Q7 4M ABS Module Coding

   #1  

andyhud

Verified VCDS User
Verified
Joined
Mar 6, 2016
Messages
191
Reaction score
81
Location
UK
VCDS Serial number
C?ID=32695
Hi Everyone,

I have been in the process of retrofitting the Direct TPMS System with the 433Mhz Tyre valves (PR Code 7K3) to my 2016 Audi Q7 4M. Unfortunately its not an option in the UK, we just have the standard TPMS

The actual module itself is installed (shows up as Module 65 in AutoScan), plumbed into Extended CAN and registered in Can Gateway, however the 2 TPMS systems (the factory one I have by default and the Direct TPMS system) seem to be fighting against each other as the MMI screen flashes between both systems forever and Virtual Cockpit beeps constantly :facepalm:

We have worked out the differences in coding need to be changed in the 03 ABS Module by looking at multiple Q7 4M's that have Direct TPMS from factory against Q7 4M's that don't and we have 2 bits we want to change, but unfortunately getting past the security of this ABS module is causing us a road block.

Here is a Q7 4M ABS Module that does not have the Direct TPMS module from factory:

Code:
Address 03: ABS Brakes (J104)       Labels:. 4M0-907-379-PRE-V1.clb
   Part No SW: 4M0 907 379 K    HW: 4M0 907 379 K
   Component: ESP9 Premium  H08 0521  
   Coding: 249830B230A30A9DD6A5589A187E52AAE6A6D2240C0C506B1A184A5567654B
   Shop #: WSC 29897 001 1048576
   ASAM Dataset: EV_ESP9BOSCHAU736 011006
   ROD: EV_ESP9BOSCHAU736_AU73.rod
   VCID: 3FCE8FF1A6BB6DBD8C-806A

And here is a Q7 4M ABS Module that does have Direct TPMS module from factory:

Code:
Address 03: ABS Brakes (J104)       Labels:. 4M0-907-379-PRE-V1.clb
   Part No SW: 4M0 907 379 K    HW: 4M0 907 379 K
   Component: ESP9 Premium  H08 0521  
   Coding: 289830B230A50A9B96A25896008412A2E6A6DA140C0C50691A00484567655B
   Shop #: WSC 14642 002 1048576
   ASAM Dataset: EV_ESP9BOSCHAU736 011006
   ROD: EV_ESP9BOSCHAU736_AU73.rod
   VCID: 3FCE8CFAA631C3BC1E-806A

Our issue is when we try to change these bits to see if is what is causing the 2 TPMS systems to fight with each other, we get denied errors in VCDS. We have been working with Ross-Tech on this (thanks Dana!) but come to a dead end so figured I'd reach out to the wider Ross-Tech Forum group for any thoughts/assistance.

We have a large number of Security Codes we have gathered over the last 12/24 months but none appear to allow us to change the ABS module long coding. We have also tried to change the bits separately, as well as changing both bits at the same time - both end with the same failure end result when trying to "Do It"

This is the error we get:

"Coding Rejected
Error 13: Incorrect message length or invalid format"

2018_07_31_22_25_44.png


I should point that if we open long coding of the ABS Module (Module 03) and just copy and paste the long coding without changing it and without entering any security codes, it accepts it and says "Coding Accepted".

This is all being tested with the latest version of VCDS and the HEX-NET interface running the latest firmware.

Any thoughts, opinions, comments would be appreciated.

Cheers

Andy
 
Last edited:
   #2  

Uwe

Benevolent Dictator
Staff member
Joined
Jan 29, 2014
Messages
31,629
Reaction score
22,594
Location
USA
VCDS Serial number
HC100001
We have a large number of Security Codes we have gathered over the last 12/24 months but none appear to allow us to change the ABS module long coding.
Is it safe to assume that you have checked:
IDE00323 -- Security Access: Number of invalid keys
and it has been 0 each time?

-Uwe-
 
   #3  

NEtech

VCDS Distributor
Joined
Feb 7, 2014
Messages
2,305
Reaction score
3,721
Location
Denmark
VCDS Serial number
C?ID=56995
Copy this label file to: C:\Ross-Tech\VCDS-Beta\Labels\User
Has to be used with Beta 18.7.0

If not already, First write numbers for wsc, importer, device no. described here
[Save]
[Close VCDS]
Start VCDS

Use Secure Access and test this coding:
Code:
2430300AD6581852AAE6A6DA240C0C506B1A184A5567655B
 
   #4  

andyhud

Verified VCDS User
Verified
Joined
Mar 6, 2016
Messages
191
Reaction score
81
Location
UK
VCDS Serial number
C?ID=32695
@Uwe - Yes, we have checked these are 0 and in addition we have tried by leaving car overnight, long drives etc to ensure that Channel is 0 before "testing again"

@NEtech - Thankyou. We have the custom label file already thanks to Dana and the Secure Access code but it didnt work with that, I should have clarified.

That being said, we have not validated the WSC Importer details etc first so will check this, thankyou

Finally your coding string below is a lot less in size than the standard one, is that right?

Yours:
Code:
2430300AD6581852AAE6A6DA240C0C506B1A184A5567655B
Ours:
Code:
249830B230A30A9DD6A5589A187E52AAE6A6D2240C0C506B1A184A5567654B

Thanks again for your support

Andy
 
   #5  

NEtech

VCDS Distributor
Joined
Feb 7, 2014
Messages
2,305
Reaction score
3,721
Location
Denmark
VCDS Serial number
C?ID=56995
We have the custom label file already thanks to Dana and the Secure Access code but it didnt work with that, I should have clarified.
It is tested and works.
Use the label file.
Use the WSC etc.
Charger
Ign. OFF > Ign. ON
Go

Finally your coding string below is a lot less in size than the standard one, is that right?
Yours:
Code:
2430300AD6581852AAE6A6DA240C0C506B1A184A5567655B
Ours:
Code:
249830B230A30A9DD6A5589A187E52AAE6A6D2240C0C506B1A184A5567654B

Yes that is correct, also see what you wrote above:
"Coding Rejected
Error 13: Incorrect message length or invalid format"
 
  • Like
Reactions: Uwe
   #6  

andyhud

Verified VCDS User
Verified
Joined
Mar 6, 2016
Messages
191
Reaction score
81
Location
UK
VCDS Serial number
C?ID=32695
Understood NETech, I'm just a little confused because a factory Q7 with Direct TPMS has the same length coding as the non-Direct TPMS Q7.

What am I not understanding? :)

Thanks

Andy
 
   #7  

NEtech

VCDS Distributor
Joined
Feb 7, 2014
Messages
2,305
Reaction score
3,721
Location
Denmark
VCDS Serial number
C?ID=56995
It get the same original length after coding with the shorter.
It is without VIN coding.
 
  • Like
Reactions: Uwe
   #8  

peng shun jiang

Verified VCDS User
Verified
Joined
Aug 10, 2018
Messages
8
Reaction score
2
Location
China
VCDS Serial number
C?ID=295642
Friend, this question is too simple. If you need help, please contact me.
 
   #10  

A4Allroad

Verified VCDS User
Verified
Joined
Oct 20, 2017
Messages
7
Reaction score
8
Location
Italy
VCDS Serial number
C?ID=289256
andyhud, if you wanna try:

Address 17 - Byte 04 - Bit 0=0
Address 17 - Byte 03 - Bit 7=1
Address 03 - Byte 14 - Bit 6=0
Address 03 - Byte 26 - Bit 1=0.

The last two codings needs to be performed with other diagnosis (V*P) in a one shot way: copy the 03 original coding from fast-editing field, modify by hand the single bits, and paste the modified coding in the fast-editing field... together with original info as WSC, Imp. and Tester. Then start coding..... For me this procedure has worked....
 
   #11  

andyhud

Verified VCDS User
Verified
Joined
Mar 6, 2016
Messages
191
Reaction score
81
Location
UK
VCDS Serial number
C?ID=32695
andyhud, if you wanna try:

Address 17 - Byte 04 - Bit 0=0
Address 17 - Byte 03 - Bit 7=1
Address 03 - Byte 14 - Bit 6=0
Address 03 - Byte 26 - Bit 1=0.

The last two codings needs to be performed with other diagnosis (V*P) in a one shot way: copy the 03 original coding from fast-editing field, modify by hand the single bits, and paste the modified coding in the fast-editing field... together with original info as WSC, Imp. and Tester. Then start coding..... For me this procedure has worked....

Thankyou A4Allroad for your input, I've PM'd you.

Andy
 
Top