MQB platform Test Bench Attempt.

[DV52]

Also a 4 pin relay can be used I think? Since T87a is not in use?

Yes indeed!!

My circuit diagram includes a T87a pin for completeness only (My early Uni lecturers taught me always to be complete when creating wiring diagrams) - but yes, a single throw, single contact relay is all that is necessary. On my test-bench, I used an old Telecom relay that I found in my junk-box (so, there's nothing special about the T15 relay)!!

 

[Meesters]

You now are turning in some AI chat

hmm........... color blindness, affects up to 1 in 12 males who live on this blue planet - so 8% of males (and only 1 in 200 females -0.5%).

And most folk incorrectly believe that those with color-blindness can't see red/green - which is wrong in almost ALL cases!!

But you're right, and I can tell you by experience, there are different degrees of color blindness. That makes color based legendes for example practically unusable for me. Good that the Golf wire diagram has written color patterns. When I know what colors to expect, I can adapt, to focus on colours that I can separate more easily.

 

[sboz]

Yes indeed!!

My circuit diagram includes a T87a pin for completeness only (My early Uni lecturers taught me always to be complete when creating wiring diagrams) - but yes, a single throw, single contact relay is all that is necessary. On my test-bench, I used an old Telecom relay that I found in my junk-box (so, there's nothing special about the T15 relay)!!

Thanks sir for your explanation and developing.

I Research MIB2 Unit flashing,coding and activating CP and remove Component Protection on Bench.I Found this thread.Is that possible with this setup?I Have harness From Aliex and gateway.Is that enough for this job or what else need to me?

I Work with Bmw cars and i have an emulator wake-up for Headunit or any module which connected my Bench setup.Do i need like this emulator for it?

 

[DV52]

@sboz: Hi. I notice your location is "Tr" - where is this place?

Alas, I know absolutely nothing about the CAN set-up on BMWs!

As for your question about using the test-bench for "flashing,coding and activating CP and remove Component Protection" - it certainly will work for "flashing,coding".

In respect of "activating CP" - on MQB platform cars, CP activation happens outside the test-bench facility.
CP works like this:

Each key-module in the car is included in what VAG calls a "CP constellation". Whenever the ignition is switched-ON, the master CP module (which is the Gateway module that lives @ address hex19 on the CAN network) polls each of these key-modules for their identity.​

If the identities from the responding key-modules is NOT the same as those in an encrypted master-list of authorized modules - a CP error is generated in both the offending module(s) and in the master CP module. The module identities in the encrypted master-list of authorized modules is set-up by VW when the car is built.​

The same CP errors also will be generated if any of the key-modules fail to reply to the challenge/response request by the CP master module.​

Hopefully you can see from my description that the process of "activating CP" is outside the test-bench and that CP errors will be generated regardless of what happens on the test bench!​

I'm also not sure about the "remove Component Protection" part of your question. That said, there is a thriving market for MIBs that have been CP hacked - so the test-bench should work for the purpose of allowing access to the correct software in the module EEPROM!

As for your question about the "wake-up" signal on MQB platform cars, I discussed this same issue in an early response in this thread.

The short reply is basically, YES. MQB platform cars DO use a CAN wake-up message as follows (I've theived the information from my link below):

• the "Klemmen_Status_01" message is transmitted every 100ms.
• the wake-up message resides @ memory ID hex 3C0
• the wake-up signal has 4 x Bytes as follows:
  • Byte 00 = checksum
  • Byte 01= a sequential number that increments from 00 to 15 in each message, then returns to zero;
  • Byte 02 = flags corresponding to terminals (Klemme) S, 15, X and 50.
  • Byte 03 = zero.

Generating the CAN wake-up message on a MQB test-bench can be done a number of different ways. For example, my test bench uses an actual Steering wheel module and the physical ignition-key switch to generate the wake-up signal. It is also possible to generate the wake-up signal via a suitable CAN emulator or with a simple Arduino set-up - read THIS

The longer reply is in my ealier response which you can read HERE!

Don

 

[Meesters]

Removed

 

[sboz]

@sboz: Hi. I notice your location is "Tr" - where is this place?

Alas, I know absolutely nothing about the CAN set-up on BMWs!

As for your question about using the test-bench for "flashing,coding and activating CP and remove Component Protection" - it certainly will work for "flashing,coding".

In respect of "activating CP" - on MQB platform cars, CP activation happens outside the test-bench facility.
CP works like this:

Each key-module in the car is included in what VAG calls a "CP constellation". Whenever the ignition is switched-ON, the master CP module (which is the Gateway module that lives @ address hex19 on the CAN network) polls each of these key-modules for their identity.​

If the identities from the responding key-modules is NOT the same as those in an encrypted master-list of authorized modules - a CP error is generated in both the offending module(s) and in the master CP module. The module identities in the encrypted master-list of authorized modules is set-up by VW when the car is built.​

The same CP errors also will be generated if any of the key-modules fail to reply to the challenge/response request by the CP master module.​

Hopefully you can see from my description that the process of "activating CP" is outside the test-bench and that CP errors will be generated regardless of what happens on the test bench!​

I'm also not sure about the "remove Component Protection" part of your question. That said, there is a thriving market for MIBs that have been CP hacked - so the test-bench should work for the purpose of allowing access to the correct software in the module EEPROM!

As for your question about the "wake-up" signal on MQB platform cars, I discussed this same issue in an early response in this thread.

The short reply is basically, YES. MQB platform cars DO use a CAN wake-up message as follows (I've theived the information from my link below):

• the "Klemmen_Status_01" message is transmitted every 100ms.
• the wake-up message resides @ memory ID hex 3C0
• the wake-up signal has 4 x Bytes as follows:
  • Byte 00 = checksum
  • Byte 01= a sequential number that increments from 00 to 15 in each message, then returns to zero;
  • Byte 02 = flags corresponding to terminals (Klemme) S, 15, X and 50.
  • Byte 03 = zero.

Generating the CAN wake-up message on a MQB test-bench can be done a number of different ways. For example, my test bench uses an actual Steering wheel module and the physical ignition-key switch to generate the wake-up signal. It is also possible to generate the wake-up signal via a suitable CAN emulator or with a simple Arduino set-up - read THIS

The longer reply is in my ealier response which you can read HERE!

Don

Thanks again sir for your patient.

"Tr" is "Turkiye".I m sorry i couldnt see it.I Fix it.

I Mean CP for CarPlay Activation.

 

[davegsm82]

Thanks again sir for your patient.

"Tr" is "Turkiye".I m sorry i couldnt see it.I Fix it.

I Mean CP for CarPlay Activation.

I'll chime in, as I've done this myself in the past.

It's possible on Delphi and Technisat MIB2 headunits to bypass the component protection and activate features such as carplay/Android auto, mapping etc.

The unit has to be patched by enabling settings in VCDS, then using the engineering menu and an SD card with a special firmware update on it. This patches out the addresses in firmware that restrict usage of the headunit (a CP enabled headunit will show "Component protection acive" and will be muted). Then in the updated firmware you can enable the features as required as long as they are supported by the headunit.

I bought a Technisat MIB2 setup and was able to patch it on my driveway within about half an hour completely for free. It has all of the features turned on such as track timers and G-force/performance monitors etc, however because my car is a 2013 model the gateway/ECU don't support all of the CAN messages so these extra functions don't work.

The only minor downside to patching one of these MIB2's is that it still shows up in VCDS as component protection active, because of the aforementioned constellation issues, but this doesn't bother me in the slightest and everything works perfectly. I use Android auto with a USB->wireless adapter and it's fantastic.

Regards, Dave.

 

[Meesters]

I Research MIB2 Unit flashing,coding and activating CP and remove Component Protection on Bench.I Found this thread.Is that possible with this setup?I Have harness From Aliex and gateway.Is that enough for this job or what else need to me?

I do think that you need some simulator also to wake up MIB, before you can flash it. Maybe you already have it integrated in your cable, otherwise I'm pretty sure they are available also on Ali.

For al the rest you can follow instructions from @davegsm82 .

More info on the topic also can be found on this website.

 

[Meesters]

I'll chime in, as I've done this myself in the past.

When ever you like, the more, the better!