8
edits
Changes
Jump to navigation
Jump to search
no edit summary
{| class="wikitable"
|Model (regex)
|Device Type
|Microcontroller(s)
|SWD Pins
|-
|ET5420NC G3
ET7420NC G3
ET10420NC G3
|Solar Charge Controller
|TBD
|TBD
|-
|IT5420NC G3, IT6415NC G3,
IT6420NC G3, IT7415NC G3,
IT7420NC G3, IT8420NC G3,
IT10415NC G3, IT10420NC G3
IT6415NC G3 BLE, IT10415NC G3 BLE
|Solar Charge Controller
|TBD
|TBD
|-
|Tracer6210AN
Tracer8420AN/Tracer10420AN
|Solar Charge Controller
|[https://www.st.com/en/microcontrollers-microprocessors/stm32f051c8.html STM32F051C8T7]G4A36AFNNT[https://www.ti.com/lit/ds/symlink/tms320f28023.pdf TMS320F28023PT]|J2|-|Tracer1206AN G3/Tracer1210AN G3Tracer2206AN G3/Tracer2210AN G3Tracer3210AN G3/Tracer4210AN G3|Solar Charge Controller|TBD|TBD
|-
|Tracer1206AN/Tracer2206AN
Tracer3210AN/Tracer4210AN
|Solar Charge Controller
|[https://www.st.com/en/microcontrollers-microprocessors/stm32f030c8.html STM32F030C8T6]|J6
|-
|TRIRON1206N/TRIRON1210N
TRIRON4210N/TRIRON4215N
|Solar Charge Controller
|[https://www.st.com/en/microcontrollers-microprocessors/stm32f030c8.html STM32F030C8T6]|J6|-|XTRA1206N G3 (BLE)?/XTRA2206N G3 (BLE)?XTRA1210N G3 (BLE)?/XTRA2210N G3 (BLE)?XTRA3210N G3 (BLE)?/XTRA4210N G3 (BLE)?XTRA3215N G3 (BLE)?/XTRA4215N G3 (BLE)?XTRA3415N G3 (BLE)?/XTRA4415N G3 (BLE)?|Solar Charge Controller|TBD|TBD
|-
|XTRA1206N/XTRA2206N
XTRA3415N/XTRA4415N
|Solar Charge Controller
|[https://www.st.com/en/microcontrollers-microprocessors/stm32f030c8.html STM32F030C8T6]|J6|-|DR1106N-DDB/DDS DR1206N-DDB/DDSDR2106N-DDB/DDS DR2206N-DDB/DDSDR3106N-DDB/DDSDR3206N-DDB/DDSDR2210N-DDB/DDSDR3210N-DDB/DDS|Solar Charge Controller|TBD|TBD|-|…|||
|-
|MT50
|Configuration Tool / Display
|[https://www.st.com/en/microcontrollers-microprocessors/stm32f051k8.html STM32F051K8]|F2/F9|-|MT52|Configuration Tool / Display|[https://www.st.com/en/microcontrollers-microprocessors/stm32f030c8.html STM32F030C8T6]|F2/F9|-|MT53|Configuration Tool / Display|TBD|TBD
|-
|PAL-ADP-50AN
|Synchronization Accessory
|[https://www.st.com/en/microcontrollers-microprocessors/stm32f030c8.html STM32F030C8T6]|J1|} ===Decrypting Firmware Update (.prg) Files=== Bytes 18 thru the end of the file can be decrypted with AES CBC IV=[all zeroes] keys below. Pad with pkcs7 16 byte block size. '''Key for Larger 50A - 100A units''' ::<code>54726163 72414e43 0cdd527b 05c16b01 ff17cd6f 8c1e3e09 cf1f0c78 87ef8aec</code> '''Key for Smaller 10A - 40A units''' ::<code>54726952 6f6e2eda 0cdd527b 05c16b01 ff17cd6f 8c1e3e09 cf1f0c78 87ef8aec</code> https://gist.github.com/symbioquine/88e7148b4df143822f3b0d565619f80b ===Dumping Firmware=== Works with https://github.com/racerxdl/stm32f0-pico-dump (See SWD pins in top table) ===Unlocking SWD=== <syntaxhighlight lang="bash">openocd -s $(pwd) -f interface/stlink-dap.cfg -f target/stm32f0x.cfgtelnet localhost 4444reset initstm32f0x unlock 0flash erase_address unlock 0x08000000 0x10000</syntaxhighlight> ::Power cycle & reconnect st-link <syntaxhighlight lang="bash">flash write_image /path/to/dumped_firmware.bin 0x08000000reset</syntaxhighlight> ===Dumping Running RAM=== <syntaxhighlight lang="bash">haltdump_image /path/to/save/tracer6420an_running_ram.bin 0x20000000 0x2000resume</syntaxhighlight> === Protocol Documentation === {| class="wikitable"|[https://diysolarforum.com/resources/epever-scc-modbus-protocol-docs.512/version/878/download?file=329342 1733_modbus_protocol.pdf]|V1.1|FENG|2013-11-25|234.2 KB|86c05193b7f6e1945eb67616c6658366ef4033b110f506a33c1eeef03b0eafbf|-|[https://diysolarforum.com/resources/epever-scc-modbus-protocol-docs.512/version/878/download?file=329340 EpeverBSeriesControllerProtocolV2.3.pdf]|V2.3|sunb|2015-10-22|374.8 KB|a3fccf914928118def85223482e3091956d046810a01c20152006e6f68c61b70|-|[https://diysolarforum.com/resources/epever-scc-modbus-protocol-docs.512/version/878/download?file=329339 MODBUS-Protocol-v25.pdf]|V2.5|sunb|2018-09-27|847.6 KB|d0f9f08be06b5125134c3be24d9acc1430dcd4e9e82478df68d451489aaa77fb|-|[https://diysolarforum.com/resources/epever-scc-modbus-protocol-docs.512/version/878/download?file=329341 A or BSeriesControllerProtocolv2.6.pdf]|V2.6|sunb|2021-12-21|711.9 KB|3c2cf42f5f440d06db36280d41f0a8dd632da32396b820529db76eef53fd4351
|}
Modbus Protocol Investigation: https://diysolarforum.com/threads/epever-tracer-modbus-digging-deeper.108305/
