# Tegra Jailbreak USB An all-in-on package for Tegra based Windows RT tablets (ASUS VivoTab RT, Lenovo IdeaPad Yoga 11, Microsoft Surface RT & Microsoft Surface 2) which will enable them to run third party applications under Windows RT or to boot alternative operating systems. {% hint style="warning" %} As of August 2024 Yahallo has been detected as a threat by numerous antivirus vendors, as a result a threat notification may be received from antivirus software when attempting to download and extract any archive containing [Yahallo.efi](https://www.virustotal.com/gui/file/eeb8c556d3e96b8e2299308b6d42a6fffe366f394bfcfe514665f6a8f0091df4) or [YahalloUndo.efi](https://www.virustotal.com/gui/file/b4937d97ce9999fd382c37144e20acca6644dc65aafcf3eed9043bc2774b5c78). {% endhint %} ## Requirements * A Tegra based Windows RT device with a cleared eMMC or a Windows RT 8.1 installation that has not been updated beyond October 2016. Updates released after this date contain "[Jailbreak Killing](#jailbreak-killing-updates)" updates that will prevent installation**.** * 8MB+ USB Drive. ## Download Download the Tegra Jailbreak USB files from the link below.\ \ Download: ~~Archive.org~~ / [Mega.nz](https://mega.nz/file/UjkUVZBI#mLH3BSUk18UT6YC3KMhM5ExWug-LaQsy66XnWS6slh4) - Version 1.61 - 31st July 2024 {% file src="" %} Tegra Jailbreak USB Files {% endfile %} ## Extract {% hint style="danger" %} This will permanently delete any data stored on the USB drive. {% endhint %} 1. Format a USB drive as FAT32. 2. Right click on the downloaded file and select "Extract All..." 3. Select a destination for the extracted files. 4. Click "Extract". ![Selecting and formatting USB drive](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/P4XPr0humfZxJ9Q94VJe/Surface_JB_Boot_FormatStages.png) ![Extracting Zip file to USB drive](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/C5kb2vwRsmhQfiUX7fyN/Surface_JB_USB_Extract.PNG) ![Expected contents of USB drive after extraction](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/FTADpMFSQmEKoQlIBhLg/Surface_JB_USB_Extracted.PNG) ## **Apply Jailbreak** {% hint style="danger" %} The use of the Tegra Jailbreak USB is entirely at your own risk. {% endhint %} ### Disabling Secure Boot {% tabs %} {% tab title="With Keyboard" %} {% hint style="info" %} The **Surface RT** requires the use of a USB hub and external keyboard, Touch/Type Covers are not supported. {% endhint %} 1. **Install Golden Keys**
1. Insert Jailbreak USB into the devices USB port. 2. [Boot from USB](https://windows-rt-devices.gitbook.io/windows/miscellaneous/boot-from-usb). 3. Once the devices UEFI logo appears release any buttons that are held. 4. Using Arrow Keys select "Install Golden Keys" and press Enter. 5. Use the Arrows Keys to highlight "Accept and Install" and press Enter.

After selecting "Accept and Install" to continue or "Decline" to cancel the device will reboot automatically.

2. **Install Yahallo**
1. Insert Jailbreak USB into the devices USB port. 2. [Boot from USB](https://windows-rt-devices.gitbook.io/windows/miscellaneous/boot-from-usb). 3. Once the devices UEFI logo appears release any buttons that are held. 4. Using Arrow Keys select "Install Yahallo" and press Enter.

When "Uninstall Golden Keys" is selected from the boot menu the device will reboot automatically and will not prompt for confirmation.

3. **Uninstall Golden Keys**
1. Insert Jailbreak USB into the devices USB port. 2. [Boot from USB](https://windows-rt-devices.gitbook.io/windows/miscellaneous/boot-from-usb). 3. Once the devices UEFI logo appears release any buttons that are held. 4. Using Arrow Keys select "Uninstall Golden Keys" and press Enter.

When "Uninstall Golden Keys" is selected from the boot menu the device will reboot automatically and will not prompt for confirmation.

{% endtab %} {% tab title="Without Keyboard" %} {% tabs %} {% tab title="From Windows RT 8.1" %} 1. **Install Golden Keys**
1. Insert Jailbreak USB into the devices USB port. 2. Run "Jailbreak\_USB\_Menu.cmd" as administrator. 3. Select Option 1 (Sets default USB Boot entry to "Install Golden Keys"). 4. Select Option B (Sets device to boot from USB on next reboot). 5. Select Option R (Reboots device). 6. Wait for the boot menu countdown to complete. 7. Use the Volume Keys to highlight "Accept and Install". 8. Use the Windows Key on the on device to confirm.

After selecting "Accept and Install" to continue or "Decline" to cancel the device will reboot automatically.

2. **Install Yahallo**
1. Insert Jailbreak USB into the devices USB port. 2. Run "Jailbreak\_USB\_Menu.cmd" as administrator. 3. Select Option 3 (Sets default USB Boot entry to "Install Yahallo"). 4. Select Option B (Sets device to boot from USB on next reboot). 5. Select Option R (Reboots device). 6. Wait for the boot menu countdown to complete. 7. When prompted press and hold the Power button to power off the device.

When "Install Yahallo" is selected from the boot menu Yahallo will launch automatically and will not prompt for confirmation.

3. **Uninstall Golden Keys**
1. Insert Jailbreak USB into the devices USB port. 2. Run "Jailbreak\_USB\_Menu.cmd" as administrator. 3. Select Option 2 (Sets default USB Boot entry to "Uninstall Golden Keys"). 4. Select Option B (Sets device to boot from USB on next reboot). 5. Select Option R (Reboots device). 6. Wait for the boot menu countdown to complete.

When "Uninstall Golden Keys" is selected from the boot menu the device will reboot automatically and will not prompt for confirmation.

{% endtab %} {% tab title="Configuring Jailbreak USB From Another Device" %} {% hint style="info" %} See [USB Boot Menu Navigation](#usb-boot-menu-navigation) for details on using "Jailbreak\_USB\_Menu.cmd". {% endhint %} 1. **Install Golden Keys**
1. Insert Jailbreak USB into the device you are using to set its configuration. 2. Run "Jailbreak\_USB\_Menu.cmd" as administrator. 3. Select Option 1 (Sets default USB Boot entry to "Install Golden Keys"). 4. Eject the jailbreak USB. 5. Insert Jailbreak USB into the target devices USB port. 6. [Boot from USB](https://windows-rt-devices.gitbook.io/windows/miscellaneous/boot-from-usb). 7. Once the devices UEFI logo appears release any buttons that are held. 8. Wait for the boot menu countdown to complete. 9. Use the Volume Keys to highlight "Accept and Install". 10. Use the Windows Key on the on device to confirm.

After selecting "Accept and Install" to continue or "Decline" to cancel the device will reboot automatically.

2. **Install Yahallo**
1. Insert Jailbreak USB into the device you are using to set its configuration. 2. Run "Jailbreak\_USB\_Menu.cmd" as administrator. 3. Select Option 3 (Sets default USB Boot entry to "Install Yahallo"). 4. Eject the jailbreak USB. 5. Insert Jailbreak USB into the target devices USB port. 6. [Boot from USB](https://windows-rt-devices.gitbook.io/windows/miscellaneous/boot-from-usb). 7. Once the devices UEFI logo appears release any buttons that are held. 8. Wait for the boot menu countdown to complete. 9. When prompted press and hold the Power button to power off the device.

When "Install Yahallo" is selected from the boot menu Yahallo will launch automatically and will not prompt for confirmation.

3. **Uninstall Golden Keys**
1. Insert Jailbreak USB into the device you are using to set its configuration. 2. Run "Jailbreak\_USB\_Menu.cmd" as administrator. 3. Select Option 2 (Sets default USB Boot entry to "Uninstall Golden Keys"). 4. Eject the jailbreak USB. 5. Insert Jailbreak USB into the target devices USB port. 6. [Boot from USB](https://windows-rt-devices.gitbook.io/windows/miscellaneous/boot-from-usb). 7. Once the devices UEFI logo appears release any buttons that are held. 8. Wait for the boot menu countdown to complete.

When "Uninstall Golden Keys" is selected from the boot menu the device will reboot automatically and will not prompt for confirmation.

{% endtab %} {% endtabs %} {% endtab %} {% endtabs %} #### Confirming Secure Boot Is Disabled Assuming no errors have occurred Secure Boot is now disabled on your device. If an operating system is present this can be verified by running "msinfo32.exe" once booted into Windows. ![msinfo32.exe showing Secure Boot is disabled](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/jjuEgkc3DIzHzi4MZynN/Surface_JB_USB_msinfo32.PNG) ### Windows Configuration {% hint style="info" %} These steps are only required for users who wish to run third party applications under Windows RT 8.1, users who wish to run Windows 10 or Linux can ignore these steps. {% endhint %} Once Secure Boot is confirmed to be disabled complete one of the following steps: {% tabs %} {% tab title="Enabling UMCI Audit Mode (Recommended)" %} {% hint style="info" %} Third party applications are not required to be signed in any way when UMCI Audit Mode is enabled and no watermark will be displayed on the desktop. Files that have been previously signed will continue to work normally. {% endhint %} 1. Launch "Jailbreak\_USB\_Menu.cmd" from the Jailbreak USB. 2. Select Option 8 (Enable UMCI Audit Mode) and wait for confirmation. 3. Select Option R (Reboot). If UMCI Audit Mode has been successfully enabled it will now be possible to run unsigned executables on Windows RT 8.1. ![Windows RT 8.1 running unsigned Winfile executable (Ported to ARM by @never\_released).](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/95WZypN5Hl6tR5kZ66z2/Winfile_Unsigned_UMCI.PNG) {% file src="" %} {% endtab %} {% tab title="Enabling Test Mode (Alternative)" %} {% hint style="warning" %} Third party applications are required to be test signed when running under Test Mode. See the [SignTool](https://windows-rt-devices.gitbook.io/windows/tools/signtool) page for further information. {% endhint %} 1. Launch "Jailbreak\_USB\_Menu.cmd" from the Jailbreak USB. 2. Select Option 6 (Enable Test Signing) and wait for confirmation. 3. Select Option R (Reboot). If Test Mode has been successfully enabled the Test Mode watermark will be visible it will now be possible to run test signed executables on Windows RT 8.1. The Test Mode watermark may not be shown if Windows is not activated. ![Windows RT 8.1 running test signed Winfile executable (Ported to ARM by @never\_released).](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/i2iXlY1IBNgbW8zcmfWS/Winfile_Signed_TestMode.PNG) {% file src="" %} {% endtab %} {% endtabs %} ## Troubleshooting ### Jailbreak Killing Updates When configuring the boot options to "Install Golden Keys" on the device to be jailbroken, a warning will be provided if the installation would fail due to the presence of "Jailbreak Killing" updates. ![Configuration Menu "Jailbreak\_USB\_Menu.cmd" warning of "Jailbreak Killing" updates](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/9rX12Lq6nARuOmZAg0au/Surface_JB_USB_GoldenKeysWarning0.PNG) If the device has a Windows RT 8.1 installation that has been updated beyond October 2016 the options are either attempting to manually remove the "Jailbreak Killing" updates, restore the device using a [Bare Metal Recovery](https://windows-rt-devices.gitbook.io/windows/miscellaneous/bare-metal-recovery) image (Restoring from the Recovery Partition will not work) or to clear the eMMC. {% hint style="info" %} If the device had a Windows RT 8.1 installation that was updated past October 2016 at some point and was later reset using the built in Recovery Partition then the device will still be patched against Golden Keys but no error will be reported. {% endhint %} The fastest and most reliable method in all cases is to clear the eMMC from the command prompt. 1. Follow the instructions on the [Clearing eMMC](https://windows-rt-devices.gitbook.io/windows/miscellaneous/clearing-emmc) page. 2. The device is now cleared of all data and Jailbreak can be attempted again. ### Unsupported UEFI Attempting to run Yahallo on a device with an unsupported UEFI will result in an error message when booting Yahallo. When configuring the boot options to "Install Yahallo" on the device to be jailbroken, a warning will be provided if the UEFI is not supported by Yahallo and provide an option to install a supported version if one is available. {% hint style="info" %} Installing a UEFI update will require a Windows RT 8.1 installation on the device. {% endhint %} ![Configuration Menu "Jailbreak\_USB\_Menu.cmd" offering UEFI Update](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/NzVQVLVjqIe3jB9juuer/Surface_JB_USB_UEFIUpdate0.PNG) ![UEFI Update complete](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/PyUC81wEYWbiRzJoiQi6/Surface_JB_USB_UEFIUpdate1.PNG) ### Digital Signature Error If Status Code 0xc0000428 is displayed when attempting to install Yahallo (Windows cannot verify the digital signature for this file.) then see [Jailbreak Killing Updates](#jailbreak-killing-updates) and once resolved [try again](#apply-jailbreak). ### USB Boot Failed If the USB drive does not boot on the target device try the following steps: 1. Follow the instructions on the [Format USB Drive](https://windows-rt-devices.gitbook.io/windows/miscellaneous/format-usb-drive) page. 2. [Extract](#extract) again starting at Step 2. ## **USB Boot Menu Navigation** If a keyboard is not available then running "Jailbreak\_USB\_Menu.cmd" on the USB drive will offer configuration choices (Boot Defaults) to automate what will happen when the target device is booted from the Jailbreak USB drive. {% hint style="info" %} Setting "Boot Defaults" using "Jailbreak\_USB\_Menu.cmd" can be done on any Windows device however the options under "Settings" and "Misc" and the Status Indicators will only appear on Tegra based device running Windows RT 8.1. {% endhint %} ![Configuration Menu "Jailbreak\_USB\_Menu.cmd" running on a Surface (ARM)](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/7SpgRsL6RpLH9gO51YRx/Surface_JB_USB_MenuARM.PNG) ![Configuration Menu "Jailbreak\_USB\_Menu.cmd" running on a Desktop PC (x86/x64)](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/a4dVHRPRkc5e67wPKBRL/Surface_JB_USB_Menu.PNG) The boot default can be set to Install Golden Keys, Uninstall Golden Keys, Install Yahallo and Uninstall Yahallo. The default Boot Menu Timeout can also be modified to any duration the user requires, by default it is set to 30 seconds. Once the the countdown is complete the selected action will automatically run. {% hint style="info" %} When interacting with the Windows Boot Manager the **Surface RT** requires the use of a USB hub and external keyboard, Touch/Type Covers are not supported. {% endhint %} The **Windows Key** and **Volume Buttons** should only be used when selecting "Accept and Install" or "Decline" on the **Install Golden Keys** confirmation page only. Attempting to use the **Windows Key** or **Volume Buttons** for any Windows Boot Manager navigation on either device will cause the automatic countdown to stop. ![USB Boot Menu](https://content.gitbook.com/content/g0WEvpZgMwlYVwyBqPep/blobs/xG9i6rf0kxAjCEiqV7Mi/Surface_JB_Boot_Menu.png) ## Credits * Yahallo - @imbushuo * Yahallo - Additional Device Support - @Jeybee * Yahallo - Undo Support - @Leander * Golden Keys - @never\_released & TheWack0lian * GoldenKeysUSB - @lgibson02 * WinFile.exe ARM Port - @never\_released * Configuration Menu & Guide - @jwa4 --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://windows-rt-devices.gitbook.io/windows/tools/tegra-jailbreak-usb.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.