PSA NAC RCC Updates

[Josivan Filho]

Hello everyone. I recently bought a Peugeot 508 (R8) from 2019. When checking the software version, I found it to be version: 31.09.46.62 NAC-r0 and the map version: CI-TT-PSA.P4CNS.U-MAP.EUR.NDS-6.3.0.

The software version is from 2018-11-17.

I have already tried to install other versions, but the system incompatibility error remains.

I live in Portugal and would like to know how I can update it, given that I have already taken it to the dealership and they don't know how to solve this.

VIN: VR3**************[VIN obfuscated, can be read by forum staff]
Thank you in advance!

[GiveMeABreak]

@Josivan Filho: You will have the same problem as described in recent posts. You have a Wave 3 system that needs to first be bridged to use the Wave 4 firmware and maps. So until you can update your firmware you are stuck. The system is recommending that you need version 42.03.33.42_NAC-r0 which also contains the map, however, because the certificates have expired, you need to pressure Peugeot to get the updated release to allow installation.

[Bartek2308]

Hi,
I have problem with maps. I have nac 31... And cant to updated to 42... My nac have 7 years but i wants update maps. I have latan maps with 2017. But i wants instal EUR maps version 12 and all times i have error...

[BrayanLDZ]

Bartek2308 I have the same problem. Despite downloading maps from NAC and inserting a pendrive, it displays an incompatible version. I would like to know what the problem is. And I am waiting for a response from ASO with the software.

[GiveMeABreak]

You will have the same problem as I described earlier - until PSA release the updated files with new certificates, you are stuck with what you have on the Wave 3 systems. Complain to your dealership - the more people that do, the quicker everyone affected by this issue will hopefully get a solution.

[BrayanLDZ]

ok. however, when I call my Authorized Service Center, they claim they know nothing about problems with the update and avoid writing to the manufacturer for a certificate. they want me to come and connect the computer and supposedly update it via diagbox. cost approx. 760 PLN

[GiveMeABreak]

They haven't got a clue obviously.....

There's nothing that can be done using Diagbox for a start - it's got nothing to do with that and Diagbox cannot update NAC firmware!
Second, they cannot obtain a certificate it doesn't work like that! The firmware has to have the correct digital certificate for it to install.
Only complaints to Head Office can put pressure on them to re-release or re-sign the firmware files.

It's a common problem for owners that have not had their systems updated - but more so for Wave 3 owners, because the system needs to be bridged to Wave 4 firmware before you can update your maps.

You don't need a diagnostic to work that one out, PSA know about the issue. I'd try another dealer, as this lot obviously are not aware of the problems.

[BrayanLDZ]

In Poland, in the city of ?ód?, there are two Peugeot services. Both services supposedly know nothing about problems with NAC updates, they just keep inviting you to the service to connect the diagbox. I also wrote to Peugeot Polska and they also keep putting me off. Even writing about certificates that the problem is on their side, they reply that they know nothing. I am attaching screenshots, only in Polish.is there anything else I can do or solve my problem in another way? where else should I write?

[GiveMeABreak]

Hi, so you may have to contact Peugeot Head Office (Stellantis) in Poland, which I believe is in Warsaw (+48 22 444 22 44):

https://www.peugeot.pl/

Tell them you have been in contact with the dealership and they are clueless! Tell them the update tool is informing you of an update yet it will not install - tell them they should know of the outdated certificates that have expired, preventing the firmware from installing and that this is beyond the scope of the dealers to assist with as it is a Peugeot / Stellantis issue. Tell them you are not going to pay a fortune for a Diagbox diagnostic to update the firmware that customers are able to do using their own App! It is a Head Office issue.

[BrayanLDZ]

Monday I'm going to work in the afternoon, I'll try to call the number you gave. The question is whether they'll dismiss me with a text that they don't know anything. I'll let you know on Monday. And can I install maps or not? There are maps on the NAC RCC website, but I downloaded the last one from wave 3 and it's not updating, maybe I have to download the maps one by one?

[rui_saraiva]

That map version 12.0.0-r0, the latest European map for NAC Wave 3, is also signed with an expired certificate:

Code: Select all

> openssl smime -in SWL\002315011586126702\MediaHeader\MediaVersion.ini -pk7out | openssl pkcs7 -print_certs -text | head
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=FR, L=Paris, O=PSA Peugeot Citroen, OU=Certificate Authorities, OU=(c) PSA Peugeot Citroen - For authorized use only, OU=0002 319187308, CN=PSA - OVIP - Code signing - G1
        Validity
            Not Before: Nov 13 09:15:58 2019 GMT
            Not After : Nov 13 09:15:58 2022 GMT
        Subject: C=FR, L=Paris, O=PSA Peugeot Citroen, OU=Open Vehicle Infotainment Platform, OU=(c) PSA Peugeot Citroen - For authorized use only, CN=Continental \/ NAC \/ 1

In fact ALL NAC_EUR_WAVE3 updates (firmware and maps) are signed with expired certificates. Anything released before 2022 is probably using old and expired certificates.

[BrayanLDZ]

only problems.... I still have 6.3.0 maps so it's not possible to update them at all? e.g. to 7.0.0?

[GiveMeABreak]

No - not until they are re-signed as mentioned above.

[BrayanLDZ]

I called stellantis today. the gentleman who accepted the report is supposed to look into the matter and call me back. he suggested sending an individual update with a download link to my email. however I told him that it wouldn't change anything because I had already been sent such files and I would like a solution that would work 100%. mentioning the certificates that they should report it further because the dealer is not able to help me because he has no idea, he said that they are not trained that much technically and know nothing about certificates. I am waiting for their response, we will see what they come up with today.

[GiveMeABreak]

This is often the case, front line staff in customer services are not technically trained themselves (hence why they always refer you to a dealer first), but they should have individuals there who should be able to make the correct enquiries, even if they have to contact French support.

Tell them you can provide the info contained in the firmware header that clearly shows the expired certificate that prevents installation and copy them the info that Rui provided above:

> openssl smime -in SWL\002315011586126702\MediaHeader\MediaVersion.ini -pk7out | openssl pkcs7 -print_certs -text | head
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=FR, L=Paris, O=PSA Peugeot Citroen, OU=Certificate Authorities, OU=(c) PSA Peugeot Citroen - For authorized use only, OU=0002 319187308, CN=PSA - OVIP - Code signing - G1
Validity
Not Before: Nov 13 09:15:58 2019 GMT
Not After : Nov 13 09:15:58 2022 GMT
Subject: C=FR, L=Paris, O=PSA Peugeot Citroen, OU=Open Vehicle Infotainment Platform, OU=(c) PSA Peugeot Citroen - For authorized use only, CN=Continental \/ NAC \/ 1

In your case as you can see in the red I have highlighted, this firmware licence expired November 13th at 09:15, so won't install after this date.