Uponor Clean 1

Investigate if its possible to get Uponor Clean 1 into Home Assistant

Hypothesis

• From the modem port connect an ESPHOME (e.g ESP32 S3) and insert values into Home Assistant
• It's 868.35MHz radio between inner unit and outer unit, and make decoding of this device in rtl_433

Datasheets

No	Description	IC
U1	Transceiver	nRF9E5
U2	CPU	MC9S08GT32ACFBE
U10	Serial	sipex 3232
U3	I2C Mem	4128BWP 8424K
OC13	Optoisolator	MOC3063 1512
D11	Mosfet	VNE46 AC 4DLMG
OC6	Mosfet	1435 814

I2C Memory (128-Kbit alias 16kb)

Extrated with help of a raspberry pi and i2c-tools, Memory exist at adresss 0X50 as can be seen from below.

Note! I think one need to desolder the memory chips as there was different results.

i2cdetect -y 1       
     0  1  2  3  4  5  6  7  8  9  a  b  c  d  e  f
00:                         -- -- -- -- -- -- -- -- 
10: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 
20: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 
30: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 
40: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 
50: 50 -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 
60: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 
70: -- -- -- -- -- -- -- --                         

Seems to be 17 first bytes that contain some data

i2cdump -y 1 0x50
No size specified (using byte-data access)
     0  1  2  3  4  5  6  7  8  9  a  b  c  d  e  f    0123456789abcdef
00: 05 00 69 00 6d 00 67 00 00 01 20 00 79 00 00 6f    ?.i.m.g..? .y..o
10: 00 XX XX XX XX XX 00 XX ff XX XX XX ff XX XX XX    .XXXXX.X.XXX.XXX
20: XX XX XX XX XX ff ff XX ff ff ff ff ff ff ff ff    XXXXX..X........
30: ff ff ff ff ff ff ff ff ff ff ff XX ff XX XX XX    ...........X.XXX
40: ff XX XX XX XX XX XX XX XX ff XX XX XX XX XX ff    .XXXXXXXX.XXXXX.
50: XX XX XX XX XX XX XX XX XX XX ff ff ff ff ff ff    XXXXXXXXXX......
60: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff    ................
70: ff ff ff ff ff ff ff ff XX XX ff XX XX XX XX XX    ........XX.XXXXX
80: XX XX XX XX XX ff ff ff ff ff ff ff ff ff ff ff    XXXXX...........
90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff    ................
a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff    ................
b0: ff ff ff ff ff ff XX XX ff ff ff ff ff ff ff ff    ......XX........
c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff    ................
d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff    ................
e0: ff ff ff ff ff ff ff ff ff ff 00 ff ff ff ff ff    ................
f0: ff ff XX XX XX XX XX XX XX XX XX XX XX ff ff ff    ..XXXXXXXXXXX...

Flash content

To read out the flash content from the CPU using reader like USBDM will get you and srecord clean1.s19 file. This file one need to convert to binary file clean1.bin with e.g objcopy.

objcopy --input-target=srec --output-target=binary clean1.s19 clean1.bin