FAQ VVDI MB BGA Tool & tokens for password calculation

Here are the most frequently questions and answers about Xhorse VVDI MB BGA Tool & tokens for password calculation. Hopefully, it helps anyone.

About price of vvdi mb tool & token for sale:

Q: i would like to ask about price for your VVDI MB BGA TOOL set incl all adapters.
How much are tokens? how to buy a tokens?

A: genuine VVDI MB TOOL with full test cables for 1750usd without shipping (1900usd with shipping) at


5 tokens for 150usd (at least 5 tokens for sale and save a lot if 5 tokens once)at


1- If you have a Condor key cutting machine, you can get one password calculation for free everyday. But for more, you need to pay each token for 44.99USD.

2- If you do not have Condor machines, you need to purchase tokens. Also 44.99USD for each token.


Please leave the VVDI MB Tool serial number when you place the order, and we will add the tokens to your machine. Usually, it will take 1-2 working days.

About token usage:

Q: How about token, they will be deducted for each calculation, or only for special function as for BGA calculation?
I mean simply operation as calculating keys for older type of EIS are free or need tokens for this too?For EVL repair, ECU renews takes tokens too?

A: Tokens will be deducted for each calculation

Q: How to get FREE tokens for password calculation?

A: Free tokens only for those with Condor key cutting machines (condor xc 007, xc-mini, xc-200)

Note: For users with Condor machine, everyday you can get one free token for calculating password.

Q: Where to see vvdi mb tokens ready for use?

A: After successfully add tokens, start your vvdi mb software, and click on “Password Calculation”. The token number will be displayed.

Now,it shows 0 times for calculation.If successfully add,it will display the tokens you pay.

Q: Any more info of password calculation and mercedes key programming?

A: Password calculation support working key mode and lost all key mode.

Password calculation – working key: can get key password through EIS and
working key (online)
CAN protocol EIS all support password calculation
Support BGA keys and other NEC keys
Support calculate password for NEC v51, v57 keys. No soldering, safe method.
Data acquisition time depends on the key version. It needs about 3.5 – 13 minutes
BGA version need about 5 minutes, some versions only need 3.5 minutes
Calculate time in server: 30 seconds – 1 minute
Password calculation – lost all key: support W166, W212, W246, W212(old with ELV)
EIS for password calculation while lost all working key
Lost all key data acquisition time depends on EIS type, It needs about 3.5-8 minutes
Lost all key calculate time in server: 30 seconds – 1 minute

About EIS reading methods:

Q: This BGA tool is included device programmer, or is necessary to cooperatre with other tool ( xprog, upa, or i as saw a xhorse device programmer) and import a eeprom file to calculate and program keys? ( so by the EIS where can´t be read info through K-line or IR way.

A: CAN line EIS support online calculation directly,if K line with motorola EIS type support load eeprom to prepare key file(read by other programmer); online calculation cannot support K line EIS,exactly support list refer to User Manual please

About vvdi mb tool reading data:
Q: by reading trough K-line or IR way Xhorse tool read and write full contents of EIS eeprom , or only part with Hashcodes, ...). Can be the dump save as bin for future use?

A: Vvdi mb can read and write key via IR mode, but not full contents of EIS eeprom

Read Write Key support read key basic information, write key file, renew/write NEC key(Support Keyless Go). BE keys can read password directly via IR, renew BE key, write new key file to BE key

NEC adaptor support v51, v57 key password

About IR mode:

- Identification key:Support read key basic information: SSID, counter, remain times, use times, key number, status, version, mark values etc

- BE key: Key version is BE,support read password and key eeprom stored in BE key,write new key file to make a working key, renew used BE key to new one etc

If working key is BE version, you can read password from key directly, no need read password from EIS

- NEC&BGA Keys: Write key file to new original keys or erased keys via IR

- Write mark values: Only BE key support, you can write information for yourself

- Copy key password: You can copy the password to clipboard after success read key password

- Repair key via IR: When identification key, you can only get SSID, Status, Version, then you can repair this key via IR

About keys saving:

Q: by calculating keys , this calculate all possible keys and can be saved or only one?

A: 8 position keys with different format

About calculated dump:

Q: can i import to xhorse calculated dump for the keys (for example from SKC calc) to program new key or toolsupport only self calculating.

A: if you get password successfully,even other device get still support prepare key file on VVDI MB TOOL

About VVDI MB tool repairing nec:
Q: Repair NEC in ESL - have you any experience how it work?
This repair take a tokens too?

A: if you get password successfully,even other device get still support prepare key file on VVDI MB TOOL

only online calculation for getting key password need tokens,other functions all free.such as get erase password, renew ECU/ISM/Gearbox.


Xhorse VVDI2 Key Programmer update to New V1.2.5

Xhorse VVDI2 latest software version V1.2.5 update

*** 2016-11-28 
*** Require firmware V2.2.5 

===== VAG V1.2.5 =====
1. Support copy 48 transponder(Menu->Key Learn->4th Immobilizer system - Copy 48 Transponder)
(1). Authorize copy 48 function require 1000 remote points, require an extra emulator, every success calculate will cost 100 remote points
(2). You can exchange it with "Transponder Programmer -> Menu -> Points System"
(3). Copy 48 fucntion can work on the car that which support read PIN and CS via OBDII. Ofcourse, known CS and PIN is supported
(4). Support clone key, support make new key, support add keyless GO keys, especially support lost all key. All do via OBDII, DON'T need read EEPROM with programmer
(5). Mainly use type: NEC24C32, NEC24C64, NEC24C64 colordisplay, A1, A3/TT/R8, Q3, New tiguan 5ND920873B, 5ND920883B etc
2. Add identification for new A6/Q7 J518(this type not support read via OBDII), avoid damage J518 when you read EEPROM via OBDII
3. Bugfix

===== BMW V1.2.5 =====
1. Bugfix

===== Porsche V1.2.5 =====
1. Bugfix

===== PSA V2.0.6 =====
1. Bugfix 
===== Transponder Programmer V1.2.5 =====
1. Points System: You can exchange copy 48 function by yourself, require 1000 remote points
2. Special Transponder: Add DongFeng-Succe 1.5L immobox
3. Make Remote: Bugfix for Chevrolet Epica
4. Immobilizer data tool: Toyota Echo ECU 25040 bugfix
5. Immobilizer data tool: Add support SaicMotor Roewe 360 remote immobilizer
6. Bugfix

===== J2534 V1.2.5 =====
1. Bugfix 

===== Online Upate Tool V1.2.5 =====
1. Bugfix 

===== Quick Start V1.2.5 =====
1. Bugfix

Notes: about copy 48 function,require VAG 4th immo authorization.

Free download VVDI2 V1.2.5 Software



VVDI Prog read D70F3624 from PSA Airbag (Solution)

Trying to use Xhorse VVDI Prog software v4.5.0 to read D70F3624 from PSA Airbag, but it is not working. Here are some helpful tips on working it out.

It shows the code as follows:
Select <D-FLASH>
Check Device…
12V Power Adapter connected
Initialization device…
Initialization success!
Initialization chip…
Try Frequency 04000000
Try Frequency failed
Try Frequency failed

Then i tried with and without external +12V supply.
Also tried manual frequency 8MHz and 4MHz. (I saw it was tested automatically but tried anyway.)
Tried with and without FLMD1 connected. (Not used by other programmers)
Also lifted 2 pins that you can see on pictures that were connected to RXD and TXD lines.
Using MCU Reflash Cable V2 (verified connections inside, yellow wire on correct location, also did continuity test on the other wires)
I tested myself the test points where I’m soldering against the MCU pins.
VVDI Prog read D70F3624 1
VVDI Prog read D70F3624 2
VVDI Prog read D70F3624 3
Some technical stuff:
VCC is set to 4.5V as default and measured 4.55V on pcb.
FLMD1 always at 0V.
FLMD0 pulled up to 3.5V.
RESET when goes up reaches 4.5V.
TXD when goes up reaches 3.9V, RXD 3.3V, bit timing of both RXD and TXD at any frequency set is always 104us (9600 baudrate).
Oscillator on board is 8MHz.
There are messages on both RXD and TXD.
Having asked the experienced Samic, for help. They said the connection to chip is ok, should be software bug.And they thought currently the point is communication with chip. And i was advised to try to read the chip ID with other programmers

also require you to grab the signal of RXD and TXD line about 500ms.will find the caused reason and solve it.

So i used another programmer that reads it fine.
Device id:
10 7F 04 61 7F 7F 7F 8F 80 80 80 80 02 7F 7F 01 02 C4 37 B0 46 B3 B3 37 31 20 20 7F FF 00 00 00
VVDI-Prog doesn’t even reach that part, it stops after the first reply of the mcu.
I recorded my other programmer reading it with Saleae Logic (v1.25), attached session and dump.

Samic helped to checked dump, saying this programmer use the default low baudrate 9600bps to read data.
VVDI PROG changed baudrate to 153600bps to decrease read time

baudrate change steps:
1.Use low baudrate 9600 wakeup the chip, if get the correct response,go to step2
2.Start change baudrate, due to the d70f3624 doesn’t know own osc frequency,programmer need send it the accurate value
(VVDI-PROG put some common-used osc value,so you can see try frequency xxxxhz info)
3.Programmer send the new baudrate value to d70f3624, vvdi prog use 153600bps
the d70f3624 can calculate the new baudrate with the osc value, but if the osc value is incorrect,you will get a wrong baudrate
(eg: the actual osc is 4Mhz, if you set a 8Mhz osc value and change the baudrate to 153600bps the chip will set a 76800bps)
4.Use the new baudrate to communicate
Maybe the osc frequency is not in VVDI PROG osc value list
Please grab a new dump with vvdiprog,need to further analyze of the problem.


Xhorse VVDI Prog Programmer V4.5.2 Free Download

Original Xhorse VVDI Prog ECU MCU EEPROM programmer released new software version in 2016-11-25.

VVDI PROG V4.5.2 update feature:

v4.5.2 (2016-11-25)
* This version DON't need update firmware
* Fix some bugs
+ Add VVDI PROG USER MUNUAL 4.5.1 version in Doc folder
+ Add AB28F200B5T(PSOP44),AB28F200B5B(PSOP44),AB28F400B5 T(PSOP44),AB28F400B5B(PSOP44),
AB28F800B5T(PSOP44),AB28F800B5B(PSOP44)options in <1-EEPROM&FLASH>-><INTEL>(Need the TB28FXXX adapter)
HC908LJ24_SECURED options in <2-MCU>-><MOTOROLA-MC69HC(9)08>
+ Add [V850ES/FE3]series: 70F3623 option
[V850ES/FF3]series: 70F3626 option
[V850ES/FG3]series: 70F3627,D70F3629,D70F3630 options
[V850ES/FJ3]series: 70F3631,D70F3632,D70F3633, D70F3634, D70F3635 options
[V850ES/FK3]series: D70F3636,D70F3637,D70F3638 optionsin <2-MCU>-><RENESAS-V850>
+ Add BCM3 option in <4-IMMOBILIZER>-><GM>
+ Add XIAOKANG(2015) option in <5-DASHBORAD>-><DONGFENG>
+ Add SAICMAXUS-RV(2015) option in <5-DASHBORAD>-><SAICMOTOR>
+ Add <7-ARIBAG> option in TYPE
+ Add GL8-SRS(2015) option in <7-ARIBAG>-><BUICK>
+ Add MAKKA-SRS(2015) option in <7-ARIBAG>-><OPEL>
+ Add VW52-SRS-V2 option in <7-ARIBAG>-><VOLKSWAGEN>

Free download VVDI-Prog V4.5.2 software



How to Reset VAG 3AA920880C Instrument by VVDI2

Have just reset instrument on VAG 3AA920880C dash via Xhorse VVDI2 key programmer. Steps goes here:

First disassemble the dashboard 3AA920 880C
disassemble the dashboard 3AA920 880C

Well connect VVDI 2 with dash
connect VVDI 2 with dash

Turn ignition to ON to check if the indicator light on which means the dash is fine and well communication is built
Turn ignition to ON

Open VVDI 2 software
Key Learn->4th immobilizer system->VW/Skoda/Seat->Auto detect type
Auto detect type

On the button status bar it shows type TFT color display NEC+24C64 (-2012)
Click on Read EEPROM/FLASH
Select Read EEPROM, click Next

If car has keyless, please switch ignition off then switch on. Then press OKAY button to continue.
If no keyless, just press OKAY button to continue.

The dashboad is drak when you see the bps. You need finish all opeartion before reset instrument
2. Read EEPROM and save it
3.Read immo data and save it
4.Prepare a dealer key (You can go to step 7 if have working key also don’t want to add key)
5.Reset instrument
6.Add key, use immo data to lean the new dealer key to car
7.Finish other customer requests.
Note: The dashboard will remain dark until “Reset Instrument”

Reading eeprom data, please wait
Click on Reset Instrument, dashboard light go on
Click on Reset Instrument

Manually enter odometer you want to change
click on Write KM 
Write KM

Do you save the eeprom before write it?
Press OK
Press OK
Use “Reset Instrument” to activate instrument after all the operations finished.
Use “Reset Instrument”

Click on Reset Instrument
Dashboard light goes on
Reset 3AA920880C instrument successfully.
Reset 3AA920880C instrument successfully

VVDI2 Program 2014 Citroen DS3 remote key

I’v used VVDI2 key programmer to have 2014 Citroen ds3 pulled pin and programmed key in seconds

I got pin code in approx 10 second and programmed spare key fine.
key was supplied by customer, was new but aftermarket type, however the remote doesn't work.

Then i did it manually:
1) switch ignition on to position 2
2) press and hold down lock button for 5 seconds
3) after 5 seconds release lock button
4) switch off ignition , remove key and test remote

being a customer supplied copy key may well not be correct remote

repeat process for each key needed

Note: the correct remote is very important

there is ASK/FSK, 2 or 3 buttons and till 2006 and after 2006, also 315 and 434 Mhz, many types.. any type depends on the BSI installed.
Chinese cheap remotes they buy on ebay or aliexpress not always work, at the end locked and cannot be reused.
Better use xhorse vvdi2 remote keys, never locked - can be reprogrammed.


Xhorse VVDI2 VVDI 2 Key Programmer update to V1.2.3

Original Xhorse VVDI 2 key programmer latest software V1.2.3 version update (2016-11-16).

*** Require firmware V2.2.3
===== VAG V1.2.3 =====
1. 4th immobilizer support follow types:
(1) NEC24C32 Support add key and lost all key via OBDII
(2) NEC24C64 Support add key and lost all key via OBDII
(3) Motorola Support add key and lost all key via OBDII
(4) NEC95320 Support add key and lost all key via OBDII
(5) CDC32xx Support add key and lost all key via OBDII
(6) NEC35xx Support add key via OBDII, some cars with marelli support lost all key vaid OBDII
(7) Passat B6/CC Support add key and lost all key via OBDII
(8) A3/TT/R8 Support add key and lost all key via OBDII
(9) Q3 Support add key and lost all key via OBDII
(10) A4(RB4, RB8) Support add key and lost all key via OBDII
(11) A6/Q7 Support add key and lost all key via OBDII
(12) Touareg/Phaeton/A8/Cayenne support add key (some type support OBDII)
Attention 1: Lost all key via OBDII support keyless GO cars(UDS dashboard)
Attention 2: Copy 48 window released(Menu->Key Learn->4th Immobilizer system – Copy 48 Transponder). Copy 48 require authorize(1000 remote points), and require a 48 collector
Attention 3: In future, points will have more power function, save as more as you can
2. Bugfix
===== BMW V1.2.3 =====
1. Bugfix
===== Porsche V1.2.3 =====
1. Bugfix
===== PSA V2.0.5 =====
1. Bugfix
===== Transponder Programmer V1.2.3 =====
1. Fix bug for copy some HITAG2(46) transponder
2. Prepare remote: Add support for Chevrolet Epica
3. Immobilizer data tool: bugfix Skoda fabia 93C86
4. Bugfix
===== J2534 V1.2.3 =====
1. Bugfix
===== Quick Start V1.2.3 =====
1. Bugfix
Notes:about clone 48 function still testing,will be released next version.

Free Download VVDI2 V1.2.3 Software


How to use Xhorse VVDI remote key to copy chip and generate remote

With Xhorse VVDI2 key programmer and wireless universal remote key, you will be able to copy chip and generate remote. Here we take Xhorse VVDI remote key Hyundai universal type as an example.
vvdi remote key
(Left: Xhorse remote key; Left: Original Hyundai key)

Step 1: Correct Chip Data

Install battery for wireless universal remote key.
– take out the pcb on the remote controller
– install the battery
Generate wireless universal remote into chip signal collector via VVDI2 v1.2.2 software; VVDI2 automatically detect the chip

Place remote key into VVDI2 programmer
Place remote key into VVDI2 programmer
Auto detect chip type
Press the remote control buttons, LED will keep flashing, it means that it’s into correction status
Press the remote control buttons
Signal acquisition success. LED indicator will flash rapidly.
Data correction is completed, ready to decode and copy
Data correction is completed

Step 2: Copy and Decode Chip

Put the chip with a battery installed into the remote control
Put the original car key into VVDI2 key programmer for identification
Put the original car key into VVDI2
Click on Start Copy in VVDI 2 interface
To collect information in the car and put the collector into VVDI2 (because we have collected data in Step 1, it’s ok to put the Xhorse remote collector into vvdi2)
put the Xhorse remote collector into vvdi2
Put the original key into vvdi2 key programmer again
Connect to the network, to start decoding online
Decode chip success
Put Xhorse remote key collector into VVDI2
Copy success.
If VVDI2 software prompt you to copy next remote, click YES to continue or NO if you do not need.

Try to start the car with the new remote key.

Step 3: Generate Remote

We find that remote control does not work properly, ready to generate remote.
Put the new remote key into vvdi2 programmer
Select Genearte Remote function
Select region, make and model
generate remote
Select Generate remote-wireless
generate remote wireless

Use special equipment to program the remote, i.e OBDSTAR Key Master or Xtool X100 Pad etc.
Xhorse wireless universal remote can copy a chip after regeneration as remote control, new equipment –Xhorse VVDI Key Tool remote generator will add this function.


Xhorse VVDI2 Remote Key for VVDI2 Mini Remote Programmer and VVDI Key Tool

Xhorse company recently rolls out several high quality VVDI2 remote key type for VVDI remote makers/generators, including VVDI2 Mini Remote Programmer and VVDI Key Tool.

VVDI2 Mini Remote Programmer
VVDI2 Mini Remote Programmer 2


By using Xhorse Remote Key, you can accumulate member points which can be used to exchange VVDI 2 part special functions and accessories. 

Xhorse VVDI2 Remote key can replaced KD900 remote key and they are cheap at half the price.

Xhorse VVDI2 remote key:

XHORSE VVDI2 Volkswagen 786 B5 Type Special Remote Key 3 Buttons individual package

XHORSE VVDI2 Volkswagen 786 B5 Type Special Remote Key 3 Buttons 10pcs/lot

VVDI2 Volkswagen 786 B5 Type Special Remote

XHORSE VVDI2 DS Type Wireless Universal Remote Key 3 Buttons individual package

XHORSE VVDI2 DS Type Wireless Universal Remote Key 3 Buttons 10pcs/lot
VVDI2 DS Type Wireless Universal Remote

XHORSE VVDI2 Hyundai Type Universal Remote Key 3 Buttons individual package

XHORSE VVDI2 Hyundai Type Universal Remote Key 3 Buttons 10pcs/lot
VVDI2 Hyundai Type Universal Remote

Audi A6L Q7 Intelligent Folding Remote Control key For VVDI2 Mini Remote Programmer individual package

Audi A6L Q7 Intelligent Folding Remote Control key 10pcs/lot

Audi A6L Q7 Intelligent Folding Remote



Xhorse VVDI Key Tool Remote Generator Key Programmer

Xhorse VVDI Key Tool– the best professional key programmer for VAG is available in obdii365.com. The new key programmer will cover more VAG models than FVDI or VVDI.

Xhorse VVDI Key Tool supports most common remote types in the market; it is reliable and easy to use.
VVDI key tool can perform these functions:
edit transponder, clone transponder, test frequency, clone Remote, generate remote, generate garage door remote controller, unlock smart card etc.

VVDI Key Tool Function

Transponder Generation:

Write most common transponder available in the market including 36, 46, 47, 60, 70

Transponder cloning:

Support 46 42 11 12 4D

Frequency & power tester:

Frequency test of 27-900 MHZ
Power test 300-450 MHZ

Remote cloning:

Rolling code & Fixed code

Generate remote:

More than 400 FCC ID types

Generate Garage door remote:

More than 100 types

Unlock OEM remotes:

NXP keyless & Prox Remotes