MOSC FAQs EDITED BY GAZER

All information written here has been copyed, gleaned, stolen, bullied and generally offered from the kind people of different forums :-)
Hopefully this will answwer a lot of basic questions about Original Ondigital cards.



What does MOSC stand for?

MOSC stands for Modified Original Smart Card or sometimes referred to as Manufacturer's Original Smart Card. In other words the card that comes with your box originally. The Black and Green one.

What is a PPUA?

It stands for Providers User Address as is unique to a card at any one given time.

How is the card arranged, what are providers?

Up to 16 providers can be added to the card. Each provider is basically a different supplier of programmes. Eg. Ondigital, Canal+ etc
However, as the UK only has one terrestrial broadcaster using SECA encryption then only one provider is generally on the card. Each provider has a unique two byte identity. OND's is 00 1b.
However, OND do have identities reserved should they expand in the future.These are what you see on your card if you press menu 6-1. The identities of these are 00 1e, 001f & 00 20 which on all but early cards are called ONDigital 2,3 & 4.
In addition there is also a provider in position 0 called ident 00 00. This is the provider 'SECA'- the master provider for the card.

What is all this talk of keys?

Each provider above generally has a set of encrypted keys which allow your OND box or CAM ( Conditional Access Module) to send commands to the card and discover whether it should be decoding pictures. 

What Keys are used for ONDigital?

OND use MKs (Master Keys) 01, 0c & 0d. Other keys are not used at the moment AFAIK.
As they are the provider 01 on the card they key is referred to as MK01 on Prov. 01
MK01 is used to allow access and changes to your card.
MK0c and MK0d (Known as the Opertaional Keys) are used alternatively as the decryption keys for the picture eg. Dec 2000 used 0c, Jan 2001 uses 0d and Feb 2001 will use 0c etc.

Can I activate a dead card that is no longer subscribed?

The method described basically as follows :-
In order to send a change command to the card you need to 'sign' the command with a valid key.
Now the keys are contained on the card and a dead card won't have a valid key.
However a loophole in the system allows a key to be generated and written on provider 00.
Once this key is generated it allows you to sign any further commands sent to the card and thus change the parameters associated with provider ONDigital which is just what we want. Whether that be to add valid decryption keys, change package bitmaps or erase PINs if required.
If you don't have a valid MK01 & PPUA on provider 01 then you will need to manually write the 0c or 0d keys each month to the card.

Can I activate a virgin that OND haven't activated yet?

Basically yes The method described basically as follows :-
In order to send a change command to the card you need to 'sign' the command with a valid key.
Now the keys are contained on the card and an unactivated (virgin) card won't have a valid key or PPUA.
However a loophole in the system allows a key to be generated and written on provider 00. Once this key is generated it allows you to sign any further commands sent to the card and thus change the parameters associated with provider ONDigital which is just what we want.Whether that be to add valid decryption keys, change package bitmaps, write a PPUA or even erase the PIN.
If you don't have  a valid MK01 & PPUA on provider 01 then you will need to manually write the 0c or 0d keys each month to the card.

Can I permanently damage my card with MKFind?

Yes, for example you could delete provider 00 (SECA).
I would therefore suggest you read the manual method and understand what it is doing before using MKFind!

Why won't my virgin card update?

For a MOSC to  auto update each mouth it needs a valid PPUA and MK01 on provider 01. If you have not registered the card with Ondigital then you won't have a valid MK01 & PPUA in your card. You can't just use the key generated by the manual method or MKFind!!! This generates a key for provider 00 NOT provider 01 which is what is need for auto-update.

Why won't anyone on the forum send me their MK01 & PPUA?

Do you blame them, Each OND card are unique to each subscriber if the MK01 & PPUA got into the public domain then OND would be able to identify precisely who had originally given out the code ?

Can I alter the channels I can view? 

Yes, you have to write a full package bitmap to your card. Either FF FF FF FF FF FF FF FF or FC C4 00 03 FF E0 00 00 which is believed to be a better option as it is the exact PBM for OND and is thought to be more ECM proof.

What defines how many channels I can view?

Something on the card called the package bitmap or PBM for short.This defines exactly which channels you can view as well as any pay per view (PPV) authorisations you may have.

What is an ECM?

Electronic Counter Measure-a means that OND have at their disposal to try and knock out non-real & valid viewing cards as some of the satellite providers on the continent have being doing recently.


What hardware is needed and where can I buy it from ?

All that is needed to program an MOSC is a Phoenix/Smartmouse programmer running at 3.5MHz. These are available from as low as £20 inc VAT/P&P from a number of web dealers. However if your trying to program gold cards a multipurpose programmer might be a better investment e.g (A Elvis programmer seems to be in favour at the moment for around £50 inc VAT/P&P ) Or failing that as I have a titanium programmer. The combination of the pic programmer & phoenix will also do gold cards but with a little more time changing leads and cards between units.
Typical dealers are www.gadgets-galore.net  and many more. I suggest you read the forums to find out who is in and out of favour at any time.!!

Where can the software be found?

Most of the software can be found from the Ondigital tutorial links at www.postie20.freeserve.co.uk or www.modshack.co.uk

Can I change the expiry date on the card?

The answer is yes you can. However, only if you are intending to write the decryption keys every month would you need to do this as the date will change automatically if the card has a working MK01 & PPUA when it gets next months keys on around the 8th of the month. But then why not set it to the maximum date of 31/12/2117 (ff 9f) in the first place.!!

How does the date conversion work?

The date is represented on the card by a 2 byte hex number = a 16 bit binary number. The date can have value between 1 Jan 1990 and 31 Dec 2117. Looking at the bits from left to right.
7 bits: year number, add 1990 for correct year.
4 bits: month number starting from 1 (=Jan).
5 bits: day of the month number, also 1-based.
I.e. 0001010 = 10 decimal (+1990 = 2000)
1100 = 12 decimal
11111 = 31 decimal therefore:31/12/2000 (date) = 0001010110011111 (binary) = 15 9F (hex)
And 31/01/2001 (date) = 0001011000111111 (binary) = 16 3F (hex)

How do I increase the number of channels?

Change the package bitmap.

How do I find my master keys?

The traditional way is by logging your legal working card when you ask Ondigital to do a package change.

My own legit MK01 no longer seems to work on an AU card I've made, can my MK01 and PPUA be altered by Ondigital?

The answer is yes, every time you request a package change or call and ask for your package to be reconfirmed (knowing that your going to do some logging) your MK01 and PPUA on provider 01 will be changed!!

When I change the PBM on my card it only lasts 20 mins and then goes back to its proper settings, why that?     

Usually this means that you have requested a package change or re-confirmation from Ondigital recently and sometimes there seems to be a problem where by thay keep sending out the same command, This in turn can last for a couple of weeks. One option maybe to temporarily alter your PPUA but you will need to make a note of it and set it back correctly just before the 8th of the following month to make sure you get the new keys.

I've forgotten my PIN  number Can I find it out?

You can't find it out but it is possible to reset it to 0000 so when you go into the parental control menu (3) it asks you for a new pin.


   
                                                                           BACK TO GAZERS DIGITAL WORLD