User Manual - immo
Contents
1. Manufacturer Svstem Read Write Read Write Engine runs FLASH EEPROM with immobilizer code cleared BOSCH SIEMENS MAGNETI IAW 6R NO ONLY READ YES Ee apis Hd TRW DAE PAS ELECTRIC POWER ASSISTED STEERING FOR MODUS CLIO III Correct immobilizer signal is necessary New code to be stored from Renault Immobilizer Emulator not supplied or fully operational immobilizer system valid key etc support immo tools It 4 Software hints Basicly another It is usefull when immobilizer system is working properly but original ECU has a failure and needs to be replaced If red immobilizer indicator LED is blinking rapidly with ignition on transponder key is not recognised code clearing is not a way to make engine running exeptions are SAFIR SAFIR2 and IAW 6R Anyway ECU needs to be learned with new immobilizer code and Renault Immobilizer Emulator not included sold on the Internet by other sellers can be a solution for this problem Therefore this tool has functional ability to rewrite full FLASH memory by OBDII connector with binary memory dumps that had been previously read using ordinary FLASH programmer like ELNEC etc So you can somewhere find file for particular ECU with TOTALLY disabled immobilizer function and write it without de soldering of FLASH memory by OBDII programming Do it on your own risk as we do not carr any responsibility for files patched by somebody else Open binary2. this button to rewrite fully 29F200 FLASH memory Writes data from Memory Dump window to the 29F200 FLASH memory Content can be modified prior to writing procedure Input file size 256 kilobytes e Clear IMMO Code Press to clear immobilizer code stored in the EEPROM memory Software version automatic detection is implemented ECU is ready to accept new code after clearing Engine will not start if no immobilizer code is stored at all support immo tools It SAGEM SAFIR SAFIR2 MAGNETI MARELLI SFR200 Hardware Microcontroller TMS374 External ROM memory M27C512 Memory size 64 kilobvtes EEPROM memory Internal MCU s EEPROM Memory size 256 bytes Basic functions e Read Identification Press to read SAFIR SAFIR2 or SFR200 Software Hardware version and state of immobilization Advanced functions e Read EEPROM Press this button to read internal microcontroller EEPROM Memory content can be modified and saved to disk with desired filename Output file size 256 bytes e Clear IMMO Code Press to clear immobilizer code stored in the EEPROM memory ECU is ready to accept new code after clearing Engine starts even with code cleared support immo tools It MAGNETI MARELLI IAW6R XX Hardware Microcontroller TMS370 EEPROM memory Internal MCU s EEPROM Memory size 256 bytes Basic functions e Read identification Press to read control unit identification and status o
3. very similar to the casing of EDC16 Please make sure that it is not an EDC16 Check its BOSCH number 0 281 OXX XXX on the internet to define what ECU you exactly have support immo tools It SIEMENS SID301 Hardware Microcontroller FREESCALE MPC561 External FLASH memory AM29BDD160GB Memory size 2 Megabytes External EEPROM memory 95320 Memory size 4 Kilobytes Basic functions e Read ldentification Press this button to read SID301 Software Hardware versions VIN number status of immobilizer code programming Advanced functions e EEPROM 95320 CRC Check Analyzes CRC of EEPROM blocks during Read EEPROM 95320 and repairs them before Write EEPROM 95320 if this Check Box is selected V1 03 supports 4 known for us SID301 software versions May not work on some SW versions In that case please send EEPROM file to support immo tools It and it will be included e Read EEPROM 95320 Press this button to read 95320 EEPROM memory Memory content can be modified and saved to disk with desired filename Output file size 4 Kilobytes e Write EEPROM 95320 Open file containing data to be programmed and press this button to write 95320 EEPROM memory Writes data from Memory Dump window to the 95320 EEPROM Content can be modified prior to writing procedure Input file size 4 Kilobytes e Read FLASH AM29BDD160GB Press this button to read full AM29BDD160GB FLASH memory image Memory content can be modi
4. GRAMMING kkk Transponder must be preprogrammed using any HITAG2 transponder programmer if non genuine RENAULT key is used e Key without remote control Transponder PCF7936 1 Read CRYPTO_LO CRYPTO HI data from UCH by pressing Read Identification button in the Renault ECU Tool software Identification MPR Reference CAD2FFFFFF SW Version 47 VIN 0123456 789ABCDEFO Mo of stored keys 3 CRVPTO LO 20 2B 65 53 CRVPTO HI DC12 Key 1 ID F7C5B511 Key 2 ID 59 3D C1 22 Key 3 ID 40 9F 90 10 Key 4 ID Basic functions support immo tools It 2 Program byte marked with blue in the Pg3 CFG PSW to OE This way you will change transponder operation mode to CRYPTO blank PCF7936 transponder is configured to PASSWORD mode by default Transponder memory TM Pg ses ans s N 41 BC 90 10 M R Pg 1 CRYPTO LO Mm rR Pg 2 CRVPTOHI OD 24 DC 12 E r Pg 3 CFG PSW NE r Pg 4 USERO 46 SF 4F 4B W R a mano USR1 55 55 55 55 im r Pg 6 USER2 AA AA AA AA W R Pg herons USER3 FF FF FF FF W R coe fee on et CETA EETA 3 Program CRYPTO_LO CRYPTO HI fields Pg1 and Pg2 with data that you were previously read from UCH Key would not be accepted during key programmino without these transponder configuration steps support immo tools lt e Key with RF remote control Transponder PCF7946 1 Replace PCF7946 with blank IC if transponder key was previously alloc
5. NE SCENIC 1998 2002 is very sensitive to dropouts of the battery voltage that can cause a loss of Key Programming or self changes to configuration This leads to vehicle immobilization problems Tool includes full function set to solve any software problem and to make immobilizer system operational again There are several most common problems and ways to repair them Solution Solution support immo tools It Solution support immo tools It JOHNSON CONTROLS INSTRUMENT CLUSTER FOR SCENIC II 04 08 As long as failure of this type of instrument cluster is very common problem we have implement functions that will help you in the repair process Info for on the bench connection Grey 30 pin connector P1 Pin1 12V OBDII 16 Pin2 GND OBDII 4 5 Pin 29 CAN L OBDII 14 Pin 30 CAN H OBDII 6 e Read Identification Press to read HW SW versions and VIN from the instrument cluster Works by OBDII in the car or in the on the bench connection without UCH turns instrument cluster ON to read identifications e Wake UP Press this button to wake up instrument cluster by CAN BUS Used to turn ON for hardware problem repair after repair testing or to simply check mileage Press to advance to next display reading Acts like a board computer button on the wiper control handle support immo tools It CLIO II Ph2 KANGOO TRAFIC MASTER VIVARO MOVANO PRIMASTAR KEY PRO
6. OT Mode Press this button to force UCH to the BOOT mode where MCU internal EEPROM Read Write functions are available Procedure steps f Turn OFF ignition and press Enter BOOT Mode button g Remove 5 AMPS ALIM UCH fuse FUSE B in UCH h Press YES button to confirm entering to the BOOT Mode i Now you have UNLIMITED time to insert ALIM UCH fuse to finally enter the BOOT Mode Procedure could be stopped at this step by pressing Stop Sync button Red immobilizer LED will illuminate permanently or will extinguish at all on successful change to BOOT Mode S Ea F ag a a ae 5 k pir Exit BOOT Mode Pressing this button returns UCH to normal operating mode If application was closed when UCH is in BOOT mode return to NORMAL mode can be done by removing and reinserting ALIM UCH fuse or disconnecting and reconnecting UCH PP5 connector or car battery for several seconds support immo tools lt e Read MC68HC705B32 EEPROM Press this button to read microcontroller s EEPROM data Immobilizer PIN Code 8 digit is calculated automatically after EEPROM reading is done Memory content can be modified and saved to disk with desired filename Output file size 256 bytes e Write MC68HC705B32 EEPROM Press this button to write data from Memory Dump window to the microcontroller s internal EEPROM Content can be modified prior to writing Input file size 256 bytes Ouick SIEMENS UCH repair SIEMENS UCH for MEGA
7. Read KM Press this button to read current mileage stored in the BIl e Write KM Press this button to change mileage stored in the Bll Enter desired mileage into the input box next to a button Valid input data range is O 999999km NOTE mileage will be changed in the Bll only No changes to mileage stored in the instrument cluster will be done e Clear for Replacement Press to clear key programming data and set mileage stored in the memory to 000000 km On the next ignition on cycle control unit will accept new key programming data from transponder key that is currently in ignition lock Mileage is to be automatically obtained from instrument cluster Disconnect and reconnect car battery or pull out and connect back yellow connector SS1 to the BII after Write MC68HC908AZ60 EEPROM Write KM and Clear or Replacement opperations Do it right before turning i support immo tools lt SIEMENS UCH for MEGANE SCENIC 1998 2002 Hardware Microcontroller MOTOROLA MC68HC705B32 2D59J or 3G96A EEPROM memory Internal MCU s EEPROM Memory size 256 bytes Basic functions e Read Identification Press to read control unit identification configuration and a state of key programming e Change UCH configuration Press to customize existing UCH configuration You can change 3 configurable parameters 1 Immobilizer function enabled YES NO ENABLE DISABLE immobilizer function in the UCH This configuration c
8. Renault CAN K line ECU Tool V1 09 User manual Immo 76 Tools It Revision F March 2013 support immo tools It 1 Introduction Renault CAN K line ECU Tool is an OBDII tool with various engine control unit internal memorv modification functions such as read write EEPROM and FLASH clearing immobilizer code There is no need to open control unit de solder out memorv IC or connect anv wires directiv to it Clear Immobilizer Code function is fully automated just press button and it is cleared ECU is ready to accept new immobilizer code after previously programmed code has been cleared no future programming is required It learns new code from operational immobilizer system or Renault Immobilizer Emulator not included by itself after first ignition on This is tool that makes your job easier and faster it takes no more than 40 seconds to clear SIRIUS32 immobilizer data or about 2 minutes to write fully its AM29F200 FLASH memory Besides you can also check immobilizer status of any supported ECU is immobilizer code programmed or not is protection active or inactive 2 PC reguirements Renault CAN K line ECU Tool connects to desktop or laptop PC using any free USB port It is self powered from USB and OBDII Software runs on Windows 98 Windows XP Windows Vista Windows7 Software package includes USB drivers support immo tools It 3 Supported electronic control units Software version V1 09 supports
9. ated to another car 2 Program byte marked with blue in the Pg3 TMCF PSW to 06 if its value is not 06 3 Program RF control configuration data field Pg6 RCF with data 10 08 71 8E marked with red in the picture Transponder memory TM Pat IDE DO F1 09 21 W R Pg 1 ISK LOw 4D 49 4B 52 B Pg 2 ISK HIGH 7A DC 4F 4E B Pg 3 TMCF PSW ce AA 48 54 W m Pg 4 RSKLOW 87 43 C6 6C Pg 5 RSK HIGH 00 OO EB 24 aala a86 o a a aalala 8181818 Key would be accepted during key programming and car would run but RF remote control would not opperate without these transponder configuration steps support immo tools lt ELECTRIC POWER ASSISTED STEERING PAS FOR MODUS CLIO Ill Hardware Manufacturer TRW Microcontroller INFINEON SAK XC164CS 32F40F External EEPROM memory 24C16 Memory size 2048 bytes Electric Power Assisted Steering control module DAE PAS made by TRW for MODUS CLIO III stores immobilizer code in the EEPROM memory Red immobilizer status LED in the instrument cluster is permanently lit and car does not start if previously used PAS control module is installed Immobilizer code programming can be cleared without intervention into hardware by OBDII diagnostic connector or in the on the bench connection using this software e Read Identification Press to read HW SW versions VIN and status of immobilizer code programming from t
10. b and press PIN from File button If Read EEPROM of MC68HC705B32 was performed before then yellow field already contains correct PIN Code Press Start Key Programming button then Press YES button to confirm Key Programming Red immobilizer LED in the instrument cluster goes OFF From now you have 3 minutes to turn ON ignition with the key you want to program Correct key code will be indicated with series of short blinks of immobilizer LED in the instrument cluster If LED is doesn t blink at ignition ON check transponder type configuration according to the pictures above If you found out that transponder type configuration is wrong close key O o support immo tools It programming procedure bv pressing NO exit without storing button then change it to correct tvpe and restart kev programming procedure Problem can be that vou are trving to program kev that has been alreadv programmed to another car d When one or both key codes were accepted press YES to store Key Programming data e Resynchronize RF remotes if necessary To do this e Turn ignition to OFF e Press button on the remote control and hold it depressed LED will flash quickly Hold button until LED will illuminate steady e Release button and press it 3 times in 2 seconds Door will lock and unlock on successful resynchronization Repeat for second remote control if necessary support immo tools It BOOT Mode functions Enter BO
11. be programmed and press this button to write 95P08 EEPROM memory Writes data from Memory Dump window to the 95P08 EEPROM Content can be modified prior to writing procedure Input file size 1024 bytes e Read FLASH AM29F400 Press this button to read full AM29F400BT FLASH memory image Memory content can be modified and saved to disk with desired filename Output file size 512 kilobytes e Write FLASH AM29F400 Open file containing data to be programmed and press this button to fully rewrite AM29F400BT FLASH memory Writes data from Memory Dump window to the AM29F400BT FLASH memory Content can be modified prior to writing procedure Input file size 512 kilobytes e Clear IMMO Code Press to clear immobilizer code stored in the 95b08 EEPROM memory Software version automatic detection is implemented ECU is ready to accept new code after clearing In case of original immobilizer system malfunction Renault Immobilizer Emulator not included can be used on EDC 15 C3 with non CAN immobilizer system 1998 2000 Engine will not start if no immobilizer code is stored at all support immo tools It BOSCH EDC15 C13 Hardware Microcontroller INFINEON SAK C167CS LM B00017 External FLASH memory AM29F400BT Memory size 512 kilobytes External EEPROM memory 95P08 Memory size 1024 bytes See chapter EDC15 C3 for software functions description NOTE EDC15C13 is enclosed in the casing that is
12. f immobilization ECU hardware and software versions are displayed Advanced functions e Read EEPROM Press this button to read internal microcontroller EEPROM Memory content can be modified and saved to disk with desired filename Output file size 256 bytes e Clear IMMO Code Press to clear immobilizer code stored in the EEPROM memory ECU is ready to accept new code after clearing Engine starts even with code cleared support immo tools It VALEO Bll Interconnection Unit for ESPACE III 98 02 Hardware Microcontroller MOTOROLA MC68HC 9 08AZ60 EEPROM memory Internal MCU s EEPROM Memory size 256 bytes Basic functions e Read Identification Press to read control unit identification and a state of key programming YES programmed control unit Needs to be cleared to use in the other car NO brand new or already cleared control unit It is ready to accept new transponder key data on the next ignition on cycle Bll Interconnection Unit Hardware Software versions are also displayed Advanced functions e Read MC68HC908AZ60 EEPROM Press this button to read microcontrollers EEPROM data Memory content can be modified and saved to disk with desired filename Output file size 256 bytes e Write MC68HC908AZ60 EEPROM Press this button to write data from Memory Dump window to the microcontroller s internal EEPROM Content can be modified prior to writing Input file size 256 bytes e
13. fied and saved to disk with desired filename Output file size 2 Megabytes e Write FLASH AM29BDD160GB Open file containing data to be programmed and press this button to fully rewrite AM29BDD160GB FLASH memory Writes data from Memory Dump support immo tools It window to the AM29BDD160GB FLASH memorv Content can be modified prior to writing procedure Input file size 2 Megabytes e Clear IMPACT DETECTED Fuel injection is disabled and status IMPACT DETECTED is recorded after car suffers an accident Press button Clear IMPACT DETECTED to re enable fuel injection This also can be done by clearing faults with CAN CLIP therefore immobilizer must be inactive So this function is useful when you have SID301 ECU connected on the bench without a car e Clear IMMO Code Press to clear immobilizer code SID301 is ready to accept new code after clearing No further learning with CLIP is necessary Engine will not start if no immobilizer code is stored at all e Read KM Press to read several mileages stored inside the memory of SID301 ECU Current version V1 03 does not have a function to change them but you can do this manually convert each mileage value to HEX using Windows Calculator and find these values in the EEPROM memory Make a changes and write back EEPROM file with EEPROM 95320 CRC Check selected support immo tools It SIEMENS SIRIUS 32 SIRIUS 32N EMS3132 with Immo bv Wire Hardware Microco
14. file to write to FLASH or EEPROM memory from Memory Dump tab selector From the same tab you can also save FLASH or EEPROM data readout to file WG RENAULT ECU TOOL V1 0 BOSCH EDC15C3 1998 ECU TOO Main Status Log Tool Select Memory Dump About A File D Copy of FlashPen Immo Renault Espace 2 2DCi Renault Espace 2 2DCI Bosch 0 281 010 178 SPO8C3 new OF 0123456789ABCDEF Description of ECU statuses e Immo code programmed YES immobilizer code is programmed Used ECU NO immobilizer code is cleared ECU is in autoprogramming mode for new immobilizer code to store e Immobilizer status ACTIVE ECU is locked by immobilizer Starting impossible INACTIVE ECU is not locked Engine starting is enabled support immo tools It 5 Hardware line OBDII 15 Biv OBDII 16 1 support immo tools It BOSCH EDC15 C3 Hardware Microcontroller INFINEON SAK C167CS LM External FLASH memory AM29F400BT Memory size 512 kilobytes External EEPROM memory 95P08 Memory size 1024 bytes Basic functions e Read Identification Press this button to read EDC15C3 Software Hardware version and status of immobilization Advanced functions e Read EEPROM 95P08 Press this button to read 95P08 EEPROM memory Memory content can be modified and saved to disk with desired filename Output file size 1024 bytes e Write EEPROM 95P08 Open file containing data to
15. hange will not make car running but can be used to disable red immobilizer LED blinking in the instrument cluster It is useful when immobilizer function in the Engine Control Unit is cleared car runs but immobilizer LED is still blinking and needs to be extinguished 2 Transponder type WEDGE BRICK SIEMENS UCH for MEGANE SCENIC can be configured to accept two types of key transponders Correct transponder type configuration can be recognized by its shape AU support immo tools It 3 Coded Solenoid Valve WITH WITHOUT Configure WITH for 1 9D and 1 9dT DIESEL only Must be configured as WITHOUT for other diesel injection systems MSA15 5 1 9dTi EDC15C3 1 9dCi and for all petrol injection systems e PIN from File Press to calculate 8 digits PIN Code from binary file loaded into Memory Dump tab File size must be 256 bytes e Start Key programming Press to start key programming procedure PIN Code is necessary It can be calculated from EEPROM dump or entered manually if it is already known When programming additional key already working key must be reprogrammed again Use NEW original never programmed key BLANK transponder ITP19 or key that has been already allocated to this car Up to 2 keys can be programmed Procedure steps a If you already have a PIN Code enter it manually to the yellow Pin Code field If you have previously read file from this UCH load it to the Memory Dump ta
16. he PAS control module Works by OBDII in the car or in the on the bench connection e Clear IMMO Code Press to clear immobilizer code from the memory of PAS control module New immobilizer code will be transferred from UCH on the first ignition key OFF ON cycle PAS module can be cleared by OBDII in the car or in the on the bench connection support immo tools It
17. ilobytes e Clear IMMO Code Press to clear immobilizer code stored in the emulated EEPROM memory Software version automatic detection is implemented ECU is ready to accept new code by WIRE CAN BUS after clearing Engine will not start if no immobilizer code is stored at all support immo tools It SIEMENS EMS3132 and SIRIUS32N with Immo bv CAN Clio2 Ph2 and some other CAN BUS based cars Hardware Microcontroller INFINEON SAK C167CS LM External FLASH memory AM29F200BB Memory size 256 kilobytes EEPROM memory _ In FLASH emulated Memory size 16 kilobytes Basic functions e Read ldentification Press to read EMS3132 Software Hardware version and status of immobilization Advanced functions e Read EEPROM Press this button to read emulated EEPROM area address range 4000 7FFF of FLASH memory Memory content can be modified and saved to disk with desired filename Output file size 16 kilobytes e Write EEPROM Press this button to write emulated EEPROM area address range 4000 7FFF of FLASH memory Programs EEPROM with data from Memory Dump window Content can be modified prior to writing procedure Input file size 16 kilobytes e Read FLASH AM29F200 Press this button to read full 29F200 FLASH memory image Memory content can be modified and saved to disk with desired filename Output file size 256 kilobytes e Write FLASH AM29F200 Open file containing data to be programmed and press
18. ntroller INFINEON SAK C167SR LM or CR LM External FLASH memory AM29F200BB Memory size 256 kilobytes EEPROM memory In FLASH emulated Memory size 16 kilobytes Basic functions e Read Identification Press this button to read SIRIUS32 Software Hardware version and status of immobilization Advanced functions e Read EEPROM Press this button to read emulated EEPROM area address range 4000 7FFF of FLASH memory Memory content can be modified and saved to disk with desired filename Output file size 16 kilobytes e Write EEPROM Press this button to write emulated EEPROM area address range 4000 7FFF of FLASH memory Programs EEPROM area with data from Memory Dump window Content can be modified prior to writing procedure Input file size 16 kilobytes e Read FLASH AM29F200 Press this button to read full 29F200 FLASH memory image Memory content can be modified and saved to disk with desired filename Output file size 256 kilobytes e Write FLASH AM29F200 Open file containing data to be programmed and press this button to rewrite fully 29F200 FLASH memory Writes data from Memory Dump window to the 29F200 FLASH memory Content can be modified prior to writing procedure Input file size 256 kilobytes e Clear IMMO Code Press to clear immobilizer code stored in the EEPROM memory Software version automatic detection is implemented ECU is ready to accept new code after clearing Renault Imm
19. obilizer Emulator not included can be used in case of original immobilizer system malfunction support immo tools It SIEMENS SIRIUS 34 Hardware Microcontroller INFINEON SAK C167CS LM External FLASH memory AM29F400BB Memory size 512 kilobytes EEPROM memory In FLASH emulated Memory size 16 kilobytes Basic functions e Read Identification Press this button to read SIRIUS34 Software Hardware version and status of immobilization Advanced functions e Read EEPROM Press this button to read emulated EEPROM area address range 4000 7FFF of FLASH memory Memory content can be modified and saved to disk with desired filename Output file size 16 kilobytes e Write EEPROM Open file containing data to be programmed and press this button to write emulated EEPROM area address range 4000 7FFF of FLASH memory Programs EEPROM area with data from Memory Dump window Content can be modified prior to writing procedure Input file size 16 kilobytes e Read FLASH AM29F400 Press this button to read full 29F400 FLASH memory image Memory content can be modified and saved to disk with desired filename Output file size 512 kilobytes e Write FLASH AM29F400 Open file containing data to be programmed and press this button to rewrite fully 29F400 FLASH memory Writes data from Memory Dump window to the 29F400 FLASH memory Content can be modified prior to writing procedure Input file size 512 k
Download Pdf Manuals
Related Search