Open SSH for BMW NBT, NBT EVO unit

Admin

Admin

Administrator
Staff member
Joined
Jul 2, 2022
Messages
401
Reaction score
374
Points
63
In cases when USB method will not work and SSH needs to be opened for NBT, UART TX/RX interface for it can be used.

RX,TX and GND is marked in attached photo.
Serial configuration:
Code: 
Baud rate = 115200 bps
Data bits = 8
Parity = None
Stop bits = 1
Flow Control = None

Commands to open SSH NBT:

Code: 
sysetshell
syset:> connect
syset:> login Diagnose
syset:> setk SYS_DEBUG=0x01
syset:> store
syset:> exit


Commands to open SSH NBT EVO:

Code: 
sysetshellevo
syset:> setk SYS_DEBUG=true
syset:> store
syset:> exit


Reboot.

NBT1: Connect to 169.254.199.99 using ssh / telnet client.
NBT EVO: Connect to 169.254.199.99(jacinto) / 169.254.199.119 (omap).
Login details
Code: 
root
ts&SK412
 

Attachments

  • 1708790715839.png
    1708790715839.png
    1.4 MB · Views: 108
  • EVO-serial.jpg
    EVO-serial.jpg
    257.3 KB · Views: 73
  • Like
Reactions: Mortal, Panzacar1337 and AlexM80
where is the UART TX/RX interface in mgu board?
 
Admin said:
In cases when USB method will not work and SSH needs to be opened for NBT, UART TX/RX interface for it can be used.

RX,TX and GND is marked in attached photo.
Serial configuration:
Code: 
Baud rate = 115200 bps
Data bits = 8
Parity = None
Stop bits = 1
Flow Control = None

Commands to open SSH NBT:

Code: 
sysetshell
syset:> connect
syset:> login Diagnose
syset:> setk SYS_DEBUG=0x01
syset:> store
syset:> exit


Commands to open SSH NBT EVO:

Code: 
sysetshellevo
syset:> setk SYS_DEBUG=true
syset:> store
syset:> exit


Reboot.

NBT1: Connect to 169.254.199.99 using ssh / telnet client.
NBT EVO: Connect to 169.254.199.99(jacinto) / 169.254.199.119 (omap).
Login details
Code: 
root
ts&SK412
Click to expand...
Hello! Can anybody post .bin file to open ssh via usb on evo with old firmware 18-03?
 
hi tried to open serial to nbt evo. it keeps showing : NON RETURN DEFAULT .
i checked the mdio IFace , it shows :

mdio IFace Test 3.1 failure :return value

any idea to solve ?

current state, i can read with esys all btld, swfl etc. screen shows NO SIGNAL. no luck in opening the SSH Port

this headunit just died because mosfet burned and i already repair it and come back to life. any help will be appreciated. thank you
 
I Cant opened for NBT.Reboot and try to open via SSH Its " Connection Refused".What is issue?


ssh.PNG
REF.PNG
 
Does it work if you don't reboot?
Can you ping that address?
 
Yes,Reboot and try but doenst answer.Have ping.Look at photo.How can i connect it?I Need to change HDD.I am working on it 3 days.Makes me crazy.Help please.
png.PNG
 
If it reboots, that's bad. I need to solve the restart problem. I had the same thing after trying to open SSH. As a result, the EEMC had to be refilled. Thank you very much Admin for that!!!
 
Admin said:
"Yes" - it works before reboot?
Click to expand...
Hi!
I have this issue also... short story: someone tried to patch Hu with hutool2 and after that hu is somehow "locked". Some binary is damaged (NBTCarHUTwo?)
Cannot flash, code open ssh... Got error SA_RSD on esys.

If i connect with UART, and then input the commands, ssh/telnet is not open... before or after reboot, its the same.

I noticed there's no boot logo on UART, maybe damaged boot image?
Any chances to recover on IPL mode? and how?

Thanks
 
claw said:
I noticed there's no boot logo on UART, maybe damaged boot image?
Click to expand...

Code: 
                 ___           ___           ___                 
                /  /\         /  /\         /  /\          ___   
               /  /::\       /  /::\       /  /::\        /__/\   
              /  /:/\:\     /  /:/\:\     /  /:/\:\       \  \:\ 
             /  /::\ \:\   /  /:/  \:\   /  /:/  \:\       \__\:\ 
            /__/:/\:\_\:| /__/:/ \__\:\ /__/:/ \__\:\      /  /::\
            \  \:\ \:\/:/ \  \:\ /  /:/ \  \:\ /  /:/     /  /:/\:\
             \  \:\_\::/   \  \:\  /:/   \  \:\  /:/     /  /:/__\/
              \  \:\/:/     \  \:\/:/     \  \:\/:/     /__/:/   
               \__\::/       \  \::/       \  \::/      \__\/     
                   ~~         \__\/         \__\/                 

                  ___       ___           ___           ___       
                 /  /\     /  /\         /  /\         /  /\     
                /  /:/    /  /::\       /  /::\       /  /::\     
               /  /:/    /  /:/\:\     /  /:/\:\     /  /:/\:\   
              /  /:/    /  /:/  \:\   /  /::\ \:\   /  /:/  \:\   
             /__/:/    /__/:/ \__\:\ /__/:/\:\_\:\ /__/:/ \__\:| 
             \  \:\    \  \:\ /  /:/ \__\/  \:\/:/ \  \:\ /  /:/ 
              \  \:\    \  \:\  /:/       \__\::/   \  \:\  /:/   
               \  \:\    \  \:\/:/        /  /:/     \  \:\/:/   
                \  \:\    \  \::/        /__/:/       \__\::/     
                 \__\/     \__\/         \__\/            ~~


In what state is this unit now - boot looping? Pingable?
Also maybe lets move the question to the separate topic, because it is not fully related to the opening ssh
 
  • Like
Reactions: claw
Yes, that logo.
Unit is pingable, not on boot loop.
I can connect with esys, tool32... i just cannot open ssh to try to repair it.
 
You must log in or register to reply here.
Top Bottom
Back