2026/09/03

KESS3 Supported Boot Glitch Unlock ECU List

KESS3 expands the range of operations available on the latest “Locked” Bosch MDG1 ECUs and introduces a new dedicated accessory: the KESS3 Unlock Module.

With the new Alientech KESS3 Unlock Module, you can perform the Unlock procedure directly in your workshop on supported Bosch MDG1 ECUs and then access their memories in BOOT mode.

 

This new accessory is specifically designed to perform the “Unlock” procedure directly in the workshop on MD1CS003, MD1CS069, MD1CP007, MD1CS012, MG1CS042, MD1CS004 (HW80), MG1CS031, MD1CP006, MD1CS005 and MG1CS002 ECUs. Once the unlock is complete, the ECU can then be programmed in BOOT mode, accessing its memories to perform reading, writing and a complete backup of the contents.

 

This update expands coverage across a wide range of diesel and petrol applications equipped with protected ECUs, produced from 2021 to the present day: from commercial vehicles to high-performance cars and SUVs.

The benefits for everyday workshop operations:

  • Unlock protected ECUs directly in the workshop
  • KESS3 Unlock Module dedicated to managing the BOOT “Unlock” procedure on supported ECUs
  • Access to ECU memories after the Unlock procedure
  • Reading and writing in BOOT mode
  • Complete backup of ECU contents
  • Greater coverage of multi-brand diesel and petrol applications
  • New opportunities to work on commercial vehicles, cars and high-performance SUVs

With KESS3 Unlock Module and KESS3, you can manage the entire operation directly in the workshop, maintaining control over every stage of the process: from the initial ECU unlock to memory access and subsequent programming in BOOT mode.

kess3 unlock module

The new protocols are available to KESS3 users with CAR BENCH/BOOT activation and an active subscription. The KESS3 Unlock Module is required to perform the BOOT “Unlock” procedure.

 

Technical focus

  • Connection: BOOT
  • ECU:
    • MD1CS003
    • MD1CS069
    • MD1CP007
    • MD1CS012
    • MG1CS042
    • MD1CS004 (HW80)
    • MG1CS031
    • MD1CP006
    • MD1CS005
    • MG1CS002
  • Production years: dal 2021
  • Marchi coinvolti: Audi, Bentley, Citroën, Cupra, DS, Fiat, Ford, Genesis, Hyundai, Kia, Land Rover, Opel, Peugeot, Porsche, Seat, Secma, Skoda, Toyota, Vauxhall, Volkswagen

Supported vehicles

  • Audi: A1, A3, A4, A5, A6, A7, A8, Q2, Q3, Q5, Q7, Q8, RS4, RS5, S4, S5, S6, S7, SQ5, TT
  • Bentley: Bentayga, Flying Spur
  • Citroën: Berlingo, C3, C3 Aircross, C4, C4 Cactus, C4 Picasso, C4 SpaceTourer, C5 Aircross, Jumpy, SpaceTourer
  • Cupra: Formentor, Leon
  • DS: 3, 7 Crossback, 9
  • FIAT: Ducato, Scudo
  • Ford: Ecosport, F-250 Super Duty, F-350 Super Duty, F-450 Super Duty, F-550 Super Duty, Focus, Kuga, Puma, Tourneo Connect, Transit Connect
  • Genesis: G70, G80, GV70, GV80
  • Hyundai: Palisade, Porter, Starex, Staria
  • Kia: New Bongo, Sorento, Stinger, Tasman
  • Land Rover: Defender, Discovery, Range Rover, Range Rover Sport, Range Rover Velar
  • Opel: Astra, Combo, Corsa, Crossland X, Grandland X, Mokka, Vivaro, Zafira Life
  • Peugeot: 2008, 208, 3008, 308, 5008, 508, Expert, Partner, Rifter
  • Porsche: Cayenne, Cayenne E-Hybrid, Cayenne S, Cayenne S E-Hybrid, Macan, Macan GTS, Macan S, Macan Turbo, Panamera, Panamera 4, Panamera 4 E-Hybrid, Panamera 4S, Panamera 4S E-Hybrid
  • Seat: Ateca, Leon, Tarraco
  • Secma: F16 Turbo
  • Skoda: Karoq, Kodiaq, Octavia, Superb, Yeti
  • Toyota: Proace City
  • Vauxhall: Astra, Combo, Corsa, Crossland X, Grandland X, Mokka, Vivaro, Zafira Life
  • Volkswagen: Arteon, Caddy, Golf, Passat, Polo, Talagon, Tiguan, Touareg, T-Roc

kess3 boot glitch unlock ecu list

Autotuner Update BMW MDG1 OBD Unlock Patch

Autotuner BMW DME8 UPDATE: Improved OBD Unlock Patch is now live! 

Great news for BMW tuning specialists! Autotuner is releasing our Improved OBD Unlock Patch across some BMW Bosch DME8 (MG1) ECUs lineup. 
This update is designed to prevent FSC activation-related fault codes (1B2904, 1F2102, 021204, 21B210) from appearing when writing custom tuning files! 
Supported ECUs: Bosch MG1CS024, MG1CS049, MG1CS201 (Tricore TC298 MCU)
Prevents FSC DTCs when flashing modified calibrations

Note: A new Bench unlock pass is required to apply this improved patch, even on ECUs previously unlocked.
Hardware Tip: Speed up your workbench setup with our dedicated BMW MDG1 Bench Cable for instant, safe pinout connections!

Affected ECU Models:

  • Bosch MG1CS024 (Tricore TC298)
  • Bosch MG1CS049 (Tricore TC298)
  • Bosch MG1CS201 (Tricore TC298)

Implementation Requirement:

Applying this Improved OBD Unlock Patch requires a new Bench unlock procedure, even for ECUs that were previously unlocked with an earlier version. Once unlocked on the bench with this new patch, you can flash via OBD without triggering FSC activation errors.

Make Bench connections effortless! To complete this bench unlock in seconds without pinout hassle, make sure to use our plug-and-play solution.

Autotuner Update BMW MDG1 OBD Unlock Patch

2026/09/02

Solve Land Rover P400 BECM BMS Fault Code P0AA0-66

Here comes the solution for Land Rover P400 BECM BMS hybrid battery module fault code P0AA066.

 

Fault Code P0AA066:
Fault code P0AA0-66 in Land Rover and Range Rover hybrid (PHEV) vehicles means “HV/EV battery positive contactor circuit – signal has too many transitions/events,” indicating the Battery Energy Control Module (BECM) refuses to close the high-voltage safety contactors because internal counters or signals exceeded their safe limits.

Land Rover P400 BECM BMS Fault Code P0AA0-66  1

Root case:
Internal BECM Chip Failure: Corrupted data or physical wear on an internal chip (such as the TC264 processor) inside the battery management unit.

Land Rover P400 BECM BMS Fault Code P0AA0-66  2

Contactor Cycle Overflow: The module records “positive contactor switching cycles exceeded” due to false or excessive signal transitions.

 

Repair Solution:

Full Unit Replacement: Dealerships typically want to replace the entire high-voltage battery pack or BECM unit at a very high cost.

Component-Level Repair: Specialized auto-electric workshops can fix this without replacing the whole battery by replacing and reprogramming the specific faulty processor chip on the BECM board.

1). Replace with a brand new MCU chip.

Land Rover P400 BECM BMS Fault Code P0AA0-66  3

Land Rover P400 BECM BMS Fault Code P0AA0-66  4

2). Reflash data to the new MCU chip with proper programmers (such as JLR Pluto, Launch X431 PAD VII).Land Rover P400 BECM BMS Fault Code P0AA0-66  5

EoneBoss HK001 Hyundai Incorrect Part Number Solution

Problem:

Failed to unlock Hyundai smart key with EoneBoss HK001 key tool.

Error: incorrect part number.

Any solution?

EoneBoss HK001 Hyundai Incorrect Part Number  1

EoneBoss HK001 Hyundai Incorrect Part Number  2

EoneBoss HK001 Hyundai Incorrect Part Number  3

EoneBoss HK001 Hyundai Incorrect Part Number  4

EoneBoss HK001 Hyundai Incorrect Part Number  5

EoneBoss HK001 Hyundai Incorrect Part Number  6

EoneBoss HK001 Hyundai Incorrect Part Number  7

EoneBoss HK001 Hyundai Incorrect Part Number  8

Solution:

HK001 can only unlock a used smart key with part number 95440xxxxx.
This key is not supported yet.

Keydiy KD-X6 and KD-X4 Comparison

The new Keydiy KD-X6 tablet key programmer is expected to arrive in December 2026. It is available for pre-order now.

What is the difference between Keydiy KD-X4 and new KD-X6 tablet?

KD-X4 vs KD-X6

ModelKeydiy KD-X6

 

 

Keydiy KD-X4

 

Appearancekeydiy kd-x6keydiy kd-x4
Price$1,500-$2,200USD$680
Mercedes-Benz Functions Built-in Mercedes-Benz FBS3 support for full series addition, as well as Mercedes-Benz 4th, 4.5th, and 5th generation partial functions. More Mercedes-Benz functions will be added in future updates.– Not supported
Audi/Porsche MLB Built-in (all original KD-MP functions, direct operation, no computer required)– Not supported (acquisition and calculation require an additional KD-MP device)
VW/Audi/Skoda MQB48 Built-in (all original KD-MP functions, direct operation, no computer required)– Not supported (acquisition and calculation require an additional KD-MP device; supports cluster disassembly for adding keys)
VW/Audi 5C/5D– Supported– Supported
VW/Audi/Skoda 4th Generation– Supported– Supported
BMW CAS/FEM/BDC– Supported (CAS series requires adapter configuration)– Supported (CAS series requires adapter configuration)
DOIP– Built-in– Supported (requires additional adapter cable)
Motorcycles– Supported (requires additional adapter cable)– Supported (requires additional KD motorcycle adapter and adapter cable)
Immobilizer Module Programming– Supported– Supported
Cloud Diagnosis (C-Client)– Supported (free upgrades)– Not supported
Toyota/Ford/Land Rover/Nissan/Volvo– Supported– Supported (some scenarios require additional adapters and cables)
Remote Generation– Supported (reserved for Mercedes-Benz series key functions)– Supported
Chip Identification & Cloning– Supported (additional support for identifying new and old Mercedes-Benz keys)– Supported (does not support identifying new and old Mercedes-Benz keys)
Other– Supports standalone operation, no third-party devices required– Does not support standalone operation; requires third-party devices (e.g., phone, tablet)

What are the differences compared to the KD-X4?
It’s standalone, no PC or mobile phone needed.
Built-in DoIP.
Built-in KD-MP MLB & MQB48 function.
Supports Benz FBS3 add key & AKL. and it is currently in the works regarding FBS4/FBS5.
It supports Cloud-C remote function.

 

The KD-X6 comes with 2 configurations: Standard version and full version.

 

KD-X6 Standard version vs full version:

License comparison

Function NameKD-X6 Standard Version (KD Coins/USD)KD-X6 Professional/Full Version (Activation Status/Cost)
MQB Match/Audi BCM23500KD-Coins or 75USDIncluded (Free)
BMW G/BMW FEM Match3500KD-Coins or 75USDIncluded (Free)
VOLVO(LYNK CO) Match3500KD-Coins or 75USDIncluded (Free)
BMW Moto Match7000KD-Coins or 100USDIncluded (Free)
Ducati Moto Match7000KD-Coins or 100USD (Also requires KD-MOTO Adapter)Included (Free)
BMW CAS Match2000KD-Coins or 30USDIncluded (Free)
Porsche BCM Match2000KD-Coins or 30USDIncluded (Free)
Read MQB / MLB key (Former MP Function)9000KD-Coins or 150USDIncluded (Free)
Benz FBS3 MatchRequires separate adapter purchaseIncluded (Free)

Adapter/Accessory  comparison:

Accessory ItemKD-X6 Standard VersionKD-X6 Professional Version
KD-X6 Main UnitIncludedIncluded
13#Key Chip Reading AdapterIncludedIncluded
New OBD Function Extension CableIncludedIncluded
KD-EPA Wiring HarnessIncludedIncluded
KD-EPA Expansion Programming AdapterIncludedIncluded
EEPROM AdapterIncludedIncluded
DB15-OBD CableIncludedIncluded
FT-30P CAN Adapter CableIncludedIncluded
USB TypeC Charging & Data CableIncludedIncluded
SMB Decryption CableIncludedIncluded
Smart key Unlock CableIncludedIncluded
Acquisition AntennaIncludedIncluded
KD-6P Remote Generate CableIncludedIncluded
DB25 Programming CableIncludedIncluded
KD-MOTO Adapter (Main-unit)Not Included (To-purchase-separately: USD 340)Included
KD-MOTO DB15 Connection CableIncludedIncluded
UNIV-DB25 (Universal DB25 Programming Cable)IncludedIncluded
DB25-FBS3 AdapterNot Included (To-purchase-separately: USD 150)Included
SPIN-FBS3 All-Key-Lost Key SimulatorIncludedIncluded

KD-X6 Standard version vs full version:

KD-X6 full version has all adapters included. Standard version requires purchasing KD-MOTO and Benz FBS3 adapters separately.

KD-X6 full version comes with all licenses by default. Standard version requires activate license separately.