[Ahmed18]

Hello guys,

I have a problem on my CNC machine with a Fanuc 31i MODEL A5

I can't edit some CNC parameters such as 1815 to set the zero reference for the axis
I set the PWE to 1
Switch the Write Enable Key from my Control panel

But when i try to edit this parameters the Write Protect appears
Also when i try to restore the CNC Parameters from my SD-Card the Write Protect appears at the screen.

I searched for this problem on the Fanuc manual and i found something called Protection of Data at 8 Levels
I found that my machine works on level 0 so i don't have the access to this parameters
When i want to change the level to 4,5,6 or 7 it needs a password which i don't know !!

So does anybody know the default password for changing the operation levels ?
If the password differs from machine to another can we found it on the ladder file or in the SRAM file ? i means reverse engineering process to know this password ?

Greets

[memoryman]

Interesting questions. Is your control a 21iA or 21iB?
I have never heard of "Protection of Data at 8 Levels". Which manual is this in?

[Ahmed18]

Hello memoryman,

The control is 31i MODEL A5
The manual is FANUC Series 31i/310i/310is-MODEL A5 USER’S MANUAL (Volume 2 of 2) (63944ENV2)

[memoryman]

Thank you. I did not have that manual.
"If the password differs from machine to another can we found it on the ladder file or in the SRAM file " I have done that successfully on the FS11, but need the following:
1: the data is not encrypted in the sram file
2: a sram file with the password and
3: a sram file with a new password (even blank) and
4: that new password
Better to do steps 3&4 twice with different passwords.

[fordav11]

you mean 2 & 3 ;-)
a simple binary file compare would do the job then just blank out the pass or paste the changed bytes (the new known pass) into the file where the bytes differ, save it then read the SRAM back into the machine.

[underthetire]

Some of those passwords are the rotating passwords that Fanuc only has.

[memoryman]

don't forget that the time stamp also changes; if a checksum is used, the cut and paste won't work.

[fordav11]

it wouldn't really matter as long as it's not encrypted the changed data can be seen using a hex editor so the actual password would be easy to find. then just type it in.

[norbert.barnard]

hi,

the standard password for level 4 is in the manual, which the mtb should give to the dealer for maintenance reason.

you need level 4 to change parameters.
you will never need to access level 5-7, this is for mtb and fanuc.

caution, these passwords are not represented in a parameter, so should you change and forget there is no reversal.

have fun
norbert

[fordav11]

the standard password for level 4 is in the manual

Which manual? I checked the FANUC Series 30i/31i/32i-MODEL A USER’S MANUAL (Common Volume 2 of 2, 63944ENV2). There is brief information about 'Protection of Data at 8 Levels' but no default password is listed for level 4.

[norbert.barnard]

connection function, B64438en-01.

[Ahmed18]

"If the password differs from machine to another can we found it on the ladder file or in the SRAM file " I have done that successfully on the FS11, but need the following:
1: the data is not encrypted in the sram file
2: a sram file with the password and
3: a sram file with a new password (even blank) and
4: that new password
Better to do steps 3&4 twice with different passwords.

Thank you i will test this method

connection function, B64438en-01

I can't find this manual !!

[fordav11]

it's not part of the 30i/31i/32i manual set. it may be for a later model but there's 0-hits in google so it probably doesn't exist.
the 30i/31i/32i Model A connection function manual is B-63943en-1/02
The parameters can be set with G10L50 regardless of the protection level anyway so it's not really needed. The manual says.....

The initial values of the passwords for operation
levels 4 to 6 are shown below.
- Operation level 4: "HC3V9ZEP"
- Operation level 5: “J72WB8YA”
- Operation level 6: “VLR6T92M”

Change protection checking of data basically
covers the changes made by MDI operation. The
changes made by operations are not covered.
For example, programmable parameter input by the
G10L50 command can be changed regardless of
the operation level or the change protection level of
the parameter.