Retrieve Immobilzer Code
Retrieve Immobilzer Code
This is a ‘How to’ describing how to obtain the Ducati 848/1089/1198 style Digitek dash immobilizer
code. The goal of this thread is to understand how the dash works and continue with reverse
engineering. Hopefully other guys can help to find the meaning of the unknown code.
WHY ?
Well, I bought my Bike with two working keys BUT the owner lost his code card . I wanted to have
the code so in the future I can copy the keys or start the bike with the code when necessary.
Searching on the internet I found a lot of guys with the same problem, bought a used bike but the
previous owner just had 1 key or lost the code card.
In case you think I am some kind of whizkid with square eyes playing computer games in the middle
of the night.. Nope, I am a mechanical engineer who likes a beer and bikes. what I am trying to tell
you: .. any moron (this means you and me) with common sense can do this.
The dash has a CPU (processor) and program running but the variables (settings) are stored on a
memory chip (Eeprom). This Eeprom is the 24C16 and is able to store data like: Mileage, language
settings, Mile/Kilometer settings, Mileage, stored keys codes, Immobilzer code etc.
The trick is to read the data directly from the chip. Its stored in Binary code ( 0 and 1 ) which can be
opened in a hex editor. The good news, it is not encoded so the immobilizer can be read, (if you can
read)
Retrieve Immobilizer code, read the key codes, read the mileage, modify mileage
Needed tools and software;
3. Remove the flat cable to the display. Slide the black part in the direction of the arrows and
pull the flat cable out.
4. Unscrew the three hex screws on the PCB.
5. Lift the PCB carefully and disconnect the power cable to the PCB (just slide it off).
6. Mount the USB Eeprom programmer in the USB port. The pins are numbered, pin number 1
(red) is top right.
11. Open the saved Binary file in a hex-editor, now it gets really interesting.
In line three and four is the mileage stored, it’s always stored in kilometers. If the lines are
not equal the mileage is not valid and will be reset to 0. This dashboard reads “5F BC” this
value can be calculated manually as shown below. The value is in calculated value is shown in
100 meter so it needs to be divided by 10 for the actual displayed mileage.
Its not possible to calculate your own mileage because the number ‘ A9’ is a generated
checkcode. I don’t know the calculation so I cannot generate the check code.
The immobile code and key codes are saved 3 times. The codes is shown in Binary and
shown in the first line of the block. It reads 04 04 06 08 06, so the code is: 44686 , I tested
it and it works, Eureka! The second code 05 07 01 04 05 (57145) is also a immobilizer code !
Still a mystery why the dash has two immobilizer codes ??? both codes works!
The other two codes are most likely the key codes; each key is equipped with a coded chip .
When starting the bike it reads the key code and compares it with the codes stored in the
dash. When the codes are corresponding with the codes stored in the dash the dash releases
the immobilizer and the bike can be started.