2023/03/15

Kess V2 Write BMW EDC17CP02 via OBD or Boot

Is it safe to read and write BMW EDC17CP02 ECU with kess v2 clone over OBD?

 

This ECU sometimes have OTP. You can write it in OBDII but the car will not start after. write ori back and all is okay again. So do it in boot mode. Open unit read file and write via OBD direct connection unit on table.  Be careful to not overwrite eeprom, will brick ecu.

You can write this with Fgtech, if the ecu have protection, you can write ori back again and car start. With kess, you can’t write ori back and need full tricore.

 

Read by boot mode, next remove TPROT manually, you can write any update your job by OBD2 or use K-tag and patch ecu and than read/write by obd.

 

But this instruction will be relevant not only for those who have attached the EDC17cp02 via the OBDII connector, but also for other units with Infineon-Tricore processors.
To read the unit, we need: KESS v2, Infineon-Tricore module 14P600BTLR (black box from the kit, with a socket for connecting the power adapter), a 12V power adapter, and a cable for connecting the unit on the table 14p600kt02.

1-Remove the ECU from the car, unscrew the back cover and solder to the BOOT pin Fig.1.

Kess V2 Write BMW EDC17CP02 via OBD or Boot 1
 

The remaining wires are connected according to Fig.2.

Kess V2 Write BMW EDC17CP02 via OBD or Boot 2


2-Run the KSUITE program, then: PROTOCOLS>>BOOTLOADE TRICORE>>BOSCH EDC17 BMW>>OK, in the next window select BOSCH EDC17 CP02 BMW (P154)>>OK. In the window that opens, select READING>>SELECT.- save the calibration

3-Open in a HEX editor (i.e HxD) full flash firmware, and the calibration that we merged through BOOT.

4-Check the location of the identifiers: click SEARCH>> FIND>> put in the ECU ID numbers in the search, in my case “1037399768”>> DIRECTION>> EVERYWHERE>> OK Fig.3.

Kess V2 Write BMW EDC17CP02 via OBD or Boot 3

3.- check the addresses in the file we downloaded and FULL.ori (.ori- as the original stock firmware is designated) – the addresses match, so everything is OK.

5- Check the size of the files:
– FULL.ori 1 540 096 bytes
– read calibration 1 572 864 bytes

6- Since the file sizes are different, we start looking for the missing lines, briefly compare the structure of the firmware, focusing mainly on the location of the identifiers. Since no error was found, we copy the last lines from the file we read to FULL.ori Fig.4.

Kess V2 Write BMW EDC17CP02 via OBD or Boot 4

7-Run the KSUITE program, then: PROTOCOLS>>BOOTLOADE TRICORE>>BOSCH EDC17 BMW>>OK, in the next window select BOSCH EDC17 CP02 BMW (P154)>>OK. In the window that opens, select WRITING>>SELECT>>path to corrected file.

8- Verification: read BACKUP. Run the KSUITE program, then: PROTOCOLS>>BOOTLOADE TRICORE>>BOSCH EDC17 BMW>>OK, in the next window select BOSCH EDC17 CP02 BMW (P154)>>OK. In the window that opens, select TOOL>>SELECT>>BACKUP READ.If at the end of the reading, there will be no checksum error, so everything is done correctly.

2023/03/14

Kess V2 Clone Mercedes SIM4LKE

I get it working! ECU cloned & car starting!

I confirm solution with kess working without problem .

Protocol: SIEMENS5WY1 SIMTEC76 29F800

Kess v2 in boot mode & boot pin.

End I used the gray wire with the crock connector for the 100ohm resistor . 

Kess V2 Clone Mercedes SIM4LKE 1

Kess V2 Clone Mercedes SIM4LKE 2

Kess V2 Clone Mercedes SIM4LKE 3

Kess V2 Clone Mercedes SIM4LKE 4