Cannot flash the new ST17H66T version

[johnbaker26222]

I noticed that the new cheapo trackers from china are now shipping with the ST17H66T version instead of the ST17H66B. I was able to solder to pins 3 and 4 UART (I can't find a pad with this particular layout for pin 3). This is as far as I get into the flash before it hangs:

./flash_st17h66.py <KEY HERE>

RESET MODE activated. Changing baudrate to 115200
Erase + Write
sent b'er512'
Response is: b'#OK>>:'
sent b'rdrev+'
Response is: b'0x00000000 6200CK06 #OK>>:'
sent b'wrreg4000c890 ab000001 '
Response is: b'#OK>>:'
sent b'wrreg4000c838 ff010005 '
Response is: b'#OK>>:'
sent b'spifs 0 1 3 0 '
^CTraceback (most recent call last):
  File "/home/jake/tracker/FindMy/Lenze_ST17H66/./flash_st17h66.py", line 103, in <module>
    time.sleep(0.3)
KeyboardInterrupt

Here is a link to the datasheet for the T version. I am afraid the old B version is going to be harder to find in the future.

[biemster]

It is interesting to see that the bootloader is still accepting the first set of commands. Also it hangs at a command that is specific for the type of storage in the chip, which is a major difference between the B and T versions.
Have you tried flashing this board with a recent version of LeKit, one that should support the T?

[johnbaker26222]

Check Chip version fail.... hmmm... I need to add the key in the hex still as well. Is that pretty straight forward? haven't tried yet. [Screenshot 2024-03-08 083225.png]

…

On Friday, March 8th, 2024 at 3:03 PM, biemster ***@***.***> wrote: It is interesting to see that the bootloader is still accepting the first set of commands. Also it hangs at a command that is specific for the type of storage in the chip, which is a major difference between the B and T versions. Have you tried flashing this board with a recent version of LeKit, one that should support the T? — Reply to this email directly, [view it on GitHub](#10 (comment)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BAGCL2UCIH2TZQ67UAH4TMDYXFWFJAVCNFSM6AAAAABEMACMUWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSOBVGIZDIMZWGI). You are receiving this because you authored the thread.Message ID: ***@***.***>

[johnbaker26222]

[johnbaker26222]

Do you have a link to the latest lekit flash tool?

[biemster]

v3.0.4.1 should be here: https://doc.lenze.club/?filePath=%2Fpublic%2Fstore%2F17H6XT%28OTP%29_17H66T_17H68T%2F%E3%80%9004%E3%80%91+%E5%BC%80%E5%8F%91%E8%B0%83%E8%AF%95
If the link doesn't work for you, you could navigate from https://doc.lenze.club/

[biemster]

I need to add the key in the hex still as well. Is that pretty straight forward? haven't tried yet.

That is pretty straightforward, just a copy paste in a text editor should be possible. But I'll update the flasher script if this new LeKit works.

[johnbaker26222]

[biemster]

The log reports successful erase, can you confirm that by trying to switch on the tag?

[johnbaker26222]

The tag still comes on with a blue light. The documentation in Chinese shows a later version of lekit. So the settings are different. I should be using otp right when flashing? I don't see an LW setting like in the documentation. I think I need to find the older version of lekit so it matches the flashing documentation Sent from Proton Mail mobile

…

-------- Original Message --------

On Mar 8, 2024, 16:08, biemster wrote: The log reports successful erase, can you confirm that by trying to switch on the tag? — Reply to this email directly, [view it on GitHub](#10 (comment)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BAGCL2VMYSTJIC5ZEZJYHD3YXF5XDAVCNFSM6AAAAABEMACMUWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSOBVGMYTQMJUGQ). You are receiving this because you authored the thread.Message ID: ***@***.***>

[biemster]

If the tag still comes on with a blue light it means that the firmware was not erased. This OTP means One Time Programming, so I actually assumed the T is not programmable at all. But your experience with the flasher had me hoping Lenze just rebranded the Flash as OTP for marketing reasons.
This needs further experimenting, and if I would have one of those tags I would start by trying to change the "run address is : OTP" to something not OTP, although it's a long shot.

[johnbaker26222]

When I click write there is a flash option or OTP option. Neither seem to do much, erase doesn't seem to work either as you said.
I think I'm just going to order some more in a different configuration and hope they still have the B version of the chip I suppose.

[liufuhu]

I am chinese, and i asked the chip manufacturer. ST17H66T is otp chip, and ST17H66B is flash chip, so ST17H66T cannot flash.

[biemster]

Thanks for contacting them @liufuhu ! Pity though that many manufacturers are moving away from the st17h66b

[johnbaker26222]

I'm finding it almost impossible to find the ST17H66B anymore. Might have to order the chip by itself and swap out with the Ts Sent from Proton Mail Android

…

-------- Original Message --------

On 5/27/24 16:11, biemster wrote: Thanks for contacting them ***@***.***(https://github.com/liufuhu) ! Pity though that many manufacturers are moving away from the st17h66b — Reply to this email directly, [view it on GitHub](#10 (comment)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/BAGCL2SU4DC2SG3WOEQZKLTZEL2FJAVCNFSM6AAAAABEMACMUWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCMZTGAZDONJZGI). You are receiving this because you authored the thread.Message ID: ***@***.***>