Hacking the Rigol MSO5000 series oscilloscopes

[atembedded]

Thanks Bibbbi!  Followed your instructions.  Patch wouldn't work when formatted from Win10, worked fine from Rufus.

[oelapaloma]

@flash2b

My scope came with this: 0A.01.03.00.01
Is this hackable and what do I need to do?

You seem to have the same Beta firmware that I have.
From my understanding, the hack is in research state. ~64 people have downloaded it since it was published, but nobody left feedback yet, whether it worked or not.
As far as I understood, the DS5000Update.GEL was built in a way that it can be used for any firmware, so just use the latest one you can find. Then get the two files attached by @d86d1864 which contain the hack.
Before doing that, you might want to backup /rigol/appEntry using SCP so you can rollback, just in case.

[normi]

One question that has not been answered is what's the difference between the firmware, are there any improvements. Before upgrading can someone test the scope first and compare to see difference after patch. Check X-Y mode and see if there is any difference in thickness of trace. I had called support asking for copy but they said this was just a version used at the factory and was related to calibration, not sure what that means.

[oelapaloma]

Hi normi,
I can't compare to the previous official firmware because my scope never had that version. But I think there are quite a of bugs and issues.
Bear in mind that I'm not a professional electonics engineer, so some issues may just be misunderstanding, misconfiguration or wrong setup on my side.
At the moment I'm testing with the built-in function generator. Maybe I should not do that.
1. the function generator needs to be turned off and on after changing the function (not always, but often). Depending on your horizontal scale, you might not even notice that the curve is broken
2. the function generator may need to be turned off and on even when changing the same functions' properties (e.g. ramp symmetry)
3. the line thickness in XY and XYZ mode is indeed very thick
4. counter min/max may display nonsense after turning on and after changing horizontal scale (turn statistics off and on to reset)
5. counter may display a higher value than the maximum in the statistics
6. trigger triggers at wrong edge, even with noise reject (might actually be caused by very small but high peaks of the built-in function generator as it seems)

[normi]

 I am assuming you are still on the Beta version that came with your scope, and you have not patched scope.
 The XY thickness exists in the official version so it appears that it has not been fixed in this 0A version.
 I have not come across any issues with the function generator so not sure what's causing that, others can report if they see similar issues.
 The counter has to start somewhere so its best to reset it once the signal is stable, I have not used the counter a lot so can't say how it compares to statistics.
 

[klen_s]

Hello!
Many thanks for the work done!
some time ago i upgrade new device A0.01.03.00.01 -> 00.01.03.00.01 and unlock.  all is well.
now, i want to rollback to check the patch for for A0.01.03.00.01 and test new patch.

how to properly rollback. I only have a full backup  /rigol  for new A0.01.03.00.01 device

over ssh I delete all files  /rigol/*   but it is not clean full
I cannot write a full /rigol/* backup.    /dev/ubi6_0 partition not claned after files deleting ( 35% space is use )
How to clear a /rigol space?

[Dan_F]

Hello,
    After using the methods described in post   « Reply #2106        I was able to upgrade the MSO 5074 to a working MSO5354 with the
 factory new device 0A.01.03.00.01 firmware.

0A_01_03_00_01.bspatch.txt      rename to  0A_01_03_00_01.bspatch
DS5000Update.GEL.txt      rename to  DS5000Update.GEL
patch.txt

Copy to root directory of usb flash drive
insert into front scope usb
run update

Above is statements from other posts - but I have inserted the current data to show what worked for me.
It added the upgrades I needed but not extra.. Example.. I had a 4 channel scope from factory so it didn't add the upgrade code for 4 channel from 2 channel.
Use the files from previous post and use the DS5000update.gel file located a few post above post 2106.
I have rebooted a few times and everything seemed normal.. I have not fully tested all functions but the normal one seem ok.
Good luck. 
Dan

[rmaranhao]

Encouraged by your post I tried it, and can also confirm it worked.
Thanks all!

[Matsh]

Did upgrade a RIGOL MSO5074 to 350 MHz and also the rest of the options. 

Thank you to Agne who started this thread and the others here who put all the effort into this project.

[gdombi]

Help Please!!!

MS5000 came with 01_03_00_01 firmware. I followed the "upgrade" steps using zip file included in https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3024342/#msg3024342. I had to update checksums to match what Rigol was expecting (based on what it said when I tried to run the upgrade). After updating both checksums the upgrade said successful. Restarted and now I have a Rigol screen with the progress bar reaching to the end but nothing happens. In the web UI I see a message saying "Loading ... Please Waiting".

Did I just brick it? How can I revert this??

Please help!!!
TIA,
Gaston

[ToThePub]

MS5000 came with 01_03_00_01 firmware. I followed the "upgrade" steps using zip file included in https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3024342/#msg3024342. I had to update checksums to match what Rigol was expecting (based on what it said when I tried to run the upgrade). After updating both checksums the upgrade said successful. Restarted and now I have a Rigol screen with the progress bar reaching to the end but nothing happens. In the web UI I see a message saying "Loading ... Please Waiting".

You updated firmware with version 01.03.00.01 using the instructions and patches for 01.02.00.02.
I'm not suprised it's bricked.

However, you are lucky as you can get back to factory.
Go here:
https://www.rigolna.com/products/digital-oscilloscopes/MSO5000/
Download the firmware, extract the GEL file.

Copy the official firmware to a usb key. Stick it in the scope.
While powering on the scope, keep pressing the single button.
You'll see two options show up and you should be able to flash back to the official firmware.

Let's get you back to normal before we do anything else.

[gdombi]

@ToThePub, I owe you a beer!!!! I'm back with an operational scope.

Which files should I use for the "upgrade"? I keep reading this thread and see so many files.... I have firmware 00.01.03.00..1 now installed.

Thanks for your help,
Gaston

[ToThePub]

Instead of posting again, just follow K9DTV's info here:

https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3721423/#msg3721423

[gdombi]

I used https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3721423/#msg3721423 and I'm all good. All options are available and still same firmware version. 

Thanks for your help!!! I can now relax that scope is not bricked and operational++ !!!

Gaston

[ToThePub]

I used https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3721423/#msg3721423 and I'm all good. All options are available and still same firmware version. 

Thanks for your help!!! I can now relax that scope is not bricked and operational++ !!!

Good to hear. Enjoy the scope.

[BH3XON]

damn！ I got the latest build version, who can help me?

[ilya_z]

damn！ I got the latest build version, who can help me?

You may downgrade software
post # 2017  https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3617041/#msg3617041

[BH3XON]

damn！ I got the latest build version, who can help me?

You may downgrade software
post # 2017  https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3617041/#msg3617041

I tried to use MSO5000(ARM)Update (V00.01.03.00.01) to downgrade, but it prompts:

Failed to upgrade! Check the upgrade file. 

File from Rigol 。

[ilya_z]

try using other  USB flash, try format Flash FAT32 in RUFUS

[ToThePub]

To downgrade the firmware I think you have to use the recovery process.
Use the process here:
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3820085/#msg3820085

Then patch using:
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3721423/#msg3721423

[BH3XON]

To downgrade the firmware I think you have to use the recovery process.
Use the process here:
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3820085/#msg3820085

Then patch using:
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3721423/#msg3721423

thank！
Have tried,
Put DS5000Update.GEL into the U disk,
Keep pressing "single", then press the power button to start,
But it did not enter the mysterious menu, just the usual splash screen.
Nothing happened.

[BH3XON]

try using other  USB flash, try format Flash FAT32 in RUFUS

Thanks
I don’t think it’s the USB flash drive.
Because my other old Rigol oscilloscope uses the same USB flash drive for operation.

[ToThePub]

Turn on the device with the left hand, while pushing the single button with the right hand.
Keep pushing it, over and over and over don't stop pushing, don't wait between pushes.
It works, I don't know why you are having problems.

[idolclub]

Rigol MSO5000 Firmware v00.01.03.00.03 :

[Updated Contents]
--------------------

v00.01.03.00.03 2021/10/18

      - Optimized waveform display in XY mode.
      - Optimized the DC gain calibration algorithm.
      - The La channel is decoded in parallel, which solved the problem of decoding error in negative polarity.


v00.01.03.00.01 2020/03/27

      - Solved the error of recording function when the time base is 10ns/div.
      - Optimized the auto function after adjusted the offset cal of analog channel.
      - Supported dragging the math waveform by dragging the icon of the math.


v00.01.02.00.03 2020/02/27

      - Solved the error of reading LA channel memory data by SCPI commonds.


v00.01.02.00.02 2020/02/25

      - Solved the problem of starting the oscilloscope under HDMI connection.
      - Solved the error of channel offset cal function when adjusting the vertical scale.
      - Unified the naming of CLK and SDA in SPI protocol analysis.
      - Optimized the display of waves under zoom mode of 2s/div time base.
      - Added command to get pass / fail times.
      - Deleted the default email account and password.
      - Optimized some problems in SCPI commonds.
      - Optimized the problem of software crash when there are too many decoding events.


Download:
https://www.rigolna.com/products/digital-oscilloscopes/MSO5000/

[BH3XON]

Turn on the device with the left hand, while pushing the single button with the right hand.
Keep pushing it, over and over and over don't stop pushing, don't wait between pushes.
It works, I don't know why you are having problems.

After many attempts, I think I know the problem,
time1: Press the power button, the keyboard light is on, and the screen is dark;
time2: The keyboard light is off and the screen remains dark;
time3: The screen displays RIGOL, and the startup progress...

Just press single at time2, and the mysterious menu will appear.