[richard.hann]

See the other thread re map updates

Sent from my LG-D855 using Tapatalk

 

[buzby]

My 2013 Unit doesn't have free map updates.
I need discs to upgrade my maps and an activation code.

Have you seen the Map Updates thread recently? Volvo have recently released a software update for the Nav software on the 2012-2014 IAM 2.1 to enable it to use the free map updates over USB that the 2015-on cars use. Abby606 has had the update loaded, which cost about £60.

 

[vividspin]

See the other thread re map updates

Sent from my LG-D855 using Tapatalk

Have you seen the Map Updates thread recently? Volvo have recently released a software update for the Nav software on the 2012-2014 IAM 2.1 to enable it to use the free map updates over USB that the 2015-on cars use. Abby606 has had the update loaded, which cost about £60.

I will venture more in to that forum section. Thanks for bringing this to my attention. Cracking value if it's around £60.

 

[bruca.petre]

This is for a Volvo 2013 RTI HDD with DVD.

Youtube Video on how to gain access to the dash: Youtube

The gear gaiter can be removed in a better fashion. Push your fingers on the leather and push the plastic surround upwards. You can remove the grill vents with your hands.

Behind the unit

Overview picture of Socket Connections

Remove all screws on the back of the unit.

The top part of the unit starts to lift up. But there is still a screw holding it down.

You can see a peek of the harddrive

The DVD Drive needs removed by 4 small screws

The central screw under the DVD drive needs removed

The Harddrive 4 screws can be seen.

Old ATA Connector. 80Gb. Slow UDMA 100.

Wide angle of parts

USB to ATA Adapter.

Check out how many time the unit has been switched on!

The disk wants initializing. But do NOT do it.

Acronis can't read the disk. Macrium can't either.

Forensic software can't figure out the file system. It let me take a copy of the harddrive. But cannot restore.

I did this at a friends and didn't have a Linux computer. DD should be able to copy the disk in to 1 file.


I will do this the next time. Link to other V40 Stuff (Still building)

Hello you have try to make first a clone offline with original hdd end ssd????


Inviato dal mio SM-G950F utilizzando Tapatalk

 

[Fasser]

Hi,

Sorry to resurrect an old thread, but I did gain access to the HDD some time ago and I'd like to contribute a few things:

• The HDD is protected by ATA-security, so the only way to gain access to its contents is to unlock it with the right password. While the drive is locked there's no way to create a backup with any tool, the drive's firmware will just respond with 0's to any read request.
• The drive is configured with both ATA passwords (user and master). Refer to the ATA-security specs to find out the differences.
• The user password is "siihakawhc2o6937" followed by 16 spaces (thus the total length is 32 byte. Ignore the quotes) and will allow full access to the drive but will not allow to modify the drive's security parameters. This should be safe for non ATA experts, but keep in mind you can still ruin the system by e.g. altering the partition table.
• I also found the master password which allows to modify the security parameters but, as you could really make a mess of the drive with this, I prefer to keep it to myself. Anyway, as we already know the user password this one is not that useful.
• Once unlocked, you have full access to the drive as in any other HDD, there are no other security measures in place.
• The disk contents are:
  
  
  

  • Partition 1: 28GB FAT32, label "SLOT0". Contains the map data and the firmware (more on this later).
  • Partition 2: 10GB FAT32, label "SLOT1": Contains the CDDB database.
  • Partition 3: 1GB FAT32, label "SLOT2" or "SLOT3" (not sure right now): contains a "_BKUP_" folder with a lot of *.OSG files and a VREC_TAG folder cotaining two binary files
  • Partition 4: 1GB FAT32, label "SLOT3" or "SLOT4": contains an empty "MM_DIAG" folder.
  • The rest of the drive (40GB) is unallocated space.
• It is possible to install another drive, even a SATA drive if you have an IDE<->SATA adapter (I did this with a 500GB SATA drive and a 5 € adapter), as long as the partition table remains the same the system seems to accept it. I did not try to resize any of the partitions, but I guess it'll be OK as long as they follow the FAT32 limits.
• It is also possible to install an unlocked drive (or to remove the drive's protection and reinstall it), but the OS will re-lock it again after bootup with the same passwords. This is why there's no point in messing with the master password.

As for the firmware:

• The first partition contains a copy of the firmware in a file named LOADING.KWI. As this is more or less a standard OEM navi unit there are lots of references to this file in other brands (Mitsubishi and Lexus seem to be the ones that dug deeper in these systems).
• In theory the unit checks this firmware for upgrades in every cold-boot, so an upgrade should be only a matter of subsituting this file. This is the way older units work, mainly those that require the maps DVD to be always inserted. I'm just guessing this works the same in this unit, I have no way to test it.
• After messing about with the cartography DVDs and the firmware, I believe it should be possible to apply firmware upgrades via the USB port also, in the same way the cartography is updated.
• Unfortunately, Volvo does not release firmware updates for these units with the cartography as it did with older systems, and it seems the present software update system via VIDA does not store a copy of the newer firmware in the HDD, so this file is only a backup of the firmware available when the car left the factory. This implies that any potential modification to the firmware would be based in a possibly outdated firmware version.
• Last but not least, those other brands I mentioned earlier and a few others have been trying to hack these firmwares for quite a few years and none have got any significant results.

 

[lasersocks]

Was there any progress on this? The HDD on my 2012 S60 has gone bad and I'm wondering if it can be replaced. Volvo wants $1300 to replace the whole unit...

 

[Fasser]

Was there any progress on this? The HDD on my 2012 S60 has gone bad and I'm wondering if it can be replaced. Volvo wants $1300 to replace the whole unit...

The disk itself is a standard PATA drive, can be replaced with no problems. The problem will be to recover the software inside the original disk, for which you'll need access to the contents of the broken disk or find someone with your *exact* GPS specs (car model and year, RTI hardware revision) that is willing to let you hack their disk to be able to copy that.

Apart from the disassembling of the unit, the only thing that is preventing access to the disk is that it is protected with ATA password security (thus why any "brute" cloning will just result in an image full of NULLs). I did find the passwords for that and explain the process here (in spanish), but be warned that you can really brick the drive if you do something wrong. Also keep in mind that in that post I'm referring to an EU-spec RTI and, since you are talking dollars I guess yours would be an US or AU unit, so they could be completely different beasts.

Apart from that, assuming your drive is a Hitachi Endurastar (which seems to be the standard drive, although there are variantions in the drive's capacity) I'm surprised your drive has gone bad. Endurastars are specced to be really durable, thus the reason why they are the preferred drives for these systems.

 

[chiptivo]

The disk itself is a standard PATA drive, can be replaced with no problems. The problem will be to recover the software inside the original disk, for which you'll need access to the contents of the broken disk or find someone with your *exact* GPS specs (car model and year, RTI hardware revision) that is willing to let you hack their disk to be able to copy that.

Apart from the disassembling of the unit, the only thing that is preventing access to the disk is that it is protected with ATA password security (thus why any "brute" cloning will just result in an image full of NULLs). I did find the passwords for that and explain the process here (in spanish), but be warned that you can really brick the drive if you do something wrong. Also keep in mind that in that post I'm referring to an EU-spec RTI and, since you are talking dollars I guess yours would be an US or AU unit, so they could be completely different beasts.

Apart from that, assuming your drive is a Hitachi Endurastar (which seems to be the standard drive, although there are variantions in the drive's capacity) I'm surprised your drive has gone bad. Endurastars are specced to be really durable, thus the reason why they are the preferred drives for these systems.

Many thanks for that info.
Had a good read.

I have a 120gb SSD sitting here that I would like to place in my volvo.
So, I could just follow your instructions, DD the drive over?? Not too sure how to do that.
Then pop it back in and it should be ok?


One of my annoying limitations is that I can only use 10gb of data for my Music when I transfer it from USB, can this be changed? I take it, it is not just an additional partition?

 

[Fasser]

I have a 120gb SSD sitting here that I would like to place in my volvo.
So, I could just follow your instructions, DD the drive over?? Not too sure how to do that.
Then pop it back in and it should be ok?

One of my annoying limitations is that I can only use 10gb of data for my Music when I transfer it from USB, can this be changed? I take it, it is not just an additional partition?

First, my analysis and the passwords I've found are valid for pre-2014 Sensus. You mention that you can store music in your unit and that function is not available in my system, so I'm guessing yours is post-2014 and, although they are visually similar, the insides in terms of software and (maybe) hardware for all I know have significant differences and you should not take my instructions for granted. At the very least, I guess the passwords could be different.

On the other hand, the internal drive has IDE (PATA) interface, while any recent SSD will be SATA. You can swap the drives, but you'll need a PATA <-> SATA adapter and, with that, you'll be able to connect a SATA drive, I've done at works OK, but keep in mind that you'll also need to fabricate a custom mounting support, since the adapter will change the drive's positioning. Another thing to keep in mind is that swapping the drive (for an SSD or any traditional HDD) may not be that good an idea, since the factory drive has way better specs in terms of durability and shock-resistance than any off-the-shelf drive. The only potential gain would be from the increase in available space for music, but that's far more easily solved with an USB drive.

As for copying the data, once the drive is unlocked you'll have full access, so you could just DD to a new drive or even re-create the partition structure awith different sizes and copy the contents over.

In any case, please remember to backup the original drive first as soon as it is unlocked.

 

[aromito]

Hi all, today I decided to open my Volvo V40 MY2015 (D2 R-Design) to check which kind of HDD is installed inside, becasuse my intention is to replace it with an SSD drive, since from the beginning it was noisy and I warried that his life will be very short.
I'm really surprised because it's a SATA device Toshiba TSD-MK2060GSC (100GB) drive.

 

[chiptivo]

Hi all, today I decided to open my Volvo V40 MY2015 (D2 R-Design) to check which kind of HDD is installed inside, becasuse my intention is to replace it with an SSD drive, since from the beginning it was noisy and I warried that his life will be very short.
I'm really surprised because it's a SATA device Toshiba TSD-MK2060GSC (100GB) drive.

Why does this surprise you?

Because it's a Sata drive I guess.

It is still on my list of jobs to do. Especially as 120gb SSD's can be had for less than £15


It is getting the data off the old drive which is the difficult one.

Shame the firmware doesn't build the drive automatically.

 

[eLoneX]

• The HDD is protected by ATA-security, so the only way to gain access to its contents is to unlock it with the right password. While the drive is locked there's no way to create a backup with any tool, the drive's firmware will just respond with 0's to any read request.
• The drive is configured with both ATA passwords (user and master). Refer to the ATA-security specs to find out the differences.
• The user password is "siihakawhc2o6937" followed by 16 spaces (thus the total length is 32 byte. Ignore the quotes) and will allow full access to the drive but will not allow to modify the drive's security parameters. This should be safe for non ATA experts, but keep in mind you can still ruin the system by e.g. altering the partition table.
• I also found the master password which allows to modify the security parameters but, as you could really make a mess of the drive with this, I prefer to keep it to myself. Anyway, as we already know the user password this one is not that useful.
• Once unlocked, you have full access to the drive as in any other HDD, there are no other security measures in place.
• The disk contents are:
  
  ​
  • Partition 1: 28GB FAT32, label "SLOT0". Contains the map data and the firmware (more on this later).
  • Partition 2: 10GB FAT32, label "SLOT1": Contains the CDDB database.
  • Partition 3: 1GB FAT32, label "SLOT2" or "SLOT3" (not sure right now): contains a "BKUP" folder with a lot of *.OSG files and a VREC_TAG folder cotaining two binary files
  • Partition 4: 1GB FAT32, label "SLOT3" or "SLOT4": contains an empty "MM_DIAG" folder.
  • The rest of the drive (40GB) is unallocated space.
• It is possible to install another drive, even a SATA drive if you have an IDE<->SATA adapter (I did this with a 500GB SATA drive and a 5 € adapter), as long as the partition table remains the same the system seems to accept it. I did not try to resize any of the partitions, but I guess it'll be OK as long as they follow the FAT32 limits.
• It is also possible to install an unlocked drive (or to remove the drive's protection and reinstall it), but the OS will re-lock it again after bootup with the same passwords. This is why there's no point in messing with the master password.

Can confirm that all the 4 partition sizes can be up to 31GB (32GB should be max) in size and still work fine (on my SATA HDD connector at least), the drive locked automatically with the ATA password above once the unit has started.

 

[chiptivo]

Can confirm that all the 4 partition sizes can be up to 31GB (32GB should be max) in size and still work fine (on my SATA HDD connector at least), the drive locked automatically with the ATA password above once the unit has started.

Excellent news.
Do you notice any speed increases in any operations with the SSD (Assuming you have gone solid state?

How did you copy across, safe to use a windows file system?

 

[eLoneX]

Excellent news.
Do you notice any speed increases in any operations with the SSD (Assuming you have gone solid state?

How did you copy across, safe to use a windows file system?

Indeed SSD, the only speed increase is while browsing the map and search results, everything displayed on the map its pretty much as fast as it can get, the navi menu however, still lags, but expected since the SSD is for map/cd's?

I forgot to add more audio CD's to the vault while connected to the PC to test if they would work, but I think there is a hard cap of 10 total stored audio CD's, regardless of the new space available on the SSD that can be used for library... it asks me to remove a CD before storing another when the 10 cap is reached!

Anyway, coming from a 2012 map, it was worth it! 😊

 

[hdleonardo]

Indeed SSD, the only speed increase is while browsing the map and search results, everything displayed on the map its pretty much as fast as it can get, the navi menu however, still lags, but expected since the SSD is for map/cd's?

I forgot to add more audio CD's to the vault while connected to the PC to test if they would work, but I think there is a hard cap of 10 total stored audio CD's, regardless of the new space available on the SSD that can be used for library... it asks me to remove a CD before storing another when the 10 cap is reached!

Anyway, coming from a 2012 map, it was worth it! 😊

Hi, sorry for bringing up an old thread.

So you did manage to update the maps manually? If so how did you do it?

What I have in mind is plugging the rti hdd to a linux PC, unlocking it with the password provided by @Fasser and checking out if the data on the maps partition of the HDD is somehow close to the file structure of a USB drive with the latest maps update available from volvo.

If they somehow match, I would try to replace the files from the RTI HDD maps partition with those from the USB stick, after backing up the HDD with DD of course.

Is this how you did it? I want to try this approach because volvo dealers around here are charging an arm and a leg for the sensus upgrade that enables free map updates.

 

[Tony1]

Hi, sorry for bringing up an old thread.

So you did manage to update the maps manually? If so how did you do it?

What I have in mind is plugging the rti hdd to a linux PC, unlocking it with the password provided by @Fasser and checking out if the data on the maps partition of the HDD is somehow close to the file structure of a USB drive with the latest maps update available from volvo.

If they somehow match, I would try to replace the files from the RTI HDD maps partition with those from the USB stick, after backing up the HDD with DD of course.

Is this how you did it? I want to try this approach because volvo dealers around here are charging an arm and a leg for the sensus upgrade that enables free map updates.

This sounds like an awful lot of hard work - why not just get the update from Volvo that allows you to update the maps from a USB stick every time there is an update? (It was free at one point)

 

[tarbik]

Hello, I'm resurrecting a bit this old thread in order to help others with the HDD replacement for Sensus Connect IHU units. I've successfully replaced my old HDD drive with modern SSD one. Since I'm usually traveling a lot the aim here was to rather remove the annoying whining noise of the build in HDD drive that can be heard especially when the engine is off and you are waiting in the car for something. The speed increase is really just a cosmetic benefit that is only affecting the maps browsing etc. I wasn't able to spot any boot up speed increase or similar performance benefit when controlling the unit. My IHU unit is Mitsubishi NR-1V.

In order to replace the HDD you of course have to remove the unit from the car completely. There are many tutorials on how to do that. Once you have the unit outside you can access the HDD at the bottom of the unit, unscrew screws that are holding it and replace it. Now comes the tricky part. As @Fasser mentioned here the HDD is password protected. To defeat that you can use variety of approaches from paid services that can retrieve the password up to a replacement with "keen-enough" drive that will tell you the password itself. Yes, you can straight replace the HDD drive with another even empty one and the unit will automatically lock it with pre-set password. My user password was:"²º³¼°ß¬¾±»¾ß²¼¾ß±ž‰–ߪŒšßßßßßßß". The partition table is quite similar to the one that Fasser posted here:

Here are some pictures of the replacement procedure I've done:

 

[Zoran]

Wow...are you shure about this password "²º³¼°ß¬¾±»¾ß²¼¾ß±ž‰–ߪŒšßßßßßßß" ? How did you typed it? And..how did you found out the password?

 

[Zoran]

Now, to replay to my post
Password in hexadecimal to unlock HDD from Volvo Sensus Connect, the one with the "globe" button on the right, like in @tarbik photo in the post above, is:
B2BAB3BCB0DFACBEB1BBBEDFB2BCBEDFB19E8996DFAA8C9A8DDFDFDFDFDFDFDF
I have used HDAT.exe program from DOS to unlock the HDD.

 

[patok3]

I have made a back up image of mine (2016 Volvo Sensus Connect) thx for the password @Zoran .

Steps to reproduce if anyone is interested
Booted up Ubuntu Live USB on my desktop pc.
Connected the drive (sata is hotpluggable).

Found device id with command
sudo lsblk

Device id was sdc ... so /dev/sdc

Checked device status
sudo hdparm -I /dev/sdc
confirmed its the device i was expecting and is locked

Unlock the device and then confirm its unlocked
sudo hdparm --security-unlock hex:B2BAB3BCB0DFACBEB1BBBEDFB2BCBEDFB19E8996DFAA8C9A8DDFDFDFDFDFDFDF /dev/sdc

to confirm
sudo hdparm -I /dev/sdc

device is now unlocked, so i opened Ubuntus Disks utility and created image of entire drive, saved it to my NAS, so in case my hdd ever fails I can restore it.

It was simpler then expected... i tried first on windows but gave up. So i recomend making the backup from linux, all the tools were preinstalled, and the disk image/restore can be done in simple ui.