Unfortunately we do not accept new members for free, Now Registration cost 30€, if you are interesting Send Email to [email protected]

BMW option S909A ANALYSESTECKER. Development car programming backdoor
25-10-2019, 06:49 AM,
Post: #11
RE: BMW option S909A ANALYSESTECKER. Development car programming backdoor
(10-10-2019, 16:16 PM)Node Wrote:  OBD plug only has connection to some gateway unit on BMW for last 20 or so years. It can be kombi, zgw or other unit. That gateway unit forwards data to respective buses. That plug may have direct access to most of buses, but you can access them anyway, just not in a single place. I do not see any use for that connector other than if you seriously want to analyse traffic on all buses at the same time.

here is an updated pinout list after todays detective work. wink

Code:
CONNECTOR X10658 24 PIN OBD+

pin, signal – dia-color abbreviation-color->connection to-notes

1 GN/RT - GREEN/RED
2 WS/RT - WHITE/RED
3 TXD – 0,35 - WS/BL - WHITE/BLUE – X183
4 !!NOT CONNECTED!!
5 PT_CAN_L - 0,35 - RT - RED
6 PT_CAN_H - 0,35 - BL/RT - BLUE/RED
7 GN/RT - GREEN/RED
8 WS/SW/GE - WHITE/BLACK/YELLOW
9 K_CAN_PL – 0,35 - BL - BLUE
10 K_CAN_PH – 0,35 - BL/VI - BLUE/VIOLET - (If it’s red instead of violet this one is wrong)
11 K_CAN_SL - GN - GREEN
12 K_CAN_SH - GN/OR - GREEN/ORANGE
13
14
15 TD – 0,35 – SW – BLACK -> X243
16 D_TXD2 – 0,35 -  WS/SW – WHITE/BLACK -> X6031
17 DFAVL – 0,35 – GE/RT – YELLOW/RED -> X10183
18 DFAVR – 0,35 – GE/WS – YELLOW/WHITE -> X10184
19 DFAHL – 0,35 – BR/RT – BROWN/RED -> X1101
20 DFAHR – 0,35 – GE/GN – YELLOW/GREEN -> X10186
21
22
23
24
25
Quote this message in a reply
25-10-2019, 09:16 AM,
Post: #12
RE: BMW option S909A ANALYSESTECKER. Development car programming backdoor
I think I have found a video where you can see the behemoth of a computer that they have replaced the passenger seat with, that most likely hooks up to my connector [emoji3]

You can clearly see that they are logging and analyzing many parameters at the same time when they show the screen. 

Fun fact, this testing facility is located not far from where I live so seeing these test mules around here is pretty common.


As you could see in my pinout diagram the connector have separate connections to all 4 wheel speed sensors and DSC module which would be useful to analyze how the wheels behave on slippery surfaces.
Quote this message in a reply
10-07-2023, 23:33 PM, (This post was last modified: 10-07-2023, 23:45 PM by vibbelito.)
Post: #13
RE: BMW option S909A ANALYSESTECKER. Development car programming backdoor
Since a lot of information was lost from here when the forum was hacked some year ago I will try to add back some information that was lost.

I found this in a technical training document about the CAS

"Specification of terminal 15 "on"

The CAS provides terminal 15 with 10 outputs for hardware redundancies:

In addition, the following outputs are also actuated directly:

- OBD socket (on-board diagnosis)
- Diagnostic connector supply voltage (only on pre-production cars)"

Could this mean that my connector is only being powered through the CAS!

I also found this pin assignment table for the CAS in the same document. Note that this cannot be viewed in any workshop manual (tis) also in ista/d they have removed this.

Pin - 36

Description - 15_4_D+

Pin type description - Terminal 15 OUT4 (diagnosis-plug positive connection) only on pre-production cars

I found some more things at one point later

Pin 16 in the connector is supposed to go to a connector on the gearbox called x8500. Unfortunately my wire doesn't go there. It only goes to connector x6031 and ends there.
But I found a description for the intended use of the wire it in a document for the e65. Again, this is not visible in any wiring diagrams for the e65

Pin - 3-A
Assignment - ISO K
Remark - K-line (e.g. application)
(Most likely ISO K = ISO 9141-2)

And just for reference, this is what it's called in the e60 where it is visible in wiring diagrams.

Pin - 3
Type - A/E
Description/ signal type - TXD signal
Connection /Measuring notes - DME control unit

I then found some more connections while changing my DSC module. 4 of the cables go to undefined pins in the DSC module  one of them is breaking light switch which I even tested. And the other there are no information anywhere about what they do?
I even looked at pinouts and technical documents for the dsc which is used in many more car models but nothing so if anyone have any clue about what they are for? I would be happy

And finally here is my most up-to-date pinout for the connector but there is still much mystery surrounding it so if you have any information at all please contact me.
Quote:CONNECTTOR X10658 24 PIN OBD+


pin, signal – dia-color abbreviation-color->connection to-notes

1 terminal 15_4_D+ -  - GN/RT - GREEN/RED - CAS pin 36 - Terminal 15 OUT4 (diagnosis-plug positive connection) only on pre-production cars

2 PA_BUS - 0,35 - WS/RT - WHITE/RED -> CAS pin 15 (comfort access bus)

3 TXD – 0,35 - WS/BL - WHITE/BLUE – X183
4 !!NOT CONNECTED!!
5 PT_CAN_L - 0,35 - RT - RED
6 PT_CAN_H - 0,35 - BL/RT - BLUE/RED
7 terminal 15 pt_can wakeup line GN/RT - GREEN/RED

8 SW/WS/GE - BLACK/WHITE/YELLOW

9 K_CAN_PL – 0,35 - BL - BLUE
10 K_CAN_PH – 0,35 - BL/VI - BLUE/VIOLET -
11 K_CAN_SL - GN - GREEN
12 K_CAN_SH - GN/OR - GREEN/ORANGE

13 (GND most likely)
14 (+12v most likely)

15 TD – 0,35 – SW – BLACK -> X243 Speed signal from engine
16 D_TXD2 – 0,35 -  WS/SW – WHITE/BLACK -> X6031(ends here) 
17 DFAVL – 0,35 – GE/RT – YELLOW/RED -> X10183
18 DFAVR – 0,35 – GE/WS – YELLOW/WHITE -> X10184
19 DFAHL – 0,35 – BR/RT – BROWN/RED -> X1101
20 DFAHR – 0,35 – GE/GN – YELLOW/GREEN -> X10186

21 BL/BR - BLUE/BROWN -> X1170(dsc) - pin 32 - Brake light signal - Brake light switch
22 WS/VI - WHITE/VIOLET -> X1170(dsc) pin 22 - 11,25v
23 WS/GE - WHITE/YELLOW -> X1170 (DSC unit) - pin 37. -  - 11,21v
24 WS/BR(RT) WHITE/BROWNE( OR RED) -> X1170(DSC) - pin 11 .(most likely Diagnosis signal TXD to this Diagnostic connector) - 9,69v

25 ground BR/SW - CAS pin 16? 
Reputation: +1 - simzep [+1]
Quote this message in a reply
13-07-2023, 20:39 PM,
Post: #14
RE: BMW option S909A ANALYSESTECKER. Development car programming backdoor
In BMW museum in Munich is E60 M5 with classic old diamond key that was used on E60 cars before 9/2005. I wonder how did they solve for example HUD mview because on production cars before 9/2005 mview works only 30 secs after start…
Quote this message in a reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  E60 M5 SMG lost the DTC option GoNz0- 3 164 02-04-2024, 10:55 AM
Last Post: bmchicago
ZSkoda Solved ✔ ISTA Standalone WLAN programming botho 4 392 21-03-2024, 11:13 AM
Last Post: botho
XZBMW F15 Programming Error mcrussell 7 459 20-03-2024, 05:38 AM
Last Post: SweetBMW
XZBMW BMW X6 E71 Programming Ryzen 5 274 16-03-2024, 12:42 PM
Last Post: Node
XZBMW problem with flashing CHAMP2 module (the programming dependencies are not correct) azwgh 17 846 11-02-2024, 19:39 PM
Last Post: azwgh
  AOS ISTA reinstall not working: no programming data tintoverano 2 356 07-01-2024, 10:10 AM
Last Post: DarkSide
  BDC_BODY3 Cafd with Bowers&Wilkins option Zenel6GT 10 734 04-12-2023, 15:14 PM
Last Post: jb2005
  ISTA alternate version programming weinerbarn 7 1,061 24-11-2023, 10:29 AM
Last Post: Sedoy
  EntryNav2 programming Speech ECE Matthew53 13 1,742 30-10-2023, 22:19 PM
Last Post: Matthew53
  HU Entrynav2 programming failed with Esys kaan12345 7 952 14-10-2023, 19:27 PM
Last Post: naderlouis

Forum Jump:


Users browsing this thread:
1 Guest(s)

Return to TopReturn to Content