Yesterday @torture and I tried resetting/unlocking 2 renesas chips using a EV2400 clone over a remote connection.
The chips were respectively 51F51 and 045A20 ICs. The operation resulted in bricking both chips.
@torture was able to read the eeprom, reset the PF flag manually and write the dump back to the chip. After the operation, the chips reset and weren't communicating anymore with the EV2400, nor the NLBA.
As discussed in a previous thread, I think @djibattworkshop and @azzido have had success with clones in the past. Has any of you guys ever encountered such issues? Maybe a firmware update to the clone exists and would help?
Here are some pictures of my clone for reference:
Since @torture is the one who proceeded to the reset over a remote connection, he could probably add more details about what exactly happened.
So essentially:
- Has anyone ever encontered this kind of issue?
- Has anyone ever succesfully revived a "bricked" renesas IC?
- It's not a challenge for me to replace the IC on the BMS for a working one. Is it possible to revive my BMS in such a way and reflashing a working dump for the right battery?
- Any insights relating to how I could make this clone work reliably?
Again, a huge Thanks to @torture for all the time and effort he spent with me trying to reset my batteries, and thank you all in advance for any piece of information that could contribute to the knowledge of this community regarding those clones, and affordable methods to reset Renesas ICs.
Have a great day,
Carl
After the fail with both chips i contacted Nicosur and we tried remote session with his EV2400 clone on a 045A20 chip multiple times and everything was fine.
I was using same method like in the session with you and it was even same firmware LGC.
So i would say that something might be wrong with yours.
As discussed in a previous thread, I think @djibattworkshop and @azzido have had success with clones in the past
The clone was checked with Texas Instruments bq30z55 and bq9003 chips and performed without issues.
Renesas chips was not checked.
The view of PCBs looks like your example. All these clones looks typical.
- Has anyone ever succesfully revived a "bricked" renesas IC?
Some Renesas chips have so called "hardware boot option" which is invoked by toogling some pins to Ground. It allow to reflash bricked ICs. Tested personally on Renesas R2J240_20F020 LGC firmware.
- Any insights relating to how I could make this clone work reliably?
First try how it works with Texas Instruments chips. Check with free version of bqEVSW or bqStudio.
Then check firmware version of the clone with latest firmware of ev2400 on official website. Try to update it.
@torture That's interesting...
I would like to make some tests with "disposable" ICs. Are you aware of a cheap and easily available chip I could purchase a dozen of to try reading and writing to? And a software that could help me with those tests?
I have a logic analyzer that could maybe identify anomalies if that helps.
@azzido, can you please share a picture or a link to the clone your are using, so I can see if I can purchase the same one?
Some Renesas chips have so called "hardware boot option" which is invoked by toogling some pins to Ground. It allow to reflash bricked ICs. Tested personally on Renesas R2J240_20F020 LGC firmware.
Good to know! I have the datasheet and read the part about this hardware boot. Once in this boot mode, is there a software I can use to reflash the chip? I'm assuming it doesn't need to be unsealed in this state?
First try how it works with Texas Instruments chips. Check with free version of bqEVSW or bqStudio.
Then check firmware version of the clone with latest firmware of ev2400 on official website. Try to update it.
Good idea, will try!
Side note: I was using the device with the provided cheap-ass looking usb cable... Do you guys think this could have some sort of impact?
I'm assuming it doesn't need to be unsealed in this state?
Correct. Chip is ready to reprogramm being there.
Once in this boot mode, is there a software I can use to reflash the chip?
You could use native E8 Renesas programming board.
Alternatively its possible with amateurs code designed by karosium. Its available on github.
@azzido, can you please share a picture or a link to the clone your are using, so I can see if I can purchase the same one?
Here is the link where I bought it from: https://www.aliexpress.com/item/1005003308489798.html
I have never had issues with it. It works perfectly.
So i ordered one of these clones just to test it and see what's going on.
I get results similar to @carlmartin999 which is not good at all.
I tested some legacy Renesas & TI chips
1. M37516 SONY reading dump is fine but wrtiting it back to chip is not possible. Chip still working fine. No problems with genuine EV2300
2. 045A20 LGC reading ROM/Flash is fine afer writing back the reset dumps and attempt to bring chip to
normal opeartion there is absolutely no more responce.
3. 045A20 Sanyo first attempt was successful. After second attempt happened same as the above!
4.BQ30423 Dataflash reprogramming is fine, read/write SENC fine tested multiple times.
5.BQ20Z70 Dataflash reprogramming is fine, read/write SENC fine Chemistry update NOT possible. Tested multiple times. Chemistry updated succesfully with genuine EV2300.
So i will definitely not be using this device anymore.
Results are very inconsistent and i don't consider it reliable at all.
Thanks for research!
For case 5 could you recheck if Chemistry was updated or not by checking Chem Id with MAC OpCode 0x0006(0x0008). And rechecking Ra-tables in GG profile.
Me had this kind of error several times with ev2300 copy adapter but after ignoring errors it was turned out that OCV and Ra-tables were actually updated correctly.
So i will definitely not be using this device anymore.
Results are very inconsistent and i don't consider it reliable at all.
Thanks for the feedback! However you said that Nicusor's device was working fine, right?
Could it be that the clone you and I ordered from the same seller is a bad one, and the one Nicusor linked should be ok?
Could it be that the clone you and I ordered from the same seller is a bad one, and the one Nicusor linked should be ok?
They look exactly the same and have the same exact copy pasted description on aliexpress... They really seem to come from the same factory butI could be wrong...
Firmware versions could be different.
I tested Nicosur's clone multiple times with success on batteries 2 & 3 from my post that i bricked today with mine.
You can also try to order from the link that he posted.
But here comes the big problem! These sellers on Aliexpress are just sellers they are not manufacturers, and they can buy/receive/sell different batches every time.
I can say that this clone that i have can support 99% of the genuine functionality but ONLY for TI chips. And the thing is that is was designed for TI chip support only anyway.
But for my needs this is not enough. And i will also not accept anymore remote reset requests from users with clones, because instead of helping them i can do even more damage like it happened with you.
The firmware version of mine is reported as 0.98
Hi,
Does anyone here have experience using this alternative device?
https://www.aliexpress.com/item/1005003523818485.html
It comes as a "mini" and a more expensive "pro" edition, marketed like this:
"Mini provides basic functions and basic protection, while Pro is a complete version of the original import scheme, providing a complete protection system."
It seems to be firmware upgradable to support future chips.
I believe it is still a clone though, and not an authentic TI device, so I have no idea if it can be upgraded with TI firmware (most likely not).
The mini edition is slightly more expensive than the clone already discussed here but not a lot.
I will say, purely based on the descriptions of these devices, and the look of the devices, this device instills more confidence, but of course it can turn out to be misplaced.
I became interested in this thread, as I am in the market for an interface, to allow upgrading the firmware in a BQ40Z50 using bqStudio.
Best regards,
/Miwer


