User Tools

Site Tools


howto:recover_remote_control_pairing_on_spark

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
howto:recover_remote_control_pairing_on_spark [2018/08/23 15:07]
validat0r [Restore pairing with saved 11pkey]
howto:recover_remote_control_pairing_on_spark [2019/09/20 09:27] (current)
validat0r Typos and additional information in Note 2
Line 1: Line 1:
 ====== Save and recover remote control pairing with Spark ====== ====== Save and recover remote control pairing with Spark ======
-Pairing the remote control (RC) to your Spark is normally a task for the first day of playing with your new toy: Do it with directions from the DJI GO 4 App or do it manually by pressing some buttons on the devices. But if you accidentialy ​or on purpose un-pair them later on, you might get into trouble re-pairing them again. Just search on the Internet, it's full of such stories.+Pairing the remote control (RC) to your Spark is normally a task for the first day of playing with your new toy: Do it with directions from the DJI GO 4 App or do it manually by pressing some buttons on the devices. But if you accidentally ​or on purpose un-pair them later on, you might get into trouble re-pairing them again. Just search on the Internet, it's full of such stories.
  
 ==== Pairing Spark and RC manually ==== ==== Pairing Spark and RC manually ====
Line 9: Line 9:
   - If not, you've better have read this manual before   - If not, you've better have read this manual before
  
-==== Saving your 11pkey of a current pairing ====+==== Saving your 11pkey ​aka sky_pwd ​of a current pairing ====
 This step is essential for an accidental un-paring, e.g. by pressing the power button on the Spark for 6 sec until it beeps twice, which means "​un-pair RC", or even pressing it for 9 sec until it beeps thrice (yes, it's a word now), which means "wifi reset"​. This step is essential for an accidental un-paring, e.g. by pressing the power button on the Spark for 6 sec until it beeps twice, which means "​un-pair RC", or even pressing it for 9 sec until it beeps thrice (yes, it's a word now), which means "wifi reset"​.
  
-The goal is to look for and write down the "​11pkey",​ which determines ​the link between this particular Spark and its RC. In a scenario where the parameters are reset on the air craft only, but not on the RC, you just have to restore said "​11pkey " and set one other parameter to restore the pairing.+The goal is to look for and write down the "​11pkey",​ which is essential for the link between this particular Spark and its RC. In a scenario where the parameters are reset on the air craft only, but not on the RC, you just have to restore said "​11pkey"​ and set one other parameter to restore the pairing.
  
   - Root your bird with DUMLracer   - Root your bird with DUMLracer
Line 21: Line 21:
  
 ==== Restore pairing with saved 11pkey ==== ==== Restore pairing with saved 11pkey ====
-Say, you've un-paired your Spark from the RC, accidentially ​or on purpose. And conventional means of re-pairing as described above won't work.+Say, you've un-paired your Spark from the RC, accidentally ​or on purpose. And conventional means of re-pairing as described above won't work.
 What'​re you gonna do? What'​re you gonna do?
 Now the previously saved 11pkey comes in handy. Now the previously saved 11pkey comes in handy.
Line 37: Line 37:
 Of course, you can do the editing on an //adb shell// with //busybox vi /​data/​misc/​wifi/​preference.conf//,​ too. Of course, you can do the editing on an //adb shell// with //busybox vi /​data/​misc/​wifi/​preference.conf//,​ too.
  
-Note: The 11pkey lives on the RC, too, of course. In a perfect world you would have to possibility to just look if up on the RC.+Note: The 11pkey lives on the RC, too, of course. In a perfect world you would have to possibility to just look it up on the RC.
  
 Note 2: Although there seems to be no indication on the Spark AC itself, it's possible that the RC has some kind of information with which AC it was paired beforehand (MAC wise), so it's unclear if this method can be used with a different Spark with a different Wifi MAC address. Note 2: Although there seems to be no indication on the Spark AC itself, it's possible that the RC has some kind of information with which AC it was paired beforehand (MAC wise), so it's unclear if this method can be used with a different Spark with a different Wifi MAC address.
  
-Note 3: There are rumours that pressing ​the power button on the Spark remote control ​for 9 sec will reset it. From my experience this doesn'​t reset the 11pkey nor any possible AC MAC binding, just its Wifi AP'​s ​ssid and password.+Edit: Turns out, you can just align the MAC addresses of two Sparks by manipulating /​amt/​WIFI_nvram.txt on the AC to have two Sparks with one RC. But only one at a time, please. 
 + 
 +  - adb shell 
 +  - busybox hexdump -C /​amt/​WIFI_nvram.txt 
 +  - cd /;mount -o remount,rw /amt;echo -e -n \\x60\\x60\\x1f\\x12\\x34\\x56 > /​amt/​WIFI_nvram.txt;​mount -o remount,ro /amt 
 +  - now you have an AC with the MAC 60:​60:​1f:​12:​34:​56 
 +  - please pick a random 12:34:56 part and leave the 60:60:1f alone. The latter might be important for auto-pairing. 
 + 
 +Note 3: Pressing ​the power button on the Spark RC for 9-12 sec will reset it. From my experience this doesn'​t reset the 11pkey nor any possible AC MAC binding, just its Wifi AP'​s ​SSID and WPA credentials to the default values.
  
howto/recover_remote_control_pairing_on_spark.txt · Last modified: 2019/09/20 09:27 by validat0r