Hormann Garage Opener

in fact, there is support for this protocol in the flipper, it may need to be tweaked a little. if it doesn’t bother you, could you collect all the RAW records for this protocol in a heap and post it again. so I can download and see everything at once.

i also got an Hormann bi-secure.
What can i do go get the FlipperZero work with it?

Could you help me out with this bro i cant seem to get mine right

I beg you to check. and I need 2+ more entries from these key fobs (DIFFERENT) I think they always transfer from 8 units, I need to check this and set it as a pattern

@SkorP Hope this helps. I have the Hormann HSE2-868-BS remote. I’ve recorded both the up and down buttons though I’ve always used the up one to open the garage, I think you can use either.

Please let me know if the recordings aren’t right as this is my first time recording one. (Recorded on 868.35 @ AM650.
Hormann Remote.zip (3.9 MB)

I can provide HSP 4 BS if it helps.

Cool ! Thanks for adding this as well.

Confirmed that the codes are now read with flipper 0.74.2 into which the PR was merged.

One remark: it records Btn 0x1 (iii), 0x2 (iv), 0x4 (ii) and 0x8 (i) for the different buttons, but they do not correspond to the front side button number (the Roman numerals). Not sure if this is relevant in any way.

As for the values; my python script gave us something like:

0000.0000.1001.1010.xxxx.xxxx.xxxx.xxxx.1000.0111.1100.0

The new code by SkorP:

Filetype: Flipper SubGhz Key File
Version: 1 
Frequency: 868350000
Preset: FuriHalSubGhzPresetOok650Async
Protocol: Hormann HSM
Bit: 44
Key: 00 00 0F F6 5x xx x7 83

There, the bits are flipped with regard to my python example (0=1):

0000.0000.1001.1010.xxxx.xxxx.xxxx.xxxx.1000.0111.1100.0
1111.1111.0110.0101.xxxx.xxxx.xxxx.xxxx.0111.1000.0011.1
   F    F    6    5    x    x    x    x    7    8    3

That matches. So, that’s sound, as far as I can tell.

It will take a while before I can test replay though, as I’m not in the vicinity of my garage door atm.

For the attached HORMANN.sub by @Str0nArm.

1111.1111.1001.1000.1101.1000.1011.1010.1111.0100.0011.1
   F    F    9    8    D    8    B    A    F    4    3

That should produce this file:

Filetype: Flipper SubGhz Key File
Version: 1 
Frequency: 868350000
Preset: FuriHalSubGhzPresetOok650Async
Protocol: Hormann HSM
Bit: 44
Key: 00 00 0F F9 8D 8B AF 43

I output the nibble responsible for the button, and in different remotes the layout of the board may differ

I have HSE2-868-BS and current RC and read doesn’t work for me.

The latest 0.74.2 works for me and it detects a Hormann opener.

It doesn’t seem to detect my Chinese copy from Aliexpress. Original works fine.

RAW-20230105-021457.sub (5.9 KB)

This is produced by my Chinese copy and not recognized by Flipper.

Tested. Works.

Thanks @SkorP!

my horman key was scanned by flipper and it works! thanks!

Hello Sedje,

tried your python script with uploaded files and i had same results like u (one change in my code is line - it = subghz_file_to_usecs(sys.argv[1]) i changed 1 to 0. problem with IndexError: list index out of range. but when i tried my own RAW read, result is empty (no errors just empty). I cant find where is the problem. Can u try to look? ty
garage.sub (22.0 KB)

What frequency and modulation?

Hi there @robotacek,

the IndexError means that you did not supply a filename. You should invoke the script as:

python3 ./hoermann-hsm4-868mhz-test.py garage.sub

If you don’t pass garage.sub as argv[1], you get the IndexError. Without a filename, it wouldn’t know which file to read…

Hi guys!

I have a remote as mentioned above HS4-868-BS and I cannot get it to work in any way with FZ, even though this is an older thread (and I have the current firmware).
How did you guys manage to get it to work? Which modulation should I use for RAW read?
Although I have tried all and replay does not open the door. In the record screen I get 3 peaks when pressing the button.