HiSense 65H6510G no boot

[afiftyp]

I'm still not willing to give up on this board.
The link1 in post https://www.badcaps.net/forum/troubl...09#post1803209 mentions a utility named mbootnize. It seems to be required to manipulate a dumped image in order to be able to flash it to a new emmc (factory process). Does anyone happen to know where to get this program?

[afiftyp]

I have a HiSense H65U8B with a "RSAG7.820.8776/ROH" mainboard that does no longer boot.
In the UART log I see the following:

#_eMMC_RPMB_Check_Program_Key
~eMMC_RPMB_Read_data fail!
opteeA_fail
AUTH_OPTEE_FAIL

and the TV does not boot but tries to find a SW update on USB.
I have the latest image and the update goes thru successfully but it still does not start and would repeat the update in an endless loop.

So I thought using the MStar tool would eventually help and I was able to read out the DeviceID and sent it to email addresses given in the pdf document to obtain the corresponding update password.
It seems that mstarsemi.com is no longer active because after 2 days I received undelivered mail notification.

Does anyone have an idea if there is another address that one could use to obtain this password?

I would be able to replace the eMMC by a new one, but I don't know if the SW generates and stores a key for the RPMB by it own of that has to be inserted from external (and how).

[Zonalimitatore]

It mean it's good to trash, or can be fixed?

[lotas]

Bootloader is damaged, eMMC is not fixed...

[Zonalimitatore]

Hello there guys. I have a different TV (Saba) with the same problem. Is another size TV (43"), but have the same chip.
The problem start with a program TV image stuck. No way to power off,reboot, commands from remote. So unplug it. From that moment the single red blink once less 1s every 20/30 seconds, but no sign at all.

So i've connected usb/com adapter to GND0-3V3STANDBY-RX1-TX1, connect to terminal and here the results.
Two errors, but i can't know what is mean. Do you?
Ty

[lotas]

Didn’t show or there was already a prepared eMMC with applied balls....

[bohaboha]

Thank you so much lotas. a very costly piece of equipment. another question: After he cleaned the tin and added flux to place the MMC, I don't see him applying any tin again in the video? Should you do so or maybe he didn't show it on his video?

[lotas]

What kind of hot air station that men in video have?

QUICK 861DW ESD https://aliexpress.com/item/4001146200284.html

[bohaboha]

Re: HiSense 65H6510G no boot

From what I'm seeing, hisense is using the cheapest eMMC and everything else they come across, the built in apps are junk and just shorten the life of eMMC, wondering if just a universal mainboard would be an easier, maybe better solution for some, otherwise looks like you need a programmer and the ability to replace these chips without burning them up or buy them pre-programmed which may prove a tough find but still have to be very careful replacing, a little video of a guy replacing one. He looks pretty competent, but even so he had to go over it again, I can just imagine all the ways this can go wrong for the average do it yourselfer, I'm confident that you can do it but I bet a lot of folks would mess this up somehow: https://www.youtube.com/watch?v=tP3oUCX2ID0

What kind of hot air station that men in video have?

[kikokramer]

Re: HiSense 65H6510G no boot

Yes, many companies are already making eMMC firmware (with keys), binding to the ID of the SOC itself, and if you write someone else's eMMC dump, we get a castrato (crippled). That's why they try to pull as much data and partitions out of eMMC as possible.

Hello, I have read the emmc of a Hisense H65B7300 that works well and I have transferred it to another TV H65B7300 in which the emmc had reached the end of its useful life, I have used a new emmc but I can never get it to come out of Standby, What could be the problem?

[howardc64]

Re: HiSense 65H6510G no boot

Seems it's tough to get a replacment main board of the same model. The main board for this model is out of stock everywhere and I don't want to order from OEM which is too expensive. Is it possible to replace the main board with another Hisense TV model which had the same screen size? It's ok that some functions are not working, but at least the display can power on and I can stream from a TV box.

I posted the answer in post #134. 65R6G is close but I didn't get one in hand to confirm t-con signals match. Wifi flex + board is also different so will need to get that.

Most cost effective solution is what I posted in #134. Need to save search on ebay and register for stock availability on TVPartsToday (setup your account + credit card, boards will disappear within an hour after becoming available. Lots of people have registered for notification)

[d_boy_jq]

Re: HiSense 65H6510G no boot

Seems it's tough to get a replacment main board of the same model. The main board for this model is out of stock everywhere and I don't want to order from OEM which is too expensive. Is it possible to replace the main board with another Hisense TV model which had the same screen size? It's ok that some functions are not working, but at least the display can power on and I can stream from a TV box.

[Diah]

Re: HiSense 65H6510G no boot

just an idea...
since its android ....how about we use SDCARD and let the firmware from hisense on it and we add on the root of the SD script with extension .pkg to drive the Soc to the other firmware location on SD !!!

or we inject on SD recovery for the Soc from other brand.

[howardc64]

Re: HiSense 65H6510G no boot

hi, any progress in this? do you have find any firmware for these model?

HiSense website does provide download of USB upgrade firmware. However, if you have eMMC failure, need to locate/recover a bunch of stuff that HiSense doesn't provide. Read starting post #119

Replacement board availability is challenging in US. Maybe almost impossible in other countries

[360electronics]

Re: HiSense 65H6510G no boot

hi, any progress in this? do you have find any firmware for these model?

[howardc64]

Re: HiSense 65H6510G no boot

Hi, I have the same model of Hisense TV and had the similar symptoms. I've seen every posts in this thread and seems like emmc is a problematic part and it's very hard to replace it. I'm wondering if we could fix it differently to make the TV working as a normal diaplay only, then we could connect it to a streaming tv box. And are there any tips to purchase a new TV without having to worry this emmc problem? I dont think the TV sellers could tell if the Tv has emmc or not.

I think best repair is still replace mainboard at reasonable price. Need to register for notification and act fast on following 2 sources when they appear.

• ~$70 per post #112
• ~$30 from ebay seller goodpointrecycling (save a search for this board and notification)

Boards come up every 2-3 weeks so far.

Looked into closely related Roku model equivalent by HiSense in post #65 but wasn't able to secure one to compare t-con output to see if compatible (also need wifi module+cable as they are different)

https://www.badcaps.net/forum/showpo...5&postcount=65

I think to just turn it into display without smart features is fine but probably will at least need HDCP keys.

Every smart TV use eMMC since ~mid 2010s and most run fine. Main eMMC failures I read about are all Android TVs by HiSense, SONY etc. Don't know if newer versions of Android TV OS is better... I guess won't know until a few years. But modern TVs do fail so fast from variety of reasons.. Samsung LCD panel failure. LED backlight on all cheaper brands. At least latest ones aren't dying of thermal cycle breakage of main SOC solder balls anymore.

Finally I'm in Sammamish if you are in Redmond, WA. Have the service port dongle to confirm eMMC failure.

[d_boy_jq]

Re: HiSense 65H6510G no boot

Hi, I have the same model of Hisense TV and had the similar symptoms. I've seen every posts in this thread and seems like emmc is a problematic part and it's very hard to replace it. I'm wondering if we could fix it differently to make the TV working as a normal diaplay only, then we could connect it to a streaming tv box. And are there any tips to purchase a new TV without having to worry this emmc problem? I dont think the TV sellers could tell if the Tv has emmc or not.

[howardc64]

Re: HiSense 65H6510G no boot

Found more documentation and combining with @lotas's RPMB explanation in post #122. I think this is general process to repair failed eMMC

boot1 and mboot both contain device specific keys

Found guides that outline how to produce production firmware from existing eMMC. It says need to use original boot1 and mboot as any boot1/mboot copied from existing eMMC has device specific key

link1 link2 link3

Based on @lotas's explanation in post #122. Device specific key is combination of SOC ID (often implemented by blowing tiny fuses on chip called efuse) and eMMC ID. This means if eMMC is changed, keys need to be recalculated.

Likely Process

1. dump boot1 and eMMC user area
2. dump RPMB keys
3. maybe extract keys from boot1?
4. flash original boot1 to new eMMC
5. flash eMMC - mboot + original mboot to new eMMC
6. boot board with new eMMC
7. write device key to eMMC
8. write dumped RPMB keys to RPMB

So far, I achieved only #1 haha. #2 require knowledge of how to use MStar mmc rpmb read commands (I tried and don't have detailed understanding of command arguments)

Anyway, continuing learning.

Here is updated MStar command guide link

====

Also maybe eMMC access has failed due to some component failure on board. Will check around eMMC and compare working and failed board to see if any difference.

[Diah]

Re: HiSense 65H6510G no boot

Unfortunately I don't understand this idea at all. re-read post #101 to #107 including @lotas's comments and unfortunately don't understand

My understanding to read eMMC on main board without powering on main is to use external ISP or USB SD Card reader. Connect VCC, GND, D0, CMD, CLK and access eMMC in 1 bit mode. This video ( link ) provide detail steps. Poster took careful step to cut eMMC 1.8v 3.3v line from main board rails for board protection and drove 1.8v line with 3.3v from ISP/SD Card Reader.

If there is someway to connect PL2303 and CH340G to eMMC without power on main board. Please explain where RXD, TXD, 3.3V, and GND should be soldered to on eMMC. I also don't understand what you mean by "log" What do we do to get the log without powered on main?

my last post#129 wasn't about to write eMMC as you planed in off mode.. because you can read too i mentioned the Soc baudrate request.. its explain on my thought i wrote at post

streaming last will be most on DDR and Soc.
the key i was talking on its about the firmware extractor. not license keys. dtump/ write eMMC will take care on them 1 to 1.
but to tell the truth.. i still don't think yours emmc dead since we have sandwich boards .. every things possible.

so you can write firmware on it in power mode. and there many succeed with Mstar Soc listed on xda developer portal.

[howardc64]

Re: HiSense 65H6510G no boot

USB to TTL are fixed baudrate.. you need to connect with TTL end another adapter such serial to TTL. 1-2$ this adapter will response to any request of changing the rate as reguested... then TTL will remain work with out error... i did explain this before. each section Soc request other rate of data transfer... this the function of the ISP

Unfortunately I don't understand this idea at all. re-read post #101 to #107 including @lotas's comments and unfortunately don't understand

My understanding to read eMMC on main board without powering on main is to use external ISP or USB SD Card reader. Connect VCC, GND, D0, CMD, CLK and access eMMC in 1 bit mode. This video ( link ) provide detail steps. Poster took careful step to cut eMMC 1.8v 3.3v line from main board rails for board protection and drove 1.8v line with 3.3v from ISP/SD Card Reader.

If there is someway to connect PL2303 and CH340G to eMMC without power on main board. Please explain where RXD, TXD, 3.3V, and GND should be soldered to on eMMC. I also don't understand what you mean by "log" What do we do to get the log without powered on main?