EngineDance X5 now supports boot glitch unlocking for many MD1/MG1 heavy duty ECUs. Takes 2020- MAN TGX MD1CE100 locked ECU as an example. To unlock encrypted ECUs, you also need to purchase the Boot-glitch adapter separately. 2020.06- locked MG1 ECU shares a similar unlocking procedure.
How to Unlock MD1CE100 ECU with EngineDance X5?
In EngineDance X5 software home menu, select Advanced Functions- ECU Flash function-Bosch Bench Mode (ECU)- Bosch MD1xxx [After 2020 locked] (or MG1xxx TC29x After 2020 Locked).
Select BOOT GLITCH MD1CE100 After 2020.06- Locked ECU.
X5 will show you the wiring diagram.
Disassemble MD1 ECU.
Be careful you need to remove 1 resistor. The resistor is tiny.
After removing the resistor, put it aside.
Then find the E1 point.
Connect your X5 to the boot glitch adapter.
Connect the adapter pin to E1
Plug the MD1 6-in-1 cable into Port 4.
Once everything is ready. software will also give you a warning prompt.
Read the warning prompt and confirm.
Wait for the X5 to communicate with the ECU.
Once it connects, you will see the pre-unlock menu.
You can read and back up the original flash data and eeprom data while still in boot mode.
No need to unlock it yet if you just want to read or write.
or if you are ready, just pick the Unlock option.
After unlocking the ECU, solder the resistor back onto the ECU board and return the ECU to its original condition.
Then connect ECU to the X5, no boot adapter this time.
Find Bosch MD1xxx and select MD1xxx after 2020- unlocked.
This is the place for bench mode operation on your unlocked ECU.
Once connected, you can read the ECU version info.
There are two flash reading modes.
Select mode 1 or mode 2 to read ECU and then write ECU on bench mode.
Video guide
