kw1281test: A Free VDS-Pro / VagTacho Alternative

[Sapis]

New release: https://github.com/gmenounos/kw1281test/releases/tag/v0.75-beta
- Fixed GetSKC for Marelli clusters
- Added ReadRom and ReadRam commands
- Added support for ReadEeprom and WriteEeprom commands for Central Electrics module (address 09)

First of all, thanks your tweeks.
I tried it, reedeeprom do not work, same reedeeprom error, but when i tried the writeeeprom it works, so now i got comfort windows, thanks Mate!!!!

 

[BobnOH]

I vote this to be a Sticky!

 

[cristian7477]

Until 0.73 it worked for me

C:\Users\crist\Desktop>kw1281test.exe COM1 9600 46 ReadSoftwareVersion
KW1281Test: Yesterday's diagnostics...Today.

Version 0.73-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 9600 46 ReadSoftwareVersion
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.2
Culture: es-CL
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 6Q0959433E  2D Komfortgerat     0001
Software Coding 00258, Workshop Code: 11111
Only supported for cluster
Sending EndCommunication block

C:\Users\crist\Desktop>kw1281test.exe COM1 9600 46 ReadSoftwareVersion
KW1281Test: Yesterday's diagnostics...Today.

Version 0.75-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 9600 46 ReadSoftwareVersion
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: es-CL
Opening serial port COM1
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Retrying wakeup message...
Wakeup duration: 2 seconds
Reading sync byte
Retrying wakeup message...
Wakeup duration: 2 seconds
Reading sync byte
Caught: System.InvalidOperationException Controller did not wake up.
Unhandled exception: System.InvalidOperationException: Controller did not wake up.
   at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 63
   at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 31
   at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 251
   at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 26

C:\Users\crist\Desktop>

 

[gmenounos]

Until 0.73 it worked for me

C:\Users\crist\Desktop>kw1281test.exe COM1 9600 46 ReadSoftwareVersion
KW1281Test: Yesterday's diagnostics...Today.

Version 0.73-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 9600 46 ReadSoftwareVersion
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.2
Culture: es-CL
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 6Q0959433E  2D Komfortgerat     0001
Software Coding 00258, Workshop Code: 11111
Only supported for cluster
Sending EndCommunication block

C:\Users\crist\Desktop>kw1281test.exe COM1 9600 46 ReadSoftwareVersion
KW1281Test: Yesterday's diagnostics...Today.

Version 0.75-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 9600 46 ReadSoftwareVersion
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: es-CL
Opening serial port COM1
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Retrying wakeup message...
Wakeup duration: 2 seconds
Reading sync byte
Retrying wakeup message...
Wakeup duration: 2 seconds
Reading sync byte
Caught: System.InvalidOperationException Controller did not wake up.
Unhandled exception: System.InvalidOperationException: Controller did not wake up.
   at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 63
   at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 31
   at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 251
   at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 26

C:\Users\crist\Desktop>

Weird. It still works fine for me on my bench setup:

.\kw1281test.exe COM1 9600 46 ReadSoftwareVersion
KW1281Test: Yesterday's diagnostics...Today.

Version 0.75-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 9600 46 ReadSoftwareVersion
OSVersion: Microsoft Windows NT 10.0.19044.0
.NET Version: 6.0.8
Culture: en-US
Opening serial port COM1
Sending wakeup message
Wakeup duration: 2.0000007 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0959799C 8C Komfortgerat HLO 0004
Software Coding 00258, Workshop Code: 06512
Only supported for cluster
Sending EndCommunication block

 

[gmenounos]

Until 0.73 it worked for me

What kind of cable are you using?

 

[weezel66613]

It sounds like kw1281test isn't compatible with 1C0920901 clusters (or at least the M73 V02 version). I have a 1C0920901CX cluster that it works fine with but I don't know what's different between your cluster and that.

I was able to retrieve a bin file with an alternate program but don't know how to decifer it. I have yet to get kw1281test to work with my cluster. Any idea what address is the SKC could be in?

 

[gmenounos]

I was able to retrieve a bin file with an alternate program but don't know how to decifer it. I have yet to get kw1281test to work with my cluster. Any idea what address is the SKC could be in?

If the .bin file is 1024 ($400) bytes long, then the SKC might start at offset $313.
If the .bin file is 2048 ($800) bytes long, then the SKC might start at offset $348.

Or attach the .bin file and I can take a look.

 

[weezel66613]

If the .bin file is 1024 ($400) bytes long, then the SKC might start at offset $313.
If the .bin file is 2048 ($800) bytes long, then the SKC might start at offset $348.

Or attach the .bin file and I can take a look.

I was finally able to pull the .bin file with DumpMarelliMem. I found that it was a timing thing, if I waited or tried to run a second command it would fail in one way or another. I had to start(hit enter) as soon as I turned the key to the run position. Here is the .bin file if you can look at it. https://www.dropbox.com/s/tymc1418kr3ejrr/marelli_mem_$0C00.bin?dl=0

 

[gmenounos]

I was finally able to pull the .bin file with DumpMarelliMem. I found that it was a timing thing, if I waited or tried to run a second command it would fail in one way or another. I had to start(hit enter) as soon as I turned the key to the run position. Here is the .bin file if you can look at it. https://www.dropbox.com/s/tymc1418kr3ejrr/marelli_mem_$0C00.bin?dl=0

It looks like your SKC is probably 01554.

 

[weezel66613]

It looks like your SKC is probably 01554.

Thank you for all your work. Still don't quite know how you found that but I was able to run GetSKC a little bit ago and got the same number. Now I just have to wait for my new keys to come so they can be program.

 

[ekincaid]

@gmenounos Could I use this to reset my airbag light? I made the mistake of starting the car with my passenger seat out. 2003 Golf

 

[gmenounos]

@gmenounos Could I use this to reset my airbag light? I made the mistake of starting the car with my passenger seat out. 2003 Golf

I think so. The following command will read the airbag fault codes (Replace "COM1" with your actual COM port):

.\kw1281test.exe COM1 9600 15 ReadFaultCodes

The following command should clear the airbag fault codes:

.\kw1281test.exe COM1 9600 15 ClearFaultCodes

The current version (0.76-beta) of kw1281test has a bug so it'll give you this error:

Sending ClearFaultCodes block
Caught: System.InvalidOperationException ClearFaultCodes returned 2 blocks instead of 1

But it should still clear the fault codes and hopefully reset your airbag light.

 

[gmenounos]

Someone was asking about support for Audi A4 RB4 clusters and I managed to find one pretty cheap, so:

New release: https://github.com/gmenounos/kw1281test/releases/tag/v0.77-beta

Renamed DumpRB8Eeprom command to DumpRBxMem. Added ToggleRB4Mode command to toggle Audi RB4 encrypted clusters between Adapted and New modes.

Some Audi A4 clusters (Bosch RB4) have certain sections of the EEPROM (including the odometer and SKC) encrypted. The cluster needs to be changed from Adapted Mode (6) to New Mode (4) before the encrypted sections can be read/modified. Then the cluster needs to be changed back to Adapted Mode before it can be used.

Shown below are the commands needed to make a backup copy of the encrypted EEPROM, decrypt the contents, retrieve the SKC and return the cluster to Adapted mode.

Note: This has only been tested on a single cluster ("8E0920950L KOMBI+WEGFAHRS. RB4 D36" / "_Audi_B6LMJ02 V006.08") and only on the bench, not in a car. If this bricks your cluster, I am not responsible.

Dump encrypted EEPROM:
.\kw1281test COM1 10400 17 DumpRBxMem 66560 1024

Toggle cluster from Adapted Mode to New Mode:
.\kw1281test COM1 10400 17 ToggleRB4Mode

Dump unencrypted EEPROM:
.\kw1281test COM1 10400 17 DumpRBxMem 65536 864

Retrieve cluster's SKC:
.\kw1281test COM1 10400 17 GetSKC

Toggle cluster from New Mode back to Adapted Mode:
.\kw1281test COM1 10400 17 ToggleRB4Mode

 

[caffeine]

If I sent you a C5 A6 cluster, would you be willing to add support for those as well?

 

[gmenounos]

If I sent you a C5 A6 cluster, would you be willing to add support for those as well?

I can try, but I can't promise success. But first, could you try the ReadIdent, ReadSoftwareVersion and GetSKC commands and share the kw1281test.log?

 

[jamesdstrand]

Hi All,

Trying to get the SKC code from an Audi TT V6 Dash, Not sure if this is possible with this software? I keep running into the same error message.

Version 0.77-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM6 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.18363.0
.NET Version: 6.0.8
Culture: en-GB
Opening serial port COM6
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 8N2920980D KOMBI+WEGFAHRS. M73 D07
Software Coding 01462, Workshop Code: 00000
Sending block 0x6C
Writing data to cluster microcontroller
Receiving ACK
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 )
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 103
at BitFab.KW1281Test.Cluster.MarelliCluster.WriteMarelliBlockAndReadAck(Byte[] data) in C:\Users\gmeno\src\kw1281test\Cluster\MarelliCluster.cs:line 223
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpMem(String filename, UInt16 address, Nullable`1 count) in C:\Users\gmeno\src\kw1281test\Cluster\MarelliCluster.cs:line 113
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1 address, Nullable`1 length, String dumpFileName) in C:\Users\gmeno\src\kw1281test\Cluster\MarelliCluster.cs:line 21
at BitFab.KW1281Test.Tester.GetSkc() in C:\Users\gmeno\src\kw1281test\Tester.cs:line 515
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 243
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 26

Any help would be greatly appreciated.

James

 

[gmenounos]

Trying to get the SKC code from an Audi TT V6 Dash, Not sure if this is possible with this software? I keep running into the same error message.

You can try the 2 commands mentioned here:

kw1281test: A Free VDS-Pro / VagTacho Alternative

Any tips on getting past this error: Version 0.71-beta (https://github.com/gmenounos/kw1281test/releases) Args: com2 10400 17 DumpEeprom 0 2048 OSVersion: Microsoft Windows NT 10.0.19042.0 .NET Version: 6.0.0 Culture: en-US Opening serial port com2 Sending wakeup message Reading sync byte...

forums.tdiclub.com

Unfortunately I don't own any TT clusters so it's difficult to support them and the ones I've been able to find on eBay would cost about $90 shipped. If someone has one and wants to give or lend it to me, maybe I can help.

 

[gmenounos]

New release with possible fix for M73 D0x clusters:

Release v0.78-beta · gmenounos/kw1281test

Possible fix for M73 D0x clusters.

github.com

People who have had problems with DumpMarelliMem and M73 D05-D09 clusters (e.g. @Geomeo123 @jamesdstrand @70chips ) might want to give this a try.

Make sure to try both DumpMarelliMem variants and if you get a timeout, try running it again a couple more times. I've found that my test Beetle cluster gives me a timeout about half the time when trying to dump the EEPROM.

.\kw1281test COM1 9600 17 DumpMarelliMem 3072 1024
.\kw1281test COM1 9600 17 DumpMarelliMem 14336 2048

 

[weezel66613]

I found out to eliminate the timeouts I had to run the command as soon as the cluster powered up. If I didn't it would timeout every time.

 

[michaelhauser]

Newbie trying to adapt three new keys to my 2003 VW Eurovan. I understand that I first need to find the SKC, but the software returns "Unable to determine SKC." as shown below.
Do I need to use a different command for this vehicle?

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>kw1281test com3 10400 17 ReadIdent
KW1281Test: Yesterday's diagnostics...Today.

Version 0.78-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 ReadIdent
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: en-US
Opening serial port com3
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 7D0920902T T4-KOMBIINSTR. VDO V01
Software Coding 03235, Workshop Code: 02757
Sending ReadIdent block
Ident: 7D0920902T T4-KOMBIINSTR. VDO V01
Software Coding 03235, Workshop Code: 02757
Sending EndCommunication block

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>kw1281test com3 10400 17 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.78-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: en-US
Opening serial port com3
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 7D0920902T T4-KOMBIINSTR. VDO V01
Software Coding 03235, Workshop Code: 02757
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VAT500LL $01
01: $90 $17
02: $11 $04 $00 $10 $33 $07
03: VW A4 Lowline Maske
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version VAT500LL 01.20 is 01 04 3D 35
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to 7D0920902T__T4-KOMBIINSTR._VDO_V01__$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Received "Read ROM/EEPROM Response" block: 56 57 5A 37 5A 30 FF FF FF FF FF FF FF FF 56 57
Sending ReadEeprom block (Address: $00A0, Count: $10)
Received "Read ROM/EEPROM Response" block: 5A 37 5A 30 FF FF FF FF FF FF FF FF 56 57 5A 37
Sending ReadEeprom block (Address: $00B0, Count: $10)
Received "Read ROM/EEPROM Response" block: 5A 30 FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $00C0, Count: $10)
Received "Read ROM/EEPROM Response" block: 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58
Sending ReadEeprom block (Address: $00D0, Count: $10)
Received "Read ROM/EEPROM Response" block: 58 FF 58 58 58 58 58 58 58 58 58 58 58 58 58 58
Sending ReadEeprom block (Address: $00E0, Count: $10)
Received "Read ROM/EEPROM Response" block: 58 58 58 FF FF FF FF FF FF FF E7 A4 E7 A4 E7 A4
Sending ReadEeprom block (Address: $00F0, Count: $10)
Received "Read ROM/EEPROM Response" block: E7 A4 E7 A4 E7 A4 E8 A4 E8 A4 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0100, Count: $0C)
Received "Read ROM/EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 FF FF
Saved EEPROM dump to 7D0920902T__T4-KOMBIINSTR._VDO_V01__$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block

 

[gmenounos]

Newbie trying to adapt three new keys to my 2003 VW Eurovan. I understand that I first need to find the SKC, but the software returns "Unable to determine SKC." as shown below.
Do I need to use a different command for this vehicle?

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>kw1281test com3 10400 17 ReadIdent
KW1281Test: Yesterday's diagnostics...Today.

Version 0.78-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 ReadIdent
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: en-US
Opening serial port com3
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 7D0920902T T4-KOMBIINSTR. VDO V01
Software Coding 03235, Workshop Code: 02757
Sending ReadIdent block
Ident: 7D0920902T T4-KOMBIINSTR. VDO V01
Software Coding 03235, Workshop Code: 02757
Sending EndCommunication block

I think the Eurovan has a dedicated immobilizer box outside of the cluster, which kw1281test doesn't currently support.

Can you see if either of the following commands works?

.\kw1281test com3 9600 25 ReadIdent
.\kw1281test com3 10400 25 ReadIdent

 

[michaelhauser]

I think the Eurovan has a dedicated immobilizer box outside of the cluster, which kw1281test doesn't currently support.

Can you see if either of the following commands works?

.\kw1281test com3 9600 25 ReadIdent
.\kw1281test com3 10400 25 ReadIdent

The cable moved to com4 after reboot. Here are the results of those two commands.

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>.\kw1281test.exe com4 9600 25 ReadIdent
KW1281Test: Yesterday's diagnostics...Today.

Version 0.78-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com4 9600 25 ReadIdent
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: en-US
Opening serial port com4
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Caught: System.InvalidOperationException Received block end $20 but expected $03
Unhandled exception: System.InvalidOperationException: Received block end $20 but expected $03
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 392
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 40
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 256
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 26

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>.\kw1281test.exe com4 10400 25 ReadIdent
KW1281Test: Yesterday's diagnostics...Today.

Version 0.78-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com4 10400 25 ReadIdent
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: en-US
Opening serial port com4
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $0A
Protocol is KW 1281 (8N1)
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 )
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 103
at BitFab.KW1281Test.KW1281Dialog.ReadAndAckByte() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 441
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 384
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 40
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 256
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 26

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>

 

[gmenounos]

The cable moved to com4 after reboot. Here are the results of those two commands.

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>.\kw1281test.exe com4 9600 25 ReadIdent
KW1281Test: Yesterday's diagnostics...Today.

Version 0.78-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com4 9600 25 ReadIdent
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: en-US
Opening serial port com4
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Caught: System.InvalidOperationException Received block end $20 but expected $03
Unhandled exception: System.InvalidOperationException: Received block end $20 but expected $03
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 392
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 40
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 256
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 26

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>.\kw1281test.exe com4 10400 25 ReadIdent
KW1281Test: Yesterday's diagnostics...Today.

Version 0.78-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com4 10400 25 ReadIdent
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.8
Culture: en-US
Opening serial port com4
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $0A
Protocol is KW 1281 (8N1)
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 )
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 103
at BitFab.KW1281Test.KW1281Dialog.ReadAndAckByte() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 441
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 384
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 40
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 256
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 26

C:\Users\Michael\Downloads\kw1281test_0.78-beta_Win10>

Thanks for testing but I think you're out of luck with kw1281test. I did some more research and Eurovans have a dedicated immobilizer box (6X0953257) and there's no known way to retrieve the SKC other than by removing the immobilizer box from the vehicle and reading the EEPROM chip inside it with a hardware EEPROM reader.

If you have a TDI engine then you might be able to use kw1281test to dump the ECU's EEPROM and extract the SKC from there.

.\kw1281test com4 9600 1 DumpEdc15Eeprom

 

[michaelhauser]

Thanks for testing but I think you're out of luck with kw1281test. I did some more research and Eurovans have a dedicated immobilizer box (6X0953257) and there's no known way to retrieve the SKC other than by removing the immobilizer box from the vehicle and reading the EEPROM chip inside it with a hardware EEPROM reader.

If you have a TDI engine then you might be able to use kw1281test to dump the ECU's EEPROM and extract the SKC from there.

.\kw1281test com4 9600 1 DumpEdc15Eeprom

No, I don't have a TDI engine. So my ECU's EEPROM wouldn't have a copy of the SKC (or kw1281test's dump command wouldn't work with my ECU)?

If I can get the SKC (e.g., using a hardware reader), would I then be able to use kw1281test for key adaption with my ECU or would that also be unsupported due to the need to communicate directly with the external immobilizer box?

Thanks.

Michael

 

[gmenounos]

No, I don't have a TDI engine. So my ECU's EEPROM wouldn't have a copy of the SKC (or kw1281test's dump command wouldn't work with my ECU)?

If I can get the SKC (e.g., using a hardware reader), would I then be able to use kw1281test for key adaption with my ECU or would that also be unsupported due to the need to communicate directly with the external immobilizer box?

Thanks.

Michael

If your ECU is a ME7, you might be able to use this tool to read the EEPROM: http://nefariousmotorsports.com/forum/index.php?topic=1168.0

Not sure about key adaptation with kw1281test as it seems to be having trouble communicating with your Immo box. You could try downloading VCDS-Lite ( https://www.ross-tech.com/vcds-lite/download/ ) and see if that can talk to the Immo box.

 

[ekincaid]

@gmenounos Just got a chance to try and remove my airbag warning light.

I think so. The following command will read the airbag fault codes (Replace "COM1" with your actual COM port):

.\kw1281test.exe COM1 9600 15 ReadFaultCodes

The following command should clear the airbag fault codes:

.\kw1281test.exe COM1 9600 15 ClearFaultCodes

The current version (0.76-beta) of kw1281test has a bug so it'll give you this error:

Sending ClearFaultCodes block
Caught: System.InvalidOperationException ClearFaultCodes returned 2 blocks instead of 1

But it should still clear the fault codes and hopefully reset your airbag light.

I received the following when I tried to read the codes. I tried the clear command and received something similar. I know you mentioned error messages. But does this look right to you? I have used this a few times on my 2003 Golf to do several things including reading the eeprom.

Caught: System.InvalidOperationException Unexpected sync byte: Expected $55, Actual $A5
Unhandled exception: System.InvalidOperationException: Unexpected sync byte: Expected $55, Actual $A5
at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 75
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 33
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 256
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 26

 

[gmenounos]

"Unexpected sync byte: Expected $55, Actual ..." usually means you used the wrong baud rate. Can you confirm that you used 9600?

 

[punkassjim]

Hi y'all. Been a while since I've used this utility, and I'm in a bit of a bind. Need to swap my ECU quickly, don't have access to a windows machine/VAG-Com software, but I do have a working install of kw1281test (v0.72-beta) on my Mac. Is there documentation somewhere for doing ECU immobilizer matching? Or does someone have the procedure off the top of their head? Gotta get the car rolling before sundown (PST). I'll be scrolling through this thread, will post a reply if I find it before someone is able to help out. Thanks in advance.

My cluster and keys match, pretty sure my old ECU also matches, but somewhere along the way I had a chip installed with immo defeat, so I'm not 100% sure.

 

[gmenounos]

Hi y'all. Been a while since I've used this utility, and I'm in a bit of a bind. Need to swap my ECU quickly, don't have access to a windows machine/VAG-Com software, but I do have a working install of kw1281test (v0.72-beta) on my Mac. Is there documentation somewhere for doing ECU immobilizer matching? Or does someone have the procedure off the top of their head? Gotta get the car rolling before sundown (PST). I'll be scrolling through this thread, will post a reply if I find it before someone is able to help out. Thanks in advance.

My cluster and keys match, pretty sure my old ECU also matches, but somewhere along the way I had a chip installed with immo defeat, so I'm not 100% sure.

Immo2 or Immo3? Or better, what's the part number of the ECU?

 

[punkassjim]

Oh, looks like I've figured it out. Ross-tech's instructions work with this tool, I just was using AdaptationRead incorrectly; didn't see the returned value was 0. I was reading channel 10, because apparently I can't read.

It's immo-2, and I think I've succeeded. Immo light stopped flashing, but I'm gonna need to put more charge in the battery before it'll start. Thanks!