kess v2 master clone repair

[powernb]

I have to repair solul?ao kess v2 clone without changing chip

[Anmed]

I need it. I have a J-Link 8, how to get the rest? Announce conditions, do not torment me waiting.:party:

[blackpirate]

i read something about that here
How to solve the problems of the limited tokens of KESS V2? Why the chip can only write for one time? | AutoOBD2 offiziellen Blog (http://blog.autoobd2.de/2013/11/01/how-to-solve-the-problems-of-the-limited-tokens-of-kess-v2-why-the-chip-can-only-write-for-one-time/)

[kevfield]

Yes i see this but must need HEX file to write to NXP i dont see HEX for it in your link ... do you have HEX ??

Thanks kev

[niwat_spp]

Hi., i think.solution compair hex files. Before and after for check counter in hex files....and edit hex for solve it.

Best regards

[Anmed]

Yes i see this but must need HEX file to write to NXP




Yes! And in the fifth paragraph mentions "video." Where the video? )))

[kevfield]

Can not compair HEX from nxp because can not read HEX only can write .....

Thanks kev

[powernb]

I HAVE THE FILE FOR WRITING WITH J-LINKV8 (kess-LPC2478-66668'189)

[gomarota]

I HAVE THE FILE FOR WRITING WITH J-LINKV8 (kess-LPC2478-66668'189)

and you will post here or will ask for money or what you will do? you dont reply my PM

regards

[niwat_spp]

KESS V2 OBD Tuning Kit (http://www.diyobd2.fr/wholesale/kess-v2-obd-tuning-kit-2262.html)

This link....i'm not try....

[eprommazza]

ok this is ....

[moky]

Thanks ! must test!

[moky]

just ordered a jlink to test...

[bondiblu]

look at text in the .bin file in hex editor at 006C4500?

[moky]

LoL i see "fanculo bastardi" at 0006C500 !!!!!

[bondiblu]

LoL i see "fanculo bastardi" at 0006C500 !!!!!

lol yes, hahha

[morgano]

Now that the firmware is available, someone could try to look into it to find rhe routine that manages the "tokens" counter and freeze the counter. Then no need to flash the lpc every 60 uses. Just one time and counter gone forever.


Regards,

[Overtune]

Flashing it is 5 minutes job, so i guess its a decent solution.......Chinese sales will be on fire after this fix...

[niwat_spp]

How to write lpc? I try same video can't connect to cpu...234118
Have anyone try..

[fes_786]

Yes i see this but must need HEX file to write to NXP i dont see HEX for it in your link ... do you have HEX ??

Thanks kev


we cant read in circuit right?? with jtag

but if chip is lifted and read in socket i think we can dump whole chip no problem

[atomiczen]

How to write lpc? I try same video can't connect to cpu...234118
Have anyone try..
try to leave connected for 2-3 minutes, then try again
there's no need to remove mcu from board

[moky]

Flashing it is 5 minutes job, so i guess its a decent solution.......Chinese sales will be on fire after this fix...

we must change chip ? virgin?

or we can reflash actual chip ?

Thx!

[morgano]

This is just a guess.

If MCU is secured, then it is possible JTAG port is disabled untill a FULL ERASE is issued to the chip. So maybe is worth have a virgin one to exchange before trying this.

Maybe is possible force an erase making some bridge on power up, but i don't know.

[atomiczen]

noone have news about jlink v8 solution?
mine is on the way...

[veloseeped]

Maybe is possible force an erase making some bridge on power up, but i don't know.

If CRP3 pattern was written in MCU than both possibility of reprogram - JTAG and ISP over UART0 are disabled.
In this case you must change MCU chip.
You can check which CRP is set using simple RS232 3.3V interface and free program like FlashMagic by NXP.

[morgano]

If CRP3 pattern was written in MCU than both possibility of reprogram - JTAG and ISP over UART0 are disabled.
In this case you must change MCU chip.
You can check which CRP is set using simple RS232 3.3V interface and free program like FlashMagic by NXP.

Very good technical info, as always ;)

Thank you veloseeped.


Regards,

[fes_786]

but if we lift chip and programme / read in programmer then it should b ok

because jtag and isp = chip stays on board

[moky]

just receive Jlink,i tested without changing chip and no connection too..! all is locked..ram check failed and problem core ID :D

[atomiczen]

just receive Jlink,i tested without changing chip and no connection too..! all is locked..ram check failed and problem core ID :D
have you already replaced the nxp chip on your kess clone?

[moky]

as i said no atomiczen, just a test for confirmation :D

[fes_786]

If u look at the dump
Crp block at 1fc = ff ff ff ff

So protection is disabled

I think they want u to put a blank nxp then flash with that dump and after that u can keep flashing it

Would b interesting what crp is enabled in original slave / master tool

As they must have dumped chip somehow

Crp2 = jtag read is disabled but u can wipe chip

Crp3= u have to use IAP calls to upgrade firmware / erase in software
Can't read / erase via jtag as its totally locked

Any1 with a beeprog2 with a 208mcu adapter try reading chip to see if they can dump??

[atomiczen]

arrived today my jlink v8
someone have english instruction? here only chinese pdf

[atomiczen]

just receive Jlink,i tested without changing chip and no connection too..! all is locked..ram check failed and problem core ID :D
replaced nxp with another china-programmed, same issue core id is 0x00000000 and ram issue.
could be usefull to try 12v into kess obd port?

[mexanico1971]

arrived today my jlink v8
someone have english instruction? here only chinese pdf

see if this help !

if any one more want pass file push miracle button ! but only for top poster or green and pinky ones !

best regards

don"t span the thread width PASS please !

[moky]

replaced nxp with another china-programmed, same issue core id is 0x00000000 and ram issue.
could be usefull to try 12v into kess obd port?

i think you need virgin nxp, no china programed...

[chiptorque]

pass??? plaese...

[atomiczen]

someone tested with new mcu?

[bondiblu]

Early next week I will test and post my findings.

[atomiczen]

on monday i'll receive new nxp mcu and i'll make some test

[jaxone]

Interesting... I did not hit the limit with the clone yet as I am still using my original version but would be nice to know that the clone can be unlocked if I ever need it :)

[fes_786]

any news with virgin nxp???

[bondiblu]

So far, I struggled to replace the chip as it's been replaced before. This is chip no 3 on my PCB, be very careful, pads are lifting ;).

To confirm, I managed to program new chip and all seems to work ok :)

[fes_786]

So u fitted a virgin nxp
And programmed it ok

Once programmed have u checked to see if u can connect via jtag??

[bondiblu]

Yes I tested it and then programmed a second time to confirm ;) and yes, new chip fitted today, needs further testing, but up till now all appears fine, protocols active etc

[fes_786]

Cheers m8

Going to lift my chip now
Will let u know

Ps what's best version to use with this master ??

Most stable ?

[bondiblu]

If your chip is currently working, why not leave it till it is necessary. No point risking the PCB until your tool needs a new chip, it will operate the same

[fes_786]

I'm doing some experiments ;)

Plus I have a IR rework station so no chance of lifted pads :)

Just took of chip very clean
Simply lifted off

[daniel guerra]

If your chip is currently working, why not leave it till it is necessary. No point risking the PCB until your tool needs a new chip, it will operate the same

It makes all sense mate, thanks for sharing with us!!!!

[fes_786]

i can confirm

reads writes perfect with virgin nxp

after u load file it still reads ok crp is disabled

[kevfield]

I to tested with new NXP chip working 100% with j-link connect/read/write plus counter back to start.. this is ok because i can solder ! but people who cant this job will be hard for them because it must be a NEW NXP chip fitted ...

Thanks kev

[jaxone]

Would be interesting to check if it still works with a newer software version also.

[OVERSPEED]

I Guess in some point Chinese sellers will begin selling versions with NXP alowing reprogram... by the way I saw one seller selling J-tag device with Kess in a combo

[morgano]

Once more chinesses doesn't know what they sell. The combo comes with protected Lpc2478 so jtag useless unless chip change as kev have said. Just another "sell improvement" trick.


Regards,

[Joxer]

Can this method also be used to make my orginal Kess V2 slave turn into an master?

[morgano]

Yes, swap original mcu with virgin and program, voila! Your slave became master.


Regards,

[Joxer]

Can somebody give me an good source for ordering virgin nxp lpc2478?

i orderd jlink at DX.

i am goingto have an try.

but if someone in NL/DE/BE is willing to help me out. PM me

thanks

[galsy]

kevfield, im in the uk and will be needing my chip changed soon, I have new chip here, and I don't fancy the soldering in case I make a hash of it, if I were to send it to you would you be able to sort it for me please, can you pm me a number

[fsvsunix]

Same here...No connection from the new chip and the k-tag options are grayed out..

Here is some more info and photos i posted

http://www.digital-kaos.co.uk/forums/f173/ktag-clone-284004/index22.html

[fes_786]

i havnt had a ktag to play with

but its same principle
u have jtag points on board

so it should b a case of solder blank nxp
jtag and flash

if only i had a locked ktag to play with ;)

[kevfield]

I have ktag and its just the same to flash as kess v2 with jlink but its just different HEX dump ....

Thanks kev

[leolux]

do the chinise only offer the kessv2 dump or also the ktag dump?

[fsvsunix]

i havnt had a ktag to play with

but its same principle
u have jtag points on board

so it should b a case of solder blank nxp
jtag and flash

if only i had a locked ktag to play with ;)

i have ordered a blank nxp chip for this reason...The nxp chip from the chinese sellers was not working..No communication with ulink and j-link.

[bondiblu]

Be careful online, new firmware will block your chip again, JLINK won't help you. Chip will need changing again.

[fes_786]

U sure about that as a member here had his kess blocked by update

And all he did was rewrite using jlink

[peko]

hi friends

in EU pcb, jlink can write FW fine ?

thanks ;)