Posts tagged with "upa usb"
Here is the customer solution to UPA USB V1.3 programmer “usb device not recognized” problem.
Does someone has dump for 24lc128 eeprom v1.3r2? My UUSP upa was working fine, and today it say’s usb device not recognized, I try with dump from v1.2 but working only one time after disconnect and connect again same usb device not recognized
Here is dump from upa version 1.3 – for 24c128
If the eeprom dump works fine the first time, but after usb disconnect and reconnect again it show usb device not recognized again, try one of these two solutions:
1) fill eeprom with FF and after connect it ask me to update eeprom, update now it’s working fine.
2) you need to change this N15. N15 is fuse, value about 0R.
I am a two-year tuning master. For some time I’ve been interested in the process, since I’ve seen the guys do a bench flash on my ECU. Ruining the FRM on my car made me a bit more determined to really dive into coming to grips with the BDM process.
So, I placed a few orders in China and all the boxes came in the last few days. now these are all clone tools, not genuine, but I’m not paying 20 times more for original tools just to scratch an itch. Granted, some of them might not be as good as the real thing and do work perfectly.
As you can see, there’s enough to keep me occupied for some time. There’s a Kess V2, K-tag,FgTech Galletto V54 Master, Xprog V5.50, R270, J-link and a UPA USB V22.214.171.124 red color device programmer. On the Diag side I’ve got an BWM ICOM diagnostic and programming system without WIFI and a Vas5054 for VAG. There’s also an EDC17 C41 ECU for the E90 320d LCI and I’ve got the FRM that came out of my car. Getting the FRM going is the first job. As with most of the ECUs in the later cars, they all security protected so getting them to submit to flashing is pretty painful so I’m holding thumbs that the tools I have will be able to do what they say it should.
Getting stuck into the complex electronics part is no problem for me, as I’ve got a very well kitted out Lab in which to play. I used to do some serious embedded electronics and programming stuff in a past life and the passion is still there!
I was going to tackle the FRM tonight, but we’re now the victim of load shedding so that idea went out the window. I will be updating this thread with more meat as I go, hopefully you guys will get some benefit out of it as well
All the tools I have can do checksum calcs. In fact I had a tuner friend over tonight and he showed me some of the ropes using the K-Tag. He even showed me the process in opening these – we had a couple on the grill in the kitchen in order to soften up the glue. My wife only shook her head…
We flashed a few Tricore ECUs in boot mode and the KTag Ksuite 6.070 master worked perfectly with the difficult EDC17 C41 I had laying about.
What became obvious is that flashing is the really easy part, it’s literally a couple of mouse clicks and it’s done (after butchering the ECU of course). The hard part is understanding how the various aspects of the firmware modules in the ECU interacts with other components in the car, like the CAS. These things are packed full of security to specifically prevent what we’re doing here…
Anyway, a few stripped Tricores being massaged into submission
Another one of the silly things I wanted to do was to see if I can’t revive the old FRM3 that stopped working in my car. What happened at the time was that I had disconnected the battery and someone went and closed the boot. The only way I could get the boot open was to connect a PSU to the jump points in the engine bay. Problem was that I only had a 5A PSU at the time; this was enough to release the boot but I managed to mess up the FRM in the process. That’s one of the reasons I built a proper 70A PSU as well.
Anyway, I suspected that the microprocessor in the FRM went into ‘security mode’ because it detected a brown out condition. This sets the tamper flag inside the FRM and it goes dead. Problem is, you can’t read these microprocessors with normal programmers as the code is encrypted and you need a security key to access them.
In comes the XPROG M Box ECU tuning kit that basically allows you to bypass the security measures in these microcontrollers and thus opens it up for you to mess with.
I took a flash dump of the working FRM I’ve got in my car:
I then grabbed the faulty FRM and loaded a known working software version into it and voila! I’ve managed to fix the faulty FRM and my suspicion was confirmed – the FRM was ok electrically but its firmware got messed.
I’m now super chuffed that I can read the security locked microprocessors in these ECU modules. Incidentally, the CAS also uses a microcontroller from the same security protected family
In other news, I flashed my whole car with the latest 2014 software. And managed to make the USB and BT inoperable.
When looking at the config files of the radio now, I see that there’s no more option to enable USB and BT so I can only assume that BMW ICOM ISTA/P loaded the firmware into the radio that’s used for radios with built in USB and BT. This causes the radio to ignore the MOST loop as it doesn’t need to break out of the radio for these functions anymore. I confirmed that because the MOST loop is now only working under diagnostics, not otherwise. So it’s not bothering to check for a MULF on the MOST bus because it doesn’t need to.
I’ll have to update the radio with the correct software in order to rectify this, but this is merely a theory at this point. I’ve a sneaky feeling this will take a while to get sorted out. In hindsight I should’ve just left the software alone, but where’s the fun in that .
Used UUSP UPA-USB ecu programmer 1.3 to do odometer correction on Ford EcoSport 2015… Work fined! Just put here for sharing.
Tool I used:
Ford Ecosport 2015
Ps. This is contact of picture this is old model Ford or how new odometer connect
Note: source above from a UPA 2014 user- Andres Garcia Zabi
|Product||XPROG-M Programmer V5.55||2014 UPA USB V126.96.36.199|
|O/S requirement||Win XP/Win 7 32Bit/64Bit System||Win XP/Win 7 32Bit/64Bit System|
|Software ver.||V5.55 (v5.5.5)||V188.8.131.52|
|Update||By replacing ATMEGA64 Repair Chip||No|
|Read secured ECU||YES||No|
|Difference in chip tuning||Good at doing Motorola 68HC05, 68HC08, 68HC11, 68HC(S)12 family MCU’s, Texas Instruments TMS370/TMS374 family MCU’s and serial EEPROM’s||Good at doing MOTOROLA chip|
|Special Function||Decrypt New BMW CAS4;Add New Authorization: AUTH-0025 Authorized||support MC9S12HY64/HA32 and NEC function|
|Adapters||XPROG-M adapters:||UPA adapters:|
|Note||If you want to use UPA-USB, you must have knowledge to use with processer. If you want to use Xprog-M, you must be good in soldering.|