Is yours pre LCI I forgot?

Sent from my SM-N960U using Tapatalk

Same here. Cool. Will order mine soon...
Thanks again!

Sent from my SM-N960U using Tapatalk

Please let us know when you try them out and report back...
Thanks

Sent from my SM-N960U using Tapatalk

Did you get your keys?

Sent from my SM-N960U using Tapatalk

Cool. Thanks for reporting back.
[emoji846]

Sent from my SM-N960U using Tapatalk

Key Personalization Software functions discovered
 

I was coding the '13 to add the trailer towing module; used ISTA/P and an ICOM. Worked fine. After digging around and not finding any key-specific options for the E70 LCI in the programmer I switched to the diagnostic tool ISTA/D.

I found two useful documents:

FUB-FUB-VOD0203FBE606132001

Service functions
Renewing control units
The following points must be borne in mind when the CAS or the engine control unit are renewed:
- If a CAS control unit is renewed, it must be ordered using the vehicle identification number (VIN). Following installation, that
starting value must be adjusted to the engine control unit. This starting value adjustment is performed using the service function ”DME/DDE - CAS calibration” in the BMW diagnosis system.
- If the engine control unit is renewed, the drive-enable code must be transferred from the CAS to the engine control unit following installation. This procedure is also performed using the service function ”DME/DDE - CAS adjustment” in the BMW diagnosis system.
- After the adjustment of the EWS and engine control unit, these are mutually linked. It is not possible to replace one of the two control units as a test.
DME/DDE - CAS adjustment
In the case of a new engine control unit, the service function ”DME/DDE - CAS adjustment” in the BMW diagnosis system is used to read the EWS drive-enable code from the CAS and transfer it into the engine control unit. This means that the engine control unit and the CAS control unit are mutually linked.
If the engine control unit is already linked to the CAS, the service function is used to perform a starting value calibration. This means that the random code calculation between the CAS and the engine control unit is adjusted.
A start calibration is required if there is a variance in the rolling codes caused by the influence of errors in the two control units.
As of EWS4, a start calibration is no longer required.
Locking the remote key/spare key
The service function ”Remote key/Lock/Enable Key” in the BMW diagnosis system can be used to lock or enable remote key keys or spare keys.
The locking is recommended when a remote key or a spare key is lost or stolen. With a locked remote key (or spare key), engine start is not possible. The functions of the remote key are also locked.
A remote key or a spare key can only be locked if the remote key or spare key has been used at least once and it is not inserted in the ignition lock.
To perform the service function, it is required that a valid and enabled remote key or a valid and enabled spare key is detected in the ignition lock.
Activating of a new remote key
Insert the new remote key in the insertion slot and hold in this position until the remote key locks into place. This can take up to ten seconds. After locking, wait another five seconds. The remote key is then ready for use.
If the remote key is a replacement for a lost or defective remote key, the old remote key still has to be blocked using the service function ”lock/release” (see above). To use the Car/Key functions, the service function ”Personalisation number” has to be run.

FUB-HIL-SCM0902HI-6100003

For each vehicle, the Car Access System (CAS) manages two different numbers for the remote control belonging to the vehicle and for each spare key.
Key number
The key number is part of the key detection. As a maximum of 10 keys can exist for one vehicle, the key numbers 1 to 10 are stored in the CAS. The key number cannot be changed.
The key number is transferred to the CAS when the remote control is operated. If the key is in the ignition lock, the key number is read by the CAS directly from the transponder (memory chip) in the key.
In the CAS, each key number is only present once. If required, the key number can be used to block a key in the CAS. To do so, the service function locking and security functions - remote control/key - lock/release is available.
Personalisation number
The personalisation number is vehicle to call up the Key Memory settings in the vehicle. On unlocking with the remote control, the remote control transmits the personalisation number to the CAS. The CAS forwards the number across the data buses to the other control units. On receipt of the personalisation number, the individual control units implement the settings set in the Key Memory.
All in all, 3 different Key Memory settings can be coded per control unit. This is why the personalisation number can have the values 1 to 3.
On vehicle delivery, the key number and personalisation number of the two remote controls delivered are the same. However, the personalisation number can be changed using the service function locking and security functions - remote control/key - personalisation number .
If other keys are ordered or if a key is replaced, the service function mentioned can be used to enter a personalisation number in the range from 1 to 3.
If a new personalisation number is assigned, the Key Memory settings for the individual control units must be coded with the CIP program for this number.

As I am down to just 1 key, the one that was delivered with the car, I am going to see if I can perform the personalization functions on that key and 'look' and 'lock/remove' any others that may be in the system.

If this works out I think I will try my luck with the 315MHz keys that can be had in the grey market.

-will report back

*no 'I told you so' posts, please. Not until I brick the car!

No harm in trying. Have you considered a BMW Club membership? I bought a key for my M5 years ago and the discount was like 40%. My advisor even came out and programmed it.

Give it a try, but I'm 99.9% sure that won't work. The CAS comes pre-programmed with 10 key codes which are tracked by the dealer, two of those slots are filled at the factory if I recall correctly. One more limitation is that if your E70 has comfort access, only two comfort access keys can be assigned at one time (would require ISTA to deactive the lost or dead CA key before the new one is activated).

The way the gray market keys works is by violating this part of the document you cited "The key number is part of the key detection. As a maximum of 10 keys can exist for one vehicle, the key numbers 1 to 10 are stored in the CAS. The key number cannot be changed." It turns out that aftermarket tools *can* change the key number. They read the key blank and modify the key number in the CAS. On vehicles that have had the CAS firmware upgraded to 3+ (encrypted CAS), a downgrade is required for this process to work. One more note is that on the E70, the CAS also authenticates the transmission - which has not been cracked in the case of the LCI - so if a "craigslist special" coder bricks your CAS you'll be in a bad way. Sorry if this isn't completely accurate as this is from memory.

This is me coding a new gray market key on my E90. It's the same process on the E70.



You can cut the physical key with a $100 security key cutter from ebay. I can make a video of that process if you'd like.