logo elektroda
logo elektroda
X
logo elektroda

[BK7231N / WB3S] Teardown and flashing of LEDVANCE SMART+ PLANON PLUS tunable white 30x30 45x45 30x6

mawe22 3990 12
ADVERTISEMENT
📢 Listen (AI):

  • I got 3 LEDVANCE 60x60 LED panels with different software versions (1.1.6 and 2.9.16)
    All of them with WB3S modules, WIFI flashable with tuya-cloudcutter
    According to the manual there are different sizes available: 30x30 45x45 30x60 60x60 120x30

    Flashing has been done with tuya-cloudcutter as follows:
    * By firmware version and name
    * 2.9.16 - BK7231T / oem_bk7231s_light_ty (or)
    * 1.1.6 - BK7231T / oem_bk7231s_light_ty

    "Slow blinking mode" is done by either disconnection from tuya-cloud via app and/or via 10x power-off-on cycles. (5x starts fast blinking mode).
    The Cycles should be done with frequency of around 1 second (1/2 sec off, 1/2 sec on). A little bit faster or much slower will fail the mode switch I figured out. -- Took me some times ;-)

    After flashing:
    * Find new Accesspoint and connect to
    * Open your browser: http://192.168.4.1 and configure your WIFI
    * reboot
    * Find new (WIFI) IP address and connect to via browser
    * go to WEBAPP -> config
    * set: Pin6: PWM_n ; Pin8: PWN; Flag: 5888 -> Save Pins
    * OTA -> Make Upgrade (select Download, Download, select Disk, Start OTA)
    * at standard webpage -> Config -> Configure Names -> Set a short- and long name for your newborn baby
    * (optional) Configure MQTT, Home Assistant, etc.

    LEDVANCE SMART+ PLANON PLUS tunable white packaging.
    Technical specifications of the LEDVANCE SMART+ PLANON PLUS 60x60 TW LED panel
    LEDVANCE LED driver connected to an LED panel. Close-up of the interior of an LED panel showing electronic components and a LEDVANCE label. Close-up of a PCB from an LED panel with electronics and components. Printed circuit board with WB3S module. Electronic board with components and markings Close-up view of an LED module circuit board with component markings. Close-up of an LED printed circuit board with various electronic components and markings. LED module circuit board with various electronic components.
    Code: JSON
    Log in, to see the code


    [EDIT] Thanks for the great Job you have done (!) guys and many thanks for this forum (hosting, content, etc.)

    Cool? Ranking DIY
    About Author
    mawe22
    Level 4  
    Offline 
    mawe22 wrote 8 posts with rating 2, helped 1 times. Been with us since 2023 year.
  • ADVERTISEMENT
  • #2 20890740
    p.kaczmarek2
    Moderator Smart Home
    That's a very interesting device design, it reminds me of a laptop power supply. I haven't seen that kind of Plafon device yet.

    Your template has been submitted:
    https://github.com/OpenBekenIOT/webapp/commit/8ce05a4ca160220fffc51f9356bc69d3976ff412
    It should be soon live at:
    https://openbekeniot.github.io/webapp/devicesList.html

    It's also interesting to see that this device uses PWM_n for one of the colors. Can you please attach here Tuya JSON as well, so I can investigate how it looks like there?
    https://www.youtube.com/watch?v=WunlqIMAdgw
    I am asking because our template importer is not yet able to automatically detect PWM_n setting and I would like to improve it.
    Helpful post? Buy me a coffee.
  • #3 20891200
    mawe22
    Level 4  

    p.kaczmarek2 wrote:
    That's a very interesting device design, it reminds me of a laptop power supply. I haven't seen that kind of Planon device yet.

    Yes, That was my first impression, too.
    p.kaczmarek2 wrote:

    Your template has been submitted:

    Many thanks for your ultra galactic fast response.
    p.kaczmarek2 wrote:

    It's also interesting to see that this device uses PWM_n for one of the colors. Can you please attach here Tuya JSON as well, so I can investigate how it looks like there?

    I'm a little bit too busy, now. Maybe I can do it next week.
    p.kaczmarek2 wrote:

    I am asking because our template importer is not yet able to automatically detect PWM_n setting and I would like to improve it.

    I'll support you as much as I can.
    I had no success with enhancing tuya-cloudcutter. They have an extra repository for device profiles but I don't know the exact syntax to create a new profile. Do you have some suggestions where to find some information?
  • ADVERTISEMENT
  • #4 20891213
    p.kaczmarek2
    Moderator Smart Home
    You have already flashed this device via Tuya-cloudcutter, so they don't need your 2MB flash dump . The only way you can contribute is by showing us Tuya JSON so we can check how PWM_n is decoded. Of course, take your time, there is no hurry
    Helpful post? Buy me a coffee.
  • #5 20921902
    mawe22
    Level 4  
    >>20890740
    sent you PM
  • #6 20922281
    p.kaczmarek2
    Moderator Smart Home
    Here is decrypted config:
    Code: JSON
    Log in, to see the code

    Here is textual description:
    
    Device configuration, as extracted from Tuya: 
    - LED Cool (Channel 4) on P8
    - LED Warm (Channel 5) on P6
    - PWM Frequency4000
    Device seems to be using WB3S module, which is using BK7231T.
    And the Tuya section starts at UNCOMMON POSITION 0
    

    Are you really sure that it works better with PWM_n instead of PWM?
    Helpful post? Buy me a coffee.
  • #7 21395313
    Smartobias
    Level 1  
    >>20890740

    Hello,

    i just got the LEDVANCE SUN@Home PLANON PLUS (120x30)
    (Different product line with CRI95 LEDs)

    it seems to use the exact same Driver

    Nameplate of LEDVANCE SUN@Home PLANON PLUS with technical specifications.
    LED driver located on the back of an LED panel.
    Close-up of the LED driver inside the LEDVANCE Planon Plus lighting.
    LED driver board inside LEDVANCE SUN@Home PLANON PLUS fixture.
  • ADVERTISEMENT
  • #8 21797728
    HateB
    Level 2  
    I have 60x60 version bought about 3 years ago which is listed at least here: https://www.multi-lite.com/en/planon-plus-bac...600x600mm-black-rc-ledvance/item-1-37540.html
    It runs v1.0.6 and no updates are offered with Ledvance's app. I already successfully flashed other Ledvance smart light wirelessly with RPI but this one causes more trouble. I tried both firmware versions mentioned in the OP but no matter what it eventually fails with "The profile you selected did not result in a successful exploit". I tried the detach from cloud and flash options. What else could I try to make it work preferably without HW modifications?
  • #10 21798205
    HateB
    Level 2  
    I tried all light related 1.0.6 profiles without success. It starts to look like it could be patched firmware. Should I move forward to flash it over serial? At least I need to take a look if the chip is easily accessible.
  • ADVERTISEMENT
  • #11 21798242
    divadiow
    Level 37  
    I am an advocate for serial flashing, so I would, yes. Be sure to take backup first if you do go down that route
  • #12 21799120
    p.kaczmarek2
    Moderator Smart Home
    This device seems easy to access, then why not? Take some photos and show us, we can guide you through the flashing process.
    Helpful post? Buy me a coffee.
  • #13 21799741
    HateB
    Level 2  
    I just flashed the chip. I soldered gnd/power, TX and RX cables next to the chip without desoldering the chip. Then I flashed the latest OpenBK7231T firmware. The flashing mode didn't work out immediately when I tried to connect CEN to GND but eventually it was stable. RPI 3B 3.3v pin was enough to feed the power to it. The backup/flash process was simple with ltchiptool in cli mode.
    Quote:
    python3 -m ltchiptool flash read -d /dev/ttyAMA0 BKT7231T backup.bin
    python3 -m ltchiptool flash write -d /dev/ttyAMA0 image_name.bin


    In the web UI, I downloaded Tuya GPIO config and extracted the config with the BK7231 Easy UART Flasher which basically showed the following info:
    Quote:
    Device configuration, as extracted from Tuya:
    - LED Green (Channel 2) on P24
    - LED Cool (Channel 4) on P8
    - LED Blue (Channel 3) on P26
    - LED Warm (Channel 5) on P6
    - PWM Frequency 4000
    - LED Red (Channel 1) on P9
    Device seems to be using WB3S module, which is using BK7231T.
    And the Tuya section starts at an UNCOMMON POSITION 0 (0x0)


    The config above, which I imported in the web ui to set the pins, seemed to be working fine with the brightness, colors and warmness. There's just one more problem because the warm/cool slider seems to be inverted so the cool state is the warmest. If setting to maximum warmness, the light goes off.

    Another edit: It was obvious based on the information provided earlier in this thread, PWM_N fixed the color warmness slider.
📢 Listen (AI):

Topic summary

The discussion focuses on the teardown and firmware flashing of LEDVANCE SMART+ PLANON PLUS tunable white LED panels in various sizes (30x30, 45x45, 30x60, 60x60, 120x30) equipped with WB3S modules based on BK7231N/BK7231T chips. Flashing was performed using tuya-cloudcutter with firmware versions 1.1.6 and 2.9.16, applying specific firmware templates (oem_bk7231s_light_ty). The slow blinking mode for device reset is triggered by disconnecting from Tuya cloud or performing 10 power cycles at approximately 1-second intervals. Post-flash configuration involves connecting to the device's access point, setting WiFi via http://192.168.4.1, and adjusting PWM pin assignments (Pin6: PWM_n, Pin8: PWM) in the web app. The device uses PWM_n for one color channel, which complicates automatic template detection. A decrypted Tuya JSON configuration was shared, revealing parameters such as PWM frequency (4000 Hz), module type (WB3S), and pin assignments. Additional images and confirmation were provided for the LEDVANCE SUN@Home PLANON PLUS 120x30 model, which appears to use the same driver hardware but with CRI95 LEDs.
Summary generated by the language model.
ADVERTISEMENT