Hikvision ds-7616nxi-i2/16p/s factory reset?

[fryc88]

Hi,
I have purchased completely dead ds-7616nxi-i2/16p/s from a guy who seems to be reselling big quantities of them with random faults. I have fixed power issue, now however it will not let me log in or reset it - no password is known.
I have tried to reset it, but there's no email or security questions set.
I have seen TFTP methods, but these don't seem to work on this particular NVR with current firmware, while watching its boot via serial it does not go to upgrade messages, etc., i can only stop auto boot or watch it 'boot successfully'.
Are there any other methods that i'm missing to get the password reset? Is there any hardware method to reflash the memory, or do 'something else' to get it to factory state and be able to use it?
Thanks

 

[alastairstevenson]

Often, but not always, a reset can be effected via the serial console. What's possible varies with the model, firmware, manufacture date etc.

I have seen TFTP methods, but these don't seem to work on this particular NVR with current firmware,

The Hikvision tftp updater can't be used because it has a filesize limit of 32MB.
The Scott Lamb Python2 clone gets round this.

GitHub - scottlamb/hikvision-tftpd: Unbrick a Hikvision device (NVR or camera) via TFTP

Unbrick a Hikvision device (NVR or camera) via TFTP - scottlamb/hikvision-tftpd

github.com

i can only stop auto boot or watch it 'boot successfully'.

When you interrupt the bootloader with Control-U, do you get the firmware update dialogue?
Usually, when a firmware update is done here it also wipes the configuration and sets the device to 'Inactive' after which yo 'Activate' it by creating your own password.

Also - at the upgrade dialogue, you should be able to exit to the bootloader command line using the 'b' command.
Although on some bootloader versions, Hikvision have obscured the usual commands to see/change variables and commands, check if
printenv
help
setenv ';printenv'
setenv ';help'
work.
Sometimes there is an 'erase' command that will wipe the configuration, either at the bootloader, or the higher-level menu.
Example :
* edit * But don't do this if you don't know the partition layout or you could trash the device.

This program will upgrade software.
*******************************************************

• ATTENTION!! PLEASE READ THIS NOTICE CAREFULLY! *
• Don't reset machine,or anything that interrupt it. *
• The upgrade process must finish in 10 minutes! *
• If this program fails,machine might be unusable, *
• and you will need to reflash again. *
• If you find this too risky,power off machine now. *

*******************************************************

Now press [u/U] key to upgrade software: f
Please input part num (0 / 1 / 2): Confirm to format part 0 ?(y/n): n

Suggestion :
Capture the bootloader commands and environment variables, post here, and maybe something can be suggested.

 

[alastairstevenson]

I have fixed power issue,

I'm guessing you replaced the PSU.
Loads available on Aliexpress - but quite pricey.
They can actually be sourced at lower cost here in the UK ...

52V Power Supplies Archives - Hunterfield Ltd

Below are the power supply units (PSU) which have 52V output voltage with different output current capability (max current). As long as your device requires a 52V power supply and its max current consumption is not greater than a PSU’s rated output current, the PSU will work for your device...

hunterfield.co.uk