DS1000z serie unlocking - Page 1
Forum section: electronics / testgear

author: asgard20032
author_rank: Regular Contributor
timestamp: August 04, 2014, 04:03:40 pm
content: Ok after some search, I came across this message in the mega thread that we shall not pronounce the nameSo to save people time, I make this more easily accessible.Source :https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg432125/#msg432125Thanks to icaro600 for this.Quote

author: pascal_sweden
author_rank: Super Contributor
timestamp: August 04, 2014, 06:07:26 pm
content: So you don't have to open your unit at all?Hopefully this also works for MSO1074Z =)

author: asgard20032
author_rank: Regular Contributor
timestamp: August 04, 2014, 06:43:07 pm
content: From this source :https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg484839/#msg484839Quote

author: eyteam
author_rank: Newbie
timestamp: September 11, 2014, 11:24:02 am
content: The SCPI dump will not work with the MSO1074Z Firmware 04.00

author: pierre288
author_rank: Newbie
timestamp: September 22, 2014, 08:40:25 pm
content: Hi,just received my MSO1074Z-S...I tried to add features but did not work either for me.I have SW version 04.01Any hope to get a rigol update soon ?thanks

author: SebG
author_rank: Regular Contributor
timestamp: October 05, 2014, 09:45:36 pm
content: Hi. I used the key generator and enabled all the options. It's fantastic. I'm, however, wondering how would i deactivate any option? Is it possible? Also i was curious and activated the 500uV (0.5mV) range which works but with a -500mV (-0.5 V) DC offset on the screen. How can I deactivate that option?ThankxPs I should mention i have the DS1074Z-S Oscilloscope

author: iRad
author_rank: Regular Contributor
timestamp: October 06, 2014, 02:57:30 am
content: Works like a dream...Of course, it's still only a 100 MHz Scope. But a 4 Channel, 100 MHz, ALL OPTIONS INSTALLED scope(except 500uV Vertical Sensitivity)for less than $400.00.Very nice...

author: Fungus
author_rank: Super Contributor
timestamp: October 06, 2014, 08:59:40 am
content: Quote from: SebG on October 05, 2014, 09:45:36 pmDespite all the warningsNOTto?Quote from: SebG on October 05, 2014, 09:45:36 pmCuriosity killed the cat.

author: alank2
author_rank: Super Contributor
timestamp: October 16, 2014, 09:57:22 pm
content: Quote from: SebG on October 05, 2014, 09:45:36 pmYou have to issue this command from SCPI over USB::SYSTem:OPTion:UNINSTallThen RESTART before loading any news keys...

author: iRad
author_rank: Regular Contributor
timestamp: October 16, 2014, 10:11:16 pm
content: Quote from: xnaron on October 16, 2014, 08:45:17 pmJust useDSERand nothing else (may not be listed as one of the keygen options, but it works).AGAIN - DO NOT NOT USE DSBA for the 500uV Vertical, or DSFR for all options. Save yourself the hassle.

author: hobbified
author_rank: Newbie
timestamp: November 17, 2014, 07:23:49 am
content: Following the pattern (letters ABCDEFGHJKLMNPQR map to hex digits 0-F) there should be a feature DSCA between DSBA and DSEA. Has anyone tested what it is? I guess it's probably 70MHz since there's a DS1074Z.

author: sptm14a
author_rank: Newbie
timestamp: December 02, 2014, 09:22:47 pm
content: Quote from: pascal_sweden on August 04, 2014, 06:07:26 pmThat won't work for MSO. MSO option codes start with CSXX. See the post linked below, it lists all option codes for MSO1074 and explains why you cannot use current riglog. And yes, you will need to open the scope and dump its memory to generate MSO license keys for unlocking.https://www.eevblog.com/forum/testgear/sniffing-the-rigol%27s-internal-i2c-bus/msg531876/#msg531876

author: Howardlong
author_rank: Super Contributor
timestamp: December 02, 2014, 10:05:33 pm
content: Quote from: sptm14a on December 02, 2014, 09:22:47 pmWe do appreciate that you've been working on this, but do you have any plans to release your code that will work on a memory dump?Many thanks, Howard

author: StevenTodd
author_rank: Newbie
timestamp: April 13, 2015, 05:56:37 pm
content: I tried the site... it shows and ERROR: Private key lenth error.the private key is not populating.any ideas?

author: Ardvaark
author_rank: Contributor
timestamp: March 31, 2016, 02:38:06 am
content: DS1054Z, received 03/30/16. DSER verified working with as supplied Software version: 00.04.03.SP2, with as supplied board version of: 0.1.1Doing a full re-calibration immediately after.

author: Mechatrommer
author_rank: Super Contributor
timestamp: March 31, 2016, 04:08:45 am
content: Quote from: Ardvaark on March 31, 2016, 02:38:06 amcongratulation on your upgradei guess you are the one on the soasystem's mail

author: dennis h.
author_rank: Newbie
timestamp: March 31, 2016, 09:13:49 pm
content: Quote from: Mechatrommer on March 31, 2016, 04:08:45 amI can attest the the hack still works. I got mine the 29 th. and similar version and board number. The first number I tried did not work but used DSER the second time and it worked.I could not get the archived version to generate any number at all.Horay Dave!

author: PositiveE
author_rank: Newbie
timestamp: April 08, 2016, 07:26:47 pm
content: Hi folks. I'm really having a tough time with this. After several attempts and "12 hour lockouts" I'm starting to think I'm doing something seriously wrong. I've got a DS1074Z Plus with Board Version 2.1.1 (I haven't seen this version mentioned) and firmware 00.04.03.SP2 Does this Board Version mean a new boot loader? Is it time to break out the SPI tools, or am I just doing something terribly wrong multiple times?

author: Fungus
author_rank: Super Contributor
timestamp: April 08, 2016, 07:44:30 pm
content: Quote from: PositiveE on April 08, 2016, 07:26:47 pmThe problem might be in the "plus". It's a different beast.

author: Howardlong
author_rank: Super Contributor
timestamp: April 08, 2016, 07:57:34 pm
content: Quote from: Fungus on April 08, 2016, 07:44:30 pmYes, it's my understanding that because the Plus is essentially an MSO1000Z without the physical LA probe, you need to folloow the instructions for the MSO1000Z which will mean opening her up I'm afraid. Depending on your JTAG skills and armory, if you've never done it before, set aside at least half a day.

author: PositiveE
author_rank: Newbie
timestamp: April 08, 2016, 08:38:01 pm
content: Thanks for the quick answers! The MSO1000Z seems a likely culprit. I'll have to do more research on the JTAG approach. Currently I'm without the tools, but perhaps this is a project for the near future. I'll post results, if someone else doesn't beat me to it first.

author: PositiveE
author_rank: Newbie
timestamp: April 14, 2016, 04:40:53 am
content: Just posting back to confirm success. Indeed the [ DS1074Z Plus ] = [ MSO1000Z ] series. I won't repeat the details here, as there's quite a few people who beat me to it just around the corner. Many thanks goes out to all who contributed. I can't improve upon what is already really good info.In case you just landed here, check here for more info:https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg585831/#msg585831(That's just one of many helpful points. That thread is full of gems.)

author: pvico
author_rank: Newbie
timestamp: June 03, 2016, 03:22:33 pm
content: Quote from: PositiveE on April 14, 2016, 04:40:53 amGlad to know you succeeded. I have recently purchased a DS1104ZPluswith 00.04.03 SP2 and board 2.1.1 just like you.I have done the JTAG dump and, using the mso1000z patched rigup 0.4.1, './rigup scan dump file.bin > keyfile.txt' gives an apparently correct keyfile (at least the serial number is correct).However, the licenses obtained with './rigup license keyfile.txt 0x1C00x' are invalid. They do verify with './rigup info'.Did you do anything else?

author: PositiveE
author_rank: Newbie
timestamp: June 03, 2016, 05:36:44 pm
content: It's been awhile.... I think I remember compiling rigup on Linux. I don't think the riglol program worked for me either. There are a few people who mention how to do this, and where the source code is. ...Part of the adventure, I guess.

author: pvico
author_rank: Newbie
timestamp: June 03, 2016, 06:32:27 pm
content: Quote from: PositiveE on June 03, 2016, 05:36:44 pmI did compile as well but on a mac (a hackintosh actually). So from your answer, I guess the answer lies in finding a specific source file. Ok, let's hunt for it.

author: PositiveE
author_rank: Newbie
timestamp: June 03, 2016, 09:04:37 pm
content: All I can remember is this:https://www.eevblog.com/forum/testgear/you-can't-unlock-a-mso1000z-series-scope-without-a-memory-dump-and-other-lessons/msg772022/#msg772022I don't know what I did with the files

author: phd0
author_rank: Newbie
timestamp: March 29, 2018, 06:59:12 pm
content: [Supported Model] All the MSO/DS1000Z Series Digital Oscilloscopes[Latest Revision Firmware Date] 2017/03/24[Updated Contents]--------------------v00.04.04.03.02 2017/02/06- Improved the LXI module- Fixed the freeze problem when upgrading based on the boot version of0.0.0.13- Improved the menu in the language of Traditional Chinese and Korean- Modified the failure when downloading waveform to the source module- Fixed bugs about reading the memory data through SCPI commands- Fixed bugs about Measure- Fixed bugs about Filter