2003 04 05 Unlock XM Lock Error on Salvage Yard GM XM Receiver (Buick Cadillac Chevrolet Pontiac)

[@AlexSirghie]

What would happen if you just disconnected the chip rather than reprogramming it?

[@DrShock]

Well we can see the XM Radio ID, the units serial number, and likely what appears to be XM station preset info stored in the EEPROM chip. There may be other obfuscated information stored there as well, no way to know as GM never documented it publicly. While I've not done it myself because I wouldn't have considered it a repair but more of a mod, I'm quite sure removing the power pin of this EEPROM chip would still clear the VIN lock. But then you would have to accept the loss of whatever minor XM functionality was dependent on the data that chips memory locations contained.

[@AlexSirghie]

@@DrShock So I ended up trying out of desperation and it seems the only issue that it's given me is I have to press the Second knob in to see artist or song info, otherwise it doesnt show it and just stays displaying the station name.

[@DrShock]

Thanks for sharing that, what about displaying your Radio ID on XM channel 0 - does that still work?

[@AlexSirghie]

@@DrShock yes, it does. I disconnected the battery for a few hours to do something and now it's acting up, I still have all my channels but it keeps turning itself back and deleting my presets so maybe it needs to sit for a while like it did last time when I 1st installed it and it was acting up or something is messed up. I'll keep you posted.

[@DrShock]

@@AlexSirghie Yeah, this is just one of the side effects and why replacing the EEPROM as I showed is the only real _repair_ here. But having some other option if you lack the tools or parts is good to know, thanks for sharing.

[@ryanburbridge]

Crazy how important these skills will be in the near future.

[@FunnyBone]

would it be possible to install an xm reciever into a gm radio that is xm ready but didn't come with xm from the factory? would there be any extra components required for it to work?

[@DrShock]

That's very much in the _it depends_ category for a GM factory setup. Older model years the XM receivers were separate modules. Newer model years they are circuit boards or cards installed inside of the main radio head unit module. Older years the challenge would be the wiring harness and antenna routing access and the you would most likely have to reprogram the main radio module to enable access to the XM receiver. For later years it would be the antenna routing and the programming.

[@FunnyBone]

@@DrShock i've looked into it and for my setup (2005 chevrolet silverado 1500) it doesn't seem too difficult. i have a us8 radio i found at a scrap yard that i've already unlocked, and i was able to snag the wiring harness that came out of it's original vehicle. only thing i think is left is to find a shark fin and route everything into the bcu. it seems more easier for older model years imo.

[@ATmods]

Maybe this is a longshot but I found an xm car module just like this from 06 with a lifetime subscription to siriusxm which is extremely rare. It’s not made by GM but it appears to have similar chips and an eeprom. Can confirm it still works in its original vehicle. Do you think I could swap the radio ID on the eeprom and the chips that hold xm specific functionality to a newer digital radio in my 2012 chevy to give it the lifetime functionality? Since I’m not the original account holder if I called to transfer like you said they would probably cancel it

[@DrShock]

If it's not a GM original equipment XM receiver, then it is very *unlikely* to be VIN locked to the vehicles BCM/Radio head unit. I would expect there to be zero chance of moving chips between receivers made by different suppliers.

[@ATmods]

@@DrShock Yeah it sounds impossible. I was just wondering if there’s one specific chip like the eeprom that’s responsible for the telling the rest of the unit what the radio ID and account is, that could be transferred over to a new unit, or if multiple components separately keep track the radio ID... either way it’s probably not realistic

[@DrShock]

If it were an OEM GM XM receiver, then the EEPROM contains the radio ID and that is usually what is used for the account association at XMSirius. But if it's an aftermarket receiver, it would have its own unique approach to storing this information. Plus by 2012 GM had an integrated XM receiver inside of the radio head unit, so that 2006 era XM receiver design would likely have a different approach of communicating with the radio head unit as well. What you might be able to do though is research on some forums if there's a way to get the 2006 unit working in some sort of fashion as a second or additional unit. If it's aftermarket there may be some information on how to connect it up to other vehicles of that era.

[@ATmods]

@@DrShock I will look into it and report back if I get anything working. It’s a salvaged OEM unit that appears to be compatible with audi/VW radios from 05-08, I have a 2012 chevy volt

[@AlexReiterProductions]

Are these XM units compatible with any RDS radio of that style or only specific models? I have an '02 Cavalier, using a Tape/CD RDS head unit from a 2000 z24.

[@DrShock]

They are not universally compatible as radio bus communication protocols were evolving and changing during this time period. You'll want to stay with the same model year range. So if the radio and the XM receiver were available as a combo on some GM vehicle for a given year when new originally, keep them paired up when you transplant them.

[@MrAwsomeshot]

so I found this while looking for how to activate xm bands in my 2004 cadillac srx head unit. I am trying to add an after market aux adapter, it basically hijacks the xm input but for the headunit to see it and send that signal to the bose amp I need to be able to access the bands. supposedly a dealer could do it but local shop wants $150 to even look at it and I am not sure they know what they are doing. Any suggestions?

[@DrShock]

Nope, you will need the after market supplier to spell out exactly what is needed to use their product as the dealer won't have clue one about a non-GM accessory.

[@MrAwsomeshot]

@@DrShock www.discountcarstereo.com/pxaux-cts.html

[@DrShock]

That accessory just replaces the XM receiver and plugs in instead to the radio head unit wiring harness connector. The only reason XM comes into play is the vehicles radio head unit has to be _XM Ready_ or programmed to support a factory XM receiver for this type of accessory to work. Typically that means the radio has to have a BAND button along with a TAPE/AUX button on the face, or a remote CD/AUX button to function. If your radio head unit doesn't have such a button, this accessory is not compatible with your vehicle. Best to contact the seller on these sorts of questions, it really doesn't have anything to do with this video I've posted.

[@JoseGonzalas]

Great video 👍👍 I really enjoy this kind of content

[@TheArturoliranzo]

Great video, I have a very similar problem on my 2009 Buick Enclave, But I replaced the BCM, how is the process?

[@DrShock]

The XM receiver had its own unique kind of VIN lock, and GM intentionally didn't provide a scan tool method to unlock one. The GM dealer was supposed to mail the old unit back. Replacing the BCM would not unlock the XM receiver since there's no way to change the VIN in the XM receiver other than what I've shown here. Now if you've replaced the BCM, and are asking about how to deal with that I have a similar video here that might help - kzbin.info/www/bejne/eZncaqN_r9Saq6M

[@TheArturoliranzo]

DrShock thanks for the info.

[@Two_wheels_ninja]

I'm trying to install an aux on Pontiac Grand Prix 04 with no xm. It seems to not work without having xm, so now I am considering buying a used xm receiver and unlocking it just to make the connection. I just don't know where it goes in my vehicle and if it has the wiring included already in my car? Would anyone know?

[@KarolisKuckailis]

Why radio show XM theftlock after I was disconnected the XM conector?

[@DrShock]

If the radio is programmed for the XM receiver option to be installed, and it cannot confirm the VIN for any reason (even if due to a communications problem) it will lock the XM receiver functionality.

[@Veso266]

So if u clear the eeprom can u then use Tech2 to lock this to ur new VIN?

[@DrShock]

These older XM receivers behave differently than radios. There is not a VIN relearn on the Tech2 for an XM module, hence this video. I have done a few of these modules by the method I've shown here, which is limited to only changing the VIN contents. I'm not sure if setting the VIN memory to a default value would be enough for the radio module and BCM to relearn it on their own (the process that a brand new XM module would be learned by) since the rest of the EEPROM would have non-default information within it. Likely you would need access to a brand new module to image it's default EEPROM to re-virginize an used module.

[@thinkhelpservice]

informative video thank you, I would like to know how you worked out the ST 9355093 is the Dephi house part number and actually type is 24C08?

[@DrShock]

Trial and error really. You can determine the chip number by reading and watching for data wrap around (information repeating). If that happens the capacity is smaller than you selected, and you choose a smaller device until the wrap stops. That's how you tell 24C08 vs say 24C16. The house numbering can also be detected by examining several board examples in the salvage yard (one for each model year of the same design). Usually the first run, or the last run, will be too small for the cost of custom house numbering and you'll see the off the shelf chips used.

[@thinkhelpservice]

@@DrShock thank you for taking the time for my reply - some great tips there!

[@johnpanzer2034]

Got a question. If I am looking at adding it into a vehicle that does not currently have XM, but has the head unit that will accept XM, is there a special wiring harness I need to use? I found some harnesses at a junkyard and I have an orange, green, and black wire on one end and a pink and orange striped wire on the other end that I don't know what to do with. I know orange is power and black is probably ground. Is the green and the other pink and orange striped required?

[@DrShock]

The Delphi XM receiver does have a proprietary connector for both the wiring and antenna. These units are quite sensitive to noise/interference so you're going to want to get the complete antenna harness out of a donor vehicle of the same make and model year with the plastic retaining clips that GM used. The antenna harness cannot be spliced or cut as most years will throw a code if you do, you'll need to extract it intact with no damage to the insulation of the cable. The wiring harness is likely already there if you have an up level trim, but if not cut it close to the head unit. Keep in mind if your vehicle did not originally come with option U2K (check the options sticker in the glove box or trunk) then you'll need to reprogram the Body Control Module and/or Radio head unit with a Tech2 tool to inform it that you have installed one. To find out more about the pinout of that connector check this other video I have here - kzbin.info/www/bejne/iXW1hHSVm7RlmpY

[@RandyHetzner]

Love all of your eeprom videos. I used to work with eeproms way back and am glad to see people still doing it. Here is my question..... So i had XM on my vehicle before it was just totaled. I had a special rate that i prepaid for5 years of service and it is not transferrable according to XM. I know my radio id on old vehicle and new radio vehicle. I changed the id in the new radio to the id of rhe old radio (verified it was actually on the eeprom) and the id got changed back automatically so it didn't work. Obviously there is a module somewhere (radio, BCM, other) that is the master that is overwriting it. Any thoughts on what other module in the vehicle is doing that? Or is it another eemprom within this module that is overwriting it? Thanks.

[@DrShock]

In order to keep that lifetime subscription, you would have to keep the same make/model/year range of vehicle and same type of radio and XM receiver pair. Then copy the original XM receivers EEPROM contents and (with the copy only) overwrite the VIN (at least with GM vehicles) in the EEPROM memory of BOTH the replacement radio and replacement XM receiver to match the new vehicles BCM VIN because none of the scan tools are allowed to reprogram an XM module. As you've seen any other approaches will be thwarted by the firmware inside the module. This is a combination of BCM, radio, and XM receiver all working together to insure VIN locked alignment.

[@RandyHetzner]

@@DrShock Thanks for the reply. I had a 2005 Grand Prix that has a board very similar to your video. New vehicle is a 2008 cobalt. I guess what I want to do won't work on newer vehicle since they are different type of model radio & XM receiver modules. But that makes me really wonder....Is it really hard coded into the XM module or is it possible that it is in the radio and the radio is the master that feeds it the XM radio ID once the initial pairing is done at the factory? Example the BCM has mileage/VIN and it is the master and if the Speedometer module or radio is changed without the proper VIN or even a different mileage coded, they won't work.

[@DrShock]

The radio negotiates the VIN with the BCM. BCM is only involved in the VIN. Radio stores the VIN and makes sure the XM receiver matches that VIN. Radio knows knows nothing more about XM receiver. XM receiver uses VIN + ID to communicate to the satellites for account authorization and authentication. The ID *AND* VIN must match or your subscription isn't going to be valid anymore. The XM receiver knows nothing about the vehicle type (make/model/year) just the VIN and ID. But it knows if the VIN is not a match with the BCM because the radio is in between to tell it that information. The XM receiver will VIN lock when this is detected.

[@jamesmcdaniel38340]

Dr. Shock where can I get one of those pogo adapter test clips sir? I can not never seam to find one. Thanks sir!

[@DrShock]

They pop up on eBay from time to time. You have to wade thru to find one that has the DIP type end vs ones that are made for d-shell type programmers like CarProg. Here's an affiliate link that will show them: ebay.us/fMMCjs

[@FunnyBone]

just wondering (i don't see why you actually would do this since you could just input the correct value lol just curious is all), in theory could you zero out the vin number in the hex editor and be able to do the module setup with the tech ii successfully?

[@DrShock]

If you had a Tech2, then yeah you could do that approach (tho keep in mind no scan tool can erase the VIN from an XM module you have to manually edit the EEPROM). But most folks watching this are more electronics folks, and not automotive folks, thus are not going to have that kind of automotive specific tooling. So just input the VIN into the memory and you're all done.

[@corncountrywhitetail]

Any chance you could show how to do this process on a newer xm module? The module in my 2013 GMC Acadia went bad. I bought a replacement on eBay and it's XM theftlocked. Which chip would i connect to.

[@DrShock]

Typically the newer XM receivers are no longer separate units but integrated into the radio itself (separate board but not separate box). I don't have any board level information on those types. If the radio and XM receiver are two _separate_ boxes like I've shown here, installed separately and in different locations, then the procedure will be exactly the same though the XM receiver board layout may differ. But I believe this two box design ended around 2010/2011.

[@corncountrywhitetail]

@@DrShock It's still a seperate unit in mine. I bought a used one to pair with my current radio. I just wasn't sure with chip on the board to connect to. I think i have figured it out, but not sure. Only way to find out is to connect the programmer once it arrives. Thanks for your time.

[@DrShock]

If it's separate yeah the same technique I've shown should get you going. The boards are going to be different though. I would look for the same size/type EEPROM as I showed here first, if you don't find that then it could be a SOIC8 type device like used in regular radios instead. But if it's a separate box, it will store the VIN on an EEPROM somewhere. Note that later year GM/Delphi PCBs almost always require the device to be desoldered and removed from the board to reprogram.

[@corncountrywhitetail]

@@DrShock I wasn't able to read the epromm on or off the board with modifying the CH134a like you did. I did find however that the replacement module plays nice with my radio after removing the epromm from the module board. No issues at all with functionality on a 2013 GMC Acadia.

[@ahouston2973]

Would you be able to set the xm up as a new module if you just replace the 24c08 chip with a new one?

[@DrShock]

Not with a blank chip, you would need a _virgin_ EEPROM image to burn it with how they came new out of the box. I'm not familiar with what the chips contents looked like before it was populated during initial pairing with the radio head unit to reverse engineer that.

[@opperj]

Very helpful video. I have an XM receiver out of a 2006 Corvette and I have purchased the same chip programmer/reader in your video. Can you point me to an Apple Mac application that will let me do the reprogram? I do not have ready access to a Windows machine.

[@DrShock]

While my primary laptop is a MacBook Air, I end up having to use various flavors of Windows for all of my automotive diagnostics. The GM Tech2/MDI tools have zero Mac support support being based on Java and I'm not aware of any EEPROM programming software apps for Mac that support the common / popular EEPROM programmer hardware designs out there (i.e., TL866II+, Black Edition CH341A, UPA-USB, etc). You can find drivers for Mac for some of these but no application software to do the actual chip selection and read/write/verify ops. I suspect anyone using a Mac is rolling something on their own at the command line level.

[@dailydrivenH2]

Nice video new subscriber here with a couple of questions. I have a 2004 hummer h2 that I updated with a 2006 GM NAV unit the previous owner took off the Xm receiver so I got a used one. 1 Where can i order the harness that goes from the xm receiver to the radio ??? i also updated the bose premium amp to a Lux amp from another truck escalade and rewired the harness to communicate properly with the Lux amp , as expected I only get sound from the front passenger side letting me know it needs a amp relearn.. where can i find the steps to reprogram the amp to my truck with the tech2 ??? Thanks in advance.

[@DrShock]

For the harness, personally rather than trying to order this from GM I would just pull it from a salvage yard vehicle. LKQ has yards around the country where you can do this yourself with your own tools, so I would try checking if there is one near you first. If not, you want to find a GM dealer who still shows the parts explosiion diagrams online (frustratingly this is increasingly being withheld to force you to go to the dealer parts counter in person) but here's one dealer who still does it - www.wholesalegmpartsonline.com/cars/Hummer/2004/H2--Base/Audio--Navigation-and-Entertainment/H2--Base-parts.html and you can find the harness you need visually and its GM part number. With the part number you can try eBay or such before resorting to the dealer pricing. The Tech2 is going to block you doing what you're trying to do unless both the NAV unit and AMP were available from the factory in 2004 (this is the GM service programming system (SPS) and maps allowable options to VINs by model year. If these were valid regular production options (RPOs) in 2004 then you should be OK as long as the 2006 parts are interchangable with 2004 ones electrically for that years body control module (BCM) to recognize them. The steps would be via SPS and would go something like a video I once did for a 2009 Cobalt radio within this playlist - kzbin.info/aero/PLKGiYMtrEJBNvIjVNchktlQKZxtYxXAc3 For both 2004 and 2006, TIS2000 should be all you need along with the Tech2.

[@dailydrivenH2]

DrShock thanks alot

[@dailydrivenH2]

@@DrShock so to solve my AMP situation since my used AMP came from a escalade all i had to do is build a escalade profile on the Tech2 and the option to do a vin relearn became available so now thats fix . thanks for the help . now i need to watch your video on unlocking the XM module since i want to add that to my hummer too , i also need to order the eprom reader/writer . thanks again ...

[@JOHNPHUFNAGEL]

Great video.. Could you just swap eproms?

[@DrShock]

Yeah I believe i mention in the video that's another option as well on these particular models I'm working with, but you'll still lose the original radio ID and have to update it on your SiriusXM account as that's written to the EEPROM internal to the DRR.

[@jaboot45]

I have a 2012 Escalade, got new XM radio receiver and I am getting error xm theftlocked

[@DrShock]

Similar issue (VIN locked), but totally different board so this video wouldn't be applicable. If the XM receiver is a separate unit you might try my other later model vid instead - kzbin.info/www/bejne/emqTmYGYZbucna8 but if its integrated into the single radio head then you will have to try reprogramming it with a GM MDI type scan tool and their Techline Connect reflash program (paid subscription deal).

[@bennylemma5923]

Is there any specific area you find the VIN ? Or you just look for a number that looks like a VIN ? And when you need to clear the VIN do you change it to Zeros ?

[@DrShock]

The VIN may not appear in the same EEPROM memory location as I've shown here for years _after_ 2010, or later years may not even have it as clear text (it may be encrypted or obfuscated). But if you're working on an XM receiver prior to 2010 it should be clear text in the location as I've shown in this video. The EEPROM is no longer _virgin_ as other information has been written to it vs a brand new one in the box's EEPROM, but only the VIN value needs to change on an used XM receiver to match the VIN in the Body Control Module (BCM) of the vehicle it is installed in to unlock it. Changing other memory values may brick the unit so I would advise not to do that without saving copies of the EEPROM. And I've not tried writing zeros there or anywhere else, so I do not know what will happen if you do, so again I advise against it. Best stick to the script on what is known to work unless you're prepared to scrap the unit if its bricked should you not be able to recover a previous EEPROM image. ;-)

[@jeffreyhavelin3554]

@@DrShock I tried reading all (3) of the EEPROM's on the XM Module and I got a green light on the same chip reader you used in the video indicating a good connection on each EEPROM I tested, the software indicated the IC was read properly but all I got was an array of zeros on the entire chip. The software showed an array of Fs and this changed to all zeros whenever I read the EEPROMs. Did I do something wrong ?

[@DrShock]

@@jeffreyhavelin3554 Getting all 00s indicates a problem reading, all FFs would indicate not seeing the chip typically. Did you remove the EEPROM from the PCB? I mentioned in the video some board revisions from Delphi are not readable in-circuit with a test clip.

[@jeffreyhavelin3554]

@@DrShock I got all zeros on each of the (3) 24C08 EEPROMs on the board; I was reading it chips "directly on the circuit board" and the software I used was AsProgrammer_v2.1.0.13 set up for 24C08 EEPROMs. One EEPROM in particular was also located in the same exact area on the circuit board where you were able to read with a test clip. The red line on the test clip was oriented correctly with respect to the dimple on the chip, and I was using the CH341 programmer with the ribbon cable positioned in the same direction as seen in your video . OK, so it seems I did everything correctly, but based on a reading of all zeros it looks like I'll have to remove the target EEPROM; this is not really my forte, but I'll attempt removing the EEPROM and see if I can read it properly. Thanks

[@DrShock]

@@jeffreyhavelin3554 So a couple of points here. you'll notice at 15:00 I show at least two different boards one that can read in circuit one that cannot. At 15:43 or so reading it removed. If you're XM receiver is one from 2003 - 2005 and matches the version that I read in circuit, part number and layout, then I'll try and help see what else it might be. If you have one of the boards that needs to be removed, also for 2006 - 2010 ones, I recommend the Chipquik product in the description for removal as it makes it so much easier.

[@hhaire]

Where could I go to have someone help me with this? I’m asking because I have no clue how to do this. I don’t have the tools or software. Please help. I have an 04 tahoe so not sure if this will even help

[@DrShock]

This is definitely not a project for someone who has no electronics repair experience. But you can buy unlocked radios on eBay, though their price reflects someone else having done this already.

[@hhaire]

@@DrShock perfect thanks for the help. I do appreciate it.

[@thomasmartin4087]

I have a 2005 Chevy Trailblazer that has XM and I'm going to crush the truck I want to put it in my 2007 Avalanche radio and converter will that work

[@DrShock]

The Delphi XM receiver would definitely end up VIN locked trying to move it between vehicles. But I am not familiar with the radio head units in those two models for 2007 to know if they are plug compatible. If the receiving truck didn't originally have XM you won't have the right wiring harness or antenna nor would the radio head unit be programmed to talk to the XM receiver. It would have to have come with option U2K on the original factory options sticker (located on either glove box door or truck floor spare tire well area).

[@thomasmartin4087]

Yes both trucks had the XM the head unit fit just wanted to know if the XM if I take it out of the glove compartment and put the one that's working in will that work but you said it have to be program local dealership do that

[@DrShock]

Ok, if you originally had the XM option then the receivers should be compatible as long as the connectors end up being the same where you plug them in. However, the local dealership will not be able to unlock them. These XM receivers were the first modules, of the many in current GM vehicles, that blocked using used parts. So they cannot be unlocked by programming, only the method I show in the video.

[@int53185]

Will this work for a vin locked body control module?

[@DrShock]

It's a similar approach for BCMs of this same era that in fact I'll be uploading a video for next Friday. With BCMs you need additional software to calculate what to for write the mileage as well.

[@hooliganismx2151]

Mine did XM error now it won’t even show up on the radio screen skipping over it like it don’t exist

[@DrShock]

"XM Error" on the screen is more indicative of a hardware fault, not "XM Locked" but similar approach to address. Similar to this other hardware failure message I did repair on here - kzbin.info/www/bejne/emqTmYGYZbucna8

[@danman9017]

good info

[@msa_0619]

Good Morning on Christmas eve Yes, I have a 05 Chevy Trailblazer Lt when I took the manufacturer's radio out and try to put an after-market radio on when installing it in the SUV I couldn't get it to turn off when I turn off SUV it didn't kill the power to the aftermarket radio. So I couldn't find the Is original radio that came out of the SUV I find another radio 05 chevy trailblazer the radio is locked so I can't Ford cannot tech2 scan is there another scan that can do the same like tech2 VXDIAG VCX NANO GM this on Amazon will this work it TECH2 scan tool Could you PLEASE CHECK IN TOO I'M CALLING FROM HOUSTON TX I hope to hear from real soon ok Oh keep up the good work on your video on here ok

[@DrShock]

Merry Christmas Eve. So this particular video is about unlocking XM receivers, not radios. And no, you cannot unlock an XM receiver with *any* scan tool whatsoever for subscription security reasons. Editing the EEPROM chip itself is the only way. The GM dealer will just tell you to buy a new XM receiver. For a radio though, you *USED* to be able to use the Tech2Win emulator on Windows with a Nano as a J2534 passthru device and the approach this other video goes over kzbin.info/www/bejne/kHq1lpmLnd59hbM I say _"USED to"_ as I'm not sure if VXDiag ever got their nano working with GMs new Techline Connect service that started late last year. You would have to check with them.

[@corncountrywhitetail]

Just so people know... if your issue is the satellite tuner module and not the radio, then removing the epromm from the board removes the XM Theftlock. Time and presets are not effected, because those are stored on the radio and not the tuner module. It appears that all that is stored on the tuner module epromm is the VIN from original vehicle. I removed the epromm from the tuner module board a week ago and everything is working fine.