Schneider Wiser (big thanks to @hairv and @badz)

• Schneider Wiser: how to set up

Purpose

Purpose of this page is to share all findings regarding the WISER Zigbee product familly.

• Thermostat
• Smart Plug
• Actuator (Heat ACT)
• sMeter (BMS)

Work in progress, so only validated informations are written

Pairing

The legacy Wiser devices (models EH-ZB-…) need specific settings and a network with an extended PAN ID ending with 484504015e10; the Wiser Home devices pair as usual. See Schneider Wiser: how to set up.

The device parameters of the Wiser devices (room number, thermostat lock, open-window detection, shutter travel time, override) are listed in Device parameters.

Firmware update of the legacy devices

Plugin version 9.1.009 and later. Earlier versions match a firmware file on the manufacturer code and image type only, and can offer a legacy file to the wrong model: do not put legacy firmware files in the firmware folder with an earlier version.

The legacy Wiser devices (models EH-ZB-…) are updated from Schneider’s own firmware package (WU.EH.R.04.05.08). Its OTADEF.xml file says which file goes to which model. These files use the same manufacturer code (0x105E) as the current Wiser range, and their image type does not tell one model from another, so the plugin uses that list instead:

The first file of a model (EH_ZB_SNP_…, or EH_PZA_… for EH-ZB-SPD-V2) is the Zigbee stack, the second one the application, as in Schneider’s package. EH-ZB-NANO (the Schneider hub, a USB .tar image) is not updated by the plugin.

• Copy the files to OTAFirmware/SCHNEIDER-WISER/ and keep their names: unlike other firmware (see Update device firmware), the plugin recognises these files by their name.
• A legacy device is offered only the files of its model, in the order above. A file of another model, or a current Wiser file, is never offered to it.
• The legacy files, and any file whose name starts with EH_, are never offered to another device. An EH_… file that is not in the table is offered to no device at all: the plugin log says so when the firmware folder is read.
• A device whose model is not known yet is offered no Schneider (0x105E) firmware.
• In Admin → Firmware, picking a legacy file for a device of another model is refused with This firmware is not for this device model.

The rest of this page gathers the protocol findings made in 2020-2021, with a ZiGate coordinator, while integrating the legacy Wiser devices.

Wiser Smeter

1. Get Active Endpoint List
   • 6 EndPoints : 0b, 0c, 0d, 0e, 0f, 10
2. Get Model name via read attribute 0x0000/0x0005
   • EH-ZB-BMS
3. For each EndPoint
   1. Simple Descriptor Request
      • Cluster In
        • 0x0000
        • 0x0001
        • 0x0003
        • 0x0009
        • 0x0702
        • 0xfe02
      • Cluster Out
        • 0x0019
   2. Bind 0x0019, 0x0000, 0x0001, 0x0000, 0x0003, 0x0702
4. For each EndPoint
   • Configure Reporting Cluster 0x0702
     • Attribute 0x0000 DataType: 0x25 Uint48 0x0000ffffffffffff , Min: 30, Max: 30
     • Attribute 0x0400 DataType: 0x2a Int24: 400, Min: 30, Max: 30
     • Attribute 0x0002 DataType: 0x25 Uint48 0x0000ffffffffffff, Min: 30, Max: 30
5. Read Attribute Cluster 0x0000 Attribute 0x0007
6. Read Attribute Cluster 0x0000 Attribute 0x0013
7. Read Attribute Cluster 0x0000 Attribute 0xe000
8. Read Attribute Cluster 0x0000 Attribute 0xe001

9. Read Attribute Cluster 0x0000 Attribute 0xe002

10. For each EndPoint
    1. Read Attribute Cluster 0x0702 Attribute 0x0000
    2. Read Attribute Cluster 0x0702 Attribute 0x0400
    3. Read Attribute Cluster 0x0702 Attribute 0x0002
    4. Read Attribute Cluster 0x0702 Attribute 0x0300

    5. Read Attribute Cluster 0x0702 Attribute 0x0301

    6. Read Attribute Cluster 0x0702 Attribute 0x0302
    7. Read Attribute Cluster 0x0702 Attribute 0x0801
    8. Read Attribute Cluster 0x0702 Attribute 0x5000

    9. Read Attribute Cluster 0x0702 Attribute 0x5001

    10. Read Attribute Cluster 0x0702 Attribute 0xe200
    11. Read Attribute Cluster 0x0702 Attribute 0xe201
    12. Read Attribute Cluster 0x0702 Attribute 0xe202
11. Command Specific: Cluster 0x0009 cmd: 0x50 payload 0x00 0x00 0x00

12. Command Specific: Cluster 0x0009 cmd: 0x50 payload 0x01 0x00 0x00

13. On EndPoint 0x0b
14. Read Attribute Cluster 0x0001 Attribute 0x0035
15. Read Attribute Cluster 0x0001 Attribute 0x0036

16. Read Attribute Cluster 0x0001 Attribute 0x0020

17. Write Attribute 0x0000 Attribute 0xe050 ( Data Type: Bool 0x10; Value: True 0x01 )

18. Command Specific: Cluster 0x0009 cmd: 0x50 payload 0x10 0x01 0x00
19. Command Specific: Cluster 0x0009 cmd: 0x50 payload 0x10 0x02 0x07
20. Command Specific: Cluster 0x0009 cmd: 0x50 payload 0x11 0x02 0x07
21. Command Specific: Cluster 0x0009 cmd: 0x50 payload 0x16 0x02 0x07

Wiser Smart Plug

Discovery steps

1. Get Active Endpoint List
2. Simple Descriptor Request
3. Get Model name via read attribute 0x0000/0x0005
4. Bind 0x0019
5. Bind 0x0000
6. Bind 0x0009
7. Bind 0x0003
8. Bind 0x0006
9. Bind 0x0702
10. Configure Reporting on Cluster 0x0702 Attribute 0x0000 ( Min: 600, Max: 600)
11. Configure Reporting on Cluster 0x0702 Attribute 0x0400 ( Min: 30, Max: 600)
12. Configure Reporting on Cluster 0x0006 Attribute 0x0000 ( Min: 0, Max 600)
13. Read Attribute 0x0000 Attribute 0x0007 (Power Source)
14. Read Attribute 0x0000 Attribute 0x0013 (Alarm Mask)
15. Read Attribute 0x0000 Attribute 0xe000 (Version logicielle processeur réseau)
16. Read Attribute 0x0000 Attribute 0xe001 (Version logicielle application)
17. Read Attribute 0x0000 Attribute 0xe002 (Version matérielle application)
18. Read Attribute 0x0702 Attribute 0x0000, 0x0400, 0x0300, 0x0301, 0x0302
19. Read Attribute 0x0702 Attribute 0x5a20 (Schneider Specific)
20. Read Attribute 0x0006 Attribute 0x0000 (ON/OFF)
21. Write Attribute 0x0000 Attribute 0xe050 ( Data Type: Bool 0x10; Value: True 0x01 )
22. Write Attribute 0x0000 Attribute 0x0010 (Location Description) ( Data Type: String 0x42; Value: string )

Metering Attributes

Wiser Actuator

1. Device Announcement

2. Active Endpoint Response
3. Read Attribute 0x0000/0x0005
   • Receive : EH-ZB-HACT
4. Simple Descriptor Request
   • Profile: 0x0104
   • DeviceID: 0x0301
   • Input Cluster
     • 0x0000
     • 0x0003
     • 0x0009
     • 0x0201
     • 0x0702
     • 0xfe02
   • Output Cluster
     • 0x0019
     • 0x0402
5. Bind Cluster 0x0019
6. Bind Cluster 0x0000
7. Bind Cluster 0x0009
8. Bind Cluster 0x0003

9. Bind Cluster 0x0201

10. Configure Reporting 0x0201 Attr: 0x0012 Type: 0x29 Min: 600 Max: 600
11. Configure Reporting 0x0702 Attr: 0x0000 Type: 0x25 Min: 600 Max: 600

12. Configure Reporting 0x0702 Attr: 0x0400 Type: 0x2a Min: 30 Max: 600

13. Read Attribute 0x0000 / 0x0007
14. Read Attribute 0x0000 / 0x0013
15. Read Attribute 0x0000 / 0xe000 (Manufacturer Specific)
16. Read Attribute 0x0000 / 0xe001 (Manufacturer Specific)
17. Read Attribute 0x0000 / 0xe002 (Manufacturer Specific)
18. Read Attribute 0x0201 / 0x0012
19. Read Attribute 0x0201 / 0x0015

20. Read Attribute 0x0201 / 0x0016

21. Read Attribute 0x0201 / 0xe011 (Manufacturer Specific)

22. Read Attribute 0x0702 / 0x0000
23. Read Attribute 0x0702 / 0x0400
24. Read Attribute 0x0702 / 0x0300
25. Read Attribute 0x0702 / 0x0301

26. Read Attribute 0x0702 / 0x0302

27. Read Attribute 0x0702 / 0x5a20

28. Write Attribute 0x0000 Attribute 0xe050 ( Data Type: Bool 0x10; Value: True 0x01 )
29. Write Attribute 0x0201 Attribute 0x0010 Type: 0x28 Value: 0
30. Write Attribute 0x0201 Attribute 0xe010 Type: 0x30 Value: 0x01

31. Write Attribute 0x0201 Attribute 0xe011 Type: 0x18 Value: 0x00

32. Write Attribute 0x0000 Attribute 0x5000 (Location Description) ( Data Type: String 0x42; Value: string )

Device Informations

EP 0b
ProfileID 0104
ZDeviceID 0301
Manufacturer Name : "Schneider Electric"
Model: EH-ZB-HACT

Application Version 0010
Cluster IN Count: 06
Cluster In 1: 0000 (Basic)
Cluster In 2: 0003 (Identify)
Cluster In 3: 0009 (Alarms)
Cluster In 4: 0201 (Thermostat)
Cluster In 5: 0702
Cluster In 6: fe02
Cluster OUT Count: 02
Cluster Out 1: 0019 (Over-the-Air Upgrade)
Cluster Out 2: 0402 (Temperature Measurement)

Cluster

• 0x0000/0xe011 Device Status
• 0x0000/0xe010 Current Mode
• 0x0000/0xe050 COMMISSIONING

• 0x0000/0x5011 ATTRIBUTE_BASIC_LANGUAGE

• 0x0201/0xe010 ATTRIBUTE_THERMOSTAT_ZONE_MODE

• 0x0201/0xe011 HACT Configuration

• 0x0201/0xe020 Fil Pilot Mode

Wiser Thermostat

Discovery process

1. Request Active End Point
2. Simple Descriptor Request
   • Ep: 0b
   • Cluster In:
   • 0x0000
   • 0x0001
   • 0x0003
   • 0x0009
   • 0x0204
   • 0xfe02 * Cluster Out
   • 0x0019
   • 0x0201
3. Read Attribute 0x0000 / 0x0005 ( Model Name )
   • EH-ZB-RTS
4. Read Attribute 0x0000 / 0xe000
   • SNP.R.04.01.14
5. Bind 0x0019
6. Bind 0x0201
7. Bind 0x0402
8. Bind 0x0000
9. Bind 0x0001
10. Bind 0x0009
11. Bind 0x0003

12. Bind 0x0204

13. Configure Reporting 0x0402 on Attribut 0x0000 / Min: 30 Max: 30 /Measured Value 0.01

14. Read Attribute Cluster 0x0000 on attribute 0x0007 ( Power Source )
15. Read Attribute Cluster 0x0000 on attribute 0x0013 ( Alarm Mask)
16. Read Attribute Cluster 0x0000 on attribute 0xe000
17. Read Attribute Cluster 0x0000 on attribute 0xe001
18. Read Attribute Cluster 0x0000 on attribute 0xe002
19. Read Attribute Cluster 0x0001 on attribute 0x0035, 0x0036, 0x0020

20. Read Attribute Cluster 0x0402 on attribute 0x0000 ( Temperature )

21. Write attribute Cluster 0x0000 on attribute 0xe050 DataType: 0x10 Value 0x01

22. Write Attribute Cluster 0x0000 on attribute 0x5011 DataType: 0x42 Value ‘en’

23. Read Attribute Cluster 0x0001 on attribute 0x0020
24. Write Attribute Cluster 0x0000 on attribute 0x0010 DataType: 0x42 Value is a string which give the name of the Zone

At a point of time the device is quering the controler

• Read Attribute Cluster 0x0201 on attribute 0xe010
  • Controler respond: DataType: 0x30 Value: 0x00

Device Informations

ProfileID : "0104"
ZDeviceID : "0302"
Manufacturer : "105e"
MacCapa: 0x80
DeviceType : "RFD"
LogicalType : "End Device"
PowerSource : "Battery"
ReceiveOnIdle : "Off"
Stack Version : "2"
ZCL Version : "1"
Max Buffer Size : "50"
Max Rx : "00a0"
Max Tx : "00a0"
Manufacturer Name : "Schneider Electric"
Model: EH-ZB-RTS

Ep: 0b
Cluster IN Count: 07
Cluster In 1: 0000 (Basic)
Cluster In 2: 0001 (Power Configuration)
Cluster In 3: 0003 (Identify)
Cluster In 4: 0009 (Alarms)
Cluster In 5: 0204 (Thermostat User Interface Configuration)
Cluster In 6: 0402 (Temperature Measurement)
Cluster In 7: fe02
Cluster OUT Count: 02
Cluster Out 1: 0019 (Over-the-Air Upgrade)
Cluster Out 2: 0201 (Thermostat)

Decoded scenario ( Schneider HUB, 1 Thermostat, 2 Actuators )

1. Thermostat sending local Temperature to:
   1. Hub by Report Attribute Cluster 0x0402 Attribute 0x0000
   2. actuators by Report Attribute Cluster 0x0402 Attribute 0x0000
2. Thermostat requesting Attribute from the Hub
   1. OccupedHeatingSetPoint by Read Attribute Cluster 0x0201 on Attribute 0x0012
   2. 0xe010 by Read Attribute Cluster 0x0201 on Attribute 0xe010 ( Hub returning Getting 8-Bit enum value: 0x01 )
   3. MaxHeatSetpointLimit by Read Attribute Cluster 0x0201 on Attribute 0x0016 ( Hub returning response 3500 )
   4. MinHeatSetpointLimit by Read Attribute Cluster 0x0201 on Attribute 0x0015 ( Hub returning response 50 )
3. each Actuators sending Instantaneous Demand to:
   1. Hub by Report Attribute Cluster 0x0702 Attribute 0x0400

At that stage, someone set a target temperature on the Application managing the HUB

1. Thermostat sending SetPoint to:
   1. HUB by using the command 0xe0 on Cluster 0x0201
   2. Actuators by using the command 0xe0 on Cluster 0x0201
2. HUB sending SetPoint to:
   1. Actuators by using the command 0xe0 on Cluster 0x0201
3. each Actuators sending Instantaneous Demand to
   1. Hub by Report Attribute Cluster 0x0702 Attribute 0x0400

Binding Thermostat with Actuator

1. Binding cluster Thermostat of Actuator with Thermostat
   • Source Actuator
   • Target Thermostat
   • Cluster 0x0201
2. Binding cluster Temperature Measurement of Thermostat with Actuator
   • Source Thermostat
   • Target Actuator
   • Cluster 0x0402

comments

• The HUB is acting as a Zigbee controler but not only as it is responding to cluster 0x0201 (Thermostat)
• Can the Zigate implement Cluster 0x0201 and store Attributes 0x0012, 0x0015, 0x0016 as well as when receiving command 0xe0 store the value into attribute 0x0012
• We should investigate what are the various values of Cluster 0x0201 on Attribute 0xe010 ( 8bit enum)

Decoding specifc cluster

Decoding Cluster 0x0201 Command Specific 0xe0

• This command seems to be used to set Setpoint

  ZigBee Cluster Lib Frame: 0x11
  Sequence number         : 0xc1
  Command                 : 0xe0
                          : 0x00
  Length                  : 0x01
  Value                   : 0x34 0x08 (Setpoint with LBHB , don't forgett the Endian ;-)
                          : 0xff
  

Decoding Cluster 0x0201 on Attribute 0xe010

• Data Type: 0x30 (8bit enum)
• 0xff - USER_MODE_USER_UNKNOWN
• 0x06 - USER_MODE_USER_MODE_HOLIDAY_FROST_PROTECTION
• 0x05 - USER_MODE_USER_MODE_HOLIDAY_OFF
• 0x04 - USER_MODE_USER_MODE_SCHEDULE_ENERGY_SAVER
• 0x03 - USER_MODE_USER_MODE_MANUAL_ENERGY_SAVER
• 0x02 - USER_MODE_USER_MODE_SCHEDULE
• 0x01 - USER_MODE_USER_MODE_MANUAL
• 0x00 - USER_MODE_USER_MODE_OFF

Decoding Cluster 0x0201 on Attribute 0xe011

ATTRIBUTE_THERMOSTAT_HACT_CONFIG

• 0x00 - Conventional (ON/OFF)
• 0x02 - Setpoint (set temperature)
• 0x03 - FIP - mode fil pilote

Reporting Configuration

# Simple Metering, current summation delivered.
# Always report after 30 seconds / 10 minutes whatever the change.
702_0_0_normal_interval_minimum=600
702_0_0_normal_interval_maximum=600
702_0_0_normal_reportable_change=281474976710655
702_0_0_fast_interval_minimum=30
702_0_0_fast_interval_maximum=30
702_0_0_fast_reportable_change=281474976710655

# Simple Metering, current max demand delivered.
# Always report after 30 seconds / 10 minutes whatever the change.
702_2_0_normal_interval_minimum=600
702_2_0_normal_interval_maximum=600
702_2_0_normal_reportable_change=16777215
702_2_0_fast_interval_minimum=30
702_2_0_fast_interval_maximum=30
702_2_0_fast_reportable_change=16777215

# Simple Metering, instantaneous demand.
# Commented out, we want to use values from MeteringFeatureImpl
#702_400_0_normal_interval_minimum=600
#702_400_0_normal_interval_maximum=600
#702_400_0_normal_reportable_change=16777215
#702_400_0_fast_interval_minimum=30
#702_400_0_fast_interval_maximum=30
#702_400_0_fast_reportable_change=16777215

# Temperature Measurement, current measured value, battery device
# Report interval: [1 minute; 10 minutes], change: 1,00 C
402_0_1_normal_interval_minimum=60
402_0_1_normal_interval_maximum=600
402_0_1_normal_reportable_change=100

# On/Off
# Report on-change and always after 10 minutes.
6_0_0_normal_interval_minimum=0
6_0_0_normal_interval_maximum=600
6_0_0_normal_interval_change=1

# Thermostat Set-Point, current measured value, battery device
# Report interval: 10 minutes whatever the change.
201_12_1_normal_interval_minimum=600
201_12_1_normal_interval_maximum=600
201_12_1_normal_reportable_change=32767

# Thermostat Local Temperature, current measured value, battery device
# Report interval: [1 minute; 10 minutes], change: 1,00 C
201_0_1_normal_interval_minimum=60
201_0_1_normal_interval_maximum=600
201_0_1_normal_reportable_change=100

# Thermostat Valve Position, current measured value, battery device
# Report interval: [1 minute; 10 minutes]
201_e030_1_normal_interval_minimum=60
201_e030_1_normal_interval_maximum=600
201_e030_1_normal_reportable_change=10

# Thermostat Open Window Detection Status
# Report on-change or otherwise never
201_e012_0_normal_interval_minimum=10
201_e012_0_normal_interval_maximum=600
201_e012_0_normal_reportable_change=1

# Thermostat Calibration Status, current calibration status, battery device
# Report interval: [0 minute; 10 minutes]
201_e031_1_normal_interval_minimum=10
201_e031_1_normal_interval_maximum=600
201_e031_1_normal_reportable_change=1

Thermostat attributes

| cluster | cluster name | Attribut | purpose | value | type|Read / Write | |—|—|—|—|—|—|—| |0x0000 | Basic | 0x0005 | Mode Identifier |EH-ZB-RTS |0x42| Read| |0x0000 | Basic | 0x0007 | Power source | 0x03 |0x30 (8bits enum)| Read| |0x0000 | Basic | 0x0020 | Location Description| Zigate zone |0x342| Write| |0x0000 | Basic | 0x0013 | Alarm Mask | 0x00 |0x18 (8bits bitmap)| Read| |0x0000 | Basic | 0xe000 | brickSWVersion | SNP.R.04.01.14 |0x42| Read| |0x0000 | Basic | 0xe001 | applSWVersion | RTS.R.04.01.00 |0x42| Read| |0x0000 | Basic | 0xe002 | version | RTS.R.00.00.2 |0x42| Read| |0x0000 | Basic | 0xe050 | Commissioned | 0x01 |0x10| Write| |0x0000 | Basic | 0x5011 | Language | en,fr,… |0x42| Write| |||||||| |0x0001 | Power Configuration | 0x0035 | Alarm Mask | 0x01 |0x18 (8bits bitmap)| Read| |0x0001 | Power Configuration | 0x0036 | Battery Voltage Minimum Threshold | voltage |0x20| Read| |0x0001 | Power Configuration | 0x0020 | Battery Voltage | voltage |0x20| Read| |||||||| |0x0201 | Thermostat | 0x0012 | Occuppied Heating Setpoint | Temperature |0x29| Read to Coordinnator| |0x0201 | Thermostat | 0x0015 | Min Heating Setpoint | Temperature |0x29| Read to Coordinnator| |0x0201 | Thermostat | 0x0016 | Max Heating Setpoint | Temperature |0x29| Read to Coordinnator| |0x0201 | Thermostat | 0xe010 | Thermostat Mode | 0x01 (Manual) |0x30| Read to Coordinnator| |||||||| |0x0402 | Thermostat Measurement | 0x0000 | Measure Value | Temperature |0x29| Read|

Thermostat commands

Sources of information:

• https://studylibfr.com/doc/2872316/compteur-d-%C3%A9nergie-sans-fil-s%C3%A9rie-em4300
• https://damrexelprod.blob.core.windows.net/medias/1951d12a-39f3-4317-86c8-f95b6fb13ac5
• http://www.kele.com/Catalog/22%20Thermostats_Controllers/PDFs/SE8000%20Series%20Zigbee%20Pro%20Integration%20Manual-2014.pdf