All keys lost on Toyota with H-type mechanical key: reset and sniffing with ZN068 and ZN067
Toyota/LexusInterface ClassicKeys / ImmoAdvanced⏱ from 30 min to over 1 hour13 steps
Procedure for Toyotas with an H-type (DST AES) mechanical key when all keys are lost. You first try to reset the immobiliser; if that fails you move on to sniffing the communication with the ZN068 adapter and to connecting internally to the fuses and the key switch with the ZN067, until the secret key is found and the sniffer can be prepared as a master key.
Required licences
—
Hardware / cables
AVDI
cavo OBDII
ZN068 (adattatore Toyota H)
ZN067 (adattatore Toyota H)
PROTAG
⚠ WarningDo NOT stop the software, unplug the USB or shut down the PC for any reason during the procedure: if you do you have to start all over again, preparation included. The software tries the immobox generations in this order: 1st generation US market, 1st generation EU market, 2nd generation; you do not need to know the type in advance.
Procedure
Connect the AVDI to the OBDII socket, start Abrites Diagnostics for Toyota and launch the procedure. When the reset message appears choose "Yes": 1st generation US market systems can be reset even with no master key at all.
If the software goes ahead with the reset, turn the ignition OFF but leave the key in the slot as shown on screen. Within 15-30 minutes the message appears saying the IMMO has been reset successfully: the car is in "Auto learning mode" and the first key you turn the ignition ON with will be programmed.
If the reset fails, the message comes within the first 30 seconds: it means the car is probably fitted with an H chip and the software moves on to try Toyota 1st generation EU.
1st generation EU - Turn the ignition ON as requested and hold the ZN068 adapter close to the immobiliser antenna for 30 seconds. If this is the system, the sniffer can be prepared as a master key: once that is done you go straight into key programming (you now have a master).
If you get the message that the sniffs were not sufficient, the car is not 1st generation: leave the ZN068 connected and carry on.
Connect the ZN067 to the AVDI and find the immobiliser fuses: battery fuse (B+), ignition fuse and key in switch fuse. Have the model's wiring diagram to hand; if you do not have one, use the live data method described in the dedicated guide.
Confirm every connection you have made in the software. If you have got something wrong the software tells you: go back over the steps and check again before carrying on.
Once confirmed, the software starts the reset. It can take up to 30 minutes, but in most cases it is done in 5-6 minutes.
At the end of the process the ZN068 gives five beeps and the software reports that the secret key has been found and asks you to connect the sniffer. Connect it and press the button to prepare it as a master key for that vehicle.
Put all the fuses back where they belong and restore the key in switch connection as shown in the next message, then turn the ignition ON.
The software goes automatically into key programming: carry on according to the vehicle's specification (with or without key in switch) and program new keys, used keys or the Abrites TA30 key.
Bear in mind that the ZN068 stays a master until you disconnect the AVDI or the ZN068 itself: as long as it stays connected you can use it to program keys or to start the car. The ZN068 and TA30 are reusable, you do not need a new sniffer for each vehicle.
Reference screenshots
Source: Manuale Toyota/Lexus/Scion, cap. 5 - All keys lost H-type (p.16-18, 21) · ⏱ estimated time from 30 min to over 1 hour