Subaru login code

[madman47]

Hello.
I don’t know if this helps, but I have a Subaru Liberty / Legacy and I may have found the location of the login pin code.
Inside the BCM there is a A01A ic which is a Rohm 24A01A.
At address $06-07 and repeated at $26-27 is a hex value. In this case 25CE. Convert to DEC and you get 9678 which is the same a the Security ID tag accidentally left with the keys from factory.....


Sent from my iPhone using Tapatalk

[SAMDoctor]

Good find! I have checked an eeprom that was uploaded here that position 0x06-07 and positions 0x26-27 also match On another eeprom, 24c02 from Impreza positions 0x06-07 and positions 0x36-37 match. Can upload files here if you want to have a look at them.

Still have to check these are the right pincode to code keys

[madman47]

I can now confirm this is correct. It was tested today.

[dru86]

Digging this up from the past, I've got a couple of BIUs I'm trying to work out how the security ID is stored.
This first one is from a 2014 SJ Forester, I have the ID 33469, but can't see how it is stored:
SJ BIU dump.JPG

The second more important one is the BIU from a 2010 SH Forester, which I don't have the ID for and need to code the keys. I tried converting a bunch of the hex values to decimal, but none were correct in SSM3

c7a2382f-4d64-40c1-8f33-b80ea21009cf.jpg

[Bllinda]

.... damp? And from where?

[dru86]

.... damp? And from where?

I'm not sure what you mean, i never said anything about damp?

All I'm trying to do is work out how the security ID is stored in those two BIU eeproms I've posted the dumps from above