Tricore Virgin Solution Software ?

[darwins]

Hi Guys.

I'm interested to know if there are any legit software suppliers in the market offering virgin solutions for any Tricore ecu types ?

I understand cloning is going to require swooping the processor from unit to unit, Does this mean that protected Tricore parts could not be reset to a virgin state?

Does data held in the OTP area lock down any further backward resetting ?

Lots of questions but it's the future so I'm feeling inquisitive

Your thoughts appreciated.

Darwins..

[gttuning]

i think its to early for this,to be figured out,but time is running fast,we all know soon about edc17, like we all know every think about edc16.

[ominimicu]

OTP areas can be writtien but not by conventional tools, Magpro x17 sais it can do it.
And immo off is done in flash but need some info from the eeprom

[atomiczen]

OTP areas can be writtien but not by conventional tools, Magpro x17 sais it can do it.
And immo off is done in flash but need some info from the eeprom

magpro x17 can't write otp areas
OTP means One Time programming.....so noone and nothings can write this areas
magpro offer a immo off solution for vag edc17, and sell it like a clone 1:1 edc17, but it's not true cloning, just an immo off solution
ecuvonix also offer immo off for vag edc17

[darwins]

I guess the key it to identify what is being written to the OTP area.

[soxten]

If you read manual for tc-1796.
OTP kan be rewrite up to 4 times.
BUT OTP is protected by a 56bit code.

[smayer]

If you read manual for tc-1796.
OTP kan be rewrite up to 4 times.
BUT OTP is protected by a 56bit code.

OTP means One Time Programable, right?
If can be rewrited 4 times then it?s not OTP it?s FTP

[soxten]

Read manual

[veloseeped]

Read manual

OK. Let's reading....

After a Erase User Configuration Block command, a new protection configuration
(including keywords and protection confirmation code) can be written to the pages of the
user configuration block. But note that the user configuration blocks UCB0 and UCB1
can only be modified up to 4 times during the lifetime of a TC1796 device.
UCB2 can be programmed only once.
Note: UCB2 is OneTime-Programmable (OTP). If sector write protection is installed and
confirmed in UCB2, this block can never be erased again. UCB2 can only be
erased before the confirmation of OTP write protection.
.....
The six-cycle Disable Write Protection command temporarily disables the write
protection of all protected PFLASH sectors as defined for user 0 (indicated in register
PROCON0) or user 1 (indicated in register PROCON1).
The Disable Write Protection command is not accepted for UCB2 because UCB2 is a OTP write-protected UCB.

soxten, your comments please...

[soxten]

Correct! UCB2 is OTP!
I hade wrong!

UCB0 and UCB1 can rewrite up to 4 times.

So we hope that someone can find a solution to hack this shit soon! )

[soxten]

But UCB0 (user0) is master and can read and write/rewrite on all flash even after a protection from UCB1 (user1) and UCB2 (user2)

UCB2 (user2) has OPT!

So if you logg in as UCB0 (user0) and hit password you can delete and write new data on the hole flash area, or?

[soxten]

User 2 = User Configuration Block 2:
User 2 is able to install sector OTP write protection for the PFLASH sectors. OTP write-protected sectors are locked for ever, and are never re-programmable.
If read or write protection is installed and activated once, changing the read/write protection configuration parameters in the UCBs is password-protected and can only be executed if the passwords are known.
Note: If any PFLASH sector is locked for ever (OTP installed), PFLASH and DFLASH related testing investigations for Failure ****ysis Requests (FARs) are no more possible.

[ominimicu]

New functions :
(available online by MMS Helpdesk)Finaly it's possible to recode used Tricore ECUs even with OTP sectors:
ECU CLONE:
VAG EDC17 C46 TPROT8-10
VAG EDC17 CP44 TPROT8-10
VAG MED17.1 TPROT8-10
VAG MED17.1.1 TPROT8-10
VAG PORSCHE MED17.1.6 TPROT8-10
OPEL EDC17CP19 improved
Renault SID305 improved
BMW EDC17CP02 improved
BMW EDC17C06 improvedDPF-OFF:
MB EDC16C3/C33 improved
DODGE EDC16C31
KIA/HYUNDAI EDC17CP14
Opel Insignia EDC17xx
VAG EDC17U01EGR-OFF:
RENAULT EDC16C3/C33IMMO OFF
(available for motorsport purposes only)
VAG MED17.x all TPROT versions
VAG EDC17CPxx/Cx all TPROT versions
VAG MED9.1
PSA EDC16Cxx

[soxten]

What program/tool?

[masterb]

What program/tool?

MAGPro2 BASE OBD