Does your iPad 2 return "Device Unknown" when you try to activate it? Well fear no more, as there is a way to bypass this.
The bypass is called Hacktivation, a wordplay of hacking and activation.
Hacktivation on an iPad 2 works by literally just deleting the activation app. Now, this unfortunately means that you won't be able to use Cellular on the iPad 2,2. Other than that, the iPad will also have some other issues, which are mostly resolvable. For any issues that I encounter, I will write a guide.
To actually delete the activation app, we first need to get what's called an SSH connection to the iPad. SSH is basically a way to controll everything, even stuff that Apple tried to protect (like the activation app), on our iPad from a PC.
There is one more problem though: The newest supported iOS version currently has no known SSH exploit. This means that we need to downgrade to iOS 8.4.1 first. This isn't that big of a deal, there isn't that big of a difference between the 2 versions anyways.
To downgrade to iOS 8.4.1, we need to put the device in to what's called pwnDFU Mode. To do this, we need a microcontroller: Either a Raspberry Pi Pico RP2040, or an Arduino Uno with a USB Host Shield. The reason for this is that a normal PC running a normal operating system doesn't have "deep enough" controll over the USB ports (drivers, permissions, etc.)
Using a raspberry Pi Pico is the cheapest option, so I'll explain how to do it with it. If you want to use the Arduino Uno version, you'll unfortunately have to look somewhere else, for example here.
Put the iPad into pwnDFU Mode using the Pi Pico
Downgrade to iOS 8.4.1
Put it in pwnDFU Mode again
Establish an SSH connection
Delete the delete the activation app
I have no clue how the actual exploit works. People way smarter and more experienced than me have discovered the checkm8 exploit and made using it incredibly easy. However, what I do know, is how to execute the exploit.
This is a summary of the incredible work done by those people. The original tutorial, which goes a bit more in-depth, can be found here.
Let's get started!
Raspberry pi pico RP2040, micro-USB, and no Wi-Fi (USB-C is also possible, but powering it is a bit more complex. Please read the original tutorial for more info.)
A way to both power the pico and also connect it to the iPad, for example a "Micro USB 2 in 1 OTG Y cable". But ultimately, any cable setup is possible, as long as the pico is being powered and there is a USB data connection between the pico and iPad.
A way to connect the pico to a PC (Probably just a USB-A to micro-USB cable)
A PC (Linux/MacOS, for Windows search somewhere else)
A file browser
The correct UF2 file. Download the zip from here, extract the archive and delte all files except the one your iPad requires. To find out which one you need, check the back of you iPad for one of the following codes: EMC 2415 -> 8940.uf2 | EMC 2416 -> 8940.uf2 | EMC 2560 -> 8942.uf2
Connect the pico to your PC. It should appear as a USB storage device. Simply copy the correct UF2 file onto the pico.
Then, put the iPad into DFU mode. Do this by
1. Shutting down the iPad
2. holding TOP (power) and HOME button for 10 seconds
3. releasing the TOP button, but keeping the HOME button held for another 10 seconds. The screen should stay black.
When you're in DFU mode, first connect the iPad to the pico, then supply power to the pico. The light on the pico should flash rapidly, indicating that the exploit is being run. Once it's done, meaning it's in the so-called pwnDFU mode", it'll return to blinking slowly.
If the pico flashes twice, it means it detects a device, but it's not in DFU mode.
WARNING!!! THE FOLLOWING WILL DELETE ALL DATA CURRENTLY ON THE IPAD!!!
Connect your iPad to your PC, then open Legacy iOS Kit on it.
Select Restore/Downgrade -> iOS 8.4.1 -> Download Target IPSW -> (*) Start Restore
Go through all the prompts as follows: Jailbreak Option: Yes -> Memory Option for creating custom IPSW: read the text, you decide -> pwnDFU/kDFU Mode Option: pwnDFU
After iOS 8.4.1 was successfully installed, put the iPad into pwnDFU mode and open Legacy iOS Kit again.
Useful Utilities -> SSH Ramdisk -> Follow the SSH Ramdisk instructions
Connect to SSH -> input the following commands and after each one press enter:
mount_hfs /dev/disk0s1s1 /mnt1
mv /mnt1/Applications/Setup.app /mnt1/Applications/Setup.bak
reboot_bak
This will mount the filesystem, rename the Activation App, then reboot the iPad.
If you've done everything correctly, your iPad should boot straight into the home screen :)
Click here to continue setting up your iPad