2018/07/16

Keydiy KD900+ Program Nissan Fairlady 350Z Remote Key

KD900+ remote maker test report: successfully made a new remote to Nissan Fairlady 350Z!

In detail…

Car: Nissan Fairlady 350Z
keydiy-kd900-nissan-350z-1
keydiy-kd900-nissan-350z-2
Auto key programmer: KD900+ Mobile KEYDIY remote maker
keydiy-kd900-nissan-350z-3

Connection: connect the chip with the KD900 device
keydiy-kd900-nissan-350z-4
keydiy-kd900-nissan-350z-5
keydiy-kd900-nissan-350z-6
keydiy-kd900-nissan-350z-7
KD900+ software: Mobile KD KEYDIY
keydiy-kd900-nissan-350z-8
Car option: Nissan
keydiy-kd900-nissan-350z-9
keydiy-kd900-nissan-350z-10
keydiy-kd900-nissan-350z-11
Remote control: N7-SQUARE 315MHz B series
keydiy-kd900-nissan-350z-12
keydiy-kd900-nissan-350z-13
keydiy-kd900-nissan-350z-14
keydiy-kd900-nissan-350z-15
Remote generation:
keydiy-kd900-nissan-350z-16
Result: successful!
keydiy-kd900-nissan-350z-17
Test: confirmed to work perfectly!
keydiy-kd900-nissan-350z-18
keydiy-kd900-nissan-350z-19
keydiy-kd900-nissan-350z-20
keydiy-kd900-nissan-350z-22
keydiy-kd900-nissan-350z-23
keydiy-kd900-nissan-350z-24
keydiy-kd900-nissan-350z-25
Job’s done! Success!

2018/07/15

How to do immo off with Kess V2?

Here are handy tips and guides for you guys who are trying to do immo off by kess v2 ecu master.


What is immo off? And what is partial immo off?

IMMO off is simply a modded dump of the ecu flash or eeprom or separate immo box to tell the car no immobilisers function
In some immo files you see the letters T or P . T means total, so immo off/disabled. P stands for Partial that one is used to make the ecu virgin and to reprogram new keys (if I am not wrong). the car is drivable only if the immobilizer is connected and running.
used when diagnosing non start car problems not a good idea but helps in trouble shooting.
another place is used when key matching messes up to determine if it is immobilisers or something else playing up


Immo off: should you use kess v2 or ktag?

First. Look here. I have collected some questions and answers from users.

Q: I was wondering if it’s possible to immo off a read or backup read done by a kess v2. need ktag to read separate files?
A: Ktag should work, almost impossible to separate file read by KESS

Q: Flash read by ktag will be full flash and not only maps as kess ?
A: With ktag you have full eprom and maps.(flash).
With kess you read only maps.

Q: Don’t i need full flash for immo off and not just maps ?
A: Most you need eeprom read. You need ktag for that

Q: when i load a ecu file with kess v2 via obdCan i turn off the immo in this file ?
A: Some ecus you can’t because you need desolder eeprom some others you can’t no immo off and others immo in flash you can turn off

Q: Any chance to do immo off with Kess?
A: Either you have bad read or its a slave file, nothing we can do with this file …
and you need Ktag or Galletto to make full read, OBD read can’t do immo off.


So, for immo off, Ktag is confirmed to work and Kess yes or no is a question.

Reason why some people think Kess V2 is not for immo off:
KESS that is ecu programmer, you can read and write ecu , but it does not modify files.

But actually, is it possible to do immo off using Kess V2?

It Depends; on the vehicle make and model!
Because some vehicles have an EEPROM which runs the security function while others which only have a flashfile with a rolling code embedded there in, depending on 2 or 3 other member but mostly gateway Ecu on transponder or drive authorization mechanism.
So you need to know how vehicle security of the respective vehicle ecu works. Some vehicle you can use Kess V2 (can only read and write part of flash(at times not everything therein)) then you need a hex editor to edit the sectors therein either to make key(if you know key ID) or immo off.

There are too many old ecus with immo off in flash, you could do it with kess, but too many others need work in eeprom so will need another tool or even desolder, for those in mcu need proper tools.
Regards.

Tested vag edc15vm! Able to write immo off with Kess V2!


Good luck!

2018/07/11

How to Clone BMW Siemens MSDxx ECUs with Original Ktag

How to: clone Siemens MSDxx (MSD80, MSD81, MSD85, MSD87, MSD85.4) ECUs for BMW SSM vehicles using original Ktag K-suite ecu programmer.

To use this protocol of communication you have to remove and open the ECU. It is a risky operation, to be done with great care and caution to avoid damaging the ECU beyond repair.
After opening the ECU and before proceeding with reading and/or programming, you are strongly advised to reconnect the unit to the vehicle and start the engine, to make sure it still works.
To use this protocol you also need to connect to the ECU connector through a cable, and solder one or more wires to the programming pads.
Incorrect or poorly made connections and solderings may damage the ECU, often beyond repair.
Under no circumstances we shall be liable for any damage caused to the ECU during the opening, due to connections and soldering that do not comply with the instructions provided in this manual. If you are using Ktag clone, you are at your risk.

Notice
When writing the modified file, the checksum of the data may last several minutes, depending on the performances of your computer.
The first time you work on the ECU, before opening the ECU, you need to retrieve the protection password. Follow the instructions provided for each model to connect to the connector.

Retrieve Password
1.Remove the ECU from the vehicle;
2. Connect to the ECU connector to retrieve the password, according to the pinout provided for each model connection instructions:
● Plug-in 986: SIEMENS MSD80 IROM TC1796
ktag-clone-bmw-msd80-1
Material needed:
•Cable 14P600KT02
a.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-clone-bmw-msd80-2
Pin Color Description
Pin 1,1    Red       +12V
Pin 4      Noir       Ground
Pin 22    White    CAN-H
Pin 44    Green    CAN-L
b.Click on the Read Password button.
ktag-clone-bmw-msd80-3
Plug-in 989: SIEMENS MSD85 IROM TC1796
ktag-msd85-1
Material needed:
•Cable 14P600KT02
a.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-msd85-2
b.Click on the Read Password button
ktag-msd85-3
● Plug-in 991: SIEMENS MSD81 IROM TC1796
ktag-msd81-1
Material needed:
•Cable 14P600KT02
a.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-msd81-2
b.Click on the Read Password button
ktag-msd81-3
● Plug-in 992: SIEMENS MSD87 IROM TC1796
ktag-msd87-1
Material needed:
•Cable 14P600KT02
a.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-msd87-2
b.Click on the Read Password button
ktag-msd87-3
● Plug-in 1012: SIEMENS MSD85.4 IROM TC1796
ktag-msd854-1
Due to the ECU high power consumption, you have to supply the K-TAG with an external battery or a stabilized power supply (+12/24V – 5A).
Material needed:
•Cable 14P600KT02
•Battery supply cable 144300TALI
•External Battery or regulated power supply (+12/24V – 5A)
a.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-msd854-2
b.Connect the cable 144300TALI to the tool and the external battery;
c.Click on the Read Password button.
ktag-msd854-3
3. Proceed with the normal operations to read and write.

Recommendation

1.Open the ECU, taking care in not damaging the parts inside;
2.Reconnect the ECU to the vehicle and start the engine, in order to make sure that it is still working and has not been damaged in the opening;
3.Remove again the ECU from the vehicle;
4.Select the right plug-in;
5.Always make a backup copy of the ECU before Reading and / or Writing.

Instructions

1.Connect to the ECU according to the pinout provided for each models;

● Plug-in 986: SIEMENS MSD80 IROM TC1796
ktag-clone-bmw-msd80-1
The pins Boot can be found on the right side of the ECU.
ktag-clone-bmw-msd80-4
Available connection mode
Click on the selected mode for the instructions.
♦ Direct connection
Material needed:
•Cable 14P600KT02
•Solder wire
a.Solder a wire to the Boot pin shown in the picture;
b.Solder a wire to the two CNF1 pins shown in the picture;
ktag-clone-bmw-msd80-5
c.Connect the cable 14P600KT02 to the ECU connector according to the pinout below
ktag-clone-bmw-msd80-6
d.Remove all soldered wires before reinstalling the ECU on the vehicle.

● Plug-in 989: SIEMENS MSD85 IROM TC1796
ktag-msd85-1
The pins Boot can be found on the right side of the ECU.
ktag-msd85-4
Available connection mode
Click on the selected mode for the instructions.
♦ Direct connection
Material needed:
•Cable 14P600KT02
•Solder wire
a.Solder a wire to the Boot pin shown in the picture;
b.Solder a wire to the two CNF1 pins shown in the picture;
ktag-msd85-5
c.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-msd85-6
d.Remove all soldered wires before reinstalling the ECU on the vehicle.
● Plug-in 991: SIEMENS MSD81 IROM TC1796
ktag-msd81-1
The pins Boot can be found on the right side of the ECU.
ktag-msd81-4
Available connection mode
Click on the selected mode for the instructions.
♦ Direct connection
Material needed:
•Cable 14P600KT02
•Solder wire
a.Solder a wire to the Boot pin shown in the picture;
b.Solder a wire to the two CNF1 pins shown in the picture;
ktag-msd81-5
c.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-msd81-6
d.Remove all soldered wires before reinstalling the ECU on the vehicle.
● Plug-in 992: SIEMENS MSD87 IROM TC1796
ktag-msd87-1
The pins Boot can be found on the right side of the ECU.
ktag-msd87-4
Available connection mode
Click on the selected mode for the instructions.
♦ Direct connection
Material needed:
•Cable 14P600KT02
•Solder wire
a.Solder a wire to the Boot pin shown in the picture;
b.Solder a wire to the two CNF1 pins shown in the picture;
ktag-msd87-5
c.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-msd87-6
d.Remove all soldered wires before reinstalling the ECU on the vehicle.
● Plug-in 1012: SIEMENS MSD85.4 IROM TC1796
ktag-msd854-1
The pins Boot can be found on the right side of the ECU.
ktag-msd854-4
Due to the ECU high power consumption, you have to supply the K-TAG with an external battery or a stabilized power supply (+12/24V – 5A).
Available connection mode
Click on the selected mode for the instructions.
♦ Direct connection
Material needed:
•Cable 14P600KT02
•Solder wire
•Battery supply cable 144300TALI
•External Battery or regulated power supply (+12/24V – 5A)
a.Solder a wire to the Boot pin shown in the picture;
b.Solder a wire to the two CNF1 pins shown in the picture;
ktag-msd854-5
c.Connect the cable 14P600KT02 to the ECU connector according to the pinout below:
ktag-msd854-6
d.Connect the cable 144300TALI to the tool and the external battery;
e.Remove all soldered wires before reinstalling the ECU on the vehicle.
2.Select the right plug-in;
3.Make reading and programming

How to Read – Backup – Write using a Ktag Master tool
Backup: To make a full backup of the ECU, select Backup in the Reading box and click on Read.
Reading: Remove the check mark at the Backup option, select the component you want to read and then click on Read.
Notice: The term Maps at the side of the component indicates where the maps for engine control are stored.
Writing: Remove the check mark at the Restore option, select the component you want to write and then click on Write.
Notice: The term Maps at the side of the component indicates where the maps for engine control are stored.
Restore: To restore the backup file to the ECU, select Restore in the Writing box and click on Write.
ktag-clone-bmw-msd80-7