Followed the instructions to get to factory reset mode and started the process. Now the unit is in a boot loop after attempting factory reset.
It boots up, says “system maintenance in progress, do not reboot. Please wait” then reboots after 10 minutes and the same process keeps repeating over and over again. This went on for an hour before I disconnected POE. The same behavior happens when POE is restored. It never pulls a DHCP address from the router.
Just came across this topic, refreshing my interest of converting few TTS-10’s that I own, as my efforts failed at the beginning of the year but now my hopes are up! I would love to understand the process and I would really appreciate if you are able to perhaps describe how this can be done
Do you get anything on the screen like a Crestron swirl logo thingy? If so, I am afraid this means corrupted SD card. This is the image I manage to get off of TSW1060 sd card with Win32 Disk Imager some time ago
If thats healthy, you can access that using any FTP client or Crestron Toolbox File Manager. Once it dies or if you want to clone it @katia has posted a picture of the board where you can see card slot:
I let it sit connected to a POE switch and after 30 mins, it finally pulled a DHCP address. Was able to flash to latest firmware which seems to have fixed all the issues and the panel is functioning as expected now. No SD card surgery needed. Thanks for the tips everyone.
Something that may be of interest for the xx70 panels, back in a July firmware (3.002.0034) Crestron added the following:
[TSW70-19120] Added Support to add 3rd party application dynamically using app manifest
o Only signed 3rd party applications are allowed to install
o Panels will check for available apps during the normal app update check
What I’m not sure of is if that means it needs to be signed by the developer or signed by Crestron.
If it only needs to be signed by the developer maybe that’ll let us update the webview and run the HA app directly instead of needing to use EMS.
oh that would be a big win. i didn’t get to the point i could edit the manifest but anyone else had a go? @KazWolfe think you had gotten to that point after rooting right?
Bad news, it is a Crestron signature. Their plan, afaict, is to be able to push new apps without having to release new firmware. Good plan, but unlikely they’d set up HA. Webview cannot be updated at all with their current configuration, but I suppose they could change that later.
I will note that even with these restrictions, you can still install an arbitrary APK. It’s a bit annoying, but the general process on 3.x is:
Set up a Wi-Fi only connection, disable ethernet.
SSH to the device normally, run APPMODE com.android.settings.
Restart the device. You’ll gain access to Android settings.
Enable Wireless Debugging under Developer Settings (normal Android process here). Pair with ADB using the pairing code.
Run adb install <your_apk_here> on a host PC.
Reboot the tablet again.
Run APPMODE <your.package.here> via standard SSH.
Reboot one last time. You’ll boot to the specified app.
This won’t offer auto updates or anything, but it can get things like HA loaded on without problems. Note you’ll need to do this process to push updates and all, sadly. I haven’t yet found a way to get access from an ADB shell on 3.x or anything; they closed all the really common loopholes.
We did also get Fastboot on the xx70 series as well, so - in theory - there’s a hardware root path for the xx70s as well. I haven’t been able to get the recovery mode to work (and, honestly, might never be able to get it to do so), but with EDL we can extract /vendor, replace some key files, push a vendor image back, and then do whatever the heck we want.
For those following at home: the secret hidden button, when held, will boot the device to EDL. USB works otherwise, loader name is 000460e100290021_cc3153a80293939b_fhprg_peek.bin from any of the usual sources.
