X-Chip Location (SWAP)

XC chip, auth and block SPI command.
Locked
intArray
Junior Member
Posts: 46
Joined: Sun Jan 21, 2007 7:08 pm

X-Chip Location (SWAP)

Post by intArray »

Hi,

Where exactly is the x-chip located on the on the dct2000 PH7 board?

Is it U700, U901, U500

Reason why I am asking is because I want to attempt to swap chips.

Many thanks.

-intArray
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

I do not think you can swap the chip. The battery is used to hold infomation in XC chip and once swapped you will get an E11 box. Unless you can hold power while swap chip. The chip locate at the center front of the board. It is not hard to find.
intArray
Junior Member
Posts: 46
Joined: Sun Jan 21, 2007 7:08 pm

Post by intArray »

I will remember the battery thing, I will probably trace the +v and +g and wire them together before I take the chip off.
patsfan
Junior Member
Posts: 673
Joined: Thu Jul 21, 2005 4:02 pm

Post by patsfan »

those chips are very sensitive and i doubt you will be able to swap them even if you keep voltage to them. i remember someone here trying to probe pins on the xc chip with an ocilliscope and fried it. good luck and let us know how you make out.
intArray
Junior Member
Posts: 46
Joined: Sun Jan 21, 2007 7:08 pm

Post by intArray »

looks to difficult.
tester5
Junior Member
Posts: 21
Joined: Wed Jul 27, 2005 9:16 pm
Location: NewYork&Chicago
Contact:

Post by tester5 »

extreemly. its hard to heat it up lift it off the board and still keep charge,

i never took one out but mabe there is a way to read it with outside programmer?



its a plcc 30 somethign no?
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

There almost exist on all the XC chip a 4 pin connector (not soldered or soldered, I saw DVI3000 has it soldered.). I bet that is used to program the chip. But could also be SPI. There is also a 27Mhz lable. It is not JTAG since JTAG needs more than 4 pin.
cipher
Junior Member
Posts: 381
Joined: Fri Oct 28, 2005 8:43 am

Post by cipher »

Yes, it is possible to move an ACP without losing the NVRAM contents but it is extremely difficult and seems somewhat pointless since the gain is so small. You would have to use a high wattage heat gun and high temp flux to free and the re-solder it all the while not allowing a single instance of time without the VCC and VSS supply, way too challenging.

The small pads located near the chip are not for programming the ACP. The pads are test contacts of the MPEG stream too and from the BCM7015. This stream is tuned and fed to the ACP for decryption and if the right key is used it is returned as a decrypted mpeg signal. Some of the stream data if returned in the SPI channel e.g Program ID, EMM etc.
tester5
Junior Member
Posts: 21
Joined: Wed Jul 27, 2005 9:16 pm
Location: NewYork&Chicago
Contact:

Post by tester5 »

there is a jtag looking type like we have 201 for jtag there is a 471 it might be a jtag port who knows.
elkora
Junior Member
Posts: 245
Joined: Wed Jan 03, 2007 8:57 pm

Post by elkora »

sorry for replying to this post I know its old and maybe dead but I need to be clear on the XC CHIP.

Questions!

if I have full backup from wide open DCT then.

1. If I install new XC CHIP can I restore my full backup?
2. can the XC CHIP be programed before install using special tool?
3. if the XC CHIP its successfully install after programing I have to restore back NVRAM & CODE?

replacing the XC CHIP it's possible with the right tools the question is if the new XC CHIP can be clone or if there is no way to program the XC CHIP with jtag or any other device.

Thank You!
krunkcraig
Junior Member
Posts: 164
Joined: Sun May 06, 2007 10:24 am
Location: Everythings bigger in Texas

Post by krunkcraig »

I Believe their is an easier way using your usbbdm m.c. I think i saw a program that might program the chip, Its called Turbo BDM or something.....It suppose to use inputed values and find the output values for certain characters that are inputted by the program. I can provide a link if any of you wish to look over the source, since I'm just guessing. I do believe its coded in Assembly.
elkora
Junior Member
Posts: 245
Joined: Wed Jan 03, 2007 8:57 pm

Post by elkora »

can you please PM the link.

Thank You.
junctionbox
Junior Member
Posts: 449
Joined: Sat Oct 21, 2006 6:19 am

RE

Post by junctionbox »

i will have something soon to authorize all channels so stay tuned
krunkcraig
Junior Member
Posts: 164
Joined: Sun May 06, 2007 10:24 am
Location: Everythings bigger in Texas

Post by krunkcraig »

How so? is it something with the firmware?
junctionbox
Junior Member
Posts: 449
Joined: Sat Oct 21, 2006 6:19 am

re

Post by junctionbox »

I Will Contact Bdm When I Recieve And Test This Device And I Will Leave IT Up To Him If He Wants To Release To All On The Site As A Security Measure
Locked

Who is online

Users browsing this forum: No registered users and 6 guests