Bravo phase 2 keys 1988+?
I'm currently doing some investigation into immo operation with these keys etc. Position so far is, most hardware is constructed, software 1/2 done.
"Virtual engine" to be constructed.
At present can read password data string.
Needed now is the following info:-
Pinout info of IAW 49F.L2
Whether key can be reset independant of car, and if so what is the reset conditions of the key.
Thanks in anticipation.
Tony.
nb. Found just readable engine wiring, so just need the key info.

reset a key? each key has a static code on it, you cant reset a key. you can only program a key into the ecu.

if you mean reset the ecu to remove all current key codes from memory, that cant be done. however some companies (such as codeman.org) offer a service where they completely wipe the ecu of all codes, allowing a new master red key to be used, any key code that is used first will become the master in that situation.

the ecu learns a key's code. this occurs only when the ecu is unlocked. unlocking the ecu is done using the master code (red key). when the key codes are input into the ecu using the correct sequence- master, slave1, slave2, master, they will be stored by the ecu.

Ah, I'm working on phase 2 keys (I thought I wrote that). I'm sure you know that that these are programmable an resetable, just trying to get all the info together at the moment.
Just for the record I can do most of the decoding of phase1 ECU and keys + reading red key/blue key info from immo and re-writing into new key.
Tony.

wow, you can write to an original fiat key?! i always though they had rom (the glass vial inside) that cant be erased or rewritten.

system 2 keys hold their codes in exactly the same way (same glass vials), the only difference is the red key was replaced with a 4 digit code.

so the method you use to decode and rewrite the system1 keys will also work on system2. whatever you use to do this must be better than the equipment they have at locksmiths, everywhere i tried said they can only read the code, not alter or delete it.

while we're on the subject, any chance you know how to retrieve the 4 digit ecu unlock code from a system2 ecu?

Oops should have written 1998+ for year, and I do believe it has system/phase 2 keys, at least the key I have does not have the earlier glass static chip from EM Its a Temic and suspect its programmable. Of course the Megamos fhial type is not re-programmable, though you can make a compatible one to transmit what you like. Pretty sure I have the stuff to pull of the system2 password now, but everything needs putting together to get the whole picture. I cant tell you on here the MO cos its not 100% certain at the moment, hence the request for hands-on info.
Tony.

well it sounds as though you're making good progress

i've always found glass chips in original fiat keys, both system 1 and 2 on a variety of models. are you sure the key you have with a temic chip is an orignal fiat one?

100% certain the key is gen. Maybe its glass, I havn't cut it out of the fob. But the code in it is not the system1 code cos they all start with FF8x-xxxx, and this one starts with 8000-, so would not work in system1, (got the local guy to read what he could). All the RFID module makers produce variety of encapsulations, glass would of course be used for medical purposes.
Tony.

right so they used different key code series on fiat code systems 1 and 2, but on the same style key chips. i always thought that was the case but i've never been able to be certain. good to know

it explains why cinq codes work on my bravo (both system1) but the codes from a mk2 punto wont work on my bravo (mk2 punto is system2)

If you look up EM4102 from Marin you will understand how that key works. If you look up e5550 from Temic (now Atmel) you will see that they are different animals. Also if you have a password in the key it must be hidden, or it would be too easy to copy, also passwords are only needed to change data and they cant be read out, so system must be rolling code or why else would you want to write new data into key. So system2 is quite involved compared to a static key.
Tony.

you can only have a 'rolling code' on a remote, not on a key. thats why its possible to clone keys. i've successfully copied codes from both types of key using a simple code reader from timpsons (which also displays the 16 digit code). so they cant be rolling, if they were the cloned key wouldn't work as soon as the original was used 250 times without using the clone (assuming usual rolling code allowance), and that is never the case. you wouldn't ever want to write data to a key. thats why there is only a loop reciever on the ignition switch.

mmm.. Interesting that you can copy a system2 key without the security code and get it to work, but why do you need the code for the yl's car?. Rolling codes are definately used on medium priced cars now, My Peugeot 406 certainly has, as I know to my cost when I accidentally altered it on the test bench!. To get a transponder to work you have to transmit rf to it and of course this is done by the same ring antenna which picks up the modulation. Going to set up a test rig today and see what I can get out of it.
Tony.

i need the 4 digit code to program a remote into the central locking. the same 4 digit code is needed for opening the ecu to accept new keys and remotes.

Ah! geddit. Still building the rig, nearly there, but work got in the way. I know that keys can be set up independant of car so I'll see what transpires from that direction.
Tony.