Need help with W639 EIS, key not turn

[Msmax]

Guys need your help with this W639.
Did a lot of reading to better understand my problem with this car.

Key can not be turned. Tried with 2 keys.
Coils for power to key are activated if key is inserted, so I guess micro switch is ok.
In DAS I can see key is inserted, but key number is just "--".
I checked output on K-Line to ESL with Ficho soft. There is no signal send from EIS to unlock if key is inserted.
If I remove the key then a lock signal is send to lock, which is confirmed by Ficho soft to EIS.
Once in a while the key can be turned and car starts fine.

I removed the EIS, connected on the workbench to a MB EIS Test Platform with same results.
Must say that my MB EIS Test platform is brand new, never tested before. So, I am not sure the device is OK.
I also ordered an ESL emulator but not arrived yet.

I also tested the keys for RF and IR signals with MBE key tester, seems to be OK.

Any thing else I can check before proceeding to dumps?

To prevent data loss and other problems I really need your advise on how to read the EEPROM and Flash.
I have myself an original UPA-USB and X-Prog clone.

Some numbers:
EIS: A639 545 21 08
Micro: MC9S12DT256CPVE
Mask: 0L01Y

your help to solve this problem is appreciated...

[Ringo24]

you have to solder the MCU

[droidwayne65]

It's behavior suggests that while it knows a key has been inserted, it views them as not belonging to it. This points to an eeprom data problem (assuming the keys do belong to it). The next step should be to read the eeprom and check for problems.

[MarkPRP]

check main coil and IR lense

[madaxe]

Show the other side of the keys, any damage ? Take circuit board out of keys, verify the coil is attached and undamaged.

[IchBins]

Check the ir lens from the ice, press the microswitch by hand and see if the ice is sending an IR signal. You can simply use the camera of a smartphone

[Msmax]

Thanks guys for your help with this problem.

@Ringo24: Did re-solder the MCU, did not change the behaviour.

@droidwayne65:
The keys do belong to this car, I was able to start it my self few times.
I have XPROG-M V5.0. I could not find this MCU mask in the software. Any idea's what to use to dump the EEPROM?
Should I upgrade my XPROG-M to later version or buy another (type) programmer? What do you advise?

@MarkPRP: Both coils measured around 1.5 Ohm. Have a PCB coil tester and that shows activation of the power coils by a LED.

@madaxe:
Did check the keys visually.
I did test them with MBE key tester, RF & IR seems to be ok, however that does not say anything about the coil.
Now I have checked them by opening the keys. They are ok.

@Ichbins:
Connected the EIS to the EIS Test Platform connectors for power and pressed the small micro switch by hand but could not see any activation of IR in the EIS key slot it self.
Tested the camera with a normal remote control just to make sure the camera shows the IR signal.

There is a small switch mounted on the board which is activated by a copper lever and the switch is always pressed if there is no key in the barrel.
Copper lever removed: If I press this switch there is no IR signal and also the power coils are not activated.
However if I release this switch then the power coils are activated, but no IR.


With the lever removed from the barrel and key inserted the power coil is not activated.
But if I try to twist the key then the power coil is activated. Means there is another switch inside the barrel.
If the lever is mounted then the power coils are directly activated upon insertion of the key.

Just to be sure I used an empty key housing, inserted in the barrel and the power coils are activated but no IR transmitted from the EIS in the barrel.

Should there be an IR signal transmitted from the barrel on the EIS if this switch is activated?

[droidwayne65]

Thanks guys for your help with this problem.

.....
@droidwayne65:
The keys do belong to this car, I was able to start it my self few times.
I have XPROG-M V5.0. I could not find this MCU mask in the software. Any idea's what to use to dump the EEPROM?
Should I upgrade my XPROG-M to later version or buy another (type) programmer? What do you advise?
......

Look for MC9S12-EEPROM-secured under HC(S)S12-secured in Xprog.

[IchBins]

Yes, when plugging in the key, IR should turn on for a short time. EIS and keys only communicate via IR.
For better control, you can remove the small prism at the end of the key slot. Then you can also use the key and do not need to push the microswitch by hand.
Sometimes only the optics are dirty. I had a case when the owner WD40 sprayed into the EIS, as the key sometimes turned hard.

[Msmax]

@droidwayne65: I found that one.. but the mask listed are not the one I have found om the Micro in this EIS. Does it matter? Can I still try to dump the EEPROM?

@Ichbins:
You are right. I tried the empty keyshell in my own car and did see a short blink transmitted from the EIS.
And... in this EIS they also sprayed something because it is hard to get the key out sometimes.
I will disassemble the EIS a bit more to reach at the lens.

Will keep you guys updated...

[droidwayne65]

@droidwayne65: I found that one.. but the mask listed are not the one I have found om the Micro in this EIS. Does it matter? Can I still try to dump the EEPROM?

@Ichbins:
You are right. I tried the empty keyshell in my own car and did see a short blink transmitted from the EIS.
And... in this EIS they also sprayed something because it is hard to get the key out sometimes.
I will disassemble the EIS a bit more to reach at the lens.

Will keep you guys updated...

Surprised it isn't listed. Usually is, if you scroll down to the xx256 list. However that doesn't matter; Xprog will poll for identity and then proceed to read if it's allowed.

[Msmax]

Afternoon UPDATE:
Checked output of micro with scope, definately no signal coming out of the micro if key is inserted.


@IchBins
It is sure that there is no IR signal transmitted from the EIS if a key is inserted.
This morning before leaving to work I traced the circuit back. See attached picture.
This evening I will check if the micro does send out something or not on pin 9 with a scope.

Did you have had this problem before and how did you solve it?

W639 EIS IR Circuit.jpg

[Msmax]

@droidwayne65:
I was soldering the wires as per info in Xprog-M 5.0 documentation and found that pins 36-37-38 are all 3 tied to circuit GND = same as pin 40 VSSR.
According the connection diagram pin 36 = XCLKS.

Can this be correct?

Is there a connection diagram available of points which are more easy to solder then on the pins of the micro?

[IchBins]

that's the scheme of r270


1 VDD
7 Reset
8 Extal
19 BKGD
24 VSS
26 VSS

[Msmax]

@IchBins,
Thanks. That makes life easy....

How did you solve the problem that there is no IR transmitted from the EIS?
I wonder if this is a defect output pin or corrupted flash in the micro.