Finding previous tech SP access code

[skynetto]

Hello guys,
I've been reading some posts where there were some cases of Mfp's brought off lease and the previous tech has changed the SP access code. Well the code is saved in the NVRAM but we cannot dump its contents to read it since we cannot enter SP mode. But if we take the NVRAM off the MFP and read it with some EEPROM reader we can find the access code in clear around memory cell 0x6000 of NVRAM1.
Keep this in mind when you have this problem in the future.

[anothertech]

Re: Finding previous tech SP access code

Who carries an EEPROM reader? I've never even seen one.

[zed255]

Re: Finding previous tech SP access code

Well, there's no doubt that the SP mode access code is stored in NVRAM. I suppose doing an NVRAM backup to SD card would be possible from Factory SP. Afterwards the contents could be examined and modified with a Hex reader program.

Might be a worthwhile experiment.

[zed255]

Re: Finding previous tech SP access code

I can confirm that the SP access code is accessible in plain text from an NVRAM data copied to SD card. It is at hex offset 00067B20, bytes 06 to 0B.

To verify I first downloaded an NVRAM from an IM C4500 to SD card. This file was opened in a hex editor and was then searched for the default SP access code, which was located as above on the line of hex offset 00067B20.

I then changed the SP access code and re-downloaded the NVRAM to a different SD card. I then opened the new file and went to the same hex offset and saw my new SP code.

To be a nice guy, I of course set the SP mode back to the default. Of course, if one does not have access to the normal SP mode the NVRAM backup had to be performed from factory SP.

Capture.PNG

[TonerMunkeh]

Re: Finding previous tech SP access code

Can you not change the SP login from factory SP?

[slimslob]

Re: Finding previous tech SP access code

Who carries an EEPROM reader? I've never even seen one.

Anyone who has had to work with equipment where you had to use it to update firmware or check if it was up to date.

[zed255]

Re: Finding previous tech SP access code

Can you not change the SP login from factory SP?

Nope. It is one SP conspicuously absent from Factory SP mode.

[mga]

Re: Finding previous tech SP access code

Wow iam so glad I never come across this in all my years {and there's a lot of years} in the uk dealers or ricoh keeps the default. But I will talk to ricoh tier2 tomorrow and find out if there's any other way.

[zed255]

Re: Finding previous tech SP access code

When the new SP was announced we were initially told there would be a reset made available. When that never became available I asked our local support and they said Ricoh decided to NOT either release the reset procedure or simply decided it would not be readily resetable. As far as I know there is no reset, but if there is I'd love to be made aware of it.

[slimslob]

Re: Finding previous tech SP access code

Wow iam so glad I never come across this in all my years {and there's a lot of years} in the uk dealers or ricoh keeps the default. But I will talk to ricoh tier2 tomorrow and find out if there's any other way.

Beware, Ricoh will try to tell you to replace the NVRam.

[slimslob]

Re: Finding previous tech SP access code

When the new SP was announced we were initially told there would be a reset made available. When that never became available I asked our local support and they said Ricoh decided to NOT either release the reset procedure or simply decided it would not be readily resetable. As far as I know there is no reset, but if there is I'd love to be made aware of it.

It might be one of those things that your regional service rep will have to do using their emergency boot SD Card.

[TonerMunkeh]

Re: Finding previous tech SP access code

I wonder if 5846-046 in factory SP resets it.

[JayPaul]

Re: Finding previous tech SP access code

I know that 5-846-046 Has to be executed on the new IMC machines for example in my case I set the supervisor password to blank, customer then said I want to have an 18 digit admin and supervisor password with letters, numbers, capitals and special characters. With PaperCut installed on it...
Then Ricoh told me on IMC machines if you set supervisor with no password it closes the account completely. The only way to reset it was 5-846-046 in Factory mode which clears out the entire address book registry and allows you to reboot the machine and set your new admin and supervisor passwords as if they were new.
I'm not sure if this is what you are after but just a bit of info anyway in case you guys ever set those passwords as 'blank'

[zed255]

Re: Finding previous tech SP access code

I wonder if 5846-046 in factory SP resets it.

This has already been tested and the answer is no, SP5-846-46 does not reset the regular SP mode access code.

03 Models SP Mode access changed from default

[mga]

Re: Finding previous tech SP access code

Beware, Ricoh will try to tell you to replace the NVRam.

Yes that's what they said