UPDATING OF FIRMWARE Rev. 2 - Początek - JMA Polska.€¦ · · 2015-09-21UPDATING OF FIRMWARE...

UPDATING OF FIRMWARE Rev. 2.00

1. Copy of TPX4/TPX5 in PC Remote Mode.

From now on, you can make the copy of any Philips Crypto II over a TPX4/TPX5 using TRS EVO PC Software, and also save those data into your customers database.

The copy procedure is similar to the used one in manual:

1. Read OEM Key ID. 2. Insert TPX4/5 to enable Write button and then, press it. 3. Automatic Cloner Enable. 4. Read Again OEM Key ID 5. Enable Sniff mode of TPX4/5. 6. Collect and store vehicle data. 7. Start secret key searching procedure. 8. Proceed with the copy of the TPX4/TPX5. 9. Store automatically all the info into Database.

If we compare both copy methods, Automatic/Manual, one of the main advantages of the Automatic one is that once you have all the key data stored into PC Software customer database, you can clone that Original customer key, as many times as you want, even though customer have lost all the vehicle keys. Mandatory condition to make a copy without original key:

Have completed at least one successful copy of any previously working key in that vehicle, in the same establishment and performed in remote PC mode. Data saving is automatically done providing that Copy have finished successfully.

2. Temic Crypto TP17 (8C) Copy.

From now on, a more detailed read and also the copy, is available for TEMIC CRYPTO TP17 (8C) over JMA copy transponder TPT1. Some models of brands FORD,MAZDA and PROTON, bring this transponder. In the following table it is showed a key reading in an EVO and also TXT related:

TP17

TP17 Temic Crypto Copy on TPT1

Temic Crypto Wedge. MAZDA/FORD/PROTON.

ID: 3C 45 9D 33 Code Reading Example: TP17 / ID 8C

In the next table, it is shown car models and JMA key reference related with this transponder:

BRAND MODEL YEAR JMA KEY FORD RANGER 2006 - MAZ-11.D.P

MAZDA 121 1999 - 2001 MAZ-11.D.P

MAZDA 323 1999 - 2003 MAZ-10D.P

MAZDA 626 1999 - 2002 MAZ-9D.P

MAZDA BT-50 2006 - MAZ-11.D.P

MAZDA DEMIO 1999 - 2002 MAZ-11.D.P

MAZDA MIATA 2001 - 2005 MAZ-11.D.P

MAZDA MPV 2000 - 2006 MAZ-11.D.P

MAZDA MX-5 2000 - 2005 MAZ-11.D.P

MAZDA PREMACY 2000 - 2004 MAZ-11.D.P

PROTON 415 1998 - MIT-8D

PROTON 416 1998 - MIT-8D

3. Detailed acknowledgment of TP32 Sokymat Crypto.

From now on, it is displayed a more detailed reading of this transponder which was used before in some few HONDA and AUDI and recently it was introduced in some new CHEVROLET.

TP32

TP32 Sokymat Crypto II See manual TP

Sokymat Crypto Glass. AUDI/HONDA/CHEVROLET.

ID: 3C 45 9D 33 Code Reading Example: TP32 / ID 8D

4. PC-TRS EVO Communication Encryption.

From now on, all the communications between PC Software and TRS EVO will be encrypted. From customer point of view, all this new feature is transparent. There is no modification into well known working feature neither in TRS EVO nor into PC Software.

5. Serial Number of JMA TPX family transponder Reading.

The reading of this S/N brings to JMA an exact traceability of the item just in case there would be a quality issue related with any TPX family transponder. Prior to proceed with the traceability reading, customer must ask for an activation code to technical support service which enable reading TPX menu. Thus, once enabled the traceability menu reading, this remain always active for that PC / EVO.


1. Small firmware corrections and improvements.

1.1. A minor issue was fixed related with TPX4 and TPX5 cloning. If there was a Cloning failure, the error type X didn´t appear before (could being X a number from (0-9) or a character from (A-N)). Now Error Type is showed right again.

1.2. From now on, Whenever a TRS EVO detects a clonable TP08, the text "Copy On TPM1" will be showed on the screen, focus on the JMA chip base copy transponder to use. Previously it only was showed "See manual TP" for both cases. The next Screen has not been modified and shows "Insert New Key/Press Copy" if the original key is clonable or "Ready to Read/Press Read" if not.

TP08-Megamos Cry ID 21DF3F7A MGI

UM1 A0478765 WD1-WD0 Copy on TPM1

Ready to Copy Press COPY

1.3. According to the suggestions made by some customers about the short time of screen data presentation, a delay has been added. To exit from timing, you just only must press any READ/COPY button.


1. Cloning of the TP08 / ID48 on certain models.

As from this revision, some of the TP08 / ID48 that are mounted in the models of the following brands can be cloned:

DAEWOO / CHEVROLET / KIA / PONTIAC

Below, we show the reading of the chip used to copy over in the TRSEVO, as well as the associated texts:

TP08 TP08 Megamos Cry

ID 3155DE60 MGII Megamos Crypto Crystal Copy base blank TPMG1

UM1 A7328765 WD1-WD0 UM2 AAAAAAAAAAAAAAAA Example of code TPMG1 / ID 48

The JMA chip on which we want to make the copy is denominated TPMG1. At the moment, cloning will only be available in the TRS 5000 EVO. The models containing the mentioned chip are as follows:

BRAND MODEL YEAR JMA KEY CHEVROLET AVEO 2006 - 2008 DAE-4D.P1

CHEVROLET KALOS 2006 - DAE-3D.P1 CHEVROLET LACETTI 2006 - DAE-3D.P1

CHEVROLET SPARK 2008 - DAE-4.P1

CHEVROLET TACUMA 2006 - DAE-3D.P1

DAEWO KALOS 2002 - DAE-3D.P1

DAEWO LACETTI 2002 - DAE-3D.P1 DAEWO LANOS 2002 - DAE-4D.P1

DAEWO LEGANZA 2000 - DAE-4D.P1

DAEWO MATIZ 2001 - DAE-6.P

DAEWO NUBIRA 2000 - DAE-3D.P1

DAEWO TACUMA 2002 - 2006 DAE-3D.P1 KIA CARNIVAL 2000 - KIA-2D.P

KIA CLARUS 1998 - 2001 KIA-2D.P

KIA PRIDE 1999 – 2001 KIA-2D.P

KIA SEDONA 1999 - KIA-2D.P

KIA SHUMA 1998 - 2000 KIA-2D.P KIA SPORTAGE 1999 – 2001 KIA-2D.P

PONTIAC G3 2006 - DAE-4D.P1

2. Small corrections and improvements

2.1. From now on, it is possible recognize in the TRS EVO, the new passwords (D0-D4/ 90-94 / 34 / B4 and 98) inserted in some of the new TOYOTA/LEXUS smart keys. Thus, taking apart those RKE/PKE Keys from cloning process we completely avoid the waste of TPX2 on failed copies. This problem would not have consequences on TPX5 which is rewritable as many times as we want. Then, it is displayed the reading of one of these keys:

TPxx TOYO/LEX SMART KEY

CaNot be Duplicated Texas Cod. Crypto. 4Gen. Electronic PCB.

PW: 98 ID: 6F E4EA40 MC: 2A LCK: 1111 DST80 Example of code in a TEX-MA / ID 6E-F4

This new smart keys (Electronic simulation of the transponder) are used together with push button starting systems. Usually most of these remote keys are PKE (Passive Keyless Entry) typed. In the following picture we can see one of those LEXUS keys.

This another smart key belong to TOYOTA.

Another example of those new TOYOTA PKE keys is the following one, which reading is slightly different from previous TOYOTA one:

There are a new generation of (RKE/PKE) keys inserted into most of the new TOYOTA/LEXUS launched models during 2013/2014, which are not detected by the EVO yet. They are understady.


1. Introduction of the new multi-configurable Transponder TPX5

As from this revision, the TRS5000 EVO is capable of copying the transponders of the following families:

TP12 / PCF794x (Philips Crypto) TP06/19/20/21/26/27/28/29/30/31 (Texas Crypto) T02/07 (Texas Fixed)

This transponder commercially denominated TPX5, will have the same functional features as the TPX1 / TPX2 and TPX4, but combined on one crystal format, multi-configurable chip (allowing the cloning of different families with different protocols). In addition, it has the advantage of overwriting as many times as needed (which the TPX2 did not have). By default, the TPX5 has a factory-defined configuration (Texas Fixed Mode). The client does not have to worry about changing the operational mode of the TPX5 in function of the key to be copied, because automatically after recognising the key, if changing the format of the TPX5 on which we want to overwrite is necessary, the process is done autonomously and transparent for the client.

Below, we show the reading of the mentioned key in the TRSEVO , as well as the associated texts:

TPX5 TPX5-BLANK

Copy over TPX1/TPX5 TPX5 TEXAS FIXED Crystal Format.

ID: 00007E24A7077F 6B9F00011B947E0000 Example of code TP02-ID 4C over TPX5

2. Recognising the Texas Crypto transponder of the TOYOTA PRIUS

From now on, the 2nd generation Texas Crypto transponder (DST40) inserted in the PROX/NO PROX keys of the TOYOTA PRIUS for the models between 2004-2009 can be recognised.

BRAND MODEL YEAR JMA KEY TOYOTA PRIUS 2004 - 2009

For a correct reading, the key does not have to be introduced into the antenna hole like in the most of the keys but it must be placed like showed into below picture, perpendicular to the antenna hole.

This is because unlike the most of the keys where transponder is located longitudinally and parallel to metallic blade, in the case of this key, the transponders is placed parallel to remote buttons and on the side opposite to emergency key extraction finger grip.

Below, we show the reading of the mentioned key in the TRSEVO, as well as the associated texts:

TPxx TOYO/LEX SMART KEY Copy over TPX2/TPX5

Texas Crypto Code 2Gen.Wedge/Prox Toyota Prius.

PW: 34 ID: 0A 76083B MC: 10 LCK: 1111 DST40 Example of code TOY/LEX-DST 40 / ID xx

With our TPX2/TPX5, we will cover remote controls that do not have the “smart Entry” access (black Toyota logo) and those that do have the mentioned access (silver Toyota logo).

Once the copy has been completed over TPX2/TPX5, JMA key always must be inserted into learning/programation slot to start the engine.

If the vehicle has the SMART ENTRY option and we only have the JMA key, it would be convenient to deactivate that function, (SMART ACCESS).

Below we describe the disconnection procedure.

The start with the new JMA key (TOYO-xx.Px), (always excluding the Smart Entry function that cannot be used with our key) can be done in 2 different ways (the same as the original), and these are explained below:

Without SMART ENTRY and without pressing Brake.

Without SMART ENTRY and pressing the brake

Some of the models where this key has been detected are:

3. Recognise and copy the Texas Fixed (TP02/4C) in R/W mode.

As from this revision, the Texas Fixed transponders (TP02/4C) can be copied on our TPX1/TPX5 in R/W format. Until now, the (TP02/4C) could only be cloned in reading format. Both have 64 bits of memory, but the starting and finishing headings are different. Below, we show the reading of the mentioned key in the TRS EVO , as well as the associated texts:

TP02 TP02 Texas R/W

Copy over TPX1/TPX5 Texas Fix Code. Wedge Format.

TI ID: 00007F8921B008 01089D6276D87F8900 Example of code TP02-ID 4C R/W.

4. Introduction of new READING/WRITING Menu for TPX2.

A new Menu which enables READ/WRITE over TPX2 has been inserted only in the new TRS EVO PC Software. We could see in the following picture, Texas Crypto layout and the different information fields as well as the READ/WRITE buttons that enables only the copy over TPX2.

5. Introduction of a new language

As from this revision, a new language is introduced; Czech. For now, it will only be available in the TRS 5000 EVO


6.1. Modify the reading/Copy of the old TP03-ID 13 of DAEWOO that were installed on some models like the Aranos (1995-1997), Espero (1995-1997), Lanos (1997-2002), Leganza 1997-2002), Matiz (1998-2000), Nexia (1995-1997) and Nubira (1997-2000). The copy is done on TP05.

6.2. Correct the final screen shown for both the TRS5000 as well as the TRSEVO when it is not possible to find the secret code of an original Texas Crypto key. When the statistical algorithm is not capable of finding the secret code, the message that should appear would be “KEY NOT FOUND” instead of the multiuse message “COPY ERROR” that usually leads to confusion. The reasons for showing “COPY ERROR” can be from a defective chip to the previous use of the TPX2, which now makes a later copying on the same impossible.

6.3. Automatic detection of the Display type assembled for the TRS EVO. Maintaining the READ key pressed, during the start of the TRSEVO, the type characters of the second Display configuration language are displayed, Japanese, Cyrillic, Chinese, etc.

6.4. Modify the Reading/Writing procedure of some key used in Piaggo/Peugeot/Gilera bikes.

OEM keys bring a TP04 – ID11/ID12.


1. Redesign of the TP16 transponder copy procedure

From now on, it will be ONLY possible to clone the TP16 in PC mode.

This has been decided so that when any problem occurs during the reading phase of the original key (removal of the OEM key before the scanning period has finished, erroneous readings due to the insertion of original key together with other metallic keys or a keying that can distort the reading, introduction in the area of influence of the power source, etc.) all these cause copy errors that can only be resolved using the REGENERATE TP16 key function, implemented in the PC software.

Once this erroneous key is introduced in the start switch and the start-up of the vehicle is tried, the safety module is activated and on occasions does not allow starting even with the OEM key. Removing the battery terminals of the vehicle for 5 min, will cause the resetting of the computer (ECU) and returning to the original settings. However, if even then, the original key does not work, it will have to be re-programmed.

Therefore, we developed the REGENERATE TP16 function that is only available in PC Function.

The list below shows the vehicles and models affected:

BRAND MODEL YEAR JMA KEY

PEUGEOT 206 1998-2000 TPH1NE-36.P2

PEUGEOT 406 1999-2001 TPH1NE-51.P2

NOTE 1: Only the last TP16 key to be read can be regenerated. A previous reading has to be done to proceed with the regenerating function. If we read a TP16 with an ID X value, (it is automatically stored in memory) and we introduce another TP16 with a different ID value, we cannot regenerate the key.

NOTE 2: The copying sequence of the TP16 has been changed and is now as follows:

Copy WITHOUT PC:

When introducing the original key, the display will only show the type of TP introduced and will not allow the copy unless the TRSEVO is connected to the PC.

TP16 Phil Cry PG Copy only in PC

Insert key Press READ

When the TRSEVO is connected to the PC, as soon as the original key is introduced, the programme starts the search for the secret code. THIS IS THE PROCESS DURING WHICH THE CLIENT SHOULD NOT REMOVE THE ORIGINAL KEY UNDER ANY CIRCUMSTANCE

At this point, the information of the key has been automatically saved in the external eeprom and the secret code is available for proceeding with the copy on a blank TPH1.

After the PC software automatically detects the introduction of a TPH1, the WRITE KEY button will be activated to proceed with the copying.

Reading of Data… Please wait….

Reading OK. Remove the key.

Introduce the key to be programmed

Press “WRITE KEY” to start the programming.

Writing the key….. Please wait…..

The writing has been correct.

Copy WITH PC:


1. Recognition of the new Texas Crypto transponder for IVECO

From now, the new Texas Crypto 3rd generation (DST80) transponders inserted in the most recent models of IVECO can be recognised. This new transponder is an evolution of the old TP28 DST40 also used by SUBARU and MITSUBISHI, and that in this new version has been programmed with the new DST80 algorithm. Below, we show the reading of the mentioned key in the TRS EVO, as well as the associated texts:

TP28 TP28 Texas Cry. MIT2 Cannot be duplicated

Texas Crypto Code 3Gen.Wedge IVECO/SUBARU/MITSUBISHI.

PW: FF ID: 00 FC0BDB MC: 16 LCK: 1010 DST80 Example of code TP28-DST80 / ID 6E-MA

Some of the models where this key has been detected are:

BRAND MODEL YEAR JMA KEY IVECO EUROCARGO 2008 - FI-16.P

IVECO STRALIS 2008 - FI-16.P

2. Small modifications and improvements

Taking advantage of the introduction of the new IVECO keys, the firmware for the detection of the algorithm of the DST 80 in Ford has been modified. This way, avoiding that the new key in models like FORD B-MAX, FORD FOCUS 2012, FORD C-MAX, FORD TRANSIT, etc, that have this new RKE type of key with retractable shaft, are erroneously recognised and allowing the copy on the TPX2 format. For now, nobody can clone this new variety under any circumstance.


3. Introduction of new languages

From this revision on, we have introduced 2 new languages, Japanese and Russian. Both languages are only available in the TRS 5000 EVO and in without PC functioning mode.


4.1. Modification of the reading of the old TP04 that are used by some motorbikes (Yamaha XMAS / VESPA 125, etc) the erroneous reading of which caused incorrect copying. From now on, the reading of the Original TP04 keys and their later copying on TP05 are the same.

4.2. Modification of the internal settings of the new Microcontroller to adapt them to the generation functions of the fixed code.


1. Cloning of the new GM models

In the family of keys that have Philips Crypto Hitag II technology, a new evolution of the same has been detected in the new launchings of GM and its affiliates, like OPEL, VAUXHALL, CHEVROLET, BUICK, COMMODORE…

The response time when processing the authentication stage (Challenge-Response), differs slightly to the majority of the Philips Crypto standards present in the vehicle on the worldwide Market. In this new version, this new response time has been adjusted and likewise, the new stages for challenging have been implemented.

For example, some of the models that already have this new type of keys, are:

OPEL / VAUXHALL (Insignia, Astra J, Meriva…) CHEVROLET (Cruze, Camaro, Malibu, Equinox..) BUICK (Verano, Regal, Encore…) GM (Terrain, Acadia…)

So these new keys can be cloned, in addition to downloading and updating the firmware for the TRS 5000 EVO, we also have to do the same with the cloner 4 firmware, that should be updated to the 39.1.7 version. The reading seen on the screen will be as follows:

GM GM PHILIPS CRYPTO

Copy over TPX4 GM PHILIPS CRYPTO 2 Gen. Electronic pcb.

ID: B72C8BB2 LOCK MANCHESTER Example of code for a GM / PH-CR2 46

2. Development of Firmware for the Cloner of the TRS EVO

In order to clone the new models of keys implemented in the GM group, in addition to updating the firmware of the TRS 5000 EVO, the Firmware of the internal cloner (2 in 1) of the TRS EVO has to be updated.

To do that, use the PC software (CLONER programmer.exe), this will automatically install with the SET UP of TRS5000 EVO. This programme can be indistinctively used for updating both the old TPH Cloner as the new one.

The update that corresponds to the TRS5000 EVO is version 39.1.7 For the TPH Cloner of the old TRS5000, the software update is 32.1.7

3. Identification of blank TPX2/TPX4

From this version on, the client will know if the transponder on which he wants to clone is blank or if it has already been used.

In the case of the TPX4, this is not very important because the mentioned chip is rewritable as many times as we want, but in the case of the TPX2, knowing this crucial because it is an OTP (One Time Programmable), after which it cannot be reused.

The readings of a blank TPX2 / TPX4 are shown below:

TPX2 TPX2-BLANK Copy on TPX2 JMA TPX2 – Compatible Texas Crypto

PW: FF ID: 00 000080 MC: 00 LCK: 0000 DST40 Example of code TPX2-BLANK / ID 60

TPX4 TPX4-BLANK

Copy over TPX4 JMA TPX4 – Compatible Philips Crypto 2.

ID: 4154324B LOCK MANCHESTER Example of code TPX4-BLANK/PHCR2 46


4.1. Correction of format of presentation of errors that had lost the numerical value of the component

4.2. Improvement of the information supplied to the Display, after identifying the transponder. (TP Megamos)

LAUNCHING OF THE TRS-EVO –Firmware- Rev. 1.01

1. Launching of the TRS 5000 EVO (version 1.01)

In this original version (1.01), the new TRS EVO does not only have all the potential for recognition, reading and capacity for cloning of the old TRS5000, but in addition, the recognition has been updated with the identification of the new Texas Crypto (DST 80) keys. The newly introduced transponders as well as their associated texts are as follows:

TP33

TP33 Texas-Cry 3GEN FORD-Copy over TPX2 Texas Cod. Crypto. 2Gen. Wedge. FORD

PW: 03 ID: 80 81DCBE MC: 01 LCK: 0010 DST40 Example of code in a TP33 / ID 6F-63

TP33 Texas-Cry 3GEN FORD-See TP manual Texas Cod. Crypto. 3Gen. Wedge. FORD

PW: 03 ID: 80 FB4FA6 MC: 01 LCK: 0010 DST80 Example of code in a TP33 / ID XX

TP34

TP34 Texas-Cry 3GEN TOYO-See TP Man. Texas Cod. Crypto. 2Gen. Wedge. TOYOTA

PW: 37 ID: 96 3DF27F MC: 80 LCK: 1111 DST40 Example of code in a TP34 / ID XX

Texas Crypto ++ See TP manual Texas Cod. Crypto. 3Gen. Wedge. TOYOTA

PW: 36 ID: 98 FAA182 MC: 80 LCK: 1111 DST80 Example of code in a TP34 / ID XX

TP35 TP35 Texas-Cry 3GEN TOYO-Copy on TPX2 Texas Cod. Crypto. 2Gen.Wedge. TOYOTA

PW: 33 ID: 0F 348CBC MC: 0C LCK: 1111 DST40 Example of code in a TP35 / ID 6F-70

With this new more compact and ergonomic design, the external cloning terminals of the previous generation (TRS 5000) have been integrated inside the device. Likewise, by increasing the size of the Display, we now have more surface for presenting detailed information of all the identified transponders. The constant evolution of the automation sector requires continued research and implementation of the new keys that the new models have. Therefore and as soon as these are detected, they will be implemented in the TRS 5000 EVO.

UPDATING OF FIRMWARE Rev. 2 - Początek - JMA Polska.€¦ · · 2015-09-21UPDATING OF FIRMWARE...

Documents

Transcript of UPDATING OF FIRMWARE Rev. 2 - Początek - JMA Polska.€¦ · · 2015-09-21UPDATING OF FIRMWARE...