How to launch a payload

To use CFW on a Switch you need some way of successfully injecting a payload which in turn can start CFW.
On this page you'll find informatin about how to launch a payload file on the Nintendo Switch. Payload files for the Swithc are .bin files, like fusee.bin which is Atmosphère's payload created to be a simple bootloader which only starts Atmosphère.

On this page:

• From RCM on an unpatched console
• From Hekate
• With a Modchip

From RCM on an unpatched console

On an unpatched Erista console it is possible to start CFW from RCM by injecting a custom payload file. To enter RCM you need to hold 3 buttons when you turn the console on, except you don't have the 3rd button. This is why you need to buy / make / borrow a "jig". Using a jig is like holding a button that's otherwise unavailable.

• Note: If you have a Switch which could be unpatched but you're unsure then this is safe to try. Worst case is the console is patched and nothing happens, and then you turn it off and on again.
• If you have previously enabled "auto RCM" on then you can just press the power button and the console will be in RCM, then go to step 2.

Step 1 - Choose your payload injector

Pick the type of payload injector you want to use:

• TegraRcmGUI (Windows)
  • Do not use the included payloads.
• NS-USBloader (Windows, Mac, & Linux)
• Web Fusée Launcher (Mac & Linux)
• Rekado (Android)
• NXBoot (iOS , requires a jailbroken device)
• Portable Payload Injector (Can be bought from almost any popular online electronics retailer)
  • Make sure to follow the documentation for your payload injector.

Step 2 - Entering RCM

• Power down your console and place the jig inside of the right railing.
  • You can either buy a jig from a popular online retailer, or make your own with metal wire or tinfoil.
    • The tinfoil method is not recommended as it could damage the pins in your rail, and even brick the console.
• Hold volume up () button and press the power button ().
  • Your Switch display will be black, do not panic, this is normal and means that you're booted into RCM.

Step 3 - Inject payload

• Pick your desired payload (like hekate_ctcaer_x.x.x.bin to start hekate) with your payload injector of choice and connect your Switch to your PC (or Android / iOS device).
  • If you use a portable payload injector, then you only need to connect your payload injector into your Switch.
• You should now launch into your desired payload.
  • NOTE: If that does not happen and TegraRgmGUI shows Smashed the stack with a 0x0000 byte SETUP request!. The console is patched.

From Hekate

Step 1 - Add your payload

• Place your desired payload in /bootloader/payloads/.

Step 2 - Use your payload

• Start Hekate by injecting its payload or restart to Hekate.
• Once in Hekate, press the payloads option and pick your desired payload.
• You will now boot into your desired payload.

With a Modchip

Most of the modchips attempts to use the file payload.bin from the root of the micro SD card.
The older chips made for SXOS were made to start boot.dat from the root of the micro SD card. The "SX Gear" boot.dat simply forwards to start payload.bin from root.

• Note: Mariko Users:
  Please ensure that the payload supports your device. As not all payloads support Mariko devices.
  If you are unsure on what type of device you may have, read Is my Switch hackable?.
  Or, in Hekate choose Console Info then HW & Fuses. On the top left of this page you can see SoC/SKU and you'll see Erista or Mariko mentioned.

Some modchips made for the Switch include SX Core & SX Lite modchips made for SXOS originally. And "HWFLY" and PicoFly modchips.

---

Step 0 - SX Core/lite users only

If you get a "BOOT.DAT?" screen this applies to you.

• SX Core / SX lite users pick one of these 2 options:
  • A: Flash the Spacecraft-NX firmware
  • B: Download SX Gear and extract into the root of your SD card
    • The SX Gear boot.dat includes a basic config file with the location of the payload used.

Step 1 - Get Hekate

• Download Hekate - Get it from Hekate's Github page
• Extract hekate_ctcaer_*.*.*_Nyx_*.*.*.zip to the root of your micro SD card

Step 2

• Rename hekate_ctcaer_x.x.x.bin to payload.bin.
• Place your desired payload in /bootloader/payloads/.

Step 3

• Put your micro SD card back in your Switch.
• Press the power button and you will launch into Hekate.
• Once in Hekate, press the payloads option and pick your desired payload.
• You will now boot into your desired payload.
• From now your Switch will start Hekate's payload when turned on and you can just add additional payloads to /bootloader/payloads/ as needed.

---

↵ Getting started | Homebrew & misc 🦝