PDA

View Full Version : How to write bmw key to PCF with tagkey tool?



labusas
27th May, 2012, 02:10 PM
Hi,
I have keys generated by EWS EDITOR. It has 4 lines of code.
The tagkeytool editor expects 7 lines and won't write this file by default.
What is the correct way to enter this file in to PCF7935 chip?
Thanks

smokey08
27th May, 2012, 11:07 PM
Post dump and tell me which key you want to use.

labusas
28th May, 2012, 01:17 AM
Thanks, I know that keys 0, 1, 2 are used and others are not. I do have all 3 to 9 key files. It's just I don't have ews editor hardware to write this file to the PCF7935. I have tagkey tool and codereader. Need to make sure I know how to write properly. In tagkey toll I can only enter the code by hand and then program. Don't have car now and want to be sure when it comes.
Regards

smokey08
28th May, 2012, 01:34 AM
Basically the top line has the password and write protect, 2nd line has key number and read protect, and 3rd line has key number and rolling code. The file you have is the rest of the lines (Fixed code, VIN, Mileage, Service data). I will make an example for you tomorrow.

labusas
28th May, 2012, 02:55 AM
Thanks
That's the dump from ews4 and a key #5
How to combine both to make a good PCF7935 key file?
Regards

smokey08
28th May, 2012, 07:26 PM
Here is how it should look.

blacklisted
29th May, 2012, 01:48 AM
@smokey
in labusas ews dump after the hex string 02 01 00 00

what are these hex string i ask as the above string is repeted around six times

it may be nothing but just asking as i saw this pattern

smokey08
29th May, 2012, 02:16 AM
x2 01 00 00 means key not used. x3 01 00 means key is used. Just before each of them is the fixed key code.

labusas
29th May, 2012, 01:10 PM
Thanks Smokey.
In your file you've added 3 lines ahead of the lines generated by EWS EDITOR. Please confirm:
line 00000 contains password: 2C8EEFD8F8EC05 (where found?)
Line 00010 has BMW in hex
Line 00020 has value AA05 (is it 05 for key number?)
thanks

bram380
29th May, 2012, 01:41 PM
Hi,
I have keys generated by EWS EDITOR. It has 4 lines of code.
The tagkeytool editor expects 7 lines and won't write this file by default.
What is the correct way to enter this file in to PCF7935 chip?
Thanks

Try to read bmw key by Tagkeytool & post here.

labusas
29th May, 2012, 04:22 PM
Hi, Bram
This car is 200 miles away. I sent customer some chips to try:
1. One as you generated with EWS editor (could write with codereader but not tagkey.
2. second as Smokey edit above key5.rar with 3 extra lines of code (including password line...)

Problem is with tagkey tool. Before update it generated ews4 keys no problem - after latest update won't finish writing, even with dumps previously worked.

bram380
29th May, 2012, 04:47 PM
ok. good luck

smokey08
29th May, 2012, 06:33 PM
Line 00000 Password (2C8EEFD8F8EC) is found at 0x98-0x9D in EWS dump and the 05 on the end is the key number. The 01 after that activates the password and the 03 after that write protects line 00000 and 00001.

Other 2 lines you are correct.

thiburco
22nd June, 2012, 05:14 AM
can anyone tell me where you think the "EWS Editor"?

Thank you!