiting after an hour, join Nintendo Homebrew on Discord and ask (in English) for someone there to assist you
  10. When the process has completed, download your movable.sed file from the site

Section III - Steelminer

  1. Launch “Steel Diver: Sub Wars” once and select a Mii to initialize your save file
    • Decline the game update when prompted
    • If you have already updated the game, use the Data Management menu of the System Settings to delete the update
  2. Exit “Steel Diver: Sub Wars”
  3. Power off your device
  4. Insert your SD card into your computer
  5. Open the Steelminer website on your computer
  6. Select your movable.sed file
  7. Select “Start!”
  8. Wait for the process to complete
  9. Navigate to Nintendo 3DS -> <ID0> -> <32-character-id> -> title -> 00040000 -> <8-character-region> -> data on your SD card
    • EUR Region: 000d7e00
    • JPN Region: 000d7c00
    • USA Region: 000d7d00
  10. Copy the new downloaded save file to the data folder on your SD card
    • Overwrite the old save file when prompted
  11. Copy your movable.sed to the root of your SD card
  12. Reinsert your SD card into your device
  13. Power on your device

Section IV - Flashing FIRM

  1. Launch “Steel Diver: Sub Wars”
  2. If the exploit was successful, your device will have loaded the Homebrew Launcher
  3. Launch Frogtool from the list of homebrew
  4. Select the “INJECT patched DS Download Play” option
  5. Frogtool will automatically run and inject the JPN version of Flipnote Studio into your DS Download Play
  6. Once this operation has finished, tap the touchscreen and select “BOOT patched DS Download Play”
  7. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
  8. Complete the initial setup process for the launched game until you reach the main menu
    • Select the left option whenever prompted during the setup process
  9. Using the touch-screen, select the large left box, then select the box with an SD card icon
  10. Once the menu loads, select the face icon, then the bottom right icon to continue
  11. Select the frog icon at the bottom left, then select the second button along the top with a film-reel icon
  12. Scroll right until reel “3/3” is selected
  13. Tap the third box with the letter “A” in it
  14. Scroll left until reel “1/3” is selected
  15. Tap the fourth box with the letter “A” in it
  16. If the exploit was successful, your device will have loaded b9sTool
  17. Select “Install boot9strap” and confirm
  18. Exit b9sTool, then power off your device
    • You may have to force power off by holding the power button

Section V - Configuring Luma3DS

  1. Boot your device while holding (Select) to launch the Luma configuration menu
  2. Use the (A) button and the D-Pad to turn on the following:
    • “Show NAND or user string in System Settings”
  3. Press (Start) to save and reboot

Continue to Finalizing Setup