I am slowly moving away from the forum and posting useful info as I find it.
The attached pdf relates to the 848/1098/1198 - I2K immo system. The immo chip recovery in the pdf can also be applied to other bikes with the 24C family of immo chips. Some are easier than others due to speed and tacho needles having to be removed.
This relates to the red key bike dash immo chip. IRC immo system.
The recovered data for the key transponders needs to be prefixed
BE FA ** ** ** ** ** **
and then converted to
7D 5F ** ** ** ** ** **
I have a device that does the conversion so can help out if necessary.
For example
Key code identified as 00 00 01 42 F7 7F from dash
This is BE FA 00 00 01 42 F7 7F
The data required to program a T5 Transponder is
7D 5F 00 00 80 42 EF FE
This data can be inputted manually using the likes of a Zedbull Mini
AliExpress is a good source for the Zedbull, key blanks and T5 Transponders
If you have an Android device there is an app called Transponder Tiris Converter. Costs £1.18. This will convert the data from the immo chip (BE FA) to the format for use with the key programmer (7D 5F)
If you like a challenge, then do it manually https://www.mri-auto-diagnostics.com/wp-content/uploads/2020/11/4C_INFO.pdf
To convert the transponder info you do the following
The BE FA needs to be converted from Hex to Binary.
The bit that needs converting is 01 42 F7 7F.
The zero of 01 will always be 0000 in binary and will be ignored using an online converter.
So 01 = 00000001 (where 0001=1), 42=01000010, F7=11110111, 7F=01111111
To convert to Tiris the binary needs to be reversed and converted back to hex.
So 10000000=80, 01000010=42, 11101111= EF, 11111110=FE.
That will give you the 80 42 EF FE required to add to 7D 5F 00 00 to program a T5 transponder.
This process also applies to other dashes that use the 24C16 eeprom. However, to access the chip requires the removal of tacho and speedo needles, so care is required. The dash also needs to be powered up before the needles are refitted so they align correctly.
Ducati will tell you that if you lose the code card it cannot be replaced. There is a solution.
On the earlier dash using the red programming key then the bypass code can be calculated from the recovered hex code. The first code is always the red key.
The bypass code card is calculated from the last five digits, where 1 to 9 remain the same andA=1,B=2,C=3,D=4,E=5,F=6 and 0=7
In the above if 00 00 01 42 F7 7F was the first code listed then 2F77F will give the bypass code. This would give 2=2, F=6, 7=7, 7=7, F=6.
The bypass code is therefore 26776.
If you have a Zedbull then the red key transponder code can be read from the key (this process in bikes using the separate immo box like the ST4S). The Zedbull will display it in the format 5F 00 00 ** ** ** ** 7D. It just moves the first digits to last, ignore the 7D. Using the info from the first post 80 42 EF FE thisneeds converting from Tiris (hex) to binary, thebinary reversed, and then converted back to hex. The reverse of the instruction in the first post.That will give 01 42 F7 7F, just use the last fivedigits to calculate the code
For the data from the likes of the 848/1098/1198 things differ. Reading the immo chip recovers the full 8 bytes of the transponder code in the format E6 00 00 00 00 xx xx xx.
This data needs converting for key programming and will give a format of 67 00 00 00 00 xx xx xx. To get this you convert bytes 1, 6, 7 & 8 to binary, reverse the binary and then exchange the positions of each digit. The 67 00 00 00 00 xx xx xx detail can then be programmed to a T5 transponder.
Code from key *****Update - process works*******
The process for the I2K immo system bikes like the 848/1098/1198 (2 black keys/code card) is slightly different. When the key is read by the likes of a Zedbull then the code differs to the above format for the earlier bikes. The code is displayed in the format C0 xx xx xx 06 00 00 00 not the 67 00 00 etc as would be expected. However, by using software tools I am able to calculate the hex code held in the immo chip for the key or keys. Using the above calculation information the bypass code can be calculated from the last 5 digits. This means that if you have 1 or 2 black keys but no code card then the bypass code can be back calculated from the key (a less intrusive route to taking the dash apart).
The attached pdf relates to the 848/1098/1198 - I2K immo system. The immo chip recovery in the pdf can also be applied to other bikes with the 24C family of immo chips. Some are easier than others due to speed and tacho needles having to be removed.
This relates to the red key bike dash immo chip. IRC immo system.
The recovered data for the key transponders needs to be prefixed
BE FA ** ** ** ** ** **
and then converted to
7D 5F ** ** ** ** ** **
I have a device that does the conversion so can help out if necessary.
For example
Key code identified as 00 00 01 42 F7 7F from dash
This is BE FA 00 00 01 42 F7 7F
The data required to program a T5 Transponder is
7D 5F 00 00 80 42 EF FE
This data can be inputted manually using the likes of a Zedbull Mini
AliExpress is a good source for the Zedbull, key blanks and T5 Transponders
If you have an Android device there is an app called Transponder Tiris Converter. Costs £1.18. This will convert the data from the immo chip (BE FA) to the format for use with the key programmer (7D 5F)
If you like a challenge, then do it manually https://www.mri-auto-diagnostics.com/wp-content/uploads/2020/11/4C_INFO.pdf
To convert the transponder info you do the following
The BE FA needs to be converted from Hex to Binary.
The bit that needs converting is 01 42 F7 7F.
The zero of 01 will always be 0000 in binary and will be ignored using an online converter.
So 01 = 00000001 (where 0001=1), 42=01000010, F7=11110111, 7F=01111111
To convert to Tiris the binary needs to be reversed and converted back to hex.
So 10000000=80, 01000010=42, 11101111= EF, 11111110=FE.
That will give you the 80 42 EF FE required to add to 7D 5F 00 00 to program a T5 transponder.
This process also applies to other dashes that use the 24C16 eeprom. However, to access the chip requires the removal of tacho and speedo needles, so care is required. The dash also needs to be powered up before the needles are refitted so they align correctly.
Ducati will tell you that if you lose the code card it cannot be replaced. There is a solution.
On the earlier dash using the red programming key then the bypass code can be calculated from the recovered hex code. The first code is always the red key.
The bypass code card is calculated from the last five digits, where 1 to 9 remain the same andA=1,B=2,C=3,D=4,E=5,F=6 and 0=7
In the above if 00 00 01 42 F7 7F was the first code listed then 2F77F will give the bypass code. This would give 2=2, F=6, 7=7, 7=7, F=6.
The bypass code is therefore 26776.
If you have a Zedbull then the red key transponder code can be read from the key (this process in bikes using the separate immo box like the ST4S). The Zedbull will display it in the format 5F 00 00 ** ** ** ** 7D. It just moves the first digits to last, ignore the 7D. Using the info from the first post 80 42 EF FE thisneeds converting from Tiris (hex) to binary, thebinary reversed, and then converted back to hex. The reverse of the instruction in the first post.That will give 01 42 F7 7F, just use the last fivedigits to calculate the code
For the data from the likes of the 848/1098/1198 things differ. Reading the immo chip recovers the full 8 bytes of the transponder code in the format E6 00 00 00 00 xx xx xx.
This data needs converting for key programming and will give a format of 67 00 00 00 00 xx xx xx. To get this you convert bytes 1, 6, 7 & 8 to binary, reverse the binary and then exchange the positions of each digit. The 67 00 00 00 00 xx xx xx detail can then be programmed to a T5 transponder.
Code from key *****Update - process works*******
The process for the I2K immo system bikes like the 848/1098/1198 (2 black keys/code card) is slightly different. When the key is read by the likes of a Zedbull then the code differs to the above format for the earlier bikes. The code is displayed in the format C0 xx xx xx 06 00 00 00 not the 67 00 00 etc as would be expected. However, by using software tools I am able to calculate the hex code held in the immo chip for the key or keys. Using the above calculation information the bypass code can be calculated from the last 5 digits. This means that if you have 1 or 2 black keys but no code card then the bypass code can be back calculated from the key (a less intrusive route to taking the dash apart).
Attachments
Last edited:
