PSA NAC RCC Updates

[danlat1415]

Just to clarify for people who come across the same issue irrespective of firmware.

PSA Group (Citroen/Peugeot) have been releasing firmware created on their systems for years. The certificate used to create the firmware expired in November 2024, so ALL firmware that was released prior to that date has now expired and can no longer be installed.
Even if you're trying to download a firmware that was released 2 years ago - it no longer works because the certificate it was created with made the firmware releases only valid until November 2024.
Imagine it like using trial software on a PC. You can use it fully until the trial has expired.
The software used to create them was time limited.

Citroen/Peugeot are aware of the issue and have updated their firmware creating certificates, but now have the massive task of having to recreate their entire firmware libraries using updated software with a new certificate license.

This is completely different to the certificate your car uses to verify the firmware for your individual vehicle.

The firmwares themselves have now expired.

Citroen have begun re-releasing their firmware back catalogue, starting with their newest releases first.
This will take some time, and they may not re-release all their firmware if they think there is no need for older firmware anymore.

Either keep checking your Citroen app for working firmware (you'll have to keep downloading new copies and trying again - you won't get any notification that things have been re-released/fixed).

If you're after an older firmware - you're best off contacting your local dealer to make them aware and they can then request from head office/IT to release your specific requested firmware versions.

[BrayanLDZ]

ok I understand. I see that some people get individual software that may work hence my question. if it worked maybe it would be possible to go up a version. I am also curious about the software from the NAC website whether it works I am including a link: https://sites.google.com/view/nac-rcc/system/nac/wave-4
Am I to understand that my radio cannot be updated?

[GiveMeABreak]

As said in numerous posts - firmware needs to be re-signed by Stellantis, so we know some have been re-released, but the majority won't.

I provide the Licence file for those who may need it - but this just authorises the firmware for the vehicle it is to be installed on and is not needed for WiFi enabled vehicles. The firmware signing is different and as explained above, needs to to be recompiled and released to their servers.

So you need to contact your dealers so they can put pressure on Head Office to get things moving. It was a totally stupid idea to start putting a date restriction on the files in the first place as it's created a whole world of pain for owners who've bought cars and realised the previous owners never bothered updating the systems - only to find out they can't currently do this. I hope they sacked the idiot that thought that one up.

[rui_saraiva]

ok I understand. I see that some people get individual software that may work hence my question. if it worked maybe it would be possible to go up a version. I am also curious about the software from the NAC website whether it works I am including a link: https://sites.google.com/view/nac-rcc/system/nac/wave-4
Am I to understand that my radio cannot be updated?

There isn't individual software, the same update could be installed in any Citroën, DS, Opel, Peugeot, Vauxhall, and even some Toyota - given they have the same hardware (ecuType). There are individual license files (.key) for firmware updates, tied to the firmware version (UpdateID/MediaVersion) you're trying to install and to your infotainment system serial number (uin), but they aren't really necessary if you can connect your car to the internet (internal BTA with a valid and available connection, WiFi network or just your phone tethered to your car).

Only the last firmware version for the NAC Wave 4 infotainment system, 44.07.33.32_NAC-r0, has valid signing certificates (likewise for the NAC Wave 2, 21.08.90.52_NAC-r0). The files in that site are exactly the same if you download through the "Citroën/DS/Opel/Peugeot/Vauxhall Update" software - https://sites.google.com/view/nac-rcc/system/update
In fact, you cannot install any update (firmware or maps) that isn't digitally signed by PSA, as you can verify in the recent certificates drama.

So if you have a NAC Wave 2 or 4, there should be no problem installing the last firmware.

[rui_saraiva]

As said in numerous posts - firmware needs to be re-signed by Stellantis, so we know some have been re-released, but the majority won't.

I provide the Licence file for those who may need it - but this just authorises the firmware for the vehicle it is to be installed on and is not needed for WiFi enabled vehicles. The firmware signing is different and as explained above, needs to to be recompiled and released to their servers.

So you need to contact your dealers so they can put pressure on Head Office to get things moving. It was a totally stupid idea to start putting a date restriction on the files in the first place as it's created a whole world of pain for owners who've bought cars and realised the previous owners never bothered updating the systems - only to find out they can't currently do this. I hope they sacked the idiot that thought that one up.

They won't be re-signing any previous versions, this "expired certificates drama" already happened 2 years ago. And they only need to release a new signing certificate (SWL/001*/Certificates/PSA-OVIP-CS-G1.crt) - that was already created for the NAC Wave 2 and 4, and sign only one file (SWL/001*/MediaHeader/MediaVersion.ini) with the private key of that certificate. The certificate could also be downloaded online - http://pki.p3cs.com/PSA-OVIP-CS-G1.crt - so they only needed to sign that small file.

[BrayanLDZ]

So I just stay with the version I have installed and I won't do anything? There will be no update to the newer version and maps too? What does ASO want to do with my radio by calling me to them?

[danlat1415]

Map updates do not suffer from the certificate issue and you should still be fine sourcing and updating your maps

[GiveMeABreak]

Yes, maps are fine. If your Head Unit is working fine, don’t worry about it, just update maps as usual.

[rui_saraiva]

Map updates also use signing certificates, for instance, the latest European map for NAC Wave 4 (map_eur-17.0.0-r0):

Code: Select all

> openssl smime -in SWL\002315011725520285\MediaHeader\MediaVersion.ini -pk7out | openssl pkcs7 -print_certs -text | head
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3e:30:93:b5:e0:50:3a:43:c3:02:68:b1:06:c4:1d:fb:35:db:b7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=FR, L=Paris, O=PSA Peugeot Citroen, OU=Certificate Authorities, OU=(c) PSA Peugeot Citroen - For authorized use only, OU=0002 319187308, CN=PSA - OVIP - Code signing - G1
        Validity
            Not Before: Nov  8 18:27:06 2023 GMT
            Not After : Nov  8 18:27:06 2026 GMT
        Subject: C=FR, L=Paris, O=PSA Peugeot Citroen, OU=Open Vehicle Infotainment Platform, OU=(c) PSA Peugeot Citroen - For authorized use only, CN=Continental \/ NAC \/ 1

And if the system is a NAC Wave 3, there have been no map updates since 2020 - it must be converted first to NAC Wave 4 before installing maps for that system.

[GiveMeABreak]

Yes, exactly.

So as I said - put pressure on your dealer to feed this back - the more people that complain, the more likely they are to do something about it.

I have the last Wave 2 firmware installed, but some months ago it was unable to be installed by some people - but has now been updated again.

[rui_saraiva]

I've installed that version (21.08.90.52_NAC-r0) almost 2 years ago, way before it was publicly released, and when it was finally released last year, I was already expecting all the certificate problems - it did happen the same with the previous 21.08.87.32_NAC-r1 firmware version in late 2022. They didn't learn from the previous mistakes!

It's even worse now, all those RCC and NAC systems are already obsolete and were replaced by the IVI and AIO systems in the newer models. I don't expect any new firmware updates for the NAC Wave 1 to 3, and even the Wave 4 doesn't have any pre-prod version being tested right now, which is very uncommon. You can still install recent map updates in all those systems, except the NAC Wave 3...

[GiveMeABreak]

Yes, no new firmware I expect given the end of line situation - if there are any it would only be for the Wave 4 I imagine.

Personally, I hate the new IVI system, truly awful on the new C4 X at least, totally confusing flick switched on the steering wheel and confusing display on the instrument panel for options, which does not help when you are driving. Personally, I hope I don't have to change my vehicle until the later fully integrated CarPlay is a reality. Until then.....

[BrayanLDZ]

And where can I get the maps? I have maps from 2018. I attached photos on the page earlier. And as I understand it, I have a wave 3 and I can't get a software update? So why does the app tell me to update the radio?

[BrayanLDZ]

I also reported the matter to Peugeot Polska, we'll see what they write back tomorrow regarding the certificates not working.

[BrayanLDZ]

Can I upload maps from NAC 4 with software 31......?