Keydiy KD-X4 Update TIB Copy Toyota 8A Smart Key Function

 Keydiy KD-X4 key programmer released new software update on August 3rd, 2026.

 

New Function:

Direct clone/copy Toyota/Lexus/Subaru 8A smart keys using TIB smart remote.

Making work faster and more efficient.

Supported versions (8A):
88 | A8 | A9 | AA | B8 | B9 | BA | F3 F4

 

Benifits:
*Direct version of the smart key.
*No need to reprogram the remote.
*While maintaining all the original functions of the key.

Update the KD-X4 device today and benefit from the latest KEYDIY innovations.

 

Q: It clone a KEYDIY TIB smart key to another KEYDIY TIB smart key or from OEM to TIB?

A: Clone an original (OEM) key to TIB.

 

Q: What is the difference between TB and TIB remote? Can i use TB remote?

A: Use TIB remote ONLY.  TB remote can generate some remotes that TIB cannot, i.e Volvo 8A chip key.

TIB also replaces TDB remote.

 

Q: Will KD-MAX also copy Toyota 8A using TIB?

A: Yes, KD-MAX also receives this upgrade.

 

Q: Need to program on car afterwards?

A: No, direct clone a new TIB remote. No programming required.

How to copy/clone Toyota 8A smart key with KD-X4 using TIB remote?

Go to TIB Copy 8A (Toyota/Lexus/ Subaru) function.

Place the original vehicle key onto the KD-X4 induction coil.
Make sure the key’s induction coil is positioned at the KD-X4 induction coil area.

Follow the prompts and press the key button to collect data.

The device will display remote control options. Select the correct remote option.
Then place the TIB remote into the KD-X4 induction coil.

Generate the remote.
Press any button to start generation.
Remote generation successful.
Test the remote and emergency functions.

 

To improve accuracy, please note the following:

• Do not perform the detection inside the vehicle.

• Keep as far away as possible from low-frequency signal interference.

• Place the remote control induction coil into the detection coil during testing.

• Replace the original remote’s battery with a fresh one if available.

 

User review:

Remote control works flawlessly. No sync code issue. No need to use the remote to unlock the door-using the door handle works just as perfectly.

EngineDance X5 Adds 2021- MDG1 Boot Glitch Unlocking

 Good news! EngineDance X5 update MD1 MG1 boot glitch unlocking function in August 2026.

Starting now, MDG1 is unlocked in your hands.
By EngineDance X5.

Unlock Bosch MDG1 ECUs (After 2021) directly in your workshop.
New Boot Glitch Unlock released.
Read & Write on bench after unlocking.

No shipping
No Remote
No waiting

Bosch MD1CE100 TC299
Bosch MD1CE101 TC299
Bosch MD1CS069 TC299
Bosch MD1CS089 TC299
Bosch MD1CS012 TC298
Bosch MD1CS003 TC298
Bosch MG1CS042 TC298
Bosch MD1CP006 TC298
……

Notes: Requires MD1/MG1 BOOT-GLITCH Adapter

Exclusive Unique Advantage of EngineDanceX5

EngineDance –
The only provider integrating two independent unlocking technologies applicable to Bosch MD1 ECUs.

Two available unlock solutions for Bosch MD1— Boot Glitch / Remote
Boot-Glitch On-Site Unlock
Requires ECU case opening, supports on-site unlocking at your workshop for most TC29x ECUs.

Remote Online Unlock
No shipping, no ECU disassembly. Part number verification is required to check compatibility.

Supported ECU List:

Bench After boot Unlock (after 2021)
Bosch MD1CE100 TC299-MAN Trucks
Bosch MD1CE100 TC299-Volkswagen Trucks
Bosch MD1CE100 TC299-SITRAK
Bosch MD1CS089 TC299-HOWO
Bosch MD1CE100 TC299-FAW
Bosch MD1CE100 TC299-WEICHAI
Bosch MD1CE100 TC299-SDEC/Hongyan
Bosch MD1CE101 TC299-IVECO FPT
Bosch MD1CE101 TC299-New Holland
Bosch MD1CE101 TC299-Case Construction
Bosch MD1CE101 TC299-Case IH
Bosch MD1CE101 TC299-Landini Tractors
Bosch MD1CE101 TC299-Steyr
Bosch MD1CE102 TC299-Iveco
Bosch MD1CS012 TC298-Hyundai/KIA
Bosch MD1CS012 TC298-Genesis
Bosch MD1CS003 TC298-Stellantis(PSA)
Bosch MG1CS042 TC298-Stellantis(PSA)
Bosch MD1CP006 TC298-Ford
Bosch MD1CS069 TC299-IVECO
Bosch MD1CS069 TC299-Fiat Ducato
Bosch MD1CS069 TC299-Case IH Farmall
Bosch MD1CS069 TC299-John Deere
Bosch MD1CS069 TC299-Landini Tractors
Bosch MD1CS069 TC299-Massey Ferguson
Bosch MD1CS069 TC299-McCormick
Bosch MD1CS069 TC299-New Holland
Bosch MD1CS069 TC299-Steyr
Bosch MD1CS089 TC299-ISUZU
Bosch MD1CS089 TC299-IVECO
Bosch MD1CS089 TC299-Deutz-Fahr
Bosch MD1CS089 TC299-Maxus
Bosch MD1CS089 TC299-GWM Cannon Poer
Bosch MD1CS089 TC299-GWM Haval
Bosch MD1CS089 TC299-SAIC
Bosch MD1CS089 TC299-Foton
Bosch MD1CS089 TC299-JAC
Bosch MD1CS089 TC299-JMC
Bosch MD1CS089 TC299-HOWO
Bosch MD1CS089 TC299-BAIC
Bosch MD1CS089 TC299-MG
Bosch MD1CS089 TC299-Dr Motor
Bosch MD1CS089 TC299-EVO
Bosch MD1CS089 TC299-ICH-X
Bosch MD1CS089 TC299-Same Tractors
Bosch MD1CS089 TC299-Lamborghini Tractors

 

Bench After Remote Unlock (after 2021)
[0281020645] DONGFENG-MD1CE108-P1892-SPC5898
[0281020654] YUNNEI-MD1CE108-P1961-SPC5898
[0281020695] YUNNEI-MD1CC878-P2270-SPC5898
[0281020692] YUCHAI-MD1CC878-P2061-SPC5898
[0281037071] IVECO-MD1CS089-P2096-TC299
[0281037078] IVECO-MD1CS069-P1768-TC299
[0281036675] JAC-MD1CS089-P2031-TC299
[0281020677] JAC-MD1CS089-P1968-TC299
[0281036215] JMC-MD1CS089-P1853-TC299
[0281036399] JMC-MD1CS089-P1741-TC299
[0281037336] JMC-MD1CS089-P1853-TC299
[0281036372] JMC-MD1CS089-P1917-TC299
[0281020652] ISUZU-MD1CE108-P1963-SPC58
[0281039460] JIM-MD1CS089-P2327-TC299
[0281039581] JIM-MD1CS089-P2213-TC299
[0281039581] JIM-MD1CS089-P2266-TC299
[0281039679] JIM-MD1CS089-P1967-TC299
[0281039593] JIM-MD1CS089-P2266-TC299
[0281037245] MAXUS-MD1CS089-P1816-TC299
[0281036116] MAXUS-MD1CS089-P1816-TC299
[0281036114] MAXUS-MD1CS089-P1817-TC299
[0281037248] MAXUS-MD1CS089-SK83-TC299
[0281035944] MAXUS-MD1CS089-P1826-TC299
[0281020693] SDEC-MD1CE100-P1958-TC299
[0281020600] SAICHONGYAN-MD1CE101-P1603-TC299
[0281021127] SAICHONGYAN-MD1CE101-P1603-TC299
[0281020801] QUANCHAI-MD1CC878-P1966-SPC5898
[0281020621] QUANCHAI-MD1CC878-P1966-SPC5898
[0281020599] SITRAK-MD1CE100-P1708-TC299
[0281021190] SITRAK-MD1CE100-P1158-TC375
[0281020755] SANY-MD1CC878-P2089-SPC5898

2M2 Tank 2 Pro vs 2M2 Shadow Warrior

 What is the difference between 2026 new 2M2 Shadow Warrior and old 2M2 Tank 2 Pro CNC key cutting machine?

2M2 Tank 2 Pro: more powerful motor and more robust structure.
Shadow Warrior 2M2: more compact and lightweight. The new 2M2 has LED indicators, built-in battery (5000 mAh), and tool box.
In terms of functions, key compatibility, and cutting quality, they are practically identical.

EoneBoss HK001 HK002 App Cannot find Device Solution

 Problem:

Tried to unlock the Hyundai smart key using EoneBoss HK002 (or HK001) key tool, the App kept scanning and no response. Any solution?

Cause: Location services are not enabled on the phone.

 

Solution:

Turn on location services on your mobile phone and try again.

It will work without problem.

To turn on location services, open your phone’s Settings app, go to your location or privacy menu, and turn the master switch to the on position.

Which Tool to Add 2026 Nissan Qashqai Smart Key?

 Problem:

Tried to add a smart key to a 2026 Nissan Qashqai J12 with Lonsdor K518 Pro. I connected the 40 pin bcm cable and communication failed. Also tried xhorse key tool plus and device did not connect. How to program a Nissan Qashqai 2026 key?

Here is the clue.

It’s got updated security in 2026. Lonsdor, Xhorse, Autel all cannot do it.

Use dealer tool (Nissan Consult) to program a new key/all keys lost.

Or clone a new smart key.

Copy an NCF29Ax smart key using Keydiy KD-X4/NXP killer etc. KD requires a C29Ax71 dedicated remote (without buttons). NXP killer does have a Nissan-style aftermarket remote.

But the cloning method carries a risk of losing synchronization.

Flex Recover PSA MD1CS003 and Fix P3028 Error

 We are sharing a case study on how a customer repaired the PSA Peugeot 3008 MY2020 Bosch MD1CS003 ECU and resolved the P3028 error using Magic Motorsport Flex programmer. For sharing purposes only.

Here is the solution for a stubborn issue with the MD1CS003 ECU on PSA vehicles. The problem involves failed unlock attempts and the infamous P3028 error, which triggers an anti-tuning / immobilizer lock approximately 20 minutes after starting the engine.

Below is the exact step-by-step timeline of what he did, where it went wrong, and—most importantly—how he finally fixed it.

 

P3028 Fault Code:

On PSA vehicles with a Bosch MD1CS003 engine control unit, error code P3028 triggers an anti-tuning or immobilizer lock condition—often causing a car not start after roughly 20 minutes following a modified flash or failed bench unlock.

Resistor and Boot Recovery: Failed boot/bench unlocks sometimes require desoldering and resoldering specific board resistors, restoring a full original backup via boot mode, and recalculating correct checksums.

The Procedure & The Issue:
​Resistor removal (desoldering).
​Flex Boot Glitch connection setup.
​Connection established successfully.
​Read Full Backup.
​Unlock attempted – Unlock FAILED.
​Wrote backup file back to the ECU.
​Second unlock attempt – Unlock FAILED.
​Resoldered the resistor back in place.
​Successful connection established in Bench Mode.
​Wrote backup file from boot.

​Tested on the vehicle: The engine started.
​After 20 minutes: No-start condition, accompanied by DTC P3028 (Engine Control Unit Software Incompatibility).

​Created a Full Off solution via StageX. The engine started, but once again, after 20 minutes, it resulted in a no-start condition.

​Attempted standard synchronization procedures (Ignition ON for 10 minutes, vehicle locked for 20 minutes, BSI sleep cycles). Ineffective. The car still refused to start.

 

​The Working Solution:
He rewrote the Full Off flash file with the checksum manually corrected by StageX. Crucially, immediately after writing the modified flash, he rewrote the ORIGINAL EEPROM from the initial full backup.

 

Final Result:
Rewriting the original EEPROM reset the security handshake and cleared the internal immobilizer flag. The vehicle is now fully functional, zero DTCs, and starts perfectly on the first try, even after sitting idle for over 3 hours.

​Hope this saves some of you a headache on the bench!

 

Flex Boot Glitch Unlock Citroen C5 MG1CS042 ECU

 MG1CS042 successfully done !

It's a Citroen C5 Aircross with Bosch MG1CS042 encrypted ECU.

Boot glitched unlocked with Magic Motorsport Flex programmer.

Then read and write on bench mode.

FormulaFlash Update MD1 MG1 ECU Boot Unlocking

 Good news!  2020.06- Bosch MD1 MG1 locked ECUs unlocking is coming soon on the FormulaFlash ecu programmer.

Function:
Unlock ECU in boot mode.
Read ECU
Write ECU
Checksum correction
Supported encrypted ECUs:

Brand	ECU (locked)	Protocol
VAG Bosch	MG1CS163	TC298
BMW	MD1CP032	TC299
Ford	MD1CP006	TC298
JLR	MD1CP017	TC298
Stellantis	MG1CS042	TC298
Isuzu	MD1CS089	TC299
BMW	MG1CS024	TC298
FCA	MD1CS069	TC299 (Fiat Ducato)
VAG Bosch	MG1CS031 H80	TC298
JLR	MD1CP007	TC298

CG FC200 Read 2020 BMW MG1CS003 ECU ISN Code

CG FC200 read 2020 BMW 120i ISN code successfully.

ECU: Bosch MG1CS003 SPC5777 not locked

Mode: Bench

Select BMW 1 series-Bosch MG1CS003 SPC5777 ECU.

Check wiring diagram.

Don't need to remove the engine ECU. 

Connect FC200 wires to the ECU in the engine bay.

Then identify ECU and read ISN code.

Images attached:

How to Solve Yanhua ACDP BMW CAS4+ OBD Car Not Start?

Problem:

A customer programmed a new key on a BMW F10 CAS4+ using Yanhua Mini ACDP2 via OBD. After programming, the remote functions and Comfort Access work perfectly on the new key. However, the car won’t start.

 

Solution:

Perform a fix start function

Sync CAS to DME and will start again.
Look for “Sync code lost repair” function and if it doesn’t work, for “reset starter motor”.