Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Troubles with uPrintSE #52

Closed
poisonfox opened this issue Jul 5, 2017 · 24 comments
Closed

Troubles with uPrintSE #52

poisonfox opened this issue Jul 5, 2017 · 24 comments

Comments

@poisonfox
Copy link

poisonfox commented Jul 5, 2017

Hi!
I am having troubles with the uPrintSE chips. I have two main issues.

  1. I can't decrypt and print out the information on the chip. I read out the chip via putty and tried to encrypt the information on it and it would give me an error (see image).
    27868932-4bf46d0a-616c-11e7-87f2-3e2024a8cea3

BUT, when I do the same thing with an uPrint chip (not SE), it works perfectly fine and it will print out the information (see image below)
screenshot at 2017-07-05 09-41-15 1

So, I kinda had the feeling that this is an uPrint SE specific issue. I'm confused why it works fine with an uPrint chip but not with an SE. Anyone any ideas?

  1. Issue: If I overwrite my uPrint SE chip, the printer will not recognize the material. It says "invalid carrier".
    I used this to generate the new hex codes and then copied it on the chip.
    ./stratasys-cli.py eeprom --machine-type uprintse --eeprom-uid b61014d006cec1b3 --serial-number 7070.0 --material-name P430_IVR --manufacturing-lot 7070 --manufacturing-date "2001-01-01 01:01:01" --use-date "2002-02-02 02:02:02" --initial-material 40.0 --current-material 40.0 --key-fragment 4141414141414141 --version 1 --signature MAYA -o three_percent.bin

Here is the UID and the information on chip:
b3 c1 ce 06 d0 14 10 b6
e7 6d 89 74 99 43 53 72 04 50 3d 84 c4 27 2b 62 5b e3 65 36 86 53 e3 c8 10 28 38 f4 45 d5 3f 0c f1 35 ac 94 bd bc c8 12 cf 48 39 87 fa 0a 6e 25 cf 48 39 87 fa 0a 6e 25 80 b8 88 20 b5 95 72 87 42 c4 00 00 00 00 c6 53 55 aa 55 47 9e e8 4e be 6d 0f 00 00 00 00 00 00 c8 3a 9a 08 26 d2 ea 84 8f bc 9d c9 01 00 00 00 53 54 52 41 54 41 53 59 53 02 34 f1 de 56 45 bd 32 46 60 31 21 a5 c8 fa

@256FF
Copy link
Contributor

256FF commented Jul 11, 2017

Please try to use "--signatrue STRATASYS" for the creatoin of the new chip. AFAIK I've had issues when using others for my uPrint.

Reading the SE: Same failure here. Maybe the ID of the SE (6B2A268B5ED3374A) is not correct. When you open the https://github.com/bvanheu/stratasys/blob/master/stratasys/machine.py you can see that it is the same as "ktype" (6B2A268B5ED3374A)

@cdnreprap
Copy link

Did this ever get answered?

I'm having the same issue.

@256FF
Copy link
Contributor

256FF commented Sep 14, 2017

Yes, machine ID is the same for all uprint models. Please choose uprint for decrypt

@cdnreprap
Copy link

have you actually confirmed this?

@256FF
Copy link
Contributor

256FF commented Sep 15, 2017

sorrx, I think a postet a wront info. The IDs are probably not the same.
I can't read a SE dump with the uprint machine ID. And the SE ID seems to be wrong.

@bvanheu
Copy link
Owner

bvanheu commented Sep 15, 2017

So this machine id '6B2A268B5ED3374A' works for Uprint but not Uprint/SE?

I can update the code to reflect this.

@256FF
Copy link
Contributor

256FF commented Sep 15, 2017

No, the ID F3A91DBE6B0B2255 works for uprint(+) and Hp DesignJet.
The ID for SE(+) is not confirmed, AFAIK.

@256FF
Copy link
Contributor

256FF commented Sep 15, 2017

Another thing bvanheu,
how do you have found out the machine-IDs of the other printers?

@bvanheu
Copy link
Owner

bvanheu commented Sep 15, 2017

256FF: they were given to me by email.

See this commit: 71320cd

@thekakester
Copy link

Has this issue been addressed? I also have an SE(+), but I'm unable to decrypt the dump.
Is there anything I can do on my end to help solve this? I could send dump files or mail physical cartridges if that makes anything easier.

@thekakester
Copy link

thekakester commented Oct 6, 2017

Does the EEPROM UID play into the encryption?
To start, I'd like to see if I can "clone" one of my full chips to an empty one. I know the printer keeps track of serial numbers, but I'd like to see if I can write SOMETHING to my cartridge that the printer will recognize.

Right now, I'm using @256FF 's cartridge writer (https://github.com/256FF/CartridgeWriter) and I commented out all the safety checks (like checksum validation) to see if I could write the same encrypted data to a new chip. Currently, this does not seem to work, but I'll post updates as I go along. Any tips or suggestions would be greatly appreciated :)

Edit: After looking at the encryption key, it seems the UID does play into the encryption, so it doens't appear there's any way to "clone" a cartridge without first decrypting it.

Edit 2: I'm trying to find the machine type for the SE(+). I'm going to assume my ID is correct when I get an ID that results in decoding my quantity to a number between 0.0 and 40.0, not some crazy value. Is there a better way to do this than brute force?

Edit 3: More than 1 machine code satisfies the checksum (which is now obvious to me). I'm brute forcing the first cartridge I have to gather a list of all machine codes that satisfy the checksum. After it completes, I will try that list with a second cartridge to see how many of them satisfy a different cartridge checksum. I will continue until I narrow down the machine code. Once again, if anyone has a better way of finding out the machine code, please let me know, it would save me a lot of time.

@Silvood
Copy link
Contributor

Silvood commented Nov 28, 2017

@thekakester I'll happy to help you in this task. My last uPrint chip have gone ReadOnly (forgot to refill it before printing for a customer yesterday....) And I have only uPrintSE chips available that I can't use because I can't rewrite them :/

So basically, my printer is useless right now and I need it ^^ I'll do anything including this bruteforce to advance on this SE machine code

@256FF
Copy link
Contributor

256FF commented Nov 28, 2017 via email

@Silvood
Copy link
Contributor

Silvood commented Nov 28, 2017

@256FF , thanks for the offer, but I was able to find one with a friend (stratasys resseller), he asked one of his customer to give me one ^^

@Nordeal
Copy link

Nordeal commented Jul 13, 2018

Hello everyone,
I'm also interested in re-using cartridges for uprint se plus so I'll share my knowledge and maybe you'll help me in further experiments. So what everybody already knows is that uprint se uses DS2432 EEPROM that is SHA-1 encrypted and one need NDA with MaximIntegrated to get information about decrypting it. But what I did managed to do is to make a backup of EEPROM through UART interface of the printer and also successfully restore it to the same EEPROM but after some changes(printed 1% out of it). Though 3d printer recognized it as corrupted after I restored previous backup. After I restored actual backup printer recognized it again, which means that uprintse saves eeproms he worked with on HDD too. So the next logical step is to get to HDD, create backup of it and try to find where it keeps data about eeproms. The problem is that I haven't found any videos or manuals how to open uprintse printer and where to search for HDD. Does anyone have teardown experience?

@HaveBlueXST
Copy link
Contributor

Nordeal, the hard drive is in the rear electronics bay. Remove the top panel (3 screws on the top rear), then the side panels (3 screws each, also on the rear), remove the filament tubes from the Y-connectors, then remove the 3 screws at the top of the electronics bay (bottom panel on the rear). The electronics bay door should swing down, and you should be able to see the drive in the upper left of the bay.

I believe the EEPROM data is stored in a file called system.dat, and I seem to recall that it keeps a second copy somewhere else on the system that also needs to be cleared out if you want to re-use EEPROMs.

@Nordeal
Copy link

Nordeal commented Jul 19, 2018

HaveBlueXST, thank you for quick answer. With your help I managed to find HDD, clone it and make some changes. I removed system.dat and set rc.local to remove this file on each start. Saved eeprom state, printed 1%, returned saved state, restarted printer and it worked! The printer said he has 1% more material as before restart. So I've left it to print a big part overnight. In the morning there was 38% material left. Backed up current eeprom state, written previous, restarted printer and on the restart the printer did something he never did before - unloaded material and after that it said that material bay is empty, eeprom read-only, couldn't even return it to previous state, I also tried to get a bit more information from printer using logs, but it didn't create log files neither in /var/log nor in /etc. Attempt to start sshd also failed, though I added "/etc/init.d/sshd start" to rc.local and access to ssh port in iptables

@altug19
Copy link

altug19 commented May 28, 2019

Hi,

I have Uprint SE. In our country their cartridges are too expensive and i'm looking for eeprom hack. Can you help me how to do it ? I want to hack eeprom chips and i don't know how ?

@256FF
Copy link
Contributor

256FF commented May 28, 2019 via email

@bvanheu
Copy link
Owner

bvanheu commented Jun 30, 2019

I'll close this bug because the following ID can be used for UprintSE 09FBD4B61FC0B327.

See 41accb5

@TheGuardDawg
Copy link

Hey silvood, Afaik you have my email, right? Contact me and I can send you one or two uprint chips.

________________________________ From: Silvood notifications@github.com Sent: Tuesday, November 28, 2017 9:35:34 AM To: bvanheu/stratasys Cc: Odin; Mention Subject: Re: [bvanheu/stratasys] Troubles with uPrintSE (#52) @thekakesterhttps://github.com/thekakester I'll happy to help you in this task. My last uPrint chip have gone ReadOnly (forgot to refill it before printing for a customer yesterday....) And I have only uPrintSE chips available that I can't use because I can't rewrite them :/ So basically, my printer is useless right now and I need it ^^ I'll do anything including this bruteforce to advance on this SE machine code — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<#52 (comment)>, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AT5AfUHZGfw9VT8sSN9nBT7I2O5XXXT8ks5s68XVgaJpZM4OOcRB.

Hi Oden,

My uprint chips also went read only... would you be able to help? :) Not sure what to do.

@altug19
Copy link

altug19 commented Mar 3, 2021

hi, I have Uprint SE andi used cartridge writer program from riverfrontam. I used on model filament and worked well. Then , my support material was at %1 percent and i used read button and then pushed decrypt button and filled the support material but i forgot to change serial number part. Then after i load the support printer said cartridge is empty. I think machine has logs for serial numbers and didn't accept the %100 support material after changing. Do you have any suggestions for me ?

@0815isnt
Copy link

0815isnt commented Feb 1, 2022

hi, I have Uprint SE andi used cartridge writer program from riverfrontam. I used on model filament and worked well. Then , my support material was at %1 percent and i used read button and then pushed decrypt button and filled the support material but i forgot to change serial number part. Then after i load the support printer said cartridge is empty. I think machine has logs for serial numbers and didn't accept the %100 support material after changing. Do you have any suggestions for me ?

Did you solved your problem? If not, please send me your crypted data and I will send the new data back to you.

@altug19
Copy link

altug19 commented Feb 3, 2022

hi, I have Uprint SE andi used cartridge writer program from riverfrontam. I used on model filament and worked well. Then , my support material was at %1 percent and i used read button and then pushed decrypt button and filled the support material but i forgot to change serial number part. Then after i load the support printer said cartridge is empty. I think machine has logs for serial numbers and didn't accept the %100 support material after changing. Do you have any suggestions for me ?

Did you solved your problem? If not, please send me your crypted data and I will send the new data back to you.

yes i solved the problem thank you very much

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests