Restore iDevices to older firmware


Recommended Posts

Apple, in all of their infinite wisdom, have decided to make it hard to downgrade iOS versions. This makes things awkward when you need to use an older version for jailbreaking or any other reasons that I can't think of. It is possible to downgrade by having SHSH blobs on Saurik's server, but you probably don't and that's why you're reading this guide. This method works by editing some of the files in the .ipsw file that contains the firmware to trick Apple's verification system into thinking that you are restoring to the current firmware.

7zip can be found here:

http://www.7-zip.org/

iPodRobot plist Editor is somewhere over here:

http://download.cnet.com/Plist-Editor/3000-18551_4-10909598.html

You can find .ipsw files here:

http://www.felixbruns.de/iPod/firmware/

Note: This has only been tested on an iPod Touch 2G because that is all I have. This does not work for 3.1.3 (for me anyway). Your mileage may vary.

Other Note:I did not think of this, I found it after updating to 4.1, not liking it and googling for a way to fix it.

Even more notes: Click the images to enlarge.

1. Download the ipsw file you will be restoring to an put it somewhere on your computer.

141280221t.png

2. Make all file extensions visible.

202664515t.png

Press the Alt key and select Tools>Folder Options...

243690625t.png

Got to the View tab and uncheck Hide extensions for known file types. Apply and close.

3.Make a new folder and copy the .ipsw into it so you have two copies with the same filename.

4. Rename the file to a .zip.

373219498t.png

Rename it changing only the extension to .zip.

324642055t.png

Because you are changing the file type you will get a warning, click Yes.

5. Open the .zip and copy the BuildManifest.plist and Restore.plist files into the folder with your .ipsw file.

717631988t.png

6. open the .plist files with iPodRobot.

714393633t.png

Find and replace the original build number with the build number of the latest firmware for your device. It should appear twice or three times in BuildManifest.plist and once in Restore.plist.

The build number is in the file name and next to the device name on the list here.

The file name should be in this format:

ipod2,1_4.0_8A293_Restore.ipsw
"device name"_"version number"_"build number"_Restore.ipsw

7. Create the modified firmware.

702630091t.png

Delete the BuildManifest.plist and Restore.plist files from the .zip file and copy in your modified .plist files in their place. Rename the zip file into an .ipsw file like in step 4.

8. Finishing.

If you prefer to hide extensions repeat step 2, checking the box.

Open iTunes and connect your iDevice shift click the Restore button and select your modified firmware. From here, continue the restore as normal.

If you get a 1394 error, you are using the wrong build number, try older build numbers, 8B117 seems to work on iPod Touch 2G (as of January 2011).

T8

Link to comment
https://www.neowin.net/forum/topic/972006-restore-idevices-to-older-firmware/
Share on other sites

I tried using the method but I keep getting a 3194 error.

I have 4.2.1 on a 4G iTouch and I'm trying to get down to 4.1. I have edited the firmware, but it doesn't seem to be tricking the apple servers.

Do I have to edit the file name to match the new firmware as well?

I guess it's no luck for 4G 4.2.1ers as of now?

I tried using the method but I keep getting a 3194 error.

I have 4.2.1 on a 4G iTouch and I'm trying to get down to 4.1. I have edited the firmware, but it doesn't seem to be tricking the apple servers.

Do I have to edit the file name to match the new firmware as well?

I guess it's no luck for 4G 4.2.1ers as of now?

3194 is the one I meant at the end of the first post. I think it means the build number you used is for an older firmware which they don't want you using anymore or its for a different device.

The latest build number for your iPod (4G) is 8C148. The example I used was for a 2G.

T8

3194 is the one I meant at the end of the first post. I think it means the build number you used is for an older firmware which they don't want you using anymore or its for a different device.

The latest build number for your iPod (4G) is 8C148. The example I used was for a 2G.

T8

I used 8C148.

It gave me 3194.

I've even tried doing it with tinyumbrella in a separate tutorial. No success.

I tried using the method but I keep getting a 3194 error.

I have 4.2.1 on a 4G iTouch and I'm trying to get down to 4.1. I have edited the firmware, but it doesn't seem to be tricking the apple servers.

Do I have to edit the file name to match the new firmware as well?

I guess it's no luck for 4G 4.2.1ers as of now?

Try TinyUmbrella, it'll "kill" the process to connecting to Apple Servers.

The build number for 4.1 worked for me but it probably won't work for restoring to 4.1. I don't know what else to suggest. Tiny umbrella won't work by itself because you need apple to verify the restore, iTunes needs to receive the "OK" message from apple or it will give you the 3194 error.

T8

I tried using the method but I keep getting a 3194 error.

I have 4.2.1 on a 4G iTouch and I'm trying to get down to 4.1. I have edited the firmware, but it doesn't seem to be tricking the apple servers.

Do I have to edit the file name to match the new firmware as well?

I guess it's no luck for 4G 4.2.1ers as of now?

Just thought, did you edit the restore.plist file too, I didn't include a picture for that one and didn't make it that clear.

I had a go at doing it for your ipod, will link to the file when it uploads so you can test it, these retina graphics make it a huge file :/

T8

it seems that if you buy an ipod 4g that already has 4.2.1 on it there is no way to downgrade it to 4.1,

not really sure what they changed but it can not be done

if you've upgraded to 4.2.1 you can downgrade back to 4.1 but not if the ipod's only had 4.2.1 for whatever reason

Just thought, did you edit the restore.plist file too, I didn't include a picture for that one and didn't make it that clear.

I had a go at doing it for your ipod, will link to the file when it uploads so you can test it, these retina graphics make it a huge file :/

T8

can you send me a link too, i'm trying to get my friends new ipod downgraded so he can jailbreak it, if it doesn't work i guess we'll just have to wait till greenpois0n's 4.2.1 jailbreak is released :/

I tried using the method but I keep getting a 3194 error.

I have 4.2.1 on a 4G iTouch and I'm trying to get down to 4.1. I have edited the firmware, but it doesn't seem to be tricking the apple servers.

Do I have to edit the file name to match the new firmware as well?

I guess it's no luck for 4G 4.2.1ers as of now?

The whole ipsw isn't going anywhere on my connection :no: but here are the files you will need to move into the ipsw replacing the existing copies.

BuildManifest.plist

Restore.plist

iPod touch 4g restoring down to 4.1 ONLY

T8

The whole ipsw isn't going anywhere on my connection :no: but here are the files you will need to move into the ipsw replacing the existing copies.

BuildManifest.plist

Restore.plist

iPod touch 4g restoring down to 4.1 ONLY

T8

you put the same link for both files

Got some good news for you, Greenpois0n has been released for iOS 4.2.1

http://lifehacker.com/5752219/greenpois0n-brings-a-long+awaited-untethered-jailbreak-to-ios-421

Tried to look in the .dmg files in the .ipsw but they're encrypted :(

T8

awesome, just in time to give the ipod back to my friend tomorrow

that was the whole reason for trying to downgrade it was so i could jailbreak it

crap, just realized it's only released for osx right now :/

if i'm lucky i'll be able to log onto one of the macs at school tomorrow and do it from there

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Exactly. They won't go 100 because current gen consoles are simply too old for any groundbreaking graphics or gaming experience otherwise. They will go with standard (console) price 70 or go with 80 if they really want to go premium. Of course they will have more expensive options too with some useless cosmetics as always.
    • Doesn’t surprise me at all. God is light & He gave us life so it sounds almost logical that we would therefore emit a certain amount of light.
    • This is what I want. Hey Gemini, how do I remove you from all my google products permanently?
    • I would never install install this build before rtm process. only 3 months to go. never install on your daily devices. just wait 3 months.
    • Motrix Next 3.9.6 by Razvan Serea Motrix Next is a modern, open-source cross-platform download manager built as the official next-generation successor to the original Motrix project. It has been completely rewritten using Tauri 2, Vue 3, TypeScript, and Rust, while still relying on the powerful Aria2 download engine for high-speed multi-protocol transfers. The app supports HTTP, HTTPS, FTP, BitTorrent, ED2K and magnet links, offering advanced features like multi-connection acceleration, task scheduling, bandwidth control, and batch download management. With a significantly reduced install size (around 20MB), it focuses on being lightweight, fast, and resource-efficient compared to traditional Electron-based download tools. Designed for Windows, macOS, and Linux, Motrix Next delivers a clean, modern UI inspired by Material Design 3 principles, with smooth animations and a minimal workflow. It improves usability through better download organization, system tray integration, and enhanced torrent handling including selective file downloads and tracker management. Motrix Next features: Multi-protocol downloads — HTTP, FTP, BitTorrent, Magnet, .torrent, ED2K, and Metalink tasks BitTorrent — Selective file download, DHT, peer exchange, encryption controls, metadata caching, GeoIP peer flags, and tracker probing Browser extension integration — Embedded Extension API with independent authentication, download confirmation, smart auto-submit, filename hints, referer/cookie forwarding, and real-time controls (Chrome Web Store · Edge Add-ons) Safe filename handling — Content-Disposition, RFC 2047, non-UTF-8, percent-encoded, and extensionless URL resolution with path traversal sanitization Download organization — Favorite and recent folders, optional file-type categorization, stale-record cleanup, and completed history backed by SQLite Concurrent downloads — Independent controls for active tasks, HTTP connections per server, segments per file, and BT peer limits Speed control — Global and per-task upload/download limits with day-of-week and time-of-day scheduling System integration — Tray operation, optional tray speed display, macOS Dock badge/progress, protocol handlers for magnet://, thunder://, and motrixnext:// Lightweight mode — Destroys the WebView on minimize-to-tray while Rust keeps the engine, task monitor, notifications, history, and extension routing alive Notifications and power options — Native task start/complete/failure notifications, keep-awake during downloads, and optional shutdown after completion Network controls — Scoped proxy support for downloads, app updates, and tracker updates, plus system proxy detection Auto-update channels — Stable, Beta, and Latest Across Channels policies with separate download and install phases Diagnostics — Structured logs, exportable diagnostic ZIPs, database integrity checks, automatic DB rebuild, and Linux GPU rendering fallback Personalization — Light/dark/system theme, 10 color schemes, 26 languages, and first-launch system language detection Motrix Next 3.9.6 changelog: New Features Clipboard management — App-owned copy actions no longer trigger the Add Task auto-detect popup. aria2 input compatibility — Multi-line aria2-style task input is supported for URLs with per-task options such as out=. BitTorrent IPv6 DHT — Added IPv6 DHT support and related configuration. File category URL patterns — File category rules can match URL patterns with validation and localized hints. Task status tags — Added clearer waiting and sharing states for task cards. Download event bridge — Added an aria2 WebSocket event bridge for faster download notifications. Improvements Improved task list transitions and preserved task state during tab switches. Kept RPC origin access enabled for local integrations. Restored AppImage stripping in release builds after beta validation. Added localized preference guidance across supported languages. Download: Motrix Next 64-bit | ARM64 | macOS ~20.0 MB (Open Source) Links: Website | macOS / Linux | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • Conversation Starter
      sumytbe earned a badge
      Conversation Starter
    • One Year In
      B4dM1k3 earned a badge
      One Year In
    • One Year In
      DarkWun earned a badge
      One Year In
    • Dedicated
      Almohandis earned a badge
      Dedicated
    • Dedicated
      JuvenileDelinquent earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      511
    2. 2
      +Edouard
      181
    3. 3
      PsYcHoKiLLa
      86
    4. 4
      Michael Scrip
      78
    5. 5
      Steven P.
      75
  • Tell a friend

    Love Neowin? Tell a friend!