R2E4 Maintenance Mode Password?

[arsenix]

Does anyone know the maintenance mode password for an R2E4 Series II? Not sure why the maintenance manual tells you how to get into it without giving you the password...

James

[machintek]

I need to do some digging to find it. For some reason ACE1 rings a bell. Dave Cloud at EMI will remember. But I never needed it. I could access the BOSS event monitor and the FIST event monitor through the front panel. Otherwise I went onto the K3 connector on the FMDC and was in the maintenance "mode."

George

[arsenix]

It would be great if you could find it. It seems I get an error if I try to enter a non numerical password.

Thanks for digging for me

james

[jonny]

The tech password for my R2E3 is the ascii character 31 decimal, 1f hex. The maintenance password, as published in the manual, is BEEP. The string to reset RAM after replacing battery is AEAEAEAEI. I found these codes by disassembling the 68000 program in the EPROMS. Since both the R2E3 and R2E4 both use an FMDC, the passwords might be the same. If these don't work and you're willing to pop out and read your EPROMS, I think I can easily find your passwords.

[arsenix]

The password I am looking for is the maintenance mode on the BSP2. It appears to be looking for a hex number... as it will accept capital ABCDEF and numbers, but no other characters (it gives an invalid character error). I tried the 31 decimal, but it doesn't seem to like that either.

Unfortunately I don't have an easy way to read the EPROMS. One of the reasons I am trying to that is actually why I am trying to get into the maintenance mode is to get a hex dump of the roms.

Thanks for the ideas!

james

[jonny]

When you enter BEEP and then look at the event log (Q) do you get the message "Maintenance password entered"?

When I say ascii character 31 I mean it in the sense that ascii character 55 is the symbol 7, 63 is ?, 85 is U, &c.

[arsenix]

The BEEP just gives me an "Invalid character in input" error. When I enter all hex digits, it gives no error but a "CANCEL PASS" is added to the event queue, and it still says password must be entered when I try to use maint functions.

Yeah I entered the ascii 31 as a single character, but it didn't seem to like that (gave invalid character message).

Any other ideas? If it is less than six characters a brute force attack might not take more than a few days... or i could build a little eeprom reader...

james

[machintek]

The only password I could find was to clear a register.

AEAEAE

George

[arsenix]

I did a brute force attack on the password. This time I specifically tried cracking the password for memory dumping, which is "ACE1" as George originally told me! I tried this when he suggested it, but evidently I must have been trying a different function in the maintenance mode(which I guess must have had a different password).

Thanks for all the suggestions folks (especially George who got it right off!), hopefully I can get on with my true mission now... hooking up my fourth axis.

james