How to BOOT read Bosch TPROT 8-10 using PCM Flash crack

  • -

How to BOOT read Bosch TPROT 8-10 using PCM Flash crack

PCM Flash clone is confirmed to work for 3 types of Bosch Infineon ECU:

1) The Infineon ECU before TPROT8.
2) TPROT 8-10
3) The Infineon ECU after TPROT10 which is what we call GPT encrypted.

Today, we’ll talk about how to read TPROT 8-10 with PCMFlash

For TPROT8-10, he Bosch Company sets the anti-debugging mode, reading EEPROM needs no password and reading Flash needs password.

Therefore, during the reading process, there is an extra CNF1, Boot outputs low level and CNF1 outputs high level. When reading, Boot needs to add one small resistor and ground it. CNF1 to connect one 470ohm-2K resistance, then connect 3.3V, it’s very important, otherwise the Auto ECU Programmer will be burnout.

2 Tips on reading the data:

1) BOOT and CNF1 must be connected when reading data.

2) Only connect BOOT not CNF1 When reading the password, otherwise the password can’t be read out. Also you can follow the Ktag wiring diagram because Ktag controls the CNF1 turn on and off, so it can’t be disconnected. When reading the password, you turn the two switches to the automatic mode, and to the On mode when reading the data, when the software prompts, you choose ” Manually” then follow the message to turn on or off.

KTAG wiring diagram help file:

https://mega.nz/#!QNhBCRKR!36B3zt2mu89-gjnh4r9HThNcd2e2WRiBDK4NpL3Jqho

PCM Flash crack software download:

https://share.weiyun.com/5B6iC3q (password: t6dijv)

Tested 100% with PCM Flash china clone

pcmflash-clone

PCMFlahs TPROT8+ vehicle list:

Bosch: BMW TPROT8+

Bosch: VAG TPROT8+

Bosch: Kia/Hyundai/Honda TPROT8+

Bosch: Chrysler/Jeep/Dodge/Fiat TPROT8+ [Test]

…..

Read the encrypted ECU password

Good to know:

The Infineon ECU before TPROT8 is not encrypted, you directly uses the BOOT point

grounding, then follow the Ktag user manual to wire the cable and read the data.


  • -

How to Use KTAG to ReadWrite for Benz ME9.7 ECU

This article OBD2TOOL will show you a step-by-step guide on how to use KAG to read/write Mercedes Benz ME9.7.And try this procedures at your own risk!

Vehicle Information: Mercedes W221 S350
Device: KTAG ECU Programmer

Step1:
Remove the ME9.7 ECU from vehicle,and open the ECU shell carefully.(for ECU shell removal,you can check this article:How to open EDC16 / EDC17 / MED17 )

ECU PCB show as picture show:

KTAG-to-ReadWrite-for-Benz-1

Step 2:
Connect then cable 14P600KT02 to the connector of ECU.

Refer to below pin out diagram:

Red color: Pin 15, 16: +12V

Black: Pin 2: GND

KTAG-to-ReadWrite-for-Benz-2

Apply solder paste on the red area in ECU as following picture:

KTAG-to-ReadWrite-for-Benz-4
KTAG-to-ReadWrite-for-Benz-3
Solder cable to ECU:

KTAG-to-ReadWrite-for-Benz-5
KTAG-to-ReadWrite-for-Benz-6

Note:Here i you want to make the procedures simplify,you can choose ME9.7 ECU Renew Cable.No need to disassemble the ECU and soldering cable connectors.It can reduce operational risk of ECU damaged.

KTAG-to-ReadWrite-for-Benz-7)

Step3:

Open KTAG software.

Then I Choose “Mercedes” “S (W221)” and “S350 3500 V6…BOSCH ME9.7”.

KTAG-to-ReadWrite-for-Benz-8)

Choose plug-in “P102”.

KTAG-to-ReadWrite-for-Benz-9)

I clicked “Read” and wait for a while.

Then Save the bin file.

Finally, i successfully used K-TAG Auto ECU Programmer to read Mercedes W221 ME9.7 ECU !

KTAG-to-ReadWrite-for-Benz-10)
KTAG-to-ReadWrite-for-Benz-11)

Then write procedures is same as reading procedures.And before you write a new ECU data file back into ECU,you would better make a backup.