Chip-Tools

ITDEEN

W221/W216/W164/W251 pre-facelift: EZS password with all keys lost

Procedure for extracting the EZS/EIS password on pre-facelift W221, W216, W164 and W251 when all keys are lost, working with the "DAS Manager", the IR adapter and the ZN051 over the internal powertrain CAN.

Procedure

1. Connect the ZN051 distribution box to the AVDI and check that the purple cable set is connected to CAN H and CAN L (3-11). Connect the OBD cable to the ZN051.
2. Connect the IR adapter to the AVDI and set it aside.
3. Locate the internal powertrain CAN (green/white = CAN H; solid green = CAN L) and tap the purple cables onto it using the needle connectors supplied.
4. Start the extraction as you would on any other vehicle: read in the "DAS Manager", press "Get EZS pass", then select IR adapter and PROTAG.
5. When the procedure asks you to remove the ISM/DSM, it is easier to pull the fuse: on W221 it is passenger-side fuse no. 83, 30A; on W164 remove the ECU fuse if asked, front right of the engine bay (petrol fuses 103, 105; diesel fuses 101, 103, 105).
6. On W164 the EZS fuse sits in slot 14 of the passenger-side fuse box: fit the Fuse Adapter into the slot and connect the adapter to the DS-Box Relay.
7. On W221 the EZS fuse is in the front SAM, fuse 37 (7.5A), which feeds the ISM/DSM backup supply: connect its slot to the DS-Box Relay through the Fuse Adapter.
8. Wait around 5 minutes with the fuse out for the ISM/DSM to discharge.
9. Let the extraction run: the extracted data starts appearing at the bottom of the window.
10. Once the password is out, with an active AMS and internet you can program a key to the vehicle with the PROTAG.

Reference screenshots