[Solved] BSI DELPHI series EL HW D6 - TELECODING READING BSI peugeot 208 II corsa F

i don't have old ecu
and i don't have a program to change that encoding
I only have a program from >

but with this program i can't do read and write encoding
and here's a big request to > for read / write versions

Added after 15 [minutes]:

glapsson wrote:

I hope I made the topic clearer?

you brightened it up (you are a PROFESSOR as someone said here)
if you can, please send a simple program with which we could test this encoding
by trial and error of comparison, because there is no need to count on a diagbox from online
(I have access to new cars)

Added after 9 [hours] 8 [minutes]:

as for VD56, I have only one, it may be useful 308 T9

Dear readers.
take a run of some auction site
pick up the calculator and start counting:
several BSI EL3 FI5 EL 5 ...
Several ECU edc17c60 vd sid .....
airbag drivers
ARTIV
LEAVES
SMEG
CIROCCO
ABS controller
gearbox controller
ADML
BML
SDCM
keyless handles
keys
readers
e.t.c

And stop counting on my excessive philanthropy, because after all, I'm in the back anyway ... well, someone will say such a hobby.
Yes, a hobby, but I would like to develop it with lower costs.

I managed to describe a few drivers with the help of borrowed modules - and these people got their devices for free, and I did not have to buy these modules.
compliments to colleagues who are quite actively involved in the project.

If someone currently has a free driver and needs to know how to code it, please contact me.
Free - I mean one who is not a customer's driver or from a driving car, who will come back - because my work sometimes goes fast and sometimes lasts longer, because this is a hobby.
Of course, drivers, if necessary, I return.
Then the costs are only the time and shipping fee.

kalisz1 wrote:

as for VD56, I have only one, it may be useful 308 T9

cannot compare VD46 to VD56 first 14 bytes second 22

Writing the encoding is done only in 2101 out of 2100, it is only reading possibilities.
yes it is broken
2E 21 01 02 AA BB CC DD DD EE FF GG GG GG

And with this PSA encoding program you can read and write the same as a YAT terminal, as someone is not fluent in coding, YAT is quite fast and efficient because you can save the buttons you want to send and click 4x in turn.

So now I will ask.
I would like my car ... actually my wife's car with keyless functions.
Cool car - factory fired from the start button ... and here I do not understand the PSA concern.
Why do I need to fire the start button - that I don't need a key in the car to look for ... So what if I have to start the drum of the drawing machine in the parking lot and rummage through the pockets of the sachet or the pocket in the purse to open the car.
NO SENSE !!!!!

I would like to add door handles with sensors and program everything properly.
Of course, the coding has already been worked out ... but unfortunately it does not work despite the coding.

Let me explain.

It is not in the coding - it is in the reading of parameters.



Of course, the module with the deactivated function is in the car.
the other active one is on the table.

and despite the change in coding - the reading of this function does not change.

The case will turn out like this:
in the module in which the function is active, the handles work - there is a reaction to touch and a change in readings.
And in the module with the function inactive, despite the encryption, the access is still deactivated and the handles do not react.

I assume (I did not try because I do not like the risk) that the modules once added to the car cannot be changed because even the one attached to the table gives an error of data exchange with BSI (there is a different pin and vin in bsi).
And the parameters say that VIN and PIN are already loaded into the module.

Does anyone know how to get around this topic?

I have to look, but ADML has extra antennas for remote unlocking before you grab the handle. Do you have SDCM light or full? What car?

change in BSI Vin and pin to the one from the module and see maybe it has locks like CMM.

And lest it be that I deviate from the topic of BSI - it is still closely related to bsi because these devices appear as a pair.

I have access to 3 modules:

1 - In the car - I haven't rummaged anything but coding and connecting the handle, no reaction

2 - light module, the same number as in the car, but has unlocked access and reacts to the handle on the table

3 - full module that I read but after uploading it does not respond in the CAN network (feel and program) - when it worked, it also responded to the handle because it also had unlocked access.



No additional antenna is needed
CAN power supply and the door handle and talking on the table.



I have a module with the same numbers in the car, but the software has a different number

I had a full module - i.e. with bt, but attempts to clean vin ended with the fact that despite the fact that it is read and programmed - even with the original - the processor gives an ID
This module does not talk in the CAN network

I have a second light, the same number as in the car, but as I already wrote, it has unlocked access and as you can see - only the handle is connected and talks.

as for the charge

in the full module it is identical to the PCB as in the light - only the bt section is missing (there are several dozen elements - empty solder pads)

In the full module there is an RH850 processor that can be read and programmed ... but I beat it somehow



and in the light module, the markings on the prock are encrypted (mask?) - and can not be read - it does not even reflect the ID



I warn you - upa read but after uploading ... silence in CAN.

CRC is also to be counted



I don't know where the PIN is (it's encrypted)

Of course, it does not do anything as there is no 100% programmer for reading and uploading - unless someone has tested it with a programmer.

and more ripples

KEY CODING - A8EE

CAN

Renesas Read/Write DataFlash (when reading Data Flash, cells that are not programmed return random values).

moze to to...

But what does that mean? that only the full original batch can be uploaded?
Because the one read with random data will crash the CRC .....

and I forgot to add that when uploading, whether it's virgin or ori - I always have 1 error on the dataflash.

There are a lot of airbag drivers with this prock from a different barrel ... people do it and somehow it does not crash it ...

Maybe the UPA ... Dup ...

but the codeflash goes 100/100 every time
only the date with an error.

Added after 10 [minutes]:

I share everything I have because I care a little about getting it started.

I will add an application for this module to the evening, maybe someone will come up with something.

And by the way - I put a good blast when I read the announcements of these modules - the guys know one word about the English "light"
and they write in the title ... light module ......

or for the full version because bluetooth is written at the bottom - they write that it is a bt module ....
in a way, yes, but not this fairy tale.

I am still wondering if there is any blockage on the PCB.
jumper to position or photo.

This dataflash is org? vin in it not touched?

Added after 1 [hours] 52 [minutes]:

glapsson wrote:

No additional antenna is needed
CAN power supply and the door handle and talking on the table.

I meant the principle of ADML, that it works for DML is ok

Without antennas on the floor by the door and at the back in the trunk, it will not unlock your car if you approach it, it is ADML ..

We still don't understand each other.
in my car, ADML does not react at all to the touch of the handle - as if it was not there.
Whether the key is or not is a secondary matter in this topic.
I do not have the key to the module, which reacts and the vin in bsi is different at all, but the module sees that someone has touched the handle - of course, the car will not disarm the car because there is no key.

One has the access function unlocked - the one bought which reacts (in the photos in the circle, activation - deactivation)
and he reacts to the handle - the pictures show a diagnostic reading - unfortunately, but this is not a module from my car.

The module in my car has the option of access as deactivation and there is no reaction to connecting and touching the handle.
wreath wonders can be encoded and this option remains inactive.

The point is that there should be a reaction here:



You are probably mistaking the system that I want to activate with remote access - you come and the machine disarms - I don't want it !!

well, you are confusing the concept because this is AMDL without the use of cancer opening ..
with the use of a handheld DML, the hand in the handle opens, the finger on the handle closes, twice a finger within 5 seconds closes a double lock.

to activate it
741: 641
DML = 2E210000
AMDL = 2E210004
Not set = 2E210008

Hello. Regarding this processor, I used to have a PDC with a Clio iv, I don't remember exactly what it was there, but I think it was the RH850 or v850es family. During the upload, everything went ok, but I lost communication with the driver. I bought a second one with the same numbers, I read the dataflash with the Orange5 programmer and as it turned out in the earlier reading, one sector was missing. After uploading, I now have two functional PDCs I read on high heels and I don't know if there was a problem sometimes. Maybe just a wrong reading ...

bbmax wrote:

well, you are wrong, because this is AMDL without the use of cancer opening ..
with the use of a handheld DML, the hand in the handle opens, the finger on the handle closes, twice a finger within 5 seconds closes a double lock.

to activate it
741: 641
DML = 2E210000
AMDL = 2E210004
Not set = 2E210008

I know it should be 04 or 00
BUT IT DOES NOT WORK AS IT IS - deactivation - I have already written this several times.
Despite the change of encoding - it is still deactivated.

And surprisingly
in this module on the table
When code 04 is coded, the handle still reacts - and according to your data, it shouldn't.

But when I do 00 - there is no reaction to the touch of the handle.

As you can see, everything breaks down on what is not going to be encoded ...
Hands-free access and commissioning status read in real data.

CODING
CAN BE TESTED - works only with HF modules
no points

And you can view all the CAN data from the list presented earlier

you can enter F190 and also get the reading

What are you saying she shouldn't
Adml only adds contactless opening, the handles continue to work as in Dml

In this module, F190 is inactive for writing

The only active save zone is 2100 ....

I know it is inactive
I wrote a preview ....
such a splash ....
maybe there is some hidden coding that the zones are open to

and as for the 2100 encoding - it's like I wrote with this handle touch recognition.
00 no reaction
04 sees the touch

but on condition that the diagnostic option I wrote about is activated.

There were even older BML modules
which had broken coding on each door handle, etc.
in addition, they were not served with VIN.
and in 2100 there were two bytes of encoding.

I wonder what the car would say to such a module.
It just makes me wonder if the key is different encryption.

glapsson wrote:

I wonder what the car would say to such a module.
It just makes me wonder if the key is recognized differently.

he will say bee because VIN will not be paired and Immo will not be paired ..

I am coming back to the topic of Engine controllers
Below is the program
Please use with caution.
4 drivers.
You can take a configuration dump and transfer to another ECU.

Someone will say that it makes no sense because I could have given the possibility to enter the key manually ..... I ANSWER - I didn't do it!

Of course for points.

The program does not exclude everything that should be used sober, as I mentioned.

To be able to encode, you must enter the appropriate encodings manually in the white HEX fields, or open the saved encoding from a file.

Of course, you can also watch Zones that cannot be coded.

Tested on EDC17c60
I do not have others - so you go on your own responsibility.

THANKS. Let's try

It dawned on me that it is impossible to code the ECU on the table without immo off.

That's why I won't test the encodings for Valeo - yet ...
Edc17c60 goes to do immo off and I have written these encodings.

and VD56.1 already bought ... and as you said A, you have to say B ..
I will see if it is possible to use the immo emulator on Valeo.
If it goes, coding on the table will be just a formality.

Added after 1 [minutes]:

It dawned on me that it is impossible to code the ECU on the table without immo off.

That's why I won't test the encodings for Valeo - yet ...
Edc17c60 goes to do immo off and I have written these encodings.

and VD56.1 already bought ... and as you said A, you have to say B ..
I will see if it is possible to use the immo emulator on Valeo.
If it goes, coding on the table will be just a formality.

Ha, I wrote about it yesterday when you missed the coding on the table

I bought it because I also have other plans for this ECU.
But the fact fell out of my head.

It's an interesting idea with this emu immo say something more ..

I purchased an emulator.
from this company:
https://sterownik.co/?309,emulator-immo-citroen-peugeot-psa-z-can

The EDC17C60 went first - because I know the pin and I could do the tests already (and I anticipate the comments - I know that he is going to do immo off - TESTING THE EMULATOR!).

As for the EMULATOR
They have poorly described new drivers, e.g. the EDC17C60 in the manual - I will not mention the newer ones at all ...
But I can add that VD56.1 has exactly the same pinout as EDC17C60
power, ignition and CAN


The program from the website erroneously generates a batch for 24c02 - at least from my eeprom but I took 10 different edc17c60 and c10 batches and it did not manage.
Can be manually inserted into the batch and uploaded (explicit)

I wrote my own 24c02 batch generator and by the way a PIN search so as not to open the batch each time.

and I added a socket to the emulator to program DIP8 24c02 more easily

After using the emulator:
ECU in diagnostics not blocked
The coding goes 100%.

We will see if it can handle other newer ECUs - but it should be because the data transmission via CAN is probably identical.
Worse with getting a PIN ... but something will come up.

Below is a well-functioning generator
EDC17C60,
EDC17C10,
EDC17CP42
that's it for now.

Hello, if you had a problem with the pin, I have SMOK bsi + pin, I can fix it, no problem, I would have to have an ecu at home because only older from the file. Regards

glapsson wrote:

Can be manually inserted into the batch and uploaded (explicit)

so do you need to open the ECU anyway? is it enough to add a PIN

There is also an option to add a new immo tablet under the ecu and having a set of bsi + com2008 + ecu + immo (tablet), you can also code on the table, but you also need to know the pin (ecu) to change to BSI and lock the tablet (the cost of the tablet is about PLN 3.5 )

Too much connection
and so the emulator, ECU and fejs
If you know the pin, you don't have to open anything - you program the emulator with the pin and it talks.


And power, of course.

For those interested who are overwhelmed by building and programming an interface for BSI coding.
I put up an offer of 1 piece on olx.
Everyone knows what the price is and what they are on the Internet, so for one it will be a lot for another, and someone will say that I give it away too cheaply.
Due to the fact that I want to develop my ideas further - and unfortunately it is a continuous investment - I have to sell something.
And I have one spare set - because I bought 3 Arduino sets back then - I use two - one is lying.

Link

Contact is best via OLX so as not to deviate too much from the topics here.
Please, turn a blind eye to this offer on the subject - it will help me to keep it going.

Correct the link because the tact will not be found
But probably Fr. this
it comes.

And this is because of a rush ... it happens.

Hmm, it can be interpreted differently only how can you sell something that was programmed from github? How many people, so many interpretations, there will be, but either continues with the github license or goes to a closed soucecode, unless I don't know myself.