Announcement

Collapse
No announcement yet.

MSS60 Research

Collapse
X
Collapse
 
  • Page of 10
  • Filter
  • Time
  • Show
Clear All
new posts
Previous 1 10 template Next
    #136
    Yeah I've written modified programs with no issue. RSA bypass needs to be done first
    • Likes 1

    Comment

      #137
      Originally posted by terra View Post
      Yeah I've written modified programs with no issue. RSA bypass needs to be done first
      Nice. Are you open to doing similar RSA bypass for other BMW ECUs as paid work? Tried to PM you, won’t let me.

      Comment

        #138
        Originally posted by terra View Post
        That resistor to boot from external SRAM could be useful for recovering complete bricks.
        This similar to SBOOT on newer ECUs?

        GitHub - bri3d/Simos18_SBOOT: Documentation and tools about Simos18 SBOOT (Supplier Bootloader), including a Seed/Key bypass and Tricore boot password recovery tool.
        https://github.com/bri3d/Simos18_SBOOT
        Documentation and tools about Simos18 SBOOT (Supplier Bootloader), including a Seed/Key bypass and Tricore boot password recovery tool. - bri3d/Simos18_SBOOT


        Comment

          #139
          Originally posted by pshoey View Post
          terra do you remember what OCD Speed setting you used with your Wiggler?

          Also, seems my 5KW9586 ECU is BDM locked. I borrowed a Yanhua ACDP adapter that can read out either side - worked perfectly on my MSS65 but on the MSS60s I have, works on right side (obviously) but not on left side.

          Interestingly, on 2 of the later ECU units, the error on the left side was CPU Encrypted but on the 9586 the error was "wrong model" (related to cpu identity).

          I have one unit left to try, a 5KW9588 with 080E version of software. I'll open it up tomorrow if I get time.

          It would seem to me that the "BDM lock" was introduced by a software update, given that the lock is software activated - I know you (@terra) disagree with that general opinion.
          pshoey Do you know what version of SP-DATEN had the 080E? I have a half BDM read of one, but no full OBD read. Want to flash an mss60 with it from WinKFP and do some testing on it.

          Comment

            #140
            Originally posted by adrianj73 View Post

            pshoey Do you know what version of SP-DATEN had the 080E? I have a half BDM read of one, but no full OBD read. Want to flash an mss60 with it from WinKFP and do some testing on it.
            Z08E is an update released in Jul2008
            Hardware 7841981 and soft EU 7841976 (ZB 7841975) US 7841978 (ZB 7841977)
            If you need I could send

            Comment

              #141
              i read this Thread in the end i find lot infos but nothing what Helps me i search Backup BDM (KTAG) for MSS60 most interessed on MPC maybe anone can help me here ??ß

              Comment

                #142
                Originally posted by obdshop View Post
                i read this Thread in the end i find lot infos but nothing what Helps me i search Backup BDM (KTAG) for MSS60 most interessed on MPC maybe anone can help me here ??ß
                You will need tool created by Vincent to unlock the processor. Contact MpowerE36 .

                Last edited by Tomba; 09-10-2024, 04:43 AM.

                Comment

                  #143
                  So there is no way to unbrick MSS60 in BDM with Ktag after Flashing RSA Bypass with cheap cable?

                  Comment

                  Previous 1 10 template Next
                  Working...
                  X