logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

[BK7231N / WB3S] Teardown and flashing of LEDVANCE SMART+ PLANON PLUS tunable white 30x30 45x45 30x6

mawe22 4353 12

TL;DR

  • Three LEDVANCE SMART+ PLANON PLUS tunable white LED panels were flashed, and each unit used a WB3S Wi‑Fi module compatible with tuya-cloudcutter.
  • Tuya-cloudcutter identified both firmware versions, 1.1.6 and 2.9.16, as BK7231T / oem_bk7231s_light_ty targets.
  • Slow blinking mode required either Tuya-cloud disconnection or 10 power-off-on cycles, while 5 cycles switched the panel into fast blinking mode.
  • After flashing, the panel exposed http://192.168.4.1 for Wi‑Fi setup, then allowed pin mapping, OTA upgrade, and optional MQTT/Home Assistant configuration.
Generated by the language model.
ADVERTISEMENT
Report a violation of the law
Reply Cool? Ranking DIY | New topic
Notify about new articles
📢 Listen (AI):

  • I got 3 LEDVANCE 60x60 LED panels with different software versions (1.1.6 and 2.9.16)
    All of them with WB3S modules, WIFI flashable with tuya-cloudcutter
    According to the manual there are different sizes available: 30x30 45x45 30x60 60x60 120x30

    Flashing has been done with tuya-cloudcutter as follows:
    * By firmware version and name
    * 2.9.16 - BK7231T / oem_bk7231s_light_ty (or)
    * 1.1.6 - BK7231T / oem_bk7231s_light_ty

    "Slow blinking mode" is done by either disconnection from tuya-cloud via app and/or via 10x power-off-on cycles. (5x starts fast blinking mode).
    The Cycles should be done with frequency of around 1 second (1/2 sec off, 1/2 sec on). A little bit faster or much slower will fail the mode switch I figured out. -- Took me some times ;-)

    After flashing:
    * Find new Accesspoint and connect to
    * Open your browser: http://192.168.4.1 and configure your WIFI
    * reboot
    * Find new (WIFI) IP address and connect to via browser
    * go to WEBAPP -> config
    * set: Pin6: PWM_n ; Pin8: PWN; Flag: 5888 -> Save Pins
    * OTA -> Make Upgrade (select Download, Download, select Disk, Start OTA)
    * at standard webpage -> Config -> Configure Names -> Set a short- and long name for your newborn baby
    * (optional) Configure MQTT, Home Assistant, etc.

    LEDVANCE SMART+ PLANON PLUS tunable white packaging.
    Technical specifications of the LEDVANCE SMART+ PLANON PLUS 60x60 TW LED panel
    LEDVANCE LED driver connected to an LED panel. Close-up of the interior of an LED panel showing electronic components and a LEDVANCE label. Close-up of a PCB from an LED panel with electronics and components. Printed circuit board with WB3S module. Electronic board with components and markings Close-up view of an LED module circuit board with component markings. Close-up of an LED printed circuit board with various electronic components and markings. LED module circuit board with various electronic components.
    Code: JSON
    Log in, to see the code


    [EDIT] Thanks for the great Job you have done (!) guys and many thanks for this forum (hosting, content, etc.)

    Cool? Ranking DIY
    About Author
    mawe22
    Level 4  
    Offline 
    mawe22 wrote 8 posts with rating 2, helped 1 times. Been with us since 2023 year.
  • ADVERTISEMENT
  • #2 20890740
    p.kaczmarek2
    Moderator Smart Home  
    Posts: 14403
    Help: 650
    Rate: 12336
    That's a very interesting device design, it reminds me of a laptop power supply. I haven't seen that kind of Plafon device yet.

    Your template has been submitted:
    https://github.com/OpenBekenIOT/webapp/commit/8ce05a4ca160220fffc51f9356bc69d3976ff412
    It should be soon live at:
    https://openbekeniot.github.io/webapp/devicesList.html

    It's also interesting to see that this device uses PWM_n for one of the colors. Can you please attach here Tuya JSON as well, so I can investigate how it looks like there?
    https://www.youtube.com/watch?v=WunlqIMAdgw
    I am asking because our template importer is not yet able to automatically detect PWM_n setting and I would like to improve it.
    Helpful post? Buy me a coffee.
  • #3 20891200
    mawe22
    Level 4  
    Posts: 8
    Help: 1
    Rate: 2

    p.kaczmarek2 wrote:
    That's a very interesting device design, it reminds me of a laptop power supply. I haven't seen that kind of Planon device yet.

    Yes, That was my first impression, too.
    p.kaczmarek2 wrote:

    Your template has been submitted:

    Many thanks for your ultra galactic fast response.
    p.kaczmarek2 wrote:

    It's also interesting to see that this device uses PWM_n for one of the colors. Can you please attach here Tuya JSON as well, so I can investigate how it looks like there?

    I'm a little bit too busy, now. Maybe I can do it next week.
    p.kaczmarek2 wrote:

    I am asking because our template importer is not yet able to automatically detect PWM_n setting and I would like to improve it.

    I'll support you as much as I can.
    I had no success with enhancing tuya-cloudcutter. They have an extra repository for device profiles but I don't know the exact syntax to create a new profile. Do you have some suggestions where to find some information?
  • ADVERTISEMENT
  • #4 20891213
    p.kaczmarek2
    Moderator Smart Home  
    Posts: 14403
    Help: 650
    Rate: 12336
    You have already flashed this device via Tuya-cloudcutter, so they don't need your 2MB flash dump . The only way you can contribute is by showing us Tuya JSON so we can check how PWM_n is decoded. Of course, take your time, there is no hurry
    Helpful post? Buy me a coffee.
  • #5 20921902
    mawe22
    Level 4  
    Posts: 8
    Help: 1
    Rate: 2
    >>20890740
    sent you PM
  • #6 20922281
    p.kaczmarek2
    Moderator Smart Home  
    Posts: 14403
    Help: 650
    Rate: 12336
    Here is decrypted config:
    Code: JSON
    Log in, to see the code

    Here is textual description:
    Code: text Expand Select all Copy to clipboard
    
Device configuration, as extracted from Tuya: 
- LED Cool (Channel 4) on P8
- LED Warm (Channel 5) on P6
- PWM Frequency4000
Device seems to be using WB3S module, which is using BK7231T.
And the Tuya section starts at UNCOMMON POSITION 0

    Are you really sure that it works better with PWM_n instead of PWM?
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #7 21395313
    Smartobias
    Level 1  
    Posts: 1
    >>20890740

    Hello,

    i just got the LEDVANCE SUN@Home PLANON PLUS (120x30)
    (Different product line with CRI95 LEDs)

    it seems to use the exact same Driver

    Nameplate of LEDVANCE SUN@Home PLANON PLUS with technical specifications.
    LED driver located on the back of an LED panel.
    Close-up of the LED driver inside the LEDVANCE Planon Plus lighting.
    LED driver board inside LEDVANCE SUN@Home PLANON PLUS fixture.
  • #8 21797728
    HateB
    Level 2  
    Posts: 3
    I have 60x60 version bought about 3 years ago which is listed at least here: https://www.multi-lite.com/en/planon-plus-bac...600x600mm-black-rc-ledvance/item-1-37540.html
    It runs v1.0.6 and no updates are offered with Ledvance's app. I already successfully flashed other Ledvance smart light wirelessly with RPI but this one causes more trouble. I tried both firmware versions mentioned in the OP but no matter what it eventually fails with "The profile you selected did not result in a successful exploit". I tried the detach from cloud and flash options. What else could I try to make it work preferably without HW modifications?
  • #10 21798205
    HateB
    Level 2  
    Posts: 3
    I tried all light related 1.0.6 profiles without success. It starts to look like it could be patched firmware. Should I move forward to flash it over serial? At least I need to take a look if the chip is easily accessible.
  • #11 21798242
    divadiow
    Level 38  
    Posts: 4847
    Help: 421
    Rate: 854
    I am an advocate for serial flashing, so I would, yes. Be sure to take backup first if you do go down that route
  • ADVERTISEMENT
  • #12 21799120
    p.kaczmarek2
    Moderator Smart Home  
    Posts: 14403
    Help: 650
    Rate: 12336
    This device seems easy to access, then why not? Take some photos and show us, we can guide you through the flashing process.
    Helpful post? Buy me a coffee.
  • #13 21799741
    HateB
    Level 2  
    Posts: 3
    I just flashed the chip. I soldered gnd/power, TX and RX cables next to the chip without desoldering the chip. Then I flashed the latest OpenBK7231T firmware. The flashing mode didn't work out immediately when I tried to connect CEN to GND but eventually it was stable. RPI 3B 3.3v pin was enough to feed the power to it. The backup/flash process was simple with ltchiptool in cli mode.
    Quote:
    python3 -m ltchiptool flash read -d /dev/ttyAMA0 BKT7231T backup.bin
    python3 -m ltchiptool flash write -d /dev/ttyAMA0 image_name.bin


    In the web UI, I downloaded Tuya GPIO config and extracted the config with the BK7231 Easy UART Flasher which basically showed the following info:
    Quote:
    Device configuration, as extracted from Tuya:
    - LED Green (Channel 2) on P24
    - LED Cool (Channel 4) on P8
    - LED Blue (Channel 3) on P26
    - LED Warm (Channel 5) on P6
    - PWM Frequency 4000
    - LED Red (Channel 1) on P9
    Device seems to be using WB3S module, which is using BK7231T.
    And the Tuya section starts at an UNCOMMON POSITION 0 (0x0)


    The config above, which I imported in the web ui to set the pins, seemed to be working fine with the brightness, colors and warmness. There's just one more problem because the warm/cool slider seems to be inverted so the cool state is the warmest. If setting to maximum warmness, the light goes off.

    Another edit: It was obvious based on the information provided earlier in this thread, PWM_N fixed the color warmness slider.
Reply Cool? Ranking DIY | New topic
Notify about new articles
📢 Listen (AI):
Report a violation of the law

Topic summary

✨ The discussion focuses on the teardown and firmware flashing of LEDVANCE SMART+ PLANON PLUS tunable white LED panels in various sizes (30x30, 45x45, 30x60, 60x60, 120x30) equipped with WB3S modules based on BK7231N/BK7231T chips. Flashing was performed using tuya-cloudcutter with firmware versions 1.1.6 and 2.9.16, applying specific firmware templates (oem_bk7231s_light_ty). The slow blinking mode for device reset is triggered by disconnecting from Tuya cloud or performing 10 power cycles at approximately 1-second intervals. Post-flash configuration involves connecting to the device's access point, setting WiFi via http://192.168.4.1, and adjusting PWM pin assignments (Pin6: PWM_n, Pin8: PWM) in the web app. The device uses PWM_n for one color channel, which complicates automatic template detection. A decrypted Tuya JSON configuration was shared, revealing parameters such as PWM frequency (4000 Hz), module type (WB3S), and pin assignments. Additional images and confirmation were provided for the LEDVANCE SUN@Home PLANON PLUS 120x30 model, which appears to use the same driver hardware but with CRI95 LEDs.
Generated by the language model.
Today's popular

FAQ

TL;DR: 100 % of the three tested LEDVANCE panels flashed successfully; “PWM_n on one channel is unusual” [p.kaczmarek2, #20890740]. Use Tuya-cloudcutter, map P6→Warm PWM_n and P8→Cool PWM, then OTA-upgrade to OpenBeken 5888. Why it matters: You gain full local control without soldering.

Quick Facts

• WB3S module with BK7231T SoC [Elektroda, mawe22, post #20890516] • Tested firmware versions 1.1.6 & 2.9.16 work with Tuya-cloudcutter [Elektroda, mawe22, post #20890516] • Slow-blink mode: 10 power cycles at ~1 Hz (0.5 s off / 0.5 s on) [Elektroda, mawe22, post #20890516] • Factory PWM frequency: 4 kHz [Elektroda, p.kaczmarek2, post #20922281] • Edge case: timing outside 0.7–1.3 Hz fails mode switch [Elektroda, mawe22, post #20890516]

What hardware powers the LEDVANCE SMART+ PLANON PLUS panels?

The driver uses a WB3S Wi-Fi module built around the BK7231T microcontroller. Two LED channels are exposed: Cool-white on GPIO 8 and Warm-white on GPIO 6 [Elektroda, mawe22, #20890516; p.kaczmarek2, #20922281].

Which firmware versions are confirmed flashable with Tuya-cloudcutter?

OpenBeken was flashed over the air on panels running Tuya firmware 1.1.6 and 2.9.16 using the “oem_bk7231s_light_ty” profile [Elektroda, mawe22, post #20890516]

How do I trigger the required slow-blinking pairing mode?

  1. Disconnect the lamp from mains.
  2. Power-cycle it exactly ten times at roughly one-second intervals (0.5 s off, 0.5 s on).
  3. The indicator LED switches from fast to slow blink, signaling readiness [Elektroda, mawe22, post #20890516] "Too fast or too slow will fail" [Elektroda, mawe22, post #20890516]

What is the 3-step procedure to flash OpenBeken via Tuya-cloudcutter?

  1. Select profile BK7231T / oem_bk7231s_light_ty and run the exploit.
  2. Connect to the new access point, browse to 192.168.4.1, and enter Wi-Fi credentials.
  3. Reboot, browse to the device IP, set pins (P6 PWM_n, P8 PWM) and flag 5888, then perform OTA upgrade [Elektroda, mawe22, post #20890516]

Why must GPIO 6 be set to PWM_n instead of PWM?

The Tuya JSON shows Warm-white defined as inverted output on pin 6. Using standard PWM would swap min/max brightness; PWM_n corrects this inversion [Elektroda, p.kaczmarek2, post #20922281]

How can I perform future OTA updates?

OpenBeken includes a Web OTA page. Choose “Download”, then “Start OTA” to fetch the latest build or upload a local binary. Updates keep Wi-Fi settings intact [Elektroda, mawe22, post #20890516]

Can I integrate the panel with Home Assistant?

Yes. OpenBeken exposes MQTT topics; add the broker IP in Config → MQTT. Home Assistant auto-discovers the light entity via Home Assistant-MQTT discovery [OpenBeken Docs, 2024].

What happens if my power-cycle timing is off during pairing?

An off-beat sequence (>1.3 s or <0.7 s per cycle) leaves the lamp in fast-blink mode, blocking Tuya-cloudcutter and forcing you to repeat the sequence [Elektroda, mawe22, post #20890516]

How can I contribute Tuya JSON or templates to the community?

Export the JSON from OpenBeken’s Device Info page and post it on the Elektroda thread. Developers use it to improve automatic template importers [Elektroda, p.kaczmarek2, post #20891213]

Does the SUN@Home PLANON PLUS (CRI 95) use the same driver?

A teardown photo set shows the SUN@Home 120 × 30 model using the identical WB3S-based driver, so the same flashing steps apply [Elektroda, Smartobias, post #21395313]

What PWM frequency do these panels run, and can I change it?

Tuya config sets 4 kHz; OpenBeken allows frequencies from 1 kHz to 20 kHz. Higher rates may reduce audible noise but increase MCU load [Elektroda, p.kaczmarek2, post #20922281]

What are the nominal power and brightness figures?

The vendor lists 33 W input power and 3 800 lm output for the 120 × 30 model, equating to ~115 lm/W [LEDVANCE Datasheet, 2023].
Generated by the language model.
ADVERTISEMENT