TV Free fuer PC am RNS-E | Posts 16+

It seems like no one is interested. That's a shame.

Dirk (AudiA4B6US) has now solved his problem, and it wasn't actually that problematic.

If you have a way to record when the feature is enabled, you are welcome to share the results with us and discuss them.

However, a considerable amount of data is involved, as setting up a DIAG session requires a bit of back-and-forth communication.

Best regards, Mike.

The thing is, the unlocking process can start from as little as 70-100 euros. So, if you don't already have a CAN adapter and the necessary programming skills, the cheapest solution is to simply have someone else do it for you. However, if you want to figure it out yourself, you'll need to log the unlocking process, which most providers won't allow. When unlocking via CAN, the RNS-E unit needs to be physically removed, so you can't just hide anything in the car and record the process. And unlocking via the K-line is a completely different matter.

And just to prevent everyone from dying unnecessarily, the only IDs that play a role in the unlocking process via CAN are 200, 300, and 4DA.

Here's a short excerpt from the A8, just for 'warm reading,' to give you an idea of what it should look like. I don't have anything else handy right now.

0300 6-.A1..0F..8A..FF..4A..FF.
032E 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.
032E 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.
032E 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.
032E 1-.A3.
032E 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.
032E 1-.A3.
032E 1-.A3.
032E 1-.A3.
032E 1-.A3.
032E 1-.A3.
032E 1-.A3.
032E 1-.A3.
032E 1-.A3.
032E 1-.A3.
032E 4-.11..00..01..82.
0300 5-.1F..00..02..C2..9F.
0200 7-.5B..C0..00..10..00..03..01.
025B 7-.00..D0..00..03..D8..04..01.
04D8 5-.10..00..02..1A..9B.
0300 2-.17..20.
04D8 5-.11..00..02..1A..91.
04D8 5-.12..00..02..1A..86.
0300 8-.2E..54..42..2D..30..37..34..30.
04D8 7-.13..00..04..31..B8..00..00.
0300 1-.B4.
04D8 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.
04D8 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.
04D8 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.
04D8 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.
04D8 1-.A3.
0300 6-.A1..0F..8A..FF..4A..FF.

My RNS-E is now TV-free. What's interesting is the process. Of course, I had to remove the navigation unit to have it made TV-free. First, the 0100 firmware was installed, then unlocked, and after that, the current firmware could be reinstalled.

This is certainly not the only possible approach, but it's the one that was used in my case.

I hope you didn't have to pay money for that, did you?

This method has been publicly available for a long time; just do a search.

This is not about hacking the firmware, but rather about enabling the VIM mode through the CAN bus, i.e., via software and the currently installed software on the device.

Hello,

das Thema ist nun schon etwas älter aber letztlich ja doch immer noch aktuell und der Link zu dem audi4ever-Forum leider inzwischen tot !
Has anyone found out more or knows more details about unlocking the TV? The firmware update seems suspicious, but I can't find any more information about it.

I would be very happy to hear any further news on this topic!

Sincerely,
AndreasHas anyone found out more or knows more details about the TV unlocking process? The firmware change seems suspicious, but I can't find any more information about it.Best regards,
AndreBest regards,
Andreas

It was actually clarified from the beginning how it works.
- A device that simulates a speed of 0 km/h (The device is always in between).
- Activation via a tool that makes a change (increasing the limit of something).

We also have, for example, some tools that allow us to perform an approval process .

Yes, basically you are right, and it's a generally good summary .
I have now also completely read the 55 pages from the previously mentioned thread, and I read it like a captivating book .

Therefore, I am already familiar with the solution involving the firmware update via the 0080 interface. This means that a VIM solution is possible for anyone with a working VAG-COM interface, a CD burner, and the time to obtain the necessary software.

You're talking about a solution with...

Quote:

some tools that we can use to enable something

"...what do you mean by that? Are you talking about *the* solution, or do you have a "cleaner" solution that won't disable my entire RNS-E for at least 12 hours, and in the worst case, move the navigation lady into the trunk?"
Is there actually a feasible solution to achieve the same result as described in the thread, namely setting channel 5 to 250/255, without having to re-flash everything multiple times and involve us in the process?

Best regards,
Andreas

Hello everyone,

Apparently, no one has commented further on this, which I find very unfortunate, as I am genuinely very interested in finding a solution via CAN.
There must be a simple solution, as you can buy a small device at specialized stores that performs this task in about 15 to 20 seconds, as the following quote demonstrates:

Quote:

The module must be connected to the RNS E using the supplied connector for 15 seconds. If the software version is >0100, a measurement block must be changed using diagnostics (VCDS or the original VAG diagnostic system).

According to that, it probably isn't real magic, but I'm just too stingy to invest the 200 euros; however, I think that if I really had to do it, I would definitely read the data stream on the infotainment system's CAN bus and then try to analyze it, because I simply want to know how it works. Of course, I would also be happy to share this knowledge, but I want to ask first whether I really have to be the first one to invest the 200 euros, or whether someone among you has already done this.

I would be very interested in receiving feedback on this topic.

Best regards,
Andreas

Okay.
Genau von solchen Sachen hatte ich gesprochen.
The annoying thing about this module is that it integrates with your navigation system and...
du es nicht wieder woanders verwenden kannst. würd ich in meinem genau so Programmieren, denn man will ja auch was verdienene .
But there are still ways to suppress it.

There are also other ways, which are more expensive, but can be used in many cars.

What exactly do you want to know? Are you just curious about how it works, or do you just want to watch TV?

We have these modules here, and also other (more expensive) devices. I haven't had a chance to log data with them yet.

:wink:
Best regards, PatrickThere are also other ways, which are more expensive, but can be used in many cars.

What exactly do you want to know? Are you just curious about how it works, or do you just want to watch TV?

We have these modules here, and also other (more expensive) devices. I haven't had time to log data with them yet.

} } }
Best regards, PatricWhat exactly do you want to know? Are you just curious about how it works, or do you just want to watch?

We have modules like these here, and also other (more expensive) devices. I haven't had a chance to log any data yet.

} } }
Best regards, PatricWe have these modules here, and also other (more expensive) devices. I haven't had the chance to log data with them yet.

} } }
Best regards, PatricWe have these modules here, and also other (more expensive) devices. However, I haven't had a chance to start logging data with them yet. } } } Best regards, Patrick.

Hello Patrick,

So, somehow, everyone always seems to want to sell me something .

But ultimately, none of it gave me peace of mind, and I needed the unlock for my car PC anyway, so what the heck, I just bought one of those boxes. I'll call it "tuition" !
And now for the surprising part: Kufatec also only uses water for cooking!

The small "magic box" comes with a CD-ROM and a set of Quadlock connectors compatible with the RNS-E system. These connectors only provide power, ground, CAN-High, and CAN-Low connections.

The instructions, in simple terms, tell you to insert the CD, set channel 97 to 1, which will downgrade the firmware from the inserted CD to version 0100. Then, you need to connect the "magic box" and, after the RNS-E boots up, switch the "activation" switch on the "magic box" for 10 seconds, then switch it back, and insert your current navigation DVD so that everything goes back to normal.
Ultimately, everything worked exactly as planned, but without the VAS tester, and if I hadn't had my RNS-E PIN, it would never have worked!

This means that Kufatec simply downgraded the device to an older 0100 firmware, and the small box waits for the RNS-E to be operational, and then transmits nothing over the CAN bus except the commands necessary to write a value of 255 to channel 5 of control unit 56. This isn't really "magic"; it's just a process that can't be done with the standard VAS tester from Audi. However, it should be possible with any CAN adapter, if you know what needs to be sent to address a control unit and modify a channel. The key here is the know-how. Since I haven't received my CAN adapter yet, I haven't analyzed the data, but the process can be conceptually traced, so reading the data is essentially irrelevant. As far as I know, the protocol is open, so you would just need to research what needs to be sent. However, I believe this should be possible to figure out somehow; I'm just lacking the background knowledge at the moment.
Conclusion: With firmware 0100 and a CAN adapter that can be controlled with arbitrary commands, it should theoretically be possible to re-encode channel 05 to 255. Nevertheless, I have great respect for Kufatec for doing such a good job. And because I truly respect this intelligence, they deserve the money. Now that I'm also a bit smarter, maybe I can find someone who can help me with the commands to re-encode a channel via CAN.

Best regards.
Andreas.

Hi Andreas.

ich will dir nix verkaufen.
I just wanted to know the background. There's even a possibility to enable this feature without any hardware, possibly using VAG software. I haven't been able to test it myself yet. So far, it's only worked on the MMI.


Oder ich kann das hier vor ort machen.
Das die Geräte teurer Sind usw. das sollte nicht heißen, das das für dich auch teuer wird.
haI think I might have misunderstood something.denI think you might have misunderstood me a little.

Is there a solution available for the RNS-E system from the 2010s now?

'For the older RNS-E system, this works perfectly. However, with the new system, only a gateway remains that sets the speed signal to 0.'

Hello,

The original poster also raised a second point that was completely ignored in this thread.

I would like to connect a PC to the video input of the Audi Navigation Plus RNS-E. I am currently looking for a working graphics card that can also properly control the RGB input.

Who can comment on this?
Does anyone know the specification for the RGB input?
Is anyone connected to an RGB source?

How about the RNS-D? Does it have the same video input capabilities?

Okay, here's the translation:

'Thank you, wa_tho.'

AudiA4B6US wrote:

Shall we start at the beginning? I would like to connect a PC to the video input of the Audi Navigation Plus RNS-E. I am currently looking for a working graphics card that can also properly control the RGB input. However, the problem will then arise that the video input is disabled above 5 km/h, which makes using the PC somewhat difficult. In VAG-COM, there is a function called "Security Access" whose code I have now found. However, I don't know how to activate the unlocking function after that. If anyone else is interested in this topic, maybe we can exchange information. Since I live in the USA, there might be differences between the European and North American versions of the RNS-E software, but that just makes it more interesting. Regards, Dirk

.

I also live in the USA, and I can tell you that yes, there are differences. A European device won't work here (or will work very poorly).