Ducati Monster Forum

Update 3/9/17: Jump to the last post if you are looking for the hex address for the immobilizer for the Monster 800

Hi everyone,

I have a 2003 M800.
Last season it developed an intermittent issue where the key sensor wouldn't read the key fob. I muscled through it with the override code and then put it away for the winter.

Now it 100% of the time does not read the key. Black key 1 or Black key 2. I haven't tried the Red key. I took apart the ignition and sensor and cleaned it. Reassembled and it still didn't work. Checked the 10 A fuse and it is in tact. If there was a short, the fuse would be blowing, right? I've inspected the exposed areas of the harness and everything looks OK.

The antenna is just an antenna right? As long as there isn't any damage it should function properly?

Any guidance on where I can look to see where to fix this?

Is there someway to bypass this issue besides sending the ECU off and having the immobilizer disabled?

tags: TunerPro, .bin, .xdf, 800, immobilizer, GuzziDiag, IAWWriter, IAWReader

Insert black key 1 into ignition

Just tape black key 2 temporarily below the ignition where the sensor loop should be and then turn on the bike.

If your bike starts, then the loop may be the issue. I would check this first. Usually its the pickup of the signal that causes the problem.

Let us know what happens

Tried your suggestion with the keys. Tried unplugging sensor replugging sensor. Tried unplugging harness plugs and replugging plugs. Checked all fuses. All I get is the EOBD on and two blinks. If I pull the 10A 'key sense' fuse the bike does the same thing. Resistance across the antenna shows 18 ohms which is pretty low, so I'm assuming it is not broken. I get 6 volts across the male plug on the ecu at all times except when the key is switched to on. It drops to 5 volts and then back to 6. I don't have my logic analyzer set up but that is next to see if some digital magic flashes across these terminals.

https://youtu.be/KhFfe1XvwdM

IMO, unless the red key starts the bike the best solution is have the ECU flashed to kill the immobilizer.  The system is problematic and can be ridiculously expensive to fix.  The immobilizer light will still work. 

Two blinks is either a key or antenna failure.

Unlikely that both your black keys have failed.

The range on the antenna is very very short, so confirm that the antenna is properly attached inside the key shroud, occasionally they detach.

  ^  This

 I added a CF key surround and had this fault. I re read the instructions and moved the antenna closer with supplied foam blocks and the key then worked fine.

Well after screwing around with this key sensor for a week I've now purchased the Lonelec cable. More updates to come.

In the bin I pulled from my ECU, address 0x3A15A shows as "not set" in TunerPro, which is the value it should be if it the immobilizer is disabled. This is the address for the immobilizer for the IAW59MHW010 according to the internet. Any ideas?

Try putting your meter on the fuse to make sure it is good.  They are not always obvious.

Derek V

5/4/21 Edit: Please see my reply from 5/4/21 on this thread.

Great success.

I downloaded a group of bins from the various ECU threads on various Ducati forums.
I ended up with an OEM bin from a Monster 620 ECU and a modified bin from a SuperSport 620 with the immobilizer disabled. In the OEM bin, 0x3A15A is "01". In the modified bin, 0x3A15A is "00".
The bin I downloaded from my Monster 800 unmodified ECU, with the same IAW59MHW010 as the 620, 0x3A15A is "00". I noticed the hex values 'around' 0x3A15A in the 620 bins were the same. The hex values 'around' 0x3A15A were different between the 620 and 800 bins. Browsing down in the hex editor, I ran across the same preceeding hex values to the immobilizer byte in the 620 and 800 bins, 44 bytes down, indicating that the immobilizer byte for the 800 version of the IAW59MHW010 is possibly 0x3A19C. This value was set to "01" in the 800 bin. I changed it to "00" and then flashed the bin to the ECU. The bike started right up. Thanks various Ducati forms and I hope someone out there finds this and it helps them in the future.

TLDR: The Monster 800 ECU IAW59MHW010 immobilizer location is 0x3A19C.
I don't know if this is the same value for the S2R.

For people editing fuel maps and other features: EDIT THINGS WITH CAUTION BECAUSE DIFFERENT VERSIONS OF THE SAME ECU REQUIRE DIFFERENT XDFs. DON'T ASSUME A 620 XDF WILL WORK FOR YOUR 800.

A good bit of investigative tech info there; impressed you could work that out.   [thumbsup]

Not here yet but might PM some questions on a rebuild in a bit.

Cheers  [Dolph]

Sorry to bump this from so long in the past, but I just looked at another 620 bin and it had the immobilizer located at 0x39EB1. For anyone reading this, search for the text string "AFPZds", find the numbers a few more bits down outlined above "E0 13 88 07 6C" and then the next two numbers are your immobilizer bit. If you're ECU is OEM it'll be 01.

If you need help with this, reach out. I've got this down pretty well. All you need is a ~$25 cable and some free software and a $5 donation to guzzidiag@gmail.com and $5 donation to DMF.
 

 [thumbsup]

THis is pretty useful information. I have been trying to disable my immobolizer using online guides for a while now. I could never really figure out how someone determines that they are at the right location for the hex values of the immobilizer.

I have "unlocked" my ECU for mapping (based on what i was told by the tuner) but the immobilizer is still active. I am afraid to access write anything to the ECU using ducatidaig simply because the tuner had problems getting the map to "stick".

But this is great info and I guess I should just bite the bullet and spend some time browsing the bin files!

It seriously takes 10 minutes if you have the cable and software. Let me know if you need any help.

He man tell me how to get software

Edit: See latest post

I actually found that the hex address location changes among all the ECUs, even among same models, but you if search for "97 00 A5 2E E0 13 88 07 6C" the immobilizer address location is the next byte. I hope this helps someone! I'm going to edit my reply above so people don't possibly brick their ECUs. If you need help, shoot me a PM.

Hey me again,

I was browsing through another bin and it looks like if you search for "97 00 A5 2E E0 13 88 07 6C" it won't find the immobilizer byte properly as a few bytes change with year and model.


You should actually search for "97 00 A5 2E E0" or "9700A52EE0" and then count 5 bytes over and that one should be an "01" if the immobilizer is enabled. Change it to 00 and you're set.

ex

97 00 A5 2E E0 13 88 07 6C 01

I’m having the same issue with my 2007 s2r1000. I have the cable and software just haven’t figured out exactly which Line is the immo… help would be great because It will not start and it’s killing me…