1 KEY NO PIN NO FOBS No Start. HELP..

I like the system personally and don't see the big deal, albeit mine works and the spares do also and the car starts by doing the key sequence with the pin

The issue IMO is getting to that point if the object car is not fully functional. The OP can't even join this debate on disarming it until he figures out how to get the car started

I hope he follows this thread and updates on how he does it. I don't think I have seen a post from someone starting at the point he is at to conclusion.

Did Bruce sell his system from the car he's parting out?

 

Yes.

 

Dave and Brian,

When you tried this experiment, did you remove the key from the ignition?

The reason I ask is I have a Porsche of similar vintage as the F355 (993) with a Bosch ecu and immobilizer and it functions similarly. However when you shut down, if I recall, if the key is not removed, the immobilizer does not arm.

 

Yes. I got in the car, started as normal. I then shut it down, removed the key and sat there (in the car) for just over 2 minutes. Then I started the car again with no need to dis arm the immobilizer.

 

Did you guys find any useful info in the doc I posted?

 

I've seen that before. Not really that useful except it has some P/N's referenced.

 

I did!!!! Thanks!

 

Yes Eric.

If I was the OP at this point I would try the neutralization solution outlined in that.

Nothing to lose.

 

I'd love it if he would try that. I'm afraid to do it with my car because if I screw up the immobilizer I'm done!

 

Dave
I live in Canada we dont need to lock our doors....smile

 

I was thinking the same thing. It says it's for a Ford probe immobilizer defeat. I'd be afraid to try it on a working system just for fun, but if I was in the OPs situation I'd go for it and let us know how it goes.

 

Could a guy just take a day off work, set a case of beer in the passenger seat, a note pad, and start to try to find the pin with the key? With a 4 digit pin and no zeros it should only be 6000 ish different number combinations.

1111
1112
1113

You might be a touch insane by the 9000s, but could save a grand on that retrieval bill.

 

And probably smoke the ignition mechanism

 

The procedure itself for one number is onerous, I have done it a few times. The zeros do count and the zero is 10 key turns.

Theoretically it is doable. Practically...yikes

1) Insert the ignition key and wait at least 20 seconds with the ignition
key in off.
2) Turn the key from off to on and back to off as quickly as possible
(less than 2 seconds for all PIN numbers) 3 times (count to 3 out
loud) for the first PIN number “3”.
3) Count to 5 out loud (a good compromise between more than 2 and
less than 20 seconds) before starting the second PIN number.
4) Turn the key off-on-off 2 times for the second PIN number “2”.
5) Count to 5.
6) Turn the key off-on-off 10 times for the third PIN number “0”.
7) Count to 5.
8) Turn the key off-on-off four times for the fourth and last PIN
number “4”.
9) At this point the PIN is entered. After 5 seconds or so, turn the key
back to on and after 2 seconds or a bit more with the key in the on
position, the alarm light emitting diode (LED) will go off and you
can start the car. Starting the car confirms you can correctly enter
the PIN, the first step in reprogramming the Alarm ECU to accept
new remote alarm fobs. Keep trying if you do not succeed the first
time, remembering to wait more than 20 seconds before the next
attempt.

 

The key flip is essentially setting a bit or sending a pulse, writing the software to simulate this action is straightforward. But what wires do you need to patch the laptop into to have the car "think" you're flipping the key...?

 

Yikes, I don't have my PIN so I've never tried it. I didn't know there were zeros, That adds 4000 combinations. Better make it two cases of beer.

 

Now I like that Phil. You could positap the ignition leads, simulate a key turn and write the code to have the computer find the pin?

 

Since we’re throwing out secrets for everyone to see.

I would jump the starter side of the immobilizer relay first. The F355 share the same immobilizer as the 993TT’s and this is how they disable the immobilizer. They have even tested it on a F355 and it worked.

 

Only for cars wired to disable the starter, that would not work on mine.

 

So with yours, does the immobilizer disable the ignition or fuel? If you can figure that out, you would probably just need to jump the ignition or fuel side of the immobilizer relay. Just guessing.

If I knew where that relay was, I'd try it out this weekend. I should probably download the wiring schematics.

 

There is a pin going into the ECU that tells the ECU to disable the power to the ignition and pump circuits. Would anybody want to try to wiggle that pin?

 

I'm very impressed. You guys are figuring it out!
I'm doubly impressed because nobody has called anybody and idiot yet.
Buncha smart people solving a problem. Very cool indeed. Following this thread closely, I'm just not smart enough to contribute anything but encouragement.

 

I suspect that is correct but don't really know for sure. It's something I'm willing to dig into when the snow flys.

 

Theres a chip in the ECU that can be programmed also from what I "understand" thats universal to the bosch system of that era BMW Porsche Ferrari etc

Or has anyone tried a VAG drive box ?
Image Unavailable, Please Login

 

I can line up the technical resources but I need more info about the use case:

Does anyone know if the system goes into failsafe and totally shuts down if too many unsucessful attempts are made? If my application blasts a couple thousands attempts I don't want it to disable the system altogether.

Once the app issues the correct sequence, and actually even when an incorrect sequence is entered, does the system respond with an acknowledgement?

Assume the signal is 12volts?

Does it have to patch into the ignition wires or could the OBD port be used as the interface?

Most of this could probably be reverse engineered, but, having just got my 355 a couple months ago in no way will it be the test mule for this.