BMW Garage BMW Meets Register Search Today's Posts Mark Forums Read




 

Post Reply
 
Thread Tools Search this Thread
      11-19-2012, 10:06 AM   #1
cc3
Major
621
Rep
1,333
Posts

Drives: 1M, GT4, M2 M140i G40
Join Date: Mar 2011
Location: .UK

iTrader: (0)

Security update

Understand UK dealers have the OBD fix available for 1M just booked mine in.
Appreciate 0
      11-19-2012, 10:26 AM   #2
ozinaldo
Brigadier General
ozinaldo's Avatar
Portugal
115
Rep
3,070
Posts

Drives: 1M
Join Date: Jan 2011
Location: Lisbon, Portugal

iTrader: (0)

Quote:
Originally Posted by gaz26 View Post
Understand UK dealers have the OBD fix available for 1M just booked mine in.
Could you do us, the LHD 1M owners a huge favor? Could you ask for the techs or service director when you go there if that is indeed a mostly RHD problem (in terms of dead point in the alarm system coverage) or the LHD cars are exactly the same and a fix should also follow?

Thanks.
__________________
"The mark of a great car is one whose overall competence exceeds what you should expect from its individual components and the 1M does just that", Chris Harris.
BMW 1M-SOLD-: TECH: Evolve Race+N55mids, Evolve IC, Michelin PSS, ER cp, aFe filter, CDVx, Vorshlag camber plates, BMS OCC EXTERIOR: trunk spoiler, blacklines, black grills, IND goodies INTERIOR: Alcantara steering wheel, steel pedals, custom mats, MPower e-brake.
Appreciate 0
      11-19-2012, 11:28 AM   #3
Artemis
Moderator
Artemis's Avatar
28583
Rep
12,982
Posts

Drives: BMW M2 Competition
Join Date: Jun 2011
Location: Belgium

iTrader: (0)

To OP: check/inquire whether your 1M gets the firmwire reflash, or whether the action is limited to "convert convenient opening", or whether you get both:

On the basis of information made available very recently on other BMW dedicated forums, it seems that there are now two types of security fixes implemented in the UK (upon demand of customers):
  • OBD key programming: you all know the story by now (CAS Module access using an EDILOCK BMW key programmer); a fix avoids key cloning (firmware reflash); this "OBD security fix" takes more time to implement than the "convert convenient opening" fix (see next bullet point);
  • window-rolling feature: if you keep pressing the unlock button on the 1M keyfob, or insert the 1M key into the door lock and keep holding it in the unlock position (to the left), the alarm disarms + both windows roll down as long as you hold; if you keep pressing the lock button on the 1M keyfob, or insert the 1M key into the door lock and keep holding it in the lock position (to the right), the alarm arms + both windows roll up as long as you hold (try it, if you don't believe it ); thieves abuse the window-drop feature by inserting a key or object into the door lock, in order to allow themselves a quiet entry and subsequently abuse the OBD with a disarmed alarm; with a quick fix ("convert convenient opening") the window-rolling feature still works as usual with the keyfob but no longer with the door lock (window-rolling feature is de-activated if the door lock is used); someone posted a copy of the PuMA of the "convenience opening" or "comfort opening convenience" modification on http://www.e90post.com/forums/attach...3&d=1352550757; an M3 owner also quoted this document at http://forums.m3cutters.co.uk/showpo...03&postcount=1.
See also:
"Vulnerability: Vehicles fitted with CAS 2 and CAS 3 modules, can have a new blank immobiliser key programmed with certain 3rd party automotive locksmith software, via the OBD socket, and thus be stolen without the original keys.
Solution: Take your car down to your local BMW dealer or a technically proficient BMW electronics specialist, and ask for the SOPT-enabled CAS (Car Access Sytem) firmware update. Cars with the SOPT-enabled CAS firmware, can only have a new immobiliser key programmed if another original immobiliser key is present. If you have had your car serviced at a BMW dealer within the last year, chances are you already have the SOPT update. Older BMW cars fitted with EWS, EWS 2 and EWS 3 modules are not affected by this vunerability. New F-chassis BMW cars are also not affected by this vunerability, as they are fitted with CAS 4 modules which already have the SOPT feature enabled"

(source: http://www.bmwforums.info/bmw-ice-se...html#post55240)
"SOLUTION NOW AVAILABLE.
There was an announcement made to our dealership this afternoon [Nov 16, 2012] that re-programming is now available for ALL models from 2005 onwards.
It is a 20 minute programming job that all main dealers will have the software for. The programming is also completely free of charge regardless of age. It adds a new layer to the encryption that is unaccessable to anyone except a BMW dealer.
It has been announced that work will be carried out ONLY when requested by customers, so don't expect your local dealer to be on the phone to you on Monday morning (unless you have already contact BMW customer services, at which point you are already on a "to contact" list).
Spread the word."

(source: http://www.pistonheads.com/gassing/t...007.37593&nmt= - comment #8)
[Question:]
"How can this be an extra layer of encryption when the EU laws that gave rise to this problem insist that people other than BMW dealers must be able to prepare new keys?
Are you taking about encryption from the OBD port to the CAS module or encryption from the key to the CAS module? Or something else?
Is this fix a replacement for the one that BMW has been applying already, which supposedly just stops the windows rolling down after a screwdriver is forced into the lock? Or is it in addition to that fix?
How is the car going to behave differently after this fix (or these fixes, if we are now talking about two) is applied?
Apologies for asking several questions, but you'll understand that people have had to take action and protect themselves without any help for the past few months, and consequently now need to understand just what vulnerabilities have been removed and what might remain.

[Answer:]
I appreciate your concerns and you ask good questions. I will look further into this on Monday [Nov 19, 2012]. I only had a skim read of the details on Friday, but from what I have read it stipulated that there was a new 'layer' which required the use of BMW dealer software to access. It involves programming the CAS through the OBD. My manager has also been asking questions to BMW UK about the matter in question, but details are sketchy at the moment.
The fix itself will definitely cure the programming of blank keys, but I don't think it mentioned the window drop (the key word in that sentence being 'think'). Most cars nowadays have the window-drop feature if you hold the unlock button on the key or insert the key into the door lock and hold it in the unlock position [...]. As long as there are nice cars, there will always be thieving b*****ds finding their weak points.
If it's any consolation, the programming of keys doesn't effect only BMW's. The programming software works on any car with an OBD port and fob remote. The new Fiesta has also been a common stolen car recently with the keyless go technology. Any mid/high spec car with this faces the possibility of being stolen, but unfortunately for us, BMW's are better than Ford/VW/Audi etc and are more 'stolen to order'. After all, if you have the technology, would you steal a £12k VW Passat or £40k 3 Series?
Hope that helps for now, will stay in touch "

(source: http://www.pistonheads.com/gassing/t...BMW+keys&mid=0 - comment #5)
See also: http://www.pistonheads.com/gassing/t...A+fix%3F&mid=0
__________________
///M is art Artemis

Last edited by Artemis; 11-22-2012 at 06:34 PM..
Appreciate 0
      11-20-2012, 09:19 AM   #4
Chris ABP
Private First Class
Chris ABP's Avatar
United Kingdom
28
Rep
161
Posts

Drives: BMW 340i F31
Join Date: Sep 2012
Location: ABP Motorsport, Cheshire, UK

iTrader: (1)

Just booked my 1M into BlueBell BMW in Crewe for what the dealer described as 'the security updates' and the 'Window issue' rectification tomorrow morningat 11.30am....

I still have my own OBD security installed anyway so hopefully after tomorrow it will be less likely than ever that I wake up to find the 1M missing!

Chris
__________________
BMW 340i Touring F31
Previous BMW’s owned - 1M Alpine White, M3 E92 Comp pack Santorini blue, E70 X5 X40D
Appreciate 0
      11-20-2012, 09:41 AM   #5
Upturn666
Enlisted Member
11
Rep
43
Posts

Drives: 1M
Join Date: May 2012
Location: North Yorks

iTrader: (0)

Chris
Mine is booked in tomorrow as well, at my local dealer, but i was considering getting your fix done as well. Can you give me a cost and how long would it take?
Thanks
Appreciate 0
      11-20-2012, 10:10 AM   #6
Chris ABP
Private First Class
Chris ABP's Avatar
United Kingdom
28
Rep
161
Posts

Drives: BMW 340i F31
Join Date: Sep 2012
Location: ABP Motorsport, Cheshire, UK

iTrader: (1)

Quote:
Originally Posted by Upturn666 View Post
Chris
Mine is booked in tomorrow as well, at my local dealer, but i was considering getting your fix done as well. Can you give me a cost and how long would it take?
Thanks
Will send a PM

Cheers, Chris
__________________
BMW 340i Touring F31
Previous BMW’s owned - 1M Alpine White, M3 E92 Comp pack Santorini blue, E70 X5 X40D
Appreciate 0
      11-20-2012, 12:28 PM   #7
Jezzer
Banned
United Kingdom
116
Rep
938
Posts

Drives: Series 1 m coupe
Join Date: Jul 2011
Location: UK

iTrader: (0)

Don't forget if your 1M was manufactured in and after November 2011 it doesn't need this upgrade as it carried out at the factory. Had to tell my dealer today who was unaware.
Appreciate 0
      11-20-2012, 02:04 PM   #8
Artemis
Moderator
Artemis's Avatar
28583
Rep
12,982
Posts

Drives: BMW M2 Competition
Join Date: Jun 2011
Location: Belgium

iTrader: (0)

Quote:
Originally Posted by Jezzer View Post
Don't forget if your 1M was manufactured in and after November 2011 it doesn't need this upgrade as it carried out at the factory. Had to tell my dealer today who was unaware.
BMW UK Press Release (Sep 12, 2012) - "High-tech car theft":
"After extensive research we are clear that none of our latest models - new 1 Series Hatch, 3 Series, 5 Series, 6 Series and 7 Series - nor any other BMW built after September 2011 can be stolen using this method."
(http://bmw.co.uk/bmwuk/about/news/0,...270000,00.html)
PistonHeads (Sep 13, 2012) - "BMW Puts The OBD Fix In"
"BMW is not actively contacting owners, because it doesn’t see this as a recall situation, so it's up to all of us to spread the word: any BMW built before September 2011 and using the new electronic key system ('06 on) is eligible for the software update."
(http://www.pistonheads.com/news/26357.htm)
Better safe than sorry. No harm to install the most recent upgrade, regardless of what's currently on board.
__________________
///M is art Artemis
Appreciate 0
      11-21-2012, 09:46 AM   #9
Chris ABP
Private First Class
Chris ABP's Avatar
United Kingdom
28
Rep
161
Posts

Drives: BMW 340i F31
Join Date: Sep 2012
Location: ABP Motorsport, Cheshire, UK

iTrader: (1)

So I took my 1M in to the dealer today and completely wasted 2 hours of my life

Firstly my car was registeted in October 2011 and the revised security for the windows (stop then being opened from the door keyhole) was a waste of time as my car didn't have this weakness.

Secondly don't get too excited about any other additional OBD / Key programming security as contrary to what I had been told this wasn't on offer either! In BMWs mind the additional security solely consists of the window modification preventing them from being opened and it has no relevance to disabling the key programming option from the OBD port....

So all in all a complete waste of time and it appears my own OBD security measures taken are far superior to those offered by BMW!

Good luck with everyone else planning to waste their time!

Chris
__________________
BMW 340i Touring F31
Previous BMW’s owned - 1M Alpine White, M3 E92 Comp pack Santorini blue, E70 X5 X40D
Appreciate 0
      11-23-2012, 05:48 PM   #10
Dackelone
European Editor
Dackelone's Avatar
Germany
10505
Rep
22,992
Posts

Drives: N54 e82
Join Date: Feb 2010
Location: Bayern, Germany

iTrader: (1)

I am still not completely sure what BMW is doing for this security update. But one of our fellow 1Addict members here did send me these print outs from his dealer when they updated his SW. Maybe this will help some of you guys.

It seems to me that IF you use the mechanical key in the driver's door lock... it will NOT roll up/down your car's windows with this SW security update.

Name:  002a.jpg
Views: 4287
Size:  156.1 KB

Name:  003a.jpg
Views: 4102
Size:  150.5 KB

Name:  004a.jpg
Views: 4244
Size:  157.4 KB

Name:  005a.jpg
Views: 5345
Size:  172.2 KB

Name:  006a.jpg
Views: 4003
Size:  100.5 KB
Appreciate 0
      11-23-2012, 06:12 PM   #11
Artemis
Moderator
Artemis's Avatar
28583
Rep
12,982
Posts

Drives: BMW M2 Competition
Join Date: Jun 2011
Location: Belgium

iTrader: (0)

Someone posted the PuMA of the "convenience opening" or "comfort opening convenience" on Bimmerpost:
http://www.e90post.com/forums/attach...3&d=1352550757
__________________
///M is art Artemis

Last edited by Artemis; 12-08-2012 at 08:15 PM..
Appreciate 0
      03-29-2013, 06:21 AM   #12
eeghie
Kind of a big deal
300
Rep
1,674
Posts

Drives: an 1M not often enough
Join Date: Jan 2011
Location: between Unlimited and Hard to Get

iTrader: (0)

Quote:
Originally Posted by Artemis View Post
Someone posted the PuMA of the "convenience opening" or "comfort opening convenience" on Bimmerpost:
http://www.e90post.com/forums/attach...3&d=1352550757
The UK BMW memo states that cars build up to the 31st of August 2011 are involved.
Appreciate 0
Post Reply

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -5. The time now is 02:21 AM.




1addicts
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.
1Addicts.com, BIMMERPOST.com, E90Post.com, F30Post.com, M3Post.com, ZPost.com, 5Post.com, 6Post.com, 7Post.com, XBimmers.com logo and trademark are properties of BIMMERPOST