Products > Test Equipment

Rigol DG2052 making a screenshot and possible firmware hack

<< < (3/6) > >>

TurboTom:
Okay, now I get your point. But I'm pretty sure that the FPGA JTAG is only meant for debugging. There isn't any non-volatile information that stored inside the generator accessible from there. All the information that make the instrument tick is stored inside the Flash chip located on the CPU plug-in module. J1 (that's only used as an "alignment key" to insert the CPU module the proper way round) may contain a JTAG interface to access the Flash chip when it's still blank (when the module comes fresh from production).

Your best bet (i.e. lowest level of access to the module) with reasonable effort would be via the UART interface to interrupt the Uboot bootloader. There are four copies (partitions) of the bootloader in the Flash so the probability of all of them failing at the same time is basically only the occurance of a massive hardware fault. In which case the instrument would be rendered unusable anyway. Enter Uboot, take images of all the partitions on the flash (to a thumb drive) and you're as safe as you can be.

JimKnopf:
@TurboTom Seems you're right. I figured out the pinmapping for TopProbe/TopJTAG and let it read nearly 7 hours for 128MB of empty memory.

I hooked up my Eprom programmer and read out the W25X40CLNIG Eprom. Seems my fear is baseless. The uboot system is on this Eprom. From there i can restore if needed the system. I connected my CP2102 UART serial adapter only to find out that it's either faulty or incompatible for some reasons. Used a cheap CJMCU-232H instead and tried to login.

I did not stopped the boot process. After the system was running i tried to login without entering a name/password and after that failed, i tried root/sardine_uboot combination. But did also not work.

To my surprise, the welcome screen had a funny surprise: Welcome to Rigol DG800 system  :-DD

It's still a DG2052.

Sonicsx:
Hi there,

Nice job!! I got a question. Did you manage to hack the DG2052 to unlock 100 MHz (sine wave) and 25 MHz (square wave)? The hardware of DG2000 and DG800/900 series are almost the same:

https://www.eevblog.com/forum/testgear/new-rigol-16-bit-function-generators-dg800900-series/msg2420391/#msg2420391

Thank you!

JimKnopf:
@Sonicsx I tried to flash the DG900 image provided by TV84. The hardware is a bit different. It didn't work. I wasn't able to connect via network to the device. I had a hard time getting it back to work.

ToThePub:
Have you tried using the DG800 USB stick process and just trying to change the model number with the SCPI :PROJ:MODE DG2102 method?
So, no flashing firmware, just make the usb stick, send the SCPI command to see if the model changes.

Thanks..

*Edit: Some quick research and firmware between the 800/900/2000 is exactly the same (as you kind of saw in the login message!). So hopefully the USB key process might work?

Navigation

[0] Message Index

[#] Next page

[*] Previous page

There was an error while thanking
Thanking...
Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod