| Welcome, Guest |
You have to register before you can post on our site.
|
| Online Users |
There are currently 98 online users.
» 0 Member(s) | 96 Guest(s)
Bing, Google
|
| Latest Threads |
Mysterious Kill Switch Di...
Forum: The Hacker News
Last Post: yazrozzarn
01-10-2026, 04:36 AM
» Replies: 1
» Views: 807
|
UAW drops unfair labor pr...
Forum: Other Automakers
Last Post: BillyMum
06-16-2025, 09:15 PM
» Replies: 2
» Views: 2,478
|
Uber's Ex-CISO Appeals Co...
Forum: Dark Reading.com
Last Post: BillyMum
06-15-2025, 05:26 AM
» Replies: 2
» Views: 3,697
|
2021 Hyundai Ioniq SEL
Forum: Kia USB Entry
Last Post: HackMaster
03-31-2025, 07:17 AM
» Replies: 0
» Views: 429
|
Vulnerability of Remote K...
Forum: Keyless entry
Last Post: HackMaster
03-31-2025, 07:14 AM
» Replies: 0
» Views: 331
|
The (In)Security of Autom...
Forum: Keyless entry
Last Post: HackMaster
03-31-2025, 07:12 AM
» Replies: 0
» Views: 305
|
Relay Attacks on Passive ...
Forum: Keyless entry
Last Post: HackMaster
03-31-2025, 07:07 AM
» Replies: 0
» Views: 301
|
Hacking Tesla from Wirele...
Forum: Tesla
Last Post: HackMaster
03-31-2025, 06:58 AM
» Replies: 0
» Views: 342
|
Hacking Tesla from Wirele...
Forum: Tesla
Last Post: HackMaster
03-31-2025, 06:22 AM
» Replies: 0
» Views: 329
|
Schematics and Datasheets
Forum: Schematics
Last Post: HackMaster
02-27-2025, 12:26 AM
» Replies: 0
» Views: 286
|
|
|
| XENTRY Flash |
|
Posted by: HackMaster - 07-17-2024, 09:54 AM - Forum: XENTRY Flash
- No Replies
|
 |
![[Image: mfa-en.jpeg]](https://b2bcfrontdoor.azurefd.net/prod/media/xdshg2qn/mfa-en.jpeg)
XENTRY Diagnosis has become even more secure!
For commissioning, programming and coding of ECUs (XENTRY Flash) an additional, second authentication is mandatory for each user. This process is similar to a TAN authentication as requiered for online banking.
For authentication, you need one of the following two factors: - Smartphone authenticator app (e.g. PingID, Microsoft Authenticator)
OR- USB security key
You can use any key of your choice, as long as it supports the FIDO2 standard.
Available from specialist electronics retailers or directly from the manufacturer.
We recommend that you set up both options right away. If you lose one of the authentication factors, you will be able to work with the second one!
To assist you in setting up the factors, we will provide you with a compact HelpCard for download.
Download
— HelpCard (PDF)
Reset of the second factor
If you are no longer able to authenticate, you have several options:
1) If you have lost/forgotten your smartphone, but you have set up another second factor (USB security key), you can use that one.
2) If you don't have an alternative second factor set up, contact your org admin. The org admin can reset the second factor for you so that you can create a new one. If you don't know your Org admin, you can check it via Alice under your profile data. To do this, click on "Administrators".
Instructions for org admins on how to reset the second factor (PDF).
Multiple uses for your workshop
Whether for flashing, SCN/CVN coding or entering equipment codes: XENTRY Flash can be used with Mercedes-Benz Cars (including smart*, Maybach and SLR) as well as with Mercedes-Benz Vans. For trucks, we offer an online process for the parameterisation of control units, which speeds up data availability in the workshop after a control unit replacement.
Conveniently, all processes are fully integrated within the diagnostics software (XENTRY Diagnosis, XENTRY DAS) requiring fewer manual intervention from your mechanics.
* except smart model #1
Automatic SCN coding and VeDoc reverse documentation
After the programming of the control unit, the SCN coding (if permitted by the control unit) as well as the reverse documentation will run automatically in the VeDoc Vehicle Documentation System. Any changes made to the vehicle or the control unit software are updated on the VeDoc vehicle data card.
Single sign-on for convenient working (Single-Sign-On)
Once you are logged into one of our workshop applications (e.g. XENTRY Flash, WIS etc.), no further sign-on to the central online systems is required, resulting in smooth workflow in your workshop. The user is logged out of the online systems only after one hour of inactivity.
Diagnosis User Rights
New diagnosis user rights as of 06/2020
With the introduction of the E-Class facelift and the new S-Class, a new security concept is being introduced, which will also have a significant impact on the use of XENTRY Diagnosis software.
As of the 06/2020 data release, a prompt to enter a personalised user name and password will appear when accessing the new E-Class and S-Class. It is not possible to diagnose these vehicles without entering this information. This means that these vehicles can no longer be repaired/diagnosed without diagnosis access authorisation. Every user must go through an identification process in order to acquire the corresponding user rights for the facelift of the E-Class and subsequent models. Please note that it is no longer possible to diagnose these model series with a XENTRY Diagnosis Kit 2. You will need a XENTRY Diagnosis Kit 3 as a minimum.
A distinction is made between two types of user rights:- XENTRY Standard Diagnosis (for diagnosis users without XENTRY Flash authorisation, e.g. for reading and erasing fault memories)
- XENTRY Flash user (corresponds to the current XENTRY Flash user)
Please use one of the following options:
1. XENTRY Flash authorization:
Both XENTRY Flash-roles (Standard-Flash role and Extended Flash role for alle CeBAS vehicles) can be applied via UMAS.
Each user must independently carry out a one-time identification via UMAS to get the Flash roles.
2. XENTRY Standard Diagnosis rights:
Every diagnosis user must independently request the Standard Diagnosis rights via https://umas.mercedes-benz.com/umas and run through the one-off identification process. It may also be necessary for the market-specific ISP support to create the user in GEMS if they do not yet have a user ID.
What is certificate-based diagnosis and why was it introduced?
The vehicles are developing ever gradually into a "mobile computer". This in turn makes the vehicles the target object for hacker attacks and misuse. The number of news items in the press has grown massively. UNECE regulations will, in future, require protection of the vehicles. Mercedes-Benz is also introducing corresponding security measures.
To help protect against any unauthorized diagnosis access, the new Mercedes-Benz vehicle software architecture is now available with user-related security certificates.
Which vehicles are affected?
Certificate-based diagnosis was introduced in E-Class facelift vehicles (model series W213 facelift) with individual control units. The S-Class W223 saw the full introduction.
In future, all new model series and facelifts will be equipped with certificate-based diagnosis.
What changes have been made to the diagnosis?
In future, to enable diagnosis to be performed, you will require a certificate provided by the manufacturer. At the start of a diagnosis session, this certificate is exchanged between the tester and the vehicle. This process is filed in the tester application and it runs in the background.
Where can a certificate be obtained? What is the registration process like?
You are an independent workshop:- If you own a XENTRY Diagnosis Kit 3 or 4, or if you use XENTRY Pass Thru EU, the certificates are provided by Mercedes-Benz AG.
- If you own a diagnosis tool from an independent manufacturer, the certificates are provided by the tool manufacturer, if it has concluded a corresponding agreement regarding the use of data with Mercedes-Benz AG.
You are a diagnosis tool manufacturer:
You are a technical inspection agency or an official bureau:
Which costs will be incurred by a customer?
The certificates are made available by Mercedes-Benz AG to all customers free of charge.
Which data are required? (Personal reference/identification etc)
This is dependent on the level of access involved.- Read access authorizations are bound to an organization and they must be issued for an organization/service operation
- Write access authorizations are personalized and require previous personal authentication - either at Mercedes-Benz AG or at the independent tool manufacturer.
What can still be read out and is still available without restriction through OBD? Which functions can I no longer perform without a certificate?
OBD-II functions (SAE J1979) are still available without any restrictions.
For all further functions, diagnosis certificates are required that are either bound to an organization or to a person, depending on the level of access authorization involved.
|
|
|
XENTRY Diagnosis Lite |
|
Posted by: HackMaster - 07-17-2024, 09:31 AM - Forum: XENTRY Diagnosis Lite
- No Replies
|
|
What does XENTRY Diagnosis Lite have to offer?
Exclusively for independent workshops, we offer a special diagnostic solution for standard PCs: XENTRY Diagnosis Lite.
You can operate this voluntarily offered product variant on a standard PC. The scope of delivery includes the standard XENTRY Diagnosis VCI hardware to communication with the vehicle.
Who may order XENTRY Diagnosis Lite?
Exclusively for independent operators based on the EC regulations (715/2007, 692/2008, 595/2009, 582/2011, 64/2012 and 2018/858). In order to process your request as quickly as possible, we require an evidence confirmation that you belong to the authorized group of persons (motor vehicle workshop or other company dealing with motor vehicle repairs). This requires the upload of relevant documents (e.g. trade licence, entry in the commercial register, verification of professional qualification in the motor vehicle trade, or another official document proving the purpose of the business).
What do I have to consider when ordering XENTRY Diagnosis Lite?
IMPORTANT: - XENTRY Diagnosis Lite can only be ordered for a standard PC that does not have an active StartKey/contract.
- Customers with an active StartKey/contract for a XENTRY Pass Thru EU system cannot order XENTRY Diagnosis Lite for the same hardware ID. They must always use another unoccupied standard PC for this purpose or wait for the contract end of the XENTRY Pass Thru EU system.
Prices XENTRY Diagnosis Lite
The purchase of XENTRY Diagnosis Lite consists of a fixed and a variable price component.
Fixed price component- Product-specific annual flat user fee for online operating costs and the use of support services
(Only for a contract renewal - not for a new order)
- One-time hardware costs for the XENTRY Diagnosis COM Kit (VCI incl. supplements)
Variable price component- Consumption of the purchased time credit units for the use of diagnostics data
- Automatic management of the use time credits (by the diagnostics application)
- A credit unit is activated when the diagnostics system is opened and continues to run until it expires even after having ended the diagnostics session or after having changed vehicles
+ Show specifications
Scope of functionality and diagnosis in XENTRY Diagnosis Lite- Quick test
- Basic diagnosis (actual value, actuations)
- Commissioning (incl. flashing, coding and parameterization)
- Fault memory reading / deleting
- Guided diagnosis
- Functional diagnosis
- Repair forecast
- Diagnosis for all control units for all model series from 2004 (XENTRY and DAS series / no HHTWIN)
Scope of delivery
For a new order of XENTRY Diagnosis Lite, the following components are included in the XENTRY Diagnosis COM Kit:
1. XENTRY Diagnosis VCI
2. WiFi stick
3. OBD cable (16-pin)
4. USB cable (5m)
5. User information and safety instructions
6.Digital components (software, manual, help cards)
Please note:
XENTRY Diagnosis Lite enables you to perform diagnostics for vehicles of all XENTRY Diagnosis series from model year 2004 onwards.
XENTRY Diagnosis Lite has a contract period of 12 months. The XENTRY Diagnosis COM Kit (VCI) is acquired as a purchase device. The purchase of the software as well as software updates, the possibility to access diagnostic data via time credits and the authorization to use support services ends after 42 months and can be claimed beyond this, as long as the support of the hardware has not been discontinued. Annual usage fees must be paid for continued use of the diagnostic data over the entire contract period.
Important note:
Please note that XENTRY Diagnosis Lite can only be ordered by users with business domicile within the European Union plus Iceland, Liechtenstein, Norway, Switzerland, United Kingdom of Great Britain and Northern Ireland.
Your benefits at a Glance:- You will receive a software and hardware solution from us that is coordinated with each other and supports all Mercedes-Benz passenger cars, VAN and smart models from year 2004 onwards (except smart model #1). You are therefore not limited to Euro 5 and Euro 6 certified vehicles as with XENTRY Pass Thru EU.
- You can purchase the XENTRY Diagnosis VCI, which previously could only be purchased in conjunction with the XENTRY Diagnosis Pad/Pad2, and run it with the XENTRY Diagnostics Open Shell software on your standard computer.
- Communication between the software and the XENTRY Diagnosis VCI is proven, faster and more stable than with any other pass-thru capable VCI.
- You receive software and hardware support* throughout the contract term.
*Hardware support refers to the XENTRY Diagnosis COM Kit (see scope of delivery).
What are the system requirements?
The requirement for using XENTRY Diagnosis Lite is a unique hardware-dependent StartKey.
After having installed the basic setup (using the download link in Mercedes-Benz B2B Connect) you can also order the StartKey from Mercedes-Benz B2B Connect. The hardware ID required to order the StartKey can be selected using the "ConfigAssist" tool in "System Data".
By the way: The StartKey will also make it possible for certain end devices (e.g. laptops) to run diagnosis applications using the unique hardware ID.
Also keep in mind:- Administrator rights for installation and updates
- Personalized login incl. standard diagnosis right (compulsory login procedure)
- Windows compatible PC or Laptop with Intel i5 processor or better, or similar type
- Operating system: Windows 10 (64 Bit) or Windows 11 (64 Bit)
- Minimum of 8 GB RAM (16 GB recommended)
- Minimum of 150 GB free HDD, Solid State Drive (SSD) recommended (for performance and mechanical robustness)
- Browser: Edge for Windows
- One USB 3.0 port to connect XENTRY Diagnosis VCI via USB cable
- One free USB port for the WiFi stick for wireless communication between diagnosis PC and VCI
- Broadband Internet access via LAN/WiFi
- Microsoft .NET 4.0 (or higher) installed (http://www.microsoft.com)
- Several URLs and Ports unlocked in the local or network firewall / proxy (see table below)
Please note:
A credit unit retains its validity following the end of the diagnosis session or after having changed vehicles until it has expired. Time credit purchased in error or that is no longer required cannot be returned or refunded. Any time credit that has not been used or activated once the contract has expired cannot be refunded. However, credit is transferred if you extend the contract.
Your Notes on use
If you would like to use diagnosis content, you require a permanent online connection for the following:- Access to diagnosis data (carried out per diagnosis session)
- Checking access authorizations for data contents (StartKey)
- Checking contractual data
Further requirements:
The following URLs and ports must be enabled for a XENTRY Diagnosis Open Shell system in the firewall or in the proxy server. Please speak to your IT administrator and ensure that everything has been enabled.
Purpose
URL/Domain
Port
XENTRY Portal
https://xentry.mercedes-benz.com/
443 (https)
XENTRY WIS
https://retailfactory.mercedes-benz.com/iri-gui/
443 (https)
XENTRY Operation Time
https://xentry.mercedes-benz.com/xot/
443 (https)
GoToAssist
(For provision of remote support)
http://gotoassist.com
https://gotoassist.com
https://goto.com
80 (http)
443 (https)
Service24h Europe
https://compass.i.daimler.com/m4t
443 (https)
XENTRY Tips
https://xentry-tips.mercedes-benz.com/neo-reader/index.html
443 (https)
Windows Update Links
http://windowsupdate.microsoft.com
(Enabling required for *.microsoft.com)
80 (http)
XENTRY (AKT)
https://aftersales.mercedes-benz.com/
443 (https)
XENTRY Flash
https://aftersales.mercedes-benz.com
(For control unit commissioning)
443 (https)
XENTRY Diagnosis Domains
For operation of the XENTRY Diagnosis Software with and without RDS, the following domains must always be accessible and must not be blocked, even if no communication has taken place over them for a longer period of time:
- *.daimler.com
- *.daimler.de
- *.mercedes-benz.com
- *.mercedes-benz.de
- *.corpinter.net
- *.akamaihd.net
- *.fastsupport.com
- *.go2assist.me
- *.gofastchat.com
- *.gotoassist.com
- *.gotoassist.at
- *.gotoassist.me
- *.goto.com
- *.helpme.net
- *.logmeinrescue.com
- *.tokbox.com
- *.opentok.com
- *.pingone.eu
- *.pingidentity.eu
- *.startekinfo.com (MBUSA)
- *.microsoft.com
- *.windowsupdate.com
- *.windows.com
- *.time.windows.com
80 (http)
443 (https)
123 (UDP)
AddOns
http://openshell.aftersales.daimler.com/msi-updates/*
80 (http)
443 (https)
Retail Data Storage to the Internet- *.daimler.com
- *.mercedes-benz.com
- *.corpinter.net
- *.akamaihd.net
80 (http)
443 (https)
XENTRY Diagnosis to Retail Data Storage
80 (http)
443 (https)
9000 (http)
7001 (tcp)
7002 (tcp)
- Hide specifications
IMPORTANT - New compulsory Login procedure
Our new security concept secures access to and use of the XENTRY Diagnosis software in two stages:
You log in with your personal user ID and password, and you also need the standard diagnostics role.
You apply for this via the UMAS platform.
Prerequisite: You have successfully completed the identification procedure. You can also start this via UMAS, unless a local identification procedure is used in your market. You will receive your role via the corresponding button on the platform. Basically you only have to go through the identification process via UMAS/IDnow once.
This security level applies to all brands and divisions, i.e. all diagnostic users must log in personally to the diagnostic device. This means that anonymous access to vehicles and back-end services is no longer possible.
In principle, you will always need the standard diagnostics role for all diagnostic activities. To control unit commissioning from series 213 model update 2020 as well as 223, the new extended XENTRY Flash role is required.
The respective rights are assigned as follows:
1. XENTRY standard diagnostic rights:
Each diagnostic user must independently apply for the standard diagnostic right via https://umas.mercedes-benz.com/umas/ and carry out the one-time identification. If you are an independent service provider (independent workshop) and do not yet have a user ID, you can apply for a respective one via the following link: https://umas.mercedes-benz.com/orgprocess/.
Please select "New Registration" if you are not yet registered as a Mercedes-Benz Group AG customer. Or select "Registered Organization" if your organization is a registered customer but you do not have a User ID.
Please contact your local IT administrator. Alternatively, you can contact support via the support button on the very right side of UMAS page (headset icon).
2. XENTRY Flash authorization:
Both XENTRY Flash-roles (Standard-Flash role and Extended Flash role for alle CeBAS vehicles) can be applied via UMAS.
Each user must independently carry out a one-time identification via UMAS to get the Flash roles.
More information on XENTRY diagnostic user rights and Flash rights can be found here.
|
|
|
|
|
