Hacking the Rigol MSO5000 series oscilloscopes

[Sergey Astakhov]

I just put 00.01.03.00.03 on my 5074, because I couldn't find the 1.03.00.01 version.  Will the patch still work?  Or do I have to get the 01 version first?
 

The patch is individual for each version. You need to select the correct patch for the firmware version you have installed.
Firmware update resets all changes and the patch will need to be installed again.

[ziDot]

I just put 00.01.03.00.03 on my 5074, because I couldn't find the 1.03.00.01 version.  Will the patch still work?  Or do I have to get the 01 version first?
 

Instructions here::
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3943042/#msg3943042

Skip step 2 in your case.

[Tonkabot]

Got it all working.   used the right patch everything is happy.
It's sitting running the self Cal right now.

Thanks!

[pr_cpp]

Hello

I'm wondering how to rollback the original configuration from backup I have just made using your scripts. Just in case. Is there some kind of procedure (cli commands) or script doing it automaticly ? Did someone do it before and in the worse scenario is there a chance that Rigol service will notice the scope was patched / modified.

Thanks.

[Sergey Astakhov]

Hello

I'm wondering how to rollback the original configuration from backup I have just made using your scripts. Just in case. Is there some kind of procedure (cli commands) or script doing it automaticly ? Did someone do it before and in the worse scenario is there a chance that Rigol service will notice the scope was patched / modified.

Just install the latest firmware and all changes will be reverted.

[Atila]

hello, has anyone tried to use this hacker this on MSO5152-e?

[SpacedCowboy]

This could be a stupid question, given the name of the thread, but does this work for the MSO8000 series as well ? Or is there any way of making that work ?

[purpleTurtle]

Hello,

I'm currently thinking of buying a oscilloscope for myself and got quite interested in the MSO5000 series. I wanted to ask a few questions regarding and hope you could help .

Did I understood correctly that the patch can unlock every feature and can "create" a MSO5354 out of an MSO5074?

Is internet access still possible after the patch or do I need to watch out because of some communication between the oscilloscope and the Rigol server?

Can you undo the patch with the factory reset in case something happened and it needs to be send back to Rigol?

Many thanks!

[Fungus]

Did I understood correctly that the patch can unlock every feature and can "create" a MSO5354 out of an MSO5074?

Yes.

Can you undo the patch with the factory reset in case something happened and it needs to be send back to Rigol?

Yes.

[ahmedik83]

I just put 00.01.03.00.03 on my 5074, because I couldn't find the 1.03.00.01 version.  Will the patch still work?  Or do I have to get the 01 version first?
 

Instructions here::
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3943042/#msg3943042

Skip step 2 in your case.

Hi
I tried this method and it is failed. In this zip we have DS5000Update.GEL file only 130 kb is it normal? I tried to copy another one 60mb from github - it is upgrading but not patching. What am i doing wrong

[thm_w]

Hi
I tried this method and it is failed. In this zip we have DS5000Update.GEL file only 130 kb is it normal? I tried to copy another one 60mb from github - it is upgrading but not patching. What am i doing wrong

Read the instructions again, follow them line by line, one at a time.
Post here again if you are not sure what it is telling you to do.

After step 2, go to your info page and it should say "firmware version v00.01.03.00.03"
Patch is 130kB yes.

[ahmedik83]

i ordered oscil with latest FW and skipped 2 steps. downloaded patch within 3 files inside. extracted them and puted into usb. it show error no usb mounted (attaching photo). but when i changed DS5000Update file to other with 60 mb it is updating without patching. And also whrn you reject usb from oscil to PC it show that usb has errors)need to correct them no matter tried different usb flashes.

[ahmedik83]

solved th problem. The problem was that when i unziped  this files 01_03_00_03.bspatch file unziped uncorrectly. do not why. when it is correct it shows like txt file when not - like file.

[liteyear]

Worked perfectly. Note both the FW version and the date must match:

FW:01_03_00_03
Build: 2021-10-18

For some reason I had a MSO5074 with the same FW but a slightly older date. The patch failed on the checksum match and I had to "update" to the official FW. I downloaded that from https://gitlab.com/riglol/rigolee/firmware/-/tree/MSO5000/GEL because two different links on the Rigol site kept timing out.

Otherwise, piece of cake. Didn't need to wipe the USB stick in between either. Just make sure the correct files are at root level.

[AFremont]

Wife got me a 5074 for my birthday.  I really want the increased bandwidth, but I am terrified of bricking the scope.   I haven't let it update itself over the internet yet, for fear of it loading a version of FW that isn't hackable.  I'll do a lot more reading of this thread before I do anything, but is there any last minute stuff I need to know before trying this?  It looks like this process is continually evolving as each newer firmware
version comes out.  Thanks for reading.

[Fungus]

I'm not sure it's possible to brick it. You can reset it to the factory firmware with a suitable USB stick.

[vutt]

Bought my MSO5074 this month from Batronix with 2022/01/22 factory calibration date

I actually applied included promo bundle (all options except memory and bandwidth upgrade) first.
Then followed this guide: https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3943042/#msg3943042 (skipped FW upgrade because I had already latest one)

Everything worked as described!

Now any ideas how to patch tastefully RIGOL sticker label on unit? 
Edit: It looks we have: https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3522284/#msg3522284 

[gb243]

My hacked 70MHZ MSO5702 shows all the options as permanent. Yet I measure a 3db bandwidth of 106MHZ. This sounds about right for a 70MHZ model.

The FW was 01.03.00.01 build 2020-05-18. I used the Liberator .7z archive and everything ran in with no issues. This was followed by a Self Cal. Everything else seems to work. Any ideas???

[thm_w]

My hacked 70MHZ MSO5702 shows all the options as permanent. Yet I measure a 3db bandwidth of 106MHZ. This sounds about right for a 70MHZ model.

The FW was 01.03.00.01 build 2020-05-18. I used the Liberator .7z archive and everything ran in with no issues. This was followed by a Self Cal. Everything else seems to work. Any ideas???

What device are you using to measure the bandwidth, do you have a 150MHz+ signal generator?
You don't have 100MHz bandwidth filter on?
Same on another channel right?

[olafnew]

Is it just me, or maybe a more thorough overall controll of the unit after the hack... but - i've seemed to notice that a scope after a hack to full options upgrade runs way more hotter than as it was before the upgrade. Did anyone else noticed something similar?

Perhaps it has something to do with fan speed profile in the firmware?

P.S. Do i understand correctly that there is NO brightness control? I have an old analogue scope that has brighter CRT...

[Fungus]

Is it just me, or maybe a more thorough overall controll of the unit after the hack... but - i've seemed to notice that a scope after a hack to full options upgrade runs way more hotter than as it was before the upgrade.

The only thing the bandwidth hack does is disconnect a capacitor from the input.

[ResistorRob]

P.S. Do I understand correctly that there is NO brightness control? I have an old analog scope that has a brighter CRT...

I do not think there is brightness control. I know one issue when this scope first was released was the screen was really dim. Supposedly one of the firmware updates fixed this issue. I keep hearing mixed feedback as to whether this scope is now bright enough. It's the one thing holding me back from buying one.

[gb243]

Thanks for the reply. I am using a TGF-4242 240MHZ function generator. Also a bnc to bnc patch cable through a Rigol ADP0150BNC 50Ω Impedance Adapter. This should match the 50ohm output of the function generator. I have the scope set for full bandwidth. There are 20,100,200MHZ options but none of these are selected.
In a couple of weeks I hope to get a Rigol DSG821  2.1GHz RF Signal Generator. This will give a second RF source just in case I am doing anything really dumb with the TGF-4242. I am always ready to admit to doing dumb things now and again.

[hussamaldean]

I just liberated my new MSO5074 yesterday, FW 01.03.00.01 build 2020-05-18, easy peasy and purring like a pussy.

I've attached the necessary files and describe below what I did for the convenience of others. Nothing new, it all comes from previous posts.

Steps I took to liberate the scope:

• Verified installed FW is version 01.03.00.01 build date May 18, 2020 (Utility => System => About)
• Copied three files, that can be extracted from attached .7z archive, to root of empty 8GB FAT32 USB drive
• Started up scope
• Inserted drive to front panel USB port
• Utility => System => Help => Local upgrade
• "Upgrade system firware?" => OK
• Let the scope do its thing - takes a minute or two, or five, go with the flow
• Reboot scope
• Verified all options now licensed ...forever... (Utility => System =>  Help => Option list)
• Bob's your uncle

I suppose I shiouuld recalibrate now too, which according to Olliver goes like this:

• Make sure that the instrument has been operating for at least 30 minutes
• Disconnect all input channels (including probes)
• Utility => System => Self-Cal => Start
• Self calibration takes ~ 35 minutes to complete
• When complete, reboot the scope

I verified that all options were upgraded ...forever... (notwithstanding what the effects may be of any future official FW updates I may decide to apply). I did not verify that the patch disables the "phone home" firmware upgrade check, but I have no reason to think it doesn't. This patch does not enable the sshd daemon. To ssh as root into the scope, follow mabl's instructions - which needs to be reapplied after each scope reboot whenever you want SSH access.

This is not going to work for you if your installed FW is not version 01.03.00.01 and having build date May 18, 2020. In that case you will need to adjust the patch.txt file in accordance with instructions that can be found in other posts.

Where the files and info came from:

• Basic GEL file from mabl https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg2704640/#msg2704640
• Modification to disable "call home" FW updates from typoknig https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3024342/#msg3024342
• Modification for FW version 01.03.00.01 May 2020 build from omgoleus https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3344172/#msg3344172

Will this hack work with Rigol MSO5074?

[gb243]

If you meet the prerequisite FW and build versions then quite likely yes. I am investigating a bandwidth issue that may or may not be real. Everything else for me worked out ok. I think a lot of others have also had no issues. I would recommend doing a backup first though.