Last Updated 25-May-2001.





News

MKFv4 Public Release!










Feature List:-


1:- Full Auto Extraction of FULL Seca Card

2:- Brute Force Attack

3:- Directly Extract MK00 (No Backdoor Key Required)

4:- Extract Keys/ Records by clicking on them

5:- PPUA/ Provider Names/ Expiry Dates/ PPV Credits can all be modified at the touch of a button....

6:- Change your Package Bitmap (Channels allowed), Just by selecting the channels you want and pressing Modify!

7:- Write Keys simply by typing in key Re'q and pressing 'Write Records'.

8:- Elvis Support! Auto Pheonix Mode

9:- Check any key just by entering and pressing 'Check Keys'.

10:- Add/Remove Providers just by clicking.

11:- Modify Activation Date, by clicking on Date and pressing 'Write Selected'

12:- Modify Seca Startup/ PPV Records by clicking.

13:- Lock your Package Bitmap on any Provider. Stopping O*D Resetting it!



Welcome to MKFv4 Beta How To Guide.. The aim of this section is to give you a quick guide on How to do many different operations on your Original/ MOSC Seca Card.


Please Note that All Data information is given for Test Purposes only. The intended users of this site are those who are just interested in learning a bit about Seca Encryption and How you can interact with the data on your card.

MKF4 is a major re-working of MKFind and I must say that it should be the ONLY program you need for MOSC on SECA Cards. All the features from the existing version are included and some new ones to boot.



How Do I..... ????

Main Section Title

Go To

Do a FULL Seca Card Extraction Card Layout - Card Records
Change the Operational Keys in My Original Seca Card Card Layout - Provider Name - Keys
Make a Dead/Unactivated Seca Card Fully Operational Card Layout - Provider Name - General/ Keys
PBM - Package Bitmap Modification (i.e. Change Channels Available) Card Layout - Provider Name - PBM
Stop O*D*gital or any Other Seca Provider From Reseting My Channel List (PBM - Package Bitmap) Card Layout - Provider Name - PBM
Make MKFv4 Work directly with my Elvis Programmer Settings




  • How Do I..... Do a Full Seca Card Extraction.

    Summary of Procedures
    1:- Connect Power to Programmer. Connect Programmer to PC. If Using an Elvis Programmer. Goto the 'Settings' Tab and select 'Elvis AutoPhoenix Mode'. Then Press the 'Connect' Icon.
    2:- Goto Card Layout and 'Read Card Layout'. Also Check Version of your card, if your card is anything other than a Version 4x (i.e. 4.0 or 4.1) then do not proceed with extraction (as this process will be untested).
    3:- Goto Card Records Tab by clicking on the 'Card Records' in the Left Hand Column.
    4:- Click 'Read Records' and Wait for the table to appear with all your records in it.
    5:- Select the 'Maxprovider' and 'Overwrite' options and then Press 'Auto Extract'. Accept Questions and Wait for Card Layout/ Keys to appear before your very eyes.
    6:- Click 'Save Records' or Disk Icon on the Tool Bar to Save all your cards details.

    Details of How To do a Full Seca Card Extraction.

    1:- Basic Setup of Programmer/ PC. Please Note: Pheonix (or compatible) type interface required for this program.
    Connect Power to Programmer.
  • Connect Programmer to PC.
    If Using an Elvis Programmer. Goto the 'Settings' Tab and select 'Elvis AutoPhoenix Mode'.
    Then Press the 'Connect' Icon as shown in the top left corner with two arrows going round .




    2:- Go to the Card Layout tab in the left hand menu and click on the button 'Get Card Info'. Also Click the button 'Card Version' and find out what version of Seca Software is on it.



    WARNING: If your card is anything other than a Version 4x (i.e. 40 or 41) then do not proceed with extraction (as this process will be untested).If you do proceed, please be careful as there is a possibility that using either the System Key extract or the Overwrite Auto-Extract process could damage your card! You have been warned.(If you have ignored these warnings and have any information on how this program performs on the newer V60 card, please get in contact, as I would be interested in the results.)

    3:- Goto Card Records Tab by clicking on the 'Card Records' in the Left Hand Column.



    4:- Click 'Read Records' and Wait for the table to appear with all your records in it. This should then look like this:-



    Ok, So now you have the basic list of records (still encrypted). Please Note, that the position of the keys, is dependant on your card, the 'Index' column down the left side is what the list is sorted by.

    5:- Now, to do a Full Extract you need to Select the 'Maxprovider' and 'Overwrite' options and then Press 'Auto Extract'. Accept Questions and Wait for Card Layout/ Keys to appear before your very eyes.
    PLEASE NOTE: For anyone wanting to be absolutely sure that nothing can change on their original card, select ONLY the 'maxprovider' option. This will only create EXTRA providers on your card and then READ the Records that have become clear and then remove the extra providers again. There should be absolutely no danger to your card.Remember that this method has varying degress of success on any individual card. If you are only after you MK01, then this may well be enough to get it. As long as at least 3 bytes appear, it is possible to use a manual brute-force. If 4 or more bytes appear, then you can click the record for Automatic Brute Force in a matter of a minute or less (3 bytes= less than a second!).
    I Recommend trying this method first to see how successful it is.

    Once you have run the Auto Extract, then all the records on your card will be available for you to see, as below:-



    If you get a message pop-up saying the program has encountered a PPV Record (Ending in Bx), then this means that because MKFv4 cannot fully restore these records, it needs to remove them. IF YOU HAVE PAID FOR ANY PPV EVENTS THAT YOU HAVE NOT YET USED AND YOU ARE NOT PLANNING ON CHANGING THE PBM OF THIS CARD, THEN DO NOT CLICK YES, AS THIS WILL LOSE YOUR AUTHORISATION. (Normally however, you would consider changing the package lineup available to include PPV, therefore this Question can be answered with Yes and the rest of your card can be extracted.

    Now, you will see from the screen shot above, that be clicking on one of the extracted records, you can make sure that All of your extracted keys are copied to the Individual Keys sections in each provider on the left column. (This is important when you want to save ALL the card Details, not just the Card Records section).

    6:- Now, to save the details extracted you have two very different options. You can either Click 'Save Records' or the Disk Icon on the Tool Bar to Save all your cards details.

    The difference between these is pretty Big.
    The 'Save Records' button ONLY the Records in a format like you see in the table above it. It does NOT save the records in the individual keys section. Therefore, you cannot use records saved this way later to load all a cards keys and write them to another card (for instance).
    To Save ALL the keys copied to the individual providers sections, (assuming you used the 'Copy All extracted Keys' option as shown on the screenshot above) Use the 'Disk' Icon on the toolbar at the top of the screen. This Saves ALL of the information about a card and the table of records as well. This includes Providers/ PPUA/ Keys(MK and OP)/ PBM/ Expiry Date. Pretty much everything need to restore a card later automatically.

    That's It Full card extracted and all keys ready for you to see!


    How Do I..... Change The Operational Keys in my Seca Card

    Summary of Procedures.
    1:- Connect Power to Programmer. Connect Programmer to PC. If Using an Elvis Programmer. Goto the 'Settings' Tab and select 'Elvis AutoPhoenix Mode'. Then Press the 'Connect' Icon.
    2:- Goto Card Layout and 'Read Card Layout'. Also Check Version of your card, if your card is anything other than a Version 4x (i.e. 4.0 or 4.1) then do not proceed (as this process will be untested).
    3:- Click on the Provider Name that you wish to Modify the Keys for (i.e. O*D*gital1). Then click on the 'Keys' Tab.



    Then in the middle of the screen, you should see two tabs - 'Management' and 'Operational'. Click on 'Operational'
    4:- Then fill in the key(s) that you wish to write to your card in the appropriate places (i.e. Key 0C, enter it in the box next to '0C', etc). Then make sure the tick is in the box next to any key you wish to write to the card and Press 'Write Records'. That's it, your card will now have that key on it!


    How Do I..... Make a Dead/ Unactivated Original Seca Card Fully Operational

    Summary of Procedures.
    Pre-Requisite:- You Must Have a Valid Management Key to Make your card Auto-Update. If you do not have a valid key, (extracted from a currently running subscription card), then you can only make the card Operational By writing Operational (Monthly) keys to the card and this will need doing each month. To do this Click HERE.

    1:- Connect Power to Programmer. Connect Programmer to PC. If Using an Elvis Programmer. Goto the 'Settings' Tab and select 'Elvis AutoPhoenix Mode'. Then Press the 'Connect' Icon.
    2:- Goto Card Layout and 'Read Card Layout'. Also Check Version of your card, if your card is anything other than a Version 4x (i.e. 4.0 or 4.1) then do not proceed (as this process will be untested).
    3:- Click on the Provider Name that you wish to Modify the Keys for (i.e. O*D*gital1). Then on 'Keys' Tab.



    Then in the middle of the screen, you should see two tabs - 'Management' and 'Operational'. Click on 'Management'
    4:- Then fill in the key(s) that you wish to write to your card in the appropriate places (i.e. Key 51, enter it in the box next to '51', etc). At the very least you need the '51' (MK01) Primary Key. If you have them, you could write any other keys you have extracted from a valid card (i.e. MK01 Secondary, also maybe MK00 Primary/ Secondary). Then make sure the tick is in the box next to any key you wish to write to the card and Press 'Write Keys'. That's it, for the MK's. Now you Will also need to change your PPUA and possibly the expiry date.
    5:- Modify the PPUA, this is in the 'General' tab of the provider you are writing to. Once you have clicked on 'General', you will see the PPUA Box.



    Type in the FULL PPUA from the card you got the MK's from. (Note:- You cannot use the PPUA from a 'Wafer' or 'Gold' card as these do not contain a full PPUA - Missing the CustWP byte - The CustWP byte is basically the last two digits of the PPUA i.e. 33 in the picture above. These are usually 00 in a wafer card as it does not check it, but a 'real' card does). You may also want to change the expiry date to this month or last month (This will then update automatically when it receives the updates from your Program Provider (O*D*gital). Once you have entered the Expiry Date and PPUA, then Press 'Modify Selected'. Now at this point, your card will be able to get Operational Keys over the air from your Program Provider. Therefore if you put your card into your Decoder, change to an encrypted channel and wait for up to an hour or so, your card should receive the latest Operational Keys and become active.
    6:- If, however you don't want to test/ wait for the auto-update to occur, you can write the latest Operational Keys to your card, by following the procedures for Writing Operational Keys HERE.



    How Do I..... Change/ Update my Channel Package (PBM) in my Seca Card


    1:- Connect Power to Programmer. Connect Programmer to PC. If Using an Elvis Programmer. Goto the 'Settings' Tab and select 'Elvis AutoPhoenix Mode'. Then Press the 'Connect' Icon.
    2:- Goto Card Layout and 'Read Card Layout'. Also Check Version of your card, if your card is anything other than a Version 4x (i.e. 4.0 or 4.1) then do not proceed (as this process will be untested).
    3:- Click on the Provider Name that you wish to Modify the Keys for (i.e. O*D*gital1).



    Then on 'PBM' Tab. Then near the top of the screen, you should see 'Package BitMap' and a row of Hex digits (mostly zero's) and to the Right of this will be six buttons. Click the Button Labelled 'Read PBM'. This will then Read the current channel package that you are subscribed to on your card.
    4:- This can be modified by working your way through the different 'Byte' tabs, clicking the 'tick box' next to each channel you want to be able to watch. Note:- Clicking the 'All Primary Channels' in Byte 2, will activate all Primary channels, no matter what each individual channel is set to. Also, OnRequest (PPV) is only 1 single bit. Therefore, there is no way to Disable Just the 'Adult OnRequest' without losing the rest of the OnRequest Channels (To do this, diable it using the standard menus on your Digital Receiver).
    5:- Once you have selected all the channels you want, press the 'Modify PBM' button and that is it. You will now have all the channels you selected. Note:- If you have recently changed your channel line-up/ or activated your card, then your Program provider may still be sending out your 'official' channel list to your card. Therefore, it may get reset after a short while. This will normally stop after a couple of weeks. You can however STOP any changes being made to your PBM by your program provider, by using the 'Lock PBM' Option. For Details of this go HERE.



    How Do I..... Stop O*D*gital or any Other Seca Provider changing my Channel Package (PBM - Package Bitmap)

    Summary of Procedures.
    1:- Connect Power to Programmer. Connect Programmer to PC. If Using an Elvis Programmer. Goto the 'Settings' Tab and select 'Elvis AutoPhoenix Mode'. Then Press the 'Connect' Icon.
    2:- Goto Card Layout and 'Read Card Layout'. Also Check Version of your card, if your card is anything other than a Version 4x (i.e. 4.0 or 4.1) then do not proceed (as this process will be untested).
    3:- Click on the Provider Name that you wish to Lock the PBM (Channels Available) on..(i.e. O*D*gital1). Then Click on 'PBM' Tab.



    Then near the top of the screen, you should see 'Package BitMap' and a row of Hex digits (mostly zero's) and to the Right of this will be six buttons. Click the Button Labelled 'Lock PBM'. This will then Lock your card, so that you (or more importantly your program provider) cannot change the channels the card is set for.
    4:- If you need to Unlock the PBM, then simply click on the button labelled 'Unlock Pbm'.
    Please Note:- By Locking the PBM, you are actually locking a bit more than that. The full effects of this facility are not fully known.and although, we are fairly sure that the MK01 on your card can still be updated, there are some doubt's as to whether this will block the PPUA and Expiry Date Change. If this is the case, then with the PBM locked your card will not auto-update itself and you will need to unlock it before these elements can be written to the card. Therefore, currently ONLY use this if your card has just been activated or you have just phoned up to change your channels and it keeps changing back to the official channels available. After a few weeks, unlock it again, to allow normal updating to occur.



    How Do I..... Make MKFv4 work directly with my Elvis Programmer

    1:- Connect Power to Programmer. Connect Programmer to PC. Launch MKFv4 and go to the 'Settings' Tab and select 'Elvis AutoPhoenix Mode'.



    Then Press the 'Connect' Icon. This will then trigger the Elvis 'Pheonix' mode emulation. Remember, that to return your Elvis its 'Normal' programmer mode, you will need to disconnect the power to it for a few seconds after leaving MKFv4.





    Please don't forget though. That if you really want to learn about how this works, try using the Non-Overwrite Method, as currently implemented in MKFind3.11 (Word doc is included) or even the Overwrite Method manually to see what each command is.
    You should also try using the logging method.

    Well that's about it for the 'How To' page for now.

    Many, many thanks go out to Raff for his excellent work on this ultimate program. Also a great deal of thanks must also go out to Mal for his excellent program - MKFindv3.11 that MKFv4 was based on and to Panda for his excellent work on the Brute Force option and dll that is so damn fast!


    Please Note:- All info seen on the screen displays above is purely fictious. It is not real information. It is only there to give you an idea of the screen as the program runs.







  That's It for Now... Stargate.



This page has been designed and Copyrighted by Stargate.