Rigol DP900 / DP2000 Series Hack -  - Page 1
Forum section: electronics / testgear

author: hve
author_rank: Regular Contributor
timestamp: May 11, 2023, 10:37:01 pm
content: This thread is dedicated to hacking the Rigol DC DP900/DP2000 power supplies:ProductTypeMax PowerMax VoltageMax CurrentChannelsPrice (USD)DP2031Power Supplies222 Watts64 Volts10 Amps3$1,199DP932UPower Supplies210 Watts64 Volts6 Amps3$529DP932APower Supplies210 Watts64 Volts6 Amps3$749Platform is based on an Allwinner i40 linux-sunxi platformThere is some firmware available:https://www.rigol.eu/Public/Uploads/uploadfile/files/20230321/20230321002306_6418886a99c29.zipIts a rar archive, extract using:Code:unrar x 20230321002306_6418886a99c29.zipthen there's a GEL file, extract using:Code:tar xvf DP900_DP2000_Update.GEL-rw-r--r-- adil/root 35836928 2023-02-08 13:52 tina-r40-m2ultra.swu-rw-r--r-- adil/root 105900 2022-04-08 04:44 sousa_fpga.024.bin-rw-r--r-- adil/root 185 2023-02-08 13:52 image_info.txt-rw-r--r-- adil/root 108 2023-02-08 13:52 checksum.txtthen there's a cpio archive:Code:cpio -i <tina-r40-m2ultra.swu-rw-r--r-- 1 henk henk 3656 Apr 12 22:04 sw-description-rw-r--r-- 1 henk henk 256 Apr 12 22:04 sw-description.sig-rw-r--r-- 1 henk henk 15728640 Apr 12 22:04 recovery-rw-r--r-- 1 henk henk 1196032 Apr 12 22:04 uboot-rw-r--r-- 1 henk henk 32768 Apr 12 22:04 boot0-rw-r--r-- 1 henk henk 4194304 Apr 12 22:04 kernel-rw-r--r-- 1 henk henk 14680064 Apr 12 22:04 rootfsThen there's a squashfs filesystem:Code:file rootfsrootfs: Squashfs filesystem, little endian, version 4.0, xz compressed, 14674551 bytes, 1446 inodes, blocksize: 262144 bytes, created: Wed Feb 8 12:49:37 2023So we have a sunix linux system running on your PSU unit together with an FPGA.Firmware updates are controlled by swupdatehttps://sbabic.github.io/swupdate/sw-description.htmlUpdate command:Code:swupdate -n -k /etc/swupdate_public.pem $check_version_para $swu_param -e $swu_software,$swu_mode >> $swupdate_log_file 2>&1File/etc/swupdate_public.pem(RSA 2048):Code:-----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO//XV7kM2qvOjdcmqlFJlzzHZtE3uu9GE5Vu7ba2jrqhhHy9ivXOb7kWbeIM3Jb5dqqAP1jaDjO7A+WF47RWakMpv++MxDQP/oJNtlcGIraqSBRRxl+N/mIljA+G4uP/ZbLKDcWbh2fQr0yQ1T90KK1o10mTKzIvWGP5a7VNVlIfUd1KPjxzTFcFEcBcb7Hy6gVZYFmxdmFAicwVaG8vHl2OUzG4I4rOVTdwGNp9ivsy3MqJjtHl4uY5HH+cubNnV8V6PaLtDi4YnZiP8cwdDDY15h95NZ/2+FJCArc4oRaWQQ0VDxQ/9DLLdRYFbVZ1GSDuZ30cHJIIeqviGIolwIDAQAB-----END PUBLIC KEY-----

author: Userli
author_rank: Regular Contributor
timestamp: July 03, 2023, 04:26:23 pm
content: The model is encrypted and hidden in the file /mnt/app/private/test.dll .I created the attached file, which hopefully changes the model to DP932A and does not break anything else.Make a backup and use at your own risk.

author: Xoff
author_rank: Contributor
timestamp: July 03, 2023, 07:18:19 pm
content: It's working!Thank you Userli! I would like to confirm, that after replacing original test.dll with yours and restarting my DP932E, now it is reporting DP32A model.All other data are intact (calibration status & date, firmware version (00.00.01.00.20) and unit serial number).The following options are installed (and working fine): HIRES, ARB, DIOMonitor option however is not installed.GOOD JOB!

author: Userli
author_rank: Regular Contributor
timestamp: July 04, 2023, 04:47:51 pm
content: I didn't see it mentioned anywhere yet:The initial password for the web interface isRigol1998The username is empty.The web interface seems pretty useless though, only allowing to change the network parameters, which somehow is a catch 22 .

author: Userli
author_rank: Regular Contributor
timestamp: July 11, 2023, 04:14:05 pm
content: A small change to enable the monitoring option. I only gave it a quick try. There might be a reason, why you can't buy the option currently. Use at your own risk!Apply the attached patch to the version 21 SousaMain file (MD5: 4a0c633eadc7c0f7009a464a16d35747). After patching the MD5 should be fd14f9a93f4310ccbe8b9171ff4ebf25 .

author: Xoff
author_rank: Contributor
timestamp: July 11, 2023, 05:08:49 pm
content: Quote from: Userli on July 11, 2023, 04:14:05 pmAre you referring to to the newest FW upgrade version 00.00.01.00.21 (dated 25/05/2023)?Yesterday have upgraded my DP932E from version 00.00.01.20 (from 08/02/2023) with no need to change 'mnt\app\private\test.dll' file.Didn't notice any changes to DP900 power supply so fare...

author: Userli
author_rank: Regular Contributor
timestamp: July 11, 2023, 05:10:48 pm
content: Yes, this is the version I was referring to.The test.dll should be independent of the version.

author: Xoff
author_rank: Contributor
timestamp: July 11, 2023, 05:17:49 pm
content: Thank you Userli,Unfortunately I don't know how to patch SousaMain file.I can upload/download it from root\mnt\app\ (using SSH file transfer protocol).Can you please explain, how I can apply the patch?

author: Userli
author_rank: Regular Contributor
timestamp: July 11, 2023, 05:33:25 pm
content: It's a standard bpatch. You could do for instance:bspatch.exe SousaMain SousaMain_patched SousaMain_patchSousaMain_patched would be the new file.

author: Xoff
author_rank: Contributor
timestamp: July 11, 2023, 06:10:04 pm
content: OK. Working great! After the restart of DP932A(E) 'option' Monitor is now active (of course it is NOT mentioned in 'Utility >Option' menu.Thank you again for your help!To control my instruments I'm using M1 macOS (Monterey v12.6.7), so to patch SousaMain file, I have used MultiPatch 2.0 app (by Paul Kratt from GitHub). The trick is, you have to add BDF extension to your 'SousaMain_patch.bdf' file. You also need to change permissions of patched file to match original SousaMain (-rwxrwxrwx). New file has the same file size of 23705744 bytes.

author: Userli
author_rank: Regular Contributor
timestamp: July 11, 2023, 06:17:00 pm
content: Well done!I found that the monitor switches off after triggering, which doesn't seem very user friendly to me. Maybe this can be tweaked....

author: Xoff
author_rank: Contributor
timestamp: July 11, 2023, 06:36:32 pm
content: In 'Monitor > CH1' menu you can set various output conditions for Volts, Current and Power, as well as, (after pushing the 'Settings' button) three actions (to be selected independently): 'Output Off', 'Warning' and/or 'Beeper'.So fare Output Off and Warning are working great in my instrument. However no 'Beeper' tone ever triggered.So if you want to be only warned of some output conditions, you can select checkbox 'Warning', while leaving 'Output Off' unchecked.You are right that after the first message 'Monitor Warning', monitoring switches off, but otherwise you will be 'spammed' the same message again and again (on screen and in the LOG). For the 'Beeper' however this behaviour is not needed. Maybe this is the reason why the 'Monitor' option is not officially released yet?

author: KrzysztofB
author_rank: Regular Contributor
timestamp: July 12, 2023, 07:12:48 am
content: Hi.Any chance of enabling HiRes and High current mode on 2000 model?

author: Userli
author_rank: Regular Contributor
timestamp: July 12, 2023, 07:53:31 am
content: Try the attached patch, also for version 00.00.01.00.21 . At your own risk!

author: Xoff
author_rank: Contributor
timestamp: July 12, 2023, 08:19:37 am
content: Checked new patch on original SousaMain, but no new options on DP900

author: Userli
author_rank: Regular Contributor
timestamp: July 12, 2023, 08:33:29 am
content: To my understanding, the 10A option requires the DP2000 hardware. So even if you would enable it on your DP900, it wouldn't work. If somebody finds that this is not the case, I'll be happy to look, how to enable this option for the DP900, too.It would in fact be nice to have pictures of the interior of both devices.

author: KrzysztofB
author_rank: Regular Contributor
timestamp: July 12, 2023, 08:51:03 am
content: I have DP2031 PSU so can try that.There were inside pictures in the past here in one of my posts.https://www.eevblog.com/forum/testgear/rigol-dp2031/msg4551335/#msg4551335

author: KrzysztofB
author_rank: Regular Contributor
timestamp: July 12, 2023, 09:33:23 am
content: I patched SousaMain with last patch you sent.Seem like Monitor got activated, however Options: HADC and 10A are not installed.

author: Userli
author_rank: Regular Contributor
timestamp: July 12, 2023, 11:20:15 am
content: Indeed interesting. It was not straight forward. Hopefully the attached patch works.

author: KrzysztofB
author_rank: Regular Contributor
timestamp: July 12, 2023, 01:17:56 pm
content: Tried it.Now when you go to Options window it says:HADC: Office, 10A: OfficeBut not possible to lift current limit to 5A

author: Userli
author_rank: Regular Contributor
timestamp: July 12, 2023, 01:34:35 pm
content: Interesting! Faking a DP2031 on a DP932, I could set the current limit to 10A on CH3 . Does the high speed sampling work?

author: Userli
author_rank: Regular Contributor
timestamp: July 12, 2023, 01:39:59 pm
content: Here pictures of the internals of the DP932:The transformer is different, 2 ADCs SGM58600 are missing and a few other parts.

author: KrzysztofB
author_rank: Regular Contributor
timestamp: July 12, 2023, 04:48:44 pm
content: Will check tomorrow.But. Do I need to change that dll file also? Or only patch?

author: Userli
author_rank: Regular Contributor
timestamp: July 12, 2023, 05:02:34 pm
content: For the DP2031 you don't need to change the test.dll . Please note that only channel 3 allows for 10A.

author: KrzysztofB
author_rank: Regular Contributor
timestamp: July 13, 2023, 08:17:02 am
content: Quote from: Userli on July 12, 2023, 05:02:34 pmI didn't note the fact it's for CH3, thanks for pointing that. That was absolutely spot on. Works like a charm. High sampling rate also.Also, a note, that when 10A is enabled, CH1 and CH2 have to go down to 2A.

author: Userli
author_rank: Regular Contributor
timestamp: July 13, 2023, 09:46:58 am
content: Glad it works!Do you know if the high sampling rate also works for Ch3?If I might ask, could you take some pictures of the connectors for the remote connections on the back and possibly measure the pitch? I assume those are also Würth connectorshttps://www.we-online.com/en/components/products/em/connectors/terminal_blocks/pluggable_connector_contbl3but they exist in different pitches (5mm and 5.08mm).

author: KrzysztofB
author_rank: Regular Contributor
timestamp: July 13, 2023, 10:37:40 am
content: Digital I/O connector is 5pin 3.81mm pitchCH3 is 4pin 5mm pitch, CH1/2 is 8 pinActually after checking 8 pin CH1/2, i think it's more 5.08mmBut those are nearly identical. (7x0.08mm) 0.56mm over 8 pin connector wouldnt make any differenceManual states:DP2000 series power supply provides three preset current sampling rate options forCH1 and CH2.Tap CurrSampRate drop-down button to select 3.75K SPS, 7.5K SPS, or 29 SPS.

author: manupthehills
author_rank: Contributor
timestamp: July 13, 2023, 06:11:00 pm
content: Slightly OT:We have two DP932A, from the front panel they were showing FW 01.00.01, so I upgraded one with the latest FW available (that should be 01.00.21).Now the display shows 00.00.01. Very interesting.So I connect them to the PC, and the firmware shown is:- 01.00.01.00.16 for the stock one- 00.00.01.00.21 for the upgraded onePlease note the 01 at the beginning of the stock one. Which one is the latest?? What is the first 01 meaning?Anyone found a revision history for these FW?Thanks!

author: tv84
author_rank: Super Contributor
timestamp: July 13, 2023, 10:15:20 pm
content: I think that 01 means "Beta" FW. Not for release.

author: Userli
author_rank: Regular Contributor
timestamp: July 16, 2023, 09:29:25 am
content: I investigated the possibility to add remote sensing to the DP900 series. The cut outs in the housing exist, so it would be easy to add the connectors.On the PCB it looks like mainly 3 relays with their periphery would need to be added. I was able to deduce the relay driver components from other relays on the board (see attached image) but not the ones in the signal path. Unfortunately the resolution of the DP2031 images is not sufficient to see the component values in this region.@KrzysztofB if you still have the original of your board images, would you mind to post a highres version of the region corresponding to the attached image? It's on the top PCB.

author: KrzysztofB
author_rank: Regular Contributor
timestamp: July 16, 2023, 08:10:57 pm
content: Can make those on Monday

author: Userli
author_rank: Regular Contributor
timestamp: August 03, 2023, 07:49:36 am
content: I populated the parts required for switching to remote sensing but somehow can't make it switch. The panel will indicate that it is using 4 wires but the signal to the relay doesn't get set. The line for this signal originates from the IC on the attached picture. Does anybody know, what it is? I can't find any information about it, so I assume it is a custom chip? It also handles the ADC signals.

author: 2N3055
author_rank: Super Contributor
timestamp: August 03, 2023, 08:32:11 am
content: Hercules Microelectronics HME-H3 FPGA

author: ArcticGeek
author_rank: Regular Contributor
timestamp: August 15, 2023, 09:37:53 pm
content: @userli @xoffSorry for my ignorance, but can give me some more info on how you are changing this test.dll file? How are you accessing the file system on the power supply?I have a DP932E on order, and if I can convert this to the DP932A it would be super cool (it won't arrive until sometime in Sept)I'm a bit of a hardware bigot, so I'm a bit of a fish out of water when it comes to software stuff, but with some good instructions I can probably manage.Thanks,

author: MaTkEOxjC
author_rank: Contributor
timestamp: September 04, 2023, 06:55:34 pm
content: Very nice, also upgraded my DP932E to a (almost) DP932A with Arb, HighRes, Monitor, DigitalIOReplaced test.dll with the file from here;Quote from: Userli on July 03, 2023, 04:26:23 pmGot the SousaMain file, patched it and uploaded it again via SCPQuote from: Userli on July 11, 2023, 04:14:05 pmSSH Password is Rigol001 (already posted by another user)Kinda interesting that the DP932A is specified with 32V for Ch1&2 and DP932E is specified with 30V

author: MaTkEOxjC
author_rank: Contributor
timestamp: September 04, 2023, 07:11:57 pm
content: Quote from: ArcticGeek on August 15, 2023, 09:37:53 pmYou can use SCP (secure copy) to transfer the files.I'm using a Linux laptop for that, you need to look for a ssh/scp tool on your OS.It's located in /mnt/app/private/test.dllSo your command would be: (you need to adapt the IP of the device and the local target directory.$ scp root@192.168.XXX.XXX:/mnt/app/private/test.dll ./local_target/directory$ scp ./local_source_directory/text.dll root@192.168.XXX.XXX:/mnt/app/private/Always make backups and save the previous states.Only restart when everything has been changed.

author: ArcticGeek
author_rank: Regular Contributor
timestamp: September 05, 2023, 08:23:30 pm
content: Thanks for the reply.I'm still wondering how you are accessing the file system from your laptop.My assumption is that you are connecting is serial cable from the laptop to the power supply and using SSH to establish the connection - is that right? What baud rate/parity/stop bit setting are you using for this?Or am I way off base in my assumption and I would need to do something else?

author: Quarren42
author_rank: Newbie
timestamp: September 13, 2023, 03:58:29 pm
content: Quote from: ArcticGeek on September 05, 2023, 08:23:30 pmThe power supply has an Ethernet port in the rear, which you connect to in order to SSH into it. It'll auto-configure the IP address, which you can find in the power supply menus. You'll then SSH with username "root" and password "Rigol001" and can follow the commands MaTkEOxjC posted.Worth mentioning that I did this on windows and the scp command didn't work for me, but I still got the files over by using a flash drive inserted in the front USB port. The flash drive will mount to /mnt/UDISK (may be EX_UDISK, not currently at bench to verify) which you can then copy the files off of using the cp or mv command when SSH'd into the power supply.

author: bobo1239
author_rank: Newbie
timestamp: October 02, 2023, 03:21:20 pm
content: My newly arrived DP932E (calibrated on 2022-12-02) didn't have a/mnt/app/private/test.dll(just atest2.dllwhich is different). The hack still worked though so just a PSA.

author: PeterB
author_rank: Newbie
timestamp: October 02, 2023, 06:27:54 pm
content: Somewhere in the thread the following is written:"Kinda interesting that the DP932A is specified with 32V for Ch1&2 and DP932E is specified with 30V"Can anyone confirm that when applying the hack to a DP932E, the range moves from 30V to 32V, or does it just stay at 30V.If the latter, it makes me wonder whether there are minor HW differences on the DP932E compared to the DP932U/DP932A which limits the range on the DP932E to 30V.

author: bobo1239
author_rank: Newbie
timestamp: October 02, 2023, 08:17:36 pm
content: My stock DP932E was able to reach 31.50 V before the firmware would refuse to go further. After the hack the limit is 33.600 V.

author: ToThePub
author_rank: Contributor
timestamp: October 02, 2023, 11:57:33 pm
content: Interesting. I have a DP832 (yes different to the DP900/DP2000, it's fully unlocked) and the firmware (which is unmodified/unpatched) allows setting 32V/3.2A on the high outputs and 5.3V/3.2A on the low output.Documented (and marked on the front of the machine) specs are 30V/3A and 5V/3A.So it seems Rigol have previous allowed their power supply to "overclock" a little.

author: LogicalDave
author_rank: Regular Contributor
timestamp: October 13, 2023, 07:33:45 pm
content: Has anyone tested the current measurement accuracy of the hacked HIRES feature?The 932E is priced attractively but seems to be a broken 932A (1mA current resolution but worse than 10mA accuracy is just silly and not having a sense input is odd for a PS at this price-point).Also, are any of the DP power supplies silent (fan not running) under light load?Thanks!

author: thm_w
author_rank: Super Contributor
timestamp: October 13, 2023, 10:29:06 pm
content: Quote from: LogicalDave on October 13, 2023, 07:33:45 pmThe datasheet accuracy spec is 0.15%+5mA, where did you get 10mA from? Usually the fan is always running but I don't have one to say for sure.Sense input is not really needed on a 3A output, and there is no space on the front panel.You can read a bit more here:https://www.eevblog.com/forum/testgear/news-about-rigol-dp932e/

author: d.v.ermakov
author_rank: Newbie
timestamp: December 19, 2023, 07:09:53 pm
content: Hi all.Just received DP932E with firmware 00.01.01.00.22. Port 5025 was not answer, downgrade to 00.01.01.00.20 was not successful. Any known ways to open SSH/SCP port for change test.dll? SCPI command or direct connection to PCB? Or, maybe, how to downgrade firmware?

author: sensille
author_rank: Newbie
timestamp: December 21, 2023, 07:51:20 am
content: After 2 weeks of waiting I received my DP932e directly from Rigol. Firmware identifies as 01.00.01. ssh into it works with the know password. Something is listening on port 5025. Haven't tried anything else yet.

author: hve
author_rank: Regular Contributor
timestamp: December 21, 2023, 11:17:39 am
content: Quote from: LogicalDave on October 13, 2023, 07:33:45 pmNo on my 2031 the FAN is always on, slightly annoying.Still running the old firmware...

author: sensille
author_rank: Newbie
timestamp: December 22, 2023, 01:47:53 pm
content: The stock firmware in my DP932 is 01.00.01.00.16. I can confirm that replacing test.dll works as expected. After the report from d.v.ermakov I don't dare to upgrade to .22. Version .21 is not available anymore. Does anyone still have it and would be willing to provide it?Or the other way round, can anyone confirm that .22 does not close the ssh port?

author: Ronnyvs
author_rank: Contributor
timestamp: December 23, 2023, 10:50:25 pm
content: Hello all,At first wish you all happy Holydays!!I got my DS932E today, and i did the update with the test.dll from Userli...But now is my next question...I also want to open the monitor function...My model is according to the "about" screen DP932Aand my firmware version is in the "About" screen 00.01.01now when i login in the userinterface, it tells me that my firmware version isFirmware Revision: 00.00.01.00.01With this firmware , i think, its not good to patch it...But when i download the new firmware it is the .22 firmware...so i think i don't can patch this either...i think, i can only patch the .21 firmware with the software patch from userli...am i right or am i totally wrong?waiting for an answer,friendly regards!!Ronnyvs

author: Ronnyvs
author_rank: Contributor
timestamp: December 23, 2023, 11:01:02 pm
content: Quote from: d.v.ermakov on December 19, 2023, 07:09:53 pmYou have to use port 22 sshputty or winSCP (SFTP)username: rootpasswd: Rigol001

author: BC547B
author_rank: Contributor
timestamp: December 29, 2023, 11:37:51 am
content: Hi, I have a DP2031, FW ver. 00.01.01After I overwrote the original SousaMain with the patched SousaMain file, and rebooted the PSU. It hangs at boot, I had to re-upload the original file. I don't know what am I doing wrong.Here's what I've done hopefully someone will point me in the right direction, and will be a guide for FW hacking beginners and newcomers like me:0-:I've downloaded the SousaMain file from my PSU by connecting it via ethernet using scp root@[rigol psu ip]:/mnt/app/SousaMain /SousaMainOriginal1-[Download the patch]:I've downloaded the SousaMain patch by userli attached in hisReply #182-[Patch Sousa Main]:I've patched the original file using bspatch.exe that I've downloaded from Romhacking.net and then executedbspatch.exe SousaMainOriginal SousaMain_patched SousaMain_patch3- Renamed the patched file to SousaMain4-[Upload the patched file to root directory]:scp /SousaMain_patched root@[rigol psu ip]:/5- [SSH to the machine] SSH'd to the PSU6- Moved the file to /mnt/app using: mv SousaMain /mnt/app7- On the PSU went to Utility > Option, it kept saying HADC: not installed, 10A not installed.8- Turned it off and back on. It shows the Rigol logo and starts filling up the loading bar and then stops.9- I got lucky and I could still SCP/SSH to it to reupload the original file10- I've tried all the above again and still faced the same problem.I hope someone would let me know what I'm doing wrong.-There are few things I don't understand:- Could someone explain what does the swupdate command posted by hve in the beginning of this post do? Do I need to execute it on the psu to be able to apply the patch by userli?- Do I have to repatch when a new firmware is released?Thank you

author: Ronnyvs
author_rank: Contributor
timestamp: January 02, 2024, 11:15:37 pm
content: Hi BC547B,When you say your firmware is: FW ver. 00.01.01Then this is not the whole firmware syntax...The whole firmwaresyntax looks like: 00.01.01.00.22,Where te last number is the actually version where Userli made the patch for...and the patch is made for .21 at the end.To check your version, you can login with the ultrasigma tool from Rigol and do an SCPI command "*IDN?"this gives you the full info about your device... It looks like this:*IDN?Rigol Technologies,DP932A,DP9D123456789,00.01.01.00.22If you want to patch it your firmware has to be 21 at the end.To check the MD5 you can test it on:https://emn178.github.io/online-tools/md5_checksum.htmlIn this threat Userli also wrote down the MD5 file-size from Sousamain before and after the patch.These numbers should be the same!Regards,Ronny

author: Ronnyvs
author_rank: Contributor
timestamp: January 02, 2024, 11:47:37 pm
content: As i'm still writing now,i will post my remote control which i made for the 932 power supply's.I only tested it with mij 932, but i think it wil work with most of the Rigol powersupply's.I made it by changing the web-control from the known BB3-powersupply.It's working and still very simple...you can set the voltage and current, it shows in which mode it works and the meters for reading out are live.they show U, I and P.I post it now, so that other smart and willing engineers and hobbyists like it to make it more and better.I only did the start...It's working with eez-studio and that a very nice tool to operate other devices(including a lot of Rigol Scopes)eez-studio download:https://www.envox.eu/studio/studio-introduction/my projects are attached...the project-file is to run and the dashboard-file is to edit.have fun with it!

author: BC547B
author_rank: Contributor
timestamp: January 03, 2024, 10:18:12 am
content: Hello Ronnyvs, thanks for pointing out the required version for the patch to work, mine says .22unfortunately I couldn't find .21 firmware anywhere on the internetI just downloaded Eezstudio, is this a software that allow me to control my lab equipment from the computer? And you project is like a plugin for it to work on the DP900 and DP2000?

author: sensille
author_rank: Newbie
timestamp: January 03, 2024, 10:24:19 am
content: At least that information confirms that even with .22 the ssh port is still open, so I can update from .16 to .22 nowIf someone provides the SousaMain from .21 I can try to port the patch to .22.

author: Ronnyvs
author_rank: Contributor
timestamp: January 03, 2024, 11:54:48 am
content: Glad that it became more clear with the firmware.Maybe Userli can write a patch for the .22....According to EEZ-studio...with EEZ-studio , you can write software which control equipment...for example GUI's for stm32, arduino , webapplications etc...with the last one , i made the control for the powersupply.if you open eez-studio, then in EEZ-studio you can open my files and control the powersupply.Its possible to have a lot of devices, or projects opened at the same time..i also use an other instrument from Rigol to open the connection to the device...although i noticed another port in this forum, the port=5555In my software there has to be made an connect/disconnect button... (still not there)Let me know if it works...Ronny

author: ivantankj
author_rank: Newbie
timestamp: January 04, 2024, 05:55:41 am
content: Hi All,I believe this is the firmware 00.21 that everyone of you are looking for?Need some verification because the website seem to have mislabeled it as .20. This firmware dates 25th May 2023. My unit has not arrived yet so can't verify at the moment.https://drive.google.com/file/d/1Wlrnk3dYLdw3fNQwgDsmt8e85K32Fa6g/view?usp=sharing

author: sensille
author_rank: Newbie
timestamp: January 04, 2024, 08:31:59 am
content: Quote from: ivantankj on January 04, 2024, 05:55:41 amI can confirm that the contained SousaMain has the expected md5sum of 4a0c633eadc7c0f7009a464a16d35747.

author: ivantankj
author_rank: Newbie
timestamp: January 04, 2024, 09:14:08 am
content: Quote from: sensille on January 04, 2024, 08:31:59 amFantastic! So you have managed to downgrade your firmware from .22 successfully?

author: BC547B
author_rank: Contributor
timestamp: January 04, 2024, 10:49:39 am
content: Hi Ronny, first I'd like to thank you for introducing me to this software I didn't know there's something like that! is this supposed to work on DP2000 series? I've never used this EEZsoftware before, but when I click run all I see is a dialog box called instrument and the list is empty and close and select, even though I have my psu online and pingable. The error is Not connected to the instrument.

author: Ronnyvs
author_rank: Contributor
timestamp: January 04, 2024, 11:37:59 am
content: Hello BC547B,i already noticed this in my last post:"i also use an other instrument from Rigol to open the connection to the device...although i noticed another port in this forum, the port=5555In my software there has to be made an connect/disconnect button... (still not there)"what i did:een eez-studio-> tab"Home"At the right top the green button "add instrument"choose from Generic SCPI (only use it for making an connection...)Then on the SCPI-Instrument you can open the connection to your powersupplyNow open the powersupply from the file i made and you can control itThe files i made hasn't been converted to a "instrument"I would also like to add a connect/disconnect button.Then you don't "need "another device for making the connection...Ronny

author: sensille
author_rank: Newbie
timestamp: January 04, 2024, 01:05:41 pm
content: Quote from: ivantankj on January 04, 2024, 09:14:08 amNo. For one my device is still on the stock .16 it arrived on 2 weeks ago. My plan is to try to port the patch to .22 first.

author: ivantankj
author_rank: Newbie
timestamp: January 04, 2024, 01:46:20 pm
content: Quote from: sensille on January 04, 2024, 01:05:41 pmI just received my unit and it's on firmware .22 unfortunately but I managed to get the test.dll file onto the PSU and it unlocked the usual 3 options. I guess I have to wait for you or someone to port the patch to .22 then. Thanks for looking into it.

author: sensille
author_rank: Newbie
timestamp: January 04, 2024, 03:02:36 pm
content: Quote from: ivantankj on January 04, 2024, 01:46:20 pmIf you feel adventurous, I have the ported the patch from Userli to .22, but haven't tested it yet. I plan to do the update and test on the weekend.SousaMain original: ec69fba52309f6370ed81c55552c4e08patched: 5e277fe9ad537a6918ec22ecc696e3f7

author: ivantankj
author_rank: Newbie
timestamp: January 04, 2024, 04:00:50 pm
content: Quote from: sensille on January 04, 2024, 03:02:36 pmI'm all for adventure! And guess what? It works!The patch file you have attached has some character encoding issues on the filename I think, I had to rename it totally for bspatch to work properly.Attaching the renamed patch in this reply as well.Thanks once again Genius!

author: Ronnyvs
author_rank: Contributor
timestamp: January 04, 2024, 04:30:52 pm
content: Hi all,very nice the patch for .22 works!!! Good job! (didn't tested it myself, i'll try it this week)I was busy with my eezproject to make the power supply as an Instrument.Glad, now it works! The connect button works well and the Instrument is also working...For those who like it to give it a try, i added the zip file (you can immediately add it as an instrument in EEZ studio)I also made an instruction manual how i made the an instrument of an "dashboard"-filethis is also added as an pdf-filehope you all will appreciate it...Ronnyvs

author: BC547B
author_rank: Contributor
timestamp: January 04, 2024, 06:12:25 pm
content: Hi, thanks sensille for supplying the patch and thanks ivantakj. I patched mine the check sum is the same as the one you provided but didn't work it still says: HADC: not installed and 10A not installed. But the monitor feature now works... but the others are not.Ivantakj can you confirm that HADC and 10A are working for you please? because here they are still not installed, I checked that by trying to set 10A manually on channel 3 (because it's the only channel that allows 10A) and also by going to utility > option. I've attached some photos.Thanks!

author: ivantankj
author_rank: Newbie
timestamp: January 04, 2024, 10:27:25 pm
content: Quote from: BC547B on January 04, 2024, 06:12:25 pmHi, there are actually 2 different patches for both the DP900 and the DP2000 series. This one we are talking about now is for the DP900 series and for me personally, the DP932E specifically. You could perhaps request the Genius for the DP2000 version be ported as well.

author: sensille
author_rank: Newbie
timestamp: January 05, 2024, 07:10:40 am
content: Quote from: ivantankj on January 04, 2024, 10:27:25 pmI have much less confidence with that one. No idea what Userli has done there. So if it works, all credits to them, if not, all blame on me.Patched md5sum is 365adc3f5d69599eb6ac7c54c333ea45.

author: Ronnyvs
author_rank: Contributor
timestamp: January 05, 2024, 03:44:36 pm
content: Things with EEZ Studio are working really well...

author: BC547B
author_rank: Contributor
timestamp: January 05, 2024, 04:34:40 pm
content: Hi sensille! Thank you ever so much for porting the patch to DP2031 FW version ending with .22 I confirm that the patch is working!And thank you to Userli for making all this magic happen!With this patch SousaMain_patch_22_2031.zip posted by sensille I've achieved- High Current Option: CH3 10 A high range mode- Fast Sampling: 7.5 k/s high-speed sampling option- Monitor Mode: You can set the power supply to watch over voltage current power and either warn you or turn the output off or make a beepI've attached pictures to confirm it's working!Happy New Years guys thank yyou!!

author: BC547B
author_rank: Contributor
timestamp: January 05, 2024, 04:48:23 pm
content: Hi Ronnyvs! WOW dude this is looking good already! Can't wait to try it on the DP2031 tomorrow! I hope it works on mine!Thanks for sharing you work with us!

author: ivantankj
author_rank: Newbie
timestamp: January 06, 2024, 05:24:25 am
content: One of the features of the Rigol PSUs is the data logger in *.ROL format.The following package from Rigol specifies the long arduous process of reading these proprietary files.

author: Phili76
author_rank: Contributor
timestamp: January 07, 2024, 12:21:00 pm
content: Thanks sensille & Userli! Another DP2031 working!Had some issues with the md5 not matching but found out that mine was still on 00.00.01.00.19. (md5 7ad7aeb10e312aa11eded45a098de412) So checking md5 before helps.Did an update, back to Chinese language, recognized as an DP932, hard reboot, change of file, hard reboot and all OK: 10A, HADC and Monitor.EEZ Studio is also great, for the DP2031 only the 6V/3A has to be changed to 6V/10A (or 5A). Another rabbit hole to go down.Thanks!!

author: Ronnyvs
author_rank: Contributor
timestamp: January 07, 2024, 06:20:22 pm
content: To Phili76 and all the others,I made some changes to the EEZ-file's.i can't test them by myself, but i think they should work...Just le me knowSucces,Ronny

author: eebc
author_rank: Newbie
timestamp: January 08, 2024, 09:20:29 am
content: Quote from: ivantankj on January 04, 2024, 04:00:50 pmHi, I have a DP932U, firmware version 00.01.01.00.22, replaced the test.dll and patched SousaMain with the patch file above. I wasn't able to use the Monitoring function. What was the step missing to enable that? Thanks.

author: Ronnyvs
author_rank: Contributor
timestamp: January 08, 2024, 05:19:44 pm
content: I think,not sure,The patchfile above was written for the 2031 serie...

author: Phili76
author_rank: Contributor
timestamp: January 08, 2024, 08:05:49 pm
content: DP2031-1.0.1.zip(443.82 kB - downloaded 95 times.)weird, nothing matches the "CH3:6V/10A" reply.Found the SwitchCase is missing the 5A and 10A and the slot widget data also.maybe, :!loaded ? 0 : slot.model == "32V/3A" || slot.model == "6V/3A" || slot.model == "6V/10A" || slot.model == "6V/5A"? 1 : 2Don´t know if the instrument is correct, but it´s working with my DP2031.brphilipp

author: Ronnyvs
author_rank: Contributor
timestamp: January 08, 2024, 10:07:17 pm
content: Hi Philipp, i think your correct.It's hard to make something and you can't test it by yourself.Therefore i uploaded everything including all files, so anybody can edit and modify it.according to me, one of the main reasons to publish on forums and share knowledge.so thanks and hopefully other people can also modify, add and upgrade it.regards,Ronny

author: eebc
author_rank: Newbie
timestamp: January 09, 2024, 07:37:52 am
content: I tried to patch the .22 SousaMain with the patch from Userli in reply #4. Now the DP932U got stuck in the boot up screen forever....Please help if anyone knows how to fix it.Updates:I am lucky that WinSCP can still connects to the device. I was able to access the device through ethernet. Glad that I can revert it back to the .22 SousaMain before Patch. I would better wait for some Genius to figure out the hack for enabling monitoring on DP932U with .22 firmware....

author: ivantankj
author_rank: Newbie
timestamp: January 09, 2024, 12:56:47 pm
content: Quote from: eebc on January 08, 2024, 09:20:29 amIf you use the patch that I’ve attached in the above post and not the one originally from Useli (meant for .21), you should easily access the on screen monitor option after a reboot. Works the first time around for me. Make sure you get a new patched file after patching and rename that to the original SousaMain without any file extensions

author: eebc
author_rank: Newbie
timestamp: January 10, 2024, 06:19:17 am
content: Thanks ivantankj, I tried the patch file you posted. That works for the DP932U! Thanks a lot.

author: mm1
author_rank: Newbie
timestamp: February 25, 2024, 11:31:39 am
content: Quick note - Rigol Canada has the DP932U on sale at %50 off. $350 cnd seems like good value for the supply. Even if it does has the safety banana plugs......

author: mm1
author_rank: Newbie
timestamp: March 01, 2024, 11:17:02 am
content: Hi,Does anyone have the "Monitor" function working ? What is it ? - I don't see anything in the user manual.Thanks !

author: thm_w
author_rank: Super Contributor
timestamp: March 01, 2024, 10:31:04 pm
content: Quote from: mm1 on March 01, 2024, 11:17:02 amI didn't get the PSU yet but monitor should let you set various logic for over/under voltage over power, etc. and then switch off the output. If its the same as on the DP800 manual:https://beyondmeasure.rigoltech.com/acton/attachment/1579/f-01c1/1/-/-/-/-/DP800%20Datasheet.pdfDoes it open for you at all, or tell you its not licensed or something?

author: mm1
author_rank: Newbie
timestamp: March 02, 2024, 11:05:09 am
content: Hi thm_w,It says 'Option is not installed, please buy it". Which is interesting as I don't see it's an option for sale. There is over current and over voltage protection, so I'm not sure what other value this would bring.Cheers !

author: thm_w
author_rank: Super Contributor
timestamp: March 12, 2024, 01:01:52 am
content: For some reason my PSU would detect the USB key but not show any files on it.So I used the bootloader to upgrade: Power on, keep pressing the Utility button, screen will show up with four options (Key test, LCD test, Downgrade, Return). Select Downgrade and it should find the GEL file now. Once it finished booting you'll need to go back to Settings, System (first tab) and change the language back to English.After that now the PSU reads the USB key (exUDISK or exUDISK2), so maybe some early FW bug.Summary:- Updated to .22 (link)- Connect PSU via ethernet and set/find IP address- Login to that IP with SSH using Putty, port is default 22. When prompted, log in with user: root, pw: Rigol001- Copy SousaMain from PSU to USB (type: cp /mnt/app/SousaMain /mnt/exUDISK/)- Patch SousaMain using bspatch tool using the command line (bspatch SousaMain SousaMainPatched SousaMain_patch) (patchherefor DP900)- Backup original file on PSU if you want (mv /mnt/app/SousaMain /mnt/app/SousaMain.backup)- Copy patched SousaMain with SSH back to the PSU (cp /mnt/exUDISK/SousaMain /mnt/app/SousaMain)- Copied test.dll with SSH (cp /mnt/exUDISK/test.dll /mnt/app/private)note: sometimes the USB shows as exUDISK, or sometimes as exUDISK2 so maybe open it first to verify.I will pay if someone wants to patch out the garbage font rigol decided to use for the main display.

author: thm_w
author_rank: Super Contributor
timestamp: March 15, 2024, 12:06:50 am
content: I see the following in /etc/fonts/conf.d:Code:-a---- 12/03/2024 4:33 PM 0 10-hinting-slight.conf-a---- 12/03/2024 4:33 PM 0 10-scale-bitmap-fonts.conf-a---- 12/03/2024 4:33 PM 0 20-unhint-small-vera.conf-a---- 12/03/2024 4:33 PM 0 30-metric-aliases.conf-a---- 12/03/2024 4:33 PM 0 30-urw-aliases.conf-a---- 12/03/2024 4:33 PM 0 40-nonlatin.conf-a---- 12/03/2024 4:33 PM 0 45-latin.conf-a---- 12/03/2024 4:33 PM 0 49-sansserif.conf-a---- 12/03/2024 4:33 PM 0 50-user.conf-a---- 12/03/2024 4:33 PM 0 51-local.conf-a---- 12/03/2024 4:33 PM 0 60-latin.conf-a---- 12/03/2024 4:33 PM 0 65-fonts-persian.conf-a---- 12/03/2024 4:33 PM 0 65-nonlatin.conf-a---- 12/03/2024 4:33 PM 0 69-unifont.conf-a---- 12/03/2024 4:33 PM 0 80-delicious.conf-a---- 12/03/2024 4:33 PM 0 90-synthetic.confThese all look like standard fonts, I don't see custom ones here.So I went to SousaMain, there are functions that look relevant:basicUIRefresh ->dispChanHandler ->dispChannelData ->dispDataNum(int param_1,int param_2,int param_3,int param_4,undefined4 param_5) ->lv_label_set_text(local_24,&local_38);I assume that is drawing the voltages and currents to the screen.Search for font gives the following: lv_font_montserrat, lv_font_msyahei, lv_font_msyh, lv_font_numkey, lv_font_rigol, lv_font_simsun. I assume 'lv_font_rigol' is the garbage one.So it could be possible to: replace the Rigol font directly in memory, change the font being pointed to.Trying the second approach:There is a function in dispChanInit, "lv_label_create" which initializes using two of the rigol fonts: lv_font_rigol_36 + lv_font_rigol_55:Code:0016afc0 31 df 01 eb bl lv_label_create undefined lv_label_create()0016afc4 00 20 a0 e1 cpy r2,r00016afc8 c4 35 0e e3 movw r3,#0xe5c40016afcc 83 3e 40 e3 movt r3,#0xe830016afd0 30 20 83 e5 str r2,[r3,#0x30]=>stCHxView0016afd4 c4 35 0e e3 movw r3,#0xe5c40016afd8 83 3e 40 e3 movt r3,#0xe830016afdc 30 00 93 e5 ldr r0,[r3,#0x30]=>stCHxView0016afe0 90 3c 0a e3 movw r3,#0x7460 //Set small font0016afe4 6b 31 40 e3 movt r3=>lv_font_rigol_36,#0x16b0016afe8 00 20 a0 e3 mov r2,#0x00016afec 00 10 a0 e3 mov r1,#0x0...0016aee4 b0 35 07 e3 movw r3,#0x75b0 //Set large font0016aee8 6b 31 40 e3 movt r3=>lv_font_rigol_55,#0x16bReplacing 0x16b7460 with 0x0168ac90 (montserrat_36) should be ok, but there is no other 55 size font for the large digits.edit: it did change the font but only when the channel was opened, so obviously I'm editing in the wrong area. Also the font was much wider, but we do have horizontal space so it could be shifted to the left a bit.

author: thm_w
author_rank: Super Contributor
timestamp: March 16, 2024, 12:59:20 am
content: OK this is the correct location for the main voltage/current font of all three channels:Code:00164df0 b0 35 07 e3 movw channel,#0x75b000164df4 6b 31 40 e3 movt channel=>lv_font_rigol_55,#0x16bOriginal font:If I replace with 0x016b7738 lv_font_simsun_40 it looks like this:WAY better but bit small. The bad thing is there is no way to scale, I think you can only choose an existing font size. So replacing the Rigol font might be the better option.To test out:- File -> Export Program -> SousaMain from Ghidra to USB key (original file)- Plug USB in scope- Navigate to /mnt/exUDISK or /mnt/exUDISK2 and check your patched file is there- Run: pidof SousaMain- Run: kill *pidhere* ; ./SousaMain_patched

author: deano76
author_rank: Newbie
timestamp: March 26, 2024, 08:22:28 pm
content: HiHas anyone managed to get the monitoring patch working on the DP932E?D

author: thm_w
author_rank: Super Contributor
timestamp: March 26, 2024, 08:45:45 pm
content: Quote from: deano76 on March 26, 2024, 08:22:28 pmWhat problem are you having? It should be the same steps as for DP932U as outlined above.

author: deano76
author_rank: Newbie
timestamp: March 28, 2024, 05:09:40 pm
content: test.ddl works fine, but using the .22 patch it flashes a message about not available and then back to "Option not installed, please buy it".I'm applying the patch using multipatch on my Mac. Seems to apply the patch fine. I'm SCP the file over rm SousaMain and replacing with the patched file. Checked the file permissions and they are the same as the original SousaMain.Any ideas what I'm missing?

author: deano76
author_rank: Newbie
timestamp: March 30, 2024, 08:02:32 pm
content: Simple fix. Reading the serial number on the back I realised the first letter was a G not a C. Works perfectly.

author: leoshusar
author_rank: Newbie
timestamp: May 02, 2024, 12:26:25 am
content: Hi, do you think there will be a way to generate keys without modifying binaries?I tried to poke in the SousaMain binary myself and seen some ECDSA references, so it looks like they are using ECDSA keys and OpenSSL for validation?

author: rizek
author_rank: Contributor
timestamp: July 25, 2024, 05:18:43 pm
content: Greetings all!Total newbie hereI am building my home lab and I have a question regarding the DP932E Model. Is there any detailed procedure for hacking the PSU to get higher resolution? I read the whole post and some people done it but to be honest I am not familiar with type of stuff. Would be great if there is a step by step instructions.

author: thm_w
author_rank: Super Contributor
timestamp: July 25, 2024, 10:36:53 pm
content: Some notes I had from before:- Font is garbage and hard to read- Parallel mode has a large current offset at 0A (>5mA), independent channels do not (<1mA). Sucks for low current devices. I don't think there is any way to calibrate this out, its just some internal mismatch.- Serial mode has you enter half the voltage, then multiplies that value before its output (can damage your DUT if you are careless)- Parallel/Series mode could be displayed better on the screen (like uni-t)- Web interface shows nothing useful (could mirror or screenshot the screen), no usable rigol software. Though EEZ studio mentioned above looks good.Quote from: rizek on July 25, 2024, 05:18:43 pmThis thread is very short and I posted asummaryabove already. But I edited to try to make it a bit clearer.

author: rizek
author_rank: Contributor
timestamp: July 26, 2024, 08:17:43 am
content: Thank you very much for your answer, much appreciated. Maybe I can pay 200€ more and get the Siglent SPD4323X. To be honest I dont want to do it but it is one time investment anyway (hopefully)

author: black6host
author_rank: Contributor
timestamp: July 26, 2024, 11:12:36 am
content: Greetings!You might also consider the GW Instek GPP-4323. 4 channels with the resolution you're trying to achieve without having to do anything to it. There's a rather lengthy thread here on eevblog about it. People discuss it's shortcomings as well so it's a pretty fair assessment in my opinion. I bought one and I'm very happy with it...Quote from: rizek on July 26, 2024, 08:17:43 am

author: rizek
author_rank: Contributor
timestamp: July 26, 2024, 03:35:38 pm
content: Thank you very much, I have checked the GPP-4323 and it looks great! I think I will go with it.

author: MarcusN
author_rank: Newbie
timestamp: August 23, 2024, 03:13:05 pm
content: Hello everyone,I just bought a new DP932E with firmware version .22.However, it’s strange that the MD5 for original SousaMain on my device isd5f765cb69320cdbd710b0aa38dacb29, whereassensilereports in replay #63 the value asec69fba52309f6370ed81c55552c4e08.Does anyone else have a different MD5 for the original SousaMain in FW version .22 compared to the one provided bysensile?

author: thm_w
author_rank: Super Contributor
timestamp: August 24, 2024, 12:26:39 am
content: Quote from: MarcusN on August 23, 2024, 03:13:05 pmNo. You could make a backup copy of that SousaMain, then upgrade to .22, then perform the patch.Are you sure the full version string was "00.01.01.00.22"?

author: MarcusN
author_rank: Newbie
timestamp: August 25, 2024, 04:06:18 pm
content: Quote from: thm_w on August 24, 2024, 12:26:39 amI used SCPI command *IDN? to determine firmware version.And it returned value:Rigol Technologies,DP932E,XXXXXXXXXXXX,00.01.01.00.22Is there another way to check the firmware version, e.g. using SSH?Update: After applying upgrade from .22 to .22 () md5's are correct and patch is working. Thank youthm_wfor advice

author: gleitmo
author_rank: Contributor
timestamp: September 14, 2024, 11:47:22 am
content: Hello everyoneI'd like to confirm, that DP932E that I bought recently had firmare version 00.01.01.00.22 however MD5 of SousaMain was'd5f765cb69320cdbd710b0aa38dacb29'As MarcusN reported (reply #101) upgrade from original v22 to downloaded firmware v22 caused change of SousaMain MD5 to'ec69fba52309f6370ed81c55552c4e08'Further procedure I performed as BC547B instructed (reply #50) using SousaMain for v22 ( /mnt/app )This file swap alone unlocked inactive functionality of DP932E, however button 'Arb' at front panel was still inactive and access to this function was possible only by screen menu. Voltage and current resolution was still limited to two digits, and 'Model' displayed at 'Help/About' still had "E" sufix.Later I swapped test.dll from Userli ( /mnt/app/private/test.dll ) and that fixed issues mentioned above.Many thantks to all, who prepared these files.In fact I decided to write this post also because the last anoying thing in this bench power supply is the fan noise. I saw on the Internet couple reports about replacing original fan and adding resistor do cheat failure detection algorithm. In fact I think it isn't the best solution. Above all because if output will be loaded more heavily the slower fan won't provide enough air flow to efficiently cool heat sinks down. I didn't disassemble my unit, so I can't be sure. However I hope that if fan speed is controlled by software thus maybe another "file swap" could slow down fan speed at idle and provide steeper increase slope at higher loads. What do you think?And there is one more question: what about future Rigol firmware upgrades after this 'E' to 'A' hack? Do you anticipate that it will be possible to run original GEL files?

author: gleitmo
author_rank: Contributor
timestamp: September 22, 2024, 04:17:50 pm
content: Hello againI'm aware that this is not quite proper section on this forum, however topic I want to discuss is realted in a way.I saw somewhere on the Internet that unpredictable voltage overshots may occur on outputs while powerup DP932x device. So I decided to connect oscilloscope to unloaded outputs and take some measurements. Here's what I managed to record (channel numbers in the oscilloscope are the same as in the power supply):1. Power switch on (first time)2. Power switch on (later)3. 'All on' (CH1: 0.6V; CH2: 0.6V; CH3: 0.6V)4. 'All off' (CH1: 0.6V; CH2: 0.6V; CH3: 0.6V)5. 'All on' (CH1: 3.0V; CH2: 3.0V; CH3: 3.0V)6. 'All on' (CH1: 12.0V; CH2: 12.0V; CH3: 6.0V)7. 'All off' (CH1: 12.0V; CH2: 12.0V; CH3: 6.0V)8. 'All on' (CH1: 30.0V; CH2: 30.0V; CH3: 6.0V)9. Power switch off (CH1: 30.0V; CH2: 30.0V; CH3: 6.0V)It seems that rising and falling slopes are controlled. However I don't understand:Why they aren't equally steep?Why time shift between each channel is that high (couple miliseconds)?

author: thm_w
author_rank: Super Contributor
timestamp: September 23, 2024, 11:54:14 pm
content: Quote from: gleitmo on September 22, 2024, 04:17:50 pmTime shift is probably an internal processing delay in their code, either intentional or not. In the manual there is a spec "command processing time" which might be relevant.I don't see much of a difference in turn on for slope between all three channels here. Turn off slope for CH3 is slightly faster. Did you have current limit set to the same value on all channels?

author: gleitmo
author_rank: Contributor
timestamp: September 24, 2024, 07:12:39 pm
content: thm_w you're right - I haven't thought about current limit. I was sure that since outputs are unloaded it wouldn't matter. I rather suspected some kind of software limitation. Thank you for your reply and help.Do you think that current limit affects voltage slope because of internal electrolytic capacitors connected directly to bananas sockets (I saw them in a photo somewhere on the forum.)?Here are several screens (measurent setup the same as before):1. 'All on' (CH1: 0.6V/0.1A; CH2: 0.6V/0.1A; CH3: 0.6V/0.1A)2. 'All off' (CH1: 0.6V/0.1A; CH2: 0.6V0.1A; CH3: 0.6V0.1A)3. 'All on' (CH1: 0.6V/3A; CH2: 0.6V/3A; CH3: 0.6V/3A)4. 'All on' (CH1: 6V/0.1A; CH2: 6V/0.1A; CH3: 6V/0.1A)5. 'All on' (CH1: 6V/1A; CH2: 6V/1A; CH3: 6V/1A)6. 'All on' (CH1: 6V/2A; CH2: 6V/2A; CH3: 6V/2A)7. 'All on' (CH1: 6V/3A; CH2: 6V/3A; CH3: 6V/3A)8. 'All off' (CH1: 6V/3A; CH2: 6V/3A; CH3: 6V/3A)'All off' slopes are the same regardless of the current limit.However I'm still suprised by the recorded time shifts. It seems to me that this is a software limitation, but I see no reason why it should be longer than a few microcontroller clock cycles.(I apologize to everyone for digression from the main topic.)

author: thm_w
author_rank: Super Contributor
timestamp: September 24, 2024, 10:48:14 pm
content: Quote from: gleitmo on September 24, 2024, 07:12:39 pmYes there are electrolytic capacitors near the screw terminals for stability, this is the case on almost any PSU.The current limiting circuitry will be before those output capacitors.Internal processing is probably not real time, the system is running linux so may have some set time for task switching (1ms or whatever).I'm sure if they optimized the code sequential on/off would be instantaneous, but, rigol is known for skimping in that area.

author: ArcticGeek
author_rank: Regular Contributor
timestamp: September 27, 2024, 03:34:18 pm
content: I'm not sure if this is the right place to ask this or not, but here goes.Has anyone figured out how to remove the annoying nag message of "Are you sure you want to turn on all outputs" when you press the All On button on the DP900 series of power supplies?I find this nag message very annoying when using my DP932E, and I was hoping perhaps in all this code investigation folks are doing if they have found a way to get rid of this.I sent an email to Rigol about 6 months ago asking if they could change this in their firmware, and they said "maybe in a future release". I'm not going to hold my breath.Best,

author: thm_w
author_rank: Super Contributor
timestamp: September 27, 2024, 10:19:35 pm
content: Quote from: ArcticGeek on September 27, 2024, 03:34:18 pmIt worked the same way on the DP832, so very unlikely they would ever change it. You can click the wheel or press the enter button, whatever is easier.You could fix the issue in Ghidra, but, its not trivial. I don't have the skill to find that area of the code. What I see:s_KEY_ALL_ONOFF_00946930 "KEY_ALL_ONOFF"s_btn_all_onoff:true_0163a750

author: Konsolkongen
author_rank: Contributor
timestamp: October 07, 2024, 10:53:44 am
content: Thank you for doing this hack. I was able to hack my DP932E easilyHere's hoping something can be done about that font. It is too narrow and there is a lot of wasted display space, even with high-res mode enabled. A wider font would be easier to read from afar.I think the seven segmented font on earlier Rigol PSUs looked pretty good.https://instrumentcenter.se/20.0.0.0/8882/6e3727b255e2c678284ad82381c2dd01.jpgBut as already mentioned it doesn't look like the fonts are stored in separate files. Would have loved to overwrite it with something like this:https://www.dafont.com/ds-digital.font?text=0.123456789

author: maher8
author_rank: Newbie
timestamp: October 08, 2024, 06:49:03 pm
content: On DP932E, is the Arb generator available and usable after hack? Or is this only available for U models and up?

author: thm_w
author_rank: Super Contributor
timestamp: October 08, 2024, 10:51:01 pm
content: Quote from: maher8 on October 08, 2024, 06:49:03 pmYou can see earlier in the thread someone said Arb is working on their DP932E.I would expect all models to behave the same.

author: J-R
author_rank: Super Contributor
timestamp: December 03, 2024, 10:16:59 pm
content: Confirmation that the hack works on the DP932E and ARB functions properly...Since this seems to be the largest thread on the DP900/DP2000 series, anyone figure out how to calibrate these?

author: thm_w
author_rank: Super Contributor
timestamp: December 03, 2024, 10:49:12 pm
content: Quote from: J-R on December 03, 2024, 10:16:59 pmNo, nothing here:https://www.rigolna.com/calibration/and nothing in the attached guide.You should try the DP800 calibration commands and let us know if they work.https://www.eevblog.com/forum/testgear/rigol-dp831dp831a-calibration-script-using-dm3086-calibration-script/https://www.eevblog.com/forum/testgear/dp821a-calibration/msg2841730/#msg2841730

author: J-R
author_rank: Super Contributor
timestamp: December 03, 2024, 11:36:47 pm
content: I might give those calibration commands a try, but only if I understand a bit more.Code:root@TinaLinux:~# ls -lahi /mnt/app/sousaCal*252 -rw-r--r-- 1 root root 42.2K Jan 1 2010 /mnt/app/sousaCalData.txt293 -rwxr-xr-x 1 root root 46 Jan 1 2010 /mnt/app/sousaCalInfo.txtSecond file clearly has the calibration date, but how to decode the first file? Would be nice to see the number of calibration points, for example.

author: thm_w
author_rank: Super Contributor
timestamp: December 03, 2024, 11:44:52 pm
content: The number of calibration points on DP800 was variable, you just choose whatever voltages you liked (see the script for good ones to choose). Maybe it is similar here since there are so many 0x00's in the CalData file.If you back up all of the files should be ok?

author: J-R
author_rank: Super Contributor
timestamp: December 03, 2024, 11:50:42 pm
content: I've archived all of "/mnt/app"Is "sousaCalData.txt" encrypted or just encoded? I opened it in a hex editor but didn't recognize any patterns.

author: thm_w
author_rank: Super Contributor
timestamp: December 03, 2024, 11:55:26 pm
content: I have two cal files and they are similar enough, don't think it would be encrypted at all.edit: added _1 and _2 at the end yes. Can't remember if _1 was an older FW.

author: J-R
author_rank: Super Contributor
timestamp: December 03, 2024, 11:58:21 pm
content: To clarify, those file names are not original, you made copies and named them _1 and _2?If not encrypted, any way to better understand the structure of the file?

author: big smiler
author_rank: Newbie
timestamp: December 04, 2024, 12:41:01 am
content: I decided to take a look at the posted cal files to understand their structure, seems to be some type of binary format. Notepad valliantly tries to interpret it as UTF-16 Little Endian and it does look like vaguely structured text with mostly chinese characters but I doubt that is cal data.Taking a look at it in a hex editor there are many large sections of zeroes interspersed by small sections of data.I'll pull my own cal data at some point and compare the files we have right now, this should have a decent clue as to what is varying in the file and hopefully make it easier to decode.I haven't looked at DP800 series cal files yet.Some offsets with data:hex 0hex 320hex 640hex 960 (no points for spotting the pattern)packets with a length of hex 24hex c80 (different looking packet)hex e0c (not on a 16 byte boundary anymore)Looking at it in a bit more detail it seems there are 4 packets of similar shape in a row every time. Probably for 4 channels or something along those lines.

author: J-R
author_rank: Super Contributor
timestamp: December 04, 2024, 01:06:43 am
content: I ran through some of the DP800 calibration commands as a test and it did modify the two files on the DP900. I restored my backups and restarted, seems no worse for wear. I am not set up to run the DP800 script at the moment. The current calibration appears to be adequate and is only one year old. But it seems like this will work if necessary. Maybe some minor tweaks will be required.

author: Orange_times
author_rank: Newbie
timestamp: December 27, 2024, 05:05:45 pm
content: Does somebody have the .22 firmware? I have upgraded using the last instruction on page 4 of this thread but the firmware is nowFirmware Revision: 00.01.02.00.04

author: Orange_times
author_rank: Newbie
timestamp: December 27, 2024, 05:25:50 pm
content: okay I have managed to find the working link:https://download.rigol.com/en/Firmware/DC%20Power&Loads/DP900/DP900_DP2000%20(Software)Update(Normal)_tcm4-4805.zipBut it seems that bspatch.exe doesn't do anything on Windows 11. I don't see any new file being createdbspatch SousaMain SousaMainPatched SousaMain_patch

author: thm_w
author_rank: Super Contributor
timestamp: December 27, 2024, 08:48:21 pm
content: Quote from: Orange_times on December 27, 2024, 05:25:50 pmYou can try running command prompt as admin, maybe you are using the files in a folder that is write protected (ms security).You can see comments here:https://www.romhacking.net/utilities/929/

author: Orange_times
author_rank: Newbie
timestamp: December 30, 2024, 09:01:19 am
content: Thanks. I downloaded the utility from this site, extracted everything to the folder (replacing everything), and launched the Prompt shortcut. It finally showed Windows security warning and created a patched version. I guess there was something wrong with bspatch.exe version I was using

author: Gerhan
author_rank: Contributor
timestamp: January 03, 2025, 04:39:42 pm
content: Dear Team,I would like to extend my gratitude to the entire team of professionals who contributed to rewriting the test file and developing the patch for the Sousamain file. The DP932U-DP932A hack has certainly been an interesting challenge for me.While it is relatively easy in some aspects, it proved difficult due to the necessity of working with three different computer systems.For novice users, I highly recommend using WinSCP as it simplifies the process and eliminates the need to know Linux commands. Linux played an integral role in the process, and specifically, the Version 22 patch took longer than expected. This delay was due to my initial oversight in including the complete set of files required for the patching process when using bspatch.Additionally, I had Version 16 and struggled with whether to update it or not. Thankfully, I decided to update, and the older version (2023.08.28) worked without issues. However, I am still uncertain if updating further to the 2024.11.12 version will cause me to lose all the benefits of the cool process that came along with it. Any insight would be appreciated.I hope this helps anyone working through similar issues!

author: thm_w
author_rank: Super Contributor
timestamp: January 03, 2025, 10:14:39 pm
content: Quote from: Gerhan on January 03, 2025, 04:39:42 pmSince the previous file was patched, you'll lose the benefits if you update, so will have to wait for someone to provide a new one.No one has posted this version so thanks for pointing it out:https://supportint.rigol.com/SUPPORTS/software-firmware-download_2.htmlv00.01.02.00.04 2024-12-25Quote

author: J-R
author_rank: Super Contributor
timestamp: January 05, 2025, 08:34:08 am
content: I updated to 1.02. The only impact I can see is that the Monitor function is now not available.

author: angelo
author_rank: Contributor
timestamp: February 25, 2025, 05:25:29 pm
content: Hello,Just got a DP2031. ?IDN gives DP2A263700552, 00.01.01.00.22.I WinSCP download and back up my SousaMain, then BSPatch with the SousaMain_patch_22_2031 from @sensille on Jan 5 2024.Upload new patched SousaMain over WinSCP and Rigol Loading bar ends with a blank screen... I have to go replace old SousaMain to restore.Tried a few times to no luck.Can someone offer some advice and/or maybe try patching the newest 01.02 firmware (I still have .22, but perhaps revitalize this for newer models)Thanks,

author: thm_w
author_rank: Super Contributor
timestamp: February 25, 2025, 10:37:51 pm
content: Quote from: angelo on February 25, 2025, 05:25:29 pmUpgrade to 0.00.22first, there was a post a few pages back where their MD5 did not match. So either check the MD5 hash or just upgrade to the existing firmware on their website to be sure its the right version.

author: angelo
author_rank: Contributor
timestamp: February 26, 2025, 01:05:13 am
content: Thanks for the reply,I'm sure I dl'ed the .22 FW posted here and upgraded to that version. There was only the one version posted so I can't try the other to compare unless there is a repo of old versions?The current FW is 01.02 I think. Any changes I have to make to work vs the 01.01.00.22?

author: thm_w
author_rank: Super Contributor
timestamp: February 26, 2025, 01:31:50 am
content: Did you copy the test.dll as well?edit: you are right test.dll is only for DP900 model changeThere is not much point in trying to get a newer version to work if the old version did not work for you.Once its working you could then go back and look at the bspatch file and see if/where it needs adjustment.

author: angelo
author_rank: Contributor
timestamp: February 26, 2025, 11:41:17 am
content: An earlier post said in the 2031 model you didn't need to copy the test.dll. I also have test.dll and test2.dll?Happy to take a look in the patch file, when I open it in a text editor it's just a mess of random characters. Did I miss some specific instruction on that part?

author: angelo
author_rank: Contributor
timestamp: February 26, 2025, 01:58:54 pm
content: Installed the .22 from here:Quote from: Orange_times on December 27, 2024, 05:25:50 pmmd5 on SousaMain pre-patch is: c7ece55d12258cc63c3eaf9b75c45640 which doesn't match any stated. Recal I have the 2031 not 800/900***edit: SousaMain MD5sum is now d5f765cb69320cdbd710b0aa38dacb29 which matches another users DP932E, they upgraded .22 to .22, not sure what there are two versions of .22 but okay.After I use the same update my DP2031 shows up as a DP932E, and instead of HDAC and 10A options, my options window displays HIRES only (like a 932 would) hard reset fixes this issue and now HADC and 10A are back.SousaMain patch does not create the correct MD5sum result however. I suspect I'm just working from the wrong FW version but where can I find the old releases?

author: angelo
author_rank: Contributor
timestamp: February 26, 2025, 09:56:57 pm
content: Update:So the MD5sum of the SousaMain changes between when I run the 0.22 update (and the scope thinks its a 932E) and after a power cycle when it now thinks it's a 2031 as it should.I found the 0.22 update on WayBack Machine, and I can confirm it's the same one I used from this forum before.So that leaves me at a bit of a loss as I can't start from the SousaMain with the correct MD5sum. I have opened both in a comparrison hex editor and there are only very few minor changes.If I were to manually patch the SousaMain, what am I looking for and what do I change it to.Alternatively, can someone just proivde the SousaMain that is working if the MD5sum is the same for all and they are all the same resulting file?Thanks,

author: BC547B
author_rank: Contributor
timestamp: May 29, 2025, 06:07:16 pm
content: Here's the latest patched SousaMain for the latest firmware as of today released on 2024-11-15Tested on my DP2031 enables the following:- Monitor option- 10A on Channel 3- Fast SamplingThis is the complete file you can download from my OneDrive:https://1drv.ms/u/c/cb8b6ed0332db49c/EUx9o2V7RzVNqCvPPfcXVlwB-SZhSk1XtA7hwl0pVIbyKg?e=bAU5twSHA256: DF9C8608F9A7A15211F5FC94D1B0BE15FCAE4DB85350CD10E03770D7F8B19E1EYou just paste it inside /mnt/app and replace SousaMainBut for those who prefer to do the patch themselves I'll attach the patch file to this post.Heads up: in v00.01.02.00.04 downgrade is disabled

author: Dimm
author_rank: Newbie
timestamp: June 02, 2025, 11:36:23 pm
content: Good day, a hack is now possible on v00.01.02.00.04 ?DP932EThank

author: J-R
author_rank: Super Contributor
timestamp: June 03, 2025, 12:30:09 am
content: Quote from: Dimm on June 02, 2025, 11:36:23 pmThe hack was still possible, it's just that you lost the monitor option. However:Quote from: BC547B on May 29, 2025, 06:07:16 pmCan confirm the monitor option is back on my DP932E running as a DP932A using the provided SousaMain.

author: Dimm
author_rank: Newbie
timestamp: June 04, 2025, 12:42:37 pm
content: Hello, tell me, is this file suitable for 932e or only for 2031?

author: thm_w
author_rank: Super Contributor
timestamp: June 04, 2025, 10:39:33 pm
content: Quote from: Dimm on June 04, 2025, 12:42:37 pmThe post right above you says it works on 932E

author: BC547B
author_rank: Contributor
timestamp: June 05, 2025, 12:14:43 pm
content: Hi, yes it works on DP932 J-R confirmed on his device so that's great! The SousaMain will only enable Monitor option for DP932. To get the other options you need test.dll from userli post from the very beginning of this post. He said it should be independent of the version. I hope this cleared the confusion.I have a question for J-R since I don't have a DP932 did you have to copy test.dll to your DP932 after firmware upgrade? Or it wasn't affected by the update? and you just needed the monitor option?Thanks

author: thm_w
author_rank: Super Contributor
timestamp: June 05, 2025, 09:45:05 pm
content: Quote from: BC547B on June 05, 2025, 12:14:43 pmThe test.dll persists, there was no need to upload it again. No files are touched that user has renamed or uploaded during upgrade process that I see.

author: J-R
author_rank: Super Contributor
timestamp: June 06, 2025, 08:19:03 am
content: I can't recall exactly if I had to recopy any files after the update to 1.02. I looked at the various date/time stamps (via ls and t/tc/tu) and I think I agree with thm_w that I didn't have to re-copy the test.dll file.

author: mmh3
author_rank: Newbie
timestamp: June 10, 2025, 08:31:48 am
content: Hello everybody.i highly appreciate the people here doing all the efforts in this topic.WOW. !As i plan to buy a 932 te next few days, there is one question left on my side.Does the 932E model have all the neccesary hardware, especially the digital-IO conectors, etc. for options of the change to a 932A model will be fully usable?regards michael

author: J-R
author_rank: Super Contributor
timestamp: June 10, 2025, 10:12:43 am
content: Quote from: mmh3 on June 10, 2025, 08:31:48 amThe back of the DP932E is identical to the DP932A, so the digital I/O connector is there.However, the unit does not ship with the necessary plug, so you'll need to buy it separately:Quote from: KrzysztofB on July 13, 2023, 10:37:40 am

author: Hovo
author_rank: Newbie
timestamp: July 22, 2025, 08:27:17 am
content: Does anyone know how to calibrate DP932?

author: J-R
author_rank: Super Contributor
timestamp: July 22, 2025, 07:22:30 pm
content: Quote from: Hovo on July 22, 2025, 08:27:17 amIf you go back one page there is some discussion about calibration. Essentially it seems you might be able to use the DP800 script but no one has tried it yet.

author: Hovo
author_rank: Newbie
timestamp: July 22, 2025, 09:17:46 pm
content: Quote from: J-R on July 22, 2025, 07:22:30 pmthere is nothing in the menu, as in the 800 series, calibration is not possible for calibration and commands, a specific calibration procedure is needed