Siglent SDS & SDG Hack Script

[tautech]

Does this script also work on the SSG5000X series of RF signal generators?

Not checked, with SSG3000X, yes, it's easy to confirm the BW licence against what the script generates and that simple check with a SCPI command should always be the first thing you do to know the script is indeed generating valid licenses.

[falcon3310]

Hello All!
I have a one question... Can the script for SDG to make a keys for SDG1000X Plus?

[tautech]

Hello All!
I have a one question... Can the script for SDG to make a keys for SDG1000X Plus?

Welcome to the forum.

AFAIK yes but the model in the script IIRC needs defining as SDG1000X+
Report back please.

[falcon3310]

Thank you!
I haven't bought it yet. I first decided to find out if modifications were possible.

[Detlef]

On request of another user, I wrote the following detailed description how I upgraded my SDG6022X:

The “Unified-Keygen.py” program can be found (and copied) on this site:

https://www.eevblog.com/forum/testgear/unified-keygen-script-for-siglent/msg5554039/#msg5554039
- Thank you OP-SEC ! -

Within this Python program there is a detailed description. You have to edit the program. Enter serial number SN (e.g. found on a label on the backside of your Waveform Generator) and model (“Model = SDG6000X” for all models).

In addition you have to enter a value for “Keygen” into the Python code:
Keygen = ‘1’         yields the right Bandwidth codes (the option codes are invalid)
Keygen = ‘3’         yields a valid Option TRUE code (for I/Q option, the bandwidth codes are invalid)

Run the edited Keygen program twice (for each “Keygen” value). I did it under Windows:
Run “Python Shell ‘IDLE’ Version 3.7” -> Open (*.py) -> Run

The resulted option code TRUE for the SDG6000X option I/Q should be input directly into the SDG via menu ‘Waveform’ – ‘I/Q’ – ‘License’.

For the connection PC – SDG6000X I have used ‘Telnet’. In Windows 10 this is contained or have to be activated (‘System’ – ‘Optional features’ – ‘Telnet-client’…). Connect the SDG by means of a LAN cable to your LAN / PC.

Open Telnet in a CMD environment (‘DOS-Box’). Establish the connection with
o 192.168.xxx.xxx 5025
(small letter ‘o’ not zero, net address of your SDG (should have previously been entered directly in a menu of your SDG) and port number 5025.
(Note: For my SDG the 5025 has been successful, not 5024 as given in the python program).

Ask for the current bandwidth code with ‘MCBD?’. Check that the shown bandwidth code is exactly the same as the python program has evaluated for this bandwidth, the bandwidth of your SDG (‘200M’ or ‘300M’). Otherwise the hack doesn’t work!

Enter the required bandwidth code with ‘MCBD xxxxxxxxxxxxxxxxx’
where xxxxxxxxxxxxxxxxx is the code evaluated by the python program for ‘500M’.

Reboot. The System Info of your Waveform Generator now should read ‘SDG6052X’.

[vivid_law]

Can I upgrade SDG1022X Plus to SDG2122X?

[KungFuJosh]

Can I upgrade SDG1022X Plus to SDG2122X?

Yes, it's easy. The upgrade path is:
1. Sell SDG1022X Plus, and
2. buy an SDG2000X series AWG.

[eleckits]

good job

[coromonadalix]

Can I upgrade SDG1022X Plus to SDG2122X?

Yes, it's easy. The upgrade path is:
1. Sell SDG1022X Plus, and
2. buy an SDG2000X series AWG.

you'll love the script  loll

[Billy33]

Did i miss out something at Detlefs hints from above; i have a new SDG6022X at it was shipped with FW 6.01.01.37R6, HW is 03-00-00-81-39.
To check before applying the BW code, i did MCBD? to get the current code for current 200MHz BW.
Then let run the script with already correct edits done (Model = 'SDG6000X' and SN = 'correct s/n here' and Keygen = '1') and get different values at scripts output for 200M and the MCBD? query output.
Any ideas? Help for this great instrument would be greatly appreciated.

[coromonadalix]

have you tried  kgn #2 or kgn #3   not just    kgn #1

[Billy33]

yes, all of them. And triple-checked the inputs.

[Billy33]

I took an other script from the SDG6000X thread and this worked out for bandwith and also IQ.

[Disappear9]

The script is not working for me on my newly arrived SDG3082X.  I modified the script with my SN ("SDG3Xxxxxxxxxx") and Model ("SDG3000X") and added the new SDG3000X bandwidths ('80M' and '160M') to the bwopts list ('200M' was already there).  The code provided for my existing 80M bandwidth does not match what is given when I enter the "mcbd?" command.  I tried the code given for the 200M bandwidth anyway and it did not work.

Thank you to those who have worked on these scripts.  I have successfully used the oscilloscope script to upgrade my SDS804X HD Oscilloscope to 200MHz bandwidth and enable the SDS800XHD-PA option.  I purchased this AWG with the expectation that I would be able to use the expanded bandwidth, 40Mpts sample length, and the IQ generation capability.  If there's anything I can do to help free the capabilities of the SDG3082X, let me know.

Hello jrktiger, I'm also trying to figure out the new V2 licensing. Could you please also send me some details too?

[coromonadalix]

the v2 is not officially known

and for the rare one(s) who may know something, nothing has leaked out,  the problem(s) is to get memory dumps of a running machine .. whatever type it is, 

thru a memory dump  you may be able to recover some hash key, and if possible ...... to do key calculations

Siglent have learned some  "know how ..... and blocked some telnet access" .. gettings things harder ...

[justinleona]

Can confirm this works as expected - fresh out of box SDS804X HD.

• On startup navigate to the network settings and enable DHCP and 'save'.
• Connect to the web interface via http://192.168.1.149/ (or whatever local IP your DHCP selected). 
• Grab the serial number from the default page
• Navigate to the SCPI page, enter 'SCOPEID?' command
• Grabbed the model/bwopt/opteropt settings off another thread
• Copy the python script and go to https://www.online-python.com/
• Update the SCOPEID, SN, Model, bwopt, and opteropt
• Run the script
• Confirm default bandwidth with 'PRBD?' at 70 mhz
• Update bandwidth to 100 mhz with 'MCBD' command from python output
• Confirm updated bandwidth with 'PRBD?' at 100 mhz
• Update bandwidth to 200 mhz with 'MCBD' command from python output
• Confirm updated bandwidth with 'PRBD?' at 200 mhz
• Confirm the model number now shows 200 mhz

For anyone not python savvy - the script creates a command instructing the device to apply an upgrade.  That command requires authentication via a cryptographic key using a technique called HMAC-MD5.  The script developer captured the secret key at some point, so now anyone can create a valid instruction.

[mbalmer]

Has anyone tried these on the BK Precision *ahem* "white-label" versions of these? I've got a 4054B that's literally just a rebadged SDG1032X.

[tv84]

That command requires authentication via a cryptographic key using a technique called HMAC-MD5.  The script developer captured the secret key at some point, so now anyone can create a valid instruction.

Nonsense.

[coromonadalix]

Has anyone tried these on the BK Precision *ahem* "white-label" versions of these? I've got a 4054B that's literally just a rebadged SDG1032X.

try it ?  and see,    the generated key are simply rejected, and no changes occurs, if it does not work after a reboot ...  unless host id's, SN, BW options  are / where made different ?  witch  some would doubt ?

[tv84]

try it ?  and see,    the generated key are simply rejected, and no changes occurs, if it does not work after a reboot ...  unless host id's, SN, BW options  are / where made different ?  witch  some would doubt ?

AFAIR, it should work. As long as one uses the model, S/N, etc. reported by the unit, which can be different from what we get from the Siglent FW. (Use the SCPI commands to obtain that info.)