How to duplicate a BMW 320 E46 1999-2006 key by Xhorse Condor XC-Mini Plus key cutting machine?
Fix the original BMW key on clamp, press
Key duplication >> BMW >> 320 >> E46(1998-2006) >> Confirm >> Key decode
Condor XC-Mini machine will start decoding…
Press “Cut”.
Condor Mini Plus machine will start cutting…
Wait until one side cutting finished, then turn over the key to cut other side.
Done!
Using Xhorse Condor XC-Mini Plus Automatic Machine to copy a 320 E46 BMW key is successful.
Xhorse VVDI Prog supports the Motorola MCU MC9S12XEP100 chip. There is a secured and unsecured variant.
I going to read the secured mcu data.
The connection diagram shows the cable. Extra connections over BDM.
Specific pins for the package. Quite helpful.
No need to lift the pin for EXTAL – I’ll just take the zero Ohm R34 off the board.
I can’t see the ground needing to be immediately next to the EXTAL pin. Bottom of C32 or C33 should do.
BKGD can come off TP25…. Reset off TP26. This might be easy!
And we’ll smack GND and VCC onto the BDM header on the board.
Urgh, XCLKS is needed as well… PE7
Which pops out on one of the Arduino-ish headers. Hoping that isn’t too far away from the chip.
Then do soldering job. Not too bad on this. XCLKS (green) is on the underside on one of the Arduino headers. Massive long trace. I think that this is just going to signal to the micro that it’s to expect an external clock signal on EXTALS instead of the crystal.
The EXTAL and ground are in a bit of coax and it warns not to shorten them… so it might be getting a bit fruity on that front.
Looking good. The vvdi prog programmer makes and audible noise when interacting with the micro.
It clearly asked me if I wanted to bypass security. More audible noise, like cool whine. And there we go… It’s unsecured.
It works. Flash contents are still there. Nice.
Allows control of VCC!
Operation success. Save data.
Credit to @cyber gibbons.
How to use Xhorse VVDI BIMTool Pro to unlock BMW CAS4/4+ key via DOIP? This is a quick demo of the procedure.
Operation Video:
https://www.youtube.com/watch?v=fNiW7rGX4Sg
Steps
Click “Connect” to identify BMW system.
CAS key learn >> OBDII – BMW CAS4/CAS4+ – F-Series >> Get key info
Unlock CAS4/CAS4+ >> Yes >> Yes >> Save
Now you can use the coding file to continue programming BMW keys.
You may need:
How to connect VVDI BIM Tool Pro via USB & DOIP?
http://blog.vvdishop.com/connect-vvdi-bim-tool-pro-via-usb-doip/
Using VVDI BIM Tool Pro via DOIP port can greatly quicken the speed when coding & programming. For programming to new module can even complete in 20 minutes.
2021 new Xhorse VVDI BIM Tool Pro enhanced edition for BMW is in stock now, this version fixed bugs to keep a stable system than before.
VVDI BIM Tool Pro Package Unboxing Review
Package List:
1pc * VVDI BIMTool Pro Main Unit
1pc * OBD Cable
1pc * Ethernet Cable
1pc * USB Cable
1pc * ECU Reflash Cable
1pc * Plastic Box
– Ethernet Cable, connect BIMTOOL via DOIP directly, make sure faster network speed during programming.
– USB Cable, connect BIMTOOL via USB, giving another way for computer only has one port.
– ECU Reflash Cable, connect BIMTOOL to do BMW ECU reflash programming.
It may help:
How to connect VVDI BIM Tool Pro via USB & DOIP?
http://blog.vvdishop.com/connect-vvdi-bim-tool-pro-via-usb-doip/
Xhorse VVDI Prog programmer is an interesting device carrying out some quite advanced attacks.
Here comes the 2021 hardware review.
Disclaimer: Credit to the contributor cyber gibbons. The review here is for sharing purpose. We are not holding the responsibility if cause damage by disassembling the vvdi-prog..
The vvdi-prog has arrived.
DIP socket is for EEPROMs and SPI flash – it can read a lot of the common ones in socket or via a clip.
It’s actually really quite polished, and significantly above average in build quality and design. Strong plastics.
The MCU stuff comes off this DB25 connector on the end.
On opening it, a largely single-sided board. Recent date. Very clean inside, no flux residue.
Interesting inside. An STM32 and a ProASIC. Power supply section looks like thought has gone into it. Loads of diodes, probably for protection in the automotive environment. No sure what the lithium cell is doing.
STM32F407. One of the most common chips out there.
A K-Line bus driver, probably for interacting with certain ECUs.
NXP chip
that’s a SWD header for the STM32 up there.
A header for the ProASIC… not worked with these
Protection diodes – not cheap to do this stuff.
It takes 12V and can supply a decent amount of current for some ECUs.
Comes with a series of cables. Braided, sleeved. Nice quality.
Some active components inside… and hot snot. Not sure what the chip is.
This ECU one is a bit more interesting.
Four of each for ground and power – I think this is for powering bigger ECUs like BCMs and immobilisers.
CAN, K-Line, ignition and boot mode come as signals.
Again, some active components inside.
Xhorse vvdiprog is a complex product. Certainly not just something the a TL866 in another box. A device that bypasses security on a range of devices!
https://www.vvdishop.com/service/xhorse-vvdi-prog-hardware-review.html