****** Update at your own risk !!!! ******
Versions:
Irdeto I
based on the Philips 8051XA embedded CPU
( P/N : 900264 ) NEC I-Chip Ver. 0.03 ,
softcell Ver. 2.05 , compiled 16/Jun/1999 ,
flashable
( P/N : 900440 ) NEC I-Chip Ver. 0.04 ,
softcell Ver. 2.06 , compiled 25/Jun/1999 ,
flashable
Contents:
Installation
History
FAQ (english)
FAQ (deutsch)
Known bugs
You can flash CAM only through a Nokia 9600 not Nokia 9500 or 9200.You need to
establish a connection between your PC and your Nokia 9600 via SCSI interface.
PC Side you will need a SCSI Card ( Adaptec 2940U2W Recomended ). Download
VGrabber Loader. Once you have connection between both appliances execute
VGrabber, this will confirm your connection. From the pull down menus of the
VGrabber select ( SCSI Action ). Find the extention Code upload and execute
upload subroutine.You will be prompted for the Directory for the bin file (e.g.
C:\CAM) and thats it.
0. Download the upgrade Pack and the version you want.
1. Unzip all files into a directory of you choice (e.g. C:\CAM)
2. Copy the CIPHYSICAL.DLL %windir%\system\ and %windir%\system32\ directory
3. Edit ird106.ini and change the binary=*.bin entry to the file you want to
install
4. Copy ird106.ini to your Windows directory %windir%\
5. If you run Win95 OCR2 use irdeto95.inf or Win98 use irdeto98.inf (ONLY ONE OF
TWO DELETE OTHER)
If you run WinMe, WinNT, Win2k or WinXP it won't work!!!!!
6. Shut Down Laptop
7. Restarting Laptop (WITH THE CAM ON THE PCMCIA SLOT)
8. When it asks you for a driver directory point to unzip directory (e.g. C:\CAM)
9. Start ird106.exe. Press the start button. When the display turns greens,
you're all set.
10.Follow the on screen instructionsStart the MS-DOS command line.
|
FreeCAM2 - 010: |
Initial public release. |
|
FreeCAM2 - 011: |
Fixed a bug in the $0328D6 routine, which also existed in FreeCAM1. Channel switching is now faster. |
|
FreeCAM2 - 012: |
Fixed a bug, that caused some receivers not to support D-Cards (e.g. Mediavision). |
|
FreeCAM2 - 013: |
Returned to original routine at $030064. |
|
FreeCAM2 - 014: |
Fixed a bug, that could destroy EEPROM contents, when turning emulator off and switch between Mode GER and INT. Added support for GER,INT,XNT,TEL and AUTO Modes. In Version 014 only use AUTO (all other modes do not work). There is a another bug (left from FreeCAM1), which can eventually destroy a smart card EEPROM contents, when the EMU is on (sends 01 FF nanos, don't know why). So do not insert a card, that supports EEPROM writing, when the EMU is on. I will work on a fix in 015. |
|
FreeCAM2 - 015: |
FreeCAM in emulator mode no longer destroys smartcard. You can now switch the emulator on without the need to go to a 0602 channel before. Enhanced support for Non-Irdeto/BetaCrypt ECMs. |
|
FreeCAM2 - 016: |
Fixed a bug, which caused CA_System_ID 1722 not to work (Mediavision Bouquet affected). |
|
FreeCAM2 - 017: |
Allow 4711 before the CA_System_ID to deactivate CAMCRYPT. This allows certain Goldwafers (Alfredo) to run. |
|
FreeCAM2 - 018: |
Added support for preferred providers in Viaccess and Seca.
These are entered as keys: enter a provider string for Seca as 53 45 aa aa bb bb cc cc dd dd
or for Viaccess as 56 49 xx xx x0 yy yy y0 00 00. This would add Seca providers aaaa to dddd
and Viaccess providers xxxxx and yyyyy to the preferred provider list. Multiple entries are allowed.
Either patch the keylist starting at $3A000 or use the FreeCAM Keyeditor from your remote control.
In the latter case you have to perform a bytewise decimal conversion (FreeCAM style keys). |
|
FreeCAM2 - 019: |
Added support for TPScrypt. Disabled printing of error messages like "NVRAM/FILTER ERROR", but the problem still exists - see the Bugs section below. Added multiple EMM support. Now it is possible to receive EMMs for two different CA_System_IDs simultaneous. The two CA_System_IDs are: the one from the card and the default Irdeto1 ID - 0602. |
Goodies menu:
|
DEBUG (on / off): |
OFF: CA_PMT is not dumped. ON: CA_PMT is dumped to card, "01 5A 00 00 01 length ca_pmt". ON is not useful if you don't know how to read the CA_PMT. This option does not open any extra channels. |
||||||||||||||||
|
ECM: |
This setting has 2 different functions:
|
||||||||||||||||
|
EMU (on / off): |
OFF: use card or emu to decode. ON: internal emulator for Irdeto1 and BetaCrypt1 is used. |
||||||||||||||||
|
TPScrypt (on / off): |
OFF: cam does not decrypt TPScrypted Viaccess ECMs. ON: cam decrypts TPScrypted Viaccess ECMs and sends them plain to the card. |
Prefered providers:
It is possible to define a list of so-called "prefered" providers for Viaccess and Seca. These are 10 byte long strings which consist of 4 or 2 provider idents, depending on the System. These strings have the following format (all values in hexadecimal notation):
|
53 45 aa aa bb bb cc cc dd dd |
for Seca: space for 4 idents each 2 byte long. |
|
56 49 xx xx x0 yy yy y0 00 00 |
for Viaccess: space for 2 idents each 3 byte long, the last 2 byte are not used. |
You can enter these strings in the same way as PlainKeys. Either with your remote control in the Key menu or at $3A000 in the bin file. It is wise to enter only the idents you have keys for. Multiple entries are allowed.
example Seca:
|
53 45 00 19 00 03 00 10 00 00 |
53 45 = SEca ident string |
example Viaccess:
|
56 49 00 78 00 00 7C 00 00 00 |
56 49 = VIaccess ident string |
Multiple EMMs:
It is possible to receive EMMs for two different CA_System_IDs. The first CA_System_ID is 0602 (default Irdeto1 ID). If it is in the CAT, it is activated. The second CA_System_ID is defined by the card. Example: if you set your card to 1702 you will be able to receive EMMs for 0602 and 1702.
Goodies Menü:
|
DEBUG (on / off): |
OFF: CA_PMT wird nicht gedumpt. ON: CA_PMT wird zu Karte gedumpt, "01 5A 00 00 01 Länge ca_pmt". ON ist nur dann sinnvoll, wenn Ihnen die Struktur der CA_PMT bekannt ist. Diese Option öffnet keine zusätzlichen Kanäle. |
||||||||||||||||
|
ECM: |
Diese Einstellung hat 2 verschiedene Funktionen:
|
||||||||||||||||
|
EMU (on / off): |
OFF: zum Dekodieren wird eine Karte oder ein Emulator benötigt. ON: der interne Emulator für Irdeto1 und BetaCrypt1 wird benutzt. |
||||||||||||||||
|
TPScrypt (on / off): |
OFF: mit TPScrypt verschleierte Viaccess ECMs werden nicht entschlüsselt. ON: das Cam entschlüsselt mit TPScrypt verschleierte Viaccess ECMs und sendet sie plain zu Karte. |
Bevorzugte Provider:
Es gibt die Möglichkeit für Viaccess und Seca eine Liste so genannter "bevorzugter" Provider anzulegen. Das sind 10 Byte lange Strings, die je nach System 4 oder 2 Provider Idents aufnehmen können. Diese Strings haben folgendes Format (alle Werte in Hexadezimaler Schreibweise):
|
53 45 aa aa bb bb cc cc dd dd |
für Seca: Platz für 4 Idents je 2 Byte. |
|
56 49 xx xx x0 yy yy y0 00 00 |
für Viaccess: Platz für 2 Idents je 3 Byte, die letzten 2 Byte sind unbenutzt. |
Die Eingabe dieser Strings erfolgt auf die gleiche Weise, wie die Eingabe der PlainKeys. Entweder mit der Fernbedienung über das Key Menü oder direkt ab Adresse $3A000. Sinnvollerweise sollte man nur die Idents in die Liste eintragen, für die man auch Keys hat. Es können mehrere solcher Strings eingetragen werden.
Beispiel Seca:
|
53 45 00 19 00 03 00 10 00 00 |
53 45 = SEca Ident String |
Beispiel Viaccess:
|
56 49 00 78 00 00 7C 00 00 00 |
56 49 = VIaccess Ident String |
Mehrfach EMMs:
Es ist möglich EMMs für zwei verschiedene CA_System_IDs zu empfangen. Die erste CA_System_ID ist die 0602 (default Irdeto1 ID). Wenn sie in der CAT vorhanden ist, wird sie aktiviert. Die zweite CA_System_ID wird von der Karte bestimmt. Beispiel: wenn die Karte auf 1702 gesetzt ist, können EMMs für 0602 und 1702 empfangen werden.
FreeCAM fucks up, if CA_PMT is greater than 192 Bytes. It displays stupid NVRAM error messages, if it is greater than 128 bytes. This bug is part of the original Irdeto soft. We'll try to overcome this in a later release.
So called Z-Cards are not supported. -> However, they are not needed. Instead of using a Z-Card, set EMU to ON. FreeCAM2 does not depend on Dealer-Keys.
****** Update at your own risk !!!! ******