Lonsdor K518 Adds 2014–2026 MG & Roewe PIN Code Read

 LONSDOR has released a Major Update dated 2026/8/5, adding a new MG & ROEWE PIN CODE READ FUNCTION with support for 2014–2026 models.

What’s New

• New function: MG & ROEWE PIN CODE READ FUNCTION
• Supported years: 2014–2026 Models
• Available: Lonsdor K518 Pro, K518 FCV

Supported Models

The following vehicle models are currently supported:

MG

MG D5X DMH (2024)

MG eMG6 (2018,2019,2021)

MG MG4 (2026)

MG MG6 (2018,2020,2022)

MG MG7 (2023,2025)

MG MGONE (2022)

MG zs (2018)

MG GS (2015)

ROEWE

ROEWE EI6 (2017,2018)

ROEWE eRX5 (2018,2020)

ROEWE iMAX8 EV (2022,2025)

ROEWE RX5 (2018,2019)

ROEWE RX5 ePLUS (2020)

The manufacturer notes that supported vehicle models include, but are not limited to, the models listed above.

www.obdexpress.co.uk

EngineDance X5 Unlock 2021+ Bosch MD1 MG1 ECU in Two Ways

 Servicing post-2021 Bosch MD1 and MG1 control units requires navigating updated ECU security. If you are working with EngineDance X5, there are two methods to complete the unlock: performing a local boot-glitch or using a remote unlock session.

Method Selection Overview

• Boot-Glitch Unlock: Requires ECU opening; executed on-site at your workshop; supports most TC29x microcontrollers.
• Remote Online Unlock: No ECU disassembly or shipping required; requires part number verification prior to operation.

Method 1: In-House Boot-Glitch Unlocking

If you prefer to perform all operations locally within your workshop without relying on remote connection slots or mail-in services, the boot-glitch method is the standard route.

Hardware needed:

• EngineDance X5 2-in-1 ECU Programming & Truck Diagnostics Tool
• Dedicated EngineDance MD1/MG1 BOOT-GLITCH Adapter.

Functions:
Unlock ECU via boot-glitch, and read /write ECU on bench

How it works:

Open the ECU casing, connect the boot-glitch adapter following the pinout guide, and trigger the hardware glitch routine directly in the software. Once completed, full bench reading and writing are enabled for supported TC29x chipsets across trucks, tractors, and light vehicles (e.g., Ford, Hyundai/Kia, PSA, Maxus, and ISUZU).

Bench After boot Unlock (after 2021) Support List:

• Bosch MD1CE100 TC299-MAN Trucks
• Bosch MD1CE100 TC299-Volkswagen Trucks
• Bosch MD1CE100 TC299-SITRAK
• Bosch MD1CS089 TC299-HOWO
• Bosch MD1CE100 TC299-FAW
• Bosch MD1CE100 TC299-WEICHAI
• Bosch MD1CE100 TC299-SDEC/Hongyan
• Bosch MD1CE101 TC299-IVECO FPT
• Bosch MD1CE101 TC299-New Holland
• Bosch MD1CE101 TC299-Case Construction
• Bosch MD1CE101 TC299-Case IH
• Bosch MD1CE101 TC299-Landini Tractors
• Bosch MD1CE101 TC299-Steyr
• Bosch MD1CE102 TC299-Iveco
• Bosch MD1CS012 TC298-Hyundai/KIA
• Bosch MD1CS012 TC298-Genesis
• Bosch MD1CS003 TC298-Stellantis(PSA)
• Bosch MG1CS042 TC298-Stellantis(PSA)
• Bosch MD1CP006 TC298-Ford
• Bosch MD1CS069 TC299-IVECO
• Bosch MD1CS069 TC299-Fiat Ducato
• Bosch MD1CS069 TC299-Case IH Farmall
• Bosch MD1CS069 TC299-John Deere
• Bosch MD1CS069 TC299-Landini Tractors
• Bosch MD1CS069 TC299-Massey Ferguson
• Bosch MD1CS069 TC299-McCormick
• Bosch MD1CS069 TC299-New Holland
• Bosch MD1CS069 TC299-Steyr
• Bosch MD1CS089 TC299-ISUZU
• Bosch MD1CS089 TC299-IVECO
• Bosch MD1CS089 TC299-Deutz-Fahr
• Bosch MD1CS089 TC299-Maxus
• Bosch MD1CS089 TC299-GWM Cannon Poer
• Bosch MD1CS089 TC299-GWM Haval
• Bosch MD1CS089 TC299-SAIC
• Bosch MD1CS089 TC299-Foton
• Bosch MD1CS089 TC299-JAC
• Bosch MD1CS089 TC299-JMC
• Bosch MD1CS089 TC299-HOWO
• Bosch MD1CS089 TC299-BAIC
• Bosch MD1CS089 TC299-MG
• Bosch MD1CS089 TC299-Dr Motor
• Bosch MD1CS089 TC299-EVO
• Bosch MD1CS089 TC299-ICH-X
• Bosch MD1CS089 TC299-Same Tractors
• Bosch MD1CS089 TC299-Lamborghini Tractors

Method 2: Remote Unlocking

For specific encrypted modules where boot-glitching cannot be performed locally, or if you want to avoid opening the ECU, EngineDance offers a remote decryption option.

Step-by-step preparation:

1. Connect the target ECU to your X5 tool on the bench according to the standard wiring diagram. (Note: If the ECU is unencrypted, remote service is unnecessary — you can unlock it straight away with X5 or X5-Max).
2. Read and record the ECU software and hardware identification numbers inside the X5 application.
3. Take a clear picture of the physical label on the ECU housing.
4. Download ToDesk on your workshop PC (https://www.todesk.com/download.html), grab your X5 serial number, and book a remote slot with EngineDance technical support.
5. Keep your internet line stable. An engineer will remote in via desktop and guide you through the process to finish the unlock.

Bench After Remote Unlock (after 2021) Support List:

【0281020645】DONGFENG-MD1CE108-P1892-SPC5898

【0281020654】YUNNEI-MD1CE108-P1961-SPC5898

【0281020695】YUNNEI-MD1CC878-P2270-SPC5898

【0281020692】YUCHAI-MD1CC878-P2061-SPC5898

【0281037071】IVECO-MD1CS089-P2096-TC299

【0281037078】IVECO-MD1CS069-P1768-TC299

【0281036675】JAC-MD1CS089-P2031-TC299

【0281020677】JAC-MD1CS089-P1968-TC299

【0281036215】JMC-MD1CS089-P1853-TC299

【0281036399】JMC-MD1CS089-P1741-TC299

【0281037336】JMC-MD1CS089-P1853-TC299

【0281036372】JMC-MD1CS089-P1917-TC299

【0281020652】ISUZU-MD1CE108-P1963-SPC58

【0281039460】JIM-MD1CS089-P2327-TC299

【0281039581】JIM-MD1CS089-P2213-TC299

【0281039581】JIM-MD1CS089-P2266-TC299

【0281039679】JIM-MD1CS089-P1967-TC299

【0281039593】JIM-MD1CS089-P2266-TC299

【0281037245】MAXUS-MD1CS089-P1816-TC299

【0281036116】MAXUS-MD1CS089-P1816-TC299

【0281036114】MAXUS-MD1CS089-P1817-TC299

【0281037248】MAXUS-MD1CS089-SK83-TC299

【0281035944】MAXUS-MD1CS089-P1826-TC299

【0281020693】SDEC-MD1CE100-P1958-TC299

【0281020600】SAICHONGYAN-MD1CE101-P1603-TC299

【0281021127】SAICHONGYAN-MD1CE101-P1603-TC299

【0281020801】QUANCHAI-MD1CC878-P1966-SPC5898

【0281020621】QUANCHAI-MD1CC878-P1966-SPC5898

【0281020599】SITRAK-MD1CE100-P1708-TC299

【0281021190】SITRAK-MD1CE100-P1158-TC375

【0281020755】SANY-MD1CC878-P2089-SPC5898

Support Note:

Due to the large volume of Bosch MD1/MG1 variants and continuous manufacturer security updates, current unlock support is limited to select verified models. Full coverage for all ECU software and hardware versions cannot be guaranteed.

In addition to EngineDance X5 2-in-1 ECU programmer, several top brands such as OBDSTAR G3/DC706/ECU Master, Flex, FormulaFlash will also support encrypted MD1 MG1 ECUs reading/writing and unlocking functions.

http://blog.obdexpress.co.uk/2026/07/31/unlock-encrypted-bosch-md1-mg1-ecus-obdstar-flex-formulaflash/

OBDSTAR Unlock Encrypted MD1 MG1 ECU FAQs

 OBDSTAR ECU tools (such as X300 Classic G3, DC706, ECU Master) now support unlocking BMW Encrypted MD1 MG1 ECUs after the August 2026 update. This article answers some related questions.

Q1: Which devices support the unlock function? What adapters are needed?

A: OBDSTAR X300 Classic G3 (Key Master G3), DC706 and ECU Master all supports unlocking.

• G3 requires MP001 programmer (included) and RH850/V850 adapter kit (C4–06 adapter) (optional).
• DC706 requires MP001 programmer (optional) and C4–06 adapter (optional).
• ECU Master only requires C4–06 adapter (optional).

OBDSTAR C4–06 is a universal adapter with high compatibility allowing you to easily write read and unlock locket MG1 MD1 ECUs.

---

Q2: Do I need to pay extra to activate this unlock function?

A: As long as your devices annual subscription is valid. The unlock function is free to use with no extra fees.

---

Q3: Does unlocking require opening the ECU?

A: Yes, you need to open the ECU case and solder the corresponding pins to enter BOOT mode for unlocking.

---

Q4: Is unlocking risky? How difficult is it?

A: ECU unlocking involves certain risks and requires professional skills. Please pay attention to the following precautions before performing the operation.

1. Open the case

If you are inexperienced, prying tools can damage the PCB. We recommend hitting the sealant first to soften it. Don’t worry, we’ll be posting an ECU opening tutorial soon.

2. Wiring and Power

A sudden power lose or accidental wearing disconnection during the unlocking process may cause the operation to fall. In severe cases, it may damage the ECU or result in communication failure. For BMW, B48, B57, B58 ECUs, we recommend using the ECM-003 dedicated harness to minimize wearing errors.

3. Component handling

The ECU PCBs requires the removal of small SMD resistors. Improper handling may result in lost components, damaged solder pads or damaged PCB traces due to excessive soldering heat. So we highly recommend leaving this to technicians with basic electronic repair experience.

---

Q5: After unlocking with an OBDSTAR device, can I read/write data using third-party tools?

A: No, the unlock and the data read write operations can only be done with OBDSTAR devices. Once operation is finished and you access the software, this you will automatically relock as soon as it loses power.

---

Q6: Does it support BMW ISN reading and modification?

A: It currently supports BMW ISN reading with modification under development. It also supports Flash and EEPROM read/write and flash read write comes with checksum support.

---

Q7: Are there dedicated harness for the unlock function?

A: Yes, OBDSTAR are developing dedicated harness.

For example, ECM-003 is specifically designed for BMW B48/B57/B58 models.

---

Q8: Is the read ECU data encrypted?

A: No, all ECU data read through OBDSTAR device is unencrypted and fully compatible with third party tools.

---

Q9: What are the power supply requirements?

A: There are strict guidelines for this selection.

We highly recommend using a professional stable power supply rated at 60W or above with an output voltage of 13 to 14. If you have ECU master, you can just use the included power supply. Warning, avoid non-professional power supplies. Some power supplies on the market suffer from false power routings and unstable output. Voltage fluctuations during operation can easily damage the ECU.

How to Program 2016 Lincoln MKX AKL with Lonsdor K518 Pro?

 Programming a replacement key on a 2016 Lincoln MKX when all keys are lost requires overriding the vehicle’s factory alarm. Lonsdor K518 Pro key programmer, combined with the Lonsdor Ford AKL Bypass Cable, streamlines IMMO backup and PATS synchronization without alarm interference.

Operation Guide:

Step 1: Pre-Code the Transponder Keys

Power on K518 Pro tablet

Select Generate smart key > LINCOLN > MKX > 2009–2016 ID49 868

Place a blank key into the device key slot and press Generate

Step 2: Connect the Bypass Harness and Backup IMMO

Select Immo & Remote > LINCOLN > MKX > 2016–2017 > Smart Key > All smart key lost

Ensure two smart keys are prepared.

Turn off the ignition, then open and close the driver door.

Connect Lonsdor Ford AKL Cable following the wiring diagram, and connect K518 Pro key programmer to the OBD port

Disconnect the negative battery terminal. When prompted on-screen, reconnect the terminal

After Lonsdor K518 Pro completes backing up the IMMO data, remove the bypass cable and reconnect the original harness

Step 3: Run Security Calculation and Adapt Keys

Confirm harness restoration on screen. The device begins a 10-minute security calculation to reset existing key memory

Insert Key 1 into the vehicle’s backup slot and press confirm.

Insert Key 2 into the slot and press confirm

Operational Requirements & Verification

• Test engine start, remote locking, unlocking, and trunk control for both keys

• Maintain a stable power supply with an external battery charger throughout the process.
• Ford PATS requires a minimum of two registered keys to finalize programming.

www.obdexpress.co.uk

Unlock Encrypted Bosch MD1 MG1 ECUs: OBDSTAR, Flex, FormulaFlash

 Bosch MD1/MG1 Engine Control Units manufactured from June 2020 onward incorporate strict hardware security modules (HSM) and software access controls. Unlocking these units via Boot mode bypasses digital seed-key verification, granting direct access to internal Flash and EEPROM memory. Today, three leading diagnostic platforms — OBDSTAR, FormulaFlash, and Flex — have expanded support for TriCore TC298 and TC299-based Bosch MD1/MG1 control units across major vehicle platforms.

1. OBDSTAR

• Compatible devices: X300 Classic G3, ECU Master, DC706 ECU Tool

Require RH850/V850 Adapter Kit (C4–06 Adapter).

• Target Platforms: TriCore Aurix TC298 / TC299
• Access Level: Direct Software Unlock, Read, and Write

Supported Models:

• BMW MD1CP032 | B57 Engine | TC299 | All Configurations
• BMW MG1CS024 | B48 / B58 Engine | TC298 | All Configurations
• BMW MG1CS201 | B48 / B58 Engine | TC298 | All Configurations
• FCA MD1CS069 | MultiJet / Diesel | TC299 | All Configurations
• Ford MD1CP006 | PowerStroke / Diesel | TC298 | All Configurations
• Isuzu MD1CS089 | Commercial Engines | TC299 | Restricted to ECU MASTER C

FormulaFlash ECU Programmer (update coming soon)

• Execution Mode: Boot Mode Unlock
• Functions: Software Security Unlock, Full Flash Read, Full Flash Write, Automated Checksum Calculation
• Active Hardware Requirements: Active FormulaFlash software subscription
• Supported Models:
• VAG MG1CS163 (TC298) & MG1CS031 H80 (TC298)
• BMW MD1CP032 (TC299) & MG1CS024 (TC298)
• Ford MD1CP006 (TC298)
• JLR MD1CP017 (TC298) & MD1CP007 (TC298)
• Stellantis MG1CS042 (TC298)
• Isuzu MD1CS089 (TC299)
• FCA MD1CS069 (TC299 — Fiat Ducato)

2. Magic Motorsport Flex

• Protocol Identifier: Boot Glitch-Bench
• Hardware Interface: Port E using adapter FLX4.1 (Included in Flex Kit)

• Glitch Lock Interval: 10s to 25 minutes (Hardware state dependent)
• Read / Write Cycles: ~2 min 30 sec (Read) | ~2 min 00 sec (Write)
• Memory Support: Internal Flash (R/W/Checksum), Internal EEPROM (R/W), Full Backup
• Software Packages: FLS0.5M (Master) / FLS0.5S (Slave). New users: Full Hardware Kit + Software Package bundles available (FLEX Full Version Master/FLEX Full Version Slave).

Update Info:

Flex Standard Base Compatibility List

• ECU Variants: MD1CE101, MD1CS069, MD1CS005, MG1CS024, MG1CS201, MD1CP032, MG1CS002 H80, MG1CS031 H80, MG1CS163, MD1CS004 H80, MD1CS003, MG1CS042, MD1CP007, MD1CP017, MG1CS028, MD1CS012.
• Base Fleet Applications: Audi RS3 8YA 2.5L TFSI (2021), BMW 118i F40 (2021), Cupra Formentor 2.0L TDI (2021), DS 9 1.6L PHEV (2021), Iveco Eurocargo 4.5L (2021), Land Rover Defender L663 3.0L (2021), Opel Corsa F 1.5L (2021), Peugeot 308 III 1.6L PHEV (2021), Peugeot Partner III 1.5L (2021), VW Golf VIII 2.0L TDI (2021).

Click here to check the complete vehicle list.

Essential Operational Recommendations

To prevent ECU bricking or communication timeouts during the Boot unlock sequence:

1.Power Supply Stabilization:

Maintain a continuous, regulated power supply between 13.5V and 13.8V throughout the entire glitching and bench cycle.

2.Hardware Continuity:

Verify FLX4.1 cable integrity and Port E contact pins prior to initiating the Boot connection sequence.

3.Mandatory Backup:

Always perform a Full EEPROM and Flash Backup immediately after the initial Boot unlock before executing any custom calibration writes.

4.Connection Timeout Protocol:

Glitch execution times vary (10s to 25m). Do not disconnect power or terminate software routines prematurely during the connection phase.

www.obdexpress.co.uk

FormulaFlash Adds Ford SID211 & SID212/SID212EVO Bench Support

 FormulaFlash V1.1.9.0 will be released on July 31, introducing a dedicated SID update with new Ford SID211 and SID212/SID212EVO Bench support. This release adds real read, write, and checksum support, expanding Formula Flash’s capabilities for two widely used Ford ECU families.

What’s New

The FormulaFlash V1.1.9.0 SID Edition includes new Bench support for:

• SID211

Chip: TC1791

Bench Mode

Real Read

Write

Checksum Support

• SID212 / SID212EVO

Chip: TC297TP

Bench Mode

Real Read

Write

Checksum Support

Supported Ford Applications

Representative supported applications include:

Ford Transit

Ford Transit Custom

Ford Ranger

Ford Focus IV

Ford Kuga III

Ford Mondeo

Why This Update Matters

The SID212/SID212EVO ECU family is in steady demand for Ford bench programming work, yet support remains unavailable on many tools in the same price range. With the addition of real read, write, and checksum for SID211 and SID212/SID212EVO, FormulaFlash expands practical coverage for workshops handling these ECUs.

More technical details will be available after the official release on July 31.

www.obdexpress.co.uk

How to Get Free CG FC200 BMW B48 B58 Unlock Adapter?

 CG FC200 owners can receive a free BMW B48/B58 ECU Unlock Adapter for MG1CS024 and MG1CS201 bench setups by paying a€9 shipping charge before August 10, 2026.

Hardware Compatibility

• Target Device: CG FC200 ECU Programmer
• Add-on Adapter Purpose: Bench programming unlock interface for BMW MG1CS024 & MG1CS201 ECUs (B48 & B58 engines). It is an essential tool for auto repair shops.
• Original Price: €110 (Discounted to €0 during promotion)

Everything You Need to Know Before Claiming:

1.Subscription Check: Verify that your FC200 annual subscription is current.

• If the device software license is expired, pay the FC200 Annual Renewal Fee first to restore active status.
• For the new FC200 users, please complete device activation within two weeks after the adapter promotion ends.

2.Claim Limit: 1 adapter per registered FC200 hardware ID.

3.Shipping Fee: €9 fixed logistics cost required upon order processing.

4.Expirations: Program ends on August 10, 2026. Requests submitted after this date will be processed at the standard price: €110.

5.Claim Procedure: Contact our technical support or submit your FC200 serial number online to initialize dispatch.

Contact us:

• E-Mail: Sales@OBDexpress.co.uk
• WhatsApp Business: +44 7418609676
• WhatsApp After-sales Service: +86 18750906257

www.obdexpress.co.uk