'Free' VSA options - Page 1
Forum section: electronics / testgear

author: PA0PBZ
author_rank: Super Contributor
timestamp: January 11, 2015, 03:54:32 pm
content: Two weeks ago I bought an E4406A from KJDS as a companion to my E4433D. Since it only came with the GSM-Edge option I sniffed around a bit to see what was possible, since I wanted the wcdma enabled. So I did what I normally do, download a firmware upgrade to get an easy access to the system files. Well, in this case it is an interesting upgrade because it comes with a java installer to update the VSA via the lan. Peeking around a bit told me that most of the stuff is done via FTP and of course in there was the user/pass for that and the location of the license files. To my surprise on my VSA there were not only the standard license files which come in the form of OPT.lic (like 202.lic) but also some other files:Code:202.lic252.licB78.licBAC.licBAE.licnfstmp.3bd8829400000001nfstmp.3bd8829400000002nfstmp.3bd8829400000003nfstmp.3bd8829400000004nfstmp.3bd8829400000005nfstmp.3bd8829400000006nfstmp.3bdeb64f00000001nfstmp.3bdeb64f00000002nfstmp.3bdeb64f00000003nfstmp.3bdeb64f00000004nfstmp.3bdeb64f00000005nfstmp.3bdeb64f00000006nfstmp.3c029a2400000001nfstmp.3c029a2400000002nfstmp.3c029a2400000003nfstmp.3c029a2400000004nfstmp.3c029a2400000005TEMPLATE.licI know these license files, They are used by FlexLM which you see in a lot of Agilent products from that time. They are all like this:FEATURE 202 TMOMID01 1.0 permanent uncounted 0123456789AB \HOSTID=VSA_HOSTID=E1234567Where HOSTID is the ID of the instrument and the 0123456789AB is the generated key. So what are these nfstmp files? It turnes out that this VSA for some strange reason has a few license files for three different host id's, and luckily one of the id's is the same as my machine. So all I have to do is to copy the nfstmp file with the correct host id and the wcdma option (BAF) to BAF.lic right? Almost... The VSA has only the option code for the installed options, so while I now have the correct license for wcdma the code is still missing. No panic! Just download the correct firmware update, unpack and transfer the (in this case) orion.wcdmart.0 to the VSA. Done!Of course YMMV but if you are into some fun have a look in your VSA. FTP to it, use vsa/service as user/pass and do an ls-l licenses, who knows you are as lucky as I was

author: dxl
author_rank: Regular Contributor
timestamp: January 11, 2015, 06:10:00 pm
content: Hi,i played a few years ago with the licensing, and i needed to change the following bytes in the binary to make it accept all licenses regardless whether the checksum is valid:$ cmp -l orion.cchprt orion.cchprt.ori2530905 64 2132530906 34 2002530907 0 402530908 0 250I think that was already with the latest VSA Firmware (A.10.08?).With that hack you just need to copy the license file to a new name, and modify the contents.Have fun

author: PA0PBZ
author_rank: Super Contributor
timestamp: January 11, 2015, 06:15:06 pm
content: Quote from: dxl on January 11, 2015, 06:10:00 pmYes I was planning to go that route (did the same with a N1996a) but since I found the license I was after I called it a day.Maybe I'll look into it later, thanks!

author: harha
author_rank: Contributor
timestamp: July 02, 2015, 03:59:51 am
content: HiI have serviced some e4406A`s and found exactly the same as you-many of them have the license files for many options stored!All of them came from nokia.Could someone please explain how to use the metod mentioned by dxl?.Would also like to have H17 wlan option installed-have the lic file,but where do i get the file from?-its not a part of A10.08 firmware.RegardsHardy

author: helius
author_rank: Super Contributor
timestamp: July 02, 2015, 04:21:47 am
content: dxl used cmp(1) to print out the bytes differing in the original and his patch.you can apply the patch using xxd(1):Code:cp orion.cchprt orion.cchprt.modifiedecho "40220000" | xxd -r -p -s2530905 - orion.cchprt.modified

author: PA0PBZ
author_rank: Super Contributor
timestamp: July 02, 2015, 09:39:15 am
content: Quote from: harha on July 02, 2015, 03:59:51 amI'm not sure what version of the firmware updater I installed, but the wlan file is there.In the folder data_files you will find the file h17.install.txt which shows you what file you need:Option: H17orion.wlanrt.0The orion.wlanrt.0 file is in the FTPFiles folder.

author: harha
author_rank: Contributor
timestamp: July 16, 2015, 09:52:24 am
content: Thanks to AllYes-PAOPBZ-You are right,did find the file for h17-thanks..But as I am not a great programmer and afraid of doing something very wrong,could someone explain(maybe helius?) how to use the patch shown by helius?.

author: PA0PBZ
author_rank: Super Contributor
timestamp: July 16, 2015, 10:04:07 am
content: Quote from: harha on July 16, 2015, 09:52:24 amIn an earlier post you mentioned that you have the LIC file, and in that case a patch is not needed, just rename the file to H17.lic and upload the orion.wlanrt.0 to the unit.

author: harha
author_rank: Contributor
timestamp: July 16, 2015, 10:17:31 am
content: SorryI have not been clear!Have installed h17-thanks,but would like to know how to install other options withouth lic files.Cant open the orion file..

author: PA0PBZ
author_rank: Super Contributor
timestamp: July 16, 2015, 10:51:17 am
content: Quote from: harha on July 16, 2015, 10:17:31 amThe orion.cchprt file is a binary file, so you need some kind of hex editor to change the contents.I'm not sure what tools are available in the OS of the machine so I'd download it to the PC and use your favorite tool.Make a copy first (orion.cchprt.orig) and store this on the VSA.Then open the file in a hex editor, check if the file locations mentioned contain the first value, then change it to the second value.Code:2530905 64 2132530906 34 2002530907 0 402530908 0 250After that copy the file back to the VSA.Since I did not create the hack I'm not sure what to do next, probably you will have to create fake .lic files with the proper name (like 202.lic) but the content doesn't matter, so just copy an existing .lic file to a file with the proper name.

author: mikerj
author_rank: Super Contributor
timestamp: July 16, 2015, 11:44:49 am
content: Quote from: PA0PBZ on July 16, 2015, 10:51:17 amPossibly the other way around? The files in dxl's post areorion.cchprtandorion.cchprt.ori, so if one ending in .ori is the original then the values in the first column are the new ones.Also cmp outputs the byte values in octal, so you need to be aware of this if using a hex editor.

author: PA0PBZ
author_rank: Super Contributor
timestamp: July 16, 2015, 11:46:25 am
content: Quote from: mikerj on July 16, 2015, 11:44:49 amYou are totally right. My mind interpreted the list as a patch list

author: harha
author_rank: Contributor
timestamp: July 21, 2015, 06:04:03 am
content: Hi AllHave copied the orioncchprt and use free hex editor neo-it let me choose octal,hex etc---but cant see the addresses mentioned(2530905.....2530908)??I make somthing wrong,but cant figure what?.RegardsPs Have any of you made a script for greater spans?have usedve2zaz python script-works great-but really would like if it could continusly make updates.

author: Pieh0
author_rank: Contributor
timestamp: September 02, 2015, 11:03:24 pm
content: Quote from: helius on July 02, 2015, 04:21:47 amTried doing that, and checked it against dxl's compare between the files, and got totally the wrong results, so after toying around with it, here is the correct command.Code:echo "341C0000" | xxd -r -p -s2530904 - orion.cchprt.modifiedDoing that gets me the correct resultQuoteJust tried it now and it works, rather than crashing on bootup requiring you to do a full install.

author: helius
author_rank: Super Contributor
timestamp: September 03, 2015, 12:02:53 am
content: Good catch, my mistake was relying on the GNU manual page for cmp(1)It doesn't tell you that the output bytes are in octal.

author: harha
author_rank: Contributor
timestamp: October 14, 2015, 05:31:05 am
content: Hi AllHave tried to modify the orion lic file without any luck.Were thinking about if it would be possible to use a working copy of this modified orion.cchprt file from one of your e4406a`s?Or maybe it have to be my orion.cchprt file?-if so i can at least find out to copy and transfer it.Any help welcome.Hardy

author: davorin
author_rank: Unknown
timestamp: October 17, 2015, 01:11:38 pm
content: Let me get this straight...My machine has:Code:252.licBAF.licBAH.licThe license Folder contains also nfstmp files (is there nfs enabled?)with following licenses:Code:FEATURE 202FEATURE B78FEATURE BAEFEATURE BACFEATURE 204The system screen also shows information, that a key is installed, but not the firmware, for example for BAH.lic.So would I also need to install the nirmware or is it enough to just copy over the nfstmp files and reboot?

author: PA0PBZ
author_rank: Super Contributor
timestamp: October 17, 2015, 01:15:15 pm
content: You also need the firmware and enough space to put it on the machine, maybe taking off something you don't need.See my original post in this thread. Also check if the nfstemp files have the correct hostid.

author: davorin
author_rank: Unknown
timestamp: October 17, 2015, 01:19:30 pm
content: Yes the HOSTIDs are all the same....But does for every installed key has to be an installed firmware in the system info menu?Well...what the heck is jwview the Firmware updater is looking for.....(o;

author: PA0PBZ
author_rank: Super Contributor
timestamp: October 17, 2015, 01:21:49 pm
content: Just unpack the updater and move the files you need to the VSA. There is a nice script inside the update package which shows you how it is done

author: davorin
author_rank: Unknown
timestamp: October 17, 2015, 02:01:55 pm
content: Okay...installed a new Firmware for WCDMA and shows as 10.08 now...as also copied over one nfstmp file to 202.lic...seems to work...Guess I can just replace all "Orion.*" files then with the 10.08 files?Or needs the system also to be updated from the "install" folder?

author: PA0PBZ
author_rank: Super Contributor
timestamp: October 17, 2015, 02:07:48 pm
content: I think that the orion files should be used with the corresponding firmware, but maybe that version is already on your machine?ISTR that I downloaded the firmware version that was already on my VSA and took the orion files from there.

author: davorin
author_rank: Unknown
timestamp: October 17, 2015, 02:14:28 pm
content: Well firmware Revision is still shown as 10.05 on top of the system info....

author: PA0PBZ
author_rank: Super Contributor
timestamp: October 17, 2015, 02:16:37 pm
content: Quote from: davorin on October 17, 2015, 02:14:28 pmMaybe not enough difference then? If I remember correctly I once tried an orion file from a different version and it didn't like it.

author: davorin
author_rank: Unknown
timestamp: October 17, 2015, 02:24:06 pm
content: Hmm..bastards....configured telnet in inetd.conf but left out /bin/telnetd....But instead have a web server running (o;

author: davorin
author_rank: Unknown
timestamp: October 17, 2015, 04:04:09 pm
content: Okay...had to reinstall from a VMWare XP Installation on my Macbook (o;Even if recognized as 10.08 in a 10.05 System, the 10.08 firmware piece will crash and you have to power-cycle the machine...

author: RCHRDM
author_rank: Regular Contributor
timestamp: March 23, 2019, 08:47:54 pm
content: HelloHas anyone successfully updated the firmware in the E4406A using the Agilent updater software? I am having problems with this.Richard

author: Kosmic
author_rank: Super Contributor
timestamp: December 15, 2019, 01:28:25 am
content: Quote from: RCHRDM on March 23, 2019, 08:47:54 pmOn Windows 10, for some reason, the shortcut in the desktop was looking for wjview.exe (old Microsoft java runtime) in the desktop folder. I just tweaked the shortcut and changed the path to "C:\Windows\SysWOW64\wjview.exe" and it's working fine for me.

author: Kosmic
author_rank: Super Contributor
timestamp: December 15, 2019, 02:00:19 am
content: I just did the process of patching orion.cchprt and adding some licenses and I just want to leave some info here since it's was not that obvious for me.1-Better to exit the main firmware before trying to patch orion.cchprt. You can exit main firmware by hitting "System -> More ->More -> Install -> Exit Main Firmware"2-You need to get a version of the original orion.cchprt. With a FTP client connect to the E4406A l:vsa p:service. The file orion.cchprt should be at the root (/ffs/users/arcturus/).3-Now patch orion.cchprt (firmware A.10.08) with the following command in Linux:Quote(BTW you can install linux in windows, check the windows store)4-You can validate that the patch worked by running the following command in Linux:Quoteyou should get:Quote5-Now connect again with the ftp client to the E4406A6-Delete orion.cchprt on the E4406A (you should have a backup on your computer)7-upload orion.cchprt.modified8-rename orion.cchprt.modified to orion.cchprt9-Edit the execution rights of orion.cchprt. should be r-xr-xr-x. you need to make sure that all user can read and execute the file or your E4406A will not boot correctly.10-Download one license (.lic) file that you have in ./licenses11-based on the licese file you got, create the one you want. Example, for option BAF. Rename the file to BAF.lic and edit the file to make sure it start with "FEATURE BAF"12-Upload the file to your E4406A in the ./licenses folder.13-Reboot the E4406A. You should now be able to activate the option you want. Don't forget that they need to be installed with the updater.Have fun!

author: RCHRDM
author_rank: Regular Contributor
timestamp: December 15, 2019, 05:12:33 pm
content: Thanks. I was able to get my 4406 updated to the latest firmware eventually. I bought a replacement flash memory board. I also installed licenses.I did have some trouble bringing over one of the cal files and got the correct one from someone else. It is not for my machine, of course, but seems to work OK.Richard

author: tv84
author_rank: Super Contributor
timestamp: September 21, 2020, 07:08:13 pm
content: Gentlemen,@PA0PBZ shared with me theAgilent E4406A VSAbinary.Do you believe thatthisfishing rod can also be used in the VSA?Edit: you must do this patch for it to work also with VSA lics:Code:offset 0x2ACC9: 3A -> 3BThis also works forAgilent E4445A PSA.The license format is:FEATURE115TMOMID01 1.0 permanent uncounted0123456789ABHOSTID=VDH=D1234567

author: vtp
author_rank: Regular Contributor
timestamp: September 21, 2020, 07:58:17 pm
content: Quote from: tv84 on September 21, 2020, 07:08:13 pmI already wrote to you in another thread that it did not work. I could not validate the keys in my E4406A with the given seeds.

author: abyrvalg
author_rank: Frequent Contributor
timestamp: September 22, 2020, 12:59:17 pm
content: https://gofile.io/d/DodUIfThe HOSTID must be set like HOSTID=VSA_HOSTID=12345678

author: PA0PBZ
author_rank: Super Contributor
timestamp: September 22, 2020, 01:48:20 pm
content: Quote from: abyrvalg on September 22, 2020, 12:59:17 pmWindows defender says virus detectedTrojan:Script/Wacatac.B!ml

author: abyrvalg
author_rank: Frequent Contributor
timestamp: September 22, 2020, 02:09:12 pm
content: Strange. I've tested it on virustotal and everything was fine.sha256sum of exe that I've tested: 7ec7041dd75e6dc21bc71fa8a85bf883f8bd447da04378834415f0928fbacfeb

author: PA0PBZ
author_rank: Super Contributor
timestamp: September 22, 2020, 02:21:16 pm
content: I tested both the .7Z and the exe on virustotal and it found nothing, so this must be a false positive.

author: hpls
author_rank: Newbie
timestamp: November 22, 2020, 08:37:57 pm
content: I have a question after the command "cp orion.cchprt orion.cchprt.modifiedecho "341C0000" | xxd -r -p -s2530904 - orion.cchprt.modified "the file generated by Ubuntu creates a 2.4mb file and the original is 5.9mb.when placing in the VSA and changing the permissions the VSA does not start ... I need to go back with the original file ....what can i be doing wrong?