Installing boot9strap (safecerthax)

For support in English, ask for help at Nintendo Homebrew on Discord.
If you appreciate this guide, we accept Donations.

Required Reading

safecerthax is compatible with all Old 3DS and Old 2DS devices in all regions.

If your (Right/Left Shoulder), (D-Pad Up) or (A) buttons do not work, or your ISP is rerouting DNS changes, you will need to use an alternate method, like Seedminer. For assistance with this matter, join Nintendo Homebrew on Discord and ask, in English, for help.

This exploit will not work on the New 3DS, New 3DS XL, or New 2DS XL. Please ensure that the device you are modding is an Old 3DS, Old 3DS XL, or Old 2DS before continuing.

What You Need

Instructions

Section I - Prep Work

  1. Power off your device
  2. Insert your SD card into your computer
  3. Copy boot.firm and boot.3dsx from the Luma3DS .zip to the root of your SD card
  4. Create a folder named boot9strap on the root of your SD card
  5. Copy boot9strap.firm and boot9strap.firm.sha from the boot9strap .zip to the boot9strap folder on your SD card
  6. Copy SafeB9SInstaller.bin from the SafeB9SInstaller .zip to the root of your SD card
  7. Reinsert your SD card into your device
  8. Power on your device

Section II - safecerthax DNS

  1. Launch the System Settings application
  2. Navigate to Internet Settings -> Connection Settings
  3. Click on your network connection slot and navigate to Change Settings -> Next Page (right arrow) -> DNS
  4. Set “Auto-Obtain DNS” to “No”, then click Detailed Setup
  5. Set both the Primary DNS and Secondary DNS to 054.038.133.070
  6. Click OK, then click Save
  7. When prompted, click “Test” to perform the connection test
    • The test should succeed
  8. Power off your device

Section III - safecerthax

  1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), then press (Power)
    • Keep holding the buttons until the device boots into Safe Mode
  2. Press “OK” to accept the update
    • There is no update. This is part of the exploit
  3. Press “I accept” to accept the terms and conditions
    • The update should fail and an error message should appear
    • If the update does not fail, it is possible that your ISP is rerouting DNS changes. Try another internet connection, or follow an alternate method, like Seedminer.
  4. Press “OK” to close the error message
  5. If the exploit was successful, you will have booted into SafeB9SInstaller
    • If the console freezes or crashes, force power off the console, then retry this section

Section IV - Installing boot9strap

  1. Wait for all safety checks to complete
  2. When prompted, input the key combo given to install boot9strap
  3. Once it has completed, press (A) to reboot your device

Section V - Configuring Luma3DS

  1. Your device should have rebooted into the Luma3DS configuration menu
  2. Use the (A) button and the D-Pad to turn on the following:
    • “Show NAND or user string in System Settings”
  3. Press (Start) to save and reboot

Section VI - Restoring default DNS

  1. Launch the System Settings application
  2. Navigate to Internet Settings -> Connection Settings
  3. Click on your network connection slot and navigate to Change Settings -> Next Page (right arrow) -> DNS
  4. Set “Auto-Obtain DNS” to “Yes”
  5. Click OK, then click Save
  6. When prompted, click “Test” to perform the connection test
    • The test should succeed
  7. Power off your device

Continue to Finalizing Setup