ME260 - Defaulting PWs and Inside Info
Adaptel
Posts: 41
in AMX Hardware
I am one of those AMX weekender programmers, and just picked up a new NXC-ME260 off of Ebay. I first connected to it via serial port, set IP address and looked at version number (v2.10.85). Then tried to get in via telnet, web, and ftp. The default passwords were obviously changed & I couldn't get in. I then popped the CF card into my laptop & copied all files to a folder on my HD. I looked around and there was the following files & folders on the card:
-bw
-PROG.TKN
-PROG.ZIP <--contains nosource.txt 0kB
-vxWorks
-user <-folder with a bunch of G3 web panel files
My question is does anyone know where the passwords are stored or any other general info on the real nitty gritty of the mater's internal workings. How can I set the unit back to factory? If I remove power, is the security info stored in ram?
-bw
-PROG.TKN
-PROG.ZIP <--contains nosource.txt 0kB
-vxWorks
-user <-folder with a bunch of G3 web panel files
My question is does anyone know where the passwords are stored or any other general info on the real nitty gritty of the mater's internal workings. How can I set the unit back to factory? If I remove power, is the security info stored in ram?
0
Comments
Admin access by default:
U: administrator
P: NetLinx
FTP access by default:
U: NetLinx
P: password
So if the Administrator access was also changed, afaik only AMX can reset the ME260 card. Updating Firmware will not help.
Kevin D.
Yes, I did try this. I was able to get in via serial, change the ip, etc. Although, the security menu says that these functions are no longer available through the console. AMX has a tech not on this, I think in build 80 they implemented this feature to tighten security.
Although I was able to set the IP, when I try to log in via telnet, I am immediately prompted for a password. FTP & HTTP also need a valid combo to (obviously). If the purpose of the security is to "Protect The Code", and avoid unauthorized tampering, why wouldn't they have a factory reset procedure like most all modern hardware. Factory reset defines that all code is wiped from all memories, leaving a blank device. If someone who has no clue what they are doing, hey, more $$$ for the programmers to fix it. Seems a bit backwards to me, but I'm just a hack most of the time.
Kevin D.
AFAIK these settings are stored in a flash chip onboard. This Chip can't be erased any way by user, only AMX can put it back to default by overwriting that chip.
Looks like these ME card has to be send to Dallas....
How can a company that sells this hardware for ridiculous amounts of money, not design a hard reset into their hardware????? If they are thinking to protect whatever code is inside, then fine, have the procedure blow away the code as well.
I am a hobyist building and programming my own system, but geez, if I was a zillionaire, being told that "the last company put a password in here that we don't know", so we have to send it back to the factory, and you have to wait before you will be able to gain the use of the hardware YOU OWN.
To me, it's like having to ship my car back to Ford because I locked my keys in it. I only paid $350 for this master, but what do they cost new? How much extra for the version with a reset button on it?
There is a thing as Too Much security!!!! AMX seems like the type of company who wants to make money on EVERYTHING, which I think is insulting. Why not make their sales phone numbers 1-900-etc. How about selling licenses based on how many hours your Master runs?
I have no idea on who to contact or where to send this so it is more that a doorstop. I have a feeling that it could possibly exceed what I paid for it. Based on what they charge for a CompactFlash Card, I wouldn't be surprised.
I am starting so REALLY sour on AMX. It seems that any company soley targeting the filthy rich, are not the most forward-thinking people. But wanting a factory reset proceedure must be becuase I'm just some poor schlub who wants to USE MY HARDWARE. Shame on me for not shelling out money for a NEW unit!
Now I feel better,does anyone want to buy an ME260? (you will need amx's permission to use it though).
Kevin,
NetLinx, as with all AMX products, was never intended to be used without extensive factory training. Also, AMX tech support is for authorized dealers who have a commitment to the product and have invested much time and money. Support is NOT FREE.
Don't expect to get much help from this forum if you bring a bad attitude about AMX or flame the products.
Now having said that, if you are serious about learning how to program NetLinx and can maintain a good attitude, there is a lot of useful information to be had here. Also, much information can be found in the Help files contained in the NetLinx Studio application. I am just not sure if you can get access to the download section of the web site without having a dealer account.
I understand the frustration with not being able to perform a device reset in the field although I fully understand the security reasons behind the implementation. I first ran into this problem with an SNMP Managed network Switch from DLink that I purchased through eBay. I reminded the seller to factory reset the device but he did not and when it arrived, I could not login to configure the switch. I then tried to factory reset it but you can not do this with their managed switches and it has to be returned to the factory and reset (for $45). I know they are trying to prevent someone that is in physical proximity to a device from resetting it and then configuring it the way they want to perhaps introducing some security risks. I can see it both ways.
There is probably a trick to resetting the device in the field however. I had an AXB-TPI3 device that needed to be reset several years ago. Tech Support had me remove the battery backup and then use a small wire to jumper across two pins on the motherboard effectively shorting out a connection that in turn caused the flash the memory to be cleared returning the device to its factory default state. I don't know if there is a trick to doing this with some of the newer devices.
FYI AMX is not the only company that has this feature. I know for fact that many National defence/security laptops etc also use this method and for good reason.
I just want to say I wasn't here to flame AMX, I would not be here if I didn't have an interest in AMX products & technologies. I was just incredibly frustrated when I needed to get my secnod master up & running & learning that no provisions were made to completely default the unit.
If anyone is interested, I have reset my ME260 and now have access to it, but the solution I used will probably scare most off. I attempted this, because the master was useless to me, with no warrantee. I have 2 ME260's and hot-air desoldered both flash chips from board. Copied the "unlocked" one to the "locked out" one using homebrew Willem EPROM programmer. Reinstalled on masters using TSOP ZIF sockets, in case I ever had to remove again. What I learned by doing this is:
-Yes, the passwords & security stuff is stored in the TSOP
-No, you cannot downgrade the firmware to a version that supports security setup through the serial port. Build 81 added a routine to prevent loading pre-81 builds.
-No, removing the batteries does not reset passwords.
-Yes, imaging the Compactflash Card to a larger one does work.
For anyone interested, here is what I did.
-Connected CF to IDE adapter to Primary IDE port, FAT hard drive on Sec IDE
-Booted to BIOS & autodetected drives with stock 16MB CF in slot.
-Rebooted to floppy with DOS/Symantec Ghost boot disk
-Made partition image of Compact Flash Disk, saved to IDE hard drive
-Power off, put larger CF card, boot to floppy,and restore image using all available space.
-Upgrade/reload firmware to the latest/current Netlinx Master Firmware.
Hope my frustration leads to some small bit of useful info for somebody.
- Chip
I tried several of the freeware & 30-day demo shareware disk imaging packages, but none of them were able to produce a working CF card for ME260. I used good old ghost which only runs in pure dos. It is obvious that the CF card has to be visible in DOS and that DOS thinks the card is a hard disk. There may be software drivers that will allow a CF card inserted into a PC-Card slot to "mount" in DOS, but I have not looked for one because I have an IDE-to-CF adapter. Some laptops have a BIOS option to boot from CF slot, so this may work too. I also was able to upgrade an NXC-ME DiskonChip using ghost with the DiskonChip Plugged into a single-board-computer for imaging.
The reason I think most of the other packages fail when imaging an AMX flash device lies in the contents of the chip/card's boot sector. Ghost has an option to copy the entire boot sector, even extended areas in the BS. I think most imaging software ignores chunks of this area, because most MS OS's have no reason to be putting stuff here. I think it's the same area where multi-boot managers and those pesky hard-disk managers (like Maxtor's Maxblast), used to make old systems recognize huge drives, are stored. The image fails in Ghost with default settings, but under options, you can choose to copy ENTIRE boot sector and violla, nice $85.00 1GB AMX Flash Disk. I have no idea of what the heck I would ever put on this much space on my master, but hell, I can install software from it now!
http://www.amxforums.com/showthread.php?t=382
(Same forum, title "Compact Flash Cards")
It talks in length about upgrading compact flash cards in ME260s (as well as MVP panels).
-- Jeff
The old ME's used Disk-On-Chip, not CF's. There are many other significant hardware differences as well. The difference between FG2010 and FG2010-60 is much greater than the difference between FG2010-60 and FG2010-64.
Would you (Adaptel) or anyone else still have a copy of the image for the unlocked EPROM?
Could you please send it to me?
I have the same problem but no second unlocked ME260 to copy.