Request a Booking
  Core Service

The immobiliser
is a network node.

Not a lock. A distributed security system spanning ECU, BCM, key module, and cluster — all in constant dialogue over CAN. A fault in the "key" is usually a fault in that conversation.

Request a Booking WhatsApp
Ownership required. ID document and proof of ownership are required for all immobiliser and key work — no exceptions. For IMMO-off/bypass requests, an additional signed agreement is required before any work begins.
IMMO network — node map 
┌─ CAN Bus ─────────────────────────────┐
│
│  [KEY_MODULE]   ← transponder reader
│       │
│       │  challenge/response (encrypted)
│       ↓
│  [ECU / DME]    ← holds half the secret
│       │
│       │  sync confirmation → CAN
│       ↓
│  [BCM / EIS]    ← authorises crank
│       │
│       │  status broadcast
│       ↓
│  [CLUSTER]      ← displays security state
│
└───────────────────────────────────────┘

All nodes must agree. One desync = no-start.
Architecture

Why immobiliser faults are harder
than they look

Three characteristics that make standard key cutting shops unable to handle fault cases.

Distributed secret

The security token is split across multiple modules. No single node holds the full key — they only recognise each other through challenge/response dialogue over CAN.

  • ECU, BCM, key module must all be in sync
  • Module replacement desyncs the chain
  • Bench work requires all nodes present

Platform-specific crypto

Each manufacturer uses proprietary encryption protocols. VAG ID6 is not BMW FBS4. The tool must speak the exact protocol — wrong generation means no response at all.

  • ID3/ID4/ID5/ID6 are different systems
  • CAS1–CAS4 and FEM/BDC are different hardware
  • Post-2022 platforms require Kess 3 / Flex

Events break the chain

Battery disconnect, ECU swap, water damage, failed flash — any of these can break the synchronised state across the network, turning a working system into a no-start.

  • Post-swap re-learn via OBD or EEPROM
  • Flood/corrosion damage requires bench work
  • Diagnosis before action — always
Platform Coverage

Supported markets & year limits

Year limits are hard constraints based on available tooling, not preference. Send VIN and year before booking — we confirm feasibility first.

Platform Immobiliser systems Tool used Protocol Year range OBD / Bench
VAG
VW · Audi · Skoda · Seat
 ID3 · ID4 · ID5 · ID6
Megamos 48/88/Crypto		 VCDS + VAGTacho
Kess v2 · Ktag		 CAN · UDS · K-Line Pre-2022 OBD + bench (EEPROM)
BMW
E · F · G series
 CAS1 · CAS2 · CAS3
CAS4 · FEM · BDC		 GT109 ENET
BMW FEM/BDC Platform		 DoIP · K-DCAN · CAN Pre-2021 OBD (E/F) + bench (FEM/BDC)
Mercedes-Benz
W204 · W212 · W221 era
 FBS1 · FBS2 · FBS3
EIS · EZS · NEC systems		 GT109 DoIP
Ktag · PCM Tuner		 DoIP · CAN · K-Line Pre-2020 OBD + bench (EIS/EZS)
Toyota
Corolla · Hilux · RAV4 era
 Immo4 · Immo5
4D · 8A transponders		 GD101 J2534
PCM Tuner		 CAN · ISO14230 · OBD Pre-2022 OBD (most cases)
Ford
Focus · Ranger · Transit era
 PATS II · III
PCM/BCM/IPC pairing		 vLinker FS USB
GD101 J2534		 HS-CAN · MS-CAN · OBD Pre-2020 OBD + J2534 pass-thru
Hard ceiling: Post-2022 platforms using current-generation encrypted IMMO (VAG MQB Evo, BMW G-series FBS4+, Benz NTG7 era) are outside current tooling capability. We will tell you this upfront — we will not attempt work we cannot complete.
Scope of Work

What key & immobiliser work
actually involves

1
Full system scan — before any key work CAN network, immobiliser module, ECU, BCM all scanned. We find the fault before attempting a fix. If communication is broken, we trace to the node before proceeding.
2
Key learning (OBD or bench) New or additional key programmed via live vehicle OBD where the platform allows. Bench learning (module removed) for all-keys-lost or OBD-blocked cases.
3
EEPROM read / PIN extraction For platforms where the security code lives in EEPROM (not OBD-accessible), we read the chip directly. CH341A, Ktag, and PCM Tuner depending on platform.
4
Module sync & adaptation Post-ECU or post-BCM replacement re-learn. Coding and adaptation via VCDS (VAG), Techstream (Toyota), or J2534 pass-thru depending on platform.
5
Verification & documentation Car starts before you pay the balance. Every session is logged — what was done, what was read, what was written. Records and backups on file.
session — VAG ID5 all-keys-lost 
$ vcds --connect --auto
[OK] Gateway detected — CAN active
$ scan --all-modules --live
[01] Engine   — online
[17] Cluster  — online
[46] CentralConv — online
[25] Immobiliser — fault: KEY_NOT_CODED

$ immo --read-eeprom --via=bench
[OK] EEPROM dump acquired (93C86)
$ decode --pin --cs-calc
[OK] CS: 0x4F2A — PIN: ####
$ key --learn --new-key-1
[OK] Key 1 learned — IMMO adapted
$ verify --start-inhibit=off
[OK] Engine start confirmed
$ session --save --backup
[OK] Logged. Backup written.
All-keys-lost on a bench: Module removed from vehicle, powered via controlled bench supply, EEPROM read directly where the platform allows. Not all platforms expose the security region — we will tell you before attempting.
Legal & Agreements

Ownership verification
is non-negotiable

Immobiliser work has legal consequences if done on a vehicle you don't own. We protect ourselves and you.

Standard key / IMMO work

  • ID document (SA ID or passport)
  • Proof of vehicle ownership (registration papers or title)
  • VIN confirmation match to documentation
  • Full quote and deposit before work starts

Work is completed on bench or in-vehicle. Car starts, you collect, balance due. Records retained on file. No exceptions to the ID requirement.

IMMO-off / bypass requests

  • All standard ownership documents above
  • Signed IMMO-off Agreement before any work
  • Written motivation for the bypass
  • Platform and year feasibility confirmed first

IMMO-off is not a repair — it permanently removes the security system. The agreement documents this clearly. We use our own IMMO-off tool (STM32-based) for supported platforms.

IMMO-off details
Nationwide

Mail-in module work

For supported platforms, you courier the required module — we do the bench work and send it back ready to install.

1
WhatsApp first — confirm feasibility Send VIN, year, and the fault. We confirm whether the module is the right candidate and whether bench work is feasible for your platform and year before you remove anything.
2
Quote, agreement, deposit Written quote, signed ownership agreement, deposit paid. We arrange courier collection or you ship to us directly. Packing instructions provided.
3
Bench work + verification We do the work on the bench, verify the result, and document everything. WhatsApp updates throughout.
4
Return shipped — you install and drive Module returned via courier with installation notes. Balance due on dispatch. Car starts — done.
WhatsApp — what to send 
✓ Vehicle:  Make / Model / Year / VIN
✓ Fault:    no-start / key not detected /
           all-keys-lost / security warning
✓ Module:   Part number + photo of label
✓ History:  Any previous work, ECU swaps,
           battery disconnects, accidents
✓ Location: Province + courier preference

We confirm feasibility and quote.
You do not remove anything until we say go.
Ready to proceed?

Send the VIN first. We confirm before you remove anything.

Key and IMMO work done wrong causes more damage. Confirm feasibility first, sign the agreement, pay the deposit — then we proceed.

Request a Booking WhatsApp Now
Nationwide

Mail-in from anywhere in South Africa

We are the bench specialists. Owners and workshops in every major centre ship modules to us.

Johannesburg / Gauteng Pretoria / Tshwane Cape Town Durban / KZN Bloemfontein Port Elizabeth / Gqeberha East London Kimberley Polokwane / Limpopo

Same process. Same backup-first discipline. Same signed agreements. Courier arranged or you ship — we treat every module like it matters.

Nationwide coverage

Available in

Johannesburg Pretoria Cape Town Durban East London Bloemfontein Polokwane Port Elizabeth Kimberley Upington Rustenburg Witbank Nelspruit
Key / IMMO help