Editing QA Flagging

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
{{Wikify}}
[[Category:Software]]
= QA Flag =
= QA Flag =
A QA flag is a value set in [[SC EEPROM]] at address 0x48C0A. When this flag is set, the token is read from SYSCON and decrypted, this gets passed to various modules to unlock certain functionality.
A QA flag is a value set in [[SC EEPROM]] at address 0x48C0A. When this flag is set, the token is read from SYSCON and decrypted, this gets passed to various modules to unlock certain functionality.
Line 10: Line 10:


<pre>
<pre>
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
0x00, 0x00, 0x00, 0x01, 0x00, 0x11, 0x22, 0x33,
 
0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xAA, 0xBB,
00000000  00 00 00 01 00 11 22 33 44 55 66 77 88 99 AA BB
0xCC, 0xDD, 0xEE, 0xFF, 0x00, 0x00, 0x00, 0x00,
00000010  CC DD EE FF 00 00 00 00 00 00 00 00 00 00 00 00
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
00000020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
00000030  00 00 00 00 00 00 00 00 00 00 00 00 19 4A 4B BA
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
00000040  15 97 AE 71 36 CC B6 65 7F C3 B5 3F 49 22 2F B1
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x19, 0x4A, 0x4B, 0xBA,
0x15, 0x97, 0xAE, 0x71, 0x36, 0xCC, 0xB6, 0x65,
0x7F, 0xC3, 0xB5, 0x3F, 0x49, 0x22, 0x2F, 0xB1
</pre>
</pre>


Line 25: Line 28:
| 0x00 || 0x4 || 0x01 || QA-Flag Version
| 0x00 || 0x4 || 0x01 || QA-Flag Version
|-
|-
| 0x04 || 0x10 || 0x00112233445566778899AABBCCDDEEFF || [[IDPS]]
| 0x04 || 0x14 || 0x112233445566778899AABBCCDDEEFF || [[IDPS]]
|-
| 0x14 || 0x20 || 0x00 || [[#Token Flags|Token Flags]]
|-
|-
| 0x34 || 0x8 || 0x00 || padding
| 0x14 || 0x3C || 0x00 || [[#Token Flags|Token Flags]]
|-
|-
| 0x3C || 0x14 || 0x194A4BBA1597Ae7136CCB6657FC33F49222FB1 || digest
| 0x3C || 0x50 || 0x194A4BBA1597Ae7136CCB6657FC33F49222FB1 || digest
|}
|}


Line 39: Line 40:


== Token Flags ==
== Token Flags ==
The flags are a 32 (0x20) bytes value containing a set of flags that enable specific features on the PS3 console. These flags are largely unknown.
The flags are a 40 byte value containing a set of flags that enable specific features on the PS3 console. These flags are largely unknown.


{|class="wikitable"
{|class="wikitable"
|-
|-
! Location !! Value (Binary OR assigned) !! Description
! Location !! Value (Binary OR assigned) !! Description
|-
| 0x14 byte(21) || 2 bytes || BDP CONTROL - Checked by appldr, isoldr.
0x1 DEH_DEBUG_DISABLE<br>
0x2 DEX_DEBUG_DISABLE<br>
0x4 ALL_DEBUG_DISABLE<br>
0x8 DEH_BOOT_ENABLE<br>
0x10 DEX_BOOT_ENABLE<br>
0x20 CEX_BOOT_ENABLE<br>
0x40 ARCADE_BOOT_ENABLE
|-
| 0x16 byte(23) || 2 bytes || CONNECT_CONTROL - Checked by appldr, isoldr.
0x1 DEH_DEBUG_DISABLE<br>
0x2 DEX_DEBUG_DISABLE <br>
0x4 ALL_DEBUG_DISABLE<br>
0x8 DEH_BOOT_ENABLE <br>
0x10 DEX_BOOT_ENABLE <br>
0x20 CEX_BOOT_ENABLE <br>
0x40 ARCADE_BOOT_ENABLE<br>
|-
| 0x24 byte(36) || 0x1 / 0x2 / 0x4 / 0x8 || QA_FLAG_RESERVED_FOR_VSH
|-
| 0x24 byte(36) || 0x1 || QA_FLAG_RESERVED_FOR_VSH0
|-
| 0x24 byte(36) || 0x2 || QA_FLAG_RESERVED_FOR_VSH1
|-
| 0x24 byte(36) || 0x4 || QA_FLAG_RESERVED_FOR_VSH2
|-
| 0x24 byte(36) || 0x8 || QA_FLAG_RESERVED_FOR_VSH3
|-
|-
| 0x27 byte(39) || 0x1 ||  QA_FLAG_EXAM_API_ENABLE
| 0x27 byte(39) || 0x1 ||  QA_FLAG_EXAM_API_ENABLE
|-
|-
| 0x27 byte(39) || 0x2 ||  QA_FLAG_QA_MODE_ENABLE
| 0x27 byte(39) || 0x2 ||  QA_FLAG_QA_MODE_ENABLE
|-
| 0x2B byte(43) || 0x1 || System Debug (lv1ldr decrypts token and send it to lv0, lv0 sets sys.ac.sd repo node)
|-
| 0x2B byte(43) || 0x2 || LV2 System App Debug
|-
|-
| 0x2C byte(44) || 0x9 || Advanced Token Flag!!
| 0x2C byte(44) || 0x9 || Advanced Token Flag!!
|-
|-
| 0x2F byte(47) || 0x1 / 0x2 / 0x3 / 0x4 ||  QA-Token-Flag: (0x01 : Minimum) (0x02 : Advanced) (0x03 : undocumented)  
| 0x2F byte(47) || 0x1 / 0x2 / 0x3 ||  QA-Token-Flag: (0x01 : Minimum) (0x02 : Advanced) (0x03 : undocumented)  
|-
|-
| 0x2F byte(47) || 0x1 || QA_FLAG_SPECIAL_I
| 0x2F byte(47) || 0x4 || checked by lv2_kernel.self and sys_init_osd.self maybe allows sys_init_osd.self to run from /app_home
it allows isoldr(and may be other loaders) to use second key_table
|-
|-
| 0x2F byte(47) || 0x2 || QA_FLAG_ALLOW_TEST_APP
| 0x33 byte(51) || 0x1 || QA_FLAG_ALLOW_NON_QA
|-
| 0x2F byte(47) || 0x4 || QA_FLAG_ALLOW_REMOTE_SPAWN
internal mode(QA flag minimum or advanced): Allows lv2_kernel.self to run sys_init_osd.self, liblv2.sprx and sys_init_osd.self to run vsh.self and sys_audio.self from /app_home/
|-
| 0x33 byte(51) || 0x1 || QA_FLAG_ALLOW_NON_QA  
special execution mode: Allows sys_init_osd.self to run either 2nd_image_writer.self or cellftp.self (copy_script.txt), setmonitor.self (monitor.conf) and lv2diag2.self to run from /dev_usb000/
<!-- there's also a 2nd way to launch lv2diag2.self and a way to launch /app_home/uinit_app.elf instead of sys_agent.self ???-->
|-
|-
| 0x33 byte(51) || 0x2 || QA_FLAG_FORCE_UPDATE
| 0x33 byte(51) || 0x2 || QA_FLAG_FORCE_UPDATE
updates to any firmware, ignoring version checks
|}
|}


Line 118: Line 78:
  Type it into my app in the format I provided, click the button, and run that command. Should work.  
  Type it into my app in the format I provided, click the button, and run that command. Should work.  
  [http://www.multiupload.com/N3365C67ZT Tokenator.7z (26.42 KB)]
  [http://www.multiupload.com/N3365C67ZT Tokenator.7z (26.42 KB)]
[https://mega.co.nz/#!ogMSUADB!WF274UWZDKIszA-5hwkTPgfVL5FOq8KuZ_k52o82564 Tokenator mirror(with src included)]
  [http://psx-scene.com/forums/f149/qa-flags-discussion-86504/index92.html#post842118 Slynk]
  [http://psx-scene.com/forums/f149/qa-flags-discussion-86504/index92.html#post842118 Slynk]


Line 153: Line 112:


=== Getting the QA flag menu ===
=== Getting the QA flag menu ===
Set your cursor '''on''' (not ''in'') Network Settings and press the key combo (all at the same time): {{dpadd}} + {{padl1}} + {{padl2}} + {{padr1}} + {{padr2}} + {{padl3}}
<div style="float:right">[[File:PS3-sixaxis-dualshock-controller-buttons.gif|200px|thumb|left|PS3 Sixaxis + dualshock - controller - buttons]]</div>
 
Set your cursor on Network Settings and press the key combo (all at the same time):
<pre>L1 + L2 + L3 (press left stick) + R1 + R2 + dpad_down</pre>


You should see Edy Viewer, Debug Settings, and Install Package Files if done correctly.
You should see Edy Viewer, Debug Settings, and Install Package Files if done correctly.
Line 170: Line 132:
*Prebuild packages :
*Prebuild packages :
http://store.brewology.com/ahomebrew.php?brewid=214
**[http://gitbrew.org/~glevand/ps3/pkgs/qa_flag.pkg qa_flag.pkg] // (mirror:[http://www.multiupload.com/P5Q2R5R1YG qa_flag.pkg (69.92 KB)]) (to enable QA)
**[http://gitbrew.org/~glevand/ps3/pkgs/qa_flag.pkg qa_flag.pkg] // (mirror:[http://www.multiupload.com/P5Q2R5R1YG qa_flag.pkg (69.92 KB)]) (to enable QA)
**[http://gitbrew.org/~glevand/ps3/pkgs/qa_flag_extra.pkg qa_flag_extra.pkg] // (mirror:[http://psx-scene.com/forums/attachments/f177/37188d1345489767-help-finding-qa-flag-extra-qa_flag_extra.pkg qa_flag_extra.pkg (69.98 KB)]) (to enable QA with downgrade)
**[http://gitbrew.org/~glevand/ps3/pkgs/qa_flag_extra.pkg qa_flag_extra.pkg] // (mirror:[http://www.multiupload.com/KAGDSQ9QG9 qa_flag_extra.pkg (69.98 KB)]) (to enable QA with downgrade)
**[http://gitbrew.org/~glevand/ps3/pkgs/reset_qa_flag.pkg reset_qa_flag.pkg] // (mirrors: [http://www.multiupload.com/VEUMEDINGU] [http://www.multiupload.nl/QGB1Z6W5U9]) (to reset the QA flags back to default - virtually ''never'' needed, there is '''''no benefit removing it''''')
**[http://gitbrew.org/~glevand/ps3/pkgs/reset_qa_flag.pkg reset_qa_flag.pkg] // (mirror:[http://www.multiupload.com/VEUMEDINGU reset_qa_flag.pkg (70.05 KB)]) (to reset the QA flags back to default)
**[http://gitbrew.org/~glevand/ps3/pkgs/get_token_seed.pkg get_token_seed.pkg] // (mirror:[http://www.multiupload.com/G8GBEIABKT get_token_seed.pkg (59.73 KB)])
**[http://gitbrew.org/~glevand/ps3/pkgs/get_token_seed.pkg get_token_seed.pkg] // (mirror:[http://www.multiupload.com/G8GBEIABKT get_token_seed.pkg (59.73 KB)])
**[http://gitbrew.org/~glevand/ps3/pkgs/get_applicable_version.pkg get_applicable_version.pkg] // (mirror:[http://www.multiupload.com/GXERV38F5A get_applicable_version.pkg (69.3 KB)])  (to get the low/high version lock via Debug UDP)
**[http://gitbrew.org/~glevand/ps3/pkgs/get_applicable_version.pkg get_applicable_version.pkg] // (mirror:[http://www.multiupload.com/GXERV38F5A get_applicable_version.pkg (69.3 KB)])  (to get the low/high version lock via Debug UDP)
Line 201: Line 161:
Needs mmap114 lv1 patch + lv2 peek&poke MFW 3.41 or 3.55 (all other patches are done on the fly, when needed) - 3.15 will NOT work (blackscreen lock)
Needs mmap114 lv1 patch + lv2 peek&poke MFW 3.41 or 3.55 (all other patches are done on the fly, when needed) - 3.15 will NOT work (blackscreen lock)


This is compatible with Kmeaw CFW and {{RogeroFirmware}}.
This is compatible with Kmeaw CFW.


http://rebug.me/?p=1358 / backup/mirror : [http://www.mediafire.com/download/jjb74lyoe4irzn8/toggle_qa.pkg toggle_qa.pkg (94.22 KB)]
http://rebug.me/?p=1358 / backup/mirror : [http://www.ps3devwiki.com/files/flash/Tools/toggle-qa/ toggle_qa.pkg (94.22 KB)]


other mirrors:  
other mirrors:  
* {{google|FB11BEC5A0DDE6600BAEE0CC36742D54}}
* http://www.mirrorcreator.com/files/0ZE0MRTW/toggle-qa.rar_links
* http://www.mirrorcreator.com/files/1IJBH6QZ/toggle-qa_0.rar_links
* http://www.mirrorcreator.com/files/1NMAFKTA/toggle-qa_1.rar_links
<!--//http://ps3bins.com/rebug/pkg/toggle_qa.pkg
http://ps3bins.org/rebug/pkg/toggle_qa.pkg
http://ps3bins.net/rebug/pkg/toggle_qa.pkg//-->


=QA Flags Features=
=QA Flags Features=
{{QA Flag Features}}


===Debug Menu settings not in Retail/CEX QA===
==Token seed byte 48=0x02==
{{Debug Menu settings not in Retail/CEX QA}}
===Edy viewer===
Payment service in japan<br />
more info [http://manuals.playstation.net/document/en/ps3/current/settings/edyviewer.html Edy viewer]
 
Option not present in FW 1.02/1.10/1.11/1.30/1.31/1.32, only added since FW 1.50 and higher.


==Install Package Files==
===Debug Settings (CEX/DEX)===
There are different Debug Settings (in English) for different firmware versions. For example: FW 3.55 has more options than FW 3.41 & 3.15, below versions have even less. Some Debug settings are only available in older versions.
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"
|- bgcolor="#cccccc"
! Setting !! TargetID !! Description !! <small>3.50<br />-<br />3.55</small> !! <small>3.40<br />-<br />3.42</small> !! <small>3.21<br />-<br />3.30</small> !! <small>3.10<br />-<br />3.15</small> !! <small>3.00<br />-<br />3.01</small> !! <small>2.80</small> !! <small>2.70<br />-<br />2.76</small> !! <small>2.60</small> !! <small>2.50<br />-<br />2.53</small> !! <small>2.40<br />-<br />2.43</small> !! <small>2.30<br />-<br />2.36</small> !! <small>2.20</small> !! <small>2.10<br />-<br />2.17</small> !! <small>1.92<br />-<br />1.94</small> !! <small>1.90</small> !! <small>1.80<br />-<br />1.82</small> !! <small>1.60<br />-<br />1.70</small> !! <small>1.50<br />-<br />1.54</small> !! <small>1.02<br />-<br />1.32</small> !! Remarks
|-
| DTCP-IP || {{CEX}} || '''D'''igital '''T'''ransmission '''C'''ontent '''P'''rotection over '''I'''nternet '''P'''rotocol, a specification for copy protection of copyrighted content that is transferred over digital interfaces in home networks that adhere to IP. Allows you to turn it on or off for PS3.<ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || OFF only?
|-
| ATRAC || {{CEX}} || '''A'''daptive '''TR'''ansform '''A'''coustic '''C'''oding is a family of proprietary audio compression algorithms developed by Sony. Allows you to enable or disable ATRAC playback for your PS3 system.<ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| WMA || {{CEX}} || '''W'''indows '''M'''edia '''A'''udio is an audio data compression technology developed by Microsoft. Allows you to enable or disable WMA playback for your PS3 system.<ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Analog Output Expansion Feature || {{CEX}} || <ul><li>Menu Off : </li><li>Off : </li><li>On : </li></ul> || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| NP Environment || {{CEX}} {{DEX}} || Allows you to change which environment your PS3 connects. See [[Environments]]<ul><li>NP </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || -
|-
| Fake Free Space (for CEX) || {{CEX}} {{DEX}} || Fake the amount of free space on the HDD, in "Fake Limit Size" function.<ul><li>Off : deactivate Fake Free Space function.</li><li>On : activate Fake Free Space function.</li><li>On (Ignored in NP Trophy): activate Fake Free Space function except for trophy functions.</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Fake Limit Size || {{CEX}} {{DEX}} || Set the amount of free space on the HDD in MB when the "Fake Free Space" function is activated.<ul><li>_ MB</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| NP Debug || {{CEX}} {{DEX}} || When an application is started, Playstation Network information related to that application is displayed.<ul><li>Off : deactivate the NP Debug function.</li><li>On : activate the NP Debug function.</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| NPDRM Debug || {{CEX}} {{DEX}} || Set and test the access rights to an application that use drm protection.<ul><li>Off : deactivate the NPDRM Debug function.</li><li>No Entitlement (80029513) : return 80029513 error.</li><li>Deactivated (80029514) : return 80029514 error.</li><li>Unexpected Error : return unexpected error.</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Edy Debug || {{CEX}} || Edy is a payment service in Japan, allows you to enable or disable debugging for Edy Viewer.<ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || -
|-
| Nav-only NP || {{CEX}} || <ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || -
|-
| Cdda Server || {{CEX}} || <ul><li>Production : </li><li>Evaluation : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || -
|-
| Auto download || {{CEX}} || <ul><li>Off : </li><li>On : </li></ul>'''May be automatic system updates!''' || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| SSMSS Server || {{CEX}} || <ul><li>Production&nbsp;Server : </li><li>Test&nbsp;Server : </li><li>Development&nbsp;Server : </li></ul> || {{N}} || {{N}} || {{N}} || {{N}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Crash Report || {{CEX}} {{DEX}} || When the console crashes, a report can be sent to Sony servers.<ul><li>Off : deactivate the Crash Report function.</li><li>On : activate the Crash Report function.</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Crash reporter Status || {{CEX}} || <ul><li>Ready : </li><li>Busy : </li><li>Never&nbsp;be&nbsp;called : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| VSH Crash Dump Generator || {{CEX}} || <ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| System Update Debug || {{CEX}} || Allows you to enable or disable system update debug, which lets you to downgrade with official Sony update manager. Also allows easy firmware switching by storing a PS3UPDAT.PUP (can be renamed) in /dev_hdd0/updater/01, then another in /dev_hdd0/updater/02 etc. Then go to "System Update" > "Update via Hard Disk" and select the update to install.<br />Maximum is 20 versions to be listed in XMB, even when more are stored by using e.g. ftp.<br />Lowest version that can be copied to updaterfolder on harddisk is 2.70 (no limit when using e.g. ftp, although versions below 2.70 cannot be used for reinstallment).<ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Information Board QA Server || {{CEX}} || <ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Format Marlin Personal Data || {{CEX}} || This appears to be related to Marlin DRM possibly for multimedia use.<br />-> (Format : Yes / No) || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| PlayStation Store Ad Clock || {{CEX}} {{DEX}} || Change the clock time of the ★ Title Store Preview (Store).<ul><li>Off : the PlayStation Store Ad Clock function is deactivated.</li><li>On : the PlayStation Store Ad Clock function is activated.</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Geo Filtering for PlayStation Store || {{CEX}} {{DEX}} || <ul><li>Normal : </li><li>Always&nbsp;Succeed : </li><li>Always&nbsp;Fail : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Remove Game License || {{CEX}} || -> (Remove : Yes / No) || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Home Debug || {{CEX}} || <ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Delete Trophy Personal Data || {{CEX}} || Allows you to delete all your PS3 trophies personal data.<br />-> (Delete : Yes / No) || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| GameUpdate Impose Test || {{CEX}} {{DEX}} || The application will simulate a fake patch in order to test how the application will react when a patch is found.<ul><li>Off : deactivate the GameUpdate Impose Test function.</li><li>On : activate the GameUpdate Impose Test function.</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Network Emulation Setting || {{CEX}} {{DEX}} || Emulate the network in order to test how the application will react with networks troubles.<ul><li>Off : the Network Emulation Setting function is deactivated.</li><li>Option 1 : the Network Emulation Setting function is activated (packet delay time : 100ms).</li><li>Option 2 : the Network Emulation Setting function is activated (bandwitch limitation : 132072 bps).</li><li>Option 3 : the Network Emulation Setting function is activated (send packet loss : 5%).</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Network Emulation Status || {{CEX}} {{DEX}} || Show information of the Network Emulation Setting function. This information is also showed when selecting an option in Network Emulation Setting function.<br />-> (Outputs status screen)<pre>Option number : Off
Packet loss : (% send), (% receive)
Packet loss duration (ms)
Packet pass duration (ms)
Packet delay time (ms)
Packet delay jitter (ms)
Packet out of order (%)
Packet out of order delay (ms)
Packet duplication  (%)
Bandwidth limitation (bps)
Packet size limitation (min bytes)
Packet size limitation (max bytes)
Policy pattern (0x0000000000000000)</pre> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Auto-Off Debug || {{CEX}} || <ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| WLAN Device || {{CEX}} {{DEX}} || Activate/deactivate the wireless LAN device.<ul><li>Off : deactivate the wireless LAN device.</li><li>On : activate the wireless LAN device.</li></ul>Note : the wireless LAN device have to be not in use to deactivate it. || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| NAT Traversal Information || {{CEX}} {{DEX}} || [http://en.wikipedia.org/wiki/NAT_traversal NAT traversal] techniques are typically required for client-to-client networking applications, especially peer-to-peer and Voice-over-IP (VoIP) deployments.<br />-> (Outputs status screen)<pre>UPnP Status : Unavailable / Available
UPnP Port Number : -
UPnP External Address : -
Stun Status : Unsucceeded / Succeeded
NAT Type : Type1 / Type2 / Type3
Mapped Address : (Internet IP Address)
Mapping Policy : Endpoint Independant
Port Preservation : true / false
Delta: 0
Port Opened : true / false</pre> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Internet Browser Debug || {{CEX}} || When on is selected press triangle over the internet browser icon for extra options. (the WebKit option causes the console to reboot)<ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}}|| {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| SMSS Result Output || {{CEX}} || <ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Adhoc SSID Prefix || {{CEX}} {{DEX}} || Set the prefix name of the Ad-hoc SSID’s. The default value is set for PSP devices.<ul><li>PSP : </li></ul>3 chars (Latin) max? || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Disc Auto-Start at System Startup || {{CEX}} {{DEX}} || Start the disc automatically when the system is turned on.<ul><li>Off : deactivate the Disc Auto-Start at System Startup function.</li><li>On : activate the Disc Auto-Start at System Startup function.</li></ul>Note : [System Settings] > [Disc Auto-Start] have to be turned on too. || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| 3D Video Output || {{CEX}} {{DEX}} || Set the video output to 3D.<ul><li>Automatic : video output settings are automatically set.</li><li>On : force the 3D video output.</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Fake NP SNS Throttle || {{CEX}} {{DEX}} || Fake a throttling (a delay between information sends) into the social network service. <ul><li>Off (60 sec) : the Fake NP SNS Throttle function is deactivated, the throttling is set to 60 seconds.</li><li>On (0 sec) : the Fake NP SNS Throttle function is activated, the throttling is set to 0 seconds.</li><li>On (10 sec) : the Fake NP SNS Throttle function is activated, the throttling is set to 10 seconds.</li><li>On (120 sec) : the Fake NP SNS Throttle function is activated, the throttling is set to 120 seconds.</li><li>On (3600 sec) : the Fake NP SNS Throttle function is activated, the throttling is set to 3600 seconds.</li><li>On (Throttle Closed) : the Fake NP SNS Throttle function is activated, the throttling is deactivated.</li></ul> || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Debug for HDD Exchange Utility || {{CEX}} || Clone your HDD straight to USB HDD, NO QA Token needed<br />-> (HDD Exchange Utility) || {{Y}} || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Fake Plus || {{CEX}} {{DEX}} || Fake the activation of PlayStation Plus.<ul><li>Off : the Fake Plus function is deactivated.</li><li>On : the Fake Plus function is activated.</li></ul> || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Push Console Binding || {{CEX}} || <ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Automatic Download || {{CEX}} || Set automatic download on or off, on scheduled time (game updates, system software updates, and selected movies).<ul><li>Off : </li><li>On : </li></ul>'''May be automatic system updates!''' || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| Motion Controller Calibration Result || {{CEX}} || Shows lastest results from motion controller calibration.<ul><li>Off : </li><li>On : </li></ul> || {{Y}} || {{Y}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
| VideoEditor Delete Preset BGM || {{CEX}} || -> (Delete : Yes / No) || {{Y}} || {{N}}|| {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || {{N}} || -
|-
! Setting !! TargetID !! Description !! <small>3.50<br />-<br />3.55</small> !! <small>3.40<br />-<br />3.42</small> !! <small>3.21<br />-<br />3.30</small> !! <small>3.10<br />-<br />3.15</small> !! <small>3.00<br />-<br />3.01</small> !! <small>2.80</small> !! <small>2.70<br />-<br />2.76</small> !! <small>2.60</small> !! <small>2.50<br />-<br />2.53</small> !! <small>2.40<br />-<br />2.43</small> !! <small>2.30<br />-<br />2.36</small> !! <small>2.20</small> !! <small>2.10<br />-<br />2.17</small> !! <small>1.92<br />-<br />1.94</small> !! <small>1.90</small> !! <small>1.80<br />-<br />1.82</small> !! <small>1.60<br />-<br />1.70</small> !! <small>1.50<br />-<br />1.54</small> !! <small>1.02<br />-<br />1.32</small> !! Remarks
|-
|}
'''Note:''' In older firmware versions (e.g. 1.02) it is not in a seperate debug menu, but rendered in XMB menu as System Settings extra options.
 
 
====Debug Menu settings not in Retail/CEX QA====
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"
|- bgcolor="#cccccc"
! Setting !! TargetID !! Description !! Remarks
|-
| O Button Behavior || {{DEX}} || Switch the assignment of the “O” button to “X” button (like for japans games/region settings).<ul><li>Enter : assign the “Enter” function to “O” button</li><li>Back : assign the “Enter” function to “X” button.</li></ul> || -
|-
| Game Type (Debugger) || {{DEX}} || Set the game type of an application when this one is started from the debugger (usually, this information is read from PARAM.SFO).<ul><li>Disc Boot Game : use application like a game disc.</li><li>HDD Boot Game : use application like a HDD boot game.</li><li>Patch : use application installed as a game patch.</li><li>PARAM.SFO : use the param.sfo directly from the application.</li></ul> || -
|-
| Game Output Resolution (Debugger) || {{DEX}} || Set the game output resolution of an application when this one is started from the debugger (usually, this information is read from PARAM.SFO).<ul><li>480 (4:3)</li><li>480 (16:9)</li><li>576 (4:3)</li><li>576 (16:9)</li><li>720</li><li>960 x 1080</li><li>1280 x 1080</li><li>1440 x 1080</li><li>1600 x 1080</li><li>1920 x 1080</li></ul> || -
|-
| Game Output Sound (Debugger) || {{DEX}} || Set game output sound of an application when this one is started from the debugger (usually, this information is read from PARAM.SFO).<ul><li>Maximum Number of Channels Set on [ Sound Settings ] > [ Audio Output Settings ]</li><li>2 ch</li><li>2 ch (Downmix: 5.1 ch -> 2 ch)</li><li>2 ch (Downmix: 7.1 ch -> 2 ch)</li><li>5.1 ch</li><li>5.1 ch (Downmix: 7.1 ch -> 5.1 ch)</li><li>7.1 ch</li><li>Dolby Digital</li><li>Dolby Digital (Downmix: 7.1 ch -> 5.1 ch)</li><li>DTS</li><li>DTS (Downmix: 7.1 ch -> 5.1 ch)</li></ul> || -
|-
| BGM Player (Debugger) || {{DEX}} || Set the activation of BGM playback when an application is started from the debugger (usually, this information is read from PARAM.SFO).<ul><li>Off : deactivate the BGM Player.</li><li>On : activate the BGM Player.</li></ul> || -
|-
| GameContentUtil Boot Path (Debugger) || {{DEX}} || Change the game content boot path when an application is started from the debugger.<ul><li>For Development : return the real path where the application is started.</li><li>For Release : return the path from GameContentUtil dirName (Debugger) setting.</li></ul> || -
|-
| GameContentUtil dirName (Debugger) || {{DEX}} || Change the game content directory when an application is started from the debugger in release mode. || -
|-
| GameContentUtil Boot Path (/app_home/PS3_GAME/) || {{DEX}} || Change the game content boot path when an application is started from /app_home/PS3_GAME/.<ul><li>For Development : return the real path where the application is started.</li><li>For Release : return the path from the PARAM.SFO settings.</li></ul> || -
|-
| Region Settings || {{DEX}} || Change the console settings (system language, time, date, etc…) depending on which region are selected.<ul><li>Japan</li><li>North America</li><li>Oceania</li><li>UK</li><li>Europe</li><li>Korea</li><li>Southeast Asia</li><li>Taiwan</li><li>Russia</li><li>China</li><li>Mexico</li><li>Hong Kong</li></ul> || -
|-
| Fake Other Region || {{DEX}} || Fake the license area of the console (SCEE for Europe, SCEA for America, etc…) to Other.<ul><li>Off : the Fake Other Region setting is deactivated.</li><li>On : the license area is set to Other.</li></ul>Note : Setting on that option is not saved after a console reboot. || -
|-
| HDCP || {{DEX}} || High-bandwidth Digital Content Protection ([http://en.wikipedia.org/wiki/HDCP HDCP]) is a form of digital copy protection developed by Intel Corporation to prevent copying of digital audio and video content as it travels across High-Definition Multimedia Interface<ul><li>Off : the HDCP protection is deactivated.</li><li>On : the HDCP protection is activated</li></ul> || -
|-
| Display HDD Free Space || {{DEX}} || Display the hard drive free space on the menu screen while an application is running. || -
|-
| Fake Save Data Owner || {{DEX}} || Allows use of save data from other users and displays a warning message at every load/save during the game. Once a save data has been saved with this features activated, that save couldn’t be read with this function deactivated.<ul><li>Off : deactivate the Fake Save Data Owner function.</li><li>On : activate the Fake Save Data Owner function.</li></ul> || -
|-
| Format System Cache || {{DEX}} || Format the system cache area.<ul><li>Yes : format the system cache.</li><li>No : cancel the system cache format.</li></ul> || -
|-
| Release Check Mode || {{DEX}} || Check if /app_home is used in the application.<ul><li>Development Mode : the application can used /app_home.</li><li>Release Mode : the application can’t use /app_home.</li></ul> || -
|-
| Exception Handler || {{DEX}} || Handle PPU exceptions in order to debug an application.<ul><li>Off : deactivate the exception handling.</li><li>On : activate the exception handling.</li></ul> || -
|-
| NPDRM Clock Debug || {{DEX}} || Activate/deactivate the validity period of an application that use drm protection.<ul><li>Off : deactivate the NPDRM Clock Debug function.</li><li>On : activate the NPDRM Clock Debug function.</li></ul> || -
|-
| Service ID || {{DEX}} || Edit the Service ID of the content to access it on the Store.<br />Example : AB0000-ABCD12345_00 || -
|-
| MsgDialogUtil Display Errorcode || {{DEX}} || Display the error code of an application that uses the cellMsgDialogOpenErrorCode function in the notification window.<ul><li>Off : deactivate the MsgDialogUtil Display Errorcode function.</li><li>On : activate the MsgDialogUtil Display Errorcode function.</li></ul> || -
|-
| Format BD Emulator HDD || {{DEX}} || Format the external usb device (FAT32) for use it with the BD Emulator Function.<ul><li>Quick Format : Make a quick device format.</li><li>Full Format : Make a full device format.</li></ul> || -
|-
| Disable ExitGame Timeout || {{DEX}} || Disable the forced termination of an application due to a time out.<ul><li>Off : do not disable the ExitGame Timeout function.</li><li>On : disable the ExitGame Timeout function.</li></ul> || -
|-
| Core Dump || {{DEX}} || The Core Dump functions save and configure the output exceptions of applications in order to debug them.<ul><li>Copy : Copy a core file.</li><li>Delete : Delete a core file.</li><li>Option :<ul><li>[Option] > [★ Trigger Option]<ul><li>Disable PPU exception detection : PPU exception are not includes in the core file.</li><li>Disable SPU exception detection : SPU exception are not includes in the core file.</li><li>Disable RSX exception detection : RSX exception are not includes in the core file.</li><li>Disable Foot Switch detection : the foot switch detection is deactivated.</li></ul></li><li>[★ Corefile Generation Option]<ul><li>Disable Memory Dump : the memory dump is not include in the core file.</li></ul></li><li>[★ Execution Control Option]<ul><li>Enable restart process and core dump function after core dumped : After a core file dumped, the process will restart and the core dump function activated.</li><li>Off : deactivate the core dump function.</li><li>On (Save to /app_home) : activate the core dump function and save the core file to /app_home.</li><li>On (Save to /dev_ms) : activate the core dump function and save the core file to /dev_ms.</li><li>On (Save to /dev_usb) : activate the core dump function and save the core file to /dev_usb.</li><li>On (Save to /dev_hdd0) : activate the core dump function and save the core file to /dev_hdd0.</li></ul></li></ul></li></ul> || -
|-
| PowerOnReset || {{DEX}} || The console is automatically turned on when the main power button is turned on.<ul><li>Off : deactivate the PowerOnReset function.</li><li>On : activate the PowerOnReset function.</li></ul> || -
|-
| Boot Mode || {{DEX}} || Choose which mode to boot the console.<ul><li>Debugger Mode : boot on the debugger, for debugging purpose.</li><li>System Software Mode : boot on system software mode, for developing purpose.</li><li>Release Mode : boot on release mode, the same than retail console, for finals tests purpose.</li></ul> || -
|-
| Blu-ray Disc Access || {{DEX}} || Choose the Blu-ray disc type of access.<ul><li>BD Emulator (DEV) : Use the internal hdd for the BD-Emulator. (Reference Tools only)</li><li>BD Emulator (USB) : use an usb hdd formatted for the BD-Emulator.</li><li>BD Drive : use the Blu-Ray Disc drive.</li></ul> || -
|-
| Transfer Rate Pacing for BD Emulator || {{DEX}} || When the BD Emulator function is activated, the transfer rate can be choose between two options.<ul><li>HDD Native : maximum transfer rate.</li><li>Equiv. to BD Drive : same transfer rate than the BD Drive.</li></ul> || -
|-
| Network Settings for Debug || {{DEX}} || Choose different network settings for the debugging than the settings used in usual settings.<ul><li>Single Settings : use the same network settings for debugging than settings used in [Settings] > [Network Settings].</li><li>Dual Settings : use two different network settings.</li></ul> || -
|-
| Connection Status List for Debug || {{DEX}} || Show the network information for the debugging. || -
|-
| Connection Settings for Debug (Dual Settings) || {{DEX}} || Choose network settings for the debugging.<br />Note : the Network Settings for Debug function have to be set on Dual Settings. || -
|-
| Pad Auto Detect || {{DEX}} || This function allows the console to automatically detect a paddle connected by USB.<ul><li>Off : deactivate the Pad Auto Detect function.</li><li>On : activate the Pad Auto Detect function.</li></ul> || -
|-
| Initialize Boot Parameters || {{DEX}} || Reset boot parameters to their default value.<ul><li>Yes : reset boot parameters.</li><li>No : do not reset boot parameters.</li></ul> || -
|-
| Update Server URL || {{DEX}} || Choose the server of firmware updates when selecting [Settings] > [System Update].<br />Example : http://www.myexampleserver.com/ps3updat.txt<br />Ps3updat.txt example:<br /><code><small>Dest=82;ImageVersion=FFFFFFFF;SystemVersion=1.0000;CDN_Timeout=30;CDN=http://www.myexampleserver.com/PS3UPDAT.PUP.100.001;<br />Dest=82;ImageVersion=FFFFFFFF;SystemVersion=2.0000;CDN_Timeout=30;CDN=http://www.myexampleserver.com/PS3UPDAT.PUP.200.001;</small></code> || [http://www.ps3devwiki.com/files/firmware/OFW-DEX/ps3-updatelist.txt ps3-updatelist.txt]
|-
| Video Upload Debug || {{DEX}} || When a video is uploaded on YouTube with the video upload function, the uploaded video is set to private.<ul><li>Off : the Video Upload Debug function is deactivated.</li><li>On : the Video Upload Debug function is activated.</li></ul> || -
|-
| Wake On LAN || {{DEX}} || [http://en.wikipedia.org/wiki/Wake-on-LAN Wake-on-LAN] is an Ethernet computer networking standard that allows a computer to be turned on or woken up by a network message. The message is usually sent by a program executed on another computer on the same local area network.<ul><li>Off : deactivate the Wake On Lan function.</li><li>On : activate the Wake On Lan function, the console can be turned on by a network message.</li></ul> || -
|-
| Dummy XMB (in game) Debug || {{DEX}} || This function checks how applications react while the XMB in game is used. If the resources debits are not enough, a message will be display in the notification window.<ul><li>Off : the Dummy XMB (in game) Debug function is deactivated.</li><li>On : the Dummy XMB (in game) Debug function is activated.</li></ul> || -
|-
| Dummy BGM Player Debug || {{DEX}} || This function checks how applications react while the BGM Player is used. If the resources debits are not enough, a message will be display in the notification window.<ul><li>Off : the Dummy BGM Player Debug function is deactivated.</li><li>On : the Dummy BGM Player) Debug function is activated.</li></ul> || -
|-
| MediatedServices: Mediator URL || {{DEX}} || Set the mediator URL of Mediated Services. || -
|-
| MediatedServices: Provider Data || {{DEX}} || Set the provider data of Mediated Services. || -
|-
| MediatedServices: Notifications || {{DEX}} || Activate/deactivate the Mediated Services notifications.<ul><li>Off : the MediatedServices Notifications function is deactivated.</li><li>On : the MediatedServices Notifications function is activated.</li></ul> || -
|-
|-
|}
'''Note:''' credit to [http://jerem73.wordpress.com/ DrEB]
 
===Install Package Files===
Will install all package files found on the root of the USB stick sequentially in alphabetical order until an installation of a package is aborted or fails for any reason.  It will work only with properly signed packages.  Unlike the Install Package File function in the Game menu the .pkg extension name is not case sensitive.
Will install all package files found on the root of the USB stick sequentially in alphabetical order until an installation of a package is aborted or fails for any reason.  It will work only with properly signed packages.  Unlike the Install Package File function in the Game menu the .pkg extension name is not case sensitive.


Line 223: Line 397:
=On 3.6x Firmwares=
=On 3.6x Firmwares=
As we know Sony has <strike>taken QA Flag away</strike> changed the Auth for QA-flag on 3.6x Firmwares. Until someone changes it to work with the new method (which doesnt work on the old), your QA Flag will not work on 3.6x.
As we know Sony has <strike>taken QA Flag away</strike> changed the Auth for QA-flag on 3.6x Firmwares. Until someone changes it to work with the new method (which doesnt work on the old), your QA Flag will not work on 3.6x.
From 3.60 Sony added a new step in the authentication process in the [[Iso module]]  "spu_token_processor.self".
This new step is a digital signature verification using ECDSA ("Elliptic Curve Digital Signature Algorithm").
The old token, the IDPS taked from the machine, the version of the Token (1), the array of flags, and the HMAC hash of the previous parts, remains valid as such.
No key (AES, HMAC) were changed in the new module.
However, after the decryption of the token, [[IDPS]] and verification of the machine with which it has the token performs a digital signature verification of all encrypted token (0x50 bytes).
This performs a SHA-1 hash of the entire token (like Sony performed at the time of the digital signature) and passes to check the signature, if it validates the token is considered authentic and returned both encrypted as decrypted (this with the hash hmac set to 0), as happened in 3.56 and lower.
In the event that the digital signature fails, consider that the token is not valid, as would happen if the token decryption fails, or any of your previous checks (HMAC computed with token bearing the token, the [[IDPS]] , ...).
In this case it will return an empty buffer (instead of the decrypted token) and one with a token prepared but without any active flag, or indeed with any digital signature, as happened in 3.56 and lower.
In short it is not possible to put a machine QA in firmware 3.60 and higher unless you are patching the module (thus only work in that customized firmware), or getting a whole token and a valid digital signature for.
Given that the token varies by the [[IDPS]] to prevent universal token exists, only the IDPS should know that token, and change the [[IDPS]] of section one of [[Flash#EID0_-_Section_0|EID0]] (which is what the [[Iso module]] checks), but this could have unintended consequences in some cases.


= QA Downgrading =
= QA Downgrading =
Line 241: Line 404:
These tools COULD format your ps3. (which means Any and ALL psn / downloaded data could be erased)
These tools COULD format your ps3. (which means Any and ALL psn / downloaded data could be erased)


note: several people noted that they did not suffer from dataloss even after several downgrades, but its good measure to backup before downgrading (esp. ACT.DAT which DO get erased)
note: several people noted that they did not suffer from dataloss even after several downgrades, but its good measure to backup before downgrading {esp. ACT.DAT which DO get erased)


== Tools Needed ==
== Tools Needed ==
Line 264: Line 427:
== Known Issues with QA flag / QA downgrades ==
== Known Issues with QA flag / QA downgrades ==


=== act.dat (PSN activation) gets deleted ===
=== Act.dat (PSN activation) gets deleted ===
Make sure you backup the file before enabling QA-extra flag and downgrade. There have been reports of ACT.DAT ("home/000000XX/exdata/act.dat") get's deleted. So make sure to backup that entire folder before flagging/downgrading.
Make sure you backup the file before enabling QA-extra flag and downgrade. There have been reports of ACT.DAT ("home/000000XX/exdata/act.dat") get's deleted. So make sure to backup that entire folder before flagging/downgrading.


* http://rebug.me/xreg-plus-v1-0/
[http://www.ps3crunch.net/forum/threads/230-Restore-act.dat-Homebrew-to-help-with-copying-your-PSN-activation-files! Restore act.dat - Homebrew to help with copying your PSN activation files]
* http://www.maxconsole.com/maxcon_forums/threads/270400-Restore-act-dat-Homebrew-to-help-with-copying-your-PSN-activation-files!
 
= Useful links =
 
* https://rmscrypt.wordpress.com/
 
 
{{Reverse engineering}}<noinclude>[[Category:Main]]</noinclude>
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)