ECU & BSI Corrupted Diagnostics Topic

[wheeler]

Firstly the VIN in the BSI on PSA cars can be changed freely as it has nothing to do with immobiliser coding, you could enter any random VIN onto the BSI & the car will still start.
The BSI can be wiped & made 'virgin' then its a case of matching it to the car as if it were brand new, Im not aware if this can be done via OBD, I suspect its a bench job.
Second option is you can just remove the chip (normally a little 8 leg one) from the original BSI that contains the immobiliser coding & re solder it onto the donor BSI, this BSI will then effectively have your original immo coding so your original keys will start the car straight away.
If water damaged & worst case you couldnt get any info from the BSI your best bet I reckon would be to get a used BSI & make virgin.
There are plenty of tools that will read the pin from the BSI via OBD but im not aware of any that can change the pin via OBD.
PP2000 & others cant set the PIN on a new (or virginised) BSI. You only get one shot at this.

[ozvtr]

Do you know if the pin code can be read and transferred to a Dona ecu / Bsi unit, Will it enable the vehicle to run and function providing the vehicle options are the same, There must be a more strait forward way to edit these Device , what tools apart from VVDI PP 2000. would be needed,

Yes you can change the security code in either or both the BSI and engine ECU.
You need to change as little as possible. There is a lot of "hidden" data on the BSI EEPROM. Like the central locking plip IDs.
If you are talking about a "fried" BSI EEPROM then there is more to worry about than just the engine ECU security code. The key transponder chips and the central locking plips are now useless!!!!!! For want of a better term they are "locked" to that BSI. Specifically, the EEPROM data in that BSI and now it's fried. The transponder chips are cheap and easy to find but the central locking plips can be problematic. In some cases the Chinese knock off plips will work, some, only a brand new genuine 100 pound key will work! As Wheeler says you need to "virginize" the HEX in the EEPROM then you need to code the new transponder chips and plips using an appropriate scan tool, like LEXIA and ETC in the regular way.
There is some hardware that can read some ECUs (BSI, engine etc) from the OBDII port, but they are beyond my price range. I use the down and dirty method of extracting the required info directly from the EEPROMs in the BSI and engine ECU.
It's a bit more "messy" and requires more hand skills but that doesn't bother me.

I use a UPA-USB serial programmer. It's cheap and well supported. Depending on the situation the EEPROM may not be able to be read in situ. So the SOP EEPROM needs to be removed from the PCB, read/programmed and re-soldered back onto the PCB. I don't have problems with any of that.
Typically you read the HEX file off the EEPROM and save that as a HEX file using a plain extraction program. You then load the HEX into a decrypting program. That reads the HEX and tells you where and what the data is that you are looking for. Usually the data is encrypted and you cant see what you are looking for by just reading the HEX. You can then edit the data (your security code for example). Re-encrypt the HEX file. Save this file. Load this file back into your EEPROM programmer and write the new HEX back to the EEPROM. Simples!
Things you can do with the BSI include read/change the engine ECU security code, copy the entire contents, change the VIN, zero the mileage. Although LEXIA and the high level scan tool will let you change the VIN.
On the engine ECU you can read/change the security code.
On the instrument cluster you can read/change the mileage.
This means that to change the mileage, you zero the BSI. Change the instrument cluster to the desired mileage. When the system is fired up the BSI updates to the cluster mileage.

[wheeler]

On the engine ECU you can read/change the security code.

Are you aware of any tools that allow changing the security code via OBD?

On the instrument cluster you can read/change the mileage.
This means that to change the mileage, you zero the BSI. Change the instrument cluster to the desired mileage. When the system is fired up the BSI updates to the cluster mileage.

You can change the mileage (on full CAN models) on both the BSI & instrument panel in one go via OBD, takes around 5 minutes.

[cit-rotti]

You can change the mileage (on full CAN models) on both the BSI & instrument panel in one go via OBD, takes around 5 minutes.

We had to replace the speedometer unit on a C5 R/2007/full CAN.
The defective old unit had approx. 185000 km.
The one that is now installed has about 310,000 km
As a result, everything was taken over with 310,000 km.
We would like to program it back to the correct reading 185000 km - but only have a DIAGBOX and a good old LEXIA 348.
Which (inexpensive) tools do we need to make this possible?
Thanks for help and support.
Greetings Wolfgang

[ozvtr]

Are you aware of any tools that allow changing the security code via OBD?

NO, but see below.

You can change the mileage (on full CAN models) on both the BSI & instrument panel in one go via OBD, takes around 5 minutes.

If you can gain access to the BSI EEPROM via OBD to change the mileage, why cant you change the security code? They both reside within in the BSI EEPROM HEX!?
I too am very interested in hearing about this process.

[Hell Razor5543]

Wolfgang, do you still have the original speedo unit? If you do (and depending on the legality in your country) you might be able to send a specialist both speedo units (clearly marked as to which is which) and the injection ECU, and they could reset the new speedo and original injection ECU to match the mileage from the original speedo.

[wheeler]

@wolfgang. I use SVCI / Abrites, you can get a clone version for around £300 but it does lots of things & has around 20 different car brands.
What you can do on each car depends on the type of ECU’s fitted. There are some cheaper units by the likes of OBDstar but wont have as much coverage. If its just to do one job i doubt you could by the kit cheaper than a professional could do it.
It would be more work for someone to do it with the removed components than if you just take the complete car to them. You dont need the old cluster to adjust the miles, they will just set it to whatever you want.

@ozvtr. The hex editing bit is a bit above my head at the moment but yes the milage can definitely be altered by OBD only. Just never seen or hear of anything that can do the pin code like this.

[ozvtr]

I use SVCI / Abrites, you can get a clone version for around £300

Ouch. Too rich for my blood.

The hex editing bit is a bit above my head at the moment but yes the milage can definitely be altered by OBD only. Just never seen or hear of anything that can do the pin code like this.

You are at the mercy of the programmers I guess. If they don't want to do it then I suppose it doesn't get done.

[cit-rotti]

@wheeler
Thanks for the information
For a one-time use, 300€ are undisputed.
wolfgang

[Rhothgar]

I use SVCI / Abrites, you can get a clone version for around £300

Ouch. Too rich for my blood.

The hex editing bit is a bit above my head at the moment but yes the milage can definitely be altered by OBD only. Just never seen or hear of anything that can do the pin code like this.

You are at the mercy of the programmers I guess. If they don't want to do it then I suppose it doesn't get done.

Hi. Just doing some research on this exact same problem.

Do you have any further information on what can decrypt the HEX files? I've looked at HxD, NeoProgrammer and XGPro. I received confidential code from Citroen today but cannot find it in either flash or eeprom file.

You may well have seen some of my recent posts regarding not being able to clear fault codes. I have now narrowed it down to ECU corruption either ECU or EEPROM. Car starts and runs fine. It seems the some fault codes are now hardcoded into my ECU ever since I did a bodge repair to ECU a couple of years ago.

I am also searching for Infodiag article on Initialisiation of Bosch ECU EDC15C2. My ECU is 0281010251. I think the original software was 1037353332 but I somehow appear to now have 1037359146? There seems to be conflicting information on the internet as you say. Not one person seems to have the answer or they are not sharing it...

Any advice you can give will be received with interest even if it is where to get a virginised file if that is the process for resolving my issue.

[wheeler]

I received confidential code from Citroen today but cannot find it in either flash or eeprom file.

One thing to bear in mind is the possibility that it could have had an ECU/CPH with a used set?

You need to know the code is correct for your car as you only get one chance to input it (i suppose you could reflash again though).

Best way to confirm the code is correct is to attempt to program the keys, if the code is wrong it will tell you & wont let you proceed. Just dont keep trying it as 3 incorrect attempts will lock you out for 15 minutes.
Option 2 is send me the CPH dump & i can read the code from that.

[Rhothgar]

Hi wheeler.

Code is fine. It works. Programmed my one key. Also managed to deleted saved traces from one ECU.

I send PM. I now know what programme I need but version I have is too early.

[ozvtr]

I received confidential code from Citroen today but cannot find it in either flash or eeprom file.

Flash contains the operating system, you wont find it in there, only in the EEPROM. You need to invert the HEX in the dump. PIN codes are typically stored backwards. I.E. AEC4 would read 4CEA in the dump.

[Rhothgar]

I received confidential code from Citroen today but cannot find it in either flash or eeprom file.

Flash contains the operating system, you wont find it in there, only in the EEPROM. You need to invert the HEX in the dump. PIN codes are typically stored backwards. I.E. AEC4 would read 4CEA in the dump.

I checked all that and it's definitely not in there. Presumably it should be in the ASCII text.

[ozvtr]

Yes read the ASCII.

If it's not apparent in the inverted ASCII then they have encrypted it.
I use ImmoKiller and NY04. But my stuff is ancient history.