Shift Pointers
- Author: Michel Schmets
- Subject Matter: Programming
- Issues: Programming vs. tuning, cloning
Part 3 in a series
In this installment, I will go over the differences between programming and tuning as well as cloning modules.
(Re)programming and tuning do share some similarities but are very different and shouldn’t be mixed up. As told in the previous chapter, the program contains a lot of info including the mapping. This mapping is basically the way the car drives “transmission-wise.” This mapping contains stuff like shift speeds, TCC strategy and speeds, shift firmness and pressures.
Whenever we talk about tuning, it revolves around this mapping. The data in mapping is then changed to suit the driver’s wishes, increased power output or even reduce wear by lowering shift times or modifying TCC control (PWM to on/off for example). But the base of the software stays the same. No bug fixes or software advantages will come across with pure tuning. Tuning will only modify the mappings to change the way the transmission will shift.
If you reprogram or tune a module, you have to have access to the memory using the OBD connection. Most manufacturers will inhibit this access and protect it with some sort of security. This can either be a password or a “seed key” that is sent to the ECU at the start to gain full access to the memory. These passwords or seed keys are only known by the manufacturer and aren’t shared with the public or aftermarket. Tuning companies will reverse-engineer the original software and hardware to discover these keys and encryptions to get full access to the memory. Some aftermarket tools like VagCan Pro has reverse-engineered these procedures to allow users to program these units without the need of the manufacturer’s software or online portal. This will give you the ability to program these units offline without paying additional time-based fees.
And since most manufacturers require you to pay first before you can even see if there is an update, packages like VCP gives you the ability to update programming offline. This way you don’t spend money to find out you are already running the latest software version. Having this option gives you a great advantage over other shops as you can advertise with the fact that you update the software to the latest version without breaking the bank.
Unfortunately not every key or password can be reverse-engineered. In some cases the seed key is calculated real-time by the manufacturers’ server, and the file transfer is fully encrypted. It’s also possible that the files themselves are encrypted, making it nearly impossible to gain full access through OBD. In that case there are other options that can be explored. By opening the unit and connecting the interface directly to the CPU, the operation mode can be changed from normal to Demo/Boot mode. In this mode the CPU will accept new programming and will give you full access. This full access includes memory and EEPROM memory. This makes this method not only suitable for tuning, but also cloning.
Cloning of modules
You probably heard of this procedure before as a valid alternative for a new module. As this is nearly impossible using the manufactures approved tools, we will only briefly touch this subject.
As we discussed before it’s possible that the module is part of the immobilizer system. Putting a new or a used module in a setup like this will prevent it from starting. This makes a used module a big paperweight when you want to use it in a different car. To give these used modules a second life, they can either be reprogrammed with a virgin file, making it identical to a new module, or it can be used to be cloned.
When the original module fails, but communication is possible, cloning it might be a possible solution. In that case the original module will be read. The complete memory, EEPROM and microcontroller data are read out.
This is then programmed into a different (used or new) module, making it identical to the original. This method is often used on new modules as new modules sometimes need to be “unlocked” by the dealer. By cloning it, you save yourself a trip to the dealer.