Providing frequently asked questions and answers about FlashAir. If you do not find the answer you're looking for, please post your question to the Developer Forum.

FlashAir is an SDHC memory card with embedded Wireless LAN functionality. General Wi-Fi devices like PCs and smartphones can access the FlashAir when it's inserted into other electronic devices.
To learn more about FlashAir, please visit the website.
http://www.toshiba-components.com/FlashAir/
The FlashAir may not be responsive when used with certain host devices. Please contact the device manufacturer.
The FlashAir may also not respond if it has received too many HTTP requests simultaneously. We recommend no more than two requests at a time.
For general usage inquiries (e.g. Compatible devices, how to use iOS/Android apps, how to connect to WiFi, etc), FlashAir failure, and connection trouble, please contact local dealers or Toshiba Semiconductor & Storage Products Company directly.
http://toshiba.semicon-storage.com/eu/company/world-wide/global-sales.html
For general usage inquiries (e.g. Compatible devices, how to use iOS/Android apps, how to connect to WiFi, etc), FlashAir failure, and connection trouble, please contact local dealers or Toshiba Semiconductor & Storage Products Company directly.
http://toshiba.semicon-storage.com/eu/company/world-wide/global-sales.html
You can download files and a file list from a Web browser on PC that wirelessly connected to FlashAir. Also, you can perform it with API. For more information, see Overview of FlashAir Application Development.
There is no way to extend the reach of radio waves of FlashAir itself. However, if there is a wireless LAN access point such as a router as a repeater, there is a way connecting to a distant FlashAir by setting FlashAir to station mode and relaying wireless LAN. For more information about setting FlashAir to station mode, see Advanced Tutorials - Using Station Mode.
The SSID must be between 1 - 32 characters, without spaces.
The default network key is "12345678".
Please set Network security key using 8 - 64 characters without spaces. You can also set it to "0", which will disable the security key.
For general usage inquiries (e.g. Compatible devices, how to use iOS/Android apps, and how to connect WiFi), FlashAir failure, and connection trouble, please contact local dealers or Toshiba Semiconductor & Storage Products Company directly.
http://toshiba.semicon-storage.com/eu/company/world-wide/global-sales.html
Anyone can check the SSID in the CONFIG file. Password characters you set will be replaced with "*" by restarting FlashAir, so it can be unknown to anyone other than the setter.
The master code is a 12-digit hexadecimal number which is used as a password to set the SSID (APPSSID) and network security key (APPNETWORKKEY).
If the master code is not yet set, please set it via config.cgi before changing any other settings.
The master code is written in the CONFIG file on the FlashAir.
The CONFIG file is located in /SD_WLAN/, and you can open it with general text editors.
Please confirm the browser terminal and the wireless LAN parent device are compatible with protocols FlashAir supports (NetBIOS over TCP/IP and Bonjour). For more information, see "Supported protocols" in Advanced Tutorials - Using Station Mode.
By default, the function of uploading data to FlashAir is disabled. For more information about how to activate it and upload data, please refer to the following pages.

Yes, you can. There are two methods, to edit the CONFIG file and to execute a Lua script.

Method 1: Editing the CONFIG file

Add and edit the following specification to the CONFIG file.

From top to bottom, disabling DHCP, IP address you want to specify for FlashAir, subnet mask of wireless LAN, and default gateway of wireless LAN (Note: Please configure the value according to an environment of a wireless access point).

DHCP_Enabled=NO
IP_Address=192.168.43.10
Subnet_Mask=255.255.255.0
Default_Gateway=192.168.43.1

Method 2: Executing a Lua script

Insert the following Lua function to a script to be executed.

From left to right, IP address you want to specify for FlashAir, subnet mask of wireless LAN, and default gateway of wireless LAN. (Note: Please configure the value according to an environment of a wireless access point).

fa.ip("192.168.11.2", "255.255.255.0", "192.168.11.1")

For more information about the each above, see API Guide - CONFIG and Lua Function Reference - ip.

FlashAir does not support to EAP-TLS authentication method.
The "/" slash at the end of the folder name is not necessary. Please delete it and try again.
command.cgi?op=101 returns the number of non-hidden files/folders.
On the other hand, command.cgi?op=100 returns the number of all files/folders.
command.cgi?op=105 is available only when the FlashAir is set as an Access Point.
To learn more about Access Point mode, please read Wireless LAN mode.
command.cgi?op=111 is available only when the FlashAir is set to boot Wireless LAN functionality when the card is turned on (APPMODE=4).
To learn more about APPMODE, please read Wireless LAN mode.
Please confirm "UPLOAD=1" is written in the CONFIG file. Without this setting, upload.cgi is disabled. For more information, see upload.cgi.
Host devices cannot recognize changes made by upload.cgi. Therefore, it can occur where a file list of a host device is not updated even though the file has already been deleted. For more information, see upload.cgi.

You can avoid browser caching by setting additional parameters so as to be different URLs each time CGI is issued as follows:

http://flashair/command.cgi?op=...&TIME=100	// First GET request
http://flashair/command.cgi?op=...&TIME=101	// Second GET request
http://flashair/command.cgi?op=...&TIME=102	// Third GET request
// Repeat similarly to the above.
Information about CONFIG file, please see API Guide - CONFIG.
Bridge operation is not available while wireless LAN is active. If you want to switch to Internet Pass-Thru Mode with Lua script, we recommend you to use the manual wireless LAN mode by setting "APPMODE=0" to the CONFIG.
Scan operation is not available while wireless LAN is active. By temporarily disabling a wireless LAN activation with Disconnect, It will be available.

It can be confirmed by using Control SD Interface as user I/O, and also Lua script as follows.

local response = fa.request("http://flashair/command.cgi?op=190&CTRL=0x00&DATA=0x00")
local gpio = cjson.decode(response)
local status = gpio["STATUS"]
if status == "OK" then
-- GPIO function is enabled
elseif status == "SDERR" then
-- GPIO function is disable
end

The response of CGI executed in the first line of the above code will be, for example,

{"STATUS":“OK", "CTRL":"0x00", "DATA":"0x00"}

, and a status of GPIO function can be determined by the value of STATUS.

  • When GPIO function is enabled: "OK"
  • When GPIO function is disabled: "SDERR"
The power consumption of FlashAir is within the range of SDHC standards (up to 0.72W at 3.6V).
However, the current fluctuation during start-up and transmission may differ from a generic SDHC card.
Unfortunately, there is no way to change the power parameters.
Unfortunately, it is not open to the public.
Web server works with the root directory of FlashAir flash memory (a part accessible as SD card) as a document root. It will always start-up when FlashAir is powered on.
Although it can be used as an SD card, the web server will not work properly. For the FlashAir web server to work properly, the file system must be FAT.
FlashAir supports Shift-JIS for the first generation, and UTF-8 in the range of ASCII, Japanese and Chinese for the second generation and later.

Regarding Internet Pass-Thru Mode, the following vulnerability exists.

  1. FlashAir accepts a connection from a device on STA (station) side LAN without authentication.
  2. Files and data saved in FlashAir can be altered or an arbitrary Lua script can be executed.

"1." occurs when all of the following conditions are satisfied.

  • Internet Pass-Thru Mode is enabled. (Refer to APPMODE)
  • FlashAir and a device on STA side LAN are connected to the same access point.
  • FlashAir IP address has been known.

"2." occurs when the following conditions are satisfied in addition to the above three.

  • Upload (write) setting via wireless LAN is enabled. (Refer to UPLOAD)

The vulnerability can be avoided by setting to require authentication to the FlashAir web server.

By default, both Internet Pass-Thru Mode and upload setting via wireless LAN are disabled and there are no impacts from the vulnerability. These settings will not be enabled unless a user explicitly changes CONFIG file directly or using Apps.

For more information about how to change these settings, see advanced tutorials - Using Internet Pass-Thru Mode and advanced tutorials - Uploading to FlashAir.

Yes. The following tutorials will be helpful to building an upload environment.

In addition, in the case of uploading image files, you can also use an image function of FlashAir Developer service FlashAir IoT Hub.

Please contact the author mentioned in the article.