How to BOOT read Bosch TPROT 8-10 using PCM Flash crack

PCM Flash clone is confirmed to work for 3 types of Bosch Infineon ECU:

1) The Infineon ECU before TPROT8.

2) TPROT 8-10

3) The Infineon ECU after TPROT10 which is what we call GPT encrypted.

 

 

Today, we’ll talk about how to read TPROT 8-10 with PCMFlash

 

For TPROT8-10, he Bosch Company sets the anti-debugging mode, reading EEPROM needs no password and reading Flash needs password.

 

Therefore, during the reading process, there is an extra CNF1, Boot outputs low level and CNF1 outputs high level. When reading, Boot needs to add one small resistor and ground it. CNF1 to connect one 470ohm-2K resistance, then connect 3.3V, it’s very important, otherwise the ECU will be burnout.

 

2 Tips on reading the data: 

1) BOOT and CNF1 must be connected when reading data.

2) Only connect BOOT not CNF1 When reading the password, otherwise the password can’t be read out. Also you can follow the Ktag wiring diagram because Ktag controls the CNF1 turn on and off, so it can’t be disconnected. When reading the password, you turn the two switches to the automatic mode, and to the On mode when reading the data, when the software prompts, you choose ” Manually” then follow the message to turn on or off.

 

Ktag wiring diagram help file:

https://mega.nz/#!QNhBCRKR!36B3zt2mu89-gjnh4r9HThNcd2e2WRiBDK4NpL3Jqho

BMW_EDC17CP45_TPROT8_Pin_PCMFlash

 

PCM Flash crack software download:

https://share.weiyun.com/5B6iC3q (password: t6dijv)

Tested 100% with PCM Flash china clone

pcmflash-clone

source: http://www.uobdii.com/wholesale/ktm-flash.html

 

PCMFlahs TPROT8+ vehicle list:

Bosch: BMW TPROT8+

Bosch: VAG TPROT8+

Bosch: Kia/Hyundai/Honda TPROT8+

Bosch: Chrysler/Jeep/Dodge/Fiat TPROT8+ [Test]

…..

Read the encrypted ECU password

 

Good to know:

The Infineon ECU before TPROT8 is not encrypted, you directly uses the BOOT point

grounding, then follow the Ktag user manual to wire the cable and read the data.