1 Jan 0001

Reviving an iPhone 3G (and 3GS) after a reset — notes for a blog post

Status as of 2026-10-03: not activated yet, blocked on a broken power button (3G).

Starting point

• iPhone 3G (iPhone1,2, USB ID 05ac:1292), factory reset → stuck on the activation screen.
• No full-size SIM anymore (only nano SIMs around).
• An old Mac is available, but iTunes refuses to sign in to the Apple ID, while the same account works on icloud.com. Presumably the authentication mechanism changed and old iTunes can't keep up.
• Host: Debian 12 laptop.
• Tool: Legacy iOS Kit v26.09.34, unpacked in ~/Downloads/Legacy-iOS-Kit_v26.09.34/, run with ./restore.sh. It downloaded iPhone1,2_4.2.1_8C148_Restore.ipsw (iOS 4.2.1, the last version for the 3G).

What was tried, and what happened

1. "Attempt Activation" in Legacy iOS Kit (3G) — failed

The menu entry runs ideviceactivation activate from the computer (device_activate() in restore.sh). The kit itself warns that iPhone 4 and older need a valid SIM. No SIM → error.

2. Restore/Downgrade → "Start Update" (3G) — wrong option

Selecting the IPSW returns to the same menu, which then shows (*) Start Update and (*) Start Restore. Start Update was tried first. It updates in place, keeps the device state (i.e. still unactivated) and never asks about jailbreak/hacktivation. The kit even warns against using it unless you know why.

Lesson: the Jailbreak and Hacktivate questions only show up after (*) Start Restore, because that's the path that builds a custom IPSW (ipsw_preference_set runs in the downgrade mode, not in restore-update).

3. Restore → Start Restore with Jailbreak + Hacktivate (3G) — blocked

This is the right path: "hacktivation" builds a jailbroken custom IPSW with a patched lockdownd (or a FactoryActivated activation state), so the phone boots already activated without any Apple server or SIM. Cellular stays dead; Wi-Fi, iPod and apps work.

Blocked: for the 3G (S5L8900 chip), a jailbroken iOS 4 restore requires WTF/DFU mode (device_enter_mode WTFreal in restore_deviceprepare()), and DFU can only be entered with Home + Power held together. The 3G's power button is broken. There is no software path to DFU: the kit can put the phone in recovery mode via ideviceenterrecovery, but recovery mode rejects custom IPSWs. The 3.1.3 hacktivated IPSW (iPhone1.2_3.1.3_7E18_CustomHJ.ipsw) also goes through DFU, so downgrading doesn't help.

4. Same procedure on an iPhone 3GS — Wi-Fi activation failed

The 3GS offers an extra activation option, Wi-Fi: the phone itself contacts Apple's activation server. It failed with "could not connect to the Apple servers".

Likely cause (not verified): the phone's own TLS stack and root certificates are from around 2010–2012 and can't negotiate with today's servers. This doesn't prove the server is gone, since host-side activation (ideviceactivation) uses the computer's modern TLS.

5. Host-side "Attempt Activation" on both phones — failed

Done to check whether a SIM in an adapter would be worth buying for the 3G. Activation from the computer threw an error on both the 3G and the 3GS (the 3GS had to be jailbroken first). The exact error text wasn't recorded. Conclusion drawn: don't count on Apple's activation server, so a SIM adapter is not worth trying, and hacktivation is the only route left.

Next steps

1. Fix the 3G power button: iFixit "iPhone 3G Power Button Replacement"; part is the "iPhone 3G power button flex / top flex cable" (model A1241, not interchangeable with the 3GS). Check first if the switch is just dirty or the connector unseated.
2. Then: ./restore.sh → Restore/Downgrade → Latest iOS (4.2.1) → Select Target IPSW → (*) Start Restore → Jailbreak Y → Hacktivate Y (default is N!) → enter WTF mode using the DFU button procedure when prompted.

Blog-post angles

• Activation, not the hardware, is what makes old iPhones e-waste: a reset is a one-way door.
• Three dead ends in a row: old iTunes can't sign in, the old phone can't do TLS with Apple, and Apple's server doesn't activate from a modern host either.
• Legacy iOS Kit's UX trap: picking the IPSW returns you to the menu, and "Start Update" sits right above "Start Restore".
• Hacktivation explained: patching lockdownd vs. writing a FactoryActivated state.
• The final blocker is a €5 mechanical part, because DFU is a bootrom feature tied to buttons.

To fill in later

• Exact error messages (Attempt Activation on 3G/3GS, Wi-Fi activation on 3GS, iTunes sign-in).
• Old Mac model / macOS / iTunes version.
• iOS versions on the 3GS before and after, and whether it was hacktivated in the end.
• How the power-button repair went, and the final result.

https://www.ifixit.com/Guide/iPhone+3G+Power+Button+Replacement/4484