Here are the steps to take when using the brick-fixV2 tool to recover a bricked camera, and running the fixup script to change the camera to English / upgradeable. The camera doesn't have to be bricked to run the brick-fix tool if all that's required is a helping hand doing the 'enhanced mtd hack'.
- Create a folder on the local drive of your Windows PC to hold the Hikvision
tftp updater, the chosen tftp server program, the unzipped 'brick-fixV2' files, and the Hikvision firmware to use for updating. HxD should be installed on the PC.
- With the PC and the camera each on a wired connection (not WiFi) set the PC IP address to 192.0.0.128, subnet mask to 255.255.255.0 The default gateway does not matter.
- Make a copy of brickfixV2EN and name it as digicap.dav If the EN version does not work, try the CN version.
- Start the Hikvision tftp updater tftpserve.exe and if a Windows firewall popup appears, click OK to accept what the program needs.
- Power on the camera and observe the status messages in the tftp updater. Hopefully you will see 'System update completed' after 2 or 3 minutes.
- Close the Hikvsion tftp updater, and make a copy of the Hikvision firmware to use for updating and name it digicap.dav
- Power down the camera. At this point the brickfixV2 tool has been installed but not yet activated. Power on the camera to activate the tool, when it will drop the payload, fix up mtdblock1 and reboot into min-system mode for telnet access.
- Using PuTTY, start a telnet session to 192.0.0.64 and at the login prompt username=root password=12345
You should see a # prompt. The message "can't chdir to home directory '/root/'" isn't an error and can be ignored.
- Start the tftp server. If it's the jouinin.net version, the program is tftpd32.exe
- At this point, Stage 1 of 3 is ready to be executed.
At the telnet command prompt, type
/dav/fixup.sh
and watch the on-screen messages.
- On success with Stage 1, check the PC folder that the tftp server is running in for the presence of the file 'mtd6ro_orig'. You may have to hit F5 to refresh. Make a copy of mtd6ro_orig named as mtd6ro_mod and do the 'enhanced mtd hack' on it, using the separate instructions.
- At this point, Stage 2 of 3 is ready to be executed.
At the telnet command prompt, type
/dav/fixup.sh
and watch the on-screen messages.
This will bring in the modified mtd6ro_mod and apply it to the camera to convert it to English / ugradeable.
- At this point, Stage 3 of 3 is ready to be executed.
At the telnet command prompt, type
/dav/fixup.sh
and watch the on-screen messages.
This will attempt a firmware update using the Hikvision firmware file digicap.dav that you placed in the same folder as the tftp server.
Assuming a successful result, shut down the tftp server and power cycle the camera.
Interestingly, on testing I did find that a straight jump to the 5.4.5 firmware version worked OK. YMMV. But worth trying.
Start SADP and check for the camera presence running the firmware version used for the update.
If you used the 5.4.5 firmware, the camera will require 'activation' with your choice of strong password.
If already active, if earlier firmware was used for the upgrade, log in with the admin password=12345
Change the IP address to what you want the camera to use.
Job done!
Good luck
