CITROËN:
Berlingo 2000-2012
C2
C3
C3 Picasso
C4
C4 Picasso
C5
C6
C8
Dispatch 2007-2012
DS3
Nemo
Relay 2010 on
Xsara 2000-2004
Xsara Picasso
HONDA:
Accord 2008-2013
Civic 2006-2011
CRV 2008-2011
Accent 2000-2006
HYUNDAI:
Amica 2001on
Atos 2001 on
Azera
Coupe 2002-2008
Elantra 2000 on
Excel 2000 on
Genesis
Getz
Grandeur
H1 2008 on
i10
i20
i30
Lavita
Matrix
Santa Fe
Sonata 2005 on
Terracan 2002-2007
Tucson
Veracruz
KIA:
Carens 2002 on
Carnival 2002 on
Ceed
Cerato
Magentis 2006 on
Optima 2001 on
Picanto
Pro Ceed
Rio 2006-2010
Sedona 2002 on
Shuma 2001 on
Sorento 2002 on
Soul
Sportage 2002 on
Venga
NISSAN:
350Z 2001-2008
Almera 2002-2005
Almera Tino 2002-2005
Pixo
Primera 2002-2009
PEUGEOT:
1007
206 2002-2006
207
3007
307
308
406 2002-2004
407
607 2004-2007
807
Bipper
Boxer 2009-2013
Expert 2007-2011
Partner 2000-2011
OPEL/VAUXHALL:
Agila B 2008-2013
SUZUKI:
Alto 2009 on
Splash
Swift 2006-2011
Transponders Type
- Philips, NXP
Transponder Brands
Unlike the old conception in Tango where user could make a choice from a listing of "PCF7936, PCF7941" etc., the original conception confers more significant properties to the letter that follows after numbers, e.g. there is a great difference between PCF7941A and PCF7941X. PCF7953A N PCF7961A N HITAG2+ PCF7941A N PCF7945A N PCF7946A N PCF7952A N PCF7953A N PCF7961A N
HITAG2+EE PCF7941A 512 PCF7945A 1024 PCF7947A 512 PCF7952A 512 PCF7953A 1024 PCF7961A 512
The names of transponders are splitted by transponder peripherial capacity Figure 2. Chip Functionality HITAG2 Basic functions
No BSEL bit HITAG2+ Basic functions
The mark "+": chip has BSEL bit HITAG2+EE Basic functions
The mark "+": chip has BSEL bit The mark "EE": chip has XMA HITAG2 Ext. No BSEL bit
Chip has XMA HITAG3 96-bit encryption
Chip has XMA HITAG Pro 128-bit encryption
No TMCF Chip has XMA HITAG2 Extended
HITAG Pro2 Same as HITAG Pro, more flexible PCF7937E 512
remote functionality PCF7941E 512
HITAG AES PCF7952E 512
XMA Extended Memory Array (additional EEPROM) PCF7961E 512
BSEL Bank Select bit in TMCF. Choice between USER and REMO data HITAG3 PCF7938X Y
Tango combines HITAG2+ and HITAG2+EE in one. The difference between PCF7941X Y
both these types is XMA availability. TMCF is the same for both types. PCF7952X Y
Figure 3. Relationship between Tango and NXP PCF7953X Y
Tango menu NXP Name PCF7961X Y
HITAG2 HITAG2 HITAG Pro
HITAG2+EE HITAG2+ and HITAG2+EE PCF7939P 1024
HITAG2 Extended HITAG2 Extended PCF7945P 1024
HITAG3 HITAG3 PCF7953P 1024
HITAG Pro HITAG Pro HITAG Pro2 NCF2970V Y PCF7939V Y PCF7945V Y PCF7953V Y
HITAG AES PCF7939M Y
AUTODETECT Usually in practice a chip name is unknown. Start your work with the "Autodetect" function. Making the autodetect, Tango selects a better choice for a chip. However, Tango cannot differ HITAG2 and HITAG2+ and makes choice "HITAG2". In this case it may be necessary to change the choice manually.
PCF7945M Y PCF7953M Y PCF7961M Y
ASSISTANT Assistant prevents incorrect choices of a chip type. In case of attempt to read/write a transponder of another type has been detected, the warning dialog will appear. It is possible to disable the Assistant. Assistant bases its choice on the chip IDE mark (see Figure 4). This fact means that the assistant warning is not an absolut truth and may produce false alarms.
DE Mark 1 2 3 4 PCF7936 PCF7946 PCF7947 PCF7942/44*
Each HITAG chip contains an unique Device Identifier (IDE ) so called a Serial Number. Bit 7 ot 4 of the IDE serve the function of a chip type identification. Example. IDE is 2A 48 E2 16, the IDE mark is "1". 5 PCF7943* 6 PCF7941
HITAG family has reserved certain numbers for chips, see Figure 4. 7 PCF7952 8 PCF7961 9 PCF7945/53 B PCF7937
* PCF7922/43/44 used for BMW only
TMCF Transponder and Memory Configuration is a set of bits, located in page 3, the leftmost byte. Access to a transponder is controlled by the TMCF. Various types of transponders have different set of bits in the TMCF.
Figure 5. TMCF Configuration Bits Name Full Name Description Note BSEL Bank Select 0 - Remote pages
1 - User pages DCS Data Coding Select 0 - Manchester
1 - Biphase ENC Enable Cipher Mode 0 - Password Mode
1 - Crypto Mode EQM Equalizer Mode Communication protocol MS0 MS1
Mode Select 0,1 Configures device to support Read
Only modes.
Not compatible for HITAG Avoid to change them. PG3L Page 3 Lock Lockes Page3 against writing OTP PWP0 Protect Write User
Page 6 and 7
Write protection of USER2 and USER3
OTP
PWP1 Protect Write User
Page 4 and 5
Write protection of USER0 and USER1
OTP
PWUP Protect Write User
Pages
Assignes write protection for USER0-4 RCFL Remote Configuration
Lock
Lockes Remote pages against Reading and Writing
OTP
SKL Secret Key Lock Read/Write protection of Pages 1
and 2
OTP
OTP - One Time Programmable. Once changed cannot be altered
BSEL We should pay particular attention to the bit BSEL working with HITAG2+ and HITAG2+EE. The BSEL bit is the 3rd bit of the TMCF. It serves for remapping pages 4 - 7 of a transponder. At the same time the 3rd bit TMCF of HITAG2 is the ENC bit. The ENC bit controls chip access mode.
The Autodetect function is unable to distinguish HITAG2 and HITAG2+. For this reason, careful actions should be applied during the TMCF programming.
The HITAG2+EE has XMA feature and Autodetect function makes choice as "HITAG2+Ee
- PCF7936
Vehicle Models
- Honda Accent 2000-2006
- Honda Accord 2008-2013
- Honda Civic 2006-2011
- Honda CRV 2008-2011
- Amica 2001on
- Atos 2001 on
- Azera
- Coupe 2002-2008
- Elantra 2000 on
- Excel 2000 on
- Genesis
- Getz
- Grandeur
- H1 2008 on
- i10
- i20
- i30
- Lavita
- Matrix
- Santa Fe
- Sonata 2005 on
- Terracan 2002-2007
- Tucson
- Veracruz
- Carens 2002 on
- Carnival 2002 on
- Ceed
- Cerato
- Magentis 2006 on
- Optima 2001 on
- Picanto
- Pro Ceed
- Rio 2006-2010
- Sedona 2002 on
- Shuma 2001 on
- Sorento 2002 on
- Soul
- Sportage 2002 on
- Venga
- Nissan 350Z 2001-2008
- Nissan Almera 2002-2005
- Nissan Almera Tino 2002-2005
- Nissan Pixo
- Nissan Primera 2002-2009
- 1007
- 206 2002-2006
- 207
- 3007
- 307
- 308
- 406 2002-2004
- 407
- 607 2004-2007
- 807
- Bipper
- Boxer 2009-2013
- Expert 2007-2011
- Partner 2000-2011
- Alto 2009 on
- Splash
- Swift 2006-2011
- Agila B 2008-2013