Alternate Push Cert method by [cmdshft]

August 29, 2011

Alternate Push Cert method

IMPORTANT UPDATE: Since I have taken the repository offline, the steps outlined below no long work when trying to access the nimble and inject binaries from Cydia. I have provided a zip file download (with instructions on how to install the binaries) before the struck out text.

This post is for people who can’t get a push certificate via Push Doctor (the instructions are in an earlier post but hard to find).

You will need another jailbroken iOS device that can activate via iTunes for this to work. iPod touch and iPad will do fine (otherwise you need an iPhone that can legitimately be activated). For the sake of this guide, since I am personally able to activate legitimately, I will be using one device to demonstrate.

First, disable any passcode locks on both devices (as well as any SIM pins if applicable). Without this you will have to restore the secondary device.

Install OpenSSH on both your hacktivated iPhone and the second iOS device (and change your password, google the instructions for that, this way you protect yourself).

Download the zip file here.

~~In Cydia, add http://cmdshft.ipwn.me/apt/ as a new repository on both devices and let it refresh.~~

When that completes, install “nimble” on the device that is activated via iTunes, and install “inject” on the hacktivated device.

Open up a terminal (Terminal.app or PuTTY), log into the device that can activate with iTunes over SSH and run:

su [root password required]
cd /private/var/Keychains
./nimble

This will generate 4 .bin files in the Keychains directory. These are your certs, store them in a safe and secure location using an SFTP capable program (FileZilla, Transmit, Cyberduck, etc).

Using your SFTP program, login to the hacktivated iPhone, put those .bin files in /private/var/Keychains as in the screenshot above, open an SSH connection to this device and run:

su [root password required]
cd /private/var/Keychains
./inject

Shut down the hacktivated iPhone.

su [root password required]
rm -rf /var/root/Library/Lockdown
killall -TERM lockdownd SpringBoard

A connect to iTunes image/emergency call screen will show up, simply reconnect this device to iTunes and it will reactivate and can be used right away.

You can now turn on the hacktivated iPhone and push should work just fine.

You can use this method to backup your push certs (they are unique), which you should do anyway, this way any time you have to restore and rejailbreak you don’t have to rely on Push Doctor in case there are no certs on the server.

Comments

Kira said on November 10, 2011 at 10:13 am:

please help me~~~~~THX
Pingback: Fix push notification problem on my Iphone 2G
grey said on December 3, 2011 at 1:11 pm:

will this work with older os devices ?(ipod touch 2nd generation runing 2.3.2 i think)
Oliden said on December 3, 2011 at 9:17 pm:

I did it and work just fine, but when i restar my iphone it leave to work again.! why.?
sebgo said on December 7, 2011 at 10:50 pm:

I found this topic pretty useful! I haven’t done it yet (still updating cydia stuff) but I hope this will work.

Thank you!
RickGTX said on December 11, 2011 at 3:02 pm:

Cool, now my 2G can get push notifications. I harvested the certificates from my iPod Touch. However, I re-nimbled IPT to check the certs — they are binary the same as before. I have reset the iPod Touch and got connect to iTunes image a couple of times. Tried different iTunes.

Probably have to restore from scratch. :-(
bil said on December 11, 2011 at 5:40 pm:

any more certs? ….thx
ace said on December 20, 2011 at 10:21 am:

THANKSSSSSS!!!!! =)
lovy said on December 21, 2011 at 9:56 am:

Hey if anyone requires push certificate then email me, i send you procedure to install those certificate and get push certificate working… Charges only 1$…….My email address is lovylove143 at gmail dot com

Thank You
sebgo said on December 22, 2011 at 12:21 am:

It worked great!

You mentioned “Push Doctor” has issues working on firmwares with preserved basebands. Does this method also have those issues? If it does, do you know if there’s a way to fix that?

Thank you, so much! I really appreciate this method.
ramisa3d said on December 24, 2011 at 9:55 pm:

i reiterate the same questions
the hacktivated iphone and activated idevice at the end of this method have the same certificates?
plz reply at this questions

regards
Shafi said on January 3, 2012 at 6:44 pm:

Thanks and this method has brought the push notifications back alive on my hactivated iPhone 4 running on iOS 5.01… Brilliant post.
fernando romero said on January 3, 2012 at 6:56 pm:

need push doctor help me please!!!!!!!!!!!
Murilo said on January 4, 2012 at 7:26 pm:

If I take the certs from another device, will both work with push simultaniously?

Thanks!

[WORDPRESS HASHCASH] The poster sent us ’0 which is not a hashcash value.
Jeff said on January 6, 2012 at 6:14 am:

Still working. 3gs, 5.0.1, 6.15.00 bb. I used PuTTy and FileZilla.
Jake said on January 8, 2012 at 11:13 am:

iOS 5.0.1
Trying desperately to restore my iPhone push certs by doing the following:
1) Copied the certs into /private/var/Keychains
2) Opened up Mobile terminal and
i) su [root password required]
ii) cd /private/var/Keychains
iii) ./inject

Worked on iOS 5, its just not working on iOS 5.0.1, what am I doing wrong, please help!
3gs 501 said on January 20, 2012 at 1:41 pm:

worked perfect :)

The ideea in this tut is that you “steal” the working push certs from the oficialy activated iphone.
The official iphone will get new ones anyway after that anyway (and every time a restore is done).

Keeping the hactivated turned off while the official gets new certs is important coz you dont want a conflict between the push certs or to push something to the other phone.
Exelent guide.
ali said on January 27, 2012 at 3:41 am:

Thank you mine worked i use ipod and get it certs and inject it to the iphone it work like charm u give my iphone life thank you guyz
Ali said on February 6, 2012 at 4:16 am:

with is method you can activate VIBER in 2G iPhone!!!

Thanks.

–Ali
Nguyễn Thành said on February 12, 2012 at 4:29 am:

Thanks man! My 3GS works great like never before!!!
davian said on February 12, 2012 at 6:21 am:

Yesss. it works, i did it with ipad 2, sometimes dont work, i have ipusher in my iphone 4 but little times….
Mr.Mark said on February 12, 2012 at 12:30 pm:

Wow! This worked like a charm. So glad I can get Push again… Was missing this receiving WhatsApp mssgs. Thanks so much1
Murdoch said on February 13, 2012 at 9:10 pm:

At the last step, reactivated the iphone via itune, my iphone just skip the emergency call(just a flash of it) and then push still not working. My iso is a costumed called 4.4.1. Help Please
amit said on February 13, 2012 at 10:21 pm:

thanks for the lovely post …but am getting one problem at the end when i gave command to killall on itune activated iphone .it just respring and work normel no emergency screen appers..what should i do now
Cynthia said on February 28, 2012 at 6:04 am:

After the lockdown my phone was stuck on the apple icon, the itunes image/emergency call screen never showed. what did I do wrong?
PS: I have an untethered jailbroken and unlocked Iphone 3GS 5.0.1.
Carlos said on March 25, 2012 at 9:43 pm:

After all the time I’ve been trying to get my push to work I’m considering naming my unborn child after you… :) Thanks a whole lot man! You rock!
sam said on April 8, 2012 at 2:05 am:

how do i get to terminal? im on windows 7 iphone 4 5.1
kelly said on April 9, 2012 at 5:52 am:

Thanks for this tutorial! My push is working now, i get the push certs on my girlfriend’s iPad :) Thank you!
Vorathep said on April 28, 2012 at 4:53 am:

I am getting errors! i know its because no certs but i have been tryin it all day long. So any tips!!?????
Gustavo Saliola said on May 1, 2012 at 12:14 am:

You are a God Damn Genius. Tried SAM, tried other Push Fixes, tried Voodoo, Black Magic, praying Steve, and you did it. I forgot, did it with my old iPhone 3G (Movistar Locked in Argentina) to my iPhone 4 (Former ATT, then SAM Unlocked to Movistar Argentina)

Now working Push Notif. + Facetime + iMessage (Auto tested from my Macbook to my iPhone 4)

Thank you cmdshft.

Gustavo Saliola / BS. AS. / Argentina
nama mana said on May 22, 2012 at 8:27 pm:

for mobile terminal**** add http://ihacksrepo.com” source and download mobiletreminal (NEW)
Fikile said on May 23, 2012 at 10:37 am:

Thank you so much!!! Finally got the push to work, after trying EVERYTHING!
Iphone 4 (unlocked via SAM method) and Ipad 3G.
Michael said on May 26, 2012 at 8:55 pm:

Worked like a charm! Thanks soo much! Bought an original 2G for my mum and now she has push notifications. Used an unlocked 3G as the source. It took about 5 minutes for the recipient phone to register and activate for push and then there were no problems!

cmdsft you are a legend!

Michael
Kimberly said on June 4, 2012 at 1:15 am:

Thanks so much! I’ve been looking so long for this… And it finally works! Try this out because it really works
George said on June 17, 2012 at 7:26 pm:

it worked!!!! omg im so happy,
i used an iPod touch 4th gen with iOS 5.1.1 and copied the certs to my iPhone 3G with iOS 4.2.1 (btw, forgot to disable passlock on my iPhone but nothing happened)
THANK YOU SO MUCH!
Rajan said on July 3, 2012 at 4:04 am:

Plz help me, I want Push fix but I don’t have an activated iPhone. Can anyone send me the certificates? Reply me plz. my email address is rajandmk at me dot com
Edward said on July 7, 2012 at 6:53 am:

I spent hours looking for something like this! It’s a great alternative ever since apple patched SAM. This activated Push Notifications, iMessage & FaceTime! Thank you.
kilyman said on July 21, 2012 at 11:40 pm:

Wow, i copied my certs from an old ipod touch to an unlocked iphone works perfect, thx!
nizar said on July 26, 2012 at 5:39 am:

Yes it’s runing perfectely !!!

Good Job Guys !!!!!
xita said on August 9, 2012 at 8:08 am:

It really works for my Iphone Locked 3G 4.2.1. Thank you so much. I tried a lot with the other ways but they were useless until I know this introduction.

And to answer how to connect ssh in terminal. Before you write “su”, you should write: ssh – D 1080 root@ip-address. (wifi ip)

Thank again! It’s so awesome
Rutênio Costa said on August 13, 2012 at 7:40 am:

I have an iPhone 4 and its locked to AT&T but I have the SIM card to activate via iTunes. But I use Sprint as carrier. So there is anyway to activate push with only 1 iPhone? I tried 2 times and failed
Jack said on August 22, 2012 at 8:12 am:

Ok if I jailbreak an already legit activated iphone will the push certs be presereved.
Vincenzo said on October 2, 2012 at 8:51 am:

WORKS for me!! Thanks a looooooot!!! Certs copied from a iphone 4 iOS 6 :)
AB_m7mad said on October 3, 2012 at 1:22 am:

This is gr8 guys big thnx for all of u !! It took my a little while to figure out how to use the terminal thing but i did it thnxx again :))))))
DarkBlaster said on October 20, 2012 at 7:50 am:

can this work with iPad 2 iOS 5.1.1 and iPhone 3GS ios6
DarkBlaster said on October 20, 2012 at 9:32 pm:

Thanks so much. It also works on Hactivated 3GS ios 6
Arban said on October 21, 2012 at 3:42 am:

Quite a lengthy process, but it was really really really well worth it. I’ve been spending weeks on trying to fix my push notifications.Thanks.

So basically you’re copying valid certificates from a working iDevice to one that doesn’t work. Didn’t think that would work on two separate devices. O_o
Pingback: Anonymous
NKFR said on November 5, 2012 at 11:40 am:

Fixed two iphones (with one ipod touch) easily with that technic. Thanks!
Ken1 said on November 12, 2012 at 12:29 pm:

This method works like a charm.
My utmost respect to the contributors of this flawless tutorial.