[gstar]

Oh, and you just need one of these and a TTL to RS422 converter off aliexpress to replicate the interface:

https://www.aliexpress.com/item/1005005918675239.html

The connectors on the small RJ45 daughter board are JST-SH 1.0

The yellow lead puts out 4.2v to replicate a Li-Ion battery (as far as I can tell). You can ignore this.

Red is positive

Black is negative

Green is usb d+

Blue is usb d-

[ranebo]

This is all fantastic info. I have included the details and a link to these comments at the bottom of the post. Great work!

[lucioperca]

Tip: Instead of soldering I use splicing connectors with levers for testing stuff like this out. For example:

https://www.wago.com/de-en/c/installation-terminal-blocks-an...

[dt3ft]

Wago has great stuff.

[saylisteins]

Tiny QOL change without too much work, you could install something like teamviewer on the tablet, and now you're able to control your AC remotely from your PC, your phone, or anywhere!

[selcuka]

The MyAir (or e-Zone) app can already be accessed remotely. You install the app on your phone and pair it with your system by connecting to the same LAN. After the initial pairing it can be used from everywhere.

[emilfihlman]

Using which reverse service, though?

[selcuka]

From memory it connects to Firebase, possibly using the Realtime Database to sync state.

[Nursie]

Hey - As the owner of a similar system I have a question for you - do you use their phone app to control your system from your phone in/out of the house, and did it still work after this?

[ranebo]

I use the home assistant plugin with it personally, but I have tried the apps and they still work fine both locally and remote.

[Nursie]

Cool, that's all I needed to know, I'll be following in your footsteps at some point, thanks for taking the leap and doing all this :)

Now back to connecting an orange-pi zero to the petcube cam someone bought me for Christmas. I've found TTL pins on there and I want to know what's going on...

[nehz]

Would you have the RJ45 pinout too? Thanks!

[FLT8]

This is from my earlier notes, hope it helps some.

  Pin 1: RS422 +/B
  Pin 2: RS422 -/A
  Pin 3: ? - appears to be unused; connected to unpopulated pad on PCB
  Pin 4: GND
  Pin 5: ~14.2v DC unloaded
  Pin 6: GND
  Pin 7: ?
  Pin 8: ?
  Shield: GND

Note: the RS422 protocol has a basic bus arbitration built-in to allow both ends to communicate. The control unit sends <U>Ping</U=xx> messages, after which it opens a slot for the Tablet to communicate back to it. At least on my system xx represents a simple CRC value that can be used to validate message authenticity. I haven't seen any AES encryption in use, messages I've seen are all plaintext, maybe the AES encryption was introduced in a later revision.

[binary_slinger]

Wouldn't RS422 need 2 TX and 2 RX?

[upofadown]

Normally, yes. Perhaps this could be more properly termed RS-485 operating in 2 wire (half duplex) mode:

* https://en.wikipedia.org/wiki/RS-485

[gstar]

I have something slightly different

1 is RS422 B

2 is RS422 A

3 & 5 - GND

4 & 6 - VCC

Not sure what 7 and 8 do.

[FLT8]

Interesting, not sure what's going on there then.. how recently was your system installed? Maybe they have updated the pinout on newer models? I'll go back and check though.

[gstar]

You're right! The serial bus isn't encrypted!

I got inspired, and have plugged in my scope, and then an RS422 to serial adapter, and I'm getting XML encoded (weird) CAN messages, which I presume are the same as what's on the CAN bus exposed on some of the control box's ports. I'll get out the can analyser tomorrow and check.

Now the trick will be to reverse engineer this protocol. Here's a tiny sample:

  <U>setCAN 0201000000236000000000000 </U=ce><U>getCAN 1 </U=00><U>Ping</U=db> <U>ackCAN 1</U=aa><U>Ping</U=db> <U>setCAN </U=b2><U>getCAN 1 </U=00><U>Ping</U=db> <U>ackCAN 1</U=aa><U>Ping</U=db> <U>setCAN </U=b2><U>getCAN 1 </U=00><U>Ping</U=db> <U>ackCAN 1</U=aa><U>Ping</U=db> <U>setCAN </U=b2><U>getCAN 1 </U=00><U>Ping</U=db> <U>ackCAN 1</U=aa><U>Ping</U=db> <U>setCAN </U=b2><U>getCAN 1 </U=00><U>Ping</U=db> <U>ackCAN 1</U=aa><U>Ping</U=db>

[gstar]

Not always - if it's used as a bus, it's 2 wire.

[gstar]

No, sorry - I may be able to buzz one out of the a/c controller later on.

I do, have 2 spare USB-C to JST-SH adapters that suit the round advantage air circuit board if anyone wants one (Perth, Free). Email in profile.