Backr00m

backR00m Jailbreak for AppleTV 4 & 4k for tvOS 10.2.2 - > 11.1
Current Version: 1.2

Release date: July 22nd 2018
Current as of: July 22nd 2018

backr00m is a jailbreak for tvOS 10.2.2 -> 11.1 for AppleTV 4+. It is based on meridian and electra jailbreaks by PsychoTea and ElectraTeam respectively. It utilizes jailbreakd to avoid buggy KPPBypass bugs.

This application is Copyright © 2007-2018 nito llc. All Rights Reserved.

Changelog

1.2:

• reboot works cleanly,
• update bootstrap to include latest nitoTV / TweakInject / substitute etc.
• Should no longer need KPPless to set a nonce and boot in recovery
• added ability to set a nonce for 11.1 jailbreak. (double tap the play/pause button when (re)jailbreaking your device to set the nonce in 11.1.)

1.1:

• Some bootstrap and package bug fixes

1.0:

• Initial release

Install Instructions for AppleTV 4

Step 1: Download backr00m

Step 2: Plug your 4th generation AppleTV into your computer via a USB-C cable

Step 3: Make sure you have a developer account with apple, you can get one for free (your on your own to figure that out!)

Step 4: Download Cydia Impactor

Step 5: Drag the backr00m.ipa into Cydia Impactor

Step 6: Click start

You will almost definitely get some error related to plist files, i dont remember the exact error, this error is fine and expected behavior (it happened every time for me) check your AppleTV to see if its installed

Step 7: Run backr00m and hit the 'Jailbreak' button it should work on the first try! Hit the respring button when prompted to. Once two respring's have occurred nitoTV should launch automatically!

Future Restore Instructions

Preparation

You will need 11.3 blobs saved for your 4th generation AppleTV. If you do not have those, you cannot restore to 11.3. 11.2.x can no longer be installed because there aren't any SEP versions that are still signing that are compatible. These directions are mac specific but with minor changes should work on any comp.

Step 1: Download futurerestore for your respective computer, here is the build i use that works on my mac futurerestore_macos

Step 2: Download either 11.4 or 11.4.1 to get the BuildManifest.plist and sep-firmware.j42d.RELEASE.im4p files.

Step 3: Rename the ipsw to .zip and extract its contents to get the BuildManifest.plist and sep files.

Step 4: Download 11.3

Step 5: Create a folder and put all of these files inside of it

Step 6: Open your terminal app (mac os, linux and windows you are on your own here)

Step 7: cd to the directory you created with futurerestore, the SEP, BuildManifest.plist and 11.3 ipsw.

Step 8: find your SHSH blob and look for the 'generator' inside of it, make a note of this value.

backr00m install

Step 1: Download backr00m

Step 2: Plug your 4th generation AppleTV into your computer via a USB-C cable

Step 3: Make sure you have a developer account with apple, you can get one for free (your on your own to figure that out!)

Step 4: Download Cydia Impactor

Step 5: Drag the backr00m.ipa into Cydia Impactor

Step 6: Click start

You will almost definitely get some error related to plist files, i dont remember the exact error, this error is fine and expected behavior (it happened every time for me) check your AppleTV to see if its installed

Step 7: Run backr00m

Step 8: Click the 'Jailbreak' button it should work on the first try! Hit the respring button when prompted to. Upon respringing SSH into your AppleTV

Step 9: ssh into your device (ie 'ssh root@apple-tv.local') default password is alpine

Step 10: run this command (substitute your nonce in place)

 nvram com.apple.System.boot-nonce=YOUR_NONCE_HERE

Step 11: run this command

 nvram auto-boot=false

Step 12: run this command

 reboot

Step 13: from the directory in the terminal with your future restore files run the following command (with your file names substituted in place)

 ./futurerestore -t YOUR_SHSH_BLOB.shsh -s sep-firmware.j42d.RELEASE.im4p -m BuildManifest.plist -w AppleTV5,3_11.3_15L211_Restore.ipsw --no-baseband

Step 14: Profit!

Known Issues

1. Youtube video playback doesn't work (this isn't a backr00m issue, youtube doesn't work on 10.2.2 AT ALL)