Lonsdor K518 Pro Update 2025–2026 Toyota and Lexus 4A B6 IMMO

 Lonsdor released a major IMMO software update for K518 Pro and K518 series programmers. This update enables spare smart key programming for 2025–2026 Toyota and Lexus models equipped with 4A B6 smart key systems.

Supported Software Functions:

• Key Counting: Read current active key numbers
• Data Security: Back up IMMO data before programming
• Key Management: Add smart key and delete smart keys
• Module Sync: Register ECU and ID code box

Menu Path and Tokens:

Navigation: Immo & Remote-> Toyota -> Select from type -> PEPS -> Type 11 (CAN) (2025-) -> 2025- (4A B6)

Token Cost:

Adding a smart key requires 35 credits (same token rate as 8A B6 keys).

License Activation:

• For K518 Pro FCV Version: requires Lexus 8A/4A New Model Function License Activation
• For K518 Pro Full Version: already includes this function (ensure its subscription is available)

Hardware Requirement:

4A B6 key programming requires Lonsdor LT32 series smart keys (upcoming)

Supported Vehicle List:

Toyota \ Select from type \ PEPS \ Type 11 (CAN) (2025-) \ 2025- (4A B6)

Toyota \ Select from vehicle \ Asia \ Avalon HV 2025–2026 \ Smart key (4A B6)

Toyota \ Select from vehicle \ Asia \ Avalon \ 2025–2026 \ Smart key (4A B6)

Toyota \ Select from vehicle \ Asia \ Land Cruiser 2026- \ Smart key (8A B6)

Toyota \ Select from vehicle \ Asia \ Yaris \ 2025–2026 \ Smart key (4A B6)

Toyota \ Select from vehicle \ China \ Avalon HV \ 2025–2026 \ Smart key (4A B6)

Toyota \ Select from vehicle \ China \ Avalon \ 2025–2026 \ Smart key (4A B6)

Toyota \ Select from vehicle \ Middle East \ Land Cruiser \ 2026- \ Smart key (8A B6)

www.obdexpress.co.uk

THINKCAR Thinkdiag Manual: Setup & Activation

 The THINKCAR Thinkdiag device works with the app for vehicle diagnostics and OBD functions. This guide covers device activation, diagnostic software download, vehicle connection, and Bluetooth connection.

Activate the Device

Use the serial number and activation code from the English Quick Start Guide, or scan its QR code.

1. Open the app and tap "Me" in the upper-right corner.
2. Tap "My Device >> Activate Device".
3. Scan the QR code, or enter the activation code and serial number manually to complete the binding.

Download Diagnostic Software

When using "Enhanced Diagnostics" or "OBD Functions" for the first time, open "Diagnostics" in the app and download the corresponding diagnostic software.

The software only needs to be downloaded once.

Connect the Device to the Vehicle

1. Locate the vehicle’s OBD-II port, typically under the dashboard above the pedals on the driver’s side.
2. Insert the device into the OBD-II port.
3. A green light indicates that the device is powered on.
4. Turn the ignition to the "ON" position.

Connect via Bluetooth

1. Open the ThinkDiag App. It automatically searches for activated devices.
2. Select the correct device and connect through Bluetooth within the app.
3. Do not pair the device directly through your phone’s Bluetooth settings.
4. After the Bluetooth connection is established, the device is ready to use.

Indicator Lights

Green — always on: Device is powered on but not connected to the app.
Blue — always on: Device is connected to the app.
Blue — flashing: Device is working.
Red — always on: Firmware is updating or the update has failed.
Off: Device is in sleep mode.

FAQ

Q: What do the different lights on the device indicate?

See the Indicator Lights table above for the meaning of each light.

Q: Why do I need to download diagnostic software after downloading the app?

Different vehicle manufacturers require different diagnostic software. The device identifies the vehicle manufacturer and downloads the corresponding software to ensure compatibility.

The software only needs to be downloaded once.

Q: Does the device need a firmware upgrade?

Yes. When connected to a smartphone via Bluetooth, the device automatically checks for firmware updates and updates when necessary.

Do not disconnect the device during the firmware update.

Q: Can the same app account bind to multiple devices?

Yes. Multiple devices can be bound to the same account through the app.

Q: What should I do if I experience a Bluetooth connection issue?

• Make sure the device is powered on. If necessary, try connecting it to another vehicle.
• Check that the SN printed on the device matches the SN shown in the Bluetooth list. If you have multiple devices, select the correct one under "My Devices".
• Android: Unpair the device from the Bluetooth list, pair it again, then connect through the app.
• iOS: Connect directly through the app without pairing the SN in the phone’s Bluetooth settings.

www.obdexpress.co.uk

How to Unlock Bosch MD1CS003 ECU by Flex Boot Glitch?

Unlocking a Bosch MD1 or MG1 control unit no longer requires sending it out. Using Magic Motorsport Flex boot glitch method, you can perform the initial unlock on your bench, after which you can read and write the ECU over bench mode without repeating the process.

Here is the exact procedure broken down using a locked Bosch MD1 CS003 ECU as an example.

Opening the Housing

Start by removing the casing screws.

Carefully run a blade around the edge to cut through the silicone adhesive, then work around the perimeter with an ECU opening tool.

Take your time to prevent prying against board components.

Once inside, check the Flex wiring diagram to identify the resistor that needs to come off.

Desoldering the Resistor

Dab a small amount of liquid flux on the target resistor.

Heat both solder joints using a fine soldering tip or hot air station, then carefully remove the component.

Wiring Up

Connect Flex Box and Flex ECU tool

Plug Magic FLX4.1 Adapter into Flex Box

Use the combined boot and bench cable harness to connect FLEX BOX and locked Bosch MD1 CS003 ECU as shown in the Flex software wiring diagram (Manuals) for your specific ECU model.

Running the Unlock Glitch

Hit Connect in the Flex software, then click Unlock.

Keep in mind:

• The glitch sequence can take up to 25 minutes.
• If it fails on the first pass, run the routine again. It frequently requires multiple attempts before successfully glitching the processor.

Board Cleanup and Testing

Once Flex confirms a successful unlock, apply flux and solder the resistor back onto its original pads.

Double-check your solder connections with a multimeter to verify continuity.

The module is now unlocked and ready for standard bench reading and writing.

Lonsdor K518 Adds 2014–2026 MG & Roewe PIN Code Read

 LONSDOR has released a Major Update dated 2026/8/5, adding a new MG & ROEWE PIN CODE READ FUNCTION with support for 2014–2026 models.

What’s New

• New function: MG & ROEWE PIN CODE READ FUNCTION
• Supported years: 2014–2026 Models
• Available: Lonsdor K518 Pro, K518 FCV

Supported Models

The following vehicle models are currently supported:

MG

MG D5X DMH (2024)

MG eMG6 (2018,2019,2021)

MG MG4 (2026)

MG MG6 (2018,2020,2022)

MG MG7 (2023,2025)

MG MGONE (2022)

MG zs (2018)

MG GS (2015)

ROEWE

ROEWE EI6 (2017,2018)

ROEWE eRX5 (2018,2020)

ROEWE iMAX8 EV (2022,2025)

ROEWE RX5 (2018,2019)

ROEWE RX5 ePLUS (2020)

The manufacturer notes that supported vehicle models include, but are not limited to, the models listed above.

www.obdexpress.co.uk

EngineDance X5 Unlock 2021+ Bosch MD1 MG1 ECU in Two Ways

 Servicing post-2021 Bosch MD1 and MG1 control units requires navigating updated ECU security. If you are working with EngineDance X5, there are two methods to complete the unlock: performing a local boot-glitch or using a remote unlock session.

Method Selection Overview

• Boot-Glitch Unlock: Requires ECU opening; executed on-site at your workshop; supports most TC29x microcontrollers.
• Remote Online Unlock: No ECU disassembly or shipping required; requires part number verification prior to operation.

Method 1: In-House Boot-Glitch Unlocking

If you prefer to perform all operations locally within your workshop without relying on remote connection slots or mail-in services, the boot-glitch method is the standard route.

Hardware needed:

• EngineDance X5 2-in-1 ECU Programming & Truck Diagnostics Tool
• Dedicated EngineDance MD1/MG1 BOOT-GLITCH Adapter.

Functions:
Unlock ECU via boot-glitch, and read /write ECU on bench

How it works:

Open the ECU casing, connect the boot-glitch adapter following the pinout guide, and trigger the hardware glitch routine directly in the software. Once completed, full bench reading and writing are enabled for supported TC29x chipsets across trucks, tractors, and light vehicles (e.g., Ford, Hyundai/Kia, PSA, Maxus, and ISUZU).

Bench After boot Unlock (after 2021) Support List:

• Bosch MD1CE100 TC299-MAN Trucks
• Bosch MD1CE100 TC299-Volkswagen Trucks
• Bosch MD1CE100 TC299-SITRAK
• Bosch MD1CS089 TC299-HOWO
• Bosch MD1CE100 TC299-FAW
• Bosch MD1CE100 TC299-WEICHAI
• Bosch MD1CE100 TC299-SDEC/Hongyan
• Bosch MD1CE101 TC299-IVECO FPT
• Bosch MD1CE101 TC299-New Holland
• Bosch MD1CE101 TC299-Case Construction
• Bosch MD1CE101 TC299-Case IH
• Bosch MD1CE101 TC299-Landini Tractors
• Bosch MD1CE101 TC299-Steyr
• Bosch MD1CE102 TC299-Iveco
• Bosch MD1CS012 TC298-Hyundai/KIA
• Bosch MD1CS012 TC298-Genesis
• Bosch MD1CS003 TC298-Stellantis(PSA)
• Bosch MG1CS042 TC298-Stellantis(PSA)
• Bosch MD1CP006 TC298-Ford
• Bosch MD1CS069 TC299-IVECO
• Bosch MD1CS069 TC299-Fiat Ducato
• Bosch MD1CS069 TC299-Case IH Farmall
• Bosch MD1CS069 TC299-John Deere
• Bosch MD1CS069 TC299-Landini Tractors
• Bosch MD1CS069 TC299-Massey Ferguson
• Bosch MD1CS069 TC299-McCormick
• Bosch MD1CS069 TC299-New Holland
• Bosch MD1CS069 TC299-Steyr
• Bosch MD1CS089 TC299-ISUZU
• Bosch MD1CS089 TC299-IVECO
• Bosch MD1CS089 TC299-Deutz-Fahr
• Bosch MD1CS089 TC299-Maxus
• Bosch MD1CS089 TC299-GWM Cannon Poer
• Bosch MD1CS089 TC299-GWM Haval
• Bosch MD1CS089 TC299-SAIC
• Bosch MD1CS089 TC299-Foton
• Bosch MD1CS089 TC299-JAC
• Bosch MD1CS089 TC299-JMC
• Bosch MD1CS089 TC299-HOWO
• Bosch MD1CS089 TC299-BAIC
• Bosch MD1CS089 TC299-MG
• Bosch MD1CS089 TC299-Dr Motor
• Bosch MD1CS089 TC299-EVO
• Bosch MD1CS089 TC299-ICH-X
• Bosch MD1CS089 TC299-Same Tractors
• Bosch MD1CS089 TC299-Lamborghini Tractors

Method 2: Remote Unlocking

For specific encrypted modules where boot-glitching cannot be performed locally, or if you want to avoid opening the ECU, EngineDance offers a remote decryption option.

Step-by-step preparation:

1. Connect the target ECU to your X5 tool on the bench according to the standard wiring diagram. (Note: If the ECU is unencrypted, remote service is unnecessary — you can unlock it straight away with X5 or X5-Max).
2. Read and record the ECU software and hardware identification numbers inside the X5 application.
3. Take a clear picture of the physical label on the ECU housing.
4. Download ToDesk on your workshop PC (https://www.todesk.com/download.html), grab your X5 serial number, and book a remote slot with EngineDance technical support.
5. Keep your internet line stable. An engineer will remote in via desktop and guide you through the process to finish the unlock.

Bench After Remote Unlock (after 2021) Support List:

【0281020645】DONGFENG-MD1CE108-P1892-SPC5898

【0281020654】YUNNEI-MD1CE108-P1961-SPC5898

【0281020695】YUNNEI-MD1CC878-P2270-SPC5898

【0281020692】YUCHAI-MD1CC878-P2061-SPC5898

【0281037071】IVECO-MD1CS089-P2096-TC299

【0281037078】IVECO-MD1CS069-P1768-TC299

【0281036675】JAC-MD1CS089-P2031-TC299

【0281020677】JAC-MD1CS089-P1968-TC299

【0281036215】JMC-MD1CS089-P1853-TC299

【0281036399】JMC-MD1CS089-P1741-TC299

【0281037336】JMC-MD1CS089-P1853-TC299

【0281036372】JMC-MD1CS089-P1917-TC299

【0281020652】ISUZU-MD1CE108-P1963-SPC58

【0281039460】JIM-MD1CS089-P2327-TC299

【0281039581】JIM-MD1CS089-P2213-TC299

【0281039581】JIM-MD1CS089-P2266-TC299

【0281039679】JIM-MD1CS089-P1967-TC299

【0281039593】JIM-MD1CS089-P2266-TC299

【0281037245】MAXUS-MD1CS089-P1816-TC299

【0281036116】MAXUS-MD1CS089-P1816-TC299

【0281036114】MAXUS-MD1CS089-P1817-TC299

【0281037248】MAXUS-MD1CS089-SK83-TC299

【0281035944】MAXUS-MD1CS089-P1826-TC299

【0281020693】SDEC-MD1CE100-P1958-TC299

【0281020600】SAICHONGYAN-MD1CE101-P1603-TC299

【0281021127】SAICHONGYAN-MD1CE101-P1603-TC299

【0281020801】QUANCHAI-MD1CC878-P1966-SPC5898

【0281020621】QUANCHAI-MD1CC878-P1966-SPC5898

【0281020599】SITRAK-MD1CE100-P1708-TC299

【0281021190】SITRAK-MD1CE100-P1158-TC375

【0281020755】SANY-MD1CC878-P2089-SPC5898

Support Note:

Due to the large volume of Bosch MD1/MG1 variants and continuous manufacturer security updates, current unlock support is limited to select verified models. Full coverage for all ECU software and hardware versions cannot be guaranteed.

In addition to EngineDance X5 2-in-1 ECU programmer, several top brands such as OBDSTAR G3/DC706/ECU Master, Flex, FormulaFlash will also support encrypted MD1 MG1 ECUs reading/writing and unlocking functions.

http://blog.obdexpress.co.uk/2026/07/31/unlock-encrypted-bosch-md1-mg1-ecus-obdstar-flex-formulaflash/

OBDSTAR Unlock Encrypted MD1 MG1 ECU FAQs

 OBDSTAR ECU tools (such as X300 Classic G3, DC706, ECU Master) now support unlocking BMW Encrypted MD1 MG1 ECUs after the August 2026 update. This article answers some related questions.

Q1: Which devices support the unlock function? What adapters are needed?

A: OBDSTAR X300 Classic G3 (Key Master G3), DC706 and ECU Master all supports unlocking.

• G3 requires MP001 programmer (included) and RH850/V850 adapter kit (C4–06 adapter) (optional).
• DC706 requires MP001 programmer (optional) and C4–06 adapter (optional).
• ECU Master only requires C4–06 adapter (optional).

OBDSTAR C4–06 is a universal adapter with high compatibility allowing you to easily write read and unlock locket MG1 MD1 ECUs.

---

Q2: Do I need to pay extra to activate this unlock function?

A: As long as your devices annual subscription is valid. The unlock function is free to use with no extra fees.

---

Q3: Does unlocking require opening the ECU?

A: Yes, you need to open the ECU case and solder the corresponding pins to enter BOOT mode for unlocking.

---

Q4: Is unlocking risky? How difficult is it?

A: ECU unlocking involves certain risks and requires professional skills. Please pay attention to the following precautions before performing the operation.

1. Open the case

If you are inexperienced, prying tools can damage the PCB. We recommend hitting the sealant first to soften it. Don’t worry, we’ll be posting an ECU opening tutorial soon.

2. Wiring and Power

A sudden power lose or accidental wearing disconnection during the unlocking process may cause the operation to fall. In severe cases, it may damage the ECU or result in communication failure. For BMW, B48, B57, B58 ECUs, we recommend using the ECM-003 dedicated harness to minimize wearing errors.

3. Component handling

The ECU PCBs requires the removal of small SMD resistors. Improper handling may result in lost components, damaged solder pads or damaged PCB traces due to excessive soldering heat. So we highly recommend leaving this to technicians with basic electronic repair experience.

---

Q5: After unlocking with an OBDSTAR device, can I read/write data using third-party tools?

A: No, the unlock and the data read write operations can only be done with OBDSTAR devices. Once operation is finished and you access the software, this you will automatically relock as soon as it loses power.

---

Q6: Does it support BMW ISN reading and modification?

A: It currently supports BMW ISN reading with modification under development. It also supports Flash and EEPROM read/write and flash read write comes with checksum support.

---

Q7: Are there dedicated harness for the unlock function?

A: Yes, OBDSTAR are developing dedicated harness.

For example, ECM-003 is specifically designed for BMW B48/B57/B58 models.

---

Q8: Is the read ECU data encrypted?

A: No, all ECU data read through OBDSTAR device is unencrypted and fully compatible with third party tools.

---

Q9: What are the power supply requirements?

A: There are strict guidelines for this selection.

We highly recommend using a professional stable power supply rated at 60W or above with an output voltage of 13 to 14. If you have ECU master, you can just use the included power supply. Warning, avoid non-professional power supplies. Some power supplies on the market suffer from false power routings and unstable output. Voltage fluctuations during operation can easily damage the ECU.

How to Program 2016 Lincoln MKX AKL with Lonsdor K518 Pro?

 Programming a replacement key on a 2016 Lincoln MKX when all keys are lost requires overriding the vehicle’s factory alarm. Lonsdor K518 Pro key programmer, combined with the Lonsdor Ford AKL Bypass Cable, streamlines IMMO backup and PATS synchronization without alarm interference.

Operation Guide:

Step 1: Pre-Code the Transponder Keys

Power on K518 Pro tablet

Select Generate smart key > LINCOLN > MKX > 2009–2016 ID49 868

Place a blank key into the device key slot and press Generate

Step 2: Connect the Bypass Harness and Backup IMMO

Select Immo & Remote > LINCOLN > MKX > 2016–2017 > Smart Key > All smart key lost

Ensure two smart keys are prepared.

Turn off the ignition, then open and close the driver door.

Connect Lonsdor Ford AKL Cable following the wiring diagram, and connect K518 Pro key programmer to the OBD port

Disconnect the negative battery terminal. When prompted on-screen, reconnect the terminal

After Lonsdor K518 Pro completes backing up the IMMO data, remove the bypass cable and reconnect the original harness

Step 3: Run Security Calculation and Adapt Keys

Confirm harness restoration on screen. The device begins a 10-minute security calculation to reset existing key memory

Insert Key 1 into the vehicle’s backup slot and press confirm.

Insert Key 2 into the slot and press confirm

Operational Requirements & Verification

• Test engine start, remote locking, unlocking, and trunk control for both keys

• Maintain a stable power supply with an external battery charger throughout the process.
• Ford PATS requires a minimum of two registered keys to finalize programming.

www.obdexpress.co.uk