Chip-Tools

ITDEEN

EZS Kessy CAN: getting the login (PIN) and component security

Before you can do anything with the EZS-Kessy (key learning, VIN, EEPROM, dealer key) you need the car's login (PIN) and the first 6 bytes of the component security. This procedure covers the three ways of getting them, depending on whether or not the car has a working key.

Procedure

1. Connect the AVDI to the car and start "Abrites Diagnostics for VAG", then open the "EZS Kessy CAN" special function (the software opens a KWP2000 diagnostic session over TP 2.0 with "EZS-Kessy / Entry And Start Authorization"). The function covers the Q7 / A6 / Allroad models.
2. Method 1 - reading from the engine ECU: on cars up to 2008/2009 the login and component security can be read from the ECU. This applies to all cars with EDC16x / MED9x / ME7x / EDC17 / MED17 units. Use the "Engine control unit" special function, or extract the data from a decoded EEPROM dump read with a programmer.
3. Method 1, automatic: press the "Autodetect" button. The software connects to the engine ECU, reads the component security and login and fills in the required fields for you.
4. Method 2 - if the component security cannot be read from the ECU and you have a working key for the car: use "Get component security from EZS-Kessy by OBDII" to pull the component security and PIN straight from the EZS-Kessy.
5. Method 3 - if the car has no working key at all: open the EZS-Kessy up, read its EEPROM with a programmer, then select "Get component security from EZS Kessy" and load the EZS Kessy dump.
6. Note on component security: it is normally 7 bytes, but the 7th byte is not needed; the first 6 are enough.
7. If the car has no working key and you cannot get the ignition to ON so the ECU will communicate, bridge the fuses as described in the appendix (pin 1 and 16 of the OBDII). Once you have the component security bytes, put the fuses back.
8. If the car has no working key, communication with the EZS-Kessy is only possible while the brake pedal is held down.
9. With the login and component security in hand you can move on to key learning, dealer key creation, VIN or EEPROM read/write.

Reference screenshots