HowTo Jailbreak Kindle Touch 5.3.2

[ixtab]

OK, this seems to be asked a lot recently, so here is a short outline of the procedure. This actually works on all Kindle Touch firmwares, but of course, if you have an older version, there are easier alternatives.


EDIT, 2013-02-18: A much simpler alternative is to use Kubrick to downgrade to a jailbroken 5.1.2, then re-upgrade to 5.3.2. Ok, and now, on with the original text:


This is essentially a slightly modified subset of the steps to debrick a Kindle Touch, so please refer to the simple debricking sticky thread (and possibly the noob's guide linked from there) for more information about the required tools and how to use them.

Note that getting the tools to work on Windows has turned out to be a driver nightmare for many users; you're much better off if you use a Linux host system, because normally, the tools simply work (just remember they need to run with root privileges). Anyway, if you are having trouble with the tools, please ask in the simple debricking thread, not here!

1. download and unzip the attached file (which is the developer certificate that constitutes the jailbreak), and put pubdevkey01.pem directly on your Kindle.
2. put your device into fastboot mode using MfgTool or imx_usb_loader
3. download, gunzip, and flash the diags kernel using fastboot flash diags_kernel kt_5.0.0-kernel_diags
4. download, gunzip, and flash the SSH-enabled diags partition using fastboot flash diags kt_5.0.1-mmcblk0p2_diags+ssh.img
5. boot into diags mode using fastboot setvar bootmode diags, followed by fastboot reboot
6. Once in diags mode, enable USB Networking by choosing the following entries in this order: N - U - Z - X
7. Configure the computer's USB network interface to use the static IP address 192.168.15.201
8. SSH to the Kindle (its IP is 192.168.15.244) using username: root, password: mario
9. Finally, execute the following commands on the Kindle:
   

   mount /dev/mmcblk0p1 /mnt/mmc/
   cp /mnt/us/pubdevkey01.pem /mnt/mmc/etc/uks/
   umount /mnt/mmc
   idme -d --bootmode main
   reboot

[skull43]

Ixtab, like ever. ^^

Thank you

Edit: MfgTool not work, stay on "Updating.." For hours and hours, Again, thank you very much

[phoeagon]

Months back then I rebooted my PC back to Windows to use MgTool...

[sahara1974]

Hi all. Finished 6 points. But after 6-th point network is absent. In what could be the problem?
Thanks in advance, Alexander.

[twobob]

Originally Posted by sahara1974

Hi all. Finished 6 points. But after 6-th point network is absent. In what could be the problem?
Thanks in advance, Alexander.

well assuming you did 7 and 8...

what what the exact output?

did you try to port scan the kindle IP? did you try to ping it?

Where you have stumbled is the most popular place to falter.

What operating system?

More information!!

[skull43]

I prefer throwing the jailbreak for 5.3.2 and install it, also does not work haha Mfgtool

[ixtab]

Originally Posted by sahara1974

Hi all. Finished 6 points. But after 6-th point network is absent. In what could be the problem?
Thanks in advance, Alexander.

Wait 20 seconds. Or unplug and replug your Kindle, and wait 20 seconds.

[sahara1974]

Hello, friends. I do not know what happened, but I was connected to another USB and it worked.
Now is such a situation:
mount/dev/mmcblk0p1/mnt/mmc /
-sh: mount/dev/mmcblk0p1/mnt/mmc /: not found
May be right .... mmcblk0p2 ...?

[eureka]

Originally Posted by sahara1974

mount/dev/mmcblk0p1/mnt/mmc /

That looks like neglecting of clearly written instructions.

[sahara1974]

[root@[192_168_15_244] root]# mount /dev/mmcblk0p1 /mnt/mmc/
mount: /dev/mmcblk0p1 already mounted or /mnt/mmc/ busy
mount: according to mtab, /dev/mmcblk0p1 is mounted on /mnt/mmc
[root@[192_168_15_244] root]# cp /mnt/us/pubdevkey01.pem /mnt/mmc/etc/uks/
[root@[192_168_15_244] root]# umount /mnt/mmc
[root@[192_168_15_244] root]# idme -d --bootmode main
Devmode enabled
Reading vars from temp storage...
...None found, Copying vars from /proc
Setting bootmode to main
Writing new vars to temp area
You must reboot before new values will take effect
[root@[192_168_15_244] root]# reboot


I do all the instructions but the jailbreak is not installed (((

[knc1]

Originally Posted by sahara1974

[root@[192_168_15_244] root]# mount /dev/mmcblk0p1 /mnt/mmc/
mount: /dev/mmcblk0p1 already mounted or /mnt/mmc/ busy
mount: according to mtab, /dev/mmcblk0p1 is mounted on /mnt/mmc

Hint: Is that error message included in the instructions?
What would that condition you just found be an indication of?

Hint:
If you where in the 'main' mode system, which partition would be mounted?
If you where in the 'diag' mode system, which partition would be mounted?

[root@[192_168_15_244] root]# cp /mnt/us/pubdevkey01.pem /mnt/mmc/etc/uks/
[root@[192_168_15_244] root]# umount /mnt/mmc

If you where not the one who mounted it - Then why did you unmount it here?

[root@[192_168_15_244] root]# idme -d --bootmode main
Devmode enabled
Reading vars from temp storage...
...None found, Copying vars from /proc
Setting bootmode to main
Writing new vars to temp area
You must reboot before new values will take effect
[root@[192_168_15_244] root]# reboot


I do all the instructions but the jailbreak is not installed (((

You obviously skipped an instruction in the numbered list.

The above hints should be enough for you to figure out which one you skipped.

Let Google Translate help you if required.

[twobob]

what do you mean "not installed". It is either THERE or it isn't.

Is the file there or not?

[sahara1974]

Sorry, could not understand. Google Translate translates incorrectly. I understand that you are referring me to an error in my actions. Right?

[sahara1974]

Originally Posted by twobob

what do you mean "not installed". It is either THERE or it isn't.

Is the file there or not?

Jailbreak is not installed. Do I understand that doing the above, I should see a jailbreak?

[knc1]

Originally Posted by sahara1974

Sorry, could not understand. Google Translate translates incorrectly. I understand that you are referring me to an error in my actions. Right?

You where not in 'diags' mode as the instructions tell you to be.

To answer twobob's question, do:
ls -l /mnt/mmc/etc/uks/
(that option is a lower case L)

Post the result.