Sniffing the Rigol's internal I2C bus

[akisnas]

Thanks, I'll Check It, Is It Permanent?
Cheers.

[AndersAnd]

Thanks, I'll Check It, Is It Permanent?
Cheers.

Yes as it says: "first character: A = official, S = trial".
Official = permanent.

[hammy]

Here is a list of all 8 option codes for DS/MSO1000Z (firmware 00.04.01.SP2):

CSAR Triggers
CSAB Decoders
CSA3 Memory Depth
CSAJ Recorder
CSRA 500uV Vertical
CSAS ?
CSBA ?
CS3A ?

These are "official" options. "Trial" options start with "V", i.e. VSAR == Triggers trial

Plugging these into current versions of rigup/riglol won't work because Rigol slightly changed license validation/generation algorithm and character translation tables. I updated the algorithm to make it work for me, but but I'd rather not release it untested.

Thank you for the info. 
Is the MSO1000z and the DS1000z really using the same firmware?

Cheers
hammy

[ted572]

Thanks, I'll Check It, Is It Permanent?
Cheers.

akisnas:

If you have a new DSA815 that you received with Firmware  00.01.09 ( 00.01.09.00.07) then you will NOT be able to install the Options at this time until someone comes up up a revised method for installing the Options.  Although if you have an earlier version Firmware (prior to 00.01.09), then the current Riglol Keygen (version 1.03c or 1.03d) will work fine for you.
You may want to go to  https://www.eevblog.com/forum/testgear/spectrum-analyzer-rigol-dsa815/msg513125/#msg513125  and read forward to understand this issue in more detail.  If you have any questions please feel free to contact me via a PM.
 

[sptm14a]

Thank you for the info. 
Is the MSO1000z and the DS1000z really using the same firmware?

I believe that Rigol uses unified firmware for all 1000 series, including 1104. The firmware behavior is defined by configuration resistors on the board.

The real question is whether or not the firmware validates licenses the same way for all 1000 series.  If somebody can dump memory from DS1074 or DS1054 with newest firmware, run the dump through rigup and PM me its output (or just share the dump), I can check by generating you a license.

Thanks to all MSO1074 testers -- no need for more testing on MSO, it works

[hammy]

Thanks to all MSO1074 testers -- no need for more testing on MSO, it works

sounds good! 
Thank you for the work you put into it! 

This means it is time to make a memory dump and wait for the next riglol version on http://gotroot.ca/rigol/?

[hematose]

So now that sptm14a has managed to upgrade the MSO1000Z, how do we get this into Riglol and the like? sptm14a, you said you didn't want to release it without testing. Would you like someone to test it for you? How can we continue your work?

[akisnas]

Thanks, I'll Check It, Is It Permanent?
Cheers.

akisnas:

If you have a new DSA815 that you received with Firmware  00.01.09 ( 00.01.09.00.07) then you will NOT be able to install the Options at this time until someone comes up up a revised method for installing the Options.  Although if you have an earlier version Firmware (prior to 00.01.09), then the current Riglol Keygen (version 1.03c or 1.03d) will work fine for you.
You may want to go to  https://www.eevblog.com/forum/testgear/spectrum-analyzer-rigol-dsa815/msg513125/#msg513125  and read forward to understand this issue in more detail.  If you have any questions please feel free to contact me via a PM.

Thank You So Much For Your Reply, It Was Really Informative, I'll Try To Contact With You Via Pm When I'll Go To My Lab At The End Of Next Month.
Thanks All Of You.
Best Regards

[0xdeadbeef]

Just out of curiosity: is it expected that it will be possible to create keys for the MSO1000Z without dumping the flash (i.e. through entering the serial number)?
And if dumping is needed: does it require opening the case for a JTAG connection or is it also possible over SCPI like with the DS2000A/MSO2000A ("Bildschirmkopie")?

[Howardlong]

I couldn't get the SCPI commands to work on the MSO1000Z, I had to use a JTAG connector.

The process of extracting the dump itself took 15 minutes, once I knew what I was doing. Getting to that stage took an awful lot longer though!

[AndersAnd]

So now that sptm14a has managed to upgrade the MSO1000Z, how do we get this into Riglol and the like?

Try PM'ing studio25 and ask him nicely. He's the one who created Riglol and hosted it at 3owl.

The two other Riglol sites hosted by other members are just mirrors of studio25's Riglol site at 3owl:

Original made by studio25: http://riglol.3owl.com
Canadian mirror hosted by ve7xen: http://gotroot.ca/rigol/riglol/
UK mirror hosted by Avotronics: http://rigol.avotronics.co.uk/mirrors/riglol/

[Sparky]

Dear friends, I have in my possession an MSO2072A which "suffers" the problem of not being able to upgrade to 300 MHz.  When inputting the license key generated by rigup (with option NS8H) the MSO responds "License is unavailable!" (which is the usual message if you enter an incorrect code).  The 200 MHz key works fine.  This issue has been previously reported on DS2072A units; some posts are:
 
https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg385319/#msg385319
https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg414247/#msg414247
https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg388809/#msg388809

I noticed the suggestion to try "all options + 200 MHz" if the 300 MHz doesn't work at the end of this post:
https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg403624/#msg403624


To my knowledge we do not know why some units fail to be upgraded to 300 MHz and I decided to investigate.  I corresponded with a few MSO2072A owners here to see what may cause the 300 MHz option to not install by comparing hardware/software versions and the "Hardware Version" resistors.  So far I have found identical hardware/software versions, and resistor settings, which in one case the 300 MHz option can be installed, and in others it can't.

Since the 300 MHz option works for practically everyone, I think we can be confident the algorithm is correct.  I wonder if the scope does a separate check of the key against some other parameter (either resistor setting, or EEPROM values) to see if the key should be accepted.

>> If anyone has ideas about this, please tell!

Does anyone have, or could take high res photo, of the PCB of an MSO2072A unit that successfully upgraded to 300 MHz?  I would like to compare it to the unit I have open at the moment and see if I can spot any difference.

Cheers,
Sparky

EDIT: I received some photos already for comparison purposes...

[plasijo]

Dear Sparky,
would you be so kind and could you share these photos with us. They should be definitely interesting for other members.
Thank you in advance, JP.

[Sparky]

Dear Sparky,
would you be so kind and could you share these photos with us. They should be definitely interesting for other members.
Thank you in advance, JP.

I will not post the images, since they are not mine to being with.  There are few alternative sources of images that may suit your needs, however.  See here: https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg427482/#msg427482 or here: https://www.eevblog.com/forum/testgear/experiences-on-mso1074z-and-mso2074a/msg474215/#msg474215

[PA0PBZ]

Does anyone have the 00.01.09 firmware (.gel) for the DG4000? If so, can you attach/pm me? I'm trying to see how this version can be upgraded, it doesn't work they way the older firmware did.

[miguelvp]

Isn't that for the DSA815?

I know some of the updates are at:
http://gotroot.ca/rigol/

But DSA800_FW_00.01.09.zip is not there, and I think the reason is that with  00.01.09.00.07 it won't let you install the options.

[PA0PBZ]

Isn't that for the DSA815?

No, it's for the DG4000 ARB series.

[eV1Te]

What is the latest firmware for the DS1000Z-S series of scopes?

I currently have 00.02.01.01 and I have noticed a few bugs in this early version.

Also does the key-generator work for the latest firmware versions? 

Edit: I found that the latest version is 00.04.01 via this website (thanks to Orange):
http://beyondmeasure.rigoltech.com/acton/form/1579/0012:d-0001/1/index.htm

Does all the options stay unlocked after I upgrade?

[Orange]

Isn't that for the DSA815?

No, it's for the DG4000 ARB series.

If you use this link, you get it quickly is my experience

http://beyondmeasure.rigoltech.com/acton/form/1579/0012:d-0001/1/index.htm

[PA0PBZ]

If you use this link, you get it quickly is my experience

The problem is that I have to give them the serial #, and they will know that it was shipped with the latest version.

[Sparky]

To my knowledge we do not know why some units fail to be upgraded to 300 MHz and I decided to investigate.  I corresponded with a few MSO2072A owners here to see what may cause the 300 MHz option to not install by comparing hardware/software versions and the "Hardware Version" resistors.  So far I have found identical hardware/software versions, and resistor settings, which in one case the 300 MHz option can be installed, and in others it can't.

Since the 300 MHz option works for practically everyone, I think we can be confident the algorithm is correct.  I wonder if the scope does a separate check of the key against some other parameter (either resistor setting, or EEPROM values) to see if the key should be accepted.

>> If anyone has ideas about this, please tell!

Following up on my own post, I compared high-res images from MSO2072A that could be updated to 300MHz and also the one I currently have which only allows the 200 MHz option, and I cannot find any differences (e.g. hardware resistor settings).  So I wonder if the license key check withing the firmware is making additional comparisons to validate keys, perhaps against data stored in EEPROM. 

Anyone have thoughts on this?

[msraya]

Hello all!

I just received a new MSO1074-S.

Someone know when the new code for the keygen will be avalaible?
The old keygen does not work with firmware 00.04.01.SP2.

Someone can put the new key table for these models to update the keyen?

Thank You All!
Manuel

[eV1Te]

I just received a new MSO1074-S.

Someone know when the new code for the keygen will be avalaible?
The old keygen does not work with firmware 00.04.01.SP2.

I just installed the same firmware on my DS1074Z-S (no the MSO) and the keys I had entered before are still working.

I read a few pages back that someone had managed to make a new version of the keygen work on the MSO, it required a different key if I remember correctly.

[msraya]

Hello EV1Te and Thank You for you response. 

User rmd79 found the private key for MSO100Z. But it is not enough, We need the OPTIONS CODE which found user SMPT14a.
I tried these private key and CODES in the riglol software but not working.

The user sptm14a also found the way to make it working but yet He not detail the modifications to the algorithm He make.
I sent a PM to him, but has not yet answered.

I will study the source code of the riglol tool to see if I can find something...
As you see there are some info nested inside the thread, HI HI.. 

Regards
Manuel

[AndersAnd]

The user sptm14a also found the way to make it working but yet He not detail the modifications to the algorithm He make.
I sent a PM to him, but has not yet answered.

I've PMed him too on October 30. But according to his profile he hasn't been on the forum since October 27: https://www.eevblog.com/forum/profile/?u=99473