they will most likely not do that. If you are not a regular customer that spends n* 10k or >100k each year....you won't even get a meaningful discount.
Hi guys.. Nice to saw here some progress. I have R&S UPL and I Am also interested in some sw options.
@CJay Can you give me more information how do you make setup on RPi?
Cheers,
Damir
Sent from my iPad using Tapatalk
FEEC0364A639F575
A2AF0325E648F54D
4D8CB38F128844B2
0A4080E5DDB3F339
08678B2806514740
D710C80B984FFD23
8E1182008AE45EB2
42D23B964CE7C522
DE8BC25F5305D1EB
6E1701C72B5F9256
6B53740D41CF8780
DBBE31F8EAEB9C22
And the options installed are 917D1CFF38E8F2C1
AC15C4AFBA26733A
D87CDA77974C9514
BE238053BEA30B16
75AE27EBF3F52E40
DFB718A6C9D85764
11B26D02CEE94BEA
and options:from Crypto.Cipher import ARC2
import struct
KEY = "Revision\0" # decryption key for the data
STRUCT_TWO_UNSIGNED_INTS = "<II"
for line in open("SWOPT.DAT"):
if len(line) == 17:
cipher = ARC2.new(KEY) # a new ARC2 cipher with the right key (ARC2 is a symmetric block cipher, we need a new cipher for each ciphertext)
ciphertext = line.strip().decode("hex") # Decode our ciphertext from hex, removing whitespace from the start and end
plaintext = cipher.decrypt(ciphertext) # Decrypt the cyphertext using the key
a, b = struct.unpack(STRUCT_TWO_UNSIGNED_INTS, plaintext) # unpack two unsigned ints from the plaintext
print "SN: %d - %08x" % (a, b)
from Crypto.Cipher import ARC2
import struct
serial = 103086
serial2 = 2
option = 45
record = struct.pack("<II", serial, serial2 + (option <<20))
encyphered = ARC2.new("Revision\0").encrypt(record)
print encyphered.encode("hex")
I'm unable to reproduce they keys found for the /035 -serial. Any advice?
The newer machine is no longer in my posession :(
Best regards
I set serial2 as 35 instead of 035 and bang! it works!
Well, I can confirm it works.Hi,
Sadly it seems the AMPS software may not be on my CMU. More exploration needed.
OF2HTU, when you enabled options what happened?
even after the reboot I only see a tick and no 'Version' so I don't think it's present but I do have another two disk images I can explore.Try to run a system upgrade from the bootup-menu
Did yours have a version number before you enabled it?
from Crypto.Cipher import ARC2
import struct
serial = 103086
serial2 = 2
option = 45
record = struct.pack("<II", serial, serial2 + (option <<20))
encyphered = ARC2.new("Revision\0").encrypt(record)
print encyphered.encode("hex")
from Crypto.Cipher import ARC2
import struct
KEY = "Revision\0" # decryption key for the data
STRUCT_TWO_UNSIGNED_INTS = "<II"
for line in open("SWOPT.DAT"):
if len(line) == 17:
cipher = ARC2.new(KEY) # a new ARC2 cipher with the right key (ARC2 is a symmetric block cipher, we need a new cipher for each ciphertext)
ciphertext = line.strip().decode("hex") # Decode our ciphertext from hex, removing whitespace from the start and end
plaintext = cipher.decrypt(ciphertext) # Decrypt the cyphertext using the key
a, b = struct.unpack(STRUCT_TWO_UNSIGNED_INTS, plaintext) # unpack two unsigned ints from the plaintext
print "SN: %d - %08x" % (a, b)
A side note - the keygen in Reply #7 of this thread seems to work for R&S FSU, FSQ, FSP and FSIQ series on spectrum & signal analyzer; (at least). :)
A side note - the keygen in Reply #7 of this thread seems to work for R&S FSU, FSQ, FSP and FSIQ series on spectrum & signal analyzer; (at least). :)Any ideas about other equipment like oscilloscopes?
I'm waiting on a PCMCIA to CF adapter to try installing those packages so I am guilty of downloading and not replying, did you have to 'install' from PCMCIA or were you able to put it on the HDD directly?
A side note - the keygen in Reply #7 of this thread seems to work for R&S FSU, FSQ, FSP and FSIQ series on spectrum & signal analyzer; (at least). :)
A side note - the keygen in Reply #7 of this thread seems to work for R&S FSU, FSQ, FSP and FSIQ series on spectrum & signal analyzer; (at least). :)
Next mission is to extend it below 10MHz with an external mixer :)
So am I outta luck trying to get AMPS on my CMU? I wonder if somebody's got the firmware files for the 3.5 version of AMPS lying around.
Upgrading the CPU could be possible but I imagine it's either an AMD socket or even worse, soldered to the motherboard.
Sent from my iPhone using Tapatalk
Well mine's the FMR5 processor module, AMD K6-2/300 CPU and 256MB memory.
So, it seems any processor upgrades would be minor unless the FMR5 supports various multipliers and 100MHz FSB, in that case it may be possible to go as far as 550MHz but I'm not sure how much, if any, benefit it would give me.
Memory is on a single SODIMM, it may be possible to fit more as there are two slots but I don't think it'd support it.
How did You get access tot this R&S server?
Perhaps I can dig for some other useful info.
Sadly no WCDMA-package :(
have all working right now, except Bluetooth... I installed Bluetooth, but it doesn't worked.. In don't know why :-//Do You have the B53 Hardware option installed?
Perhaps I need some hardware option?
It could be the hard drive failing. It is one of the achilles heels of this unit. Once you enabled the option it needed to load the file into memory and it is having an issue when it gets to the bad line. Are you able to copy the file from the hard drive to a floppy disk or pcmcia card (whichever your unit has)? When I get a chance I will see if that file is on my unit. Also, how much memory does your unit have? Perhaps loading the file is causing an out of memory condition.
By the way, I found the last original software right on the r&s server:
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR001Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR001Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR003Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR003Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR004Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR004Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR006Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR006Z?OpenDocument)
Sadly no WCDMA-package :(
By the way, I found the last original software right on the r&s server:
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR001Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR001Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR003Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR003Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR004Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR004Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR006Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR006Z?OpenDocument)
Sadly no WCDMA-package :(
All packages and all software manuals is there. I noted this in some other CRTU-related thread.
WCDMA s/w and release notes: http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr007z2?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr007z2?OpenDocument)
WCDMA manual: http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr007m2?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr007m2?OpenDocument)
By the way, I found the last original software right on the r&s server:
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR001Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR001Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR003Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR003Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR004Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR004Z?OpenDocument)
http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR006Z?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/SR006Z?OpenDocument)
Sadly no WCDMA-package :(
All packages and all software manuals is there. I noted this in some other CRTU-related thread.
WCDMA s/w and release notes: http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr007z2?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr007z2?OpenDocument)
WCDMA manual: http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr007m2?OpenDocument (http://www3.rohde-schwarz.com/www/FileTranCS.nsf/alias/sr007m2?OpenDocument)
Does anybody has the install file for the 1xEV-DO 5.20 ?
Received a CMU200 today in pretty good nick, but not many options, I do have the audio measuring stuff though. It's kind of annoying that the RF generator turns off when you switch to the audio measurement application. What were they thinking??
I tweaked the keygen a bit to hopefully make it easier to use, it prompts for your S/N and generates all (I think) available keys. You can also run it directly from a browser on repl.it. Just click here: https://repl.it/I4Pp/0 (https://repl.it/I4Pp/0) Or find it on the repository below.
I created a repository on my website as well to host documents, firmware, etc. for the CMU200. I've placed some useful files there. If you think there is anything else that belongs, please PM me and I'd be happy to host it. http://gotroot.ca/cmu200/ (http://gotroot.ca/cmu200/)
Thanks for the efforts of those in the thread!
I was able to install the various packages but I do not have the option to enabling them with the code.
The only sw options I can enable are K2,K5,K6,K9
Skippossauro on 2017-06-05, 17:19:34 (https://www.eevblog.com/forum/index.php?topic=79496.msg1225995#msg1225995)Today checked installed keys on newer equipment's with Win7 and Win10 installed, and keys are in pure decimal, and have 30 digits long, I've checked FSV, RTO and RTM R&S parts. To generate keys with double length, i.e. 16 byte long I believe other method should be used, right?
I started off by putting in the option code for K29 which it accepted. However, no sign of the AMPS option on the menu.
Get the last versions you can get and install them.
I made a full image of internal HDD before changing something on my unit, just to be able to get it back to original state if something goes really wrong.
To be honest, I can't even see where I would load a valid software option key.check Option Key Entry section in manual.
A side note - the keygen in Reply #7 of this thread seems to work for R&S FSU, FSQ, FSP and FSIQ series on spectrum & signal analyzer; (at least). :)
This strikes me as very interesting. I've been working with the SMIQ's i960 firmware and complicated addressing scheme.
Does anyone know the origin of the 'Seed Keys' in main.c?
Hello,
does anyone know if the Keygen is usable for the ZVH4 Handheld too ?
Does anyone know a Keygen for FSH oder ZVH Handheld Instruments fron Rohde&Schwarz ?
Hello,
i tested the KeyGen for FSE/FSIQ to enable Options for the ZVH4 but with no success. I tried with full Serial-Nr. and with only the first part of the S/N.
I dont have a FSHx Model to check if the keygen does its Job on FSHx style analyzers.
Any Ideas out there what to try to free the Beast in the ZVH4 ?
CU
Stefan
I can try have a look at the ZVH licenses. For that I would need an example of S/N and one license from a volunteer. pm me.Hello,
I can try have a look at the ZVH licenses. For that I would need an example of S/N and one license from a volunteer. pm me.Hello,
I think I found the answer, it is stated in post #59 in this thread. I only need to execute the Identity menu selection and a file will be generated with the serial1 and serial2.
I will try that .
Thanks anyway!
from Crypto.Cipher import ARC2
import struct
serial = 103086
serial2 = 2
option = 45
record = struct.pack("<II", serial, serial2 + (option <<20))
encyphered = ARC2.new("Revision\0").encrypt(record)
print encyphered.encode("hex")C:\Pyhton>python cmu.py
Traceback (most recent call last):
File "cmu.py", line 9, in <module>
encyphered = ARC2.new("Revision\0").encrypt(record)
TypeError: new() takes at least 2 arguments (1 given)Has anyone been able to generate codes for FSL?[...]
I used the python script
I am expecting serial number to be in a form like xxxxxx/yyy. The first part is given by software and a sticker on the back of the device. However, I cannot find the last three digits (yyy) anywhere. I tried various combinations from the stickers on the back of the device, motherboard and RF boards.
Quote from: Giedrius on Today at 01:18:33 (https://www.eevblog.com/forum/index.php?topic=79496.msg2143669#msg2143669)But the genrated key is a HEX string and the FSH accepts only numbers, how it is possible?I am expecting serial number to be in a form like xxxxxx/yyy. The first part is given by software and a sticker on the back of the device. However, I cannot find the last three digits (yyy) anywhere. I tried various combinations from the stickers on the back of the device, motherboard and RF boards.
For an old FSH it was as easy as using xxxxxx as the serial number. No dash, no nothing. And make sure to set all entries in the option_list to TRUE and try them one after another.
But the genrated key is a HEX string and the FSH accepts only numbers, how it is possible? Thanks
Quote from: hafrse on Today at 14:14:55 (https://www.eevblog.com/forum/index.php?topic=79496.msg2181503#msg2181503)Hello, No, from commect #21 with Python code.
But the genrated key is a HEX string and the FSH accepts only numbers, how it is possible? Thanks
You used the keygen from comment #7, didn't you?
Hello, No, from commect #21 with Python code.
Quote from: hafrse on Today at 22:07:07 (https://www.eevblog.com/forum/index.php?topic=79496.msg2182322#msg2182322)tried to compile the project in VS2017 using sdk 10 and sdk 8.1, ended up on stdio.h not found when using sdk 8.1 , I am not very familier with VS...
Hello, No, from commect #21 with Python code.
Well, then try the one from #7. ;)
The FSP keygen has seeds for the options on the fsp but where to get the seeds for options K2,K3 and K4 for the FSH? thanks
Quote from: dl2ocb on Today at 10:53:44 (https://www.eevblog.com/forum/index.php?topic=79496.msg1829129#msg1829129)Does anyone know a Keygen for FSH oder ZVH Handheld Instruments fron Rohde&Schwarz ?
The FSP keygen in this thread also works for the FSH. Use the serial number alone, no "/" and no model number.
Make sure to enable all keys and try them top to bottom until all options are unlocked.
The FSP keygen has seeds for the options on the fsp but where to get the seeds for options K2,K3 and K4 for the FSH? thanks
K4 I don't know. The device I had was too old and didn't support that option. Just try them one after another and you'll probably find it.
K5 GSM/EDGE Application GSM K5 ANALYZER FSPSpectrumAnalyzerLI
K7 FM Demodulator FM DEMODULATOR FSPSpectrumAnalyzerLI
#1
#2
K84 1xEV-DO BTS 1X EV DATA ONLY BTS FSPSpectrumAnalyzerLI
K85 1xEV-DO MS 1X EV DATA ONLY MS FSPSpectrumAnalyzerLI
K90 FSQ WLAN 802.11a WLAN FSQ-Wlan(LI)
K72 WCDMA 3GPP FDD BTS WCDMA BTS ANALYZER FSPSpectrumAnalyzerLI
K74 WCDMA HSDPA BTS WCDMA HSDPA BTS FSPSpectrumAnalyzerLI
K75 WCDMA HSDPA MS WCDMA HSDPA MS FSPSpectrumAnalyzerLI
K9 Power Meter POWER METER FSPSpectrumAnalyzerLI
K73 WCDMA 3GPP FDD MS WCDMA MS ANALYZER FSPSpectrumAnalyzerLI
K90 FSP WLAN 802.11a FSP WLAN FSP_Wlan(LI)
K90UP FSQ WLAN 802.11a,b,g WLAN UPGRADE
K76 TD-SCDMA BTS TD-SCDMA BTS ANALYZER FSPSpectrumAnalyzerLI
K77 TD-SCDMA MS TD-SCDMA MS ANALYZER FSPSpectrumAnalyzerLI
K30 Noise Figure NOISE MEASURE FSx-Noise(LI)
K82 CDMA2000 BTS CDMA2000 BTS FSPSpectrumAnalyzerLI
K83 CDMA2000 MS CDMA2000 MS FSPSpectrumAnalyzerLI
K8 Bluetooth BLUETOOTH FSPSpectrumAnalyzerLI
K40 Phase Noise Measurement PHASE NOISE MEASURE FSx-PNoise(LI)
K70 Vector Signal Analysis VECTOR SIGNAL ANALYSIS FSPSpectrumAnalyzerLI
#3
K50 Triggered Coverage Meas TRIGGERED COVERAGE MEAS
K51 Synchronized Stepped Sweep SYNCHRONIZED FREQ LISTS
%d days remaining trial period TRIAL PERIOD 180 HRS
K0 %d days remaining trial period TRIAL PERIOD 2000 HRS
K91 FSQ WLAN 802.11a,b,g WLAN ABG FSQ-WlanExtension(LI)
#5 FREQ LIMIT 31 GHZ
B%s Frequency Extension FREQ NO LIMIT
K92 FSQ 802.16 FSQ 802_16 FSQ-Wman(LI)
K52 Transducer Set REG_TP
K53 FFT Scan FFT SCAN
K901 %d days remaining trial period TRIAL PERIOD 2500 HRS
K902 %d days remaining trial period TRIAL PERIOD 3000 HRS
K92UP FSQ 802.16e FSQ 802_16 UPGRADE
K93 FSQ 802.16e FSQ 802_16E FSQ-WmanExtension(LI)
K903 %d days remaining trial period TRIAL PERIOD 3500 HRS
K904 %d days remaining trial period TRIAL PERIOD 4000 HRS
K100 LTE FDD Downlink LTE FDD DOWNLINK FSx-LTE FSx-LTE(LI)
K101 LTE FDD Uplink LTE FDD UPLINK FSx-LTE FSx-LTE(LI)
B29 Frequency Extension 20Hz FREQ EXT 20HZ
K15 Avionics Demodulator AVIONICS DEMODULATOR FSPSpectrumAnalyzerLI
K91N FSQ WLAN 802.11n WLAN 802 11N UPGRADE FSQ-Wlan80211n(LI)
K94 FSQ 802.16e MIMO FSQ 802_16 Mimo UPGRADE FSQ-WmanMimo(LI)
K102 LTE Downlink MIMO LTE DOWNLINK MIMO FSx-LTE FSx-LTE(LI)
K103 LTE Uplink MIMO LTE UPLINK MIMO FSx-LTE FSx-LTE(LI)
K96 OFDM-VSA OFDM-VSA
K74+ WCDMA HSPA+ BTS WCDMA HSPA+ BTS
#4
K400 RFEX-F Launcher RFEX-F
K17 EX IQ Box EX IQBOX FSx-ExIqBox(LI)
K110 TETRA 2 TETRA2 FSQ-Tetra2(LI)
K10 GSM/EDGE/EDGE Evolution GSM/EDGE ANALYZER FSx-Gsm(LI)
K73+ WCDMA HSPA+ MS WCDMA HSPA+ MS
K104 LTE TDD Downlink LTE TDD DOWNLINK FSx-LTE(LI)
K105 LTE TDD Uplink LTE TDD UPLINK FSx-LTE(LI)
K106 LTE TDD/FDD Upgrade LTE TDD/FDD UPGRADE
K5UP GSM K5 Upgrade to K10 GSM K5 ANALYZER UPGRADE FSx-Gsm(LI)
K150 Support for User Calibration USER CAL SUPPORT
K4 I don't know. The device I had was too old and didn't support that option. Just try them one after another and you'll probably find it.
Let me try clarify some things (although I don't know much about this).
The list of options extracted from FSP firmware v4.50 API.DLL is the following:Code: [Select]K5 GSM/EDGE Application GSM K5 ANALYZER FSPSpectrumAnalyzerLI
K7 FM Demodulator FM DEMODULATOR FSPSpectrumAnalyzerLI
#1
#2
K84 1xEV-DO BTS 1X EV DATA ONLY BTS FSPSpectrumAnalyzerLI
K85 1xEV-DO MS 1X EV DATA ONLY MS FSPSpectrumAnalyzerLI
K90 FSQ WLAN 802.11a WLAN FSQ-Wlan(LI)
K72 WCDMA 3GPP FDD BTS WCDMA BTS ANALYZER FSPSpectrumAnalyzerLI
K74 WCDMA HSDPA BTS WCDMA HSDPA BTS FSPSpectrumAnalyzerLI
K75 WCDMA HSDPA MS WCDMA HSDPA MS FSPSpectrumAnalyzerLI
K9 Power Meter POWER METER FSPSpectrumAnalyzerLI
K73 WCDMA 3GPP FDD MS WCDMA MS ANALYZER FSPSpectrumAnalyzerLI
K90 FSP WLAN 802.11a FSP WLAN FSP_Wlan(LI)
K90UP FSQ WLAN 802.11a,b,g WLAN UPGRADE
K76 TD-SCDMA BTS TD-SCDMA BTS ANALYZER FSPSpectrumAnalyzerLI
K77 TD-SCDMA MS TD-SCDMA MS ANALYZER FSPSpectrumAnalyzerLI
K30 Noise Figure NOISE MEASURE FSx-Noise(LI)
K82 CDMA2000 BTS CDMA2000 BTS FSPSpectrumAnalyzerLI
K83 CDMA2000 MS CDMA2000 MS FSPSpectrumAnalyzerLI
K8 Bluetooth BLUETOOTH FSPSpectrumAnalyzerLI
K40 Phase Noise Measurement PHASE NOISE MEASURE FSx-PNoise(LI)
K70 Vector Signal Analysis VECTOR SIGNAL ANALYSIS FSPSpectrumAnalyzerLI
#3
K50 Triggered Coverage Meas TRIGGERED COVERAGE MEAS
K51 Synchronized Stepped Sweep SYNCHRONIZED FREQ LISTS
%d days remaining trial period TRIAL PERIOD 180 HRS
K0 %d days remaining trial period TRIAL PERIOD 2000 HRS
K91 FSQ WLAN 802.11a,b,g WLAN ABG FSQ-WlanExtension(LI)
#5 FREQ LIMIT 31 GHZ
B%s Frequency Extension FREQ NO LIMIT
K92 FSQ 802.16 FSQ 802_16 FSQ-Wman(LI)
K52 Transducer Set REG_TP
K53 FFT Scan FFT SCAN
K901 %d days remaining trial period TRIAL PERIOD 2500 HRS
K902 %d days remaining trial period TRIAL PERIOD 3000 HRS
K92UP FSQ 802.16e FSQ 802_16 UPGRADE
K93 FSQ 802.16e FSQ 802_16E FSQ-WmanExtension(LI)
K903 %d days remaining trial period TRIAL PERIOD 3500 HRS
K904 %d days remaining trial period TRIAL PERIOD 4000 HRS
K100 LTE FDD Downlink LTE FDD DOWNLINK FSx-LTE FSx-LTE(LI)
K101 LTE FDD Uplink LTE FDD UPLINK FSx-LTE FSx-LTE(LI)
B29 Frequency Extension 20Hz FREQ EXT 20HZ
K15 Avionics Demodulator AVIONICS DEMODULATOR FSPSpectrumAnalyzerLI
K91N FSQ WLAN 802.11n WLAN 802 11N UPGRADE FSQ-Wlan80211n(LI)
K94 FSQ 802.16e MIMO FSQ 802_16 Mimo UPGRADE FSQ-WmanMimo(LI)
K102 LTE Downlink MIMO LTE DOWNLINK MIMO FSx-LTE FSx-LTE(LI)
K103 LTE Uplink MIMO LTE UPLINK MIMO FSx-LTE FSx-LTE(LI)
K96 OFDM-VSA OFDM-VSA
K74+ WCDMA HSPA+ BTS WCDMA HSPA+ BTS
#4
K400 RFEX-F Launcher RFEX-F
K17 EX IQ Box EX IQBOX FSx-ExIqBox(LI)
K110 TETRA 2 TETRA2 FSQ-Tetra2(LI)
K10 GSM/EDGE/EDGE Evolution GSM/EDGE ANALYZER FSx-Gsm(LI)
K73+ WCDMA HSPA+ MS WCDMA HSPA+ MS
K104 LTE TDD Downlink LTE TDD DOWNLINK FSx-LTE(LI)
K105 LTE TDD Uplink LTE TDD UPLINK FSx-LTE(LI)
K106 LTE TDD/FDD Upgrade LTE TDD/FDD UPGRADE
K5UP GSM K5 Upgrade to K10 GSM K5 ANALYZER UPGRADE FSx-Gsm(LI)
K150 Support for User Calibration USER CAL SUPPORT
They are ordered according to the seeds table (used in the prog to generate licenses).
Also, in that .DLL we can extract a more complete seed (uint32) table than the one used in the original prog (post #7). I attach it below.
Those that are using the program should add the new seeds because they may be needed to enable other Options.
The FSH Option names can be extracted from the FSH firmware's API.DLL. If anyone sends me a current FSH API.DLL I might extract the complete list of Options.
When adding the Option seeds you should also make them TRUE so that all possibilities are calculated.
Hey Guys,
I have a ZVR, SN is 835068/005. and I found the SW sn \R_S\INSTR\INI\OPTOIN.INI
Is't anyone know how to decode it?
--------------------------------------------------------
4056071223; EMBED DEEMBED
0436723430; TIME DOMAIN
1234299954; CONVERTER 4 CHAN
--------------------------------------------------------
sn: 835068.005 id: 00 option key: 1542267991 desc: feat_0
sn: 835068.005 id: 01 option key: 2797899109 desc: feat_1
sn: 835068.005 id: 02 option key: 2277388772 desc: feat_2
sn: 835068.005 id: 03 option key: 2328386865 desc: feat_3
sn: 835068.005 id: 04 option key: 0302356071 desc: feat_4
sn: 835068.005 id: 05 option key: 3024766616 desc: feat_5
sn: 835068.005 id: 06 option key: 4252011699 desc: feat_6
sn: 835068.005 id: 07 option key: 4056071223 desc: TIME DOMAIN, B2, Time Domain Measurements
sn: 835068.005 id: 08 option key: 0436723430 desc: CONVERTER 4 CHAN, C4C, 4 Channel Converter
sn: 835068.005 id: 09 option key: 1234299954 desc: EMBED DEEMBED, K9, Virtual Embedding Networks
sn: 835068.005 id: 10 option key: 0493488890 desc: feat_A
Hi tv84,
I attached a API.DLL form a ZVR. could you decode the option from it?
Hi tv84,
I attached a API.DLL form a ZVR. could you decode the option from it?
I don't think so. Do you have examples of options for that equipment?
Hey Guys,
I have a ZVR, SN is 835068/005. and I found the SW sn \R_S\INSTR\INI\OPTOIN.INI
Is't anyone know how to decode it?
--------------------------------------------------------
4056071223; EMBED DEEMBED
0436723430; TIME DOMAIN
1234299954; CONVERTER 4 CHAN
--------------------------------------------------------
maybe
feat_0 = 'HARMONIC MEAS', 'B3', 'Harmonic Measurements'
feat_1 = 'MIXER MEAS', 'B4', 'Mixer Measurements'
feat_2 = 'NONLINEAR MEAS', 'B5', 'Nonlinear Measurements'
feat_3 = 'REF MIXER PORTS', 'B6', 'Reference Mixer Ports'
feat_4 = 'POWER CALIBRATION', 'B7', 'Power Calibration'
feat_5 = '4 PORT MEAS', 'B99', '4-Port Measurements'
feat_6 = 'QUARTZ MEAS', 'BXX', 'Quartz Measurements'
This is an old public algorithm.
test Feat_2+, if all OK - test b3-b4 too,
in newer devices - these numbers(0 or 1) used for demo.
now r&s used new long key.
many know how to create new too,
but no one wants to share it to public ))Code: [Select]sn: 835068.005 id: 00 option key: 1542267991 desc: feat_0
sn: 835068.005 id: 01 option key: 2797899109 desc: feat_1
sn: 835068.005 id: 02 option key: 2277388772 desc: feat_2
sn: 835068.005 id: 03 option key: 2328386865 desc: feat_3
sn: 835068.005 id: 04 option key: 0302356071 desc: feat_4
sn: 835068.005 id: 05 option key: 3024766616 desc: feat_5
sn: 835068.005 id: 06 option key: 4252011699 desc: feat_6
sn: 835068.005 id: 07 option key: 4056071223 desc: TIME DOMAIN, B2, Time Domain Measurements
sn: 835068.005 id: 08 option key: 0436723430 desc: CONVERTER 4 CHAN, C4C, 4 Channel Converter
sn: 835068.005 id: 09 option key: 1234299954 desc: EMBED DEEMBED, K9, Virtual Embedding Networks
sn: 835068.005 id: 10 option key: 0493488890 desc: feat_A
I have a R&S ZVB8 2 port Vector Network Analyzer, but I can't see any options file (SWOPT.DAT or similar). Under 'Info', no files are loaded that indicate which file it could be.
I could really use the ZVAB-K2 Time Domain option - does anyone have any good suggestions? The serial-number is 6-digits.
To be honest, I can't even see where I would load a valid software option key.
I have a R&S ZVB8 2 port Vector Network Analyzer, but I can't see any options file (SWOPT.DAT or similar). Under 'Info', no files are loaded that indicate which file it could be.
I could really use the ZVAB-K2 Time Domain option - does anyone have any good suggestions? The serial-number is 6-digits.
To be honest, I can't even see where I would load a valid software option key.
Hi Jacod,
I don't have the ZVB yet. I download the firmware form RS and than extract all files.
there is a DLL file "OptionKeyServices.dll", I guess this Dll is work for the option key.
for the SW option key, you should search *option*.* or *opt*.* in D disk. in my ZVR, it's "Option.ini".
and check the serial-number on "info" hard key manu.
I have a R&S ZVB8 2 port Vector Network Analyzer, but I can't see any options file (SWOPT.DAT or similar). Under 'Info', no files are loaded that indicate which file it could be.
I could really use the ZVAB-K2 Time Domain option - does anyone have any good suggestions? The serial-number is 6-digits.
To be honest, I can't even see where I would load a valid software option key.
Have tried all the options with variations mentioned in these pages to no avail.
I've been reading through this thread - anyone know the situation with the more modern series of R&S equipment (e.g. RTE / RTO series of scopes).
R&S seem to base their designs on a couple of platforms, with occasional "mid-life" upgrades of the underlying HW (and OS - usually embedded Windows of some kind). The RTE / RTO platform is common and Win7 / Win10 embedded. with license key support for temporary and time limited licenses as well as portable licenses and license de-activation.
Anyone confirm whether these can be played with?
Hello,
did anybody try to enable options for signal generators like SMIQ, SME?
I did try different combinations on a SME which expects a 6-digit activation key without luck. The serial number is same as the others xxxxxx/xxx.
Any hints are highly appreciated.
BR,
Dimce
Hey Guys,
I have a ZVR, SN is 835068/005. and I found the SW sn \R_S\INSTR\INI\OPTOIN.INI
Is't anyone know how to decode it?
--------------------------------------------------------
4056071223; EMBED DEEMBED
0436723430; TIME DOMAIN
1234299954; CONVERTER 4 CHAN
--------------------------------------------------------
maybe
feat_0 = 'HARMONIC MEAS', 'B3', 'Harmonic Measurements'
feat_1 = 'MIXER MEAS', 'B4', 'Mixer Measurements'
feat_2 = 'NONLINEAR MEAS', 'B5', 'Nonlinear Measurements'
feat_3 = 'REF MIXER PORTS', 'B6', 'Reference Mixer Ports'
feat_4 = 'POWER CALIBRATION', 'B7', 'Power Calibration'
feat_5 = '4 PORT MEAS', 'B99', '4-Port Measurements'
feat_6 = 'QUARTZ MEAS', 'BXX', 'Quartz Measurements'
This is an old public algorithm.
test Feat_2+, if all OK - test b3-b4 too,
in newer devices - these numbers(0 or 1) used for demo.
now r&s used new long key.
many know how to create new too,
but no one wants to share it to public ))Code: [Select]sn: 835068.005 id: 00 option key: 1542267991 desc: feat_0
sn: 835068.005 id: 01 option key: 2797899109 desc: feat_1
sn: 835068.005 id: 02 option key: 2277388772 desc: feat_2
sn: 835068.005 id: 03 option key: 2328386865 desc: feat_3
sn: 835068.005 id: 04 option key: 0302356071 desc: feat_4
sn: 835068.005 id: 05 option key: 3024766616 desc: feat_5
sn: 835068.005 id: 06 option key: 4252011699 desc: feat_6
sn: 835068.005 id: 07 option key: 4056071223 desc: TIME DOMAIN, B2, Time Domain Measurements
sn: 835068.005 id: 08 option key: 0436723430 desc: CONVERTER 4 CHAN, C4C, 4 Channel Converter
sn: 835068.005 id: 09 option key: 1234299954 desc: EMBED DEEMBED, K9, Virtual Embedding Networks
sn: 835068.005 id: 10 option key: 0493488890 desc: feat_A
from Crypto.Cipher import ARC2
import struct
serial = 835068
serial2 = 005
option = 9
record = struct.pack("<II", serial, serial2 + (option <<20))
encyphered = ARC2.new("Revision\0").encrypt(record)
print encyphered.encode("hex")24147d39d5347618
Hello
Can anyone convert the script into Python 3.6? Been struggling for too long with converting it but there are just a few things im not familiar with..
Hi tv84,
I attached a API.DLL form a ZVR. could you decode the option from it?
I don't think so. Do you have examples of options for that equipment?
I double checked with ZVR manual, the only K option for ZVR is K9 only, there is nothing to do with this unit.
So I am looking in another one, FSEA30. the datasheet say the K option for FSEA is:
---------------------------------------------------------------
FSE-K4 Phase Noise Measurement Software,
FSE-K3 Noise Measurement Software
FSE-K10 GSM Test Software, Mobile
FSE-K11 GSM Test Software, Base Station
FSE-K20 GSM Test Software, Edge Mobile
FSE-K21 GSM Test Software, EDGE Base Station
FSE-K30 GSM Test Software, 850 GHz band Mobile
FSE-K31 GSM Test Software, 850 GHz band Base Station
----------------------------------------------------------------
Just decoded the SN using "Rohde & Schwarz FSP option generator".
Notice: that I decode all seeds, the comment "Kx xxxx Application Firmware" is not correct, it's for FSP
--------------------------------------------------------------------------
3780795724 - K5 - GSM/EDGE Application Firmware
0284552823 - K7 - AM/FM/PM Measurement Demodulator
4196994763 - B17 - IQ Online
0684125256 - None
1514211661 - K84 - 1xEV-DO BTS Application Firmware
0579586646 - K84 - 1xEV-DO MS Application Firmware
3285910640 - None
1332515167 - FSP-B15 FSP-B70 FS-K7
1746004935 - K72 prior K74
0425836556 - None
3914572062 - K9 - Power Meter
0367944746 - FSP-B15 FS-K7
0178533596 - None
0084427020 - None
0973137605 - K76 - 3GPP TD-SCDMA BTS Application Firmware
4058089560 - K77 - 3GPP TD-SCDMA MS Application Firmware
2816669065 - K30 - Noise Figure Measurament
0774785927 - K82 - CDMA2000 BTS Application Firmware
1251526595 - K83 - CDMA2000 MS Application Firmware
0364322959 - K8 - Bluetooth Application Firmware
3912188941 - K40 - Phase Noise Measurament
2043795852 - None
2216559242 - None
3509799288 - None
0667766505 - None
2179962388 - 31 days trial period
4232888520 - 78 days trial period
1998016984 - None
1665344687 - None
0081926458 - Frequency Extension
1876889287 - None
2554963261 - Trasducer Set
0989643314 - None
1367083121 - None
2589261327 - None
3754352886 - None
2349723378 - None
2713318677 - None
0242151735 - None
3807482493 - None
2651669256 - None
0586577237 - None
3525044770 - None
0034228987 - None
1143727560 - None
2616543767 - None
1636617207 - None
0959025083 - None
1318982380 - None
2600577035 - None
--------------------------------------------------------------------------
compare with the options.ini in my FSEA. the fisrt line is the "FSE-K10 GSM Test Software, Mobile".
------------------------------------------------------
Options file in my FSEA:
3780795724; GSM MTS ANALYZER
------------------------------------------------------
My question is which line of the SN is for other option?
-------------------------------------------------------------------
FSE-K4 Phase Noise Measurement Software, ??????
FSE-K3 Noise Measurement Software ????????
FSE-K10 GSM Test Software, Mobile 3780795724
FSE-K11 GSM Test Software, Base Station
FSE-K20 GSM Test Software, Edge Mobile
FSE-K21 GSM Test Software, EDGE Base Station
FSE-K30 GSM Test Software, 850 GHz band Mobile
FSE-K31 GSM Test Software, 850 GHz band Base Station
-------------------------------------------------------------------
another thing I found is that there is no API.dll in my FSEA30. I search all *.ll in hard disk, it seems that "FSEFPNL.DLL" is the suspect one.
from:
char SerString [] = {"xxxxxx/xxx"}; // Seriale dello strumento
to:
char SerString [] = {"100218/013"}; // Seriale dello strumento
I just recompiled the program and I got the following output: import binascii
import sys
from Crypto.Cipher import ARC2
import struct
import struct
serial = 103086
serial2 = 2
option = 45
record = struct.pack("<II", serial, serial2 + (option <<20))
print(record)
cipher = ARC2.new(b"Revision\0", ARC2.MODE_ECB)
encyphered = cipher.encrypt(record)
msg = binascii.hexlify(encyphered)
msglist = []
for letter in str(msg):
msglist.append(letter)
msglist.remove("b")
msglist.remove("'")
msglist.remove("'")
for letter in msglist:
print(letter, end="")
print("")
import binascii
import sys
from Crypto.Cipher import ARC2
import struct
serial = 103086
serial2 = 2
#option = 10
sample = open('SWOPT.dat', 'w')
for option in range(10,50):
record = struct.pack("<II", serial, serial2 + (option <<20))
cipher = ARC2.new(b"Revision\0", ARC2.MODE_ECB)
encyphered = cipher.encrypt(record)
msg = binascii.hexlify(encyphered)
msglist = []
for letter in str(msg):
msglist.append(letter)
msglist.remove("b")
msglist.remove("'")
msglist.remove("'")
for letter in msglist:
print(letter, end="", file=sample)
print("",file=sample)
sample.close()
KEY = b"Revision\0"
STRUCT_TWO_UNSIGNED_INTS = "<II"
for line in open("SWOPT.DAT"):
if len(line) == 17:
cipher = ARC2.new(KEY, ARC2.MODE_ECB) # a new ARC2 cipher with the right key (ARC2 is a symmetric block cipher, we need a new cipher for each ciphertext)
ciphertext = bytes.fromhex(line.strip()) # Decode our ciphertext from hex, removing whitespace from the start and end
plaintext = cipher.decrypt(ciphertext) # Decrypt the cyphertext using the key
a, b = struct.unpack(STRUCT_TWO_UNSIGNED_INTS, plaintext) # unpack two unsigned ints from the plaintext
print ("SN: %d - %08x" % (a, b))
Anyone know how to enable the option on the FSH6? I tried to buy this Key but R&S says they cant generate keys anyone because they have discontinued this product. It just sounds so lillogical I cant even believe they would say something like this. I want to send them money and all that they have to do is generate a key on their PC.
If someone knows a dealer that generates keys that i can buy one for I would be happy to buy it. Moral of the story is buy the options you need before they discontinue them. Test equipment seems to have a very short support life these days especially from R&S
I have updated the source code of the Rohde & Schwarz FSP option generator in post 7 of this thread and put it on GitHub:
https://github.com/CatGenius/fsxx_keygen (https://github.com/CatGenius/fsxx_keygen)
It now contains all 200 seeds from API.DLL and it takes the serial number from the command line options.
If no instrument type is specified, it prints all 200 keys, generated from the serial number and the 200 seeds. If you have found some of these keys to activate any options, please report:Please note I am not the original author of this software. I just extended it a bit.
- Your instrument type (eg. FSEA20)
- The key number (a number between 0 and 199, not the actual key
- The number (eg. K10) and a description (eg. GSM MS Analyzer) of the option it enables
Hello all,
I wonder if someone could do me a huge favour. I have an FSU and would love to enable some s/w options (mainly K9 power meter, but others would be nice too).
The problem is that I'm no good with computers and just have a WinXP (don't asK) and a Win10 machine here. I have no clue how to get Python working on either machine to run the keygen.
I'd very much appreciate it if someone could generate some option keys for me. My instrument serial no. is 200372/003.
Failing that, I've had a look here:
https://repl.it/repls/SkeletalDelectableDwarfrabbit
But have no clue how to input serial number or run the code (copy & paste code from the left to window on the right brings up several error messages, plus there doesn't seem to be an option 9 listed there) so maybe someone could write a short "dummies guide".
Thank you!
Imports System.Security.Cryptography
Imports System.Text
Imports System.IO
Public Class Form1
Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
Dim key() As Byte = str2byte("Revision ")
key(8) = 0
Dim opt() As Integer = {9, 14, 16, 17, 20, 21, 22, 23, 24, 26, 27, 28, 29, 42, 43, 44, 45, 46, 47, 48,
53, 54, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 83, 84, 85, 86,
87, 88, 90, 92, 96, 839, 849, 859, 869}
Dim serial1() As Byte = BitConverter.GetBytes(123456) ' <--- Serial Number (first part)
Dim serial2() As Byte = BitConverter.GetBytes(2) ' <--- Serial Number (second part)
Dim message(7) As Byte
message(0) = serial1(0)
message(1) = serial1(1)
message(2) = serial1(2)
message(3) = serial1(3)
message(4) = serial2(0)
message(5) = serial2(1)
ListBox1.Items.Clear()
For Each o In opt
Dim ob() As Byte = BitConverter.GetBytes(o << 20)
message(6) = ob(2)
message(7) = ob(3)
Dim mStream As New MemoryStream
Dim RC2alg As RC2 = RC2.Create
RC2alg.Mode = CipherMode.ECB
RC2alg.Padding = PaddingMode.None
Dim cStream As New CryptoStream(mStream, RC2alg.CreateEncryptor(key, RC2alg.IV), CryptoStreamMode.Write)
cStream.Write(message, 0, message.Length)
cStream.FlushFinalBlock()
Dim ret As Byte() = mStream.ToArray()
cStream.Close()
mStream.Close()
ListBox1.Items.Add(Str(o) + " - " + byte2str(ret))
Next
End Sub
Function str2byte(str As String) As Byte()
Dim b(Len(str) - 1) As Byte
For n = 1 To Len(str)
b(n - 1) = Asc(Mid(str, n, 1))
Next
Return b
End Function
Function byte2str(b() As Byte) As String
Dim t As String = ""
byte2str = ""
For n = 0 To b.Count - 1
t = Hex(b(n))
If Len(t) = 1 Then t = "0" + t
byte2str = byte2str + t
Next
End Function
End Class
from Crypto.Cipher import ARC2
import struct
for l in open("SWOPT.DAT"):
if len(l) == 17:
a, b = struct.unpack("<II", ARC2.new("Revision\0").decrypt(l.strip().decode("hex")))
print "SN: %d - %08x" % (a, b)
record = struct.pack("<II", serial, serial2 + (option <<20))Just for the sake of it, I tried to convert the Python code (few messages above) into VB .net.
My question is: since both are integers, shouldn't they be added like numbers (2 + 20 = 22) instead of (2 + 20 = 0220)?
That <<20 is the same as multiplying option by 0x100000. SO, definitely, it's not the same as adding those 2 numbers!
It's option * 0x100000 + serial2.
s2 + (opt << 20) is more 'clearly' (IMO) represented as (s2 & 0x000fffff) | (opt << 20). `s2` fills the lower 20-bits of the value, and `opt` fills bits 31-20 (in integer representation anyway, once you pack this the byte order will be reversed). In any language it would be more idiomatic (again, IMO) to use bitwise OR (|) instead of arithmetic addition (+) to accomplish this, but since the bits don't overlap, the result of either operation is the same (+ is XOR with carry, and XOR and OR are the same if you never hit the 1 ^ 1 case).System.Security.Cryptography.CryptographicUnexpectedOperationException: EffectiveKeySize must be the same as KeySize in this implementation.I don't understand why they would bother including such an incomplete implementation. The limitation doesn't even really make sense, they still need to implement the full 128-byte key expansion even if the expanded size and actual size are the same, since this is what is used in the enciphering process. Makes no sense.
Hi Fisafisa,
I've had the same problem with the AMIQ, I tried some of the keygen software then I went back to what I know best. So I took my soldering Iron and play with the EEPROM on the DAC board X24C16 next to the Altera and I've compare when activating the B19 option on it the only change was a bit in the EEPROM, nothing else no checksum... So I reverse engineer the process and found out that the bit for AMIQB19 is placed on address 0X13 then I was able to revert all the bits and the options I was interested in .
AMIQB1 Addr 0x11 ; AMIQK11 Addr 0x15 ; AMIQK12 Addr 0x16 ; AMIQK13 Addr 0x17 ; AMIQK14 Addr 0x18 etc ... I went up to AMIQK21 (whick I'm not sure if it's actually an option considering K20 is the last option available in WinIqSim)
After modifying the EEPROM and rebooting the system upon a good boot I then use the GPIB command with the command to retrieve the actual key for example for AMIQB1 that would be : SYST:OPT? AMIQB1 then the unit would reply it's key. I had to redo it several time in order to get it working. If you add all the option at once they would be activate and you'll be able to retrieve all the number but if you forgot one and you want to add it after you will need to resend the key to your unit I thing there is some sort of compare with the EEPROM.bin file on the drive that is use for backup.
I hope it would help you or anyone else using an AMIQ to "retrieve their option key"
Regards
>Tnx thorswait (https://www.eevblog.com/forum/profile/?u=99498)! I just modified my new toy:*OPT? ->
AMIQB1,0,0,0,0,AMIQK12,AMIQK13,AMIQK14,AMIQK15,AMIQK16,AMIQK17,AMIQK18,AMIQK19,AMIQK20,0,0,0,0,0,073 Ramppa
Is this one too new for these hacks?
No but BW is a HW option.
Is this one too new for these hacks?
No but BW is a HW option.
I started entering all keys from 000, 001, .., 011. and it did enable FFT GSM EDGE, EMI receiver etc. however, upon entering the number of 012 it froze and when I rebooted the device now think it is an "FSIQ 3". |O
Anyone has a hint on how I get my "FSEA" back?
Hello Pro's
I have a big problem... I used (https://github.com/rdelien/fsxx_keygen) to try to enable some options on my "FSEA 20".
I started entering all keys from 000, 001, .., 011. and it did enable FFT GSM EDGE, EMI receiver etc. however, upon entering the number of 012 it froze and when I rebooted the device now think it is an "FSIQ 3". |O
Anyone has a hint on how I get my "FSEA" back?
thanks :)
I have updated the source code of the Rohde & Schwarz FSP option generator in post 7 of this thread and put it on GitHub:
https://github.com/CatGenius/fsxx_keygen (https://github.com/CatGenius/fsxx_keygen)
It now contains all 200 seeds from API.DLL and it takes the serial number from the command line options.
If no instrument type is specified, it prints all 200 keys, generated from the serial number and the 200 seeds. If you have found some of these keys to activate any options, please report:Please note I am not the original author of this software. I just extended it a bit.
- Your instrument type (eg. FSEA20)
- The key number (a number between 0 and 199, not the actual key
- The number (eg. K10) and a description (eg. GSM MS Analyzer) of the option it enables
I have a Rohde & Schwarz FSH4 .024 series, I see you had great success with the FSH3 model.
(...)
So, with the right HW inside the device, we can change the device model by inserting the correct Factory Key. The other option keys will remain the same.
Has anyone had luck with enabling options on a SME 03? It does not have FM modulation - but I don't see the 'Option to Install' for the SM-B5 option...does this mean it can't be installed/enabled?
Has anyone had luck with enabling options on a SME 03? It does not have FM modulation - but I don't see the 'Option to Install' for the SM-B5 option...does this mean it can't be installed/enabled?
SM-B5 is a HW option. Not software.
I have updated the source code of the Rohde & Schwarz FSP option generator in post 7 of this thread and put it on GitHub:
https://github.com/CatGenius/fsxx_keygen (https://github.com/CatGenius/fsxx_keygen)
It now contains all 200 seeds from API.DLL and it takes the serial number from the command line options.
If no instrument type is specified, it prints all 200 keys, generated from the serial number and the 200 seeds. If you have found some of these keys to activate any options, please report:Please note I am not the original author of this software. I just extended it a bit.
- Your instrument type (eg. FSEA20)
- The key number (a number between 0 and 199, not the actual key
- The number (eg. K10) and a description (eg. GSM MS Analyzer) of the option it enables
EDIT.
Deleted a request for help . I did an new make and it worked :)
FSH3-13 (tracking generator) fairly late unit with Software 14.0
The input string was ./keygen -s 123456/000 (replace 123456 with your FSH's six digit serial number). The FSH does not have a slash number but using 000 works.
The codes that worked were keys
001: 07225xxxxx Demo Mode
002: 09689xxxxx DTF B1
003: 27029xxxxx Vector Calibration K2
004: 05650xxxxx Remote Control K1
005: 40886xxxxx Receiver Measurement K3
009: 01360xxxxx Restricted Acc K60
010: 23507xxxxx Calibration Allowed K15
I stopped at key 040 as there are no other options I'm aware of. Obviously the actual key numbers will be different for other units. Note that Demo mode only worked once. I presume it will work again once the 999hours have passed.
I'm very happy that in addition to a SA I now also have Scalar network analyser, Vector network analyser, Cable analyser (DTF) and a measurement receiver with CISPR bandwidths and quasi peak detection. 8)
Hello,
I have a weird problem in my FSH3, the internal battery went bad and when th FSH3 was without any power, all the installed options are gone! I tried to entrer them again but when there is ´battery or external power, the options are cleared! Could be some EEPROM which went bad? the cal values seems to be ok, it is only the options which disappeared.
George
Disconnect a battery inside, I guess.I tried, with FSH6 such a trick does not work.
Guys, if someone has FSH3 too without a battery. Can you confirm that options are stored in CMOS?
Can anyone share a fresh FSHRemote?
I need help. We need FSH View software for FSH3. Can anyone help?