Repair Land Rover P400 BECM BMS Module
Here comes the solution for Land Rover P400 BECM BMS hybrid battery module fault code P0AA066.
Fault Code P0AA066:
Fault code P0AA0-66 in Land Rover and Range Rover hybrid (PHEV) vehicles means “HV/EV battery positive contactor circuit – signal has too many transitions/events,” indicating the Battery Energy Control Module (BECM) refuses to close the high-voltage safety contactors because internal counters or signals exceeded their safe limits.
Root case:
Internal BECM Chip Failure: Corrupted data or physical wear on an internal chip (such as the TC264 processor) inside the battery management unit.
Contactor Cycle Overflow: The module records “positive contactor switching cycles exceeded” due to false or excessive signal transitions.
Repair Solution:
Full Unit Replacement: Dealerships typically want to replace the entire high-voltage battery pack or BECM unit at a very high cost.
Component-Level Repair: Specialized auto-electric workshops can fix this without replacing the whole battery by replacing and reprogramming the specific faulty processor chip on the BECM board.
1). Replace with a brand new MCU chip.
2). Reflash data to the new MCU chip with proper programmers (such as JLR Pluto, Launch X431 PAD VII).
Xtool Clear Tesla 1512876-00-B Airbag Crash
How to Clear Tesla 1512876-00-B Airbag SRS Crash using Xtool step-by-step?
What You’ll Need
- XTOOL diagnostic tablet with compatible EV diag software (Xtool D9EV, Prodigy, Compass, Compass Master etc)
- VCI (Vehicle Communication Interface) box
- OBD (On-Board Diagnostics) cable
- 12V power supply (e.g., cigarette lighter adapter)
- Universal jumper cables with labeled ends (ground, 12V, CAN high, CAN low)
- The Tesla airbag module itself (removed from the vehicle)
Connect the VCI box
Start by plugging the OBD cable into the VCI box. Then, supply power to the VCI box using a 12V source—a cigarette lighter adapter works perfectly. Press the power button on the VCI box; it will automatically pair with the XTOOL tablet via wireless or Bluetooth connection.
Prepare the airbag module
Place the airbag module on your workbench in a specific orientation—exactly as shown in the tool’s wiring diagram. Do not position it any other way, as correct pin alignment depends on this placement.
Step 2: Identify the Correct Part Number
On the tablet, navigate to Component Test and select Airbag Repair (the first option). Choose Tesla from the manufacturer list. Now, locate the physical part number on your airbag module (it is printed on the label, here the SRS part number is 1512876-00-B). Cross-check this number with the tablet’s displayed list to ensure you select the exact match. In the example provided, the matching part number was clearly identified on the screen.
Step 3: Understand the Wiring Diagram
Before connecting any cables, tap the wiring diagram icon in the top right corner of the tablet. This diagram is critical—it shows exactly which pins on the module correspond to:
- 12V power supply
- Ground
- CAN high
- CAN low
In this case, there are only four cables to connect, located at specific pins on the module.
Step 4: Connect the Jumper Cables
Use the universal jumper cables that come with your kit. Here is an important practical tip:
If a jumper pin feels loose when inserted, gently press the metal part of the connector with pliers or a small tool. This will tighten the grip so it fits as securely as a new cable.
Now, follow the wiring diagram exactly:
- Connect the ground cable to its designated pin.
- Connect the 12V cable to its pin.
- Connect the CAN high cable to its pin.
- Connect the CAN low cable to its pin.
Crucial note: The color of the cable insulation is for reference only. Do not rely on color matching. Instead, read the label printed on each cable (e.g., "CAN H", "CAN L", "GND", "12V") to ensure correct connections.
Step 5: Link to the VCI Box
Once all four jumper cables are firmly attached to the airbag module, connect the other ends to the OBD cable that runs from the VCI box. The order here does not matter as long as each labeled cable goes into the corresponding port on the OBD breakout connector.
Step 6: Perform the Reset on the Tablet
Return to the XTOOL tablet’s main menu. Select the Airbag System option, then choose Special Function. From the submenu, select Clear Collision Records.
The tablet will process the command. Within seconds, a confirmation message appears: "The collision record was cleared successfully."
Final Verification
That’s it. The crash data is now erased from the module’s memory. The module can be reinstalled in the vehicle, and the airbag system will function without stored collision codes—provided all physical components (sensors, airbags, seatbelts) are also repaired or replaced as needed.
Key Takeaways for Accuracy
Always verify the part number before proceeding.
Follow the wiring diagram precisely—pin location matters more than wire color.
Ensure tight connections using the pin-tightening tip.
The reset function is a single-click operation once hardware is correctly set up.
This method, demonstrated with the XTOOL diagnostic tool, turns a potentially confusing repair into a quick, repeatable procedure.
How to Unlock MD1CS089 ECU with EngineDance X5?
EngineDance X5 ecu programmer expanded 2020+ encrypted ECU locking coverage in August 2026 including locked Bosch MD1CS089.
Here we unlock GWM Cannon Poer Bosch MD1CS089 TC299 ECU. Unlocked ECU in boot glitch mode.
Bench read/write Flash & eeprom after unlocking.
Procedure:
Disassemble ECU.
Go to Advanced function- ECU Flash.
Select Bosch MD1xxx adapter 2020.06 Locked- Boot Glitch MD1CS089 after 2020.06 Locked option.
Check boot unlocking wiring diagram. Need to remove a resistor on the ECU circuit board.
Connect ECU with EngineDance VCI via Boot Glitch adapter.
After setting up the connection, proceed to unlock ECU, then full read and write eeprom & flash on bench.
CK-Prog Read BMW MSV90 DME ISN on bench
CK-Prog ECU programmer supports reading ISN code for BMW DMEs. Requires the dedicated CK-Prog ECU cable.
Select BMW MSV90 DME.
Check wiring diagram.
Connect BMW MSV90 DME with CK-Prog via ECU cable.
Read BMW MSV90 ISN code successfully.
OBDSTAR Update MDSCS003 MG1CS028 MD1CS069 ECU Unlocking
OBDSTAR released a new upgrade: add more encrypted MG1/MD1 ECU unlocking models.
More supported models are now available!
- No Opening
- No Soldering
- Faster Operation
- Safer Process
Supported Tools:
- X300 Classic G3, DC706
- All ECU MASTER configurations with Package A for Passenger Car
Newly Supported Models:
- ALPINA BOSCH MD1CP032 (LOCKED) TC299TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- ALPINA BOSCH MG1CS049 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH/BOOT)
- ALPINA BOSCH MG1CS201 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- BMW BOSCH MD1CP032 (LOCKED) TC299TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- BMW BOSCH MD1CS001 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- BMW BOSCH MG1CS024 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- BMW BOSCH MG1CS049 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH/BOOT)
- BMW BOSCH MG1CS201 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- CITROEN BOSCH MD1CS003 (LOCKED) TC298TP Read/Write INT EEPROM, Read/Write INT FLASH(Support CS)(BOOT)
- FORD BOSCH MD1CS005 (LOCKED) TC298TP Read/Write INT EEPROM, Read/Write INT FLASH(Support CS)(BOOT)
- INEOS BOSCH MD1CP032 (LOCKED) TC299TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- INEOS BOSCH MG1CS024 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- IVECO BOSCH MD1CS069 (LOCKED) TC299TP Read/Write INT EEPROM, Read/Write INT FLASH(BOOT)
- JAGUAR BOSCH MG1CS028 (LOCKED) TC298TP Read/Write INT EEPROM, Read/Write INT FLASH(Support CS)(BOOT)
- LANDROVER BOSCH MG1CS028 (LOCKED) TC298TP Read/Write INT EEPROM, Read/Write INT FLASH(Support CS)(BOOT)
- MINI BOSCH MG1CS024 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- MINI BOSCH MG1CS201 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- PEUGEOT BOSCH MD1CS003 (LOCKED) TC298TP Read/Write INT EEPROM, Read/Write INT FLASH(Support CS)(BOOT)
- PORSCHE BOSCH MG1CP007 (LOCKED) TC299TP Read/Write INT EEPROM, Read/Write INT FLASH(Support CS)(BOOT)
- PORSCHE BOSCH MG1CS008 (LOCKED) TC298TP Read/Write INT EEPROM, Read/Write INT FLASH(Support CS)(BOOT)
- ROLLS ROYCE BOSCH MG1CS024 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- ROLLS ROYCE BOSCH MG1CS201 (LOCKED) TC298TP Read/Write INT FLASH, Read/Write INT EEPROM, ISN Read (Support CS)(BENCH)
- MAN BOSCH MD1CE100 (LOCKED) TC299TP Read/Write INT FLASH, Read/Write INT EEPROM(BOOT) (Only Supported by ECU MASTER)
Notes:
- BENCH: No Additional Adapter Required
- BOOT: C4-06 Adapter Required
- Optional ECM-003 Wiring Harness for BMW B48/B57/B58 ECU Read/Write
Launch Prog5 Update Renault Captur 2020- OBD AKL Function
Important Update for Launch X431 IMMO Software and Launch X-PROG5!
Discover the latest features and update your software now to maximize your diagnostic capabilities.
IMMO Software Update
| BRAND | FUNCTION | VERSION | SUPPORTED MODELS |
|---|---|---|---|
| Renault | 1. All models support one-click key programming. 2. Added online gateway-unlock function for Renault Captur II smart-card keys and 15 other models (2020 onwards). 3. Added OBD all-keys-lost (AKL) function for Captur II and 15 other models. 4. Added key OBD all-keys-lost (AKL) function for Kwid (2022-) and 13 other models. |
V10.61 | See Function section for details. |
| Mercedes-Benz | Added one-click key programming function. | V10.70 | All Mercedes-Benz models (up to 2014) |
Function Update of Launch X-prog5
| BRAND | FUNCTION | VERSION | SUPPORTED MODELS |
|---|---|---|---|
| IMMO PROG | Simos18.1 engine ECU (ECM) boot-mode read/write & cloning. | V10.26 | VW / Audi / Porsche engines above 1.8T (2014-2018) |
| Fiat | Body Control Module (BCM) chip read/write for Fujitsu MB91F526 & NXP MC9S12XEG384 MCUs. | V10.65 | Fiat Argo (2017-2025), Cronos (2017-2025), Toro (2016-2025), Pulse (2021-2023) |
| Volkswagen | Volkswagen & Audi MQB platform 5C/5D immobilizer key programming. | V10.26 | Volkswagen (2018-), Audi (2019-) |
| Volkswagen | Renesas D70F3624 VW MQB steering column lock (ESL) bench read & immobilizer data decryption. | V10.26 | VW MQ platform models (2012-2017) |
| Volkswagen / Audi / Porsche | Simos18.1 engine ECU (ECM) immobilizer data decryption. | V10.26 | VW / Audi / Porsche engines above 1.8T (2014-2018) |
| Mercedes-Benz | VGS2-FDCT transmission control unit (TCU) EEPROM data repair. | V10.26 | Mercedes-Benz transmission control units (TCUs) (2015-2017) |
| Nissan | Nissan HFM (R7F7010193), HFM (R7F7010253), UCH (R7F7010563) – three BCM types: bench chip read for PIN code & module replacement. | V10.26 | Nissan all-keys-lost (AKL) immobilizer PIN read & BCM replacement (2020-) |
| Renault | Renault HFM (R7F7010193), HFM (R7F7010253), UCH (R7F7010563) – three BCM types data read/write | V10.26 | Renault all-keys-lost (AKL) PIN read & BCM replacement (2020-) |
Keydiy KD-X4 Add 2024 Volkswagen Transporter 5C Key
Programmed a spare MQB49 5C folding key to 2024 Volkswagen Transporter with Keydiy KD-X4 successfully.
Added a KD ZB remote key.
Read original key data with KD solder free interface board in 10 minutes.
Generate dealer key and learn key successfully.
OBDSTAR Adds 2020- BMW MDG1 ECU Bench Unlocking
OBDSTAR DC706, X300 Classic G3 and ECU Master released a new software update in August 2026.
BMW/MINI B48 / B57 / B58 BENCH Unlock is on the way.
No ECU Opening
No Soldering
Faster Operation
Safer Process
A simpler, faster, and safer way to unlock supported BMW/MINI ECUs via BENCH.

Audi J518 ELV Pinout to Autel IM508 XP400 Pro
Problem:
I am attempting to bench read this J518 ELV module off a 2006 Audi A6 with an Autel IM508 xp400pro. I have tried connecting to both modules I have and neither will connect/read. Am I missing something here, or does the xp400pro need a 12vdc supply for bench work?
Solution:
Need to be hooked up to a 12 V supply.
Autel device has all the diagrams. There are two types of wiring diagrams.
Autel shows a resistor is needed as well.
Add 2025 Peugeot 208 Blade Key by OBDSTAR G3
Successfully added a new blade key to a 2025 Peugeot 208 using OBDSTAR X300 Classic G3.
1. Read PIN code
Read 4-digit pin code successfully.
2.Program key
Select Manual select model- Peugeot – 208 – Blade key- Program keys.
Turn on ignition switch.
All keys will be erased.

Enter number of keys to be programmed: 2

Switch ignition off.
Insert the key within 15 sec and switch ignition on.
Program success. Switch ignition off and remove the key.
Insert the 2nd key within 15 sec and switch ignition on.
Program 2nd key success.
CG FC200 V1.4.0.0 Adds Diesel ECUs
CG FC200 programmer released new software version V1.4.0.0 on August 12th, 2026.
CG FC200 V1.4.0.0
1 Added Diesel ECU Read/Write Systems
| Denso: | Guofang: | Xinfeng: |
|---|---|---|
| - D34 | - MDD02 | - ECU13 |
| - D33 | - MDD06 | - ECU15 |
| - 5-Connector | - MDD07 | |
| - 2-Connector | Nanyue: | Weichai: |
| - Isuzu | - ECU022 | - 12B |
| ECTEK: | - ECU435 | - 15 |
| - F05 | - ECU437 | - 15C |
| - F06 | - ECU4PH | |
| - F17 | - R01 | Wittur: |
| - R02 | - ECU30 |
2 Added Gasoline ECU Read/Write Models
- BAIC / Zotye / Hanteng: 11GC
- Jiangling: DCM71AP
- Changan: EDC17CB1
- Ford: FORD ESU-415 7G91-12A650-ML
3 Added – DTC OFF Types
- Chevrolet: PE01
- Nissan Hitachi: S7253131N
- S75D5319N: S7553219N
- S75D5520N: S7555200N
- S75D5828N: S7555280N
- S75D5927N: S7555927N
4 Added – VIN Function
- Chinese Domestic ECUs: MED17.8.21
- MED17 (TC1782)
5 Added MED9.1 IMMO OFF Function
6 FC200 System Update
To improve the user experience, the FC200 system has been upgraded. The old DB15 cable is no longer compatible with the following systems. New DB15 cable for easier operation.
Honda / Acura:
- KEIHIN 37820-R48-H73 SH7058
- KEIHIN 37820-R48-H71 SH7058
- KEIHIN 37820-R62-H65 SH7058
- KEIHIN 37820-R62-H64 SH7058
- KEIHIN 37820-R63-H53 SH7058
- KEIHIN 37820-R72-TH64 SH7058
- KEIHIN 37820-R72-SF53 SH7058
- KEIHIN 37820-R72-TH64 SH7058
- KEIHIN 37820-Rxx-xxx SH7058
Users can switch back to the previous system if the new system has issues.
Optimized the IMMO OFF function to PCR2.1
Restored access to the "Three unready items" and "Replace CALID" function.
Program VW Golf MQB All Smart Keys Lost by Autel and Xhorse
Successfully programmed a smart key for a VW Golf (MQB2 platform) using Xhorse + Autel tools.
Unlock Fiat MD1CS069 ECU with OBDSTAR DC706
OBDSTAR DC706 MDG1 boot glitch unlocking new user report:
FCA Fiat Ducato Bosch MD1CS069 TC299TP unlocked! Success!
Requqires MP001 + c4-06 adapter.
In boot mode.
The connection diagram is inside the software.
Most important is checksum.
Checksum correction is automatically in writing flash.
OBDSTAR G3 and ECU Master will do the same.
Add Lamborghini URUS MLB Key by Keydiy KD-MP and KD-X4
Lamborghini URUS added a new key + converted the original key into LCD touch key.
Without SFD gateway.
Read original MLB key data with Keydiy KD-MP tool.
Generate dealer key and learn key with KD-X4.
Keydiy KD-X4 Added 2020 VW Atlas MQB49 5C Key
Added a spare MQB49 5C key to a 2020 VW Atlas using Keydiy KD-X4 successfully.
Disassembled the original key and read original key data with KD-X4 and godiag 5C clip adapter.
Generate dealer key.
No SFD gateway.
Learn key in car.
/image%2F1896381%2F20151209%2Fob_cb2b49_obd365-com.png)













































































