Tektronix TDS1000B and TDS2000B series hacks

[66bono]

TDS1001B
I read the batch and soldered the S29JL064H70TFI00 again. The oscilloscope works as before.
No idea about programming
I wanted to get the highest possible bandwidth.
I also experimented with OpenChoice Talker Listener
I established communication, failed to break the oscilloscope

[Fieroluke]

The pitbull hack doesn’t work with the B-series scopes.

Check location 7F0007 of the file you programmed into the firmware. Which value does it have?

If the py-script didn’t recognize your scope, the file didn’t get modified and you programmed the original file again.

Which model does the startup screen report? (The „set time and date“-screen)

[66bono]

I didn't change the original bin file. I just read it with the programmer and soldered the again

[Fieroluke]

Don’t look for content 7F0007, look at ADDRESS 7F0007! The part on the left (blue) should be 7F0007 or 7F0000.

[66bono]

7f0007 not found is 7f0008

[Silicium81]

7f0007 not found is 7f0008

the content of 7f0007 is here:

[Fieroluke]

Perfect. 13 (circled red) means it‘s a TDS1001B. Change it to 12 to make it a TDS1012B.
00072CC4 is the checksum. If you change 13 to 12 the checksum needs to change to 00072CC3.

But you need to change the filter banks too. It‘s described in reply #94 of this thread.
Change the 20 filter values to 0F and adjust the checksum accordingly! If you don’t, it won’t work!

[66bono]

Thanks for explanation.
I looked for addresses to change. The obscured area is the serial number.
13 is the model we change to 12.
Filters are 2x 10 (04) I change to 2x 10 (0F)
  I can't handle the checksum either.

[Fieroluke]

Ok, bear with me…

You change the model ID from 13 to 12:          -1
You change 04 to 0F, 20 times:                        20 x $0B = $DC

Total change:                                                  $DB

So new checksum should be (try at your own risk): $00072CC4 + $DB

=> new checksum should be hex 00 07 2D 9F

[66bono]

I changed
I have a copy of the original, if something goes wrong, I can restore the original file.
Will there be a brick:)

[Fieroluke]

Biting my nails now…

Please report the outcome!

[66bono]

I'll try tomorrow
Thank you foryour help.
I compared 2 files and only the values marked in red are changed.

[66bono]

He started, thank you very much.
LVDS  74MHz

[Fieroluke]

Reporting success on a TDS2004C turned 2024C! Model ID changed from 1E to 19.

First I was sceptical, because the Flash was nowhere to be found, but it’s just on the solder side of the PCB and actually easier to remove.

For 4 channels there were four filter banks of 10 values each to change from 07 to 0F, other than that, straightforward. Initially reports self cal fails and clock was reset, but after self calibration and setting time and date, boots smooth as silk :-)

[Yuriy V.]

Very, very interesting thread! 
I have Tek TDS1002B & may be I will try to level up it

[TheKellerman]

After repairing and upgrading two scopes I want to point out that -SC is not the same as -EDU. The EDU firmware will only boot if the device ID is EDU (0x28 for TDS1001C-EDU or 0x2A for TDS1012C-EDU) or if the ID is a B model (probably same firmware base?). 0x28 and 0x2A are not listed in the firmware that Fieroluke disassembled, so if you update an EDU model with C Model firmware, the scope wont boot. And I assume that the EDU firmware knows only about EDU and B model IDs, not Regular C models.

However, you can put the C firmware in a EDU device, desolder the flash, change the ID to a C model and update the CRC. That way I upgraded a TDS1012C-EDU to TDS2022C.
Another way would be to keep the EDU firmware and only changing the ID to TDS2022B, but it looks like the C firmware has more features.

And to answer my own question from earlier: https://www.eevblog.com/forum/testgear/tektronix-tds1000b-series-hacks/msg4705982/#msg4705982
the EDU FW (like the one found on ko4bb.com) will not work on a B model hardware!

[lern01]

Hi Fieroluke, I have a tds1012c, can I upgrade to 2024c, can you help me? Thank you very much!

[Fieroluke]

No, you can‘t change 2 to 4 channels.

Changing from b/w to color is said to be possible, but I have no experience with that.
So, getting a screen and assorted components from a tds2000c series scope may be possible, but probably cheaper to get a working color model for cheap.

And for the monochrome TDS1000 series, your TDS1012C seems as high as it can go.

[lern01]

Sorry, Is it possible to upgrade to TDS2022C?

[vdetal]

Works with monochrome display too.
Tested on 2 pcs 1001B.

[phecap]

I have a Tektronix TDS2024B.
Does anyone know if it is possible to upgrade this oscilloscope to TDS2024C?
Or is this not possible due to the hardware differences?

[Fieroluke]

That should work. The main difference is the better LCD I think

[vdetal]

You can, it's very simple. Download the latest firmware for the C-series from the Tek website. (this is TDS1K2KC_V24.26_066134800.zip). Unpack. It works for me if I rename the .tek firmware file. Rename the file TDS1K2KC.TEK to file TDS1K2KВ.TEK, write to a USB flash drive (I use 2GB). Well, then insert it into your TDS and follow the instructions.... Here is the result of the update with 2 different versions and it works even on a monochrome display:

[lern01]

You can, it's very simple. Download the latest firmware for the C-series from the Tek website. (this is TDS1K2KC_V24.26_066134800.zip). Unpack. It works for me if I rename the .tek firmware file. Rename the file TDS1K2KC.TEK to file TDS1K2KВ.TEK, write to a USB flash drive (I use 2GB). Well, then insert it into your TDS and follow the instructions.... Here is the result of the update with 2 different versions and it works even on a monochrome display:

Has your TDS1001B been upgraded to 2022B?

[lern01]

Success again!

Changed my TDS2001C from TDS2022B (ID $0B) to TDS2022C (ID $18)

Hello, I have a TDS2002C， I haven't understood your operation of modifying the checksum. Can you upload the pictures you performed on the eeprom editor? Or send me your 2022C firmware to lern01@outlook.com. Thanks!