Page 1 of 4
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Wed Apr 10, 2024 7:02 pm
by AMP3R
Hey. Now I have a 3D7 drive unit that traveled only 895 km, "go" pedal, keycard and matching VCSEC from the 2023 Tesla MY.
Today I've checked, how the pedal works. And it works fine.
Tomorrow I want to connect the VCSEC module to the vehicle can bus of the drive unit and fingers crossed it will appear the message DI_immbilizerState: DI_IMM_STATE_DISARMED.
Unfortunately I have the can logs only from 2019 M3 Perf and very old model 3 can dbc file. It seems to me that my motor has newer software and nothing is going to happen.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Thu Apr 11, 2024 10:53 am
by johu
Good luck! Various proprietary solutions exist, would be nice to have an open source one
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Thu Apr 11, 2024 4:13 pm
by AMP3R
I wired the VCSEC with Vehicle can bus of the drive unit and nothing happened like I had guessed before. Need help. Maybe can logs from fresh M3/Y?
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Apr 14, 2024 1:07 pm
by dimonlipko
Yes, I can make CAN BUS log from my M3 with fresh software.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Apr 14, 2024 1:53 pm
by AMP3R
dimonlipko wrote: ↑Sun Apr 14, 2024 1:07 pm
Yes, I can make CAN BUS log from my M3 with fresh software.
I would appreciate it.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Tue May 28, 2024 3:46 pm
by coryjfowler
MartinN wrote: ↑Tue Feb 27, 2024 2:01 pm
Can anyone provide any good sources of info regarding the inverter "pairing"? Most of the discussion seems to be about using the Tesla motor in alternative applications, and how it is unusable with other controllers, but I'm working on a project where I plan to replace the existing drive unit of an M3 with an alternative inverter/motor and I'd like to retain compatibility with the rest of the Tesla architecture. Is the VCSEC likely to block this at the vehicle end? If so, is it likely that I could get around this by listening to the interaction between the VCSEC/IDU and playing it back with my new drive unit?
Looking at the Service documents for the Model 3 "Drive Unit - Rear (3DU) (Remove and Replace)" the Install step 115 deals with using toolbox for "Secure pairing (immobilizer pairing) between the Security Controller and Drive Inverter and Vehicle Odometer Pairing to UI".
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Jul 28, 2024 4:43 am
by RadioKot
Hello everybody!
Is anyone working on creating their own cortroller to start the engine? I am only at the beginning of this difficult path, so I would like to listen to already experienced users.. However, I have already managed to pair the TM3 rear motor with the TM3 battery using the ingenext controller. I also implemented a cooling and heating system using TMS components, but I would like to control the engine myself.
Can anyone suggest something about this?
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Jul 28, 2024 9:35 am
by AMP3R
RadioKot wrote: ↑Sun Jul 28, 2024 4:43 am
Hello everybody!
Is anyone working on creating their own cortroller to start the engine? I am only at the beginning of this difficult path, so I would like to listen to already experienced users.. However, I have already managed to pair the TM3 rear motor with the TM3 battery using the ingenext controller. I also implemented a cooling and heating system using TMS components, but I would like to control the engine myself.
Can anyone suggest something about this?
Let's collaborate and reverse engineer your ingenext controller.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Jul 28, 2024 10:28 am
by RadioKot
Great idea! Soon I will review the entire topic to understand what local users have already managed to do. Together we will be able to create a unique ingenext. I would like to attach a photo of my installation, but I don't know how to do it
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Jul 28, 2024 10:37 am
by AMP3R
here
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Jul 28, 2024 11:07 am
by RadioKot
So there is my installation
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sun Jul 28, 2024 6:17 pm
by davefiddes
That's an impressive setup. I'm jealous!
A open CAN based solution would be welcomed by many. If you guys can collaborate on it that would be fantastic.
The approach I'm taking to build a brand new firmware for the inverter is completely mad. Sort of equivalent to casting your own cylinder head and pistons for a hot-rod. Technically possible for some but very slow going and it might struggle to meet the OEM performance.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Tue Jul 30, 2024 11:41 am
by P.S.Mangelsdorf
davefiddes wrote: ↑Sun Jul 28, 2024 6:17 pm
Technically possible for some but very slow going
But how awesome it will be when it works!
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Aug 03, 2024 12:00 pm
by RadioKot
davefiddes wrote: ↑Sun Jul 28, 2024 6:17 pm
The approach I'm taking to build a brand new firmware for the inverter is completely mad.
Tell us about your idea?
davefiddes wrote: ↑Sun Jul 28, 2024 6:17 pm
A open CAN based solution would be welcomed by many. If you guys can collaborate on it that would be fantastic.
Yes, I would like to work on creating a CAN controller, but I need someone's help with this
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Aug 03, 2024 1:30 pm
by AMP3R
RadioKot wrote: ↑Sat Aug 03, 2024 12:00 pm
Tell us about your idea?
Yes, I would like to work on creating a CAN controller, but I need someone's help with this
Have you already "paired" your motor with the controller? If not, you can record the entire inverter flash procedure from ingenext support when you communicate via teamviewer. The main thing is that you have reliable CAN analyzer.
Can you do it yourself?
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Aug 03, 2024 1:36 pm
by davefiddes
RadioKot wrote: ↑Sat Aug 03, 2024 12:00 pm
Tell us about your idea?
My github project:
https://github.com/davefiddes/c2000-inverter explains the scope of what I'm working towards.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Aug 03, 2024 1:43 pm
by RadioKot
AMP3R wrote: ↑Sat Aug 03, 2024 1:30 pm
Have you already started your motor with the controller?
I've already started the engine. Ingenext has already done everything that was needed with it two months ago, since then I have been developing a thermal controller
AMP3R wrote: ↑Sat Aug 03, 2024 1:30 pm
Can you do it yourself?
Yes, I can try to do it on my own. I already have the final CAN log. But I didn't risk sending messages to CAN. I could try to do it, but I need an experienced person. I have not encountered these programs before, but I would really like to learn
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Aug 03, 2024 1:50 pm
by AMP3R
RadioKot wrote: ↑Sat Aug 03, 2024 1:43 pm
I've already started the engine. Ingenext has already done everything that was needed with it two months ago, since then I have been developing a thermal controller
Yes, I can try to do it on my own. I already have the final CAN log. But I didn't risk sending messages to CAN. I could try to do it, but I need an experienced person. I have not encountered these programs before, but I would really like to learn
What log do you have exactly? The inverter firmware procedure itself or did you just record what the controller sends to the motor?
What is your end goal? Do you want to make your own controller and then sell it or what?
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Aug 03, 2024 2:06 pm
by RadioKot
AMP3R wrote: ↑Sat Aug 03, 2024 1:50 pm
What log do you have exactly?
Of course, I do not have the procedure for flashing the inverter. Ingenext keeps it a secret… I only have the signals that the controller sends
AMP3R wrote: ↑Sat Aug 03, 2024 1:50 pm
What is your end goal? Do you want to make your own controller and then sell it or what?
This controller will be useful to me in my other projects. It's more of a challenge to myself, but maybe I'll sell it piece by piece to interested people.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Aug 03, 2024 2:40 pm
by AMP3R
RadioKot wrote: ↑Sat Aug 03, 2024 2:06 pm
Of course, I do not have the procedure for flashing the inverter. Ingenext keeps it a secret… I only have the signals that the controller sends
This controller will be useful to me in my other projects. It's more of a challenge to myself, but maybe I'll sell it piece by piece to interested people.
Will you share the logs? Many will thank you.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Sat Aug 03, 2024 10:46 pm
by RadioKot
I can't attach it.trc file because it is an invalid file extension. I can send it in other messengers
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Mon Aug 05, 2024 3:03 pm
by AMP3R
RadioKot wrote: ↑Sat Aug 03, 2024 10:46 pm
I can't attach it.trc file because it is an invalid file extension. I can send it in other messengers
Check PM
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Fri Aug 30, 2024 9:36 am
by AMP3R
I have this scary setup with a computer power supply, from which I take 310V 6A max. It seems to be suitable for testing.
Using prepared can logs and so far only VEHICLE CAN, I managed to achieve the inverter states IMMOBILIZER_STATE DISARMED and DI_SYSTEM_STATE IDLE.
I am sure that I am doing something wrong, because the ACTIVE DISCHARGE - ON error is active.
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Fri Aug 30, 2024 9:38 am
by RadioKot
Good job!
Re: Tesla Model 3 Rear Drive Unit Hacking
Posted: Fri Aug 30, 2024 10:05 am
by davefiddes
Do you have an intact HVIL loop with a 20mA current running through it? Without that the HV bus discharge circuit on the inverter will not deactivate.