search

basilfx / TRADFRI-Hacking

Hacking IKEA TRÅDFRI products, such as light bulbs, window blinds and other accessories.
642 stars 63 forks source link

new module as remote #46

Open boelle opened 3 years ago

boelle commented 3 years ago

hi

this project on thingiverse https://www.thingiverse.com/thing:3655354 has been much fun to me

it was easy to remove a zigbee module from their light bulbs and then reprogramm it to work as a 5 button remote

but now ikea is slowly replacing their zigbee modules with a new one that for the bulbs concern are far more power hungry and why should ikea bother as they are intended to be always on mains power

and their new 5 button remote do not have a module at all but is one complete pcb and to top it off they now use 2 AAA batteries

that makes it impossible to install it in the danish LK Fuga design, it will simply be to big to sit flush with the other switches

anyone that have started to look in to if the new modules can be reprogrammed to work as a remote and be energy efficient so that it can run on coin cells?

i emagine that the firmware needs to be taken from the new 5 botton remote and changed so that its as efficent as possible

of course the chip on the new module an the new 5 botton remote needs to be the same

and the pcb in the new remote is way to be to be but in a LK switch, from what i have seen online its 2 cm to big in each direction

CableCatDK commented 10 months ago

@MattWestb The firmware is very picky about module types. I bought MGM210LA22JNF2 instead of MGM210L022JNF2, and the firmware is not working.

MattWestb commented 10 months ago

Its not so well documented but the A version think have hardware secure storage (vault) and the = is having software or not implanted. I think the firmware is working on both but need one updated bootloader for stating the app or its cant starting then it cant getting the secure storage.

MattWestb commented 7 months ago

@jlunz Do you knowing the ports the RX and TX TP/Pads is using ? I trying doing one UART bootloader and cooking one NCP / RCP firmware for using it as one coordinator and have 2 extra E2213 that i have sounding cables on and like trying if its working OK. Also shall trying "converting" OnOff to ChortCut and back.

jlunz commented 7 months ago

@MattWestb I have made a quick protoype to use EmberZNet on a E2201, so you can check the pinout here (and maybe the software as well): https://github.com/jlunz/silabs-firmware-builder/blob/jl%2Fadd_e2201_rodret/EmberZNet%2FE2201_Rodret%2F0001-configure-usart-vcom-for-e2201_rodret.patch

Here is the traced pcb: pcb_trace_out

Hope that helps!

MattWestb commented 7 months ago

Thanks i shall trying cooling one UART bootloader with TX C00 / RX C01 and see if i can getting it working OK then it shall being possible doing NCP and RCP / Thread firmware for it.

I have doing debug unlock on both Rodret and Somerig and then flashing Styrbars main flash for getting one "IKEA Bootloadre" and then the latest OTA and it working OK. Only if flashing Rodret on Somrig its start sending light commands and also to group 0 but is keeping Somrig as device type so need update the user data if like getting it working 100%. I diont knowing if OTA is working on the unlocked / converted devices but Symfonisk 2 was working OK.

Thanks Julian for info i reporting back if all is going well !!

MattWestb commented 7 months ago

Have one 4.4.0.0 / 7.4.0.0 X-modeme bootloader that looks loading OK and terminal commands looks working OK.

Gecko Bootloader v2.04.00
1. upload gbl
2. run
3. ebl info
BL >
Gecko Bootloader v2.04.00
1. upload gbl
2. run
3. ebl info
BL >

Also was putting in Button "∞": S2 / PA06 (GPIO activation) but have not testing if its right polarity (low or high) that can only being tested then one app is running OK or its always going into the bootloder. Pleas testing if its working if you have time and we can start trying cooking NCP and RCP firmware for the device. IKEAMG21-BL-4400.zip

MattWestb commented 7 months ago

Fast cooked NCP 7.4.0.0 with only hardware configured (SW flow control enabled) and i can being flashed from the bootloader and is starting OK and i can controlling one IKEA GU10 WW and one parasoll re-joined OK so its working but its not god configured but as one prof of consent its OK. IKEAMG21-ncp-uart-4400.zip

MattWestb commented 7 months ago

RCP 4.4.0.0 115200 baud no FC, only tested with universal-silabs-flasher but looks working OK also testing the bootloader button:

(311) PS C:\msys32\Portainer\belloows\311> universal-silabs-flasher --device com9 probe
2024-01-19 13:42:15.362 MW-E3222 universal_silabs_flasher.flasher INFO Probing ApplicationType.GECKO_BOOTLOADER at 115200 baud
2024-01-19 13:42:17.364 MW-E3222 universal_silabs_flasher.flasher INFO Probing ApplicationType.CPC at 460800 baud
2024-01-19 13:42:21.623 MW-E3222 universal_silabs_flasher.flasher INFO Probing ApplicationType.CPC at 115200 baud
2024-01-19 13:42:21.654 MW-E3222 universal_silabs_flasher.flasher INFO Detected ApplicationType.CPC, version '4.4.0' at 115200 baudrate (bootloader baudrate None)

(311) PS C:\msys32\Portainer\belloows\311> universal-silabs-flasher --device com9 probe
2024-01-19 13:43:08.282 MW-E3222 universal_silabs_flasher.flasher INFO Probing ApplicationType.GECKO_BOOTLOADER at 115200 baud
2024-01-19 13:43:09.320 MW-E3222 universal_silabs_flasher.flasher INFO Detected bootloader version '2.4.0'
2024-01-19 13:43:09.320 MW-E3222 universal_silabs_flasher.flasher INFO Detected ApplicationType.GECKO_BOOTLOADER, version '2.4.0' at 115200 baudrate (bootloader baudrate 115200)

IKEAMG21-rcp-uart-4400.zip