Hack of Sigllent spectrum analyzer ssa3021X?

[Bicurico]

The main difference is:

SVA1015 --> can be hacked to activate all options
SSA3021X-Plus --> can be hacked into a SVA1032 with all options

Considering that the SSA3021X-Plus costs €1,469.00 and the SVA1015 costs €1,359.00, it is common sense that you better buy the SSA3021X-Plus for increased bandwidth compared to the SVA1015.

If you don't like hacking and 1.5GHz is the maximum frequency you need, then you are OK with this model.

[MathWizard]

I don't check the used markets much but I'd buy some older used Siglent models if I had the chance. I guess most people hold on to them, and they don't drop much in value, so nothing sounds like a great savings.

I check the SiglentNA clearance section sometimes. IDK if it's worth it by the time it ships to Canada, but there's some great deals.

The dealer I got most all my Siglent tech from, also sells refrub's and openbox stuff sometimes. And they give me great deals too. So whenever I get a real SA/VA, that's where I should get it.

[Andrey_Ak]

Hello comrades!

I have acquired SSA3021X-Plus

SW1: 3.2.2.6.0R1
SW2: 20221117-1301
SW3: 000000D4
HW: 01.00.00

I want to update it to SSA3032X-Plus

The site has the latest firmware:
SSA3000X Plus_Firmware_V3.2.2.6.0R7 (Release Date 06.09.23 )

What is the hacking procedure?

I have to upgrade to the firmware first 3.2.2.6.0R7 ?

Reading the topic, I realized that I had to do the following:

https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg3563577/#msg3563577

1) Initial backup of SSA3021X Plus

1.1. Turn on SSA, put USB stick (FAT32)  with SSA3000X+_backup_11411.ADS
       in the front USB port on SSA

1.2. Navigate to USB directory, select *.ADS  via   File  -  Open/Load and press Enter

1.3. Wait until device reboots itself, then turn off, eject USB flash
       and copy backup files to PC. Total backup size is ~483MB

https://tis.kz/temp/Siglent/SSA3000X+_backup_NAND+mem+firmdata0_11411.zip

2) Telnet access for SSA3021X Plus & Manual backup

2.1.  Connect Ethernet cable to SSA3021X and network, configure IP (DHCP option recommended)

2.2.  Internal product ID should be 11411. Launch fake update SSA3000X+_telnet_11411.ADS
        from USB stick to start telnet. SSA hangs with update screen, that's normal.

2.3. Open telnet,  telnet <SSA IP address> 10101

2.4. Backup main directories:
   cd /
   cp -R /usr/bin/siglent/usr/backup /usr/bin/siglent/usr/mass_storage/U-disk0/SA-backup
   cp -R /usr/bin/siglent/usr/config /usr/bin/siglent/usr/mass_storage/U-disk0/SA-config
   cp -R /usr/bin/siglent/firmdata0 /usr/bin/siglent/usr/mass_storage/U-disk0/SA-firmdata0
   cp -R /usr/bin/siglent/usr/usr /usr/bin/siglent/usr/mass_storage/U-disk0/SA-usr
   cp -R /usr/bin/siglent/usr/vnacalikitdata /usr/bin/siglent/usr/mass_storage/U-disk0/SA-vnacalikitdata

2.5. Make files writeable:

   mount -o remount,rw /usr/bin/siglent
   and add telnet server startup line in file “/usr/bin/siglent/startup_app.sh” :
   vi /usr/bin/siglent/startup_app.sh
   enter the following line exactly close to the end, just before line "/usr/bin/siglent/Aladdin &" :
   /sbin/telnetd -l /bin/sh -p 10101 &

2.6. Finalise changes and reboot
       sync && reboot
       After SSA reboots, telnet should be started automatically without fake update via USB.

https://tis.kz/temp/Siglent/SSA3000X+_telnet_11411.zip

3) Generating keys to open options

Summarizing the collected information (Updated August 29, 2023)

In the Python compiler, run the script

The script itself is in the file: Keygen_for_Siglent_Spectrum_Analyzers.py

In the  HOSTID = '0000000000000000'   field, enter your ID

Removing the comment # before the line Model = 'SSA3000X_Plus'

https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg4355635/#msg4355635

https://tis.kz/temp/Siglent/Keygen_for_Siglent_Spectrum_Analyzers.zip

After compilation, we enter the code from the ALL field into the SSA

Are options 3021, 3050, 3075 superfluous? Is it better to remove them from the code? What other extra options are not available on the SSA3032X?



Did I get it right?
Why is the CAT field not active in the compilation results?
After entering the code into the SSA device from the ALL field, will the device model name also change to SSA3032X?

---

At the link below, there is an instruction on renaming files, why rename files?
NSP_sn_bandwidth.xml  -->  NSP_sn_bandwidthx.xml
NSP_trends_config_info.xml  -->   NSP_trends_config_infox.xml   
nsp_data_b  -->   nsp_data_bx   

https://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg1299182/#msg1299182

[807]

You can update the firmware before or after the upgrade.

I can't comment on the back up procedure, as I didn't do it first myself. I just went ahead with the upgrade.

I chose the upgrades that only applied to the 3021X Plus (didn't use the "ALL" option). So I chose AMK, EMI, DMA, AMA, 3032, and CAT (to be used for the Refl option).

The model name changes to SSA3032X Plus after entering the "3032" key.

If you want to upgrade to the VNA, then more options & more steps are required.

[Andrey_Ak]

But from this post:
https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg4355635/#msg4355635
Is the script suitable for generating keys for version 3.2.2.6.0R7 ?

[807]

But from this post:
https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg4355635/#msg4355635
Is the script suitable for generating keys for version 3.2.2.6.0R7 ?

I don't see why it shoudn't. But mine was on firmware 3.2.2.5.1R20 when I upgraded mine in April. I subsequently updated to 3.2.2.6.0R7

[Performa01]

A NanoVNA looks great for my hobby usage, but it's so little and flimsy, I'd want a box sized version with better connectors and a bigger screen.

The NanoVNA is quite a nice little VNA - but other than e.g. any Siglent VNA, it does not have any SA functionality.
Yet if you need a VNA, the NanoVNA can be a great complement or even replacement for a lab benchtop VNA, depending on what you need it for. If the main task is measuring/adjusting antennas, a small, portable, battery operated device is the better choice in most cases.

How much better is a cheaper, older Siglent SA, than the one in my sds2204X+ ? I'm guessing they can't be turned into a VNA tho.

This is hard to compare. The SDS2000x Plus with FFT acts as a wideband (up to 500 MHz) real time analyzer that starts at DC, hence can be used at very low frequencies, such as mains voltage and its harmonics. Resolution bandwidth (RBM) depends on sample rate; if you want full bandwidth, the sample rate has to be at least 1 GSa/s, hence the frequency step cannot be less than 500 Hz, which in turn means some 1.85 kHz RBW with the universal Flattop window. On the other hand, if you can make do with e.g. just 100 kHz bandwidth (which requires 200 kSa/s), you can have 100 mHz frequency step, hence 0.37 Hz RBW. You can get even lower by further reducing the sample rate.

The SSA is a traditional swept SA with minimal real time bandwidth. You can select the RBW independently of the bandwidth; i.e. you can have a sweep over 1 GHz with just 10 Hz RBW for instance. This will be rather slow though...
You can't use this instrument below 9 kHz and no tricks will get you a RBW below 1 Hz.

Of course you don't have a VNA capability with the FFT of a DSO. For frequencies up to 120 MHz the Bode Plot can do S21 measurements, with some hassle also S11 (if you use a suitable bridge), but this is very slow in comparison and only a real option for low frequencies, where the VNA stops working. AFAIR this is about 50 kHz for the NanoVNA and several MHz for the SVA.

I have no accessories like coax cables, connectors, splitters, terminators, etc. How much money can I expect to pay for accessories if I get all that at once, from a decent brand name, vs amazon/ebay quality ?

Nobody knows what exactly you need, but some adapters to connect virtually everything to the instrument are the bare minimum. Quality ones can be between 10$ and 30$, e.g for BNC:

https://www.digikey.at/en/products/detail/amphenol-rf/31-216/80211

Then you should decide on a connector standard within your lab. If you're not dealing with super high frequencies, this could be BNC, so at the very least you need a BNC(f)/N(m) adapter that is permanently fitted to the SA. Thankfully, there's no need for a DC block, because this is already built in. Then maybe a few quality (low loss, high shielding) patch cables - BNC-BNC in this case for about 15$ each:

https://hamradioshop.net/coaxial-cable/coaxial-cable/347/hyperflex-5-low-loss-coaxial-cable-pre-fabricated

Splitters are quite expensive - a quality resisitve wideband splitter costs about 75$:

https://www.minicircuits.com/WebStore/dashboard.html?model=ZFRSC-2050%2B

You usually don't need terminators, but some inline attenuators can be handy at times. A set containing 3 dB, 6 dB, 10 dB and 20 dB attenuators  for ~15$ each gets you started. For example 20 dB:

https://www.minicircuits.com/WebStore/dashboard.html?model=HAT-10A%2B

[dazz1]

Hi
If you are doing high value pro-work you need pro-gear but if not, there are other options.

I buy all my connectors from Aliexpress.  They are not a substitute for high quality certified connectors, but I have found them to be good-enough.
I treat the Aliexpress connectors as disposable, consumable items.    They have a limited life but are cheap to replace.

I have standardized on SMA but the things I work on often don't follow that standard.  I now have adapters to go from SMA to:
RP.SMA
BNC
TNC
N-type
U.FL
50ohm load termination
and
most the above in M-F, M-M, F-M, F-F

so I now have a reasonably extensive collection of adapters by necessity.

I have Minicircuits attenuators, but nothing against Aliexpress versions.
I purchased an expensive 12V rf pre-amp from Minicircuits, but the cheap-as 5V rf pre-amp from Aliexpress has significantly better performance.

I also source rf cable assemblies from Aliexpress. 

On Aliexpress, price and quality are closely correlated.  Don't buy the cheapest.
Aliexpress sell kits with a diverse range of adapters.  If you have nothing, these might be a good choice but don't expect them to cover all of your needs.

I have looked hard at the NanoVNA.  It is not a substitute for a pro-bench top VNA but it is really good value for money.    If you buy one of these, make sure it is the genuine item from the OEM and not a retarded clone.

[Andrey_Ak]

I have purchased these cables and adapters for my devices and SSA:
https://tis.kz/temp/Siglent/Connectors-Wires-Adapters_aliexpress.doc

After purchasing the SSA, I also bought all sorts of amplifiers, filters and the like to study the device and experiment:
https://tis.kz/temp/Siglent/Amplifiers-Filters-Bridges_aliexpress.doc

[dazz1]

A really useful accessory is an rf bridge. 
See this link on a DIY version that is at least as good as the Siglent version.
https://www.eevblog.com/forum/testgear/test-results-for-the-e-bay-rf-bridge-in-an-enclosure/msg1626220/#msg1626220

[mainman]

I just bought a SSA3021X (NON PLUS) are these still hackable

[KeBeNe]

yes, with the phyton script

[mainman]

yes, with the phyton script

I have gone over multiple threads and am beyond confused about the whole process involved in doing this. Instructions aren't clear and keep chronically jumping randomly between the SSA3021X and theSSA3021X plus.

Is the Telnet access and backup steps mandatory

[tcottle]

I believe with the non plus version, the python script is your only option for upgrades.  Here are the quick instructions

1) Launch online python tool: https://www.online-python.com/PX3v0J8nbs
2) Uncomment  #Model = SSA3000X' line (remove #)
3) In you SSA navigate to system info and note HOSTID
4) Input HOSTID into python tool
5) Generate license codes and with SSA menu option System -> Load Option install following options:  ALL, 3032

[Bicurico]

ALL does not work on a non plus model. It is accepted but doesn't do anything.

[mainman]

I believe with the non plus version, the python script is your only option for upgrades.  Here are the quick instructions

1) Launch online python tool: https://www.online-python.com/PX3v0J8nbs
2) Uncomment  #Model = SSA3000X' line (remove #)
3) In you SSA navigate to system info and note HOSTID
4) Input HOSTID into python tool
5) Generate license codes and with SSA menu option System -> Load Option install following options:  ALL, 3032

Thanks for you help, will try when I get home. In addition to the expanded bandwidth, will this get me the additional software options



Concerning what you said in your reply, you instructed me not to enter ALL

I am trying to avoid ending up like the guy in this below post

So grateful to the people who have been working on this. 

Here is my experience to share with inexperienced people like me.

Started with an SSA3021X (no plus) equipped with a FW 2.1.1.3R1.

I managed to get the full 3.2GHz but did something wrong at one point since I ended up with 6 additional options (DMA, AMA, WDMA, DTF, VNA, RT40). (Yes I know I sucked, don't blame me anymore than I did  ) I could access the additional modes like VNA and DTF but functions appeared not to be working properly (plus freeze when getting back to SA mode). S/N was X'd.

Wanted to revert everything to its original state but couldn't do it. Technical support kindly sent me a package for an SSA3021X to 'reset' everything (16Mo package to fit on a USB key). I did use it but did not change anything visible. I believe it did not work because the model was now indicating SSA3032X.

Finally used the SPCI command :SRLN to set my serial number, knowing that it would undo the hack. I restarted and used the python script and voila : successfully transformed a recently purchased SSA3021X (no plus) already equipped with a FW 2.1.1.3R1 into an SSA3032X with all 4 options : AMK, EMI, TG (already permanent) and Refl and kept the S/N. Pfeeeewww !!!!

I have not read it in the various posts but want to ask it to be sure : has anybody succeeded in upgrading from SSA3021X(non plus) to SSA3032X and then into an SVA1032X ? Do you believe it can be done ? All I have read was for the + versions.

[tcottle]

OK - just enter in the keys for the options that are shown under the System Info menu one at a time (that is what I did when I upgraded)

[Volcano]

@Andrey_Ak ,@mainman did you succeed?

[Andrey_Ak]

@Andrey_Ak ,@mainman did you succeed?

I haven't tried it yet, there's no time yet..

[mainman]

OK - just enter in the keys for the options that are shown under the System Info menu one at a time (that is what I did when I upgraded)

@Andrey_Ak ,@mainman did you succeed?

Thanks for all the help

I got almost everything working except it will not take the Meas for Refl licenses

What am I doing wrong


Edit

Problem solved. It turns out I DID need to enter the license for ALL. Everything unlocked now and running

[Bicurico]

This means you have a new model with the unified firmware. Can you please post your firmware version?

[mainman]

This means you have a new model with the unified firmware. Can you please post your firmware version?

SW1    2.1.1.3R1
HW      01.00.00   

[807]

Thanks for all the help

I got almost everything working except it will not take the Meas for Refl licenses

What am I doing wrong


Edit

Problem solved. It turns out I DID need to enter the license for ALL. Everything unlocked now and running

As I posted above, it's the CAT license key that unlocks Refl.

https://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg5215635/#msg5215635

[mainman]

Thanks for all the help

I got almost everything working except it will not take the Meas for Refl licenses

What am I doing wrong


Edit

Problem solved. It turns out I DID need to enter the license for ALL. Everything unlocked now and running

As I posted above, it's the CAT license key that unlocks Refl.

https://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg5215635/#msg5215635

These are the instructions from the key generator script
"If there is a problem with AMK and Refl licenses, use CAT for AMK and Meas for Refl"

Those instructions didn't work


I own and stated I have a SSA3021X (NON PLUS) which can NOT be upgraded to a PLUS model

You said in your post
"I chose the upgrades that only applied to the 3021X Plus"

This tells me we both have different models as my Analyzer is now identified as a SSA3032X after hack.

[807]

These are the instructions from the key generator script
"If there is a problem with AMK and Refl licenses, use CAT for AMK and Meas for Refl"

Those instructions didn't work


I own and stated I have a SSA3021X (NON PLUS) which can NOT be upgraded to a PLUS model

You said in your post
"I chose the upgrades that only applied to the 3021X Plus"

This tells me we both have different models as my Analyzer is now identified as a SSA3032X after hack.

If you used the script from the link in this post...

https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg4355635/#msg4355635

...then just below the list of 4 model numbers, it says "#Use CAT for Refl (SSA3000X)".
Then further down the page it says "If there is a problem with AMK and Refl licenses, use CAT for AMK and Meas for Refl"

Your non-plus model & my plus model both have the same upgrade options. The difference is that the plus model can be cross flashed to a VNA, unlike the non-plus model.