Sniffing the Rigol's internal I2C bus

[Co6aka]

surprise surprise ;-)

Cybernet, PM me with your preferred communications method; have some info that might be useful. ;-)

[Rigol-Friend]

Hi Ladys and Gentlemen  ,

at first, please forgive my wrong english. I have never learn this language     here in Germany.

Ok, i have a question, please can onebody help me?

Some days ago I bought a DSA815-TG from Rigol (for me as radio amateur a phantastic instrument) and after that I read the interesst messages here, but I do not understand all (language).

Naturally is it for me nice to open the hidden options, too and so I download the file RiGen-2b1.zip and executed RiGen.exe (a very, very big thanks to Cybernet  , who develop it)

But I see I must input a "private key" in this keygenerator. And that is my problem, from where I can get this key? Here I found no information about.

That was my question.


Many thanks for read my crazy english....., sorry i can not better.

[hammy]

Der gesuchte Schlüssel ist: "80444DFECE903E"
The private key you are searching is: "80444DFECE903E"

Du kannst diesen auch in der Antwort #903 von "jamesb" finden.
You can find this private key in reply #903  from "jamesb".

Schicke mir eine eMail wenn Du noch Fragen hast.
Send me an eMail if you have more questions

73 de Hammy

PS: Thanks a lot to cybernet and dl5tor and all the others! Great work!

[Rigol-Friend]

Hallo Hammy,

super, so schnell eine Antwort... Herzlichen Dank, ich werde den Key gleich mal versuchen.
Klasse, 

Hi Hammy,
very fast answer... best thanks for it. I will try this key in the next minutes, phantastic, 

[Rigol-Friend]

Phantastic.....

All options of DSA815 are switcht "forever".
What a great work from Cybernet !!

@Hammy:
Thanks again for this private key. Where you found it?

[hammy]

Hier im thread war er erwähnt und auch im sourcecode von cybernet:
You can find the private key with the search option and also inside the sourcecode from cybernet:
http://pastebin.com/ghYHnCfT

[Rigol-Friend]

Ja, hattest Du ja auch vorher schon geschrieben (jamesb). Aber ich war eben so aufgeregt, dass ich diesen Hinweis gar nicht beachtet hatte 
Und -ich muss es gestehen- in den C-Quelltext hatte ich gar nicht reingeschaut, da das Programmieren nicht so meine Stärke ist.

Tschüss und nochmals vielen Dank für Deine freundliche und schnelle Hilfe.
Rigol-Friend

[Carrington]

LOL http://translate.google.es/?hl=es&tab=TT#de/en/Rigol-Friend

[MaxwellsSilverHammer]

I recently updated my options on my DS2202 and noticed the following strange issue under installed options with respect to the BW. Seems I have a 100MHz/200MHz scope now?? Any input would be greatly appreciated. 

[synapsis]

The private key is found by following the link in the RiGen app.

Having 100M/200M on the DS2000 scope is from enabling both options at the same time. (I forgot which code that was.) My scope has both options visible and still works fine.

While testing RiGen-1 I installed many keys on my scope.

[hammy]

LOL http://translate.google.es/?hl=es&tab=TT#de/en/Rigol-Friend

Rigol = Atten 

Sorry folks, for highjacking the language. This was the fastest way to help a fellow ham. 

[Wim13]

I recently updated my options on my DS2202 and noticed the following strange issue under installed options with respect to the BW. Seems I have a 100MHz/200MHz scope now?? Any input would be greatly appreciated. 

Is only à problem with firmware 01.00.05, then bandwidth options are not working

[Orange]

I recently updated my options on my DS2202 and noticed the following strange issue under installed options with respect to the BW. Seems I have a 100MHz/200MHz scope now?? Any input would be greatly appreciated. 

Yes, you used the DSA9 option code, if you used the DSAZ code it would have had only the 200MHz BW option.
Both codes work OK (on the new firmware 01.01.00.02)
FIRMWARE LINK :
https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg158684/#msg158684

[tlu]

I recently updated my options on my DS2202 and noticed the following strange issue under installed options with respect to the BW. Seems I have a 100MHz/200MHz scope now?? Any input would be greatly appreciated. 

Yes, you used the DSA9 option code, if you used the DSAZ code it would have had only the 200MHz BW option.
Both codes work OK (on the new firmware 01.01.00.02)
FIRMWARE LINK :
https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg158684/#msg158684

So which code is better?

[mickpah]

I received last week my DP832. Without options. Does anyone know the JTAG pinout?
Is anyone willing to post his serial number and a valid code? I would be interest in a keygen ...

I was just about to be realy lazy and order one of these http://www.grandideastudio.com/portfolio/jtagulator/
out of stock though

[iceisfun]

Is there a problem using this with Software version 00.01.01

[MaxwellsSilverHammer]

Is there a problem using this with Software version 00.01.01

only use the latest firmware 01.01.00.02 if you would like to update your options. The latest firmware can be found on another thread. Cheers

[Carrington]

Those who now have by serial number DS2A0000000001 probably rewrited some other important data, besides the S/N.
But look at the images attached (DSX_QuickPrint1.png and SNumber.JPG). Is as if the loss of such data force to use the data contained in the firmware.

The question is: What S/N have you used to install the options? DS2A0000000001?

It seems that the S/N is write in more places:
https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg265211/#msg265211

I attached other curious images. Is impressive all what cybernet has achieved...

[iceisfun]

Is there a problem using this with Software version 00.01.01

only use the latest firmware 01.01.00.02 if you would like to update your options. The latest firmware can be found on another thread. Cheers

Got it working, had a data entry error - Thanks to everyone who worked on this.

I wish Rigol had sent the trial key as a card with the scope so you could enable them when you wanted, I'm pretty new to scopes and by the time I got familiar with things I burned up most of my trial, I need to mess with some I2C stuff and I have been turning the scope on and off using it as little as possible but now I can just use it normally and not worry about using up my trial time.


I'll be getting other Rigol products crackable or not, the quality (minus spelling errors) seems awesome. All the cheap stuff I've gotten needs replaced like the cheap ebay PSU and sig gen.

[true]

Those who now have by serial number DS2A0000000001 probably rewrited some other important data, besides the S/N.

What other important bits are there?

If, after self-cal, using standards it measures correctly, what does it matter? It doesn't seem to have changed anything else by outward appearance, and if the unit functions normally, I really don't care what else could have changed, I can't see it anyway.

The only reason I care about SN is if I decide to sell it shortly to upgrade.

[Carrington]

The only reason I care about SN is if I decide to sell it shortly to upgrade.

* Then modify/edit the firmware, change "DS2A000 .. 1" string for yours S/N. And re-install it.
You don't lose anything if try it. 

You can use a hex editor, 0xF045B0 see SNumber.JPG attached in my previous message.


Edit:
* It seems that does not work. 

[Orange]

Those who now have by serial number DS2A0000000001 probably rewrited some other important data, besides the S/N.
But look at the images attached (DSX_QuickPrint1.png and SNumber.JPG). Is as if the loss of such data force to use the data contained in the firmware.

The question is: What S/N have you used to install the options? DS2A0000000001?

It seems that the S/N is write in more places:
https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg265211/#msg265211

I attached other curious images. Is impressive all what cybernet has achieved...

It looks like from the screenshot you have found an other hidden menu, where you can enter the scope model, serial number, and fan speed !
Question now is how to get there 

[Carrington]

It looks like from the screenshot you have found an other hidden menu, where you can enter the scope model, serial number, and fan speed !
Question now is how to get there 

No, I have not found how access to the hidden menu, if it exists. I wish.
Is only that I think there is the possibility to modify the S/N modifying the firmware. And it may only work in some cases, I have not tried.

The capture Hidden_Menu.JPG only shows the ASCII strings of a possible menu.

[MaxwellsSilverHammer]

It looks like from the screenshot you have found an other hidden menu, where you can enter the scope model, serial number, and fan speed !
Question now is how to get there 

No, I have not found how access to the hidden menu, if it exists. I wish.
Is only that I think there is the possibility to modify the S/N modifying the firmware. And it may only work in some cases, I have not tried.

The capture Hidden_Menu.JPG only shows the ASCII strings of a possible menu.

I thought I read somewhere in this thread where you can access the hidden menu via certain keystrokes. I may be wrong or maybe dreamed it, lol. I will look again and if I find it I will quote/repost here

[Carrington]

Please someone who has had the problem with the S/N:
 What S/N have you used to install the options, after the "failure", DS2A0...01 or original S/N?