PDA

View Full Version : BMW e61 cas problem



EMCE159
19th March, 2024, 08:46 PM
Hello
I have this car in akl situation. I've read cas3 tango detected as cas3+, so I read also ecu, tango made transponder but car doesn't accept it. Ecu is edc16 so as I thought it should have short isn, but according to tango it has long one. I've read somewhere that this cas3 isn't fully encrypted and in reality it has isn. Can anyone check my dumps and help?
Regards

fred77
19th March, 2024, 10:55 PM
have you been on tango forum

sure somebody can help here also

bmujka
20th March, 2024, 10:34 AM
i think your ecu has short isn... 42 E2

rokibar
20th March, 2024, 06:24 PM
Hello
I have this car in akl situation. I've read cas3 tango detected as cas3+, so I read also ecu, tango made transponder but car doesn't accept it. Ecu is edc16 so as I thought it should have short isn, but according to tango it has long one. I've read somewhere that this cas3 isn't fully encrypted and in reality it has isn. Can anyone check my dumps and help?
Regards
hi emce 159. try this and report please. pass in pm.
1017566

bmujka
20th March, 2024, 11:40 PM
So can u share what u did. I understand if u don't want to but did u test this type of mod on other cars

rokibar
21st March, 2024, 08:11 AM
So can u share what u did. I understand if u don't want to but did u test this type of mod on other cars
Let see what emce will answering.

EMCE159
21st March, 2024, 11:40 AM
I build harness to ecu and than I was able to do it "by obd" with avdi. After car started I read ISN from key, it was BB D7 FB BB D7 FB BB D7 BB D7 FB BB D7 BB FB BB. But I don't have a clue how to calculate it from my dumps. Thank you rokibar for your help, but I didn't try your solution.

bmujka
21st March, 2024, 11:49 AM
congrats man. was waiting to see if rokibar mod worked :D:D

rokibar
21st March, 2024, 12:23 PM
.........welcome.......

droidwayne65
24th March, 2024, 02:20 PM
A couple tricks to making a key for CAS3+ with a two-byte ISN. You can turn off the "3+" flag and the programmer does the rest, since the ISN isn't encrypted. Although, on a couple gas cars, I had to actually mod eeprom further with a ISN string. The other way is to leave eeprom intact as 3+ but feed the programmer a constructed ISN when it asks for it.