t87a unlocking

JTAG software bug report.
sevinn
Junior Member
Posts: 2
Joined: Wed Sep 04, 2024 6:00 pm

Re: t87a unlocking

Post by sevinn »

Ironduke wrote: Wed Mar 19, 2025 10:54 am I would be very curious on what you had to change. I know seed and key needs to be done but haven't completed testing as to if the vin and the serial need to be changed as well?
I compared a known unlocked bin to one I pulled out of a vehicle. when I get some free time today I'll post them.
sevinn
Junior Member
Posts: 2
Joined: Wed Sep 04, 2024 6:00 pm

Re: t87a unlocking

Post by sevinn »

https://drive.google.com/drive/folders/1MChJIiWJ9jbsJnMSyP5GPFhqxSTwWxBN

These are just boot blocks. Best I can do for right now because I didn't pull the whole bin after testing it was unlocked like an idiot. But these changes plus the patch in bootblock block let me read it with hptuners and tune it.

I really think they are just throwing known serials in there to sanity check that they have unlocked it or something. I don't know.
usbbdm
Junior Member
Posts: 9085
Joined: Mon Jul 18, 2005 9:33 pm

Re: t87a unlocking

Post by usbbdm »

My latest dll will allow custom kernel and read/write could use regular can connection. No need to use jumper wire. Read whole 4MB flash takes about 2:08 instead about 8 minutes.
sevinn
Junior Member
Posts: 2
Joined: Wed Sep 04, 2024 6:00 pm

Re: t87a unlocking

Post by sevinn »

What's the difference with T87ACAN and T87ACAN1?
Ironduke
Junior Member
Posts: 23
Joined: Sun Jul 26, 2020 5:13 pm

Re: t87a unlocking

Post by Ironduke »

There's 2 different setups for the different bootloaders. Basically try one and if that one fails try the other..
This is from usbbdm on pcmhacking.

"If your boot block is 24288837 you can use TCUT87ACAN. If your boot block is 24284338 or 24272182 you need to use TCUT87ACAN1 or you cannot enter DEBUG ON. You can also upgrade your boot block to 24288837 independent of what the rest flash is."

Please note: This is for AFTER you've unlocked it with gmboot mode using his latest version.
sevinn
Junior Member
Posts: 2
Joined: Wed Sep 04, 2024 6:00 pm

Re: t87a unlocking

Post by sevinn »

Ironduke wrote: Fri Mar 28, 2025 2:47 am There's 2 different setups for the different bootloaders. Basically try one and if that one fails try the other..
This is from usbbdm on pcmhacking.

"If your boot block is 24288837 you can use TCUT87ACAN. If your boot block is 24284338 or 24272182 you need to use TCUT87ACAN1 or you cannot enter DEBUG ON. You can also upgrade your boot block to 24288837 independent of what the rest flash is."

Please note: This is for AFTER you've unlocked it with gmboot mode using his latest version.
Check the drive link I just added a tcm I unlocked this morning. Confirmed reads with hptuners.

I changed the serial in it so that the guy doesn't have to put credits in it when he gets it back too to one he had already paid for so the serial change is not necessary for unlock. In the first 20000 is what hptuners cares about.
usbbdm
Junior Member
Posts: 9085
Joined: Mon Jul 18, 2005 9:33 pm

Re: t87a unlocking

Post by usbbdm »

My latest video shows I can now use custom kernel as other GM ECUs.
sevinn
Junior Member
Posts: 2
Joined: Wed Sep 04, 2024 6:00 pm

Re: t87a unlocking

Post by sevinn »

I used 1.76 to unlock but I still had to edit the areas that I edited so that hptuners wouldn't complain about the device needing an unlock
usbbdm
Junior Member
Posts: 9085
Joined: Mon Jul 18, 2005 9:33 pm

Re: t87a unlocking

Post by usbbdm »

sevinn wrote: Fri Mar 28, 2025 8:20 am I used 1.76 to unlock but I still had to edit the areas that I edited so that hptuners wouldn't complain about the device needing an unlock
Can we have a talk. I can do it via dll.
sevinn
Junior Member
Posts: 2
Joined: Wed Sep 04, 2024 6:00 pm

Re: t87a unlocking

Post by sevinn »

usbbdm wrote: Sat Mar 29, 2025 7:33 am
sevinn wrote: Fri Mar 28, 2025 8:20 am I used 1.76 to unlock but I still had to edit the areas that I edited so that hptuners wouldn't complain about the device needing an unlock
Can we have a talk. I can do it via dll.
Sure thing. I don't think my solution will 100% work with all service numbers but so far so good.
usbbdm
Junior Member
Posts: 9085
Joined: Mon Jul 18, 2005 9:33 pm

Re: t87a unlocking

Post by usbbdm »

Just check me on www.usbjtag.com. Not this forum. I can have a talk with you.
smity58
Junior Member
Posts: 2
Joined: Fri Apr 11, 2025 2:40 pm

Re: t87a unlocking

Post by smity58 »

usbbdm wrote:
> My latest dll will allow custom kernel and read/write could use regular can
> connection. No need to use jumper wire. Read whole 4MB flash takes about
> 2:08 instead about 8 minutes.
greetings, my name is smity58. I am new to this bored and currently an automotive tuner mostly transmissions. I just ordered the Ulink ,I am new to this board.currently an automotive tuner mostly transmissions. I just ordered the U link. and I am following your posts. I have all the T87a bench tuning cables and harnesses, but never unlocked one for HP tuning. can you point me towards some good study materials? thank you for all your hard work.
smity58
Junior Member
Posts: 2
Joined: Fri Apr 11, 2025 2:40 pm

Re: t87a unlocking

Post by smity58 »

usbbdm wrote:
> My latest dll will allow custom kernel and read/write could use regular can
> connection. No need to use jumper wire. Read whole 4MB flash takes about
> 2:08 instead about 8 minutes.
greetings, my name is smity58. I am new to this bored and currently an automotive tuner mostly transmissions. I just ordered the Ulink ,I am new to this board.currently an automotive tuner mostly transmissions. I just ordered the U link. and I am following your posts. I have all the T87a bench tuning cables and harnesses, but never unlocked one for HP tuning. can you point me towards some good study materials? thank you for all your hard work.
Ironduke
Junior Member
Posts: 23
Joined: Sun Jul 26, 2020 5:13 pm

Re: t87a unlocking

Post by Ironduke »

Do you have any bins or hpt files of t87a's that have been unlocked. You'll likely need to borrow some eeprom data for hpt to show them being unlocked even with usbbdm's unlock being completed. They are unlocked but hpt isn't seeing them unlocked due to a few things.
I know seed and key is one of them, suspect serial and possibly the vin but personally haven't had the need to go back and test.

With this tool here you can now write the bin direct over can without hpt, not just gmboot mode. There is a few youtube video's if you check out his work, I believe the links are right in the program when you go to connections for the t87a tcm's.
veee8
Junior Member
Posts: 1
Joined: Fri Feb 28, 2025 7:21 am

Re: t87a unlocking

Post by veee8 »

To clarify with the latest software update. Do you still need to have the jumpers installed and 5V to perform the unlockvia CAN?
Or can it be done with just the 12V's, ground and CAN HI/LO?
Post Reply

Who is online

Users browsing this forum: No registered users and 5 guests