Jailbreak v6 for Control4 3.4.3 & 4.0.0

[black-ops-drivers]

Release Notes

• This release is backwards-compatible with OS3 and can be used as a drop-in replacement for v5.
• During the "Director Patch" process, SSH keys are configured on the controller and copied to your computer in a folder named Keys - DO NOT DELETE.
  • v3.4.3.741643 and later versions of Director disable the ability to SSH into the controller using the generated password — these keys are the primary method to patch the Director after upgrading.
    If SSH key access cannot be established, an additional fallback mechanism will prompt for your customer.control4.com credentials to restore SSH password authentication.
  • It is highly recommended that you zip up the keys folder and store it somewhere safe. If you lose the keys and the fallback fails, there is no easy way to recover access.
  • ❗YOU HAVE BEEN WARNED❗

Steps to Patch Your System and Upgrade to X4

1. Ensure your controller is running version v3.4.3. If not, upgrade to v3.4.3 before proceeding.
2. Ensure you are subscribed to the Connect subscription plan.
   • 4Sight will NOT work, and you will not be able to use the Control4 app or touchscreens without it. ONLY your registered dealer can invite you to Connect through OvrC.
3. Read step 2 again…
4. Download and install Composer Pro 4.0.0. Do NOT use Composer Pro 2025.8.20 or later versions as they are not yet compatible with the jailbreak.
5. Jailbreak Composer and Director using the NEW v6 jailbreak tool. It works the same as previous versions.
   Ensure all steps are completed. During the "Composer Patch" step, make sure "Block split.io" is ☑️.
6. Open Composer and upgrade to v4.0.0 as you normally would using the menu:
   Tools > Update Manager...
   but enter:
   https://services.control4.com/Updates2x-experience/v2_0/Updates.asmx
   in the Update URL field.
7. Jailbreak again using the NEW v6 jailbreak tool — specifically, run the Director Patch step.
8. Back up your Keys - DO NOT DELETE folder somewhere safe. Losing these keys puts you at risk of losing access without downgrading to OS3 or accessing UART (which requires opening the controller).
9. Optional Re-perform the "Composer Patch" step and uncheck "Block split.io" to restore functionality that relies on feature flags guarded by split.io. Keeping it blocked may result in unexpected behavior in Composer Pro and will prevent access to ovrc.com from your computer.
10. Optional Delete any older versions of the jailbreak tool from your computer. The new tool is backwards-compatible and can be used if you downgrade.

What's Changed

• Code cleanup only, no functional changes by @black-ops-drivers in Code cleanup only, no functional changes #34
• Add support for v4.0.0 by @black-ops-drivers in Add support for v4.0.0 #35
• Add support for restoring SSH password authentication after it has been disabled by an update by @black-ops-drivers in Add support for restoring SSH password authentication after it has been disabled by an update #39

New Contributors

• @black-ops-drivers made their first contribution in Code cleanup only, no functional changes #34

Full Changelog: v5...v6

---

This discussion was created from the release Jailbreak v6 for Control4 3.4.3 & 4.0.0.

[sukmano]

Unable to download the zip file with error Virus Detected

[black-ops-drivers]

Not really any way around that. It seems to be more recent changes in windows defender that doesn't like this tool. Technically speaking, any jailbreak kind of is malicious.

Anyways, if you are using chrome, you need to turn off safe browsing to download the file. You can also download and compile the source yourself.

[Oblivyn]

Does upgrading to X4 with the new v6 jailbreak affect dealer remote access through OvrC or Composer? I’m currently on 3.4.3 jailbroken (with the v5 tool) and my dealer can still connect remotely. I just want to know if that will still work on X4 after running the Director Patch, or if the SSH key setup changes that.

Thanks for all the work you’ve put into this. Just trying to understand how it impacts dealer access before I upgrade.

[black-ops-drivers]

The OS4 jailbreak works the same way as the OS3 one and your dealer will still be able to connect. The main change from OS3 to OS4 is the removal of the calculated password based on MAC address and the more locked down path to do upgrades. Just use composer 4.0.0 and follow the outlined steps above EXACTLY and you should be fine.

[Oblivyn]

Got it, thanks. Would you be able to tell me if this composer version will work? It is the only download link I could find: 4.0.0.734960

I’m a little confused as to what the Composer Pro 2025.8.20 build is? Did they change the build version to date-based?

[black-ops-drivers]

Yeah that will work. They did change to date based versions after 4.0.0 for just composer. Director will still use the existing versioning scheme.

[nicholasroberts-star]

Hi, my control4 system is on 3.4.3 and I gave downloaded v6 of the jailbreak and it all runs fine until the final part when the patch to director certificate and create back up fail, see screen shot, any ideas what is causing this

[black-ops-drivers]

That is not Garry’s jailbreak. Can’t help with that

[nicholasroberts-star]

Apologies I have been using Gary’s up to composer 3.3 , I tried it with 3.4.3 and it won’t work so I thought this version was the latest of the jail break, is there a link to the version of Gary’s that works with 3.4.3 , many thanks

[Oblivyn]

Does this work for 4.1.0.743847 yet? Has anyone tried it?

[hpeyton]

It does not. They changed the clientca-prod.pem file