I had to change my DME and i have problem with EWS alignment.
Can anyone help?

 

Not sure if what you are trying is possible with the fourth-generation electronic vehicle immobilizer (EWS4) system on our cars. Here's an excerpt from some BMW docs:

"Car Access System 3 with EWS4Replacement of Control Units.
That's the "official" story. However, there is some indication that people have been able to get around it using WinKFP. See this thread (note that the E9x series computer system is similar to the R56): http://forums.bimmerforums.com/forum....php?t=1567970

Good luck!

 

First of all thank you for your reply.Secondly i've read this thread that's why i'm asking.But i spoke with the guy who opened the thread and he told me that he finally changed only DSC because DME needs all this process.

 

I *think* it is possible using WinFPK or Tool32 to get the VIN programmed into the module. But I haven't looked much into it. bmwcoding or the diagnostic section of bimmerforum is probably a better reference. Look for E90 models or E60 models as they should be the same as the R56.

 

it's not only VIN the problem,but the secret key of EWS.They are encrypted and i can't find them.They are shown as FFFFFFFFF or 000000000.That's my problem.

 

Darn...the WDS shows this, but maybe it is out of date:

Car access system (CAS)

Functional description, see BMW Technology:
TIS --> Document --> SI Technology --> SBT Number 61 03 03 019
Service functions

Replacing control units
The following points must be borne in mind when the CAS or the engine control unit are replaced:

• If a CAS control unit is replaced, it must be ordered using the vehicle identification number (VIN). Following installation, that starting value must be adjusted to the engine control unit. This starting value adjustment is performed using the service function ”DME/DDE - CAS calibration” in the BMW diagnosis system.
• If the engine control unit is replaced, the drive-enable code must be transferred from the CAS to the engine control unit following installation. This operation is also performed using the service function ”DME/DDE - CAS adjustment” in the BMW diagnosis system.
• After the adjustment of the EWS and engine control unit, these are mutually linked. It is not possible to replace one of the two control units as a test.

DME/DDE - CAS adjustment
In the case of a new engine control unit, the service function ”DME/DDE - CAS adjustment” in the BMW diagnosis system is used to read the EWS drive-enable code from the CAS and transfer it into the engine control unit. This means that the engine control unit and the CAS control unit are mutually linked.
If the engine control unit is already linked to the CAS, the service function is used to perform a starting value calibration. This means that the random code calculation between the CAS and the engine control unit is calibrated.
A start calibration is required if there is a variance in the random codes caused by the influence of errors in the two control units.
As of EWS4, a start calibration is no longer required.
Locking the remote control/spare key
The service function ”Remote control/Lock/Enable Key” in the BMW diagnosis system can be used to lock or enable remote control keys or spare keys.
The locking is recommended when a remote control key or a spare key is lost or stolen. With a locked remote control key (or spare key), the engine cannot be started. The functions of the remote control are also locked.
A remote control key or a spare key can only be locked if the remote control key or spare key has been used at least once and it is not inserted in the ignition lock.
To perform the service function, it is required that a valid and enabled remote control key or a valid and enabled spare key is detected in the ignition lock.
Activating a new remote control
Insert the new remote control in the slot and hold in this position until the remote control locks into place. This can take up to ten seconds. After locking, wait another five seconds. The remote control is then ready for use.
If the remote control is a replacement for a lost or defective remote control, the old remote control still has to be blocked using the service function ”block/release” (see above). To use the Car/Key functions, the service function ”Personalisation number” has to be run.

 

The DME-EWS alignment doesn't work with EWS4.I tried with DIS but it cannot recognize the car.That's because it is available in v.44 DIS.Generally the "Coding/Programming" section in DIS is available for older cars.I have updated it to v.57 but this update is only for "Diagnosis" Section.As i know there is no update for Coding section...I have found a CAS4.prg in Tool32 which can read,write,lock,unlock Secret Keys from CAS and DME...I'll try and i'll inform.There is EWS4_DME.prg in the ecu files of DATENS but it hasn't too many options.

 

I have reviewed the CAS4.prg module's functions respective to the EWS4... In here it makes direct mention of a "Server" key for the "DME" and a "Client" key for the transponder. So I am not very sure of what is meant by "Server" and "Client" any more...

What's more, in this module it says clearly, that "UNLOCK_DMEDDE_SK" mode requires the previously stored key to be input (i.e. what you get as an answer). This is because the unlock mode is there for software development testing and not to give you the stored code.

What if however, you just wrote a random matching key on both devices? I wouldn't think that the VIN is important for the code generation itself, but what do I know from cryptography??:p

 

in my file says that it shows the secret key which is in CAS Module.I'll try it and i'll give you the results!

 

Completely unrelated to the topic at hand, but I couldn't help but notice that all the contributors to this thread have Sparkling Silver MINIs. I wonder if there is some shared personality characteristic which makes us Sparkling Silver owners more likely to be car computer hackers (or vice versa)...

 

Hehe... Good observation. Maybe you have a point there... But in all honesty, I initially wanted an eclipse gray one and ended up with sparkling silver... :p

 

LOL too funny!

 

I just tried it but without results!i get this messages

apiJob("CAS4","_steuern_ews4_seckey","","")

Satz : 0
OBJECT = cas4
SAETZE = 1
JOBNAME = _steuern_ews4_seckey
VARIANTE = CAS4
JOBSTATUS =
UBATTCURRENT = 1
UBATTHISTORY = 1
IGNITIONCURRENT = 1
IGNITIONHISTORY = 1
Satz : 1
JOB_STATUS = ERROR_DATA









apiJob("EWS4_DME","steuern_ews4_sk","UNLOCK_CLIENT _SK","")

EDIABAS Error 19 : IFH-0009: NO RESPONSE FROM CONTROLUNIT




apiJob("CAS4","steuern_ews4",""UNLOCK_DMEDDE_SK"", "")

Satz : 0
OBJECT = cas4
SAETZE = 1
JOBNAME = steuern_ews4
VARIANTE = CAS4
JOBSTATUS =
UBATTCURRENT = 1
UBATTHISTORY = 1
IGNITIONCURRENT = 1
IGNITIONHISTORY = 1
Satz : 1
JOB_STATUS = ERROR_MODE


ALso from INPA i get this



I must unlock the CAS.And i don't know how!

 

What is the "error mode" you get in the last run? By reading the info window, you must provide the Security Key in the data field when unlocking the DME. The function is only implemented for software development i.e. there is no value in having the job tell you the key if you have to specify it anyway. :(

 

Any updates on this thread?

 

yes...Possible if take cas and Ecu out, have tools to read/write cas/ecu.

 

Do you know what tools or softwares they might be. I have INPA, WINKFP, NSC Expert, ISTA/D, ISTA/P and some other ones like progman and DIS. But the car im working on is 2012 R55 (clubman S). ISTA/P bricked the CAS when i was trying to code the DSC. Google and youtube are also good, but i have yet to hit the nail on the head

 

None of these tools will work...

 

With some luck from above, I was able to reset the CAS last night. I also reprogrammed the airbag module that suffered ISTA/P bad programming. The only thing left now is the DSC. I was able to program it with WINKfp but it is still faulty. Perhaps there is more to it than just the DSC module?