dishnetwork

[t160hq]

nagraedit3 is the current one

It's included with RTM9 or higher.
RTM (Rom Tier Maker) current latest
version is 11.8c

It's in the files section of
dssftp.com

You need a 3.68MHz programmer not
a 3.57MHz programmer or unlooper that is used with
RCA.

t160hq

[beruca]

Rom 2
I have a rom 2 card that I can read the number on excel3.6 but when I put it in the IRD 4500 or 301 I see only zeroes. How is that ? Is it looped ?
TIA

[t160hq]

This is only a partial list but it covers the most common
types.

288-01 ROM2 EchoStar (original release)
288-02 ROM3 EchoStar (second release)
288-04 ROM3 ExpressVu
288-05 ROM3 ExpressVu
288-06 ROM3 ExpressVu
288-07 ROM3 Sky Vista
288-08 ROM3 ExpressVu
288-09 ROM10 EchoStar
325-01 ROM3 Via Digital (Spain)
A2012 ROM3 EchoStar (third release) [288-12?]
A2013 ROM10

The number this list refers to is in the bottom
right hand corner of the card. Contact side of
the card. Real tiny printing.

t160hq

[t160hq]

Originally posted by beruca
Rom 2
I have a rom 2 card that I can read the number on excel3.6 but when I put it in the IRD 4500 or 301 I see only zeroes. How is that ? Is it looped ?
TIA

What number?

First off quit using xcell3.6. It's buggy and you are
just as likely to loop the card with that software.

Use nagraedit3. Rom2's are tricky. You can't
use the data edit feature in nagraedit3 to change
the boxkeys and ird number. You have to
do it in the raw bin. I recommend using xcell
to change that info. That and cleaning the card
are the only things I would use xcell for.
If you use xcell for applying any
of the latest rom2 blockers or tiers you will
loop your card. You have been warned.

Dish cards have to be set for the receiver they
are to be used in. You can't use them in more
than one receiver like HU cards without changing
box keys and receiver number on the card.

Never put a card in a receiver without blocker
on it. While rom2's cannot be stream locked they
can be stream looped.

If you can read it in xcell it's not looped. You will
need the boxkeys and receiver number in hex
of the 301. Forget the 4500 you will not easily
be able to get the info from it (4500's don't have
a jtag port)

You will need a simple or buffered jtag device
to get the boxkeys from your receiver. You can
buy or build your own. I perfer the buffered
unit but I hear the simple one works just as
well. If you have a 301-010 you need jkeys2.0.1
jkeys2.9.9 is used for a 301-013.

I'll see if I can dig up some links for hooking up
and using the jtag.

T160hq

[crackbaby]

T160hq, or anyone
need some help using my JTAG to do a read. I have an echostar 301-010, I'm trying to do a read and I'm not even sure if this thing is supposed to be on when I do it or what? If its off when I click on detect the power light comes on for a sec like its resetting thats all but no read. Mili's howto gets me started but doesn't really go in depth. I've read somewhere that sometimes you have to get your reciever into debug mode?
I know jack about dish/bev and am litterally doing this as my first step I've only delt with DTV to this point. Any info - sites - help would be appreciated. Thanx - crackbaby.

[t160hq]

Originally posted by crackbaby
T160hq, or anyone
need some help using my JTAG to do a read. I have an echostar 301-010, I'm trying to do a read and I'm not even sure if this thing is supposed to be on when I do it or what? If its off when I click on detect the power light comes on for a sec like its resetting thats all but no read. Mili's howto gets me started but doesn't really go in depth. I've read somewhere that sometimes you have to get your reciever into debug mode?
I know jack about dish/bev and am litterally doing this as my first step I've only delt with DTV to this point. Any info - sites - help would be appreciated. Thanx - crackbaby.

Start here:

http://www.dnh4dummies.host.sk/start.htm

On word of warning. On a model 301-010 never
ever try to write to TSOP 2 (referred to by jkeys as
flash 2) unless you know your jtag has a good
connection and is reading and writing flash 1 with
no problems.

Flash 2 contains the boot instructions for the receiver.
If messed up it can be saved but is a real pain.

t160hq
If unsure about something after reading the site
above ask first. It may save some headaches later.

[crackbaby]

Well this is where I'm at, I said before reading the TSOP but I haven't gotten that far, I can't even get the BoxKeys and IRD # to come up. I checked that site ( thanks ) it had great info all in one place which was just what I needed.
I figured out that I'm running the Pro301 with a 8 pad variety (16 total) JTag port. I verified the pinout locations on my JTAG that I purchased from Mili. Lined them up and I get nothing. Next step is I soldered directly to the pads. My JTAG port is different than the pic shown on that site. Mine is reversed. I took a pic I can upload if you'd like to see it. So I wired it up accordingly. Still nothing. I've tried Jkeys and Wall both. My next step I would guess is to rewire jtag in reverse order, maybe try diff PC?

Thanks for the help so far.... I will always ask questions when in doubt, we all hate smoking receivers... and avoidable problems.

[crackbaby]

hope this pic uploads ok....

[t160hq]

Originally posted by crackbaby
hope this pic uploads ok....


Your right it is backwards. I am assuming the
blue numbers are the jtag's connections and the
green are the port.

Here's how you want to hook it up.

Blue number (jtag)------ to------green num (ird con)
2-------------------------------------> 6
3-------------------------------------->5
4-------------------------------------->4
13------------------------------------->3
5--------------------------------------->2
ground-------------------------------->to case of receiver

Thanks for the picture it made it a whole lot
easier.

[crackbaby]

I resoldered the JTAG as you said, worked first time. Got my IRD#, Box Keys, and backed up both TSOP's.
Here's a correct pic of JTAG with pinouts, (believe I got that right) hope this helps someone else out too.
Figure I'll pick up a Atmega 128 and a TSOP Lock. The ATmega looks like a good way to go....thanks for all the help, sure I'll be aksing for more soon enough.. - crackbaby.

[t160hq]

Two things. There is a hit currently on the 301-010 receiver
only. Do not lock the eeprom (the little 8 pin ic) and make
sure your receiver is at revsion P188 then lock
the TSOP.

t160hq