Is DS1054Z with firmware 00.04.02.SP3 hackable? - Page 1
Forum section: electronics / testgear

author: casper.bang
author_rank: Frequent Contributor
timestamp: December 20, 2014, 09:17:40 pm
content: So I just received the Christmas present for myself, a DS1054Z. Just out of curiosity I tried the riglol hack but it doesn't appear to work. My scope came with board 0.1.1 and firmware 00.04.02.SP3, which is newer than what I see on various scope hack videos on youtube. Has anyone successfully upgraded from 00.04.02.SP3?

author: avvidclif
author_rank: Regular Contributor
timestamp: December 20, 2014, 09:26:09 pm
content: Yes, no problem.

author: casper.bang
author_rank: Frequent Contributor
timestamp: December 20, 2014, 09:41:12 pm
content: Quote from: avvidclif on December 20, 2014, 09:26:09 pmUsinghttp://gotroot.ca/rigol/riglol/all options?

author: Lightages
author_rank: Unknown
timestamp: December 20, 2014, 10:19:48 pm
content: Select DSER. If you select DSFR you will get 500micro volt sensitivity and this has been reported to be buggy and cause problems. DSER gets you everything else.If that page doesn't generate a good code the first time, close it, clear your cache, and try again. I didn't get a good code the first time round.

author: pickle9000
author_rank: Super Contributor
timestamp: December 20, 2014, 10:47:07 pm
content: Quote from: casper.bang on December 20, 2014, 09:41:12 pmDSER is the correct option code for the DS1054ZAnother user (lightages?) had to hit generate a few times to get another key, that one worked.

author: casper.bang
author_rank: Frequent Contributor
timestamp: December 21, 2014, 07:20:32 am
content: Got it working by unlocking feature by feature. The 500uV res does indeed seem buggy, going to have to find a way to remove that again. Thanks.

author: awwende
author_rank: Contributor
timestamp: December 22, 2014, 03:00:17 pm
content: Quote from: casper.bang on December 21, 2014, 07:20:32 amSo using DSER (as compared to the DSFR on the page) didn't work for you? I just ordered mine so I'm trying to get the research done on hacking it as I try to patiently wait.

author: Creep
author_rank: Regular Contributor
timestamp: December 22, 2014, 03:56:29 pm
content: It probably did work. Pretty sure it's just one of those "curiosity killed the cat" kind of occasions. After being told countless times not to do something, people tend to want to do it just to see what's the big whoop.

author: 366Cobra
author_rank: Newbie
timestamp: December 23, 2014, 09:02:03 pm
content: works like a charm, thanks peoplethere was no DSER, so I used DSFR

author: Lightages
author_rank: Unknown
timestamp: December 23, 2014, 09:22:50 pm
content: DSER is not listed, but you can still enter that value and avoid the 500 micro volt problem that has been reported.

author: jbryan2
author_rank: Contributor
timestamp: January 18, 2015, 07:39:11 pm
content: I received mine from Saelig last Monday, and it is also at 00.04.02.SP3/0.1.1. I figure that I'll resist the urge for a month or so to get through the "infant mortality" phase. Given that I use scopes with a couple more zeroes on the price in my day job, I'm quite impressed with this little guy.

author: pickle9000
author_rank: Super Contributor
timestamp: January 18, 2015, 07:59:12 pm
content: Quote from: Lightages on December 23, 2014, 09:22:50 pmNot really a problem just not built into the hardware. The key generator works for many of the Rigol scopes and the actual hardware varies on some. From a manufacturing standpoint you just supply the correct code and you good to go. From a hacking standpoint seems a bit weird.

author: Ton
author_rank: Regular Contributor
timestamp: January 18, 2015, 08:07:23 pm
content: HiAs new DS1054Z owners you should do yourself a favour and update to firmware 00.04.02.SP4 this "fixes" the jitter issues talked so much about(and is reported to still being hackable)rigol-ds1000z-ds2000-oscilloscope-jitter-problemsthis links to a post from RigolUSA with links to the official sw packages.Just copy the GEL file to a newly formatted (FAT16) USB stick(preferably one you have tested in the scope first)start the scope, and after you have confirmed that you want to update the firmware,the process starts.it has been reported to take from 2 to 5 minutes (mine took approximately 2 min.)when the update is finished the scope informs you to restart.now jitter and ac trigger problems are "solved"

author: jbryan2
author_rank: Contributor
timestamp: January 18, 2015, 10:59:34 pm
content: Quote from: Ton on January 18, 2015, 08:07:23 pmI checked the jitter with a 1Mhz square wave, and it wasn't bad at 5us intervals, it was bad foreverythingbetween 1us and 5us, then it cleared up at 10us and beyond.So I took your advice and flashed to SP4. Now it's solid for everything as far as I can tell. It sure seems like Rigol were just guessing at their PLL coefficients and finally figured it out.So now I'm living dangerously and running self-cal.

author: funkyant
author_rank: Unknown
timestamp: February 07, 2015, 09:56:53 am
content: Just to clarify and confirm:Received the 1054z today with the SP3 firmware.Used the keygen with DSER code and unlock was successful on the first goProceeded with the SP4 update from Rigol via USBAfter the update, all parameters remain unlocked.Happy days!I've also saved the keygen page in case it goes offline (again) - just send me a PM and I'll host it somewhere else if need be.Thanks for the help and tips.

author: Yago
author_rank: Frequent Contributor
timestamp: February 07, 2015, 12:21:12 pm
content: Quote from: funkyant on February 07, 2015, 09:56:53 amKind of you Ant, might need that when I (finally) get a 1054z!

author: lasersbee
author_rank: Newbie
timestamp: April 01, 2015, 07:36:47 pm
content: After a 2 months wait I finally got my DS1054Z today.The original page for the Firmware upgrade has been removedbut I did find it in Google Cache.I tried the Google Cache page and entered my Serial Numberand DSFR Option and hit Generate. Also tried the DSER option.Only gives me ERROR: INVALID PRIVATE KEY LENGTH!Does anyone have a clue.....BTW the DSER option does not show on the Google Cache page.The scope has version 00.04.02.SP4 with the jitter problem solved.

author: Lightages
author_rank: Unknown
timestamp: April 01, 2015, 07:43:31 pm
content: Go to:http://gotroot.ca/rigol/riglol/Use the code DSER, NOT DSFR. DSFR enables the 500uV range that does not work and causes problems.I had to reload the page a couple of times as the first time I tried it the code dd not work.

author: pickle9000
author_rank: Super Contributor
timestamp: April 01, 2015, 07:52:48 pm
content: Quote from: Lightages on April 01, 2015, 07:43:31 pmIt can take quite a few reloads to get another be but DSER is the correct code. The firmware is used across a few models and not all have the same hardware. It's possible to enable features for non existing hardware and that is what causes the problem.

author: lasersbee
author_rank: Newbie
timestamp: April 01, 2015, 09:16:16 pm
content: Quote from: Lightages on April 01, 2015, 07:43:31 pmQuote from: pickle9000 on April 01, 2015, 07:52:48 pmThank you gentlemen... will give it a try tomorrow morning when I'm back in the shop.

author: K5HJ
author_rank: Regular Contributor
timestamp: April 02, 2015, 02:18:30 am
content: Quote from: lasersbee on April 01, 2015, 07:36:47 pmLeave the private key blank and make sure the serial number is entered correctly. The private key is derived from the serial.Randy

author: lasersbee
author_rank: Newbie
timestamp: April 02, 2015, 02:11:29 pm
content: Got it installed. Now I have a DS1104Z..Thanks to all that posted.BTW... I was not able to access the generator link above on my recently installupgrade copy of Firefox. I tried it on an older copy install on another computerand it worked just fine to generate a key.I then tried it on a latest copy of Chrome and it also worked fine.The latest upgrade of FF still does not go to the page without this error....Not FoundThe requested URL /rigol/riglol/ was not found on this server.

author: ripnet
author_rank: Newbie
timestamp: April 02, 2015, 06:44:46 pm
content: Quote from: lasersbee on April 02, 2015, 02:11:29 pmYour FF is probably trying to use https, not http.

author: lasersbee
author_rank: Newbie
timestamp: April 03, 2015, 01:17:31 pm
content: Quote from: ripnet on April 02, 2015, 06:44:46 pmYeah that is exactly what is happening. Forcing the HTTPS to HTTP hasno effect in FF.Chrome was using the HTTP as I copied it to the URL bar and it works.I just did a test and added the "S" to the HTTP and tried it in Chrome.That gave me the same error. Then removing the "S" and trying it againthe damn HTTP gets replaced by HTTPS in Chrome now every time andcan no longer access the page.I can however still get to it using Explorer.WARNING !!!Don't force the "S" onto HTTP if your browser accepts HTTPURLs.I've cleared my cookies and browser histories but still get redirected toHTTPS. There must be a way to force a browser to accept HTTP...

author: Monkeh
author_rank: Super Contributor
timestamp: April 03, 2015, 04:33:10 pm
content: I suspect it's more a case of undoing whatever you did to force it to use HTTPS..

author: lasersbee
author_rank: Newbie
timestamp: April 04, 2015, 03:24:55 pm
content: Quote from: Monkeh on April 03, 2015, 04:33:10 pmI just added an "S" to the "HTTP" that was written in the Chrome Browser URL bar forthe Rigol URL above "http://gotroot.ca/rigol/riglol/"When I subsequently removed that "S" and tried again.. Chrome automatically re-insertsthe "S".Either way I did upgrade my DS1054Z and probably don't need that link anymore.It was just to let the other members know of what I had done and to perhaps avoid.

author: Monkeh
author_rank: Super Contributor
timestamp: April 04, 2015, 11:37:57 pm
content: It seems to be the site at fault, not the browser, actually.Annoying.

author: bitwelder
author_rank: Super Contributor
timestamp: April 05, 2015, 06:35:37 am
content: Quote from: lasersbee on April 04, 2015, 03:24:55 pmReason is gotroot.ca website supportsHSTS, that is once the browser knows it is possible to switch to a secure connection, next time you try to connect as HTTP it automatically upgrades the connection to HTTPS.Of course this option should be enabled only if all services hosted on the covered *domain* are going to work in HTTPS.To check whether this is the case and revert to HTTP mode, in chrome you can:- enter on the address line chrome://net-internals- select HSTS in the menu- enter gotroot.ca in the 'query domain' field to check if your connection will be upgraded. If it returns some data, it means chrome knows it should use HTTPS to connect to that domain- enter the domain in the 'delete domain' field to the allow HTTP again

author: backd00r
author_rank: Contributor
timestamp: April 24, 2015, 02:19:45 pm
content: Does this site work with firmware 00.04.02.SP4, has anybody unlocked all of the options safely on this latest firmware?http://gotroot.ca/rigol/riglol/Thanks

author: tooki
author_rank: Super Contributor
timestamp: May 06, 2015, 01:04:58 pm
content: Mine came with that firmware preinstalled and accepted the DSER option just fine.I usedRigol Bildschirmkopieto send the key via USB -- way easier than using the on-screen keyboard. (Send the command ":SYSTem:OPTion:INSTall XXXXXXXXXXXXXXXXXXXXXXXXXXXX" to enter the key, where X is the keywithout the hyphens.)

author: Yoji
author_rank: Newbie
timestamp: June 30, 2015, 06:55:47 pm
content: Quick note to say I got my DS1054Z today and it came with firmware 00.04.03 SP1I used the DSER option and it worked great first timeVery happyCheers.

author: jruibarroso
author_rank: Newbie
timestamp: September 19, 2015, 01:04:43 pm
content: litle advice :Received my Rigol and in the same minute I connect it to mains , inserted DSER option and everything went fine. Some play arround with scope realised it had a problem at Channel A, input allways have some posite offset, any way .. returned it to Rigol to a waranty repair ... 2 days after they said scope has been hacked and no warranty for this cases .Conclusion : Don't go with rush as I was, take some long time before to unsure that is not problem with the set. I had to pay to repair mine , a problem that comes from factory...

author: jitter
author_rank: Frequent Contributor
timestamp: September 19, 2015, 01:11:45 pm
content: Did you let the scope do the self-calibration after the hack before returning it to Rigol?

author: wraper
author_rank: Unknown
timestamp: September 19, 2015, 01:15:19 pm
content: Quote from: jruibarroso on September 19, 2015, 01:04:43 pmDidn't you have an idea to uninstall the hack before returning it?

author: ebastler
author_rank: Super Contributor
timestamp: September 19, 2015, 07:44:15 pm
content: Quote from: jruibarroso on September 19, 2015, 01:04:43 pmAssuming that the scope was bought from a dealer in the European Union, and that you bought as a consumer (and not a business), you should ask for a refund on that repair cost:The European Community directive on guarantees (1999/44/EC) says that for any fault that occurs within the first 6 months after purchase, the fault is presumed to have existed at the time of manufacturing, unless proven otherwise. I. e. the seller needs toprovethat you have caused the fault (e.g. by hacking the scope -- that can't be the case, as a regular upgrade would not do any damage either), or repair it under the compulsory guarantee.This changes only after six months (and until the end of the 24 month guarantee period). Then the seller can ask you to prove that a fault has already existed upon delivery of the instrument, which may be hard to do. In my experience, most dealers don't force an argument -- unless goods are e.g. damaged from the outside, hacked or something ;-)I am pretty sure that the national laws on guarantees reflect this directive in all EU member states. The German law certainly does.

author: delfuego
author_rank: Newbie
timestamp: October 14, 2015, 01:14:18 pm
content: I received my DS1054Z today with software version 00.04.03.SP1After checking it to be working ok, I used the keygen with the DSER option which worked first time.Happy Days

author: ercapoccia
author_rank: Regular Contributor
timestamp: December 21, 2015, 09:28:06 pm
content: Just hacked my brand new DS1054Z, it came out of the box with the sw 00.04.03 board version 0.1.1All the features unlocked (DSER) and upgraded to 100MHz, it was a piece of cake. After the unlock in the system info pop-up the board version was 0.2.2.After the firmware upgraded to the last release 00.04.03.03(SP2) and all the feature are still unlocked and the board version was back to the original value 0.1.1.Thank you guys for your support.Marco

author: alsetalokin4017
author_rank: Super Contributor
timestamp: December 22, 2015, 05:46:04 am
content: I recommend that new buyers "burn in" their new scopes before unlocking them, just in case the scope fails and you need to return it. You get 30 hours or so of free trials for the Options (except the 100MHz bw) so use those up before you apply the unlock code. Leave the scope on continuously for several hours, power cycle it, use all its buttons and knobs, probes and features, back panel connections etc. and make sure there is no intermittent hardware fault that will sneak up on you. If it is going to fail or glitch, you want it to do this before the vendor's original store warranty runs out (30 days for TEquipment here in the USA). It is usually better to return the unit to the vendor during their guarantee period, than to Rigol during the year factory warranty, if you can. (Rigol USA Customer Service has been good to me.)And before you install the unlock Options, you should know how to remove it and restore the scope back to its original state. So you don't run into the same problem that jruirbarroso had if you need to return the scope for any reason.Of course if you brick the scope before you can restore it........That's why you should do the burn-in _before_ you unlock it.

author: Fungus
author_rank: Super Contributor
timestamp: December 22, 2015, 09:18:41 am
content: Quote from: jruibarroso on September 19, 2015, 01:04:43 pmNormally we recommend not using DSER because the "500uV Vertical" option doesn't work on these scopes. You often get offsets on some of the channels. Not unlocking it means you can't select that range accidentally.Was your "offset" only in 500uV Vertical scale?

author: alsetalokin4017
author_rank: Super Contributor
timestamp: December 22, 2015, 09:41:37 am
content: DSER is the code for all options _except_ the 500uV/div vertical.Let the scope warm up for half an hour, then run the Self-Calibrate routine, with nothing connected to any inputs. This may get rid of the offsets, or at least reduce them to an acceptable level. If your ambient temperature changes by more than a few degrees, re-run the Self-Calibrate routine again. It normally takes 17-19 minutes to complete the Self-Cal.Re-run the Self-Cal after adding or removing Options.If you have a consistent, bad offset on one channel even after warming up and running Self-Cal a few times, you may have a hardware fault. This is how my "CH4 glitch" started when I first received my (first) 1054z back in April.

author: Fungus
author_rank: Super Contributor
timestamp: December 22, 2015, 09:55:29 am
content: Quote from: alsetalokin4017 on December 22, 2015, 09:41:37 amI just checked on [urlhttp://gotroot.ca/rigol/riglol/]Riglol and DSER isn't even listed...

author: alsetalokin4017
author_rank: Super Contributor
timestamp: December 22, 2015, 01:27:20 pm
content: Quote from: Fungus on December 22, 2015, 09:55:29 amThat's right, it is "undocumented", however it works anyway. It installs the 100MHz bandwidth and all other options _except_ the 500 mV/div vertical sensitivity.Here is the output including the "documented" list of codes that appear if the "Riglol" keygen is run without a serial number or code. Note that the 100MHz bandwidth is also not listed for the DS1000z series:Code:null@null-aleph:~/Desktop/RigolScope$ ./riglolRiglol 1.03dUsage: ./riglol <sn> <opts> <privkey><sn> serial number of device (D............)<opts> device options, 4 characters, see below<privkey> private key (optional)DP832 starting from v1.09 device options:first character: F = official, B = trialF3PT - AccuracyF6PT - Analyzer and MonitorF6LT - LANFALT - RS232FLLT - TriggerDP832 up to v1.06 device options:first character: M = official, 5 = trialMWSS - TriggerMWTB - AccuracyMWTC - LAN and RS232MWTE - Analyzer and MonitorDS1000z device options:DSAB - Advanced TriggersDSAC - DecodersDSAE - 24M MemoryDSAJ - RecorderDSBA - 500uV VerticalDS2000 device options:first character: D = official, V = trialDSAB - Advanced TriggersDSAC - DecodersDSAE - 56M MemoryDSAJ - 100MHzDSAS - 200MHzDSAZ - all optionsDS4000 device options:first character: D = official, V = trialDSHB - RS232 DecoderDSHC - SPI DecoderDSHE - I2C DecoderDSHJ - CAN DecodeDSHS - FlexRay DecoderDSH9 - all optionsDSA815 device options:first character: A = official, S = trialAAAB - Tracking GeneratorAAAC - Advnced Measurement KitAAAD - 10Hz RBWAAAE - EMI/Quasi PeakAAAF - VSWRMAKE SURE YOUR FIRMWARE IS UP TO DATE BEFORE APPLYING ANY KEYS

author: MotoDog
author_rank: Contributor
timestamp: December 22, 2015, 04:48:04 pm
content: Hello Group,I have a 1054Z coming this week or next. I got it on eBay, like new. With free shipping and $345, I thought a good deal?People have talked about it, but does the hack work to put the unit BACK to factory default if you just un-select the options andput the model number back?I keep listening for the big brown UPS truck, I doubt if it will make it by Christmas!MikeIn the Mountains in Crestline, Ca.

author: c4757p
author_rank: Super Contributor
timestamp: December 22, 2015, 04:54:16 pm
content: License keys in theory can be removed - you have to do it via SCPI (over USB) though, there's no option in the GUI. There is always the chance that the instrument is logging these actions somewhere secret, though, which is checked by Rigol upon receiving the instrument for repair. I'd love to hear from someone who's tried this.

author: alsetalokin4017
author_rank: Super Contributor
timestamp: December 22, 2015, 07:16:44 pm
content: Quote from: c4757p on December 22, 2015, 04:54:16 pmOr over LAN using, i.e., Telnet (to port 5555 on the scope.)The SCPI command is:SYSTem:OPTion:UNINSTallAllegedly you can just use the CAPS abbreviations but I always use the full CAPS+ lowercase command words.I doubt if the scope actually logs these actions in some secret memory location, but you never know.

author: c4757p
author_rank: Super Contributor
timestamp: December 22, 2015, 07:21:06 pm
content: Wouldn't be surprised. Lots of software keeps logs for debugging purposes - you could get a pretty damn good idea of what I do with my computers by spending some time reading through /var/log, if you felt so inclined.

author: Marcos
author_rank: Contributor
timestamp: December 22, 2015, 10:51:08 pm
content: They are not able to keep tracking power on cycles and you guys expect from them to keep logs for debugging?A computer have a huge HDD where these logs can be kept, none of them will be stored in a physical chip (memory) device, unless some special equipment is involved.I wish they have that. They could have been fixed so many bugs till now.Merry Christmas to all !

author: MotoDog
author_rank: Contributor
timestamp: December 23, 2015, 01:46:38 am
content: I may have really screwed up. I bought a near new 1054Z one on eBay. I noticed today, in the picture on the auction, it is SP4.Will that keep me from doing the change to get the options?Maybe that's why it was on eBay. It is already on the UPS truck somewhere.I wanted the I2C Decode and other features?Oh, I wonder what I have done? Just to save $50!Mike

author: Marcos
author_rank: Contributor
timestamp: December 23, 2015, 02:18:24 am
content: Quote from: MotoDog on December 23, 2015, 01:46:38 amDon't worry. You'll still be able to "hack" it

author: alsetalokin4017
author_rank: Super Contributor
timestamp: December 23, 2015, 11:40:47 am
content: It will be interesting to see what Boot Version the "near new" scope comes with.

author: MotoDog
author_rank: Contributor
timestamp: December 30, 2015, 01:30:41 am
content: I got the eBay 1054Z today, finally. When it boots up, it still says it has 34 hours on the Options.So I guess it was not used much. Only thing I noticed, it has SP4 on the firmware screen.So, I guess I will try using it for a while.The poor guy spent $130 getting it shipped from east coast here to Ca.He waited too long to send it, and finally sent it UPS guaranteed delivery in 3 days.I is basically new, 3 probes not out of package?Mike, Crestline, Ca.