How to Unlock Bosch MD1CE100 ECU by EngineDance X5 via Boot Glitch?

EngineDance X5 supports bench and boot mode operations for Bosch MD1CE100 ECUs manufactured after June 2020. This guide walks you through hardware connections, resistor removal, and software steps to unlock and read/write data.
Hardware Preparation & Wiring
1.Open EngineDance X5 software main menu.
2.Go to Advanced Functions -> ECU FLASH -> Bosch Bench Mode (ECU) -> Bosch MD1xxx [After 2020 locked] (or MG1xxx TC29x After 2020 Locked).
3.Select BOOT GLITCH MD1CE100 After 2020.06- Locked ECU.
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-1 enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-2 enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-3
4.Check the wiring diagram displayed in the software.
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-4 enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-5
5.Open the MD1 ECU casing. Locate and carefully remove the specified tiny resistor on the board. Set it aside safely.
6.Find point E1 on the board.
7.Connect EngineDance X5 ECU Tool to BOOT Glitch Adapter. Wire the adapter pin directly to point E1.
8.Connect the MD1 6-in-1 cable to Port 4.
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-6
Unlocking & Reading Data in Boot Mode
1.Read and confirm the software safety prompt.
2.Wait for X5 tool to establish connection with the ECU to access the pre-unlock screen.
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-7
Note: You can read and back up the original FLASH and EEPROM data in boot mode before unlocking.
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-8
3.Select Unlock when you are ready to remove the factory lock.
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-9
4.Solder the removed resistor back onto the ECU board and close the ECU cover.
Bench Mode Reading & Writing
1.Disconnect the boot glitch adapter. Connect the ECU directly to X5 using the standard bench harness.
2.Navigate to Bosch MD1xxx [After 2020- Locked]-> BENCH- MD1xxx [After 2020- Unlocked]
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-10
3.Confirm connection to verify ECU version details.
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-11
4.Select Mode 1 or Mode 2 to read and write FLASH data on the bench.
enginedance-x5-unlock-encrypted-bosch-md1ce100-ecu-12
Read also:

EngineDance X5 Unlocks Bosch MDG1 ECUs with New Boot Glitch Technology

Share