VVDI2 Transponder Programmer User Manual

3y ago
62 Views
2 Downloads
1.54 MB
44 Pages
Last View : 27d ago
Last Download : 3m ago
Upload by : Nadine Tse
Transcription

VVDI2 – TransponderProgrammer User Manual

VVDI2 – Transponder ProgrammerTable of Contents1.Document Declaration . 42.Overview . 53.4.2.1.Noun explanation . 52.2.Options . 52.3.Transponder Programming . 52.4.Special Transponder . 62.5.Immobilizer Data Tool . 62.6.Other Key Tool . 62.7.Prepare Remote . 62.8.Remote frequency test. 62.9.IC Chip Program . 6Options . 73.1.Choose Language . 73.2.Antenna Parameters . 7Transponder Programming. 84.1.Autodetect Transponder . 94.2.PCF7930/PCF7931/PCF7935 . 104.3.HITAG2 . 114.4.HITAG2 EE . 144.5.HITAG2 Extended. 154.6.HITAG3 . 162Ver: 1.0

VVDI2 – Transponder Programmer5.6.7.8.4.7.HITAG Pro . 174.8.HITAG (BMW) . 184.9.HITAG (VAG) . 194.10.MEGAMOS 13. 204.11.MEGAMOS 48. 214.12.MEGAMOS 8E . 224.13.TEMIC 11/ TEMIC 12 . 234.14.TEMIC 8C. 244.15.TIRIS 4C . 254.16.TIRIS DST 4D/TIRIS DST 4E . 264.17.TIRIS DST . 274.18.T5/TK5551 . 28Special Transponder . 295.1.Mainly function . 295.2.Support Type . 295.3.Some Special Transponder Note. 32Immobilizer Data Tool . 346.1.Mainly function – Make a working key . 346.2.Support Car Type. 356.3.Special Note. 37Other Key Tool . 38Prepare Remote . 438.1.Prepare new remote key . 433Ver: 1.0

VVDI2 – Transponder Programmer1. Document DeclarationPlease view the following declaration carefully: VVDI2 – Transponder Programmer User Manual can help you maintenance vehiclesand read/write transponder with VVDI2 device. Please DON’T used for illegalpurpose, Please follow the national law VVDI2 – Transponder Programmer User Manual is written by VVDI2, please DON’Tused for commercial purposes without authorize VVDI2 –Transponder Programmer User Manual can help you how to useTransponder Programmer software, please view carefully Any illegal use VVDI2 –Transponder Programmer User Manual, illegal useVVDI2 device, The user should take all risks, the company does not assumeany responsibility4Ver: 1.0

VVDI2 – Transponder Programmer2. Overview2.1. Noun explanationTransponder: immo transponder, the transponder inside key, sometimes we call itchipsub-remote-pcb: the remote PCB, used in Prepare Remote function. After write datawith remote programmer, it can adapt to car for remote functionRemote Programmer: It is not standard device, This device can connect to DB15 inVVDI2, it can prepare remote key with sub-remote-pcbByte: a decimal value between 0-255, but we can’t input decimal value, we input hexvalue, every byte between 00-FF.Note: For the byte use in transponder, every inputcharacter must belong to 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, F2.2.OptionsDetail can be found in chapter 3 Options Choose Language2.3.Transponder ProgrammingDetail can be found in chapter 4 Transponder ProgrammingSupport auto detect transponder type, support following types:1) PCF7930/PCF7931/PCF79352) HITAG23) HITAG2 EE4) HITAG2 Extended5) HITAG36) HITAG Pro7) HITAG (BMW)8) HITAG (VAG)9) MEGAMOS1310) MEGAMOS4811) MEGAMOS8E12) TEMIC 11/TEMIC 1213) TEMIC 8C14) TIRIS 4C15) TIRIS DST 4D/4E16) TIRIS DST 17) T5/TK55515Ver: 1.0

VVDI2 – Transponder Programmer2.4.Special TransponderDetail can be found in chapter 5 Special TransponderThis function can prepare a blank transponder to special one, just as key ordered bydealer, it can be learned to car with PIN2.5.Immobilizer Data ToolDetail can be found in chapter 6 Immobilizer Data ToolThis function can make a working key directly with immobox EEPROM dump. Supportmost of the car manufacture2.6.Other Key ToolDetail can be found in chapter 7 Other Key ToolMainly include unlock key, VAG searching 7th bytes CS, VAG prepare dealer with 7 bytesCS, Change MEGAMOS 48 ID etc2.7.Prepare RemoteDetail can be found in chapter 8 Prepare RemoteThis function use Remote Programmer write special data to sub-remote-pcb, makesub-remote-pcb become an original remote key, it can adapt to car for remote function2.8.Remote frequency testJust provide power to VVDI2, place remote key on CHECK area, CHECK area is onVVDI2 device, Press button “F”, then press any button of your remote key, the frequencyand type will display on VVDI2 LCD display2.9.IC Chip ProgramAttention: this function not support now6Ver: 1.0

VVDI2 – Transponder Programmer3. Options3.1.Choose LanguageSupport following languages: Chinese (Simplified) EnglishPlease manual set user language after first run program3.2.Antenna ParametersYou can make the antenna more stable with change gain value (PICTURE 3.1)For every key is different from each other, the transponder is different position in the key,Thus will cause bad answer while access transponder. You can change antenna gain tolarge the sensing range, make antenna access the far away transponderAntenna gain value can be 0, 1, 2, 3When gain value smaller, the sensing range will be small and lower. If the transponderposition is higher from antenna, the access may failedWhen gain value larger, the sensing range will be large and higher. If the transponderposition is lower from antenna, the access may failedSimply:If the transponder position is far away from antenna, you need select higher gain foraccess, example: 2 or 3If the transponder position is nearby or in antenna, you need select lower gain for access,example: 0 or 1(PICTURE 3.1)7Ver: 1.0

VVDI2 – Transponder Programmer4.Transponder ProgrammingSupport following types:1) Autodetect Transponder2) PCF7930/PCF7931/PCF79353) HITAG24) HITAG2 EE5) HITAG2 Extended6) HITAG37) HITAG Pro8) HITAG (BMW)9) HITAG (VAG)10) MEGAMOS1311) MEGAMOS4812) MEGAMOS8E13) TEMIC 11/TEMIC 1214) TEMIC 8C15) TIRIS 4C16) TIRIS DST 4D/4E17) TIRIS DST 18) T5/TK55518Ver: 1.0

VVDI2 – Transponder Programmer4.1.Autodetect Transponder(PICTURE 4.1)Input transponder to VVDI2 programmer, press button “Autodetect Transponder”, it willdetect transponder type and simple status information. You can turn to specify type aftersuccess read (PICTURE 4.1). Autodetect Transponder function can run without software,just provide power to VVDI2, press button “T” on the device, transponder type will show inthe LCD display9Ver: 1.0

VVDI2 – Transponder Programmer4.2.PCF7930/PCF7931/PCF7935Many old cars use this transponder as immo transponder, this transponder supportgenerate many types special transponder. It mainly contains Password, Main memory,Shadow memory etc. Note: PCF7930 and PCF7931dont have Shadow memory, onlyhave Main memory. PCF7935 have this 2 memory both. Shadow memory only has 16bytesWrite: You need read transponder success before write, modify the position to your expectvalue, the byte will change read after edit, then write to transponder (PICTURE 4.2)(PICTURE 4.2) Read Transponder: Read Main memory don’t require passwordWrite: For the transponder enabled Password feature, you must place correctpassword in Password area before write10Ver: 1.0

VVDI2 – Transponder Programmer4.3.HITAG2HITAG2 is very popular immo transponder (PICTURE 4.3), it is compatible with PHILIPSPCF7936 transponders. It support following 946PCF7947PCF7952PCF7953PCF7961(There’s some other HITAG2 transponder made by small company, it don’t have theabove type, but also support)Access method: PCF7936 support Password mode and Cipher mode Other’s don’t have Password mode itself, only have Cipher mode For Password mode: Only SK low was used for login,Default key:4D494B52 For Cipher mode: It use SK low and SK high for login, Default key: SK low:4D494B52; SK high: 4F4ECoding method: Support Manchester and Biphase coding (Note: Most immo transponder useManchester coding, rarely use Biphase type)11Ver: 1.0

VVDI2 – Transponder Programmer(PICTURE 4.3) Read TransponderIt will read all readable page and shown in window (Transponder information,Transponder data, Remote control(not all transponder have this area)),it will trypassword mode and cipher mode automatically, also Manchester and Biphaseautomatically. For the transponder with default key we can read all readable pages. Ifthe transponder was changed SK value, we can only read ID before you input correctSK value in Parameter. Every page in HITAG2 has 4 bytes. The type is detect withidentifier, so it will not strictly for many OEM keysAbout the transponder manufacture configuration(TMCF)TMCF byte is very important; usually it is the first byte in Config page. Example:Config page is “XXYYZZWW” (4 bytes). The first byte “XX” is TMCF,write errorTMCF value can lock the transponder or damage it. The specify explanation for TMCfollowing: Convert XX(hex) to binary, it have 8 bits, every bit can be 0 or 1, we set as:X1 X2 X3 X4 X5 X6 X7 X8X1: If set to 1, the SK low and SK high was unable to read and writeX2: If set to 1, the Config page was unable to write, but read is always availableX3: If set to 1, Remote control area was unable to read and write(Note: PCF7936have none about this bit)X4: If set to 1, transponder data was unable to write, but read is always availableX5: If set to 1, transponder is use transponder data area. If set to 0, mean use remotecontrol area (Attention: For PCF7936, if set to 1, transponder use Cipher mode, if setto 1, transponder use Password mode)12Ver: 1.0

VVDI2 – Transponder Programmer X6: Always 0, reserve bit (Attention: PCF7936 must set to 1, set to 0 will damagetransponder)X7: Always 0, reserve bit (Attention: PCF7936 must set to 1, set to 0 will damagetransponder)X8: If set to 0, transponder use Manchester coding, if set to 1, use Biphase coding(CDP)How to change a byte to binary: With PC system Calculator - Select Scientific- SelectHex - input TMCF value - Select Bin, you can see the binary values. If binary not havetotal 8 bits, means the front have several 0Example: TMCF value is C8, so X1-X8 have value: 11001000The transponder use Manchester codingThe transponder use transponder data areaThe SK low and SK high was unable to read and writeThe Config page was unable to write, but support read13Ver: 1.0

VVDI2 – Transponder Programmer4.4.HITAG2 EESupport read EEPROM data for PCF7952, PCF7945, PCF7953 etc. (Note:Standardaccess method for HITAG2 EEPROM, just like Hyundai, Kia keys. BMW key not belongto this type) (PICTURE 4.4)(PICTURE 4.4)14Ver: 1.0

VVDI2 – Transponder Programmer4.5.HITAG2 ExtendedSupport read/write EEPROM data for HITAG2 Extended transponder, mainly used n GMcars. You can read with SK values. Enable SK will read more data compared with notenable SKWrite: You need read transponder success before write, modify the position to your expectvalue, the byte will change read after edit, then write to transponder (PICTURE 4.5)(PICTURE 4.5)15Ver: 1.0

VVDI2 – Transponder Programmer4.6.HITAG3Support read EEPROM data for HITAG3 (Some new key in Nissan use this type) ( PICTURE4.6)(PICTURE 4.6)16Ver: 1.0

VVDI2 – Transponder Programmer4.7.HITAG ProHITAG Pro transponder, now we know BMW F-Series keys, new Porsche keys belong tothis type. Support read EEPROM data (PICTURE 4.7)(PICTURE 4.7)17Ver: 1.0

VVDI2 – Transponder Programmer4.8.HITAG (BMW)Support read/write EEPROM data for BMW remote (keyless) keys.Write: You need read transponder success before write, modify the position to your expectvalue, the byte will change read after edit, then write to transponder(PICTURE 4.8)(PICTURE 4.8)18Ver: 1.0

VVDI2 – Transponder Programmer4.9.HITAG (VAG)HITAG (VAG) is a special transponder for VAG immo5 keys. It can read EEPROM data.As we know, A4/A5/A6/A7/A8/Q5/Touareg cars with immo5 system use this type key(PICTURE 4.9)(PICTURE 4.9)19Ver: 1.0

VVDI2 – Transponder Programmer4.10. MEGAMOS 13MEGAMOS 13 only have a data stream.Support copy transponder: Just write the transponder identifier to the simulatetransponder (T5 or PCF7935) (PICTURE 4.10)(PICTURE 4.10)20Ver: 1.0

VVDI2 – Transponder Programmer4.11. MEGAMOS 48MEGAMOS 48 have 16 pages(PICTURE 4.11) ,We can read Page0-Page4,Page15-Page12. Other pages only have write operation. Every page has 2 bytes(PICTURE 4.11) Read TransponderRead identifier (Page3/Page2), config page (Page1, Page0) and user page(Pager15-Page12)If page 1 shown with red mean the transponder is locked. You can’t write any data tolocked transponderAbout change MEGAMOS 48 identifier: see Change megamos 48 ID in chapter 7 OtherKey Tool PIN / UnlockThe PIN code is stored in Page11, Page10,this 2 pages is write only page. You can lockthe transponder to blank one with button “Unlock” and correct PIN codeAttention: Electronic MEGAMOS 48 made by VAG don’t support unlock operation Crypto KeyMEGAMOS 48 have 12 bytes crypto key, stored in page9-page4Input correct key in page9-page4 (not write, only input), Press button “Verify”, you canverify the crypto key with values stored in transponder21Ver: 1.0

VVDI2 – Transponder Programmer4.12. MEGAMOS 8EMEGAMOS 8E transponder (PICTURE 4.12), mainly contain identifier, Data area, Cryptokey area. This transponder usually used in A6/Q7/Allroad (EZS-Kessy J518 4thimmobilizer system)(PICTURE 4.12) Read Transponder: It can read identifier, and 8 pages data area. Every page has 2bytesCrypto key area: This area only support write. It contain the crypto key, total 12 bytesUnlock: You can unlock the transponder to blank with correct crypto keyCheck Blank: Check transponder locked or not, the transponder will lockedimmediately after write crypto key22Ver: 1.0

VVDI2 – Transponder Programmer4.13. TEMIC 11/ TEMIC 12TEMIC 11 和 TEMIC 12 芯片非常接近, 通讯方式略有不同. 对于标准的芯片来说, TEMIC11 芯片默认头部为 BEFA, TEMIC 12 芯片默认头部为 660F 或 66F0. �能手动搜索(PICTURE 4.13). 此芯片只有一个数据流信息, 支持芯片拷贝.拷贝只要把原始芯片 ID 写入到 T5 模拟芯片中(PICTURE 4.13)23Ver: 1.0

VVDI2 – Transponder Programmer4.14. TEMIC 8CTEMIC 8C 芯片只有一个数据流信息(PICTURE 4.14)(PICTURE 4.14)24Ver: 1.0

VVDI2 – Transponder Programmer4.15. TIRIS 4CTIRIS 4C only have a Data stream (PICTURE 4.15)Support copy transponder: Just write the Tiris 4C data to TIRIS 4C or TPX1(PICTURE 4.15)25Ver: 1.0

VVDI2 – Transponder Programmer4.16. TIRIS DST 4D/TIRIS DST 4ETIRIS DST 4D is very similar with TIRIS DST 4E,they have same data area and algorithm,crypto key is 40 bit(5 bytes) stored in page 4. The only different is they have differentcoding method, so this 2 transponder can’t instead each other (PICTURE 4.16)(PICTURE 4.16)Read Transponder: Read Page1-Page4 (default key can read for page4) and getlock status. If the page was locked, you can’t write data anymore. Page3 usually useas identifier, it combined with 3 bytes Serial and 1 bytes manufacture code Write: Write data to unlock page. Page1 and Page2 have 1 byte, Page3 have 4 bytes,Page4 have 5 byes Lock: It can protect the page for write operation TIRIS crypto verify: This function can verify the stored crypto key (page4) right ornot Check TIRIS response (40 bits): VVDI2 send the seed to transponder and read thecrypto value (3 bytes) Calc TIRIS response (40 bits): VVDI2 have the algorithm for TIRIS 40 bits, we cancalculate the seed and key, get right crypto value (3bytes). Compare this value withtransponder response value, if they are same, the transponder have same cryptokey as you input. (Attention:For some special crypto key, you need check severaldifferent seed for the verify) 26Ver: 1.0

VVDI2 – Transponder Programmer4.17. TIRIS DST TIRIS DST support 2 algorithm, one is same as TIRIS DST 4D (40 bits), another is 80bits (10 bytes) algorithm (Toyota G transponder use this type). It have same codingmethod with TIRIS DST 4D, so if the transponder deploy to 40 bits method, it can insteadTIRIS DST 4D transponder(PICTURE 4.17)(PICTURE 4.17)Read Transponder: Read Page1, Page2, Page3, Page4 (Default key can be read),Page8-Page12, Page29, Page30 and lock status. If the page was locked, you can’twrite data anymore. Page3 usually use as identifier, it combined with 3 bytes Serialand 1 bytes manufacture code Write: Write data to unlock page. Page1 and Page2 have 1 byte, Page3 have 4 bytes,Page30 have 2 bytes, other’s page all

VVDI2 – Transponder Programmer User Manual is written by VVDI2, please DON’T . HITAG Pro transponder, now we know BMW F-Series keys, new Porsche keys belong to this type. Support read EEPROM data (PICTURE . 4.7) (PICTURE . 4.7) VVDI2 – Transponder Programmer 18 Ver: 1.0 4.8. HITAG (BMW)

Related Documents:

Hyundai Santa Fe 2003-05 Transponder Hyundai Sonata 2004-06 Transponder Hyundai Tiburon 2003-05 Transponder Hyundai Tucson 2005 Transponder Hyundai XG300 2001 Transponder Hyundai XG350 2002-05 Transponder Infiniti FX35/FX45 2003-05 Transponder Infiniti G20 2000-02 Transponder Infiniti G35 Coupe 2003-05 Transponder

VVDI2 – VAG User Manual is written by VVDI2, please DON . Audi A4 –instrument Crypto RB8 (2004 ) 19. Audi A6/Q7/Allroad – EZS-Kessy 20. Audi Q3 5.1.1. 4th immobilizer system – Instrument cluster Support function: read/write EEPROM, read/write FALSH (part support), change KM, add key, read START/STOP key data etc VVDI2 – VAG provide auto detect cluster login type. 4th immobilizer .

2. ECU/CAS ISN: Improvement decode B38/B48 ISN with EEPROM dump 3. Bugfix Porsche V6.6.0 1. Bugfix VVDI2 PSA V6.6.0 1. Bugfix Transponder Programmer V6.6.0 1. Fixbug for make chevrolet epica with VVDI super remote 2. Support copy remote with VVDI super remote 3. Generate Toyota H chip with VVDI super chip no need boint points 4.

CK-100 key programmer CTK058-03 76.30 AT89C51CC03UA-UM Chip with 1024 Tokens for CK100 key programmer (MOQ: 5pcs) CTK058 60.00 Super AD900 key programmer CTK033 105.00 CN900 Transponder key programmer (OEM version) CTK045 243.00 ND900 Transponder universal key programmer (OEM version) CTK047 243.00

VVDI2 – VAG User Manual . Audi A3 - CAN 8) Audi A6/Q7/Allroard 2005 - CAN (Support OBD lost all key) 9) Seat Altea -2007 - CAN . Seat, Skoda, Audi with VDO NEC 2009 - UDS (Support OBD lost all key) 39) Lamborghini Gallardo -2005 40) Lamborghini Gallardo 2005 41) VW with NEC 95320 or Magneti Marelli with Motorola 9S12 2009 - UDS

FIAT ALFA LANCIA ABARTH - Process Fiat has four types of security system TYPE 1 -ISO 1 (Transponder ID:48) TYPE 2 -ISO 2 (Transponder ID:48) TYPE 3 -CAN 1 (Transponder ID:46 OR ID:48) TYPE 4 -CAN 2 (Transponder ID:46) The software will auto-detect the correct procedure based upon the vehicle selection. The procedure will

zed-qx version: 1.0.5 vehicle transponder zed-qx transponder type can zed-qx copy it? which transponder you should use 3.5rl 1997 meg 13 yes t5 nova cl&tl 1999

The Audit and Accounting Thresholds . AAT is a registered charity. No. 1050724. 3. Accounting Threshold The . regulations apply in respect of financial years beginning on or after 1 January 2016 whereby the audit threshold and the accounting threshold have become the same for private limited companies. The requirements for a private limited company that is also a charity are different. Please .