Rigol MSO2000 series hacking

[eyteam]

The software will find the MSO1074Z at Port 617 and the screen copy works fine to.
But the ":SYST:UTIL:READ?" command will not work.
Firmware 4 Serial DS1ZC

[PepeK]

The software will find the MSO1074Z at Port 617 and the screen copy works fine to.
But the ":SYST:UTIL:READ?" command will not work.
Firmware 4 Serial DS1ZC

Have you included also the starting and ending memory range after the question mark ? Maybe there should be the starting address and block length but in all cases the "read' command should be followed by two comma separated numbers.

[eyteam]

Yes i had used ":SYST:UTIL:READ? 1,33554432" and some of the other preset in the config.ini

[kurra]

Firstly, thank you PeDre for this useful little utility. 

I have just tried it on my DS4014 (4000 series) and it does the screenshot OK, but I can't get the SCPI Read command to work 

I tried :SYST:UTIL:READ? 1,1048576 and clicked 'Send & Receive'.
I get an error (after a delay) that says 'There was an error when sending the SCPI command'.
[edit] I have realised this is what PeDre's program says when it times out, not getting a response from the scope[/edit]

The :SYSTEM:DATE? and :SYSTEM:TIME? commands work, so I guess SCPI is working, just not the memory read command.

Is there a list of valid SCPI commands anywhere?
[edit] I just found this document:  http://www.rigol.com/prodserv/DS4000/document/?act=view&itemid=490[/edit]

Ideas anyone?

[Luddi]

received my MSO2072A today
using "Bildschirmkopie" over LAN
+ rigup
+ 3min work

-> MSO2302A

BIG THANKS to all for their great work

[akshaykirti]

Just unlocked the MSO2202A using Bildschirmkopie tool. Had to dump the 32Mb file as the 12MB didn't work.
Used the rigup-0.4 tool to get the keys. Thanks everyone!

Used

Code: [Select]

:SYSTEM:OPTION:INSTALL <Key> to enter the key. Make sure you enter the key without dashes

Software: 03.01
Hardware:2.2
Scope:MS2202A (Not any more  )

 

[Ivan7enych]

My 2 cents,

:SYST:UTIL:READ? 15441920, 13262848
rigup-0.4
:SYSTEM:OPTION:INSTALL <Key>

This combination works fine, now upgrading the 2072A series scope becomes much easier than half a year ago (flashing hacked firmware to get the keys...)

Here are the pictures of a rise time before and after key installation on an MSO2072a MSO2302a. 

[lapoltba]

My 2 cents,

:SYST:UTIL:READ? 15441920, 13262848
rigup-0.4
:SYSTEM:OPTION:INSTALL <Key>

This combination works fine, now upgrading the 2072A series scope becomes much easier than half a year ago (flashing hacked firmware to get the keys...)

Here are the pictures of a rise time before and after key installation on an MSO2072a MSO2302a. 

Wow.... 1.15ns!  I'm sold.

*edit: typo  ns, not ms

[Gandalf_Sr]

My 2 cents,

:SYST:UTIL:READ? 15441920, 13262848
rigup-0.4
:SYSTEM:OPTION:INSTALL <Key>

This combination works fine, now upgrading the 2072A series scope becomes much easier than half a year ago (flashing hacked firmware to get the keys...)

Here are the pictures of a rise time before and after key installation on an MSO2072a MSO2302a. 

Wow.... 1.15ms!  I'm sold.

Not mS, not even uS, but nS

[lapoltba]

Whoops!  Typo on my part.  I did mean ns, that is fantastic.

[Ivan7enych]

To get smallest rise time, you need -
1 a very good signal source (in my case it is a test pins on an old tek tds744 scope, it's rise time I suppose < 500ps ),
2 connect probe to the source with as short as possible wires, to connect ground I use a small spring found in probe accessories. Standard 10cm ground connector makes rise time worse and produces additional ringing.

[bithead]

This is awesome.

I decided to get the DS2072a because of Dave's video comparing the DS2072a and the DS1052e.  I was previously considering the 1052 because of the price and it's ability to be hacked for 100MHz -- I figured the extra functions with the 2072 more than made up for the loss of 30MHz of bandwidth.

But here I am, after taking delivery of a DS2072a yesterday, with a scope that thinks it's a DS2202a with all the options, after typing THREE COMMANDS.

You guys are awesome.

[marmad]

-- I figured the extra functions with the 2072 more than made up for the loss of 30MHz of bandwidth.

BTW, the bandwidth of an unhacked DS2072 is something around 115MHz (the 70MHz moniker is just marketing) - so you would have had 100MHz even without the hack. The DS2202's BW is around 225MHz.

[etl17]

One more successful story here. DSO2072A-S --> DSO2302A-S + All options.

Thank you!   :-)

[thepie999]

What a wonderful thread! I should have read this before I paid $200 for the decoding...

Thanks everybody! 

[NZST205]

I have the DS2072A with SW 00.03.00.SP1 and HW 2.0 and have setup a number of Windows machines to try using DS2000A_Upgrade_Utility_1_0_0_1_Installer.exe to upgrade it. The Upgrade Utility seems to perform as described but when I boot the scope into update mode and insert the USB drive the CH1 light doesn't blink, instead all light turn on and stay on. I have tried 4 different USB drives varying in size from 1 to 32Gb.
They all behave the same.
I have therefore concluded that the combination of SW and FW is such that I must adopt an alternative method.
The next approach planned is to us the SCPI Method described elsewhere.
What I can't find is the "rigup.exe" file mentioned. I assumed it was installed from within "DS2000A_Upgrade_Utility_1_0_0_1_Installer.exe" but a search doesn't find it, I am running Win 7 Ultimate SP1.
Can someone please advise where I might find that file please so I can try the SCPI method ? 

[dogcatdog]

Thanks for the utility, worked for the DS2702A   SW 00.03.00.SP1 and HW 2.0
just activated literally 5 mins ago.

[NZST205]

I can't seem to find what format to save the SCPI file in (of the 4 options). ASCII creates a 15kb file and the three byte formats saves files all over 200 MBs. Perhaps as I am running Windows 7 Ultimate un Parallels it may be mucking things up. Can anyone please provide me with some guidance ?

[akshaykirti]

Can someone tell me what signal fidelity issues they had with 300MHz? My scope is 200 MHz by default.

I'm just wondering. The maximum I ever test is like under 20Mhz anyways. All Hail PLL's

[kqkq]

The software will find the MSO1074Z at Port 617 and the screen copy works fine to.
But the ":SYST:UTIL:READ?" command will not work.
Firmware 4 Serial DS1ZC

Just got the same problem on MSO1104Z.
Any solutions?

[boeserbaer]

Hi All,

Success with a newly received MSO2072.  Used the SCPI command.  It confused me that rigup.exe wanted ds2072a as its model number for the MSO series.  This is the command line I used:

rigup ds2072a 2072.scpi
note: 2072.scpi was the filename of my memory dump.  ds2072a is an argument used by rigup.exe to generate keys.

SW version 00.03.00.01.03
Hardware version 1.1.2.2.0
FPGA version:
spu 04.00.07
wpu 01.01.03
ccu 12.29.00
mcu 00.06
lan 01.01.03

This scope was purchased from inventory (tequipment.net), and was shipped 17Dec2014.

Best Regards

note: modified to show full  FW version

[Dave92F1]

:SYST:UTIL:READ? 15441920, 13262848
rigup-0.4
:SYSTEM:OPTION:INSTALL <Key>

That's the best summary in this thread (thanks).

But I'm getting "There was an error when sending the SCPI command." after sending ":SYST:UTIL:READ? 1,1048576" using Peter's RigolBildschirmkopie.  I can get screenshots OK, and the scope replies properly to other SCPI commands, but not :SYST:UITL:READ.

I have a DS2072A, already patched to 300 MHz and all options (see status screenshot below) - I want to update it to firmware 03.00.01.03.

* Can I update by putting DS2000Update.GEL on a USB stick and installing, or will that break the 300 MHz+options?

* How can I fix the "There was an error when sending the SCPI command." error?

And, while I'm asking questions,

* What was changed in the firmware in 3.x?

--Dave

[Eng_hassan85]

I would like also to say this is really awesome thread 

I got my DS2072A yesterday .. and now all options unlocked and B.W of 300 MHz active ..

I used the Option of rigup with the soultion from Peter (you are really a star ) and it worked like charm 

Thanks guys .. you really made my day .. Keep up !!

[remilton]

I would like also to say this is really awesome thread 

I got my DS2072A yesterday .. and now all options unlocked and B.W of 300 MHz active ..

I used the Option of rigup with the soultion from Peter (you are really a star ) and it worked like charm 

Thanks guys .. you really made my day .. Keep up !!

Congrats!  Did you use the JTAG method or SCPI commands to get your memory dump?

[TitusPullo]

Hi everybody,

I have been following the several hundred pages of discussions related to the Rigol 2000 series scopes in the past few days and have finally decided to order a DS2072A.
Well, it arrived today and besides the fan being way too noisy and the "stench" of new electronic equipment enhancing the air, my impression is quite favourable.
I have a few 20-30 year old (heavy and bulky) analog scopes here, which are slowly starting to die on me, so this will probably replace them in most situations.

Of course I tried to rig up the device and was surprised that it allows me to enhance the bandwidth to 100MHz, but no more than that (neither 200 nor 300 work).
It must have to do with the software revison  03.01.00.04, which is installed. Can anybody else confirm this experience?
Obviously the keys are still working, as all other options are available now. Or is it that the hw-rev 1.0.2.0.2 has some limitations, which are set via strappings on the board?
Well, it still triggers on 5ns pulses, so I don't expect this to be much of a limitation for my intended usage.

Btw. cudos to all the involved people, who did all the work, testing  and research, code writing/breaking etc. (too long a list to name them here, but I guess they know)