2026/09/24

Flex Adds BMW MD1CS003 Bench Unlocking

 

With Magic Motorsport Flex the BMW Bosch MG1CS003, equipped with the SPC5777M processor, can now be programmed directly in Bench mode.

  • No ECU opening.
  • No Boot Glitch unlock.
  • No extra steps.

Flex version 8.21.0.0 is now available

The latest Flex update expands support for BMW Group vehicles with the introduction of Bench programming for the Bosch MG1CS003 ECU.

Equipped with an SPC5777M processor, the Bosch MG1CS003 control unit can now be programmed directly in Bench mode, no need to open the ECU or perform the unlock procedure via Boot Glitch.

This new Flex solution simplifies the ECU programming workflow: fewer steps, no ECU opening, and a faster, safer procedure.

Key insights:
BMW Bosch MG1CS003 – SPC5777M

  • Working Mode: Bench
  • Memories: Read/Write/Checksum Internal Flash, Read/Write Internal EEPROM, Full Backup
  • License: FLS0.1M/S – FLS0.5M/S
  • Connection: ~10 seconds
  • Reading Time: ~2 minutes 30 seconds
  • Writing Time: ~2 minutes

Some of the supported vehicles:

  • BMW X3 (III) G01 (2021MY) 2.0L 20i 16V 181HP
  • BMW 5-Series (VII) G30/G31 (2021MY) 2.0L 30e 16v PHEV 288HP
  • BMW 7-Series (VI) G11/G12 (2021MY) 4.4L V8 50i 32v 523HP
  • BMW 8-Series (I) G14/G15/G16 (2021MY) 3.0L 40i 24v 328HP
  • BMW Z4 (III) G29 (2021MY) 2.0L 30i 16v 254HP
flex update bmw md1cs003 bench unlock


Autel MS906 Max, MS906Pro and MS906 Pro TS Comparison

What’s the difference between 2026 new Autel MaxiSys MS906 Max, MS906 Pro and MS906 Pro TS?

 

Autel MaxiSYS MS906 Max, MS906 Pro, and MS906 Pro-TS are closely related professional diagnostic tablets in the Autel 906 series. They share core OE-level all-systems diagnostics, bi-directional control (active tests), ECU coding/adaptations, DoIP/CAN FD support, VCI V200, 40+ service functions, FCA AutoAuth (secure gateway), AutoVIN/Scan VIN/License, Pre/Post-scan, Remote Expert, and expandability (ADAS, battery test with BT506, endoscope with MV108S). Differences center on screen size, cameras, TPMS integration, and minor hardware/software refinements.

Hardware Comparison

ParameterMS906 Pro
autel ms906 pro
MS906 Pro-TS
autel ms906 pro ts
MS906 Max
autel maxisys ms906 max
Screen8-inch, 1920 × 12008-inch, 1920 × 120010.1-inch, 1920 × 1200
OSAndroid 7.0 / 10.0 (newer units)Android 7.0 / 10.0 (newer units)Android 10
ProcessorOcta-core (Samsung Exynos 8895 or Qualcomm 660; ~2.2–2.3 GHz + 1.7–1.8 GHz)Same as ProOcta-core (similar, ~2.2 GHz + 1.8 GHz)
RAM / Storage4 GB / 128 GB4 GB / 128 GB4 GB / 128 GB
Battery11,600 mAh11,600 mAh11,600 mAh
CameraFront 5/16 MP + Rear 16 MP (varies by batch)Front 5/16 MP + Rear 16 MP (varies)Rear 13 MP (typically no/emphasized front)
VCIMaxiVCI V200 (Bluetooth; supports KWP, CAN, UDS, OBD2, CAN FD, DoIP, etc.)MaxiVCI V200MaxiVCI V200
ConnectivityWi-Fi, BT, USB, SD (up to ~32–128 GB typical)SameWi-Fi (a/b/g/n/ac), BT 5.0, GPS, USB 2.0 (2× Type-A + Mini), SD up to 256 GB
Weight / Size~0.92–1.05 kg; compact 8″ formSimilar~1.71 kg; larger (approx. 311 × 216 × 40 mm)
OtherProtective rubber boot+ Built-in TPMS antennaDual speakers, etc.

Software / Function Comparison

FeatureMS906 ProMS906 Pro-TSMS906 Max
All-systems diagnostics (read/clear codes, live data, freeze frame)YesYesYes
Bi-directional / Active TestsYesYesYes
Service / Maintenance functions40+40+40+
ECU Coding / AdaptationsYesYesYes
DoIP / CAN FDYesYesYes
AutoVIN / Scan VIN / License PlateYesYesYes, Auto scan 2.0
Pre/Post Scan + Cloud reportsYesYesYes
Remote ExpertYesYesYes
Full/Complete TPMSNo (basic only or external)Yes (built-in antenna)No (basic/service menu TPMS reset possible; no integrated full programming/activation like Pro-TS)
ADAS calibrationCompatible (with upgrade + frame)SameSame
Battery testWith BT506With BT506With BT506
EndoscopeWith MV108SWith MV108SWith MV108S
Auto ScanStandardStandardAuto Scan 2.0 (faster)

TPMS is the clearest functional differentiator for the “TS” model. MS906 Max is positioned as a hardware/UI upgrade over the Pro with improved scanning speed and larger display; core diagnostic depth remains very similar.

Key Differences Summary

  • MS906 Pro: Base advanced diagnostic tablet (8-inch). No built-in full TPMS.
  • MS906 Pro-TS: Same as MS906 Pro + integrated TPMS antenna for complete TPMS services (activate/read sensors, program Autel 1-Sensor/MX-Sensors, relearn, diagnostics, retrofit). Ideal for tire shops.
  • MS906 Max (newer upgrade of the Pro series): Larger 10.1-inch screen, Auto Scan 2.0 (faster scanning), similar core software/functions to Pro (no built-in full TPMS). Better visibility for workshops; slightly different camera setup.
  • The MS906MAX has the same screen size as the MS909 but the MAX does not include Topology and is not compatible with the MaxiFlash VCI (J2534). The MAX is compatible with ADAS.

2026/09/22

Yanhua ACDP BMW DME Entering Safe Mode Error Solution

Problem:

Tried to read a 2021 BMW X3 B48 DME (MG1CS003 SPC5777) using the Yanhua Mini ACDP on bench mode at 14.1V. When he tried to read the eeprom, the ACDP app returned an error stating that it entered safe mode and could not communicate with the DME ECU.

Yanhua ACDP BMW DME Entering Safe Mode Error 1 Yanhua ACDP BMW DME Entering Safe Mode Error 2 Yanhua ACDP BMW DME Entering Safe Mode Error 3

Solution

BMW B48/B57/B58 DMEs after 2020.06 are all locked. Without authorization, you cannot enter safe mode.

If you already have the B48 adapter, you need to activate the BMW locked MD1 MG1 license A520 to unlock these locked ECUs.

With license A520 and B48 adapter, you can unlock, read and write these locked ECUs.


Yanhua ACDP BMW DME Entering Safe Mode Error 4

Yanhua ACDP BMW DME Entering Safe Mode Error 5

 

How to Use the KESS3 Unlock Module to Unlock MDG1 ECUs?

The Alientech KESS3 Unlock Module enables technicians to unlock previously locked Bosch MD1 and MG1 ECUs for tuning. This guide walks through the complete process using a Bosch MD1CS003 ECU from a PSA vehicle (Citroën Berlingo) as the example.

 

Preparation: Opening the ECU and Safety Checks

Before unlocking can begin, the ECU must be opened to expose the circuit board. Alientech provides a separate video covering the recommended tools and techniques for safely opening an ECU lid. Once the ECU is successfully opened, the circuit board is ready for the connection process.

Important safety step: When working on any ECU that has been removed from a vehicle, it is essential to refit the ECU to the vehicle after opening it and confirm that the engine still starts correctly. This verifies that no damage occurred during the opening process. If the vehicle starts as expected, you can proceed with confidence.

unlock mdg1 ecu with kess3 unlock module 1
unlock mdg1 ecu with kess3 unlock module 2

Why the KESS3 Unlock Module Matters

The Alientech KESS3 Unlock Module is a significant addition to the KESS3 tool because it provides unlock functionality for a huge range of previously locked Bosch MD1 and MG1 ECUs. More makes and models are being added at regular intervals. Technicians can check the full application list to see supported ECUs.

 

Software Setup and ECU Identification

Place the opened ECU on the Alientech BDM frame. In the KESS3 software, select the appropriate ECU type—in this example, the MD1 CS003 for PSA. Choose the Boot method and open the manual to view the required connections.

The software provides several key pieces of information:

  • Warnings about refitting the ECU to the vehicle before communication
  • Required equipment, including the connection module and ribbon cable
  • ECU identification — verify that the ECU cover and label match the unit you are working on
  • Circuit board diagram with a highlighted area showing where the connection must be made

unlock mdg1 ecu with kess3 unlock module 3
unlock mdg1 ecu with kess3 unlock module 4
unlock mdg1 ecu with kess3 unlock module 5
unlock mdg1 ecu with kess3 unlock module 6
unlock mdg1 ecu with kess3 unlock module 7
unlock mdg1 ecu with kess3 unlock module 8
unlock mdg1 ecu with kess3 unlock module 9
A pro tip from the instructor: before pressing the unlock button, always take a backup of the ECU. The recommended sequence is:

  • ID the ECU and confirm communication
  • Take a backup (whether using a master tool or slave client tool)
  • Proceed to the unlock function

 

Removing the Ferrite Resistor

The software instructions highlight a specific component on the circuit board: a small ferrite resistor (described as a voltage resistor) that must be temporarily removed to enable the boot connection. This step is critical and requires care.

To remove the resistor:

  • Apply liquid flux to the required area
  • Carefully heat the solder joints
  • Remove the resistor using suitable soldering equipment

 unlock mdg1 ecu with kess3 unlock module 10

Making Bench and Boot Connections

With the ferrite removed, the software provides a step-by-step breakdown of the cables, connections, and wires required. The process involves both bench connections and a direct boot connection to the circuit board.

The KESS3 unlock module uses bridge pins (also called jumper pins) to ensure the correct current and voltage is sent to the circuit board.

Connection type: The MD1CS003 is typically a Type 2 ECU. Based on the instructor's experience unlocking hundreds of these units, nearly all use the Type 2 connection. The only variation is the number of ground pins required. If no communication is achieved with Type 2, try Type 1 with fewer connections first before adding more.

The specific connection type depends on the software, calibration, and firmware inside the ECU, as well as the specific chipsets present.

The KESS3 unlock module includes a platine—a circuit board designed for the BDM frame—that enables a clean and precise connection to the ECU's circuit board. A connecting cable links this platine to the unlock module.

unlock mdg1 ecu with kess3 unlock module 11
unlock mdg1 ecu with kess3 unlock module 12
unlock mdg1 ecu with kess3 unlock module 13

Running the ID and Unlock Process

Once all bench connections are made and the boot pin is connected:

  • Press ID — This should take only a few moments if all connections are correct
  • Save the ID
  • Take a backup of the ECU (strongly recommended before unlocking)
  • Press the unlock button — The KESS3 unlock module completes the unlocking process automatically


Different ECUs may require connections in different locations, so always follow the instructions provided by the KESS3 in the Alientech Suite software.

unlock mdg1 ecu with kess3 unlock module 14
unlock mdg1 ecu with kess3 unlock module 15
unlock mdg1 ecu with kess3 unlock module 16
Reinstalling the Ferrite Resistor

After the unlock is complete and the cables are disconnected, the ferrite resistor must be replaced on the circuit board. This step is essential: if the ferrite is not connected correctly and does not have continuity through it, the vehicle will likely experience starting or running issues.

To refit the resistor:

  • Add a small amount of flux to the ferrite location on the circuit board
  • Place the ferrite back into the correct position
  • Apply solder to safely secure it to the circuit board
  • Use a multimeter to confirm the resistance or continuity of the ferrite

unlock mdg1 ecu with kess3 unlock module 17

Completing the Job

Once the resister is securely reinstalled and continuity is confirmed, the process is complete. The ECU is now successfully unlocked and ready for tuning—whether for performance or economy.

If tuning was performed on the bench or via boot mode, the ECU is now ready to go back into the vehicle with the new tuning software uploaded. Simply reconnect the ECU to the vehicle, and the job is finished.



Flex DAF Delphi ETC3 UDS Version Not Supported Solution

Problem:

An MMS Flex user was trying to read a Delphi ETC3 ECU via OBD. It wouldn’t connect and gave a warning: UDS version is not supported yet. It won’t connect on bench mode either.

flex daf delphi etc3 uds not supported 1

flex daf delphi etc3 uds not supported 2

Here is the solution.

You can read ETC3 ECU via OBD/bench only up to 2018 with Flex. -2017 uses KWP protocol.  For KWP version, no need to remove the ECU – just use the FLX2.65 Truck cable to read, tune, and clone with ease. You can also connect powers and can directly to ECU pins and use obd protocol.

For models after 2018- it is UDS version and the engine ECU is locked. UDS ones are all locked.

Before Rev 0 it was Rev A/C, they’re all readable by OBD. Rev 0 needs Korhex or send for RFT.

Send ECU for RFT or use Korhex to unlock.

RFT: Send to MMS support for unlock, when ECU come back from mms you can do it.

Korhex: You can now unlock DAF Delphi ETC3 UDS control units directly in your workshop using Korhex and boot glitch (new feature).

flex daf delphi etc3 uds not supported 3

 

2026/09/21

EngineDance X5 Unlock Bosch ECM4 ECU

Euro 6 truck Bosch ECM4 ECU is now unlocked with the EngineDance X5 programmer.

EngineDance has added BENCH access to Bosch ECM4 for modern heavy-duty platforms. Bosch ECM4 ECUs powering 13L Euro 6 engines across Renault Trucks, Volvo Trucks & Mack Trucks lineups are now supported in Bench mode (Normal Read).

Supported:

  • Volvo FH / FH Aero, FM
  • Renault Trucks T / T High, C
  • Mack Anthem, Pinnacle

Example:

BOSCH ECM4 Unlock successful by EngineDance
2021+ Volvo Group Trucks

  • Method: Bench (Normal Read / Write)
  • ECU Model: Bosch ECM4
  • Target Engines: Renault DTI13, Volvo D13K (Euro 6) & Mack MP8
  • Clean Workflow: Direct pinout connection—no ECU opening needed.
  • Bench after unlock.

 

Function:

Read full data (eeprom + flash)
Write flash
Write eeprom

EngineDance X5 Unlock Bosch ECM4 ECU 1

EngineDance X5 Unlock Bosch ECM4 ECU 2

EngineDance X5 Unlock Bosch ECM4 ECU 3

EngineDance X5 Unlock Bosch ECM4 ECU 4

EngineDance X5 Unlock Bosch ECM4 ECU 5

EngineDance X5 Unlock Bosch ECM4 ECU 6

 

 

Keydiy D26 vs 4D vs 46 Chip

What is the difference between Keydiy KD 4D, 46 transponder chip and D26 super chip?

Whether you’re working with 4D, ID46, or multiple transponder types, KEYDIY delivers innovative solutions for modern automotive locksmiths.

KD-4D CHIP

  • Advanced 4D Chip Technology
  • Supports multiple 4D types
  • High-accuracy programming
  • Fast identification

KD-26 SUPER CHIP

  • Universal Power. Maximum Compatibility.
  • Supports multiple transponder types
  • Wide compatibility
  • Fast & stable performance
  • Professional locksmith solution

KD-46 CHIP

  • Supports 99% of ID46 transponder models
  • Easy copy & programming
  • Fast, stable & reliable
  • Designed for professional locksmiths

WHY CHOOSE KEYDIY?

  • Advanced Technology
  • Reliable Performance
  • Wide Model Compatibility
  • Professional Locksmith Solutions

Keydiy D26 vs 4D vs 46 Chip