niceboygithub/aqaram1sm2fw

Aqara Gateway M1S (ZHWG15LM) , P3(KTBL12LM), H1(QBCZWG11LM), M2 (ZHWG12LM) Firmwares

aqaram1sm2fw's Issues

aqaragateway tool not available

I have connected the UART TTL to the M2 gateway and connected to the PC. Use the aqaragateway tool to click on the flash buttion, nothing happens...
Just show：

{'ddr_base': '0xa1000000', 'xmodem': True, 'tftp': False, 'telnet': False, 'comport': 'COM4', 'baudrate': 38400, 'fwtype': 'rootfs_1', 'fwfile': 'E:/aqara/rootfs_3.0.2_0014_0508_modified.bin', 'model': 'M2', 'debug': False}

What should be the correct step?

aqaragateway.exe doesn’t work

I have a bricked M1S. The only option is UART flash stock firmware. I can’t get your tool to work. Here’s the screen recording. https://imgur.com/a/Fhjqpq0

I’m using Win10. What’s your environment in which it worked?

aqaragateway.exe no response

Flash rootfs_3.4.0_0004.0616_modified.bin stuck at this step

[New firmware support]: AIOT_V3.4.2_0008.0616 for `Aqara Hub M1S CN` (lumi.gateway.acn01)

"releaseDate": 1655715018000,
"part": "main",
"downloadUrl": "https://cdn.aqara.com/cdn/opencloud-product/mainland/product-firmware/prd/lumi.gateway.acn01/20220608172312_lumi.gateway.acn01_AIOT_V3.4.2_0008.0616_20220607_9e8c0f.bin",
"upgradeTakesTime": 40,
"updateLog": "1.Optimize device related functions;\n2.Fix known issues;",
"updateTime": 1655715018000,
"isNecessary": 0,
"fileSize": 13547624,
"createTime": 1655190712000,
"firmwareMD5": "b4206e2cc625b512105d3554fe9e8c0f",
"state": 3,
"isForce": false,
"firmwareVersion": "3.4.2_0008.0616",
"imageType": "bin",
"firmwareCRC32": "205B116E"

Can't flash M2

aqaragateway.exe is not working with Aqara M2

M2 current firmware version 3.2.7_0018_0524

When i trying to flash rootfs, i see

Goto flasher failed, try again.
Error: 'NullWriter' object has no attribute 'fileno'

For Aqara M1S 2022

php miio-cli.php --ip GW_IP --token GW_TOKEN --sendcmd '{"id":123,"method":"set_ip_info","params":{"ssid":"\"\"","pswd":"123123 ; passwd -d root ; /bin/riu_w 101e 53 3012; telnetd"}}'

php-miio (https://github.com/skysilver-lab/php-miio)

fw_update Can not run

New version error！

Hassos
Homeassistant version: core-2021.7.2

log:
2021-07-13 21:14:35 ERROR (Thread-17) [root] Uncaught thread exception Traceback (most recent call last): File "/usr/local/lib/python3.9/threading.py", line 954, in _bootstrap_inner self.run() File "/usr/local/lib/python3.9/threading.py", line 892, in run self._target(*self._args, **self._kwargs) File "/usr/local/lib/python3.9/site-packages/paho/mqtt/client.py", line 3452, in _thread_main self.loop_forever(retry_first_connection=True) File "/usr/local/lib/python3.9/site-packages/paho/mqtt/client.py", line 1779, in loop_forever rc = self.loop(timeout, max_packets) File "/usr/local/lib/python3.9/site-packages/paho/mqtt/client.py", line 1181, in loop rc = self.loop_read(max_packets) File "/usr/local/lib/python3.9/site-packages/paho/mqtt/client.py", line 1572, in loop_read rc = self._packet_read() File "/usr/local/lib/python3.9/site-packages/paho/mqtt/client.py", line 2310, in _packet_read rc = self._packet_handle() File "/usr/local/lib/python3.9/site-packages/paho/mqtt/client.py", line 2936, in _packet_handle return self._handle_publish() File "/usr/local/lib/python3.9/site-packages/paho/mqtt/client.py", line 3216, in _handle_publish self._handle_on_message(message) File "/usr/local/lib/python3.9/site-packages/paho/mqtt/client.py", line 3444, in _handle_on_message self.on_message(self, self._userdata, message) File "/config/custom_components/aqara_gateway/core/gateway.py", line 428, in on_message self._process_message(payload) File "/config/custom_components/aqara_gateway/core/gateway.py", line 619, in _process_message handler(payload) File "/config/custom_components/aqara_gateway/light.py", line 148, in update self._hs = color_util.color_RGB_to_hs(*rgb) TypeError: color_RGB_to_hs() takes 3 positional arguments but 5 were given

Add H1 HUB New Firmware Please!

Hope to add the latest firmware of H1 HUB

3.3.8_0020.0617

Can you provide a detailed firmware update guide

[New firmware support] AIOT_V3.4.0_0004.0616 for `Aqara M1S`

"releaseDate": 1649647080000,
"part": "main",
"downloadUrl": "https://cdn.aqara.com/cdn/opencloud-product/mainland/product-firmware/prd/lumi.gateway.acn01/20220331105256_lumi.gateway.acn01_AIOT_V3.4.0_0004.0616_20220330_ac5bb3.bin",
"upgradeTakesTime": 40,
"updateLog": "1.Optimize device related functions;\n2.Fix known issues;",
"updateTime": 1649647080000,
"isNecessary": 0,
"fileSize": 13547624,
"createTime": 1648887118000,
"firmwareMD5": "e2c8eaf18e93c389e519bf7c6bac5bb3",
"state": 3,
"isForce": false,
"firmwareVersion": "3.4.0_0004.0616",
"imageType": "bin",
"firmwareCRC32": "1C7C0CDC"

Could you provide more internal photos of the M2 or which Zigbee chipset is used?

Looking to find out which Zigbee chip is used in this device, could you post the model number of it or provide more internal photos showing the chips of the M2 hub?

Stuck at "Downloading the flasher."

Have an M2 hub (stock firmware) and trying to flash 3.3.9_0013.0616_modified.bin using aqaragateway.exe

It shows a progress bar for "Downloading the flasher" (and TX lights up on the TTY USB) but once the progress bar fills up it hangs.

Do NOT power up your gateway.
IF it is already power up, remove power cable!

Generating padded firmware, please wait...!
Please power up gateway!
If your gateway is powered up, disconnect usb cable and reconnect it.
Downloading the flasher.

m1s only lights up

Which firmware should I choose to flash?
I have tried flash linux_3.4.2**.bin on linux_0 and linux_1
root_3.4.2**.bin on roottfs_0 and roottfs_1
The m1s still only lights up, first yellow, then blue
does ControlBridge.bin need to be flashed, which one to choose?

How to retrieve lost data partition files?

Hello, I have used the wrong tool (gateway3utils.exe) to flash the firmware of M2, which resulted in the loss of data partition files. Is there any way to restore the data partition?

M2 stop on "Downloading the flasher"

我用的是 2022 04 生产的 M2网关
设备固件是 3.2.4_0013.0520
没有焊线 用手按的杜邦线
开机可以在串口看到回显

固件升级时候红灯常亮 然后等好久软件都没有进度
"Downloading the flasher" 一步 然后进度条读完
后面就没有然后了

是不是因为手按接触不良？我已经买了烧录夹 这两天快递到了我试试

Add lumi.gateway.aeu01 firmware. Please!

Please help!
Need original firmware for lumi.gateway.aeu01.

[New firmware support]: AIOT_V3.4.8_0008.0626 for `Aqara Hub M1S CN` (lumi.gateway.acn01)

"releaseDate": 1666773383000,
"part": "main",
"downloadUrl": "https://cdn.aqara.com/cdn/opencloud-product/mainland/product-firmware/prd/lumi.gateway.acn01/20221009122930_lumi.gateway.acn01_AIOT_V3.4.8_0008.0626_20221008_c4f0b1.bin",
"upgradeTakesTime": 40,
"updateLog": "1.Optimize device related functions;\n2.Fix known issues;",
"updateTime": 1666773383000,
"isNecessary": 0,
"fileSize": 13762664,
"createTime": 1666166056000,
"firmwareMD5": "b07c07e02f7d72c4d0a6ea5bb5c4f0b1",
"state": 3,
"isForce": false,
"firmwareVersion": "3.4.8_0008.0626",
"imageType": "bin",
"firmwareCRC32": "2E5F2BE8"

[New firmware support] AIOT_V3.4.1_0007.0616 for Aqara M2

FYI.

M2 HM2-G01 No boot

So i been trying to flash my M2 to enable telnet and i had no success.

The issue is when i flashed the modded firmware on rootfs_0 the flash apparently was successful with Done!

So i waited a few minutes just in-case nothing was else needed for the aqaragateway.exe to do and i unplugged my unit and replugged it in to try to test if telnet works now..

However I can't get the unit to start up because in the UART logs it states that both rootfs 0 and 1 doesn't exist and i went and looked here at all the open /closed issues and found some commands to run so that the cfw can boot.

No i didn't do anything with the kernel nor the linux partitions only i touched rootfs_0.

Apparently one user stated to flash it on 1 as it helped him but i don't want to touch it if it makes the issue even more a problem

uart ok
strap:0x412b8ae2
enable spi-nand
ROM ver:v1.21, sig:866c151, time:2016.11.04-11:26+0800, CPU(400 MHz), DDR2(533 MHz)

Found recognized ID, rdid=0x00efaa21
init IP fail(0xffffffff)
init ddr ok
img sig ok
chksum ok
load img ok
s-boot
sec sig ok
decrypt img
jump 0xa0000000

SPI Nand ID=00efaa21
SPI Nand die chipsize=0x08000000 byte
SPI Nand dienum=1,
SPI Nand blocksize=0x00020000 byte,
SPI Nand pagesize=0x00000800 byte,
SPI Nand oobsize=0x00000040 byte,
[rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024
[rtkn_scan_bbt, line 1822] block_v2r_num 00000400

[rtk_scan_v2r_bbt]:678,RBA=00000033,2=00000400,
[rtk_scan_v2r_bbt]:684,block_v2r_num=000003cd
INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb
load bbt v2r table:0 page:512

[rtk_scan_v2r_bbt] have created v2r bbt table:0 on block 8, just loads it !!

check v2r bbt table:0 OK

[rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704
INFO: Stored BBT in Die 0: block=11 , block_status_p1=0x000000bb
load bbt table:0 page:704

[rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !!

check bbt table:0 OK

[dump_BBT] Nand BBT Content
Congratulation!! No BBs in this Nand.
Realtek Crypto Engine v0.1
=>CPU Wake-up interrupt happen! GISR=09000084 
 
---Realtek RTL8197F boot code at 2020.07.14-20:40+0800 v3.4T-pre2.2 (993MHz)
Info: Load boot_info success!
== RTL8197 Aqara Gateway bootloader ==
boot_info: ver:0
kernel: newest:1, curr:1
rootfs: newest:0, curr:1
kernel[0]: sum:0x0000, size:2359296, fail:3
      [1]: sum:0x8153, size:2233348, fail:3
rootfs[0]: sum:0x0000, size:9830400, fail:0
      [1]: sum:0xc80f, size:9760772, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.0_0001
boot_magic: 0000917c
priv mode
Info: kernel 1 is invalid
Info: kernel 0 is invalid
Warn: all kernels are invalid !

---Ethernet init Okay!

So in UART i ran

eb 0xa0a00000 7c 91 00 00 f4 b7 00 00 00 00 00 22 14 44 80 bc
eb 0xa0a00010 00 00 22 14 44 80 bc 00 00 90 20 44 fb a6 00 00
eb 0xa0a00020 90 20 44 fb a6 00 00 00 01 31 2e 30 2e 32 2e 30
eb 0xa0a00030 30 35 00 00 00 00 00
NANDW 0xa0000 0xa0a00000 55

Didn't work as i get now

uart ok
strap:0x412b8ae2
enable spi-nand
ROM ver:v1.21, sig:866c151, time:2016.11.04-11:26+0800, CPU(400 MHz), DDR2(533 MHz)

Found recognized ID, rdid=0x00efaa21
init IP fail(0xffffffff)
init ddr ok
img sig ok
chksum ok
load img ok
s-boot
sec sig ok
decrypt img
jump 0xa0000000

SPI Nand ID=00efaa21
SPI Nand die chipsize=0x08000000 byte
SPI Nand dienum=1,
SPI Nand blocksize=0x00020000 byte,
SPI Nand pagesize=0x00000800 byte,
SPI Nand oobsize=0x00000040 byte,
[rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024
[rtkn_scan_bbt, line 1822] block_v2r_num 00000400

[rtk_scan_v2r_bbt]:678,RBA=00000033,2=00000400,
[rtk_scan_v2r_bbt]:684,block_v2r_num=000003cd
INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb
load bbt v2r table:0 page:512

[rtk_scan_v2r_bbt] have created v2r bbt table:0 on block 8, just loads it !!

check v2r bbt table:0 OK

[rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704
INFO: Stored BBT in Die 0: block=11 , block_status_p1=0x000000bb
load bbt table:0 page:704

[rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !!

check bbt table:0 OK

[dump_BBT] Nand BBT Content
Congratulation!! No BBs in this Nand.
Realtek Crypto Engine v0.1
=>CPU Wake-up interrupt happen! GISR=09000084 
 
---Realtek RTL8197F boot code at 2020.07.14-20:40+0800 v3.4T-pre2.2 (993MHz)
Info: Load boot_info success!
== RTL8197 Aqara Gateway bootloader ==
boot_info: ver:0
kernel: newest:0, curr:0
rootfs: newest:0, curr:0
kernel[0]: sum:0x80bc, size:2233412, fail:0
      [1]: sum:0x80bc, size:2233412, fail:0
rootfs[0]: sum:0xfba6, size:9445444, fail:0
      [1]: sum:0xfba6, size:9445444, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.0_0001
boot_magic: 0000917c
priv mode

nflashwrite, uiSectorCount=0 uiStartLen=55 uiEndLen=0 need_retry=0
Writing.Info: save boot_info
Info: loading kernel 0 ... size 2233412
Info: checking kernel 0 ... 
Info: loading kernel 1 ... size 2233412
Info: checking kernel 1 ... 
Success!
Info: loading rootfs 0 ...  Done
Info: checking rootfs 0 ... Info: checking rootfs 0 ... 
Fail
Info: loading rootfs 1 ...  Done
Info: checking rootfs 1 ... Info: checking rootfs 1 ... 
Fail
Warn: no rootfs available.

nflashwrite, uiSectorCount=0 uiStartLen=55 uiEndLen=0 need_retry=0
Writing.Info: save boot_info

---Ethernet init Okay!
<RealTek>

Tried

eb 0xa0a00000 7c 91 00 00 e5 a8 00 00 00 00 00 22 14 44 80 bc
eb 0xa0a00010 00 00 22 14 44 80 bc 00 00 90 20 44 fb b5 00 00
eb 0xa0a00020 90 20 44 fb b5 00 00 00 01 31 2e 30 2e 32 2e 30
eb 0xa0a00030 30 35 00 00 00 00 00
NANDW 0xa0000 0xa0a00000 55

Didn't work either...

Tried with both the original firmware and the modded firmwares just to be sure and all my unit does via the LED

Goes red then after a few seconds yellow then solid white

No i didn't backup anything because i wasn't sure exactly how do as the button Backup did nothing for me.

I am using Free Serial Analyzer to view the console at 38400 with 8 bits and i am using a CP210x device

eb 0xa0a00000 7c 91 00 00 7d d1 01 01 01 00 00 22 14 04 80 f2
eb 0xa0a00010 00 00 22 14 04 81 53 00 00 94 d8 04 d2 3b 00 00
eb 0xa0a00020 94 f0 04 c8 0f 00 00 00 01 31 2e 30 2e 30 5f 30
eb 0xa0a00030 30 30 31 00 00 00 00
NANDW 0xa0000 0xa0a00000 55

States

---Realtek RTL8197F boot code at 2020.07.14-20:40+0800 v3.4T-pre2.2 (993MHz)
Info: Load boot_info success!
== RTL8197 Aqara Gateway bootloader ==
boot_info: ver:0
kernel: newest:1, curr:1
rootfs: newest:0, curr:1
kernel[0]: sum:0x80f2, size:2233348, fail:0
      [1]: sum:0x8153, size:2233348, fail:0
rootfs[0]: sum:0xd23b, size:9754628, fail:0
      [1]: sum:0xc80f, size:9760772, fail:0
root_sum_check: off
watchdog_time: 0
boot_version: 1.0.0_0001
boot_magic: 0000917c
priv mode
Info: loading kernel 1 ... size 2233348
Info: checking kernel 1 ... 
Info: loading kernel 0 ... size 2233348
Info: checking kernel 0 ... 
Warn: all kernels are invalid !

So i am at a lost of what and why this is happing and before i started all of this yes my unit was on the the latest firmware via 3.4.4_0008.0618 as shown:

Any help with this would be greatly appreciated

FW needed 3.3.9_0013.0616 for M2

Hi @niceboygithub

Would you please upload the new FW 3.3.9_0005.0616 for M2? Thanks!

IR available?

Is IR available in home-assistant?

Please upload bootloader for the M2 EU version

Hi! Could you please also upload the bootloader for the M2 EU version? I flashed my device with https://github.com/niceboygithub/AqaraM1SM2fw/blob/main/raw/bootloader_1.0.0_0001/bootload_1.0.0_0001.bin, and it stopped booting at all?

Log from PuTTY:
uart ok
strap:0x412b8ae2
enable spi-nand
ROM ver:v1.21, sig:866c151, time:2016.11.04-11:26+0800, CPU(400 MHz), DDR2(533 M Hz)

Found recognized ID, rdid=0x00efaa21
init IP fail(0xffffffff)
init ddr ok
img sig err
ECC_DECODE_FAIL,ecc_start_addr = 0xbfe006e8
img sig err
ECC_DECODE_FAIL,ecc_start_addr = 0xbfe006e8
img sig err
ECC_DECODE_FAIL,ecc_start_addr = 0xbfe006e8
img sig err
load img fail(0xffffffff)
s-boot
sec sig err
fail

Aqara hub do not load boot

Hi. You can help me? boot_info my aqara hub M1S have big size. How can I resize boot_info
Command db 0xa0a00000 55 return next info:
[Addr] .0 .1 .2 .3 .4 .5 .6 .7 .8 .9 .A .B .C .D .E .F
A0A00000: 7C 91 00 00 96 3B 00 00 00 00 00 20 EC 04 CB 43 |....;..... ...C
A0A00010: 00 00 20 EC 04 C8 CF 00 00 9A 40 04 74 2C 00 00 .. [email protected],..
A0A00020: 82 80 04 62 C6 00 00 00 01 31 2E 30 2E 32 2E 30 ...b.....1.0.2.0
A0A00030: 30 35 00 00 00 00 00 00 20 00 04 00 00 00 00 20 05...... ......
A0A00040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
A0A00050: 00 00 00 00 00

3.3.2_0010.0610 firmware error

3.3.2_0010.0610 firmware causes the gateway fail to start

Excuse me? How to update the modified firmware？

I downloaded your firmware, but I don't know how to operate it. Can you give me a detailed procedure?

3.3.4 Can't access telnet

Hey! Thanks for your hard work. I have Aqara M2 CN hub and successfully flashed 3.3.4 modded firmware through UART. But after couldn't get telnet access anyhow.

Putty and other tools always immediately says that connection closed on remote side.

Also tried to connect by local address through direct connection, but also no luck.

This is my first attempt to get telnet access. Appreciate for any help.

Help!Aqara M2(ZHWG17LM) flashing failed.

I've received several M2 gateways yesterday. However, after using the Aqara_Gateway_Utils to flash the firmware, it failed. Flashing stopped at "Downloading the flasher".After the tool finished downloading the firmware, it stopped. How could i flash the firmware?Thank u

!

m2 eu

Hi! Can I flash custom firmware to eu version hub m2?
Do you know how enable telnet on hub m2 eu version?
How I can use Aqara Gateway integration via hub m2 eu version?
Thanks.

[New firmware support]: AIOT_V3.4.4_0008.0616 for `Aqara Hub M1S CN` (lumi.gateway.acn01)

"releaseDate": 1658713522000,
"part": "main",
"downloadUrl": "https://cdn.aqara.com/cdn/opencloud-product/mainland/product-firmware/prd/lumi.gateway.acn01/20220715173908_lumi.gateway.acn01_AIOT_V3.4.4_0008.0616_20220715_10dc56.bin",
"upgradeTakesTime": 40,
"updateLog": "1.Optimize device related functions;\n2.Fix known issues;",
"updateTime": 1658713522000,
"isNecessary": 0,
"fileSize": 13783144,
"createTime": 1658231889000,
"firmwareMD5": "677d85f0dcb7239c29fe29e80e10dc56",
"state": 3,
"isForce": false,
"firmwareVersion": "3.4.4_0008.0616",
"imageType": "bin",
"firmwareCRC32": "BF1B3E1E"

M2 Modified FW 3.3.0_0017.0526 flashed successfully but identified as 3.3.0_0017.0515 in Aqara app

In the Aqara app, it still notifies a new version available: 3.3.0_0017.0526, while current version shows as 3.3.0_0017.0515.

My original FW was 3.0.7_0008_0515, maybe the last 4 digits "0515" got kept after updated ?

Command line history:

D:\aqara>gateway3utils.exe -x -c COM5 -t linux_0 -f .\linux_3.3.0_0017.0526.bin
Please power up gateway3!
If your gateway3 is powered up, disconnect usb cable and reconnect it.
Downloading the flasher.
0% [##############################] 100% | ETA: 23:59:59
Total time elapsed: 00:00:46
Now transmitting .\linux_3.3.0_0017.0526.bin_raw
0% [############################################################] 100% | ETA: 00:00:00
Total time elapsed: 00:01:46
Transmit Done! Please wait for programming to flash.
Programming .\linux_3.3.0_0017.0526.bin_raw Done!

D:\aqara>gateway3utils.exe -x -c COM5 -t rootfs_0 -f .\rootfs_3.3.0_0017.0526_modified.bin
Please power up gateway3!
If your gateway3 is powered up, disconnect usb cable and reconnect it.
Downloading the flasher.
0% [##############################] 100% | ETA: 23:59:59
Total time elapsed: 00:00:49
Now transmitting .\rootfs_3.3.0_0017.0526_modified.bin_raw
0% [############################################################] 100% | ETA: 00:00:00
Total time elapsed: 00:07:13
Transmit Done! Please wait for programming to flash.
Programming .\rootfs_3.3.0_0017.0526_modified.bin_raw Done!

New firmware 3.1.2_0013.0519 for M1S

Is it possible to provide customized firmware of this version？

H1 hub failed to start

Hello, My device information is as follows.
H1 hub(QBCZWG11LM) (https://www.aqara.com/cn/productDetail/smart-wall-outlet-h1-hub)
Firmware Version 3.3.6_0027

I flashed this firmware(https://github.com/niceboygithub/AqaraM1SM2fw/blob/main/modified/H1/3.2.8_0007.0525/rootfs_3.2.8_0007.0525_modified.bin) with AqaraGateway (https://github.com/niceboygithub/AqaraM1SM2fw/blob/main/tools/aqaragateway.exe)

I selected this partition 'rootfs_0', the screenshot is as follows

After I restarted the power supply, the indicator light was first white, then yellow, and after a period of time, the indicator light went out, and there was no response. Long press the reset button for 10 seconds and nothing happened. Disconnected the power and re-applied, still the same.
I tried flashing back to the original firmware (https://github.com/niceboygithub/AqaraM1SM2fw/blob/main/original/H1/3.2.8_0007.0525/root_3.2.8_0007.0525.bin) to rootfs_0 partition, still the same

Can you help to see where is the problem?

telnet password incorrect for 3.3.2_0008.0605

After flashing 3.3.2_0008.0605, not able to login to telnet. Password incorrect

M2 Modify whether mosquitto in the firmware is running on the public ？

Do you need to manually operate mosquitto to run on the public port？

[New firmware support] AIOT_V3.3.8_0021.0616 for Aqara M1S

"releaseDate": 1645687171000,
"part": "main",
"downloadUrl": "https://cdn.aqara.com/cdn/opencloud-product/mainland/product-firmware/prd/lumi.gateway.acn01/20220210180303_lumi.gateway.acn01_AIOT_V3.3.8_0021.0616_20220210_b05287.bin",
"upgradeTakesTime": 40,
"updateLog": "1. Add sub-device access;\n2. Fixed the \"Gateway not reported\" log issue of the automation and scene ;\n3. Fix the configuration problem of Smart Plug maximum power;\n4. Fix known issues.",
"updateTime": 1645687171000,
"isNecessary": 0,
"fileSize": 13434984,
"createTime": 1645169672000,
"firmwareMD5": "df73b4ccffc4ff1f20e1ffa9a2b05287",
"state": 3,
"isForce": false,
"firmwareVersion": "3.3.8_0021.0616",
"imageType": "bin",
"firmwareCRC32": "43E31751"

[New firmware support]: AIOT_V3.4.2_0016.0616 for `Aqara Hub M1S CN` (lumi.gateway.acn01)

"releaseDate": 1656555879000,
"part": "main",
"downloadUrl": "https://cdn.aqara.com/cdn/opencloud-product/mainland/product-firmware/prd/lumi.gateway.acn01/20220622111541_lumi.gateway.acn01_AIOT_V3.4.2_0016.0616_20220622_3a66db.bin",
"upgradeTakesTime": 40,
"updateLog": "1.Optimize device related functions;\n2.Fix known issues;",
"updateTime": 1656555879000,
"isNecessary": 0,
"fileSize": 13547624,
"createTime": 1656332724000,
"firmwareMD5": "f92ba112671b3a13482e66f5a63a66db",
"state": 3,
"isForce": false,
"firmwareVersion": "3.4.2_0016.0616",
"imageType": "bin",
"firmwareCRC32": "EF565668"

aqaragateway.exe

aqaragateway.exe Failed to execute script ?

Aqara P3 Firmware Update

Aqara released the 3.4.0_004.0616 firmware for P3 with new device support. Please release a modified version. Thanks.

break Bootloader M2

I see you have full HUB m2 firmware instead of updated firmware. How can you break Bootloader, enter the command on Hub M2 EU to get the full firmware

Upgrading the firmware via fw_update is invalid

M1s: 3.2.4_0014.0520
M2: 3.2.4_0010.0520

The firmware version has not changed after the upgrade is complete

M1S EU version

Hello. Can you tell me, support for the Eu version is planned? Before version 3.4.2_0008, everything worked. Accidentally updated and it does not work.

Can't boot M2

Hello. please help me.
I flash my Aqara hub M2 (lumi.gateway.iragl15) with modifyed rootfs to rootfs_1.
After that gateway boot normaly, but alway close telnet session.
Then I flash modifyed rootfs to rootfs_0 and ....

`============ PuTTY log 2021.10.13 00:02:38 ============
uart ok

strap:0x412b8ae2

enable spi-nand

ROM ver:v1.21, sig:866c151, time:2016.11.04-11:26+0800, CPU(400 MHz), DDR2(533 MHz)

Found recognized ID, rdid=0x00efaa21

init IP fail(0xffffffff)

init ddr ok

img sig ok

chksum ok

load img ok

s-boot

sec sig ok

decrypt img

jump 0xa0000000

SPI Nand ID=00efaa21

SPI Nand die chipsize=0x08000000 byte

SPI Nand dienum=1,

SPI Nand blocksize=0x00020000 byte,

SPI Nand pagesize=0x00000800 byte,

SPI Nand oobsize=0x00000040 byte,

[rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024

[rtkn_scan_bbt, line 1822] block_v2r_num 00000400

INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb

load bbt v2r table:0 page:512

rtk_scan_v2r_bbt have created v2r bbt table:0 on block 8, just loads it !!

check v2r bbt table:0 OK

[rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704

INFO: Stored BBT in Die 0: block=11 , block_status_p1=0x000000bb

load bbt table:0 page:704

[rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !!

check bbt table:0 OK

[dump_BBT] Nand BBT Content

Congratulation!! No BBs in this Nand.

Realtek Crypto Engine v0.1

=>CPU Wake-up interrupt happen! GISR=09000084

---Realtek RTL8197F boot code at 2020.07.14-20:40+0800 v3.4T-pre2.2 (993MHz)

Info: Load boot_info success!

== RTL8197 Aqara Gateway bootloader ==

boot_info: ver:0

kernel: newest:0, curr:0

rootfs: newest:0, curr:0

kernel[0]: sum:0x80bc, size:2233412, fail:0

  [1]: sum:0x808a, size:2233412, fail:0

rootfs[0]: sum:0x0000, size:9445380, fail:3

  [1]: sum:0x0000, size:9445380, fail:3

root_sum_check: off

watchdog_time: 0

boot_version: 1.0.0_0001

boot_magic: 0000917c

priv mode

Info: loading kernel 0 ... size 2233412

Info: checking kernel 0 ...

Success!

Info: rootfs 0 is invalid

Info: rootfs 1 is invalid

Warn: no rootfs available.

---Ethernet init Okay!

`

Thanks.

New firmware 3.1.6_0022 for M1S

I would be happy about a modified firmware flashable via fw_update for my lumi.gateway.acn01 (fw 3.1.6_0022).

Firmware Region

Hi,

I have an Aqara M1S CN region. I am wondering if flashing the original firmware provided here will change it to use US/Others region when using the Aqara Home app.
So far I had to deal with slow CN servers :(

[New firmware support]: AIOT_V3.4.6_0008.0626 for `Aqara Hub M1S CN` (lumi.gateway.acn01)

"releaseDate": 1665197600000,
"part": "main",
"downloadUrl": "https://cdn.aqara.com/cdn/opencloud-product/mainland/product-firmware/prd/lumi.gateway.acn01/20220920102441_lumi.gateway.acn01_AIOT_V3.4.6_0008.0626_20220919_06d80c.bin",
"upgradeTakesTime": 40,
"updateLog": "1.Optimize device related functions;\n2.Fix known issues;",
"updateTime": 1665197600000,
"isNecessary": 0,
"fileSize": 13793384,
"createTime": 1663842911000,
"firmwareMD5": "064bf87820fa90835fccb2f5a706d80c",
"state": 3,
"isForce": false,
"firmwareVersion": "3.4.6_0008.0626",
"imageType": "bin",
"firmwareCRC32": "042567CA"

[New firmware support] AIOT_V3.3.6_0027.0613 for Aqara M1S

  "releaseDate": 1642909751000,
  "part": "main",
  "downloadUrl": "https://cdn.aqara.com/cdn/opencloud-product/mainland/product-firmware/prd/lumi.gateway.acn01/20220120123242_lumi.gateway.acn01_AIOT_V3.3.6_0027.0613_20220119_04ed3c.bin",
  "upgradeTakesTime": 40,
  "updateLog": "1. Add new devices to  HomeKit and Aqara AIOT;\n2. Add the Light automatic action of adjusting the color temperature and brightness;\n3. Added automatic condition of the time of year and month;\n4. Add automatic action of time period configuration;\n5. Fix the problem of device offline caused by abnormal communication;\n6. Fix other known issues.",
  "updateTime": 1642909751000,
  "isNecessary": 0,
  "fileSize": 13332584,
  "createTime": 1642758906000,
  "firmwareMD5": "1a859991750ac198c38a7ef02704ed3c",
  "state": 3,
  "isForce": false,
  "firmwareVersion": "3.3.6_0027.0613",
  "imageType": "bin",
  "firmwareCRC32": "D1E93121"

use scripts update m1s fw shows Update failed, reason: getpack failed!

use scripts update m1s fw shows Update failed, reason: getpack failed!

chmod a+x /tmp/m1s_update.sh && /tmp/m1s_update.sh

m1s_update.sh revision: 2
type: lumi.gateway.acn01, model: AH_M1S
platform: aiot, path: /tmp, sign: 0
Unpack path : /tmp/ota_dir
Firmware path : /data/ota_dir
Available ROM size(b): 26251264
Available RAM size(b): 22396928
Get packages, please wait...
Update failed, reason: getpack failed!

Official Firmware 3.4.4_0008.0616 Telnet Locked Out

I accidentally left auto update on and it updated to this official firmware.
The device is now locked out and I can't get back telnet access.

I used this to open up telnet:

miiocli device --ip 192.168.0.155 --token TOKEN_REMOVED raw_command set_ip_info '{"ssid":"\"\"","pswd":"123123 ;  /bin/riu_w 101e 53 3012 ; telnetd"}'
Running command raw_command
['ok']

Telnet seems to have opened but it closes the connection as soon as I connect to it.

Trying 192.168.0.155...
Connected to 192.168.0.187.
Escape character is '^]'.
Connection closed by foreign host.

Success on EU version M2 gateway

Even though it's said to be incompatible with EU version of M2 gw, I still managed to flash the rootfs using the Chinese modified ver. Result as below.

How to use this firmware？

Thanks for making the firmware

So，How to use this firmware？