UPDATING OF FIRMWARE Rev. 2.00

Transcription

1 UPDATING OF FIRMWARE Rev Copy of TPX4/TPX5 in PC Remote Mode. From now on, you can make the copy of any Philips Crypto II over a TPX4/TPX5 using TRS EVO PC Software, and also save those data into your customers database. The copy procedure is similar to the used one in manual: 1. Read OEM Key ID. 2. Insert TPX4/5 to enable Write button and then, press it. 3. Automatic Cloner Enable. 4. Read Again OEM Key ID 5. Enable Sniff mode of TPX4/5. 6. Collect and store vehicle data. 7. Start secret key searching procedure. 8. Proceed with the copy of the TPX4/TPX5. 9. Store automatically all the info into Database. If we compare both copy methods, Automatic/Manual, one of the main advantages of the Automatic one is that once you have all the key data stored into PC Software customer database, you can clone that Original customer key, as many times as you want, even though customer have lost all the vehicle keys. Mandatory condition to make a copy without original key: Have completed at least one successful copy of any previously working key in that vehicle, in the same establishment and performed in remote PC mode. Data saving is automatically done providing that Copy have finished successfully. 2. Temic Crypto TP17 (8C) Copy. From now on, a more detailed read and also the copy, is available for TEMIC CRYPTO TP17 (8C) over JMA copy transponder TPT1. Some models of brands FORD,MAZDA and PROTON, bring this transponder. In the following table it is showed a key reading in an EVO and also TXT related: TP17 TP17 Temic Crypto Copy on TPT1 ID: 3C 45 9D 33 Temic Crypto Wedge. MAZDA/FORD/PROTON. Code Reading Example: TP17 / ID 8C

2 In the next table, it is shown car models and JMA key reference related with this transponder: BRAND MODEL YEAR JMA KEY FORD RANGER MAZ-11.D.P MAZDA MAZ-11.D.P MAZDA MAZ-10D.P MAZDA MAZ-9D.P MAZDA BT MAZ-11.D.P MAZDA DEMIO MAZ-11.D.P MAZDA MIATA MAZ-11.D.P MAZDA MPV MAZ-11.D.P MAZDA MX MAZ-11.D.P MAZDA PREMACY MAZ-11.D.P PROTON MIT-8D PROTON MIT-8D 3. Detailed acknowledgment of TP32 Sokymat Crypto. From now on, it is displayed a more detailed reading of this transponder which was used before in some few HONDA and AUDI and recently it was introduced in some new CHEVROLET. TP32 TP32 Sokymat Crypto II See manual TP ID: 3C 45 9D 33 Sokymat Crypto Glass. AUDI/HONDA/CHEVROLET. Code Reading Example: TP32 / ID 8D 4. PC-TRS EVO Communication Encryption. From now on, all the communications between PC Software and TRS EVO will be encrypted. From customer point of view, all this new feature is transparent. There is no modification into well known working feature neither in TRS EVO nor into PC Software. 5. Serial Number of JMA TPX family transponder Reading. The reading of this S/N brings to JMA an exact traceability of the item just in case there would be a quality issue related with any TPX family transponder. Prior to proceed with the traceability reading, customer must ask for an activation code to technical support service which enable reading TPX menu. Thus, once enabled the traceability menu reading, this remain always active for that PC / EVO.

3 UPDATING OF FIRMWARE Rev Small firmware corrections and improvements A minor issue was fixed related with TPX4 and TPX5 cloning. If there was a Cloning failure, the error type X didn t appear before (could being X a number from (0-9) or a character from (A-N)). Now Error Type is showed right again From now on, Whenever a TRS EVO detects a clonable TP08, the text "Copy On TPM1" will be showed on the screen, focus on the JMA chip base copy transponder to use. Previously it only was showed "See manual TP" for both cases. The next Screen has not been modified and shows "Insert New Key/Press Copy" if the original key is clonable or "Ready to Read/Press Read" if not. TP08-Megamos Cry ID 21DF3F7A MGI UM1 A WD1-WD0 Copy on TPM1 Ready to Copy Press COPY 1.3. According to the suggestions made by some customers about the short time of screen data presentation, a delay has been added. To exit from timing, you just only must press any READ/COPY button.

4 UPDATING OF FIRMWARE Rev Cloning of the TP08 / ID48 on certain models. As from this revision, some of the TP08 / ID48 that are mounted in the models of the following brands can be cloned: DAEWOO / CHEVROLET / KIA / PONTIAC Below, we show the reading of the chip used to copy over in the TRSEVO, as well as the associated texts: TP08 TP08 Megamos Cry ID 3155DE60 MGII UM1 A WD1-WD0 UM2 AAAAAAAAAAAAAAAA Megamos Crypto Crystal Copy base blank TPMG1 Example of code TPMG1 / ID 48 The JMA chip on which we want to make the copy is denominated TPMG1. At the moment, cloning will only be available in the TRS 5000 EVO. The models containing the mentioned chip are as follows: BRAND MODEL YEAR JMA KEY CHEVROLET AVEO DAE-4D.P1 CHEVROLET KALOS DAE-3D.P1 CHEVROLET LACETTI DAE-3D.P1 CHEVROLET SPARK DAE-4.P1 CHEVROLET TACUMA DAE-3D.P1 DAEWO KALOS DAE-3D.P1 DAEWO LACETTI DAE-3D.P1 DAEWO LANOS DAE-4D.P1 DAEWO LEGANZA DAE-4D.P1 DAEWO MATIZ DAE-6.P DAEWO NUBIRA DAE-3D.P1 DAEWO TACUMA DAE-3D.P1 KIA CARNIVAL KIA-2D.P KIA CLARUS KIA-2D.P KIA PRIDE KIA-2D.P KIA SEDONA KIA-2D.P KIA SHUMA KIA-2D.P KIA SPORTAGE KIA-2D.P PONTIAC G DAE-4D.P1

5 2. Small corrections and improvements 2.1. From now on, it is possible recognize in the TRS EVO, the new passwords (D0-D4/ / 34 / B4 and 98) inserted in some of the new TOYOTA/LEXUS smart keys. Thus, taking apart those RKE/PKE Keys from cloning process we completely avoid the waste of TPX2 on failed copies. This problem would not have consequences on TPX5 which is rewritable as many times as we want. Then, it is displayed the reading of one of these keys: TPxx TOYO/LEX SMART KEY CaNot be Duplicated PW: 98 ID: 6F E4EA40 MC: 2A LCK: 1111 DST80 Texas Cod. Crypto. 4Gen. Electronic PCB. Example of code in a TEX-MA / ID 6E-F4 This new smart keys (Electronic simulation of the transponder) are used together with push button starting systems. Usually most of these remote keys are PKE (Passive Keyless Entry) typed. In the following picture we can see one of those LEXUS keys. This another smart key belong to TOYOTA.

6 Another example of those new TOYOTA PKE keys is the following one, which reading is slightly different from previous TOYOTA one: There are a new generation of (RKE/PKE) keys inserted into most of the new TOYOTA/LEXUS launched models during 2013/2014, which are not detected by the EVO yet. They are understady.

7 UPDATING OF FIRMWARE Rev Introduction of the new multi-configurable Transponder TPX5 As from this revision, the TRS5000 EVO is capable of copying the transponders of the following families: TP12 / PCF794x (Philips Crypto) TP06/19/20/21/26/27/28/29/30/31 (Texas Crypto) T02/07 (Texas Fixed) This transponder commercially denominated TPX5, will have the same functional features as the TPX1 / TPX2 and TPX4, but combined on one crystal format, multi-configurable chip (allowing the cloning of different families with different protocols). In addition, it has the advantage of overwriting as many times as needed (which the TPX2 did not have). By default, the TPX5 has a factory-defined configuration (Texas Fixed Mode). The client does not have to worry about changing the operational mode of the TPX5 in function of the key to be copied, because automatically after recognising the key, if changing the format of the TPX5 on which we want to overwrite is necessary, the process is done autonomously and transparent for the client. Below, we show the reading of the mentioned key in the TRSEVO, as well as the associated texts: TPX5 TPX5-BLANK Copy over TPX1/TPX5 ID: 00007E24A7077F 6B9F00011B947E0000 TPX5 TEXAS FIXED Crystal Format. Example of code TP02-ID 4C over TPX5

8 2. Recognising the Texas Crypto transponder of the TOYOTA PRIUS From now on, the 2 nd generation Texas Crypto transponder (DST40) inserted in the PROX/NO PROX keys of the TOYOTA PRIUS for the models between can be recognised. BRAND MODEL YEAR JMA KEY TOYOTA PRIUS For a correct reading, the key does not have to be introduced into the antenna hole like in the most of the keys but it must be placed like showed into below picture, perpendicular to the antenna hole. This is because unlike the most of the keys where transponder is located longitudinally and parallel to metallic blade, in the case of this key, the transponders is placed parallel to remote buttons and on the side opposite to emergency key extraction finger grip. Below, we show the reading of the mentioned key in the TRSEVO, as well as the associated texts: TPxx TOYO/LEX SMART KEY Copy over TPX2/TPX5 PW: 34 ID: 0A 76083B MC: 10 LCK: 1111 DST40 Texas Crypto Code 2Gen.Wedge/Prox Toyota Prius. Example of code TOY/LEX-DST 40 / ID xx

9 With our TPX2/TPX5, we will cover remote controls that do not have the smart Entry access (black Toyota logo) and those that do have the mentioned access (silver Toyota logo). Once the copy has been completed over TPX2/TPX5, JMA key always must be inserted into learning/programation slot to start the engine. If the vehicle has the SMART ENTRY option and we only have the JMA key, it would be convenient to deactivate that function, (SMART ACCESS). Below we describe the disconnection procedure.

10 The start with the new JMA key (TOYO-xx.Px), (always excluding the Smart Entry function that cannot be used with our key) can be done in 2 different ways (the same as the original), and these are explained below:

11 Without SMART ENTRY and without pressing Brake.

12 Without SMART ENTRY and pressing the brake Some of the models where this key has been detected are:

13 3. Recognise and copy the Texas Fixed (TP02/4C) in R/W mode. As from this revision, the Texas Fixed transponders (TP02/4C) can be copied on our TPX1/TPX5 in R/W format. Until now, the (TP02/4C) could only be cloned in reading format. Both have 64 bits of memory, but the starting and finishing headings are different. Below, we show the reading of the mentioned key in the TRS EVO, as well as the associated texts: TP02 TP02 Texas R/W Copy over TPX1/TPX5 TI ID: 00007F8921B D6276D87F8900 Texas Fix Code. Wedge Format. Example of code TP02-ID 4C R/W. 4. Introduction of new READING/WRITING Menu for TPX2. A new Menu which enables READ/WRITE over TPX2 has been inserted only in the new TRS EVO PC Software. We could see in the following picture, Texas Crypto layout and the different information fields as well as the READ/WRITE buttons that enables only the copy over TPX2.

14 5. Introduction of a new language As from this revision, a new language is introduced; Czech. For now, it will only be available in the TRS 5000 EVO 6. Small corrections and improvements 6.1. Modify the reading/copy of the old TP03-ID 13 of DAEWOO that were installed on some models like the Aranos ( ), Espero ( ), Lanos ( ), Leganza ), Matiz ( ), Nexia ( ) and Nubira ( ). The copy is done on TP Correct the final screen shown for both the TRS5000 as well as the TRSEVO when it is not possible to find the secret code of an original Texas Crypto key. When the statistical algorithm is not capable of finding the secret code, the message that should appear would be KEY NOT FOUND instead of the multiuse message COPY ERROR that usually leads to confusion. The reasons for showing COPY ERROR can be from a defective chip to the previous use of the TPX2, which now makes a later copying on the same impossible Automatic detection of the Display type assembled for the TRS EVO. Maintaining the READ key pressed, during the start of the TRSEVO, the type characters of the second Display configuration language are displayed, Japanese, Cyrillic, Chinese, etc Modify the Reading/Writing procedure of some key used in Piaggo/Peugeot/Gilera bikes. OEM keys bring a TP04 ID11/ID12.

15 UPDATING OF FIRMWARE Rev Redesign of the TP16 transponder copy procedure From now on, it will be ONLY possible to clone the TP16 in PC mode. This has been decided so that when any problem occurs during the reading phase of the original key (removal of the OEM key before the scanning period has finished, erroneous readings due to the insertion of original key together with other metallic keys or a keying that can distort the reading, introduction in the area of influence of the power source, etc.) all these cause copy errors that can only be resolved using the REGENERATE TP16 key function, implemented in the PC software. Once this erroneous key is introduced in the start switch and the start-up of the vehicle is tried, the safety module is activated and on occasions does not allow starting even with the OEM key. Removing the battery terminals of the vehicle for 5 min, will cause the resetting of the computer (ECU) and returning to the original settings. However, if even then, the original key does not work, it will have to be reprogrammed. Therefore, we developed the REGENERATE TP16 function that is only available in PC Function. The list below shows the vehicles and models affected: NOTE 1: BRAND MODEL YEAR JMA KEY PEUGEOT TPH1NE-36.P2 PEUGEOT TPH1NE-51.P2 Only the last TP16 key to be read can be regenerated. A previous reading has to be done to proceed with the regenerating function. If we read a TP16 with an ID X value, (it is automatically stored in memory) and we introduce another TP16 with a different ID value, we cannot regenerate the key. NOTE 2: The copying sequence of the TP16 has been changed and is now as follows: Copy WITHOUT PC: TP16 Phil Cry PG Copy only in PC Insert key Press READ When introducing the original key, the display will only show the type of TP introduced and will not allow the copy unless the TRSEVO is connected to the PC.

16 Copy WITH PC: Reading of Data Please wait. When the TRSEVO is connected to the PC, as soon as the original key is introduced, the programme starts the search for the secret code. THIS IS THE PROCESS DURING WHICH THE CLIENT SHOULD NOT REMOVE THE ORIGINAL KEY UNDER ANY CIRCUMSTANCE Reading OK. Remove the key. Introduce the key to be programmed At this point, the information of the key has been automatically saved in the external eeprom and the secret code is available for proceeding with the copy on a blank TPH1. Press WRITE KEY to start the programming. Writing the key.. Please wait.. The writing has been correct. After the PC software automatically detects the introduction of a TPH1, the WRITE KEY button will be activated to proceed with the copying.

17 UPDATING OF FIRMWARE Rev Recognition of the new Texas Crypto transponder for IVECO From now, the new Texas Crypto 3 rd generation (DST80) transponders inserted in the most recent models of IVECO can be recognised. This new transponder is an evolution of the old TP28 DST40 also used by SUBARU and MITSUBISHI, and that in this new version has been programmed with the new DST80 algorithm. Below, we show the reading of the mentioned key in the TRS EVO, as well as the associated texts: TP28 TP28 Texas Cry. MIT2 Cannot be duplicated PW: FF ID: 00 FC0BDB MC: 16 LCK: 1010 DST80 Texas Crypto Code 3Gen.Wedge IVECO/SUBARU/MITSUBISHI. Example of code TP28-DST80 / ID 6E-MA Some of the models where this key has been detected are: BRAND MODEL YEAR JMA KEY IVECO EUROCARGO FI-16.P IVECO STRALIS FI-16.P 2. Small modifications and improvements Taking advantage of the introduction of the new IVECO keys, the firmware for the detection of the algorithm of the DST 80 in Ford has been modified. This way, avoiding that the new key in models like FORD B-MAX, FORD FOCUS 2012, FORD C-MAX, FORD TRANSIT, etc, that have this new RKE type of key with retractable shaft, are erroneously recognised and allowing the copy on the TPX2 format. For now, nobody can clone this new variety under any circumstance.

18 UPDATING OF FIRMWARE Rev Introduction of new languages From this revision on, we have introduced 2 new languages, Japanese and Russian. Both languages are only available in the TRS 5000 EVO and in without PC functioning mode. 4. Small corrections and improvements 4.1. Modification of the reading of the old TP04 that are used by some motorbikes (Yamaha XMAS / VESPA 125, etc) the erroneous reading of which caused incorrect copying. From now on, the reading of the Original TP04 keys and their later copying on TP05 are the same Modification of the internal settings of the new Microcontroller to adapt them to the generation functions of the fixed code.

19 UPDATING OF FIRMWARE Rev Cloning of the new GM models In the family of keys that have Philips Crypto Hitag II technology, a new evolution of the same has been detected in the new launchings of GM and its affiliates, like OPEL, VAUXHALL, CHEVROLET, BUICK, COMMODORE The response time when processing the authentication stage (Challenge- Response), differs slightly to the majority of the Philips Crypto standards present in the vehicle on the worldwide Market. In this new version, this new response time has been adjusted and likewise, the new stages for challenging have been implemented. For example, some of the models that already have this new type of keys, are: OPEL / VAUXHALL (Insignia, Astra J, Meriva ) CHEVROLET (Cruze, Camaro, Malibu, Equinox..) BUICK (Verano, Regal, Encore ) GM (Terrain, Acadia ) So these new keys can be cloned, in addition to downloading and updating the firmware for the TRS 5000 EVO, we also have to do the same with the cloner 4 firmware, that should be updated to the version. The reading seen on the screen will be as follows: GM GM PHILIPS CRYPTO Copy over TPX4 ID: B72C8BB2 LOCK MANCHESTER GM PHILIPS CRYPTO 2 Gen. Electronic pcb. Example of code for a GM / PH-CR Development of Firmware for the Cloner of the TRS EVO In order to clone the new models of keys implemented in the GM group, in addition to updating the firmware of the TRS 5000 EVO, the Firmware of the internal cloner (2 in 1) of the TRS EVO has to be updated. To do that, use the PC software (CLONER programmer.exe), this will automatically install with the SET UP of TRS5000 EVO. This programme can be indistinctively used for updating both the old TPH Cloner as the new one. The update that corresponds to the TRS5000 EVO is version For the TPH Cloner of the old TRS5000, the software update is

20 3. Identification of blank TPX2/TPX4 From this version on, the client will know if the transponder on which he wants to clone is blank or if it has already been used. In the case of the TPX4, this is not very important because the mentioned chip is rewritable as many times as we want, but in the case of the TPX2, knowing this crucial because it is an OTP (One Time Programmable), after which it cannot be reused. The readings of a blank TPX2 / TPX4 are shown below: TPX2 TPX4 TPX2-BLANK Copy on TPX2 PW: FF ID: MC: 00 LCK: 0000 DST40 TPX4-BLANK Copy over TPX4 ID: B LOCK MANCHESTER JMA TPX2 Compatible Texas Crypto Example of code TPX2-BLANK / ID 60 JMA TPX4 Compatible Philips Crypto 2. Example of code TPX4-BLANK/PHCR Small corrections and improvements 4.1. Correction of format of presentation of errors that had lost the numerical value of the component 4.2. Improvement of the information supplied to the Display, after identifying the transponder. (TP Megamos)

21 LAUNCHING OF THE TRS-EVO Firmware- Rev Launching of the TRS 5000 EVO (version 1.01) In this original version (1.01), the new TRS EVO does not only have all the potential for recognition, reading and capacity for cloning of the old TRS5000, but in addition, the recognition has been updated with the identification of the new Texas Crypto (DST 80) keys. The newly introduced transponders as well as their associated texts are as follows: TP33 TP34 TP35 TP33 Texas-Cry 3GEN FORD-Copy over TPX2 PW: 03 ID: 80 81DCBE MC: 01 LCK: 0010 DST40 TP33 Texas-Cry 3GEN FORD-See TP manual PW: 03 ID: 80 FB4FA6 MC: 01 LCK: 0010 DST80 TP34 Texas-Cry 3GEN TOYO-See TP Man. PW: 37 ID: 96 3DF27F MC: 80 LCK: 1111 DST40 Texas Crypto ++ See TP manual PW: 36 ID: 98 FAA182 MC: 80 LCK: 1111 DST80 TP35 Texas-Cry 3GEN TOYO-Copy on TPX2 PW: 33 ID: 0F 348CBC MC: 0C LCK: 1111 DST40 Texas Cod. Crypto. 2Gen. Wedge. FORD Example of code in a TP33 / ID 6F-63 Texas Cod. Crypto. 3Gen. Wedge. FORD Example of code in a TP33 / ID XX Texas Cod. Crypto. 2Gen. Wedge. TOYOTA Example of code in a TP34 / ID XX Texas Cod. Crypto. 3Gen. Wedge. TOYOTA Example of code in a TP34 / ID XX Texas Cod. Crypto. 2Gen.Wedge. TOYOTA Example of code in a TP35 / ID 6F-70 With this new more compact and ergonomic design, the external cloning terminals of the previous generation (TRS 5000) have been integrated inside the device. Likewise, by increasing the size of the Display, we now have more surface for presenting detailed information of all the identified transponders. The constant evolution of the automation sector requires continued research and implementation of the new keys that the new models have. Therefore and as soon as these are detected, they will be implemented in the TRS 5000 EVO.