Hack of Sigllent spectrum analyzer ssa3021X?

[OP-SEC]

So, I now have a SVA1032X.  Happy Fathers Day to me!

And after some experimentation, it seems that I have no use for my return loss bridge now.  Oh well... It sure is pretty.

Thanks to everyone for the assistance.

[waverunner62]

hi All and thanks for this great forum

i am a proud owner of a Siglent SSA3021X
i wish i could do this hack to go to the 3.2Ghz mark, and to permanently keep all my options, but before i have few things to ask
i have read multiple times all the post of this forum concerning this but there are so many, and it not easy for me to clarify alone.

here are the data of my SSA:

Version:
  SW1 1.3.9.7
  SW2 20201230-1
  SW3 000000FA
  HW  00.03.00
Options:
  EMI Sta: ON   Valid: with residual time
  AMK Sta: ON   Valid: with residual time
  TG Sta: ON   Valid: Permanent
  Refl Sta: ON   Valid: with residual time

i tried to telnet on few ports  seen on this thread and nothing work, ping is ok
as i cant find very much post  on this firmware version 1.3.9.7 hacked here are my questions:


i think i should unlock permanently the options before doing the mod, is that right?
i think i will have to install telnet_xxxx.ADS to get the telnet access, what it the last version of this file? and where can i safely download it?

on the reply #866 i use as basis for my mod  i should downsload this:
https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/?action=dlattach;attach=269048
i get this reply when i click the link:
"You are not allowed to access this section"
maybe because i am a beginner on this forum? does somebody can tell me what to do to get access?

with those things i maybe go forward. i apologize,my questions may seem stupid but i don't want to break this baby
i am doing step by step and i want to be sure to do it well, if i follow your help i am sure i can do it

my English is not also very good but i try to do my best without google
all your help is very welcome
by advance many thanks

Eric

[ozkarah]

I have SSA3021X Plus. You don't need a telnet connection to convert it to SSA3032X Plus.
Running a python script on the web link and load the option keys generated is enough.


I think it is the same with SSA3021X (non Plus version). If it is correct:
1- Go to this web page: https://www.online-python.com/PX3v0J8nbs
2- Edit the script with your own HOSTID (@System Info screen)
3- Uncomment the line: Model = 'SSA3000X_Plus' in the script
4- Run the script
5- Load the "ALL" option key using the screen keyboard of the SA.
6- If ALL does not work load the portion keys needed one by one.

Then you will have an SSA3032X/SSA3032X Plus

Telnet is necessary only if :
1- You want to take backup of your system files in the device
2- You want to convert it to SVA1032X

[807]

@waverunner62 If you get invalid licence for Refl, then change Refl for CAT in the "otheropt =" line in the python script.

Also, as you have the non-plus model, you need to uncomment the line:-

Model = 'SSA3000X'

btw...I also get the same error message when following that link in your post. The hack has moved on since that post you quoted (almost 4 years old). It's much simpler now, as ozkarah has pointed out.

[waverunner62]

you OZKARA and 807,  thank you so much 

i have to thank too BitByBit and TV84 for that wonderful script, unbelievable !!

all worked at the first try

i had to change Refl for CAT to get that option and it worked too

now i get my SSA3032X thanks to you

only thing is i can't get the AMK option unlocked
i tryed many time the key, verified again and again my typping but no ways to get it working
any idea for that is welcome

i will search if there is a trick like CAT for te reflection option

anyways you cant know how happy i am, no telnet, no hard things to do... it was so easy
THANKS

Eric

[hfleming]

The options I have enabled on my SSA3000X is

TG
EMI
Meas
CAT

[807]

...only thing is i can't get the AMK option unlocked
i tryed many time the key, verified again and again my typping but no ways to get it working
any idea for that is welcome

i will search if there is a trick like CAT for te reflection option...

You could try adding Meas to the otheropt = line. Or replace AMK with Meas & use that key to see if it unlocks AMK, as hfleming has done.

[waverunner62]

hi all

as hfleming told me his options, and 807 confirmed, i search the key for Meas.
and.. perfect it works

thank u too hfleming and 807 again

everything is unlock now

now, i don't need to for now, but i think i can safely upgrade the firmware with that mod keys installed since the firmware as not been modified, true?

thanks to all of you for this help, you are great

Eric

[807]

I upgraded the firmware on my "Plus" model after the hack with no problems. 

[hfleming]

Yeah, I have upgraded my SSA3000X (non Plus) to the latest firmware version 1.3.9.10 without any problems.

[retronexus]

Hi all,

where would I find the latest description, on how I get the SSA3021 upgraded to the SVA version? I see bits of information around it, but is there a starting point I should look for?

Thanks

[hfleming]

Ssa3021+ or ssa3021 (non-plus). The non-plus can only be unlocked to give you higher bandwidth and all the options. The plus can be further upgraded.

[retronexus]

Yea, I am aiming to get the SSA3021X Plus, but I cannot find a complete description of how to apply the SVA firmeware cross platform. Where would I find that?

[Bicurico]

You can't find the description because all new users that want to do the cross flash will ask for instructions, do it and disappear again.

Few are willing to contribute some time with compiling the lastest instructions.

Even less are willing to spend some time searching them...

Read this post and the following ones:
https://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg5528557/#msg5528557

Once you get everything up and running, write a better guide and publish it!

[retronexus]

In my defense, I was searching, but there was a lot of very scattered info sometimes very contradicting.
I appreciate the help! And yes... i should write a guide then

[Dreikor]

I am wondering if anyone has successfully updated the firmware of a cross modded unit.
I have a SSA 3021x Plus that is running SVA 1032X firmware version 3.2.2.4.0r2. I would like to update this to fix bugs that I am running into.
Would I need to revert this back with my backup files or can I just upgrade it with SVA firmware? My concern is that my S/N is showing as XXXXXXXXXXXX. Thanks

[demute]

For those of you who have an SSA3032X-R, here's how to upgrade it to a SSA3075X-R with all options enabled.

It's really dead simple, the only thing you have to do is to rename a file from nsp_data_b1 to nsp_data_b1x and suddenly it's a 7.5 GHz model.

Quick howto:

Step 1 (optional backup):
Backup files. Read other posts in this thread on how to do it.

Step 2 (optional fw update):
Update FW. Just download the latest FW from Siglent and follow the instructions. This may not be necessary but perhaps nice anyway.
At the time of writing, the latest FW was SSA3000X-R_Firmware_V3.2.2.6.2R5 (Release Date 06.28.24 )

Step 3 (optional backup):
Backup files. Read other posts in this thread on how to do it.

Step 4 (get a shell):
Go to 'System' -> 'Interface' and read off the IP address, then telnet into port 5024:
telnet 192.168.0.123 5024
Type the command DEBTTT and press enter. You won't get any reply but this starts a telnet daemon on port 23.
Exit the current telnet shell (killall telnet) and telnet again to the device but now by using the default port:
telnet 192.168.0.123
Login credentials are root/ding1234
/usr/bin/siglent #

Step 5 (rename file):
Make the file system writable, rename the file and reboot:
/usr/bin/siglent # mount -o remount,rw firmdata0
/usr/bin/siglent # cd firmdata0
/usr/bin/siglent/firmdata0 # mv nsp_data_b1 nsp_data_b1x
/usr/bin/siglent/firmdata0 # sync
/usr/bin/siglent/firmdata0 # reboot

Step 6 (verify):
Go to 'System' -> 'System Info' and you should now see your Model being "SSA3075X-R" and serial being "XXXXXXXXXX" with all options enabled.

Step 7 (enjoy):

[Bicurico]

Why do it like this when you can just generate a regular activation key, with no risk attached?

[tv84]

Why do it like this when you can just generate a regular activation key, with no risk attached?

As Confucius would say “Life is simple, but we insist on making it complicated.”

[tautech]

Why do it like this when you can just generate a regular activation key, with no risk attached?

This, and a big this ^^^

With a BW license, it will be received and activated or not without any risk.

[pagrei]

Apologies in advance, as I originally posted this request in https://www.eevblog.com/forum/testgear/siglent-sva1015x-1-5ghz-spectrum-vector-network-analyzer-(coming)/msg5591935/#msg5591935

I'm in the process of trying to recover the lost factory cal on an SVA1032X.  My plan is to obtain a quality SOLT kit, characterise it on a lab grade VNA, then cal the SVA1032X.

Based on a strings dump of Aladdin, I believe that the factory cal files reside in:

/usr/bin/siglent/usr/config/usr_vna_o_calib_log.bin
/usr/bin/siglent/usr/config/usr_vna_s_calib_log.bin
/usr/bin/siglent/usr/config/usr_vna_calib_log.bin
/usr/bin/siglent/usr/config/usr_vna_ref_log.bin
/usr/bin/siglent/usr/config/enh_rsp_calib_log.bin
/usr/bin/siglent/usr/config/usr_vna_e_calib_log.bin
/usr/bin/siglent/usr/config/usr_vna_e_ref_log.bin
/usr/bin/siglent/usr/config/usr_vna_o_calib.bin
/usr/bin/siglent/usr/config/usr_vna_s_calib.bin
/usr/bin/siglent/usr/config/usr_vna_calib.bin
/usr/bin/siglent/usr/config/usr_vna_ref.bin
/usr/bin/siglent/usr/config/enh_rsp_calib.bin
/usr/bin/siglent/usr/config/usr_vna_e_calib.bin
/usr/bin/siglent/usr/config/usr_vna_e_ref.bin

As I don't have access to the original cal, I don't know what the internal format of the cal files is, or the parameters used to generate said cal files (Number of points, Start Freq, Stop Freq, etc)

Access to copies of the above will help my journey of discovery.