A new update has been released for NxNandManager , the Windows PC application that allows us to copy the contents of the Switch console (full NAND or specific partition) from/to a file or a physical drive.

The tool supports EmuNAND/EmuMMC, although only the partition variant (which is still recommended). This can be shrunk or enlarged even beyond 26 GB, such as for the USER partition.

The application also displays the device ID, MAC address, and available FAT32 space for the SYSTEM and USER partitions if a valid key set exists.

With version 5.2.2, the project files have been updated to fix compilation, the file has been adjusted NxStorage.cppto reflect changes introduced in Switch firmware 20.1.5, and the workflows for automatically generating executable files have been modified.

However, there are still some known issues: some icons are still missing and the DLL libraries are not integrated into the main file, but are provided separately during the release.

Characteristics

Backup or restore any NAND (files or drives) on your Switch => full sysNAND, full emuNAND, boot partitions or user partitions.
Encrypt or decrypt the native encrypted partition (PRODINFO, PRODINFOF, SAFE, SYTEM and USER) using BIS keys.
Resize your NAND (USER partition only).
Retrieve and view useful information about your NAND file/drive (firmware version, device ID, exFat driver, S/N, etc..) using BIS keys.
Split dumps are fully supported (backup and restore). However, the program cannot split an existing dump nor can it split the output file in any case.
Option to delete console (aka incognito) unique IDs and certificates from PRODINFO.
Enable/Disable Auto RCM (BOOT0).
Create emuNAND (file or partition based) from any NAND image (RAWNAND or FULL NAND).
“Advanced copy” function (zero passthrough, split output, zip output, etc.).

Supported file format

It should be noted that the program does not check the file extension to detect whether a file is supported or not. It will look for a specific signature inside the binary data (magic number) when possible.

If the file is fully encrypted, the program will detect the type by checking the file name (without extension) and file size.

Therefore, a single (encrypted) partition file must be named after the partition name ( SAFE.bin, SAFE.encor SAFE.whateverit will work, SAFE_01.binit will not work).

Supported units

NxNandManager can detect physical drives that contain a valid NAND (or partition) such as a memloader drive (tool to mount the Nintendo Switch NAND on a computer) or an SD card containing an emuNAND partition (SX OS hidden partition or emuMMC partition).

How to Mount and Open NAND on Nintendo Switch

sysNAND or emuNAND (via Hekate)

Launch Hekate/Nyx (v5.2+) on your Switch console. Go to Tools > USB Tools.
Select “eMMC RAW GPP” (sysNand) or “emu RAW GPP” (emuNAND) to mount your NAND on the computer (you can mount BOOT0/BOOT1 separately). Set “Read-Only” to OFF if you want to perform recovery operations.
Open NxNandManager then open a new drive ( CTRL + D ).
Select the mounted drive. You can now perform backup/restore operations.

emuNAND (partition)

Mount the SD card containing the emuNAND into your computer.
Run NxNandManager then open a new drive ( CTRL + D ).
Select the drive labeled “FULL NAND”.

emuNAND (files)

Mount the SD card containing the emuNAND into your computer.
Run NxNandManager then open a new file ( CTRL + O ).
Open the first split emuNAND file (i.e. sdmmc:\emuMMC\SD00\eMMC\00for emuMMC or sdmmc:\sxos\emunand\full.00.binfor SX OS emuNAND).

Types of NxStorage

The following types are supported by NxNandManager:

Type	Description	It can be restored by:
BOOT0	BOOT0 partition (single file)	BOOT0 or FULL NAND (partial restore)
BOOT1	BOOT1 partition (single file)	BOOT1 or FULL NAND (partial restore)
PRODINFO	PRODINFO partition (single file). Also known as “CAL0”	PRODINFO or FULL NAND, RAWNAND (partial restore)
PRODINFOF	PRODINFO partition (single file)	PRODINFOF or FULL NAND, RAWNAND (partial restore)
BCPKG2-1-Normal-Main	Partition BCPKG2-1-Normal-Main (single file)	BCPKG2-1-Normal-Main or FULL NAND, RAWNAND (partial restore)
BCPKG2-2-Normal-Sub	Partition BCPKG2-2-Normal-Sub partition (single file)	BCPKG2-2-Normal-Sub or FULL NAND, RAWNAND (partial recovery)
BCPKG2-3-SafeMode-Main	BCPKG2-3-SafeMode-Main partition (single file)	BCPKG2-3-SafeMode-Main or FULL NAND, RAWNAND (partial restore)
BCPKG2-4-SafeMode-Sub	BCPKG2-4-SafeMode-Sub Partition (Single File)	BCPKG2-4-SafeMode-Sub or FULL NAND, RAWNAND (partial restore)
BCPKG2-5-Repair-Main	Partition BCPKG2-5-Repair-Main (single file)	BCPKG2-5-Repair-Main or FULL NAND, RAWNAND (partial restore)
BCPKG2-6-Repair-Sub	BCPKG2-6-Repair-Sub Partition (Single File)	BCPKG2-6-Repair-Sub partition or FULL NAND, RAWNAND (partial recovery)
SAFE	SAFE partition (single file)	SAFE or FULL NAND, RAWNAND (partial restore)
SYSTEM	SYSTEM partition (single file)	SYSTEM or FULL NAND, RAWNAND (partial restore)
USER	USER partition (single file)	USER or FULL NAND, RAWNAND (partial restore)
RAWNAND	RAWNAND contains: – GPT (partition table) – PRODINFO – PRODINFOF – BCPKG2-1-Normal-Main – BCPKG2-2-Normal-Sub – BCPKG2-3-SafeMode-Main – BCPKG2-4-SafeMode-Sub – BCPKG2-5-Repair-Main – BCPKG2-6-Repair-Sub – SAFE – SYSTEM – USER – GPT backup	RAWNAND or FULL NAND or any valid partition (partial recovery)
FULL NAND	FULL NAND contains – BOOT0 – BOOT1 – GPT (partition table) – PRODINFO – PRODINFOF – BCPKG2-1-Normal-Main – BCPKG2-2-Normal-Sub – BCPKG2-3-SafeMode-Main – BCPKG2-4-SafeMode-Sub – BCPKG2-5-Repair-Main – BCPKG2-6-Repair-Sub – SAFE – SYSTEM – USER – GPT backup	FULL NAND or RAWNAND (partial recovery) or any valid partition (partial recovery)

How long does it take to backup or restore NAND?

Of course, performance is highly dependent on hardware and drive limitations. For example, if you perform backup/restore operations on a drive mounted via “memloader”, the transfer speed will be very slow, due to the limitations of the memloader.

That said, transfer speed will be slowed down if you choose to encrypt or decrypt your data. Data integrity validation (MD5 hash) can also impact transfer speed.

Compatibility

Note: All dumps made with Hekate are supported by NxNandManager (and vice versa).

NxNandManager also supports split dumps, such as SX OS (emu) NAND dumps.

Split file names should be:
basename[00->99].(bin|.*)o basename[0->9].(bin|.*)o basename.[0->∝]
Set the first split file as input.

CLI Usage

NxNandManager.exe [--list] -i inputFilename|\\.\PhysicalDriveX [-o outputFilename|\\.\PhysicalDriveX] [-part=nxPartitionName] [--info] [--enable_autoRCM] [--disable_autoRCM] [--incognito] [-user_resize=n] [Flags]

Subjects	Description
-the	Path to the input file or physical drive. Input must be a valid NxStorage type (RAWNAND, FULL NAND, BOOT0, BOOT1, SYSTEM, etc.).
-or	Path to the output file or physical drive. If the output is a valid NxStorage, the program will restore the output from the input.
-part=	Partitions to copy (if possible, apply to both input and output). Use a comma (“,”) separated list to provide multiple partitions. Possible values are PRODINFO, PRODINFOF, SAFE, SYSTEM, USER, BCPKG2-2-Normal-Sub, BCPKG2-3-SafeMode-Main, etc. (see –info) You can use “-part=RAWNAND” to unload RAWNAND from the FULL NAND input type
-d	Decrypt contents (-keyset required). Only valid for RAWNAND, FULL NAND, PRODINFO, PRODINFOF, SAFE, SYSTEM & USER.
-And	Encrypt contents (-keyset required). Only valid for RAWNAND, FULL NAND, PRODINFO, PRODINFOF, SAFE, SYSTEM & USER.
-keyset	Path to a file containing the bis keys.
-user_resize=	Size in Mb for the new output USER partition. Applies only to RAWNAND or FULL NAND input type. Use the FORMAT_USER flag to format the partition during copy. USER GPT and FAT will be changed. output (-o) must be a new file.
–gui	Launch graphical user interface (optional).
–info	Display input/output information (depends on NAND type): NAND type, partitions, encryption, autoRCM status… … more information when given -keyset: firmware ver., S/N, device ID, etc…
–list	List compatible physical drives`
–incognito	Delete all unique console IDs and certificates from CAL0 (aka incognito). Only applies to RAWNAND or PRODINFO partition of type input.
–enable_autoRCM	Enable autoRCM. -i must point to a valid BOOT0 file/drive.
–disable_autoRCM	Disable autoRCM. -i must point to a valid BOOT0 file/drive.

Flag	Description
BYPASS_MD5SUM	Used to bypass all md5 checks. Dump/Restore is faster but less secure.
FORCE	The program will never ask for user confirmation.
FORMAT_USER	To format the USER partition (-user_resize argument is required)

Examples

Download complete NAND to file

- From physical disk (first you need to mount NX eMMC with memloader (via TegraRcmGUI for example):.\NxNandManager.exe -i \\.\PhysicalDrive3 -o "C:\Users\Public\NAND dump\rawnand.bin"
- From existing dump file: .\NxNandManager.exe -i "C:\Users\Public\NAND dump\rawnand.bin" -o D:\rawnand2.bin

Dump specific partitions to file

Dump the SYSTEM partition from the physical drive:.\NxNandManager.exe -i \\.\PhysicalDrive3 -o "C:\Users\Public\NAND dump\SYSTEM.bin" -part=SYSTEM
Extract the PRODINFOF partition from the existing dump file:.\NxNandManager.exe -i "C:\Users\Public\NAND dump\rawnand.bin" -o D:\PRODINFOF.bin -part=PRODINFOF

Restore NAND Dump

Restore the entire raw NAND memory to the physical drive:.\NxNandManager.exe -i "C:\Users\Public\NAND dump\rawnand.bin" -o \\.\PhysicalDrive3
Restore split raw NAND memory to physical drive:.\NxNandManager.exe -i "C:\Users\Public\NAND dump\full00.bin" -o \\.\PhysicalDrive3
Restore specific partition on physical drive: . \NxNandManager.exe -i "C:\Users\Public\NAND dump\rawnand.bin" -o \\.\PhysicalDrive3 -part=PRODINFOor.\NxNandManager.exe -i "C:\Users\Public\NAND dump\PRODINFO" -o \\.\PhysicalDrive3 -part=PRODINFO

Copy partition from file to rawNand file

Copy the specific partition from the rawNand file:.\NxNandManager.exe -i "C:\Users\Public\NAND dump\rawnand.bin" -o "C:\Users\Public\NAND dump\rawnand2.bin" -part=BCPKG2-1-Normal-Main
Copy specific partition from partition file:.\NxNandManager.exe -i "C:\Users\Public\NAND dump\BCPKG2-1-Normal-Main" -o "C:\Users\Public\NAND dump\rawnand2.bin" -part=BCPKG2-1-Normal-Main

NAND Decryption/Encryption (AES-XTS)

NxNandManager can decrypt or encrypt NAND file/drive (rawnand or encrypted partition file “PRODINFO”, “SAFE”, “SYSTEM”, etc..).

[stextbox id=’info’]Note: You must provide a keyset file containing biskeys.[/stextbox]

Use the argument -dto decrypt, -eto encrypt.

Keys can be supplied by the argument -keysetto the keyset file name. The program can analyze keyset files created with biskeydump or lockpick:

BIS Key 0 (crypt): <16-byte hex key>
BIS Key 0 (tweak): <16-byte hex key>
...

bis_key_00 = <32-byte hex key>
bis_key_01 = <32-byte hex key>
...

When given -keysetand arguments --info, the program can also retrieve some useful information, such as firmware version, exFat driver, last boot time, etc…

Examples

Decipher the complete rawnand:
NxNandManager.exe -i rawnand.bin -o rawnand.dec -d -keyset keys.dat

Decrypt single partition file:
NxNandManager.exe -i PRODINFO -o PRODINFO.dec -d -keyset keys.dat

Encrypt single partition files:
NxNandManager.exe -i PRODINFO.dec -o PRODINFO.enc -e -keyset keys.dat

Decrypt and recover a single partition file on physical drive:
NxNandManager.exe -i PRODINFO.dec -o \\.\PhysicalDrive3 -part=PRODINFO -e -keyset keys.dat

Encrypt and restore complete rawnand:
NxNandManager.exe -i rawnand.dec -o \\.\PhysicalDrive3 -e -keyset keys.dat