Login Register

Vida CEM swapping

A mid-size luxury crossover SUV, the Volvo XC90 made its debut in 2002 at the Detroit Motor Show. Recognized for its safety, practicality, and comfort, the XC90 is a popular vehicle around the world. The XC90 proved to be very popular, and very good for Volvo's sales numbers, since its introduction in model year 2003 (North America). P2 platform.
Post Reply
vtl
Posts: 4723
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 603 times

Re: Vida CEM swapping

Post by vtl »

RickHaleParker wrote: 26 Dec 2021, 15:42 I am interpreting that as SardineCAN includes the translations. How else could Olaf be sure it would work with "various diagnostic programs". The whole idea of J2534 is that the client side developer does not need to know the low level protocols.
No, exactly in opposite: with higher-level protocol like OBD you don't need to know what car is it, every message and ECU ID is standard. In pass-through mode you need to know what car is it, down to every software version in every block. And talk in that specific protocol.

For example, when I've had DEM software updated in my XC70, my "mini-DiCE" lost knowledge of how to talk to DEM, because the internal format has changed. Or maybe it was CCM, I don't remember.

VIDA knows everything: every combination is modules topology, and their sw versions, and IDs, and what variable is accessible at which address - all is programmed in VIDA's SQL database.

When VIDA can't deduce car's full topology from its VIN - it can't work with that car.

In OBD world you write your software once and it would work with future cars that weren't even thought of yet.

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

vtl wrote: 26 Dec 2021, 15:55 No, exactly in opposite: with higher-level protocol like OBD you don't need to know what car is it, every message and ECU ID is standard. In pass-through mode you need to know what car is it, down to every software version in every block. And talk in that specific protocol.
What am I misinterpreting in the following?

( source )
"J2534 is a concept that enables flash programming of an emission related ECU regardless of the communication protocol that is used by the ECU. The purpose is that only one tool (hardware device), often referred to as the pass-thru device, should be needed for all kind of ECUs. The connection between the J2534 device and the ECU is a SAE J1962 connector. The J2534 hardware device is to be connected to a standard PC which holds the Application Program Interface (API) from the vehicle manufacturer (Figure 1). The connection between the PC and the J2534 hardware device is up to the manufacturer of the tool, but USB is probably the most common. A J2534 API DLL is provided from the hardware tool developer which handles the communication to the PC. The J2534 document withholds requirements for the hardware and software of a J2534 tool. The communication protocols supported are; ISO9141, ISO14230 (KWP2000), J1850, CAN (ISO11898), ISO15765 and SAE J2610. In 2005 J1939 was also included.

The J2534 hardware works like a gateway between the vehicle ECU and the PC. This pass-thru device translates messages sent from the PC into messages of the protocol being used in the vehicle ECU.

Image "
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

vtl
Posts: 4723
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 603 times

Post by vtl »

Yeah, this article is written for idiots, so only idiot can understand it. Very vague and abstract.

Look in the available J2534 sources - they all send and receive raw, car/lower level protocol specific messages. It is duty of software to know what these bytes mean.

The interface between the software and scanner is standardized, though. For example, VIDA works fine with xHorse (only one CAN bus is available in hw though).

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

vtl wrote: 26 Dec 2021, 16:32 Yeah, this article is written for idiots, so only idiot can understand it. Very vague and abstract.
:lol: I always said dumbing down so that anybody can understand it is futile. Because there is nothing left to understand.
Look in the available J2534 sources - they all send and receive raw, car/lower level protocol specific messages. It is duty of software to know what these bytes mean.
J2534 is not translating the messages. It is routing the message to the correct ECU communication protocol ?
Analogous to a telephone switch board.
The interface between the software and scanner is standardized, though. For example, VIDA works fine with xHorse (only one CAN bus is available in hw though).
The full J2534 standard maybe standardized but I am seeing indications that the lower cost J2534 hardware manufactures are cutting cost by not including all the low level protocols. That is why a cheap J2534 interfaces works with specific vehicle manufactures rather the all vehicle manufactures.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

urosm
Posts: 29
Joined: 24 May 2012
Year and Model: 2015 Volvo XC70 D5
Location: Montenegro
Has thanked: 10 times

Post by urosm »

RickHaleParker wrote: 26 Dec 2021, 15:14
urosm wrote: 26 Dec 2021, 14:08 I tried 3 times, but cracker won't or can't crack it.
You have IO Terminal or access to IO Terminal. Can you extract the .bin and/or PIN?
I have IO Terminal and can read flash .bin, but I need a PIN first.
And if I have a flash read on the bench (for example) I can extract PIN from it.
Volvo 744 TDIC SOLD, 1989. ; 1997. - 2000.
Volvo 855 GLT + LPG Estate SOLD, 1996. ; 1998. - 2020.
Volvo V70 D5 SOLD, 2004. ; 2013. - 2021.
Volvo XC70 D5 SOLD, 2007. ; 2017. - 2021.
Nissan Pathfinder DRIVING, 2007. ; 2019. -
Volvo XC70 D5 DRIVING, 2015. ; 2021. -
Volvo XC90 D5 DRIVING, 2008. ; 2022. -

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

urosm wrote: 29 Dec 2021, 01:15 I have IO Terminal and can read flash .bin, but I need a PIN first.
And if I have a flash read on the bench (for example) I can extract PIN from it.

As VTL said there is something really off. Download the latest Teensy code and run it as is.
Double check all the connections on your Teensy.

Post some pictures of your Teensy build. Sometimes we can spot problems with the hardware build.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

urosm
Posts: 29
Joined: 24 May 2012
Year and Model: 2015 Volvo XC70 D5
Location: Montenegro
Has thanked: 10 times

Post by urosm »

I posted pictures of my Teensy build earlier here on the forum.
The connections in the Teensy should be fine, as I read several P2 models without any problems.

I'll try again on the same car, with a new code.

Thanks!
Volvo 744 TDIC SOLD, 1989. ; 1997. - 2000.
Volvo 855 GLT + LPG Estate SOLD, 1996. ; 1998. - 2020.
Volvo V70 D5 SOLD, 2004. ; 2013. - 2021.
Volvo XC70 D5 SOLD, 2007. ; 2017. - 2021.
Nissan Pathfinder DRIVING, 2007. ; 2019. -
Volvo XC70 D5 DRIVING, 2015. ; 2021. -
Volvo XC90 D5 DRIVING, 2008. ; 2022. -

mariom598
Posts: 4
Joined: 7 June 2020
Year and Model: 2015 XC60
Location: Ancona
Has thanked: 3 times

Post by mariom598 »

Question, did someone manage to change the car's configuration in the CEM module(P3 platform)?Thank you!

ricked
Posts: 38
Joined: 24 May 2021
Year and Model: xc90
Location: lowlands
Has thanked: 6 times
Been thanked: 2 times

Post by ricked »

urosm wrote: 29 Dec 2021, 01:15
RickHaleParker wrote: 26 Dec 2021, 15:14
urosm wrote: 26 Dec 2021, 14:08 I tried 3 times, but cracker won't or can't crack it.
You have IO Terminal or access to IO Terminal. Can you extract the .bin and/or PIN?
I have IO Terminal and can read flash .bin, but I need a PIN first.
And if I have a flash read on the bench (for example) I can extract PIN from it.
trust me, reading flash first to get the pin is much faster, if i use the pin cracker the first 20 minutes goes fast then the script slows down to 70 plus minutes and does not find the pin, this is done on a win 10 64x, 8 core 64gb pc

Canadian Moose
Posts: 82
Joined: 5 September 2016
Year and Model: 2002 V70
Location: Canada
Been thanked: 1 time

Post by Canadian Moose »

Tried to crack the pin twice today unsuccessfully on 2007 XC70. CEM p/n: 30786890. Got the first 2 digits the same both times 79, 92 but on third digit got 2 different numbers. Will give it another go tomorrow.

Post Reply
  • Similar Topics
    Replies
    Views
    Last post