pikachule1
09-23-2006, 04:24 AM
Here's my situation: Trying to reprogram a bev ROM102 (EX-05 - rev240) to be used for Dishnet on a
dish-6000. I understand from my readings that the 6000 does not support SK, and one must use RSA.
I have done the following:
- Combine the flash1 & flash2 TSOP files at P829 saved from the 6000 IRD, using TSOP-combiner v1.1.
- Read the combined TSOP file successfully into GenDT08 v3.3, using the following IRD definition in the
GenDT08.cfg file (all the information, IRD #, box key etc... appear to be correct after being read into
GenDT08):
// 6000 12N
//
// firmware=829P
// combined flash file
[6000]
model = 6000
modelid = 12NN8
modelpoint = 3DFFF4
softwarepoint = 3DFFF8
checksumstart = 200000
checksumend = 3DFFFC
checksumpoint = 3DFFFC
checkpoint = 3DFF90
bootstrappoint = 3FFFA0
bootcspoint = 3FFFA4
buildconfpoint = 3FFFA8
irdnumpoint = 3FFFC0
boxkeypoint = 3FFFC8
rsa1 = 2C79AC
rsa2 = 2C79EC
sk = 3FFF40
dualtsop = 0
- Read a virgin dish ROM102-rev103 into GenDT08, filled in CAM ID, zip, time zone, keys 86 & 96, picked
"use default black-out", left lock byte at 06 (card is locked), password =0000000000000000.
- Did "Tsop RSA", "Card RSA", "Calc DT08".
- "Check point" was "FFFFFFFF" at the start of the process, turned red after the above steps, so I hit
"Calculate", GenDT08 came up with a new entry, and the red goes away.
- Bottom of the screen says "Successful, you may save your changes".
- Saved the patch, keys, modded Card and TSOP images.
The patch file shows that GenDT08 is transferring the correct IRD # and build data to the CAM, and is
keeping the time zone and zip code I entered. However, it seems to ignore the box key, default blackout, and
the keys 86 & 96 I have entered earlier. This is confirmed when reading the saved Card image back into
GenDT08 and N2Edit v2.58.
The modded cobined TSOP file has been split back into flash1 & flash2, but this is where I am stuck right
now. I have not gone further to attempt adding my tiers and blocker to the CAM image using N2Edit.
Questions:
1/- Have I done anything wrong?
2/- I have read somewhere that the box key can be entered via the blocker patch, is this why GenDT08 is not
picking it up?
3/- What about the blackout and keys 86 & 96?
4/- The lock byte = 06 and password = 0000000000000000 is worrying me, I am aware there is a password
that I am supposed to enter in the blocker when I eventually apply the blocker patch, but will this one lock me
out when I write the image to the CAM?
5/- The instructions for GenDT08 state that for IRD models that cannot use SK such as the 6000, one must
use RSA and "non-SK versions of blockers". How do I tell if a blocker is SK or non-SK?
Thanks in advance for any help.
dish-6000. I understand from my readings that the 6000 does not support SK, and one must use RSA.
I have done the following:
- Combine the flash1 & flash2 TSOP files at P829 saved from the 6000 IRD, using TSOP-combiner v1.1.
- Read the combined TSOP file successfully into GenDT08 v3.3, using the following IRD definition in the
GenDT08.cfg file (all the information, IRD #, box key etc... appear to be correct after being read into
GenDT08):
// 6000 12N
//
// firmware=829P
// combined flash file
[6000]
model = 6000
modelid = 12NN8
modelpoint = 3DFFF4
softwarepoint = 3DFFF8
checksumstart = 200000
checksumend = 3DFFFC
checksumpoint = 3DFFFC
checkpoint = 3DFF90
bootstrappoint = 3FFFA0
bootcspoint = 3FFFA4
buildconfpoint = 3FFFA8
irdnumpoint = 3FFFC0
boxkeypoint = 3FFFC8
rsa1 = 2C79AC
rsa2 = 2C79EC
sk = 3FFF40
dualtsop = 0
- Read a virgin dish ROM102-rev103 into GenDT08, filled in CAM ID, zip, time zone, keys 86 & 96, picked
"use default black-out", left lock byte at 06 (card is locked), password =0000000000000000.
- Did "Tsop RSA", "Card RSA", "Calc DT08".
- "Check point" was "FFFFFFFF" at the start of the process, turned red after the above steps, so I hit
"Calculate", GenDT08 came up with a new entry, and the red goes away.
- Bottom of the screen says "Successful, you may save your changes".
- Saved the patch, keys, modded Card and TSOP images.
The patch file shows that GenDT08 is transferring the correct IRD # and build data to the CAM, and is
keeping the time zone and zip code I entered. However, it seems to ignore the box key, default blackout, and
the keys 86 & 96 I have entered earlier. This is confirmed when reading the saved Card image back into
GenDT08 and N2Edit v2.58.
The modded cobined TSOP file has been split back into flash1 & flash2, but this is where I am stuck right
now. I have not gone further to attempt adding my tiers and blocker to the CAM image using N2Edit.
Questions:
1/- Have I done anything wrong?
2/- I have read somewhere that the box key can be entered via the blocker patch, is this why GenDT08 is not
picking it up?
3/- What about the blackout and keys 86 & 96?
4/- The lock byte = 06 and password = 0000000000000000 is worrying me, I am aware there is a password
that I am supposed to enter in the blocker when I eventually apply the blocker patch, but will this one lock me
out when I write the image to the CAM?
5/- The instructions for GenDT08 state that for IRD models that cannot use SK such as the 6000, one must
use RSA and "non-SK versions of blockers". How do I tell if a blocker is SK or non-SK?
Thanks in advance for any help.