Unlocking Siglent SDS1104X-E, step by step

[tautech]

Thanks for the postings! Worked pretty well for me so far!

Question though- my scope accepted the codes that I entered for other bandwidths, like 300MHZ, then replied to PRBD? appropriately, even afterwards showing the corresponding Siglent model number after a power cycle, e.g. SDS1304X-E is now shown when I go to the SCPI page or from the System Status button on the scope.

Note that this didn't exactly work when I tried 350MHz and above. "Product Type" was blank.

So does this really mean that the scope upgrade can be done to 250MHz and 350MHz levels too?

Welcome to the forum.

For 4ch X-E in western markets there are only 2 valid BW configurations, 100 or 200 MHz. Don't use anything else if you want an instrument you can trust.

[tv84]

So does this really mean that the scope upgrade can be done to 250MHz and 350MHz levels too?

No. The model names that may appear are dependent on the contents of your sys_cfg.cfg file. Look at the end of the file.

This is its contents:

Code: [Select]

Reversing 1st part of the file [00000000-00000CF7]...
XORing with 0xFF (incrementing pattern)...
XORing with 0xFF from 0x0000067C until 0x00000CF7

00000000 - Main Checksum: FFFFD3E2 [00000004-00000CF7]  CKSM OK
00000008 - Product_Type: SIGLENT
00000028 - CFG Type: SDS1004X-E
0000003C - Manufacturer_Name: SIGLENT
00000047 - CFG Flag_LongMemory: 00
00000048 - Product_ID: 10000
0000004C - Logo Image Size: 00000000 (0 pixels)
00000050 - USB_Prod_ID_PTP: EE39
00000052 - USB_Prod_ID_RAW: EE38
00000054 - USB_Prod_ID_TMC: EE3A
00000056 - USB_Vendor_ID: F4EC
00000058 - Prefix: SDS
0000005C - Logo_Manufacturer: Siglent
0000009C - CFG Flag_pic_machine: 01
0000009D - CFG Flag_sys_machine: 01
0000009E - CFG Flag_____USB_TMC: 01
0000009F - CFG Flag___SCPI/ERES: 01
000000A0 - CFG Fl_invert/neuter: 00
000000A1 - CFG Flag___skew/gate: 00
000000A2 - CFG Flag____vxi/roll: 01
000000A3 - CFG Flag___________A: 00    not_used(?)
000000A4 - CFG Flag___lang_mask: 1800
000000A6 - CFG Flag__lang_total: 11
000000A7 - CFG Flag_mach_series: 00
000000A8 - Machine Name  20 MHz: SDS1024X-E
000000B7 - Machine Name  40 MHz: SDS1044X-E
000000C6 - Machine Name  60 MHz: SDS1064X-E
000000D5 - Machine Name 100 MHz: SDS1104X-E
000000E4 - Machine Name 150 MHz: SDS1154X-E
000000F3 - Machine Name 200 MHz: SDS1204X-E
00000102 - Machine Name 250 MHz: SDS1254X-E
00000111 - Machine Name 300 MHz: SDS1304X-E
00000120 - Machine Name  50 MHz: SDS1054X-E
0000012F - Machine Name  70 MHz: SDS1074X-E
0000013E - CFG Flag___BW_change: 00
0000013F - CFG Flag_hide_set_BW: 01
00000140 - Machine Name 350 MHz:
0000014F - Machine Name 500 MHz:
0000015E - Machine Name 750 MHz:
0000016D - Machine Name1000 MHz:
0000017C - Machine Name2000 MHz:



[alexkg]

Hello!
  I have a Siglent SDS 1202X-C device.  In this device, the interface language is only Chinese.  In neighboring branches, I learned that it is possible to change the configuration file and unlock the choice of languages.  I ask for help, how to reflash it and get the opportunity to change the interface language.
 I confess I am a complete amateur in the field of hacking and programming.  I would be grateful if you explain how to do everything step by step.  How to extract the configuration file, how to make changes to it and how to flash it back.  I'm only interested in unlocking the language interface.
  Thank you in advance!

[masta_k74]

Thanks to all involved for this topic. Now I have a fully unlocked 1204X-E, with WLAN, AWG and Logicanalyzer - option for only 510€ 
It is a pity that the stamp on the front panel does not automatically change to 1204X-E...

[t1d]

Are the hack instructions on post #1 current and complete, as of today? Or, have the steps also been updated along the way, within the additional 16 pages of discussion? Thank you for this clarification.

[BillyO]

Are the hack instructions on post #1 current and complete, as of today? Or, have the steps also been updated along the way, within the additional 16 pages of discussion? Thank you for this clarification.

No, the process has changed significantly.

See post #337.

[t1d]

Are the hack instructions on post #1 current and complete, as of today? Or, have the steps also been updated along the way, within the additional 16 pages of discussion? Thank you for this clarification.

No, the process has changed significantly.

See post #337.

Thanks!

[istvan]

Hello amazing people,

I believe I made a bit of a mistake trying to upgrade my SDS2202X-E to 355Mhz, not realizing that is a actually not needed.

I've used the py. code generator adding in the relevant SCOPEID/SN/Model and then used the 350M to flash it trough LAN MCBD.

Right now seems that the scope is somewhat "bricked" in the sense of everything is laggy, system status cannot be accessed and model number has been removed, but it still measures correctly.

Any idea how to revert back?

Downgrading FW and then upgrading again does not seem to work.

Thank you,

[tautech]

Load the 200 MHz license to get back to where you were.
Then load the 300 MHz license....trust me on this......been here done this.

[adacsaba]

Hello.

Did same to 250 MHz. It seems the x50 options stagger the OS somehow. The x00 options seem to work. However, there is an issue. If one unlocks it above 200 MHz , the bandwidth is being reduced. At 250 MHz ( SDS1254X-E) i've found the amplitude to start to fall around 80 MHz, getting halved ( -3dB) at 120 MHz. Only have an SDG2122X, so can't test if the unlocked SDS actually can sample above this frequency. But at in 200 MHz mode (1204X-E) is flat as a table.

Another finding, the lowest limit of the horizontal system goes down to 1 ns only. Usually the 500 MHz scopes have it 500 ps ( at least that's what i saw in datasheets) or so. To be honest, i don't know the details how these digital scopes work, but according to the datasheets, there are models with 4x 250 Ms/s that can do 250 MHz, while the SDS1xxx series does 4x500 Ms/s, so there is room.

My question is, did any of you fine gentlemen experience the same issue ? If so, is there a hardware tweak, maybe some capacitor values to be changed, in the input circuitry to even out the bandwidth while unlocked above 200 MHz ? Or is it stupid to pursue this ?

[BillyO]

My question is, did any of you fine gentlemen experience the same issue ?

What scope are you talking about?  This thread seems to have spread a bit.

The SDS1000X-E series are not capable of going beyond 200MHz.  Trying to install a license for 350MHz or 5000MHz is going to produce strange results even if the scope will accept such a license.

If you talking about a SDS2000X-P series I found you have to install the 350MHz license before installing the 500MHz license.  Otherwise you will get strange results.  It seems one license tweaks different things about the scope than does the other.  It should be noted that Siglent sell a 100MHz direct to 350MHz license, but the 500MHz license they sell is only listed as being valid for a 350MHz scope.  In other words, they do not sell a 100MHz to 500MHz or a 200MHz to 500MHz, only a 350MHz to 500MHz.

tautech please correct me if I'm wrong.

[tv84]

SDS1104X-E BW options are 100MHz and 200MHz.

All others are not supported!

[tautech]

SDS1104X-E BW options are 100MHz and 200MHz.

All others are not supported!

Correct however new member adacsaba read somewhere on the internet a SDS1254X-E model was possible. 

Trouble is, who believes anything they read on the internet these days ? 

[adacsaba]

No, i didn't.  I assumed. Somewhere here on this very forum, there is a post about the model table contained in the firmware of the SDS1xx4X-E series. And it indeed accepts the 250M code. But obviously, doesn't work 

Please ignore anything i've babbled-bumbled, 200 MHz works indeed. And quite precise. The unlockability gives great value to these devices for the home user, that's for sure. I'm happy with, just like anyone else here

PS. Hopefully Mr. Qin does not change his mind

[Fungus]

Are the hack instructions on post #1 current and complete, as of today? Or, have the steps also been updated along the way, within the additional 16 pages of discussion? Thank you for this clarification.

No, the process has changed significantly.

See post #337.

Post #1 updated... 

[9voltbrain]

What exactly are you unlocking by doing this? All features of SDS1204X-E?

[BillyO]

What exactly are you unlocking by doing this? All features of SDS1204X-E?

Yes.

[9voltbrain]

What exactly are you unlocking by doing this? All features of SDS1204X-E?

Yes.

And I'm guessing you can't do the same thing with X-U version?

[BillyO]

I don't believe so.  I don't think the X-U has any options at all.

[tautech]

What exactly are you unlocking by doing this? All features of SDS1204X-E?

Yes.

And I'm guessing you can't do the same thing with X-U version?

Bill is 100% correct.

No options to liberate and BW upgrade would break Nyquist bad. SDS1104X-U is only a 100 MHz DSO. If you must have 200 MHz get the even cheaper SDS1202X-E.

[nikitasius]

Hi, it work great, thanks !

I used SCPI to pass on 200MHz. For options it doesn't worked (while web UI told success), so i entered it manually.
And after unlocking all i restarted the scope & updated the firmware.

It's an awesome scope ❤️

[tautech]

Hi, it work great, thanks !

I used SCPI to pass on 200MHz. For options it doesn't worked (while web UI told success), so i entered it manually.
And after unlocking all i restarted the scope & updated the firmware.

It's an awesome scope ❤️

Congrats.

When using the webserver SCPI command page to add options, the command syntax need be perfect.
Certainly it will report command sent successfully however unless the syntax is perfect it will not be accepted by the scope.
Enjoy.

[Deso]

I don't get this hype regarding bandwidth hacking on sds1104x-e. At the end this is 1GSPS scope. Signals looks good up to 50Mhz and above that it's a bit of a stretch of the imagination. At 100Mhz there is only 10 points to reconstruct the signal (square wave looks like sine). At 200Mhz they are 5..

To not be completely off-topic - The changes between OS V2 and OS V3 is a one simple number (1 byte). In the

Code: [Select]

/etc/version file there is "rootfs_version=" with value 3 for OS v2 and value 4 for OS v3.
So anyone can change their OS to v3 without OS flashing.

[Fungus]

At 100Mhz there is only 10 points to reconstruct the signal (square wave looks like sine).

That's got nothing to do with the lack of points.

A 100MHz "square wave" is made of a 100MHz sine wave + a 300MHz sine wave + a 500Mhz sine wave + ... etc.

Your oscilloscope can't see the 300Mhz wave or any of the other higher frequencies, all you can see is the 100MHz sine wave.

[BillyO]

You only need 4 points to reproduce a perfect square wave.  The reason it's looking like a sine wave is due to bandwidth limitation.  It's basically working like a low pass filter.  If you improve the BW to 200MHz, you can see better square waves.  Rise time improves to better than 1.8ns from 3.5ns.