/throws arms up in air.

well I'm confused.

thread_mine...

matt/luke any word on if the rpm value for the audible shift point can be changed. My rev limiter is now very much north of factory, and the factory value is far too low now.

Hi all,

Below is some important information regarding re-flashes using the Ford Module Programming software. I recently bought a cheap china Toyota J2534 device for $85.00 and have added a wire to pin 13 for the FEPS 18V signal. I can succesfully do a parameter reset (by using a incode/outcode generator), but after many hours of fault finding i couldn't do a re-flash as the following error kept coming up.

code 01 0x33 MODULE SECURITY ACCESS NOT GRANTED

(Note: i had just removed battery power prior which automatically re-invokes the DTC p1000 drive cycle test not complete)

I have just found out why, and it's because i have a DTC of p1000 which is the OBDII drive cycle not completed. Have a good read of an email from drewtechnologies below.

*******************************************
Grant,

You have to run through the drive cycle test up too 2x first before you can flash the ECM it looks like. Here is a link to the full drive cycle test:
http://www.obdii.com/drivecycleford.html
This code can cause the ecm not accept a new flash until it has been cleared.

Thank You,
Support at Drew Technologies
support@drewtech.com
---------------------------------------------------------------------------
Powered by FogBugz from Fog Creek Software. http://www.fogcreek.com/FogBugz


-----Original Message-----
Date: Mon, 16 May 2011 23:08:35 +1000
To: sales@drewtech.com
Subject: J2534 mon goose programming with Ford Module Programming

>Hello,
>
>
>I have a problem with using the ford FMP software and the programming
>with a security access error. I have a current DTC of p1000 which is
>the drive cycle not completed and found the following extract on your website.
>
>
>FYI: For post 2001 vehicles, if the PCM has a P1000 DTC, the vehicle
>must be driven through the drive cycle as outlined in the PC/ED manual
>to clear the code before it can be programmed.
>
>This is a major limitation for using the FMP software and was wondering
>whether you have experienced this and have any more info available on this.
>I spent numerous hours wondering why I couldn't re-flash, with no
>mention of it in the user manual anywhere.
>
>Regards

******************************************

I will post an update soon after i clear this error, as to whether i can succesfully re-flash again (i did manage to flash once, the first time i plugged it in, when i didn't have a p1000 code error, so i think the device works perfectly)
It appears that FORD have included some exra unwanted security with the FMP software so unless you can clear the DTC of p1000 and p1260 (theft detected) , you cannot re-flash.

Just wondering whether a new parameter reset will clear the p1000 code. I actually started it to test before i found out the above info, and hence the flash failed.

This is a major issue with the FMP software and is not mentioned anywhere in the user manual.

I forgot to mention that anytime you start the car, after disconnecting the battery or manually reset the error codes with a scantool, the P1000 code comes back to life.

I will try later but i am hoping a parameter reset automatically clears this error, so if i try a re-flash immediately after a parameter reset (which i haven't tried yet) it will flash ALL OK.



_

Last edited by raptorthumper on Tue May 17, 2011 12:27 pm, edited 1 time in total.

I haven't personally seen these other codes (drive cycle not completed, or theft detected), but the:
MODULE SECURITY ACCESS NOT GRANTED

Does occur if the ECU hasn't been unlocked by the SmartShield security system. I.e. you have to have the key in the ignition in the 'ON' position, but engine off.

OFF or ACC doesn't unlock the ECU.


Details of car you're trying, and the gear/software you're using please.

Datamine.

To answer you questions. First off i have

1. ScanXL ELM 2.0.11 with enhanced Ford & GM pid listing using elm327 V1.4 scantool to read error codes, display gauges and do full logging (works perfectly)
Note: Ford Module Programming FMP software from motorcraftservice cannot read error codes by itself

2. MINI VCI J2534 device for Toyota TIS Techstream V5.00.028
from here (with extra wire for 18V FEPS signal on pin 13 added, and laptop 12V to 18V DC-DC converter used)
http://www.auobd2.com/mini-vci-for-toyo ... 8-396.html






As a background
I have done an engine conversion with a BF falcon engine into a nissan patrol with the PATS re-flashed out of it. BUT the FMP software will not work without a body electronic module (BEM). So after i worked this out , i used my wife's territory as the basis for re-flashing and have re-flashed succesfully, on a spare ECU from the wreckers for my testing, but only managed this once, keep reading)

After i do a PCM parameter reset i can start the territory with my spare ECU from the wreckers, which is currently a 6 speed auto tune. If i can clear the P1000 code i will be able to re-flash this spare ECU to a 5 speed manual tune, tear tag code A5CG which is what's in my Nissan patrol (ECU hardware is ASU-151)


I am sure that i will be able to soon and will post updates then.

My build thread is located here
http://outerlimits4x4.com/ol3/viewtopic ... &start=210


*************************************************************************
My reason for posting is to let people know that unless they can clear the DTC P1000 code (P1260 can be cleared with a PCM parameter reset) you cannot use the FMP to re-flash the ECU... (Note it is possible that a PCM parameter reset does indeed turn off the P1000 code but since i started the engine before trying the re-flash i haven't as yet confirmed yes/no explicity)
*************************************************************************



Also youtube video here
http://www.youtube.com/watch?v=CB6NWx3oqeQ




_

Thanks for the info. You've certainly been thorough in your analysis, all my first thoughts have been shot down.

Probably a [short] dead end road, is the SCT products seem to never have trouble flashing my ECU. And it's frequently throwing O2 sensor codes. I don't know if you could figure out what they do that's special.

data_mine have you got a J2534 and tried the FMP software out.? I would also like to ask lukeyson a few questions about his 18V supply he uses and when he applied the voltage during the flash update.

_

No I don't, just regular scan tool devices

Got a serial ElmScan5, and a OBDKey (bluetooth one)

G’day guys,

I need same help from you.
I got new (September 2010) Falcon dedicated LPG BF MkIII station wagon and need to enable police mode there.
I was using absolutely the same commands as with other BF’s and SY:
ATZ - ELM327 v1.4
ATSP6 - OK
ATSH720 - OK
2103 - LV RESET

Can anyone tell me how to enable police mode in this vehicle or what to do with LV RESET?
Thanks

This is very likely wishful thinking, but does anyone know the algorithm for the seed/key pair on the BA and BF falcons.? This is the mode 27 security access seed/key request before the ECU grants security access for flashing.??


_

Hey guys, its been a long read thru the thread and I have taken note of Police mode and there was some mention of different fuel maps...

I have a 2003 BA Egas I6 A4 sedan, (changed to XR Cluster & ICC) now I think for some reason that my fuel gauge is on ULP Map, and want to change it to LPG map (on empty DTE 20 kms and still 15-20 litres to empty).....

I just bought a cheapy Elm 327 on ebay and want to be able to change it.

any other nicities I can add would be usefull too but just the info on the fuel mapping would be great if anyone has it....

You should be able to write the fuel/map using an ELM but I have never been successful doing it. It needs to be written using a multi line command which I have never worked out.

I can change the fuel/map using an eeprom reprogram though.

Matt

Bugga!

my scantool finally arrived and chucked it on the car...

tried a few different programs

Some read this and others read that, would be nice if all programs read all of the stuff that comes up!!!!

Now.... do you have a step by step guide to enable police mode??

I did a read on 2103
it came up with this...
28 04 61 03 01 00

which is different to everyone elses it seams.....