Chip-Tools

ITDEEN

W220/W215/R230: EZS password extraction with the ZN051 DS-Box (in car or on the bench)

On W220, W215 and R230 the password is read in the "DAS Manager" just like on any Mercedes with an infrared EZS, but when prompted you must pick the Relay method. The job can be done either in the car or on the bench: here are the three bench wiring options for the EZS.

Procedure

1. Open the "DAS Manager" and start reading the password as on any Mercedes with an infrared EZS; when the prompt appears, choose the Relay method.
2. Method 1 - EZS wired straight to the ZN051 DS-Box: EZS GND to the DS-Box GND (the power supply GND goes there too); EZS CH and CL to CAN 3-11 on the DS-Box; K-Line to K1 on the DS-Box; EZS +12V to the 2nd relay slot (right); feed both DS-Box and EZS with +12V through the B+ socket and the 1st relay slot (left).
3. Method 2 - EZS to the DS-Box Relay via the DB25 connector: EZS GND to pins 5 and 6 of the DB25; EZS CH and CL to pin 4 (CH) and pin 12 (CL); EZS K-Line to pin 2; EZS +12V to the 2nd relay slot (right) of the DS-Box; power the DS-Box through the B+ and GND sockets; pin 17 of the DB25 to the 1st relay slot (left) of the DS-Box.
4. Method 3 - EZS to the DS-Box Relay via the OBDII connector: EZS GND to pins 4 and 5 of the OBD; EZS CH and CL to pin 3 (CH) and pin 11 (CL); EZS K-Line to pin 1; EZS +12V to the 2nd relay slot (right); power the DS-Box through the B+ and GND sockets; pin 16 of the OBD connector to the 1st relay slot (left) of the DS-Box.
5. Wire in the switch as required and use it to turn the ignition on when the software asks.
6. Let the password extraction run through to the end.

Reference screenshots