e9x bench setup

[Hotter]

If the CAS is from Europe will also need a ELV module/emulator

Hi, I have bought UK CAS/key/button/slot/wire, does UK CAS need ELV? Do you know its part code?
Is there a way around it? Converting CAS to USA somehow?

 

[ccfj1]

It will depend on the version of FW that the CAS is running.

But probably yes.

You should be able to flash the CAS to a non elv version (I could never get that working BTW, i ended up using a chip dump to flash it (from an r270) to get it working).

I have a spare working elv if you want it somewhere, or you could get one of the cheap elv emulators from ebay.

I think i may have a spare CAS with key that runs the non elv version (I could change the vin for you as well).

Or if you have a r270 i could send you an working non elv version of the fw in flash form.

 

[Hotter]

It will depend on the version of FW that the CAS is running.

But probably yes.

You should be able to flash the CAS to a non elv version (I could never get that working BTW, i ended up using a chip dump to flash it (from an r270) to get it working).

I have a spare working elv if you want it somewhere, or you could get one of the cheap elv emulators from ebay.

I think i may have a spare CAS with key that runs the non elv version (I could change the vin for you as well).

Or if you have a r270 i could send you an working non elv version of the fw in flash form.

I have xprog5.55 only. Seems to be too much of a haste for just a hobby project. But I would like to try to update with WinKFP.

I found such post where person says that CAS needs to be updated to these versions:
E89: 9226238 -> update to 9287535 and then 9287534

I cant find such versions in my WinKFP... I guess it contains only newest and oldest versions...

P.S.
Found 9287535 and 9287534 in SPDATEN v50.2 though cant upgrade to 9287534. Writes that its wrong ECU...

 

[ccfj1]

Which is what used to happen to me, so i gave up.

I bought a cheap r270 and dumped the chip. did this a few times, but then I modded the bench CAS so that I can inject any VIN i want by just hooking the r270 up directly to the cas (I made an interface on the cas for this), this is really handy for checking FSC loading (as I can match the Vin in the cas to the retrofitted cic).

Dont bother updating the CAS, newer versions will encrypt the key data, you may need this open if you are having a bench setup.

 

[Hotter]

Which is what used to happen to me, so i gave up.

I bought a cheap r270 and dumped the chip. did this a few times, but then I modded the bench CAS so that I can inject any VIN i want by just hooking the r270 up directly to the cas (I made an interface on the cas for this), this is really handy for checking FSC loading (as I can match the Vin in the cas to the retrofitted cic).

Dont bother updating the CAS, newer versions will encrypt the key data, you may need this open if you are having a bench setup.

Its possible to dump CAS chip with Xprog5.55 also. But if I dump it what do I need to change in dump to remove ELV?

 

[ccfj1]

Not sure about that one....

You would need the dump of a non-elc flash.

I might have one somewhere. found it.

Let me have the VIn that you would like I'll do that for you and post up the files.

 

[ccfj1]

Its possible to dump CAS chip with Xprog5.55 also. But if I dump it what do I need to change in dump to remove ELV?

It does not work that way, you would need to replace the dump with a firmware that does work.

the r270 will give you 2x dumps, 1x flash (the firmware) and 1x eeprom (this is the coding).

so what I did was use a non evl flash to upgrade the CAS to the correct FW and then edit the eeprom to change the vin and the mileage.

 

[Hotter]

It does not work that way, you would need to replace the dump with a firmware that does work.

the r270 will give you 2x dumps, 1x flash (the firmware) and 1x eeprom (this is the coding).

so what I did was use a non evl flash to upgrade the CAS to the correct FW and then edit the eeprom to change the vin and the mileage.

I think xprog might be able to do 2 dumps too. The CAS vin is WBAVF92020VG40588.
I can try to flash it and see, but what about keys information? it exist in EEPROM? So I guess I need to flash just flash memory.
Could you provide firmware dump without ELV?

 

[ccfj1]

I think xprog might be able to do 2 dumps too. The CAS vin is WBAVF92020VG40588.
I can try to flash it and see, but what about keys information? it exist in EEPROM? So I guess I need to flash just flash memory.
Could you provide firmware dump without ELV?

here you go firmware.

no eeprom as, as you say it has the key information.

pull the eeporm anyway and you can edit the file with a hex editor and change both the long and shot vins.

make sure you fix the modded file for crc (use the 2nd app to load and fix your modded eeprom).

 

[ccfj1]

or send me the file and i'll mod and fix it for you

 

[Hotter]

Thanks for your help! I was able to read flash and eeprom with xprog. My CAS has MC9S12XDP512 0L15Y for some reason I am getting 2MB flash dump and your flash is only 512KB.

I might need to do conversion as this post describes?

Simply in hexeditor copy adr. 0-3FFFh from 512kB file and paste it to 8000-BFFFh to 2MB file.
Then:
4000-7FFF to 18000
8000-BFFF to 28000
C000-FFFF to 38000
10000-13FFF to 48000
etc
etc
7C000-7FFFF to 1F8000

 

[Hotter]

I have corrected conversion to 2MB flash file out of your 512KB for xprog, and now it is working! Thanks! It does not require ELV now! So success!

 

[AdrianIonutStoica]

I thought I'd put together whats needed to have a working bench setup for things like flashing, coding and general testing of modules.

First thing you need is the CAS module, you will need to get the CAS, with the corresponding Key and key holder/lead and start button, if you can get the connector plug too, that would be ideal.

The CAS will allow you to power on a module (and keep it powered on). If the CAS is from Europe will also need a ELV module/emulator

You will also need a JBBR (junction box relay electronic), this will act as a gateway to the many modules that are in a car that use different CAN busses and bus speeds. Most cars have a k-can, pt-can and f-can, all of these are available in the JBBR (the f-can is a passthough though), K-CAN is 100bps, PT-CAN and F-CAN are 500bps

So in the JBBR there are 3 CAN buses:-

PT_CAN = for DDE, DSC, EPS, EKP, EDC.
K-Can = for CAS, KOMBI, CIC, CID, ZBE, KLIMA, MRS, FRM, PDC, FZD, COMBOX, TV ...
F-CAN = (SZL) requires connection to the DSC as the DSC is the gateway.

K-Can, is also shown in the TIS as just CAN, where you see CAN it means K-Can.

I also use a KOMBI on my bench so that i know that the system is powered on and at what stage (on, s1, s2 and start).

You will need a OBD port to connect your icom or k-can usb lead (inpa, nscexpert, ISTA-D, Winkftp etc).

Here are the basic pinouts of each module for minimum communication between modules.

CAS X13376 black 41pin plug
Pin 21 <----- +12v Batt Connector Block
Pin 34 <----- +12v Batt Connector Block
Pin 12 <----> GND Connector Block
Pin 25 <----> GND Connector Block
Pin 8 <----> wakeup (ignition)
Pin 26 <----> K-bus low
Pin 35 <----> K-bus high

JBBR x14270 ( the long black plug)
Pin 23 <----- GND Connector Block

JBBR x4010 23pin plug (thats connected to the fusebox base)
Pin 3 <----- +12v Batt (source) Connector Block
Pin 22 <----- +12v Batt (source) Connector Block

JBBR x14271 (the 54pin blue plug)
Pin 10 = K-bus low <----> CAS X13376 pin 26 = K-bus low
Pin 46 = K-bus high <----> CAS X13376 pin 35 = K-bus high
Pin 45 wakeup <----> (ignition) also connected to Pin 1 OBD

ELV
Pin 1 <----> GND Connector Block
Pin 2 <----> CAS EL + pin 23 CAS
Pin 3 <----> CAS EL - pin 24 CAS
Pin 4 <----> CAS PA-bus pin 30 CAS

------------------------------------------------------------------ Above is the basic to power on units -- Below is pins for connecting some modules.

Kombi
Pin 18 <----- GND Connector Block
Pin 9 <----- 12v Connector Block
Pin 7 <----> K-bus low Connector Block
Pin 6 <----> K-bus high Connector Bloc

OBD II
1: Ignition Connector Block (wakeup)
2:
4: Gnd Connector Block
5: Gnd Connector Block
6: K-bus high (pin 17 on blue 54 pin JBBR plug, x14271)
7: I have this connected to pin 30 (PA-BUS) of the CAS (not sure if this is correct???
9: F_TD this goes to the DME)
10:
14: K-bus low (pin 33 on blue 54 pin JBBR plug, x14271)
15:
16: +12v Batt Connector Block

If you want an Ethernet connection to the cic

3: Ethernet connection to cic quadlock pin 37 (black plug)
8: Ethernet connection to cic quadlock pin 29 (black plug)
11: Ethernet connection to cic quadlock pin 38 (black plug)
12: Ethernet connection to cic quadlock pin 31 (black plug)
13: Ethernet connection to cic quadlock pin 32 (black plug)

JBBR x14271 (the 54pin blue plug)
Pin 17 K-bus high <----> OBD Pin 6
Pin 33 K-bus low <----> OBD Pin 14

Pin 1 PT-CAN high <---->
Pin 2 PT-CAN low <---->

Pin 3 F-CAN low <----> this is passthough only
Pin 21 F-CAN high <----> this is passthough only

CIC CID 8 Pin plug
+12v -----> Power to CID Pin 1
GND -----> GND to CID Pin 3
JBBR x14272 Pin 29 <----> K-bus high CID Pin 5
JBBR x14272 Pin 31 <----> K-bus low CID Pin 6

CIC Controller 4 Pin plug
+12v -----> Power to Controller Pin 1
GND -----> GND to Controller Pin 2
JBBR x14272 Pin 11 <----> K-bus high Controller Pin 3
JBBR x14272 Pin 30 <----> K-bus low Controller Pin 4

CIC Base 40pin quadlock Plug
Pin 9 CAN Low
Pin 11 CAN High
Pin 12 GND
Pin 13 Radio ON (CIC)
Pin 15 +12V Power (20Amp)

Pin 29 ETH_A (OBD 8)
Pin 31 ETH_TX+ (OBD 12)
Pin 32 ETH_TX- (OBD 13)
Pin 37 ETH_RX+ (OBD 3)
Pin 38 ETH_RX- (OBD 11)

NOTE: Always check the pins with https://www.newtis.info/tisv2/a/en/ some modules vary depending on year, so always double/tripple check before you plumb in a new unit, these are the pins that worked on my setup....

Always Always try to get the OEM plugs for the modules you buy it makes it so much easier to connect them together.

For Power i use a 33a, 12v power supply and a small self made switch box.

Here is a pic of the loom i have.

View attachment 38400

View attachment 38401

Hello. I also need guidance on how to start an entire NBT system. I have the following: wiring, NBT unit, NBT display, joystick, JBBFE 3, ZGW High. The entire installation worked through fiber optics.

How can I start NBT navigation to test it to see if it works. if it works I want to do a retrofit on a BMW E61. Do you think it's possible to retrofit?

 

[Digital]

Hi, you can use just CAN wakeup device not parts from car. For NBT retrofit I would say, thats possible only with emulator and works like Chinese Android separately from car. If you want fully working device then best solution would be cic+combox.

 

[e90guy]

Would you be able to help me with a bad CAS2 module? I would like to take the bad original CAS 2 module information and place it onto the used CAS2 module. The used CAS2 module does that have a key. but my original does have two working keys. Any help would be appreciated.

Thank you

 

[Digital]

Would you be able to help me with a bad CAS2 module? I would like to take the bad original CAS 2 module information and place it onto the used CAS2 module. The used CAS2 module does that have a key. but my original does have two working keys. Any help would be appreciated.

Thank you

You can simple clone that modules with vvdiprog.

 

[808AWD325xi]

Great work guys. I am surprised that there hasn't been more discussion. Any recommended suppliers for male and female pins in the various sizes commonly used? Has anyone tried a pre-fab harness like this? https://www.auto-chips.com/full-test-platform-cable-for-bmw-cas2-amp-cas3-p1788.html