Tuning an E46 ECU MS43! How to FULLY unlock the DME 

Congrats man! Yeah, I was in the same boat. So much conflicting information so I was like, F this; it needs to all be outlined!

They’re not too bad! Fun to drive and easy to work on

Glad it was helpful!

It seems it has now become the Ms4X wiki. Looks like the downloads are in the sidebar of that website which can be found here: www.ms4x.net/index.php?title=Flashing_Tools

john m where do you get the chipster drop a link

do you have a link?

lel w8ing for that.

Great suggestion, thanks!

everything you see is what I did. I did not have to correct any checksums

Not sure what kess v2 is but yes, a lot has changed since this video. You can now use a flasher from the wiki and not have to open up the DME

Built For Redline Thanks bro keep going i like your channel very much

Thanks so much! I'm waiting for some parts to get another amazing project up on here for everyone. As for getting more power, I can't share anything due to liability issues. I would look at available tunes on the wiki, but realistically your best bet is going to an actual tuner. Without supporting mods, you won't get more than 10hp

What are the supporting mods bro?

Primitive European what are the supporting mods bro?

the application won't work at all?

@@BuiltForRedline spent all day on it. Got a version that will open on windows 10 but still not on xp. Have done every update from windows they have got it. I've defraged I've generally cleaned crao off it and still no joy. Hoping to play with my 530i I just bought

following also

Also Following

I will get right on that. I've seen some other people needing a new link since the other one is old. I will try and get an updated one soon.

@@BuiltForRedline I have all the software that you would need if that helps

@@bens9384 I could also use a link to the software as well. I'm trying to flash a 2002 325i with new software after putting in a M54B30. Kinda lost tbh lol

not sure, and I think it varies depending on the DME version (there are new versions since this video came out). I would check for more information on the wiki, or Daniel (the developer) on E46fanatics

Yes it can. When it comes to flashing the files from the Ms43 wiki, just flash the b30 files instead of the b25 files. Your DME is none the wiser :)

Hey I swapped my 2003 330ci motor into a 2002 330i chassis, and I swapped over my ews sensor, ignition barrel and DME from the 330ci. When I tried starting it would only crank, and I was wondering if the EWS could be disabled and rewrite the VIN number with this program? And then go on to tune the maps on the file? I suspected that some minor changes were made in that one year, so I started searching for information on tuning. So, thank you, you're a life saver

@@davidvenegasramirez6001 the VIN and EWS don't matter after this process. This process bypasses all security checks. If you have (had) issues starting, they are likely unrelated. Engines in cars made after 03/03 ran on a completely different DME.

by doing this process you are indeed deleting EWS. And the DME's are IDENTICAL regardless of options (in relation to MS43). On first start, the DME will feel like its "new" and should pick up if you're auto or not based on your engine harness.

Yes, you are spoofing the cable so galetto let’s you use an INPA cable

hey there! Sure thing. I found misinformation on getting into bootmode, the mode of JMGarageFlasher I should use (some people said Audi), the port settings, and some lack of clarity on the 512kb vs the 64kb file. I did all the experimenting and thankfully was able to figure out which method works, and based on the views and the likes vs dislikes, it seems others are sharing the same success :)

It should be, but there's far less information on the MS42 given it's short run

Good question, let me know if you figured it out.

David V nope, no pattern. I guess a lot of these go bad , and even if it’s flashed without errors during the process it can still be problematic afterwards as I’ve found out.

updated description :)

Its in there

Look again under software

you must select the xdf file first. This is like the "definer" for tunerpro for all the files when you select the 64kb file

Probably for some part. I'm orienting if swapping BMS46 will work with EWS3-D bc of rolling codes, probably not.

the xdf file defines otherwise random variables. They will guide you on the SAP and post 02 delete.

A bro so lamp 3 Lamp eu2 1 Sap 0 But it says like to enable put number that says when u hover over do u put those numbers ? I'm just tryna do post o2 delete and sap delete ? It says 2 put 2 on 02 sensors and 1 on sap but ubput something different bro from video bro

Working on getting a new one up and posted!

no, never for the 64kb. Only the 512. Think like a jailbreak, and then adding a tweak. The 512kb is the jailbreak, and the 64kb is the tweaks

I'm going to bet not. I mean yes, you can do the modification. But metaphorically speaking, I think this process is more of like a "erase the computer, and install this custom version of Windows" kind of deal. In other words, I suspect it will replace the locked tune with the factory tune.

Up to you. This is a very easy thing to do all else considered, especially for an at home solution. I personally refer to this video every time I need to flash a new computer

Or is it because you used the updated map 🗾 ?

Unfortunately I don't want to speak on MS42 because I haven't kept up with the research with other DME's

you can use any MS43 DME from any E46. EWS is effectively disabled, so key will work

@@BuiltForRedline and the same to all other modules? Like ABS, airbags, and so? So following this procedure will just be plug and play?

You will delete the immobilizer when you do this, so you might as well do the bypass on a DME not paired with your key

congratulations! No, you can't do that. The internal pinnings of the DME are different, as are the engines entirely. It'd be like trying to install iOS on an Android. Stick to only MS43 DME's, but you'd likely be unable to even flash the 328 DME with the B30 tune

From the factory, the temps are higher to burn cleaner, but the car makes more power when ran slightly cooler. To get the best of both worlds, BMW tells the car to run warmer in RPM ranges that are typically associated with casual driving, and then lower temps in RPM ranges typically associated with wanting power. However this temperature change takes time. To expedite the reaction of the engine temperature to aggressive driving at the expense of fuel economy and efficiency, I made the low RPM temps match the high RPM temps

@@BuiltForRedline Perfect, thank you for your quick answer. Do you have any other mods you have good experince with?

@@frankpenzo8226 as of recently, yes

@@WeAreCarFans I need to adjust my comment alerts, I apologize. If you know what you're doing, you can tune for any supporting mods, which I don't have. Headers and intake yield gains on their own, but you can get a little bit more with a tuning through here as well. People have also gotten about 8-10hp without any mods, much like other paid solutions. Your only risk is you'd be running numbers from a stranger on the internet. These are values that control the health of your motor and each stroke, each phase of ignition. Just be aware of that.

for liability reasons, I don't want to talk about them beyond discussed in the video. This information is available on the wiki

Sharukh Bhoelan you can use any ms43 ecu, just flash the b30 64kb file and your done

The XDF defines the variables of the DME, which otherwise are random variables

yes yes right. Sometimes the connection with the cable times out. Sometimes it got temperamental and had to be done in a certain order. I would try switching the order of these three things around: key to position 2, plugging into car, plugging into laptop. Messing with the order of those three things can sometimes yield different results. Other times, the cable connection times out from being idle.

Primitive European thanks for the reply! Alright so I got the drivers installed properly and got galletto working. One more question, what drivers do you use on your cable when running jmgargeflasher? Now that I got galletto working, I can’t get it to read in jmflasher to change out my 512kb file for the one with launch control. Thanks

You have what and can’t find it in what?

@@BuiltForRedline well thats what stand on top of my ecu. Do you have any way of contacting you perhaps? I could send a photo then. And the program Kess. For the ktag and kess via obd2

You can enter your vin on realoem.com and it will state the build date and month. If you have a coupe, it's easy to tell by if you have LED tail lights. Alternatively, you can remove your DME and it'll say MS43 right on the side.

for anyone who tries this and gets this issue all you have to do to fix it is put it back into bootmode and right as you pull the ground pin make sure to instantly hit connect

Thanks for the kind words! Honestly, it shouldn't matter. To my understanding, the software is not being used for its original purposes. It just needs to know what ECU its looking for. Just as long as your base 512 file is correct for your car, I can't imagine you'd have any issues

yes bro it worked 1st attempt i choose 2.3 and its fine but we need more videos about what to mod on tune pro like what to increase and what not to play with stuff like that im on tunepro atm since this morning playing and matching staff from internet hope im not gonna fry that poor ecu 😂 Thanks for the effort tho

@@amroshehata2679 I mean the issue is at the end of the day, every engine is different and acts differently. I could do a video on redline changes, coolant temp changes, etc. But I feel those are the easiest to find on the internet

How do you do a launch control?

@@medatsu_wraps see this link: www.ms4x.net/index.php?title=Siemens_MS43#Launch_Control

Your key will still work. I'm unsure how the ignition cylinder works since its not a traditional key. EWS authenticates either spark or fuel pump when it confirms the key shares the same key as EWS. So that check is no longer run and is always authorized.

@@BuiltForRedline Does that mean any key that fits the ignition would start the car upon cranking and it would bypass the EWS module completely ?

@@jizzkhalifa2695 yes

No VIN entry is necessary!

@@BuiltForRedline Thanks for the reply, but for ms430069 firmware the site says the vin needs to be put in the file . with ms430056 i believe it doesnt matter. i know in tunerpro you can enter it under vin info but its confusing because theyre 13 slots and the vin is 17 digits long. so do i put in the last 13 digits of vin?? doesnt make sense. i need to know before i flash it. i appreciate the help. Thanks!!!

Did you load the right program? You search for marca because the next line is where you put the serial number from your cable, which is found in mprog.

@@BuiltForRedline thanks for reply, I think I had to set cable up with properties/settings eg com 1 mm sec 1. I have k dcan cable with switch but what side do I switch the switch to?

I am not a tuner and therefore won't share this information. If you want to do this, there are tunes available on the internet, but please make sure they match your displacement before grabbing values. I always recommend going to a tuner

if your check engine light isn't coming on as a byproduct of whatever has been done to your current DME, a new DME "won't have any knowledge" of the previous DME having that light disabled. However, if the check engine light has been disabled by the cluster, swapping DME's won't change anything. Hope that helps

bought a dme with ews delete for my son's e46 325 with a 3.0 in it. check engine light doesn't come on either but emissions are ready. I can tell the dme to turn the light on and it works. so I believe when you select obd2 readiness in the flash, it somehow disables the check engine light. not 100% sure though.

unless you create your checksums for the software, it's automatically deleted on install. You either keep your stock software with EWS or you flash the cracked version and lose EWS in the process

What do you mean Galetto is no longer supported? The entire car is no longer supported - I assume you mean windows compatibility. The sad reality is your best bet will be with XP. Do you have INPA? Is it trying to talk to EWS? I would flash back to stock. If you cant, all I can say is that this is why we recommend using a spare DME. Codes? It seems like you have an external issue

@@BuiltForRedline no it is my spare dme but it still sucks that i didnt get it to work, pretty sure i have inpa i can check to see if it responds to ews next time. i appreciate the response dude fr ill try again with xp but is there any other way of tuning these cars or do we have to go standalone :(

@@27ths the cost of stand alone just didn't make sense. You should check with responses, you're in troubleshoot mode. I would try putting the factory ECU in to see if you can crank. If you don't, there's your issue. If it does crank, then I would put the donor ECU back and reflash the 512kb file. Remember, this is a solution made in someone's garage. It's not without its issues.

Indeed! An updated video is likely in order, a lot has changed

Unlikely. There’s a new MS4X flash tool that does work with windows 10 and it’s very fast!

It sounds like you're having a communication error, the DME should only prevent start. To be clear, you cannot just swap MS45 and MS43 DME's. There are numerous wiring changes made, the DME going from 4 to 6 pin being the most obvious. You need an entirely different engine harness, 02's. Just hoping you know that.

Yes I had purchased the dme conversion as a kit with all the wiring harness needed. As well as getting a new valve cover so I can use the correct injectors as well.

This is more or less what I did. I keep my stock DME in a safe spot unmodified, and have my tuned DME in my car. You do not need to clone it, there's no real reason too. Simply flash the 512kb file for your type of M54 and you have as close to a stock DME as you can get. From there, you can start tinkering. If things go south or you change your mind, just put your old DME back in.

@@BuiltForRedline but when I swapped out an unmodified DME from the same year (even same part number) as my working DME .. fuel pump wont come on , etc. (Because the Enabler and the DME are married by VIN or some pairing code according to Bimmer). You presentation was the very best .(thanks) but I don't understand how to end around this limitation. I thought about pulling the Eprom and replicating at that level (I'm a BSEE) but I suspect its much easier. You guys are really smart .. can you walk me through how you side stepped this?

@@danl4222 correct, you put the unmodified DME in, and then begin the process described in this video. Every DME has those built in protections that checks for VIN, EWS and key matches. Again, you are essentially erasing it and writing a custom OS onto the DME, an OS that doesn't care about any of those checks. Until you overwrite the stock data, it will not work. The locks only prevent start, not communication. You can still proceed with the steps in this video. This video is what will allow the currently locked DME to work with your car.

Swap to MS43

just did some tuning last night. JM Garage flasher flashes the 512kb file. There's no point in saving this file, as this is more a restore point. Think like this: JM flashes the OS, and Galetto is the "user files" (your tune). the only reason you'd read in JM is if you'd plan to write it later. In that instance, you should just reflash the 512kb file

Built For Redline so you mean to say here without Flash the JM flasher 512KB i still can use my tuned file by galetto?

@@NasserSB correct. You use JM only once, to flash to custom firmware. Then you flash tunes all day with Galetto. Unless you have issues, you should only have to flash with JM once

Am Facing issue when i write the 512kb file from JMgarage it give me error >>[MS43]Flash earasing... >>[MS43]No answer from ECU. Unknown problem Note: i can read the file with no issue but i cant write any advise ?

that is verbatim what I did, that is correct. I did have to re-align EWS afterwards in PA soft (can be done in INPA as well), but the entire process including swapping DME's was under 10 minutes, including scrambling to grab my laptop hah :)

Built For Redline hey so I’ve got past the first part and I’m not working in Galletto and it tells me start data reading no interface found?

@@alecsmith4972 double check your COM port. Also make sure all your system settings are set aka refresh rate and all

Built For Redline ok I got it all working. So before I throw this scrap yard ecu in my car I just wanna make sure one more time. It’s an ms43 from whatever kind of 3 series i don’t remember if it was a CI or XI or a 3 liter... but by doing all these steps like you and selecting my kind of car in Galletto it should start right up. Sorry just don’t wanna go to crank and something internal break

If you had to realign your ews. Then you didn't bypass it with the tune!!!! Get your head on straight before following these two jackjamoes

I had that happen too. I had to reflash to make the issue stop

Built For Redline check ur check sums

Correct! You are basically flashing custom firmware. Think of say, running Windows 10, but you overwrite everything to have a modified version of Windows 8. Best analogy that I can give

@@BuiltForRedline Ok makes sense. If I'm only interested in flashing a 64kb file, do I need to correct checksums? If so do you know how to?

Everything is as shown in the guide. With EWS gone, there is checksum work required

Nothing. I can't say exactly where to look, but I some googling related to the Ms4x DME can take you to a forum where the software is available to download. Good luck

Built For Redline do they have new name for them I’ve been trying to get them but say these pages are not available

Glad you liked it! We actually used our own video to reflash a new car! What is giving you the checksum error, Galeto? I've never had that error, but when flashing, the original ECU vin should be retained, it's not changing things such as the VIN, auto/manual or any VO (vehicle order) related settings. That's as I understand it anyway

​@@BuiltForRedline I am using a small handheld OBDII checker to check between 64kb uploads when the car doesn't start. To understand what's happening I should give a bit of context. First I uploaded the 512KB EWS Delete file in boot mode with JMGarageFlasher successfully. Then I turned off the ignition and checked to see if the car still started, and it did. I then turned on Galeto and downloaded the 64KB DME engine map portion to see if I could make any changes. I did pretty much every change you did in the video with one addition. I also disabled the secondary air valve. I load that modified 64kb file back in the DME with Galeto with confirmation that it was completed successfully. I'd try to start the car at this point and it would no longer start. So I'd plug in my small handheld OBD reader that displays the traditional P codes and the only code I'd get is P0604 Internal Control Module Random Access Memory (RAM) Error At this point I'd plug back in the K+DCAN Cable and upload the original 64KB file that I first downloaded from the freshly EWS deleted DME and try to start the car again and it would start just fine. So I decided to take that good modified file again and try to modify tunes again. I changed the exact same things the second time around and uploaded it again with Galeto and the car would not start. Another quick handheld OBD check and it shows the same P0604 Code. This was the second newly modified file that I made. So I put the virgin 64KB file back in with Galeto and the car starts again. This was all on Friday. Today I decided to go and check it with INPA and that's where I came up with the thought that the VIN would change with the EWS delete file, but noticed that it didn't. I came to a conclusion that the 512KB EWS delete file, though successfully uploaded and confirmed by JMGarageFlasher, was not actually written to Flash. I figure it's a possibility that the upload put it into RAM on the DME, but the MCU on the DME calculated the checksum to determine if that file could be written to Flash and it failed. To further my thought process on this, when I downloaded the factory 512KB original full DME code I did it twice just to make sure that if there were issues with the download the first time that the second time would cover my butt. But it looks like there are file compare issues between the two files since they are both different. So I'm wondering if the required amount of bytes were sent, but they were garbled in the process of transmission. So it satisfied a transmission to JMGarageFlasher, but it wasn't the correct information at all. Sorry for the long message. As of right now the car starts and seems fine when I put the virgin 64KB file in there so I'm not sweating bullets that the car doesn't start or anything. And the car is not my daily driver so I'm not stranded if the car is disabled.

@@BuiltForRedline quick update. I scoured the MS43 wiki (I mean ms4x.net) and downloaded an MS43 checksum corrector since I was curious. I can implement new tunes if after every tune I run the checksum corrector then upload. This is a requirement that's not needed if the 512k EWS delete file is in place. Also, I tried to run BMWLogger with the key that's provided and it will not do datalogging. I am pretty much at the conclusion that the 512k EWS delete file was not written to Flash. It was uploaded fine via JMGarageFlasher to the RAM in the DME, but the MCU in the DME seemingly did not write that to Flash. So I'm probably going to grab an MS43 DME from the scrap yard with connectors and see if I can make it all work on the bench. Thanks again for the Video guys. It really helped a lot with kicking me into gear for trying to get the DME going.

@@pcproa1 The wiki has changed since this video was made - they used to all be EWS delete but I also know there was a no EWS delete option. Best of luck, happy I got you pointed in the right direction

I actually just did this the other day. I did have to use PA soft and tell it re-align EWS and it fired right up. 30 second process

@@BuiltForRedline so when i want to use my original ecu i must align it with inpa? Thanks for reply

@@cobra3909 There was a point where I could hot swap the DME's with no coding. I used PA Soft ("easier") to do it, but I'm sure you could use INPA. There is probably a number of starts or mileage where it requires it

@@BuiltForRedline how did this process go? Right now I'm using a spare, and I'm pulling icv codes and my engine is stumbling? 🤔

@@shaemckee1212 try hot swapping back with your original DME. I've been beating on a spare DME for about 20k miles no issues.

it hurts because I'm right

Vasko Bozinovski correct! The hack deletes EWS in the process

@@BuiltForRedline When you say it deletes the EWS, does this mean you completely lose all security features of the car? EG; Alarm, tilt sensor, etc? I have an additional question, you mentioned use another DME, I have another one but wont that give the tamper dot? Thank you and great video!!

@@Adrian-sw3nv EWS is only a start authentication system. Alarm, tilt sensor and all other features still work as intended. It is a security measure that is invisible to the user more or less, not to downplay it's importance. The cars are so old and you can't tell if a car has EWS removed, so I don't think security is too compromised. Tamper dot is set by a mismatch between the cluster and light switches, you can switch DME's all day :)

Primitive European that’s great! I thought that the EWS module was for the transponder and that stuff. Good to know regarding the tamper dot! Thanks for the great explanations!

@@Adrian-sw3nv no problem, happy I could help! :)

that's controlled by a separate computer. Where are you getting this read out and under what conditions? Unfortunately, the E46 auto is only famous for not being spectacular at anything

Yes, you remove it, scrap it for metal, install a manual, and recode the control units so the manual works :P

@@TheOystei thats kinds true its just giving troubles

@@mannabatth4092 On ms42 cars we found that you can just remove the shift position sensor from the outside of the auto bok (3 screws) put it in park or neutral and zip tie it connected somewhere and the car works just fine.

can you tell m e more so I can try to remedy the issue? You suspect the version I've linked has been updated and no longer works?

@@BuiltForRedline nevermind bro I just deleted it extract it again and re did it bro ur the best bro for showing how to spoof cable easy af how you showed bro now can u lead me towards the right directions in about making my car exhaust pop

I'm working on getting some new ones up soon

It is but it is harder to guarantee compatibility.

@@BuiltForRedline ok cool. ive got most of everything i need downloaded. thanks for the vid

I didn't have to do it

@@boostedlawnmower9955 did u have to spoof the cable

@@armandor2452 I didnt have to do that. I just did everything in the video and it worked

@@boostedlawnmower9955 did u use a windows xp?

@@armandor2452 Windows 10

Yes, M54B22 is still supported as long as its paired with the MS43.

Did you get more power with ecu flash on m54b22?

this is a shadow code you're getting on the DME, right? If so, just leave it as long as everything is working properly. If this is an error by the computer, try starting over. Make sure you edited the executable correctly. Sometimes its just finnicky as well

@@BuiltForRedline No Primitive European, this is an error u get while trying too boot the dme and connect to jmflasher, it just says Wrong echo bytes. I have the same problem. Most likely something with the cable or the port settings.

@@proxy9896 Oh gotcha. No I understand. I remember getting that error but I haven't seen it in years. I'm sorry I wish I could help. I would try the MS43 thread on E46Fanatics

@@BuiltForRedline read about it the whole day lol, will do some more testing tommorow. Got the same cable as you, but no succes. U prob dont remember your port settings?

@@proxy9896 Port settings did not matter for me, but I was running on a BMW dedicated VM. Have the controller on port 1, believe 9600 refresh rate

Because when I made this video, I had just figured out how to unlock the DME. I'm also not an engine tuner, and I don't want to recommend people copy paste random files you find on the internet. You can ruin your car really quickly. With a tune without supporting mods, people struggle to get more than 6hp. For 6hp, I'd rather just leave things be to make sure my engine is healthy. Anyone else is welcome to weigh the risk differently

When I was looking to unlock my DME, I found a lot of videos with unreliable information or methods that didn't necessarily work. I've done this on a number of cars and it's just about fool proof. That was my intention of this video - to show how to unlock the DME. What you do with that unlock is entirely up to you.

Primitive European I agree lots of misleading information out there, would you be willing to make a video on installing galletto and the usb drivers for the cable? There’s not much information out there on it and a lot of people (myself included) are getting hung up on the driver settings for the cable

@@Clapped.Out.Customs There are great guides on E46 fanatics. There is a huge thread on the MS43 DME tune, linked at the end of this comment. It is fairly straightforward. forum.e46fanatics.com/showthread.php?t=1082287

Hey Mike. This is something you can do but unfortunately as I’ve replied to other comments, I am not a tuner and I wouldn’t feel comfortable sharing values that I didn’t create myself

@@BuiltForRedline what happens if your car did not crank or turn over that's my problem BMW 740i could you help me out what you might think it might be. The Star full charge battery but no crank no turn

@@ashelystevens9441 Even if EWS prevents start, the engine would crank over but doesn't start. However, you shouldn't have attempted this job on a 740i as the engine computer is different. If you did attempt a flash you have potentially damaged your ECU. If you're ECU isn't damaged, the issue is relatively small.

Would you mind shedding light on your issue for others? To my understanding, this isn’t necessary since EWS is deleted

if you have disabled checksum control in the file, in this case no, but otherwise yes

If you’re not wide open throttle, and you work on your own car, it brings a lot of dissapointment