I came across a Simplex 4100U on eBay for a ridiculously low price a few months ago and picked it up. (It was even cheaper than most other panels I’d be able to get at the time). I wasn’t really looking for a panel, but I couldn’t pass this up. I also obtained the serial programming cable.
As I had said in a prior post, I’m not a collector or technician, but I am interested in fire alarm systems. However, what I am is a software and cybersecurity engineer. My goal with this panel is to discover a way to program it with free to obtain software (the Autocall ES Programmer), without needing a dongle. It turns out that this is actually possible with some minor tweaks to the Autocall software and the .SDB4100U file that is used to contain the job information before it’s built into a CFIG for the panel. I plan to make another, larger post about this effort sometime soon, but in short, I’ve made much more significant progress than I had expected to. (Ironically enough, by my research, it would be easier to program a 4100ES because of its Ethernet port and USB/Ethernet file transfer, as well as its mass storage device. I may pick up a 4100ES in the future to play around with.)
However, I have run into a bit of an issue which I’m trying to work on, but am not sure I can solve without some help. I put together a CFIG with 10 or so addressable points enabled with some dummy labels so I could see if the panel took my CFIG. It took some effort to convince the software, but the node tree in the programmer contained all valid devices/cards according to what was actually in the panel (it is a very basic panel, with only a DACT (which I disconnected) and CPU card with built-in IDNet loop). I first backed up the CFIG using the 4100U Transfer Utility. I then used the “Bootloader” option to download the latest system revision. I then downloaded my new CFIG. The panel rebooted…and crash code 34 came on the screen.
According to this site, crash code 34 is an invalid CFIG format error:
INDICATES THAT THE CFIG FORMAT NUMBER IS INCOMPATIBLE WITH THE VERSION OF EXECUTIVE SOFTWARE (SYSTEM PROM). CHECK PROGRAMMER DISK REV NUMBER AGAINST REV NUMBER ON THE LABEL OF THE SYSTEM PROM. UPDATE SYSTEM PROM TO REV OF CURRENT SOFTWARE BY BURNING A NEW SYSTEM EXECUTIVE PROM.
See FSB-252R for compatible system exec and programmer revisions
The panel won’t do anything in this state, and I can’t even get it to accept a new CFIG since it reboots every 10 seconds (stuck in a bootloop). Here are the courses of action I’m looking at:
1 - Try to contact someone at Simplex to burn a new PROM chip. I could send in my old chip providing I can locate it off the panel. If someone on this forum that works for or has a contact with Simplex, I would be willing to pay a decent amount for this chip to be flashed to the correct version.
2 - Try to flash the chip myself. I have a decent amount of electronics knowledge as well as an Arduino and Raspberry Pi. Me and my brother have used an Arduino before to flash a new firmware to a 3D printer. However, I have no earthly idea where I’d obtain the correct software that needs to be flashed to the chip.
3 - Patch the Job Builder application or the CFIG itself to contain a different rev number. Will require a good bit of effort. This may work, but due to upgrades in the CFIG format, may still cause the panel to crash unexpectedly.
4 - Try to get the old CFIG back on the panel to at least get it functioning, then try to use the Job Builder to “unbuild” the old CFIG for modification. I tried the route of modifying the existing CFIG first, since the 4100U Programming Manual mentions that I can use the Job Builder to decompile a CFIG file. Unfortunately this function seems to be missing from the Autocall suite of tools. I’m trying to track down the Simplex 4100U programmer, but am not having luck.
If anyone has any suggestions, let me know. If I can build a fully working 4100U without needing to involve Simplex at all, I will be sharing the entire process with all of you, and likely making videos of how to do this to your own 4100Us for those of you that own one. Of course, if this works, it will be HIGHLY experimental and should under no circumstances be used in an active life safety system. Consider it the fire alarm version of an iOS jailbreak - I’m just jailbreaking a 4100U. I can upload proof as needed.