Author Topic: Agilent MSOX4054A repair (NAND corruption issue)  (Read 2523 times)

0 Members and 1 Guest are viewing this topic.

Offline hotacid

  • Contributor
  • Posts: 6
  • Country: us
Agilent MSOX4054A repair (NAND corruption issue)
« on: January 13, 2020, 08:22:16 am »
Hi folks! Longtime lurker here coming out of the dark  :)

I recently acquired a used MSOX4054A scope from an auction only to find it doesn't boot when I try to turn it on. The unit is in great shape so I don't suspect anything physical has damaged it.

This is what happens:
1. I push the power button to the "on" position. I hear the fan turn on.
2. The front panel LEDs all turn on and off again once very briefly
3. About 1s later, the "Ref" button LED turns on and stays solid
4. About 1s later, the "Math" button LED turns on and stays solid
5. About 3s later, the "Digital" button LED turns on and stays solid
6. Nothing more happens past this. The scope stays stuck forever

After hours of searching the web on this issue, I came to understand there is a known issue with the 2000X/3000X/3000T/4000X series scopes where the main NAND becomes corrupted over time and this prevents the unit from booting.  The descriptions of other peoples issues sounds very similar to my units behavior so I suspect I have the same problem.

I found some mentions of Keysight fixing this problem for free so of course I tried that path first... a week later and several emails + phone calls later, Keysight told me that it won't be covered for me and wouldn't give a reason why. Strangely, the applications engineer I spoke to was also surprised that it wasn't covered but even a 3-way call with him and the repair department didn't help. They wanted $4500 USD so I politely declined. :--

So now I'm trying to fix this unit at home. Fortunately, there is a quite helpful thread about hacking these series of scopes which contains very valuable information on how to potentially repair this thing. Yes, I read all 97 pages.
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/

I've gotten the unit apart and I have access to the serial connection from the SPEAR600-2 CPU. A serial log of the unit booting seems to all but confirm some memory corruption has occurred. Here's a snippet of the serial output (full log attached).
Quote
    Loading image 1 from memory at 0xD0400000
   O
   BL_IMAGE_TYPE_BIN

   X
   XXXXXOOOOXXOOOOOOOOXOXOXOOOOOOOXOOXOXOOOOXXOOOOOOOOOXOOOOXOXOOXXXOOOXOXXXXOOXXOXOOOOOXOOXXXXOXXOOOXOOXXOXXOXOOOXOOXOOXXOOOXOOOOXOXOOOOOXOOOXOOXOXXOXOXOXOXXXXXXOXXXXXOOOOXOOXOOXOOOOXOOOOXXOXOOOOOOOXOOOXOOXOOOOXX
   OOOOOXOOXOOXOXOOOOOOOOOXOOOOXOOOOOOXOXOOOOXXOOOOOOOXOOOOXOOXOOOXOOOXOOXXOOXOOXOXXOXOOXOXOXOXOOOXXXOOXOXXOOOXXXXOXOOXOXOOOOXOOOOXOOOXOOXOOXOOOXOOOOOXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOXXXXXXXXXXXXXXXOXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOIncorrect Data 0 EccResult: 566556 EccError: ff3c3c EccRead: a9596a
    EBOOT_ReadFlash failed offset 204eb88
    EBOOT_ReadFlash failed location d2054000
   ODeCompressFlash: CeCompressDecode() failed
    CeDecompressFlashBlock failed
   ****** Data record 146 corrupted, ABORT!!! ******

I've been following along the footsteps of one user (titiris - thank you!) who reported he was able to fix his NAND corruption by transferring the unpacked firmware kernel image 'nk.nb0' to the scope over the serial connection (using YMODEM mode), booting the image, which then boots from an external USB drive. Once the Infiniium software is up and running, a normal firmware update procedure can be carried out through the scope GUI to repair the damaged files. His explanation is here:
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg2136181/#msg2136181

However, I'm hitting an issue with this method. It seems that the YMODEM image transfer always stops abruptly when it gets to ~75% complete. No error messages or warnings are printed. I also tried following along Frankbuss's method by using TFTP but this hits the same issue... the transfer is working fine until 61466628 Bytes are transferred (out of 81508824 Bytes total) and then it just stops. It looks like the unit is hanging. Is the image too big and the scope ran out of memory? I'm not sure what is going wrong.
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg260917/#msg260917

Has anyone tried this on a 4000X series scope? Any suggestions would be greatly appreciated!

 

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3164
  • Country: ca
  • Living the Dream
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #1 on: January 13, 2020, 06:24:39 pm »
I've never had the chance to try repairing a 4000x series, only the 2000/3000. Your file does seem large though compared to the ones for the 2000/3000.
I dream of finding a corrupted 4000x(or even 6000x) series some day for a great price.
VE7FM
 

Offline hotacid

  • Contributor
  • Posts: 6
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #2 on: January 14, 2020, 04:58:02 am »
Yeah the image size is about double that of the 2000/3000 series. But the instrument must have enough RAM to hold the transferred image, right? I'll see if I can split the image in two and do two transfers.

Another problem I have is that I can't find the old firmwares for this scope. It was mentioned in titiris' guide that the firmware version I transfer over to the unit has to be similar to the (corrupted) one on the NAND, or the boot may not get far. If anyone has one sitting on their machine, I'd love to get my hands on it! Here's a complete list of the firmwares. I have only managed to find 7.30 and 4.08 from searching the internet.

File Name                                              Release Date        Instrument Software Version
4000XSeries.7.30.2019051435.ksx29 May 20197.30.2019051435
4000XSeries.7.20.2017102615.ksx26 Oct 20177.20.20171026
4000XSeries.7.11.2017061227.ksx12 Jun 20177.11.20170612
4000XSeries.7.10.2017042903.ksx29 Apr 20177.10.20170429
4000XSeries.07.10.2017041132.ksx11 Apr 20177.10
4000XSeries.04.08.2016071801.agx27 Jul 20164.08
4000XSeries.04.07.2016040802.agx20 Apr 20164.07
4000XSeries04.05.2015051200.agx27 May 20154.06
4000XSeries04.05.2015021000.agx16 Feb 20154.05
4000XSeries.04.00.2014101303.agx01 Nov 20144.00
4000XSeries03.22.2014052101.agx21 May 201403.22.2014052101
4000XSeries.03.21.20140110001.agx21 Jan 201403.21.20140110001
4000XSeries.03.20.2013082300.agx03 Sep 201303.20.2013082300
4000XSeries.03.12.2013041700.agx23 Apr 201303.12.2013041700
4000XSeries.03.11.2013030100.agx01 Mar 201303.11.2013030100
4000XSeries.03.10.2013020700.agx12 Feb 201303.10.2013020700
4000XSeries.03.01.20121212001.agx12 Dec 201203.01.20121212001
4000XSeries.03.00.201209XXXX.agx?? Sep 20123.00
 

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3164
  • Country: ca
  • Living the Dream
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #3 on: January 14, 2020, 07:15:24 am »
With a 2000/3000 the firmware you transfer over does need to be the same version on the scope or very close or it won't boot all the way(or at all). Is the scope Agilent or Keysight branded, you can use that to give you a hint of a version to try. I have no 4000x series firmware myself.
I still am wondering about the image you're using, I don't think it should be double the size.
VE7FM
 
The following users thanked this post: hotacid

Offline hotacid

  • Contributor
  • Posts: 6
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #4 on: January 14, 2020, 08:24:48 am »
With a 2000/3000 the firmware you transfer over does need to be the same version on the scope or very close or it won't boot all the way(or at all). Is the scope Agilent or Keysight branded, you can use that to give you a hint of a version to try. I have no 4000x series firmware myself.
I still am wondering about the image you're using, I don't think it should be double the size.

Yes, I'm quite worried that will be the case when I do figure out how to transfer it.

The scope is Agilent branded. Looking at its service history, Keysight performed a repair (the scope wouldn't fully power on!) by replacing the acquisition board and calibration on Feb 11 2015. There is also an interesting note that says the owner declined to have Service Note MSOX4054A-02 completed around the time it was being repaired. This service note is recommending a firmware upgrade if the version on the instrument is 3.11 or older. The fact that the owner declined a firmware update in 2015 makes me think it was probably not updated past this point. So the scope may have an ancient 3.11 or older version on it... not good.

I think 80MB is correct because the "Declassification of the InfiniiVision X-Series Oscilloscopes" document you can find online shows the Windows CE portion being this large.

Splitting the image in two didn't work. The first transfer was fine (41943040 bytes) but the second transfer hit a hang after byte 19522932 had been transferred. I also tried placing it in at a different starting address in memory (0x0 instead of 0x361000) but this likewise hit a hang after 65010380 bytes.
 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 1814
  • Country: pt
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #5 on: January 14, 2020, 10:21:56 am »
Yeah the image size is about double that of the 2000/3000 series. But the instrument must have enough RAM to hold the transferred image, right? I'll see if I can split the image in two and do two transfers.

This is a complex recovery. You need to have more assurances in order to succeed. The equipment has 128 MBytes RAM as you can see in your boot log.

Aren't you overwriting the prog that is running, when loading into RAM?

Is RAM all OK?

First step, I suggest you do a methodic mapping of your RAM space in order to understand if your loading space is valid. Take a 10 MB chunk and load it at offset 0, 10 MB, 20 MB, 30 MB, 40 MB, 50 MB, etc... and see where it hangs.

Can you stop the bootloader? That would be great. That could allow us to dump NAND.

Can you dump the bootloader (NOR Flash 512kB)?
« Last Edit: January 14, 2020, 07:03:53 pm by tv84 »
 
The following users thanked this post: hotacid

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3164
  • Country: ca
  • Living the Dream
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #6 on: January 14, 2020, 05:45:28 pm »
You then likely do need firmware 3.x to have a chance at recovering the scope. Unless you find a way to recover it we haven't thought of yet.
VE7FM
 
The following users thanked this post: hotacid

Online PA0PBZ

  • Super Contributor
  • ***
  • Posts: 4445
  • Country: nl
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #7 on: January 14, 2020, 06:53:51 pm »
Your bootlog suggests that it is trying to load 0x4D6BA80 bytes into RAM, which equals to 81181312 decimal bytes. This is smaller than your image and my best guess is that it is indeed a previous version since they never shrink :) If you can locate older versions I'd take the one with an image size of 81181312.
Keyboard error: Press F1 to continue.
 
The following users thanked this post: hotacid

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 660
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #8 on: January 15, 2020, 10:34:38 am »
I have all firmware version starting with Keysight branding, thus 4.00 ++
I checked the size of nk.bin of all firmware versions, unfortunately no match so you do not have to bother with 4.xx versions:
4.00: 80922891 byte
4.01-4.04: no such, regarding the release notes
4.05: 81539207 byte
4.06: 81413855 byte
4.07: 79718035 byte
4.08: 81031923 byte
7.10 and newer are all way larger

Unfortunately I do not have any version below 4.00 available. There once was a helpful HP/Agilent group on Yahoo where you could ask for such help. You might try it there if the group still exists. Possibly it moved away from Yahoo to somewhere else ... i have some vague memory about this.
 
The following users thanked this post: hotacid

Offline Keysight DanielBogdanoff

  • Frequent Contributor
  • **
  • Posts: 744
  • Country: us
  • ALL THE SCOPES!
    • Keysight Scopes YouTube channel
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #9 on: January 15, 2020, 10:07:26 pm »
I'm going to check in as well and see what the internal folks have to say.
 
The following users thanked this post: PA0PBZ, egonotto, thm_w, Zucca, Refrigerator, 2N3055, hotacid

Offline hotacid

  • Contributor
  • Posts: 6
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #10 on: January 17, 2020, 05:54:41 am »
Yeah the image size is about double that of the 2000/3000 series. But the instrument must have enough RAM to hold the transferred image, right? I'll see if I can split the image in two and do two transfers.

This is a complex recovery. You need to have more assurances in order to succeed. The equipment has 128 MBytes RAM as you can see in your boot log.

Aren't you overwriting the prog that is running, when loading into RAM?

Is RAM all OK?

First step, I suggest you do a methodic mapping of your RAM space in order to understand if your loading space is valid. Take a 10 MB chunk and load it at offset 0, 10 MB, 20 MB, 30 MB, 40 MB, 50 MB, etc... and see where it hangs.

Can you stop the bootloader? That would be great. That could allow us to dump NAND.

Can you dump the bootloader (NOR Flash 512kB)?

tv84: You make an excellent point. It would make sense that I see the scope hang if I'm overwriting the running program. I will try mapping out the memory as you suggested.

Yes, I can stop the bootloader. There are actually two stages where I can stop it: the first is at the U-Boot monitor prompt, where I am able to execute a large number of possible commands. Please see the attached log for the list. The second is after the "PBOOT" primary boot loader image, which appears to be a Windows CE 6.0 standard bootloader. From there, I have four choices (again, see log). One very interesting one is an option to boot over ethernet. I tried this but the scope is waiting for some response from a host machine over the network that appears to be related to a "Windows CE 6.0 Platform Builder" tool that I need to see if I can get a copy of.

The U-Boot monitor seems to give full control over the CPU resources. I just have to hack around and experiment to figure out how to use it all. It should be possible to dump arbitrary memory regions and run arbitrary code. The only issue is that I'm mostly a hardware guy so it will take me some time  :)

I have all firmware version starting with Keysight branding, thus 4.00 ++
I checked the size of nk.bin of all firmware versions, unfortunately no match so you do not have to bother with 4.xx versions:
4.00: 80922891 byte
4.01-4.04: no such, regarding the release notes
4.05: 81539207 byte
4.06: 81413855 byte
4.07: 79718035 byte
4.08: 81031923 byte
7.10 and newer are all way larger

Unfortunately I do not have any version below 4.00 available. There once was a helpful HP/Agilent group on Yahoo where you could ask for such help. You might try it there if the group still exists. Possibly it moved away from Yahoo to somewhere else ... i have some vague memory about this.


Pinkus: Thank you very much for checking on that for me. That is strong evidence that the scope is indeed on a 3.xx build.

I'm going to check in as well and see what the internal folks have to say.

Daniel: I would be thrilled if you could help out! An old firmware image, maybe some hint on possible recovery mechanisms, anything...  :D
 

Online PA0PBZ

  • Super Contributor
  • ***
  • Posts: 4445
  • Country: nl
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #11 on: January 17, 2020, 08:00:21 am »
The second is after the "PBOOT" primary boot loader image, which appears to be a Windows CE 6.0 standard bootloader. From there, I have four choices (again, see log). One very interesting one is an option to boot over ethernet. I tried this but the scope is waiting for some response from a host machine over the network that appears to be related to a "Windows CE 6.0 Platform Builder" tool that I need to see if I can get a copy of.

I compiled a tool that you can use on a windows machine many moons ago: https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg1022267/#msg1022267

The story behind it: https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg1022248/#msg1022248
Keyboard error: Press F1 to continue.
 

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3164
  • Country: ca
  • Living the Dream
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #12 on: January 17, 2020, 08:48:33 am »
CELoader is a tool I nearly always use during a recovery,  :-+ :-+ :-+ :-+ :-+
VE7FM
 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 1814
  • Country: pt
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #13 on: January 17, 2020, 09:40:25 am »
Yes, I can stop the bootloader.

Those are good news. Go into NAND susbsytem and see what commands are available.

Attach them here.

 

Offline Keysight DanielBogdanoff

  • Frequent Contributor
  • **
  • Posts: 744
  • Country: us
  • ALL THE SCOPES!
    • Keysight Scopes YouTube channel
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #14 on: January 17, 2020, 05:12:27 pm »
I will be following up via PM, it sounds like there's a good chance it's the NAND.
 
The following users thanked this post: KE5FX

Offline hotacid

  • Contributor
  • Posts: 6
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #15 on: January 21, 2020, 02:45:56 am »
All: Daniel has reached out to me and it's looking like the scope probably does have the known NAND corruption issue, and if so, it will be repaired by Keysight at no cost. I can't turn up an offer like that so I'm ending my repair attempt of it.

Yes, I can stop the bootloader.

Those are good news. Go into NAND susbsytem and see what commands are available.

Attach them here.



tv84: Please see the attached log. I dumped the NAND commands and also tried reading a few pages but it always returns all 0xFF for every byte. I've tried reading pages 0 to 3.

The second is after the "PBOOT" primary boot loader image, which appears to be a Windows CE 6.0 standard bootloader. From there, I have four choices (again, see log). One very interesting one is an option to boot over ethernet. I tried this but the scope is waiting for some response from a host machine over the network that appears to be related to a "Windows CE 6.0 Platform Builder" tool that I need to see if I can get a copy of.

I compiled a tool that you can use on a windows machine many moons ago: https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg1022267/#msg1022267

The story behind it: https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg1022248/#msg1022248

PA0PBZ: Thanks for the tool! I tried it out and it worked to send the image I had for v4.08 of the firmware. The scope got further than I've ever seen it get - it started booting it and the front panel LEDs went through more steps than before - but it must have hit a problem during the boot because eventually the LED sequence went into an infinite cyclic pattern. Unfortunately, there's no more serial output after it starts trying to boot it so I can't say what went wrong. Most likely it's because the firmware version I'm trying to boot is quite different from the 3.xx version already on it. I attached my boot log.
 

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 660
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #16 on: January 21, 2020, 09:47:05 am »
All: Daniel has reached out to me and it's looking like the scope probably does have the known NAND corruption issue, and if so, it will be repaired by Keysight at no cost. I can't turn up an offer like that so I'm ending my repair attempt of it.
Congratulation. It looks like everything's gonna turn out just fine for you.
However, I'm surprised the Keysight Repair Center turned down the free repair without even seeing the unit. At least they should have offered to check it. Did Daniel have anything to say about this?
 

Offline hotacid

  • Contributor
  • Posts: 6
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #17 on: January 22, 2020, 06:40:05 am »
All: Daniel has reached out to me and it's looking like the scope probably does have the known NAND corruption issue, and if so, it will be repaired by Keysight at no cost. I can't turn up an offer like that so I'm ending my repair attempt of it.
Congratulation. It looks like everything's gonna turn out just fine for you.
However, I'm surprised the Keysight Repair Center turned down the free repair without even seeing the unit. At least they should have offered to check it. Did Daniel have anything to say about this?

Not specifically, no. Maybe it was a misunderstanding on one or both ends of the call. These things happen  :-//
 

Offline Zucca

  • Supporter
  • ****
  • Posts: 2862
  • Country: it
  • EE meid in Itali
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #18 on: January 22, 2020, 07:06:49 am »
In my experience Keysight is a company you can trust, and they trust you always unless there are evidences you are a stupid crook.

I hope all the company could go close to the Keysight standard.
« Last Edit: January 24, 2020, 09:34:08 am by Zucca »
Can't know what you don't love. St. Augustine
Can't love what you don't know. Zucca
 

Offline HighVoltage

  • Super Contributor
  • ***
  • Posts: 4516
  • Country: de
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #19 on: January 22, 2020, 09:25:27 am »
All: Daniel has reached out to me and it's looking like the scope probably does have the known NAND corruption issue, and if so, it will be repaired by Keysight at no cost. I can't turn up an offer like that so I'm ending my repair attempt of it.

I had two scopes with NAND problems repaired by Keysight over the years and never had an issue.
Keysight is an amazing company, that has always taken care of any problems I had.
Great that it worked out for you as well.
And great that we have Daniel here.

There are 3 kinds of people in this world, those who can count and those who can not.
 
The following users thanked this post: egonotto

Offline jake111

  • Regular Contributor
  • *
  • Posts: 58
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #20 on: February 08, 2020, 08:23:22 am »
For what it's worth, I had DSO-X3054A with the same problem.  Mine has recurring NAND corruption issue even after I fixed it, I have corrupt NAND blocks being reloaded on almost every startup (visible in the serial console).  Originally I was on 2.35 firmware which bricks when corrupt, it would become corrupt after being off for only a few minutes.

It was stuck at the infinitely looping lights on the front panel even after using bootp command to load nk.bin from my computer and then using the NAND WRITE to write it to the NAND (this could also be accomplished by using ymodem transfer thru serial but MUCH slower).  I suddenly realized that this message about failing to program the FPGA was important...  So after programming NAND (which I had to do every few boots because it would become corrupt again) I then transferred FPGA3000A.bin (for 3000 series) into memory and programmed the FPGA with it, then without rebooting, booted with the boot command.  Viola!  My machine then proceeded to boot from my 2.35 USB boot disk, and I then hastily upgraded it to 2.50.

Now it boots reliably but on almost every boot it notes corrupt NAND blocks and rewrites them.  I think my NAND is not long for this world, but thought I would mention this trick in case someone else gets stuck at the infinitely looping lights and can't figure out why.  It seems that the FPGA has to be programmed in order for the infiniivision launcher to proceed far enough to get the machine to boot from USB.  I assume that the FPGA data must normally be stored in NAND and this is why mine lost it.  NAND alzheimers is a terrible thing.
 

Offline EE-digger

  • Regular Contributor
  • *
  • Posts: 159
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #21 on: February 08, 2020, 09:24:35 pm »
Thanks for that valuable lesson !

I wonder if we should have a sticky area which mirrors/archives all things related to the "resurrection" of DSOX, MSOX models.

 

Offline jake111

  • Regular Contributor
  • *
  • Posts: 58
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #22 on: February 08, 2020, 11:35:44 pm »
From what I have learned I think it is possible to resurrect even if the flash is inadvertently corrupted or erased.  You just need to know appropriate memory locations and then use hardware level interface to get it in there.  It appears that you need only the boot loader (p500?) to regain console and network access if this is broken, and from there you can load the appropriate OS binary and boot far enough to revive it from USB.  I found a lot of conflicting information in the 2000/3000 series thread about how to actually construct a USB boot disk, there seem to be many methods and formats for the .lnk file but I believe only one of them is correct and others simply work because of intact OS images on the machine.  I know there are variances between firmware versions but based on my experience you should only be using the latest or later firmwares which can recover from these known NAND issues.

Fortunately it sounds like Keysight has acknowledged the NAND flaw and are repairing it but I assume that sooner or later this will not be the case as all products fall out of support at a certain point.  At this point the information on how to recover these scopes will be very important!
 

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3164
  • Country: ca
  • Living the Dream
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #23 on: February 09, 2020, 04:57:30 am »
If the flash is fully erased you will lose factory data - cal data, serial #, licenses etc.
VE7FM
 

Offline jake111

  • Regular Contributor
  • *
  • Posts: 58
  • Country: us
Re: Agilent MSOX4054A repair (NAND corruption issue)
« Reply #24 on: February 13, 2020, 03:17:39 am »
If the flash is fully erased you will lose factory data - cal data, serial #, licenses etc.

I'm confused on mine because it suffered the NAND issue yet the serial, model number and "license model number" are gone.  Do you know if anyone has successfully rewritten these?  I found the DLL with SCPI commands in nk.bin but its obfuscated and it looks like I'm going to have to walk the code to try and get strings out of it... Argh
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf