Top Ways to Start Querying for SHSH File on Apple Server

Posted by Brian Davis on Oct 29, 2025 • Category: Fix iPhone Issues
5 mins read

Querying for SHSH File on Apple Server is an essential step for anyone who wants to manage iOS firmware versions effectively. SHSH files, also known as blobs, are digital signatures Apple uses to verify and approve iOS installations. By querying these files from Apple's servers, you can save the necessary authorization data to restore, upgrade, or downgrade your device later—even after Apple stops signing a specific iOS version.

This process is especially useful for developers, testers, and jailbreak enthusiasts who need control over their device firmware. Now let's follow this pro guide to learn how to start querying for SHSH file on Apple Server.

querying for shsh file on apple server

Part 1: What Are SHSH Blobs and Why Are They Important?

SHSH blobs (also called .shsh2 blobs) are digital signatures issued by Apple's TSS (Tatsu Signing Server) that authorize your specific device to install or restore a particular version of iOS (firmware).

  • Every iPhone, iPad, or iPod has a unique hardware ID (ECID).
  • Every iOS version has its own build identifiers.
  • When you restore or update through iTunes/Finder, your device contacts Apple's TSS server, sending its ECID and firmware information.
  • Apple responds with a personalized cryptographic "ticket" — that's your SHSH blob.

The SHSH blob proves Apple "signed" that version of iOS for your specific device at that moment.

Why Are SHSH Blobs Important?

Apple stops signing older iOS versions as soon as a new one is released. That means normally you can only restore to currently signed versions.

However, if you have saved SHSH blobs from when Apple was signing a version, you can sometimes use them to downgrade to an older iOS version, or re-restore to the same version (e.g., for jailbreaks), even when Apple no longer signs it.

This process is made possible by tools like futurerestore or TinyUmbrella, which replay those blobs to "trick" Apple's signing check.

shsh blobs

Part 2: Why You Need to Query SHSH from Apple Servers?

Querying SHSH blobs (or SHSH certificates) from Apple’s servers is something iOS developers, jailbreakers, and advanced users might do for specific firmware signing and restoration purposes.

1. Save SHSH Blobs Before Signing Ends: Apple only signs the latest iOS versions. Querying lets you save SHSH blobs for your device before Apple stops signing an older version. This allows future downgrades or restores to that version.

2. Check Which iOS Versions Are Still Signed: You can see which firmware versions Apple currently allows for installation. Useful to avoid updating past a jailbreakable or stable version.

3. Validate SHSH for Custom Restores: Tools like futurerestore need valid SHSH blobs. Querying ensures your saved blobs match your device and iOS version.

4. For Jailbreak or Research Use: Developers and researchers query SHSH to test signing behavior or work on exploits.

5. For Device Management or Archiving: Labs or developers save SHSH blobs for many devices to restore or downgrade them later.

Part 3: How to Get SHSH Blobs by Querying Apple's Server?

Here's a complete, step-by-step guide to getting SHSH blobs by querying Apple's signing server (TSS) — the same process tools like TSS Saver and tsschecker use behind the scenes.

First — What You're Doing

Apple's TSS (Tatsu Signing Server) issues a unique SHSH2 blob (a digital signature) whenever a device requests authorization to restore or update to a signed iOS version.

By querying this server manually (via a tool), you can save those blobs while Apple still signs that version, allowing you to downgrade or re-restore later using futurerestore.

What You Need

Item How to Find It
Device Identifier (Model) Example: iPhone10,6, iPad7,5. Check under Settings → General → About, or use ideviceinfo.
ECID (Unique ID) Found in Finder/iTunes (click Serial Number until ECID shows), or with ideviceinfo -s. Use decimal format for most tools.
Target iOS Version / Build Example: 17.0.2 or build number 21A350.
tsschecker or TSS Saver Free tools that automate Apple’s TSS requests.
(For A12+ devices) Generator + ApNonce pair Required to save usable blobs — captured from your device while jailbroken or using special tools.

Method 1 — Command Line (Using tsschecker)

Step 1: Download tsschecker

You can get the latest version from GitHub (search "tsschecker releases"). Make it executable if on macOS/Linux:

chmod +x tsschecker

Step 2: Basic command for pre-A12 devices

./tsschecker -d iPhone8,1 -i 16.6.1 -e 123456789012345 -s --nocache -o ./blobs

Explanation:

  • -d = device identifier (iPhone8,1)
  • -i = iOS version (16.6.1)
  • -e = ECID (decimal)
  • -s = save blob
  • --nocache = force fresh request to Apple's TSS
  • -o = output directory

This will query https://gs.apple.com (Apple's TSS server) and save the returned .shsh2 blobs into ./blobs.

Step 3: For A12 and newer devices (iPhone XS and later)

These devices require a generator and ApNonce pair.

Example:

./tsschecker -d iPhone11,2 -i 16.6.1 -e 123456789012345 -g 0x1111111111111111 --apnonce 35b6d7f93edb3a... -s --nocache -o ./blobs

Where:

  • -g → generator (the value your device uses)
  • --apnonce → the actual ApNonce from your device

If your device is jailbroken, you can find or set these values via nvram commands or tools like NonceSet1112.

Method 2 — Using Online Tools (TSS Saver / BlobSaver)

Step 1: Go to a trusted SHSH saving website (e.g., TSS Saver).

Step 2: Enter:

  • Device type (e.g., iPhone 11 Pro)
  • ECID
  • iOS version/build (or leave "latest signed" checked)

Step 3: For A12+ devices: provide generator + ApNonce if you have them.

Step 4: Submit → the site queries Apple's TSS server for you and gives download links to your .shsh2 files.

Part 4: The Ultimate Guide to Downgrade iOS Without SHSH Blobs

Regret an iOS update? You can only downgrade to a version Apple is still "signing," which is usually just the previous one for a short time after an update. While the manual process is technical and risky, tools like TunesKit iOS System Recovery simplify everything. It automatically finds the correct signed firmware for your device and handles the downgrade for you, making it a safe and easy way to go back.

It also enables you to downgrade iOS 26 without iTunes, to install IPSW without iTunes, and to downgrade iOS Beta to a previous version without jailbreak. It fully supports the latest iOS/iPadOS versions and works with all iPhone, iPad, and iPod touch models.

A Simple Solution for iOS Downgrade

This tool safely automates the entire process, allowing you to easily roll back to a signed iOS version without any technical hassle.

Try It Free safe 600,000+ Downloads

Here's an intuitive guide to perform the downgrade process in just a few simple steps with TunesKit iOS System Recovery.

Step 1Install and Launch the Software

First, download TunesKit iOS System Recovery and install it on your Mac or Windows computer. Launch the application and connect your iPhone to the computer using a reliable USB cable. On the main screen, click on "Upgrade/Downgrade iOS" to begin.

tuneskit interface

Step 2Select the Downgrade Option

The software will present you with two choices. Select "iOS Downgrade" to proceed with reverting to an older version. The tool is designed to make this process as clear as possible.

downgrade ios

Step 3 Download the Correct Firmware

This is where TunesKit's automation shines. The software will automatically detect your iPhone model and identify the available iOS versions that Apple is still signing. It will present you with the correct firmware package for your device. Simply verify the information and click the "Download" button. The tool will handle the download of the large firmware file for you.

download downgrade firmware package

Step 4Initiate the Downgrade Process

Once the firmware download is complete, you're ready to begin. Click the "Start Downgrade" button. It's crucial that you keep your iPhone connected to the computer and avoid using it during this process to prevent any interruptions.

TunesKit will handle the installation of the older iOS version. Your iPhone will restart automatically once the downgrade is finished, booting up with the previous iOS version successfully installed.

successfully downgrade ios

Part 5: FAQs about Querying for SHSH File on Apple Server

  • Q1: What are "signed" and "unsigned" iOS versions?

    Signed: Apple currently allows installation of that version — SHSH requests succeed.
    Unsigned: Apple has stopped allowing installation — SHSH requests fail (you'll get an error or invalid blob).
    You can check signing status at ipsw.me.

  • Q2: How long are SHSH blobs valid?

    Forever — as long as they were generated while that iOS version was signed.
    They don't "expire." Just make sure you back them up safely (multiple copies).

  • Q3: How were SHSH files queried from Apple's server?

    In the past, when a user initiated an iOS restore or update through iTunes, the software would communicate with Apple's TSS server. This server would then provide the necessary SHSH blob for the specific iOS version if it was still being signed.
    Various third-party tools were developed to intercept and save these SHSH blobs for later use. This process allowed users to "trick" their device into accepting an older firmware version by providing the saved SHSH blob, bypassing Apple's live server check.

Part 5: Conclusion

Querying Apple's TSS server for SHSH files (SHSH blobs) is essential for users who want to preserve the option to restore or downgrade iOS versions after Apple stops signing them. Tools like tsschecker or TSS Saver let you request and save these authorization files directly from Apple's servers. However, if you prefer a simpler way to fix iOS issues without managing SHSH blobs, TunesKit iOS System Recovery offers an easy, one-click solution to repair system errors or restore devices safely without data loss or technical complexity.

Try It Free Buy Now

Add a review

homeHome > Fix iPhone Issues > Top Ways to Start Querying for SHSH File on Apple Server