-
Notifications
You must be signed in to change notification settings - Fork 9
Home
Honeywell Evohome CH/DHW systems utilize a 868 Mhz RF protocol called RAMSES II.
Using easily-obtained, relatively inexpensive hardware, this RF traffic can be harvested for useful information, and there is also means to inject commands into the network.
Other systems, including Hometronic and other non-Honeywell systems also use this protocol, or similar/older protocols such as EnviraCOM, or the Residential Network Protocol - YMMV.
This wiki's purpose is to document the data structures and protocols of RAMSES II. It is a work-in-progress and contributions are encouraged.
This is a sequence of RAMSES II packets sent over the RF network:
045 I --- 01:145038 --:------ 01:145038 30C9 018 0008310107FD02076503077D04075C050758
053 I --- 30:082155 --:------ 30:082155 1F09 003 000537
055 RQ --- 07:045960 01:145038 --:------ 10A0 006 0013740003E4
045 RP --- 01:145038 07:045960 --:------ 10A0 006 0013880003E8
045 I --- 12:010740 --:------ 12:010740 0008 002 00BE
045 I --- 04:056057 --:------ 01:145038 3150 002 0326
045 I --- 34:064023 --:------ 34:064023 3120 007 0070B0000000FF
The basic packet structure a number of fields separated by spaces, with a variable-length payload at the end:
aaa XX bbb DEVICE_ID DEVICE_ID DEVICE_ID CODE nnn PAYLOAD.....
The three main elements of any packet are:
- the 3 device ids (e.g.
04:056057
,01:145038
) for controllers, TRV, DHW relays, etc. - the packet verb (
I
,W
,RQ
,RP
) and code (e.g.30C9
,10A0
, and0008
) - the payload (e.g.
0008310107FD0...
), which can be decoded further
Detailed descriptions of the packet structure and each command code is available within this wiki.
The 'standard' device for interfacing with Evohome RF networks is the Honeywell HGI80.
These will be the most compatible option, but are relatively expensive and can be difficult to obtain. However, they cannot be made to emulate other Evohome devices, such as a TRV.
Alternatively, there are several 'hobbyist' USB devices which may be used, including:
-
NanoCUL (modified firmware has been published)
-
In-circuit Signalduino (modified firmware to be published)
-
Seeedstudio RFBee (firmware to be published)
These devices may be less compatible than a HGI80, but are easily available and very likely cheaper. They can be used to emulate Evohome devices (even, theoretically, an Evohome controller).
This work builds upon the work by CrazyDiamond, Hydrogenetic and fullTalgoRythm. We're very grateful to them and the many other contributors.
This documentation has been developed by observing the messages sent between the various Honeywell devices and is not supported or endorsed in any way by Honeywell or Resideo. The use of this information to control or monitor your home heating system is your own responsibility although we not aware of any risk of damage to devices through the use of these commands.
0001
RF Check0004
Zone name0008
Relay demand0009
Relay failsafe000A
Zone config000C
Zone actuators0016
RF signal test0100
Localisation0404
Zone schedule0418
System fault1030
Mix zone config1060
Battery state10A0
DHW setpoint10E0
Device info1100
Boiler relay info1260
DHW temperature12B0
Window sensor1F09
System Sync1F41
DHW mode1FC9
RF bind1FD4
Opentherm ticker22C9
UFH setpoint22D9
Boiler setpoint2309
Zone setpoint2349
Setpoint override2E04
Controller mode30C9
Zone temperature313F
System datetime3150
Heat demand3220
Opentherm message3B00
Actuator sync3EF0
Actuator info3EF1
Actuator unknown
0002
External sensor0005
Zone management0006
Schedule sync000E
Unknown01D0
Unknown01E9
Unknown042F
Unknown1280
Outdoor humidity1290
Outdoor temp12A0
Indoor humidity2249
Now/next setpoint22D0
UFH unknown22F1
Ventilation unit command22F3
Ventilation unit temp. high2389
Unknown2D49
Unknown3120
Unknown31D9
HVAC Unknown31DA
HVAC Unknown31E0
HVAC Unknown