ECU Re-flashing without opening the enclosure | FerrariChat

ECU Re-flashing without opening the enclosure

Discussion in '612/599' started by brogenville, Jun 21, 2021.

Tags:

This site may earn a commission from merchant affiliate links, including eBay, Amazon, Skimlinks, and others.

  1. brogenville

    brogenville Formula 3
    Rossa Subscribed

    Apr 24, 2012
    2,020
    UK
    Full Name:
    Robin
    Hi guys,
    Thought I would share with you what I was up to yesterday. I'm helping out a guy in China with the manual conversion of his 599- I've been doing the ecu re-flashing for him with the ecu whisperer 360trev doing the clever firmware correction part. Trouble is, because of the GTO parts that the owner has on his car, we're not hopeful that the new flash will be right first time. All things can be done, but this one will probably take a little bit of trial and error.

    Clearly its no good sending the ecu's back and forward from China to the UK, so I wanted to make the ecu's easy to reflash for the owner. Unless you have the seedkey, then flashing is done by putting the ecu into whats called "boot mode". This is like a backdoor in the ecu that allows it to be started up using a boot loader over the K-line rather than using its own normal onboard firmware. This allows you to easily read and write to the flash / eeprom memory chips. On the 430/575/612/599 ecu's, you access boot mode by grounding the boot pin via a 10K ohm resistor for several seconds when it first starts. This involve opening up the ecu and directly accessing the pad on the ecu. Its a little bit of a faff, and certainly the scariest part of the process.

    What I did then was to modify the ecu's by making this something that can be done without having to open the ecu's. Its simply a push to make switch that connects the ground strip on the PCB with the boot pin, via a 10k resistor. All protected with heat shrink and held in place with hot glue. The switch sits inside the square envelope of the ecu, so shouldn't be depressed whilst in the car, and in any case will be ignored once the ecu has started up.

    For anyone out there thinking about flashing their ecu's with a performance tune, then the diagram below shows the location of the boot pad and the wiring you need to connect with your chosen flashing tool. I recommend Ktag - you'll be able to get a cheap clone on ebay for about £50.

    Image Unavailable, Please Login
    Image Unavailable, Please Login Image Unavailable, Please Login Image Unavailable, Please Login Image Unavailable, Please Login Image Unavailable, Please Login
     
    599_GTO and EastMemphis like this.
  2. tazandjan

    tazandjan Three Time F1 World Champ
    Lifetime Rossa Owner

    Jul 19, 2008
    38,075
    Clarksville, Tennessee
    Full Name:
    Terry H Phillips
    Robin- Very ingenious. Let us know how it works out on the conversion.

    I assume you use sealant on the ECU halves before you put her back together?
     
  3. brogenville

    brogenville Formula 3
    Rossa Subscribed

    Apr 24, 2012
    2,020
    UK
    Full Name:
    Robin
    Hi taz, the sealant Bosch use is non-setting, so you honestly don’t need to replace it. Doesn’t matter if an ecu has been opened a dozen times, you always have to pull quite hard to separate the two parts of the enclosure.

    Of topic, you can see on the sticker attached inside the ecu that it states 7.1.1, even though this is from a 599 which are supposed to be all 7.3.2, and which if you interrogate the Rom using 360trev’s tool, it self identifies as a 7.3.2. In practice, the reality is that they are all the same thing. My totally unproven theory is that Ferrari were saying one thing, and bosch, who would have had guys working inside Ferrari, were saying something else, hence the official literature uses both numbers.



    Sent from my iPhone using FerrariChat
     
  4. tazandjan

    tazandjan Three Time F1 World Champ
    Lifetime Rossa Owner

    Jul 19, 2008
    38,075
    Clarksville, Tennessee
    Full Name:
    Terry H Phillips
    Robin- Early 599s were 7.1.1, as were 612s, at least in the literature (both WSMs), but there does not seem to be much difference in 7.3.2, or 7.3.1 for the 360 either. There are a bunch of compatibility issues with early 599s (through SN 156938 for US) and the HGTE ECUs (TCU and Body/Shock ECU). Not sure what causes those. I originally thought it was the change to 7.3.2. The 612 quotes 7.3.2 fairly early. 138829 has 7.3.2 on its window sticker/Monroney and it was built in July 2004, so a very early MY05 here.

    Much of those WSMs was done very early on preproduction models and most of the document content was not updated later. The 599 WSM we have actually has quite a few updates, but 7.1.1 notation was never updated.
     
  5. QtrItalian

    QtrItalian Karting

    Jan 22, 2021
    172
    Two questions: Has the ECU/flash been cracked start to finish? ....or is the hex code still being investigated.?
    One a different topic has anyone figured out how to update the graphical oil temp/water temp bar graphs or curved graphs towards the modern dial format?
     
  6. brogenville

    brogenville Formula 3
    Rossa Subscribed

    Apr 24, 2012
    2,020
    UK
    Full Name:
    Robin
    Taz - what I'm saying is that all 612's and 599's (including GTO, which I have a copy of the firmware of now) are stated as both 7.1.1. and 7.3.2 depending on where you look. The software tools all use the flashing mode for 7.3.2, and thats what the firmware self identities as, but the ecu's are variously marked with labels inside and out with 7.1.1. There was a minor update to some 599 ecu's that got a different Bosch part number, but they still run the 7.3.2/7.1.1 firmware.

    Qtr - I think its fair to say that for 599/612, there are still a few area where 360trev is exploring, and certainly there are always functions that he's working on to automate. In principle however, he has achieved a level of command over these ecu's that is only comparable with the original Bosch engineers. This is well removed from most tuners, who are using tools like WinOLS to try to find and interpret tables in the firmware without any real understanding of all the control functions they impact.

    On the gauge cluster, I know some guy have downloaded the flash file on the cluster, and I've been messing about downloading the eeprom (useful in case you ever need to replace your gauge cluster and very easy), so I guess its all doable. This is speculation, but you would expect that the coding for the graphics to be on the flash, and all the settings for your car on the eeprom. So I would also expect that you could either get a later cluster and load it with a download from your existing eeprom, or load your flash file with one from a later car. I actually prefer the bar charts, as you get three gauges (oil pressure, oil temp and water temp) rather than just two with the gauges.
     
    QtrItalian likes this.

Share This Page