How to Unlock CRP3 LPC2478 by Ktag/Kess

As you know, for crp3 we can do the trick for unlock crp3 heating on Ktag or Kess V2 programmer or buy a new NXP and write it (only one time)
Here are some questions & answers on Google form, questions about “how will you use J-ink if its crp3 ?”...
Q:Can I update NXP directly if at this moment I have Ktag 6.070? Or I will need to replace it with new one and then to update to 7.030 ?
A:if your actual fw is crp3 you will have to do "heating trick " or change nxp, you will know if jlink doesn’t recognise firmware ( i think message about cannot find cpu chain or something like that) , simple
Q:More information this real version or china version? and whats this you can update or or only talk?? thanks
A: this is fw 7.030 we are talking about REAL firmware, not modding number in sw or similar, about second question i don’t understand what you ask.

Q:Need connect 12v ?my led red always off if not connect 12v
A: LED needs to monitor the state of the processor and it must be switched by the controller. If you do not have the power on the controller when connected by USB, then connect the other power source.

Q: How work on ktag, i tried but led already on
A: LED need to monitor the state of the processor and it must be switched by the controller. If you do not have the power on the controller when connected by USB, then connect the other power source.
To flash the LPC2478 via J-link, the level of protection should be CRP0, ie protection should be disabled. If security levels CRP1 and CRP2 have the ability to erase and reflash LPC2478 via UART, eg via USB to UART TTL adapter ftdi232 or cp2102 and Flashmagic program.

Q: LPC2478 connect Flash Magic, KESS or KTAG?
A: ...KESS & KTAG...both ok
Note: not all ktag 5.001 can be read with j-link
some are crp3 protected
some are not

Attachment 1: Code Read Protection (CRP)

CRP explanation	CRP status	Volume label
The user flash can be read or written.	No CRP	CRP DISABLD
The user flash content cannot be read but can be updated. The flash memory sectors are updated depending on the new firmware image	CRP1	CRP1 ENABLD
The user flash content cannot be read but can be updated. The entire user flash memory is erased before writing the new firmware image.	CRP2	CRP2 ENABLD
The user flash content cannot be read or updated. The USB bootloader ignores the Entry Mechanism (P0.15 pin) and always executes the user application if present. If user application is not present then "Update" mode is entered.	CRP3	CRP3 ENABLD

Attachment 2: Here are all pinouts
A method of disabling the protection CRP3 microcontroller LPC2478.... make a photo high resolution of connection on pcb of that wire...and also,what pin you must to touch on nxp
K-Tag pins.


Attachment 3: Photos ofLPC2478 connect Flash Magic
It allows you to erase the NXP MCUs on both Kess & KTag via UART0. This will work for firmwares up to CRP2. CRP0, best off using J-Link as it only takes 30s as opposed to 30 minutes. If you've blocked your KTag properly (CRP3), it won't help you. You will need to swap the processor.

Kess V2 connection method 1:

Kess V2 connection method 2:

KTag connection:

Disclaimer: Photography of Pinouts is not mine. I am not responsible for a bad use.

How to Deal with Kess Ktag V2 No 12V

Here comes a solution from one customer that he solve Kess Ktag V2 no12V problem. Let us move on to view more.

Part 1: Cannot get 12v of output from Kess V2
I use a AC power to connect to my kess V2 adapter. The seller gave it. it it 12v and 1A.
When I use my kess I'm following the next steps.
1 ) Connect the adapter to kess unit
2 ) Connect the ac power adapter to the adapter
3 ) Connect the usb cable to kess unit and the computer and tun the software
My kess read ecus by OBD port. I read a seat leon 1.9 BXE perfectly. It is other edc16 ecu.
The Ksuite shows it has 12,16V-12,30V all time while it is trying to read.
I tested my power supply and it give 12 volts
Solved!


Part 2: Ktag NO 12V

Got a Ktag Clone since a few months. did about 10 ecus with it, no problem! Since today i've got no 12 volt on red wires. Normally when i click read 12v appears on red and orange wires. Now only on orange. When i connect red and orange together everything works like normal.

Here is the board with faulty component(s)

Changed this component and it worked.


Part 3: Ktag Kess V2 working good with 12V

Ktag Kess V2 with best components works well

Note that Red PCB version works better than Blue & Green versions

Ktag 7.020 maximum quality:
http://www.eobdtool.co.uk/wholesale/ktag-v7020-eu-version.html

Kess v2 5.017 of maximum quality:
http://www.eobdtool.co.uk/wholesale/kess-v5017-eu-version.html

original post:http://blog.eobdtool.co.uk/solved-ktag-kess-v2-no-12v/

Ktag 6.070 rework for Tricore BOOT (customer solution)

Ktag should be able to program with Jtag, BDM and Boot protocols.

However, I have no luck with Ktag 6.070 for Tricore BOOT;

My way is to rework the board

Before rework:Everything working fine (BDM, Kline etc.) except Tricore boot

Connection OK, ID OK , begin reading ok , then jump when reading and finish with "error reading" (between 20% and 44%)
I try with SID807EVO , EDC17C54 and MED17.5.2, same error.

I use Kess V2.11 & Trasdata, same thing

Solved!

The problem is crystal not murata

for fix or change crystal or add capacitors 22pf
crystal murata does not need capacitors

ECU EDC17c54 in Bootmode OK and write OK, Crafter 120hp drive faster , everything is ok 

Ps. When searching info on the web, i found some said their Ktag from 

http://www.eobdtool.co.uk/wholesale/k-tag-ecu-programming-tool-master-version.html

perfect for Jtag, BDM and all the Boot application (tricore and ST10). i’ll try next time.

How to use KTAG GPT cable to read Bosch MED17 GPT

MED GPT cable 14P600KT06 is necessary to be used with Ktag for Bosch MED17 GPT ECUs reading. So, how to make it your self & how to use it for connection? Here you go.

What is Ktag 14P600KT06 GPT cable:
It is used for BOSCH MED17 GPT ECUs

How to make a Ktag GPT cable yourself:

I take 144300t105 rainbow cable and remake to GPT cable
(or u can use 26 pin connector , may some one will be handful)
for 05 cable:
GPT SIGNALS:
PIN 23 ORANGE
PIN 24 YELLOW
CAN SIGNALS:
PIN 13 ORANGE CAN-H
PIN 14 YELLOW CAN-L

the pinout

correct pin out of ori Cable 14P600KT06 GPT:
yellow pin3- yellow
orange pin 4-organge
yellow pin 13-green
orange pin 14-white


WARNING: Incorrect or poorly made connections may damage the ECU, often beyond repair. In no event shall we be liable for any damage caused to the ECU by wrong connections. If not equipped with enough knowledge and tech, you’d better spend a bit to buy one and use it with security. Look here: http://www.eobtool.co.uk/wholesale/ktag-frimware-v7020-ecu-programmer-with-renew-button.html

it was tested a lot:
MED 17.7.2 Mercedes GPT 2015

...

How to connect & use Ktag GPT cable for MED17 GPT ECU reading:

• Plug-in 689: MED17.5.2 IROM TC1767

The pins Boot can be found on the right side of the ECU (in red in the picture).
The programming pads where to set the board adapter are located at the bottom right (in yellow).



Material needed:

• Cable 14P600KT02
• MED GPT cable 14P600KT06
• Solder wire

a.Solder a wire joining the two pins Boot shown in the picture;
b.Solder a wire to pin CNF1 shown in the picture;



c.Connect cable 14P600KT02 and cable 14P600KT06 to the ECU connector according to the pinout below:


d.Remove the soldered wires before re-installing the ECU on the vehicle.

original post from eobdtool blog:
http://blog.eobdtool.co.uk/diy-ktag-14p600kt06-gpt-cable-pinout/

Success & Failures List of Kess V2 5.017

Here, i will post some cars did with Kess v2 clone with the latest fw. 5.017 with OBD2

Peugeot 307
2.0hdi
2002 year
Edc15c2
Read ok. Write ok
Golf 1.9 tdi
2007
Edc16u1
Read ok. Write failed corupt eeprom , restore with KTAG full bdm
Citroen jumper
2.8hdi
2003
Edc15c7
Read failed open ecu and boot mode with another tool (MPPS v18)
Ford cmax
1.6 cdti
2007
Edc16c34
Read ok. Write ok

BMW 323i
2500 24v N52B25
2007
Siemens msv80
Read ok. Write ok

simos 18 write not work, or very limited
cp2010 eu clone with 2.34 is meant to work

Update: (13/10/2017)

Berlingo 9HX: 
only read ID from engine and works ok

PSA Bosch EDC 16:
read ok

Skoda Octavia 1.9 AXR EDC15:
read ok

BMW EDC17CP02: 
OBD write ok

BMW EDC15:
OBD read/write ok

Ford Mondeo SID206: 
read/write ok

VW EDC17CP14: 
read/write with tricore module

2008 Sprinters with Edc16: 
no issues

K-line and CAN both OK

kess v2 fw 5.017 i am using, look here: (works good so far)

collected by eobdtool.co.uk

Read and Write Land Rover? Kess V5.017? KTAG V7.020?

Question: Which new firmware ECU Programmer is the best choice to read/write Land Rover? Kess V2 5.017 or KTAG V7.020?

Answer:

First, please check if your car & ECU is listed or not

KESS FW5.017 Land Rover


KTAG 7.020 Land Rover


Second, which tool do you need for Land Rover?

KESS V2 is a ECU programming tool that is perfect for OBD use, while KTag is perfect for Jtag, BDM and all the Boot application (tricore and ST10).

So,personally, i would recommend you buy KESS V2 5.017 + KTAG 7.020together coz the bundle would not only help save a lot but better for future use. Look here:

KTAG firmware 7.020:
works better, faster and more stable than old versions

1. adds 100+ ECU types& supports new car models e.g.Toyota 76FXXX, PSA 17.4.4, Ford E83, VW 17.5.5 (1766), Mercedes-Benz 276 ECU, Toyota 76F, etc.
2. more languages available English, Italian, Portuguese,French, Deutsch, Spanish)
3. better wiring description (inwordsnot pictures).

Kess v2 firmware 5.017:
Compared to KESS V4.036, the KESS 5.017 has been improved a lot:

1. 100% working
2. No tokens limited
3. with original database
   4.Windows 7 & Windows 8supporting, not only Windows XP
   5. supports more cars & bikes & trucks unlimited tokens, fully activated

So, with Ktag v7.020 + Kess V2 v5.017, you can read and write ECU without token limitation for OBD, Jtag, BDM and Boot use for the new models and protocols. But it cannot be used for Tricore; you need go to MPPS V18 cables.

Third, how to use KESS 5.017 or KTAG 7.020 to Read/Write Land Rover ECU Data

For KESS V2 5.017 users:you can program directly through the OBD port of the vehicle, while with Ktag you need to take apart the ECU and open it, after you can make the read/write operation.

For KTAG 7.020 users: you need to disassemble from the car and open and this is the case for all the ECU (most Land Rover ECUs) that need to be programmed with Jtag, BDM and Boot protocols,but it is not a hard job,you can buy a LED BDM Frame together to simple your job.

For details, look here:
Recommendation:

1. Remove the ECU from the vehicle;
2. Open the ECU, taking care in not damaging the parts inside;
3. Reconnect the ECU to the vehicle and start the engine, in order to make sure that it is still working and has not been damaged in the opening;
4. Remove again the ECU from the vehicle;
5. Select the right plug-in;
6. Always make a backup copy of the ECU before Reading and / or Writing.

Instruction:
Connect to the ECU according to the pinout provided for each model (click here for connection instructions);

ECU here: EDC17 CP11 XROM TC1796

The pins Boot can be found on the left side of the ECU.


Solder a wire on pin Boot shown in the picture


Connect the cable 14P600KT02 to the ECU connector according to the pinout below


Remove the soldered wire before re-installing the ECU on the vehicle.
Select the right plug-in;
Go to reading and programming
Backup: To make a full backup of the ECU, select Backup in the Reading box and click on Read.

Reading: Remove the check mark at the Backup option, select the component you want to read and then click on Read.
Notice: The term Maps at the side of the component indicates where the maps for engine control are stored.

Writing: Remove the check mark at the Restore option, select the component you want to write and then click on Write.
Notice: The term Maps at the side of the component indicates where the maps for engine control are stored.

Restore: To restore the backup file to the ECU, select Restore in the Writing box and click on Write.


original post: http://blog.eobdtool.co.uk/land-rover-read-write-kess-5-017-vs-ktag-7-020/

Feedback of Kess V2 5.017 Ktag 7.020

Here comes the review of Kess V2 5.017 from the customer of eobdtool.co.uk

Here we go:

MCU arrived today (four days by dhl).

I reworked kess and seem to work, sw open and show protocol active but I haven't tried on a car.

Kess v2 5.017 rework:

Rework of ktag ok, seem to work.

I haven't tried on real car or ecu for now, but seem to work.when I tried on ecu I post result.

Ktag 7.020 rework:

Ktag work very well!

I tested with a lot of edc17 in these day and read and write without problem.

Tested with a edc17c50 bmw 120d f21 with gpt, read and write ok.


I have a fiat edc17c69 virgin (without software inside), this I can't read.

In these day I must read a Toyota with nec, when I read post results.

Ktag haven't token, I read more than 30 ecu and work the same.

Copy and Share Kess V2 and Ktag Cables and Adapters Pinouts

Here share the process how to copy Kess V2 and Ktag cables and adapters pinouts, including DSG DQ200 and DSG DQ250, less v2 bmw cables, ktag 14P600KT06.

Maybe together we can get all the pinout cables motorcycles, tractors, boats, DSG and adapters ktag.

i will star with this, DSG DQ200 and DSG DQ250

DQ200 adapter

DQ250 adapter

Kess V2 BMW cable

K-TAG 14P600KT06 cable Pin Out (GPT)

original post: http://blog.eobdtool.co.uk/kess-ktag-adapters-pinouts-dsg-dq200-dq250-14p600kt06/