How to Unlock iPhone 3GS by Installing iPad Baseband 6.15.00 Using Sn0wbreeze (Not Redsn0w) | iPhoneJailbreak.me

How to Unlock iPhone 3GS by Installing iPad Baseband 6.15.00 Using Sn0wbreeze (Not Redsn0w)

November 9th, 2011 201 Comments

Firstly, you are reading this because you know that baseband 5.14.02, 5.15.04, 5.16.02 and 5.16.05 can’t be unlocked. Your only possible option is to update it to iPad baseband 6.15.00.

Typically, you would use redsn0w to install iPad baseband on your iPhone. There are risks associated with the iPad baseband so be sure to read this first.

UPDATE #2: Forget about installing iPad baseband or hacking your iPhone, make it officially unlocked here.

UPDATE #1: Read this important information if you have the iPhone 3GS 8GB.

About two weeks ago, I published a tutorial on how to unlock your iPhone 3GS on iOS 5 baseband 5.16.05. This tutorial though will give you the same result but the steps have been reduced and eliminate any simple error. Do not use this guide if you have a baseband that can be unlocked with ultrasn0w e.g. 5.13.04 or below.

With the release of sn0wbreeze 2.8b10, it makes the whole process easier to jailbreak and unlock your iPhone 3GS.

The custom firmware that you’re about to download below was created using sn0wbreeze and the iPad baseband is already included in the package. Ultrasn0w and MobileSubstrate (software to unlock iPhone) have been included as well.

Warning: Proceed at your own risks!

1. Download the latest iTunes 10.5 from Apple’s website and install it. Remove your SIM card.

2. Download custom iOS 5.0 (already hacktivated, jailbroken):

3. Download iBooty (Windows only) or the latest redsn0w (Windows or Mac). You need one of these to pwn-DFU your device to allow it to accept custom firmware.

4. Launch iBooty and follow on-screen instructions on how to pwn-DFU your iPhone. If you use redsn0w, go to Extras -> Pwned-DFU and follow on-screen instructions.

5. Once you have pwned DFU your iPhone, launch iTunes. Click Shift+Restore and point it to the firmware you just downloaded in Step 2.

6. iTunes will begin restoring so just wait until the process is finished. If you get error 3194 during restore, read here.

7. When restore is complete, you will find that you now have iOS 5.0 and baseband 6.15.00.

8. Disable 3G and Cell Data by going to Settings -> General ->Network. Insert your SIM card and your iPhone should connect to your network.

Post unlocking – iMessage not working? Read this.

On a final note, if you have a new bootrom, the jailbreak is currently tethered so you will need to use redsn0w -> Extras -> Just Boot to boot up your iPhone.

Related Posts Plugin for WordPress, Blogger...

Richard Ker

An IT specialist by day and an iPhone hardware repair specialist by night. Enjoys iPhone jailbreaking, unlocking and hardware hacks.

Website - More Posts



 

Sign up Free Email Newsletter

Stay Updates with this Blog. Get Free email newsletter updates, Enter your Email here:

Don't forget to confirm your email subcription

   

201 Comments to “How to Unlock iPhone 3GS by Installing iPad Baseband 6.15.00 Using Sn0wbreeze (Not Redsn0w)”

  1. Tee says:

    I've downloaded the ipad baseband from the links given above, but everytime I try to update the phone's firmware in iTunes it says The firmware file is not compatible. What should I do?

  2. Jordan says:

    install goes fine for me….no errors but freezes at apple loading screen. tried 3 times.. :(

  3. Jordan says:

    LOL! nevermind….i got it.. forgot i had to use redsnow to boot…(because im an idiot)…thanks for the guide!

  4. [...] I made a new and shorter tutorial that does everything [...]

  5. paulie says:

    Hello, I tried to follow the steps but I cant seem to figure out step 5.
    (Click Shift+Restore and point it to the firmware you just downloaded in Step 2.)
    Nothing happens when I press shift. I can only do the normal restore.
    Im obviously doing something wrond. Can you help?
    Thanks, much appreciated.

    • iphonerepair says:

      Windows: hold shift key, click restore
      Mac: hold option key, click restore

      • paulie says:

        Thank you very much. I was able to follow all the steps. Everything went well, no errors. I now have baseband 6.15.00 (Iphone 3gs, old bootrom, iOS 5.0). Oddly, I was able to restore through Itunes (got my photos back on). I get the snowflake instead of the apple when i turn my phone on. My phone seems to recognize my sim card as it asks me to unlock it when I insert it, but I don't get any service. I tried turning Cell data and 3G on and off. I checked my settings and under 'carrier', it says: Not Available. Do you know what is going on here? Is there something I need to do to get my phone to find my new carrier? Thanks again for your time and patience.

  6. Chuy says:

    i dont understand what you have to do to download everything? I click the link but there are multiple download buttons.

  7. unsaved says:

    Hi I have followed it all and keep getting a message on itunes that states "the iphone cannot be restored at this time because the iphone software update server could not be contacted or is temporarily unavailable"
    Any ideas?

  8. Narender Deo says:

    Every time i try it, it says the iphone "iphone" cannot be restored at this time because the iphone software update server could not be contacted or is temporarily unavilable! HELP!

  9. Russ says:

    Why does 3g and cell data need to be turned off? Are unlocked phones via this method not able to use cellular data? or 3g?

  10. Russ says:

    I get an error when attempting to restore to the custom IPSW file – iTunes says "The iPhone "iPhone" could not be restored. This device isn't eligible for the requested build. Any thoughts?

  11. Michael Renzetti says:

    It all worked fine but when i inserted my card it did not recognised it. What should i do next?

  12. Chuy says:

    ok, got the ipad firm ware on, but when i put in my sim card for tmobile it still says no service. i have tried turning the airplane mode off and on to no avail. what am i doing wrong?

  13. Chuy says:

    i see you say, install ultrasnOw, but how? wasn't that installed with the baseband?

  14. n0str9 says:

    I've tried this with a 3gs (new bootrom) and I keep getting error 3194. I've commented out all the 7x.xx.xx's in my host file, and tried the restore using multiple proxies… no luck. Suggestions?

  15. yo01 says:

    I tried to hacktivated iPhone 3GS that has IOS x5, first I did "Pwned DFU" and then I restore the iPhone with "iPhone 3GS with old bootrom + baseband 6.15.00 included + ultrasn0w installed". When it finished, iTunes asked me to restore the iPhone again. I did it and tried to activate the iPhone but I couldn't, it said that apple service was temporarily unavailable.
    I don't know what else I can do. I tried this steps more than five times.

  16. Chuy says:

    I got everything working, even installed tmobile sim chip and made a call. I then set the phone down for a couple of hours, when i got back to it, it would not turn on. tried reboot with redsnow bit it just hangs at "waiting for reboot"
    how can i repair this?

  17. Ryan says:

    When you say GPS won't work, does this mean Google maps won't function? This could be a problem.

  18. Ryan says:

    Also, I have a 3gs on 05.16.05 running 5.0… I wouldnt mind going back to 4.x in order to make sure GPS works. Is there a way to revert back to older versions or am I going to have to risk it?

  19. Meg says:

    I try downloading the new bootrom file, but when I try downloading the file is called iMesh. Where do I actually download it?

  20. John says:

    after finishing step 7 (restoring from itunes) using what was downloaded in step 2…itunes give a message saying your phone is in recovery mode. I tried using redsnow to kick it out but no success. My iphone is actually completely black i dont see anything on the screen. Any ideas?

  21. Sti says:

    I have iPhone 3GS iOs 5 and firmware 5.16.05 and when finish restore iTunes have the error 3194 and read the link you have posted and put the new IP and server. It didn't work. Then i replased the old apple server with the new one. Tried again and it still shows me the 3194 error. What should i do better? And where is the problem? What am i missing ?

  22. avalanche says:

    I have iPhone 3GS Ios 5, bb 5.16.05 and tried to follow the instructions in this post. I have restored it from custom old bootrom while my phone is on new bootrom(I know – I should have been careful). It doesn't respond now. I have pwned DFU again and tried to restore using custom new bootrom — now getting 3194 error — I have followed the 3194 fix instructions and then it is giving 3014 error. Do I have the same situation as poster Sti? Do I need to wait for ultrasn0w for 5.0.1? please help

    • iphonerepair says:

      if you plan to unlock it then wait for ultrasn0w for 5.0.1, otherwise use custom 4.1 which gives you untethered jailbreak

      • avalanche says:

        Thank you for taking the time to respond. Can I use custom 4.1 now and unlock it at a later time after 5.0.1 is released? That way I get the peace of mind that my phone is not a brick. Where can I download the 4.1 custom from?

          • avalanche says:

            I am getting 1601/1602 errors now when trying to restore custom ios 4.1
            I have tried different USB ports but still the same error. What am I doing wrong?

          • iphonerepair says:

            did you pawn DFU it?

          • avalanche says:

            Yes, here are steps I followed:

            Used resdn0w 0.9.9b8(on Win XP) to pwn DFU mode
            Then used iTunes and shift restore and selected the ios 4.1 custom file
            Got "extracting software" message at the top of the iTunes window just above status bar
            then got "Preparing iPhone for restore…" message
            Approximately 5 minutes later got "The iPhone "iPhone" could not be restored. An unknown error occurred(1601) " error message
            Throughout this process, iPhone screen is black

            I have tried this with different USB ports, after rebooting — still same error

            What should I do now — is there a way to reflash to 06.15 and start all over? any help is greatly appreciated

          • Chuy says:

            I finally got my phone to work and unlocked. took it to someone and he charged me $40. He told me he basically had to downgrade the version to 4.1, loaded Cydia and then did the unlock. hop that helps.

          • Rankit says:

            Hi Chuy, i have same model and version can you provide me the information i live in New Jersey, and i would like to do the same.appareciate if you can provide me the details to whom did you gave your phone and how did it started working fine. Thanks

  23. avalanche says:

    Tried logic board removal option – it went back to 3194 error and when that is resolved got 3014 error. Is there any other option to bring life back into my iphone 3GS?

  24. Babs says:

    I have iPhone 3GS Ios 5 bb 05.16.05 and followed your post. When I try to download your the new bootrom file as well as the old bootrm I download iMeshV11.exe… Now I'm stuck after pwned DFU using redsn0w (when trying to download iBooty also comes iMesh) please help! thanks

  25. GS01 says:

    I got a Iphone 3GS (mc131b) with iOS5.
    The baseband is 05.16.05

    I want to basically unlock the phone.
    Does this guide still work?

    Also you mentioned that if it's a new bootrom the jailbreak is tethered.
    So I will have to connect iphone to pc every time I bootup.

    If i'm on a old bootrom, does that mean the jailbreak is untethered?

  26. Ryan says:

    Everything went smooth, phone started back up but I can't get it to pick up the T-Mobile signal. Its says No Service. I can't connect to Wi-Fi to download Ultrasnow either, it has bars like I am connected to Wifi, but it says not connected… ANy ideas?

  27. Timer says:

    Hi, will this guide apply to IOS 5.0.1?

  28. gaoyutailang says:

    hello, thank you so much for posting the hepful guide even though I haven't successfully unlock my 3gs! :) I don't have my shsh for any previous ios verison saved before since I just got it from my friend, right now it is running ios 5. I tried every step and also tried the "I7x.xx.xx's" in my host file as the guide stated, but still got 3194 error message. what should I do? help please thank you!

  29. jhunmanzano says:

    this will also work on new IOS 5.0.1 ? Thanks.

  30. Joseph says:

    I have tried many time to dowloand the new bootrom file but something goes wrong and each time the download was interrumped, any ideas? where else can I get the new bootroom file?
    thanks

  31. bLajai says:

    Next time please put a warning if it does not works!
    Since iOS 5 sigining is stopped!

  32. Dan says:

    After installing the software the phone hangs on the apple logo with the bar along the bottom. I have tried booting it at this stage but I keep returning to the same place. What should I do?

  33. Dan says:

    After installing the software the phone hangs on the apple logo with the bar along the bottom. I have attempted using the tethered boot using the latest (and older) versions of redsn0w on a mac, however, I get a message saying unrecognised build. When I try it on a PC I get the message "No identifying data fetched'. Help!

  34. Balaji says:

    Now i get error as "The iPhone cannot be restored at this time because the iPhone software update server could not be contacted or is temporarily unavailable" while trying to restore iOS 5 with Apple iTunes after Resoling and updating the Hosts File as said in the Guided link

  35. e.o says:

    what does ''apple stopped signing ios 5 mean?
    will i still be able to unlock my 3gs iphone on ios 5 firmware 05.16.05 with this tutorial or will it not work?

    thanks in advance for you answer

    • iphonerepair says:

      Apple will only allow you to restore to the latest iOS, when you're trying to downgrade iTunes will give you error 3194

      • e.o says:

        so what can i do now?
        this means i cant unlock the iphone on ios 5 and i cant unlock it on ios 5.1 either, right?
        or is there something i can do against error 3194 to still unlock it?

        • iphonerepair says:

          downgrade to 4.1, install iPad baseband, jailbreak and then unlock with ultrasn0w

          • Sandy says:

            I just used the custom 5.0 ipsw you provided in this article to upgrade my 3GS to 5.0. I did verify that I had iOS 5.0 and the baseband had been switched to the ipad 6.15.00 version. However it won't recognize my sim card, so it seems that the unlock was unsuccessful.

            I have since downloaded the stock 4.1 ipsw, put the device into DFU mode and tried to restore to downgrade to 4.1, but I get an error on that one. Can you offer any more details about how I should be downgrading to 4.1?

          • iphonerepair says:

            you must use iTunes 10.4, DFU your device

    • joy2dworld says:

      it will work i tried! just reinstall ultrasn0w from cydia after unlocking.

  36. e.o says:

    but didnt u say downgrading will cause error 3194?
    or is apple still signing 4.1?
    sorry am confused now …

    • iphonerepair says:

      if you don't have the shsh saved for a particular iOS version, you will get error 3194 when downgrading

      Apple is signing 4.1 at the moment which allows you to downgrade without getting any error

  37. joy2dworld says:

    thanks!! had problem with no service at first after doing the above steps then tried reinstalling ultrasnow thru cydia and reboot!!

  38. 123 says:

    GUYS STOP FOLOWING THIS POST AND INSTRUCTIONS INSIDE OTHERWISE YOU"LL BRICK UR IPHONE 85% chance

  39. Brian says:

    All worked perfectly. I now have unlocked my iPhone 3GS (old bootrom), its running on iOS 5.0 and firmware 06.15.00, and it’s working with my new network’s SIM. I had the same problem as @paulie above, so I had to install Ultrasn0w via Cydia in order to get the phone to connect to the network, as an extra step after @iphonerepair’s step 8 above. I had Wifi working on my phone the whole time; surely that helped. Post unlock, it does indeed appear that the GPS is now broken (probably irredeemably). Thanks so much to @iphonerepair and everyone at Dev Team, Cydia, etc.

    One final question, should I / can I update to 5.0.1 now?

  40. Johnny says:

    I have done all steps and after all my Iphone 3GS fall back in DFU MODE! In ITunes came the window that the device was finished! After few seconds Itunes opened a new window that a device ist connected but without firmware … I tried to reboot with the home + power button but the phone show no reaction. Now the phone is still in DFU MODE … what can I do now.

  41. matthew says:

    so i did this on an iphone that was no longer jailbroken………did this jailbreak it and unlock it in one step??? I don't have a sim card to test it on……let me know.

  42. demon333 says:

    I got the custom ispw installed….but I can't follow step 8 because the phone is asking for a SIM card. how can i bypass this to check the IOS and baseband now? I'm wanting to give this to someone who uses verizon…….I have a 'dead' ATT sim; can i use that to bypass the phone asking for a SIM? what should I do?

  43. Jason says:

    works great..wasn't expecting it to be so easy with one simple link

    thankyou so much

  44. Bill says:

    I really appreciate the solution offered here. Everything you provided works great. I now have an unlocked iPhone 3GS, running 06.15.00, and the iMessenger also works (using your suggested solution). My only problem is that the Chinese keyboard no longer works. Any time I try to use it, it crash the application. Is there a solution for this? I need to use the traditional Chinese keyboard both handwriting as well as pingyin. It is inconvenient not to have it. Any suggestion will be much appreciated.

  45. AgileV says:

    I just did this and it worked perfectly. Did apple start signing for iOS 5.0 again? I did it on an iPhone 3GS old bootrom phone.

  46. dee says:

    3gs 5.16.05 changed to 6.15 using redsn0w. I used recovery mode instead of DFU. Used ultrasnow but couldn't get tmo signal, and had to change the telephony file in the iphone and finally got it working. GPS still works.

  47. Ania says:

    On the first step when I try to run PWNED DFU it says "unexpected error" when I try to hold down the poer button for 3 seconds! help!

  48. Ash says:

    Followed all the instructions and once it got through the restore my phone will no longer turn on no matter what I do

  49. Charles says:

    Please help!!! I jailbroke my iphone 3gs with redsn0w and changed the baseband to 06.15.00 to unlock. The phone was working fine then bricked. I tried restoring and now it says "no sim detected." Has this happen to anyone? Anyone no how to fix it?

    • bug's says:

      this has happened to me, first i followed all these step's, then found out my phone was second hand and it had already been BB changed, which is prob why this didn't work on my phone, i have now had to restore via itunes and now it just keeps saying NO sim/service.
      if anyone knows how to get past this, it would be great.

  50. gu99 says:

    Now that iOS 5.0.1 is released, will the above solutionstill work for users who have iphone 3gs + iOs 5.0 (5.16.05 baseband)? I mean when you do normal restore from iTunes (i.e not in DFU mode) then it says – "It will automatically restor and upgrade to latest iOS…."), thus in DFU mode, doin shift+restore and pointing to downloaded firmware will still work?

  51. PJB says:

    The installation all worked fine online i still cant use any sim-card still no service i tried 3 different active cards. How come this is still possible?

  52. Derek says:

    Hi .i manage to downgrade from 5.0 to 4.1 on 3gs but cannot get the firmware down from 05.16.05 to 05.13.04 i did the downgrade using cydia and saed shsh, help please

  53. fus traded says:

    did it take anyone else hours to dl the hacktivated ipsw ?

  54. bLurr says:

    this custom firmware is including afc2add ? since I can't on my wifi so need to install manually the ultrasnow.

  55. CrossCudi says:

    sooooooo0o everything planned out perfect, T-Mobile was running. As soon as my phone went to sleep, DISASTER STRIKES ! phones doesnt boot up no matter how i try. opened redsn0w hit the just boot option and i get a white screen. tried to pwnd dfu and reinstall from itunes and error, tried directly from itunes and another error message,..This really doesnt look good at all,.. ! =[

  56. jasonchenz says:

    F*** APPLE PRODUCTS

  57. pho3nix says:

    you all dont get it……they want you to use ipad base band to fook your phone so you go buy another…..so apple gets more sales……..unlock all the 05 16 xx………..is a cake walk…..if you know how the code flows

  58. pho3nix says:

    i think im going to drop the whole that they dont want in publick

  59. pho3nix says:

    geo, nerd and the rest……..are all 3rd class coders…….

  60. Marlonvb says:

    is the new bootrom version still tethered? cause untethered jailbreak is already out for ios 5.0.1

  61. Roy says:

    Now that ultrasnow 1.2.5 is out and it's okay with 5.0.1, will this tutorial work fine?

  62. Deddy says:

    you are the best!!! Thank you!!! My iphone 3gs lock sim old boot finally work with Italian sim! :) :) :)
    Alllllllll perfect!
    In add I only installed ultrasnow at the end and then all worked perfect.
    Magic :)

  63. dioxen says:

    Can somebody upload on different filehosting??
    thank U

  64. max says:

    could I downgrade my iPhone 3GS new bootrom on iPad baseband? (not bricked) I want to downgrade to ios 4.2.1 because I really dislike the major battery problem which makes my battery die in a couple of hours. so is there way to downgrade my iOS version if I’m on 6.15.00?

  65. dioxen says:

    Can somebody upload on different filehosting??

  66. Brad says:

    Worked like a charm! Only issue was having to manually install ultrasn0w after restore. Easy to follow, most of the work was already done.

  67. jprb says:

    I have an iphone 3G, ios 5.0.1 and BB 05.16.05. How can i unlock it since the files you post above are for 3GS ?

  68. P.k says:

    I hav ios5.0.1 bb 05.16.05.jail broken.but no signal.what to do.ultra snow not working.

  69. Stupidspencer says:

    File Factory seems to suck… A LOT! Everytime I try to download the firmware files from the links in the tutorial, it says you need a premium *Paid* membership to download files over 500MB. When I try to download the custom 4.1 firmware from the link in one of the comments, it says "All free download slots on this server are in use" and you guessed it: they want me to upgrade to a premium membership for immediate download availability. Seems like they've gotcha locked in. And why are all the slots in use!!? I've been trying all day and now its 3am for cryin out loud! Whatev.

  70. MysteriX says:

    Hello. could you reupload it? i have to be a premium member to download the custom firmware because it is larger than 500 mb :(

  71. Bubber says:

    A plseaignly rational answer. Good to hear from you.

  72. Gryphon says:

    I'm considering trying this once I move to Europe; not before in case I screw it up and brick the phone. I'm on an AT&T 3GS with iOS 5.0.1 and baseband 05.16.05. I'm mostly curious as to why my baseband and others cannot be unlocked. Did the Dev Team and everyone just decide they didn't want to bother with trying to unlock them, or did Apple somehow make them unlockable?

  73. Claudia says:

    How about iOs 5.01? I'm on that, with baseband 05.16.05. Will it work?

  74. Cammis says:

    Hi, I can´t download the file from filefactory, I´m a premium user. Can somebody help? Regards Cammis

  75. Igor says:

    I can’t download the custom firmware’s ipsw file because filefactory requires a premium account to download it and I don’t have one… I can’t find a torrent to download one either… found one but it didn’t do the job :( please send me a working link to a download of such firmware, thanks a lot, cheers

    • iphonerepair says:

      trying to find a good file hosting service…

      • Igor says:

        nevermind I already overcame that problem somehow and now my 3Gs is unlocked and working properly, BUT I was trying to unlock my gf's 3Gs and found out it's a new one (July 2011) and it's useless to change it's bb to iPad's 06.15.00 (which worked for mine)…

        Do you know of a possible solution which would let me unlock her 8Gb 3Gs without the risk of bricking it?

        Sorry for the unrelated post but I coulnd't find an appropriate thread…

  76. Igor says:

    Please can you post a link to the download of the firmware on a site that doesn't require premium accounts to download??

  77. bub says:

    hi there, I keep getting this response from File Factory:

    "All free download slots on this server are currently in use."

    Are there any other download sources for the "iPhone 3GS with new bootrom + baseband 6.15.00 included + ultrasn0w installed" file?

    Thanks! :)

  78. Alvin says:

    Can you please upload the files to another service? It now says required to have premium membership to download.

  79. Fadil Shamir Khan says:

    Unable to download file iPhone 3GS with new bootrom + baseband 6.15.00 included + ultrasn0w installed located @ http://filefactory.com/file/cfeec22/n/sn0wbreeze_…

    PLEASE PROVIDE A NEW LINK!

    THANKS

  80. Sajid Ali says:

    Hi
    I have a 3gs 8gb with new bootrom, 5.0.1 and 5.16.05, locked to AT&T. A friend tried to load 6.15.0 and corrupted the bootrom, left the phone with no wifi, no imei, no bluetooth situation. I downgraded it to 4.1 with no BB but it is still no wifi situation
    Can you guide me how to unlock this phone?

  81. Mystique Rage says:

    So I've got a 3GS. That has already been jailbroken, has a custom 5.0.1 plus the 5.16.00 bb on it and for some reason its not validating the install when using itunes. The 1600 usb errors keeps. Popping up. Any suggestions? I know it isn't really a question about this tutorial but I'm at a loss here and could reaaallly use some help! Much appreciated.

  82. henry says:

    i have two questions …i have iphone 3gs 5.0.1 baseband 05.16.05 ..it is week 38 production 2009….Do I have to download old or new bootroom???? and my second question is…Do i have to downgrade to 4.2.1 ios first to unlock…it is jailbroken …i need to just unlock…can anyone tell me???

  83. chris says:

    Hey thanks for this guide, everythings been going great until I recieved the "cannot be restored at this time because of iphone software update server" do I HAVE to try at a different location? That really isn't an option for me. Can I just wait it out and the server will eventually start working? Thanks again

  84. Hatem says:

    i cant get the sources for ios 5 it request to create an account.. !! …. can u please provide a free source. !

Leave your comment here:

Categories