CarTechnoloGY
BMW option S909A ANALYSESTECKER. Development car programming backdoor - Printable Version

+- CarTechnoloGY (https://cartechnology.co.uk)
+-- Forum: Discussions All about Software and Hardware (https://cartechnology.co.uk/forumdisplay.php?fid=310)
+--- Forum: Automotive Help & Discussions / Software and Hardware (https://cartechnology.co.uk/forumdisplay.php?fid=40)
+---- Forum: BMW - Mini - Rolls Royce (https://cartechnology.co.uk/forumdisplay.php?fid=61)
+---- Thread: BMW option S909A ANALYSESTECKER. Development car programming backdoor (/showthread.php?tid=57748)

Pages: 1 2


RE: BMW option S909A ANALYSESTECKER. Development car programming backdoor - vibbelito - 25-10-2019

(10-10-2019, 16:16 PM)Node Wrote:  OBD plug only has connection to some gateway unit on BMW for last 20 or so years. It can be kombi, zgw or other unit. That gateway unit forwards data to respective buses. That plug may have direct access to most of buses, but you can access them anyway, just not in a single place. I do not see any use for that connector other than if you seriously want to analyse traffic on all buses at the same time.

here is an updated pinout list after todays detective work. wink

Code:
CONNECTOR X10658 24 PIN OBD+

pin, signal – dia-color abbreviation-color->connection to-notes

1 GN/RT - GREEN/RED
2 WS/RT - WHITE/RED
3 TXD – 0,35 - WS/BL - WHITE/BLUE – X183
4 !!NOT CONNECTED!!
5 PT_CAN_L - 0,35 - RT - RED
6 PT_CAN_H - 0,35 - BL/RT - BLUE/RED
7 GN/RT - GREEN/RED
8 WS/SW/GE - WHITE/BLACK/YELLOW
9 K_CAN_PL – 0,35 - BL - BLUE
10 K_CAN_PH – 0,35 - BL/VI - BLUE/VIOLET - (If it’s red instead of violet this one is wrong)
11 K_CAN_SL - GN - GREEN
12 K_CAN_SH - GN/OR - GREEN/ORANGE
13
14
15 TD – 0,35 – SW – BLACK -> X243
16 D_TXD2 – 0,35 -  WS/SW – WHITE/BLACK -> X6031
17 DFAVL – 0,35 – GE/RT – YELLOW/RED -> X10183
18 DFAVR – 0,35 – GE/WS – YELLOW/WHITE -> X10184
19 DFAHL – 0,35 – BR/RT – BROWN/RED -> X1101
20 DFAHR – 0,35 – GE/GN – YELLOW/GREEN -> X10186
21
22
23
24
25



RE: BMW option S909A ANALYSESTECKER. Development car programming backdoor - vibbelito - 25-10-2019

I think I have found a video where you can see the behemoth of a computer that they have replaced the passenger seat with, that most likely hooks up to my connector [emoji3]

You can clearly see that they are logging and analyzing many parameters at the same time when they show the screen. 

Fun fact, this testing facility is located not far from where I live so seeing these test mules around here is pretty common.


As you could see in my pinout diagram the connector have separate connections to all 4 wheel speed sensors and DSC module which would be useful to analyze how the wheels behave on slippery surfaces.


RE: BMW option S909A ANALYSESTECKER. Development car programming backdoor - vibbelito - 10-07-2023

Since a lot of information was lost from here when the forum was hacked some year ago I will try to add back some information that was lost.

I found this in a technical training document about the CAS

"Specification of terminal 15 "on"

The CAS provides terminal 15 with 10 outputs for hardware redundancies:

In addition, the following outputs are also actuated directly:

- OBD socket (on-board diagnosis)
- Diagnostic connector supply voltage (only on pre-production cars)"

Could this mean that my connector is only being powered through the CAS!

I also found this pin assignment table for the CAS in the same document. Note that this cannot be viewed in any workshop manual (tis) also in ista/d they have removed this.

Pin - 36

Description - 15_4_D+

Pin type description - Terminal 15 OUT4 (diagnosis-plug positive connection) only on pre-production cars

I found some more things at one point later

Pin 16 in the connector is supposed to go to a connector on the gearbox called x8500. Unfortunately my wire doesn't go there. It only goes to connector x6031 and ends there.
But I found a description for the intended use of the wire it in a document for the e65. Again, this is not visible in any wiring diagrams for the e65

Pin - 3-A
Assignment - ISO K
Remark - K-line (e.g. application)
(Most likely ISO K = ISO 9141-2)

And just for reference, this is what it's called in the e60 where it is visible in wiring diagrams.

Pin - 3
Type - A/E
Description/ signal type - TXD signal
Connection /Measuring notes - DME control unit

I then found some more connections while changing my DSC module. 4 of the cables go to undefined pins in the DSC module  one of them is breaking light switch which I even tested. And the other there are no information anywhere about what they do?
I even looked at pinouts and technical documents for the dsc which is used in many more car models but nothing so if anyone have any clue about what they are for? I would be happy

And finally here is my most up-to-date pinout for the connector but there is still much mystery surrounding it so if you have any information at all please contact me.
Quote:CONNECTTOR X10658 24 PIN OBD+


pin, signal – dia-color abbreviation-color->connection to-notes

1 terminal 15_4_D+ -  - GN/RT - GREEN/RED - CAS pin 36 - Terminal 15 OUT4 (diagnosis-plug positive connection) only on pre-production cars

2 PA_BUS - 0,35 - WS/RT - WHITE/RED -> CAS pin 15 (comfort access bus)

3 TXD – 0,35 - WS/BL - WHITE/BLUE – X183
4 !!NOT CONNECTED!!
5 PT_CAN_L - 0,35 - RT - RED
6 PT_CAN_H - 0,35 - BL/RT - BLUE/RED
7 terminal 15 pt_can wakeup line GN/RT - GREEN/RED

8 SW/WS/GE - BLACK/WHITE/YELLOW

9 K_CAN_PL – 0,35 - BL - BLUE
10 K_CAN_PH – 0,35 - BL/VI - BLUE/VIOLET -
11 K_CAN_SL - GN - GREEN
12 K_CAN_SH - GN/OR - GREEN/ORANGE

13 (GND most likely)
14 (+12v most likely)

15 TD – 0,35 – SW – BLACK -> X243 Speed signal from engine
16 D_TXD2 – 0,35 -  WS/SW – WHITE/BLACK -> X6031(ends here) 
17 DFAVL – 0,35 – GE/RT – YELLOW/RED -> X10183
18 DFAVR – 0,35 – GE/WS – YELLOW/WHITE -> X10184
19 DFAHL – 0,35 – BR/RT – BROWN/RED -> X1101
20 DFAHR – 0,35 – GE/GN – YELLOW/GREEN -> X10186

21 BL/BR - BLUE/BROWN -> X1170(dsc) - pin 32 - Brake light signal - Brake light switch
22 WS/VI - WHITE/VIOLET -> X1170(dsc) pin 22 - 11,25v
23 WS/GE - WHITE/YELLOW -> X1170 (DSC unit) - pin 37. -  - 11,21v
24 WS/BR(RT) WHITE/BROWNE( OR RED) -> X1170(DSC) - pin 11 .(most likely Diagnosis signal TXD to this Diagnostic connector) - 9,69v

25 ground BR/SW - CAS pin 16? 



RE: BMW option S909A ANALYSESTECKER. Development car programming backdoor - mr_nitroz - 13-07-2023

In BMW museum in Munich is E60 M5 with classic old diamond key that was used on E60 cars before 9/2005. I wonder how did they solve for example HUD mview because on production cars before 9/2005 mview works only 30 secs after start…