Agilent N1996A software unlock - Page 1
Forum section: electronics / testgear

author: yamakasi8686
author_rank: Newbie
timestamp: April 04, 2018, 09:03:42 am
content: Hello, everybody.I have an old Agilent N1996A spectrum analyzer.Could you to help me software unlock tis device to have got more option? How can I get root?

author: PA0PBZ
author_rank: Super Contributor
timestamp: April 13, 2018, 07:36:17 pm
content: Did you try to search the forum?

author: yamakasi8686
author_rank: Newbie
timestamp: April 14, 2018, 04:28:17 pm
content: Hello, PA0PBZ, thanks for your responce.Ofcourse, I tried.I had red the post:https://www.eevblog.com/forum/testgear/agilent-e7495-linux-root-account/, but I can't start FTP session on my N1996A, all my login/password do not right.

author: PA0PBZ
author_rank: Super Contributor
timestamp: April 14, 2018, 05:53:44 pm
content: You have mail.

author: geekdoug
author_rank: Newbie
timestamp: May 23, 2018, 02:18:34 pm
content: I know this is an older thread, but I'm having the same issue. I've been through the other thread, but keep hitting roadblocks. Any help would be appreciated!!

author: PA0PBZ
author_rank: Super Contributor
timestamp: May 23, 2018, 06:48:33 pm
content: You got mail.

author: startronic
author_rank: Contributor
timestamp: June 11, 2018, 10:57:52 pm
content: Hello PAOPBZyou can also send root to min for the N1996atanks

author: analogRF
author_rank: Super Contributor
timestamp: April 08, 2019, 12:58:36 pm
content: HiI have got a N9320B spectrum analyzer which is stuck at boot. after the Agilent splash screen there is a Keysight logo splash screen and then it gets stuck on that screen.I am hoping I can connect to it through the LAN port (haven't tried yet) but I have no idea what the root username and password might be.I thought maybe the passwd from N1996A could work if someone can send it to me.BTW, I tried the USB host at the back but it was not detected on my laptopI was also thinking maybe a CMOS reset (taking out the CMOS battery which is the only thing accessible on CPU board) might do something, any advice? I have no idea about its past history. All I know is that it came from a university lab and apparently it just stopped booting one day

author: TheSteve
author_rank: Unknown
timestamp: April 08, 2019, 04:12:07 pm
content: The N9320B and N1996A don't share any hardware/design as far as I know.

author: tv84
author_rank: Super Contributor
timestamp: September 26, 2020, 08:55:33 pm
content: With this picture, you don't need patching...

author: analogRF
author_rank: Super Contributor
timestamp: September 26, 2020, 09:19:27 pm
content: Quote from: tv84 on September 26, 2020, 08:55:33 pmthis is not for N9320B, is it?

author: tv84
author_rank: Super Contributor
timestamp: September 26, 2020, 09:29:57 pm
content: Quote from: analogRF on September 26, 2020, 09:19:27 pmCan't you test it?

author: analogRF
author_rank: Super Contributor
timestamp: September 26, 2020, 09:35:22 pm
content: Quote from: tv84 on September 26, 2020, 09:29:57 pmnot at the moment because i dont have access to it for a while (it's all opened and boards are piled up for later because needs repair)but I dont think it is based on flexlm. I have looked into the debug port many times and i have also looked around the instrument's flash romNever saw any reference to flexlm anywhere.

author: rogersstuart
author_rank: Contributor
timestamp: January 14, 2021, 07:25:51 pm
content: I tried to enable an option on the N1996A through the UI and neither of those keys worked. How should I use them?

author: PA0PBZ
author_rank: Super Contributor
timestamp: January 14, 2021, 07:35:28 pm
content: Quote from: rogersstuart on January 14, 2021, 07:25:51 pmFrom memory: enter the option, then enter the generated key.If you want help post your hostid, the option and the key you generated and we can have a look.Or if you don't want to post that public send me a PM with the same.

author: rogersstuart
author_rank: Contributor
timestamp: January 14, 2021, 08:26:51 pm
content: Actually, I just typed in what I saw in the screenshot a few posts back. So, there's a FLEXlm keygen? My host ID is 307929DE. Most of the options are enabled. I just figured it fully option it out. The only locked options remaining are 271 Spectrogram, AFM AM/FM Tune and Listen, and N8996A-1FP AM/FM Modulation Analyzer. There's also 330-380 but I think those are installable programs that Agilent/Keysight used to offer.

author: rogersstuart
author_rank: Contributor
timestamp: January 14, 2021, 10:10:12 pm
content: Okay, so I was able to telnet in. I'm not exactly sure what I should be looking for. I did search Google for the key generator in the image but I wasn't able to quickly find anything. I would try adding a line to this file but surely there's more security than that?guest@N1996A:/flash/toroServer/license$ cat elgato.licFEATURE GPS agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DEFEATURE P03 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DEFEATURE 500 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DEFEATURE 503 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DEFEATURE 506 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DE SIGN=B7C02E16A4D2FEATURE P06 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DE SIGN=959C790C5ECCFEATURE TG3 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DEFEATURE TG6 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DEFEATURE 271 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DEFEATURE N8995A agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DEFEATURE N8995A-SR6 agilent 1.000 permanent uncounted HOSTID=ID_STRING=307929DE \SIGN=4D9A17588B14

author: PA0PBZ
author_rank: Super Contributor
timestamp: January 15, 2021, 07:50:09 am
content: Only the options where the second line contain a SIGN= are enabled. Try to add the SIGN= to the line below FEATURE 271 like this:FEATURE 271 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=307929DESIGN=EE8797F25E0CThat should enable the waterfall (option 271), give it a try and let me know.You can also enter the option without changing the file using 271 and the SIGN in the menu.

author: rogersstuart
author_rank: Contributor
timestamp: January 16, 2021, 01:52:43 am
content: That worked. Thank you! Out of curiosity, did you use a keygen or is there a table of these codes? I'd like to enable all of the listed options and see what I get.

author: rogersstuart
author_rank: Contributor
timestamp: January 16, 2021, 04:18:45 am
content: If you don't mind me asking here, I have a general question about spectrum analyzers. I've never touched a new and/or freshly calibrated unit, so I'm a bit unsure about how their output is supposed to look. The last one I owned had a function where I could attach a 50 ohm load and it would self calibrate and kind of "flatten" out a bit. This particular unit has a discontinuity around 2.7 GHz and no self calibration procedure. Is this simply an artifact caused by the architecture or is it a sign that it needs to be sent in for servicing?

author: TheSteve
author_rank: Unknown
timestamp: January 16, 2021, 04:27:47 am
content: The N1996A switches bands internally at 2.7 GHz which is why you see some changes there.That is also a hint that both the 3 and 6 GHz models have 6 GHz hardware in them

author: PA0PBZ
author_rank: Super Contributor
timestamp: January 16, 2021, 08:45:49 am
content: You can even see this 'wobble' at 2.7GHz in the product brochure so I consider it as normal.I have a keygen which unfortunately I can't share for undisclosed reasons, but if you tell me what options you still need I will generate the keys for you.Here's what I think you need:AFM D8031F9C907EN8996A-1FP D146D7D42F30

author: TheSteve
author_rank: Unknown
timestamp: January 16, 2021, 09:15:36 am
content: Some fun stuff for those of you with a 3 GHz N1996A:***All done at your own risk***Login via telnet and go to:/flash/toroServer/Dragonfly/ReceiversMake a backup of the original 3 GHz profile:cp N1996A-503 N1996A-503-origCopy the 6 GHz profile to the 3 GHz profile:cp N1996A-506 N1996A-503Reboot and your N1996A will now go to 6 GHz instead of 3 GHz!The amplitude will not be at the proper calibrated level from 3 to 6 GHz as there is no cal data beyond 3 GHz. It is still very useful for relative measurements.The tracking gen also works to 6 GHz and will normalize fine.And while you're messing about how about changing the start frequency of the tracking generator from 10 MHz to 1 MHz:Edit "Start 10e6^M" to "Start 1e6^M" in the file "N1996A-503" you just copied. This is very useful for checking out antennas in the amateur radio HF spectrum.One other thing I found useful at times was enabling permanent ftp root login, to do this add the file /flash/linux/etc/shells with contents "/bin/bash".

author: tv84
author_rank: Super Contributor
timestamp: January 16, 2021, 10:14:50 am
content: Quote from: TheSteve on January 16, 2021, 09:15:36 amWouldn't it work by only activating the 506 option?

author: TheSteve
author_rank: Unknown
timestamp: January 16, 2021, 05:36:16 pm
content: I don't have a N1996A to do any testing anymore. When I was experimenting a few years back I had the license verification bypassed and tried using option 506 and recall having a problem with it. I think the issue is that the Digital IF board is programmed as 3 or 6 GHz and it gave an error because it was initialized for 3 GHz instead of 6 GHz and would only boot with an error.Quote from: tv84 on January 16, 2021, 10:14:50 am

author: rogersstuart
author_rank: Contributor
timestamp: January 16, 2021, 08:15:06 pm
content: Quote from: PA0PBZ on January 16, 2021, 08:45:49 amI got those installed. The only other option that I'd like to try to enable is TG6. From what I can tell the tracking generator is, for the most part, only meant to be used with the Stimulus/Response suite. That works, but in spectrum analyzer mode the tracking generator does nothing and there's a suspiciously empty menu when I press the source button.

author: TheSteve
author_rank: Unknown
timestamp: January 16, 2021, 08:21:00 pm
content: The TG works pretty good for antenna swr measurements. The source function can be made to work but was never officially sold and has limited use.

author: PA0PBZ
author_rank: Super Contributor
timestamp: January 16, 2021, 08:31:52 pm
content: TG6 - 3758B5467118

author: gslick
author_rank: Frequent Contributor
timestamp: January 16, 2021, 09:26:07 pm
content: Quote from: PA0PBZ on January 16, 2021, 08:45:49 amIs the "Generic FlexLM Crypt Generator v0.5 by Haldir" shown in the keygen.png image attached to reply #9 available somewhere on the net? I haven't found any exact references to that tool anywhere else yet.https://www.eevblog.com/forum/testgear/agilent-n1996a-software-unlock/msg3251066/#msg3251066Does that tool generate a signature generator given the encryption seed1 and seed2 values, vendor name, and FlexLM version?I have a different product for which I found a manual process to observe the correct signature value so I don't need a standalone signature generator for it, although the manual process is time consuming and it would be nice to have a standalone signature generator.

author: rogersstuart
author_rank: Contributor
timestamp: January 16, 2021, 09:41:20 pm
content: It did accept the code but nothing changed. Well, there are more on the list (like GPS), but I'm satisfied with the way it is now. I won't be transmitting (noticeably) and I do have an OCXO here.My highest frequency signal generator is 2.4 GHz, and personally I haven't worked with anything past 1 GHz so far. I do intend to move on to learning about and attempting to design microstrip filters. The stimulus/response suite combined with my 3 GHz USB VNA and signal generators should let me somewhat comfortably work at around 2 GHz, which is enough for now. The ability to test something at up to 6 GHz is just a bonus.My only gripe about this SA is the fact that it's quite obviously meant for older technologies. Basic 3G tests and AM/FM modulation. I was originally looking at the SSA3021X Plus but wanted that extra range past what the hack would offer. I'm actually upgrading from a Spectran HF6065, so dropping below 6 GHz felt like a downgrade. After making an offer I got this thing for $1600 with free shipping. At first glance the Siglent looked better, but upon closer inspection the Agilent takes the lead despite being a 2003-2006 vintage machine. Also, the TestEquity label says 20 AUG 12. So there's even a chance that it was recently calibrated!Thanks for all the help with this! I appreciate it!

author: tv84
author_rank: Super Contributor
timestamp: March 07, 2021, 02:52:57 pm
content: Quote from: analogRF on September 26, 2020, 09:19:27 pmNo, N9320B uses a MD5 hash licensing method similar to N9340B.

author: nixie_tube
author_rank: Newbie
timestamp: March 08, 2021, 11:34:56 am
content: Hi PA0PBZ!Would you be so kind as to also help me unlock the options on my old Agilent 1996a spectrum analyzer? I have this beautiful 6 GHz-enabled unit, but with all other options inactive and this makes me very sad(My hardware details are:Model #: N1996ASerial #: MY47053252Host ID: 3079A480The options available are as follows:271 -- Spectrogram;N8995A-SR6 -- Stimulus/Response Measurement Suite, 6 GHzP06 Preamplifier, 6 GHz;AFM -- AM/FM Tune & Listen;N8996A-1FP -- AM/FM Modulation AnalyzerThank you so very much!

author: PA0PBZ
author_rank: Super Contributor
timestamp: March 08, 2021, 02:57:12 pm
content: Hi, try this:271 7F8560783A8AN8995A-SR6 D0CD3F4411F0P06 50C7BF6C5F6AAFM 7B448F54463EN8996-1FP 4617E83A4C7E

author: QH54
author_rank: Newbie
timestamp: March 28, 2021, 08:02:43 am
content: Hi PA0PBZ!Yesterday i happened to find this Community Forum and was very suprised to find posts from a few days ago.After finishing my registration i hope you can help me to activate missing options of my old N1996A.Would you please be so kind as to do me this favour?My hardware details are:Model #: N1996ASerial #: US45310402Host ID: 30795D4FThe options available are as follows:AFM -- AM/FM Tune & Listen;N8996A-1FP -- AM/FM Modulation AnalyzerThank you so very much!

author: PA0PBZ
author_rank: Super Contributor
timestamp: March 28, 2021, 09:25:32 am
content: Hi QH54Try this:AFM EDF7F7D8C332N8996A-1FP D494828277D8

author: QH54
author_rank: Newbie
timestamp: March 28, 2021, 09:39:04 am
content: Dear PA0PBZ ,Thank you very much for your prompt reply. Everything works fine and i am very grateful.Hope i can help you some day.Stay well!

author: broadcast33
author_rank: Newbie
timestamp: August 26, 2021, 06:51:24 pm
content: Dear friends, I am new in forum. Can you help me?I need to activate the options:271N8995AP06TG6Model#N1996Serial#MY45371214Host Id 3079ED59Thanks in advanceRegards

author: ghikasir
author_rank: Newbie
timestamp: January 01, 2022, 04:47:51 pm
content: Hi there and happy new year.Can anybody help me to install these followinq options?My hardware details are:Model #: N1996ASerial #: US45310316Host ID: 3079CFFE- 271--Spectrogram- N895A-SR6 -- Stimulus/Responce Measurement Suite, 6 GHz- P06 Preamplifier, ^ GHz- N8996A-1FP -- AM/FM Modulation Analyzer

author: PA0PBZ
author_rank: Super Contributor
timestamp: January 02, 2022, 01:19:04 pm
content: Quote from: ghikasir on January 01, 2022, 04:47:51 pmTaken care of already

author: wd5jfr
author_rank: Regular Contributor
timestamp: April 26, 2022, 05:13:24 pm
content: I bought a nice one couple of weeks ago and still trying to get used to it, big upgrade from HP 141 and HP 8935.I'd like to add AFM and N8996A-1FP but the codes listed fail instali so I'm guessing they're unit specific.My specifics are:Model # N1996ASerial # MY47052808Host ID 30790D22Can someone please help me unlock the 2 locked features?ThanksHank

author: PA0PBZ
author_rank: Super Contributor
timestamp: April 26, 2022, 09:03:06 pm
content: Here you go:AFM 89F8A90CCDD4N8996A-1FP 1390EE4ADE22

author: wd5jfr
author_rank: Regular Contributor
timestamp: April 27, 2022, 06:04:13 pm
content: Both installed with little effort, thanks. I tried to listen to local AM and FM stations but I only get a second or so of sound interupted by static and repeating, no luck in chaining timing. I checked the instructions and found that it states "allows the detection of audio", so I wonder if I can set it so I can listen without interruption, if not seems like a waste of a speaker. My HP 8935 allows listening to AM, FM, as well as SSB.Hank

author: TheSteve
author_rank: Unknown
timestamp: April 27, 2022, 07:35:13 pm
content: You will only get audio demodulated during the sweep. You can increase the sweep time to something really long which will decrease the cutouts. End of the day though most SA's are not intended to be used as an AM or FM general purpose receiver.

author: duplexer
author_rank: Newbie
timestamp: May 19, 2022, 11:07:21 pm
content: Hello,I also have an N1996A that is new to me that I would like to activate the additional software items.Model# N1996ASerial# US45310391Host ID 3079CDB8Available options shown are:271 -- SpectrogramP06 -- Preamplifier, 6 GHzAFM -- AM/FM Tune & ListenN8996A-1FP -- AM/FM Modulation AnalyzerThank you so much for helping....

author: PA0PBZ
author_rank: Super Contributor
timestamp: May 20, 2022, 09:45:20 am
content: AFM 33ADCD5E129C271 3A953242A578P06 E0577BEE5294N8996A-1FP 1677E356FBEC

author: ktgun
author_rank: Contributor
timestamp: September 12, 2022, 02:09:12 pm
content: Quote from: TheSteve on January 16, 2021, 09:15:36 amSilly situation: i can't login into SA, because it ask's me login and passwordCan somebody tell, where i can find them? maybe some default values? i was read programming manual for N1996A, but no any default login or passwordOr my telnet connection is wrong?

author: PA0PBZ
author_rank: Super Contributor
timestamp: September 12, 2022, 02:36:26 pm
content: Quote from: ktgun on September 12, 2022, 02:09:12 pmYou have mail.

author: TylerH53
author_rank: Newbie
timestamp: October 28, 2022, 12:47:39 pm
content: Would anyone happen to have access to a Service manual for the N1996A? I'm trying to perform a performance verification on one but have been unable to locate a good manual.

author: PA0PBZ
author_rank: Super Contributor
timestamp: October 28, 2022, 12:55:52 pm
content: Hi Tyler,I just responded to your PM, see the link there. That's all there is for the instrument afaik.

author: TrazorGr
author_rank: Newbie
timestamp: February 17, 2023, 09:32:26 am
content: Good morning.Can anybody help me to install these followinq options?My hardware details are:Model #: N1996ASerial #: MY47052822Host ID: 30796AA3- N8995A-SR6 -- Stimulus/Responce Measurement Suite, 6 GHzThanks.

author: PA0PBZ
author_rank: Super Contributor
timestamp: February 17, 2023, 11:19:44 am
content: Replied to your PM

author: TrazorGr
author_rank: Newbie
timestamp: February 17, 2023, 12:51:41 pm
content: Dear PA0PBZ ,Thank you very much for your prompt reply. Everything works fine.

author: ktgun
author_rank: Contributor
timestamp: February 23, 2023, 08:13:02 am
content: Hi!Maybe somebody here was same issue like me: So i have N1996A, 3GHz version, with A.02.04 GUI version, in my lab, and i activated options 506, P06 (and edited profile for 6 GHz like in post above), 1FP, AFM.Everything works great, but after that i decide to activate SR6. System says ok for option key, and key is appear in option list. But button 'Stimulus/Response' in 'Mode' menu is still disable!!!Maybe it need to edit some profile for 6GHz SR6 like it was with P06?

author: PA0PBZ
author_rank: Super Contributor
timestamp: February 23, 2023, 09:33:01 am
content: Just as a quick test, what happens when you activate SR3?

author: ktgun
author_rank: Contributor
timestamp: February 23, 2023, 12:23:20 pm
content: Em, the problem is that after i input code for SR6, option menu became disable too. Or in other words, there was no any variants for selecting avialiable options.Now I understand that I was in a hurry, and it must be input SR3 code first, but 'do first, think after' bited me in that momentI think, that now i must delete SR6 code via SCPI and then try to input SR3 first. Will try next week and share results.

author: PA0PBZ
author_rank: Super Contributor
timestamp: February 23, 2023, 01:11:43 pm
content: You can telnet into the machine, user root, password c00lbull (that's zero's). In /idata/toroServer/license there is a file elgato.lic where all licensed options are kept. Each option has an entry like this:FEATURE 503 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=12345678 SIGN=0123456789ABYou can add/change/delete the entries for the different options there.Having said that, I have no idea how you could lose the options menu

author: ktgun
author_rank: Contributor
timestamp: February 23, 2023, 01:48:55 pm
content: Thanks, will try via telnet and will write results!

author: TheSteve
author_rank: Unknown
timestamp: February 23, 2023, 04:15:37 pm
content: You can't use the 6 GHz options on a 3 GHz unit. You can edit the frequency range and get it to work to 6 GHz of course. But you don't want to install those options - they don't match the official hardware installed and it knows it

author: ktgun
author_rank: Contributor
timestamp: February 24, 2023, 08:16:33 am
content: Hmm, the thing is that P06 and 506 options works fine on my SA. In attached example are results of measurements after activation of these options and edit P06 profile. The measurement error was about 1 dB without any calibration and with bad cable. So, i doubt that problem with S6 is related with some firmware protect system. More probably the reason is some editable parameters in S6 profiles.

author: flukeandhp
author_rank: Newbie
timestamp: March 11, 2023, 09:54:55 am
content: I have an old Agilent N1996A spectrum analyzer.Model#: N1996ASerial#: MY47052738Host ID: 3079FE12It has the 6 GHz option as:- 506 (B7D58CBE2E82)but nothing else at the moment.It lists the following additional options could be added:- 271 - Spectrogram- N8995A-SR6 - Stimulus/Response Measurement Suite, 6 GHz- P06 - Preamplifier, 6 GHz- AFM - AM/FM Tune and Listen- N8996A-1FP - AM/FM Modulation AnalyzerTo make this analyzer more useful, it would nice to have these additional options, especially the stimulus/response option. It would be greatly appreciated if you would be able to help.

author: PA0PBZ
author_rank: Super Contributor
timestamp: March 11, 2023, 10:29:38 am
content: Quote from: flukeandhp on March 11, 2023, 09:54:55 am271 CB1B5184BAF2N8995A-SR6 1D7C998CBB32P06 977065EE4438AFM 38D4BDBEF716N8996A-1FP 166C6C80DCDA

author: ktgun
author_rank: Contributor
timestamp: March 17, 2023, 12:03:26 pm
content: Quote from: PA0PBZ on February 23, 2023, 09:33:01 amWell, i connected with device via LAN and delete option N8995A-SR6 via SCPI command and reboot. Option name disappeared from option list in device interface, but meny "Install option" -> "From list" didn't unlock and in "Install option" -> "From File" says that "no valid options available to install".After that i activated option N8995A (SR3). Option name appears in option list but menu "Stimulus/Response" still disabled.Any thoughts?

author: PA0PBZ
author_rank: Super Contributor
timestamp: March 17, 2023, 03:31:02 pm
content: Did you copy the 6GHz profile to the 3GHz profile? In that case it's not necessary to activate option 506 because you told the machine that the 3GHz is now 6GHz. Remove all the 6GHz options and try to use the 3GHz ones.

author: ktgun
author_rank: Contributor
timestamp: March 17, 2023, 05:51:39 pm
content: Yep, i copied 6 GHz profile to the 3 GHz profile))) Will try to go back on 3 GHz version and see what will be in this case.Another idea was to update firmware, as i remember there is FW version newer, than in my device in present moment.

author: ktgun
author_rank: Contributor
timestamp: March 27, 2023, 11:58:57 am
content: Quote from: PA0PBZ on March 17, 2023, 03:31:02 pmIt works! Thanks to all!So, if it necessary to make 6 GHz device from 3 GHz device withall options, follow these steps:1) Copy the 6GHz profile to the 3GHz profile via'TheSteve'tutorial;2) Activate all options that you need in their'3GHz' - version;3) Enjoy!

author: hmisy
author_rank: Newbie
timestamp: May 01, 2023, 05:42:46 pm
content: Hi PA0PBZ!Would you be so kind as to also help me unlock the options on my old Agilent 1996a spectrum analyzer? I have this beautiful 6 GHz-enabled unit, but with all other options inactive.My hardware details are:Firmware #: A.02.04Model #: N1996A 100khz-6GhzSerial #: MY47052461Host ID: 3079A821The options available are as follows:271 -- Spectrogram;N8995A-SR6 -- Stimulus/Response Measurement Suite, 6 GHzP06 Preamplifier, 6 GHz;N8996A-1FP -- AM/FM Modulation AnalyzerThank you so very much!

author: PA0PBZ
author_rank: Super Contributor
timestamp: May 01, 2023, 07:30:05 pm
content: Hi,Try this and let me know:271 09F0F070A528N8995A-SR6 07D63E1E0254P06 05884A4ECD72N8996A-1FP C1EA2AD21CD0

author: hmisy
author_rank: Newbie
timestamp: May 01, 2023, 08:00:15 pm
content: Hi PA0PBZ,Thank you very much for the unlock code.Now all options are activated and i am going to test the operation of the options.Tnx. 73! YO6UI

author: zzif
author_rank: Newbie
timestamp: June 20, 2023, 07:51:20 pm
content: Hi PA0PBZ!I have an old N1996A, which lacks all software options other than 6 GHz bandwidth. If you could provide the keys for the following options I would be really grateful:271N8995A-SR6P06N8996A-1FPAFMKind regards,73 OH6GMT

author: TheSteve
author_rank: Unknown
timestamp: June 20, 2023, 08:14:00 pm
content: If he can do it he will need the serial # and hostid of your machine.

author: PA0PBZ
author_rank: Super Contributor
timestamp: June 20, 2023, 08:35:03 pm
content: Quote from: TheSteve on June 20, 2023, 08:14:00 pmSerial # is not needed, but the hostid is.

author: zzif
author_rank: Newbie
timestamp: June 21, 2023, 07:04:58 am
content: Oh, sorry - forgot the important stuffThe host ID is 30790A51.zzif

author: PA0PBZ
author_rank: Super Contributor
timestamp: June 22, 2023, 09:25:14 am
content: zzif, try this and let us know if it worked:271 F5503F480B8EN8995A-SR6 307E1842C3F8P06 9CCA312EA4CEN8996A-1FP F4510B0E20C4AFM 2F62591452E6

author: zzif
author_rank: Newbie
timestamp: June 27, 2023, 09:08:35 pm
content: It works - thank you again!

author: madmac
author_rank: Contributor
timestamp: July 07, 2023, 02:05:59 pm
content: I dug out a N1996A-503 (3GHz) that has not been used for a couple of years after a loan to some students for summer project. Plan was to impose on PA0PBZ to get some license keys as it has no options.On power up I get a warning message that license for option 503 is not there.....press REBOOT to correct error. It just repeats on power up. Updating with latest firmware exactly the same.Does anyone know if there is volatile storage in this unit?Or any ideas to trouble shoot?ThanksMadmac

author: TheSteve
author_rank: Unknown
timestamp: July 07, 2023, 03:07:43 pm
content: Everything is stored in flash memory. I believe to recover the unit you may need to get the hostid, get a new license generated and then transfer it to the unit via telnet and a usb flash drive(or ftp).

author: PA0PBZ
author_rank: Super Contributor
timestamp: July 07, 2023, 09:32:59 pm
content: Use telnet to log in: user root, password c00lbull (zero's for the 'oh's). In /idata/toroServer/license there is a file elgato.lic which holds the licenses, can you post the contents of that?

author: madmac
author_rank: Contributor
timestamp: July 10, 2023, 03:06:07 pm
content: Three files in that directory....elgato.lic emptyhostid 3079A5F0lic emptyThanksmadmac

author: PA0PBZ
author_rank: Super Contributor
timestamp: July 10, 2023, 03:40:50 pm
content: hostid and elgato.lic should be there, don't know what lic is but I guess it won't hurt.Put the following text in elgato.lic and you should be good to go with all options.Let us know.Code:FEATURE 503 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=31AEE3DC61E2FEATURE AFM agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=230909167924FEATURE 271 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=6AB4AEDE2F20FEATURE TG3 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=128137962E70FEATURE N8995A-SR3 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=F997FEA4ABB8FEATURE 271 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=6AB4AEDE2F20FEATURE P03 agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=AF2913345FCEFEATURE N8996A-1FP agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=6E0CBA900D20FEATURE N8996A-2FP agilent 1.000 permanent uncounted \HOSTID=ID_STRING=3079A5F0 SIGN=32CC0444E142

author: madmac
author_rank: Contributor
timestamp: July 10, 2023, 05:28:32 pm
content: Thank you for your help.Loads into the SpecAn app and all options come up enabled.I might have a hardware issue as it has frozen a couple of times, does not respond to any button presses and screen stops being updated.Time to take the top off.madmac

author: arsh_vv
author_rank: Newbie
timestamp: October 17, 2023, 06:54:09 am
content: Hello PA0PBZ!Would you help me unlock the options on my Agilent N1996a?The details are:Model #: N1996ASerial #: MY47052509Host ID: 30790E72FW: A.02.04The available options are the follows:271 -- Spectrogram;N8995A-SR6 -- Stimulus/Response MeasurementAFM -- AM/FM Tune & Listen;N8996A-1FP -- AM/FM Modulation AnalyzerThank you in advance!

author: PA0PBZ
author_rank: Super Contributor
timestamp: October 17, 2023, 09:38:12 am
content: Hi,Try the following:Code:271 E9FBCFFA6912N8995A-SR6 702D0442683AAFM 7E19D51A0280N8996A-1FP B9EF313C003C

author: Uwe42
author_rank: Newbie
timestamp: November 11, 2023, 08:18:17 pm
content: Hello PA0PBZis it possible to unlock options on an N9010A EXA Signal Analyzer ?Kind regards

author: PA0PBZ
author_rank: Super Contributor
timestamp: November 11, 2023, 09:48:39 pm
content: Quote from: Uwe42 on November 11, 2023, 08:18:17 pmIt looks like the options are still available from the manufacturer so I'm not going to try, sorry.

author: wtrevine
author_rank: Newbie
timestamp: December 27, 2023, 05:33:47 pm
content: Hi PAOPBZ...I would be very grateful if you could unlock my N1996A as well.Model # N1996ASerial # MY47052783Host ID 30790954The options available are as follows:271 -- Spectrogram;N8995A-SR6 -- Stimulus/Response Measurement Suite, 6 GHzP06 Preamplifier, 6 GHz;AFM -- AM/FM Tune & Listen;N8996A-1FP -- AM/FM Modulation AnalyzerThank you so very much!

author: PA0PBZ
author_rank: Super Contributor
timestamp: December 27, 2023, 07:53:04 pm
content: Quote from: wtrevine on December 27, 2023, 05:33:47 pmTry this and let us know:Code:271 B20848B46300N8995A-SR6 C7E29832EB2AP06 4C7331649CBAAFM 281C757490B8N8996A-1FP DEA77BC8A472

author: imett
author_rank: Contributor
timestamp: March 10, 2024, 10:17:28 pm
content: Hi, i need help for my N1996A:simetime it doens't boot up and the GUI is freezed on the mask "Copyright..." after that with the unix command "restart" (telnet..) the GUI restart and is possible use the instrument normallyI've to do two or three time the restart command to have the normal use!For these reason i investigate and i found a serial console in J9 connector (on the bottom of the instrument) and post what'ts happen when GUI doesn't starts. Is an infinite loop of:hub.c: new USB device sm501-1.2, assigned address 8ti_usb_serial.c: detected TI USB 3410 1 port adapter, vendor 0x0451, product 0x3410, serial number 'TUSB3410 'ti_usb_serial.c: TI USB 3410 1 port adapter now attached to ttyTIUSB0 (or usb/ti/0 for devfs)port 2, portstatus 100, change 1usb.c: USB disconnect on device sm501-1.2 address 8ti_usb_serial.c: TI USB 3410 1 port adapter now disconnected from ttyTIUSB0port 2, portstatus 101, change 1hub.c: new USB device sm501-1.2, assigned address 9ti_usb_serial.c: detected TI USB 3410 1 port adapter, vendor 0x0451, product 0x3410, serial number 'TUSB3410 'ti_usb_serial.c: TI USB 3410 1 port adapter now attached to ttyTIUSB0 (or usb/ti/0 for devfs)port 2, portstatus 100, change 1usb.c: USB disconnect on device sm501-1.2 address 9ti_usb_serial.c: TI USB 3410 1 port adapter now disconnected from ttyTIUSB0port 2, portstatus 101, change 1some one could help me? it is a problem of the USB3410 controller?thanks in advance matteo

author: shashitej
author_rank: Contributor
timestamp: March 27, 2024, 06:29:31 am
content: Hello PA0PBZ,I need ur help to activate the options in Agilent N1996A Spectrum AnalyzerI would be very grateful if U could help me to get the keys for the following unitUnit HOST ID : 307934B2available options:(1) 271 ---Spectrogram(2) N8995A -SR6---Stimulus/Response Measurement Suite, 6GHz(3) P06 ---Preamplifier, 6GHZ(4) AFM --- AM/FM Tune & Listen(5) N8996A--1FP --- AM/FM Modulation AnalyzerThank youSHASHITEJ

author: PA0PBZ
author_rank: Super Contributor
timestamp: March 27, 2024, 10:23:53 am
content: QuoteTry these:271 26C916D0CB14N8995A-SR6 C7ACBA280B68P06 B80F7E26D7E4AFM 7E644BE65510N8996A-1FP C26853F674CA

author: shashitej
author_rank: Contributor
timestamp: March 27, 2024, 11:25:02 am
content: Hi PA0PBZ,I was able to activate the options with the keys provided by u.thanks a lotShashitej

author: Harrry
author_rank: Newbie
timestamp: April 10, 2024, 11:47:28 am
content: Hi PA0PBZ!Would you be so kind as to also help me unlock the options on my old Agilent 1996a spectrum analyzer? I have this beautiful 6 GHz-enabled unit, but with all other options inactive.My hardware details are:Model #: N1996ASerial #: MY47053163Host ID: 307994B1The options available are as follows:271 -- Spectrogram;N8995A-SR6 -- Stimulus/Response Measurement Suite, 6 GHzP06 Preamplifier, 6 GHz;AFM -- AM/FM Tune & Listen;N8996A-1FP -- AM/FM Modulation AnalyzerThank you so very much!Igor, RU3GX

author: bobmat
author_rank: Newbie
timestamp: July 25, 2024, 10:26:55 pm
content: Hello PA0PBZ,I have a N9342C Spec An and would like to activate options:Host ID = 64C56FBBoptionsAMADMASIMSCNThank you & 73,bobmat KM6GYVPS I designed the front ends for HP/Agilent SAs for 110 GHz.

author: PA0PBZ
author_rank: Super Contributor
timestamp: July 26, 2024, 08:41:29 am
content: Quote from: bobmat on July 25, 2024, 10:26:55 pmI'm taking this to PM

author: vmaksimo
author_rank: Newbie
timestamp: August 11, 2024, 01:50:45 am
content: Hello PA0PBZ,Can I have a Service Manual for it as well, please. N1996A that is.Also I am Linux illiterate, is there a detail instructions for unlocking features?Options I may add are:271P03AFMN8996A-1FPModel #: N1996ASerial #: MY47052138Host ID: 3079FFF2FW: A.02.07Appreciated if U can help.(BTW learning Linux as we speak)

author: PA0PBZ
author_rank: Super Contributor
timestamp: August 13, 2024, 01:01:30 pm
content: Quote from: vmaksimo on August 11, 2024, 01:50:45 amHere are your keys:271 637E48CCFBE4P03 346D5DDCED36AFM 96C23968208AN8996A-1FP 4D7248C89984The service guide (not component level) can be downloaded here:https://community.keysight.com/s/question/0D52L00005Idoo5SAB/n1996a-service-documentation

author: vmaksimo
author_rank: Newbie
timestamp: August 14, 2024, 12:57:55 am
content: Did install all of them. Worked like a charm. Not even used Linux, just Options Manager in the System menu.Many thanks to PA0PBZ for the keys.Best regards,Max

author: dixonkean
author_rank: Newbie
timestamp: November 17, 2024, 01:43:31 pm
content: Hi PA0PBZ!I've got an old 3Ghz N1996A that I'm stuck with on a jobsite, and it only has the 503 option installed. If you'd be so kind as to provide the keys for the for the remaining options, I'd be extremely grateful!Model #: N1996ASerial #: MY47052265Host ID: 30796AC0FW: A.02.07Options:271N8995A-SR3P03AFMN8996A-1FP

author: PA0PBZ
author_rank: Super Contributor
timestamp: November 17, 2024, 02:45:04 pm
content: QuoteHere you go:271 CDFD368815E4N8995A-SR3 3DCB93E662EEP03 B2660698521CAFM 1BB927B2EA36N8996A-1FP 4CECE3CEECFA

author: dixonkean
author_rank: Newbie
timestamp: November 18, 2024, 08:37:52 am
content: All options installed successfully, you're a legend! Thank you, you've really helped us out.

author: Doctor_MYheart
author_rank: Newbie
timestamp: December 06, 2024, 12:10:55 pm
content: Hello PA0PBZ,I have a two N1996C Spec An and would like to activate options:Model N1996AHost ID = 30795AA1Options271N8995A-SR3P03AFMN8996A-1FP&Model N1996AHost ID = 30795BE1Options271N8995A-SR3P03AFMN8996A-1FPThank you SO MUCH.

author: Doctor_MYheart
author_rank: Newbie
timestamp: December 07, 2024, 10:29:40 am
content: I need an analyzer for research work in collegeFor my studentsBest wishes,Erik

author: PA0PBZ
author_rank: Super Contributor
timestamp: December 07, 2024, 10:51:48 am
content: Here you go Erik, let me know.HostID 30795AA1:271 F4756604D03AN8995A-SR3 28836A7AF092P03 BC47EF943754AFM B1E2BEF05EF0N8996A-1FP 406DCF826DBEHostID 30795BE1:271 8E9E82EC6B2AN8995A-SR3 294C80B2FD80P03 F49ED1F0C910AFM 4135AC2E0898N8996A-1FP 9162FC908292

author: Doctor_MYheart
author_rank: Newbie
timestamp: December 07, 2024, 12:00:46 pm
content: thank you very muchyou've really helped us out.Best wishes,Erik

author: ReijoK
author_rank: Newbie
timestamp: December 28, 2024, 03:29:33 pm
content: Hello,If I may ask for the codes, too? Not that I would know how to use all those features, but for me a (the?) meaning of life is learning…Model # N1996ASerial # MY47052282Host ID 3079C885271 -- SpectrogramN8995A-SR6 -- Stimulus/Response Measurement Suite, 6 GHZP06 - Preamplifier, 6 GHzAFM -- AM/FM Tune & ListenN8996A-1FP -- AM/FM Modulation AnalyzerThanks,Reijo

author: PA0PBZ
author_rank: Super Contributor
timestamp: December 31, 2024, 11:30:29 am
content: Quote from: ReijoK on December 28, 2024, 03:29:33 pm271 B14E77C27146N8995A-SR6 BB6251206FD6P06 05033A8EC1C0AFM 722F41F41DD4N8996A-1FP CA49665A6370

author: ReijoK
author_rank: Newbie
timestamp: December 31, 2024, 02:12:16 pm
content: Hi PA0PBZ,Thank you, very much appreciated! Features successfully activated. This will keep my (both) brain cells active :-)- Reijo

author: kakavospool
author_rank: Newbie
timestamp: April 04, 2025, 01:46:21 pm
content: Hello PA0PBZ,If I may ask for the codes, too? Thank you for your cooperation and help.Model # N1996ASerial # US45310283Host ID 30795C69Best regardsCharlie