14 July 2019

Unlock iPad Apple ID Guide - iPad Pro 12.9 | Unlock ID iPad

First of all, if you found any lost device, please return to owner.

If for some reason, you need help, but Apple doesn't help you.
Then you can find a PRO to do this. 

iPad Pro 12.9 4G
Tips: Cellular version of iPad and WiFi Version iPad does not unlock the same way.

and today my topic is "How to unlock an iPad Pro 12.9 Cellular version".

First, I let you know how Apple ID lock works, or I should say how activation server works.

The device locked status is not based on memory inside or the hardware. Means no matter how you reformat or reset the software, it's still unable to activate.
Because to activate, the server will check your device's IMEI, Serial Number and more. So it's their server that preventing you from unlocking it.

Methods to Unlock Apple ID / Bypass Activation

Method 1 - If you are a pro hacker, then hack their server, but I think the FBI will arrive at your doorstep. By the way, a few years ago they fired many Apple insiders that offer unlock under the table.

Method 2 - Why not we reprogram the IMEI and serial number to fool the server?
Yes. But as I said before, the server will check the information of the device, if it's not in their list, then it can't be activated. No random typing allow.  

But what if I have a legit IMEI and SN (Serial Number) which is from another device?
Yes, it will work if that SN is not in locked status, or we own that Apple ID.
But reprogram the IMEI is not possible. Because IMEI is stored in Baseband CPU which we don't have any tools to hack in. And it's purely hardware and unprogrammable.  
(Baseband CPU is a long story to explain, I might write another article for it)

But the SN is possible, as I said before in other topics, Apple doesn't own any factory to make Memory or Hard Disk - and the iPhone and iPad are using NAND flash memory.
This is why we can use NAND programming tools to re-write it. But only the SN can change.
If we just change SN, but the IMEI is still remaining same, the server will still be blocking you to activate.

It means only the device that has IMEI is iPads SIM card models 
(iPad cellular) or the iPhone.

So if we just reprogram the SN on iPads WiFi models, it can be unlocked. 

What about iPads Cellular version?
Easy, we just disable the Baseband (SIM card function) and then convert the iPad cellular to become a WiFi model. After that then change the SN, and it's done.

If so, then the iPhone can do?
No. Because if you disable it on the iPhone, then it's not a phone anymore. You lost the SIM function means you spoiled the phone. They won't let you activate a brick.

So back to the topic...

How to Unlock the Cellular version iPad Pro 12.9 4G

The first thing is we need to remove a resistor on the motherboard and that will change the iPad become a WiFi version.
How to convert iPad Pro 12.9 4G to WiFi

But don't restore it yet.

iPad Pro 12.9 4G logicboard
Take the whole board out of the housing.
Why? Because we need to remove the NAND to reprogram it.

Tips: Be careful removing the NAND IC, you sure don't want overheat affected RAM or CPU and end up unable to power on or 4014 error.  Only professional like me can re-ball the CPU and RAM.
So I advise you cut the shield that will absorb the heat away. Shield causing you to take longer time remove it.

After you removed the NAND, put into NAND programming tool to write a new SN, WiFi, and BT address. This 3 info will be verified by activation server. If one of it is incorrect or it doesn't come from the same device, then you will be still unable to activate. Remember, click unbind the WiFi too. 

Then solder the NAND back to the logic board. 

You think you're done?
No, not yet.
Because the Cellular model and WiFi model's WiFi chipset is not the same. 
The WiFi button will be grey out, WiFi cannot be turned on until we change a correct WiFi chipset for it. 

iPad Pro 12.9 WiFi IC code
So we need to buy the WiFi model's WiFI IC to replace it.
Tips: the chipset code end with 0045.

Remove the WiFI IC is straightforward. You can heat this area very high temp.
Tips: But when you mount the new WiFi IC back, be sure use lower temp. Else the chipset itself will get shorted.
Finally, assemble the board and everything.
Connect into iTunes. Click Restore. It will download an iPad WIFI version firmware to restore.

Voila, it's done!
Tips: Always censored the SN. Because there might surprise people like my skill will use your SN. You'll be screw if you haven't log in Apple ID on it.

iPad remove iCloud

Q: Can I still update the iOS in the future?
A: Yes

Q: Can I use a new Apple ID after that?
A: Yes

Q: Will the "ex-owner" able to track it by GPS?
A: No. The whole device becomes a new device.

Q: Why they didn't block this kind of unlocking?
A: So far they won't. Because this method is very extreme and only the PRO with skill and tools can do it.