Unlocking/Hacking The Rigol DS2000A Series Scope - THE SHORT POST

[conte_vlad]

hi Beeblebrox

as I cannot downgrade from 00.03.00 sp1 to 00.02..... can I ask you wich hardware version have you? mine is 2.2

Thanks

[Beeblebrox]

Hi conte_vlad,
it says HW version: 2.0, extended System Info says HW version: 1.0.2.0.2 (see 2nd picture in my previous post).

Good luck.


...After a while.....

OK, I tried to upgrade FW and ..... SUCCESS !!! Now I have DS2072A converted to DS2302A with all options and newest firmware 3.00.SP1

FYI, here is the recap of what I've done:

• I followed the original upgrade procedure in this thread (see my previous post). Worked great but downgraded my FW from 3.00 to 2.01.
• Then I downloaded 3.00 FW (file DS2000-03_00_01_03.7z) from www.gotroot.ca/rigol/
• Flashed 3.00 FW using USB stick (you know the drill - POWER, HELP, plugging in the USB stick, hypnotizing the blinking CH1 for about 3 min.)
• Rebooted the scope (this time I didn't hold F6 button on the scope during reboot)

That's it, the new firmware accepted all previous changes made by the DS2000A Upgrade Utility 

[conte_vlad]

thanks 

[Neddie]

I've followed conte_vlad's method.
My scope was hacked for full bandwidth / features , but firmware version was 00.02.01. Now is 00.03.00.SP1.All features/bandwidth still enabled.
I assumed it would go to 00.03.01.03 , which is the name of the firmware file , but this is good enough as the
protocol decoding is now working properly.
Neddie

[conte_vlad]

 

I suspect that downgrade is not possible on hardware 2.2 Someone with same version can confirm?

[donkey77]

I've just received my DS2072A-S. It says its got F/W 00.30.00 on it and Hardware 2.0.
I tried to use the Upgrade Utility but it doesn't seem to do anything when I insert the USB stick after turning on and pressing help. Maybe it's not just Hardware 2.2 that hampers things.

EDIT - I should have tried a different memory stick, although the first one I used worked with saving screen shots I have managed to load the Custom F/W with a different stick, however as mentioned earlier the Upgrade utility doesn't see the Scope via USB to download the keys.

It first said there was a problem installing drivers but now seems to recognise in Device Manager a USB Test Measurement Device (IVI Foundation inc.) and can see the Scope as an unspecified device in devices and printers (and called DS2072). It also connects to Marmads utility ok and USB mode is set to Computer NOT Picbridge.

EDIT AGAIN!! - After not getting the utility to work I used the instructions at http://www.gotroot.ca/rigol/ (D2072 Unlocking Guide) with the Hex editor etc and it all worked fine.

Many thanks to Teneyes for the shove in the right direction!

[PepeK]

I am also very interested, if downgrade to a special "serial dumping firmware" is possible starting from SW  00.03.00.SP1  and  HW  2.2  ?

[Gandalf_Sr]

I have an MSO2072A on the way, unless someone tells me otherwise, I plan to use the JTAG memdump + Rigup route.  It would be cool if the USB connection system was modified to work with the MSO2072A too but hey, I'm a happy chappie.

[Dorfteich]

Hi,
i received my DS2072A with FW 00.03.00SP1 (00.03.00.01.03) and Hardware 2.0. (1.0.2.02)
I testet few USB-Sticks with 128MB, 256MB and 4GB, but i can'r flash the mod-FW.
I turn the DSO on, 0,5sec later press the HELB Button an then is only the SINGLE Light on (orange).
When i put the stick in the frond USB, the USB-Stick light short on and all light on the DSO are on, but the Ch1 LED ca 0,5sec single on, then all light on, thats all.

What can i do without the JTAG methode? Some guys here tell, thats run with the DS2000A Upgrade Utility Tool
and the Firmware flash with my FW Version. It's the USB Flash only the problem?
many thanks

Edit: When i copy the Version DS2000-03_00_01_03.7z on the 128MB Stick, the CH1 lamp blink for 3min, but it's the same version from factory. I'm confused

[Slappy_g]

Hi,
i received my DS2072A with FW 00.03.00SP1 and Hardware 2.0.
I testet few USB-Sticks with 128MB, 256MB and 4GB, but i can'r flash the mod-FW.
I turn the DSO on, 0,5sec later press the HELB Button an then is only the SINGLE Light on (orange).
When i put the stick in the frond USB, the USB-Stick light short on and all light on the DSO are on, but the Ch1 LED ca 0,5sec single on, then all light on, thats all.

What can i do without the JTAG methode? Some guys here tell, thats run with the DS2000A Upgrade Utility Tool
and the Firmware flash with my FW Version. It's the USB Flash only the problem?
many thanks

If the basic method does not work for you, there's not a lot of other choices. People are working on it, but they seem to have slowed down a bit since the JTAG method is known to work perfectly.

Just bite the bullet and go for the JTAG route. Trust me, it's not that scary. Just follow my MSO2000 series hacking thread for detailed instructions.

[Dorfteich]

thanks for reply, but the JTAG method is to big for me.
Bud i read here, that some guys , like https://www.eevblog.com/forum/testgear/ds2000a-upgrade-utility/msg499722/#msg499722 have exat the same FW Version and it's run. 
I call with a user in my same country, my DSO is only 2 weeks later buy, same type and dealer.
I can flash same same version, not older, it works like in the HowTo in the Tool Program.
So, i think, i wait few days for more answer's.

[BTO]

Hi Guys
i apologise for my lack of presense on my own topic

i have been very busy with work

Reading through all your posts

@ Neddie - I'm glad you got it worked out

AS FOR THE REST OF YOU GUYS

obviously , it seems that rigol has decided to try and put up counter measures in the new firmware version 3.0.1

I've heard a few stories here

Story 1 - Some people are having success with the upgrade using the utility - This has been verified
             we are still not sure why everyone is not able to do it

Story 2 - as dumb as this sounds ..... Apparently Certain USB stick brands won't be detected during upgrade.
              so.. let's start mentioning what brand of USB stick we are using and see if a pattern emerges
              keep in mind we only want to hear from those of you who have a meter that started on Version 3.0 and Upgraded  successfully using the Utility

Story 3. THIS IS VERIFIED
              The JTAG Method
            Bite the bullet and just do it

           here's the link to a step by step procedure

https://www.eevblog.com/forum/testgear/sniffing-the-rigol%27s-internal-i2c-bus/msg365951/?topicseen#msg365951

Story 4.  this is verified    YOU CANNOT ROLL BACK TO A VERSION PRIOR TO Version 3, if you are on Version 3


I'm still happy to help anyone who is having trouble and has Firmware below version 3.0

Thanks for all your participation guys
I'm watching in the background , don't worry

i don't always have time to reply though
if you email me, i will answer quicker

BE cool Guys
and keep the posts coming

thankfully this has not turned into a 200 Page monster............. not yet anyway
so, let's just roll with it

[PepeK]

Story 1 - Some people are having success with the upgrade using the utility - This has been verified
             we are still not sure why everyone is not able to do it

According to some post here I came to a conclusion  that DS 2072 A model (without a logic analyzer) has SW 3.0.SP1 and HW 2.0 - this is hackable via software utility. MSO 2072 A model (having logic analyzer) runs on HW 2.2 and is hackable only via JTAG.

[Dorfteich]

According to some post here I came to a conclusion  that DS 2072 A model (without a logic analyzer) has SW 3.0.SP1 and HW 2.0 - this is hackable via software utility. MSO 2072 A model (having logic analyzer) runs on HW 2.2 and is hackable only via JTAG.

so, i must also testing more USB-flash Sticks, i tested 7 pcs without success (256MB to 4GB, FAT32), to be continued

Edit:
When i put the stick in normal DSO Modus with the same Firmware, will i see this
in the picture.
(see pic in this post: https://www.eevblog.com/forum/testgear/ds2000a-upgrade-utility/msg501658/#msg501658 )
It's the FW older, i see not this text in the scope.
Any ideas?

[Dorfteich]

Story 4.  this is verified    YOU CANNOT ROLL BACK TO A VERSION PRIOR TO Version 3, if you are on Version 3

It's true, today i received a 100% testet USB-Stick with other DS2072A and flashing was ok with older hack-Firmware AND
00.03.00.01.03 firmware from factory default.
But my new DSO can't flashing the dump hack version (.02) from .03 versions number, it's fact.

[PepeK]

But my new DSO can't flashing the dump hack version (.02) from .03 versions number, it's fact.

It is time to order some JTAG device 

[Dorfteich]

It is time to order some JTAG device 

After the warranty 

[PepeK]

After the warranty 

It is very easy to remove warranty sticker and it is not possible to detect, if you hacked the scope via JTAG way. You do not re-flash a firmware, you simply enter activation codes, which can be deactivated before sending the scope to repair.

[Slappy_g]

I put this in the monster thread, but wanted to cross post here. These are the Windows instructions that have worked for many...

https://www.eevblog.com/forum/testgear/rigol-mso2000-series-hacking/msg498454/#msg498454

Sent from my SM-N900T using Tapatalk

[JSE009]

Hello All,

I received my DS2072A last week and hacked it today 
Now it is a scope with all options and with a bandwidth of 300MHz.

Unlocking was a very easy job:

Step-1: Installed software "Rigol Bildschirmkopie LAN/USB"   

Step-2: Make a memory dump with SCPI Command, :SYST:UTIL:READ? 1,33554432

Step-3: Use software Rigup to extract the correct license keys options

Step-4: With software UltraSigma and use SCPI command, SYSTem:OPTion:INSTall

After that looked at my scope and it think it is a DS2302A version 

[Bud]

No need for Ultra Sigma, just use the same program as on Step 1.

[ChronoGuy]

Hello,

I just saw these posts on hacking the Rigol DS2072A to run at 300Mhz. I was looking at purchasing one of these but thought the pricing was a bit too much for my budget (the 200Mhz or 300Mhz versions) and was investigating other options when I stumbled on the hack threads.

For the most current firmware (00.03.03.00.00 SP1?) and hardware versions (2.2?), would we be using the Bildschirmkopie sw to get the firmware dump via LAN connection and then using the rigup 0.4 tool to find the lock codes (just as the prior 2 posts indicate)?

I just wanted to check to see if that was the most up to date method for hacking the DS2072A.

Thanks!

[Björn]

Hello All,

I received my DS2072A last week and hacked it today 
Now it is a scope with all options and with a bandwidth of 300MHz.

Unlocking was a very easy job:

Step-1: Installed software "Rigol Bildschirmkopie LAN/USB"   

Step-2: Make a memory dump with SCPI Command, :SYST:UTIL:READ? 1,33554432

Step-3: Use software Rigup to extract the correct license keys options

Step-4: With software UltraSigma and use SCPI command, SYSTem:OPTion:INSTall

After that looked at my scope and it think it is a DS2302A version 

Same here,

Came with v3.01 and bootloader v2.0

Got the memory dump with Bildschirmkopie, runned rigup, entered the code via keys on scope itself.. and voila fully unlocked

[Muxr]

Haven't hacked my DS2072A yet, got it a few weeks ago, but the problem I have with it is that it keeps locking up occasionally. I read a few people having this issue, so I am wondering if it's down to the firmware I am running, or if I should send this unit back.

Sometimes it will lock up every 5 minutes or so, and sometimes it will work without issues for 20+ minutes.

My Sw version is: 00.03.00 SP1
Hw version: 2.0

Anyone else having lock up issues with their DS2000 ?

edit: I requested the 00.03.03 firmware from Rigol to see if that resolves my issue.

edit2: So I just upgraded to 03.03 SP1, been running it for the last 10 minutes, so far so good. Time to start looking into applying the hack.

[vladbrat]

 
 
My English is very bad.

Many thanks for your forum.
I have successfully activated your  DS2072A----> DS2302A