please help a card programming noob!!

[Hennah04]

hey guys, I'm at my wits end trying to program a couple of cards.
I'm using a phoenix unlimited usb programmer which is running in vcp.
I have three nagra cards, two have been unlocked previously and programmed by someone else, the other may be a dead end as it is a rom 7 card and I have heard that rom 7 are difficult to modify, so, focusing on the others 2 cards, one is rom 10 the other is rom 11.
I have been trying to use nagredit 4.1 with the options set to phoenix mode and using the same port as in my vcp settings.
Attempts to access the Rom 11 card result in
Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
ProviderID: 82
CamID: F4 8F 11 03
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BD3 login failed
Reading ROM11 failed
Closing of COM2 was successful

or

Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
ProviderID: 54
CamID: 24 84 BC BC
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BackDoor login verified
Dumping Dataspace
Error changing decrypt keys
Write error encountered, attempting to restore original decrypt keys
ProviderID: 82
CamID: 1C EA 79 35
Attempting to login to BD3
BD3 login failed
Error, unabled to restore decrypt keys
Decrypt keys: 10 E6 78 2B E2 7A 02 E1 90 D9 CD DA 12 21 C4 56
BF 16 B8 44 85 04 CF E5 86 06 3A 58 B1 B5 D4 0F
FE 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00
Reading ROM11 failed
Closing of COM2 was successful


Although sometimes it is slightly different in that it succeeds in backdoor access to BD3, then it says trying to access BD0 and then asks for a password. I have also tried to use several other programs to access the card including xncs, caton, rom studio and mron.
I've got the ird and bk numbers so I've tried to look into wiping the card and then writing an image to it. I tried to use mron to wipe the card but it says that it is not compatable with rom 11 cards. I tried simply writing over the old image but it asks for the BD0 password.

The other card is Rom 10, I have tried to access it using the same programs I have used with the Rom 11 card, although I haven't tried to write over the image or wipe the card as I don't have the bk code. I understand it is on the scart of my cable box, internally, however I don't have the correct screwdriver to open the box and obtain it.
Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 38 36 44
ROM Revision: 010
EEPROM Revision: RevA86
ProviderID: 00
CamID: 90 01 F2 30
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BD3 login failed
Reading ROM10 failed
Closing of COM2 was successful

If someone could help I would appreciate it sooo much. I am a noob though so you might have to spell it out a bit for me

[afcwomble]

What version software are you using-some have to go back to 2.61 in XP. And are you running XP or Vista?

Have a look at this thread as well and check settings are ok

infinity usb unlimited (vcp settings)

[Hennah04]

I'm running infinity usb unlimited software version 2.7 in vista, and I'm running nagraedit 4.1 in windows 98/me compatability mode

[morashid679]

try reading the card in xncs and then check the bd keys.

If you dont need the bk then use the edcase b09 d2c script in Nagra which will write new bd key and let you write a new image onto the card.

[sqwidge]

if they passworded you may have to MROM or D2C your cards but ONLY do this if you have your bk and ird or have the gear needed to get them

[Hennah04]

If you dont need the bk then use the edcase b09 d2c script in Nagra which will write new bd key and let you write a new image onto the card.[/quote]

xncs is failing to read the card saying there is no atr sent from card. how do you use the edcase b09 d2c script in nagra? can I download a d2c script that's ready to go?

[Hennah04]

I've managed to get mrom to work now on the rom11 card, once this is done shouldn't I be able to just write the image to the card? I'm still not able to get past BD3 or sometimes BD0.
I've tried running the D2C script, sometimes it is succesful and changes the BD password but what do I do after that? I am still unable to write an image to the card.

[reddiesel]

Originally Posted by Hennah04

I've managed to get mrom to work now on the rom11 card, once this is done shouldn't I be able to just write the image to the card? I'm still not able to get past BD3 or sometimes BD0.
I've tried running the D2C script, sometimes it is succesful and changes the BD password but what do I do after that? I am still unable to write an image to the card.

The Rom 10 needs unlocking, the b09 should read in 4.1 after using d2c patch, just click on comm open patch and run.