Flashing Guide for WB2S Tuya Action SmartPlug Power monitoring with BK7231T

Hello everyone,

I am making this post because I made a guide on how to flash WB2S tuya board with BK7231T MCU from the new Action SmartPlug.

# Introduction
This guide provides instructions for flashing the Action LSC Smart Power Monitoring Plug with the WB2S Tuya board, featuring the [BK7231T MCU](https://developer.tuya.com/en/docs/iot/wb2s-module-datasheet?id=K9ghecl7kc479).

lsc_smart..ug.png Download(72.24 kB)
lsc_smart_...ug_box.png Download(335.88 kB)

find the readme here : https://github.com/FlorianSoler/OpenBeken-Act...lsc-smartplug-with-monitoring-guide/tree/main

## Requirements:
* USB to TTL or UART reader
usb_ttl_ua...t_back.png Download(167.21 kB)
* Soldering iron
* Dupont cable or any wire for soldering
* [OpenBeken flasher software](https://openbekeniot.github.io/webapp/devicesList.html) or any other tool for flashing firmware.

# Step One

Begin by opening the smart plug case with a flat screwdriver.

oppened_..g.png Download(591.67 kB)

After opening, you should have access to the board.

# Step Two

Locate the Tuya board number on the back of the blue board:
board_nu..r.png Download(183.54 kB)
Google the board name, find Tuya documentation, and confirm the MCU (in this case, the board is a WB2S with [BK7231T MCU](https://developer.tuya.com/en/docs/iot/wb2s-module-datasheet?id=K9ghecl7kc479)). The manufacturer provides all the required data for flashing:

| Pin No. | Symbol | I/O type | Function |
|---------|--------|----------|--------------------------------------------------------|
| 1 | VBAT | P | Power supply pin (3.3 V), connected to VBAT on IC |
| 2 | PWM2 | I/O | Common GPIO, connected to P8 on IC |
| 3 | GND | P | Power supply reference ground pin |
| 4 | PWM1 | I/O | Common GPIO, connected to P7 on IC |
| 5 | 1RX | I/O | UART1_RXD, used as user-side serial interface, connected to P10 on IC |
| 6 | PWM0 | I/O | Common GPIO, connected to P6 on IC |
| 7 | 1TX | I/O | UART1_TXD, used as user-side serial interface, connected to P11 on IC |
| 8 | AD | AI | ADC pin, connected to P23 on IC |
| 9 | PWM4 | I/O | Common GPIO, connected to P24 on IC |
| 10 | CEN | I | Low-level reset, high-level active, Docking IC-CEN (internally pulled high) |
| 11 | PWM5 | I/O | Common GPIO, connected to P26 on IC |

# Step Three

Solder wires on the GROUND, VBAT, RX, and TX pins. Highlighted pinout:

board_w...png Download(243.42 kB)

soldered_..re.png Download(326.01 kB)

Connect pinout wires to the USB to UART adapter (ensure the MCU supports only 3.3V), and check Tuya RX is on the TTL board's TX and vice versa.
usb_ttl_co...nected.png Download(297.42 kB)
# Step Four

Plug the UART reader into your computer and launch [OpenBeken flasher software](https://openbekeniot.github.io/webapp/devicesList.html).
easy_uart_...lasher.png Download(41.85 kB)
Start by making a firmware dump (backup) by clicking **Do firmware backup (read) only**.
firmware_B..kup.png Download(74.96 kB)
After making the backup, obtain the firmware pinout configuration in JSON, and save it.
Locate the corresponding firmware and select the right one for your MCU, using the **_UA.bin** file, and click flash.

# Step Five

Unsolder all wires, put the board back in its enclosure, and plug it into an outlet. You should be able to see a WiFi hotspot:
wifi_hot..t.png Download(28.38 kB)
Go to the WiFi properties, enter the gateway IP in a web browser:
wifi_gat..y.png Download(28.56 kB)
# Step Six
Configure the power plug by inserting the JSON obtained in Step Four. Go to **launch web app** and into **import**, paste the JSON, and click **clear OBK and apply new script**.
Capture d’...184658.png Download(170.19 kB)

here my json obtained by reading the dump firmware :



Action_LSC...toring.rar Download(457 bytes)

# Congrat ! you have flash your action smart plug !
### Refer to [Tasmota Getting-Started](https://tasmota.github.io/docs/Getting-Started/#__tabbed_2_2) or [OpenBeken website](https://openbekeniot.github.io/webapp/devicesList.html) guide for connecting this to you wifi and for using **MQTT**.

Thanks for sharing, I always use the same USB to UART converter as you. By the way, can you also share the model number of that Action plug? Futhermore, I also need OBK JSON format template for our devices list: https://openbekeniot.github.io/webapp/devicesList.html You can copy it from Web App main panel. Also fill the "wiki" and "image" URLs

Hello,
Thanks for replying. The model is 3202087, the smart plug board number is WP02GE from 2023-09-05. I think this in a new version because they have changed the MCU from the last one.
For the OBK JSON, I have provided the JSON in the .rar archive, and I have referenced the picture and wiki link from this post.

Moderated By p.kaczmarek2:

This is actually 3202088 , as can be seen on the photo. Please do not confuse model numbers

Here the json in the archive :



Here is the picture that I used to retrieve the given information.

board_ref_..._back1.png Download(300.67 kB) board_ref_..._front.png Download(434.31 kB) board_ref_..._back2.png Download(330.41 kB) box_in..png Download(448.96 kB) tuya_board..for.png Download(231.88 kB) Plug_case..fo.png Download(347.87 kB)

Hello, the model is 3202088 as seen on the pictures, not 3202087.
I was just about to submit a new device teardown, not necessary as correct device model will now appear on the search.

This is true, the model is actually 3202088. The topic for 3202087 is the following: https://www.elektroda.com/rtvforum/topic4020767.html
Did anyone try using Cloud cutter to avoid disassembling the plug?

That's a good point, I will make the correction. I will add this template with 3202088 name so it shows up on:
https://openbekeniot.github.io/webapp/devicesList.html

Added:
https://github.com/OpenBekenIOT/webapp/commit/b778f0c124bc40500ba7bc67bf5d7dc12046c42a

Hello,
Systematic error from the backup.
Getting bus failed, will try again - 1/100!
I checked my 4 solders, reversed TX and RX
However, the LED lights up as soon as the backup is started.
My model is the same of this tuto, 3202088
Thank you for this tutorial.
Nissa33

Did you desolder WiFi module from the circuit?

No, I've soldered directly without desoldering the module

well the first step is always to try desoldering WB2S/CB2S. You can check out one of our videos to see how we do it:
[youtube]https://www.youtube.com/watch?v=YQdR7r6lXRY [/youtube]

Ok I will try
Thank you

Let me know if it works for you, if not, we will try to think about some better solution

Ok, thanks

Hi p.kaczmarek2
I've desoldered the module, but no chance, ever same error.

Please provide a detailed photos of your setup

Too late, I put everything away.
But I'm thinking of one thing, shouldn't we put the flashing mode first?

It's not ESP8266, it just waits for reboot to flash.

I have another idea what could have been wrong.

There are CB2S/WB2S modules with wrong silkscreen marking.
You need to follow silkscreen from documentation:

The one on image is correct. The physical module may have swapped (incorrect) markings.

Futhermore, check out our whole flashing guides list:
https://www.youtube.com/watch?v=L6d42IMGhHw&list=PLzbXEc2ebpH0CZDbczAXT94BuSGrd_GoM&pp=iAQB
We have flashed quite a lot of BK7231 so far...

Maybe my module is defective.
I'll buy another one and try again.
I'll keep you informed

Try different USB to UART converter. There is very, very low chance that the module is defective. I've flashed hundreds of Bekens and none of them were damaged. You can check out many of my teardowns on our Elektroda teardowns list:
https://openbekeniot.github.io/webapp/devicesList.html

Hi, I also have a few ledvance plugs and one of them defected recently so I opened and fixed it and now I want to reflash it but I am on a MacOS system and can't run the flash tool so is there any alternative or something for macos?

https://github.com/OpenBekenIOT/hid_download_py
See readme for guide.

BK7231N hid_download_py guide:

>>21086513

Hello!

I noticed that several people encountered the same issue as me: "Error Getting bus failed, will try again - 1/100!" when trying to perform a firmware backup.



To solve the issue on model 3202088:
"Getting bus failed, will try again - 1/100!"

You need to solder a second wire to the "GND" pin of your USB to UART adapter. And with this new wire connected to your GND pin, simply touch the CEN pin when performing the backup and also the flashing.



Plug in your USB, set the correct COM port in the application.
Click on "Do Firmware backup (read only)" to back up the original firmware.
As soon as the message "Serial port open! Getting bus... (now, please do reboot by CEN or by power off/on)" appears, touch the GND wire to the "CEN" pin, and the backup will proceed.

Repeat the same process when writing the new firmware.

Bonjour, j'ai bien flashé mes prises avec tuya cloudcutter, mais pour une j'ai mal renseigné les paramètres ip de ma prise, du coup je la vois sur mon routeur mais je n'arrive plus à accéder à la page des paramètres.
Y a-t-il un moyen ou une technique pour la réinitialiser ?

Merci d'avance

You can recover device easily.

See: https://github.com/openshwprojects/OpenBK7231T_App/blob/main/docs/faq.md

Merci, ça fonctionne.

No problem, let me know if you need anything else, we're here to help.

Just came to say thank you to the OP for the guide. My smart plug is flashed and working fine.
I'll upload details of the plug later (not that I would recommend it).

You're welcome, don't forget to turn on PowerSave 1 so the device can last longer. You never know with those cheap power supplies...

Eltaistos wrote:

After making the backup, obtain the firmware pinout configuration in JSON, and save it.
Locate the corresponding firmware and select the right one for your MCU, using the **_UA.bin** file, and click flash.

I'm new here. I have some powerplugs from LSC, Hombi and Tuya and also some Chinese mini smart switches.
I want to control them without using the Tuya cloud.
My first test is with a mini smart switch, which has a CB2S controller.
After taking out the CB2S and connecting it to the USB-TTL converter I could do everything until the first part or step 4.
The last part of step 4 I don't understand. How to start JSON? Where to find the bin file I need?
Many thanks for your support

Do a 2MB flash read, if you are lucky, the pinout will be extracted and shown on screen. Does it work for you?

The bin file for flashing (OBK binary) can be downloaded automatically from Easy Flasher

What your flasher shows now, do you have 2mb backup?