Telematics Control Unit (TCU): Difference between revisions
GeorgeDewar (talk | contribs) No edit summary |
GeorgeDewar (talk | contribs) No edit summary |
||
(16 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
The Telematics Control Unit (TCU) provides connectivity to the Nissan Leaf. It is a 2G, 3G, 4G or 5G modem, depending on the year and region, with additional functionality. The TCU provides internet connectivity to the [[AV Control Unit]] via USB, while also communicating with Nissan's servers in its own right to provide CarWings / Nissan Connect functionality such as remote climate control. | The Telematics Control Unit (TCU) provides connectivity to the Nissan Leaf. It is a 2G, 3G, 4G or 5G modem, depending on the year and region, with additional functionality. The TCU provides internet connectivity to the [[AV Control Unit]] via USB, while also communicating with Nissan's servers in its own right to provide CarWings / Nissan Connect functionality such as remote climate control. | ||
Line 6: | Line 4: | ||
== Location and access == | == Location and access == | ||
The TCU is located on the right-hand side of the vehicle in all models. | The TCU is located on the right-hand side of the vehicle in all models. It is attached to a metal bracket, which has the [[Around View Monitor Control Unit]] on the other side, if equipped. Once access is achieved, the entire bracket can be removed with the TCU, [[Around View Monitor Control Unit]] and wiring harness all still attached (there's a good amount of slack), and then once pulled forward the TCU can be disconnected. | ||
=== Left-hand drive === | === Left-hand drive === | ||
Line 14: | Line 12: | ||
=== Right-hand drive === | === Right-hand drive === | ||
The TCU is located above the pedals. | The TCU is located above the pedals. Access is achieved by removing the panel above the pedals, then removing the lower instrument panel (the panel below the steering wheel, with the bonnet release latch and the panel of buttons (open charge door, etc). Refer to the service manual for more detail on removing this panel. | ||
== Variants == | == Variants == | ||
=== 2G === | === 2G === | ||
Known part numbers: | |||
* 283B0 3NM0A | * 283B0 3NM0A | ||
Line 27: | Line 25: | ||
=== 4G === | === 4G === | ||
Known part numbers: | |||
* 28275 5SA0A | |||
* 28275 5SA0B | * 28275 5SA0B | ||
* 28275 5ZA0D | |||
* 28275 6FL0B | |||
These are found on some 2nd-generation Nissan Leafs. | These are found on some 2nd-generation Nissan Leafs. The one pictured below (p/n 28275 5SA0B) includes a Sierra Wireless AirPrime AR7554 modem module, a chip labelled R7F7010259 (possibly part of the Renesas RH850/F1L family), a small PIC16LF1518 chip, an A1051/3 CAN transceiver chip, an A1043 CAN interface chip (this list is not exhaustive). An examination and probe of the board while powered on did not reveal any obvious UART terminals, however it does emit CAN data while powered on on a bench. | ||
It does not contain a physical SIM slot. | It does not contain a physical SIM slot. | ||
The unit photographed below is not detected as a USB device when connected to a computer. It may be faulty, or in some kind of disabled mode, or a non-standard USB protocol, I am not sure. | |||
In vehicles which have had an English conversion done by EVs Enhanced, the [[AV Control Unit]] may not function while the TCU is disconnected (complaining about a missing or invalid key file). | |||
<gallery widths="160" heights="160"> | <gallery widths="160" heights="160"> | ||
Line 48: | Line 53: | ||
!Purpose | !Purpose | ||
|- | |- | ||
|M67 | |[[M67]] | ||
|TH40FB-NH (40-pin connector) | |TH40FB-NH (40-pin connector) | ||
{| class="wikitable" | |||
|- | |||
|[[File:CTH40F05HS.svg|frameless]] | |||
|} | |||
|Power, Microphone, CANBUS ([[IT-CAN]] and [[M-CAN]]) | |Power, Microphone, CANBUS ([[IT-CAN]] and [[M-CAN]]) | ||
|- | |- | ||
|M173 | |[[M173]] | ||
|USCAR30-MD-M (USB) | |USCAR30-MD-M (USB) | ||
|USB connection to [[AV Control Unit]] | |USB connection to [[AV Control Unit]] | ||
|- | |- | ||
|M174 | |[[M174]] | ||
|FAKRA CODE H 4003 (Pink) | |FAKRA CODE H 4003 (Pink) | ||
|GSM antenna | |GSM antenna | ||
|- | |- | ||
|M175 | |[[M175]] | ||
|3FA1ANCSJ-C02W0 (Blue) | |3FA1ANCSJ-C02W0 (Blue) | ||
|GPS antenna | |GPS antenna | ||
|} | |} | ||
==== M67 ([[NAM]]) ==== | |||
{{:M67}} | |||
==== M173 ==== | |||
{{:M173}} | |||
==== M174 ==== | |||
{{:M174}} | |||
==== M175 ==== | |||
{{:M175}} | |||
=== 5G === | === 5G === | ||
Part numbers: | |||
* 28275 6HL9B | |||
<gallery widths="160" heights="160"> | <gallery widths="160" heights="160"> | ||
File:5G TCU.webp|External view | File:5G TCU.webp|External view | ||
Line 82: | Line 106: | ||
* [https://mynissanleaf.com/threads/reverse-engineering-telematics-unit.36889/ Reverse engineering Telematics Unit - My Nissan Leaf Forum] | * [https://mynissanleaf.com/threads/reverse-engineering-telematics-unit.36889/ Reverse engineering Telematics Unit - My Nissan Leaf Forum] | ||
* [https://mynissanleaf.com/threads/2018-tcu-decoding-and-emulating.34628/ (2018+) TCU Decoding and Emulating] - My Nissan Leaf Forum | |||
* https://github.com/developerfromjokela/nissan-leaf-tcu | * https://github.com/developerfromjokela/nissan-leaf-tcu | ||
* [https://www.youtube.com/watch?v=5QBOmr_ZyLo&ab_channel=DEFCONConference DEF CON 25 - Mickey Shkatov, Jesse Michael, Oleksandr Bazhaniuk - Driving down the rabbit hole - YouTube] | * [https://www.youtube.com/watch?v=5QBOmr_ZyLo&ab_channel=DEFCONConference DEF CON 25 - Mickey Shkatov, Jesse Michael, Oleksandr Bazhaniuk - Driving down the rabbit hole - YouTube] | ||
== References == | == References == |