DFU or Device Firmware Upgrade mode allows all devices to be restored from any state.
- 1 DFU Mode
- 2 DFU mode on Apple TV (2G)
- 3 Enter True Hardware DFU Mode Automatically
- 4 DFU Mode Output to the computer
- 5 Revisions
Entering DFU Mode (Official Instructions)
- Plug your device into your computer.
- Turn off the device.
- Hold the Power button for 3 seconds
- Hold the Home button without releasing the Power button for 10 seconds
- Release the Power Button but keep holding the Home button
- Keep holding the Home button until you are alerted by iTunes saying that it has detected a device in Recovery Mode
Make sure the device screen is blank and no logos are present
Exiting DFU Mode
Hold Home and Power Button till the Apple Logo appears
DFU mode on Apple TV (2G)
Entering DFU Mode
- Plug the device into your computer using a microUSB cable.
- Force the device to reboot by holding down the "Menu" and "Down" buttons simultaneously for 6-7 seconds.
- Press "Menu" and "Play" simultaneously right after reboot, until a message pops up in iTunes, saying that it has detected an Apple TV in recovery mode.
Exiting DFU Mode
Enter True Hardware DFU Mode Automatically
The EnterDFU function in the MobileDevice Library does not enter the true DFU Mode in the hardware. It's possible to enter the true DFU Mode without doing it manually, but it cannot be exited unless a restore is performed, as it creates a DFU Loop. This doesn't work with S5L8900 devices.
- Make a copy of a fresh IPSW file.
- Open the IPSW as a zip folder and browse to /firmware/all_Flash/all_flash.xxxxx.production/
- Extract LLB.*****.RELEASE.img3 and open it in a hex editor.
- Change some random bit or bits, it doesn't matter which or what you write.
- Add the edited file back to the zip, rename zip to ipsw and restore it to your device using iTunes.
- The restore will error out and your device will be in DFU Mode.
If the previous method does not work for you, try this one.
- Do steps 1 and 2 from above.
- Delete LLB.*****.RELEASE.img3.
- Copy applelogo.********.img3 to temporary directory.
- Rename the copy of applelogo.********.img3 to LLB.*****.RELEASE.img3. (If you forget the name of the LLB file, you can find it again in the file named manifest.)
- Copy the renamed applelogo file back to the all_flash.xxxxx.production directory.
- Rename the zip.
- Restore the file using iTunes. (If every thing goes well, you should receive an error 31 from iTunes.)
DFU Mode Output to the computer
iProduct: "Apple Mobile Device (DFU Mode)"
iSerialNumber: "CPID:XXXX CPRV:15 CPFM:03 SCEP:03 BDID:00 ECID:XXXXXXXXXXXXXXXX SRTG:[iBoot-XXX.X.X]"