[HOW TO PATCH Component Protection] MIB2 Technisat/Preh Headunit Patch(gps headunits only with 2 sd card slots)

[mr-fix]

having a non-nav unit means that you will not be able to install the SD patch (nor the toolbox), as the installation method exploits a vulnerability of the installation process and is based on the nav-only package.

If you have the toolbox, it means that someone used the eMMC or USBHSD method - direct access to system memory. Sad that the GEM was not updated. This means that toolbox is not able to execute any of the scripts (that's why you need to reboot the unit).

Since you don't know exactly what was done with the unit, you might also check if the telnet or FPT connections were enabled. If yes - you are in and you will be able to access the filesystem via network connection (MIB WiFi or DLink) to change some stuff.

 

[Komke]

Ha van 2 SD kártyahely a fejegységben, akkor használhatja ezt a javítást


https://mibsolution.one/#/1/9/MST2 - TechniSat Preh/Patches/ZR/VW/MST2_EU_VW_ZR_P0478T

Helló. Felhasználó és jelszó kellene

 

[ivan_ch]

Hi all. I'm waiting for my unit to arrive (MIB STD2 SW: 0475 HW: H41) And I'm not sure how to proceed with it. I mean first thing to update the software with this : MST2_EU_VW_PQ_P0480T_3G0919360QT and after that to patch with : VW_PQ_P0480T_FEC_ALL_CID_OFF_CP_OFF_FIXED
Is that the correct way? Also is there any difference if I use the toolbox instead? And if not, can I install the toolbox in the future if I decide?
Thanks

 

[mr-fix]

Update to 0480, next install SD patch.
Or update to 0480, install toolbox, use toolbox to patch CP, SWaP and CID Lock.

SD patch will simply overwrite system files. Toolbox will backup original files and live-patch them.

Keep in mind that both SD patch and Toolbox work on units with Navigation. If you got VW Composition Media (the non-nav system) those will not work for you.

 

[ivan_ch]

Thank you, I will use the toolbox then. It is Discover navigation media (with two sd slots).

 

[ivan_ch]

Hi again. As mentioned above, I updated the software, installed the toolbox then patched CP and SWAP.
Now in VCDS I got this error:

15360256 - Component Protection
U1101 00 [009] - Active
[New feature! Extended UDS fault detail is only supported by current gen. interfaces]
Confirmed - Tested Since Memory Clear
Freeze Frame:
Fault Status: 00000001
Fault Priority: 4
Fault Frequency: 1
Reset counter: 66
Mileage: 207238 km
Date: 2108.14.27
Time: 18:15:06

Can't be deleted .The unit seems to work fine for now. Any ideas?

 

[brentgti]

Hi again. As mentioned above, I updated the software, installed the toolbox then patched CP and SWAP.
Now in VCDS I got this error:

15360256 - Component Protection
U1101 00 [009] - Active
[New feature! Extended UDS fault detail is only supported by current gen. interfaces]
Confirmed - Tested Since Memory Clear
Freeze Frame:
Fault Status: 00000001
Fault Priority: 4
Fault Frequency: 1
Reset counter: 66
Mileage: 207238 km
Date: 2108.14.27
Time: 18:15:06

Can't be deleted .The unit seems to work fine for now. Any ideas?

Patching just suppresses component protection and lets the unit operate as if component protection was removed. To actually remove component protection and its associated faults, you have to use ODIS.

 

[ivan_ch]

So it is something not to worry about. Thanks

 

[ivan_ch]

Hi. Can someone help me activate Car menu (Vehicle status, driving school mode, etc..) on MIB2 STD SW 0480, H 41 . I already have offroad icon in the main menu (which works). I installed toolbox, patched CP and SWAP. Tried to change some adaptations in 5f module but with no success.
Car is Passat B7

 

[Thinkpad123]

i connected unit with putty trying to restore but stops here.

how can i fix this ?

-Welcome to TechniBoot-
SVN Rev: 626459
J5e.M30.LoadImage.ready: 0x045D54D9
J5e.M31.LoadImage.ready: 0x079914A3
J5e.QNX.LoadImage.ready: 0x21944417
CPU0: L1 Icache: 512x64
CPU0: L1 Dcache: 512x64 WB
CPU0: L2 Dcache: 4096x64 WB
CPU0: VFP-d32 FPSID=410330c3
CPU0: NEON MVFR0=11110222 MVFR1=00011111
CPU0: 413fc082: Cortex A8 rev 2 600MHz NOALIGN
Loading IFS...done

System page at phys:84095000 user:fc404000 kern:fc404000
Starting next program at vfe05160c
cpu_startnext: cpu0 -> fe05160c
VFPv3: fpsid=410330c3
coproc_attach(10): replacing fe081d90 with fe08154c
coproc_attach(11): replacing fe081d90 with fe08154c
Welcome to QNX Neutrino on the Texas Instruments J5 ECO MIBSTD2NAV_MAIN Board (ARMv7 Cortex-A8 Core)
Thu Jan 01 00:01:00 UTC 1970
add net default: gateway 10.200.1.2
J5e.QNX.init.ready
Waiting for i.MX...
Starting tsd.mibstd2.main.root...
Current core file directory: /tsd/var/core/startup-11/main
00:01:02.379 [Info] [J5e.mcp] [FREQ:20000000]
00:01:02.384 [Info] [J5e.mcp] [PERF:0x30648f4:IO1] J5e.MCP.init.start
Start Com-Client (MAINROOT)
Start Com2M30
shm mapped to 28010000
Start Network
Create Thread
00:01:02.483 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8100f09
00:01:02.488 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff051a
00:01:02.489 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff051b
00:01:02.490 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff051c
00:01:02.490 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff051d
00:01:02.491 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff051e
00:01:02.491 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff051f
00:01:02.492 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff0520
00:01:02.492 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff0521
00:01:02.493 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff0556
00:01:02.493 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x8ff0556
00:01:02.509 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x70a0067
00:01:02.510 [Error] [J5e.tsd.communication.serializer] Serializer already registered for event 0x70a0068
shm mapped to 28020008
00:00:00.025 [Error] [J5e.cmsg.m31] most: [MAP]Dashboard Adaption: not supported
00:00:00.034 [Error] [J5e.cmsg.m30] isotp: EEPROM failure maybe corrupt data (job, key, status) p1: 0 p2: a p3: 5
J5e.imx6.start: 0x01CC1007

 

[mr-fix]

You need to boot with boot option pins shorted (there are two small points on the main board that you need to short together with tweezers). You will see booting menu instead where you can select some options, and you will be able to start recovery process.

 

[Paul_K]

Hi guys.

Having unit 3Q0035846 in Golf MK7 2016 with SW Train MST2_EU_VW_ZR_P0254T with Toolbox v1.3.3
I am aware, that P0254T is the latest official firmware.

I have some questions please.

• Does updating P0254T to P0369T requires the same procedure as going to P0478? (SWDL PATCH, metainfo.txt)
• What features offers P0478 comparing to P0254 or P0369?
• Is P0369 having GRID menu as P0478?

Tried preparation phase with "Approval_SOP4_signed". All the steps on the PC went as planned.
Tried to run this to prepare unit for accepting update, but seems it is having problem.
Since started with this update, unit is having this message:
Device is not ready.
Software update is not ready. Please wait...
It can take 10 minutes.

Is it bricked now? Tried just preparation phase and not success with it.
Please advise. Thank you.

 

[mr-fix]

If you are going to upgrade beyond 02xx, go with the highest: P0480T
Going from 02xx to 03xx or to 04xx requires the same steps and the same risks.
Not sure about grid in 03xx, but 04xx has it for sure.

Changes between 0254 and 0480:

• Support for facelift glass displays with APP buttons,
• GEM version 4.11 with touch screen navigation support,
• Support for VC/AID (Virtual Cockpit / Active Info Display),
• Support for new USB HUB,
• Updated graphics with facelift car models (CAR, AUDIO, CLIMATE menus),
• New skin layouts (grid) and new system-wide color theme,
• Refreshed VW startup animations and new trim options (beatsaudio, FAMILY, Elegance),
• Skin and startup animation for MAN vehicles,
• 6 presets in Radio section if 8-inch display skin selected,
• 6 favourite contact in Phone section if 8-inch display skin selected,
• Media covers higher resolution support (needs to be confirmed),
• CAR menu selection is remembered after switching ignition off,
• Oil temperature gauge (SportHMI and Offroad) without red zone and rescaled for 100°C in middle position,
• Start/Stop option to disable system status popups,
• Air Condition option in main menu,
• VW Media Control option in menu,
• Configuration Wizard in Settings,
• Traffic menu with map preview,
• WLAN media source option,
• 4 clock faces selection in standby,
• Sound type displayed on the OSD when adjusting volume level,
• Updated SFX when touching the screen,
• FEC/SWaP hidden menu available without active developer mode,
• Testmode menue available from hidden menu (3 seconds press instead of 10 seconds press),
• FEC/SWaP code 00070400 for in-car communication is supported,
• Testmode menue touch screen diagnostics no longer works,
• Left and right speaker channels are inverted,
• New adaptation channels (Key_code_monitoring, Vehicle function list BAP 2nd generation, expansion, Deactivation/activation of the pop-up for active tracking services, nhtsa_properties),
• New cpu modules (fpkimagetransfer, i2cbridge, nuanceres.arw_EU).

 

[Paul_K]

Thank you @MR Fix.
I got some issue in preparation phase, seems it is in loop.
I have changed the skin to the default one, did not start even yet with FW update itself.

"Device is not ready.
Software update is not ready. Please wait...
It can take 10 minutes".

I have an option to buy Unit 3Q0035846B, having FW MST2_EU_VW_P0879D. No, "ZR" stated in the FW.
Or else unit 3Q0035846A from Panasonic. Not sure what means the letter on last position as currently having 3Q0035846.
Is it still okay to install in the Golf 2016?

 

[mr-fix]

MST2_EU_VW_P0879D ends with D. It means that it's made by Delphi. There's no "ZR" or "PQ" in the firmware name, because Delphi made only one type of units, so this distinction was not needed.

If unit is made by Panasonic, please check if it's not 5G0 unit - old MIB1.
MIB2 units were made only by Harman, Delphi and Technisat/Preh.