EIS/EZS Password Reader – is new software for IR Key tool.
Now you can read password from EIS/EZS via IR port from many cars. Successfully tested on EIS/EZS
HC908 based (W203, 220), HC12 (W209, 211). Not 100% of tested EZS but we had good result on 70% of
W203 and about 90% of W211 (HC912). We are developing the software and its coverage constantly.
Let’s look at the new software working with EZS W209 (HC12).
Connect the IR key tool to USB port of you PC. Run the IR Tools software. Make sure that “HW
Connected” symbol is green – it means IR tool is connected properly. If you forgot to connect IR tool or
it is not detected by Windows system that symbol is red and “HW not connected” inscription will be
near. Check box “Read EZS Data” is marked by default. Press “Go!” button. Insert the IR key tool in
ignition. Look at symbol of IR MB key on the middle bottom of the software window. It should to be
painted green when you insert IR tool in ignition. If progress bar (at the sw bottom) does not start or
stopped before it reached 100% - remove IR tool from ignition and insert again.
Fields “Key final Hash” from 0 to S and “SSID” should be filled with data after reading. “Password” field
stayed empty (with 00). Press “EZS Ext” button to read password.
EZS Neutralizer / Password Reader subprogram will be run.
Look at the same symbols to make sure that IR tool is connected and inserted in ignition.
Press “Go!” button. If progress bar (at the sw bottom) does not start or stopped before it reached 100%
- remove IR tool from ignition and insert again.
Password reading takes about a minute. After successfully reading you see green tick at the bottom of
the sw window. Fields “SSID”, “Password” and “Unlock Hash” are filled now.
Now we can close the subprogram. “Password” field has data in main program window. Press Save to
save result as XXXXXXXX.GRNKEY file.
We can calculate keys for the car now using this file. Use NEC prog v.12 software – Offline option to
calculate keys files. Load grnkey file. Make sure that fields “SSID”, “Password” and “Key Information” are
filled. Choose keys numbers or all keys we need to be calculated. Press “Calc” button to start the
process.
Calculation takes till 10 seconds for every key. When you see finish message make your choice – press
Yes to save results. RAR file with new keys data is saved now to the same folder from where we loaded
grnkey file.
Close Offline program.
Run the NEC prog. V.12 - Load – choose 3rd line (key file variant 3), select file with XXXXXXXX_051 name.
Important note: if the customer has working keys read their numbers to select different numbers to be
programmed.
Load key file. Check all fields in “Programming Data” section: Serial, Key number, Fixed. Check “IR” box.
Insert BE key in IR port of MB Keyprog EVO device. Press PROGRAM button to write new key. Press
READ button to check results.
Then activate new key - Activate – IR option. Read the key again - key Status should be changed to 15
EB, now this key is activated.
So, new key can be tested on-bench (with original ESL or ESL emulator connected to EZS with testing
cables) or in the car.