Difference between revisions of "EPEVER SCCs"

Revision as of 13:59, 12 September 2025

Model	Device Type	Microcontroller(s)	SWD Pins
ET5420NC G3 ET7420NC G3 ET10420NC G3	Solar Charge Controller	TBD	TBD
IT5420NC G3, IT6415NC G3, IT6420NC G3, IT7415NC G3, IT7420NC G3, IT8420NC G3, IT10415NC G3, IT10420NC G3 IT6415NC G3 BLE, IT10415NC G3 BLE	Solar Charge Controller	TBD	TBD
Tracer6210AN Tracer5415AN/Tracer6415AN Tracer8415AN/Tracer10415AN Tracer5420AN/Tracer6420AN Tracer8420AN/Tracer10420AN	Solar Charge Controller	STM32F051C8T7 G4A36AFNNT	J2
Tracer1206AN G3/Tracer1210AN G3 Tracer2206AN G3/Tracer2210AN G3 Tracer3210AN G3/Tracer4210AN G3	Solar Charge Controller	TBD	TBD
Tracer1206AN/Tracer2206AN Tracer1210AN/Tracer2210AN Tracer3210AN/Tracer4210AN	Solar Charge Controller	STM32F030C8T6	J6
TRIRON1206N/TRIRON1210N TRIRON2206N/TRIRON2210N TRIRON3210N/TRIRON3215N TRIRON4210N/TRIRON4215N	Solar Charge Controller	STM32F030C8T6	J6
XTRA1206N G3 (BLE)?/XTRA2206N G3 (BLE)? XTRA1210N G3 (BLE)?/XTRA2210N G3 (BLE)? XTRA3210N G3 (BLE)?/XTRA4210N G3 (BLE)? XTRA3215N G3 (BLE)?/XTRA4215N G3 (BLE)? XTRA3415N G3 (BLE)?/XTRA4415N G3 (BLE)?	Solar Charge Controller	TBD	TBD
XTRA1206N/XTRA2206N XTRA1210N/XTRA2210N XTRA3210N/XTRA4210N XTRA3215N/XTRA4215N XTRA3415N/XTRA4415N	Solar Charge Controller	STM32F030C8T6	J6
DR1106N-DDB/DDS DR1206N-DDB/DDS DR2106N-DDB/DDS DR2206N-DDB/DDS DR3106N-DDB/DDSDR3206N-DDB/DDS DR2210N-DDB/DDSDR3210N-DDB/DDS	Solar Charge Controller	TBD	TBD
…
MT50/MT52	Configuration Tool / Display	STM32F030C8T6	F2/F9
MT53	Configuration Tool / Display	TBD	TBD
PAL-ADP-50AN	Synchronization Accessory	STM32F030C8T6	J1

@@ Line 99: / Line 99: @@
 |J1
 |}
+=== Modbus Protocol Investigation ===
+https://diysolarforum.com/threads/epever-tracer-modbus-digging-deeper.108305/
+=== Decrypting Firmware Update (.prg) Files ===
+Bytes 18 thru the end of the file can be decrypted with AES CBC IV=[all zeroes] keys below. Pad with pkcs7 16 byte block size.
+'''Key for Larger 50A - 100A units'''
+:: <code>54726163 72414e43 0cdd527b 05c16b01 ff17cd6f 8c1e3e09 cf1f0c78 87ef8aec</code>
+'''Key for Smaller 10A - 40A units'''
+:: <code>54726952 6f6e2eda 0cdd527b 05c16b01 ff17cd6f 8c1e3e09 cf1f0c78 87ef8aec</code>
+https://gist.github.com/symbioquine/88e7148b4df143822f3b0d565619f80b
+=== Dumping Firmware ===
+Works with https://github.com/racerxdl/stm32f0-pico-dump (See SWD pins in top table)
+=== Unlocking SWD ===
+<code>
+openocd -s $(pwd) -f interface/stlink-dap.cfg -f target/stm32f0x.cfg
+</code>
+<code>
+telnet localhost 4444
+</code>
+<code>
+reset init
+</code>
+<code>
+stm32f0x unlock 0
+</code>
+<code>
+flash erase_address unlock 0x08000000 0x10000
+</code>
+:: Power cycle & reconnect st-link
+<code>
+flash write_image /path/to/dumped_firmware.bin 0x08000000
+</code>
+<code>
+reset
+</code>
+=== Dumping Running RAM ===
+<code>
+halt
+</code>
+<code>
+dump_image /path/to/save/tracer6420an_running_ram.bin 0x20000000 0x2000
+</code>
+<code>
+resume
+</code>