Hack of Sigllent spectrum analyzer ssa3021X?

[KungFuJosh]

My conversion is mostly done except for this, any suggestion? I really don't want to open the shell.

any takers?

Search through the thread. Somebody else used some (I assume) good quality coax to make a jumper without adding jacks.

[szym273]

Hello,

I am having trouble updating the software from version V3.2.2.5.1R1 to V3.2.2.6.3R2 after crossflashing from SSA to SVA. During the update process, I get the message: “upgrade fail.” Does anyone know what causes this error? In the attachment, I am attaching a screenshot of the system info window.

[qazwsx]

Thank you for sharing. I encountered a problem in the process of upgrading from SSA3021X Plus to SVA1032X. Before that, I had downgraded it to version 3.2.2.5.1R1. However, when I opened SSA3000X+_backup_11411.ADS and SSA3000X+_telnet_11411.ADS, they both failed. There was no backup file in the USB flash drive, and I couldn't connect to the telnet SSA IP 10101. This made me want to proceed to the next step. How should I solve it?

[uski]

Hello,

I am having trouble updating the software from version V3.2.2.5.1R1 to V3.2.2.6.3R2 after crossflashing from SSA to SVA. During the update process, I get the message: “upgrade fail.” Does anyone know what causes this error? In the attachment, I am attaching a screenshot of the system info window.

I had the same problem. I did a factory reset and I was then able to upgrade.

Good luck!

[S13]

For the most recent models upgrading and unlocking has become quite a bit more difficult. Siglent isnt making it easy... But it is still possible! 

I got a new SSA3021X-PLUS a little over a month ago. And with the stock latest firmware 6.3R2 i couldn't even enter keys to unlock bandwidth or other options. I had to downgrade to 6.2R5 and then it did accept upgrades. So with 6.2R5 i unlocked it to become a SSA3032X plus. But crossflashing to SVA did not work. The upgrade would just fail. Only by further downgrading to 5.1R1 i was then able to do the crossflash to 5.1R1 SVA1032X. As a final step i was then able to flash to the latest SVA firmware 6.3R2.

To be honest, the whole upgrade procedure was quite chaotic and i used several of the guides posted here in this topic. One of the important things was to also change the <upgrade_static_id>to 11410 in NSP_config_upgrade_info.xml (see https://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg4596574/#msg4596574) if i remember correctly.

And then there is obviously the issue with installing the new cable and soldering an SMB connector to the PCB. I could not get SMA to fit, so went the SMB route.


So my SVA1032X performs great, but i cant help but think that maybe the tracking generator output has lost an ever so slight bit of its flatness from the upgrade procedure. And this is more pronounced in the 2.1-3.2GHz range, where it probably never was calibrated for in the first place. Just keep that in mind if you ever think of upgrading your 3021X Plus.

[tautech]

............

And then there is obviously the issue with installing the new cable and soldering an SMB connector to the PCB. I could not get SMA to fit, so went the SMB route.

So my SVA1032X performs great, but i cant help but think that maybe the tracking generator output has lost an ever so slight bit of its flatness from the upgrade procedure. And this is more pronounced in the 2.1-3.2GHz range, where it probably never was calibrated for in the first place. Just keep that in mind if you ever think of upgrading your 3021X Plus.

TG output flatness is specified +3dB and in normal use Normalized for perfect flatness.

Not an issue except when using the TG as signal source for some external need or needing to provide an accurate level fixed tone using a zero sweep.

[S13]

It is still within spec, so i suppose nothing to worry about. Approx +/- 1.75dB, and even better if you just consider the 0-2.1GHz range. But keep in mind that this is measured by the spectrum analyzer, so im not sure how flat the input response is (have no other reference). The datasheet specs an input accuracy of 0.4dB typical and 0.8dB max with PA off.

But yes, if used with normalization its spot on as expected.

[tautech]

It is still within spec, so i suppose nothing to worry about. Approx +/- 1.75dB, and even better if you just consider the 0-2.1GHz range. But keep in mind that this is measured by the spectrum analyzer, so im not sure how flat the input response is (have no other reference). The datasheet specs an input accuracy of 0.4dB typical and 0.8dB max with PA off.

But yes, if used with normalization its spot on as expected.

FYI some screenshots from SVA1032X to compare with.

Ref Level set to 20dB in the Amplitude menu.
TG to RF In @ 0dB full sweep @ 5dB/div



Then with Ref stored and Normalized with Ref trace set to visible.

[marcopolo]

For the most recent models upgrading and unlocking has become quite a bit more difficult. Siglent isnt making it easy... But it is still possible! 
I got a new SSA3021X-PLUS a little over a month ago. And with the stock latest firmware 6.3R2 i couldn't even enter keys to unlock bandwidth or other options

It's surprising, I didn't have any problems starting from 6.3R2.

[S13]

FYI some screenshots from SVA1032X to compare with.

Thanks! That looks pretty comparable. Same slight roll off at the upper 2GHz range and bit of overshoot in the sub 400MHz range.

It's surprising, I didn't have any problems starting from 6.3R2.

Maybe it doesnt affect every SSA3021X Plus, but only the very recent ones? In any case if other people struggle with crossflashing or entering keys, think of maybe downgrading the firmware first.

[marcopolo]

Maybe it doesnt affect every SSA3021X Plus, but only the very recent ones?

Mine is two months old.

[SilverSurfer]

Hi everyone,

First of all, a huge thank you to this amazing community – this thread has been a goldmine for years and I learned a ton just by reading.
I just received a brand-new SSA3021X Plus and, as expected in late 2025, it came straight from the factory with the very latest firmware:
3.2.2.6.3R2 – build date 06.13.2025

I know this is probably the newest version Siglent has ever shipped, and I’m fully aware that each new release tends to close doors that were previously open.
I’m not expecting miracles, but I would be extremely grateful if anyone who has a unit with this exact (or very close) firmware could let me know:

- Is the classic telnet/DEBTTT trick still working on 3.2.2.6.3R2 ?
- If yes, is the old python keygen (the one based on the well-known 128-byte master key) still able to produce valid keys for SSA3032X / SVA1032X ?
- If not, has anyone found a new method or workaround for this firmware revision? (even partial unlock would already be great)

I’m perfectly fine downgrading if a safe older ADS file exists for the Plus series, but I saw that Siglent now signs the firmware packages and I don’t want to brick a brand-new unit on day one.

Any help, advice, or even a simple “sorry, this one is locked tight” would be immensely appreciated. I’m very happy to follow any instructions carefully and report back my results for the benefit of others.

Thank you in advance for your time and legendary patience with newbies like me!
 

[marcopolo]

Hi,

See my message above with the photos (#1358).
I have the same configuration, DEBTT + Python script worked.
I followed the instructions in @mandor's message #1296.

[SilverSurfer]

Hi Marcopolo,

Thanks a lot for your message — that’s awesome news!
I’ll give it a try right away and let you know how it goes.

Quick question: would it be possible for the script to generate the key and enter it directly into the interface (instead of typing it manually with the keyboard)?

Thanks again and talk soon!

 

[SilverSurfer]

Hi everyone,
I'm trying to apply the DEBTTT method on my analyser.
I'm successfully logged in as root with password ding1234.
But I'm completely stuck at the Host ID retrieval step because none of the usual commands work:

cat /etc/ecomb/aladdin.dat
→ No such file or directory

cat /proc/cpuinfo | grep Serial
→ Serial         : 0000000000000000

gethostid
→ -sh: gethostid: not found

So I have no way to get the Host ID with these methods.
Additional info: In the web interface, under System Info (or Information → About), there is a Host ID displayed, and it's a long string of numbers (definitely not all zeros).

My question:
Is this Host ID shown in the webif the correct one to use for the DEBTTT method, or is it a different value?
Receiver details (if it helps):

Model: SSA3021X Plus
Serial : SSA3PA.........
Host ID : 5000.......................


Thanks a lot for your help, really stuck at this step!X plus

[S13]

As explained in the keygen info:

# For the SSA3000X_Plus platform, get the ID with the 'SCOPEID?' SCPI
# command.

SCOPEID is the same as the Host ID.
SCPI commands can be entered via the webserver interface.

[marcopolo]

I followed the instructions in @mandor's message #1296.

Si tu prenais la peine de lire le message #1296 
If you would take the time to read message #1296 

------------------------------------------------------------
Installing software options and convert to SSA 3032X Plus
------------------------------------------------------------
On Siglent device
    Press "System" button
    Select "System Info" on screen
    Make note of Host ID

Open python script http://tpcg.io/_SV2SRE
Inside script change HOSTID to your device Host ID

[SilverSurfer]

Hi Marcopolo,
 
Thanks a lot, everything is clear now!

I actually saw the Host ID in System Info / About right from the beginning, but since every tutorial says to get it via commands (cat /proc/cpuinfo, aladdin.dat, gethostid, etc.), I thought the one shown in the web interface might be different or not the correct one.

In the end, all those commands are useless if the Host ID shown in the analyzer is the correct one.

Now I only need the **Python script** that generates the key from the Host ID. 
The old link everyone used is long dead (404). 
Does anyone still have that script or a working mirror? 
(I think it was called debttt.py, aladdin_keygen.py or similar)

Thanks a lot in advance guys! 🙏

[RFDx]

Now I only need the **Python script** that generates the key from the Host ID. 
The old link everyone used is long dead (404). 
Does anyone still have that script or a working mirror? 

Script is attached. Go to the "HOSTID" and enter the ID (16 digits) of your device. Next go to "Model" and uncomment the appropriate line. I used https://www.online-python.com/ to run the script. From all the generated keys you only really need "ALL" and "3032".

[SilverSurfer]

Wow! Fantastic RFDx, huge thanks to you!

You’re a wonderful guy, really appreciate it! 🙏😊

[mmueller24]

Thank you so much for this information. I just received a new SSA3021X+ and was able to cross flash it easily using your excellent instructions. I had no problems. I didn't need to do any of the TELNET stuff, because I didn't care to have the product name changed. I simply applied the appropriate KEYGEN code for the 'ALL' key, then did only steps 6 and 8 to crossflash and upgrade. It was super easy.

I did have to open up the unit and solder two SMB connectors to the PCB and install a jumper cable, but that wasn't that hard either. I even managed to salvage and reapply the calibration stickers based on another post I found here.

This is a great forum! Big thanks to everyone who provided the information.

If anyone has questions, please ask. I'll be glad to help.

-Marty

[willie.from.texas]

I just bought the SSA 3021X Plus and decided to perform this upgrade outlined in this thread. I successfully upgraded my SSA 3021X Plus to the SSA3032X Plus. I then tried upgrading it to the SNA1032X and ran into problems. Now, for some reason, the spectrum analyzer is stuck on software version 3.2.2.4.0 and, although I tried upgrading, I can't change it. The keys no longer work and the Tracking Generator has been disabled. I have some ideas of what to do, to include restoring my spectrum analyzer using the backup files, but thought I should consult the experts on this forum for their recommended path forward. Any help is sincerely appreciated.
Attacked below is my system info file with the serial number blanked out.
Thanks!

[tv84]

I just bought the SSA 3021X Plus and decided to perform this upgrade outlined in this thread. I successfully upgraded my SSA 3021X Plus to the SSA3032X Plus. I then tried upgrading it to the SNA1032X and ran into problems. Now, for some reason, the spectrum analyzer is stuck on software version 3.2.2.4.0 and, although I tried upgrading, I can't change it. The keys no longer work and the Tracking Generator has been disabled. I have some ideas of what to do, to include restoring my spectrum analyzer using the backup files, but thought I should consult the experts on this forum for their recommended path forward. Any help is sincerely appreciated.
Attacked below is my system info file with the serial number blanked out.
Thanks!

I guess you now have a "SVA1032X" (independently from what "model" says). So, now you have to flash the FW packages for SVA1032X, not for SSA+.

I assume you did change the ProductionID of the device following the thread's instructions.

[MathWizard]

I should have gotten the SSA3021X Plus a couple of years ago instead of getting a monster GPU. For the past 2 months, I keep re-playing the StarCraft 2 campaign, a game from 2012. I should be doing more EE, but my day job gets so boring, I need something  higher action and fun, than textbooks. I wish I had more junk to repair, and was getting paid for it sometimes.

[willie.from.texas]

I guess I got a little squimish. I became concerned over the loss of the tracking generator so, out of an abundance of caution, I thought I'd better stop. What threw me was the problem I encountered in renaming the device to the SVA1032. There is another step needed in the procedure before editing the SSP_trends_config_info.xml file. You need to add:
     "mount -o remount,rw /usr/bin/siglent/firmdata0"
before editing the file. Otherwise you can't save the changes because it is a read-only file system. I was then able to successfully download, "SVA1000X Firmware_V3.2.2.6.3R2 (Release Date 06.13.25 )" from the Siglent download site.
Everything is working now. Thanks for the vector!