The Knowledgebase for Todays Locksmith
The FREE Technical Magazine Issue 1 February 2016 www.locksmithmag.com1 Bio’s of this months contributors
Martin Pink The highly respected locksmith Martin Pick has been at the forefront of the development of tools and techniques for picking, decoding and opening many of today’s toughest locks. Martin has been instrumental in the development of the Genuine Lishi Brand and he wrote the definitive guide to opening car locks called the Genuine Lishi Training Kit. Martin is known around the globe for his knowledge of car lock technology and is highly sought after at locksmith exhibitions and training events around the world.
Massimo Bianchi Massimo Bianchi is the Keyline Strategic Planner and he works tirelessly to advance the reputation of the Keyline brand worldwide. Massimo is highly respected throughout the industry for his passion for locks and his in depth knowledge of keys, key cloning and cutting machines. This knowledge and passion is built on nearly 350 years of the Bianchi family being at the centre of key development and advancement and they have pioneered many developments in the world of key cutting and car key related technology.
Chris Belcher Everyone in the locksmith world knows and respects Chris Belcher and his huge knowledge and understanding of locks and how to defeat them. Chris’s development of the RPCP tools to overcome British Standard Mortice Locks revolutionised the industry, and his genius is seen in the Multi Gauge Mortice Pick - the production of which bamboozled even the best engineers in the UK. Of course to Chris this is just business as usual and comes from his skill as a Submarine Engineer in the Royal Navy for over 30 years, as Chris says, “you can’t nip to B&Q when something goes wrong and you are 1000 feet below the surface”.
Richard Bunn Having previously worked as an IT professional Richard went on to train with SAVTA (Safe and Vault Technicians) in the USA. On his return to the UK he went in search for as many locksmiths, safe and automotive training courses he possibly could to refine his skills further. Fifteen years of successful locksmithing later, Richard has specialised as an automotive locksmith and completes over a 1000 ‘lost keys’ jobs per year for customers such as the RAC.
2 Letter from the editor
Welcome to the very first edition of Cars, Keys and Locks – the technical journal sponsored by Tradelocks. The aim of CKL is to help advance the skills and knowledge of the everyday locksmith, using adept tips and guidance from experts in the industry. Free to all subscribers, CKL will be published every 2 months and will hold the key to solving all those procedural issues you, the professional, may come across each day. With technical guides, top tips from industry leading specialists and an ‘Ask the Expert’ section, where real locksmiths will be answering very real questions you have. The subscription form at the end of this issue has all the details of how you can sign up to receive the most up-to-date information in the industry. Our articles are in-depth and filled with actual photographs of the work in hand, giving you the most comprehensive how to guides available. In this edition we cover VAG vehicles comprehensively with a how to guide from Martin Pink, and the solution to making keys for VAG 2001-2003 vehicles using SuperVAG from Richard Bunn. This reflects the popularity of these cars in the market, with more guides on the new 2015 VAG locks to come in edition 2. We go in depth on the solution to keyless car access, and Keyline take you through the history of Megamos and the challenges they faced and how they got around it. In our ‘On the Bench’ section Chris Belcher also tells you all about the ins and outs of lock bumping. We have made this journal A5, so it can be carried about easily and used as a reference point as you work. Soon we will be releasing the free binder, where you can store all your copies of CKL. The binder will also have a handy reference index where you can quickly and easily get to the article you need when you need it. In closing, I hope you enjoy this edition of Cars, Keys and Locks. Please feel free to email any comments you have to [email protected]. A note from the Sponsors: At last, a magazine written by practising industry experts for the benefit of the industry! No waffle, no news, no self-praising, back slapping articles only of interest to the person who wrote them. Instead just solid technical articles - aimed to help the reader understand a particular issue. This is exactly what the industry has wanted for a long time! It is a tribute to the industry giants who have worked tirelessly to master their subject. We hope you find Cars, Keys and Locks useful, and we hope that it becomes the reference library we aimed it to be and an essential part of your day to day work!
Table of Content Tackling VAG locks › part 1 (generation 1,2 and 3) 4 Ask the expert 16 Unlocked: the solution to keyless car access 18 The solution for making keys to vag vehicles 2001 to 2013 (SuperVAG) 24 The Megamos® Crypto Enigma 32 On The Bench: The Ins and Outs of Lock Bumping 36
3 Tackling VAG Locks › Part 1 By Martin Pink (Generation 1,2 and 3) VAG (Volkswagen, Audi, Seat, and HU66 GEN 2 HU66 GEN 3 Skoda) has fast become the most HU162 VAG 2015 9 CUT HU162 VAG 2015 10 Cut important lock to defeat for many! VAG 9 CUT LOCK VAG 10 CUT WITH 4 SIDE CUTS Horizontal keyway with the same profile as the This lock version has 4 side cuts, Unlike other locks, VAG has 3 very 8 cut but with 3 side cut wafers – 2 cuts on 1 profile 2 on the top profile and 2 on the bottom. different generations of the HU66 lock, and 1 cut on the opposite profile. NOTE: the raised lip on the lock body around the plug using 2 very different 2in1 pick decoders. and facecap sits flush to the raised lip. It also has 3 differing 2015 plus VAG Locks that use the HU162 keyway – which requires another 3 distinct picks to defeat it.
That said, in this guide we will cover NOTE: there is no lock body lip like with the 9 techniques to help you identify the cut. The facecap overhangs from the lock body correct lock version and select the by 1.25mm – so more profound than the 8 cut, correct tool for the job – as well as best and it also has a horizontal keyway. practices for using the different tools.
Identifying HU66 Gen 1, 2 and 3 locks. You can see the face cap of the gen 3 lock is sunken and flush with the body of the lock, the Firstly, let’s look at how to tell the difference between the HU66 gen 3 lock is also much bigger and a totally generation 1, 2 and 3 locks and different shape to the gen 1 and 2 locks next to it. how to deal with them: This makes it instantly identifiable visually – it is Here is a picture of all 6 keyways – this the only one of the VAG HU66 locks that can will help you identify the difference be- be simply identified by appearance. tween the new gen 3 lock and the other locks, visually. VAG locks follow 2 different wafer configurations:
1) Gen 1 lock follows a 1 up 1 down configuration 2) Gen 2 and 3 locks follow a 2 up 2 down configuration
As we can easily identify the generation 3 lock visually, we only need to understand how to ID the difference between the gen 1 and 2 lock. HU66 GEN 1 HU162 VAG 2015 8 CUT To do this we must: VAG 2015, 8 CUT
a) Fully insert the 2in1 pick into the lock b) Move the lifter to position 1 and find the spring c) Assuming the spring wafer is felt on the bottom grid d) Move the indicator to position 2 e) If the spring wafer is also felt on the bottom grid then it has 2 wafers on same side of lock in a 2 up 2 down format, so it is a gen 2 or 3 lock. If the spring wafer had been felt on the Horizontal keyway with a slightly raised facecap that top grid then this would signify a 1 up 1 down overhangs4 from the lock body by approximately 3/4mm configuration – so would be a generation 1 lock So, the gen 3 lock can be identified visually, To defeat the decode interference change but to tell the difference between the gen 1 made by the manufacturer, Lishi simply and gen 2 lock you must feel using the tool. changed the tool design, so all picking and decoding is carried out using the key snib This is an almost instant confirmation of on the centre of the wafer as shown below: which lock we have in front of us. HU66 GEN 2 HU66 GEN 3 HU162 VAG 2015 9 CUT HU162 VAG 2015 10 Cut Why do we manufacture a single lifter and a twin lifter HU66 2in1 pick and VAG 10 CUT WITH 4 SIDE CUTS This lock version has 4 side cuts, decoder? 2 on the top profile and 2 on the bottom. 2 different Lishi 2in1 picks exist - a single lifter version and a twin lifter version.
1) Single lifter tool: this is the best tool for generation 1 and 2 locks. It will pick the gen 3 lock but on many will struggle to decode it 2) Twin lifter tool: this tool was designed for gen 3 locks to ensure an accurate decode of the lock, it will also pick and decode all gen 1 and 2 locks The newer twin lifter 2in1 was introduced
in 2011 for new VAG locks This produced an instant fix and continued defeat for the VAG lock into gen 3 and The need for the new tool was a design beyond. alteration in the wafer in late 2010. The manufacturers decided to introduce cuts, Using the single lifter and twin lifter grooves or ridges to the inside top and tools on the 3 lock generations inside bottom of the wafers, so as the single lifter relied on the top inside and NOTE: There is a huge difference when bottom inside of the wafer for its decode using the twin lifter or single lifter tool: reading, this hampered the decode function for the single lifter tool on gen 3 1) The single lifter tool decodes in the VAG locks as shown in pictures below: opposite direction to which you picked in
2) The twin lifter tool decodes in the same direction as you picked in
This is an important point to remember.
5 Picking open Audi and Seat locks after Useful check and procedure to make year 2002 with all VAG locks prior to picking
Note to help save time and confusion: What is common with all VAG locks, especially models equipped with remote keys and smart pod keys is that the lock Many Audi and Seat seizes up as it is not being used. 2 different types of seized lock are commonly seen locks from 2002 use even on later models and these include: a 9 cut lock. The 9th cut Seized Wafers This is probably the most common of the is a generic cut, so the seized lock issues. This issue will present itself in 1 of 2 ways, and in some cases, both can occur. The first sign is you struggle same in every lock. All to fully insert the pick into the lock, which is caused by 1 or more wafers sitting seized cut to code machines and out of their conventional position. The other common give away is rock solid or stiff have the facility to cut wafers that don’t want to move and return freely and smoothly, when there is no tension this 9th cut automatically applied to the plug. The solution is simple – flush the lock with if selected. plenty of lubricant a few times and rake the wafers with a hand rake or inner groove This doesn’t pose any problems to the Lishi tool for a short while. The gentle raking user when picking and decoding the lock, and lubricant in most cases will free up as the decode will give you the 8 key cuts, the wafers to allow a smooth picking and and the cut to code machine adds the 9th accurate decoding process to be performed generic cut for you. without any issue – and with the added bonus of servicing the lock for the customer! Where this can cause problems is when you just need to pick the car open. The lock will Seized Plugs pick open simply, but the locks will not be disengaged! This is less common than seized wafers, but still a common enough situation for the So you have picked the lock, the plug technician to encounter. turns, but the door is not open. Here is an example of a job which encountered seized plugs: ‘recently I was called to a 2011 This is common – simply relax tension and Audi A5 using the pod key and bypass lock. start resetting the lock. Turn it back almost A recovery operator had attended the job to the reset position, and then turn in the and had given up after 90 minutes with no opening direction again. Sometimes you success. The customer had a spare key need to repeat this 2 or 3 times, but the lock pod and bypass key but the remote was always opens and can be decoded for this dead even after changing the battery – the key generation still. bypass key would not turn the lock at all. The customer had never tried the spare key; the recovery operator had tried to pick the NOTE: This is most common on Audi lock but could not get any wafers to bind. locks. After 90 minutes the recovery operator diagnosed that the lock was faulty and the spare key was for a different car – which is 6 not uncommon in cars purchased second hand - he was told to use a locksmith. Picking and decoding the generation 1 On arrival to the job and after getting the lock using the Lishi single lifter 2in1 story from the customer on the recovery operator’s findings, I checked the lock by The generation 1 lock as we know follows inserting a Lishi tool and applying tension a strict 1 up and 1 down wafer configuration. and then checked for binding wafers. All The lock also has a preferred picking the wafers moved freely and none were sequence, which is dependent upon whether you are picking the lock clockwise or anti binding to pick. The plug would not move clockwise. at all - which instantly gave away that the plug was seized. A seized plug would not The tools blades are all made to a number only stop wafers from binding for picking, 4 cut height, so as soon as the tool is inserted but would also stop the correct key from into the lock, all number 4 cuts in the lock turning the plug. So, the job was simple will be instantly set. So if all cuts were 4s – I flushed the lock and the plug with in the lock, the tool would insert and open lubricant, and then inserted the customer’s instantly. spare bypass key, using some force I turned the key and opened the door. NOTE: I mentioned all 4 positions will be I then flushed the lock again until it was set, but not all lowest cut number 4 wafers moving freely on the key and put the spare will slap tightly when set. Sometimes a stiff key pod in the slot which resynched the movement is felt, which is why we must remote pod key – so I used this to pop follow the rule of: the boot open.’ If the wafer moves at all then leave it alone!
All plugs should have a slight clockwise Clockwise and anti-clockwise movement with your If picking in the clockwise direction then the tool or key, if not then it’s likely it’s seized. lock follows a picking sequence of: The giveaway signs for a seized plug are: Pick positions 1, 3, 5, and 7 first in whatever order these decide to bind until fully set. You no plug movement or no binding wafers will know when they are fully set as the plug will seem to turn a few mm – you can also at all when tension is applied with Lishi confirm by feeling for a tight slap in each tools. of these positions. Once set we then pick positions 2, 4, 6 and 8 again in which ever order these decide to bind, once set the The fix is simple: lock will open. 1) Use plenty of lubricant to flush the lock Anti-clockwise If we were picking the lock anti clockwise, and the plug. then we will simply need to reverse the sequence, so we would: 2) Use the Lishi tool fully inserted or a cut Pick positions 2, 4, 6 and 8 first in which down key blank to apply heavy tension left ever order these decide to bind first until all are set. We would then pick positions 1, 3, and right to free the plug 5 and 7 in which ever order they decide to bind until the lock is open.
These are simple and common issues The generation 1 lock responds best yet still catch many out. Although simple to a firm medium tension. On left hand drive vehicles picks anti-clockwise and they can mean the difference between the on UK right hand drive vehicles it picks success and failure of a job. open clockwise. 7 Initially we need to fully insert the tool into We gently push the indicator up or down the the lock, then move the lifter to position 1 position lines 1 to 8 in the opposite direction and find the spring wafer in this position. to which we picked. It is essential we push We then check the location of the spring gently but fully to the stop position. The wafer in position 2 to ensure it’s a gen 1 indicator will stop on one of the horizontal lock. If the wafers are in 1 on bottom and 2 lines numbered 1 to 4. If it rests on a number on top or vice versa then it’s a gen 1 lock, if 1 line then it’s a number 1 key cut, if it comes the wafers are felt in 1 bottom and 2 bottom, to rest on a number 3 line then it’s a number or 1 top and 2 top then it’s a gen 2 lock. 3 cut on the key.
So having confirmed it’s a gen 1 lock, we We read each position in turn and write position the indicator on position 1 and down the reading. When all positions are ensuring we have the tool fully inserted, read, we enter the key cuts into our machine apply a firm medium tension and maintain and simply cut the correct key. this tension. Picking the gen 2 lock Now move the indicator across positions 1, 3, 5 and 7, tickling each position in turn. As we know the only difference between We are feeling for a solid binding wafer. the gen 1 and gen 2 lock is the wafer REMEMBER IF THE WAFER MOVES configuration being 2 up and 2 down AT ALL THEN LEAVE IT ALONE! – this changes the preferred picking Each time we find a solid wafer we need to pick it by lifting or depressing the lifter by sequence we must follow. 1mm or so. If the solid wafer remains solid we must lift another 1mm until a tight slapping Clockwise direction movement is felt, this indicates a set wafer. Once all solid wafers in positions 1, 3, 5 and In a clockwise direction of picking we 7 are set and slapping, you will feel the plug must first pick and set positions: turn a few mm – this confirms all wafers on 1, 5, 8 and 4 in whatever order these bind this side of the lock are picked. solid first. Once picked the plug will turn Once the plug moves a few mm and each of approximately 2mm and each position positions 1, 3, 5 and 7 are slapping, we turn our picking attention to positions 2, 4, 6 and will slap tightly, we are then ready to pick 8. Maintaining our firm medium tension we positions 2, 6, 7 and 3 in whatever order follow the same process of tickling positions they bind solid until the lock opens. 2, 4, 6 and 8 to find the solid wafers in their binding order – once all solid wafers are Anti-clockwise direction picked and set, the lock will open. If picking in an anti-clockwise direction we Once open, we hold the lock in position via must reverse this. We would begin by picking the tension arm and run the decode whilst positions 2, 6, 7 and 3 first until these are the lock is in the open position. set, then picking positions 1, 5, 8 and 4 until the lock opens. With the single lifter tool we take our decode reading in the opposite direction of what we Again, as we are using a single lifter tool, picked in. So in position 1, if we picked the whilst holding the lock in the open position wafer downwards on the bottom half of the we read each position in turn in the opposite grid, we take our decode reading by lifting direction to which we picked the lock. the lifters indicator up the 1 line, upwards on the top half of grid – so the opposite Write down each reading and insert direction to picking. into your cut to code machine to cut an accurate key. 8 Picture how to guide: pick and decode Once position 4 was picked the plug turned of a gen 2 lock using the single lifter 2in1 2mm which confirmed that positions 1, 5, 8 and 4 are all picked and set. This was We begin by inserting the tool fully into the confirmed by checking each position had lock and checking the wafer positions to a tight slap. As we didn’t need to pick ensure a gen 2 lock configuration of positions 1 and 5 this confirms instantly 2 up 2 down: that positions 1 and 5 are number 4 cuts. We maintain our firm, medium tension and now concentrate on picking positions 2, 6, 7 and 3 in their binding order.
Begin by fully inserting the tool and check We now apply a firm, medium tension and pick positions 1, 5, 8 and 4 in their binding POSITION 7 IS 1ST TO BIND AND PICK order:
POSITION 8 IS 1ST TO BIND & PICK POSITION 3 IS NEXT TO BIND AND PICK
AS POSITION 3 PICKS THE LOCK POSITION 4 IS NEXT TO BIND & PICK OPENS INSTANTLY. 9 So as again we didn’t need to pick positions So holding the lock in this open position we 2 and 6, this confirms that these 2 positions begin the decode process, knowing already are also number 4 cuts, as the tool already that positions 1, 2, 5 and 6 are all number 4 cuts. presets the number 4 cuts. We read each position in the opposite direction to that which we picked in:
POSITION 1 READS POSITION 2 READS POSITION 3 READS POSITION 4 READS AS A NO 4 CUT AS A NO 4 CUT AS A NO 2 CUT AS A NO 2 CUT
POSITION 5 READS POSITION 6 READS POSITION 7 READS POSITION 8 READS AS A NO 4 CUT AS A NO 4 CUT AS A NO 3 CUT AS A NO 1 CUT
So having written down each reading, this decode gives us a key from bow to tip which is from positions 1 at bow to 8 at tip of: 44224431
We have 3 choices for cutting the key: we can either select insert the cuts on our cut to code machine and insert the above cuts and cut the key, or we can use software like InstaCode and select the car make model and year. Select HU66 key, click on find bitting and enter our cuts above as per diagram.
Click next and InstaCode will give you the manufacturer’s key code.
You will see it offers us the manufacturer’s codes of 3241 or 03241. We can now select insert the code, choose the correct manufacturer and key type, enter this code and cut the correct key.
Our final choice is to cut the key manually by using depth and space keys. 10 Twin Lifter HU66 2in1 tool on VAG this the process is almost identical to pick and generation 3 lock decode the lock with no nasty surprises, just follow the rules in this guide to simplify the We now know that the twin lifter tool will picking process. We know already that the work well on all generations of VAG lock, new generation 3 lock follows the same wafer but the generation 3 lock is the lock it was configuration as the gen 2 lock. So if picking designed for! in the clockwise direction we follow the same picking sequence as with the gen 2 lock and We need to remember that when using a in an anti-clockwise direction picking positions twin lifter tool we must decode the lock in 1584 until set, then picking positions 2673 until the same direction as we picked it in. So, if the lock opens. we picked up then we must decode up too. You will notice that 1 lifter picks the top grid NOTE: Many of these gen 3 locks also have and the other lifter picks the bottom grid, a light clutch. It is advised to use a light to so each grid has its own lifter. Other than medium tension as twin lifter tools respond best to this and do not respond well to a heavy hand.
Picture how to guide: picking and decoding VAG gen 3 lock
As we are picking this lock in the clockwise So we now concentrate on picking positions 2, 6, direction we follow the subsequent picking 7 and 3. sequence of picking positions 1,5, 8 and 4 first, then once set and the plug is felt to move a few mm we will pick positions 2, 6, 7 and 3 until open. VAG We begin by ensuring both lifters are central on the grid and fully insert the tool into the GEN 3 gen 3 lock. Once fully inserted we apply a light to medium tension via the tension arm POSITION 2 IS 1ST in a clockwise direction and proceed to tickle LOCK TO BIND AND PICK positions 1, 5, 8 and 4 to find the solid binding wafers.
As position 4 is picked the plug moved a few As soon as position 2 is picked the lock opened mm. This confirms that positions 1, 5, 8 and – which again suggests that positions 6, 7 and 4 are all picked and set and suggests, as we 3 are all number 4 cuts, as these did not need didn’t need to pick them, that positions 1 and picking. So prior to decoding we already know 8 are number 4 cuts - further confirmed when that this key has a number 4 cut in positions 1, 3, I checked each position and they were all 6, 7 and 8. slapping tightly. We decode in the same direction as we pick, so whilst holding the lock in the picked open position we decode each position and write this down:
POSITION 5 IS 1ST POSITION 4 IS THE TO BIND & PICK NEXT TO BIND & PICK 11 POSITION 1 READS POSITION 2 READS POSITION 3 READS POSITION 4 READS AS A NO 4 CUT AS A NO 2 CUT AS A NO 4 CUT AS A NO 1 CUT
POSITION 5 READS POSITION 6 READS POSITION 7 READS POSITION 8 READS AS A NO 2 CUT AS A NO 4 CUT AS A NO 4 CUT AS A NO 4 CUT So we have read a key from bow to tip of 42412444. Simply cut your accurate key.
The VAG 2015 keyways: How to ID them and the main differences between them VAG For ID purposes, the first thing to note is that the VAG 2015 locks have a much smaller horizontal 2015 keyway rather than the traditional larger HU66 vertical keyway. To help identify the 8 cut lock 8 CUT version it is worth noting that the plug protrudes by 3/4mm from the locks body as well as there being a slightly recessed area around the protruding plug.
The key is a straight 8 conventional cut, with no HORIZONTAL KEYWAY, WITH A SLIGHTLY RAISED FACE CAP side mounted wafers, so no side cuts cut into THAT PROTUDES FROM LOCK BODY APPROX 3/4MM. the profile of the key. The correct tool for this lock is the VAG 2015 8 cut pick. VAG 8 CUT KEY BLADE WITH NO SIDE CUTS SO Major difference of the 9 and 10 cut locks USES A STRAIGHT 8 CONVENTIONAL KEY CUTS.
When looking at the new 2015 locks, the major difference between the 8 cut 2015 lock and the 9 and 10 cut 2015 locks is the introduction of side mounted wafers that interact with side cuts on the top and bottom profile of the key. The 9 SIDE CUT WAFERS cut lock uses 3 side mounted wafers in positions 1 to 3 on the key with 2 cuts on 1 profile and 1 cut on the opposite profile of the key. So, has 3 side mounted wafers in positions 1 to 3 and 6 conventional wafers in positions 4 to 9. The 10 cut lock uses 4 side mounted wafers in the first 4 positions, 2 on the top profile and 2 on the bottom profile, so has 4 side mounted wafers CONVENTIONAL CUT in positions 1 to 4 and 6 conventional cuts in WAFERS positions12 5 to 10. Horizontal keyway with the same profile as the 8 cut but Vag 9 cut key: you can see the thick part of the profile with 3 side cut wafers – 2 cuts on 1 profile and 1 cut on is the same as the 8 cut keyblade. The noticeable the opposite profile. difference being the side profile key cuts, cut onto it to Note: the raised lip on the lock body around the plug and interact with the side mounted wafers within the first 3 facecap sits flush to the raised lip. positions of the lock. VAG 9 CUT LOCK
The 9 cut lock as you can see also uses the smaller vertical keyway and is on the same blade section as the 8 cut lock. You can see the side profile cuts are on the bottom of the keys profile. For ID purposes you will see that unlike the 8 cut lock there is no recess around the plug, instead there is a raised lip, with the plug sitting flush to the raised lip, making the 9 cut ID simpler.
This key uses 3 side cuts in positions 1 to 3 and 6 conventional cuts in positions 4 to 9. The side cuts will be 2 on 1 profile and 1 on the opposite profile. The correct tool to use is the Genuine Lishi 9 cut tool.
This lock version has 4 side cuts, 2 on the top VAG profile and 2 on the bottom profile 10 CUT Vag 10 cut key: this has 4 side cuts in the profiles WITH 4 SIDE CUT – 2 on the top and 2 cuts on the opposite bottom profile. You will also notice the cuts are on the opposite side of the keys profile, showing that For id purposes, the 10 cut key is a reverse profile to the 8 and 9 Note: no lock body lip as 9 cut, face cap protrudes from lock cut keys. body by 1.25Mm so more profound than 8 Cut and also has horizontal keyway.
The VAG 2015, 10 cut lock uses 4 side mounted For purposes of ID and to help with this, you will wafers in the first 4 positions with 2 side cuts on notice it has the same smaller horizontal keyway the top profile of the key and 2 side cuts in the as with the rest of the 2015 keyways. Like the bottom profile of the key. So, positions 1 to 4 have 8 cut it has the recess around the plug with the side mounted wafers and side cuts on the key and main difference being that the plug protrudes by positions 5 to 10 have 6 conventional wafers and 1.25mm, so is more profound. cuts on the key. Another crucial difference of the 10 cut lock and key is that it’s the reverse profile of the 9 cut key. 13 Why is it necessary to have 3 new tools for the NEW VAG 2015 Locks rather VAG 2015 than just 1 tool for all? KEY BLADES This is a common question and one that is easily answered:
1) The 8 cut tool has no side cuts so needs a tool with 8 conventional cuts only. 8 CUT 9 CUT 10 CUT 2) The 9 cut tool although it has the same Left Left Right blade profile as the 8 cut, it has different spacing as well as 3 side cuts. profile profile profile
3) The 10 cut tool is on a completely different section with reversed profile.
The reason you can’t have a 10 cut tool that will also do the 9 cut lock is down to the reverse profile. They are opposite sections, so they won’t insert into each other’s lock. Due to the reverse profile, the 9 cut tool will not fully insert into the 10 cut lock and vice versa which is another point of correct ID for users. The profile differences can be clearly seen in the image to the right: Check out the next issue of Cars, Keys and Locks to find Part 2 of the VAG Guide, INCLUDING: Step by step photo guides and processes for picking the new VAG 2015 Lock series, focusing on the VAG 2015, 8 cut, 9 cut and 10 cut lock. So make sure you look out for your FREE copy! 14 NEW
NVLISHI3-1HU66 NVLISHI3-1HU66 (GEN3)
NVLISHI- PICKVAG2015-8CUT ONLY £39.99
NVLISHI- NVLISHI- PICKVAG2015-9CUT PICKVAG2015-10CUT
15 Are you a locksmith unable to get a job done? Got a burning question, but not sure who to ask for advice on ASK the latest products and tools? World leading auto locksmith professional Martin Pink is here to help! Each issue he will be answering some THE of your auto locksmithing questions, so if you’re in need of expert advice, get in touch! EXPERT [email protected]
Your attempted job was on a 2003 Audi A3, which was the first to use the Can Chip with the precoded CS. Currently the 884 cannot tell the difference between a T6 ID48 chip and a Can chip, it will read both as MG10 and I had a customer come into the shop go through the cloning process. But if it is a for a clone key, so I attempted to use Can chip system the procedure will give a fail the 884 mini for the job. The car was message at the end. This is currently being a 2003 Audi A3. The mini identified addressed by Keyline. the chip as an MG10 and all seemed to be going fine. I sniffed data from Here’s how to check if you have a Can system carvia the 8 turns of the ignition or a Non-Can system. A good indicator is and the mini started calculating, but looking at the lightson the dashboard after a short time the process gave when you turn the a failed message. Thinking I had ignition on. done something wrong, I checked Vehicles with the the process and repeated it. I Non-Can T6 ID48 sniffed data again and once more system that can be the process failed, so I gave up and cloned will have an returned the original key to owner. immobiliser light. The owner came straight back as his car wouldn’t start. I checked and he If it does, it is likely that was right, the original key would no it will clone fine with the longer start the car and the dashboard Keyline TKM head.The just said SAFE. The customer has Can systems don’t use recovery membership so I tried his this immobiliser light recovery firm who also couldn’t get generally, they use the this going? I need to fix this, is there term ‘SAFE’ instead anything I can do or must it go to the on the dashboard if a dealer? programmed key is inserted. 16 This indicates a Can system and the FOR AN AUDI A3, A T6 ID48 WILL HAVE 8L majority of cars will not have an immobiliser IN DIGITS 7 AND 8 OF VIN AND IS CLONEABLE. light symbol at all. The VIN number will also confirm whether a vehicle is using a Can FOR AN AUDI A3 USING A CANBUS T25 CHIP, or Non-Can system. Look at digits 7 and IT WILL HAVE 8P IN DIGITS 7 AND 8 OF VIN 8 in the VIN number, as per example VW WHICH CONFIRMS IT’S A CAN SYSTEM AND Golf VIN here: WVWZZZ1KZ7W193867. SO CANNOT CURRENTLY BE CLONED. This tells you that the car has a 1K chassis, which is a new Can chip model that cannot The issue of the vehicle immobilising be cloned yet. The 10th digit of the VIN and failing to start after cloning has failed. confirms the tear of manufacture, which in this case is a 7 which means it’s a 2007 In this case you have switched the ignition model. The following VIN number: on and off 16 times with an unprogrammed WVWZZZ1JZ3B062197 is for a Non-Can key, the car thought this to be a theft model of VW golf that has a standard T6 attempt and immobilised itself. You must simply perform a soft reset procedure. Turn ID48 chip that can be cloned. In this case on the ignition to position 2 where the dash the digits in positions 7 and 8 are 1J lights up and leave the ignition switched on confirming that this is a MK4 1J chassis with the original key for 45 minutes. After vehicle which can be cloned, digit 10 is 45 minutes switch off and the key will a 3 which confirms it was built in 2003. now work fine.
I attended a job on a late model 2010 Peugeot Partner van with its keys locked inside. My trusty VA2 tool wouldn’t pick this and I only felt 5 of the 6 wafers. I’ve used my pick many times and never had an issue. Is it a different lock on the later models and is there a tool for it?
No it’s not a new lock , the lock is still the same VA2 lock with the same depth and spacing, although the manufacturers have made a significant change to this later lock that prevents the older VA2 2in1 from fully locating. They haven’t changed the lock, but they have changed the face-caps keyway opening, making it smaller and narrower, which causes the old 2in1 tool to stop on the shoulder part way in which it snags on the face cap and wont fully locate in the lock. This means you can’t pick up all of the wafers.
The solution is to buy the 3in1 VA2 tool which has a much lower shoulder and will fully insert in this lock. Although this doesn’t help you when at a job, there is a modification you can make to the existing 2in1 so you can complete the job if stuck.
Simply file the 1st shoulder down until it is the same size as the blade, so in effect removing this first shoulder area and extending the blade length. This will then enter this lock and pick it spot on for you.
When filing only use a hand file as a grinder heats up to much and can damage the tools laser welds causing the tool to fall apart. 17 Tradelocks introduce the extension product to the KD900 that will not only increase the services of the auto locksmith but the Unlocked: profits too! CarKeysOnYourPhone App will allow you to offer your customers an additional service The Solution to - the ability to unlock their own car using just their smartphone – that is once it has been installed by the professional. It works by generating a remote using the Keyless KD900 and a KD entry dongle, and then pairing it to the mobile smartphone app via Bluetooth. An auto locksmith must install the OBD entry into the car either manually Car Access or diagnostically for the system to work.
How to Install the CarKeysOnYourPhone App
Manual installation:
Take for example a vehicle such as the Jaguar Excite. You have been called out to a job where your customer has locked their car keys inside their vehicle and needs them retrieving. Firstly you would pick open the vehicle using the Lishi tibbe pick.
The first stage is to get into the vehicle and retrieve the car keys, as you would on any job. But here is an opportunity to offer your customer another service, the installation of the CarKeysOnYourPhone App which can be installed during your job:
Take the KD entry dongle and install the software for the vehicle in question, in this case the Jaguar vehicle – to do this use the KD900.
So, now you must take the KD entry device and plug it in using the KD900 lead. Treat it simply as if you were creating a standard Jaguar remote. 18 After plugging it into the OBD, go into So to generate the remote Bluetooth settings on your smartphone and search for the device. You will see the KD entry that you want to connect to. – Excite Jag The default password is always 6 zeros, so ‘000000.’ Now you can see that the Bluetooth device has paired with your – 433MH for the UK phone. – Ok – Make remote
As we all know KD900’s are very simple to use - so now your KD entry device is the equivalent of a Jaguar remote.
The next stage is to manually programme it into the vehicle and pair it to your smartphone.
Do your research and find out where the Treat the OBD dongle as if it was a normal OBD port is in the car. In the Jaguar it is just remote key and programme that remote key by the accelerator pedal. Take the back off into your vehicle. the OBD entry product and you’ll be able to see the LED light up when you plug it into With jaguar vehicles of this year all you have the OBD port - meaning you’ve successfully to do is programme the remote in manually. got power.
Search for ‘KD Entry’ on iTunes or Google Play Store 4 turns of the key in the ignition until you hear a sound – press the lock button on your smartphone – you’ll be able to hear from the vehicle that is has been synchronized as if it was a normal remote.
19 Now test it for real. Lock the car and unlock using just the smartphone The car should unlock.
So next time your customer locks their key inside their vehicle, if you have fitted the automatic entry using the mobile phone app, they can press unlock using their phone and they can get back into their vehicle and get their keys back out independently. Diagnostic Installation: Take for example the 2006 VW Golf, which will require diagnostic installation of the remote into the vehicle.
Here is how it’s done:
If you have a 2006 VW Golf with a key locked in the vehicle, for example that has been left in the ignition, you would first pick the lock open to get the key out using a Genuine Lishi HU66 pick.
With the key now safely out of the vehicle we can now install the system, allowing the customer to open their car should this happen again, using their smartphone.
Firstly, you must install the VW specific remote software into the chip set, again using the KD900. Take the back of your KD entry to get into the programming port and plug it into your KD900. Switch it on and select the appropriate VW remote. Like with the manual installation, treat it as if it was any other KD remote you are going to create.
Scroll up as well as down to find VW. To find Unlike the manual Jaguar you would normally the part number do some research or look at programme a remote into this Golf vehicle using the customer’s existing remote, if they have diagnostics equipment. So, in addition to your KD got one - it’s a 1K0959753GVW in this case. entry and your KD900 you need your Y splitter You can then put your KD900 away and get cable – one part will go to your diagnostics cable ready to install your KD entry. and one part will go to your OBD entry kit.
20 The main plug is obviously being put into the OBD port itself - now your splitter cable has been successfully installed into your OBD port - put the OBD entry in one side of your splitter cable (you will be able to see it successfully powering it up and ready to pair to your smartphone). Now install your diagnostics system into the other side of the splitter cable.
Before we start diagnostically programming make sure the OBD entry is paired to the smartphone, using the same steps with the manual installation.
Now the remote has been paired successfully, you can start to diagnostically programme it into the vehicle, treating it as a normal remote BUT with the buttons of the remote on the keypad of smartphone.
You can choose your favourite diagnostics software; in this case I’ve used Abritas to programme in the remote.
When you’ve finished, remove the splitter cable – take the OBD entry off and put the cover cap back on it and fit the OBD entry to the OBD on its own. You can see on the phone if it’s already been paired. Put in the default password and it should be successfully paired. As the remote has already been programmed it should be possible to use this on the smartphone. 21 Now test it out! So what’s the benefit for the locksmith?
Your customers don’t want a repeat of the situation, and the hassle of having to call out a locksmith if they lock their keys in their car again. So, chances are they would snap your hand off at the opportunity to solve the problem themselves - especially in the time of gadgets and gizmos!
Car lovers and the technology savvy will love this and it will fast become a must have item – making offering this particular service very profitable for you!
22 Visit www.tradelocks.co.uk for these special deals NEW AND EXCLUSIVE TO TRADELOCKS
CarKeysOnYourPhone.com
Possibly the Biggest Product in the Auto Locksmith Industry...... Now using KD900 your customers can use their Mobile Phone to open their car. This product is EXCLUSIVE to customers who own a KD900 Now no one ever has to lock their keys in their car again.
The product will sell to many people; * Sell as an Upgrade when attending a Vehicle lock out situation * Sell it to young people wanting the latest gadgets * Sell it as a safety feature for loved ones CarKeysonYourPhone.com Try Now for
JUST or £39.99 Buy 10 for + VAT JUST £35 + VAT GL-TAPACARKEY each YOU MUST HAVE KD900 TO USE THIS PRODUCT 23 Visit www.tradelocks.co.uk for these special deals THE SOLUTION FOR MAKING KEYS to VAG vehicles 2001 to 2013 by Richard Bunn
With so much equipment available on the transponder, to a canbus vehicle specific market today it’s difficult to know what transponder (i.e. ID48 VW Canbus, ID48 to buy, why you should buy it and more SKODA Canbus, ID 48 AUDI Canbus, and importantly how to then use it effectively. ID48 SEAT Canbus). From approximately In the world of automotive locksmithing 2004 we were introduced to these ID48s there are many options when it comes to turning into canbus transponders and creating transponder keys to a wide range the need to write 7 bytes of component of VAG vehicles. In an ideal world you security to the transponder for the vehicle would purchase one piece of diagnostic to recognise the transponder key prior to equipment which would enable you to programming. From 2009 onwards these then create and program 99% of all keys. same ID48 transponders increased their In a lost key scenario and for every car on security by using all the crypto key pages the market both past, present and future. (pages 4 to 9) on the transponder and As we all know that doesn’t exist and no 12 bytes of component security had then doubt never will. become a requirement.
So what are the current opportunities So understanding what the vehicle needs available to the automotive locksmiths you to do in order to create your pre-coded for programming VAG vehicles today? transponder is an important part of your Well luckily, due to VAGs volume and decision making process. Ideally you therefore popularity on the road, all diagnostic would plug in your OEM dealer tool, link equipment manufacturers seem to have to the internet (as you have purchased a solution for some part of the VAG group. your VAG license) and let the server based There are solutions from Advanced at Volkswagen do everything for you. Diagnostics, Abrites, Zed Full, Vag Com, This is however an expensive solution, and many more, not to mention the dealer a hard approval to attain, and the need OEM solution. All diagnostic equipment for internet is imperative. manufacturers (as a rule of thumb) have ‘partial’ solutions for Volkswagen, Audi, Up until 2009 for Volkswagen, Audi, Seat Seat and Skoda, but do you know the and Skoda you could create and program limitations which you are currently faced new keys in a lost keys scenario relatively with and by each equipment manufacturer? easily. Most diagnostic equipment as In brief transponders used in these vehicles previously mentioned will pull the security are represented by the popular ID48 pin code, and the 7 bytes of component Megamos package, this same device when security needed for precoding and final coded correctly can go from a regular ID48 coding into the vehicle. 2009 onwards 24 however there is a problem! Unfortunately to program these vehicles after 2009 you Step 1: will need a working key in order to program Remove the instrument cluster from the vehicle. an additional key, so if all keys are lost by the customer you have not got a simple Detach the surrounding trim, remove a total of OBD solution. The technical reason for 3 x torx screws in this case, and detach the this is the VAG vehicles security changed to a VDO NEC processor in the clocks (or loom with the blue connector from the rear commonly known as the instrument cluster, of the clocks – as shown below: I use both of these terms interchangeably) and unless the cluster is activated into by Richard Bunn boot mode or service mode (this happens automatically if you have a working key) the vehicle will not allow any more keys to be programmed.
So when all keys are lost for VAG vehicles dated 2009 onwards what can you do?
Only some of the equipment from manufacturers will have a solution which involves taking out the clocks (this is very easy to do and usually involves unscrewing 2 or 3 torx screws), and removing the clocks from the vehicle. Then these same equipment manufacturers need you to remove an EEPROM from the instrument cluster PCB, write a new file to the EEPROM, re-solder the EEPROM and then with the instrument cluster in ‘service mode’ you can then program new keys. The solution I prefer and will pass on to you involves no removing of EEPROMS, involves no soldering irons, and involves no writing back to EEPROMS, plus its quicker (approximately 50% less time to complete) and definitively safer for you as an automotive locksmith. So using SuperVAG - let’s run through a real working example and see what actions and procedures are necessary to perform this job: Job: Create new keys to the vehicle (non available). Vehicle: Seat Ibiza 2012 Problem: All keys lost (bought as a Category D by the customer). 25 Step 2: Remove the back of the instrument cluster (4 x torx screws).
Step 3: With the clocks open on your bench you should now have SuperVAG ready to plug in; your Tango for transponder writing and a key to program.
Step 4: Connect SuperVAG interface to the laptop and open the application software. Connect the SVG ‘bespoke’ cable that connects to the back of the instrument cluster.
26 Step 5: Now power up your SuperVAG connection and start following the onscreen instructions included in the SuperVAG software.
Step 6: Now your connected to the clocks via SuperVAG cable you can read the transponder data off the processor. The first stage in the software is to press the icon as highlighted.
Step 7: As the microprocessor is secure you will be unable to initially read the data successfully. The application software will ask if you have the SVG cable connected (which you have), and then it will ask you during this process: have you researched the clocks that you are working on? The reason is that you will be prompted, during the process, to touch a specific contact point or hole on the PCB with the attached POGO pin. Step 8: Downloading the online pdf from the SuperVAG website you then need to match the PCB you have from the vehicle to the research pdf document. The below picture shows the PCB on the clocks that we have from the vehicle totally matches the PCB shown below. It also indicates where the POGO pin needs to be inserted when prompted by the SuperVAG software. 27 Step 9: Now following the on screen prompts: the software will ask you to switch off the power to the clocks, insert the POGO pin and then power it back up (you MUST read the on screen instructions and do NOT jump ahead in the process).
Step 10: All the lights that were lit up on the clocks will now have gone out except for the parking break – as described below. If this is not the case you may need to repeat the procedure a second time (due to bad placement of the POGO pin etc.).
Step 11: When the clocks have gone into service mode SuperVAG will then start extracting all the data from the NEC processor. Initially it will give you the pincode, as shown.
28 Step 12: Then SuperVAG will create a bin file for that processor and will ask you where you wish to save the file to (I always save it to the desktop for easy visual access).
Step 13: Now you have successfully saved the file. Leave the SuperVAG application open and open up Tango. Select the keymaker for, in this case, Seat. You will see that there is a SuperVAG option for this vehicle inside the TANGO software:
Step 14: Now press the F (for file) car icon and you then pass the SuperVAG bin file to TANGO that you had saved earlier. The TANGO software will then tell you how many keys are in the system. Then select an unused slot, in this case key number 3. Insert your transponder (ID48 Megamos – it doesn’t need to have been converted to canbus, this will be done automatically) into TANGO, press the W (write button) and then select the Megamos-48 transponder radio button when prompted. 29 Step 15: Now you have written to the transponder you now need to write the transponder data back to the clocks. TANGO will now automatically create a new bin file for you to write back to the locks using SuperVAG. Again save this file to your desktop and name this new file with a meaningful name so you remember what you have done. In this case we have named it ‘ add key back to cluster’ bin file.
Step 16: Finally go back to SuperVAG application and click on the icon below (writing data to the transponder). Once pressed the SuperVAG application will ask for the file you just created with TANGO. Once you have selected that file SuperVAG will write the data back to the NEC processor on the PCB of the cluster and the process is now complete.
Step 17: Now ensure before unplugging the Well done on your first successful SuperVAG SuperVAG loom that you turn off the power. dash solution – you have now created new Then fit the back of the cover back onto the transponder keys, without EEPROM reading, clocks with the Torx screws, and carefully fit without soldering and desoldering, and the complete clocks back into the vehicle. without having to pay for a dealer key. With technology continually changing, the next challenge is the MQB systems on the 2013 to present day vehicles within the VAG range. As of yet there are still no solutions for lost keys on aftermarket equipment on Golf mark VII, but with inventors such as Martin Richter from SuperVAG - it may just be a matter of time.
30 SuperVAG is now available at Tradelocks JUST £785 + VAT
31 THE MEGAMOS® CRYPTO ENIGMA By Massimo Bianchi – Keyline Strategic Planner
Our passion for keys has always travelled at the same speed as our passion for cars. The beginning My father, Camillo, cultivated this passion over the years and then it was passed to The desire to understand more and me. constantly make improvements has pushed us to achieve many goals; from Every car model has its own evolutionary the duplication of keys to their head story – from the first drawings to the cloning - made by circuits and codes moment it comes out from its assembly line which at first glance look unfathomable. – and with the car there comes its key. The first important result we had was to We have seen how the key has evolved, make Crypto transponder cloning possible. parallel to the development of car models produced worldwide – and we studied every The transponder type was generally aspect and innovation. We have seen that believed to be most difficult to decipher, there has been unstoppable technological due to its complexity. However, with our change and constant advancement - not knowledge of the automotive world, more only to the car key, but to every aspect of precisely our knowledge of car technology the vehicle. and every key that allows ignition, we were able to do what was thought to be impossible Our knowledge of keys, passed from - cloning the Texas® and Philips® Crypto. father to son since 1770 to present day, has allowed us to look at the car with a careful The challenge with transponder cloning and critical eye. However, knowledge alone was delivered and, in part, won. But we is sometimes not enough and when faced hadn’t finished there, there was still a piece with a technological challenge like this one, missing - Megamos® Crypto transponder the most important thing is curiosity and cloning. perseverance: 32 The biggest challenge
For years, the development of this technology Incessant research and analysis, always has been a prestigious achievement as supported with several tests made by it faced the biggest challenge in cloning several groups of technicians and experts car keys with a transponder. of the automotive world, became a routine. Within the 24 hours of a day we gathered Every company that worked in the key and exchanged information, day after day, business had been working on this for from every corner of the world. a long time - without any results. The market had been waiting anxiously for The code complexity meant a sophisticated someone to announce that they had computer center with extensive use of succeeded and cloned this complex cloud computing technology was needed. system – it was the key that was still In addition, it was necessary to create an missing. accessible system to manage all requests for calculation and cloning dynamically. And Keyline, as one of the industry’s Even now we are extremely proud to be biggest and oldest companies decided the only ones to set up a system capable to take on this challenge. There is a quote of carrying out these operations. by Lao Tzu that says: A journey of thousand miles begins always with the first step – Another element we are constantly and so it was for Keyline. improving is the memory management of our servers. Today they are not only Finding the solution to the most complex capable of recovering a key cloned weeks enigma in the transponder world lasted before, but they can also attach the key for more than three years and led us to all correctly as it is entered with the previously continents - from Europe to Asia, America collected sniffs, combined with the original to Oceania. key. The teams working in Europe, America We were sure the next thing to be deciphered was the and Asia, coordinated by our company enigma of transponder cloning and with the first crack in Italy made progress and periodically presented new solutions - always more of a key with transponder Megamos® Crypto being refined and more efficient. The closer we fully executed - the finish line was in sight. got to the solution the greater commitment and dedication we put into the project. 33 Test and test again
It is difficult to say with certainty how many At no stage of the cloning is any interaction tests have been performed, but it must be from the user with the software expected. noted that no brand of car manufacturers The only actions required are the insertion has been left out - everyone was tested. and extraction of the original key and the Our engineering worked to make the most electronic head, TKM from its 884, as complex key “easy and simple” to clone. It well as the sniffs on board of the vehicle. was necessary to allow our super computers to communicate in a simple and clear way One of the major features of cloning any with anyone who wanted to clone a key key- Philips®, Texas® or Megamos® with transponder Megamos®. So we released Keyline tools is the complete absence of the software that allows your PC, smart- user intervention. In fact, you simply follow phone or tablet to communicate with your the instructions that appear on the screen device - both the 884 Decryptor Ultegra of your PC or smartphone/ tablet to and 884 Decryptor Mini. successfully clone a key.
The first concrete result arrived with the The activation of the cloning tool is also worldwide presentation of the TKM Starter extremely simple as well as very safe: Kit, the update that allows you to clone keys with transponders Megamos® Crypto To activate your cloning tool mainly used by VAG models produced (884 Decryptor Ultegra/884 Decryptor Mini) between 1998 and 2003. The TKM Starter Kit was a first major breakthrough in the just enter the electronic head TKM, found in the world of cloning and opened the door to the kit provided to you. The cloning tool starts to only and most complete solution available communicate with the cloud server that verifies on the market - TKM Xtreme kit. The Xtreme the correctness of the application and is enabled allows you to clone keys with transponders to clone the transponder Megamos® Crypto. It Megamos Crypto® of car models produced is an option designed for the customer who needs until 2014. reassurance that every operation carried out by TKM Xtreme made it possible to clone over Keyline’s equipment, including the most complex, 200 car keys, the most complex in the is always safe to do. world. APPENDIX- How to: TKM Xtreme Watchword: simplicity
34 The Cloning process
The procedures that guide the cloning Then, the car switchboard has to be turned process are indicated in detail by the on eight times with the copied key, making Software or by the App ‘Keyline Cloning sure it has been completely removed from Tool’ that act as assistants during the the ignition lock between a sniff and the whole cloning process of the key. In fact, other. This way the electronic head can we paid particular attention to make sure record the data sent from the car control it was easy to use, using our experiences unit. with the 884 Decryptor Ultegra and its straightforwardness. The cloning process will be completed following the instructions provided by First you have to prepare the key copy the Software or the App. 884 Decryptor following the standard procedures: cutting Ultegra or 884 Decryptor Mini use the the metal stem of the specific car model stored data of the electronic head to of the key you want to duplicate. calculate the secret key of the original key. The original key is inserted in the 884 Finally, simply check the correct cloning and the cloning process starts. The system of the key by turning on the vehicle with will immediately recognise the type of the copied key just made. transponder to be cloned and begins to provide indications about what actions All types of transponders Megamos® need to be carried out, which is alternating Crypto are duplicable using TKM (for the original key with the electronic head to the copy), the electronic head dedicated be copied. to this type of transponder.
CONNECTING THE 884 DECRYPTOR MINI Alternatively you can download the Keyline Cloning Tool mobile app on an Android You just need to connect it to your tablet smartphone and start the process of with a USB port, or you can connect it to transponder-equipped car key cloning a PC Windows (version 7 and subsequent without the need to press any buttons versions) with Internet connection. or without connecting to a power outlet. Don’t have an android smartphone or no internet connection on your laptop?No need to worry! It is possible to turn your other smartphones i.e. iPhones, into personal Internet hotspots. If you are out on the road at a job you can then connect your laptop to the Internet using your personal hotspot:
Once you have your hotspot name, connect your laptop to wifi as you would normally, selecting35 the hotspot name to connect to. ON THE The Ins BENCH and Outs of Lock The main point to note with all forms of bumping, including bumping with electric and manual pick guns is that the pins do not separate before the bottom pins reach the shear line. Bumping By Chris Belcher
In bumping there are two main constants: top and bottom pin chambers. It is at the shear line where the top and bottom pins 1] The length of the lower pins: start to separate. Why? Because the top This determines how much time the pin is no longer affected by tension and the top pins spend crossing the shear line between bottom pin if it passes the shear line does the cylinder plug and the cylinder housing. become affected. After the bottom pins have stopped 2] Manufacturing inaccuracies: moving (they may be stopped at the shear Like with picking this causes one or more line or across the shearline) the top pins pins to bind under tension before others. carry on their movement upwards until the springs overcome them and drive them There are two main variables: back downwards again. When they reach the shear line they are stopped by the 1] Tension: his also helps to determine the overlapping pin chambers and any bottom speed/energy of pins crossing the shear line. pin that is across the shear line is pushed downwards clear of the shear line and the 2] Strike force: This determines the initial speed / plug can then turn. energy of each pin stack. The tension normally required for successful When the pins of a cylinder are bumped, bumping is very light. This is because a lot the art is to balance tension with strike of energy is lost when the bottom pin is force. struck.
This is so that the energy as the pins cross Tests show: the shear line is only just sufficient to allow the bottom pins to either stop at the shear If a cylinder is loaded with just a single row line or only just pass across the shear line. of bottom pins and then bumped using no This is because of the misalignment of the tension, the pins will hardly move due to 36 loss of energy. The reason being is that the pins bounce off of the lower chamber walls, so losing most of their energy. This is the principle used by those manufacturers who incorporate short top pins to prevent bumping. In such instances these systems have two major flaws that I will not go into at this time. Another point to note is that if a top pin fails to reach the shear line when driven by a short pin, the short pin falls back (in rim cylinders), then, if it is bumped again without resetting, the pin will not have enough energy to move the top pin.
If the chambers are fully loaded with their top pins and springs and then bumped, the bottom and top pins will move upwards, together. The reason for this is that the bottom pin has been partially stabilised by the backpressure of the top pin and its spring therefore losing less energy.
Bumping and the Laws of Motion Newton’s 3rd Law of Motion is generally used to explain the act of bumping; but in actual fact all of Newton’s Laws can be applied to this lock breaking phenomena. Isaac Newton’s Laws of Motion:
1. An object in motion will remain in motion unless acted upon by a net When the key is bumped into a lock, both force. pins move in a uniform direction and act as a solid. 2. Force equals mass multiplied by acceleration. If tension is applied to the cylinder, then the top pin has a force acting upon it. 3. To every action there is an equal The bottom pin has no force acting on it, and opposite reaction. other than that from being ‘bumped.’ Newton’s 3rd Law: Newton’s 1st Law: To every action there An object in motion will is an equal and remain in motion unless opposite reaction acted upon by a net force
37 Although under spring pressure, the pins If we consider that the clearance between are still accelerating upwards. a pin and its chamber is 0.001 of an inch, when tension is applied, the core of the When the bottom of the top pin and the cylinder can rotate 0.001 of an inch for the top of the bottom pin reach the shear line, top pin, plus 0.001 of an inch for the bottom there is a change in forces acting on both pin. Therefore if the top pin with very low pins. energy behind it tries to go past the shearline it will be stopped at the shearline, The top pin has no force acting upon because of the difference in diameters of it other than the spring. the chambers that have been formed. But, why this didn’t happen when the pins The bottom pin has the force of tension were on their way up? applied to it. It is due to the energy transferred to the Therefore the bottom pin will decelerate pins by the bump key which allows at and might stop at this point, the top pin least one of the pins to pass the shearline will continue its movement upwards until so aligning the chambers momentarily. the force of the spring stops its upward Once the low energy top pin reaches the movement and reverses it. shearline the core of the cylinder can rotate. If we assume for the moment that the bottom pin carried on its movement It is on this basis that the system works. upwards, and was then acted upon by There are a lot more variables, but the the force of the top pin moving downwards outcome of it is that a pin normally comes (due to the spring overcoming the upward to rest at the shearline on its way down. movement) the result in energy when the To prove this I did some modifications both pins reach the shearline will be very to counter this effect, and the cylinder low. became bump proof.
We have reduced the diameter of the lower part of the top pin, so that it can enter the lower chamber, even though it is off-set.
The top pin will stop at the shearline, at its maximum diameter.
Therefore, the reduced diameter prevents rotation. For a full guide on how to recognise a bumped cylinder, including information on bump action mechanics and how to identify pin, keyway, spring and chamber damage – check out issue 2 of Cars, Keys & Locks coming soon! 38 Subscribe Free of charge to all Cars, Keys and Locks magazines. Subscription Form First Name: Last name: Company Name: Full Address: Postcode: Email: Telephone Number: Please fill out and return to: Marketing Dept., UAP LTD , Unit 1 Albert Close Trading Estate, Whitefield, Manchester, M45 8EH, England, UK Or send your details via email to: [email protected] BECOME A MEMBER FREE TO JOIN FOR 2016 Limited Time Offer!
Gives you access NNAL Membership Benefits: to exclusive forums and technical downloads NNAL ID Card Added to the ‘NNAL Locksmith’ Map Full Member Access to the NNAL Forum (forum.nnal.co.uk) Exclusive Discounts on Tradelocks for NNAL Members Network Support From Over 600 Members Visit: www.nnal.co.uk 40 for more information