logo elektroda
logo elektroda
X
logo elektroda

[BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation

mattj 747 3
ADVERTISEMENT
  • #1 20637021
    mattj
    Level 9  

    Teardown and flashing guide for a single-pole / three-way compatible smart switch.

    Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation

    Amazon Listing: https://www.amazon.com/dp/B0BJ6TZNPG?psc=1&ref=ppx_yo2ov_dt_b_product_details

    Chipset: CB3S (BK7231N)

    [b]Teardown:[/b]
    [BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation
    [BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation [BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation
    [BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation [BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation [BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation

    [b]Flashing:[/b]
    Used a 3d printed pogo pin jig to flash using BK-flasher 1.1.0b

    [BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation [BK7231N] Moes 3-Way Wifi Light Switch "Star Ring" 2nd Generation
  • ADVERTISEMENT
  • #2 20638562
    p.kaczmarek2
    Moderator Smart Home
    Hello, can you provide a 2MB firmware dump and/or the device Template?
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #3 20640380
    mattj
    Level 9  
    Apologies, forgot the details :)

    {
    	"nc_tp":"1",
    	"ssid":"null",
    	"passwd":"null",
    	"md":"0",
    	"random":"0",
    	"wfb64":"1",
    	"stat":"0",
    	"token":"null",
    	"region":"null",
    	"reg_key":"null",
    	"dns_prio":"0 }0Ais_stridenull",
    	"id":"eb9d534c252e4fb61a7wtv",
    	"swv":"1.2.1",
    	"bv":"40.00",
    	"pv":"2.2",
    	"lpv":"3.3",
    	"pk":"key5ckdnys3pqgec",
    	"firmk":"key5ckdnys3pqgec",
    	"cadv":"1.0.4",
    	"cdv":"1.0.0",
    	"dev_swv":"1.2.1",
    	"s_id":"000004f2pg",
    	"dtp":"0",
    	"sync":"0",
    	"attr_num":"1",
    	"mst_tp_0":"9",
    	"mst_ver_0":"1.2.1",
    	"mst_tp_1":"0",
    	"mst_ver_1":"null",
    	"mst_tp_2":"0",
    	"mst_ver_2":"null",
    	"mst_tp_3":"0",
    	"mst_ver_3":"null }MDAgw_ai{key",
    	"lckey":"null",
    	"h_url":"null",
    	"h_ip":"null",
    	"hs_url":"null",
    	"hs_ip":"null",
    	"hs_psk":"null",
    	"hs_psk_ip":"null",
    	"mqs_url":"null",
    	"mqs_ip":"null",
    	"mq_url":"null",
    	"mq_ip":"null",
    	"ai_sp":"null",
    	"ai_sp_ip":"null",
    	"mq_psk":"null",
    	"mq_psk_ip":"null",
    	"lp_url":"null",
    	"lp_ip":"null",
    	"time_z":"null",
    	"s_time_z":"null",
    	"wx_app_id":"null",
    	"wx_uuid":"null",
    	"dy_tls_m":"0",
    	"cloud_cap":"0",
    	"psk21_key":"null }YDA000004f2pg[{type",
    	"mode":"rw",
    	"property":"{type",
    	"{type":"obj",
    	"max":"86400",
    	"scale":"0",
    	"step":"1",
    	"type":"value}",
    	"maxlen":"255}",
    	"index":"0})Agw_wsm{nc_tp",
    	"psk_key":"tTEovtrUsg2Vu6ogLcqm9fxFSSrzHLmNSZsMG",
    	"auth_key":"6GD1IEsLDzo7ZUw1P5d7cpsTccFxmJDN",
    	"ap_s{nc_tp":"1",
    	"bt_type":"0",
    	"bt1_pin":"23",
    	"led1_pin":"7",
    	"rand_dpid":"18",
    	"net_trig":"4",
    	"led_dp":"15",
    	"jv":"1.1.0",
    	"i_dctr1_pin":"14",
    	"backlit_select":"0",
    	"total_stat":"0",
    	"bt1_lv":"0",
    	"reset_t":"5",
    	"ch_flag1":"1",
    	"inch_dp":"19",
    	"module":"CB3S",
    	"dctrl_select":"2",
    	"ch_cddpid1":"7",
    	"init_conf":"14",
    	"led1_lv":"0",
    	"light_status_select":"0",
    	"zero_select":"0",
    	"i_dctr1_lv":"1",
    	"backlit_dp":"16",
    	"cyc_dpid":"17",
    	"ch_num":"1",
    	"rl1_pin":"9",
    	"ch_dpid1":"1",
    	"crc":"30",
    	"}{key":"#c}F9Q+9WS`@qcS]",
    	"ap_ssid":"SmartLife",
    	"ap_passwd":"null",
    	"country_code":"CN",
    	"bt_mac":"null",
    	"bt_hid":"null",
    	"prod_test":"false",
    	"fac_pin":"ovpsahk4dzirzg6z }1.0.4",
    	"3 }mst_ver_1":"null"
    }


    Device configuration, as extracted from Tuya: 
    - Button (channel 1) on P23
    - LED (channel 1) on P7
    - Relay (channel 1) on P9
    Device seems to be using CB3S module, which is using BK7231N.
    And the Tuya section starts, as usual, at 2023424


    I haven't played around with the switch much - never did final config since I didn't like the feel of it (the toggle has a matte soft surface which doesn't match my other switches).
  • #4 20641454
    p.kaczmarek2
    Moderator Smart Home

    This looks much better. I wonder what went wrong before. The CRC checks should ensure that loaded flash is not corrupted.
    Helpful post? Buy me a coffee.
ADVERTISEMENT