Login Register

Vida CEM swapping

A mid-size luxury crossover SUV, the Volvo XC90 made its debut in 2002 at the Detroit Motor Show. Recognized for its safety, practicality, and comfort, the XC90 is a popular vehicle around the world. The XC90 proved to be very popular, and very good for Volvo's sales numbers, since its introduction in model year 2003 (North America). P2 platform.
Post Reply
vtl
Posts: 4727
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 606 times

Re: Vida CEM swapping

Post by vtl »

Yes, go to Saleae web site and download the sw for your OS.

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

vtl wrote: 24 Apr 2021, 09:35 Yes, go to Saleae web site and download the sw for your OS.
Got it.

I did find a Cross Platform, Open Source, Signal analysis software suite that support a lot of hardware, including the $10.00 Logic Analyzers. The sigrok project.

Last edited by RickHaleParker on 24 Apr 2021, 13:23, edited 1 time in total.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

MaxDenisov
Posts: 36
Joined: 6 March 2021
Year and Model: XC90 2010
Location: Moscow
Has thanked: 2 times

Post by MaxDenisov »

@vtl I am working on new pc/hardware design. Please let me know if you are interesting in spare pcb/device
Attachments
Pin for CEM.jpg

3r1k
Posts: 11
Joined: 5 November 2020
Year and Model: S40
Location: Sweden
Has thanked: 1 time

Post by 3r1k »

T5Luke wrote: 24 Apr 2021, 08:08 Anybody has Dice, CODE and likes to try?
Only tested 1 time on bench and it worked. CEM allows only 100 write cycles so i dont like to do endless tests.

Image

There are some small things i need to fix, if tests work 3 times i will upload here for all...
I would be very happy to try this out on my junk-bench CEM which i already know the pin for (used a parallel BCM interface to get it). But this comes from a MY04 P1 car = old style CEM (CEM-B??), does your program still works for this old Motorola processor based CEM?

Also, why are you limited to 100 write cycles? Is it the recommended hardware write limit of the MCU or something else? :?

T5Luke
Posts: 142
Joined: 11 November 2020
Year and Model: S60 T5 2001
Location: DE
Has thanked: 11 times
Been thanked: 130 times

Post by T5Luke »

This programm is for the P2 CEM from 2005 and newer, when we can crack the earlier one by teensy i can adopt to this also.
In datasheet is written about 100 write cycles, the early one can do 10 000 without a prob.

In total i have rewritten my bench CEM now 6 times by this prog, i can say it seems to work, but it would be nice if we find some more testers...

3r1k
Posts: 11
Joined: 5 November 2020
Year and Model: S40
Location: Sweden
Has thanked: 1 time

Post by 3r1k »

Ah, understandable. Hook me up in the future if you need testing for this older platform.

I also have a bunch of P1 CEM I am more than interested into getting hacked over the canbus, rather than solder manually.

Fun fact, here in this Volvo country it is cheaper to buy a whole CEM at the junkjard than buying separate relays/fuses placed in the CEM. Cost about 5 EUR at the local junkjard. If shipping wasn't that expensive I would have been more than happy to supply you guys with some...

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

If the pincode bytes are 8 bit BCD ( Range 00 - 99 ) why is the pincode BCD expressed as a hexadecimal?

found PIN: 0x25 0x43 0x27 0x93 0x52 0x93

0x25 0x43 0x27 0x93 0x52 0x93 = BCD 37 67 39 147 82 147.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

vtl
Posts: 4727
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 606 times

Post by vtl »

MaxDenisov wrote: 24 Apr 2021, 12:57 @vtl I am working on new pc/hardware design. Please let me know if you are interesting in spare pcb/device
It also need a driver for K-line, for earlier P2s. I used mc33290d connected to serial port 3.

vtl
Posts: 4727
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 606 times

Post by vtl »

3r1k wrote: 24 Apr 2021, 17:06 I also have a bunch of P1 CEM I am more than interested into getting hacked over the canbus, rather than solder manually.
P1 works. The current github code was improved inadvertently in a way that broke it, but it turned out it can be cracked with P2 path, only shuffleOrder needs to be taken from P1.

I've got a P1 CEM, but have no free minute to hook it up.

MaxDenisov
Posts: 36
Joined: 6 March 2021
Year and Model: XC90 2010
Location: Moscow
Has thanked: 2 times

Post by MaxDenisov »

vtl wrote: 25 Apr 2021, 08:10
MaxDenisov wrote: 24 Apr 2021, 12:57 @vtl I am working on new pc/hardware design. Please let me know if you are interesting in spare pcb/device
It also need a driver for K-line, for earlier P2s. I used mc33290d connected to serial port 3.
two in one or just separate device/adapter?

Post Reply
  • Similar Topics
    Replies
    Views
    Last post