[ExiizZ]

Hello
yesterday I got my fsc repair kit for my cic mid. At first the donor cic was

Root cert accepted
Sig cert accepted
Fsc cert rejected
Fsc rejected

I virginized the cic with ftp by exchanging the generalpersistency file.
Then I import the fsc cert and fsc with fstool (1b, 47 file). The Navigation was available. 2-3 Starts later Navigation grey. I checked cic with fstool again. This is now:

Root cert accepted
Sig cert rejected 
Fsc cert accepted
Fsc accepted

Where do I get my sig cert? In the repairkit I did not found something like that. 
Can somebody explain me the relation of all this certification/fsc (what they are for?)

[db2761]

What is the Date on your sigs cert.der? Never-mind.. I'm certain your cert is outdated.. Copy this file to your FSTool2/data/cert folder. When doing so compare, your dates to be sure. Once done you will need to upload the new SIGS cert to the HU. Open FSTool2.. Go to advanced and choose the following actions.

store sigs cert
check Sigs cert
check fsc

Should be good to go..

Hopefully I helped you and others that come across the same issue.

Kind regards

db

[ExiizZ]

What is the Date on your sigs cert.der?  Never-mind.. I'm certain your cert is outdated.. Copy this file to your FSTool2/data/cert folder.  When doing so compare, your dates to be sure.  Once done you will need to upload the new SIGS cert to the HU.  Open FSTool2.. Go to advanced and choose the following actions.

store sigs cert
check Sigs cert
check fsc

Should be good to go..

Hopefully I helped you and others that come across the same issue.

Kind regards

db

The sig inside the ecu (read from fstool) ended 2011 (fs tool status is outdated) thank you for the the file I will test it out. So this sig cert isnt something special for the vin/car like the fscs? Whats the point of this file?

[user0086]

It's signed by the root certificate that is also stored in the car. BMW uses the private key of the signing certificate to sign the FSC files. So the order is as follows:

Root certificate signs signing certificate.
signing certificate signs FSC files.

Car checks if FSC files are signed by signing certificate, and then if signing certificate is signed by the root certificate. This way, BMW doesn't have to use the very secret root key that often (It's probably in a vault and uses a dual custody arrangement), it can just generate a key for the signing certificate and sign it once every few years using the root key.

Basically they have build their own PKI.