Dish Network and SatelliteTV- JTAG Guide, JKeys and TSOP

JTAG Guide - Introduction

After reading this simple, easy to follow guide, and following all the instructions exactly, you will be able to extract your receiver's box keys and dump your TSOP. The box key is useful when using camless solutions such as emulation or when using the Atmega. Dumping your TSOP is a good idea because there is always the possibility of an ECM that targets your TSOP. Almost anyone with experience will tell you it is a good idea to dump your TSOP. This guide will assume you have some basic knowledge and know how to download files off the internet and unzip them.

This guide is for educational purposes only.

Please note we take no resposiblity for any damage you may cause as well as any laws you may be breaking. This guide is for educational, and informational purposes only! Use of this information to pirate or "steal" satellite signals is NOT authorized. The webmaster, and the web space provider are NOT responsible for your actions, and use of this information. If you can legally receive satellite service then it is in your best interest to purchase services. Any damage to your equipment, or any legal actions from use of this information will be YOUR Responsibility. If you work for any satellite company, law enforcement agency, or are under the age of 109, you must exit this page NOW. If you choose to read further, you are trespassing! If you understand and agree to the terms above...read on.

Difficulty Level

The difficulty level of this project is 7 on a scale of 1 to 10. It will require that you solder wires to the bottom of your receiver and you must have at least a little bit of experiece with soldering in smaller areas. This project should take you 45 minutes if all goes well.

What's Needed

• Jkeys 1.33
  • download it from here
• Bell Expressvu or Dish Network IRD
  • must have JTAG port on bottom
  • The following models have JTAG: 2700, 2800, 3700, 3800, 3900, 4700, 4900, DP301 (3100), PVR501 (5100), 6000 plus DRD420, 440, 480
• Computer:
  • must have available printer port
• 5 100Ohm Resistors
  • I've heard that 1/8 to 1/2 Watt will work, I know 1/4 Watt works
• Soldering Iron
  • 25 Watts or so
• Wire
  • Cat 5 works best, but regular copper wire works too
  • you wont need too much wire. You will need 6 pieces that are 6 inches or so
• Solder
  • any 60/40 solder
• DB 25 Connector
  • you will want a male connector because your computer's printer port in female

Building the JTAG The first thing you're going to do is make the simple JTAG reader. First, solder the 5 100 Ohm resitors to pins 2, 3, 4, 5 and 13 . Now, take your 5 pieces of 6 inch wire and solder one each to each end of the 5 resistors. You may not get proper results if your wire is longer than 6 inches. Now would be a good time to inspect all your solder joints and make sure that you didn't leave a solder spike across any of the pins. Now, you must make a connection for ground. This is done by taking the last wire you have and soldering it to pins 18-25 of the DB 25.

---

Hooking up the JTAG Once you have the JTAG reader built, you now want to solder it to your IRD. First of all, you should pre solder your wires. Just add a little bid of solder to the end of each wire. ***Please note that if you aren't careful when soldering your JTAG to your IRD, you can mess something up. Please note that I take no responsibility for whatever may happen. Many people say that you shouldn't solder at all to those pads on the bottom of your IRD. I have done this on 4 different IRDs and never had a problem, but that doesn't mean you wont. BE CAREFUL AND DON'T CROSS ANY WIRES. You've been warned!*** Ok, once you've pre soldered your wires, you now have to figure out where you are going to solder your wires to on the bottom of your IRD. Make sure your IRD is unplugged when soldering to it. Please use these diagrams as a reference:



2700,2800,3700,3800,3900,4700 & 4900 IRDs


3100 IRD


5100 IRD


6000 IRD (Not sure if this is correct!)



Please note where the front and back of the IRD is.
Make sure that you have good connections to the proper pads. DON'T HOLD THE SOLDERING IRON ON THE PADS TOO LONG. We don't even like to touch the IRD pads. What I do is hold the soldering iron to the wire and let the heat melt the solder that is on the wire when I pre soldered it. Inspect all your joints and make sure that there are no crosses and that your JTAG wires aren't touching each other.

---

Getting your Boxkey You now want to download Jkeys and unzip it to a folder of your choice. Connect your JTAG to your computer's printer port and plug in your IRD. DO NOT TURN THE IRD ON. Just plug it in. When you start Jkeys, your box keys should be there. If you don't see your Boxkey and IRD number, make sure that all your connections are good and no wires are crossing. ONCE YOU HAVE YOUR BOX KEY, WRITE IT DOWN IN A SAFE PLACE! YOU DON'T WANT TO LOSE THIS! . It might be a good idea now to save your TSOP in case of an ECM. No one would argue that it is a bad idea to have a back up of your TSOP on your computer. Read the next section for information on backing up your TSOP.

---

Backing up your TSOP Once you have got your box key, you should dump (make a back up) of your TSOP. Doing this is not to difficult with JKeys. All you have to do is look at the chart below, and then enter the values into JKeys. Different IRDs have different TSOPs, so that means they have different start addresses and sizes. To dump your TSOP, find your IRD in the chart below, then enter the values for your IRD into JKeys. Then press "Save Mem". Note that the 3100 and 5100 have two TSOPs, so you must save both!

IRD	Start Address	Bytes
2700	7FF80000	80000
2800	7FF80000	80000
3700	7FF80000	80000
3800	7FE00000	200000
3900	7FE00000	200000
4700	7FE00000	200000
4900	7FE00000	200000
3800	7FE00000	200000
3100 IC23	1FC00000	200000
3100 IC22	1FE00000	200000
5100 ICu7	7FC00000	400000
5100 ICu6	7F800000	400000

Once you figure out the Start Address and Bytes for your IRD, enter them into JKeys and press "Save Mem". Give the file a name, and save it to your computer. It is also a very good idea to have a back up on a floppy disk. It will dump the file and save it as a .bin (binary) file. You can view it with a hex editor if you like. Congratulations, you now have a dump of your TSOP.