logo elektroda
logo elektroda
X
logo elektroda

Switch Module QL-0833 REV:0 with P-mjnr Controller – Identification and RF Port Use

zakdma 615 7
ADVERTISEMENT
  • Identifies QL-0833 as Tuya QS-WIFI-SEC01-DC with BK7231N

    #1 21736547
    zakdma
    Level 3  
    Posts: 27
    New switch module arrived, with the isolated relay. It also has an RF port to connect RF submodule, but no RF module arrived with it.
    The module contains an unknown controller module soldered in. Controller module has only "P-mjnr" marking and QR code ZOQH18SY00733
    Module PCB has also marking
    QL-0833
    REV:0
    2024.09.25

    Has someone faced such a module?

    Images:

    Mini 1 Gang Wi-Fi switch module with connection terminals and labeling
    QLRELAY BJ-SS-105D relay module with electronic components on PCB
    Green PCB with SMD electronic components and labeled terminal connections
    Close-up of a small PCB with electronic components and a QR code label

    
    {
      "vendor": "Tuya",
      "bDetailed": "0",
      "name": "Tuya Dry Relay Module QS-WIFI-SEC01-DC",
      "model": "QS-WIFI-SEC01-DC",
      "chip": "BK7231N",
      "board": "QL-0833",
      "flags": "0",
      "keywords": [
        "CBLC9S",
        "BK7231N",
        "QL-0833",
        "QS-WIFI-SEC01-DC"
      ],
      "pins": {
        "6": "WifiLED_n;0",
        "7": "Rel;0",
        "8": "dInput_n;0"
      },
      "command": "",
      "image": "https://obrazki.elektroda.pl/6083973100_1761845359_thumb.jpg",
      "wiki": "https://www.elektroda.com/rtvforum/topic4151106.html"
    }
    


    Tuya config JSON
    
    {
       "abi":"0",
       "id":"null",
       "swv":"1.3.0",
       "bv":"40.00",
       "pv":"2.2",
       "lpv":"3.3",
       "pk":"mjnroaglpmhrikqt",
       "firmk":"null",
       "cadv":"1.0.4",
       "cdv":"1.0.0",
       "dev_swv":"1.3.0",
       "s_id":"null",
       "dtp":"0",
       "sync":"0",
       "attr_num":"1",
       "mst_tp_0":"9",
       "mst_ver_0":"1.3.0",
       "mst_tp_1":"0",
       "mst_ver_1":"null",
       "mst_tp_2":"0",
       "mst_ver_2":"null",
       "mst_tp_3":"0",
       "mst_ver_3":"null "
    }
    
  • ADVERTISEMENT
  • ADVERTISEMENT
  • Helpful post
    #3 21737203
    p.kaczmarek2
    Moderator Smart Home
    Posts: 14711
    Help: 658
    Rate: 12780
    I think I also posted a teardown of such module once. I remember this RF socket. It can be used as generic GPIO, but it is not isolated from mains, so touching it can be very dangerous. I have bought my piece on polish site Allegro.
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • BK7231N module identified, but Tuya pin mapping still unknown

    #4 21747460
    zakdma
    Level 3  
    Posts: 27
    I desoldered the module from the PCB and it is CBLC9S (BK7231N).
    There is no possibility to update firmware without module desoldering because RX and TX do not get out of the module.

    Small PCB marked CBLC9S with wires soldered to labeled pins

    I read Tuya firmware and wrote OpenBeken one.
    But unfortunately, it cannot decode the Tuya config, so I don't know the pins.

    Tuya config JSON
    
    {
       "abi":"0",
       "id":"null",
       "swv":"1.3.0",
       "bv":"40.00",
       "pv":"2.2",
       "lpv":"3.3",
       "pk":"mjnroaglpmhrikqt",
       "firmk":"null",
       "cadv":"1.0.4",
       "cdv":"1.0.0",
       "dev_swv":"1.3.0",
       "s_id":"null",
       "dtp":"0",
       "sync":"0",
       "attr_num":"1",
       "mst_tp_0":"9",
       "mst_ver_0":"1.3.0",
       "mst_tp_1":"0",
       "mst_ver_1":"null",
       "mst_tp_2":"0",
       "mst_ver_2":"null",
       "mst_tp_3":"0",
       "mst_ver_3":"null "
    }
    


    Original Firmware:
    readResult...-07-04.bin (2 MB)You must be logged in to download this attachment.
  • Helpful post
    #5 21747480
    p.kaczmarek2
    Moderator Smart Home
    Posts: 14711
    Help: 658
    Rate: 12780
    Helpful post? Buy me a coffee.
  • WiFi LED pin identified; asking relay-linked control method

    #6 21747596
    zakdma
    Level 3  
    Posts: 27
    I found pins using GPIO Finder tool.

    
    {
      "vendor": "Tuya",
      "bDetailed": "0",
      "name": "Tuya Dry Relay Module QS-WIFI-SEC01-DC",
      "model": "QS-WIFI-SEC01-DC",
      "chip": "BK7231N",
      "board": "QL-0833",
      "flags": "0",
      "keywords": [
        "CBLC9S",
        "BK7231N",
        "QL-0833",
        "QS-WIFI-SEC01-DC"
      ],
      "pins": {
        "6": "WifiLED_n;0",
        "7": "Rel;0",
        "8": "dInput_n;0"
      },
      "command": "",
      "image": "https://obrazki.elektroda.pl/6083973100_1761845359_thumb.jpg",
      "wiki": "https://www.elektroda.com/rtvforum/topic4151106.html"
    }
    



    One question. How to make WiFi LED to turn ON/OFF according to relay?
    It flashes during connection and then turns OFF when connected.
  • ADVERTISEMENT
  • Helpful post
    #7 21747612
    p.kaczmarek2
    Moderator Smart Home
    Posts: 14711
    Help: 658
    Rate: 12780
    Helpful post? Buy me a coffee.
  • Helpful post

    BK7231N-based Tuya switch module identified

    #8 21747618
    divadiow
    Level 38  
    Posts: 5171
    Help: 443
    Rate: 908
    Boot log from backup
    Code: Text
    Log in, to see the code


    Added after 14 [minutes]:

    https://github.com/OpenBekenIOT/webapp/pull/236

Topic summary

✨ A Tuya dry relay switch module marked QL-0833 REV:0 was identified as using a CBLC9S module with a BK7231N chip. The board includes an RF socket intended for an RF submodule, but it can also be used as a generic GPIO and is not isolated from mains, making it hazardous to touch. Firmware flashing required desoldering the module because RX and TX are not exposed. OpenBeken firmware was written after reading the Tuya backup, and GPIO Finder/GPIO Doctor were used to determine the pin mapping. The discovered pinout includes WiFi LED, relay control, and digital input, and the device was matched to the Tuya QS-WIFI-SEC01-DC template.
AI summary based on the discussion. May contain errors.
ADVERTISEMENT