MG1CS042 successfully done !

It's a Citroen C5 Aircross with Bosch MG1CS042 encrypted ECU.

Boot glitched unlocked withMagic Motorsport Flexprogrammer.

Then read and write on bench mode.

Posted by: jean at 07:39 AM | No Comments | Add Comment
Post contains 34 words, total size 3 kb.

How to program a spare smart key for a 2025 Hyundai Tucson using the Autel MaxiIM KM100, a popular and capable key programming tool. The job wasn’t entirely straightforward, but with a few workarounds and some persistence, we got the job done successfully.

Vehicle and Tools

• Vehicle:2025 Hyundai Tucson (Smart Key system)

• Tool Used:Autel KM100

• Goal rogram a spare working smart key while retaining the customer’s original key

Initial Setup and Vehicle Identification

We started by connecting the Autel KM100 to the vehicle’s OBD-II port. The tool prompts you to read the vehicle’s VIN automatically, which is usually the quickest way to identify the correct system. However, in this case, the auto VIN function did not work as expected, and the model was not immediately recognized by the tool.

I attempted to let the system pull the VIN, but when that failed, I moved to the manual selection process:

Selected the region: America

Chose the vehicle model: Tucson

Selected the model year range. Since the tool didn’t have a specific entry for 2025, I chose 2021 and newer, which failed to communicate with vehicle.

Later tried 2022–2023 options, assuming the system would be compatible. This option did IMMO scan successfully.

This is a common workaround when dealing with very new models—the underlying immobilizer system often remains the same across several model years.

Reading the Immobilizer Status

Once the vehicle was manually selected, I performed an IMMO status scan. This gave us useful information:

The system showed that two keys were currently programmed to the vehicle.

Communication with the immobilizer system was established, confirming that the tool could interact with the vehicle’s security module.

At this point, everything looked healthy, and we were ready to proceed with key programming.

The PIN Code Challenge

In order to add or replace keys on most Hyundai vehicles, you need the vehicle’s immobilizer PIN code. This is a security measure to prevent unauthorized key programming.

I attempted to read the PIN code directly via OBD using the KM100’s built-in function. Unfortunately, the tool could not retrieve the PIN automatically for this 2025 model. This is not uncommon, especially with newer vehicles where security protocols are updated frequently.

My solution: I obtained the PIN code from an external source—a subscription-based key data service that provides PIN codes for various makes and models. Once I had the PIN, I manually entered it into theAutel KM100, and the tool accepted it without issue.

The Programming Process

With the PIN code in hand, I started the actual programming procedure:

Initiated the key programming function on the KM100.

The tool warned that all existing keys would be erased and that we would need to relearn both the old and new keys. This is standard for Hyundai smart key systems—it’s an "all keys lost” type of procedure, even when adding a spare.

Ignition OFF was confirmed, and the tool communicated with the vehicle’s immobilizer module.

Entered the PIN code manually when prompted.

The tool then guided me through the key learning process. For this Hyundai, the procedure required:

Placing the smart key against the start button (the key sensing area).

Pressing the start button with the back of the key within 5 seconds of the on-screen prompt.

Programming Both Keys

I started with the new spare key. The tool confirmed: "Programming succeeded.”

I then selected "Yes” when prompted to program the next key.

I repeated the same physical procedure using the customer’s original key.

Again, the tool confirmed success.

After both keys were programmed, the system showed that two keys were now active.

Final Verification

I exited the programming menu and tested both keys:

The customer’s original key worked perfectly—remote locking/unlocking and engine start functioned as expected.

The new spare key also worked perfectly, with full remote and start functionality.

The job was complete.

Challenges and Takeaways

Auto VIN and Model Selection Issues:The Autel KM100 did not immediately recognize the 2025 Tucson. Manually selecting a similar model year (2022–2023) worked fine, as the immobilizer system was compatible.

PIN Code Retrieval:The tool could not pull the PIN code via OBD for this vehicle. Having access to an external PIN code source was essential. This is something to keep in mind if you’re working with very new Hyundai or Kia models.

All Keys Erased:The process erases all existing keys, so you must have both the original and any new keys on hand to relearn them.

Physical Key Placement:Following the on-screen instructions precisely—especially the 5-second window for placing the key against the start button—is critical for success.

Posted by: jean at 07:26 AM | No Comments | Add Comment
Post contains 761 words, total size 14 kb.

Problem:

A customer programmed a new key on a BMW F10 CAS4+ usingYanhua Mini ACDP2via OBD. After programming, the remote functions and Comfort Access work perfectly on the new key. However, the car won’t start.

Solution:

Perform a fix start function

Sync CAS to DME and will start again.
Look for "Sync code lost repair” function and if it doesn’t work, for "reset starter motor”.

Posted by: jean at 06:48 AM | No Comments | Add Comment
Post contains 76 words, total size 2 kb.

Good news! Yanhua Mini ACDP2/ACDP1 free update ODE transmission gearbox TCU IMMO OFF function in July 2026.

Modules involved are

• Module 19SH725XX gearbox clone with license A000
• Module 452022+ Gen2 DQ38x/DQ500 with license A60B

Compatible gearbox types:

• Gen1 DQ380 ODE
• Gen1 DQ381 ODE
• Gen1 DQ500 ODE
• Gen2 DQ380 ODE
• Gen2 DQ381 ODE

This upgrade is free. For users with modules 19 or 45, you can use this feature after upgrading the app.
The IMMO OFF function is currently only available forODEgearbox version.
ACDP alone can complete the IMMO OFF function—no other third-party software or devices are required.

New Update Function:
Read IMMO Data
Clear IMMO Data (IMMO OFF)

Posted by: jean at 07:55 AM | No Comments | Add Comment
Post contains 118 words, total size 3 kb.

CG100Xprogrammer released new software V2.1.3.0 on July 27th, 206.

The following models are added for Body repair:

• Land Rover JPLA-19H440-DE RFA SPC560B60L3

• Land Rover K8D2-10C784-XX 48V Lithium battery 9S12ZVCA19V(ON25N)

The following models are added for airbag:

• BYD AUTO STHZA-3658100 95128

• BYD AUTO HA2EJ-3658100B 95128

• BYD AUTO 3658100-RM01 95128+SPC560P40L1

The following models are added for read-write:

• DongFeng Nano01 2024-93C86(read write)

• DongFeng U400014160 95320(read write)

• Land Rover BCM BCM MPC5748G(read write)

• Land Rover BCM BCM MPC5746C(read write)

• Maserati Lai Wante 2018-95320(read write)

• NETA S37-3658010AB 95320(read write)

• YeMa SiPaiKa PIC18F46K80(read write)

• Trumpchi E9 R7F701651(Multimedia Head Unit)(encrypted)(read write)

• Great Wall Haval Xiaolong 2023- R7F701651(Multimedia Head Unit)(encrypted)

The following models are added for dashboard:

• BAIC X7 24C32 Instrument Cluster + 95640 Body

• Benz Vites 25640

• DongFeng Furuika 2022- STM32F103VE

• DongFeng EV180 2023- 24LC256(Pure Electric)

• DongFeng Duolika 2024- R5F10DPJ

• DongFeng ChaoLong medium bus STM32F103RB

• DongFeng HuashenT5 MB91F53BC

• DongFeng Tianjin KR 2024- 24C32

• DongFeng Fengxing SX6 9S12HA32

• DongFeng Fengxing T9 24C64(Central Control Unit)

• FOTON Times King Kong 726 STM8S105K4

• FOTON View G7 EV 2025- 24C08

• FOTON Toano Damai 24C16

• HELI Forklift PIC18F4580 V2

• Hongxing BOX1 2024- 24C16

• Huaxia 504 Tractor 24C02

• Geely Farizon E200S 24C04

• CNHTC SITRAK C7H 540 R7F701441

• JMC WweiLong HV5 2018- 24C04

• JMC Jinhui EV48 24C256(Multimedia host)

• JieFang MV131 2017- 24LC04

• TODAY SUNSHINE M2 24C64

• KINGLONG Bus 2025- 24C16

• Liugong 835Loader 9S12XHY128

• Chery Karry Dolphin E7 2024- 24C16

• Chery Karry Xiaoxiang X3 24C16

• Hitachi ZX220 Excavator 93C66(RL66)

• Rullancar RL8 2025- 9S12XHY256

• Sanyang motorcycle R5F10DME

• SAIC Jiehu H6 320 93C66

• WuLing Glorious new card 2025- 24C16

• WuLing MINI EV Macaron 2025- 24C64

• Naveco Ousheng 2025- 25160

• YunDu X 24C64

• CNHTC HOWO 2011- 24C256(CBUc)

Posted by: jean at 08:45 AM | No Comments | Add Comment
Post contains 277 words, total size 3 kb.

The OBDSTAR BMW B48/B58 encrypted ECU unlock functionality is scheduled for releaseat the end of August, 2026.We’re providing an exclusive early preview of the BMW B58 (Bosch MG1CS024) ECU unlocking process.

Compatible devices:

OBDSTAR ECU Master/X300 Classic G3 with ECU License/OBDSTAR DC706

OBDSTAR RH850 C4-06 Adapter(basic kit)

Procedure:

Go to ECU Read/Write- Engine- Quick search 024 and selectMG1CS024 lockedECU type. For locked ECUs, onlybootmode is available.

Read connection instructions and check wiring diagram.

Connect ecu adapter with ECU master.

Connect the 3-in-1 jumper cable to the white power wire.

Follow pinout to connect 2x IG, GND, CAN-H and CAN-L wires.

Check PCB wiring diagram.

Follow diagram to remove a resistor.

Then solder C4-06-C01 black and red wires to the ECU board.

Since the OBDSTAR wires are a bit thick, it is recommended to use tape to secure the c4-06-01 board in place, to prevent the black and red wires from being accidentally pulled loose.

Connect C4-06 host adapter with ECU Master unit. Connect W010A to the C4-06-01 adapter.

Use the OBDSTAR’s included power supply to power the ECU MASTER.

Once everything is connected, click "Connect” in the software to begin the ECU unlockingprocess.

After the unlock is complete, you can then proceed to read the EEPROM and FLASH data; OBDSTAR also supports reading the ISN code.

Posted by: jean at 07:54 AM | No Comments | Add Comment
Post contains 225 words, total size 15 kb.

In this article, we’ll walk through the process of adding a spare key to a 2022 Volkswagen Tiguan equipped with the MQB49 5C system. The vehicle arrived with a factory-standard key, and the owner had ordered an original key from the dealer using the VIN code. However, instead of performing the key programming online (which would have been the official dealership method), the owner opted for a manual, offline approach to save costs. This guide covers the entire procedure, from reading the key data to programming it into the vehicle.

Key Details

• Vehicle: 2022 Volkswagen Tiguan
• System: MQB49 5C
• Key Type: Original dealer-supplied key (ordered via VIN)
• Method: Manual programming (offline) usingAutel IM508/IM608+XP400 Pro

The key is fully functional and can be programmed online at any later time if the owner chooses, reverting it to an "official” dealer-level key.

Step 1: Initial Key Inspection and Preparation

Before beginning the programming process, the key was placed into a programmer device (likely XP400 Pro or similar tool) to perform an automatic transponder detection.

The tool identified the chip as ID 5C and confirmed it was locked, which is the expected factory state for a new, unused key.

The key was then disassembled carefully to access the internal circuit board and transponder.

Step 2: Disassembling the Key

How to open the key shell:

Remove the blade (physical key).

Gently pry off the rear cover using careful movements to avoid damaging the plastic clips.

Remove a small Torx screw (after finding the correct bit).

Lift the internal module – the circuit board is glued in place with sealant, so it must be carefully pried loose.

Extract the core/PCB from the housing. The board is held by clips and can be released with gentle pressure.

Step 3: Reading Immobilizer Data (Immo Data)

To program the new key, the immobilizer data must first be read from the existing key. This was done using a DAMP (Data Acquisition Module Protocol) adapter connected via anAP131 interface cable.

The Autel IM508/IM608 provided wiring diagrams for connecting the key, but we opted for a non-invasive method (usinggodiag 5C adapterno soldering required).

The reading process began, though it was noted that the data transfer was relatively quick – suggesting a successful and efficient read.

The software saved the extracted data as a backup file for later use.

Important: The Autel subscription for the online database had expired, but this did not affect the offline reading capability.

Step 4: Programming the key to the Vehicle

With the immobilizer data extracted, we moved to the vehicle. Before starting, the following safety steps were taken:

Engine hood opened (required for certain diagnostic procedures).

Handbrake applied for safety.

Steps performed inside the vehicle:

• Connect the diagnostic interface to the vehicle’s OBD port.
• Verify no SFD (Security gateway) was present – this made the procedure simpler.
• Select the Expert mode in the diagnostic software.
• Load the previously saved immobilizer file.
• Perform key learning:
• Place the existing working key in the ignition (or near the reader coil).
• Follow the on-screen prompts to add the new key.
• The system confirmed that 1 key was already present, and after placing the second key, 2 out of 2 keys were successfully recognized.
• Complete the key learning – the software confirmed successful key learning.

Step 5: Final Verification and Testing

After programming, we performed a thorough check:

• Ignition-on test: Both keys were tested with the ignition switched on – both functioned correctly.
• Engine start test: Each key was used to start the vehicle – both worked without issues.

Additional feature: The new key retains the ability to be reprogrammed online in the future, making it equivalent to a fully official dealer key if needed.

Posted by: jean at 07:54 AM | No Comments | Add Comment
Post contains 624 words, total size 14 kb.

Since 2020, Nissan has implemented a security gateway system that restricts vehicle control, preventing technicians from performing essential diagnostic functions without proper authorization. This includes clearing diagnostic trouble codes, performing actuator tests, and accessing critical special functions.

XTOOL has integrated AutoAuth services into its diagnostic tools, providing a legitimate and streamlined solution to bypass this security gateway. This article provides a comprehensive, step-by-step guide to unlocking the Nissan security gateway using XTOOL diagnostic equipment.

Understanding the Nissan Security Gateway
What It Does

• The security gateway acts as a protective barrier between diagnostic tools and the vehicle’s electronic control modules. Its primary purposes include:
• Blocking unauthorized access to vehicle control systems
• Preventing code clearing without proper authentication
• Restricting actuator tests and special functions
• Protecting against cyber threats and unauthorized programming

The Problem for Technicians

• Without unlocking the gateway, technicians face significant limitations:
• Cannot clear diagnostic trouble codes (DTCs)
• Unable to perform actuator tests
• Restricted access to special functions
• Limited ability to complete repairs that require module communication

Compatible devices:

XTOOL diagnostic devices support unlocking the Nissan Security Gateway (SGW) via AutoAuth. Compatible models include theD7,D8,D9series, PRODIGY series, Compass series, IP900 andIP919series, and theX100 MAXseries andX100 PAD3.This allows you to perform full diagnostics and bidirectional controls on locked 2023 and newer models.

How to Unlock Nissan Security Gateway with Xtool?

XTOOL has addressed this challenge by integrating AutoAuth authentication services directly into their diagnostic tools. This integration creates a seamless workflow that allows technicians to unlock the security gateway through a few simple steps.

Connectivity Requirements

• Wi-Fi connection is mandatory during the unlock process
• The system performs online verification through AutoAuth servers
• Offline operation is not possible for gateway unlocking

Step 1: Vehicle Connection

Begin by connecting your XTOOL diagnostic tool to the vehicle. The system will:

Initialize the VCI (Vehicle Communication Interface)

Establish communication with the vehicle’s systems

Prepare for diagnostic operations

Step 2: Vehicle Identification

Navigate through the diagnostic menu:

Select Nissan from the main menu

ChooseAutomatic Detection.

SelectRead VIN Code.

The system will automatically read and display the vehicle’s VIN information.

Step 3: Regional Confirmation

Once the VIN is read:

Select USA from the region options.

Confirm the vehicle details displayed on screen.

Verify that all information matches the vehicle being diagnosed.

Step 4: Security Gateway Unlock Prompt

At this point:

A Security Gateway Unlock Prompt will appear on screen.

Ensure Wi-Fi connectivity – this is essential for the authentication process

Tap Yes to proceed with the unlock procedure.

Step 5: AutoAuth Authentication

You will be directed to the AutoAuth login screen:

Enter your username and password.

TapLog In.

The system will unlock the security gateway online through AutoAuth servers.

Wait for the confirmation message.

Step 6: Proceed to Diagnostics

Once the unlock is successful:

Tap OK to proceed.

Navigate toSystem Selection.

SelectEngine(or other desired control module).

Step 7: Full Diagnostic Access

With the gateway unlocked, you now have complete access to:

• DTCs (Diagnostic Trouble Codes) – read and clear
• Live Data – real-time sensor readings
• Actuator Tests – component activation for testing
• Special Functions – advanced procedures and adaptations

Step 8: Advanced Special Functions

From the Special Functions menu, technicians can perform critical procedures including:

• Idle Air Volume Learn – reset idle control adaptations after cleaning or repairs
• Throttle Position Learn – recalibrate throttle body position sensors
• Various other manufacturer-specific adaptation procedures

Common Questions and Answers

Q: Why Do I Have to Pay Extra?

This is the most common question from technicians:

A: The fee is charged by AutoAuth for authentication services. Not by XTOOL. And it’s actually the most legitimate and safe way to repair the vehicle.

The authentication fee covers:

• Secure online verification of credentials
• Compliance with manufacturer security requirements
• Legitimate access to vehicle control systems
• Protection against liability from unauthorized access

Q: Is This Function Global?

A: Basically, AutoAuth mainly targets the North American area. Other regions generally are not restricted yet.

• North America: Security gateway unlock is required for 2020+ Nissans
• Other Regions: Restrictions may not currently apply, but technicians should monitor for future changes
• Technicians outside North America should verify local requirements

Q: I Have Three Devices. Do I Need Three Accounts?

A: AutoAuth charges per shop. So, one shop account normally can bind multiple devices at the same time.

Benefits of this approach:

• Cost-effective: Single subscription covers multiple tools
• Convenient: Unified account management
• Flexible: Multiple technicians can use different tools under one shop account
• Simple: No need to manage separate credentials for each device

Posted by: jean at 07:02 AM | No Comments | Add Comment
Post contains 748 words, total size 8 kb.

Good news!Keydiy KD-X4key programmer will release a new update- copy/clone 2018+ Jaguar Land rover smart key.

Advantages:

• Without disassembling the KVM Module.
• No need to replace RFA module or program RFA
• Without going through online programming.
• No code tracking problem.

Coverage:

2018+ Jauguar Land rover NXP NCF29Ax smart key models.

What key to use?

It is compatible with original key orKD ZB smart keys.

How to use the function and copy 2018+ JLR Smart Key with KD-X4?

Disassemble the original JLR key.

Go to Land rover Smart Key Synchronization function.
Select Land rover- select by type- disassemble to copy key- copy smart key.
KD App will show you the key wiring diagram.
Solder wires to the key board directly or desolder the NXP chip and solder toKD’s #13 NCF29Ax adapter.

Read original key chip data and save.

Then change and connect a new key.

Write the original key chip data to the new key to copy a new key.

Keep an eye on KD App update.

Posted by: jean at 07:38 AM | No Comments | Add Comment
Post contains 176 words, total size 4 kb.

A customer reported that he failed to scan a 2024 BMW 2 series withVXDIAG VCX SE BMWand ISTAP-D 4.59 software.
Error fautly ICOM vehicle connection.

To use ISTA 4.59.xx software with VXDIAG VCX SE, you need to update ICOM driver to V1.5.4.260612 version and later.

VXDIAG BMW driver

2026.06.12 V1.5.4.260612

Update to support ISTA/D 4.59.xx.

Update BMW driver in vx manager.

Then restart ista-d 4.59 software.

Posted by: jean at 07:12 AM | No Comments | Add Comment
Post contains 75 words, total size 2 kb.