logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]

zweigang 22164 54
ADVERTISEMENT
Reply Cool? Ranking DIY | New topic
Notify about new articles
  • Hello,

    this product is the S06 Version of the IR Blaster. For the S06Pro Version I found this Teardown article:

    https://www.elektroda.com/rtvforum/topic3926882.html#20238985

    Which is similar, has the same package and case but a different pcb and another Chip. I didnt found this product on the official list so I took it on me to make a little post for someone who had the same questions like me.


    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S] Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]

    This IR one uses the CB3S chip. Here is the PCB

    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S] Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]

    And here is the official Tuya Module Datasheet: Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]

    I used the BK7231Flasher Tool to Flash the Chip with the OpenBK7231N Firmware. The Tool is very useful and even downloads the right file for you. Because this IR Blaster uses the CB3S Chip, you have to select BK7231N Type. After downloading the firmware I connected the Chip to my USB to TTL bridge. You can use any bridge (The Github guide of the tool was a good tutorial). It should have VCC on 3.3V. I soldered the wires onto the PCB on the right places, no need to go straight onto the chip.

    VCC-> 3.3V
    GND -> GND
    RX -> TX1
    TX -> RX1
    (See colored Points in picture)

    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S] Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]

    After starting the flash process I disconnected the VCC wire from the TTL Bridge and reconnected it, instead of shorting ground with the CEN pin. After Flashing it, it opened the Access Point and I could configure it on the webpage.

    The Pin Configuration is this (This took the longest time to find out, by using the multimeter and Trial and Error):

    IRRecv | P7 (PWM1)
    IRSend | P26 (PWM5)
    LED | P8 (PWM2)
    Btn | P6 (PWM0)

    I bought this as a zigbee version to connect with home assistant, but got delivered this wifi version. If you happen to have the same problem, you can use this transmitter with mqtt and home assistant. If you have questions about it feel free to ask.

    Cool? Ranking DIY
    About Author
    zweigang
    Level 4  
    Offline 
    zweigang wrote 7 posts with rating 7. Been with us since 2023 year.
  • ADVERTISEMENT
  • Helpful post
    #2 20467179
    p.kaczmarek2
    Moderator Smart Home  
    That's a very interesting device, thanks.
    It should be very useful with OBK, especially that we will be soon updating IR support with extra library functions.
    There are, however, two things I can't tell from photos. Why are there 4 LEDs with space for next two LEDs? And where is the IR transmitter?
    Helpful post? Buy me a coffee.
  • #3 20467399
    zweigang
    Level 4  
    Hello,
    I think I used the word transmitter wrong. IR Blaster should fit better. Those 4 LEDs are the IR Leds to send the IR signals. I really dont know why there are two empty spots for additional LEDs. It was probably cheaper for them to only use 4.
  • #4 20467439
    p.kaczmarek2
    Moderator Smart Home  
    Ah okay, I can see now. The 4 LEDs are IR transmitters and the status LED is the small LED on the other side other board (marked LED8). Now it's clear.

    Can you copy-paste JSON config from "Launch Web Application" main page?
    Helpful post? Buy me a coffee.
  • #5 20467452
    zweigang
    Level 4  
    >>20467179

    Of course I will

    Code: text Expand Select all Copy to clipboard
    
{
  "vendor": "Tuya",
  "bDetailed": "0",
  "name": "Full Device Name Here",
  "model": "enter short model name here",
  "chip": "BK7231N",
  "board": "TODO",
  "keywords": [
    "TODO",
    "TODO",
    "TODO"
  ],
  "pins": {
    "6": "Btn;1",
    "7": "IRRecv;0",
    "8": "LED;0",
    "26": "IRSend;0"
  },
  "image": "https://obrazki.elektroda.pl/YOUR_IMAGE.jpg",
  "wiki": "https://www.elektroda.com/rtvforum/topic_YOUR_TOPIC.html"
}


    I hope this is the right one. I dont know how to edit it in the webapp to change the TODOs
  • #6 20467466
    p.kaczmarek2
    Moderator Smart Home  
    Well, just copy-paste links from Elektroda to missing fields.

    I will add that device to online database later.
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #7 20467512
    zweigang
    Level 4  
    On the webapp the template always resets itself but here is the template changed afterwards:

    Code: text Expand Select all Copy to clipboard
    
{
  "vendor": "Tuya",
  "bDetailed": "0",
  "name": "Universal IR Remote Control",
  "model": "FLY_S06",
  "chip": "BK7231N",
  "board": "S06,
  "keywords": [
    "IR",
    "Tuya",
    "CB3S"
  ],
  "pins": {
    "6": "Btn;1",
    "7": "IRRecv;0",
    "8": "LED;0",
    "26": "IRSend;0"
  },
  "image": "https://obrazki.elektroda.pl/6078036200_1677795924.jpg",
  "wiki": "https://www.elektroda.com/rtvforum/topic3961676.html"
}
  • #8 20516931
    krzylu90
    Level 1  
    The same configuration is working for S18 version of IR blaster:
    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S] Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S] Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
    To open you need to use something flat.
    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S] Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
    RX, TX, 3.3V and GND pads are on the back of board but it is easier to solder directly to CB3S.
  • #9 20544008
    d0np3p3
    Level 5  
    I just flashed my S06-CB3S-V1.1 via cloudcutter.
    I used the generic Tuya IR Device 2.0 CB3S
    I still have to confirm the PIN Settings for IR are working,
    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
  • #10 20544198
    p.kaczmarek2
    Moderator Smart Home  
    Please post the device template from Web Application in JSON format once you have the GPIO roles setup and working. Thanks!
    Helpful post? Buy me a coffee.
  • #11 20549240
    d0np3p3
    Level 5  
    I can confirm it uses the same Pins like in #1.
    Also this one uses the same: Link

    Code: text Expand Select all Copy to clipboard
    {
  "vendor": "Tuya",
  "bDetailed": "0",
  "name": "Universal IR Remote Control",
  "model": "S06",
  "chip": "BK7231N",
  "board": "S06-CB3S-V1.1,
  "keywords": [
    "IR",
    "Tuya",
    "CB3S"
  ],
  "pins": {
    "6": "Btn;1",
    "7": "IRRecv;0",
    "8": "LED;0",
    "26": "IRSend;0"
  },
  "image": "https://obrazki.elektroda.pl/9305258500_1681736372.jpg",
  "wiki": "https://www.elektroda.com/rtvforum/topic3961676.html"
}


    So this works with cloudcutter, it would be nice to get a entry in the Database, the one from #1 is still missing.

    I would like to see a hvac Feature for mqtt / IR remotes
  • #12 20549513
    rakalexei
    Level 8  
    Hey guys, I have a question regarding how to read IR codes. I successfully flashed the device, filled out pins like this
    "pins": {
    "6": "Btn;1",
    "7": "IRRecv;0",
    "8": "LED;0",
    "26": "IRSend;0"
    }

    Then I checked the Logs page and tried to point my tv remote to the IR box, but nothing happened, no logs regarding any cmd or codes. What I'm doing wrong?

    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]

    Thanks,
    Alex
  • #13 20549613
    p.kaczmarek2
    Moderator Smart Home  
    @rakalexei is the GPIO config correct?

    Take a look here, there should be logs in the Web App:



    A screenshot from the video above:
    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #14 20549684
    rakalexei
    Level 8  
    @p.kaczmarek2

    Hey, thank you for your reply. I think I have some progress :) I changed my pins to this one

    "pins": {
    "8": "IRRecv;0",
    "24": "WifiLED;0",
    "26": "IRSend;0"
    }

    Now I can receive codes from my TV remote control like this - Info:IR:IR IR_Samsung 0x707 0x2 0.
    Then I tried to execute a command: IRSend Samsung 0x707 0x2 0

    Info:IR:IR send Samsung 0x707 0x2 0 protocol 18 addr 0x707 cmd 0x2 repeats 0
    Info:CMD:[WebApp Cmd 'IRSend Samsung 0x707 0x2 0' Result] OK

    But TV is not reacted to that command. I need further help, what to do?
  • #15 20549689
    p.kaczmarek2
    Moderator Smart Home  
    It seems that IRSend command syntax is different. You can check this in our documentation. Search for the command name of your interest:
    https://github.com/openshwprojects/OpenBK7231T_App/blob/main/docs/commands.md
    Helpful post? Buy me a coffee.
  • #16 20549712
    rakalexei
    Level 8  
    >>20549689

    Here is the command - IRSend Samsung-0x707-0x7-3

    Here is the result -

    Info:IR:Delay 110ms
    Info:IR:Delay 110ms
    Info:IR:Delay 110ms
    Info:IR:Delay 100ms
    Info:IR:IR send Samsung-0x707-0x7-3 protocol 18 addr 0x707 cmd 0x7 repeats 3
    Info:CMD:[WebApp Cmd 'IRSend Samsung-0x707-0x7-3' Result] OK

    Still doesn't work.
  • #17 20549768
    p.kaczmarek2
    Moderator Smart Home  
    The result looks correct. Maybe wrong IRSend pin. Otherwise, I would need to check myself on my Samsung to see if it works.

    We have an IR Library update in progress:
    https://github.com/openshwprojects/OpenBK7231T_App/pull/723
    Helpful post? Buy me a coffee.
  • #18 20549783
    rakalexei
    Level 8  
    @p.kaczmarek2

    Got it, thank you, probably yes, the pin is wrong, because the Receiver pin is different than in the first post of this thread, but the device looks the same.

    What is the easiest way to debug and find the correct pin without disassembly the device?

    P.S. It was working ok with Samsung TV using the Tuya app, without issues, before was flashed.

    Thanks,
    Alex
  • ADVERTISEMENT
  • #20 20550235
    rakalexei
    Level 8  
    >>20549768

    Tried different pins, but no result. Also used the phone camera to see IR LEDS - nothing, on other devices I can see LEDS through the camera.

    I'm stuck :) Not sure what else I can do...
  • #21 20550355
    p.kaczmarek2
    Moderator Smart Home  
    I will look into more tomorrow, but do you know that you have restart between IR pin changes?
    Helpful post? Buy me a coffee.
  • #22 20550356
    rakalexei
    Level 8  
    p.kaczmarek2 wrote:
    I will look into more tomorrow, but do you know that you have restart between IR pin changes?


    yes, I know, I rebooted every time when changed the pin.
  • #23 20550928
    rakalexei
    Level 8  
    @p.kaczmarek2

    Good day, I solve the issue, and found the correct PIN, I'm able to receive and send commands to my Samsung TV, but I couldn't get any codes from my AC.

    Is it a limitation of the firmware or how I can read the codes? Before I flashed it, it could control AC without problems.

    Looking for advice.

    "pins": {
    "7": "IRSend;0",
    "8": "IRRecv;0",
    "24": "WifiLED;0"
    }

    FYI: here is my device, it looks the same, but has different pins.

    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]

    Teardown, flashing and configuration for Smart Tuya IR Blaster S06 [CB3S]
  • #24 20551598
    p.kaczmarek2
    Moderator Smart Home  
    The more advanced protocols like AC are WIP: https://github.com/openshwprojects/OpenBK7231T_App/pull/723 if someone know C and wants to contribute, feel free to look into linked pull request
    Helpful post? Buy me a coffee.
  • #25 20560831
    rakalexei
    Level 8  
    @p.kaczmarek2

    Good day, random question - I did a test with openbeken and ESPhome (libretuya) firmware, and I could send IR commands to my TV from both firmware, but I noticed it's working only when the transmitter is very close 0.5 meters to the TV, otherwise, it does not work. I did a test with the Esphome climate component and my AC, it's working fine, but only 0.5 meters away, otherwise, it will not work at all. What can it be? when it was on stock firmware(tuya) it was working fine.
  • #26 20765814
    morgan_flint
    Level 14  
    Hello, I have one of these with exactly the same PCB as the OP's BUT a different wifi module, WB3S instead of CB3S. The silkscreen states "S06-CB3S-V1.1" (same as the OP's), so it seems the PCB was originally designed for CB3S but later on some units were sold with a different module, almost pin-for-pin compatible but with different MCU, BK7231N in CB3S and BK7231T in WB3S.

    So this probably explains why some of the people who posted here have had difficulties using the same configuration as the OP. Analyzing the PCB and the module's datasheet, in my case, the configuration should be the same as posted here for this device. The differences are shown in the following table:

    PIN FUNCTION CB3S WB3S
    5 IR_LED GPIOP_26 GPIOP_26
    7 KEY GPIOP_6 GPIOP_6
    13 WIFI_LED GPIOP_8 GPIOP_9
    14 IR_IN GPIOP_7 GPIOP_8


    These are the pictures of my unit's PCB:
    Printed circuit board with a WB3S module and various electronic components. Image of a green printed circuit board with electronic components and a USB connector.

    In case it's of help for somebody, I'm attaching the original FW of my device (EDIT: V1.1.3)
    Attachments:
  • #27 20813629
    sergeyhatunzev
    Level 2  
    Please give me the original firmware for cb3s or wb3s different from version 2.0.0 and 1.1.3. I need for Yandex Alice to have training work, since half of the remotes are trained, half are not, the firmware is different, but no one wants to merge who has training...
  • #28 20815287
    morgan_flint
    Level 14  
    morgan_flint wrote:
    In case it's of help for somebody, I'm attaching the original FW of my device

    This one is V1.1.3, and I only have that one, sorry!
  • #29 20818367
    drmarvel
    Level 2  
    >>20765814

    @morgan_flint I managed to flash, but since I'm using this firmware for the first time I don't know what to do after pairing it with my wifi, what should I do to make it work and enter the commands of my remote control?

    Thank you
  • #30 20818497
    morgan_flint
    Level 14  
    drmarvel wrote:
    @morgan_flint I managed to flash


    But ¿Which FW did you flash? ¿Open Beken, as per the first post, or the original FW I posted here?
    In the first case, just configure Open Beken by acceding the web page at the IP that your router assigned to the device and configure it using the template posted by zweigang here, if your unit has the CB3S module, or, if your module is WB3S, use the same template with the following "pins" section:
    Code: text Expand Select all Copy to clipboard
    
  "pins": {
    "6": "Btn;1",
    "8": "IRRecv;0",
    "9": "LED;0",
    "26": "IRSend;0"
  },


    Only the lines for IRRecv and LED change.

    If you flashed de original FW, then you have to use the "Tuya Smart" App to add the device and configure it. If you flashed my backup then the MAC address probably will be the same as that of my device, as I can find it in the binary; if you want to change it, search A88055f37915 in the .bin and change it for your device's original MAC (in case you kept it somewhere). I don't know if the MAC is also saved elsewhere... Maybe @p.kaczmarek2 can tell us something in this regard.
Reply Cool? Ranking DIY | New topic
Notify about new articles
Report a violation of the law

Topic summary

The discussion focuses on the teardown, flashing, and configuration of the Tuya Smart IR Blaster S06 with the CB3S chip. The device features four IR LEDs with two additional empty LED slots, and uses the BK7231N MCU. Users successfully flashed the device using the BK7231Flasher tool and OpenBK7231N firmware, configuring GPIO pins for button, IR receive, IR send, and LED functions. JSON device templates were shared for both CB3S and WB3S modules, noting slight pin differences and chip variations (BK7231N vs BK7231T). Challenges included identifying correct GPIO pins for IR send/receive, especially for different firmware versions and modules, and difficulties capturing and sending IR codes for air conditioners due to incomplete IR library support. Users integrated the device with Home Assistant via MQTT, creating scripts and dashboard buttons to send IR commands. The IR library is under active development, with advanced HVAC protocols still work-in-progress. Alternative firmware and IR libraries (OpenBeken, ESPhome/libretuya) were tested, with some users reporting reduced IR transmission range compared to stock firmware. The community shared detailed PCB images, configuration templates, and troubleshooting tips, emphasizing the need for correct pin mapping and firmware compatibility to enable full IR functionality including AC control.
Summary generated by the language model.
Popular Topics
ADVERTISEMENT