SDS1102x+ - Page 1
Forum section: electronics / testgear

author: Raima010
author_rank: Contributor
timestamp: March 18, 2021, 05:55:54 pm
content: Have somebody tried to unlock this model. ID has xxx.yyy.zzz format. Backdoors closed to read memdump. Somehow I have managed to stop countdown counter for trial licenses which are stuck on 28 days now. But nothing other what works from described methods.

author: tautech
author_rank: Super Contributor
timestamp: March 18, 2021, 06:06:48 pm
content: SCPI access is described on P13:https://siglentna.com/wp-content/uploads/dlm_uploads/2021/01/SDS1000-SeriesSDS2000XSDS2000X-E_ProgrammingGuide_PG01-E02D.pdf

author: Raima010
author_rank: Contributor
timestamp: March 19, 2021, 03:28:00 pm
content: Yes, SCPI commands do work but, as I know this does not help to extract memdump. Plus unlock code calculators on forum all works with ID xxxx.yyyy.wwww.zzzz format - 16 digits. On this scope we get only xxxx.yyyy.wwww numer, ie 12 instead of 16 digits. Tried to calculate unlock code with only 12 digits - doesnt work. Probably needs another technique to read memdump or 12 digits code extractor. Thinking if is there another methods to read memdump, maybe some connection ports inside the scope like seriar/uart/ SPI which can be usefull?

author: tautech
author_rank: Super Contributor
timestamp: March 20, 2021, 12:11:56 am
content: A little Google points back to this thread that has plenty of clues of what to try:https://www.eevblog.com/forum/testgear/unlocking-siglent-sds1104x-e-step-by-step/

author: Raima010
author_rank: Contributor
timestamp: April 04, 2021, 06:55:26 pm
content: Well, not very promising..Tried to downgrade all the way firmware to the lowest available via siglent official download. One is dated 2017 before they probably closed the doors, but still no luck to dump memory,no SHELL commands,no TelnetNi-Visa makes connection via usb, but *IDN? command returns same ID number which is awailable via scope's info screen with 12 number format 000-abcd-efgh which I believe is not full. Does not work with script for calculating unlock codes either.Made it clear that SDS X models are blackfin machines not utilizing linux att all, thanks to tv84 -https://www.eevblog.com/forum/testgear/siglent-sds2000x-hack/50/so that telnet is not possible in its nature with this kind of machines. This well is confirmed even in the official siglent webpagehttps://www.siglenteu.com/operating-tip/instrument-socket-and-telnet-port-information/At the end have disassembled device with hope to connect to Serial port and get some info from there. Still no luck. Serial does not issue any signals, just silence. Blocked in software, hardware level - unclear.Last hope is JTAG method but haven't tried it yet. Does someone have some experience with this?Interestingly, all the pin outs on the mainboard are not marked on my scope, what I see in some other scopes on videos. Late production extra safety measures?Serial port was not hard to find by its 4 wire connection in any way.

author: tv84
author_rank: Super Contributor
timestamp: April 04, 2021, 07:47:25 pm
content: Show these SCPI outputs:MCBD?MD5_PR?It should respond with errors.I think you are confusing things: I recently said CML+ is an ARM machine. I think I was not referring to a SDS1000X+.A SDS1000X+ is A BF machine as its cousin SDS1000X.So, you won't be able to change BW. Just any other options that it might have. The BW upgrade in the SDS1000X/SDS2000X requires desolderings...

author: Raima010
author_rank: Contributor
timestamp: April 08, 2021, 04:16:07 pm
content: Yes, it responds with errors to these commands:*MCBD?\nRead OperationErrorVISA: (Hex 0xBFFF0037) Device reported an input protocol error during transfer.To IDN for example responds correctly:*IDN?\nRead OperationReturn Count: 47 bytes*IDN\sSIGLENT,SDS1102X+,SDS1XECD3R0857,1.1.2.15\nSorry I am not sure if I do have confused something, your post was:Re: Siglent SDS1000(X) / SDS2000(X) or LeCroy WaveAce (Blackfin) hacks?« Reply #74 on: February 18, 2019, 04:38:13 pm »Say ThanksReplyQuoteSDS X is a Blackfin machine. No ARM and no linux OS.No telnet is possible.So yes, scope has no any code input option for bandwidth upgrade. Only Decode and AWG options. As it was said earlier scope gives 0000-aaaa-bbbb 12 digits ID with 4 leading zeros and none of scripts gives unlock code which would work.By desoldering you mean any of those capacitors in analog part? (actual my scope picture)UPDATE: and as I have disassembled the scope here I can confirm that SDS1102X+ contains BF processor onboard, so maybe there is no doubt longer about hardware configuration.

author: tv84
author_rank: Super Contributor
timestamp: April 08, 2021, 05:39:45 pm
content: @Raima, so if there was any doubt... BF indeed.I think I never talked about a X+ because I've never seen a user with a X+. You're the 1st.See my pm.

author: tautech
author_rank: Super Contributor
timestamp: April 08, 2021, 08:18:46 pm
content: Quote from: tv84 on April 08, 2021, 05:39:45 pmX+ was only a model designation change as previously they were X-S signifying models that housed the AWG HW.IIRC X had the UI to support the AWG card but it was greyed out.

author: Raima010
author_rank: Contributor
timestamp: April 08, 2021, 09:38:37 pm
content: It looks like the problem have been solvedThank you tv84!! You are genius!Next step would be uncage bandwidth..

author: Raima010
author_rank: Contributor
timestamp: April 08, 2021, 11:09:32 pm
content: Upgraded to latest software, all licenses still in place.Just to mention about strange effect.. In the beginning there was 2 licenses to enter according to license table on the screen - AWG and Decode. Firstly entered AWG license ant then it disappeared from the table but MSO appeared as Permanent instead. Then entered Decode it become as Permanent also (both were entered via scopes interface).Over Type selection button both Decode and MSO become grayed also. AWG still not, but install key does not gave possibility to enter AWG code via scopes interface. It wasn't on license table as well.AWG code entered via SCPI command. Was accepted without error and only then AWG over Type button become grayed also. AWG still not in the table.And lastly, what the PAS license code stands for?

author: tautech
author_rank: Super Contributor
timestamp: April 08, 2021, 11:13:51 pm
content: Quote from: Raima010 on April 08, 2021, 11:09:32 pmX+ = AWG std AFAIK.QuotePower Analysis Software.

author: Raima010
author_rank: Contributor
timestamp: April 08, 2021, 11:27:03 pm
content: Yes AWG - arbitrary wave generator which is built-in with X+. But in the beginning it was under Trial license in the table with 27 remaining times. After decoding AWG it disappeared from table but MSO come in table like licensed. MSO was not in the table before.SDS1102X+ has no Power analysis options, so does not need this code possibly.

author: tautech
author_rank: Super Contributor
timestamp: April 08, 2021, 11:35:05 pm
content: Quote from: Raima010 on April 08, 2021, 11:27:03 pmMaybe as a result of old firmware.Looking at a recent pricelist AWG is standard, Decode and MSO are options.QuoteYes, PAS is not available in SDS1000X or X+ models.

author: Raima010
author_rank: Contributor
timestamp: April 08, 2021, 11:43:49 pm
content: It was really weird to se AWG under Trial with xx remaining times when you buy device with AWG as advertised and pay extra for this.

author: tautech
author_rank: Super Contributor
timestamp: April 09, 2021, 12:25:49 am
content: Quote from: Raima010 on April 08, 2021, 11:43:49 pmThere are 2 FW updates that maybe caused this, 1.1.1.2.6 (Relates to SDS1000X+ models) and 1.1.1.2.13R3 (Note: This update requires performing the update procedure twice) and if either have not been performed to the update instructions weird results might result.All the info is online and freely available.https://int.siglent.com/download/firmwares/?ProId=1

author: radiolistener
author_rank: Super Contributor
timestamp: April 09, 2021, 01:11:44 am
content: Quote from: Raima010 on April 08, 2021, 11:09:32 pmwhat means MSO option?Quote from: Raima010 on April 08, 2021, 04:16:07 pmI don't know about SDS1102X+ model, but it looks that you're pointing to the wrong capacitors, because at a glance your photo looks very similar to the SDS1102X/SDS1202X model. So, you're needs to see for the capacitor on another side of a chip.Here is detail for SDS1102X:

author: Raima010
author_rank: Contributor
timestamp: April 09, 2021, 09:57:19 am
content: Quote from: radiolistener on April 09, 2021, 01:11:44 amMSO- mixed signal oscilloscopeMDO- mixed domain oscilloscopeQuote from: radiolistener on April 09, 2021, 01:11:44 amAs I see its identical layout. Have you removed shown cap? What bandwidth increase did you get?

author: radiolistener
author_rank: Super Contributor
timestamp: April 09, 2021, 01:11:41 pm
content: Quote from: Raima010 on April 09, 2021, 09:57:19 amI didn't tried this mod, but people who found this difference (he compare his SDS1102X with SDS1202X teardown video from Dave) tried to remove that cap on one channel and reported that he got more flat frequency response up to 120 MHz (maximum of his sig gen). He said that he was very pleased with the result. You can try to find his message in the topic about SDS1202X oscilloscope on this forum

author: Raima010
author_rank: Contributor
timestamp: April 09, 2021, 04:06:32 pm
content: 100mHz->120mHz it not much and worth maybe. But was it right cap? I saw on someone's video that after removing some cap was quite significant bandwidth increase like 200mHz->350mHz. At least AD8370 chip declared bandwidth in datasheet is up to 750mHz.

author: SimpleXP
author_rank: Newbie
timestamp: December 11, 2022, 01:51:26 pm
content: Hi,today I also tried unlocking the MSO of my SDS1102X+ but can't generate the correct license...Can you tell me what you have changed in the generator?

author: Latet
author_rank: Newbie
timestamp: March 02, 2024, 05:00:52 pm
content: Hello @tv84, sorry to bother you but can you tell us how to obtain the 16-digit ID instead of the 12-digit one? The model of my scope is SDS1102X and I have the same issue that @Raima010 describes in the post.