kw1281test: A Free VDS-Pro / VagTacho Alternative

E

epilsonis

New member
Joined
Jan 27, 2025
Location
Latvia
TDI
1.9
Hello, can anyone help me get out PIN CODE out of my dump for my a4b5 cluster? Didn't had any luck, was trying to convert last 2 bits before immo-id, but I might have done something incorrect, so I still can't access my pin code, could anyone help me out and explain a little bit more or get me the code? Haven't been familiar with HEX codes at all. Here is the download link for my dumps.
From what I understood, the pin for me was 01138, but it didn't work.

Here is also an image from the place, where I should get my pin code as I understood after reading the forum, but didn't get much success..
 
Last edited:
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
epilsonis said:
Hello, can anyone help me get out PIN CODE out of my dump for my a4b5 cluster? Didn't had any luck, was trying to convert last 2 bits before immo-id, but I might have done something incorrect, so I still can't access my pin code, could anyone help me out and explain a little bit more or get me the code? Haven't been familiar with HEX codes at all. Here is the download link for my dumps.
From what I understood, the pin for me was 01138, but it didn't work.

Here is also an image from the place, where I should get my pin code as I understood after reading the forum, but didn't get much success..
Click to expand...
I don't know much about Audi clusters. Try asking at http://www.nefariousmotorsports.com/forum/ or https://www.digital-kaos.co.uk/forums/index.php
 
E

epilsonis

New member
Joined
Jan 27, 2025
Location
Latvia
TDI
1.9
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
epilsonis said:
As I understand from what I have read, It should be similar with beelte marelli clusters, so from the dump that I have gotten out of the cluster, can you take a look? maybe there is possibility to convert this pincode out of it?
Click to expand...
Try 02124

Did kw1281test make that dump? If so, please post your kw1281test.log file so that I can add support for that cluster.
 
E

epilsonis

New member
Joined
Jan 27, 2025
Location
Latvia
TDI
1.9
gmenounos said:
Try 02124

Did kw1281test make that dump? If so, please post your kw1281test.log file so that I can add support for that cluster.
Click to expand...
Thank you! Yes, kw1281test made that dump!
I will try it as soon as I will start to work at garage today, can you please explain how did you calculate it?

and here is the log file. download

Sadly the code didn't work out either, any suggestions what more I could do?
 
Last edited:
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
epilsonis said:
can you please explain how did you calculate it?
Click to expand...
2 bytes directly before the Immo ID: 084C (base 16) = 02124 (base 10)

1738205117240.png

epilsonis said:
Sadly the code didn't work out either, any suggestions what more I could do?
Click to expand...
You could try logging in to address 25 (Immobilizer) instead of address 17 (Cluster).
 
4

4motionbeetle

Member
Joined
Dec 4, 2019
Location
Bolsover, UK
TDI
02 T4 2.5TDI LWB Syncro, 02 New Beetle 1.8T, 01 New Beetle V5 4Motion Baja
Had a go using my KKL cable and COM4 today.

After getting the correct driver and working out I needed to alter the port in the request to COM4 I did get somewhere.

My aim is to retrieve the SKC code from my Beetle instrument cluster (no issues) and swap it for a custom Polo GTI unit.
I tried the GetSKC request - .\kw1281test.exe COM4 10400 17 GetSKC

Unfortunately with no result. Log shown below. Any ideas? TIA

------------------------------------

Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19041.0
.NET Version: 9.0.0
Culture: en-GB
Opening Generic serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $0A
Protocol is KW 1281 (8N1)
Error receiving block: The operation has timed out.
Partial block: $FD $8A $75 $8A
Read timeout: 8000
Write timeout: 8000
Error receiving blocks: The operation has timed out.
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 _)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 137
at BitFab.KW1281Test.KW1281Dialog.ReadAndAckByte() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 479
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 409
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 360
at BitFab.KW1281Test.KW1281Dialog.Connect() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 92
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in /Users/gmenounos/src/kw1281test/Tester.cs:line 38
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 505
at BitFab.KW1281Test.Program.Run(String[] args) in /Users/gmenounos/src/kw1281test/Program.cs:line 277
at BitFab.KW1281Test.Program.Main(String[] args) in /Users/gmenounos/src/kw1281test/Program.cs:line 33

------------------------------------
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
4motionbeetle said:
Had a go using my KKL cable and COM4 today.

After getting the correct driver and working out I needed to alter the port in the request to COM4 I did get somewhere.

My aim is to retrieve the SKC code from my Beetle instrument cluster (no issues) and swap it for a custom Polo GTI unit.
I tried the GetSKC request - .\kw1281test.exe COM4 10400 17 GetSKC

Unfortunately with no result. Log shown below. Any ideas? TIA

------------------------------------

Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 10400 17 GetSKC
Click to expand...
Beetle clusters use 9600 baud, not 10400.
 
4

4motionbeetle

Member
Joined
Dec 4, 2019
Location
Bolsover, UK
TDI
02 T4 2.5TDI LWB Syncro, 02 New Beetle 1.8T, 01 New Beetle V5 4Motion Baja
gmenounos said:
Beetle clusters use 9600 baud, not 10400.
Click to expand...
Thanks for the reply.

I changed the baud rate and got something back but I guess as the message suggests my cluster is unsupported?

-------------------------------------------------------------------------------------------------------------------------
Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19041.0
.NET Version: 9.0.0
Culture: en-GB
Opening Generic serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0920920F KOMBI+WEGFAHRS. M73 V08
Software Coding 05412, Workshop Code: 00050
Caught: System.InvalidOperationException Unsupported cluster version.
Unhandled exception: System.InvalidOperationException: Unsupported cluster version.
at BitFab.KW1281Test.Cluster.MarelliCluster.GetDefaultAddress() in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 38
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1 address, Nullable`1 length, String dumpFileName) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 18
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 621
at BitFab.KW1281Test.Program.Run(String[] args) in /Users/gmenounos/src/kw1281test/Program.cs:line 277
at BitFab.KW1281Test.Program.Main(String[] args) in /Users/gmenounos/src/kw1281test/Program.cs:line 33
-------------------------------------------------------------------------------------------------------------------------

Is there any other way than buying VAGTacho at ridiculous expens? I only intend to use it once.
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
4motionbeetle said:
Thanks for the reply.

I changed the baud rate and got something back but I guess as the message suggests my cluster is unsupported?

-------------------------------------------------------------------------------------------------------------------------
Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19041.0
.NET Version: 9.0.0
Culture: en-GB
Opening Generic serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0920920F KOMBI+WEGFAHRS. M73 V08
Software Coding 05412, Workshop Code: 00050
Caught: System.InvalidOperationException Unsupported cluster version.
-------------------------------------------------------------------------------------------------------------------------

Is there any other way than buying VAGTacho at ridiculous expens? I only intend to use it once.
Click to expand...
For unsupported Beetle clusters, you can try the following 2 commands:

kw1281test.exe COM4 9600 17 DumpMarelliMem 3072 1024
kw1281test.exe COM4 9600 17 DumpMarelliMem 14336 2048

Please report back if either of them is able to dump the cluster EEPROM and then I can add official support for your cluster.
 
4

4motionbeetle

Member
Joined
Dec 4, 2019
Location
Bolsover, UK
TDI
02 T4 2.5TDI LWB Syncro, 02 New Beetle 1.8T, 01 New Beetle V5 4Motion Baja
gmenounos said:
For unsupported Beetle clusters, you can try the following 2 commands:

kw1281test.exe COM4 9600 17 DumpMarelliMem 3072 1024
kw1281test.exe COM4 9600 17 DumpMarelliMem 14336 2048

Please report back if either of them is able to dump the cluster EEPROM and then I can add official support for your cluster.
Click to expand...
Sadly both produced the timeout message but nothing more

-------------------------------------------------------------------------------------------------------------------------
Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 17 DumpMarelliMem 3072 1024
OSVersion: Microsoft Windows NT 10.0.19041.0
.NET Version: 9.0.0
Culture: en-GB
Opening Generic serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Error receiving block: The operation has timed out.
Partial block: $75 $8A $75 $8A
Read timeout: 8000
Write timeout: 8000
Error receiving blocks: The operation has timed out.
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 _)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 137
at BitFab.KW1281Test.KW1281Dialog.ReadAndAckByte() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 479
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 409
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 360
at BitFab.KW1281Test.KW1281Dialog.Connect() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 92
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean evenParityWakeup) in /Users/gmenounos/src/kw1281test/Tester.cs:line 38
at BitFab.KW1281Test.Program.Run(String[] args) in /Users/gmenounos/src/kw1281test/Program.cs:line 290
at BitFab.KW1281Test.Program.Main(String[] args) in /Users/gmenounos/src/kw1281test/Program.cs:line 33
-------------------------------------------------------------------------------------------------------------------------
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
4motionbeetle said:
Sadly both produced the timeout message but nothing more

-------------------------------------------------------------------------------------------------------------------------
Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 17 DumpMarelliMem 3072 1024
OSVersion: Microsoft Windows NT 10.0.19041.0
.NET Version: 9.0.0
Culture: en-GB
Opening Generic serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Error receiving block: The operation has timed out.
Partial block: $75 $8A $75 $8A
Read timeout: 8000
Write timeout: 8000
Error receiving blocks: The operation has timed out.
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
-------------------------------------------------------------------------------------------------------------------------
Click to expand...
It's not even getting past the initial connection to your cluster where it displays the cluster part number. What kind of cable are you using? Any chance you could try this on a different laptop or with a different cable?
 
S

strugglebus

New member
Joined
Feb 4, 2025
Location
Des Moines, IA
TDI
Golf TDI
Long time listener, first time caller.

I've lurked for a long time, but now i'm stuck and hoping someone can shed some light.

I just picked up a 2000 VW GTI GLS, which only came with one key <insert standard spiel here>:censored:

I used kw1281test 0.99.4 to snag the SKC, but VCDS says it's incorrect.​

Here's my kw1281test stdout:
Code: 
Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM9 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 9.0.0
Culture: en-US
Opening Generic serial port COM9
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920900J  A4-KOMBIINSTR. VDO V26
Software Coding 07242, Workshop Code: 01287
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: V599LLA  $00 $03
01: $56 $35 $39 $39 $4C $4C $41 $20 $00 $03
02: $56 $35 $39 $39 $4C $4C $41 $20 $00 $03
03: V599LLA  $00 $03
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'V599LLA  03.00' is 38 3F 40 35
Sending Custom "Get Access Level" block
Access level is unknown.
Sending Custom "Seed request" block
Sending Custom "Get Access Level" block
Access level is unknown.
Failed to unlock cluster.
Saving EEPROM dump to IMMO-IDENTNR_VWZ7Z0Y2254217________$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Received "Read ROM/EEPROM Response" block: 36 4E 30 39 30 39 39 30 31 20 31 4A 30 39 32 30
Sending ReadEeprom block (Address: $00A0, Count: $10)
Received "Read ROM/EEPROM Response" block: 39 30 30 4A 20 20 41 34 56 32 36 39 56 57 5A 37
Sending ReadEeprom block (Address: $00B0, Count: $10)
Received "Read ROM/EEPROM Response" block: 5A 30 59 32 32 35 34 32 31 37 48 36 56 57 5A 37
Sending ReadEeprom block (Address: $00C0, Count: $10)
Received "Read ROM/EEPROM Response" block: 5A 30 59 32 32 35 34 32 31 37 48 36 56 57 5A 37
Sending ReadEeprom block (Address: $00D0, Count: $10)
Received "Read ROM/EEPROM Response" block: 5A 30 59 32 32 35 34 32 31 37 48 36 FF FF FF FF
Sending ReadEeprom block (Address: $00E0, Count: $10)
Received "Read ROM/EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $00F0, Count: $10)
Received "Read ROM/EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0100, Count: $0C)
Received "Read ROM/EEPROM Response" block: FF FF 70 C2 70 C2 70 C2 71 C2 71 C2
Saved EEPROM dump to IMMO-IDENTNR_VWZ7Z0Y2254217________$0090_eeprom.bin
SKC: 03648
Sending EndCommunication block
Here's the contents of the immo-*.bin it saved:
Code: 
6N0909901 1J0920900J  A4V269VWZ7Z0Y2254217H6VWZ7Z0Y2254217H6VWZ7Z0Y2254217H6ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿpÂpÂpÂqÂqÂ
Attempt to use the SKC in VCDS:


YOU SHALL NOT PASS:
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
strugglebus said:
Long time listener, first time caller.

I've lurked for a long time, but now i'm stuck and hoping someone can shed some light.

I just picked up a 2000 VW GTI GLS, which only came with one key <insert standard spiel here>:censored:

I used kw1281test 0.99.4 to snag the SKC, but VCDS says it's incorrect.​

Here's my kw1281test stdout:
Code: 
Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM9 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 9.0.0
Culture: en-US
Opening Generic serial port COM9
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920900J  A4-KOMBIINSTR. VDO V26
Software Coding 07242, Workshop Code: 01287
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: V599LLA  $00 $03
01: $56 $35 $39 $39 $4C $4C $41 $20 $00 $03
02: $56 $35 $39 $39 $4C $4C $41 $20 $00 $03
03: V599LLA  $00 $03
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'V599LLA  03.00' is 38 3F 40 35
Sending Custom "Get Access Level" block
Access level is unknown.
Sending Custom "Seed request" block
Sending Custom "Get Access Level" block
Access level is unknown.
Failed to unlock cluster.
Saving EEPROM dump to IMMO-IDENTNR_VWZ7Z0Y2254217________$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Received "Read ROM/EEPROM Response" block: 36 4E 30 39 30 39 39 30 31 20 31 4A 30 39 32 30
Sending ReadEeprom block (Address: $00A0, Count: $10)
Received "Read ROM/EEPROM Response" block: 39 30 30 4A 20 20 41 34 56 32 36 39 56 57 5A 37
Sending ReadEeprom block (Address: $00B0, Count: $10)
Received "Read ROM/EEPROM Response" block: 5A 30 59 32 32 35 34 32 31 37 48 36 56 57 5A 37
Sending ReadEeprom block (Address: $00C0, Count: $10)
Received "Read ROM/EEPROM Response" block: 5A 30 59 32 32 35 34 32 31 37 48 36 56 57 5A 37
Sending ReadEeprom block (Address: $00D0, Count: $10)
Received "Read ROM/EEPROM Response" block: 5A 30 59 32 32 35 34 32 31 37 48 36 FF FF FF FF
Sending ReadEeprom block (Address: $00E0, Count: $10)
Received "Read ROM/EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $00F0, Count: $10)
Received "Read ROM/EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0100, Count: $0C)
Received "Read ROM/EEPROM Response" block: FF FF 70 C2 70 C2 70 C2 71 C2 71 C2
Saved EEPROM dump to IMMO-IDENTNR_VWZ7Z0Y2254217________$0090_eeprom.bin
SKC: 03648
Sending EndCommunication block
Here's the contents of the immo-*.bin it saved:
Code: 
6N0909901 1J0920900J  A4V269VWZ7Z0Y2254217H6VWZ7Z0Y2254217H6VWZ7Z0Y2254217H6ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿpÂpÂpÂqÂqÂ
Attempt to use the SKC in VCDS:


YOU SHALL NOT PASS:
Click to expand...
My Magic-8-Ball tells me that you're trying to login to address 25 with VCDS-Lite because the cluster is returning the helpful (if you speak German, which I don't, but I know how to use Google Translate) message "Bitte Adresse 17 eingeben", which means "Please use address 17".
 
S

strugglebus

New member
Joined
Feb 4, 2025
Location
Des Moines, IA
TDI
Golf TDI
gmenounos said:
My Magic-8-Ball tells me that you're trying to login to address 25 with VCDS-Lite because the cluster is returning the helpful (if you speak German, which I don't, but I know how to use Google Translate) message "Bitte Adresse 17 eingeben", which means "Please use address 17".
Click to expand...
My bad, I thought these args pulled SKC from address 17:

Args: COM9 10400 17 GetSKC
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
strugglebus said:
My bad, I thought these args pulled SKC from address 17:

Args: COM9 10400 17 GetSKC
Click to expand...
It did pull the SKC from address 17 but then you connected to address 25 with VCDS-Lite. Click on the "17-Instruments" button, not the "25-Immobilizer" button. 25 is mostly for cars with a dedicated immobilizer box independent from the instrument cluster. All the MKIV cars in the US that I know of have the immobilizer integrated into the cluster so you use address 17 for general cluster stuff and immobilizer stuff.
 
S

strugglebus

New member
Joined
Feb 4, 2025
Location
Des Moines, IA
TDI
Golf TDI
gmenounos said:
It did pull the SKC from address 17 but then you connected to address 25 with VCDS-Lite. Click on the "17-Instruments" button, not the "25-Immobilizer" button. 25 is mostly for cars with a dedicated immobilizer box independent from the instrument cluster. All the MKIV cars in the US that I know of have the immobilizer integrated into the cluster so you use address 17 for general cluster stuff and immobilizer stuff.
Click to expand...
10-4, i see what you're saying. </back into the frigid cold>
 
P

PeppeTDI

Member
Joined
Jan 11, 2020
Location
Italy
TDI
2.0 150cv manual
Good evening guys, I also tried to extract my SKC of my VW Polo MK4 2009 1.4 TDI, but unfortunately I receive this error.

Download

A file is available for download and streaming via UploadNow by following this link
uploadnow.io uploadnow.io
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
M

MK4_Golfgti_MM

New member
Joined
Mar 6, 2025
Location
South Africa
TDI
GTI : AGU
GoodDay Ladies and Gentleman.

I trust that this message finds you well.

First timer here , just want to give a huge thank you to everyone for the guidance and assistance on this forum , been very helpful.


I'm trying to retrieve the SKC on my Mk 4 golf gti (2002) AGU motor with a 1J920 cluster.

For some reason I just keep getting the error "Controller did not wakeup " & Operation has timed out

This is the thread I used ,(keep in mind I had attempted the previously mentioned prompts as well ( COM3 10400 17 GetSKC) no luck

Any advice or guidance will be truly appreciated

" Command Prompt - kw1: X
C:\Users\Venaiy Pachai\Desktop\kwl281test_0.99.6-beta_Winl0>kw1281test com3 9600 1 getskc
KW1281Test: Yesterday's diagnostics...Today
com/gmenounos/kw1281test/releases)
UD
Version 0.99.6-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 9600 1 getskc
0O,0
OSVersion: Microsoft Windows NT 10.0.26100.0
,NET Version: 9.0.2
Culture: en-ZA
1al
port com3
Opening Generic serial port com3
Sending wakeup message
Reading sync byte
ed
out
The operation has timed out.
Retrying wakeup message...
Reading sync byte
out
The operation has timed out.
Retrying wakeup message. ."
Reading sync byte
The operation has timed out.ionException Controller did not wake up
Caught: System.InvalidOperationException ControllerodidCnot-wakerupid not wake up
Unhandled exception: System.InvalidOperationException:eControllerEdidenotewakeaupty) in D:\src\kw128ltest\KwpCommon.cs:line 62
at BitFab.Kil1281Test.KwpCommon.WakeUp(Byte"controllerAddress/aBooleannevenParity)2intD:\src\kw1281test\kwpCommon.cs:line 62
at BitFab.K₩1281Test.Tester.Kwp1281Wakeup(BooleanlevenParityWakeup).innD:\src\kw1281test\Tester.cs:line 31
at BitFab.K₩1281Test.Tester.GetSkc()iin D:\src\kw1281test\Tester.cs:lineg658.cs:line 277
at BitFab.KW1281Test.Program.Run(String[]largs) inD:\src\kw1281test\Programucs;linee277
at BitFab.kW1281Test.Program.MainCString[] args) in D:\src\kwl28ltest\Program.cs:line 33
a
Des
op kw1 28 tes
9
C:\Users\Venaly Pachai\Desktop\kw1281test_0.99.6-beta_Winl0>kw1281test com3 9600 1 getskc
6- beta, Win10-kw1281test com3 9600 1 getskc
KW1281Test: Yesterday's diagnostics...Today.
er
tps://github.com/gmenounos/kw1281test/releases)
Version 0.99.6-beta-(https://github.com/gmenounos/kw1281test/releases)
Args: com3 9600 1 getskcdows
10.0.26100
O
OsVersion: Microsoft Windows NT 10.0.26100.0
.NET Version: 9.0.2
Culture: en-ZA
erial port com3
Opening Generic serial port com3
Sending wakeup message
Reading sync byte
ned out
The operation has- timed out.
Retrying wakeup message...
Reading sync byte
cined out
The operation has-timed out.
Retrying wakeun:
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
MK4_Golfgti_MM said:
Opening Generic serial port com3
Sending wakeup message
Reading sync byte
The operation has timed out.
Retrying wakeup message...
Click to expand...
What kind of cable are you using? Try downloading VCDS-Lite and see if that works with your cable. If you can't connect to your cluster with VCDS-Lite then kw1281test isn't going to work either.
 
M

MK4_Golfgti_MM

New member
Joined
Mar 6, 2025
Location
South Africa
TDI
GTI : AGU
gmenounos said:
What kind of cable are you using? Try downloading VCDS-Lite and see if that works with your cable. If you can't connect to your cluster with VCDS-Lite then kw1281test isn't going to work either.
Click to expand...

Thank you for you valuable response Mr Menounos , sending my humbly apologies for the late response ,

I am using 3 cables :

1# Hex V2 - genuine RossTech (does not work with this application)
2# Hex V1 - replica Rosstech (functions with limited capability for the app)
3# KKL - Vag-com 409.1 (very promising)

It seems that I got very close using the KKL cable , this functions perfectly with VCDS lite.

However this is the end result :

(any guidance will be extremely grateful)

Version 0.99.7-beta (https://github.com/gmenounos/kwl281test/releases)
Command Line: kw1281test COM1 10400 17 Getskc
OSVersion: Microsoft Windows NT 10.0.22621.0
.NET Version: 9.0.2
Culture: en-ZA
Opening Generic serial port COM1
Sending Wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920825A KOMBI+WEGFAHRS. BOO V12
Software Coding 05102, Workshop Code: 03264
Sending 0x43 block
Received $FF block: 0x0E 0x0B 0xFF 0x68 0x31 0x33 0x34 0x30 0x5F 0x30 0x36 0x2E 0x32 0x2D 0x03
Received $FF block: 0x0D 0x0D OxFF 0x63 0x31 0x33 0x34 0x30 0x5F 0x30 0x36 0x2E Ox32 0x03
h1340 06.2-
c1340 06.2
Sending Login block
Sending Custom $08 $15 block
$08 $15 failed. Trying all combinations (this may take a while).
Trying $00 $00-$FF
Trying $01 $00-$FF
Trying $02 $00-$FF
Trying $03 $00-$FF
Trying $04 $00-$FF
Trying $05 $00-$FF
Trying $06 $00-$FF
Caught: System.TimeoutException The operation has timed out
Unhandled exception: System.TimeoutException: The operation has timed out
at BitFab.KW1281Test.KwpCommon.ReadComplement(Byte b) in D:\src\kw1281test\KwpCommon.cs:line 155
at BitFab.K₩1281Test.KW1281Dialog-SendBlock(List1 blockBytes) in D:\src\kw128ltest\KW1281Dialog.cs:line 349
at BitFab.KW1281Test.Cluster.MotometerBOOCluster.SendCustom(Int32 first, Int32 second) in D:\src\kw1281test\Cluster\MotometerB00Cluster.cs:line 50
at BitFab.KW1281Test.Cluster.MotometerBOOCluster.UnlockForEepromReadWrite( in D:\src\kw1281test\Cluster\MotometerB0OCluster.cs:line 36
at BitFab.KW1281Test.Tester.GetSkc() in D:\src\kw1281test\Tester.cs:line 638
at BitFab.KW1281Test.Program.Run(String[] args) in D:\src\kw1281test\Program.cs:line 287
at BitFab.KW1281Test.Program.Main(String[] args) in D:\src\kw1281test\Program.cs:line 40
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
MK4_Golfgti_MM said:
Thank you for you valuable response Mr Menounos , sending my humbly apologies for the late response ,

I am using 3 cables :

1# Hex V2 - genuine RossTech (does not work with this application)
2# Hex V1 - replica Rosstech (functions with limited capability for the app)
3# KKL - Vag-com 409.1 (very promising)

It seems that I got very close using the KKL cable , this functions perfectly with VCDS lite.

However this is the end result :

(any guidance will be extremely grateful)

Version 0.99.7-beta (https://github.com/gmenounos/kwl281test/releases)
Command Line: kw1281test COM1 10400 17 Getskc
OSVersion: Microsoft Windows NT 10.0.22621.0
.NET Version: 9.0.2
Culture: en-ZA
Opening Generic serial port COM1
Sending Wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920825A KOMBI+WEGFAHRS. BOO V12
Software Coding 05102, Workshop Code: 03264
Sending 0x43 block
Received $FF block: 0x0E 0x0B 0xFF 0x68 0x31 0x33 0x34 0x30 0x5F 0x30 0x36 0x2E 0x32 0x2D 0x03
Received $FF block: 0x0D 0x0D OxFF 0x63 0x31 0x33 0x34 0x30 0x5F 0x30 0x36 0x2E Ox32 0x03
h1340 06.2-
c1340 06.2
Sending Login block
Sending Custom $08 $15 block
$08 $15 failed. Trying all combinations (this may take a while).
Trying $00 $00-$FF
Trying $01 $00-$FF
Trying $02 $00-$FF
Trying $03 $00-$FF
Trying $04 $00-$FF
Trying $05 $00-$FF
Trying $06 $00-$FF
Caught: System.TimeoutException The operation has timed out
Unhandled exception: System.TimeoutException: The operation has timed out
at BitFab.KW1281Test.KwpCommon.ReadComplement(Byte b) in D:\src\kw1281test\KwpCommon.cs:line 155
at BitFab.K₩1281Test.KW1281Dialog-SendBlock(List1 blockBytes) in D:\src\kw128ltest\KW1281Dialog.cs:line 349
at BitFab.KW1281Test.Cluster.MotometerBOOCluster.SendCustom(Int32 first, Int32 second) in D:\src\kw1281test\Cluster\MotometerB00Cluster.cs:line 50
at BitFab.KW1281Test.Cluster.MotometerBOOCluster.UnlockForEepromReadWrite( in D:\src\kw1281test\Cluster\MotometerB0OCluster.cs:line 36
at BitFab.KW1281Test.Tester.GetSkc() in D:\src\kw1281test\Tester.cs:line 638
at BitFab.KW1281Test.Program.Run(String[] args) in D:\src\kw1281test\Program.cs:line 287
at BitFab.KW1281Test.Program.Main(String[] args) in D:\src\kw1281test\Program.cs:line 40
Click to expand...
Unfortunately you're going to have to keep trying the GetSKC command until it succeeds without a timeout. "BOO" clusters can only be unlocked to read the EEPROM via trial and error (as far as I know).

That "Trying $00 $00-$FF" message may need to be repeated up to 256 times to go through all the possibilities. Keep trying and see if you can get it to work without a timeout.
 
I

imaginifer

Member
Joined
Jan 3, 2023
Location
Czech Republic
TDI
Škoda Fabia I 1.4 TDI
Hello, today's try with a replacement cluster just connected in the car without pairing. Neither of showed SKCs is correct. I'm not sure if it should work in this case or not.

Code: 
Version 0.99.7-beta (https://github.com/gmenounos/kw1281test/releases)
Command Line: kw1281test COM3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 9.0.2
Culture: cs-CZ
Opening Generic serial port COM3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 6Y1919880D KOMBIINSTRUMENT VDO V07
Software Coding 16141, Workshop Code: 00006
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: KPQMLA` $01
01: $4B $50 $51 $4D $4C $41 $60 $01
02: $4B $50 $51 $4D $4C $41 $60 $01
03: KPQMLA` $01
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'KPQMLA` $01' is 47 3B 31 3F
Sending Custom "Get Access Level" block
Access level is unknown.
Sending Custom "Seed request" block
Sending Custom "Get Access Level" block
Access level is unknown.
Failed to unlock cluster.
Saving EEPROM dump to TMBNS46Y9Y3085189_____SKZ7Z0Y0565954_$01FA_eeprom.bin
Sending ReadEeprom block (Address: $01FA, Count: $06)
Received "Read ROM/EEPROM Response" block: FF 02 58 04 D4 05
Saved EEPROM dump to TMBNS46Y9Y3085189_____SKZ7Z0Y0565954_$01FA_eeprom.bin
Warning: redundant SKCs do not match: 00365 00458 00634
SKC: 00365
Sending EndCommunication block
 
You must log in or register to reply here.
Top