Help Vw Golf 2007 1,4TSI How to read Micronas

[soxten]

I have some problem to read this Dash from Vw Golf 5 2007 1,4TSI Siemens/VDO
Dash OEM number is 1K0920874AX version Z02

I can connect to dash by obd with FVDI and do all normal stuff like read/clear.
But when I connect FVDI and do Dash CAN I can`t read info like immo,vin;CS it say to med "wrong version number" for dash....

So I connect Xprog to Micronas 3217G like pinout from Xprog but always get problem to bypass security.
I lift pin as pinout from Xprog, I check connection, I try 2 diffrent "00017" rev "B", I did connection as error_data.PDF with 4 wires but no reading......

I have a almost same Dash (diffrent version as Z02 and Z03) from Golf 5 2007 1,6TSI OEM number 1K0920874AX version Z03
And this I can read by FVDI V18 (not V21....) and I see PIN;VIN,MC etc.

Is some one expert on dash for Golf? please help me!

[soxten]

Please someone?


Christian Johansson via Iphone 5s

[koyot]

no one can help you if you do not have suitable equipment
maybe fly company can help

[soxten]

Is it only FLY (Avdi) as can read this dash?



Christian Johansson via Iphone 5s

[tunertool]

Try Smok JTAG for Micronas read.

[chriskross]

xprog can read this cluster 100%. Check connections

[soxten]

Chriskross, i spend 6h on xprog (clone 5.0) but don't work :(

Tunertool, i check Smoke JTAG


Christian Johansson via Iphone 5s

[soxten]

Chriskross, what pinout do you use?


Christian Johansson via Iphone 5s

[chriskross]

post board there are different.

[tuberider]

Hi Christian, i had problems as well reading Micronas . Please check :
lengh of cables 12-14cm
Test your 9917 adapter if all cables have contact (1A to 1B....)
Lift Oszi leg
Check with USB and Serial , connect 12V to Xprog .
Warm up Micronas if it still not work
Micronas can be an ass of a chip .....good luck !

[soxten]

Now it work :)

I use Xprog original + pictures from Xprog.
I lift 2pin as show in xprog pictures + reset pin!
If I don't lift reset pin I get some problem to read and write.
Use short cabels!
Twist as in pictures!

If I chose "dashboards" / VW / Golf V from 07-2006 i can change vin/pin/km/serialnumber

And I can read Micronas as singel under MCU / Micronas / CDC3217G secured

http://img.tapatalk.com/d/14/06/30/yvyvuhyr.jpghttp://img.tapatalk.com/d/14/06/30/9evyry3a.jpghttp://img.tapatalk.com/d/14/06/30/yqydy9y2.jpg




Christian Johansson via Iphone 5s

[autodigitec]

Very nice info, what is the version of your original xprog?

Also, with that cable and those connections, did you try 5.0 clone again?

[lupu_sandu]

Can you post micronas+eeprom please?

[soxten]

I have now try to do som changing to find pin

Pin is only in Eeprom
line 008A0 bit 13 to line 008E0 bit 8

ex pin 54321 is: E3 59 63 D58F 5F BB 5C 79 9A 3C 73 DC 67 E4 E7 A8 95 68 49
1C CE 9F 8F 51 E2 55 3B 6C 0B D1 D6 92 97 0E 79
40 C6 31 FD 1C CE 9F 8F 51 E2 55 3B 6C 0B D1 D6
92 97 0E 79 40 C6 31 FD



ex pin 12345 is: 65 97 D7 26
80 D8 BD E0 E6 17 30 B2 BF B6 DC 1A 53 B8 82 C9
2E 54 3C 5E D2 2C 55 8F FB A2 30 B2 BF B6 11 4E
D6 68 5A 29 2E 54 3C 5E D2 2C 55 8F FB A2 30 B2
BF B6 11 4E D6 68 5A 29

I cant see any changing in Micronas(?)

If some one find algho /how it is crypted, PLEASE write it here and help all of us!!!

[soxten]

Xprog Clone 5.0 work perfect 100% no problem.

And I use 1-002-0017 Rev.C 2009.04.06


Christian Johansson via Iphone 5s

[soxten]

KM is changing in Eeprom on 2 diffrent locations

1 location is line 0800 bit 13 to line 0820 bit 12

2 location is line 009D0 bit 15 to line 00A20 bit 8


see my files

[exe123]

Of course nothing changes in the Micronas because no mileage or immo related stuff are stored there. Everything is in the eeprom.
The micronas just keeps the encryption keys to decrypt the crypted area in the eeprom.

It is impossible to decrypt by eeprom only. Every dash has unique key.
Exception are low line dashboards with maskrom with partno : xxx920x5x

[soxten]

Thx exe123!
But it can't be impossible to decrypt Eeprom by correct hex from micronas.



Christian Johansson via Iphone 5s

[autodigitec]

KM is changing in Eeprom on 2 diffrent locations

1 location is line 0800 bit 13 to line 0820 bit 12

2 location is line 009D0 bit 15 to line 00A20 bit 8


see my files

Mileage is not encrypted, it's like caddy vdo 24c32/24c16.

divided in 16 shorts
then each short xors FFFF
and circular right shift by the offset

Wouldn't get there without ELDB Electronics (http://www.eldb.webuda.com/calc_vdo.php) (it's not for your file, but mileage algo is the same)

[exe123]

Thx exe123!
But it can't be impossible to decrypt Eeprom by correct hex from micronas.


Read my post. I never said it is impossible.
Just impossible with eeprom only.

Of course it can be decrypted. ELDB Xprog Box is capable to decrypt eeprom if you provide flash and eeprom.

[lupu_sandu]

Your eeproms decrypted:

[soxten]

Here is info from FVDI
(I can't read this info over OBD but it works when i but Eeprom and micronas flash in the program)

http://img.tapatalk.com/d/14/07/01/edytanun.jpg



Christian Johansson via Iphone 5s

[soxten]

Lapu_sandu, it look correct :)
In file Dec.bin = 30 39 = PIN 12345 and then chksm(?) 06 B8
in file Dec-2.bin = D4 31 = PIN 54321 and then chksm(?) 07 54 (or 07 52)

[autodigitec]

You can also experimentally erase big chunks of the micronas file with winhex till xprog/fvdi doesnt decrypt correctly.

And after some time you probably know where the key is.

Then what is left is to know is the crypt algo.

[soxten]

Autodigitec, that is clever!
:)



Christian Johansson via Iphone 5s

[soxten]

Here is algho lines from micronas as you need to decrypt Eeprom.

Can some one see what type of decryptions this is, Xor?

Line 0x77F00 bit 1 to line 0x77F30 bit 6

http://img.tapatalk.com/d/14/07/01/qeqeje9y.jpg



Christian Johansson via Iphone 5s

[soxten]

First bit on line 0x77F00 "C9" if I change to "FF" it kills "immo Data ID"

http://img.tapatalk.com/d/14/07/01/2ytypyta.jpg
http://img.tapatalk.com/d/14/07/01/avuha4u9.jpg



Christian Johansson via Iphone 5s

[soxten]

If i "FF" the first 8 bits it kills all info.

http://img.tapatalk.com/d/14/07/01/gube4avy.jpg
http://img.tapatalk.com/d/14/07/01/etetusem.jpg



Christian Johansson via Iphone 5s

[soxten]

If i "FF" on bit 9/10/11/12 nothing happens.

But if i "FF" on bit 13 it change all without "Immo data" and "serial number"

So all lines are for crypto I think


http://img.tapatalk.com/d/14/07/01/ybe4e4uq.jpg
http://img.tapatalk.com/d/14/07/01/e9u5ebe2.jpg



Christian Johansson via Iphone 5s

[autodigitec]

That's very nice stuff, I wish I could help ****yzing this but I only have the xprog 5.0 and no fvdi :/

Do you know if I can run the xprog software for that without interface?

[metercar]

That's very nice stuff, I wish I could help ****yzing this but I only have the xprog 5.0 and no fvdi :/

Do you know if I can run the xprog software for that without interface?

xprog without interface do not found mate

[tuberider]

You can also use Carprog Dash Software to play around and read immo data , to connect on bench put a 120 Ohm resistor between can low and high

[soxten]

Normaly you can do this BUT on this Golf 5 2007 1,6TSI OEM number 1K0920874AX version Z03 carprog or fvdi can't read over canbus. (Fvdi say It dont no software number when I try to read)

I even have a dash Golf 5 2007 1,6TSI OEM number 1K0920874AX version Z02 and that one fvdi read perfect over canbus (in car by obd and on bench directly, w/o 120ohm)

Remember that dash on Golf has same oem numberbut diffrent "Z" number in oem program
1K0920874AX has 3 diffrent ordernumber Z01/Z02/Z03

I am going to test to change eeprom and flash from Z03 to Z02 and se IF it work.




Christian Johansson via Iphone 5s

[gomezjcr]

346631

Please! Somebody help me? This is my file eprom of my 1k0920874B dash, micronas flash can not read with Xprog, but eeprom yes! Need the pin login for install this dash in my Caddy 07`, I have original dash pin login. Thanks!!

[yugo45]

346631

Please! Somebody help me? This is my file eprom of my 1k0920874B dash, micronas flash can not read with Xprog, but eeprom yes! Need the pin login for install this dash in my Caddy 07`, I have original dash pin login. Thanks!!
It is not possible only with eeprom. It was stated 100 times on this forum.
You have to have Eeprom and flash to be able to get Immobilizer data.
Also on that Cluster Pin is useless, you have to have very good Obd tool to adopt /program this cluster, or read Eeprom and flash form original and new cluster and if you know what to do , you can transfer immo data.

[gomezjcr]

Ok! But... Why our friend Soxten said that the pin code is only in the epprom? In the fist post page. I,m confused!

[soxten]

You need Eeprom + Flash to decrypt pincode
I can`t remember exactly where pin is, Eeprom or flash.
I think it is in Eeprom but you need some lines from flash to decrypt it.

I see now that I explain in a post here in thread. pin is in Eeprom.
Copy eeprom and micronas to used Dash and it work.
BUT you need same oem number + Z02/Z03 number.
there are diffrent pcb on Z02 and Z03.

Use short cabel and twist as I show to read Micronas.

[gomezjcr]

Hi soxten, thank for your answer. I cant read micronas flash, I?m tired of diversity tries. Probably the micronas adapter is a bad versi?n! Rev.B with some mods.

One cuesti?n, I can write the eeprom with new file? some file we knows the pin? :apologetic:

[yugo45]

What are you trying to do with PIn?

Like I told you above Pin is useless is this cluster.
You have to understand something , There is no simple way to do this.

[gomezjcr]

I need the pin code for swap the dash, my dash is MFA and the new dash is FIS, all works perfectly, but immo is active in new dash and engine not start. I have the old pin, it?s very easy extract the pin if you have dash and ecu, but I haven't ecu of the new dash. I have Xprog, I have the eprom file but I can't read Micronas flash!!! Thanks to all!

[potatodog]

Not possible adapt dash after 06/06 by pincode

[gomezjcr]

:apologetic::apologetic::apologetic::apologetic: Are you sure?? and how?? Clone??

And this?

http://wiki.ross-tech.com/wiki/index.php/Immobilizer_IV_Immobilizer_Swapping_(Instrument_Cl uster)

[yugo45]

:apologetic::apologetic::apologetic::apologetic: Are you sure?? and how?? Clone??

And this?

http://wiki.ross-tech.com/wiki/index.php/Immobilizer_IV_Immobilizer_Swapping_(Instrument_Cl uster)
That procedure is for dash up to 06-2006.


Read again my post #35.

[gomezjcr]

I,m not sure. My 2007 dash is immo4c, all immo4 dash can be swap by pin (Ross-tech info).

You think that my 2007 dash is immo5

[yugo45]

I,m not sure. My 2007 dash is immo4c, all immo4 dash can be swap by pin (Ross-tech info).

You think that my 2007 dash is immo5

No it can not.
Mk5 from 2003 -06.2006 can be done with VCDS, after that you need to buy other tool ,like X-Dash, AVDI, VVDI and etc.

[bekescars]

Can you post a picture of your working adapter? I have the Rev 2008 one but there is no resistor so I dont know if it needs any modification.

[Team dz]

X-Tool réd flach and blok
Red km édit km Cks OK perfect!
Red pin code