Hacking the Rigol DHO800/900 Scope

[Fungus]

That won't happen. When you want to go above the official options for a certain model, you have to change model.

The bandwidth upgrade is currently enabled as a trial on my DHO804.

With the latest firmware it also says memory depth option.

Maybe 250MHz won't work but I'll give 100Mhz+memory depth a try.

[Fungus]

Options 70mhz to 100mhz and storage depth can be unlock using SCPI command,which could gnenrate by rigol HDO-tools.
https://gitlab.com/riglol/rigolee/hdo-tools
(string BW7TO10,RLU)

That file is hard coded for DHO4000 keys.

I tried modifying it for DHO800 using this post as a guide: https://www.eevblog.com/forum/testgear/rigols-new-dho800-oscilloscope-unbox-teardown/msg5067982/#msg5067982

But I haven't had any luck yet.

[Fungus]

I've got 50Mpts memory in a DHO800!

[ebastler]

I've got 50Mpts memory in a DHO800!

 

But where's the 100 MHz bandwidth option?

[Fungus]

I haven't had any luck generating keys for bandwidth upgrade but it's easy to push the DHO814 vendor.bin. I get about 135MHz measured bandwidth with that (2.6ns rise time).

Theory:
In the last firmware update the trial for "70MHz-100Mhz bandwidth upgrade option" changed to trial for "Storage depth option" (see screen captures). Various people saw this.

So... maybe Rigol is planning a storage upgrade option for the DHO800 and that's why that option works.

 

The trick to finding out would be to try a bandwidth upgrade key with 1.00 firmware.


With 1.00 firmware:


With 1.01 firmware:

[tv84]

Has anyone seen where the options get stored?

In a file called "license.lic" like in some other Rigol equipments or in separate .lic files?

(should be next to Key.data)

[Fungus]

Has anyone seen where the options get stored?

In a file called "license.lic" like in some other Rigol equipments or in separate .lic files?

(should be next to Key.data)

I've got a new file called "RLU.lic" in /rigol/data:



The option I installed has code "RLU" so I'm guessing that's where it went.


10MPts per channel with all channels enabled on a DHO800: 

[Fungus]

FWIW: The RLU.lic file is plain ASCII text with my license key in it. I'm guessing it's no use to anybody else.

[ebastler]

FWIW: The RLU.lic file is plain ASCII text with my license key in it. I'm guessing it's no use to anybody else.

Can you generate a key for the 70-to-100-MHz upgrade and store it as BW7TO10.lic? Maybe the option is just missing in the UI?

[Mechatrommer]

I haven't had any luck generating keys for bandwidth upgrade but it's easy to push the DHO814 vendor.bin. I get about 135MHz measured bandwidth with that (2.6ns rise time).

you are still being haunted by anti-aliasing rebel movement do you?

btw i copied all files from rigol folder of ver1.0.0.19 (DHO804 from factory), ver1.1.0.2 (DHO804 legit gel upgrade) and ver1.14 (DHO924 illegit hack) using RigolTool.exe and do files size and binary (data) comparison:

comparing ver1.0.0.19 (DHO804 from factory), ver1.1.0.2 (DHO804 legit gel upgrade), every files are the same except:
\data\cal_afe_bandwidth.hex
\data\cal_vertical.hex
\FPGA\BOOT.bin

comparing the legit copies above (both) with ver1.14 (DHO924 illegit hack), the differences are:
\app\Launcher.apk
\app\Sparrow.apk
\app\Webcontrol.apk
\data\default\cal_vertical.hex
\data\cal_adc.hex
\data\cal_afe_bandwidth.hex
\data\cal_afe_zero.hex
\data\cal_ddr.hex
\data\cal_lsb.hex
\data\cal_vertical.hex
\data\Key.data
\vendor.bin
\FPGA\BOOT.bin

files in DHO924 dont exist in DHO804:
\data\cal_ext.hex
\FPGA\SPU_H12S1.bit

i also did recalibration on each version to see what files are changed in rigol\data:

recalibrating ver1.0.0.19, the following file is changed:
\data\cal_vertical.hex

recalibrating ver1.1.0.2 the following files are changed:
\data\cal_afe_bandwidth.hex
\data\cal_vertical.hex

recalibrating ver1.14 the following files are changed:
\data\cal_adc.hex
\data\cal_afe_bandwidth.hex
\data\cal_afe_zero.hex
\data\cal_vertical.hex

so during calibration, one or more of that files will be changed.
fwiw...

[t_i_t_o]

How about BW7TO25 BW10TO25...?

[Fungus]

How about BW7TO25 BW10TO25...?

They don't exist in the apk file. 

[Fungus]

Can you generate a key for the 70-to-100-MHz upgrade and store it as BW7TO10.lic? Maybe the option is just missing in the UI?

Nothing.

[dmulligan]

How about BW7TO25 BW10TO25...?

They don't exist in the apk file. 

Neither is BW7TO10.

[Fungus]

I haven't had any luck generating keys for bandwidth upgrade but it's easy to push the DHO814 vendor.bin. I get about 135MHz measured bandwidth with that (2.6ns rise time).

you are still being haunted by anti-aliasing rebel movement do you?

It seems to be the fastest I can get and have the self-cal work. 

[Martin72]

I have now also tried this, works....

[ebastler]

I have now also tried this, works....

 

But now I am confused... I thought that, with the bandwidth option removed in the new firmware, a model change to DHO814 (via vendor.bin) is the only way to get 100 MHz bandwidth. So how is yours a DHO804, but nevertheless with 100 MHz? 

[Fungus]

I have now also tried this, works....

What code did you use to get 100Mhz bandwidth on an 804?

(And have you measured the bandwidth?)

Can you list /rigol/data to see what files you have in there?

[Martin72]

Bandwith measuring and check if we really have 50Mpts will follow.

I have changed the rgtool script as it was in the link, removed all "nonsense" options, left RLU and inserted BW7T10.
Then entered the generated keys via the SCPI console.

[ebastler]

You know what the next question will be, right?
Any chance of adding BW7TO25 and BW10TO25 to the script and giving those a try? 

[Martin72]

Can you list /rigol/data to see what files you have in there?

Bandwith is in...

[ebastler]

Oh -- it's BW7T10, not BW7TO10 as originally stated by nervdg.
That might explain why it didn't work for Fungus.
How did you find the correct spelling?

[Martin72]

Hi,

already exists in the script...

Edit:

Any chance of adding BW7TO25 and BW10TO25 to the script and giving those a try?

Tried...No. 
Makes sense as long as the scope is a 800 model.

[Martin72]

Checking the bandwith with a sml01 generator and 50ohm external resistor.
Bandwith: Proofed..
I think I don´t need a further bandwith upgrade.

[Serg65536]

BTW, here is the DC accuracy check results on my DHO804. The voltage source is 7.49844 V.
Stock firmware - 0.25% accuracy:



DHO924 firmware, autocalibrated, offset is close to zero, error is 1.66%. That's awful:



So, not only the DC offset is the issue, but the DC accuracy also!!