MIB2

From Automotive Wiki from mr-fix
Revision as of 16:17, 25 January 2020 by Admin (talk | contribs) (→‎FEC / SWaP Codes)
Jump to: navigation, search

Cars and Devices

Volkswagen

Composition Media MIB2, Discover Media MIB2, Discover Pro MIB2.

  • VW Golf MK7 (5G)
  • VW Passat B8
  • VW Tiguan MK2

Skoda

  • Skoda Karoq (NU)
  • Skoda Kodiaq (NS)
  • Skoda Octavia (5E)
  • Skoda Yeti (5L)
  • Skoda Superb (3V)

Seat

  • Seat Leon (5F)
  • Seat Ibiza (5P)
  • Seat Arona
  • Seat Ateca
  • Seat Toledo
  • Seat Alhambra

Porsche

PCM4.0 Infotainment system

FEC / SWaP Codes

SWaP is short for SoftWare as a Product. This is a strategy to sell and protect optional features and functionality for Audi, Volkswagen, Seat, Skoda, and Porsche infotainment units as if it was an actual material product. Most likely it's cheaper to manufacture an infotainment headunit that is equipped with hardware supporting all features and the lock out these that were not play for, than to have separate hardware configurations designed for each variant of optional equipment. This method gives also chance to cross sell additional features later on.
Here's where the FEC comes in. It's short for Function Enabling Code, and this is exactly what it does. After buying such code for feature that you are interested in having, dealer is installing it in your cars infotainment headunit and from now on desired feature is available for you.

List of SWaP Codes

  • 00030000 AMI (USB Enable)
  • 00030001 Gracenote
  • 00040100 Navigation
  • 00050000 Bluetooth
  • 00060100 Vehicle Data Interface
  • 00060200 Infotaiment Control
  • 00060300 Mirror Link
  • 00060400 Sport HMI / Performence Monitor
  • 00060500 Sport Chrono
  • 00060600 Logbook
  • 00060700 Online services
  • 00060800 Apple Carplay
  • 00060900 Google Automotive Link / Android Auto
  • 00070100 SDS
  • 00070200 SDS for Nav
  • 00070400 Electronic Voice Amplifier

Legal activation

You can buy at the dealership activation codes for some features.

VW

  • 5G0 054 830A - App-Connect (CarPlay, AndroidAuto, MirrorLink)
  • 5G0 054 809 - Driving Modes
  • 5G0 054 802 - Voice Activation
  • 5G0 054 802A - Voice Activation with Navigation
  • 5G0 054 801 - Driver Alert

Skoda

  • 000 054 830A - Smart Link (CarPlay, AndroidAuto, MirrorLink) [1]
  • 000 054 802 - Voice Activation
  • 000 054 802A - Voice Activation with Navigation
  • 5E0 054 801 - Driver Alert

Seat

  • 5F0 054 830 - Full Link (CarPlay, AndroidAuto, MirrorLink)

Audi

  • 4M0 051 472 - Audi Smartphone interface


Generating FecContainer.fec

  • MIB2_FEC_Generator.sh [2]
  • WhatTheFec

Hacking

In some cases hacking is the only way to enable some features in some cars. For example Porsche PCM4.0 was not available from factory with Android Auto support. Also there is no FEC for Performance Monitor if it was not enabled from the factory.
Hacking MIB2 is basically 3-step process:

  1. Access filesystem
  2. Patch the system
  3. Insert custom FEC file

Connection methods

USB to RJ45

By enabling Developer Mode and connecting UBS to Ethernet adapter. [3]

  • D-Link DUB-E100 (0x2001, 0x3c05)
  • D-Link DUB-E100 (0x2001, 0x1a02)
  • SMSC9500 (0x0424, 0x9500)
  • Germaneers LAN9514 (0x2721, 0xec00)
  • Cinterion AH6A 3G (0x1e2d, 0x0055)
  • Cinterion ALS1/ALS6 (0x1e2d, 0x0060)

Quadlock Rx/Tx

  1. Adapter GND to car GND
  2. Adapter RX to J5_TX
  3. Adapter TX to J5_RX [4]

WLAN

  1. Create access point with your phone (or any other device)
  2. Connect your MIB2 device to this access point
  3. MIB2 will get a local IP - connect to this IP using telnet on port 23

POI update

Custom update files that will inject additional custom hidden green menu screens with options to copy and replace system files. [5].
POI update file must be prepared with correct structure and checksums. [6][7]

autorun script

In Discover Pro firmware 388 it is possible to execute a script named autorun placed on USB stick [8]

Patching system and replacing FEC file

Audi MIB2 / HMI2

VW, Seat, Skoda, Porsche MIB2 [9]

  1. Connect with MIB2-PCM4 via UART
  2. Launch a serial connection - 115200, 8, N, 1
  3. Login with root / oaIQOqkW
  4. Download Root-IFS
  5. Unpack Root-IFS (if using downloaded image from PCM4)
  6. Patch out the FEC checks.
  7. Rebuild IFS image
  8. Create your new FEC file
  9. Load new files to head unit
  10. change adaptation values as needed

MIB2 Root passwords [10][11][12]

by FW number and hash

  • SW: MU0037; hash: YkPcl4j9aGl5Y; pass: Sujqya2Y
  • SW: MU0038; hash: h3Urw56qsfAX2; pass: SujqkaMY
  • SW: MU0039; hash: YkPcl4j9aGl5Y; pass: Sujqya2Y
  • SW: MU0039; hash: h3Urw56qsfAX2; pass: SujqkaMY
  • SW: MU0040; hash: 8oHrP463vKnlM; pass: SujqdaEY
  • SW: MU0042; hash: 8oHrP463vKnIM; pass: SujqdaEY
  • SW: MU0084; hash: kdI5u8rP7mFYc; pass: m0wEE6a0
  • SW: MU0109; hash: cRYh.CdDRnbFM; pass: GGmqam2i
  • SW: MU0118; hash: bzL9U6lSJyYdw; pass: g4Q8aGWk
  • SW: MU0143; hash: cRYh.CdDRnbFM; pass: GGmqam2i
  • SW: MU0144; hash: FphlskoahdSMY; pass: C4meu6a0
  • SW: MU0200; hash: f7otIPwQDbHLw; pass: w0KNCpqb
  • SW: MU0335; hash: XjW1rJZx6V9Aw; pass: eQQYUkoG
  • SW: MU0358; hash: xxGvoFcxCZZmM; pass: H0ga6uyk
  • SW: MU0364; hash: qj1oU/1fwUQ4c; pass: ayWDsC6f
  • SW: MU0387; hash: cRYh.CdDRnbFM; pass: GGmqam2i
  • SW: MU0388; hash: hSus0StRpgTCc; pass: WyQYeuyS
  • SW: MU0389; hash: WmRI0ymbfbbUw; pass: GgsAWalI
  • SW: MU0404; hash: lVgttd5Ve94w6; pass: eQQYUkCS
  • SW: MU0406; hash: cRYh.CdDRnbFM; pass: GGmqam2i
  • SW: MU0407; hash: hSus0StRpgTCc; pass: WyQYeuyS
  • SW: MU0408; hash: f9tmg9EzVu4jU; pass: yYdUGum8
  • SW: MU0443; hash: AvC63IhPTFvZc; pass: sUga20yS
  • SW: MU0618; hash: h3Urw56qsfAX2; pass: SujqkaMY
  • SW: MU0618; hash: bUft6BktUIBJo; pass: 2aB0iMCE
  • SW: MU0627; hash: j0Q5rHGV5xOB2; pass: OarOyKwe
  • SW: MU0670; hash: daPzPBI8LXeWY; pass: waMC0ISm
  • SW: MU0671; hash: C6k93ArZh4bmg; pass: ea2gvin8
  • SW: MU0692; hash: IByYGDDGItq6k; pass: ea2giuc8
  • SW: MU0728; hash: YOeexrS1o01TU; pass: C4meu6a0
  • SW: MU0814; hash: f7otIPwQDbHLw; pass: w0KNCpqb
  • SW: MU0814; hash: j.fNfxO51h15I; pass: UaIIm8IY
  • SW: MU0884; hash: qj1oU/1fwUQ4c; pass: ayWDsC6f
  • SW: MU0885; hash: iTU5jMSWigSls; pass: aAWqKW6w
  • SW: MU0888; hash: AvC63IhPTFvZc; pass: sUga20yS
  • SW: MU0889; hash: VQJvWydYhMl.Y; pass: OwsOyaAM
  • SW: MU0901; hash: cRYh.CdDRnbFM; pass: GGmqam2i
  • SW: MU0910; hash: y3KPlFJ9S9Qno; pass: A2ywIXaE
  • SW: MU0915; hash: I6mv2x3OT4/gw; pass: 2yaiMo8R
  • SW: MU0916; hash: qj1oU/1fwUQ4c; pass: ayWDsC6f
  • SW: MU0918; hash: Z6aLPOhUIHVPA; pass: o08sYcaQ
  • SW: MU0924; hash: WmRI0ymbfbbUw; pass: GgsAWalI
  • SW: MU0925; hash: C6k93ArZh4bmg; pass: ea2gvin8
  • SW: MU0976; hash: xxGvoFcxCZZmM; pass: H0ga6uyk
  • SW: MU0980; hash: C6k93ArZh4bmg; pass: ea2gvin8
  • SW: MU1002; hash: I6mv2x3OT4/gw; pass: 2yaiMo8R
  • SW: MU1027; hash: daPzPBI8LXeWY; pass: waMC0ISm
  • SW: MU1028; hash: lmZz673vpMobM; pass: Ca2Mww0I
  • SW: MU1062; hash: cRYh.CdDRnbFM; pass: GGmqam2i
  • SW: MU1156; hash: 7Zgu5NzBRkWIA; pass: 3mgaGO4k
  • SW: MU1168; hash: ADy5FeoleTqjg; pass: 4SapmKoq
  • SW: MU1178; hash: 2fa/Xd4EXvTiw; pass: 2yaboo8k
  • SW: MU1187; hash: j.fNfxO51h15I; pass: UaIIm8IY
  • SW: MU1196; hash: dDzFICCMlJ/CM; pass: i6aeySCk
  • SW: MU1235; hash: ug1FAyY3OR6QU; pass: 4SapOKAq
  • SW: MU1271; hash: 8RLI4s3qqi8Rw; pass: 2yavoUEZ
  • SW: MU1312; hash: 5Qg/rnSz6O9U2; pass: i6aesS0k
  • SW: MU1316; hash: 2fa/Xd4EXvTiw; pass: 2yaboo8k
  • SW: MU1325; hash: ug1FAyY3OR6QU; pass: 4SapOKAq
  • SW: MU1326; hash: fNlvE6lQlHu/U; pass: 4SapmKoq
  • SW: MU1329; hash: 8RLI4s3qqi8Rw; pass: 2yavoUEZ
  • SW: MU1339; hash: KwYl9yC6fLZg2; pass: 4SapIKYq
  • SW: MU1340; hash: KwYl9yC6fLZg2; pass: 4SapIKYq
  • SW: MU1389; hash: hJeq.IDqYhTJ2; pass: i6aegSMk
  • SW: MU1390; hash: hJeq.IDqYhTJ2; pass: i6aegSMk

by FW number

  • SW: MU1120; pass: CeaCCDmi
  • SW: MU1012; pass: CeaCCDmi
  • SW: MU0917; pass: o0WgYQaw

by hash

  • hash: NwPud9oq0ANzQ; pass: 8Ug4a8me
  • hash: 49HNkitQ.U2JM; pass: cyam6Kgk
  • hash: qXMwmMYsvSIvQ; pass: cyam6osk
  • hash: JXqm.qJ0qCz.Q; pass: GadsRwf8
  • hash: HSipHBbvhhSrI; pass: harman_f
  • hash: WSOsb7PjEkrRY; pass: cwywWXaE
  • hash: bbOLezulT.YHw; pass: 3UgaGOCI
  • hash: 9Gv65mo7WvCoM; pass: esoVW621
  • hash: CRQvLXBZHo.vk; pass: SRT#R00t

unassigned

  • UcaoyIuf
  • ESgacQ4S
  • KaIsuEK0
  • oaIQOqkW <- most common one in MIB2HIGH tutorials
  • u2ahui0o
  • g8aKCvSJ
  • ↑ https://shop.praga-auto.com.ua/userfiles/files/000054830A_EN.PDF
  • ↑ https://github.com/herrfrei/PorschePCMStuff
  • ↑ https://www.speakev.com/threads/who-wants-to-share-his-her-discover-pro-mib2-vcds-controller-channel-map.22361/page-2#post-1241153
  • ↑ https://rennlist.com/forums/991/1049794-porsche-pcm-upgrade-hack-for-android-auto-is-this-real.html
  • ↑ https://github.com/jilleb/mib2-toolbox
  • ↑ https://github.com/jimmyH/mypois
  • ↑ https://github.com/mcaddy/audipoi
  • ↑ https://turbo-quattro.com/archive/index.php/t-23041.html
  • ↑ https://cartechnology.co.uk/showthread.php?tid=56065&page=2&fbclid=IwAR1NYi3njsAcjZbXAgBVeB6gRet2VpxQHdusMtOqLtDs6Ev7o0ssbL4L-qQ
  • ↑ https://gpszone.ro/viewtopic.php?t=3267
  • ↑ https://forums.vwvortex.com/showthread.php?7159156-Discover-Pro-Hack-may-be-possible&p=101223921&viewfull=1#post101223921
  • ↑ https://turbo-quattro.com/archive/index.php/t-23041.html
    • Retrieved from "http://wiki.mr-fix.info/index.php?title=MIB2&oldid=179"