JTAG Guide

Introduction

After reading this simple, easy to follow guide, and following all the instructions exactly, you will be able to extract your receiver's box keys and dump your TSOP. The box key is useful when using camless solutions such as emulation or when using the Atmega. Dumping your TSOP is a good idea because there is always the possibility of an ECM that targets your TSOP. Almost anyone with experience will tell you it is a good idea to dump your TSOP. This guide will assume you have some basic knowledge and know how to download files off the internet and unzip them. Please note I take no resposiblity for any damage you may cause as well as any laws you may be breaking. Please read the disclaimer on the home page. This guide is for eductaional purposes only. Enjoy.

Difficulty Level

The difficulty level of this project is 7 on a scale of 1 to 10. It will require that you solder wires to the bottom of your receiver and you must have at least a little bit of experiece with soldering in smaller areas. This project should take you 45 minutes if all goes well.

What's Needed

Jkeys 1.33
- download it from here
Bell Expressvu or Dish Network IRD
- The following models have JTAG: 2700, 2800, 3700, 3800, 3900, 4700, 4900, DP301 (3100), PVR501 (5100), 6000 plus DRD420, 440, 480
Computer:
- must have available printer port
5 100Ohm Resistors
- I've heard that 1/8 to 1/2 Watt will work, I know 1/4 Watt works
Soldering Iron
- 25 Watts or so
Wire
- you wont need too much wire. You will need 6 pieces that are 6 inches or so
Solder
- any 60/40 solder
DB 25 Connector
- you will want a male connector because your computer's printer port in female

Building the JTAG The first thing you're going to do is make the simple JTAG reader. First, solder the 5 100 Ohm resitors to pins 2, 3, 4, 5 and 13 . Now, take your 5 pieces of 6 inch wire and solder one each to each end of the 5 resistors. You may not get proper results if your wire is longer than 6 inches. Now would be a good time to inspect all your solder joints and make sure that you didn't leave a solder spike across any of the pins. Now, you must make a connection for ground. This is done by taking the last wire you have and soldering it to pins 18-25 of the DB 25.

Hooking up the JTAG Once you have the JTAG reader built, you now want to solder it to your IRD. First of all, you should pre solder your wires. Just add a little bid of solder to the end of each wire. ***Please note that if you aren't careful when soldering your JTAG to your IRD, you can mess something up. Please note that I take no responsibility for whatever may happen. Many people say that you shouldn't solder at all to those pads on the bottom of your IRD. I have done this on 4 different IRDs and never had a problem, but that doesn't mean you wont. BE CAREFUL AND DON'T CROSS ANY WIRES. You've been warned!*** Ok, once you've pre soldered your wires, you now have to figure out where you are going to solder your wires to on the bottom of your IRD. Make sure your IRD is unplugged when soldering to it. Please use these diagrams as a reference:

2700,2800,3700,3800,3900,4700 & 4900 IRDs

3100 IRD

5100 IRD

6000 IRD (Not sure if this is correct!)

Please note where the front and back of the IRD is.
Make sure that you have good connections to the proper pads. DON'T HOLD THE SOLDERING IRON ON THE PADS TOO LONG. I don't even like to touch the IRD pads. What I do is hold the soldering iron to the wire and let the heat melt the solder that is on the wire when I pre soldered it. Inspect all your joints and make sure that there are no crosses and that your JTAG wires aren't touching each other.

Getting your Boxkey You now want to download Jkeys and unzip it to a folder of your choice. Connect your JTAG to your computer's printer port and plug in your IRD. DO NOT TURN THE IRD ON. Just plug it in. When you start Jkeys, your box keys should be there. If you don't see your Boxkey and IRD number, make sure that all your connections are good and no wires are crossing. ONCE YOU HAVE YOUR BOX KEY, WRITE IT DOWN IN A SAFE PLACE! YOU DON'T WANT TO LOSE THIS! . It might be a good idea now to save your TSOP in case of an ECM. No one would argue that it is a bad idea to have a back up of your TSOP on your computer. Read the next section for information on backing up your TSOP.

Backing up your TSOP Once you have got your box key, you should dump (make a back up) of your TSOP. Doing this is not to difficult with JKeys. All you have to do is look at the chart below, and then enter the values into JKeys. Different IRDs have different TSOPs, so that means they have different start addresses and sizes. To dump your TSOP, find your IRD in the chart below, then enter the values for youR IRD into JKeys. Then press "Save Mem". Note that the 3100 and 5100 have two TSOPs, so you must save both!

IRD	Start Address	Bytes
2700	7FF80000	80000
2800	7FF80000	80000
3700	7FF80000	80000
3800	7FE00000	200000
3900	7FE00000	200000
4700	7FE00000	200000
4900	7FE00000	200000
3800	7FE00000	200000
3100 IC23	1FC00000	200000
3100 IC22	1FE00000	200000
5100 ICu7	7FC00000	400000
5100 ICu6	7F800000	400000

Once you figure out the Start Address and Bytes for your IRD, enter them into JKeys and press "Save Mem". Give the file a name, and save it to your computer. It is also a very good idea to have a back up on a floppy disk. It will dump the file and save it as a .bin (binary) file. You can view it with a hex editor if you like. Congratulations, you now have a dump of your TSOP.

This guide was written by The Dishnewbies Team . If you have problems, please ask on the message board or the #Dishnetwork or #Expressvu channels on irc.dishnewbies.tv .