Iron unlock iCloud on Apple iPad Air 2 Cellular A1567

A year ago, I explained how to bypass the iCloud lock on all iPad Cellular tablets. Now it's time to talk about the way to bypass iCloud on the iPad Air 2 Cellular A1567.

Updated and simplified iCloud bypass methods on previous iPad models are described in the article How to unlock iCloud locked Apple iPad 2, iPad 3, iPad 4, iPad Air, iPad mini, iPad mini Retina, iPad Air 2, iPad mini 3 with 3G . In an article on Habrhabr, How to unlock an iPad 3G locked in iCloud, I told you about the principle of operation of this method.

Apple iPad Air 2 4G and iCloud

')
The difficulty in finding the iCloud bypass method on the iPad Air 2 A1567 arose due to the lack of device diagrams. More precisely, they are only sold in some secret places (about $ 3000). It would be possible to collect this amount from donations that users of this method sometimes send. But it would take at least 20 years. :)

I decided to do it on the photos of the iPad Air 2 A1567 motherboard using the “spear” scientific method, comparing it with the iPad Air 2 WiFi only. The device was not on hand, so others tested at their own peril and risk.

Success

And yet we found the place that is responsible for the device ID. You need to make a jumper with a soldering iron or draw a thick line with an ordinary pencil in this place:



iPad Air 2 WiFi only has a resistor there, iPad Air 2 A1567 doesn't.

Video disassembling iPad Air 2 ( how to center? ):



How to make a jumper:



And bummer. WiFi and Bluetooth do not work after flashing iPad Air 2 A1567 firmware from iPad Air 2 WiFi only. Those who made donations (foreigners) immediately dissatisfiedly demanded the return of donations through the refund. :) Although personally, I would be happy even with this iPad. Wacom launches cool bluetooth styli for iPad only . Can be used for drawing

I began to look for the cause of inoperative WiFi and Bluetooth. All the repairmen I interviewed said in one voice: “Hammer! There, probably, a modem, WiFi and Bluetooth in one chip. It is disabled when iCloud bypass. Such a device is useless. ”

We waited, waited and suddenly happened ...

Miracle

Several testers have recently been updated for interest to iOS 9 beta, which Apple released, and Bluetooth has earned!

I doubted the withdrawal of qualified repairmen.



Now users can connect the tablet to mobile phones via Bluetooth and use the Internet. However, the majority still remained dissatisfied (low speed, inconvenient, expensive to sell). Plus, at least 5-7 emails every day: “Give me a way to fix WiFi!”

Digging deeper

Users who have unlocked the iPad Air 2 A1567, began to look for the cause. And that's what iPad logs gave out (only part of the log is shown):

Jun 10 19:43:29 iPad wifiFirmwareLoader iPad [195]: Going to discover services \ ^ J
Jun 10 19:43:29 iPad wifiFirmwareLoader [195] iPad-mac:
Jun 10 19:43:29 iPad-mac wifiFirmwareLoader [195]: full path firmwareName is /usr/share/firmware/wifi/C-4350__s-C2/rieslinga.trx\^J
Jun 10 19:43:29 iPad wifiFirmwareLoader [195]: Error: Could not open file /usr/share/firmware/wifi/C-4350__s-C2/P-rieslinga_M-STEL_V-u__m-3.1.txt (No such file or directory) \ ^ J
Jun 10 19:43:29 iPad-mac wifiFirmwareLoader [195]: wifiFirmwareLoaderThread exiting with 1 \ ^ J
Jun 10 19:43:29 iPad wifiFirmwareLoader iPad [195]: Shutting down \ ^ J

It turned out that for the first time in the firmware, there are not enough drivers and software for working with WiFi and Bluetooth. It was necessary to add or change these files.

I, unfortunately, have never had Apple devices and I do not understand the structure and operation of iOS and jailbrake. Therefore, I threw the information to everyone I got, and they began to think together about the solution.

The biggest problem was that without a network, the installation process jailbrake hung by 30% for most. The rest could not access the file system. But it decided.

Further, one person with w3bsit3-dns.com somehow (I have not been told so far) edited the files from the same firmware and now everything worked on iOS 8.4.

The procedure for activating WiFi and Bluetooth

1. Download modified files
2. Install iOS 8.4 on iPad Air 2 A1567
3. Jailbreak with PPjailbreak
4. Copy the files from the archive into the “Downloads” folder. Use ifunbox, itools.
5. Using Cydia, add an offline local repository file: /// var / mobile / Media / Downloads. Observe the case of letters.
6. Install all tweaks from the added repository
7. Reboot iPad Air 2
8. Start iFunbox, iTools (you can also through other programs) enable SSH, copy the address 127.0.0.1, the login “root”, the password “alpine”.
9. Download cyberduck. Run it. Select a new connection. Server type - sftp. Enter the address, login and password.
10. Go to the “usr / share / firmware / wifi / C-4350__s-C2 /” folder and delete all files from there. Copy files from archive there
11. Reboot iPad Air 2

So far this only works on iOS 8.4. But if the community helps to develop some method of editing driver files, then we will be able to create drivers for any version of iOS.

But what about the iPad mini 3 4G A1600?

There is an unverified method (already tested)

The results for it are:

• Not very skillful Briton killed the board by short-circuiting, putting the included board on the iron table. Before that, he also burned 2 soldering irons
• The American did everything. iTunes showed iPad mini 3 WiFi, but when restoring firmware, I got error 14 (problem with a USB cable, installing iTunes, and so on). I don't know why, but he started warming something there and overheated the processor. In the Apple Store, he was given a new iPad mini 3 4G 128Gb

Maybe someone else wants to check the way :). Write to private messages or mail.

Have a great weekend and hello to Apple employees.

PS The post wrote, and now I went for the night to be nosy Addison-Wesley Professional - PHP and MySQL Web Development 4th Edition.
PS Complicated methods for iPad WiFi Only are (and it seems even for the iPhone with editing IMEI in a modem chip), but my knowledge and skills are not enough for this.