Vida CEM swapping

[matija0610]

I didn't, I will take it next Saturday and examine it, friend, the owner of the car diagnosed it himself, I gave him a Dice..
I asked a question, just to see if anyone had a similar problem during the reconfiguration, hope that's not the cause, but maybe I'm the first.

[V70user]

I have read a PIN from flash memory of CEM-B , and save it as a cem.bin file.
Open a T5Luke's CEMtool , upload cem.bin file to this program , PIN code shows in the textbox , i Choose one of the
car config item and try to send it to CEM, but Dice connects and in a moment I get an answer: Wrong Code...
PIN was read from unsoldered flash memory so it is correct.
I tried changing the order of the numbers in the PIN, but to no avail. Still Wrong Code
Any idea?
Is there a possibillity that CEMTool doesn't work correctly?

[vtl]

What's CEM part number, what did you read, and in which byte order did you send the pin?

[V70user]

What's CEM part number, what did you read, and in which byte order did you send the pin?

I read whole flash memory. At offset 0x00006000 is PIN : 90 27 18 44 31 24
I swaped all file because VIN wasn't in correct order
Then I get PIN 27 90 44 18 24 31
I tried diffrent orders as mentioned here: 315024, 521402, 103254 and some others - still Wrong Code

CEM p/N i cant check now, but the end was: 484
Thanks for helping

[xanthefin]

I have read a PIN from flash memory of CEM-B , and save it as a cem.bin file.
Open a T5Luke's CEMtool , upload cem.bin file to this program , PIN code shows in the textbox , i Choose one of the
car config item and try to send it to CEM, but Dice connects and in a moment I get an answer: Wrong Code...
PIN was read from unsoldered flash memory so it is correct.
I tried changing the order of the numbers in the PIN, but to no avail. Still Wrong Code
Any idea?
Is there a possibillity that CEMTool doesn't work correctly?

Out of one small detail in my brain i just ask curiosly.. what reader you used to read flash?
Edit. Anyway. If someone reading with original tl866 then throw the CEM flash dump out of window its 16 bit and you lost data. It doesn't support 8 bit reading.

[vtl]

What's CEM part number, what did you read, and in which byte order did you send the pin?

I read whole flash memory. At offset 0x00006000 is PIN : 90 27 18 44 31 24
I swaped all file because VIN wasn't in correct order
Then I get PIN 27 90 44 18 24 31
I tried diffrent orders as mentioned here: 315024, 521402, 103254 and some others - still Wrong Code

CEM p/N i cant check now, but the end was: 484
Thanks for helping

VIN wasn't in correct order for your x86 computer, but is in correct order for Motorola MCU in CEM. You don't need to swap the PIN bytes. Try again the 90 27 18 44 31 24 pin, possibly with different shuffle order.

[V70user]

Try again the 90 27 18 44 31 24 pin, possibly with different shuffle order.

Thank You. I'll try. I'll share the results when I will come back home
I hope not to go thru all 720 combinations...

[oscilloscope]

Hi, i read Delphi CEM with r5f64524 XC60 2013 D-flash and p-flash with i/o terminal, but data in D-flash is encrypted.

is there a way to decrypt it ? anyone can help maybe

thanks

Maybe xprog (genuine ) or smok might be able to decrypt the file for you ? But it needs to be able to read it. It might be worth heading over too the xprog site and see if it covers the IC for that CEM , it more then likely does.

[RickHaleParker]

Did he have the air intake components loose? ... It sounds like unmetered air.

he changed and checked a bunch of components, the engine still runs erratically, sometimes it wants to turn off, sometimes it pulls, sometimes it doesn't, when it's cold it shakes , chatters at certain rpm.. friend tells me that it all started in the period, when we were changing the configuration in the CEM.

[Benbb]

I know this V8s from 2006 and newer respond to P3 protocol on HS bus. Can bus logging shows only short IDs instead of extended CAN IDs in P2. When you look to the screenshots on page 45, the V8 and the 3.2 V6 are listed together as seperate P28. But 3.2 V6 here is not to find. From my testing i know the latest P2 based XC90 2015 D5, 2.5T engines run on P2 protocol. But it is hard to get an complete overview.

I just got the CEM pin on my 2007 V8 XC90 using the UDS method, thanks a lot!

Now wondering if P3tools will work on this car as well since this is kinda P3? Or would I be stuck to vdash for config changes?