EEVblog Electronics Community Forum

Products => Test Equipment => Topic started by: rfdes on July 15, 2017, 05:55:08 pm

Title: TDS 1000,2000,3000 BW Hack
Post by: rfdes on July 15, 2017, 05:55:08 pm
Gents -
I've seen this come up a number of times as to how to extend the BW of these scopes.  Here is some information that I will share, although I have only tested several models and it did work on the two non lettered versions that I have.

I particular, I was able to update a TDS3034 to TDS3054 (non-lettered) and a TDS1001 to TDS1012
I will leave it up to the group to try this out on the 'B' and 'C' models to see if it works.

In regards to the TDS3000 models, the non-lettered and B models only will accommodate fw ver 3.41.  V3.41 does not work.  I had to downgrade to 3.39, perform the change and upgrade back to 3.41.  This worked.  The TDS3000 C models have not be tried.

If any of this information has already been posted, I am unaware.  Please use at your own risk.
You will need to setup your TekVisa OpenChoice tools and run the Talk/Listener tool in order to force
SCPI commands to your unit, either through USB or GPIB.

Use *IDN? to check communications
For the TDS3000 series (downgraded to 3.39, then re-updated to  3.41)
Send the following:
        PASSWORD PITBULL
        MCONFIG TDS3054

You will not get any feedback from the unit.  Reboot the unit and check to see if it worked.  Again, with V3.39 it worked great.

For the TDS1000/2000
        PASSWORD PITBULL
        MODEL TDS20xx  (with xx = model #)

I have not tested with 'B' and 'C' models so report back what you find out.
Good luck.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Fraser on July 15, 2017, 06:13:02 pm
Thanks, I will give it a go.

Fraser
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: tautech on July 16, 2017, 05:42:45 am
Thanks rfdes  :-+

We looked at this a while back in this thread but never got far:
https://www.eevblog.com/forum/testgear/tektronix-tds1000b-series-hacks/ (https://www.eevblog.com/forum/testgear/tektronix-tds1000b-series-hacks/)


Title: Re: TDS 1000,2000,3000 BW Hack
Post by: aquaman8 on July 17, 2017, 02:31:18 pm
Great information and thanks for all the hard work!

Any idea where I can find previous versions of the firmware for the TDS3000 series? I know that version 3.39 is referred to, but are  earlier versions available as well? If so, where?

Thanks,

Mitch
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Vtech on July 19, 2017, 02:41:53 pm
Here it is:
http://www.hakanh.com/dl/docs/3.39.zip (http://www.hakanh.com/dl/docs/3.39.zip)

It comes from interesting page about performance verification software of Tek scopes: http://www.hakanh.com/dl/TDS_pv.htm (http://www.hakanh.com/dl/TDS_pv.htm)
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Vtech on July 20, 2017, 12:01:48 pm
I can confirm that this hack works on TDS3034B and TDS3032.

"B" series has the same firmware as non lettered series. I've downgraded the firmware to 3.39, did the hack via RS232 and upgraded back to 3.41 (it's so hard to find 3.5" floppy disks and working FDD these days). Don't forget to do calibration after the whole procedure!
For TDS3032 I used "MCONFIG TDS3052" and for TDS3034B "MCONFIG TDS3054B". Upgrading the bandwidth to 500 MHz also upgrades sampling rate to 5 GSPS. This is really impressive and gives those old dogs new life.

This hack creates nice combo with application dongles hack (https://www.eevblog.com/forum/projects/tektronix-tds3000-oscilloscope-modules-tds3uam/ (https://www.eevblog.com/forum/projects/tektronix-tds3000-oscilloscope-modules-tds3uam/)).
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Hydron on July 21, 2017, 10:10:37 pm
Thanks for the great tips about upgrading the TDS3000B series!

I just tried it on a fw 3.27 TDS3014B and it now happily runs up to 500MHz. Didn't even need to use TekVISA, you can enter the commands via ethernet using the scope's own webpage (B series have built in ethernet).

I have just realised that there was a 600MHz version too - does anyone know if TDS3064B is an option as well? I can't try it myself until monday.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: rfdes on August 04, 2017, 04:21:34 pm
I forgot to mention that this hack will also work for the TDS200 series units.
i.e. to upgrade a TDS 210 to TDS 220

        PASSWORD PITBULL
        MODEL TDS 220

I really don't know if people still use these scopes any longer.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: alm on August 04, 2017, 04:37:04 pm
I am sure there will be some people still using TDS 200 scopes. If bandwidth and acquisition rate is sufficient, than it is still a decent analog scope replacement in my opinion. As long as you do not expect to be able to zoom in after acquisition, but neither will an analog scope ;).
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: dos on August 08, 2017, 03:21:13 am
I really don't know if people still use these scopes any longer.

I'm taking EET night classes at my local community college (Broward College in Florida) and the TDS 200s are the only digital scopes they have. On the same benches are also Tek 2205s (that must be there for looks as you're told never to touch them) and some horrible old manual ranging BK Precision or LG DMMs, and ancient BK analog function generators. Some benches have very early HP logic analyzers with the green phosphor CRTs. All work is done on these:

(http://i.imgur.com/0nryclC.jpg)

Everything is beat up and out of cal, It's basically worse than a school lab you'd find in some third world countries (and so is the instruction, to be honest). Spending any money at all on something like a community college where poor people might get educated is basically anathema to the people in charge of the state of Florida.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Vtech on August 08, 2017, 03:36:21 pm
I am happily reporting that option TDS3064B is working!
TDS3014B upgraded to 600MHz 5GS/s from 100MHz 1.25GS/s version.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: darkstar49 on August 17, 2017, 08:35:50 pm

Hello together,

did anyone check whether the sampling rate effectively increased ??? It's somehow hard to believe that Tek used 5GS/s ADC's in the 301x and 303x models...

I once had an MSO3014, which I upgraded to 500Mhz (with a key), but also played around with some system commands... could change model name & Co, but definitely without affecting it's "real" performance...

I've got a 3014 to check... but if the 305x's hardware is different, what is the 'real' effect of this mod ??

Cheers
 
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: texaspyro on August 17, 2017, 09:28:26 pm

It's somehow hard to believe that Tek used 5GS/s ADC's in the 301x and 303x models...


It's even harder to believe that they would spend the gazillion dollars it would have taken to fab separate custom DAC chips for the 3014/3024/3034/3054.  I read somewhere that a guy compared the 3014 and 3054 DAC module part numbers and they were the same... and, of course, everything you read on the internet is true!
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: darkstar49 on August 17, 2017, 09:36:54 pm


Mmmmh...  sounds somehow promising...    I'll make myself after the 3.39 fw, as I suspect that it's no longer on Tek's site (but I might be wrong...??)
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: chronos42 on August 18, 2017, 06:24:01 am
I have tried to upgrade a Tek TDS2014 to a TDS 2024 and used this commands, posted by rfdes

For the TDS1000/2000
        PASSWORD PITBULL
        MODEL TDS20xx  (with xx = model #)

But I had no luck, scope is still TDS 2014.
Connection via GPIB was established and I have tried different software to send the commands.
It seems that the scope could read it, but it does nothing. But when I made an intentional error like PetBULL instead of PITBULL it gaves back an error.

Firmware is 4.12.

Is it not working with this firmware or did I overlooked something?
Any hints?

Thanks
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Old Don on August 18, 2017, 11:55:22 am
Years ago I purchased a small startup company's daisywheel printer that came with 4K or optional 16K buffers. I paid the extra couple $100's for the 16K version. It arrived as 4K. Called the company and got put through to engineering and when they heard the problem they told me to open the unit up and cut a trace and I'd have the 16K model.  :wtf:  :palm:

Also, some years ago it was So other than maybe hand sorting to weed out slow boards after board assembly I can see Tek just using software patches to offer various models with the same hardware. ossible to purchase CPU's and add/remove resistors/jumpers on the top to change the operating frequency of a slow one to a more expensive faster one since that was the only difference in some cases. Early production run CPU's might have had problems at faster speeds, but once they got production up and running they all worked at the faster speeds. Now the makers make sure speeds are set inside the packaging and can't be fooled with like in the earlier days.

So while I don't have first hand info, but other than maybe hand sorting to weed out slow boards after board assembly, I can see Tek just using software patches to offer various models with the same hardware. You can add options to the TDS models with software patches so why not speeds?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: rfdes on August 19, 2017, 01:53:35 am
I forgot to mention that for the TDS1000/2000 and TDS200 instruments, the BW update will not be saved unless a full calibration adjustment  is performed before the unit is shutdown.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: chronos42 on August 19, 2017, 05:25:35 am
Hi rfdes,

so that means first enter the password, after that make a new adjustment with 200MHz upper bandwith. I will give it a try, many thanks you for the hint.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: snoopy on August 19, 2017, 05:49:23 am
Years ago I purchased a small startup company's daisywheel printer that came with 4K or optional 16K buffers. I paid the extra couple $100's for the 16K version. It arrived as 4K. Called the company and got put through to engineering and when they heard the problem they told me to open the unit up and cut a trace and I'd have the 16K model.  :wtf:  :palm:


That sounds like the story of the dude who used to fix steam engines by bashing them with a hammer.
"That will be 50 dollars thankyou very much ! "
"What ! but you only hit it with  a hammer ! "
"Yep 1 dollar to hit it and another 49 dollars for knowing where to hit it" :D LOL

cheers
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: sorenkir on August 19, 2017, 05:33:14 pm
I forgot to mention that this hack will also work for the TDS200 series units.
i.e. to upgrade a TDS 210 to TDS 220

        PASSWORD PITBULL
        MODEL TDS 220

I really don't know if people still use these scopes any longer.

Hi,

I have tried this. OK, the scope reports it is a TDS220:

*IDN? --> TEKTRONIX,TDS 220,0,CF:91.1CT FV:v1.19 TDS2CM:CMV:v1.04

but the physical bandwidth is not changed. The -3dB point is still around 80MHz.
There must be something else to do to increase bandwidth...

Michel.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: carl_lab on August 20, 2017, 08:37:18 am
Can somebody else who made the hack, check real bandwidth, please?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Hydron on August 20, 2017, 03:34:18 pm
I don't have a "leveled sine wave generator" that goes high enough to check properly, but I did a quick test with the output of a spectrum analyser tracking generator and the TDS3014B is definitely running somewhere close to what I'd expect from a TDS3054B. Have not tried the TDS3064B code yet, but someone else said that it works too.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: texaspyro on August 20, 2017, 04:01:39 pm
Does anybody know if a TDS30xx (non-B version) can be turned into a TDS3064?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Vtech on August 25, 2017, 11:08:08 am
I turned TDS3032 into TDS3052. I think this is the max for non B version. There was never TDS3064 version sold by Tek.

For both versions I can confirm that the sampling rate increases to 5 GS/s. I've checked number of points per division on 1ns timescale with dots mode on. I haven't tested bandwidth properly but I did some measurements with fast signals and response on a TDS3014B unit hacked to TDS3064B is definitely well beyond 100MHz.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: texaspyro on August 25, 2017, 11:46:02 am
I hooked one of those cheap-ish 30 MHz .. 4.4 GHz touchscreen ADF4351 based sweepers to a TDS3034 -> TDS3054.  It outputs a square-ish wave (but it's built on a two layer circuit board, so who knows what the waveform really looks like).   

Anyway,  amplitude and square-ish-ness start to drop off around 300 MHz.   The amplitude is down 50% at 1 GHz.   Trigger and sampling go to crap at around 1.1 GHz.   I did not re-cal the scope after setting the upgrade.

Above 700 MHz there is some coupling into other channels.  At 1 GHZ I have 500 mV P-P on the chan 1 input  and disconnected chan 4 has a 10 mV P-P image of chan 1.

I need to break out a leveled sine wave generator to do a real test...
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Vtech on August 25, 2017, 01:49:47 pm
I've just done some test on TDS3014B hacked to TDS3064B using RIGOL DSA815TG. Tracking gen in Rigol isn't perfectly flat but I've tried to calibrate it using DSA815 itself. I've used zero span option and compared output level at higher frequencies to output at 50MHz. I did separate comparison for each higher frequency switching between this frequency and 50MHz setting (If you let DSA815 run for a while the level drifts by as much as 1dB. It also changes when DSA is doing self calibration in the background from time to time but those drifts seem to be in SA part not in TG. TG is not flat but it is fairly stable in time). Tests were done on channel 1 of the scope with internal 50 \$\Omega\$ termination, after calibration. Level was measured using cursors on the screen in peak-peak value.

Results are:

Freq:        Scope level [mV p-p]       unadjusted dB level      Sig gen correction     corrected dB level
50 MHz     652                                   0                                   0                               0
100 MHz   622                                   -0.41                             -0.3                          -0.11
200 MHz   610                                   -0.58                             -0.2                          -0.38
300 MHz   550                                   -1.48                             0.1                           -1.58
400 MHz   516                                   -2.03                             0                              -2.03
500 MHz   462                                   -2.99                             -0.75                        -2.24
600 MHz   434                                   -3.54                             -0.8                          -2.74
700 MHz   386                                   -4.55                             -0.7                          -3.85

I'd guess that I'm no more than 1dB off on my measurements. 3dB point appears to be above 600MHz. Above 750MHz something strange began to happen with the trace. It looked like there was additional low frequency modulation (similar to aliasing but it couldn't be it). I'm not sure what was it.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Hydron on August 26, 2017, 05:51:38 pm
Thanks for the tests with the DSA815TG. I also have access to one of these and was intending on doing a similar test (with both the Tek scope and others) - good to know the tracking generator doesn't vary too wildly!
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: carl_lab on August 29, 2017, 01:17:20 pm
I forgot to mention that this hack will also work for the TDS200 series units.
i.e. to upgrade a TDS 210 to TDS 220

        PASSWORD PITBULL
        MODEL TDS 220
I've tried this way:

sent: *IDN?
received: TEKTRONIX,TDS210,0,CF:91CT FV:v.2.03 TDS2CM:v1.04

sent: PASSWORD PITBULL
sent: MODEL TDS 220

Checked menu utility/system status: TDS210, firmware etc. <unchanged>
sent: *IDN?
received: TEKTRONIX,TDS210,0,CF:91CT FV:v.2.03 TDS2CM:v1.04 <unchanged>

-3dB bandwith before: 83MHz, after: unchanged.


What went wrong?  :-\
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: texaspyro on August 29, 2017, 01:39:58 pm
Try with and withhout a space between the TDS and 220?   Also after sending the MODEL command, send *IDN to see if the change worked.   Also, one guy reported that you need to fully recalibrate the scope after doing the MODEL and before powering it down.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: carl_lab on August 29, 2017, 02:11:01 pm
Try with and withhout a space between the TDS and 220?
Tried with and without space this time.
Also tried MCONFIG TDS220 (with and without a space between the TDS and 220).

Also after sending the MODEL command, send *IDN? to see if the change worked.
Still unchanged...

Tried that on another TDS210 with firmware 1.06 instead of 2.03 without success.  :-\

Also tried hacking a TDS1002 with half success.
After doing that, *IDN? replied TDS1012 as wanted, but without a new calibration, it was reset to TDS1002 as reported before.

Is there a trick to avoid the needed calibration after hacking the scope? I don't have a scope calibrator at the moment, so I tried manual calibration using DC calibrator and leveled RF generator, but I mixed something up, and calibration failed.
Obviously after first failed calibration step, model is reset to TDS1002 automatically.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: carl_lab on September 18, 2017, 02:40:04 pm
Scope calibrator is back in lab, so I tried that TDS210 with firmware 1.06 again, including adjustment.
Adjustment ran through without failure, but nothing changed.
Bandwidth ~80MHz, IDN was reset automatically to TSD210 after adjustment (before adjustment and after hacking it was TDS220).

Update:
I also tried a TDS1002 with firmware 2.06, including adjustment.
Adjustment ran through without failure, but nothing changed.
IDN was reset automatically to TSD1002 after adjustment (checked bandwidth: ~84MHz).

So this hack doesn't work for TDS 210 or TDS 1002 !  :-\

I forgot to mention that for the TDS1000/2000 and TDS200 instruments, the BW update will not be saved unless a full calibration adjustment  is performed before the unit is shutdown.
I used automatic Fluke Met/Cal adjustment procedure (I removed one *RST command in the beginning not to reset the scope), but that didn't make the hack operating anyway.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Hydron on November 09, 2017, 03:49:38 pm
Just checked a TDS3014B->TDS3054B upgraded unit with this: https://www.eevblog.com/forum/projects/yet-another-fast-edge-pulse-generator/ (https://www.eevblog.com/forum/projects/yet-another-fast-edge-pulse-generator/)

I was unable to upgrade all the way to TDS3064B (may have a too-early firmware), but it looks like the 500MHz upgrade was very successful:
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: skennedy on December 02, 2017, 04:01:07 am
I purchased a TDS3014B that came with 3.41. I downgraded the firmware to 3.39 and I now have a TDS3064B with version 3.41.

The scope needs to be calibrated as it now has a big DC offset and triggering is pretty terrible also. I have some instruments that can provide the low ripple DC and a 80MHz AC signal. Running through the calibration test I can get almost to the end.

The pulse generator that is required is a little more difficult for me to find. How accurate does it need to be? We have a 3ns rise time pulse generator but it certainly doesn't go to -2.2V. What is everyone else using? Can I use an FPGA or similar to generate a high rise time? Or maybe a fast comparator?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: texaspyro on December 02, 2017, 05:11:43 am
Just checked a TDS3014B->TDS3054B upgraded unit with this:

Upgrade of a 3034 (non-b) to 3054 also worked... 3.39 fw.  Verified with Bodner's pulser.

Why is it necessary to downgrade 3.41 to 3.39?  Did they remove the magic spell in the 3.41 firmware?  The person I got the scope from did the hack and I don't think it ever had 3.41 on it. It had all the previous firmware floppies with it, but no 3.41  Does 3.41 bring anything useful to the party?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: ChrisLX200 on December 02, 2017, 05:29:11 am
I had not noticed this thread before. I have a 3014B, recently upgraded to 3.41 fw, so I will try this hack ASAP. Got the older 3.39 fw from the link earlier in this thread so should be good to go, but will have to re-install TekVisa (I deleted it after it caused problems - continually reporting device disconnected).

So to be clear - after the upgrade hack a recallibration is required before use?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Hydron on December 02, 2017, 09:09:38 am
The one I tried this on didn't seem to need a cal afterwards. This was just from use and quick testing though, don't have the equipment required for the cal/verification.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: skennedy on December 03, 2017, 04:43:10 am
I'm not sure if you need to but my scope certainly did. Perhaps the lack of calibration was pre-existing as I didn't do a lot of testing before I upgraded the bandwidth. I have been able to calibrate using a Keithley 2450 sourcemeter, a R&S sma100a rf siggen and a pulse generator from Berkeley Nucleonics that we have in the work lab. It obviously isn't NIST certified but a lot better than before. Needless to say the entire process took well over an hour.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: ChrisLX200 on December 19, 2017, 10:38:48 pm
Confirm that the hack worked for my TDS3014B, which is now functioning as a TDS3054B. Now about to replace the firmware with 3.41 again..

Edit: Updated firmware and ran the self-cal, seems to be OK. Image shows the scope is running at 5.00GS/s (signal a 25MHz square wave - the max freq from my Siglent SDG1025 - 1V p-p, zero offset.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: darkstar49 on January 31, 2018, 06:58:07 am

just pimped-up a TDS3014B, no issue.

Btw, no need for GPIB, the web-interface perfectly does the job for the B-series (or a TDS3EM equipped non-B)

Title: Re: TDS 1000,2000,3000 BW Hack
Post by: texaspyro on January 31, 2018, 07:01:13 am
Btw, no need for GPIB, the web-interface perfectly does the job for the B-series (or a TDS3EM equipped non-B)

Or the serial port if you have a comm module with one of those.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: sobakava on February 24, 2018, 08:28:25 pm
Has anybody tried to do this with TDS3xxxC series?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: mcguire on February 28, 2018, 08:16:17 pm
FYI, I've verified that the procedure detailed at the beginning of this thread works on a TDS3012 (no letter suffix) with no issues.  I downgraded from v3.41 to v3.39, applied, the hack, and reinstalled v3.41.  I set the model to TDS3052.  I used the command functionality in the web interface from a browser while the oscilloscope was connected to my network.

Quick and dirty measurement with a Bodnar pulser (38ps rise time measured on an 11801A+SD26) showed a rise time of 2.3ns before the hack, and 1.0ns after.  No other measurements performed as of yet.

I did notice that there was a significant DC offset after the hack.  I'm pretty sure that wasn't there beforehand.  Running signal path compensation took care of it, now it's perfect.

                                   -Dave
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Dogsled on February 28, 2018, 10:41:12 pm
Successfully updated  a 3032b to xx52B, procedure as previously described.

Now looking for some of those Blank module chips parts? so I can glue in an Eprom for the options. Anyone out there know where to get those?

Thanks to all, this has been extremely helpful, I will outline what I did (and what worked)  for the options upgrade once I have all the parts.
Jon
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: mcguire on February 28, 2018, 11:08:36 pm
In reference to my TDS3012 upgrade above, I've just counted the samples, it's sampling at 5GHz.

                      -Dave
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Andrey_irk on March 01, 2018, 05:11:34 am
The only scope I have nearby is top-of-the-line TDS2024B. Pity. 
So, shall we expect prices on these scopes to rise?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Hydron on March 01, 2018, 09:01:37 am
Terrible memory depth counts against them unfortunately. Still, when you're just looking at an edge or two the memory isn't an issue and the free bandwidth is nice.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: xi on May 14, 2018, 11:46:48 pm
(https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/?action=dlattach;attach=432725)

One way to check the firmware is to send the command "*IDN?" from the "data" tab of the TDS's web page:
(https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/?action=dlattach;attach=432731)

If your TDS is running version 3.41, the hack won't work, you have to downgrade to an older version. If your current firmware version is older than 3.41, it should work directly (see other posts), so you can jump to next step.
Be careful with the updates, some versions has some quirks, read Tektronix recommendations! (for example, version 1.0 must be upgraded really carefully because of a bug in this version. Switching from version prior to 2.20 to version above 2.21 will need a recalibration, ...)

So let's upgrade / downgrade the firmware using floppy disks. I don't know if there are other means to change the firmware? I didn't find any...
I had formatted and prepared some floppy disks on an old computer, but the TDS refused to boot on it, so I strongly advice to format the floppy directly on the TDS: use save/recall menu:
(https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/?action=dlattach;attach=432737)

If something is wrong with the floppy, the TDS scope will display "Mass storage error":
(https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/?action=dlattach;attach=432743)
So try another floppy! Many of my old floppies were bad (particularly the Sony ones) ; back in time of 5"1/4 floppy, I had noticed that BASF one were more reliable than others ; so I searched for some old 3"1/2 BASF floppy disks and, guess what, they all worked in the TDS ;)

Once formatted in the scope, you have to unzip and copy the firmware v3.39 to the floppy disks. The content of each directory (disk1 to disk4) must be copied on four separate floppy disks, without creating any directory.
Take care to label each floppy disk with the name "disk1" to "disk4", this is needed by the TDS.
Once formatted by the oscilloscope, I run these commands on my Linux server (the only one that stills has a floppy disk drive):
[/list]
Code: [Select]
mlabel a:disk1 && mount /media/floppy/ && cp -av /home/share/temp/firmware_v3.39/disk1/* /media/floppy/ && umount /media/floppy(don't forget to change all the "disk1" to "disk2" for the next floppy, etc...)

Last step is to stop the scope, insert the first floppy into the TDS and power it on. If you followed the above instructions, the scope will ask if you want to downgrade / upgrade the firmware: just follow the instructions :)

Connect again to the web interface and check that firmware version is lower than v3.41, using "*IDN?" command for example.

Now send the correct commands for hacking the bandwith: for my TDS 3014B it is:
PASSWORD PITBULL
MCONFIG TDS3064B
(https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/?action=dlattach;attach=432749) (https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/?action=dlattach;attach=432755)

Power OFF then ON the TDS, and enjoy!
(https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/?action=dlattach;attach=432761)
(you can now upgrade again to v3.41, the scope won't loose it's model number)
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: stevewind77 on May 20, 2018, 02:34:35 pm
Hi all,

I have a TDS3032C which I try to upgrade without success.
The problem is that the c version has usb instead of Floppy drive.
The firmware version 3.39 for the older B model is on 4 floppy disks in a form of .dat files but the C version is not able to boot-up from an usb floppy.
It can only accept .img files.
Is there any experience about this? Maybe convert the .dat files to an .img or format the stick as it would be a floppy?
Any ideas?

Thanks
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: stevewind77 on May 20, 2018, 09:00:51 pm
I had a look inside just to check if I can add a regular floppy instead of the usb.
I found interesting things inside.
There is no usb connection from outside but inside I found one which is probably disabled from software.
I also found a dc in, no idea for what is it there.

Title: Re: TDS 1000,2000,3000 BW Hack
Post by: MarkL on May 21, 2018, 02:11:16 pm
...
I also found a dc in, no idea for what is it there.
That's a DC Out jack, +14.2 VDC, <=400mA.  From the TDS3054 manual:

  DC power output. Provides ~15 V DC accessory power only when the oscilloscope is connected to the AC power line.

From the TDS3054B manual:

  DC power output. Provides ~15 V DC power to accessories or to the plug-in TDS3PRT thermal printer.

Not shown at all in the TDS3054C manual.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: stevewind77 on May 22, 2018, 05:14:55 pm
Thanks MarkL for your reply.

So this means it is not a dc input => it is not very valuable  :(
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: MarkL on May 22, 2018, 07:14:00 pm
Thanks MarkL for your reply.

So this means it is not a dc input => it is not very valuable  :(
Probably not too valuable for bench use, but I could see it being useful for someone who did a lot work in the field.

You could use the battery pack connector as a "DC In" if you wanted to use the scope with a DC supply or external battery:

  https://www.eevblog.com/forum/repair/tektronix-tds-3014b-power-supply-by-pass/msg767729/#msg767729 (https://www.eevblog.com/forum/repair/tektronix-tds-3014b-power-supply-by-pass/msg767729/#msg767729)
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: Nebulex on June 13, 2018, 07:52:37 pm
Hello all.
I can confirm that BW upgrade worked on my TPS2014. But only if a full calibration is done after entering the password and model trough the serial interface. The BW limit is now gone up to 200Mhz. So thanks to all who made this upgrade possible. :clap:
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: abyrvalg on June 13, 2018, 11:41:44 pm
Perhaps the ARMDEMO command found in newer models will work on these too?
Code: [Select]
:PASSW INTEKRITY
:ARMDEMO 365,DontMakeTheWookieMad
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: hardcoreman on June 15, 2018, 05:12:50 am
battery info:

pinout

gnd
nc
DQ
charge+ (charger circuit in batt. / from scope)
bat+ ( to scope)



DQ - signal from bq2050 fuel gauge...
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: stevewind77 on June 17, 2018, 09:39:16 pm
I sent these instructions with OpenChoice Talker Listener vie Ethernet to my TDS3032C:

PASSWord INTEKRITY
SETMODELID 5
HWAccountant:ACQBandwidth 500

Nothing happened.  :(
Is this format correct?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: gamalot on September 12, 2018, 02:44:09 pm
TDS3014B upgraded to TDS3064B and all applications activated. Thank you everyone!

Title: Re: TDS 1000,2000,3000 BW Hack
Post by: walterkeen on August 12, 2019, 10:49:55 pm
I've got a TDS3012, and one channel isn't functioning.... However I'd like to explore using this bandwidth hack.

However, I don't have a B or C model, and don't have any I/O modules like a GPIB or Ethernet module.

Is there somewhere that I can find a serial header to issue the commands?
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: zmenee on August 13, 2019, 10:46:14 am
Just bought a TDS3014B and can also confirm a successful upgrade to a TDS3064B.

I have access to an old HP RF generator so I tried to check the BW extension. The test wasn't too accurate as I don't have a leveled sine generator. I could measure a HF rolloff at 490MHz (-3dB) using coax cable and 50ohm termination. Using a P6139B probe might push the rolloff even lower. So I presume the upgrade is more a TDS3044B which is still more than enough for me.

The scope has a battery pack installed and I can confirm that the 15V DC power output works with no AC power line connected. This is a nice feature as you can test small prototypes in the field.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: darkstar49 on August 13, 2019, 05:51:10 pm
TDS3014B upgraded to TDS3064B and all applications activated. Thank you everyone!

LOL !! Love the "modules" !!
Next : an upgraded model & bw sticker on the front...   >:D
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: tonykara on September 26, 2019, 09:21:22 pm
So glad I found this thread! I just bought a TDS3012B-NV (I think I read this was labeled for the US Navy.)
I had to fix a malfunctioning floppy door which took me about 30 minutes.

Installed version 3.39, and got TEKVISA loaded onto an older Windows 7 laptop.
Connected the scope via ethernet to my network, watched a couple shot youtube videos on TEKVISA and upgraded my scope with this:

PASSWORD PITBULL
MCONFIG TDS3052B

It temporarily messed up the calibration (offsets were all wacky), but it's fine now after cal and it now samples at 5GS/s! Checking the rise time with a Picosecond step generator, it's reporting a faster than my Agilent DSO6034A. Thanks to everyone who posted info here.
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: josef on September 27, 2019, 01:44:51 pm
Hi,

I connected with scope via ethernet. The command *IDN? work correctly, but comands PASSWORD and MCONFIG doesn't work. Especially I don't know whether I use correct syntax of commands.

Thank you
Title: Re: TDS 1000,2000,3000 BW Hack
Post by: tonykara on September 27, 2019, 10:38:39 pm
josef, what scope do you have? It worked for me. The scope won't show any difference until you power cycle.