FVDI 2018 Finds Passat B6 7 byte CS code

Here’s the guide to find the 7th byte component security (CS) code in the Passat B6 comfort module.  To perform this operation with FVDI 2018, you need to use proper software. This is impossible if use inappropriate software.

Preparation:

Read original EEPROM 95320 from comfort module and save.

First Attempt:

Select VW software->V24.0->Special Function->Dump Tool->Comfort module component protection data (Passat B6)

Load original EEP dump (tried older EEP read on Aug. 17th, 2019)

Press OK to load dump

FVDI gave error “Cannot decode the comfort module dump. Probably the entered component security is incorrect”

Second Attempt:

This time select VVDI2 software
If system prompts connecting to server failed, just ignore by press Close button
Select VAG V1.2.2 software

System display error Windows cannot find VAGLoader.exe.

Third Attempt:

Select VW software->V24.0->Special Function->Dump Tool->Comfort module component protection data (Passat B6)
This time try new dump read on Sep. 23rd, 2019

Fail to calculate 7th byte CS again.  Cannot decode the comfort module dump either.

Final Attempt:

Close FVDI 2018 Software and run it again.
select VVDI2 software, VAG V1.2.2

this time the VAGLoader launches successfully

Select Passat B6 Comfort Module component protection data (95320)

Press Load File->Load newer EEPROM

Decrypt 95320 dump

Try to Decrypt 95320 dump

Find 7th byte CS code succeed.

www.obdii365.com

http://blog.obdii365.com/2019/09/29/find-passat-b6-7-byte-cs-code-wtih-fvdi-2018/

Original Tango Writes Megamos 48 CS: Confirmed!

This is an original Scorpio-LK Tango key programmer help file.

Purpose: write Megamos 48 component security

Component Security in Megamos 48 key

The modern immobilizers of the VAG-group vehicles have such conception as “Component Security” (CS). The CS is an array of 7 bytes length. Its role in a vehicle is to forbid a mixing of electronic units from different cars. In terms of the immobilizer the CS is a “password” that used in couple of the Motor Unit (ECU) and the immobilizer.

The protection scheme includes 3 components that share the CS, they are: ECU

IMMO KEY

The protection scheme allows the engine to start only in case when the CS is identical in all the three components.

Key and CS

The CS is a part of the Crypto Key and fills its upper area Word9-Word6.

ECU and CS

ECU uses the CS as a password. More modern ECUs contain only 6 bytes of the CS. In this case the CS should be extracted from another devices, for example it may be a dashboard.

IMMO and CS

The vehicle dashboard usually has a role of an immobilizer. The IMMO always contains all the 7 bytes of the CS.

The Tango key programming tool “Write Component Security 7 Bytes” (Megamos 48 window) helps you to put the CS manually into a transponder.

Example of ECU BOSCH Motronic M7:

ECU dump, eeprom 95040:

The CS has been marked in the blue color.

To write the CS, invoke the tool and type the CS in the window:

Select the vehicle brand and press the Write button.

Temporary the Seat brand is unavailable.

Link to Scorpio-LK Tango: https://www.obdii365.com/wholesale/super-tango-key-programmer-with-basic-software.html

http://www.obdii365.com/service/tango-key-programmer-write-megamos-48-cs.html

Yanhua Mini ACDP Read Volvo CEM KVM Data Without Soldering

To Program Volvo 5-button and 6-button smart key with Yanhua Mini ACDP, you have to read data from CEM and KVM module first. Then write key by uploading password data.

Volvo license is required.

ACDP Mini supports following Volvo key programming models:

Supports 5-button remote key add key and all keys lost
Supports 6-button smart key add key and all keys lost

Volvo S60 (2010-2018)
Volvo S80 (2009-2016)
Volvo XC60 (2009-2018)
Volvo V60 (2011-2017)
Volvo V70 (2009-2016)
Volvo XC70 (2010-2016)

Read Volvo KVM Data with ACDP Without Soldering 

Remove the Volvo KVM module located on the tight side of the trunk

Disassemble the KVM module

Prepare ACDP host, OBP+ ICP adapter, KVM interface board and 20 pin cable

D1-D4 regional figual and picture of each test point location

Install KVM interface board according to the registration point D1-D4

Connect the KVM module and ACDP programmer

Open Mini ACDP app

Select Volvo module
select model, i.e XC60 (2009-2018)->Full Keyless->Read KVM password

Check well connection is built

Detect PIN

Passed Pin detection. If not, clean the corresponding test point

Decrypting the chip

Confirm VIN information

Press OK to save KVM data

KVM data is backed up to default folder

Read Volvo CEM Data with Yanhua ACDP Without Soldering 

Remove Volvo CEM module behind the co-pilot glove compartment

There are 2 types of CEM module

Volvo CEM Type 1:

Disassemble the CEM module and prepare the ACDP, OBP+ICP adapter, CEM interface board and 8-PIN cable

D1- D4 and each test point

Install the CEM interface board according to the location point D1-D4

Connect ACDP host and CEM interface board as picture above

Volvo CEM Type 2:

Disassemble the CEM module and prepare the ACDP, OBP+ICP adapter, CEM interface board and 8-PIN cable

D1-D4 and each test point

Install the CEM interface board according to the location point D1-D4

Connect ACDP device and CEM interface board

Open ACDP Mini App

Select Volvo module
select model, i.e XC60 (2009-2018)->Full Keyless->Read CEM password->Method 1: ICP Mode

Check connection

Detect PIN

Reading data

Check the VIN

Press OK to save CEM password data

CEM data was saved to default folder.

Then you can add keyless smart key by upload password data.

Done.

http://www.obdii365.com/service/read-volvo-cem-kvm-data-with-yanhua-acdp.html