MWCUK Logo EuroRepar Logo

Car Servicing, Repairs & Diagnostics

Tricore Remapping

We can remap all Tricore protected ECUs fitted to vehicles from 2010 onwards. We can remap the 1.6TDI engine fitted to various Volkswagen, Audi, Seat & Skoda cars including the Golf, Passat, Polo, A1, A3 & A4.

Tricore protected ECUs

On the CR TDI and 1.8/2.0 Turbo Petrol engines with the latest Bosch ECU generation (MED17 for the petrols, EDC17 for the diesels - 'MEDC17'), Bosch implemented some increased security measures in an effort to protect against aftermarket reprogramming. On chip tuning and OBD tuning there are checksum calculations; ME7.5 ECU (1.8 Turbo) for example, contains about 70 different checksum blocks, and the result values are filtered through various functions to have a secure method of verifying data integrity. At around the same time, Bosch started using access control on the outside ECU reprogramming (that is what we call the OBD flashing nowadays). Of course, the chiptuning industry kept on and solved these functions with methods of correcting the checksums giving OBD programming capability with these ECUs.

The Problem

Bosch TriCore ECU Remapping by Cambridge Remaps

About 8 years ago, Bosch started using RSA signatures to control the ECU contents with the latest virtually un-crackable with traditional brute force methods. Since these keys were introduced, tuners have had to find other ways of programming the ECUs. When the MEDC17 ECU family was released, a backdoor was found in the programming algorithm. This ‘Tuning Protection’, as it is commonly called, just means that this backdoor has been sealed, and the ECU always checks the hash validity after every OBD programming attempt. If this is not valid, it sets a flag in the memory that prevents the car from starting. Our tools can detect this and we can over write the file via use of the equipment we have now invested in.

The Solution

Internal TriCore ECU Remapping of Bosch ECUs in Cambridge

On these protected ECUs, we therefore need to open the ECU and use a processor function built in to the TC17xx-series processors which allows us to boot and reset the ECU at any given moment from pins on the motherboard. This way the ECU does not detect it as being an OBD programming attempt and skips the hash validity check.

It also does not leave any signs of tuning. Once the work has been completed the ECU is resealed and we have the original anti-tamper bolts for replacement.

Retail Motor Industry Federation (RMI)Shell Helix Service CentreEuro Repar Service Centre

MWCUK Car Servicing, Repairs & Remaps
Chandos Farm, Cherry Hinton Road
Shelford Bottom, Cambridge CB22 3AB
01223 214591