Miniserver and Gen 1 repair

[sqlmap]

Hello everyone,

Recently, my friend gave me two Loxone Miniservers for inspection: one Gen1 model and one of the newer generation. Both units appear to have suffered lightning damage, most likely through the Ethernet port.

🟢 Gen1 Miniserver (AT91SAM9G20-based)

After applying 24V power, I noticed the CPU (Atmel AT91SAM9G20) was heating up rapidly, which is a typical sign of an internal short circuit. Upon further diagnosis, I confirmed that both the CPU and the SPI Flash chip (AT25SF041), which stores the firmware, were shorted.
I proceeded to:

• Replace the CPU and the Flash chip.
• Flash the firmware onto the new chip.

As a result, the Gen1 Miniserver now boots successfully, is accessible via Loxone Config, and the onboard relays function correctly. I haven’t completed full testing yet, but so far it looks promising.

---

🔴 Newer Generation Miniserver (RK3328-based)

The newer Miniserver, however, suffered far more severe damage. One of the Ethernet traces was physically lifted from the PCB, clearly showing the extent of the surge.
Initial diagnosis revealed similar issues:

• RK3328 CPU and AT25SF041 Flash chip were both damaged.
• I also replaced the RK805-1 PMIC (responsible for generating multiple voltages for the CPU and peripherals) and the MP2491C, a 24V-to-5V buck converter.

Unfortunately, even after these replacements, the Miniserver still doesn't power up.
Additional Observations:

• The LINK and TREE interface chips (8-pin transceivers) are shorted.
• The EEPROM connected to the RK805-1 PMIC is damaged. This chip likely contains configuration data or power sequencing instructions required by the PMIC to correctly initialize the system.
• The STM32G471 microcontroller responsible for DI and DO is shorted as well. It appears to be running custom firmware, possibly protected from being read or cloned. The chip is not in a standard off-the-shelf configuration, making sourcing and programming a replacement difficult without official support.

My Questions:

I’m reaching out to the community for any advice or experience with similar repairs:

• Has anyone managed to fully repair a newer-generation Miniserver after such extensive damage?
• Is there any way to obtain a firmware dump or a replacement STM32G471 pre-programmed for DO/DI control?
• Is it possible to extract firmware from a working Miniserver, or are these microcontrollers protected?
• Given the state of this board, would you consider it beyond repair, especially due to firmware and part availability limitations?

Thanks in advance to anyone who can share knowledge or advice. I understand these devices are complex and proprietary, but I’m trying to learn more and possibly revive the unit if it’s within reach.

Best regards,
Jonas

[sqlmap]

If anyone has the SPI chip firmware for the Loxone Miniserver Gen2 and is willing to share it, I would greatly appreciate it.
I already have the firmware for a unit with NANYA RAM chips, but I'm specifically looking for the firmware for a unit with IM4G16D3F RAM.
I guarantee that I will not use the Miniserver's serial number for any purpose, or you can clear it before sharing if preferred.