Login Register

Vida CEM swapping

A mid-size luxury crossover SUV, the Volvo XC90 made its debut in 2002 at the Detroit Motor Show. Recognized for its safety, practicality, and comfort, the XC90 is a popular vehicle around the world. The XC90 proved to be very popular, and very good for Volvo's sales numbers, since its introduction in model year 2003 (North America). P2 platform.
Post Reply
User avatar
minormatt
Posts: 2
Joined: 9 October 2023
Year and Model: V70 04 T5 & 05 D5
Location: UK
Has thanked: 1 time
Been thanked: 1 time

Re: Vida CEM swapping

Post by minormatt »

Thanks

I thought that was likely still the case.

I guess I need to get a soldering iron out and hope I don't brick the brick.... :shock:

But - thanks very much to everyone here who has been putting in so much effort! Its great to see. If anyone needs to know anything about Transits then I can help :lol: I will put a donation towards keeping the site running for the effort you guys put in and the info I have pulled from it in the past
Top
User avatar
TonyToronto
Posts: 13
Joined: 15 October 2023
Year and Model: 2007 XC90
Location: Toronto, Canada
Has thanked: 5 times
Been thanked: 1 time

Post by TonyToronto »

vtl wrote: ↑25 Sep 2020, 08:19 Image

As a Linux kernel engineer I was overthinking the problem. Not all software problems require a rocket science approach. Sigh...

With a kind help from Eastern Europe I've got a CEM dump where ID was found set to zero. Means, Renesas is unprotected. Also everyone there was surprised that I needed an ID to read the flash. Apparently Volvo does not protect M32C and you can freely read it with any BDM programmer that supports that chip. I have a cheap second-hand E8 from ebay and it works fine.

Once you solder the programmer to CEM and have the bin file read - pass it through CEM PIN decode sw, the one I could not understand, and here's your PIN! Which is purely a Volvo-thing applicable to CAN, not Renesas.

The link for pin decoding sw: https://www.digital-kaos.co.uk/forums/s ... -2005-2009

Because Renesas speaks through serial port in boot-mode, all you need is a FTDI adapter/chip to translate between serial and USB, and software like this: https://github.com/fightling/flash-renesas Not necessary to burn a fortune on $xxx BDM programmers like Smoke, or Orange or E8a.
Hi, does anyone have or know where to get the pin decoder software mentioned above? I can't find it at Digital-Kaos. Thank You.
Last edited by TonyToronto on 15 Oct 2023, 21:00, edited 1 time in total.
Top
User avatar
TonyToronto
Posts: 13
Joined: 15 October 2023
Year and Model: 2007 XC90
Location: Toronto, Canada
Has thanked: 5 times
Been thanked: 1 time

Post by TonyToronto »

Hi everyone, after reading about 250 pages on this topic, I think I'm ready to give Teensy project a try. As far can transceivers to order, which are better Texas Instruments or Bosch ones?
Thank You
Top
vtl
Posts: 4726
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 606 times

Post by vtl »

TonyToronto wrote: ↑15 Oct 2023, 20:59 Hi everyone, after reading about 250 pages on this topic, I think I'm ready to give Teensy project a try. As far can transceivers to order, which are better Texas Instruments or Bosch ones?
Thank You
Any.
Top
vtl
Posts: 4726
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 606 times

Post by vtl »

TonyToronto wrote: ↑15 Oct 2023, 20:55 Hi, does anyone have or know where to get the pin decoder software mentioned above? I can't find it at Digital-Kaos. Thank You.
It loads the CEM flash dump and reads the PIN at fixed offset. You can find the pin yourself if you have a dump.
Top
Matuuu
Posts: 1
Joined: 11 October 2023
Year and Model: V70 2005
Location: Estonia
Has thanked: 1 time

Post by Matuuu »

Where to buy Teensy in Europe?
Cant find correct can transceiver also.
Is it need to be like board or enought to have only chip?
Thanks.
Attachments
d0008a.png
d0008a.png (86.32 KiB) Viewed 355 times
Top
vtl
Posts: 4726
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 606 times

Post by vtl »

Matuuu wrote: ↑16 Oct 2023, 05:38 Where to buy Teensy in Europe?
Cant find correct can transceiver also.
Is it need to be like board or enought to have only chip?
Thanks.
amazon.de?

Chip is fine, if you can solder a PCB.
schematic.png
schematic.png (95.47 KiB) Viewed 353 times
Top
User avatar
TonyToronto
Posts: 13
Joined: 15 October 2023
Year and Model: 2007 XC90
Location: Toronto, Canada
Has thanked: 5 times
Been thanked: 1 time

Post by TonyToronto »

vtl wrote: ↑16 Oct 2023, 05:14
TonyToronto wrote: ↑15 Oct 2023, 20:55 Hi, does anyone have or know where to get the pin decoder software mentioned above? I can't find it at Digital-Kaos. Thank You.
It loads the CEM flash dump and reads the PIN at fixed offset. You can find the pin yourself if you have a dump.
Hi, I have read the flash with programming tool, but having hard time finding the PIN in it. Any idea where i can find the tool?
Thank You
Top
vtl
Posts: 4726
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 606 times

Post by vtl »

TonyToronto wrote: ↑16 Oct 2023, 07:29 Hi, I have read the flash with programming tool, but having hard time finding the PIN in it. Any idea where i can find the tool?
Thank You
No idea. What CEM is it?
Top
User avatar
TonyToronto
Posts: 13
Joined: 15 October 2023
Year and Model: 2007 XC90
Location: Toronto, Canada
Has thanked: 5 times
Been thanked: 1 time

Post by TonyToronto »

CEM-H, from a 07 XC90.
Top
Post Reply
  • Similar Topics
    Replies
    Views
    Last post

Return to “XC90 1st gen 2003-2014”