Wisdom Share Smart Cloud TV Remote Codes: The Jio Remote Setting That Works
Pick Reconnect in the Jio set-top box's Universal Remote Setup. Reverse-engineered from the CVTE_MSD338 firmware: the TV only accepts NEC 0x00/0xF7, so Samsung and Sony profiles can never work. Full IR code table inside.
By iamkunal9 · Published
TL;DR
- On the Jio set-top box remote, choose “Reconnect” in Universal Remote Setup. That's what made the Jio remote's TV keys control my Wisdom Share Smart Cloud TV.
- The TV only understands one remote code set: NEC, address 0x00, sub-address 0xF7, 38 kHz. Power is
0x0C, volume0x10/0x0F, mute0x11, source0x18. - Samsung and Sony profiles can never work, whatever the bezel logo or the remote's Samsung-like shape suggests. The firmware doesn't decode their codes.
- I found this by pulling the IR driver out of the TV's own firmware, so the full key table below comes straight from the TV.
The problem
Wisdom Share Smart Cloud TVs are cheap Android TVs sold under many names (mine even has a Sony logo on the bezel). The brand isn't in any universal remote's list, so a Jio set-top box remote can't control it out of the box. The obvious guesses fail: the original remote looks like a Samsung remote, but the Samsung profile does nothing, and neither does Sony.
To check your TV, open the factory menu (Menu then 1 1 4 7 on these boards) or Settings → About. If the production model, board and upgrade filename match, the codes below apply. Other Wisdom Share boards may use a different remote.
How to set up the Jio remote for a Wisdom Share TV
- On the Jio set-top box open Settings → Remote & Bluetooth (Remote & Accessories on older software) → Universal Remote Setup → Begin. The option only appears while the Jio remote shows as connected over Bluetooth; some set-top box software (JMSD200A 23.1.11) hid it until an update.
- Select Reconnect as the TV brand.
- Point the remote at the TV and answer the volume test by watching the TV's volume bar, not the set-top box's.
- Use the top-left TV Power key for the TV (the top-right one powers the set-top box). Holding the (i) key for 3 seconds switches the volume keys between TV and set-top box. If volume changes the box instead of the TV, that's the toggle.
Reconnect is Reliance Digital's own TV brand, and its remotes use exactly the code set this TV listens for: in the captured Reconnect remotes on Flipper IRDB, power, volume, mute, menu, source, OK, the arrows, channels, digits and colour keys all have the same commands as the TV's firmware. If your Jio box offers several Reconnect codes, try each until the TV's volume moves.
Why the Samsung and Sony profiles don't work
A TV only reacts to IR frames whose address matches what its driver accepts. This firmware's IR driver accepts exactly three addresses:
- 0x00 / 0xF7: the TV's own remote. All normal keys.
- 0x88 / 0x90: CVTE's factory service remote. Don't send random codes here; one of them puts the TV into a factory “aging” mode.
- 0xFF / 0xFF: an unused second slot with no keys mapped to it.
Samsung TVs use address 0x07 / 0x07, and Sony uses a different protocol altogether, so the TV silently ignores both. The remote's Samsung-style layout (P.MODE, P.SIZE, A/B/C/D colour keys) is only a look-alike shell. HDMI-CEC is also disabled in this build (ro.CVT_EN_CEC=0), so the set-top box can't fall back to controlling the TV over HDMI.
Full IR code table
Every key the TV understands, read from the firmware's keymap. The last column is the 32-bit value shown by IRremoteESP8266's IRrecvDumpV2 and accepted by irsend.sendNEC(value, 32); Arduino-IRremote shows the same keys as Address=0xF700 Command=0x...
| Command | TV action | Remote button | Reconnect capture | IRremoteESP8266 value |
|---|---|---|---|---|
| 0x0C | POWER | Power | power | 0x00EF30CF |
| 0x10 | VOLUME_UP | Vol + | vol+ | 0x00EF08F7 |
| 0x0F | VOLUME_DOWN | Vol − | vol- | 0x00EFF00F |
| 0x11 | VOLUME_MUTE | Mute | mute | 0x00EF8877 |
| 0x18 | TV_INPUT | Source | tv_av | 0x00EF18E7 |
| 0x12 | MENU | Menu | menu | 0x00EF48B7 |
| 0x2D | HOME | Home / Apps | — | 0x00EFB44B |
| 0x1C | BACK | Back / Exit | exit | 0x00EF38C7 |
| 0x17 | DPAD_CENTER | OK | ok | 0x00EFE817 |
| 0x13 | DPAD_UP | Up | up | 0x00EFC837 |
| 0x14 | DPAD_DOWN | Down | down | 0x00EF28D7 |
| 0x15 | DPAD_LEFT | Left | left | 0x00EFA857 |
| 0x16 | DPAD_RIGHT | Right | right | 0x00EF6897 |
| 0x0E | CHANNEL_UP | CH + | ch+ | 0x00EF708F |
| 0x0D | CHANNEL_DOWN | CH − | ch- | 0x00EFB04F |
| 0x00 | 0 | 0 | 0 | 0x00EF00FF |
| 0x01 | 1 | 1 | 1 | 0x00EF807F |
| 0x02 | 2 | 2 | 2 | 0x00EF40BF |
| 0x03 | 3 | 3 | 3 | 0x00EFC03F |
| 0x04 | 4 | 4 | 4 | 0x00EF20DF |
| 0x05 | 5 | 5 | 5 | 0x00EFA05F |
| 0x06 | 6 | 6 | 6 | 0x00EF609F |
| 0x07 | 7 | 7 | 7 | 0x00EFE01F |
| 0x08 | 8 | 8 | 8 | 0x00EF10EF |
| 0x09 | 9 | 9 | 9 | 0x00EF906F |
| 0x1E | SOURCE_HDMI | HDMI | — | 0x00EF7887 |
| 0x1D | PICTURE_MODE | P.MODE | picture mode | 0x00EFB847 |
| 0x46 | ASPECT_RATIO | P.SIZE | — | 0x00EF629D |
| 0x48 | INFO | Info | — | 0x00EF12ED |
| 0x4D | PROG_RED | Red (A) | red | 0x00EFB24D |
| 0x4E | PROG_GREEN | Green (B) | green | 0x00EF728D |
| 0x4F | PROG_YELLOW | Yellow (C) | yellow | 0x00EFF20D |
| 0x50 | PROG_BLUE | Blue (D) | blue | 0x00EF0AF5 |
| 0x45 | MEDIA_PLAY_PAUSE | — | — | 0x00EFA25D |
| 0x0B | MEDIA_STOP | — | — | 0x00EFD02F |
| 0x4A | MEDIA_REWIND | — | — | 0x00EF52AD |
| 0x4C | MEDIA_FAST_FORWARD | — | — | 0x00EF32CD |
| 0x49 | MEDIA_PREVIOUS | — | — | 0x00EF926D |
| 0x1B | MEDIA_NEXT | — | — | 0x00EFD827 |
| 0x1F | USB | — | — | 0x00EFF807 |
| 0x40 | CHANNEL_LIST | — | — | 0x00EF02FD |
| 0x43 | CHANNEL_RETURN | — | — | 0x00EFC23D |
| 0x1A | IR_MOUSE | — | — | 0x00EF58A7 |
| 0x59 | CVTE_APP_LIST | — | — | 0x00EF9A65 |
| 0x5A | DEL | — | — | 0x00EF5AA5 |
| 0x5B | IR_WWW | — | — | 0x00EFDA25 |
Use a phone with an IR blaster
If your phone has an IR blaster, an app that accepts Pronto hex (for example irplus) can send these directly. Built-in “Samsung TV” remotes in phone apps won't work, for the reason above. Pronto codes for the main keys (one frame plus a repeat burst, 38 kHz):
Power (command 0x0C, 0x00EF30CF)
0000 006D 0022 0002 0156 00AB 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 0015 0015 0015 0015 0040 0015 0040 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 061D 0156 0056 0015 0E49
Volume up (command 0x10, 0x00EF08F7)
0000 006D 0022 0002 0156 00AB 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 061D 0156 0056 0015 0E49
Volume down (command 0x0F, 0x00EFF00F)
0000 006D 0022 0002 0156 00AB 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 0040 0015 0040 0015 0040 0015 0040 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 061D 0156 0056 0015 0E49
Mute (command 0x11, 0x00EF8877)
0000 006D 0022 0002 0156 00AB 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 0040 0015 0015 0015 0015 0015 0015 0015 0040 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 061D 0156 0056 0015 0E49
Source (command 0x18, 0x00EF18E7)
0000 006D 0022 0002 0156 00AB 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 061D 0156 0056 0015 0E49
Menu (command 0x12, 0x00EF48B7)
0000 006D 0022 0002 0156 00AB 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 0040 0015 0015 0015 0040 0015 0015 0015 0015 0015 0040 0015 0015 0015 0015 0015 0015 0015 0040 0015 0015 0015 0040 0015 0040 0015 0015 0015 0040 0015 0040 0015 0040 0015 061D 0156 0056 0015 0E49
How I found it: reverse engineering the firmware
Guessing brands wasn't getting anywhere, so I went to the TV's firmware. The short version, for anyone with a different Wisdom Share board who wants to repeat it:
- Find the exact firmware. The factory menu shows the upgrade filename. A public firmware catalogue had a
TP.MS338.PB801_512M_4G_India_Ref59package containingallupgrade_msd338_4G_ref59.bin, built 2017-11-14, the same date as the TV's software. Itscvte.propnamed the same board (BD_TP_MS338_PB801_A10) and product, and the vendor MD5 matched. I only read it; nothing was flashed. - Unpack it. The
.binstarts with an MStar U-Boot script listing each partition's offset (filepartload … tvconfig). Carving outtvconfiggives an ext4 image;systemis in lzop chunks. - Find the IR driver. The boot ramdisk's
init.messi.rcloads/config/krl/ir/rc-keymap-tv.koandmdrv-ir.ko, and/configpoints totvconfig. This Android 4.4 build has noir_config.ini; the settings are compiled in. - Read the accepted addresses.
mdrv-ir.koships with debug symbols. Its header variables default to0x00/0xF7,MDrv_IR_Initwrites them to the hardware decoder, and the interrupt handler accepts only that pair, an unused0xFF/0xFFslot, and a hard-coded0x88/0x90factory remote. Nothing in userspace changes them. - Read the key table.
rc-keymap-tv.koholds acvte_tvtable of scancode → keycode pairs; joining it with the firmware'sVendor_3697_Product_0001.klgives the TV action for every command. - Find a brand that sends the same codes. Searching public IR databases for address 0x00/0xF7 turned up captured Reconnect and Silver TV remotes with identical commands. Reconnect was in the Jio list, and it worked.
Along the way, a forum ir_config.ini from a newer Wisdom Share TV suggested NEC 0x00/0xBF and a Samsung slot. Those don't apply to this firmware, which is why reading the TV's own firmware mattered.
If none of the Jio codes work
- Phone IR blaster: use the Pronto codes above.
- ESP32 translator: set the Jio remote to Samsung (which this TV ignores), and have an ESP32 with an IR receiver and IR LED near the TV re-send each key as the TV's code, e.g. Samsung power
0xE0E040BF→sendNEC(0x00EF30CF, 32). Because the TV ignores the Samsung frame, nothing fires twice. - Learning universal remote or Broadlink/Tuya IR blaster: these can learn the original remote directly.
Limitations
- Verified for one firmware build (above). Wisdom Share is used on many boards; others may use a different remote code set.
- The Jio brand list and code sets live in the set-top box software and can change with updates.
- Media keys differ slightly between Reconnect remote variants; power, volume, mute, source, menu and navigation are the same.
FAQ
- Which TV brand should I select on the Jio remote for a Wisdom Share Smart Cloud TV?
- Reconnect. In the Jio set-top box go to Settings → Remote & Bluetooth (or Remote & Accessories) → Universal Remote Setup → Begin, pick Reconnect, and answer the volume test by watching the TV's own volume bar. On a CVTE_MSD338_512M Wisdom Share TV this worked first time. Reconnect remotes use the same NEC 0x00/0xF7 code set the TV listens for.
- Why don't the Samsung or Sony profiles work on a Wisdom Share TV?
- The TV's IR driver only accepts NEC frames with address 0x00 and sub-address 0xF7 (plus a CVTE factory remote at 0x88/0x90). Samsung remotes send address 0x07/0x07 and Sony uses a different protocol (SIRC), so the TV ignores them completely. This is in the firmware, not a setup mistake.
- What IR protocol does the Wisdom Share Smart Cloud TV remote use?
- NEC extended at 38 kHz, address 0x00, sub-address 0xF7. Power is command 0x0C, volume up 0x10, volume down 0x0F, mute 0x11, source 0x18, menu 0x12. In IRremoteESP8266 terms Power is 0x00EF30CF.
- Can I control a Wisdom Share TV from my phone?
- Yes, if your phone has an IR blaster (many Xiaomi, Redmi and POCO phones do). Load the Pronto codes from this post into an app that accepts Pronto hex, such as irplus. Phone apps' built-in 'Samsung TV' remotes will not work on this firmware.
- Does HDMI-CEC let the Jio box control a Wisdom Share TV?
- Not on this firmware: CEC is switched off at build time (ro.CVT_EN_CEC=0), so the set-top box cannot turn the TV on or change its volume over HDMI.
- Does this apply to every Wisdom Share TV?
- No. Wisdom Share is a software skin used by many unbranded and rebadged TVs on different CVTE boards. These codes are verified for the CVTE_MSD338_512M / BD_TP_MS338_PB801_A10 build with allupgrade_msd338_4G_ref59.bin. Newer Android 9 Wisdom Share boards may use a different remote. Check the identifiers in the Applies-to box first.
Sources
- JioRemote quick start guide (Universal Remote Setup, (i) key volume toggle)
- Flipper IRDB: Reconnect TV captures (NEC 00/F7)
- Flipper-IRDB: Silver LE410004 capture (NEC 00/F7)
- XDA: Wisdom Share new System (CVTE_MSD338_512M owners)
- JP1 Remotes: Chinese Android smart TV ir_config.ini (CVTE factory remote 0x88/0x90)
- OnlyTech: Universal Remote Setup missing on some Jio STB firmware
- Kazmi Elecom: TP.MS338.PB801 firmware catalogue (#33 512M_4G_India_Ref59)
- dipcore/mstar-bin-tool (MStar firmware format)
- IRremoteESP8266