LOST KEY TO BMW S1000RR BIKE

[antvorskov2006]

Hi.
I have a lost key to bmw s1000rr (bike)
ECU Bosch ME9 0261209388 BMSKP 7 721 224.
I have read file from ECU , is there some one who can help me with code transponder for the bike to start ?
Key is cut.

[salkapone]

greeting
you will solve the Abritus avdi,, I put your content in ktag and seen to have three key who are USED
if you do not have another solution ,,,, find someone with avdi , and that has k tag and you will solve very easily

[bearheroes]

post id of transponder...

[antvorskov2006]

Thanks for reply .
Here is transponder ID

[bearheroes]

details in pm...

[gwee]

details in pm...

didn't know it can be added without teamviewer...............good job!

[antvorskov2006]

Thanks bearheroes
But I have not received pm from you, please send password.

[chli1976]

Is this a picture from ZedBull. I don`t know how to programme transponder with ZedBull, but i can you say the adress for keys in your file

[gepakg]

of course can be my friend and without serial id,crypto hi-lo,and cfg can be enough in place of non used key:-)

regards Gepa


didn't know it can be added without teamviewer...............good job!

[antvorskov2006]

Hi bearheroes good work.
The bike start :burnout:, no problem.
And a BIG THANKS for your help.

[JOHNCICY]

Hi mates i have BMW bike RS1200GS lost key
Bosch number: 0 261 s08 626
BMSX 8 542 304-01
year:2014
my question is can clone Galleto read TRICORE: TC1797?
Thanks in advance.

[bearheroes]

Hi mates i have BMW bike RS1200GS lost key
Bosch number: 0 261 s08 626
BMSX 8 542 304-01
year:2014
my question is can clone Galleto read TRICORE: TC1797?
Thanks in advance.
Immo is in antenna not in Ecu.

[JOHNCICY]

Hi mate oftware module 109 - BMW bikes engine ECU Bosch
Memory device is flash chip ST M58BW0160 - 80 pin PQFP package.
Expected file size is 2097152 bytes.
Reading is with flash programmer or thru BDM100 interface.
Use PCF7936 or Silca T14 - JMA TP12 transponder.
Written transponder is ready programmed to start bike.
Vehicles equipped with this unit:
BMW: F800, R1200GS

[gepakg]

BMSX model,forget for long time,keys in immo-antenna,impossible to read 9s12g128,secured,internal osc,etc....

regards Gepa


Hi mate oftware module 109 - BMW bikes engine ECU Bosch
Memory device is flash chip ST M58BW0160 - 80 pin PQFP package.
Expected file size is 2097152 bytes.
Reading is with flash programmer or thru BDM100 interface.
Use PCF7936 or Silca T14 - JMA TP12 transponder.
Written transponder is ready programmed to start bike.
Vehicles equipped with this unit:
BMW: F800, R1200GS

[JOHNCICY]

Here are the pictures of Antenna kindly indicate where is the E prom and how to read it ths thing has glue kind of substance:single_eye:
Thanks

[bearheroes]

maybe you should read again what Gepakg wrote above...

[JOHNCICY]

Immo is in antenna not in Ecu.

i cannot see any eprom in ths Antenna, or there is any other means to read ths
Thanks in advance

[bearheroes]

i insist that you should read again...

[JOHNCICY]

I have contacted Bogi and says no solution for ths 2014 bike BMW.
i had read the Tricore TC1797in the ECU BMSX which is attached below.
can someone try to find out from where i have reached please GEPA.

[JOHNCICY]

i insist that you should read again...
which eprom to read sir.

[bearheroes]

which eprom to read sir.

BMSX model,forget for long time,keys in immo-antenna,impossible to read 9s12g128,secured,internal osc,etc....

regards Gepa i think it is very very clear!!!

[chli1976]

I have contacted Bogi and says no solution for ths 2014 bike BMW.
i had read the Tricore TC1797in the ECU BMSX which is attached below.
can someone try to find out from where i have reached please GEPA.

With wich tool do you have read this ECU and do you have boot picture ?

[gepakg]

sometimes clear words are not enough:-))))

regards Gepa


i think it is very very clear!!!

[bearheroes]

solution is available from tmpro!!!

[gepakg]

yes,but this special module as bogi said isnt as another,when device secured,then mcu inside immo will be writed to another dump,and ecu eprom will have another ISN from writed dump in immo....by me where huge possibilities to something go wrong inside this process...

i have full working pair ews-ecu get look,very hard,also strange to bmw to after lot of years for cars and bikes used pcf7935/pcf7936 but now 4d - 80bit

anyway as i know very good bogi think that module work correct,if have any bugs will be instantly corrected by him!

regards Gepa


solution is available from tmpro!!!

[simaservis1108]

.................................................. ............

[gepakg]

ok,i have immo dump if i give you can you give me page 1 & 2 & 3 but for these no matter,i found, but page4 4d -- 80bit? you can solve this???

BTW. ews have crypto area ISN & unique numbers and with special algo used with serial id of each key make 80 bit page 4

regards Gepa


As I said before,you only need to read that immo once :D
Then rewrite existing immo if you can't read it,and problem solved.

Last year,I had one BMW bike that I thought it would be this immo,but it key was stored in ECU.
If I had this immo,I would've removed the protection by lifting the top of MCU housing,and burning a security fuse.I had owned agreement to experiment on the bike,because owner was a good friend of mine.

[MACKIE]

As I said before,you only need to read that immo once :D
Then rewrite existing immo if you can't read it,and problem solved.

Last year,I had one BMW bike that I thought it would be this immo,but it key was stored in ECU.
If I had this immo,I would've removed the protection by lifting the top of MCU housing,and burning a security fuse.I had owned agreement to experiment on the bike,because owner was a good friend of mine.

Are you listening yourself when you're speak or write..? You are going to remove protection by lifting the top of MCU housing and burn security fuse?
Mate are you sure ? What happend when you woke up ? :rofl:
With what tool you're going to decapsulate that? With grinding machine for rebar?
Don't be funny ...sit on the ground...
We are talking here about new generation of motorola MCU's with internal clock and double sided uv protection.....

And what then ? 4D CRYPTO DST+ 80bit....Secret page with 10bytes ? Bla bla bla keep dreaming...

Mackie

[automan]

Are you listening yourself when you're speak or write..? You are going to remove protection by lifting the top of MCU housing and burn security fuse?
Mate are you sure ? What happend when you woke up ? :rofl:
With what tool you're going to decapsulate that? With grinding machine for rebar?
Don't be funny ...sit on the ground...
We are talking here about new generation of motorola MCU's with internal clock and double sided uv protection.....

And what then ? 4D CRYPTO DST+ 80bit....Secret page with 10bytes ? Bla bla bla keep dreaming...

Mackie

he's got original etl and clone lexia. maybe he sucsses

[MACKIE]

I have contacted Bogi and says no solution for ths 2014 bike BMW.
i had read the Tricore TC1797in the ECU BMSX which is attached below.
can someone try to find out from where i have reached please GEPA.

TMPRO have solution for this bike so that means that you didn't contact Bogi...

Gepakg told you what to do and you didn't read one word...

So end of story...

Mackie

[simaservis1108]

...................

No point in continuing discussion with ignorant and rude people.
Decapsulation is done with Cyclohexanone.

[brkic6]

And the marmot, it puts the chocolate in the aluminum foil ...
https://www.youtube.com/watch?v=V0pN1PpfIag

Ok, all of us know how is possible to fly on the space,but I think no one of us will fly there soon. Proof is not if you say-I have space shuttle. How we know procedure for flying? Someone tolds us. But who knows, maybe moon landing never happened. ;)
As for MCU's. That procedure with etching MCU top and erasing fuse bits with UV light was described over ten yrs ago, for some PIC for example, but it is also possible with other controllers. Off course, you need to know MCU arhitecture, and which area you need to erase, right? You can easily erase some parts that you really don't want to erase? And that MCU is big enough to manipulate with fuse bits? So far I think only one person can do this...Vucic himself! :alberteinstein: :D In one hand MCU and UV lamp, on other hand saving childrens...
Sincerely, I would like that you really have done that job on that way, but only one thing crossing my mind right now...if I could do that job on that type reverse engineering, I would never do car electronics and write on this forum. I would work in some space or research center for couple tens of thousands monthly. Think about it...
Regards...

[gepakg]

ok,what is with my offer? i have successful reading of EWS,need page 4, dst+ 80bit? no need `space`decapsulate...you said in your post tonight, then erased everything in your post, that problem is solved when dump is out

regards Gepa


...................

No point in continuing discussion with ignorant and rude people.
Decapsulation is done with Cyclohexanone.

[simaservis1108]

I was not talking about that.
I was talking about reading an MCU,because many people said it is impossible to read.
And then you said,when MCU is secured they rewrite it with another known dump,and change ISN in ECU dump,right?
I have never talked about Page 4 or similar,nor I can give you that,because I haven't experimented with it.
Surely it is crypted.
I have only said that TMPro2 Bogi idea is very good,and that's what I would do also.

I didn't even wanted to get into fights with people that are living 20 years behind,thinking they are best,because they have tools.I have had many tools,unfortunately luck didn't go my way,and I lost everything in 5 minutes in workshop fire.

The point is,I even asked you,can you match ECU and Immo if I give you dump from EWS.You said you can try,because you know how BMW works,and that success rate would be high.That was almost 1 year ago.
You asked me how would I read it,I said I would order 2-3 pieces of chips to decapsulate,that is what I did.
Fortunately BMW bike that I had done,had key data in ECU,not in EWS.
You send me photos of EWS what to look for.

Also you will remember I asked you for help,to start this bike,because I trust in your experience in repairing/coding bikes.

I didn't mean to offend or ridicule anyone,but I see many people are using their free time doing just that.

Regards

[Bogi]

Believe or not - 9S12G128 secured can be unsecured!
Look here - Transponder Maker Pro 2 support page (http://tmpro2.com/)

[gepakg]

really nice and impression gift for new year:-)

regards Gepa


Believe or not - 9S12G128 secured can be unsecured!
Look here - Transponder Maker Pro 2 support page (http://tmpro2.com/)

[baracuda]

sorry to hijack the thread i recently bought a s1000rr with 1 key and it works fine i dont have a spare key
is it complicated to make another key or to clone the existing key

thank you

[bearheroes]

You must read ecu.


Sent from my iPhone using Tapatalk

[Technos]

Hello i need help for immo and mileage on S1000RR (it's a race bike)

[gueswhat]

Hi.
I have a lost key to bmw s1000rr (bike)
ECU Bosch ME9 0261209388 BMSKP 7 721 224.
I have read file from ECU , is there some one who can help me with code transponder for the bike to start ?
Key is cut.

hello did you find a key code for this can jou please it 2 me

[bearheroes]

Sorry but i can't see photo you sent on pm


Sent from my iPhone using Tapatalk

[gepakg]

ohhhh my god,now he want to play with BMSK ecu`s but did not know which programmer to use for i2c eprom`s

my answer is,guy have big balls and his customers`s :-)))

regards Gepa


hello did you find a key code for this can jou please it 2 me

[gueswhat]

.....................

[gueswhat]

Sorry but i can't see photo you sent on pm


Sent from my iPhone using Tapatalk

408410did you see it bearheroes

[bearheroes]

send me photo of whole ecu....and start new thread...this is for bmw.

[huga46]

hello master gepa im try read ktm 1190 zadi type 2 but got error mcu locked, any other way to read that motorola mcu??thank u in advance

[drugowaz]

Maybe anyone has ori dumps from tricore bmxs and zadi immo box? Would be ideal from same bike but can be prom separate.

[schouten1977]

THIS TREAD MUST BE A STICKY:dancing:

[K1nd3r]

bmskp accept any new id if crypto hi, low and config ok?

[KEY GO]

hi doctors
i have a bmw s1000rr bike all key lost i tryed to program a chip pcf7936 with avdi
i found 5 key used so i select not used position and programation is success and chip became locked
but bike wont start
ecu is bmskp
thanks

[KEY GO]

PLEASE ANY HELP ON THIS

[KEY GO]

can samzone give me a good crypto hi, low and config for this bike
thanks