logo elektroda
logo elektroda
X
logo elektroda

[Solved] BK7231N W604 4 Gang Smart Switch Flashing Issue: Non-Standard Encryption Key Error

malaysk 33 3
ADVERTISEMENT
  • #1 21822204
    malaysk
    Level 2  
    Hello. Yesterday I received a 4-key switch from AliExpress with firmware 1.1.9.
    I'm trying to flash it, but so far I'm having trouble.
    Four white touch buttons on a green PCB with multicolored wires attached
    CB3S wireless module with wires on a green PCB placed on patterned fabric
    When trying to flash the firmware, an error occurs:
    Starting flash new (no backup)!
    Now is: 28 января 2026 г. 16:33:52.
    Flasher mode: BK7231N
    Going to open port: COM11.
    Serial port open!
    Getting bus... (now, please do reboot by CEN or by power off/on)
    Getting bus success!
    Going to set baud rate setting (921600)!
    Will try to read device flash MID (for unprotect N):
    Flash MID loaded: 152085
    Will now search for Flash def in out database...
    Flash def found! For: 152085
    Flash information: mid: 152085, icName: P25Q16HBK, manufacturer: Puya, szMem: 200000, szSR: 2, cwUnp: 0, cwEnp: 7, cwMsk: 407C, sb: 2, lb: 5, cwdRd: 05-35-FF-FF, cwdWr: 01-31-FF-FF
    Flash size is 2MB
    Entering SetProtectState(True)...
    sr: 0
    sr: 0
    final sr: 0
    msk: 407c
    cw: 0, sb: 2, lb: 5
    bfd: 0
    SetProtectState(True) success!
    Going to read encryption key...
    Encryption key read done!
    Encryption key: 39dd6c01 39dd6c01 39dd6c01 39dd6c01
    ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^
    WARNING! Non-standard encryption key!
    If it's all zero, it may also mean that read is disabled.
    Please report to forum https://www.elektroda.com/rtvforum/forum51.html 
    Or just try using BK7231M mode 


    If I check the Skip key check box in the program, the firmware flashes without a problem, but after rebooting the module, the WiFi network doesn't appear and the device doesn't work.
    BK7231 Easy UART Flasher program screen with Write success! message

    If I flash a backup made before the factory firmware, the device works fine. I've attached the backup I made.
  • ADVERTISEMENT
  • #2 21822209
    insmod
    Level 30  
    Considering all 4 keys are repeating, this is a BK7238 chip, not BK7231N.
    Mislabeled T1-3S?

    Config extraction:
    Device configuration, as extracted from Tuya: 
    - Button (channel 1) on P26
    - Relay (channel 3) on P24
    - Relay (channel 4) on P9
    - Backlit IO pin on P11
    - WiFi LED on P20
    - Button (channel 4) on P8
    - Button (channel 3) on P10
    - Relay (channel 2) on P6
    - Button (channel 2) on P22
    - Relay (channel 1) on P23
    Device seems to be using T1-3S module, which is using BK7238.
    And the Tuya section starts at 2052096 (0x1F5000), which is a default T1/XR806 and some T34/BK7231N offset.
    
  • ADVERTISEMENT
  • #3 21822220
    malaysk
    Level 2  
    insmod wrote:
    BK7238 chip, not BK7231N

    Oh, thank you so much! I spent 10 hours reflashing and struggling with this switch! It worked!
  • #4 21822222
    malaysk
    Level 2  
    BK7238 chip, not BK7231N
ADVERTISEMENT