SafeCTRTransfer (MSET)

If you have already hacked your device before and have a EmuNAND based CFW setup, this guide deals exclusively with SysNAND and you should follow all instructions from within or applying to SysNAND. Note that the terms EmuNAND and RedNAND refer to slightly different implementations of the same concept.

If you downgrade to 2.1.0 on a 2DS or New 3DS and leave Wireless Communication off, you can re-enable the wireless by removing the battery and unplugging the charger for several seconds then booting back up.

If you’ve been using the New 3DS’s microSD Management to transfer files to your SD card, this will no longer work on 2.1.0. Ensure you have a microSD card reader available before proceeding.

To use the magnet links on this page, you will need a torrent client like Deluge

For now, connecting your device to the internet is REQUIRED to continue after the 2.1.0 CTRTransfer.

Disable the parental controls of your device before doing the 2.1.0 CTRTransfer. If you do not know the password, see this site. If you cannot disable parental controls because the linked NNID is for a child under 13, you can instead set all parental control options to “do not restrict”.

Performing a CTRTransfer will remove all user-installed tickets (which allow access to games) from your device until the created backup is restored.

Never format a 2DS while on a version <6.0.0 or you will be unable to complete initial setup and will BRICK!

Never update a New 3DS running 2.1.0 (an Old 3DS firmware) or you will BRICK! You MUST restore a NAND backup or CTRTransfer back to standard New 3DS firmware first!

Putting a New 3DS on 2.1.0 in sleep mode is known to cause an UNRECOVERABLE brick!
This only happens when shutting the lid while your device is on; this does not apply to turning your device off.
Your device only enters sleep mode when the lid is closed. It is not on a timer or anything like that.
Once on 2.1.0, you should continue without delay to avoid any possibility of this happening!

Overview of steps

In this section, we will be flashing your device’s CTRNAND partition to 2.1.0 in order to take advantage of an oversight in 2.1.0 for the purpose of extracting the OTP unique to your device. This OTP file is required to install arm9loaderhax, and cannot be shared with other consoles.

This is accomplished by installing a premade CTRTransfer image containing 2.1.0, copying your device specific files (such as moveable.sed and SecureInfo_A) to it, then fixing the title databases.

What you need

Instructions

Section I - Prep Work
  1. Power off your device
  2. Insert your SD card into your computer
  3. Create a folder named CTRTransfer on the root of your SD card if it does not already exist
  4. Copy the 2.1.0 .bin and .bin.sha from the CTRTransfer .zip to the /CTRTransfer/ folder on your SD card
  5. Copy SafeCTRTransfer.dat from the SafeCTRTransfer .zip to the root of your SD card
  6. Reinsert your SD card into your device
  7. Copy SafeCTRTransfer.nds from the SafeCTRTransfer .zip to your DS flashcart
  8. Power on your device
Section II - Launch SafeCTRTransfer
  1. Start your DS flashcart from your device
  2. Boot SafeCTRTransfer.nds using your flashcart
  3. Select the correct option for your system version
    • 4.X.X -> “4.x SafeCTRTransfer”
    • 6.X.X -> “6.x SafeCTRTransfer”
  4. Reboot the system, then go to System Settings, then “Other Settings”, then “Profile”, then “Nintendo DS Profile”
  5. If the exploit was successful, you will have booted into SafeCTRTransfer
Section III - CTRTransfer
  1. Allow the SafeCTRTransfer initialization and safety checks to proceed automatically
    • If you get an error, ensure you have all files in the correct locations and that you have enough free space on your SD card as detailed in Get Started
  2. When prompted, input the key combo given to confirm CTRTransfer to 2.1.0
    • This process will take some time
    • This process will automatically create a backup of your device’s NAND at /ctrtransfer/<serialnumber>_nand.bin
    • If you get a critical error, follow this troubleshooting guide
  3. Once this process has completed, remove your SD card from your device to reboot
    • The reboot will take about 2 seconds to trigger
    • While on 2.1.0, your device will black screen on boot if your SD card is inserted before the home menu loads
    • Every time your device is rebooted on 2.1.0, you will need to take out your SD card before boot and put it back in after the home menu loads
    • For now, leave your SD card out as you will be copying files to it in the next page
    • This will be fixed once you restore your device in the next page

(Screen distortions or discolorations are normal for some devices while on 2.1.0, they will go away once you restore your backup)

Putting a New 3DS on 2.1.0 in sleep mode is known to cause an UNRECOVERABLE brick!
This only happens when shutting the lid while your device is on; this does not apply to turning your device off.
Your device only enters sleep mode when the lid is closed. It is not on a timer or anything like that.
Once on 2.1.0, you should continue without delay to avoid any possibility of this happening!

Continue to Installing arm9loaderhax

For support in English, ask for help at Nintendo Homebrew on Discord.
If you appreciate this guide, I accept Donations through both Bitcoin and PayPal.