As BMW’s becoming increasingly more complex with with newer complex, digital control electronics, electrical systems, newer ujanja is always needed to fix, sort out certain ujinga!
This is about BMW Keys (immobilizer systems),
and related Control Units (ECU)!
For longer, exorbitant, ujanja about keys,
including how to reset (virginize) systems to accept the first key used after being virginized,
or
how to forever disable or immo off to always accept any keys used!
click here
We compile ECU PINOUTS for every all BMW ECU’s, Electronic Control Units!
These are BMW’s details of about which pin on the ECU connector, specific function, (e.g., ground, power, sensor input, actuator output) carried by each pin.
These BMW’ diagrams help you identify if a problem is with a sensor, a wiring harness or the ECU itself,
click HERE
HAPA UJANJA tu!
Yes, as You know, the immobilizer or anti-theft system verifies that the key used to turn the engine on is the correct one.
If the key is not the correct one, this system blocks different actions to prevent the car from starting, seen🤔?
The car’s computer will disable, the fuel pump, gears’ transmission, the ignition coil and/or the injectors, and depending on the electronic immobilizer system, it could also block the steering column which will lock the steering wheel.
When this system is activated, a warning light such as👇 will turn on!
This is JUST summarizing random points about BMW keys,
for longer extreme details, check ☝☝check hapo juu!
All that mambo jambo, transponders, readers’ coils, immu immo, this that box, everything uko☝☝!
(We’re disorganized, and so are these👇summaries)
Some useless PDF documents are attached below the page!
ONYO📌
MINI, ROLLS-ROYCE, SOZI, and may be some others We don’t know, have some ‘zigzag’ relationship with BMW!
So, You could find some carry-over technology, seen?
BMW’s immobilizer systems, evolve from the original ‘Hakuna Matata’ just Drive Away Protection, through EWS, CAS, to these still evolving modern Frontal Electronics Module (FEM) and Body Domain Controller (BDC).
(BMW’s immobilizer systems could be intra-split into several versions of within a version🧐)
…just, for example,
EWS-7f EWS-7w EWS-7k
CAS-8h CAS-8x CAS-8y 😜
EWS-9a EWS-9b EWS-9c
NOTE🚨,
BMW immobilizer systems can differ by market for the same model, due to varying security regulations and other blaa bla like insurance requirements!
So, the BMW immobilizer versions’ vehicles’ applications can be confusing, just like this statement😂🤣!
For example, these👇 vehicles, S, O, Z, I, all could be looking similar, same brand’s model,
BUT…
S could be having EWS – 5 designed for the JAMAICA market!
O could be having CAS – 0 designed for the GHANA market!
Z could be having EWS – 2 designed for the KENYA market!
I could be having CAS- 1 designed for the BARBADOS…
So, it’s risky to assume, that, just because S looks like O,
so they have the same BMW’s immobilizer ujinga, seen🤔?
The BDC, FEM, CAS, blaa bla confusing long story, is at the bottom
👇
This is how, the story of BMW immo evolution goes…
Imagine a LOCK box, needing a password to OPEN🤔!
X, is a usual key with NO magic!
Y, is a password ‘something’!
OBC, is a Onboard Computer to validate passwords put in, at Y !
Yes, continue imagining🧐!
In this👇 picture below,
…a signal must move from S to I so that the engine can work!
This signal is blocked at O!
Only if you input a correct password,
the signal can be allowed to continue to Z, eventually to I🤷♀️!
Now stop imagining😁,
This is how the BMW engine immobilizer ‘ujanja’ started🤷♀️!
If the authentic owner didn’t want secure their BMW with this password ‘zig zag’,
they would deactivate the OBC so that the signal connects straight from, S, O, Z, I 🤷♀️!
If some ‘mjanja’, the unauthentic owner wanted to connect the signal from S, they would just cut, O, off the OBC, to Z, then.. 🤷♀️!
You realize how using ‘HAPA UJANJA tu‘ this BMW would just easily be taken🤷♂️stolen!
The BMW team had to wake up, start a continuous campaign to always update, dilute their ‘ujinga’ with more ‘ujanja’ 😁😜🤣!
BMW started calling their first ‘ujanja’ as EWS,
which is,
Elektronische WegfahrSperre (System), in their Masai language,
but translates to Electronic Immobilizer System
in the jaLUO😎 language!
So, with BMW, when it’s mentioned, EWS or EIS, it could be about the same nonsense, seen?
EWS1
Below, You see👇 how it would be so ‘mechanical’ & boring for the authentic owner to start their BMW’s engine?
And,
…it was very easy for unauthentic owner to just connect O to Z then drive away!
So, BMW started upgrading this ‘ujinga’, beginning with EWS1
This EWS1 consisted;
👇
F) The previous☝ ‘ujinga’ was still maintained, to control relay C, via F, the OBC!
Z) Extra ‘ujanja’ was added, that only using the correct mechanical key, Z, to lock or unlock the BMW door, would push some switch connected to the EWS1 module, B, and so indirectly enable or disable the relay, C, that interrupted the starter circuit.
J)Automatic transmission vehicles could be started only in selector lever position P/N.
A) Because the system’s deactivation happens (mechanically) through the door lock barrels, a ‘mjanja’ just uses force to hack this, B, the EWS1 system 🤷♂️!
EWS1 became ‘ujinga’, so BMW came up with EWS2!
EWS2
EWS2 was to improve or elimate the ‘ujinga’ on EWS1!
ONYO🚨
There could have been many versions of EWS2 that were tried, BUT, in general, this was EWS2‘s nonsense!
👇
F) The previous ‘previous ujinga’ was still maintained, to control relay C, via F, the OBC!
Z) The previous ‘ujinga’, that only using the correct key, Z, to lock or unlock the BMW door, would now indirectly enable or disable some other security function!
J)Automatic transmission vehicles could be started only in selector lever position P/N.
1) A unique transponder chip was put into Z, the key!
E)The engine’s ECU, computer, E, would now also be involved!
2) The Ring antenna at ignition lock, A, would read & write data, 4, from & to key Z’s transponder chip, 1!
3) The Transceiver module for data exchange would translate for EWS module, B, whatever data, 4, from 1, the transponder chip in the key, Z!
Kindly, let me NOT waste my ‘beer time’ explaining what magic happens, from 1 to 2, 3, for 4 to reach B, the EWS module!
Click HERE for deep nonsense on how immobilizer systems do sh*t!
Continuing with this EWS2 nonsense…..
B) EWS control module verifies whether data, 4, is from the correct key, Z!
5) The details of the ECU, E, must be known to B!
It could be the serial number or some other unique details of the ECU that MUST first be registered, adapted to B, otherwise engine won’t start!
6) Using the serial number registered at 5, the EWS2 module, B, uses this to generate some rolling codes that must be sent and saved in the ECU!
The ECU would later use this code to verify the validity of the EWS2 module that verified the key, before the ECU allows the engine to start!
Long story? 😜😁🤣 maneno mengi?
Again😎, NO, I’m NOT wasting my ‘beer time’ explaining this kind of rolling code nonsense, still Click HERE for the deep nonsense on how jumping codes do sh*t!
Back to our EWS2 story!
This is a summary of what happens in order to start the BMW engine!
👇👇
4) The key immo data, 4, in the transponder chip, 1, is read out via the ring antenna, 2, at the ignition switch, A, into the transceiver module, 3!
3) The transceiver module, 3, translates, cleans, then transfers the key data, 4, via a bidirectional data cable to the EWS2, B!
B) The EWS control unit checks the correctness of the key data, 4, and only then sends an enable signal to the ECU, E, and the starter, D!
4) After the engine start, the EWS control unit generates new key data (variable rolling code) and sends it back to the transponder chip in the key.
6) The enable code, 6, that is generated by the EWS2 module, using the ISN ama serial number of the ECU, then sent and stored in the ECU!
During the next engine start procedure, the next number sent by the ES2 module MUST (may) be of a counter’s incremented by 1,
or matching to some rolling code algorithm, seen🤔?
May be X☝ was the previous code,
the current code, Y, could be 1/2 (half) of the previous code, X! The next code Z, could be Y + 2 😁🤪🤪 whatever that confusing rolling code ‘ujinga’!
Continuing with this EWS2 nonsense..
Yes, after the engine start is allowed,
EWS2 module and ECU change or update to a newer code to agree on to use for next engine start, right🤔?
Sasa, imagine a situation when the engine is stalled immediately just after starting🧐!
It could be caused by, like a problem to do with with no fuel, or could be a drunk driver, kids playing with this BMW by turning the key START then OFF, again START then OFF…. again and again niaga again niaga😁😜🤣!
In such situation, You notice that the EWS2 module recognizes the engine start, then increases & generates a newer rolling code counter🤔?
But because the ECU was busy with the engine start procedure (full utilization of the processor ) that the ECU kinda fails to update & store the updated rolling code that the EWS2 module generated!
If this ‘ujinga’ happens for more than 5 starts, that the code the EWS2 sends fails to match to what the ECU expected, the ECU will refuse to start the engine🤷♀️!
In this case, it is necessary to perform EWS/ECU matching via the diagnostic interface.
5) As part of this procedure, 5, the ECU transfers and stores it’s ISN in the EWS control unit.
6) The two counters are also reset to some new coding to agree on next!
7) With the aim of protecting the starter, the ECU transfers the engine speed signal and other parameters to disable the relay, C!
This EWS2 blaa bla is more like the common immobilizer system, BUT, with a rolling code!
Usual components, immobilizer ECU (immo box), Transponder in the key, kama kawa🤷♀️!
EWS 3, and ++
Because there so many (minor) versions’ variations of within EWS3, so to save my ‘beer time’, I may be writing as EWS3++ to mean all other versions of EWS3, seen?
Remember 👇the EWS2 🤔?
Sasa, EWS3 👇 has same nonsense like EWS2 ☝!
BUT…
Unlike before☝ with, 3, in EWS2,
…the EWS3 👇 no longer has a separate transceiver, 3!
Gateway module, K, was also introduced!
The EWS3 now reads in the key data from the transponder chip directly via the ring antenna.
Some major version of EWS3 is theEWS3.3 👇
EWS3.3 has a different matching procedures between the EWS and ECU.
The details of the EWS, and some other data of that BMW, would now instead be written to the ECU!
6) This ‘engine-start’ enable code contains information on the EWS control unit that is compared with the already programmed information in the ECU.
If the sent data is OK, then ‘Hakuna Matata’ the ECU allows the engine to start!
Note:
Just changing, swapping the control unit from another vehicle would no longer be possible.
EWS4
Imagine the EWS3 set up🤔,
but with the modules’ EEPROMs, memories biased to keeping the EWS or ECU data, only once, and only one specific BMW’s data can be kept in a specific module!
All being kinda (selfishly) managed by BMW🤷♀️!
Note:
Just changing, swapping the control unit from another vehicle is just only possible at midnight, only🧐.
CAS
CAS, means Car Access System!
In summary,
imagine all the functions of the, EWS, DWA, and some other Gateway module’s functions,
all bundled in the CAS module🤷♂️!
Including, key authentication, immobilizer control, central locking, start/stop button coordination, and etc!
There are millions of CAS versions, but all be playing about the same ‘ujinga’, using different components & algorithms!
For example☝, 1Z was the key used in early versions of CAS, then 2Z, 3Z which is even used in the recent FEM nonsense as We shall keep on informing You!
In general, the CAS module performs;
…the Key authentication to verify the identity of the key using encrypted signals before allowing the car to start.
…the Immobilizer activation where it disables the engine if an unauthorized key is detected.
…the Central locking function that manages the locking and unlocking functions of the vehicle.
…the Start/stop button coordination to ensure the seamless operation of the ignition process for BMW’s with a push-button start.
…the Gateway function of being between different data buses, controlling the status of electrical systems, also …communicating with other systems to synchronize vehicle functions and authorize the start sequence.
..and obviously the CAS stores the coding that defines the BMW’s features and functions.
Using this CAS3 setup, for example!
So many other systems’ modules attached to the CAS module!
Together with the ECU, O, afer the CAS module, A, verifying the validity of the key, K, the CAS module also verifies with the EGS!
EGS is ‘Elektronische GetriebeSteuerung‘ in ‘Masai’ language, which translates to or ‘Electronic Transmission Control‘ (ETC) in jaLUO langauge!
ONYO🚨
I used just the EGS for example, but there could be so many other control units that may have to also verify with the CAS module and or engine ECU, before the engine is allowed to start or even moving🤷♂️!
The CAS4 👇 could be having similar nonsense as exampled with CAS3☝ above,
but with different modules, and probably with SMART KEYLESS ‘ujanja’!
Could be a different algorithm that now all the associated units, the CAS module and ECU and EGS, all have to verify each other🤷♀️
Alafu, to combat theft, BMW started designing the immobilizer systems using complex, encrypted security codes that are unique to each BMW, and their ‘other coding secrets’ kept on the BMW data servers!
Meaning,
…when programming BMW’s recent keys, whatever tool you’re using must connect to the internet so as to access the BMW’s database, to first be verified then provided with the unique security information needed for the programming.
Otherwise just know that BMW just plays about with different control units for engine’s immobilization🤷♀️!
As We continue, to FEM, BDC, SOZI, and others,
if You have useless time to waste, You may want to first watch this 👇 rubbish, boring video, although demonstrating all the BMW nonsense🤪😜🤣
HAPA UJANJA tu😎!
FEM & BDC NONSENSE
FEM is the Front Electronic Module, alafu BDC is the Body Domain Controller, which are both are integrated control to manage recent BMW’s electrical system and body electronics!
To make longer story shorter,
Just like how the CAS module was introduced to combine the functions of several older modules, improving efficiency and security.
The FEM was first used, then the BDC!
The BDC integrates all the functions of the FEM plus additional responsibilities like making sure the beers in the BMW’s fridge keep cold😜😁!
There are many functions of the FEM/BDC system, including,
Being as a central gateway module (ZGM) connecting all of the vehicle’s bus systems (e.g., FlexRay, CAN, LIN) to allow communication between different control units.
Obviously being as a central component of the BMW’s immobilizer system.
As in, to store security and immobilizer data that must match the engine and transmission control units to allow the BMW to start.
That nonsense of Access and Authorization, managing functions related to keyless entry, central locking, and the push-button start.
I swear, I’m tired of writing😢, I will continue badae!
Meanwhile, AND kindly, be doing extra research, as if it’s Me to benefit, …manyooko😁😜🤣!
Anyway, You can also do some extra research to realize how FEM BDC system also helps to manage and distribute power to the various electronic components throughout the front of the vehicle, optimizing energy usage. like controlling both interior and exterior lighting, Window and Door Control, Wiper and Wash System, Climate Control, Electrical Mirrors!
May be whatever is causing You believe MUST do some nonsense to the vehicle, is some minor external problem with the sensors or actuators🤷♂️!
So, this ujanja is how to check, verify all the control electronics in the vehicle, are in proper order!
click here
👇
IMMO OFF files 
☝☝
click
These files to disable immobilizer system so the ecu accepts any random key used!
HAPA UJANJAtu, hii ndio jinsi ya kugundua, kupata na kupima componets za ECU, kisha suluhisha shida hiyo. inshaAllah👇
Click Here
bonyeza HAPA
ECU cloning, duplicating or switching memory data’s,
flash memory data, EEPROM memory data, jogolize data,
HAPA UJANJA tu!
click HERE
WinOLS ni programu yenye uchawi wa kuwezesha kubadilisha, kurekebisha data iliyomo kwenye ECU.
Ina maana unaeza kutoa/kuzima hizo mifumo zenye usumbufu kwenye gari, zikiwemo IMMOBILISER (kufanya immo off). kutoa DPF, EGR, ADblue, kubadili TURBO zenye umeme, yaaani inafanya kazi nyingi kama ECU tuning, uamuzi ni wako tu🤷♂️!
Click HERE
Ujanja wa EEPROM work ni muhimu, ukitaka kumbuka niaje,
…bonyeza HAPA UJANJA tu
