Enabling options for R&S test equipment

[sm7ovk]

Hello,
Tried the codes on my FSIQ and some of them are only accepted as correct but without any action. I also got one option that I would like to remove, frequency to 41GHz and it doesn't work without the correct hardware, anybody know how to remove?

My intention was to get K3 and K4 options but this seems to need some extra diskettes to install. Anybody have these?

Regards 73
Jens

[vk3st]

Hi,
what compiler or assembler is ised for the script please?
I have tried Python and a number of others to no avail - all fail.
Maybe old age getting to me but never was a good programmer ;-(
Ian
ian@ian-foster.com

[hidjedewitje]

Has anyone tried unlocking the options on the RTB2000/RTM3000 series oscilloscopes?

I am currently in doubt on whether I should go for a RTB2002 or save up a little more for a Keysight 3000T series. Mainly because the Keysight has the ability to unlock options.

I know Rigol scopes are able to be hacked, but their software seems buggy and slow.

[eb4fbz]

Hello,

i tested the KeyGen for FSE/FSIQ to enable Options for the ZVH4 but with no success. I tried with full Serial-Nr. and with only the first part of the S/N.

I dont have a FSHx Model to check if the keygen does its Job on FSHx style analyzers.

Any Ideas out there what to try to free the Beast in the ZVH4 ?

CU
Stefan

I'm interested in ZVH options too 

[hafrse]

Hello,

had a problem with the hardisk and the CPU card, after replacing the CPU with another haddisk from another CMU, now I have another serial number shown from the new CPU card.
How do I get hold of Serial2 if I have replaced the cpu card and the harddisk? if there any way to dump the serial2 number?  after replacing the CPU with another haddisk, now I have another serial number shown.
many thanks in advance!

[hafrse]

I can try have a look at the ZVH licenses. For that I would need an example of S/N and one license from a volunteer. pm me.

Hello,

I think I found the answer, it is stated in post #59 in this thread. I only need to execute the Identity menu selection and a file will be generated with the serial1 and serial2.
I will try that .
Thanks anyway!

[tv84]

I can try have a look at the ZVH licenses. For that I would need an example of S/N and one license from a volunteer. pm me.

Hello,

I think I found the answer, it is stated in post #59 in this thread. I only need to execute the Identity menu selection and a file will be generated with the serial1 and serial2.
I will try that .
Thanks anyway!

That has nothing to do with ZVH. It's only for CMU, FSU, FSQ, FSP and FSIQ.

[Ice-Tea]

Well, I'm trying to bring the script up myself again (HW guy trying to do SW stuf lolzz... yeah...)

I found that I can't get the PyCrypto package to work. Seems to have issues finding some VS install (tried several) and newer versions of Python (yes, also tried older ones). So I gave up on PyCrypto and use PyCryptoDome which should be close to compatible. At least it installs but when running

Code: [Select]

from Crypto.Cipher import ARC2
import struct

serial = 103086
serial2 = 2
option = 45

record = struct.pack("<II", serial, serial2 + (option <<20))
encyphered = ARC2.new("Revision\0").encrypt(record)
print encyphered.encode("hex")
I get

Code: [Select]

C:\Pyhton>python cmu.py
Traceback (most recent call last):
  File "cmu.py", line 9, in <module>
    encyphered = ARC2.new("Revision\0").encrypt(record)
TypeError: new() takes at least 2 arguments (1 given)
So, uhm, yeah... some help please?

[KaneTW]

Two options:
1. Use Anaconda
2. Install a Ubuntu VM and `sudo apt install python-crypto`

You could adapt the other library, but I don't know if it'll cause issues down the line.

[Ice-Tea]

Yeah, uh, I'm not going to learn how to use/install a new OS in a VM because I can't get a piece of SW to work. Thanks for the suggestions though...

Anaconda didn't do it for me either.

Actually found this link in this thread:

https://repl.it/repls/SkeletalDelectableDwarfrabbit

Didn't work at first, but got it to go!

[Giedrius]

Hello,
Has anyone been able to generate codes for FSL?
I used the python script to generate code and it produced a hex number. However, the device itself only takes decimal digits (0-9) as input (under install options dialog).
I tried converting hex code to decimal and entering but that didn't work either.
Has anyone had better luck with FSL device?

[mbirth]

Quote from: Giedrius on Today at 17:23:23

Has anyone been able to generate codes for FSL?
I used the python script

[...]
Has anyone had better luck with FSL device?


Have you tried the generator from Reply #7?

[Giedrius]

Hello and sorry for the late reply.
Yes, I tried the generator from reply #7 but the codes did not work.
I am not sure if I am using the correct serial number.
I am expecting serial number to be in a form like xxxxxx/yyy. The first part is given by software and a sticker on the back of the device. However, I cannot find the last three digits (yyy) anywhere. I tried various combinations from the stickers on the back of the device, motherboard and RF boards. But none of them generated working upgrade code.
Do you know where I can find the full number required for the generator - I mean the last three digits (yyy)?
Thank you very much for your help!

[mbirth]

Quote from: Giedrius on Today at 01:18:33

I am expecting serial number to be in a form like xxxxxx/yyy. The first part is given by software and a sticker on the back of the device. However, I cannot find the last three digits (yyy) anywhere. I tried various combinations from the stickers on the back of the device, motherboard and RF boards.

For an old FSH it was as easy as using xxxxxx as the serial number. No dash, no nothing. And make sure to set all entries in the option_list to TRUE and try them one after another.

[Qw3rtzuiop]

Did someone already tried unlocking options of the SMU200A?

[hafrse]

Quote from: Giedrius on Today at 01:18:33

I am expecting serial number to be in a form like xxxxxx/yyy. The first part is given by software and a sticker on the back of the device. However, I cannot find the last three digits (yyy) anywhere. I tried various combinations from the stickers on the back of the device, motherboard and RF boards.

For an old FSH it was as easy as using xxxxxx as the serial number. No dash, no nothing. And make sure to set all entries in the option_list to TRUE and try them one after another.

But the genrated key is a HEX string and the FSH accepts only numbers,  how it is possible?
Thanks

[mbirth]

Quote from: hafrse on Today at 14:14:55

But the genrated key is a HEX string and the FSH accepts only numbers,  how it is possible? Thanks

You used the keygen from comment #7, didn't you?

[hafrse]

Quote from: hafrse on Today at 14:14:55

But the genrated key is a HEX string and the FSH accepts only numbers,  how it is possible? Thanks

You used the keygen from comment #7, didn't you?

Hello, No, from commect #21 with Python code.

[mbirth]

Quote from: hafrse on Today at 22:07:07

Hello, No, from commect #21 with Python code.

Well, then try the one from #7.

[hafrse]

Quote from: hafrse on Today at 22:07:07

Hello, No, from commect #21 with Python code.

Well, then try the one from #7.

tried to compile the project in VS2017 using sdk 10 and sdk 8.1, ended up on stdio.h not found when using sdk 8.1 , I am not very familier with VS...

[ve7xen]

It's just a trivial C program. I compiled it for you.

[hafrse]

Quote from: dl2ocb on Today at 10:53:44

Does anyone know a Keygen for FSH oder ZVH Handheld Instruments fron Rohde&Schwarz ?

The FSP keygen in this thread also works for the FSH. Use the serial number alone, no "/" and no model number.

Make sure to enable all keys and try them top to bottom until all options are unlocked.

The FSP keygen has seeds for the options on the fsp but where to get the seeds for options K2,K3 and K4 for the FSH?  thanks

[mbirth]

Quote from: hafrse on Yesterday at 23:42:57

The FSP keygen has seeds for the options on the fsp but where to get the seeds for options K2,K3 and K4 for the FSH?  thanks

That's why I said to enable the disabled options in the source code. (set FALSE to TRUE)

"K84 - 1xEV-DO BTS" for the FSP is K1 for the FSH
"K84 - 1xEV-DO MS" for the FSP is K3 for the FSH
The fourth entry in the options list is K2.

K4 I don't know. The device I had was too old and didn't support that option. Just try them one after another and you'll probably find it.

btw: The entry labelled "K7" enables the DEMO mode on the FSH and unlocks all features for a month.

And don't forget to input your serial number in the SerString variable further down, then recompile the thing.

[hafrse]

Thanks

[tv84]

K4 I don't know. The device I had was too old and didn't support that option. Just try them one after another and you'll probably find it.

Let me try clarify some things  (although I don't know much about this).

The list of options extracted from FSP firmware v4.50 API.DLL is the following:

Code: [Select]

K5     GSM/EDGE Application                 GSM K5 ANALYZER               FSPSpectrumAnalyzerLI   
K7     FM Demodulator                       FM DEMODULATOR                FSPSpectrumAnalyzerLI   
       #1                                   
       #2                                   
K84    1xEV-DO BTS                          1X EV DATA ONLY BTS           FSPSpectrumAnalyzerLI           
K85    1xEV-DO MS                           1X EV DATA ONLY MS            FSPSpectrumAnalyzerLI           
K90      FSQ WLAN 802.11a                   WLAN                          FSQ-Wlan(LI)                   
K72      WCDMA 3GPP FDD BTS                 WCDMA BTS ANALYZER            FSPSpectrumAnalyzerLI           
K74      WCDMA HSDPA BTS                    WCDMA HSDPA BTS               FSPSpectrumAnalyzerLI           
K75      WCDMA HSDPA MS                     WCDMA HSDPA MS                FSPSpectrumAnalyzerLI           
K9     Power Meter                          POWER METER                   FSPSpectrumAnalyzerLI           
K73      WCDMA 3GPP FDD MS                  WCDMA MS ANALYZER             FSPSpectrumAnalyzerLI           
K90      FSP WLAN 802.11a                   FSP WLAN                      FSP_Wlan(LI)                   
K90UP    FSQ WLAN 802.11a,b,g               WLAN UPGRADE                                                 
K76    TD-SCDMA BTS                         TD-SCDMA BTS ANALYZER         FSPSpectrumAnalyzerLI           
K77    TD-SCDMA MS                          TD-SCDMA     MS ANALYZER      FSPSpectrumAnalyzerLI           
K30    Noise Figure                         NOISE MEASURE                 FSx-Noise(LI)                   
K82    CDMA2000 BTS                         CDMA2000 BTS                  FSPSpectrumAnalyzerLI           
K83    CDMA2000 MS                          CDMA2000 MS                   FSPSpectrumAnalyzerLI           
K8     Bluetooth                            BLUETOOTH                     FSPSpectrumAnalyzerLI           
K40    Phase Noise Measurement              PHASE NOISE MEASURE           FSx-PNoise(LI)                 
K70    Vector Signal Analysis               VECTOR SIGNAL ANALYSIS        FSPSpectrumAnalyzerLI           
       #3                                       
K50    Triggered Coverage Meas              TRIGGERED COVERAGE MEAS                                       
K51    Synchronized Stepped Sweep           SYNCHRONIZED FREQ LISTS                                       
       %d days remaining trial period       TRIAL PERIOD 180 HRS                                         
K0     %d days remaining trial period       TRIAL PERIOD 2000 HRS                                         
K91      FSQ WLAN 802.11a,b,g               WLAN ABG                      FSQ-WlanExtension(LI)           
       #5                                   FREQ LIMIT 31 GHZ                                             
B%s    Frequency Extension                  FREQ NO LIMIT                                                 
K92      FSQ 802.16                         FSQ 802_16                    FSQ-Wman(LI)                   
K52    Transducer Set                       REG_TP                                                       
K53    FFT Scan                             FFT SCAN                                                     
K901   %d days remaining trial period       TRIAL PERIOD 2500 HRS                                         
K902   %d days remaining trial period       TRIAL PERIOD 3000 HRS                                         
K92UP    FSQ 802.16e                        FSQ 802_16 UPGRADE                                           
K93      FSQ 802.16e                        FSQ 802_16E                   FSQ-WmanExtension(LI)           
K903   %d days remaining trial period       TRIAL PERIOD 3500 HRS                                         
K904   %d days remaining trial period       TRIAL PERIOD 4000 HRS                                         
K100     LTE FDD Downlink                   LTE FDD DOWNLINK              FSx-LTE FSx-LTE(LI)             
K101     LTE FDD Uplink                     LTE FDD UPLINK                FSx-LTE FSx-LTE(LI)             
B29    Frequency Extension 20Hz             FREQ EXT 20HZ                                                 
K15    Avionics Demodulator                 AVIONICS DEMODULATOR          FSPSpectrumAnalyzerLI           
K91N   FSQ WLAN 802.11n                     WLAN 802 11N UPGRADE          FSQ-Wlan80211n(LI)             
K94    FSQ 802.16e MIMO                     FSQ 802_16 Mimo UPGRADE       FSQ-WmanMimo(LI)               
K102     LTE Downlink MIMO                  LTE DOWNLINK MIMO             FSx-LTE FSx-LTE(LI)             
K103     LTE Uplink MIMO                    LTE UPLINK MIMO               FSx-LTE FSx-LTE(LI)             
K96    OFDM-VSA                             OFDM-VSA                                                     
K74+     WCDMA HSPA+ BTS                    WCDMA HSPA+ BTS                                               
       #4                                             
K400   RFEX-F Launcher                      RFEX-F                                                       
K17    EX IQ Box                            EX IQBOX                      FSx-ExIqBox(LI)                 
K110   TETRA 2                              TETRA2                        FSQ-Tetra2(LI)                 
K10      GSM/EDGE/EDGE Evolution            GSM/EDGE ANALYZER             FSx-Gsm(LI)                     
K73+     WCDMA HSPA+ MS                     WCDMA HSPA+ MS                                               
K104     LTE TDD Downlink                   LTE TDD DOWNLINK              FSx-LTE(LI)                     
K105     LTE TDD Uplink                     LTE TDD UPLINK                FSx-LTE(LI)                     
K106   LTE TDD/FDD Upgrade                  LTE TDD/FDD UPGRADE                                           
K5UP     GSM K5 Upgrade to K10              GSM K5 ANALYZER UPGRADE       FSx-Gsm(LI)                     
K150   Support for User Calibration         USER CAL SUPPORT                                             


They are ordered according to the seeds table (used in the prog to generate licenses).

Also, in that .DLL we can extract a more complete seed (uint32) table than the one used in the original prog (post #7). I attach it below.

Those that are using the program should add the new seeds because they may be needed to enable other Options.

The FSH Option names can be extracted from the FSH firmware's API.DLL. If anyone sends me a current FSH API.DLL I might extract the complete list of Options.

When adding the Option seeds you should also make them TRUE so that all possibilities are calculated.