Hacking the HDO1k/HDO4k Rigol 12 bit scope

[bigfede]

Upgrade from removable disk should be done from Storage section. Then choose upgrade, touch or click the file path, choose removable USB disk ant then choose the fw. file. See pics attached.
For downgrade I just follow the same procedure.
Upgrade button from general menu is for online upgrade.

Thanks, I tried that. Got it to work. First I tried HDO4000 02.04, that did not work. So did HDO4000 02.00 renamed to HDO1000, that worked. Then I did HDO4000 02.04, and it worked too.

So now the scope is version 02.04, but still reports the scope as being a HDO1074. I guess that is ok, since an earlier post in the thread also showed 02.04 and still as HDO1074.
I tested the bandwidth, and it's only 70MHz, the options does not seem to be altered.

I did the generation of the options and send via SCPI, but seems that does not work.

This is the SCPI command for 800MHz I am using, copied directly from the generated codes:

:SYST:OPT:INST HDO4000-BW2T8@0a0c97d2e2a49992c832ff257bbcc2d50fe3ef31c26e842621a3e27304c9533e060abe6e7477b32c9e5944e51fdca548

After this, I changed the Device ID in the rgtool.go file to:

flag.StringVar(&deviceId, "id", "HDO1074", "device Id")

It of course generated different SCPI:

:SYST:OPT:INST HDO4000-BW2T8@dba4fe0deacbf783ed93ea04b1e6a8445ded3d1ad63e053645134ad874a7d9fd060abe6e7477b32c9e5944e51fdca548

Also tried to change the SCPI line to this:

:SYST:OPT:INST HDO1074-BW2T8@dba4fe0deacbf783ed93ea04b1e6a8445ded3d1ad63e053645134ad874a7d9fd060abe6e7477b32c9e5944e51fdca548

But, no dice.

I think you are using the wrong script. Have a look that there are two version. This tool is for HD4xxx, for HD1xxx it must be modified. Also the option that you are trying to enable does not exists. Use the attached one here.

[EL_ID_ioT]

Hello, it works fine for my HDO1072, I have now 200MHz bandwidth + deep memory enable.
Many thanks to all of you for your exciting researches and the sharing! 

[EL_ID_ioT]

Rigol confirmed to me by mail that the HDO4000.GEL applies to HDO1000 series.
I also found the file HDO4000 in my scope before updating.

[drhex]

Just "upgraded" my new HDO4204 - no issues, great to have this community.

[1793997762]

Hello everyone, please ask what is the cracking process, now I read the forum did not understand how to get 200Mhz bandwidth options, if someone can summarize the operation steps I would be very grateful.

[swperk]

I just acquired a DHO4204 scope and I really would like to unlock the options. I've read through the threads but admit to being a bit confused about the upgrade process.

Do I need to run ADB on my PC in order to extract the keys or is there another way to do it? I am unfamiliar with ADB and I think it will have a very steep learning curve for me to get to where I need to be.

Is there a step-by-step how-to published anywhere, or an executable file of some sort that does all of the heavy lifting?

Thanks!

[williamlee]

Did any news regarding the HDO4204 hack to HDO4804?

[swperk]

Thanks to the generous help of tv84 and drhex, I went back through the posts and found this very easy method to do the upgrade. You will need to install the Android SDK (https://www.techspot.com/downloads/5425-android-sdk.html) and the Go compiler (https://go.dev/) on your PC. Also download the rgtool.txt file for the DHO4000 series scopes (attached) and rename it to rgtool.go.

1) With your DHO4204 connected to the same network as your PC, use the Utility function on the scope to determine its IP address [scope-ip].
2) Open the Command Prompt program on your PC and send the following commands (you must specify Port 55555 when you connect):

.\adb connect [scope-ip]:55555
.\adb pull /rigol/data/Key.data
go run .\rgtool.go

3) Copy and paste the output of the Go compiler to any word processing document. The output will contain nine strings of SCPI commands, each having a unique option code consisting of of 96 characters after the "@" sign. It will look something like this (I've replaced most of the unique character strings with x's):

Generating options for HDO4XXXXXX
:SYST:OPT:INST HDO4000-EMBD@7451exxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
:SYST:OPT:INST HDO4000-AUTO@686abxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
:SYST:OPT:INST HDO4000-BW2T8@72eb8xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
:SYST:OPT:INST HDO4000-COMP@a2526xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
:SYST:OPT:INST HDO4000-AERO@1d28bxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
:SYST:OPT:INST HDO4000-FLEX@145a7xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
:SYST:OPT:INST HDO4000-AUDIO@b4e02xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
:SYST:OPT:INST HDO4000-RLU@c5e67xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
:SYST:OPT:INST HDO4000-UPA@f71a7xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

4) You can now close the Command Prompt program if you wish.
5) Connect to the scope using your web browser pointed to the scope's IP address.
6) Using the SCPI Panel Control function, paste each individual option code into the SCPI command window and execute it. You can enter all nine option codes one after the other. There's no need to reboot the scope in between each option activation.
7) Enjoy!

I've attached a screenshot of my scope showing the activated options.

Thanks again to all who helped with this amazing upgrade. What a great group of folks we have on these forums!

[geostep]

Thanks swperk!  Can this be made to work with the DHO1000 series as well?  A quick look at the rgtool.txt file seems to show it is DHO4000 series specific.

Thanks.

- George

[swperk]

There are two versions of rgtool.txt that have been published in this thread. I originally (unknowingly) used the one for the DHO1000 and when I compiled the output of the Key.data file, the option headers were for the DHO1000 and there were fewer than nine option codes generated. I assume that the most recently uploaded version of rgtool.txt in this thread is the one you're looking for, but you could certainly try all of them to see which one works.

[swperk]

Here's the rgtool.txt that will work for the DHO1000 (as far as I can tell).

[EL_ID_ioT]

Rigol confirmed to me by mail that the HDO4000.GEL applies to HDO1000 series.
I also found the file HDO4000 in my scope before updating.

[geostep]

Thanks again swperk,

I'll give it a try when my HDO1074 shows up.

- George

[williamlee]

I cannot install the Android SDK you address in the link, and I also did not know which one is fit me win10 64x??? Forgive me ... 

[swperk]

According to what I read just now on the web page I linked for the Android SDK downoad, the install package should work on your Win 10 64-bit PC. I'm using a Win 7 64-bit PC and it installed and worked without a hitch.

[KlausKragelund]

Tested a bit more, it looks like you can only have a side by side or top / bottom layout.  Event table is kind of mandatory as the way protocol decoding info is displayed in the waveform is kind of hard to read the values of the frames.  If I want to take advantage of the full sample memory, stop and zoom to decode, I cannot do it... as soon as I change the timebase, it says TOO MANY EVENTS or something like that and it does not decode. If I set it to a timebase where it still decodes, the update rate is like 1Hz... for a 115,200 baud rate UART decoding!!!  No wonder why it hangs with a 45MHz SPI signal... and it does not even decode correctly the frames.  I really cannot understand Rigol, they did not do the basic testing before releasing the scope, like someone sitting with the scope and testing it??

I've been busy with work so had only like 1-2 hour total to play with the scope, but will try make more tests during the weekend.

EDIT (TOO MANY EVENTS): The message I get is "There are too many results".  You can stop and zoom and get the packets.  But it works only up to 20ms timebase.  If you want to set 50ms or higher, then it says Operation Disabled.  Still a lot of freeze/reboot issues.

I also see this problem with roll mode, and for larger timescale than 20ms, the trigger function cannot be set to "Single". In fact it wont even open the trigger settings.

[KlausKragelund]

Some measurements:

I saw a big difference between DC level of 2 channels.

Did the calibration routine, and it was better. Waited 1 hour, scope powered up, did the calibration again.

Hooked up a DC reference to the scope, now CH1 and CH2 is within 0.2% of each other (did expect it to be better). Curiously, CH3 and CH4 were off by 0.5%. Seems maybe CH1/2 and CH3/4 are batched together to the same ADC.

Also, the vertical knob or rather the SW is crap. Rotating it, is misses steps, and sometimes jumps over a step

[trampas]

Is it possible to change the sampling rate of the scope? It appears to be fixed at 1GSPS, I want to go lower to capture longer amounts of data in memory.

[skander36]

Is it possible to change the sampling rate of the scope? It appears to be fixed at 1GSPS, I want to go lower to capture longer amounts of data in memory.

Why don't you change (increase) the memory? This is possible in settings.

[pedjasns]

Hello everyone,

I am a Rigol fan and I am about to purchase a DHO1074, and of course, hack it to some maximum. I saw in previous posts here that the DHO4000 has the same firmware file.

What is not clear to me is, if the hardware is "the same" (apart from missing ADC and power supply for active probes)  what is the difference in software, applications-wise?  Analog frontends are really the same, with 50Ohm pathways and 800MHz BW?
I saw some upgrades for DHO4000 concerning comm protocol decoders. Does it mean they are not available with DHO1000 whatsoever? What about the applications, such as Power Analysis and so...?

What is the final result of hacking DHO1000 with DHO4000 (.UPD file renamed) firmware?

I am sorry for asking these perhaps too simple questions, but I couldn't summarize the answers from all the posts here.

Thank you.

[skander36]

Hi pedjasns,
There is only one file that apply to both models - 4K and 1K - Archive is named DHO1000&DHO4000(ARM)UpdateVxx.xx.xx which contain DHO4000Update.GEL that you must apply to the scope.
The software analyze the HW configuration and load the coresponding FPGA applications (there are 9 versions included in FPGA folder) and enable features/apps.
The actual hack from this thread, only generate option keys for max memory and bandwith in the HDO1000.
Trying to input options code for other options (power analyze - UPA for ex.) does not activate this feature on HDO1000.
There is no hack for "upgrading" 1K to 4K from obvious reasons.
From my experience DHO 1000 is a stable and usefull scope that don't make me to regret his purchase. (I have 1072 model.)

[pedjasns]

Thank you Skander,

this made all clear to me. It is now a big question whether I should go for the scope just for HD feature, since I already own one DS2072A (hacked) and Miscig TO1104 (with all features on). Both work very well, but they are still only 8bit.
The story actually started with Analog Discovery Pro and 14-bit AFE, so I wondered if I would have a much better tool if I bought a Rigol HD. DHO4000 is perhaps "too much money" for a home lab scope.

Anyway thank you very much for the answer.

Regards

[Marchello]

Near DS2072A and DHO1074, if interested. The DHO4000 has the same body and screen, but black. At first I wanted to buy DHO4204 but at the last moment I changed my mind and bought DHO1074

[skander36]

Good choice!
Currently there is a promo 10% off for HDO1k and 4k on Rigol.eu.

[luis garcia]

The offer in Rigolshop.eu is 10% off plus 100M buffer option for free. Although you probably wont appreciate the second part of the offer.:-)