Dumping Firmware & Keys ​
Keys ​
Keys are required for decrypting most of the file formats used by the Nintendo Switch.
Keysets are stored as text files. These 2 filenames are automatically read:
prod.keys
- Contains common keys used by all Nintendo Switch devices.title.keys
- Contains game-specific keys.
Ryujinx will first look for keys in C:\Users\yourname\AppData\Roaming\Ryujinx\system
, Or \portable\system
on a portable install. To access this directory, go to File
> Open Ryujinx folder
, then click on system
. If Ryujinx doesn't find any keys in those folders, it will look in $HOME\.switch
.
To dump your prod.keys
and title.keys
please follow these steps.
- First off learn how to boot into RCM mode and inject payloads if you haven't already.
- Make sure you have an SD card with the latest release of Atmosphere inserted into your Nintendo Switch.
- Download the latest release of Picklock_RCM/Lockpick_RCM.
- Boot into RCM mode.
- Inject the
Picklock_RCM
/Lockpick_RCM.bin
that you have downloaded atStep 3.
using your preferred payload injector. We recommend TegraRCMGUI as it is easy to use and has a decent feature set. - Using the
Vol+/-
buttons to navigate and thePower
button to select, selectDump from SysNAND | Key generation: X
("X" depends on your Nintendo Switch's firmware version). - The dumping process may take a while depending on how many titles you have installed.
- After its completion, press any button to return to the main menu of Picklock_RCM/Lockpick_RCM.
- Navigate to and select
Power off
if you have an SD card reader. Or you could Navigate and selectReboot (RCM)
if you want to mount your SD card usingTegraRCMGUI > Tools > Memloader V3 > MMC - SD Card
. - You can find your keys in
sd:/switch/prod.keys
andsd:/switch/title.keys
respectively. - Copy these files and paste them in your Ryujinx
system
folder. And you're done!
Title keys ​
These are only used for games that are not dumped from cartridges but from games downloaded from the Nintendo eShop. These are also only used if the eShop dump does not have a ticket
. If the game does have a ticket, Ryujinx will read the key directly from that ticket.
Title keys are stored in the format rights_id = key
.
For example:
01000000000100000000000000000003 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
01000000000108000000000000000003 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
01000000000108000000000000000004 = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Prod keys ​
These are typically used to decrypt system files and encrypted game files. These keys get changed in about every major system update, so make sure to keep your keys up-to-date if you want to play newer games!
Firmware ​
Thanks to Candy for providing the guide details & images. Loosely based off of NH Switch Guide.
What you will need:
- The latest release of TegraExplorer (the
.bin
file)
Make sure your sysMMC is up to date. If your sysMMC is not up to date, update it through System Settings.
Boot your Switch into RCM.
Using a Payload Injector, such as TegraRcmGUI or fusee-interfacee-tk, inject the TegraExplorer.bin Payload (like you would with Hekate).
- Using the joystick and the A buttons, select
FirmwareDump.te
.
- Select
Dump sysmmc
.
- Wait about 1-2 minutes for the tool to dump your firmware.
When the tool finishes, press any button.
Select
Power off
.
Remove the SD card from your Switch, and insert it into your PC.
A folder containing your firmware should now exist at
/tegraexplorer/Firmware/<version-number>