Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
Hello,
this product is the S06 Version of the IR Blaster. For the S06Pro Version I found this Teardown article:
https://www.elektroda.com/rtvforum/topic3926882.html#20238985
Which is similar, has the same package and case but a different pcb and another Chip. I didnt found this product on the official list so I took it on me to make a little post for someone who had the same questions like me.
This IR one uses the CB3S chip. Here is the PCB
And here is the official Tuya Module Datasheet:
I used the BK7231Flasher Tool to Flash the Chip with the OpenBK7231N Firmware. The Tool is very useful and even downloads the right file for you. Because this IR Blaster uses the CB3S Chip, you have to select BK7231N Type. After downloading the firmware I connected the Chip to my USB to TTL bridge. You can use any bridge (The Github guide of the tool was a good tutorial). It should have VCC on 3.3V. I soldered the wires onto the PCB on the right places, no need to go straight onto the chip.
VCC-> 3.3V
GND -> GND
RX -> TX1
TX -> RX1
(See colored Points in picture)
After starting the flash process I disconnected the VCC wire from the TTL Bridge and reconnected it, instead of shorting ground with the CEN pin. After Flashing it, it opened the Access Point and I could configure it on the webpage.
The Pin Configuration is this (This took the longest time to find out, by using the multimeter and Trial and Error):
IRRecv | P7 (PWM1)
IRSend | P26 (PWM5)
LED | P8 (PWM2)
Btn | P6 (PWM0)
I bought this as a zigbee version to connect with home assistant, but got delivered this wifi version. If you happen to have the same problem, you can use this transmitter with mqtt and home assistant. If you have questions about it feel free to ask.
this product is the S06 Version of the IR Blaster. For the S06Pro Version I found this Teardown article:
https://www.elektroda.com/rtvforum/topic3926882.html#20238985
Which is similar, has the same package and case but a different pcb and another Chip. I didnt found this product on the official list so I took it on me to make a little post for someone who had the same questions like me.



This IR one uses the CB3S chip. Here is the PCB


And here is the official Tuya Module Datasheet:

I used the BK7231Flasher Tool to Flash the Chip with the OpenBK7231N Firmware. The Tool is very useful and even downloads the right file for you. Because this IR Blaster uses the CB3S Chip, you have to select BK7231N Type. After downloading the firmware I connected the Chip to my USB to TTL bridge. You can use any bridge (The Github guide of the tool was a good tutorial). It should have VCC on 3.3V. I soldered the wires onto the PCB on the right places, no need to go straight onto the chip.
VCC-> 3.3V
GND -> GND
RX -> TX1
TX -> RX1
(See colored Points in picture)


After starting the flash process I disconnected the VCC wire from the TTL Bridge and reconnected it, instead of shorting ground with the CEN pin. After Flashing it, it opened the Access Point and I could configure it on the webpage.
The Pin Configuration is this (This took the longest time to find out, by using the multimeter and Trial and Error):
IRRecv | P7 (PWM1)
IRSend | P26 (PWM5)
LED | P8 (PWM2)
Btn | P6 (PWM0)
I bought this as a zigbee version to connect with home assistant, but got delivered this wifi version. If you happen to have the same problem, you can use this transmitter with mqtt and home assistant. If you have questions about it feel free to ask.
Comments
That's a very interesting device, thanks. It should be very useful with OBK, especially that we will be soon updating IR support with extra library functions. There are, however, two things I can't... [Read more]
Hello, I think I used the word transmitter wrong. IR Blaster should fit better. Those 4 LEDs are the IR Leds to send the IR signals. I really dont know why there are two empty spots for additional LEDs.... [Read more]
Ah okay, I can see now. The 4 LEDs are IR transmitters and the status LED is the small LED on the other side other board (marked LED8). Now it's clear. Can you copy-paste JSON config from "Launch Web... [Read more]
Of course I will { "vendor": "Tuya", "bDetailed": "0", "name": "Full Device Name Here", "model":... [Read more]
Well, just copy-paste links from Elektroda to missing fields. I will add that device to online database later. [Read more]
On the webapp the template always resets itself but here is the template changed afterwards: { "vendor": "Tuya", "bDetailed": "0", "name":... [Read more]
The same configuration is working for S18 version of IR blaster: https://obrazki.elektroda.pl/5454636600_1680209358_thumb.jpg https://obrazki.elektroda.pl/9597187000_1680209358_thumb.jpg https://obrazki.elektroda.pl/2453695400_1680209359_thumb.jpg... [Read more]
I just flashed my S06-CB3S-V1.1 via cloudcutter. I used the generic Tuya IR Device 2.0 CB3S I still have to confirm the PIN Settings for IR are working, https://obrazki.elektroda.pl/9305258500_1... [Read more]
Please post the device template from Web Application in JSON format once you have the GPIO roles setup and working. Thanks! [Read more]
I can confirm it uses the same Pins like in #1. Also this one uses the same: Link { "vendor": "Tuya", "bDetailed": "0", "name":... [Read more]
Hey guys, I have a question regarding how to read IR codes. I successfully flashed the device, filled out pins like this "pins": { "6": "Btn;1", "7": "IRRecv;0", "8": "LED;0", "26":... [Read more]
@rakalexei is the GPIO config correct? Take a look here, there should be logs in the Web App: A screenshot from the video above: https://obrazki.elektroda.pl/6201363100_1682071020_thumb.jp... [Read more]
@pkaczmarek2 Hey, thank you for your reply. I think I have some progress :) I changed my pins to this one "pins": { "8": "IRRecv;0", "24": "WifiLED;0", "26": "IRSend;0" } Now... [Read more]
It seems that IRSend command syntax is different. You can check this in our documentation. Search for the command name of your interest: https://github.com/openshwprojects/OpenBK7231T_App/blob/main/d... [Read more]
Here is the command - IRSend Samsung-0x707-0x7-3 Here is the result - Info:IR:Delay 110ms Info:IR:Delay 110ms Info:IR:Delay 110ms Info:IR:Delay 100ms Info:IR:IR send Samsung-0x707-0x7-3 protocol... [Read more]
The result looks correct. Maybe wrong IRSend pin. Otherwise, I would need to check myself on my Samsung to see if it works. We have an IR Library update in progress: https://github.com/openshwpro... [Read more]
@pkaczmarek2 Got it, thank you, probably yes, the pin is wrong, because the Receiver pin is different than in the first post of this thread, but the device looks the same. What is the easiest way... [Read more]
Maybe you can try the settings from here https://www.elektroda.com/rtvforum/topic3920360.html [Read more]
Tried different pins, but no result. Also used the phone camera to see IR LEDS - nothing, on other devices I can see LEDS through the camera. I'm stuck :) Not sure what else I can do... [Read more]