1.
Connect the EV2400 to the battery
The most commonly used interfaces are PORT1 (SMB), PORT2 (I2C),
PORT3 (HDQ) Where BQ34XXX uses the HDQ port, BQ27XXX uses the I2C port,
Our DJI UAV currently only needs to connect SMB port or I2C according to different models. note
I mean, the interface order of the second model is consistent with that of the imported model,
while the interface order of the first model is reversed, please do not 28.
You have to make a mistake. Of course, when we connect mainly to see the corresponding name
line. Believe you don't make this mistake.
The SMB port of the EV2400 has four followings. What we need is the SCL of the SMB port,
When connecting SDA and VSS, remember that no cable should be connected to the positive end
of the battery (positive end of the battery
The voltage tends to be too high and the current too high for any USB electronic device)
Some version tutorials and EV2400 abbreviate SCL for SMB ports as SMBC, SMB ports
SDA is abbreviated as SMBD and VSS is written as GND. SMBC, SMBD is ten years ago EV2300
The way to write. It's just written differently. It's all the same.
How to connect AIR2 to EV2400
One end connects the interface to PORT1, the SMB port of the EV2400. VOUT
1 If there is a connection, it is recommended to tie a knot to prevent a short circuit. As shown in
the picture.
We bent the connection wire sent by EV2400 into configuration, as shown in the figure, and
inserted it into the battery contact.
(Different battery models have different connections, and the wiring methods will be given at the
end of the article.)
Note the port order.
2. Software operation
(1) Battery Management Studio software setup
The battery password and chip model of the Mavic AIR2 are as follows.
Decryption password: ccdf7ee0
Full access password: E0BCBF17
Chip model Packet: 4500_2_06-bq40z50R2
Double-click to open it, and notice that the software scales both ICONS differently.
Click “Gauge”, then “NEXT”
Drag down and select the chip model packet given above: 4500_2_06-
bq40z50R2
Click Finish.
Click OK!
The following interface is displayed to open the software:
At present, it is found that the SMB port SDA and SCL labels of many battery chips are opposite,
and even the labels on the circuit board are opposite. If the connection fails, the first step is to
cross the SDA and SCL for a try. In most cases, the connection can be made. Don't think too much
about why it exchange. For some types of anti-SDA and SCL connections, errors are reported at
most. You can restart the software and reinsert the USB. Bad EV2400 quality may damage the
battery.
(2) Unseal the battery
There are two steps:
The first step is to unseal the battery by clicking the "UNSERAL" button on the right of the
software as shown in the arrow "1".
Enter the unlocking password provided earlier. Click ok.
After unsealing the battery, click "Refresh" to refresh the data. We can see that "SEC0" in green
represents success.
Step 2: Click the "UNSERAL_FULL_ACCESS" button on the right of the software as shown in the
arrow "2" to unlock the battery full access function. Enter the full access password provided in
the previous section. click"ok". Do it fast here, within 4 seconds of the first step.
After releasing the battery full access lock, click "Refresh" to refresh the data. We can see that
"SEC1" turns green, indicating success.
If you don't succeed, try again.
(3) The battery cannot be charged and unlocked
Ignore this section if this is not the case.
Click Advanced Comm SMB, enter the address 00 and command 0029, and click Write Word.
This command is used to reset protection.
The second way:
Refresh can also be unlocked by entering "0x0029" in the “Manufacturer Access” command in
the first column of the Register "Registers", clicking "ok", and then clicking "Refresh"
(4) Modify the number of battery cycles
Click on "Data Memory", click on "Gas Gauging", click on "Read All". Modify Cycle and “Qmax
Cycle Count”, and press Enter to confirm. “12” indicates that the number of battery cycles is
changed to “12”. If there is no data here, click "Read All" to refresh, if you have not checked
whether the full access.
(5) Modify the battery production date
Click on "Data Memory", click on "Gas Gauging", click on "Read All".
(6) Change the battery capacity
After the capacity is expanded, change Qmax to the new capacity as required. "Cell * Chg Voltage
at EoC "as shown in the figure.
(7) Extract firmware and configuration
This paragraph thanks the writer who did not leave his name
Extract and write firmware, configuration file, save address can not be in Chinese. First enter the
unlocking password, and then enter the full access password to extract.
Extract firmware
Extract configuration file
Note, with the new battery as soon as possible to extract their own firmware and save, to
prevent later firmware broken no firmware, DJI battery firmware may be slightly different batches,
unclear firmware is easy to cause battery damage. Battery brush his own original backup
firmware is best.
(8) Restart and disable full battery access
Don't forget this step, or the plane may not recognize the battery.
Click "RESET" and wait a few seconds. Click "SEAL" and wait a few seconds. Finished.
(9) Data and password of other models
The following data is from the network. The wiring diagram on the network is not clear and has
been reorganized.
a. Mavic Air1 data:
Decryption password: ccdf7ee0
Full access password: E0BCBF17
Chip model Packet: 4500_2_06-bq40z50R2
The button did not respond and the light was not on. The following four data "01, 23, 45, 67"
were modified.
b. Mavic 2 data:
Decryption password: ccdf7ee0
Full access password: E0BCBF17
Chip model Packet: 4500_2_06-bq40z50R2
The button did not respond and the light was not on. The following four data "01, 23, 45, 67"
were modified.
C. Spark data:
The battery is 1480mah
Decryption password: ccdf7ee0
Full access password: E0BCBF17
Chip model Packet: 4500_2_06-bq40z50R2
d. Mavic mini1 Data
Decryption password: ccdf7ee0
Full access password: E0BCBF17
Chip model Packet: 4500_2_06-bq40z50R2
The interface and Xiao are arranged in the same way. Check Spark.
e. Inspire 1 data:
Decryption password: 351B6c15
Full access password
Chip model Packet: 4500_2_06-bq40z50R2
If the password is not correct, try the “Mavic air2 “password or the “Inspire 2” password
The percentage of Gauging electricity is not so good. Check the "Design Capacity" mAh in "Fuel
Gauging" is 5450, the Design Capacity cWh is 12996.
"Qmax Pack" and "Learned Full Charge Capacity" are both 5450, and the next term is
14870, next item 3732, cell, plug and unplug
Voltage calibration:
• Measure the Voltage between Cell 1 and 1N and enter this value in the "Applied Cell 1Voltage"
field. Then select the Calibrate Voltage box. • Measure the voltage between BAT+ and BAT - and
enter this value into Applied Battery Voltage
(Applied Cell 1 Voltage) field and select CalibrateBattery Voltage box. • Measure the Voltage
between PACK+ and PACK - and enter this value in the "Applied Cell 1 Voltage" field. Then check
the Calibrate Pack Voltage box. If no voltage is present, press the FET_EN button (on the
Commands panel) to switch on the charge and discharge field effect transistor (FET). • Press the
Calibrate Gas Gauge button to calibrate the voltage measuring system. • After the voltage
calibration is complete, deselect the calibration voltage
(Calibrate Voltage) box.
f.Inspire 2 data:
Connect EV2400
I2C port. There are two versions of the battery, depending on the actual situation.
Decryption password :92be89d6
Full access password :d9b96a36
Chip model packet :0100-0-16-bq34z100g1
G.Plant protection battery data
Connect to port “I2C “of the EV2400. Connect an interface to port2 on the “i2c” port of the
EV2400. Vout if there is a connection suggested knot, to prevent a short circuit.
Decryption password: 92be89d6
Full access password: d9b96a36
Chip model packet: 0100-0-16-bq34z100g1
Cell replacement and welding
Remarks:
Tools: high power soldering iron, tin wire, computer, EV2300/EV2400, multimeter, safety first (to
avoid short circuit) when welding, make sure that the positive and negative electrodes are well
installed
There is also an uncertain factor for plant protection machine battery maintenance, high-end
models, battery motherboard is equipped with a microprocessor (MSP430), if this piece of
microprocessor due to power loss, overvoltage, undervoltage program damage, this program
cannot be replaced, the above operation will be of no help, if the above operation can not unlock
the battery, basically msp430 damage, Beyond repair (chip change
Also no program), can only announce the battery motherboard scrap.
F. DJI fpv data:
fpv data cells are 6 series of high voltage batteries, higher voltage, battery more violent, of
course
It's also more dangerous. Different batches, part of it doesn't need a password, part of it is this
password, part of it is this password
Unknown.
The decryption password : ccdf7ee0
Full access password: E0BCBF17
Chip model Packet :4500_2_06-bq40z80
Wiring diagram, the battery wiring is very test welder, after power off welding, and ensure that
the welding is correct, otherwise easy to occur danger.
After welding re-power on in communication, if no communication check link and battery
motherboard power supply.
If communication is possible but the communication is always broken, please ensure that the
battery is not started, or if it is broken, please remove the two resistors at the welding point.
Reinstall the resistor when finished.
If the 40z80 package is not included in the software, copy 4800_0_02-bq40z80.bq to the config
folder in the BatteryManagementStudio installation folder and restart
BatteryManagementStudio is fine.
Fpv battery control is not msp430, bring a lot of uncertainty, there may be a lot of no
In case of predictable situation, if not necessary, please send DJI after sale for repair.
g. Dji T16 T20 data
Chip model Packet 0100_0_16-bq34z100g1
Click all and then NEXT
Drag down and select the chip model packet 0100_0_16- given above
bq34z100g1 and click Finish.
Click ok
T16 connection
T20 connection
T16 motherboard
T20 motherboard
Unseal the battery access limit
FAS and SS are red if the access restriction is not lifted.
There are two steps:
The first step is to unseal the battery by clicking the UNSERAL button on the right of the
software as shown in arrow 1.
Put password:
After unsealing the battery, click Refresh to refresh the data. We can see that SS is green, which
means the first step is successful.
Step 2 Click the UNSERAL_FULL_ACCESS button on the right of the software as shown in arrow 2
to unlock the battery full access function. Enter the full access password. Click ok. Here the
speed should be fast, within 4s after the completion of the first step.
After releasing the battery full access lock, click Refresh to refresh the data. We can see that FAS
turns green, indicating success.
If you don't succeed, try again.
Abnormal charge and discharge The hardware reset operation current is not output
Short connect RST and BAT!
The battery cannot be charged or unlocked
Ignore this section if this is not the case.
1. Click Advanced Comm, enter address aa and 00, and command 2637.
Click Write.
2. Click Advanced Comm, enter address aa and 00, and command 1712.
Click Write.
3. Click Advanced Comm, enter address aa and 00, and command 2100.
Click Write.
4. Click Advanced Comm, enter address aa and 00, and command 4100.
Click Write.
Change the number of battery cycles
Click on Data Memory, click on Gas Gauging, click on Read All. In Cycle
In Count, you can see the number of cycles.
Consult the” bq34z100 “data manual.
The number of battery zeroing cycles of some batches of T16T20 needs to change the chip.
Partial batch
Can be directly changed
Restart and disable full battery access
Don't forget this step, or the plane may not recognize the battery.
Click RESET and wait a few seconds. Click SEAL and wait a few seconds. Finished.
Order of removing and assembling the replacement cell.
16-20 Battery disassembly repair tutorial:
Battery wiring sequence -1, cut off the positive electrode first;
-2 Then break the balance head wide head
-3 rebreak the balance head
-4 sub board small head can be pulled out directly without tube;
-5 Then break the negative electrode (change the cell) for a new cell after plugging sequence
-a, insert the small end of the panel first; -b, inserting the head; -c, then insert the electrical
board is small; -e, insert the red positive terminal -f, then insert the negative terminal to
complete)
It is easy to burn the master if the sequence is wrong.
bq Evaluation Software wizard 3 Software Settings
Phantom3 data:
Decryption cipher:
0310E6546051541D31584841B05C41A5
Chip model Packet: bq30z55r3 0.36
Open this:
Select the battery packet and in most cases automatically identify and unseal the battery
Click Refresh. The following picture indicates that the battery is connected successfully
Enter the software first contact access restrictions
The battery cannot be charged or unlocked
Ignore this section if this is not the case.
Click PRO, enter address 00 and command 0029, and click Write
Modified capacity
Finally, be sure not to forget to turn off the battery for full access, otherwise the battery will not
be recognized
Phantom4 data:
Decryption cipher
The default password is "unseal" or
0310E6546051541D31584841B05C41A5
Chip model packet: bq30z55r3 0.36
b. Mavic 1 Data
After changing the parameters to encrypt to exit, otherwise cannot verify the battery
Command “29” is used to clear pf unlock
12 indicates that the device restarts
28 is lifetime data reset
2A Black Clip reset
To change the parameters, enter 12 to restart the device
c. Mavic Pro1 data
The Mavic pro battery needs to be charged or switched on to activate communication, so v0.36
is fine.
