Hello EEVBlog forum community,
I'm hoping to get some advice as not to brick my brand new scope. I've asked the same question, but didn't receive a clear "yes" on the Rigol 'unlock' thread found here: https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg472869/#msg472869
I would just want to ensure, preferably from someone that has already done it, the proper steps to take in order not to ruin my scope! On a somewhat related note: I've rooted my android phone before and have been successful in installing multiple ROMs as well. The phone would be cheap to replace if I ever broke it, so I wasn't too worried about it unlike possibly ruining this scope along with voiding the warranty!
The reason I would like to do this lies in the extreme usefulness of the SPI, and I2C decoding and triggering options which already has helped me fix an issue. The scope came with a ~48 hour trial of each option.
Thanks greatly in-advance for any help / reassurance provided!
- Bear
I'm getting my scope tomorrow, was wondering if unlocking it would void the warranty?
I'm getting my scope tomorrow, was wondering if unlocking it would void the warranty?
I know if I was a manufacturer of hackable test gear looking for reasons to deny warranty repairs, checking that the product has not been tampered with would be at the top of my RMA check list. I would probably put a scan port somewhere to read all the major chips to quickly identify known hacks, non-stock or corrupt firmware, read the serial number, options, stats, error codes/logs, maintenance events, calibration data, etc.
So your luck with getting free RMA repair for a scope with hacked keys may depend on your luck with the Rigol RMA tech being unable to read codes, not bothering or forgetting to. You would probably want to reset the scope to stock config before sending it in if you can.
Is it possible to reverse the changes made?
I used the keygen from Riglol to unlock my new DS1074Z-S (firmware 00.02.01.SP1) and it worked fine (I used DSAB, DSAC, DSAE, and DSAJ).
In the installed option menu, all options are now "official", with no time limit.
I would like to upgrade to firmware 00.04, that I download from
http://gotroot.ca/rigol/DS1000Z-04_00_00_00.7z, but I don't know how to do.
=> Where could I look to find a step by step procedure ?
Is it possible to reverse the changes made?
I just tried it using the command :SYSTem:OPTion:UNINSTall in the UltraSigma software to remove the one option I installed and it worked fine. I don't know if it works with the 100MHz and 500uV options since they are unofficial, but it is supposed to uninstall all so probably.
I would like to upgrade to firmware 00.04, that I download from http://gotroot.ca/rigol/DS1000Z-04_00_00_00.7z, but I don't know how to do.
=> Where could I look to find a step by step procedure ?
Search for instructions on how to enter Rigol's bootloader - you need to hit a button (don't remember which) at the right time during power-up to make it enter bootloader mode. From there, all you need to do is put the firmware on an empty USB key, plug it in the scope and wait.
To install the update, format a USB drive as FAT32, then just copy across the DS1000ZUpdate.GEL file from Sparrow(Boot)update_00.04.00.00.00 folder (this includes the updated bootloader code I guess).
Plug it into your scope while it's already booted. It will detect the firmware and ask you if you want to update. If you haven't formatted the drive correctly as FAT32 (FAT16?) it will pop up a small error message when you plug it in.
This update fixed the atrociously slow menu/update speed when changing frequencies on the function gen (for the -S models).
To install the update, format a USB drive as FAT32, then just copy across the DS1000ZUpdate.GEL file from Sparrow(Boot)update_00.04.00.00.00 folder (this includes the updated bootloader code I guess).
Plug it into your scope while it's already booted. It will detect the firmware and ask you if you want to update. If you haven't formatted the drive correctly as FAT32 (FAT16?) it will pop up a small error message when you plug it in.
This update fixed the atrociously slow menu/update speed when changing frequencies on the function gen (for the -S models).
I can confirm that this method worked great with my DZ1074z-S, I went from already hacked scope running V_00.02.00 to V_00.04.00 and all of the hacked upgrades were retained after the update - it still thinks its a DZ1100z-S with lots more trigger options etc
I unlocked mine(bought in April) using this nifty little site: http://rigol.avotronics.co.uk/mirrors/riglol/
Here's what you do:
1. Make sure your scope has the most recent firmware, when last I checked there was no update available, but just make sure that's still the case
2. On your scope, go to Utility -> System -> System Info. The little Pop-Up window tells you your Serial No, which you enter on the Keygen website
3. On the website, enter 'DSER' as your selected options, or pick the combo you fancy from the list below the entry fields(DSER gets you all available ones without the buggy 500uV range)
4. The 'Privatekey'-Field should fill itself, don't touch it
5. Click generate. Now you have a valid key to enter into the scope
6. Do the key-entering according to the normal Rigol User-manual: Utility -> System -> Options -> Setup ...
7. Be happy! 
I guess this method has the great advantage of being pretty risk-free: Either the scope's firmware will accept the keys or it won't, I don't think you can brick anything that way.
Regards
Laertes
Awesome! I got the piece today. Very happy with it.
Now it's time to hack it. O0
This video is about the 1054Z. Go to 7:00. It's supposed to demonstrate an upgrade to 100MHz, (along with all other options).
Can anyone identify the generator? What is the bandwidth of that? The poster and commenters do not seem to mind the roll-off above 50MHz. Could be the generator.
Anyone have any failures doing upgrades like this?
This video is about the 1054Z. Go to 7:00. It's supposed to demonstrate an upgrade to 100MHz, (along with all other options).
Can anyone identify the generator? What is the bandwidth of that? The poster and commenters do not seem to mind the roll-off above 50MHz. Could be the generator.
Anyone have any failures doing upgrades like this?
Well, he went from 3.5 divisions amplitude at 50 MHz to 1 division at 100 MHz which would be -11dB. It would have to be better than -3 dB if:
1. It really is 100 MHz bandwidth
2. The signal generator output is properly terminated (it didn't appear to be)
3. The signal generator's output is accurate and in calibration (and I'd guess at least +/- 0.5 dB)
Edit: the SG appears to be a Rigol DG4162 or perhaps DG4102. The spec is +/- 0.4 dB at 100MHz for both. That would be about +/- 5% so it's not flatness of the SG that's causing that significant drop in amplitude.
So, I took a signal generator (HP 8640B), spectrum analyzer (HP 8568A), 60 MHz oscilloscope (Tek TDS210) and a Pomona 50 ohm BNC pass-thru terminator. The 'scope was averaging 16 samples and I used the measurement function to give RMS values.
I set the SG for -10dBm and swapped back and forth between the 'scope and SA (the SA was just to check the flatness of the SG output*).
In summary, the TDS210 was down 4.6dB at 100MHz - not bad IMO - and much better than the DS1054Z in the video. I find it hard to believe that that video proves anything, certainly not that the 'scope had an effective 100MHz bandwidth.
I will run the same test on an unmodified DS1054A when it shows up...
*Yes, I know the SA's input isn't flat either, so you could say I could be +/- 3dB out, but even so, the old TDS210 still easily beat the "100MHz modified" DS1054Z as portrayed in the video.
The poster and commenters do not seem to mind the roll-off above 50MHz.
It can see in video this measuring method is totally wrong if he have tried to show that after mod its BW is 100MHz.
I can take what ever scopes, and what ever signal generator and .... then use this method what guy use in video and all is just garbage what is related to banwidth.
There is two possible reasons who make this video and why result is this related to BW
-- 1. he did not even try measure BW is ok for 100MHz
-- 2. He really do not know anything, not even lowest basic Fundamentals and principles how to measure. (look this totally fun fool connection between these two equipments.)
With this connection, result is of course totally wrong with what ever scope and what ever signal generator.
With acceptable signal connection result is of course totally different (and I believe much of better).
I think this video is not at all made for show accurate result for mod.
But it show simply how to do mod. And for this purpose it is ok.
In summary, the TDS210 was down 4.6dB at 100MHz - not bad IMO - and much better than the DS1054Z in the video. I find it hard to believe that that video proves anything, certainly not that the 'scope had an effective 100MHz bandwidth.
I will run the same test on an unmodified DS1054A when it shows up...
Shiny new out of the box DS1054Z:
HP 8640B set at approximately 0dBm -> RG-58 cable -> BNC T with 50ohm terminator -> channel 1 input.
12.5MHz 213mV RMS*
25MHz 203mV RMS
50MHz 185mV RMS
100MHz 143mV RMS
That would be 3.5 dB down at 100 MHz which is much better than the youtube video showed for a
modified scope.
For the record, at 200MHz 111mV RMS.
*RMS as displayed by the scope. Not that it really matters since it is a sine wave from the 8640B.
Edit: and remember, the 8640B output is neither flat nor accurate. +0.75, -1.25 dB spec for flatness.
Hello
I have new mso 1074z-s but the unlock codes from riglol.zip file (dser)does not work.
firmware version 00.04.00
please help
thank you
Same situation here Soft version 4.02SP3 Board 0.1.1 also does not work, the party is over, no more reason to buy this scope, without the free upgrade the situation is favarable for other models, I will return my back
Bought on Jan 10 2015 from baratronix.
The hack apear to work only on older versions
Yay that worked on a DS1074Z purchased late 2014, firmware 00.04.00. Thanks ebclr.
First of all, hello!
I'm planning to buy a Rigol DS1074Z soon, so I'm reading the posts about how to unlock it. I wonder if the new models (I do not know what model I'll get, but I think that is the new one) can be unlocked too. So, any one has trying to unlock some of these latest models?
Thanks a lot and best regards, Mauro.
I'm sure it will work, however, I cant get by the private key... it does not auto fill like its supposed to do.
ideas?
I just unlocked my ds1054z yesterday after receiving it last week. Worked first try, although entering the code using the knob takes like 15 minutes.
Software version: 00.04.02.SP4
Board version: 0.1.1
The key is auto-populated based on the serial number you enter. I assume that if the webpage fails to find a private key it is because it does not recognize your serial number. You have to include the whole serial starting with the DS prefix.
i tried the option above
:SYSTem:OPTion:UNINSTall
and I'm presented with the below error
VISA: (Hex 0xBFFF0015) Timeout expired before operation completed.
I'm connected via USB cable
Can anyone shed some light so I can remove the options please.
Thanks much
disregard folks, false alarm. Even though it presented an error, all options have been uninstalled.
Thanks
Thanks