Please make sure you read Rules! and DO NOT upload/post any illegal softwares or Pirated Material , Thank you for understanding :)
  1. Martech

  2. ATM - Balkan

    atm balkan file service
  3. Porsche piwis

  4. MOD FILES

  5. ProCarDiag

  6. ECU CHIPS

  7. NBE Files



Post Reply 
BMW CIC PATCHER v2 - GENERATE YOUR OWN RETROFIT FSC CERTS
03-04-2017, 18:32 PM (This post was last modified: 28-04-2017 18:58 PM by intel123.)
Post: #1
XZBMW BMW CIC PATCHER v2 - GENERATE YOUR OWN RETROFIT FSC CERTS
*** RELEASED ***


BMW CIC PATCHER v2
GENERATE YOUR RETROFIT FSC CERTIFICATES


Forget about emulators, script activations, hard map updates...

This is better enhanced version of what is selling / floating around these days.



[*] NO BOOTLOADER MODE
[*] DONE IN 10 SECONDS!
[*] NO BRICKING


SUPPORTS ONLY US AND ECE LATEST VERSIONS OF SOFTWARE, SO IF YOU HAVE US or ECE CAR, UPDATE YOUR CIC SOFTWARE AND ENJOY THE PATCH!


here is short howto which is included in the archive too:
Quote:BMW CIC CK V2
-----------------
created by intel123 - intel@globalnet.ba

This is patcher for BMW CIC Professional Navigation, it patches binary file
and replaces root certificate what enables you to sign your own FSC certificates
from within FSTOOL or E-SYS like OEM. After patching, Self-generated certificates
will be accepted as OEM ones.

Pre request

1) This is ONLY for US (United States) and ECE (Central Europe) software versions!
2) You should update your CIC software to the latest before applying the patch!


Unlike other patches floating around, this one is done in 10 seconds or less. There is no need
for multiple reboots, or hang in "Bootloader" mode which exposes the system to bricking or failure.


HOW TO USE IT

1) Format USB drive with fat32 filesystem
2) copy file 01_PATCHER\USB_AUTORUN\copie_scr.sh to empty USB drive
3) Insert USB drive into CIC, wait until reboot and you're done!

(if CIC will not reboot in 20 seconds, it means that there is software incompatibility or already patched, read pre requests)

After cic has been patched and it restarted you can fire-up E-SYS or FSTOOL. If you go ahead and check status of FSC you will see that
CIC has been virginized and only root certificate is accepted. Key you should use for signing FSC certificates is 00_PRIVATEKEYS\fscs.der
other two private keys (root.der and sigs.der) you will have no use for, they are included just so the cert chain is complete.

To make certificates for your VIN you can use files in folder 03_FSC_TEMPLATES from archive,
load them in E-SYS (FSC Editor) or FSTOOL, change ONLY VIN, sign them and save as.

** VERY IMPORTANT: If you do not know what you are doing, when modifying template certificates, change only VIN to match yours,
do not edit other fields including date of issue.

After making all certificates you will need for your retrofit you can install them normally via FSTOOL or ESYS, other needed certificates
as SIGs and FSCs cert you can find in folder 02_CERTS from this archive.

*** PLEASE NOTE, AFTER PATCHING CIC IS VIRGINIZED AND MAY SHOW THAT
FSCS AND SIG CERTS ARE REJECTED, AND ROOT ACCEPTED. THIS IS NOT A
PROBLEM AS YOU WILL OVERWRITE IT WITH PROVIDED CERTS VIA FSTOOL
OR E-SYS. ******************************************************

Source code of the CK and all relevant data will be published on CarTechnology.co.uk forum

Quote:0017 - Voice control
0019 - Navigation system Professional
001B - Navigation system Professional
00XX - LifeTime Map Code
006F – Satellite Tuner
009B – Arabian Language
009C - BMW Apps

Full set for BMW CIC.
for E-Series: use FSTOOL
for F-Series: use E-SYS
same procedure as with OEM certificates,



Quote:Q: How does it work ?
Well not to go too much into detail as i plan to document whole procedure and publish along with the source code, but here it is. BMW CIC is based on QNX 6.3.2 running on Renesas SH4 CPU. There are two main binaries on the system running in "Normal" mode: CicHichEceUsaRoot and CicHighEceUsaSecond (names for ECE and US models) First binary resides in IFS and second one on EFS. To cut this short, SWT functions reside in *Second binary. After bare inspection of binary it is noticable that root certificate is being checked for several things including the check which compares root certificate to its copy residing in IoC (v850 CPU), additionally there is a string which says something like "Unable to read rcert from IoC, trying from flash" which was more than enough for start. After disassembly and locating function responsible for checking root certificate in IoC it was only the matter of changing two bytes and now we have program which will read and accept root certificate (if it is created properly with all correct names and parameters) from flash /mnt/HBpersistence/rcert.swt file.
[Image: 31bde5bdfe70cd32df8f3cdc3200b8b3.jpg]
Ok so, since i did not need to make any kind of hooking or add code it will be enough just to change bytes in current EFS image on flash. Replace (if any) rcert in /mnt/HBpersistance with our own, virginize the CIC (delete /mnt/hbdebug/data0? and generalPersistencyData_DiagnosticSWTController) and reboot. After reboot, using E-SYS or FSTOOL we can see that our root certificate is accepted and we can upload the rest using one of tools mentioned (SIGs, FSCS, and FSC certificates).

***DONATIONS: If anyone wanted to give any donation please donate directly to the forum from HERE it will be greatly appreciated by everyone as everything you see here is FREE***

- HOWTO BY SweetBMW ADDED TO ATTACHMENTS! (Thanks SweetBMW)


Attached File(s)
CIC FSC PATCH v2 by intel123.txt
File Type: .txt
Downloaded: 2621 times
Size: 70 bytes

Howto by SweetBMW.txt
File Type: .txt
Downloaded: 1758 times
Size: 70 bytes


Shoot to thrill, play to kill
Reputation: +134 - volavka [+2] , ruben_17non [+1] , Jartsa [+1] , tururu33 [+1] , Fx82 [+1] , gvitkis [+1] , lynxbmw [+1] , tste1982 [+1] , DNK76 [+1] , Mizta Insane [+1] , Czozen [+1] , pshoey [+1] , inspi1981 [+1] , Loliceman [+1] , RocketSurgeon [+1] , mksa [+1] , bgpavlp [+1] , petkowo [+1] , B1257 [+1] , ATC [+1] , Gatsby79 [+1] , acolt [+1] , mprezes [+1] , fumantwo [+1] , myfirst1er [+1] , cryptocar [+1] , DJenka [+1] , Twoone [+1] , Joe2 [+1] , larshutten [+1] , hulahans [+1] , BhdR [+1] , BMWzone [+1] , brunoman [+1] , BMW888 [+1] , BusyBox [+1] , atomantmk [+1] , txalkie [+1] , arno2 [+1] , danyro [+1] , Erikv [+1] , Sabreace [+1] , jimvou [+1] , beemered [+1] , nino17 [+1] , SrdjanM [+1] , emhtuning [+1] , carlosgaros [+1] , RReader [+1] , wlemi [+1] , sbc55 [+1] , neni [+1] , TomoR [+1] , vierchatura [+1] , BaggieMatt [+1] , BmwMerc [+1] , shintake [+1] , sacaman [+1] , syrus [+1] , demon68 [+1] , ivoo [+1] , BMWdriva [+1] , szymoncobo [+1] , tunning-gsm [+1] , umutbulut [+1] , tohmc [+1] , rabihfiras [+1] , _villi_ [+1] , bmm-71 [+1] , larrybml [+1] , hipolitogt [+1] , emerer [+1] , yarickoff [+1] , paw2000 [+1] , zfrepairtm [+1] , relax1980 [+1] , hamzettin [+1] , KEEEN [+1] , srki7 [+1] , lazuri-53 [+1] , julijan [+1] , alfathas [+1] , mixx0108 [+1] , bmwcoupè [+1] , pulik [+1] , bmwcars1968 [+1] , Paul [+1] , gaintp [+1] , ROD-BENDERS [+1] , ahmedmph [+1] , edtech [+1] , puiu [+1] , uragan1987 [+1] , tortu25 [+1] , Mrg0721 [+1] , bumek [+1] , bmwbmw [+1] , krzysiek80r [+1] , Studie [+1] , GoldRush [+1] , t1tan1 [+1] , evaldazj [+1] , nama [+1] , max72 [+1] , Vojno [+1] , kregiel [+1] , Roo [+1] , jogi8850 [+1] , mdma666 [+1] , Morbak [+1] , redliner [+1] , tutuianu_daniel [+1] , dong627758497 [+1] , NeRkO20 [+1] , JarsaR [+1] , fussel86 [+1] , _Ynblpb_ [+1] , benzbmb [+1] , @Loui [+1] , wrstlfrx [+1] , michalkow [+1] , 4433modic [+1] , Tombo [+1] , bawareca [+1] , EagleOne [+1] , gpdriver [+1] , paskuale [+1] , Schmidti [+1] , Nixer [+1] , Hoborg [+1] , navin [+1] , blacklisted [+1] , qeen [+1]
Visit this user's website Find all posts by this user
Quote this message in a reply
 Thanks given by: Jartsa , volavka , ruben_17non , hojo29 , Jynkky , tururu33 , Fx82 , flashdaemon , inotherwords , gvitkis , lynxbmw , tste1982 , Mizta Insane , Czozen , krug , pshoey , inspi1981 , Freddy1 , Loliceman , RocketSurgeon , Levanime , tonemoz , mksa , bgpavlp , acolt , petkowo , yarickoff , Topdonas1 , B1257 , Gustav Gans , franch_art , ATC , Gatsby79 , mprezes , blackbm5xx , Deimis , winter , fumantwo , myfirst1er , Robocop25 , cryptocar , codemybmw , ChampioNbg , DJenka , cupellete , dream501 , Twoone , Joe2 , bumek , larshutten , smercki , BhdR , BMWzone , brunoman , slaw1971 , sacaman , BMW888 , sebastianfernandes , fl3xy , BusyBox , atomantmk , txalkie , Dubnik , arno2 , olaf , danyro , Hoborg , CCC88 , Erikv , adilko73 , Sabreace , jimvou , ljzwxe , beemered , nguyennhatquang , crazybm , malone0185 , dan96 , nino17 , mipe , bmw_freak96 , carlosgaros , slonenokalex , DICKHILL , ingmv , wlemi , myjohnnychan , sbc55 , dragos , vneno , Slim125 , neni , michalkow , jonny81 , TomoR , nethill , vierchatura , BaggieMatt , BmwMerc , shintake , syrus , demon68 , ivoo , 9a10qr , BMWdriva , szymoncobo , emhtuning , tunning-gsm , umutbulut , sameur10 , djtosko , milkyway , tohmc , raull00 , rabihfiras , carbumer , _villi_ , gbyleveldt , bmm-71 , ccfj1 , Zian , markmich , Digitalbac , larrybml , cupra80 , hipolitogt , emerer , paw2000 , chaF10 , jackylooo , zfrepairtm , relax1980 , flo_007 , adisor_6 , bmwaudiobox , matigdy , ValeS , hamzettin , KEEEN , freeman2010 , joh4nn_123 , GeorGiii , ClockW , Harrycz44 , srki7 , ghostrider0815 , ktmjurca , supE60 , claw , cursor , makomako , mcrussell , ryanb4200 , lazuri-53 , duke99 , seiji , joel789 , julijan , Jakes300 , mirican , alfathas , mixx0108 , tutuianu_daniel , bmwcoupè , SweetBMW , Angelz , marmaro , Paul , gaintp , flanker78 , Emmy , chapszamora , jpimpao01 , 1uux , Stivikivi , bryosb , huskvarn , ahmedmph , edtech , puiu , uragan1987 , tortu25 , Arual , djdum , autodash , wolli , mooby , Skid1164 , sluddsy , Kentener , Mrg0721 , josejoshua , MoeJoe , mall , bmwbmw , soest , krzysiek80r , Studie , flikis , gnombmw , hidden1011 , evgeniche , Luky , NeRkO20 , nanjue999 , GoldRush , etronic , TeflonDon , t1tan1 , blodix , evaldazj , nama , max72 , tigexx , Vojno , kregiel , darthur90 , yam69niko , Kenny , botho , vasilegeorge , jdmp33 , afireboy , Roo , baikerr36 , bmwpeti , mmx , bouizanne , devin111 , xiaokewu , Edito , sergiompais , jogi8850 , mdma666 , Morbak , victor_vmov , airforceone , dong627758497 , Maxis , redliner , Vias , passthru , bugess , Ibrahim24 , wst01 , sem_152 , JarsaR , fussel86 , _Ynblpb_ , benzbmb , FURTIF , Choterio , BMWSTAR , Qwantor , Skifahrer , doman , 4433modic , Tombo , CEBEP , vainn , artkiani , robnitro , bawareca , Alexete , Mekatech , mohssine , JR2 , delight , robalo , EagleOne , rembert , iowa_noare , ixot , Gulfstream , gpdriver , hero3838 , paskuale , Schmidti , mecanodiag , andisol , Nixer , latinoheat , deler , MOCKING_BIRD , yeil , grayspace0422 , turbodieselro , navin , mrproper , outubro , blacklisted , Blueelfer , bobtec , cimix , ikamac , zrr , redoine , rocris , shtirlec39 , qeen , Bimmersports
03-04-2017, 19:26 PM
Post: #2
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
Well, we can generate own root certs and generate FSCs using FSTool signed with these root certs, right?

But how about map update codes? 1B FSC contains 1024-bit key or somethin' like that and I don't know how to generate it.
Find all posts by this user
Quote this message in a reply
03-04-2017, 20:50 PM
Post: #3
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(03-04-2017 19:26 PM)inotherwords Wrote:  Well, we can generate own root certs and generate FSCs using FSTool signed with these root certs, right?

But how about map update codes? 1B FSC contains 1024-bit key or somethin' like that and I don't know how to generate it.

I think it is simple, after you activate CIC, you will download 1B file by SWID_Reader and generate map key as always by generator smile1
Find all posts by this user
Quote this message in a reply
04-04-2017, 04:59 AM
Post: #4
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
I believe NBT should be similar method...?
Find all posts by this user
Quote this message in a reply
04-04-2017, 06:35 AM
Post: #5
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(03-04-2017 20:50 PM)Czozen Wrote:  I think it is simple, after you activate CIC, you will download 1B file by SWID_Reader and generate map key as always by generator smile1

Yes, but it will be code that differs from code generated using original 1B.
Find all posts by this user
Quote this message in a reply
04-04-2017, 07:51 AM (This post was last modified: 09-05-2017 09:56 AM by emhtuning.)
Post: #6
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
Please don't spoil the thread by discussing how to read and generate map update FSC .

the OP is talking about more advanced project than just simple 1B or DE FSC generating .
Reputation: +1 - intel123 [+1]
Find all posts by this user
Quote this message in a reply
 Thanks given by: IZGOY , intel123 , petkowo , B1257 , Czozen , ATC , franch_art , Gatsby79 , tururu33
04-04-2017, 21:41 PM (This post was last modified: 04-04-2017 21:49 PM by inotherwords.)
Post: #7
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(04-04-2017 07:51 AM)ehssan Wrote:  Please don't spoil the thread by discussing how to read and generate map update FSC .

the OP is talking about more advanced project that simple 1B or DE FSC generating .

No, we are not talking about generating update code. 001B code contains 1024-bit key which is used to check map update code generated. We need to know how to generate this key to make right self-signed FSC package. This information should be useful for this thread.
Find all posts by this user
Quote this message in a reply
04-04-2017, 22:07 PM
Post: #8
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(04-04-2017 21:41 PM)inotherwords Wrote:  No, we are not talking about generating update code. 001B code contains 1024-bit key which is used to check map update code generated. We need to know how to generate this key to make right self-signed FSC package. This information should be useful for this thread.

open 1b file in e-sys fsc editor or fstool>enabling codes>load>edit

extension record,type 12 is key used to generate short fsc

Shoot to thrill, play to kill
Visit this user's website Find all posts by this user
Quote this message in a reply
04-04-2017, 22:12 PM
Post: #9
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
(04-04-2017 22:07 PM)intel123 Wrote:  open 1b file in e-sys fsc editor or fstool>enabling codes>load>edit

extension record,type 12 is key used to generate short fsc

Yes, but how generate it for own VIN? Just random 1024-bit key?
Find all posts by this user
Quote this message in a reply
04-04-2017, 22:15 PM (This post was last modified: 04-04-2017 22:16 PM by intel123.)
Post: #10
RE: FREE BMW CIC FSC RETROFIT CERTIFICATES
No need to match it with vin in any way as its already matched by signing fsc with fscs private key, short fsc should match with that key only, thats why generators ask for 1b file

Shoot to thrill, play to kill
Visit this user's website Find all posts by this user
Quote this message in a reply
 Thanks given by: inotherwords
Post Reply 


Bookmarks

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
XZBMW F11 preLCI CIC-NBT retrofit in jararak 5 402 Yesterday 07:19 AM
Last Post: jararak
  TCB retrofit in pabloMG 0 104 19-11-2017 21:09 PM
Last Post: pabloMG
XZBMW F25 bixenon retrofit in Deimis 2 165 18-11-2017 21:26 PM
Last Post: Mwahab
  E60 night vision retrofit in larshutten 7 705 16-11-2017 21:41 PM
Last Post: larshutten
  Bmw e60 retrofit cic- combox-coding in kostv09 2 216 16-11-2017 11:04 AM
Last Post: eimantas28
  G31 SpeedLimitInfo retrofit, FSC? in Freddy1 28 2,170 15-11-2017 09:19 AM
Last Post: Thorsten
  Bmw f02 led headlight retrofit in porsche911gtr 3 179 14-11-2017 12:47 PM
Last Post: carat10_2
XZBMW BMW F11 6NS retrofit in szabx 0 100 14-11-2017 12:07 PM
Last Post: szabx
XZBMW Retrofit F30 NBT from Entrynav in tste1982 1 115 14-11-2017 09:43 AM
Last Post: SweetBMW
  Headunit EntryNav Business Navigation - FSC retrofit solution there? in Thorsten 1 191 05-11-2017 17:35 PM
Last Post: ruben_17non

Forum Jump:


User(s) browsing this thread:
2 Guest(s)

Return to TopReturn to Content