Retrofit ACC VW T6

[TMC]

Hello

I am attempting a retrofit of ACC to a T6 transporter. I have changed the ABS pump to the correct type for ACC but I need to modify the coding for the function Front Assist with City Braking w/ACC FTS. Previous function was Front Assist with City Braking w/o ACC.

Original ABS Code is: 307E40986566847E0C7D027CA68921D379F700

Can someone help modify the code?

ABS Part Number: 7E0907975Q (new fitted part) Type MK100ESC.

Many thanks

Colin

 

[PetrolDave]

Often (usually?) the coding of the ABS is also dependent on other modules fitted to the vehicle, so were going to need you to post a full VCDS Auto-Scan (between CODE tags - see my signature how to).

 

[TMC]

Please see the attached. This is with the new unit fitted.

Chassis Type: 7H-VN75 (7E0)
Scan: 01 02 03 04 08 09 10 13 15 17 19 25 5F 61 0B

VIN: WV1ZZZ7HZJH072570   Mileage: 13710km-8518miles

01-Engine -- Status: Malfunction 0010
02-Auto Trans -- Status: OK 0000
03-ABS Brakes -- Status: Malfunction 0010
04-Steering Angle -- Status: OK 0000
08-Auto HVAC -- Status: OK 0000
09-Cent. Elect. -- Status: OK 0000
10-Park/Steer Assist -- Status: OK 0000
13-Auto Dist. Reg -- Status: OK 0000
15-Airbags -- Status: Malfunction 0010
17-Instruments -- Status: OK 0000
19-CAN Gateway -- Status: OK 0000
25-Immobilizer -- Status: OK 0000
5F-Information Electr. -- Status: OK 0000
61-Battery Regul. -- Status: OK 0000
-------------------------------------------------------------------------------
Address 01: Engine (2D2D2-CXHA)       Labels:. 04L-907-309-V2.clb
   Part No SW: 04L 906 056 KG    HW: 04L 907 445 
   Component: R4 2.0l TDI   H02 3771  
   Revision: 23002001    
   Coding: 00254014434501090000
   Shop #: WSC 00046 000 00000
   ASAM Dataset: EV_ECM20TDI03004L906056KG 004004
   ROD: EV_ECM20TDI03004L906056KG_004.rod
   VCID: 7CB40B82F708FCAA7E-8028

1 Fault Found:
25130 - Check Coding of ECUs on Powertrain Data Bus 
          P1647 00 [163] - -
          [Checking coding/versions ofcontrol modules in drivetrain]
          MIL ON - Not Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Mileage: 13718 km
                    Date: 2009.01.31
                    Time: 12:44:25

                    Engine speed: 0.00 /min
                    Normed load value: 0.0 %
                    Vehicle speed: 0 km/h
                    Coolant temperature: 22 °C
                    Intake air temperature: 27 °C
                    Ambient air pressure: 1000 mbar
                    Voltage terminal 30: 11.625 V
                    Unlearning counter according OBD: 40
                    Acceleration: 0.000 m/s²
                    Vehicle speed: 0 km/h
                    Cruise Control System (CCS): status: ERROR
                    Drivetrain coordinator: ACC fault status-ACC is active despite EPB deceleration: No
                    Drivetrain coordinator: ACC fault status-ACC active: although TSK passive: No
                    Drivetrain coordinator: ACC fault status-Start off or stop request at stopping speed not set: No
                    Drivetrain coordinator: ACC fault status-Start off and stop request sent simultaneously: No
                    Drivetrain coordinator: ACC fault status-ACC active: although limiter active: No
                    Drivetrain coordinator: ACC fault status-ACC reactivates itself after locking: No
                    Drivetrain coordinator: ACC fault status-ACC sends undefined signals: No
                    Drivetrain coordinator: ACC fault status-ACC active although main switch off: No
                    Drivetrain coordinator: ACC fault status-ACC is active despite driver braking: No
                    Drivetrain coordinator: ACC fault status-ACC is active despite ESP/ASR passive sampling: No
                    Drivetrain coordinator: brake function status-ABS intervention: No
                    Drivetrain coordinator: brake function status-ESP intervention: No
                    Drivetrain coordinator: brake function status-EDL intervention: No
                    Drivetrain coordinator: brake function status-ASR intervention: No
                    Drivetrain coordinator: brake function status-MSR intervention: No
                    Drivetrain coordinator: brake function status-Driver braking: No
                    Drivetrain coordinator: brake function status-HDC active: No
                    Drivetrain coordinator: brake function status-ESP invokes TSK braking: No
                    Drivetrain coordinator: brake function status-EPB active: No
                    Drivetrain coordinator: brake function status-ASP intervention: No
                    Drivetrain coordinator: brake function status-ADS intervention: No
                    Drivetrain coordinator: brake function status-Stopping distance reduction2 warning jolt: No
                    Drivetrain coordinator: brake function status-ESP sampled passive (ESP off): No
                    Drivetrain coordinator: brake function status-ASR sampled passive (ASR off): No
                    Drivetrain coordinator: brake function status-ESP recognizes vehicle at rest: No
                    Drivetrain coordinator: brake function status-ACC stopping distance control active: No
                    Drivetrain coordinator: brake fault status-Deceleration sensor not available: No
                    Drivetrain coordinator: brake fault status-Deceleration sensor malfunction: No
                    Drivetrain coordinator: brake fault status-ESP system error: No
                    Drivetrain coordinator: brake fault status-ESP system malfunction due to inaccurate engine torque: No
                    Drivetrain coordinator: brake fault status-ESP indicates TSK message consistency error: No
                    Drivetrain coordinator: brake fault status-TSK/ESP handshake error: No
                    Drivetrain coordinator: brake fault status-ESP automatic engagement malfunction: No
                    Drivetrain coordinator: brake fault status-Brake light implausible: No

Readiness: N/A

-------------------------------------------------------------------------------
Address 02: Auto Trans (J743)       Labels:. 0BH-927-711.clb
   Part No SW: 0BT 300 046 J    HW: 0BH 927 711 G
   Component: DSG DQ500-7F  H11 5301  
   Revision: 00H11V01    
   Coding: 0014
   Shop #: WSC 00000 000 00000
   ASAM Dataset: EV_TCMDQ500021 001001
   ROD: EV_TCMDQ500021_VW36.rod
   VCID: 3D32C686AC9235A209-8068

No fault code found.

-------------------------------------------------------------------------------
Address 03: ABS Brakes (J104)       Labels:. 7E0-907-37x-MK100ESC.clb
   Part No SW: 7E0 907 379 Q    HW: 7E0 907 379 N
   Component: ESC           H06 0133  
   Revision: 00000000    Serial number: 61887000000354
   Coding: 00000000000000000000000000000000000000
   Shop #: WSC 00000 000 00000
   ASAM Dataset: EV_Brake1ESCCONTIVN75XGP2 011001
   ROD: EV_Brake1ESCCONTIVN75XGP2_011.rod
   VCID: 40CCBF72DB60584A62-8014

11 Faults Found:
0143 - ABS/ESP Control Module 
          U10C5 00 [137] - No or Incorrect Basic Setting
          [valve calibrating data missing]
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

0195 - Control module not coded 
          U1013 00 [137] - -
          [ECU marked as Not Configured because vehicle ID is invalid]
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

0212 - Longitudinal Acceleration Sensor 
          C1017 54 [137] - Missing Calibration / Basic Setting
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

0270 - Lateral Acceleration Sensor 
          C1079 54 [137] - Missing Calibration / Basic Setting
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

0279 - Brake Pressure Sensor 1 
          C107A 54 [137] - Missing Calibration / Basic Setting
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

0295 - Steering angle sensor 
          B1168 54 [137] - Missing Calibration / Basic Setting
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

0338 - ABS/ESP Control Module 
          U10C5 00 [137] - No or Incorrect Basic Setting
          [inlet valve calibration data missing]
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

4255 - Internal Fault 
          B200F F0 [137] - Unknown Error Elaboration
          [Hecu_mismatch_final]
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 1
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

8297 - Databus 
          U1121 00 [136] - Missing Message
          [ACAN: mIdent signal timeout]
          MIL ON - Intermittent - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 3
                    Fault Frequency: 1
                    Reset counter: 197
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:33

8319 - Databus 
          U1122 00 [137] - Implausible Message
          [ACAN: mMotor_10 Start_Stop coding missmatch]
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26

8324 - Databus 
          U1122 00 [137] - Implausible Message
          [ACAN: LW1_ID wrong value]
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 2
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:26


-------------------------------------------------------------------------------
Address 04: Steering Angle (G085)       Labels:* 6R0-959-654.clb
   Part No SW: 6R0 959 654     HW: 6R0 959 654 
   Component: LENKW.SENSOR  H07 0070  
   Serial number: 03101713470066
   Coding: 01
   Shop #: WSC 00000 000 00000
   ASAM Dataset: EV_LWSKLOVW25X 005001
   ROD: EV_LWSKLOVW25X.rod
   VCID: 7EB0018AE114EEBA50-802A

No fault code found.

-------------------------------------------------------------------------------
Address 08: Auto HVAC (J301)       Labels:| 7E5-907-047.clb
   Part No SW: 7E0 907 047 AK    HW: 7E0 907 047 AK
   Component: Climatic-T5   H22 0708  
   Revision: 00001002    
   Coding: 0000000003
   Shop #: WSC 02739 790 50316
   ASAM Dataset: EV_ClimaticT5 A01003
   ROD: EV_ClimaT5Basis.rod
   VCID: 73A620BEDA56B3D22F-8026

No fault code found.

-------------------------------------------------------------------------------
Address 09: Cent. Elect. (J519)       Labels:. 7E0-937-BCM-V1.clb
   Part No SW: 7E0 937 090 C    HW: 7E0 937 090 C
   Component: BCM PQ25 Max4 H82 0752  
   Revision: B9082001    Serial number: 4000 284170036
   Coding: B9AC393A0A61341193284F747FEB8E750F04710F60CC6D60330400230840
   Shop #: WSC 02739 534 199619
   VCID: 2B16F8DE4AE6AB12A7-807E

   Subsystem 1 - Part No: 5K7 955 559 C  Labels: 5K7-955-559.CLB
   Component: RLS 270917 04  47  0106 
   Coding: 0228EE

   Subsystem 2 - Part No SW: 7E0 959 801 P    HW: 7E0 959 801 P
   Component: J386__TSG_FT  003 0653 
   Serial number: KU0KU026091772690596
   Coding: 1400B0

   Subsystem 3 - Part No SW: 7E0 959 802 P    HW: 7E0 959 802 P
   Component: J387__TSG_BT  003 0653 
   Serial number: KU0KU004101772770455
   Coding: 0400A0

   Subsystem 4 - Part No: 7E1 951 172 
   Component: DWA-Sensor 00  001 0104 
   Coding: 000000

   Subsystem 5 - Part No: 1K0 951 605 F
   Component: LIN BACKUP HO  H01 0008 
   Coding: 000000

   Subsystem 6 - Part No: 7E1 951 172 
   Component: DWA-Sensor 00  001 0104 
   Coding: 000000

   Subsystem 7 - Part No SW: 7E0 959 442 A    HW: 7E0 959 442 A  Labels: 3C8-959-537.CLB
   Component: E221__MFL-DC1  H02 0103 
   Serial number: 29160002249940056441
   Coding: B40000

No fault code found.

-------------------------------------------------------------------------------
Address 10: Park/Steer Assist (J446)       Labels:| 7E0-919-475.clb
   Part No SW: 7E0 919 475 AA    HW: 7N0 919 475 
   Component: PARKHILFE 8K  H06 0212  
   Revision: --------    Serial number: 28231724900983
   Coding: 30810C
   Shop #: WSC 02739 790 50316
   ASAM Dataset: EV_VW75XParkAssis8K 001012
   ROD: EV_VW75XParkAssis8K_001_VN75.rod
   VCID: 71AA2AB6A04A81C2DD-8024

No fault code found.

-------------------------------------------------------------------------------
Address 13: Auto Dist. Reg (J428)       Labels:| 7N0-907-572.clb
   Part No SW: 7N0 907 572 C    HW: 7E0 907 572 
   Component: ACC Bosch PQx H03 0211  
   Serial number: 2409170440ACBC
   Coding: 00005000FE0779
   Shop #: WSC 131071 1023 2097151
   ASAM Dataset: EV_ACCBEGVW361 001006
   ROD: EV_ACCBEGVW361_VW32.rod
   VCID: 3620D9AA89A4E6FAC8-8062

3 Faults Found:
1071 - Databus 
          U1123 00 [009] - Received Error Message
          [FAULT_CIS_AXV_INVALID]
          Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 6
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:25

                    Control Module temperature: 27 °C
                    Voltage terminal 15: 11.5 V
                    Vehicle speed: 0.00 m/s
                    Acceleration: 0.00 m/s²

1058 - Databus 
          U1123 00 [009] - Received Error Message
          [FAULT_CIS_ECD_NOTAVAILABLE]
          Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 6
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:25

                    Control Module temperature: 27 °C
                    Voltage terminal 15: 11.5 V
                    Vehicle speed: 0.00 m/s
                    Acceleration: 0.00 m/s²

1059 - Databus 
          U1123 00 [009] - Received Error Message
          [FAULT_CIS_ESP_FAIL]
          Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 6
                    Fault Frequency: 1
                    Reset counter: 157
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:25

                    Control Module temperature: 27 °C
                    Voltage terminal 15: 11.5 V
                    Vehicle speed: 0.00 m/s
                    Acceleration: 0.00 m/s²


-------------------------------------------------------------------------------
Address 15: Airbags (J234)       Labels:| 5K0-959-655.clb
   Part No SW: 7E0 959 655 G    HW: 7E0 959 655 G
   Component: VW10Airbag021 H08 0018  
   Revision: --------    Serial number: 003V3006F51L
   Coding: 000000000000000000000000000000003231
   Shop #: WSC 02734 790 50316
   ASAM Dataset: EV_AirbaVW10BPAVW12X 001028
   ROD: EV_AirbaVW10BPAVN750_VW12.rod
   VCID: 3A38CD9ABDBC029A2C-806E

1 Fault Found:
9682162 - Multiple collision brake 
          B13BC F2 [137] - No function
          MIL ON - Confirmed - Tested Since Memory Clear
             Freeze Frame:
                    Fault Status: 00000001
                    Fault Priority: 3
                    Fault Frequency: 1
                    Mileage: 13718 km
                    Date: 2018.09.06
                    Time: 12:44:40


-------------------------------------------------------------------------------
Address 17: Instruments (J285)       Labels:| 5K0-920-xxx-17.clb-SRI1
   Part No SW: 7E0 920 970 S    HW: 7E0 920 970 S
   Component: KOMBI         H03 1107  
   Serial number: 00000000000000
   Coding: 450B010300
   Shop #: WSC 02739 790 50316
   ASAM Dataset: EV_Kombi_UDS_VDD_RM09 A05733
   ROD: EV_Kombi_UDS_VDD_RM09_005_VW25.rod
   VCID: 3A38CD9ABDBC029A2C-806E

No fault code found.

-------------------------------------------------------------------------------
Address 19: CAN Gateway (J533)       Labels:. 7E0-909-901.clb
   Part No SW: 7E0 909 901     HW: 7E0 937 090 C
   Component: GW-K-CAN TP20 H82 0752  
   Revision: B9082001    
   Coding: 042307
   Shop #: WSC 02739 534 199619
   VCID: 689C47D29B90400A8A-803C

No fault code found.

-------------------------------------------------------------------------------
Address 25: Immobilizer (J334)       Labels:| 5K0-920-xxx-25.clb
   Part No SW: 5K0 953 234     HW: 5K0 953 234 
   Component: IMMO          H03 1107  
   Serial number:               
   Coding: 000000
   Shop #: WSC 00000 000 00000
   ASAM Dataset: EV_Immo_UDS_VDD_RM09 A03710
   ROD: EV_Immo_UDS_VDD_RM09.rod
   VCID: 6A983DDA8D9C721A9C-803E

No fault code found.

-------------------------------------------------------------------------------
Address 5F: Information Electr. (J794)       Labels:| 5G0-035-MIB-STD2.clb
   Part No SW: 5C0 035 680 G    HW: 5C0 035 680 G
   Component: MU-S-ND-ER    H41 0468  
   Serial number: VWZAZ2T5409046
   Coding: 065700013C00000011111101008808001F0100D6002001004F
   Shop #: WSC 27359 003 104857
   ASAM Dataset: EV_MUStd4CTSAT 001022
   ROD: EV_MUStd4CTSAT_VW26.rod
   VCID: 25020EE624029D6271-8070

   Data medium: 
   Subsystem 1 - Part No SW: 3G0 919 866 BC    HW: -----------
   Component: ECE1 2017/18  --- 0820 
   Serial number: --------------------

No fault code found.

-------------------------------------------------------------------------------
Address 61: Battery Regul. (J840)       Labels:. 1K0-907-534.clb
   Part No SW: 7E0 907 534     HW: 7E0 937 090 C
   Component: Batt.regelung H82 0752  
   Serial number: 4000 284170036
   Coding: 030B1A73
   Shop #: WSC 02739 790 00000
   VCID: 689C47D29B90400A8A-803C

   Subsystem 1 - Part No SW: 7E0 915 181 K    HW: 7E0 915 181 K
   Component: J367-BDMConti  H03 1050 
   Serial number: 7588570000170926060F

No fault code found.

 

[TMC]

The effective change I am making is PR code 8T2 & 6K2 to PR code 8T3 & 6K3.

 

[Sebastian]

Did you get the ACC's component protection already matched? If so, how did you get around the SWaP activation of the ACC functionality?

 

[downtime]

Does T6 even have component protection? I'm under the impression that no. Lot of parts are common to PQ25 platform car like prev gen Polo and Ibiza. Those did not have CP scheme yet.

The new MQB A0 platform Polo, Ibiza etc. introduce that scheme.

This is my understanding so please don't shoot me if I'm mistaken

 

[Sebastian]

Believe me, it does (with the Instrument Cluster as CP Master) - the Transporter/Multivan was always the Frankenstein when it came to the VW parts lego game. Though the bigger problem here is SWaP, hence my question...

 

[downtime]

Ok I didn't know that. Know I do. Thanks for enlightening me.

Yes, SWaP will be an issue then. CP itself won't be a problem if there's no FeC in play but with FeC, weeeelllll... It will be a long and difficult road.

 

[golfi_vend]

I think i have a idea how this can be bypassed, but it's not for public discussion.

I've been using similar technology for retrofitting Discover Media, to cars where it was never available, without adding a emulator or patching the eeprom.
But this would mean i need cluster, radio and radar. All components of CP system.

 

[cilitkas]

are you sure all t6 had CP? i have bought BCM and navi from late 2015 T6, fitted to my 2012 t5 and all works fine, no CP errors...

 

[kamold]

are you sure all t6 had CP? i have bought BCM and navi from late 2015 T6, fitted to my 2012 t5 and all works fine, no CP errors...

PQ platform vehicles' CP scheme doesn't include BCM like it does in MQB platform vehicles..

 

[dnoermann]

So, for PQ25/PQ35 Car's with Component Protection Master inside the Cluster i figured out the Code.
You need a ACC Radar and Cluster which are already configured with the right Swap Codes and CP Data from a working or broken T6 for Example.
It is possible to read out the encrypted Component Protection Data from the Cluster, 20 Bytes @ Offset 0x1540 in Eeprom
Decrypt it, and than Encrypt it for the your Car.
With the Component Protection "Transfered", the Swap Codes from the original Car stays and everything works.
For this you need to be able to read out the 2 Mbyte Firmware of the Cluster @ offset 0x10034 is the 16 Byte CBC AES Key for CP Eeprom Data encryption
@ 0x1540 in Eeprom there are 20 Bytes, first 4 bytes are CRC32 of the next 16 Byte "Data" (but only after decryption)
The AES is only calculated over the first 16 byte.

So do a AESCBC Decryption of Byte 0-15, than you can do a crc32 over Decrypted Byte 4-15 and original Bytes 16-19 from eeprom, this should be identical to Decrypted Bytes 0-3.
Than you can encrpt the data for the new cluster.
Done

Took me 3 Month of Cluster Firmware Reverse-Engineering ....
I am aware that this way of copying the cp Data is already known by some people, but due to for me unknown circumstances this was not made public by them.
I like to share this information now publicly. Be happy with it.

Attached a real Use Case Picture for Better understanding.

 

[dnoermann]

Since i now own a DM i looked again a bit deeper.
Here is the Mapping of the Eeprom Addresses

First number is the Last Data Byte of UDS_WriteDataByIdentifier 0x00BE

0x14 ==> 0x1500 with backup in 0x1520 UDS AES-KEY (used for UDS_WriteDataByIdentifier)
0x57 ==> 0x1540 with backup in 0x1560 ACC
0x73 ==> 0x1660 with backup in 0x1680 DM
0xFF ==> 0x16A0 with backup in 0x16C0 Free, for Future USE