- Hold B on boot or while launching Health and Safety (whether you coldboot or not) to boot into the PayloadLoader.
- You will be asked to choose your payload.
- Select "fw_img_loader".
If the fw_img_loader isn't present, grab it from the Aroma Website |
(Change link to releases location) Tags: Mobile edit Mobile web edit |
|||
(18 intermediate revisions by 3 users not shown) | |||
Line 1: | Line 1: | ||
'''ISFShax''' exploits boot1 using a specially designed ISFS (SLC filesystem) superblock. Once installed, it offers similar capabilities to defuse. Since it runs before IOSU, it can apply early patches to IOSU and repair most types of bricks. However, it cannot protect against bricks caused by boot1 corruption, seeprom issues, or installing a faulty ISFShax superblock. Additionally, ISFShax cannot help if the Wii U is already bricked. | '''ISFShax''' exploits boot1 using a specially designed ISFS (SLC filesystem) superblock. Once installed, it offers similar capabilities to defuse. Since it runs before IOSU, it can apply early patches to IOSU and repair most types of bricks. However, it cannot protect against bricks caused by boot1 corruption, seeprom issues, or installing a faulty ISFShax superblock. Additionally, ISFShax cannot help if the Wii U is already bricked. | ||
== Features == | ===Features=== | ||
*Rebuilding or upgrading the MLC | *Rebuilding or upgrading the MLC | ||
Line 8: | Line 8: | ||
*Cold booting redNAND, which is helpful when the eMMC is failing | *Cold booting redNAND, which is helpful when the eMMC is failing | ||
*Providing a minimal CFW that can launch old homebrew using the homebrew launcher (though this might be less useful with Aroma and Tiramisu available) | *Providing a minimal CFW that can launch old homebrew using the homebrew launcher (though this might be less useful with Aroma and Tiramisu available) | ||
*Preventing the Wii U from turning on the | *Preventing the Wii U from turning on the Tablet during boot using a stroopwafel plugin | ||
===Exploit Methods=== | |||
== Exploit Methods == | |||
There are quite a few ways to launch the ISFShax installer. | There are quite a few ways to launch the ISFShax installer. | ||
*If you already have Tiramisu or Aroma installed and can launch it, follow the Instructions for Aroma | *If you already have Tiramisu or Aroma installed and can launch it, follow the Instructions for Aroma | ||
*If the Browser still works and you can launch the browser exploit u.wiidb.de, follow the Instructions for Browser | *If the Browser still works and you can launch the browser exploit u.wiidb.de, follow the Instructions for Browser | ||
*If you can't access the Browser, but Settings still work follow Instructions for DNSpresso | *If you can't access the Browser, but Settings still work follow Instructions for DNSpresso | ||
Line 23: | Line 20: | ||
*If your Wii U can't launch the browser anymore or can't connect to the internet, follow the Instructions for UDPIH | *If your Wii U can't launch the browser anymore or can't connect to the internet, follow the Instructions for UDPIH | ||
{{info|text= Note: If you have a legacy CFW (Haxchi, CBHC) installed you can also use it, but follow the Aroma steps and hold A instead of B.}} | |||
Make sure your SD card is FAT32, although this should already be the case if you have Aroma/Tiramisu installed. | |||
==SD Preparation== | |||
You will need: | You will need: | ||
*The [https://github | *The [https://github/isfshax/isfshax_installer/releases ISFShax installer] (<code>ios.img</code>) | ||
* | *[https://github.com/isfshax/isfshax/releases ISFShax Superblock] (<code>superblock.img</code> and <code>superblock.img.sha</code>) | ||
*The [https://github.com/jan-hofmeier/stroopwafel/releases stroopwafel] (<code>wafel_core.ipx</code> | *The [https://github.com/jan-hofmeier/stroopwafel/releases stroopwafel] (<code>wafel_core.ipx</code> | ||
*The [https://github.com/isfshax/wafel_isfshax_patch/releases | *The [https://github.com/isfshax/wafel_isfshax_patch/releases stroopwafel plugin] (<code>wafel_isfshax_patch.ipx</code>) | ||
*The [https://github.com/jan-hofmeier/minute_minute/releases minute image] (<code>fw_encrypted.img</code>) '''[Aroma | *The [https://github.com/jan-hofmeier/minute_minute/releases minute image] (<code>fw_encrypted.img</code>) '''[Aroma/Browser/DNSpresso]''' | ||
*The [https://github.com/wiiu-env/fw_img_payload/releases fw_img_payload] zip '''[Browser/DNSpresso only]''' | *The [https://github.com/wiiu-env/fw_img_payload/releases fw_img_payload] zip '''[Browser/DNSpresso only]''' | ||
*The [https://github.com/wiiu-env/PayloadFromRPX/releases root.rpx] '''[DNSpresso only]''' | *The [https://github.com/wiiu-env/PayloadFromRPX/releases root.rpx] '''[DNSpresso only]''' | ||
Line 39: | Line 37: | ||
*The [https://github.com/jan-hofmeier/recovery_menu/releases recovery_menu] '''[UDPIH only]''' | *The [https://github.com/jan-hofmeier/recovery_menu/releases recovery_menu] '''[UDPIH only]''' | ||
# Copy the <code>ios.img</code> to the root of your SD card. | #Copy the <code>ios.img</code> to the root of your SD card. | ||
# Copy the <code>superblock.img</code> and <code>superblock.img.sha</code> to root of your SD card. | #Copy the <code>superblock.img</code> and <code>superblock.img.sha</code> to root of your SD card. | ||
# Copy the <code>wafel_core.ipx</code> and <code>wafel_isfshax_patch.ipx</code> to the <code>ios_plugins</code> folder in the <code>wiiu</code> folder. | #Copy the <code>wafel_core.ipx</code> and <code>wafel_isfshax_patch.ipx</code> to the <code>ios_plugins</code> folder in the <code>wiiu</code> folder. | ||
# Copy the <code>fw_encrypted.img</code> to the root of your SD card and rename it to <code>fw.img</code>. | #Copy the <code>fw_encrypted.img</code> to the root of your SD card and rename it to <code>fw.img</code>. | ||
# Extract the contents of the <code>fw_img_payload</code> zip to the root of your SD card. '''(Browser/DNSpresso)''' | #Extract the contents of the <code>fw_img_payload</code> zip to the root of your SD card. '''(Browser/DNSpresso)''' | ||
# Copy the <code>root.rpx</code> to the root of your SD card and rename it to <code>launch.rpx</code> '''(DNSpresso)''' | #Copy the <code>root.rpx</code> to the root of your SD card and rename it to <code>launch.rpx</code> '''(DNSpresso)''' | ||
# Copy the <code>fw.img</code> and <code>boot1.img</code> to the root of your SD card. '''(UDPIH)''' | #Copy the <code>fw.img</code> and <code>boot1.img</code> to the root of your SD card. '''(UDPIH)''' | ||
# Copy the <code>recovery_menu</code> to the root of your SD card. '''(UDPIH)''' | #Copy the <code>recovery_menu</code> to the root of your SD card. '''(UDPIH)''' | ||
Line 65: | Line 63: | ||
**** {{Tree icon|f}} wafel_core.ipx | **** {{Tree icon|f}} wafel_core.ipx | ||
**** {{Tree icon|f}} wafel_isfshax_patch.ipx | **** {{Tree icon|f}} wafel_isfshax_patch.ipx | ||
==Booting into Minute == | == Booting into Minute == | ||
Choose the appropriate method to boot into Minute based off of the setup you have. | Choose the appropriate method to boot into Minute based off of the setup you have. | ||
Line 80: | Line 77: | ||
# Select "fw_img_loader". | # Select "fw_img_loader". | ||
{{info|text= If the fw_img_loader isn't present, grab it from the [https://aroma.foryour.cafe Aroma Website] | {{info|text= If the fw_img_loader isn't present, grab it from the [https://aroma.foryour.cafe Aroma Website]}}. | ||
</span> | </span> | ||
Line 102: | Line 92: | ||
If you can access the settings, follow the instructions provided here (you already have the correct files on the SD card): [https://gbatemp.net/threads/dnspresso-a-wii-u-dns-exploit.642123/ DNSpresso - A Wii U DNS Exploit.] | If you can access the settings, follow the instructions provided here (you already have the correct files on the SD card): [https://gbatemp.net/threads/dnspresso-a-wii-u-dns-exploit.642123/ DNSpresso - A Wii U DNS Exploit.] | ||
If you are stuck on | If you are stuck on Mii creation during the initial setup: | ||
# If your Wii U is already connected to your AP/Router, turn off the AP/Router or disable its WiFi. | # If your Wii U is already connected to your AP/Router, turn off the AP/Router or disable its WiFi. | ||
Line 129: | Line 119: | ||
In minute, use the power button to move the cursor and the eject button to select (this is opposite to the recovery menu controls). | In minute, use the power button to move the cursor and the eject button to select (this is opposite to the recovery menu controls). | ||
{{info|text=Minute only outputs 1080p through HDMI, with no display on the | {{info|text= Minute only outputs 1080p through HDMI, with no display on the gamepad or analog outputs. Some users have reported that the screen output doesn't work when minute is loaded from recovery. If you've verified that the fw.img file is correct and your TV supports 1080p HDMI, you can still proceed by pressing the appropriate buttons blindly. Make sure to wait long enough between presses to allow the system to load. Without display output, skip the first backup and go directly to installing ISFShax.}} | ||
==Backup and Installation== | == Backup and Installation == | ||
We will now start with a fresh | We will now start with a fresh nand backup. | ||
#Navigate to <code>Backup and Restore</code> | # Navigate to <code>Backup and Restore</code> | ||
#Select <code>Dump OTP and Seeprom</code> | # Select <code>Dump OTP and Seeprom</code > | ||
#When that is done, select <code>Dump SLC.RAW</code> | # When that is done, select <code>Dump SLC.RAW</code> | ||
#Once that is done, return to the main menu. | # Once that is done, return to the main menu. | ||
===Installing ISFShax === | === Installing ISFShax === | ||
#Select <code>Boot ios.img</code> (blind combo is Power | # Select <code>Boot ios.img</code>(blind combo is Power 5x, Eject 1x) | ||
# The ISFShax installer will launch after a brief moment. | # The ISFShax installer will launch after a brief moment. | ||
#Follow the onscreen instructions, the buttons are the same as minute's (3x Eject, 1x Power, 3x Eject). | # Follow the onscreen instructions, the buttons are the same as minute's (3x Eject, 1x Power, 3x Eject). | ||
# The console should now turn off. | # The console should now turn off. | ||
# Replace the | # Replace the fw.img on the SD with the fw.img (The non-encrypted one) from the [https://github.com/jan-hofmeier/minute_minute/releases Minute releases]. | ||
#If it successfully installed, the Wii U will directly boot into minute once you boot again. | # If it successfully installed, the Wii U will directly boot into minute once you boot again. | ||
===Backing up ISFSHax === | === Backing up ISFSHax === | ||
Go back to Backup and Restore and Dump the SLC.RAW again. This will replace the previous SLC.RAW file you dumped earlier. It's required if you want to restore the SLC for unbricking, without losing ISFShax | Go back to Backup and Restore and Dump the SLC.RAW again. This will replace the previous SLC.RAW file you dumped earlier. It's required if you want to restore the SLC for unbricking, without losing ISFShax. Keep that backup somewhere safe. | ||
==Booting with ISFShax == | == Booting with ISFShax == | ||
From this point on, the Wii U | From this point on, the Wii U needs the SD card to boot, and won't boot without it. It will load minute (the fw.img), which then applies the required patches from your SD card. (Needs to patch IOSU, so it doesn't overtake the superblock). | ||
To boot into the Wii U OS | To boot into the Wii U OS, select <code>Patch (sd) and boot IOS (slc)</code>. | ||
=== Launching environments with ISFShax === | |||
===Launching | |||
You can use ISFShax to boot into Aroma or Tiramisu. | You can use ISFShax to boot into Aroma or Tiramisu. | ||
To begin, you will need the latest files from the sites. | To begin, you will need the latest files from the sites. | ||
*Aroma: Download [https://aroma.foryour.cafe here] | *Aroma: Download [https://aroma.foryour.cafe here] | ||
*Tiramisu: Download [https://tiramisu.foryour.cafe here] | *Tiramisu: Download [https://tiramisu.foryour.cafe here] | ||
# Put the wafel_payloader.ipx file in the ios_plugins folder: Download here | |||
# Place the root.rpx file from [https://github.com/wiiu-env/PayloadFromRPX/releases PayloadFromRPX] in the wiiu folder on the SD card. | |||
#* Alternatively, if you have Aroma and/or Tiramisu already, you can just grab the root.rpx from the environment of choice's folder from <code>wiiu/environments/[ENVIRONMENT]/</code> and place it on the root of the SD card. | |||
{{info|text= If you are already coldbooting Tiramisu or Aroma via the PayloadLoader Installer, you need to disable the coldboot in the PayloadLoaderInstaller first.}} | |||
To fix this, we need to install minute | === Booting without SD === | ||
This step is optional but highly recommended. Without the SD card, the Wii U won't display anything, which can be confusing if the SD card is lost or corrupted. | |||
To fix this, we need to install the minute fw.img and the ios_plugins to the internal memory (SLC). This can be done using FTPiiU-Everywhere, which can be launched from Tiramisu and is part of the Aroma Package (enable in the plugin settings), or you can use the haxcopy homebrew from this link. | |||
Haxcopy is recommended for most users, but if you accidentally copy a wrong plugin to the SLC or need to delete one, you'll still need to use FTP. | Haxcopy is recommended for most users, but if you accidentally copy a wrong plugin to the SLC or need to delete one, you'll still need to use FTP. | ||
# Create a folder named "hax" on the SD card. | # Create a folder named "hax" on the SD card. | ||
# Copy the fw.img to the hax folder. | # Copy the fw.img to the hax folder. | ||
Line 190: | Line 174: | ||
# If you want to coldboot Aroma or Tiramisu, rename wafel_payloader.ipx to 9payldr.ipx and copy it to the hax/ios_plugins folder. | # If you want to coldboot Aroma or Tiramisu, rename wafel_payloader.ipx to 9payldr.ipx and copy it to the hax/ios_plugins folder. | ||
# If you need other plugins like wafel_unlimit.ipx, rename and copy them to the hax/ios_plugins folder. | # If you need other plugins like wafel_unlimit.ipx, rename and copy them to the hax/ios_plugins folder. | ||
# | # Copy the haxcopy app to the wiiu/apps folder (as you would normally install homebrew). | ||
# Insert the SD card into the Wii U and run haxcopy to transfer the hax folder to the SLC. | # Insert the SD card into the Wii U and run haxcopy to transfer the hax folder to the SLC. | ||
'''For Aroma, enable access to system files:''' | |||
#Open the Aroma Plugin Configuration Menu using L + Down + SELECT (-) on the GamePad or Pro Controller (or B + Down + Minus (-) for WiiMotes). | #Open the Aroma Plugin Configuration Menu using L + Down + SELECT (-) on the GamePad or Pro Controller (or B + Down + Minus (-) for WiiMotes). | ||
#Open the FTPiiU option, then settings, and set ‘Allow access to system files’ to ‘true’ by pressing A. | #Open the FTPiiU option, then settings, and set ‘Allow access to system files’ to ‘true’ by pressing A. | ||
'''Uploading the files (Tiramisu only): | |||
''' | |||
# Ensure FTPiiU Everywhere is running on the Wii U. | |||
# Use an FTP client on the PC to browse to /storage_slc/. | # Use an FTP client on the PC to browse to /storage_slc/. | ||
# If you see a scfm.img file and sys folder, go into the sys folder. If you see folders like config, import, logs, proc, rights, security, title, and tmp, move to the next step. | # If you see a scfm.img file and sys folder, go into the sys folder. If you see folders like config, import, logs, proc, rights, security, title, and tmp, move to the next step. | ||
Line 210: | Line 196: | ||
# If you want to coldboot Aroma or Tiramisu, rename wafel_payloader.ipx to 9payldr.ipx and upload it. | # If you want to coldboot Aroma or Tiramisu, rename wafel_payloader.ipx to 9payldr.ipx and upload it. | ||
# If you need other plugins like wafel_unlimit.ipx, rename and upload them too. | # If you need other plugins like wafel_unlimit.ipx, rename and upload them too. | ||
Now, the Wii U should autoboot if no SD card is inserted. If an SD card is inserted, the minute menu should show up (even if the SD doesn't contain a fw.img). In that menu, you can select the Patch (SLC) and boot IOS (SLC) to load the plugins from the SLC and boot (no need to have them on the SD anymore). | Now, the Wii U should autoboot if no SD card is inserted. If an SD card is inserted, the minute menu should show up (even if the SD doesn't contain a fw.img). In that menu, you can select the Patch (SLC) and boot IOS (SLC) to load the plugins from the SLC and boot (no need to have them on the SD anymore). | ||
{{info|text=The Wii U will first try to load the fw.img from the SLC, and if that fails, it will fall back to the SD. If you install a broken fw.img that doesn't load, you can force | {{info|text= The Wii U will first try to load the fw.img from the SLC, and if that fails, it will fall back to the SD. If you install a broken fw.img that doesn't load, you can force isfshax to load the fw.img from the SD by repeatedly pressing the power button until the menu shows up.}} | ||
{{warning|text=A factory reset will delete the hax folder. Without the fw.img on the SD, the Wii U will | {{warning|text= A factory reset will delete the hax folder. Without the fw.img on the SD, the Wii U will display a black screen with an orange LED.}} | ||
===Autobooting with SD (Optional) === | === Autobooting with SD (Optional) === | ||
To enable autoboot on the Wii U with an SD card inserted, create the file <code>sd:/minute/minute.ini</code> with the following content: | To enable autoboot on the Wii U with an SD card inserted, create the file <code>sd:/minute/minute.ini</code> with the following content: | ||
Line 228: | Line 213: | ||
</syntaxhighlight> | </syntaxhighlight> | ||
You can adjust the timeout (in seconds) to your preference. The <code>autoboot</code> option determines which entry from the minute menu will be loaded. Setting it to <code>1</code> corresponds to <code>Patch (slc) and boot IOS (slc)</code>, which loads the ios_plugins from the SLC. If you haven't installed them to the SLC or want to load them from the SD for any reason, change the value to <code>3</code>, which corresponds to <code>Patch (sd) and boot IOS (slc)</code>. | You can adjust the timeout (in seconds) to your preference. The <code>autoboot</code> option determines which entry from the minute menu will be loaded. Setting it to <code>1</code> corresponds to <code>Patch (slc) and boot IOS (slc)"</code>, which loads the ios_plugins from the SLC. If you haven't installed them to the SLC or want to load them from the SD for any reason, change the value to <code>3</code>, which corresponds to <code>"Patch (sd) and boot IOS (slc)</code>. | ||
{{info|text=If you combine autobooting minute with the wafel_payloader plugin, | {{info|text= If you combine autobooting minute with the wafel_payloader plugin, You can autoboot Aroma or Tiramisu without having Health and Safety injected at all!}} | ||
As an alternative, check out the Fastboot option below. | As an alternative, check out the Fastboot option below. | ||
===Fastbooting (Optional) === | === Fastbooting (Optional) === | ||
To make the Wii U boot as fast as possible, without showing minute, you can now use the fw_fastboot.img. This won't work with redNAND | To make the Wii U boot as fast as possible, without showing minute, you can now use the fw_fastboot.img. This won't work with redNAND | ||
It is hardcoded to go straight to the first option (booting the | It is hardcoded to go straight to the first option (booting the slc, with patches from SLC). It won't display anything and ignore any autoboot configuration in the minute.ini. | ||
#First make sure the system can boot using the first option in minute. (see Booting without SD) | # First make sure the system can boot using the first option in minute. (see [[Wii U:ISFShax#Booting_without_SD|Booting without SD]]) | ||
#Replace the the fw.img in the hax folder on the SLC with the fastboot image (fw_fastboot.img renamed to fw.img) | # Replace the the fw.img in the hax folder on the SLC with the fastboot image (fw_fastboot.img renamed to fw.img) | ||
If you get stuck for whatever reason and need to fully load minute from your SD, you can do this: | If you get stuck for whatever reason and need to fully load minute from your SD, you can do this: | ||
#Place the minute fw.img on the SD card | # Place the minute fw.img on the SD card | ||
# | # repeatedly press the power button until the minute menu shows up on the screen. | ||
==Uninstalling ISFShax == | == Uninstalling ISFShax == | ||
{{warning|text=Do NOT restore an older SLC backup, as it will break SCFM!}} | {{warning|text= Do NOT restore an older SLC backup, as it will break SCFM!}} | ||
Ensure your Wii U doesn't rely on any patches (like wafel_unlimit_mlc.ipx or redNAND). You can verify this by booting with only the wafel_core.ipx and wafel_isfshax_ipx plugins in the ios_plugins directory on the SD card and selecting the "Patch (sd) and boot IOS (slc)" option. | Ensure your Wii U doesn't rely on any patches (like wafel_unlimit_mlc.ipx or redNAND). You can verify this by booting with only the wafel_core.ipx and wafel_isfshax_ipx plugins in the ios_plugins directory on the SD card and selecting the "Patch (sd) and boot IOS (slc)" option. | ||
Line 255: | Line 240: | ||
To proceed: | To proceed: | ||
#Delete the /storage_slc/sys/hax folder if you have set up SLC booting. | # Delete the /storage_slc/sys/hax folder if you have set up SLC booting. | ||
# Run the ISFShax installer again from minute and follow the on-screen instructions to uninstall. | # Run the ISFShax installer again from minute and follow the on-screen instructions to uninstall. | ||
ISFShax exploits boot1 using a specially designed ISFS (SLC filesystem) superblock. Once installed, it offers similar capabilities to defuse. Since it runs before IOSU, it can apply early patches to IOSU and repair most types of bricks. However, it cannot protect against bricks caused by boot1 corruption, seeprom issues, or installing a faulty ISFShax superblock. Additionally, ISFShax cannot help if the Wii U is already bricked.
There are quite a few ways to launch the ISFShax installer.
Note: If you have a legacy CFW (Haxchi, CBHC) installed you can also use it, but follow the Aroma steps and hold A instead of B. |
Make sure your SD card is FAT32, although this should already be the case if you have Aroma/Tiramisu installed.
You will need:
ios.img
)superblock.img
and superblock.img.sha
)wafel_core.ipx
wafel_isfshax_patch.ipx
)fw_encrypted.img
) [Aroma/Browser/DNSpresso]fw.img
and boot1.img
[UDPIH only]ios.img
to the root of your SD card.superblock.img
and superblock.img.sha
to root of your SD card.wafel_core.ipx
and wafel_isfshax_patch.ipx
to the ios_plugins
folder in the wiiu
folder.fw_encrypted.img
to the root of your SD card and rename it to fw.img
.fw_img_payload
zip to the root of your SD card. (Browser/DNSpresso)root.rpx
to the root of your SD card and rename it to launch.rpx
(DNSpresso)fw.img
and boot1.img
to the root of your SD card. (UDPIH)recovery_menu
to the root of your SD card. (UDPIH)
The structure on the SD should look like this:
Choose the appropriate method to boot into Minute based off of the setup you have.
If the fw_img_loader isn't present, grab it from the Aroma Website |
If you can access the settings, follow the instructions provided here (you already have the correct files on the SD card): DNSpresso - A Wii U DNS Exploit. If you are stuck on Mii creation during the initial setup:
(If your tv doesn't display an output, you'll have to navigate blindly: 18x eject, 1x power, 1 eject, 1 power) |
You should now see the minute main menu. If not, ensure you have the correct fw.img file on the SD card.
In minute, use the power button to move the cursor and the eject button to select (this is opposite to the recovery menu controls).
Minute only outputs 1080p through HDMI, with no display on the gamepad or analog outputs. Some users have reported that the screen output doesn't work when minute is loaded from recovery. If you've verified that the fw.img file is correct and your TV supports 1080p HDMI, you can still proceed by pressing the appropriate buttons blindly. Make sure to wait long enough between presses to allow the system to load. Without display output, skip the first backup and go directly to installing ISFShax. |
We will now start with a fresh nand backup.
Backup and Restore
Dump OTP and Seeprom
Dump SLC.RAW
Boot ios.img
(blind combo is Power 5x, Eject 1x)Go back to Backup and Restore and Dump the SLC.RAW again. This will replace the previous SLC.RAW file you dumped earlier. It's required if you want to restore the SLC for unbricking, without losing ISFShax. Keep that backup somewhere safe.
From this point on, the Wii U needs the SD card to boot, and won't boot without it. It will load minute (the fw.img), which then applies the required patches from your SD card. (Needs to patch IOSU, so it doesn't overtake the superblock).
To boot into the Wii U OS, select Patch (sd) and boot IOS (slc)
.
You can use ISFShax to boot into Aroma or Tiramisu. To begin, you will need the latest files from the sites.
wiiu/environments/[ENVIRONMENT]/
and place it on the root of the SD card.If you are already coldbooting Tiramisu or Aroma via the PayloadLoader Installer, you need to disable the coldboot in the PayloadLoaderInstaller first. |
This step is optional but highly recommended. Without the SD card, the Wii U won't display anything, which can be confusing if the SD card is lost or corrupted.
To fix this, we need to install the minute fw.img and the ios_plugins to the internal memory (SLC). This can be done using FTPiiU-Everywhere, which can be launched from Tiramisu and is part of the Aroma Package (enable in the plugin settings), or you can use the haxcopy homebrew from this link.
Haxcopy is recommended for most users, but if you accidentally copy a wrong plugin to the SLC or need to delete one, you'll still need to use FTP.
For Aroma, enable access to system files:
Uploading the files (Tiramisu only):
Now, the Wii U should autoboot if no SD card is inserted. If an SD card is inserted, the minute menu should show up (even if the SD doesn't contain a fw.img). In that menu, you can select the Patch (SLC) and boot IOS (SLC) to load the plugins from the SLC and boot (no need to have them on the SD anymore).
The Wii U will first try to load the fw.img from the SLC, and if that fails, it will fall back to the SD. If you install a broken fw.img that doesn't load, you can force isfshax to load the fw.img from the SD by repeatedly pressing the power button until the menu shows up. |
A factory reset will delete the hax folder. Without the fw.img on the SD, the Wii U will display a black screen with an orange LED. |
To enable autoboot on the Wii U with an SD card inserted, create the file sd:/minute/minute.ini
with the following content:
[boot]
autoboot=1
autoboot_timeout=3
You can adjust the timeout (in seconds) to your preference. The autoboot
option determines which entry from the minute menu will be loaded. Setting it to 1
corresponds to Patch (slc) and boot IOS (slc)"
, which loads the ios_plugins from the SLC. If you haven't installed them to the SLC or want to load them from the SD for any reason, change the value to 3
, which corresponds to "Patch (sd) and boot IOS (slc)
.
If you combine autobooting minute with the wafel_payloader plugin, You can autoboot Aroma or Tiramisu without having Health and Safety injected at all! |
As an alternative, check out the Fastboot option below.
To make the Wii U boot as fast as possible, without showing minute, you can now use the fw_fastboot.img. This won't work with redNAND It is hardcoded to go straight to the first option (booting the slc, with patches from SLC). It won't display anything and ignore any autoboot configuration in the minute.ini.
If you get stuck for whatever reason and need to fully load minute from your SD, you can do this:
Do NOT restore an older SLC backup, as it will break SCFM! |
Ensure your Wii U doesn't rely on any patches (like wafel_unlimit_mlc.ipx or redNAND). You can verify this by booting with only the wafel_core.ipx and wafel_isfshax_ipx plugins in the ios_plugins directory on the SD card and selecting the "Patch (sd) and boot IOS (slc)" option.
To proceed: