Page 1 of 2
Bricked RFA / KVM Module
Posted: 08 Mar 2020, 00:12
by ronald0001
Hi
Yesterday i want to do an update for my RFA module to have autostart also
Than it happens....Laptop goes down and update intterrupts
so i was writing with alexey at this moment cuz he do my tpms and autopam wich i buyed from cmodteam and wich was not working
he have done his job and this things are working rigth now
i told him my problem he connectet again vie teamviewer and we try together some hours to get it working again
but no luck
and he is not sure it can be programmed again via UCDS
Tomorow on guy comes he have UCDS but he is not sure to get it back alive
so i want to ask maybe someone had same problem and can tell me if he fot it working again and how he do that
Re: Bricked RFA / KVM Module
Posted: 08 Mar 2020, 00:52
by Go4IT
A car hacker nightmare, i feel with you
This function only comes out of the KVM, but you tell you have updated RFA. Really?
What was the partnumber of the KVM, anyway?
Aborted updates are hard to recover, usually only by Flashing the device on low-level using JTAG or BDM.
Re: Bricked RFA / KVM Module
Posted: 08 Mar 2020, 02:05
by ronald0001
oh that sounds terrible
in my car is nothing working anymore
horror
Re: Bricked RFA / KVM Module
Posted: 08 Mar 2020, 02:15
by ronald0001
https://mondeo-mk4.de/forum/thread/2202 ... kvm-modul/
same like this in your thread in mk4 community
if i change the module my keys are working or not....cuz the keys are saved in the bcm or not?
Re: Bricked RFA / KVM Module
Posted: 08 Mar 2020, 07:19
by amplified
if you change the module and keys are not working then just run module initialization in forscan. unfortunately i have no experience wether there is immo data in KVM/RFA module. In cars without keyless it's located in BCM, PCM and ABS.
Re: Bricked RFA / KVM Module
Posted: 08 Mar 2020, 16:09
by ronald0001
someone have pinout for the kvm module?
Re: Bricked RFA / KVM Module
Posted: 08 Mar 2020, 18:05
by DGAlexandru
Open case of KVM module, find the BDM port, identify the Reset pin. Have this pin connected with a wire to GND, open UC DS, go to program module (Update Wizard or VBF loader - here select Mobdeo 4 as car, write HW), choose update dead module, follow the steps they say there.
After you press "Yes", remove the wire from GND.
This is to make sure the Motorola MCU that is the heart of KVM module boots when UC DS sends the "force SBL load" over CAN.
This way is more easy than removing power of module and applying it back when asked by UC DS procedure and also because module already has all the needed power and only waits for MCU to boot gives you a greater chance to have it boot in SBL mode.
Re: Bricked RFA / KVM Module
Posted: 09 Mar 2020, 15:17
by ronald0001
hi guys
i got a used kvm rigth now...
ok it works...but now says key unknown...
wit the trick sending ign on with my pi i can start rfa key programming....
but now its a module from a facelift...need key from etis server for pats
someone can calculate the incode
but outcode always changes..
Re: Bricked RFA / KVM Module
Posted: 09 Mar 2020, 20:18
by amplified
Have a screenshot of forscan options please, where there is a menu for module initialization do you have initialization for RFA or KVM? if so just run it pm me if you need more help
Re: Bricked RFA / KVM Module
Posted: 09 Mar 2020, 20:43
by ronald0001
after change to new module i found init...but not working
so i go to rfa programm keys....
i can open it also without having a working key....cuz send with canhacker ign on very fast....
ther you have also menu init....go ther than it ask you wich module...
i take rfa...it start loading but want pats incode...new generation...no free generator (1044 code1 code2)
in forscan rfa is meaning kvm and rfa