Extreme MB tools Mercedes programming tool

1. HASH section:

From H0 to H7 are the current key hashes for each Keys position

Used or Locked Positions -> "Used" is an occupied key position and "Locked" is a locked key position, also known as "Disabled Key Track". Locked key track hash is shown in RED color.

TP = Transport Protection Release Hash

P/N = EZS part number

MCU = microcontroller type within EZS (not all EZS support this option)

KM = Total number of kilometers currently stored in EZS

WRITE KM = used to write new kilometer value to EZS (only works on W164 UDS and W221/216 UDS protocols)

VIN = vehicle identification number / chassis number currently stored in EZS

WRITE VIN = Used to write a new VIN to EZS (only works on EZS that are NOT ACTIVATED)

2. SAFETY Section:

This field shows the SSID, Sonder and Serial Number of the EZS. It also has a field to paste the "Password". We've added a handy feature to the new software that will automatically paste a found password into the password field. The user will also notice within this security field that we have 2 " GET " buttons. These buttons are used to calculate ESL password and dealer password directly from EZS Reader panel, no more need to copy/paste....

OBD Checkbox -> When this option is selected, the program reads the EZS via its Diagnostic Line ( Kline/Canbus ). The user must connect a suitable J2534 device. More information about this can be found in Chapter 6.

HELP button -> Shows a detailed wiring diagram for the selected EZS. This allows the user to efficiently connect EZS to the bank.

- SSID -> This field shows the SSID of the EZS
- Sonder -> This field shows the EZS Sonder Hash. Sonder Hash can be called different names depending on the manufacturer of the tool. It's good to understand that Sonder/Special and Service Hash are all the same, just different terminology. The same goes for dealer password and clear password. From the Sonder, the user can calculate the dealer password required to renew EZS. With new software, user can now simply click on "GET" button to calculate dealer password efficiently.
- Password -> This field shows the password for the EZS, the password is basically the crypto mask used to encrypt the data exchange between the key and EZS. For correct operation, the EZS and the key must contain the same password.
-> This field displays the EZS serial number. This is a unique 16-digit number for each individual EZS. (Note - Serial number cannot be read via IR Portal on some types of EZS)
- ESL Password -> This field displays the calculated ESL password. This is derived from the EZS password, which means the EZS password must be present. The new software allows the user to calculate this by simply clicking the "GET" button next to this field
- Dealer password -> This field shows the calculated dealer password. This is derived from the Sonder Hash, which means that the Sonder Hash must be present. The new software allows the user to calculate this by simply clicking the "GET" button next to this field

Type II -> For some different EZS types to read the data we need to select this option - this option is only needed for later NEC type EZS such as W117, 166, W176, 197, 212, 218 and 246

3. EZS STATUS section:

Initialized – EZS are initialized at the factory
Personalized – EZS is personalized, which means that FBS data is written into it (hashes, SSID, password...)
Neutralized – EZS was renewed sometime in the past using a tool. Usually this is the case when an EZS has been taken from another vehicle, renewed, and then re-adapted to the current vehicle.
TP removed - This is transport protection. TP must be removed before the personalization process begins
. Activated – This means that EZS has been activated. When an EZS is "activated", it can no longer be personalized
Spare - This tells us that the EZS is a "spare part" EZS

“NOTE” There are 2 different types of EZS. 1.Series and 2.Spare. Series EZS are the original EZS installed at the factory during production. Spare EZS are replacement/aftersales EZS
Last Key – The number indicates the last key position used. Last used key Hash is shown in YELLOW color
Previous Key - The number indicates the previous key position used. Previous used key Hash is shown in BLUE color

EZS READ Button -> We use this button to "Read Data from EZS" When working on some EZS, the software will prompt you to reinsert IR KeyTool into EZS to complete data collection. Follow the on-screen instructions from Software.

EZS INFO button -> We use this button to read the security data from EZS without reading all the key hashes. Only the EZS status, SSID, Sonder and serial number are read when we use this button.

4. EZS OPTIONS Section:

ACTIVATE button -> This button is used to activate the ENS. This feature is very useful in specific situations where the user accidentally renews a Dealer-type EZS that cannot be re-personalized. This function makes it possible to restore the original functionality of the EZS.

CHECK PASSWORD button -> Check Password - Used to check if the password in the "Password" field really matches the EZS

REFRESH button -> Used to refresh an EZS. This function resets the EZS to its default values, a common reason to use this function is when you need to install a used EZS into another vehicle, after the EZS is refreshed the Vin will be unlocked and can be rewritten, also the current mileage stored in the used EZS is reset to zero upon renewal. The "Activated" status is also reset to the "Not activated" status, which means that it is now possible again to "personalize" the used EZS with the personalization data of the vehicle in which you want to install the used EZS. To use this function successfully, it is necessary to have the EZS password and the dealer password in the fields provided in the software. With new software, user can now simply click on "GET" button to calculate dealer password efficiently.

PERSONALIZE Button -> This Button will personalize a neutralized EZS. The new software automatically selects the EZS type based on the status of the "Spare" flag. When working with a neutralized reserve status EZS, it is sufficient to insert the IR KeyTool into the EZS and personalization will begin immediately. When working with a neutralized series status EZS it is essential to additionally authorize personalization with DAS / Xentry / Vediamo...

LOAD FBS3 DUMP button -> We use this button to load an FBS3 data dump (.ezs file) previously read/saved using EZS reader software

SAVE FBS3 DUMP button -> We use this button to save FBS3 data. The file is saved in the old HC05 EZS format with the extension .ezs

5. W204/212 ESL/EMU section:

This section contains 4 buttons
GET ESL STATUS button - Reads the status of a real ESL via the EZS IR. Useful option to determine whether a Real NEC ESL is 0xAA Blocked

REFRESH EMU Button - When used with our emulators, this option can be used to refresh the emulator and return it to the default "OLD mode"

PERSONALIZE ESL button – This option is used to personalize a true NEC type ESL or can also be used to personalize any W204/212/176 ESL emulator that supports the standard W204/212/176 ESL personalization protocol. To use this feature successfully, you will need the "EZS Password" and also the "Dealer Password" inserted into the fields in the software. With new software, user can now simply click on "GET" button to calculate dealer password efficiently. The only tool in the world that can successfully personalize and activate a renewed FBS3 ESL from - W176/117/246/156

PERSONALIZE EMU button - This option is used to personalize our emulator. To use this feature successfully, you just need to enter the "ESL Password" into the field in the software. Now with new software, user can simply click on "GET" button to calculate dealer password efficiently

EZS TERMINAL CHECK Button - This option allows the user to test the functionality of an EZS on the bench. Useful when the user needs to check for proper operation/synchronization of an EZS/ESL/Emulator. The option also includes its own built-in ESL emulation function. This is useful when working on the couch without a real ESL or Emulator connected. ESL emulation function also supports later ESL that requires ESL password (W204/212/176...)

EZS TERMINALS dialog box:
Physical position = actual ENS key position
Logical status = EZS key position output signal on the Can Bus

H0 = Key turned slightly (for first position)
15C = Key inserted
15R = Key turned to accessory (First position)
15 = Key turned to ignition ON (Second position, remains ON during starting)
15X = Key turned to ignition ON (Second position, OFF during crank)
50 = crankshaft (starter signal output)

6. Working with a compatible J2534 OBD device:
To use the OBD option, the user must first install the drivers for their J2534 device. Then they need to click on the "Settings" option in the top banner of the program and select their device from the list of installed J2534 devices. Finally, click "SAVE"

1. IMPORTANT INFORMATION Section:

READ Button -> By pressing the "Read" button, the user can read various information of the BE, EB, EA, A1 and other after market keys, such as the key ID, status, firmware, remote and remaining life of the key.

2. WRITE KEY EEPROM Section:

WRITE Button -> When the user clicks the "Write" button, they will be prompted to load the key file to write to the key. Now choose the key file you want to use, click open and the software will write the key file to the key. After writing the key dump, the software will ask you if you want to activate the key. This option is here because when working with the old HC05 EZS, sometimes the after market keys do not automatically activate in the EZS. It is good practice to use the "Activate Key" option when preparing an aftermarket key for one of these old HC05 type EZS.

Password field -> Displays the key password written on the keys Eeprom

Initial Hash -> Displays the Initial Hash written to the Keys Eeprom

3. IMPORTANT FREQUENCY Section:

For the X-Horse BE Keys we can also read and change the frequency of the remote control. The current frequency mode is displayed when the user has clicked the read button in the " IMPORTANT INFO " section. The user can then choose between the 3 different modes:
- FRE (Resistor controlled)
- 315MHz
- 433MHz
Then click the “SET” button and this will SET the selected frequency mode of the key.

4. KEY RENEWAL Section:

NORMAL button -> This button clears the Eeprom in the aftermarket keys to all zeros, resulting in status "0000" This status is also known as "key prepared for normal writing"

CRYPTO Button -> This button sets the status of the aftermarket keys to "21DF" This status is also known as "Key Prepared for Crypto Write"

5. KEY READING EEPROM Section:

READ Button -> When the user clicks the "READ" button, the software reads the Eeprom of the aftermarket key. When reading is complete, the software will prompt the user to save the file.

Password field -> Displays the key password read from the keys Eeprom

Initial Hash -> Displays the Initial Hash read from the Keys Eeprom

1. EZS ALL KEYS LOST DATA ACQUISITION Section:

This field displays the values ​​for the emulated key and also displays the password if found.

REMARK!!!
We have taken steps to automate this selection, meaning that in normal situations the user does not need to change these default settings at all.

- Key -> This is the actual key that we are simulating during the AKL process.

- Life -> The life counter of the emulated key

- Active -> If checked, it means the emulated key is "activated".

- Tasks -> If checked, it means that the lifetime counter will change with each authentication

- Password -> This field is where the found password is displayed

2. EZS INFO section:

- Model -> Use the drop-down list to choose the correct model (a full list of supported models for AKL can be found below)

- SSID -> This field shows the SSID of the EZS

- Sonder -> This field shows the EZS Sonder Hash

- Counter -> The number of hashes collected from the EZS (1 list contains 1024)

HELP button -> Shows a detailed wiring diagram for the selected EZS. Please note that the described models "IR Key Tool" are supported for AKL in the car and also on the sofa. For all other models, connections must be made to the EZS on the bench only and in series with our "Power Adapter"

INFO button -> Reads the SSID and Sonder Hash from EZS using IR Key Tool

ALL KEYS LOST button -> This starts collecting data from EZS which is saved as a list file. The file is used to calculate the EZS password on the server

1. GO button -> This starts reading the EZS password via the IR portal.

2. Password -> This is the actual "Real" EZS password calculated and checked by our software, because we check the password before it is displayed in this field, you can be 100% sure that it matches the EZS.

Customers with a valid annual subscription can use the software for FREE to calculate passwords. There are no TOKENS. There are limits for using each of the features, but these limits are more than sufficient even for professional workshops:

3 FREE Daily Calculations for Sonderhash Calculations (Dealer Hash)

3 FREE daily calculations for ESL password calculation

3 FREE daily calculations for calculating EZS dump key files

3 FREE daily calculations for EZS password calculation