|
|
|
|
|
|
BMW Garage | BMW Meets | Register | Today's Posts | Search |
|
BMW 3-Series (E90 E92) Forum
>
Coding keyfobs, swap the EEPROM chip?
|
|
06-03-2014, 09:53 AM | #1 |
First Lieutenant
69
Rep 377
Posts |
Coding keyfobs, swap the EEPROM chip?
so, our keyfobs are basically $10 in cheap chinese parts sold at a 3000% markup.
using a used key is notan option since the keys come flashed from the factory specific to your car..... but the only thing that gets flashed is some cheap generic eeprom chip... think its possible to just get a used key for $20, desolder the flashable eeprom chip, find the exact same chip online from china for $5 per 500, then just go to a dealer or friendly indie shop and ask them to flash it to your car? would this work?
__________________
|
06-03-2014, 01:42 PM | #2 | |
Colonel
529
Rep 2,503
Posts |
Quote:
You can buy the hitag chips for very cheap, and yes, they can be easily soldered... It's a simple process. The hard part is programming them. |
|
Appreciate
0
|
06-03-2014, 05:29 PM | #3 |
First Lieutenant
69
Rep 377
Posts |
i wouldn't mind paying a dealer to program, honestly, it if the keyfob itself is cheap as beans (a comfort access keyfob from a wrecked e90 goes for like $50 on ebay, if even that)
__________________
|
Appreciate
0
|
06-03-2014, 09:41 PM | #4 |
Major
136
Rep 1,192
Posts
Drives: 2011 335i MT
Join Date: Mar 2014
Location: Austin, TX
|
There is a company that will do it for you for $50:
http://www.keylessentryremotefob.com...p/bmwflash.htm |
Appreciate
0
|
06-03-2014, 09:59 PM | #5 | |
First Lieutenant
69
Rep 377
Posts |
Quote:
__________________
|
|
Appreciate
0
|
06-04-2014, 10:41 AM | #6 |
Colonel
529
Rep 2,503
Posts |
By the way, just so you know. EEPROM is not a chip. It is a type of memory in the HITAG2 Chip used in these types of fob.
The EEPROM area of the chip can probably be erased by some sort of BDM tool. They are fairly cheap. I wouldn't even take it to a dealer. Good Indy should have the correct tools, they are $500 upwards. |
Appreciate
0
|
06-04-2014, 05:21 PM | #7 | |
First Lieutenant
69
Rep 377
Posts |
Quote:
i called the people that offer that flash service at keylessentryremotekeyfob.com and asked how it works.....they themselves dont actually know, they send it to some guy to do it. i wonder if it needs to be formatted beforehand in some BMW specific way? or if he literally just goes "BALEET ALL" on his little tool and its good to go? ON THE UPSIDE; my nearby dealer will code a keyfob (even a CA keyfob bought online) for only $75, not bad at all
__________________
Last edited by joekitch; 06-04-2014 at 05:40 PM.. |
|
Appreciate
0
|
06-04-2014, 11:30 PM | #8 |
Colonel
529
Rep 2,503
Posts |
Yes it does have a one time programable area but often the chip can be erased by 'reballing' the IC. Or as I suggested reading the EEPROM directly from the chip and, modifying it then writing it back.
The bit of protected information is known as the ISN or ISK. It's a secret key which is used in a handshake between CAS unit and key. |
Appreciate
0
|
06-05-2014, 04:57 PM | #9 | |
First Lieutenant
69
Rep 377
Posts |
Quote:
and this ISN/ISK, is it a value specific to your bmw or is it just a generic "this chip is supposed to be in a bmw keyfob yo" type thing? if it is as you say and all the eeprom stuff you care about for reprogramming a key is that flexible, that's great.
__________________
|
|
Appreciate
0
|
06-05-2014, 08:39 PM | #10 |
Colonel
533
Rep 2,872
Posts |
If you guys can figure this thing out, as far as enrolling keys into these cars with ANY keyfob, virgin, etc. You'd also be a HUGE help to the automotive locksmithing industry.
Since our only option is to directly write keys into the CAS manually.
__________________
BSM E90 6MT-JB4 G5 ISO-BMS DCI-Golf-Tee Mod-Hankook S1N2 Non-RFT-ER Chargepipe/TiAL BOV-E40 blend-VRSF V2's-M3 CDV-MHD/JB4 FLASH-VRSF 5" STEPPED FMIC
|
Appreciate
0
|
06-05-2014, 11:43 PM | #11 | ||
Colonel
529
Rep 2,503
Posts |
Quote:
ISN is stored in CAS EEPROM. Most 3rd party key programmers will read a section of CAS EEPROM and extract ISN. It is not a simple process. Like I said before, creating a Virgin fob is easy. The hard part is programming it. |
||
Appreciate
0
|
06-06-2014, 05:40 PM | #12 | |
Major
136
Rep 1,192
Posts
Drives: 2011 335i MT
Join Date: Mar 2014
Location: Austin, TX
|
Quote:
|
|
Appreciate
0
|
03-17-2016, 05:50 AM | #13 |
New Member
0
Rep 12
Posts |
Old thread, but same question in the area. I just retrofitted comfort access into my car. Since it's practically impossible to get a CA key from the dealer, and my only option is to send someone my CAS to sync virgin made keys, could a swap work? If I take one of my good keys and desolder the hitag key and transplant it into a used CA key, would this work. Technically it would have my vin and ISN number now. Not so sure if the transponder codes are stored in this chip..?
Thanks |
Appreciate
0
|
03-18-2016, 05:45 PM | #15 |
Colonel
533
Rep 2,872
Posts |
|
Appreciate
0
|
03-18-2016, 06:20 PM | #16 |
BimECU
193
Rep 759
Posts |
what is done is, you read they keyfob,
then you read CAS, decrypt, add readed Keyfob info to it, crypt, flash to CAS, sync cas and dme, thats it. |
Appreciate
0
|
Bookmarks |
|
|