Vida CEM swapping

[scaro]

Ok some of you already know this but want to contribute with something to begin with.

This is for P1 V50/S40 06-07 think other MY is the same...
Maybee some +12V isnt needed on CEM. Havnt tested with can termination yet. On my bench harness for old P2 its needed.
Think this will work dont blame me if something burns up

A=COCKPIT1 (BLUE)
B=COCKPIT2 (BLUE)
C=FLOOR1 (ORANGE)
D=ROOF1 (BLACK)
E=FRONT1 (GREEN)
F=FLOOR2 (ORANGE)
G=FRONT2 (GREEN)
H=ROOF2 (GREY)

CEM:
FRONT-1:20 -> +12v 30+
FRONT-1:21 -> +12v 30+
FRONT-1:22 -> +12v 30+
FRONT-1:23 -> +12v 30+
COCKPIT-1:28 -> GND
COCKPIT-1:14 -> GND
COCKPIT-1:16 -> +12v X+ Out Dont exist on my connector

SCU:
COCKPIT-1:17 -> +12v 15+ SCU B:3
COCKPIT-1:30 -> +12v X+ SCU B:1
COCKPIT-1:42 -> +12v 50+ SCU B:2
COCKPIT-1:15 -> +12v S+ SCU B:5
COCKPIT-2:13 -> Keylock SCU B:8

SCL:
COCKPIT-2:10 -> +12V Pin2
GND -> GND Pin3

RRX:
GND -> GND Pin3
COCKPIT-1:41 -> Pin1

OBD:
COCKPIT-2:11 -> CAN-HS H OBD 6
COCKPIT-2:12 -> CAN-HS L OBD 14
COCKPIT-2:15 -> CAN-LS H OBD 3
COCKPIT-2:16 -> CAN-LS L OBD 11
+12V 30+ -> OBD 16
GND -> OBD 4&5

LIN:
COCKPIT-2:17 -> LIN SCU A:2 / SCL Pin4
COCKPIT-1:35 -> LIN RRX Pin5

Lowspeed CAN:
FRONT-2:16 -> CAN-LS H "Out" CPM A:4 (120 ohm needed?) Dont exist on my connector
FRONT-2:32 -> CAN-LS L "Out" CPM A:5 ----------------- Dont exist on my connector
COCKPIT-2:8 -> CAN-LS H "Out" CCM 11 -> CCM 10 -> ICM A:7 -> ICM A: 9 -> DIM 10 (120 ohm needed when no DIM)
COCKPIT-2:9 -> CAN-LS L "Out" CCM 9 -> CCM 8 -> ICM A:8 -> ICM A:10 -> DIM 9 ------------------------------------
COCKPIT-2:24 -> CAN-LS H "Out" PHM A:12 (120 ohm needed?) Dont exist on my connector
COCKPIT-2:25 -> CAN-LS L "Out" PHM A:11 ----------------- Dont exist on my connector
FLOOR-2:30 -> CAN-LS H "Out" (120 ohm needed)
FLOOR-2:15 -> CAN-LS L "Out" -----------------

Highspeed CAN:
FRONT-2:15 -> CAN-HS H "Out" (120 ohm needed)
FRONT-2:14 -> CAN-HS L "Out" -----------------
FLOOR-2:16 -> CAN-HS H "Out" (120 ohm needed)
FLOOR-2:14 -> CAN-HS L "Out" -----------------

[solitaire]

15 Volt from power supply, different voltage - different result

Platform: P2
PIN bytes to measure: 4
Number of samples: 30
Number of loops: 1000

Candidate PIN 0x47 0x12 0x68 0x69 -- -- : brute forcing bytes 4 to 5 (2 bytes), will take up to 6 seconds
Progress: 0%..5%..10%..15%..20%..25%..30%..35%..40%..45%..50%..55%..60%..65%..70%..75%..80%..85%..90%..95%..done

found PIN: 0x69 0x12 0x25 0x47 0x98 0x68
PIN is cracked in 783.55 seconds
Validating PIN
PIN verified.
done

[vtl]

It was said multiple times that a good power source is mandatory. I flashed my bench CEM with a few dumps that people claimed uncrackable and got the pin in the very first pass.

[scaro]

With termination the wiring works good on bench using Vida/Dice.
Wiring isnt finished will add more stuff to it DIM, ECU, DEM... as i have on the P2 one.
Have Teensy4 at home. Just waiting for can transceivers ordered MAX3051 hope they will work?
The other ones wasnt easy to get. Was out of stock and long waiting time.

[solitaire]

.... Just waiting for can transceivers ordered MAX3051 hope they will work?
...

They will

[vtl]

They will

Will you charge for your cracker firmware update?

[solitaire]

No
I’m not sell now have just one for my self, all is here in forum for free in my post

viewtopic.php?p=569763#p569763

[scaro]

.... Just waiting for can transceivers ordered MAX3051 hope they will work?
...

They will

Thanks, have read thru whole thread but must have missed that

[RickHaleParker]

Yes, i mean D connector. I would give it a try at P1.

Did you ever get around to trying the hard wire stay alive on the P1?

[RickHaleParker]

I used MC33290D

Anybody have a source for the MC33290D that does not have a 1000 pcs min order and does not take 8 weeks for delivery.
A order from Florida never arrived.

Also looking for a source for the TJA1048T SO14 .