BMW N55 28A0 101F Manual DTC Off

 28A0 and 101F are quite common fault codes in BMW N55 engines.

SITUATION
The engine malfunction warning is illuminated, and one of the following fault codes are stored in the DME shortly after programming the vehicle or with a customer complaint.
• FC 28A0 Throttle valve opening angle absolute pressure intake pipe comparison pressure too high (usually occurred in E series)
Or
• FC 101F01 Throttle valve opening angle absolute pressure intake pipe comparison pressure too high (usually occurred in F series)

 

Model affected:

There are many ways to get rid of it, by WinOLS or DTC remover software. You can also remove DTC manually.

Here’s the clue.

 

Tools required:

1.Tools to read BMW N55 engine ECU

2. Hexworkshops editor

 

You can read this ECU with ktag, Flex, CMD, Dimsport, pcmbench, pcmflash, pcmtuner, foxflash. Many of them will do auto checksum.

For example here we read N55 ECU with pcmflash on bench.

We only do DTC off, Flash file should be modified. It is recommended to read and make backups of all files in order to deal with emergencies.

There are only two files for BMW N55 engine, EEPROM and Flash.

EEP file size=64KB, Flash file size=4MB.

28A0 Manual DTC Off

Run Hexworkshops editor, upload Flash data read above.

First byte

Search 870087000000000000800080

Situation 1: If you find this byte and it is followed by 0000, you only need to change it to FFFF. (check image below)

Situation 2: If this byte is followed by 0080, you continue to search for 80008000. By analogy, until 800000 appears, change 800000 here to 80FFFF, as shown in the figure below.

Second byte
Search 06060606000003030000

Change to 06060606000000030000

Or if you can’t find the byte above, search for the following byte:

Search 06060606000000000000000000000303

Change to 06060606000000000000000000000003

Save modified data, write Flash back to ECU and install back to car to permanently remove the 28A0 fault code.

 

 

BMW 101F Manual DTC Off

Load Flash data to Hexworkshops

First byte:

Search 060600000606

You may search for more than one segment, or even multiple segments of the same byte string, and then exclude and find them according to the following rules. After finding them, find them that match the arrangement rules of 6, 3, and 9.

Example:

06060606060303000000090909 or 060600000606000000000000030300000000090909

Find the byte that conforms to this rule, and change 0303 to 0000, as shown in the figure above.

 

Second byte

Search 8000808700000000000000000000000000

Change to 800080870000000000000000000000FFFF

Or if you can’t find this byte, search for the following byte:

Search 8CAC01008CAC01008CAC01009CAC0100 to FFFFFFFFFFFF01008CAC01009CAC0100

Save the modified Flash data. Write Flash back to ECU and install engine to car to permanently remove the 101F fault code.

Kess V2 Write BMW EDC17CP02 via OBD or Boot

Is it safe to read and write BMW EDC17CP02 ECU with kess v2 clone over OBD?

 

This ECU sometimes have OTP. You can write it in OBDII but the car will not start after. write ori back and all is okay again. So do it in boot mode. Open unit read file and write via OBD direct connection unit on table.  Be careful to not overwrite eeprom, will brick ecu.

You can write this with Fgtech, if the ecu have protection, you can write ori back again and car start. With kess, you can’t write ori back and need full tricore.

 

Read by boot mode, next remove TPROT manually, you can write any update your job by OBD2 or use K-tag and patch ecu and than read/write by obd.

 

But this instruction will be relevant not only for those who have attached the EDC17cp02 via the OBDII connector, but also for other units with Infineon-Tricore processors.
To read the unit, we need: KESS v2, Infineon-Tricore module 14P600BTLR (black box from the kit, with a socket for connecting the power adapter), a 12V power adapter, and a cable for connecting the unit on the table 14p600kt02.

1-Remove the ECU from the car, unscrew the back cover and solder to the BOOT pin Fig.1.

 

The remaining wires are connected according to Fig.2.

2-Run the KSUITE program, then: PROTOCOLS>>BOOTLOADE TRICORE>>BOSCH EDC17 BMW>>OK, in the next window select BOSCH EDC17 CP02 BMW (P154)>>OK. In the window that opens, select READING>>SELECT.- save the calibration

3-Open in a HEX editor (i.e HxD) full flash firmware, and the calibration that we merged through BOOT.

4-Check the location of the identifiers: click SEARCH>> FIND>> put in the ECU ID numbers in the search, in my case “1037399768”>> DIRECTION>> EVERYWHERE>> OK Fig.3.

3.- check the addresses in the file we downloaded and FULL.ori (.ori- as the original stock firmware is designated) – the addresses match, so everything is OK.

5- Check the size of the files:
– FULL.ori 1 540 096 bytes
– read calibration 1 572 864 bytes

6- Since the file sizes are different, we start looking for the missing lines, briefly compare the structure of the firmware, focusing mainly on the location of the identifiers. Since no error was found, we copy the last lines from the file we read to FULL.ori Fig.4.

7-Run the KSUITE program, then: PROTOCOLS>>BOOTLOADE TRICORE>>BOSCH EDC17 BMW>>OK, in the next window select BOSCH EDC17 CP02 BMW (P154)>>OK. In the window that opens, select WRITING>>SELECT>>path to corrected file.

8- Verification: read BACKUP. Run the KSUITE program, then: PROTOCOLS>>BOOTLOADE TRICORE>>BOSCH EDC17 BMW>>OK, in the next window select BOSCH EDC17 CP02 BMW (P154)>>OK. In the window that opens, select TOOL>>SELECT>>BACKUP READ.If at the end of the reading, there will be no checksum error, so everything is done correctly.

Kess V2 Clone Mercedes SIM4LKE

I get it working! ECU cloned & car starting!

I confirm solution with kess working without problem .

Protocol: SIEMENS5WY1 SIMTEC76 29F800

Kess v2 in boot mode & boot pin.

End I used the gray wire with the crock connector for the 100ohm resistor .