Login Register

Vida CEM swapping

A mid-size luxury crossover SUV, the Volvo XC90 made its debut in 2002 at the Detroit Motor Show. Recognized for its safety, practicality, and comfort, the XC90 is a popular vehicle around the world. The XC90 proved to be very popular, and very good for Volvo's sales numbers, since its introduction in model year 2003 (North America). P2 platform.
Post Reply
User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Re: Vida CEM swapping

Post by RickHaleParker »

RickHaleParker wrote: 03 Jan 2022, 21:50 opps!

By default CEM_PN_AUTODETECT is turned off. Turn this back on by removing //. Unless you are cracking a CEM-L on the bench or a car with a CEM-L and a defective DIM.
Corrected in the VTL:Master. CEM_PN_AUTODETECT is now turned on by default.
You turn it off by adding // to the line, if you are cracking a CEM-L on the bench or a CEM-L that has a defective DIM.

Down load the VTL:Master often. This is a work in progress not a finished production.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

ZRimaZ wrote: 05 Jan 2022, 08:36 Any ideas?
What is the voltage at pin # 8 ( Rs ) of the transceivers?

A resistor on that line is for slope control mode. A slow slope could be causing communication errors. You might consider grounding Rs to put it in High Speed mode (< 1 V) . Jumpers across the resistors would be a quick test of this theory.
2022-01-05.png
Attachments
VP230_Datasheet.pdf
(444.75 KiB) Downloaded 128 times
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

ZRimaZ
Posts: 77
Joined: 8 March 2009
Year and Model: XC60 MY2016 3.0 T6
Location: Lithuania, Kaunas
Has thanked: 23 times
Been thanked: 13 times

Post by ZRimaZ »

vtl wrote: 05 Jan 2022, 09:13
Where do you connect CAN_L_PIN to? RX of the transceiver or directly to CAN-L?
As it is in schematics on repo - via tranceiver
Have a nice day,

ZRimaZ

Sh4rp
Posts: 28
Joined: 3 January 2022
Year and Model: See below.
Location: Braunschweig
Has thanked: 2 times
Been thanked: 1 time

Post by Sh4rp »

Today I managed to do a few test runs. I already tried yesterday night but the rats nest I had didn`t get me anywhere so I tried to rewire everything today and tried again. Sadly it couldn`t crack the Pin. I`m using external 12V Powersupply with Stepdown to 5V, Teensy 4.1 and two SN65HVD230 from a german reseller from which I removed the 120 Ohm resistors since I had 60 Ohms across my OBD Pins.

I`m trying to crack a 2004 P1 V50.

Attached you can see three logs and my breadboard. Everything is soldered except the power supply which runs over the breadboard. Right now I dont know which route to take. Try an older code? Improve wiring? Buy a 5V transceiver?

So far 28 turned up most of the times as first value during my tests but it seems very random.

Best regards!
Attachments
01_Key Out.txt
(122 KiB) Downloaded 72 times
02_Key Pos 0.txt
(121.59 KiB) Downloaded 76 times
03_Key Pos 1.txt
(122 KiB) Downloaded 67 times
Wiring_1.jpg
Wiring_1.jpg (153.74 KiB) Viewed 433 times
Wiring_2.jpg
Wiring_2.jpg (90 KiB) Viewed 433 times
2004 - V50 T5 AWD M66 - Flint Grey
1996 - 850 T-5R M56 - Dark Olive Pearl

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

Sh4rp wrote: 08 Jan 2022, 07:12 I`m using external 12V Powersupply with Stepdown to 5V, Teensy 4.1 and two SN65HVD230
Teensy 4.0/4.1 ~ 100 mA max.
SN65HVD230 17 mA max.
~ 100 mA + 2 X 17 mA = ~ 134 mA max.

USB 2.0 Maximum current 500 mA
USB 3.0 / USB3.1 Maximum current 900 mA.

Conclusion: You don't need the external power supply. V-usb can supply way more power then you need.

You do have some solderless connections which can be a problem. Powering everything off V-usb will eliminate all your solderless connections. The Teensy 3.3V out is good to 250 mA way more then the 34 mA you need for the two SN65HVD230. Use the Teensy Vin as a Vout for 5V CAN transceivers.
Last edited by RickHaleParker on 08 Jan 2022, 07:58, edited 2 times in total.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

Sh4rp
Posts: 28
Joined: 3 January 2022
Year and Model: See below.
Location: Braunschweig
Has thanked: 2 times
Been thanked: 1 time

Post by Sh4rp »

Okay so by getting rid of the power supply and the step down, I also eliminate some noise I guess? I just read so many times about using an additional power supply that I thought it is kind of mandatory.

Going to give it a try and report back.
2004 - V50 T5 AWD M66 - Flint Grey
1996 - 850 T-5R M56 - Dark Olive Pearl

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

Sh4rp wrote: 08 Jan 2022, 07:53 I just read so many times about using an additional power supply that I thought it is kind of mandatory.
This is development progress. We don't get everything optimized the first time.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

Sh4rp
Posts: 28
Joined: 3 January 2022
Year and Model: See below.
Location: Braunschweig
Has thanked: 2 times
Been thanked: 1 time

Post by Sh4rp »

Didn't really bring me further though. The latency is still all over there place and I get different number sets..

I attached the Logs again.

Another thing that was a bit "funky" was, that the Teensy seemed to mess a bit with my ECU`s. It appeared like it didn't correctly reset them when I aborted the bruteforce and plugged it back in to give it another shot.

On my first tryouts it basically shut off all lights and gauges when going into programming mode and you could hear a relay clicking very noticeably. Now all sort of lights were blinking, the radio would stay on and so on and you could hear a very slight clicking in the doors that was going on for the whole time of running the software. I even had to reset the ECU`s once by disconnecting the battery.
Attachments
1_KeyPos0.rtf
(122.71 KiB) Downloaded 67 times
2_KeyPos0.rtf
(122.65 KiB) Downloaded 63 times
2004 - V50 T5 AWD M66 - Flint Grey
1996 - 850 T-5R M56 - Dark Olive Pearl

vtl
Posts: 4724
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 604 times

Post by vtl »

Sh4rp wrote: 08 Jan 2022, 11:57 Another thing that was a bit "funky" was, that the Teensy seemed to mess a bit with my ECU`s. It appeared like it didn't correctly reset them when I aborted the bruteforce and plugged it back in to give it another shot.

On my first tryouts it basically shut off all lights and gauges when going into programming mode and you could hear a relay clicking very noticeably. Now all sort of lights were blinking, the radio would stay on and so on and you could hear a very slight clicking in the doors that was going on for the whole time of running the software. I even had to reset the ECU`s once by disconnecting the battery.
Either wiring is not right, or CAN-bus speed is not right or a part of CAN network didn't go to programming mode. You have to investigate. The car should be dead silent when the cracking is progressing. Clicking solenoids is the very first sign something funky is happening on the CAN bus.

User avatar
RickHaleParker
Posts: 7129
Joined: 25 May 2015
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 958 times

Post by RickHaleParker »

vtl wrote: 08 Jan 2022, 15:53 Either wiring is not right, or CAN-bus speed is not right or a part of CAN network didn't go to programming mode.
Could CEM_PN_AUTODETECT being turned off on a P1 have that effect?

Sh4rp read the top of this page for more on this.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

Post Reply
  • Similar Topics
    Replies
    Views
    Last post