Tutorial: Installing the PSP XMB – a 3.52 TN-V11 Custom Bubble – without an exploitable PSP game!
If you’re interested in using the PSP XMB on your PS Vita, even on firmwares 3.50 to 3.52, then you are going to love the following tutorial.
To successfully install the TN-V11 Custom Bubble we need a random PSP game as a base game & around 10-15 minutes of reading comprehension.
Qwikrazor’s Custom Bubbles for Firmwares 3.5x
Qwikrazor has decided to release a TN-V11 Custom Bubble for the PS Vita firmwares 3.5x, which may be easier to install than the ones of Major_Tom & Mr.gas.
While Qwikrazor’s Bubbles have less possibilites in terms of customisation, they do have the advantage of simplicity. Qwikrazor’s Bubbles are very easy to install.
Before I start with the tutorial, let me tell you that your PS Vita must not run Firmware 3.55 (or above) to follow this. If it already runs 3.55+ then you can’t follow this!
Requirements & Restrictions
At first you have to know what you need to successfully follow this tutorial, right? right!
We need a Playstation Vita (Fat/Slim/TV) that is running a firmware between 3.00 and 3.52. If you are on a lower firmware (such as 3.18, 3.36 or even 3.50) then there is no need to update to 3.52.
I would even say that updating from a lower Firmware to 3.52 is a bad idea. Keep in mind that you need to run at least system software 3.00, though.
We also need to have an Email account, the QCMA PC programm, a random PSP game as a base game, WinRAR/WinZIP/7-Zip and preferable the Thunderbird PC programm.
Before you can follow this tutorial, be sure that you have properly set up your Email application to enable you to write to the system partition.
If you didn’t do that yet, check out parts of this Article on how to do it. You only need to successfully set up the writer.eml for your Email account. No “dumping” required.
I assume that your Email application is properly set up, that you’ve have properly installed QCMA, Thunderbird, a ZIP opening programm and everything else you might had to install, so let me continue.
Always have a backup handy!
Before we start with the real deal, I would like you guys to connect your PS Vita to your PC and create a backup of your random base game. Just copy your base PSP game from your PS Vita to your PC and that’s pretty much it.
On the PC you should check the directory of your PS Vita related files (for me it would be Documents/PS Vita/PGAME/Letters&Digits/), in which you will find your game backup. In my example I am going to use UNO™ PSP (EU), which has a TitleID of NPEG00020.
It is important that you know your base game’s TitleID, since we are going to need it at a later time in this tutorial.
One Email and we’re done
As the header already tells you, we only have to send ourselves one Email and we are pretty much done with the whole PC part. But what should this email contain?
At first we should download Qwikrazor’s TN-V11 Files (for firmwares 3.5x).
Just click the download button at the top and it should download a ZIP-file which contains a TNV_0000 folder. This folder has to be copied to our other PS Vita savedata files (mine are located in Documents/PS Vita/PSAVEDATA/Letters&Digits/). It also contains a PBOOT.PBP file, which is the file we want to extract.
Now we should have this lone PBOOT.PBP file on our Computer and the TNV_00000 folder next to our other savedata files. Click on the QCMA icon in your tray (bottom right of your windows statusbar) and refresh the QCMA database.
Next we have to open Thunderbird. We open a new compose sheet and send ourselves an email. This email should contain no message at all, it should have the subject ux0:pspemu/PSP/GAME/*YourTitleID*/PBOOT.PBP (in my example it would be: ux0:pspemu/PSP/GAME/NPEG00020/PBOOT.PBP) & the email needs an attachment.
We choose our PBOOT.PBP as an attachment for the email and then, after the PBOOT.PBP file has been attached, we right-click the email’s attachment & rename the attachment from PBOOT.PBP to #0.
Everything done right? Subject is ux0:pspemu/PSP/GAME/*YourTitleID*/PBOOT.PBP and the attachment, our PBOOT.PBP file, is now called #0? Great!
Now send the email. – Some email providers will flag the just sent email as “suspected spam”, because it contains GAME in its subject.
This “suspected spam” detection might change the subject from ux0:pspemu/PSP/GAME/*YourTitleID*/PBOOT.PBP to *spam* ux0:pspemu/PSP/GAME/*YourTitleID*/PBOOT.PBP, which prevents us from installing the Custom Bubble!
Temporarily disable your email providers’ spam detected to get an email that has the proper subject: ux0:pspemu/PSP/GAME/*YourTitleID*/PBOOT.PBP.
Final steps – The Custom Bubble
If we have done everything right, we should now only have to use our PS Vita to get our own TN-V Custom Bubble.
Open the PS Vita’s Email application and search for your just sent email. Remember, as I said at the beginning, this only works if you have used the writer.eml trick before!
This said email should have an attachment called #0. This #0 attachment should have a photo icon, not a ?-icon! If it is not a photo icon then you’ve done something wrong.
If we click on this photo icon we should get an “Cannot display this image” error message. Any other error message is not what we want to happen.
It is important to say that if you get an error message you must not click on the OK button. Just use the PS-Button & close the email application after you got the desired error message.
Now disable your PS Vita’s Wifi & enable its Airplane mode. The next thing to do is to reboot the PS Vita.
After the PS Vita has turned off and on; we continue with the last step: Copying some files via the Content Manager.
Simply open the Content Manager and select “PS Vita -> Computer”, since we want to copy something from our Vita to our PC.
Now select PSP/other (Applications, at the top – Not savedata at the bottom!) and copy your base game from your PS Vita to your Computer. In my example I would copy my UNO game from my PS Vita to my PC.
If this was done successfully proceed with simply closing the Content Manager Application.
Now we re-open the Content Manager App and copy some files from our PC to our PS Vita. At first we go to our PSP savedata files and copy the TNV_00000 folder (blank name & icon) from our PC to our PS Vita.
Now we go back and select PSP/other (Applications, at the top) once again. We search for our base game (In my case the UNO game) and copy our base game from our PC to our PS Vita. We want to do this twice!
After we have copied the TN-V savedata & dealt with the base game stuff we should now see a TN-V eCFW Custom Bubble on our PS Vita homescreen. On the position your base game was should now be the TN-V Bubble, assuming you’ve successfully followed this tutorial.
Using TN-V for the first time
If this is your first time using the TN-V eCFW on your PS Vita, then you have to keep in mind that you have to an initial setup, before you can enjoy the XMB on your PS Vita. You only have to do this initial setup once.
For this initial setup you have to copy the 660.PBP (choose the 6.60 for the non-PSPgo devices) file into the TNV_00000 savedata folder, and transfer this (now updated) TNV_00000 folder to your PS Vita. The name of the downloaded EBOOT.PBP file has to be changed from EBOOT.PBP into 660.PBP.
Before & while you are starting the TN-V Custom Bubble, you have to keep the R trigger pressed. If done right a Recovery Menu should appear.
In said Recovery Menu you have to select Advanced, which will open a new sub-menu. This new sub-menu should contain an Install 6.60 Files function.
Select the Install 6.60 Files function and the device should install a few files onto your Memory stick. After this has reached 100%, you have to exit the Recovery Menu.
The PSP’s main menu – the PSP XMB – should now run on your PS Vita. The next time you run TN-V you won’t have to re-do this initial setup.















I would love to follow this but I have no base psp game to download and I can’t download anything from the psn store, any ideas?
If you happen to use the NA or JP PSN Store, this might help you:
http://wololo.net/2015/10/11/qwikrazor-releases-new-exploit-game-for-ps-vita-firmware-3-55-na-jp/
If you hurry & look up the Vita Update Blocker, you might be able to use the PSN Store while being on 3.52 to get a base game for Custom Bubbles.
I have the Vita Update Blocker but since I had a new account it won’t let me sign in to the psn store without the update popping up no matter what unle I”m doing something wrong..
Grab a PS3 & use the PS3 + CMA trick to activate your lower firmware PS Vita.
you could download the echochrome demo to a ps3 then if you have qcma you can load up your vita until it tries to connect with pc unplug and leave the usb cable plugged into your vita.. unplug from pc plug into ps3 (this will bypass the need to update) and transfer the echochrome demo to psvita and use echochrome demo as your base game.. this is what i did.
Check if VitaUpdateBlocker still works.
I just tried when I don’t have it on, I’ll click on ps store and it will ask for update, when I do have it on, I click on it, it goes to the log in screeen for my email and password I’ll click enter then it will ask for the update. Am I just stuck?
you could try downloading it via PS3 and then installing it onto your vita
if you are on 3,52 you can use vitaupdateblocker and download the free ape quest demo game to use as base game
vita update blocker is still working for me guys… I have TNV-11 and ARK-2 on 3.5.2 but the thing that gets me is ark has no sound with psx eboot and tnv will load eboot of diablo but hangs at the loading screen and it wont load thee fboot at all… any ideas am i missing a plugin? i only have lpp.prx
Hey, thanks for the tutorial Z.
I’m having issues with Qcma on firmware 3.5.2
No matter how I connect, wifi or usb, airplane mode, wifi disabled, everything– I get the error saying I need to update. I even tried Opencma instead and the same thing happened.
the regular CMA was never installed beforehand so I don’t think it was a driver conflict, but I dunno?
Tried rebuilding the database on the Vita and restarting without wifi on my PC and I just get this…
C0-13293-8
Enable airplane mode on your Vita. Disable your Vitas Wifi/3G.
Reboot the PS Vita.
QCMA should now work.
Sorry, still no good. Even in airplane mode I can only get it to stop asking for update if I turn of wifi on PC too.
And even then I get that stupid C0-13293-8 error. Maybe I’ll try another computer?
This happened to me a lot too. You have shut down qcma on your computer. Then run qcma again.
Piyotama game works well. I’m not sure if this game is available to download on PSN since I got it for free before, but if you can, download it now (it’s only 33MB) and use it as a base.
I just did the tutorial for ARK 2 with the files of TN-V and it work great!
This IS the ARK Tutorial. I just replaced the files & changed a few words 😛
Is there any chance at a mirror as the google drive copy is overwhelmed at the moment? Thanks for everything. 🙂
will it still work if I use the same base game i used for the ark bubble
Hi Zett,
I would super appreciate your advice on how to run psx games properly. I have tried tirelessly and scoured the web for methods to play psx games that are not psn classics. Is this even possible? e.g. on psp CFW an eboot of any ps1 game could be booted and played. Is this possible on TN-V11?
Methods I have attempted so far are psx plugin byepass, converting them to ISOs, etc. with no such luck. Any help would be amazing.
RJ
So you just need the psp game ? Nothing else to get this working from start to finish ? I have a 3.35 with both dev apps installed ready for whatever s to come. Never got a TN running on this one though … What should I do ?
I tried the other tutorials but didn’t succeed, Did anyone try with patapon or piyoma as a base game?
I **accidentally** pushed OK instead of closing the Email application. Am I now sc*** or should I just try again from step 1… suppose I’ll try again from step 1. Thanks to anyone who responds anyway 😀
Probably just do open the email again and don’t click it this time. Pretty sure I’ve clicked OK once and nothing happened (to prevent the eml trick) besides the intended effect not working.
im getting error C1-2738-0 when i touch the attachment (its appears correcly with a photo icon), even did the writer trick again 🙁
I am having an issue with transfering 660.PBP with the TNV save. I’m on 3.52.
The recovery menu boots as it should, but folder size is only 352KB, so the 660 EBOOT file isnt transferred for some reason. Any ideas?
Doh, I was just somewhat stupid and mixed up my backup folders with device id folder and whatnot. 😛
TN-V 3.52 for my PS TV works great!
Many thanks to the devs.
Did you use a regular Vita to get TN-V on to your PS TV? Is there a way to transfer files if you disable the internet connection on the PS TV? Maybe I should just do this on the vita and put the memory card in after it’s done.
The file has to be called 660.PBP – Full capitals & its ending is .PBP.
Check if your PC might automatically hide the extensions (the .PBP) of files it recognises (like “Picture.jpeg” is only displayed as “picture”). If so, check if you didnt call it 660.PBP.PBP.
It has to be 660.PBP
When i open TN-V bubble the screen keeps in blank and flickering, i tried pressing and holding R at diferents times
Thanks the Z I got it working with Urbanix , what I want to know is if it’s possible to create a VHBL bubble with this method ? Thanks for your tutorial.
Thanks It’s working with Urbanix ! Nice tutorial btw can we do this for homebrew bubbles ?
Can someone please show me where i can get psp filer to work from this… I’ve been trying for a while .
P.s. i have tn-vii allready set up
Hi, great tutorial . I have a question , shoul I create some kind of folder or something (and were to put it) becouse TN-V only finds my psp games from my ps vita ( the once that I buy on ps store) and the others that I transfer with a save file , the TN-V does not find them . Anyone can help me , or send me a link for a tutorial on what to do ? thanks in advance 🙂
EASY TNV BUBBLE !!! : If you already have an ARK/HBL/Filer bubble, you just transfer the TNV_00000 folder to the Vita like a regular PSP save data via CMA, then go to ARK on your VITA and copy ONLY the PBOOT.PBP from the TNV_00000 folder, to the game folder of your new base game (ux0:pspemu/PSP/GAME/*YourTitleID*/PBOOT.PBP ). Copy that game to your pc via CMA and transfer it back to your VITA (two times, just to be sure) and then, wou will have an easy TNV bubble!!!
How do i transfer games (PSP & PSX) to the vita after installing TNV?
The tutorial says “a firmware between 3.00 and 3.52”. I’m on 3.36 and have ARK installed, so I just copy-pasted PBOOT.PBP to a game’s folder(tried with urbanix, mad blocker and dissidia), all I’ve got is just a white screen after a startup. Holding R-trigger doesn’t do anything. So, the method doesn’t work on 3.36 or am I doing something wrong?
The method works on all FWs between 3.00 & 3.52.
The TN-V files themselves are only for 3.5x.
Grab 3.3x TN-V files and follow this tutorial for success.
Iv menaged to get bubble replaced with tnv also name changed but when i start is c1 2858 3 error i used tnv11 for 3.36 files becouse im on 3.36
How to play psx eboots with this on 3.51?
My dream is that one day I get to read “Installing the PSP XMB on 3DS Homebrew Channel” as like a shell or something. Maybe one day.
so that means when transferring the savedata file to the vita, it should not include the original pboot.pbp included?, instead it will only have the 660.pbp file? am i right?
Can Some1 Do A Tutorial With The Extended Version Of This Hack ( sqlite browers thing )
Can not get the Emailed File using Yahoo. Does not come up as a Image File. Comes up as something else and the Vita’s Email App says the File is not compatible with the System. Followed the Instructions to the letter.
Just got the white screen after startup. R-trigger do nothing….
What should i do?
PSVITA 3.50
UNO game as Base
Starting TNV I only get white screen. What’s the problem?
How do I customize the Launcher Area of a custom bubble?
Can this work on a VitaTV? Currently, my PSVita is on 3.55, but my VitaTV is on 3.52 with writer.eml enabled on it…
Hi, the exploit is on my Vita up and running. The reason i got TN-V11 was to play PS1 Games fully emulated with Sound and so on. From what I got, you need to transfer in with the TNV_0000 savegame and then install it, but I really can’t do anything with the save when its on my vita. Am i doing something worong? I would be very thankful for help!
Thanks for the tutorial. Sadly, it doesn’t work with 3.50 EU Vita. You get white screen after tapping on tn-v11 bubble. As far as I know, the solution is to manually update your Vita to 3.51, but the Zload.net is down, so I can’t download 351-Updaterlist.zip. If someone have it, please share 🙂
Anyone looking for a video tutorial I made one for the monthly contest here: http://wololo.net/talk/viewtopic.php?f=65&t=44617
Is there any kind of way to get the psp demo of Locoroco Midnight Carnival on my vita without a ps3 and without updating? My ps vita is all ready for rejuvenate, but I was looking to do this in the meantime however I cannot find a way to do it with no base psp game. I have Monster Hunter bought, however I forgot to make a backup before 3.52 came out thinking it was pretty much the end of psp exploits and thinking we were all moving onto native exploits.
I really wish someone would right a guide that assuming the person reading it knows nothing. An example would be when this guide says “Before you can follow this tutorial, be sure that you have properly set up your Email application to enable you to write to the system partition.” … Does that mean before we do this guide we have to watch and follow the entire 58 min video?
I’m having some trouble, have done the tut 3 times and my bubble stays hanging on a white screen, even while holding R (my first time launching). I’m on 3.36 using Uno NA as base game.
nvm got it working
how did you fix it? I have the same problem, same base game too.
How did you do ??
I kinda just skimmed threw but I have already done this and don’t have the xmb menu. So I have to do this again? Or can I just run a file within the custom bubble and install this with the custom bubble I already made?
I am on 3.50, I cannot use the Vitaupdateblocker to access the store. I have looked into doing it with a PS3 but I am not exactly sure where to start.
check your proxy ip and port, it should be same with vitaupdateblocker, make sure your pc and ps vita is on the same access point.
For some reason exiting recovery leads to black screen 🙁
I get to the point where you have to click on the photo icon, on the email, but nothing happens.
I have the same problem did you find a way to fix it?
i send the writer.eml to my vita fine and get the cannot display this image. i push the home button and close the email app. when i reopen the email app, it has not reset, but still has my email. any idea what i am doing wrong
Any idea on how to install psp games and psp homebrew on this? I got 3.52 tn-v11 running but do not know how to install anything to it.
download your psp game (e.g. patapon) and rename it to all caps. it should be PATAPON.ISO (i think ISO is included in all caps too and be sure to show the file extension so that you avoid PATAPON.ISO.iso file. and paste it inside the TNV_00000 folder along with the 660.PBP.. run the tn-v and you should now see the patapon in game column.
download your psp game, change the name of the game to all caps (e.g. PATAPON.ISO), paste the game inside the tnv_00000, refresh database of qcma, copy savefile(tnv_00000) from pc to psvita, run tn-v custom bubble, have fun.
i can’t get to work the custom themes plugin, i’ve done everything )):