Products > Test Equipment

Rigol 1054Z baremetal

(1/2) > >>

WaveyDipole:
I was wondering whether anyone has had any success accessing the Rigol 1054Z via its internal JTAG connector? Also is there an internal UART somewhere. The main MCU has UART pins but I have checked various pins and pads but have so far failed to find it exposed anywhere. Also, is it possible to enable Telnet or SSH?

I have board version V01.04_20141024. Its the later version without the printed position for the logic analyser chip. I think there was a very long thread about the 1054Z on here a very long time ago that may have discussed some of these things, but I am unable to find that now. BTW, I know the scope can be 'unlocked' without the need for any of this, but that is not my objective.

Fungus:
I don't think the DS12054Z uses an OS with a command line so there's no Telnet or SSH.

WaveyDipole:

--- Quote from: Fungus on March 03, 2023, 06:22:00 pm ---I don't think the DS12054Z uses an OS with a command line so there's no Telnet or SSH.

--- End quote ---

A lot of devices run on some form of Linux kernel so I figured that might be the case here. The device does implement USB storage, a FAT file system and Ethernet which was suggestive of OS-like features. However, an Arduino has USB and can implement an SD Card as well as Ethernet, yet it does NOT run an OS so I guess its not essential for the Rigol to run one either. That would explain the absence a command line interface, even though it does separately have Telnet access for SCPI commands and a web server.


--- Quote from: PeDre on March 03, 2023, 08:20:55 pm ---
--- Quote from: WaveyDipole on March 03, 2023, 06:09:18 pm ---I was wondering whether anyone has had any success accessing the Rigol 1054Z via its internal JTAG connector?
--- End quote ---

The description for the JTAG connection is hidden in this long thread:
https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/

I had used an Olimex ARM-USB-OCD-H adapter and OpenOCD 0.8.0 under Windows XP.
Attached are photos and the config files for OpenOCD.

Peter

--- End quote ---

Thank you for the information. I have oe of those Olimex adapters and that is what I am intending to use. Curiously, I probed (in a somewhat clumsy fashion) the 6-pin port on the left of my photo, using the jtagenum project code uploaded to a Pico (having first determined a voltage level of 3.3V on the pads). This was able to detect 4 of the JTAG pin functions and also returned a ID of 0x24004093. Googling suggests that this might be a Xilinx XC6SLX25 FPGA, but I am not certain. I don't see one of those on the PCB?

I had also probed the port shown connected in your photo (marked yellow) but so far, only with with an oscilloscope. There were bursts of what looked like a clock and another signal on a couple of the pins, but I had not got around to exploring that port any further.

I am still waiting on a Jtagulator PCB and will be building one from scratch and had intended to probe both ports once it was ready. However since I can now deduce the connections from your photo, I can probably just solder in the headers and go ahead and dump the code as you have done. The warranty is long expired, so there is no voiding risk anymore. I appreciate you posting that information.

I am now curious as to the purpose of the other port. It is not another presentation of the same JTAG port as is present on the right hand side of the PCB. With the exception of the ground, there is no continuity between any of the pins on those two ports.

Fungus:

--- Quote from: WaveyDipole on March 04, 2023, 09:54:43 am ---it does separately have Telnet access for SCPI commands

--- End quote ---

That's meaningless.

"Telnet" is just a manual IP connection. You can Telnet to any open IP port on any device, it doesn't imply "command line access" or anything like that.

eg. Telnet to port 80 on a web server and type "GET /" and it will send you the home page's HTML.

WaveyDipole:
Well I managed to dump the contents of the IMX memory as per provided information. Since I am working on Linux I had to modify the openocd.cfg file to suit. My next step will be to do some analysis on the dump.

I tried connecting the Olimex to the other port. Some guesswork involved since the information I got from JtagEnum was incomplete but its just two wires so I simply tried them both ways around. Unfortunately I had no success in getting a JTAG session or identifying anything yet. I was not fully convinced about the JtagEnum output, although it did correctly ID the on-board Xilinx Spartan 6 FPGA. It has a heatsink on top so I did not know what device was underneath, but Dave's teardown video shows the chip with the heatsink removed and it is indeed a Xilinx Sparten 6 XC6SLX25. I may have to wait on the jtagulator to identify the pin order correctly.

BTW, Interesting that linked thread. Never seen a Linux kernel running on a Rigol 1045z before!

Navigation

[0] Message Index

[#] Next page

There was an error while thanking
Thanking...
Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod