---
title: "Installing boot9strap (safecerthax)"
---

{% include toc title="條目內容" %}

{% capture technical_info %}
<summary><em>Technical Details (optional)</em></summary>
For technical details on the exploit that you will be using on this page, see [here](https://github.com/MrNbaYoh/safecerthax).

{% endcapture %}
<details>{{ technical_info | markdownify }}</details>
{: .notice--info}

### 相容性資訊

safecerthax is compatible with all Old 3DS and Old 2DS devices in all regions on system versions 1.0.0 through 11.14.0.

This exploit will not work on the New 3DS, New 3DS XL, or New 2DS XL. Please ensure that the device you are modding is an Old 3DS, Old 3DS XL, or Old 2DS before continuing.
{: .notice--info}

### 必備項目

* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS .zip file)

### 操作說明

#### Section I - Hardware Button Check

{% include_relative include/safemodecheck.txt %}

If the camera did NOT appear, you cannot follow this method. If this is the case, stay on your current firmware and ask [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for help.
{: .notice--warning}

#### 第二節 — 準備工作

In this section, you will copy the files needed to trigger the safecerthax exploit.

1. 將 SD 卡插入至電腦中
1. 解壓 Luma3DS `.zip` 內的 `boot.firm` 及 `boot.3dsx` 到 SD 卡的根目錄底下
  + 「SD 卡的根目錄」指的是你的 SD 卡含有 Nintendo 3DS 資料夾的目錄，而非該資料夾內部
1. 在 SD 卡的根目錄底下建立一個新的資料夾 `boot9strap`
1. 解壓 boot9strap `.zip` 的 `boot9strap.firm` 及 `boot9strap.firm.sha` 檔案至 SD 卡的 `/boot9strap/` 資料夾中
1. 將 SafeB9SInstaller `.zip` 中的 `SafeB9SInstaller.bin` 複製到 SD 卡的根目錄
1. 將 SD 卡插回主機中
1. 啟動您的主機

#### Section III - safecerthax proxy

In this section, you will change your Internet connection settings to use a proxy network designed to exploit the System Update feature of your device.

{% include_relative include/addproxy.txt %}
1. 關閉您的主機

#### Section IV - safecerthax

In this section, you will enter Safe Mode (a feature available on all 3DS family devices) where safecerthax will be triggered, which will launch you into the boot9strap (custom firmware) installer.

1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your device
  + Keep holding the buttons until the device boots into Safe Mode (a "system update" menu)
1. Press "OK" to accept the update
  + There is no update. This is part of the exploit
1. Press "I accept" to accept the terms and conditions
1. The update will eventually fail, with the error code `003-1099`. This is intended behaviour
1. Press "OK" to close the error message
1. 如果一切成功的話，您將自動進入 SafeB9SInstaller
  + If the device freezes or crashes, force power off the device, then retry this section

#### 第五節 — 安裝 boot9strap

{% include_relative include/install-boot9strap-safeb9sinstaller.txt %}
{%- include_relative include/configure-luma3ds.txt %}

{% include_relative include/luma3ds-installed-note.txt %}

#### Section VI - Restoring default proxy

{% include_relative include/rmproxy.txt %}

___

### 繼續至[完成安裝](finalizing-setup)
{: .notice--primary}