Hacking the Rigol MSO5000 - Dr Mefisto Licensing Method

[SuperD]

Thank you again for the guidance and putting it all in one place! I did do the 1.3.3.0 update, all 3 self-tests & the self-cal. As well as the new backups too. Ready for Scope-a-geddon!

[BTO]

Thank you again for the guidance and putting it all in one place! I did do the 1.3.3.0 update, all 3 self-tests & the self-cal. As well as the new backups too. Ready for Scope-a-geddon!

Ohh yeah....
Now before the chalice of power is passed unto you , YOU HAVE 1 MORE TASK
before unleashing SCOPE-A-GEDDON


YOU MUST LISTEN TO THIS

 

and remember

THERE CAN BE ONLY ONE

[strahd_von_zarovich]

Has anyone tried it with MSO8000 series. 

I have MSO8064 with all the options but, upgrading 600MHz to 2Ghz would be wonderful. 

[BTO]

Has anyone tried it with MSO8000 series. 

I have MSO8064 with all the options but, upgrading 600MHz to 2Ghz would be wonderful. 

LOL... Man i love it when this happens
You don't get many (Actually there have been NONE) LOL that own an MSO8000 to put up their hand and say i want this unlocked.

but yeah i'm pretty sure we can most definitely do it.
I think it's best we tee up a time to get on a zoom session so it all goes properly, there's a few changes that need to be made in the script,
but i'm pretty sure i can get you to 2GHz because it's plain to see in the script that the option is there.

Has anyone tried it with MSO8000 series.

well on the MSO8000 post there is only 1 guy, and i reached out to him and he has not responded.

But as i said, this script should be good for
MSO5000
MSO7000
MSO8000

and also, No one has approached me for MSO7000 either, You just don't get a lot of that, it's not popular
But my confidence level on this working is very high, I reckon we give it a go

[tv84]

This method works for all MSO 5000, 7000 and 8000 series. Nonetheless, given how this script works, it's not risk-free because of how the different FRAM areas are addressed.

I advise all to do a FRAM backup before doing it, as a last option to fully restore the scope.

FWIW, all this was tested when the 8000 came out. Here. Months earlier it had been done with the 7000.

[BTO]

This method works for all MSO 5000, 7000 and 8000 series. Nonetheless, given how this script works, it's not risk-free because of how the different FRAM areas are addressed.

I advise all to do a FRAM backup before doing it, as a last option to fully restore the scope.

given how this script works, it's not risk-free because of how the different FRAM areas are addressed.

No mate, Most definitely. I wasn't just going to run the script as is.
Even though it's not risk free, I've done extensive research on the Software Items that are included and they all seem to span across the 3 Models.

I was actually going to reach out to you or DrMefist0 LOL, I suppose it's good timing that you chimed in.. Thanks.

I advise all to do a FRAM backup before doing it, as a last option to fully restore the scope.

No.. by all means , THAT WOULD BE NON NEGOTIABLE.

I would of course go through and change the parts of the script that label the scope or require the name MSO5074 to the model of the MSO8000  that we are targeting

Now.. I did actually look at Line 19

Code: [Select]

FRAM_MD5 = 'aadc292fe4063a7ac392e3c3dde51e84'and was wondering will this still work and if not, How to obtain a checksum that would
as for Line 20

Code: [Select]

FRAM_OFFSETS = [3120, 3204, 3206, 3207]I do understand what these do, however i have not opened and interrogated the scope to the degree where i would understand which values needed to be insert to accommodate the offsets for
MSO7000 and MSO8000

I'm planning over the weekend to go through the script with a fine tooth comb and see what's what.
also.. IF YOU KNOW   things like lines 39 - 42 (as an example) they are commented out which leads me to sort of think that DrMefist0 kept this as an ace up his sleeve to enable
should we require it. Or... it could just be stuff that he tried then didn't work so he commented it out, Not sure to be honest.

I do understand what all the modules do.
I am going to go through the script carefully
and we are DEFINITELY going to do a full backup

Personally i think with a bit of tweaking and a bit of help from you perhaps and DrMefist0 (Since he wrote the thing) we should be able to pull it off.
it definitely shouldn't work as it is, Although i was going to try it that way just to be sure it didn't (What are you thoughts, do you think it'll work as is ?)

Also Line 421

Code: [Select]

    model = model[:-2] + '00'
is going to be interesting as to what the value should be.
so far we've got
2  00  for MSO5000
3 000 for MSO5100
i haven't gone to MSO5200 but i assume 4  0000   and not that it'll be relevant but MSO5300 i assume 5  00000

anyway, i think it's worth a crack, even though the MSO7000 and MSO8000 community are not a big one, why should they miss out ?

ANY THOUGHTS MATE ?

[BTO]

This method works for all MSO 5000, 7000 and 8000 series. Nonetheless, given how this script works, it's not risk-free because of how the different FRAM areas are addressed.

I advise all to do a FRAM backup before doing it, as a last option to fully restore the scope.

FWIW, all this was tested when the 8000 came out. Here. Months earlier it had been done with the 7000.

Thanks for that, I'll check that out VERY CAREFULLY
I would try this on my own scope, however i don't have an MSO7000 or 8000, don't have a need for one.
anyway, thanks for the update, saves me looking for it,
I have gone through all the hacking posts and each page, Hundreds of pages,  but it's easier if i don't have to look for it, thanks mate

[tv84]

If there is no evolution meanwhile, by year's end I'll release the SCPI command that does all the magic of writing to the FRAM.

What started at Xmas 2018 will end then, and afterwards someone will be able to update Mefisto's script making it bullet proof.

Until then the whole community still has time to solve the quest.

No more replies for now...

[dinosaur_rob]

BTO
Images as requested. 
Cheers
dinosaur_rob

[BTO]

If there is no evolution meanwhile, by year's end I'll release the SCPI command that does all the magic of writing to the FRAM.

What started at Xmas 2018 will end then, and afterwards someone will be able to update Mefisto's script making it bullet proof.

Until then the whole community still has time to solve the quest.

No more replies for now...

If there is no evolution meanwhile, by year's end I'll release the SCPI command that does all the magic of writing to the FRAM.

Sounds good, I'll see if i can beat you to the punch.

What started at Xmas 2018 will end then,

AND IT SHALL RESTORE BALANCE TO THE UNIVERSE....... ONCE AND FOR ALL   

Until then the whole community still has time to solve the quest.

...... AND WIN......
THE MEDAL OF HEROES

[BTO]

Thanks for the pictures.

[BTO]

Has anyone tried it with MSO8000 series. 

I have MSO8064 with all the options but, upgrading 600MHz to 2Ghz would be wonderful. 

Hi mate, just touching base,
1. I now realize that you are in fact the guy from the other post, I was hoping you'd see my comment.

2. I just had a really really good look through the Python Script.
hmmm 
I SUSPECT THIS MAY BE ... A LOT EASIER THAN I ORIGINALLY THOUGHT
I also think a certain someone (Who shall remain nameless) is playing games with us  LOL
Not necessarily bad games , but more like....   Let's force the lower life forms to learn something.

However... I also think this conversation needs to take place on this thread
https://www.eevblog.com/forum/testgear/rigol-mso8000-series-hack/
THE MSO8000 HACKING THREAD

So.. Let's jump back onto that shall we
Also, Even though i understand Python to a good degree, i think it may be helpful if you round up some others
that are more experienced at python as well , if you can manage it.
I do believe i can get through this on my own, but.... JUST IN CASE.. Ya Know.
sometimes it's good to get another point of view.

Anyway, I'll repost this on the other thread and we'll continue testing it there.
Also get some people who have MSO8000 and even MSO7000  as i reckon i can make both of them happen.

[electricMN]

My scope has old firmware. Can I use this process to upgrade it to the latest version while adding all options?

[BTO]

My scope has old firmware. Can I use this process to upgrade it to the latest version while adding all options?
(Attachment Link)

yeah, Absolutely. it's not even a problem.
you are on 1.1.4..8, the lowest version that i went to
to test it was 1.1.4.4

SO, YOU'LL DO IT LIKE THIS

- From version 1.1.4.8

- UPGRADE AS NORMAL TO 1.3.2.2

- After that, Follow the pdf using the python script method,
  Since your scope is MSO5074  You're going to use the script called
 

Code: [Select]

rigol_kg2.py

[electricMN]

I have the options shown in the image. They came bundled with the scope. Is there anything special I need to do during the process of hacking to get all of the options? I thought I saw something about if you have the bundled options you'll have to delete them first prior to doing the hacking process.

[BTO]

I have the options shown in the image. They came bundled with the scope. Is there anything special I need to do during the process of hacking to get all of the options? I thought I saw something about if you have the bundled options you'll have to delete them first prior to doing the hacking process.

(Attachment Link)

That's fine, don't worry too much about it.

1. Just follow the PDF, it outlines the process of Uninstalling as well.

2. Now, as for the options,   The script actually checks what you have installed and what you don't.
   Since your options are correctly licenced from Rigol, Chances are they'll survive the upgrade.
   I would suggest you just do the process without uninstalling BECAUSE WE CAN KILL 2 BIRDS WITH 1 STONE HERE

3. Then after doing it WITHOUT UNINSTALLING, Let me know if it all went through properly, My gut feeling is.. it will.
    Now if it doesn't, it doesn't matter, it'll just fail and then you go back and uninstall the options and do it again.

but i reckon it'll go through just fine.

Just go ahead with it mate,  don't worry,
Follow the PDF and let me now if you have any issues

YOUR BIGGEST CONCERN IS...
DO NOT LOSE POWER DURING THE PYTHON SCRIPT PROCESS
DO NOT UNPLUG OR LOSE NETWORK CONNECTION DURING THE PROCESS

as for the rest of it,  You should be fine.

[electricMN]

Thanks, I'll give it a shot tomorrow. 

[BTO]

Thanks, I'll give it a shot tomorrow. 

No worries mate, YOU'LL BE RIGHT, Just follow the PDF.
I'm here if you need me

But since you have an older version 1.1.4.8
- I have no questions or concerns that you'll be able to upgrade to 1.3.2.2 , None at all.
- But since you have 1.1.4.8  WITH OPTIONS, do me a favour and the upgrade first WITHOUT Uninstalling Options

As for what that chatter was about the options.
IN CERTAIN SITUATIONS, Usually on the 100MHz Models, the other script was required the one ending in 3_000.py

Now...there has only been 1 person who had a MSO5074 that needed (what i call, the version 3) of the script.
Now.. it is possible that you'll need it.... Sure,  it's a REMOTE Possibility

but start on the first script that i mentioned and start without uninstalling options.
Nothing bad can happen if it fails

it's either
(Most likely) - Just gonna work and install all the other options you don't have
or
- You uninstall the options then do it again and it then works
or..
(Very unlikely) LOL - it didn't work on the first script so..  You use the 3_000.py  script and then it'll work without options uninstalled
or..
(Extremely Unlikely) - You then also need to uninstall the options and then it'll work

but in any of those cases, your scope isn't in any danger
if it fails you may get an ASSERTION ERROR
that's fine, it just means , use the other script  (i won't go into the detail of it)


BUT IN ALL LIKELIHOOD, IT'S JUST GONNA WORK THE FIRST TIME
Because the rigol_kg2.py is for MSO5074
the one ending in 3_000.py is for the MSO5100 (100MHz Series)
that's how it works,  As you increase to 100MHz, then 200MHz  then 350MHz  , Changes in the script need to be made to accomodate
what the scope is doing, But most people have MSO0574 and only SOME have MSO5100
I am yet to see a MSO5200  and i don't know why a person with a MSO5300 Would be here, since it's all unlocked anyway.

so that's what it's all about

JUST GO AHEAD AND DO IT, YOU'LL BE FINE

[electricMN]

Version 1.3.2.2 isn't available on Rigol's web site. Can I just go to 1.3.3.0 and skip 1.3.2.2?

[BTO]

Version 1.3.2.2 isn't available on Rigol's web site. Can I just go to 1.3.3.0 and skip 1.3.2.2?

LOL,,,,   I KNOW THAT

That's why i put everything into this 1 post

GO TO POST 1
GO TO THE LINK
DOWNLOAD WHAT YOU NEED
it's all there

all the versions that you need
the PDF
then a link to the training video's afterwards

but No don't go to 1.3.3.0 off the bat

go from 1.1.4.8    t0  1.3.2.2    then to 1.3.3.0
All the files are in the link
ALL THE FILES ARE ORIGINALS FROM RIGOL 100% Genuine Rigol files (Because, i keep these things when they come out)

[electricMN]

Sorry, I didn't realize the GEL file was in the zip file in your link. I won't bother you anymore. 

[BTO]

Sorry, I didn't realize the GEL file was in the zip file in your link. I won't bother you anymore. 

LOL, That's ok,
it's not a bother and ... Feel free to bother me anytime, it's not a problem for me.
but, EVERYTHING that you need is in that link, Just follow the PDF and you'll be ok, Everyone else has been so i'm confident you will as well.

Give me the good news when it's done

[electricMN]

Good news delivered. All is well with just a few minor hiccups, mostly my fault.
I didn't delete the options and just went on through the PDF document and in the end I've got an upgraded scope. Thanks so much for documenting this process in a manner most can understand. 

[BTO]

Good news delivered. All is well with just a few minor hiccups, mostly my fault.
I didn't delete the options and just went on through the PDF document and in the end I've got an upgraded scope. Thanks so much for documenting this process in a manner most can understand. 

THAT'S COOL...  GOOD WORK 

Also thanks for letting me know that you went from  FOR THE BENEFIT OF FUTURE READERS
From  1.1.4.8 (with Options Installed)
To       1.3.2.2
Then.. Running the script
Successfully Installing the other options
Then up to 1.3.3.0
and everything worked


NOW DON'T FORGET THE POST STUFF

- DO YOUR BACKUP
- SELF CHECK
- SELF CALIBRATION

Then, if you're not totally familiar with the scope, head over to the
https://www.eevblog.com/forum/testgear/post-hacking-rigol-mso5000-post-hacking-tutorial-deep-dive
And you'll have a bunch of videos that will give you tutorial through the entire scope and it's features

You'll get some cool basic electronics troubleshooting

ENJOY YOUR SCOPE

[electricMN]

Did the post stuff as part of the process so I basically went from page 1 to the end and did it all. 

I'm fairly familiar with using an oscilloscope since I worked in electrical engineering but I'm not all that familiar with the capabilities of the MSO5000 so I'll be going to the thread you linked to and taking a look.