'06 WRX Prodrive unable to read ecu

[gsi16vopel]

Hi, I'm having a problem reading the ecu on a wrx prodrive.
What are the steps that i need to follow?

[radsdau]

Without knowing any details about your car or the way Prodrive works, my guess is that it's locked, in a similar fashion to EcuTek. Short of knowing everything they do about connecting to your car, there is no way I know of reading it.
Try getting them (Prodrive) to unlock your ECU if it's locked.

[stevieturbo]

I'll bump this.

Is there any way to access an 06+ DBW STI to turn off the fault codes for the air pumps ? Ecuflash wont go past the sending key stage, so obviously the prodrive ecu is locked.

I have no interest in re-tuning, just eliminating the fault codes.

[Jochen_145]

Yes there is, but not very comforatable:

just a readout of the application set can be done via SSM.

The whole dump can be pulled via AUD reading, with needs to open the ECU, solder some wires to a spezial interface but it isn´t supported bei ECUflash.

Wirting the ECU can be done via SHBootMode or ECUFlash recovery.
But in this cases you also need a special interface and solder some wires to the ECU.

If the ECU is blocked, not way to read and wirte via OBD only if you have the "officle tool"

BR

[stevieturbo]

Thanks, but fixing the pumps sounds easier lol.

It would be nice to be able to turn them off. They serve no sensible purpose and they are unreliable.

[coachhome42]

Hi Steve, I have same issues on 06 Forester 2.5 Xte with secondary air valves stuck and cannot connect to ECU to turn off codes to clear CEL and pass UK MOT, I think mine may also be locked but not sure why as I dont think it's been pro drive modifed and i'm second owner, Have you got any further on this issue ?

Mal.

[stevieturbo]

Hi Steve, I have same issues on 06 Forester 2.5 Xte with secondary air valves stuck and cannot connect to ECU to turn off codes to clear CEL and pass UK MOT, I think mine may also be locked but not sure why as I dont think it's been pro drive modifed and i'm second owner, Have you got any further on this issue ?

Mal.

The only 2 reasons I am aware of for failure to connect are if it has been Prodrive'd or Ecutek'd in the past.

Are you getting the exact same errors when trying to connect ?

Seems the locked ecu's fail after it tries to send a communication key. There are screenshots somewhere, although I never took any myself.

if it's a different error, it may just be a cable or software issue stopping you from getting access.

[coachhome42]

A few days on and a few replies from the good people of the world such as yourself and it seems this is likely (locked) to be the cause. Same report comes back from ECU regardless of laptop or OS used or even cables I have purchased. It must have been that way for the last three years which i find staggering to be honest.

[19:53:45.503] J2534 API Version: 04.04
[19:53:45.503] J2534 DLL Version: 1.00.3147 Sep 3 2010 00:11:07
[19:53:45.503] Device Firmware Version: 1.11.3298
[19:53:45.503] Device Serial Number: TAkYSEQh
[19:53:47.225] kernel get version
[19:53:47.428] interface close
[19:53:47.459] J2534 API Version: 04.04
[19:53:47.459] J2534 DLL Version: 1.00.3147 Sep 3 2010 00:11:07
[19:53:47.459] Device Firmware Version: 1.11.3298
[19:53:47.459] Device Serial Number: TAkYSEQh
[19:53:47.740] VIN read not supported
[19:53:48.052] msg buffer too small to receive data.
[19:53:48.052] interface close
[19:53:48.083] J2534 API Version: 04.04
[19:53:48.083] J2534 DLL Version: 1.00.3147 Sep 3 2010 00:11:07
[19:53:48.083] Device Firmware Version: 1.11.3298
[19:53:48.083] Device Serial Number: TAkYSEQh
[19:53:48.302] SSM2 init
[19:53:48.442] SSM2 ECU ID is 4242504106
[19:53:48.536] Requesting Seed...
[19:53:48.582] Sending Key...
[19:53:49.206] interface close
[19:53:49.222] interface close

I'm now looking at confirming the test status and assuming all that is ok , will have to pull the ECU and ship to Tactrix in the States for them to unlock it. Glad the weathers forecast good for the weekend sounds like my scooby is going to be in bits for most of it. !!!

[stevieturbo]

It would certainly be worth asking Tactrix or asking on the romraider forum too.

It would seem less likely that a Forester has been locked or Ecutek'd, although of course it could happen.

Maybe there is a simple comms issue ?

And can they unlock the ecu, leaving the current programming intact ?

[Jochen_145]

I don´t know, if Tractrix service is this kind of..

To unlock the ECU, there two ways:

1. to rewrite to stock with recovery mode
2. to remap. That means you need to readout, take a stock dump without lock-function and copys all chanced maps to the new one. This is the same as tuning a dump. After all you need onetime to recover the ECU like 1.

I´m not sure, if tractrix will do this.

If you are able to solder on a ECU, you can fix the ECU, if you take the 2nd way.

AFAIS there a cheap china clones of PIASINI SmartSuit V 4.1 out.
If this tools work, you have everything you need to go the 2nd way.
But i cannot finde any experiments about the clone tool, so don´t know if it really work

[Chris250]

How many green connectors have you found as there are 2 on the dbw's

[coachhome42]

Thanks for all the replies. to answer some of the questions as I ding deepr into this:-

Tactrix would unlock and return ECU to basic Rom map which is available somewhere on the net. Somebody very kindly led me to it. I have got a copy somewhere , but not being able to communicate with ECU leaves that as a door stop at the moment

They wont for legal reasons make any changes to the rom map only return it to it's basic updated map.

I find it incredible that a Forester had been "Tuned" but it does happen with the 2.5XTE as the forester forums confirm. Also the car has apparently got a Pro drive body kit on it and most people will know Prodrive for what they do to Subaru's so it's possible it seems.

There is only one set of green connectors on my car. none on the passenger side . 06 id DBW EDM MY06 2,5XTE.

Still not certain that car is going into test mode on connecting green connectors, as every time as I do not hear the fans cycle every time I do it. Electrical wiring seems to indicate this plug is a direct loop in and out of ECU so no other means of proving car is in test mode as far as I can tell.

Have reached desperation point now as car is off the road with lapsed MOT so am taking car to AB Servcing in Barry, South Wales tomorrow, who seem confident they can sort the problem out. I will follow up tomorrow. Thanks Gents.

[coachhome42]

Hello from Tactrix Mal,
[07:31:18.807] J2534 API Version: 04.04
[07:31:18.807] J2534 DLL Version: 0.50.2598 Jun 26 2009 15:02:29
[07:31:18.807] Device Firmware Version: 1.10.3020
[07:31:20.227] kernel get version
[07:31:20.587] SSM2 init
[07:31:20.727] SSM2 ECU ID is 42 12 50 51 06
[07:31:20.807] Requesting Seed...
[07:31:20.857] Sending Key...
[07:31:21.457] interface close
[07:31:21.477] interface close

Typically we will see this type of log if the ECU is locked. Here are some troubleshooting tips to eliminate all other remaining possibilities.

Loads of Level 1 to Level 5 test instructions ....

If the communication still fails, the ecu is more likely 'locked.' Let me know your results!

"1. If ECU is bricked or locked, is there a way to tell conclusively ? Do locked /bricked ECU's still allow the cars to run and report live data ?"

"Locked"...yes, but not if it's "bricked". The communication protocol would be scrambled and the car engine may crank but would not start.

"Could there be an issue with the car going into test mode and if so, might we expect the same lack of response from the interface as
I demonstrated."

Reading and flashing require you to enter ‘test mode’ by connecting the green diagnostic connectors located above the driver’s side foot well (non-CAN models only). Make sure your car is actually entering test mode. With the green diagnostics connectors connected and the OpenPort cable disconnected, you should get a flashing CEL and the radiator fans should cycle on and off (after a period of time) when the ignition is turned on. If not, your car may have an additional connection near the passenger’s side foot well that is disconnected. When reading and flashing begins, the radiator fans will remain off.

"can I send the ECU to you guys get you to unlock it as I see you do offer service?" Yes, see below (BENCHING ECU)

"at the same time also turn off some of the codes that are causing me problems and stopping the car form being able to pass the UK MOT required to be allowed on the road?"

Due to liabilities, we prefer not to make any customer modifications and only reflash to stock. Once the ECU is unlocked, you can clear (all) DTC's in EcuFlash by doing a READ -> File -> ECU -> Clear DTC's OR just locate the specific code to turn off by checking the box (Current ROM Metadata) and reflash the changes. (SEE ATTACHMENT)

BENCHING ECU:

Here are the two benching options to unlock it from the chip that bypasses the seed key algorithm:

1.) Sign up for our ECU Recovery Service here: http://www.tactrix.com/index.php?pag...mart&Itemid=53

2.) Use this bench recovery instruction to do it yourself: http://www.tactrix.com/index.php?opt...pair&Itemid=41

More here:
Subaru Benching: http://forums.nasioc.com/forums/show....php?t=2200443
Good thread here: http://forums.nasioc.com/forums/show....php?t=2163734

Best Regards,

[stevieturbo]

There is only one set of green connectors on my car. none on the passenger side . 06 id DBW EDM MY06 2,5XTE.

Still not certain that car is going into test mode on connecting green connectors, as every time as I do not hear the fans cycle every time I do it.

The fact the fans are doing this means the car is in test mode

[grandpa44]

I had the problem of not being able to get to test mode in my MY06 .

The two green wires are always connected but that is not the whole story.

To get into test mode a pin (look up the wiring diagram the pin has +12V when not in test mode).on the ECU needs to have an earth on one pin of it .

This pin appears at pin 13 on the OBD2 port .

To get into test mode either

1 Earth pin13 at the OBD2 port.

2 Put a switchable earth at the junction of the green wires.

Remove the earth when finished with the open port connector