Re: Radionics D7212B1 Panel Help

[Nomen Nescio <nobody@xxxxxxxxx>]

Bob said:

> I appreciate the detailed information on the lock-out mechanisms on these
>boards. One of the problems I have is understanding what is "normal"
>behavior and what is the result of losing the lithium battery. Can you give
>more info on the lockouts and passwords that are used? I am currenly
>decompling the EPROM program and I have located at least one password in RAM
>along with the default "000000" in ROM. How many levels and types of
>passwords are used in these things?

There are two different types of passwords, the "datalock" code and the
"RAM Passcode."  The datalock code was developed at the request of some
larger alarm companies, who were unhappy that smaller Radionics dealers
could take over their accounts by reprogramming them.   Datalock is
intended to prevent one dealer from programming another dealer's panels.

The datalock code is entered as a decimal value between 0 and 65535.  It is
selected by the installing company, and is typically the same for all that
company's systems.    Both the 5200 programmer and the remote programming
software check the datalock code before allowing any panel programming.
The factory default datalock code is 12345.  The first time a programmer is
connected to the panel, this code is automatically changed to the primary
datalock code that the dealer selected.

The programmer can check up to 50 additional datalock codes besides the
primary and the default codes.  This allows one company to service another
company's accounts without manually changing the datalock code in every
panel.  I do not know if the limitation of 50 codes is enforced by the
programmer or by the panel.  It may be possible to try every datalock code
in sequence, or it may be necessary to do them in blocks of 50.

When the panel's lithium battery dies (and no other power is connected),
the datalock code gets wiped out.  Since it is neither the correct value
nor the factory default value, the programmer will not communicate with the
panel.  Presumably this is done to prevent dealers from circumventing the
datalock protection by removing the lithium battery.  So, the solution is
to force-feed a datalock code of 12345 to the panel, only that's beyond my
abilities.

The datalock code is the only lock code that is checked when the 5200
programmer is used.  However, when the remote programming software (called
RPS or RAM) is used, the panel also requires a "RAM Passcode."  This
consists of six hex digits.  Typically, it is different for each panel.
It's fully programmable by the dealer.  Its purpose is hacker prevention,
rather than dealer lockout.

If you do decide to go shopping for a 5200 programmer, you should expect it
to be secured by a password.  I'm sure that won't pose much of a problem
for someone with your abilities, though.  The password is set by the user,
and is only contained in the programmer, not the panel.

Good luck with your project.  I hope you'll feel like sharing the results
of your research with the rest of us.

- badenov