Home

SHS3321-NexT-Firmware

Firmware and Instructions to rollback an SHS3321 to accept a Dangerous Things NexT implant as an NFC tag.

Undertake at your own risk, this was tested on one (1) (two!!) shs3321 that previously would not accept my NexT tag

warning

It has been brought to my attention that using a NeXT or any other 7 byte UUID card may over flow into the next ID location. Until further testing can be performed it is reccomend to leave a space both before and after 7 byte credentials.

(For example only use odd numbered ID locations)

Requirements:

1. PICKit 3/4 (Other Options TBD)

   • PICKit 3 Ebay US
   • PICKit 3 Ebay China
   • PICKit 3 AliExpress

2. SHS3321 board GC41-00833A Rev.02 (You don't need to disassemble it as far as I have below, but do remove all the batteries from the housing)

3. Molex PicoBlade 15134 Series Number Wire to Board Cable Assembly 1 Row, 5 Way any length (You'll need to cut this in half and solder 0.1" headers to fit the PICKit3)

4. 0.1" header pins or jumper cables

5. Soldering Iron

6. Small Heatshrink

7. MPLAB IPE v5.45

ICSP connector to PICkit3 Connections

ICSP is a 5 pin version of the PICkit3 connector, match white arrow to white arrow

PICkit3	SHS3321 ICSP
1 (White Triangle)	1 (White Triangle)
2	2
3	3
4	4
5	5
6	NOT CONNECTED

MPLAB IPE Settings

1. Enter advanced mode
   • Opperate -> Family: All Families
   • Opperate -> Device: PIC18f66k22
   • Opperate -> Tool: "PICkit3 S.No: XXXXXXXXXXX"
   • Power -> Power Target circuit from PICkit3: CHECKED
   • Power -> Voltage Level: 3.25
   • Memory -> Preserve EEPROM Memory: CHECKED
   • Memory -> Leave the rest default
   • Production -> Allow Export Hex: CHECKED
   • Production -> Allow Import Hex file: CHECKED
2. Opperate -> Tool -> Connect

Backup Original Firmware

1. Opperate -> READ
2. File -> Export -> HEX

Flash NeXT Firmware

1. Opperate -> Hex File -> Browse: "SHS3321 - PIC18F66K22 - NeXT.hex"
2. Opperate -> Program

Expected "Output - IPE":

2020-11-02 16:18:41 +1100 - Hex file loaded successfully.

2020-11-02 16:18:48 +1100 - Programming...

The following memory area(s) will be read:

EEData memory

2020-11-02 16:18:52 +1100 - Memory Updated: CRC32 checksum value is based on the loaded hex file.

Device Erased...

Programming...

The following memory area(s) will be programmed:

program memory: start address = 0x0, end address = 0x617f

configuration memory

EEData memory

User Id Memory

Programming/Verify complete

2020-11-02 16:19:03 +1100 - Programming complete