Jump to content
Sign in to follow this  
breeves002

How To Access Advanced Ford Pids With A Scan Tool

Recommended Posts

So for the few of you that care about this, I decided to modify a cheap ELM327 clone to read both MS and HS-CAN data. Normally ELM327 can only read HS-CAN data. This writeup will show you how to modify an ELM327 device so it will read MS-CAN.

Thanks to tech advisor behlinla for his help in teaching me some of this info and editing the article!

Info on CAN bus:

Note: Only 2004+ vehicles will have CAN bus (basically if you have digital display in your instrument cluster). OBD-II cars before that used the SAE J1850 PWM protocol, which will still work with FORscan.

Now some of you may be asking: "What in the heck is this guy talking about... MS and HS-CAN???" CAN stands for Controller Area Network, and it's a digital network that connects different modules in your car much like computers would be connected to a network (LAN) in your home or workplace. Accessing the data and self-tests on this network will be useful if you want to troubleshoot problems with something other than the engine (like with the ABS or air bags for example). In the past you used to have to buy very expensive scan tools and software to view this data, but now you can can have this information at your fingertips for as little as $10!

There are two separate CAN buses on most vehicles before 2013, called HS-CAN (High Speed) and MS-CAN (Medium Speed). HS-CAN is used for 'priority' data, like engine parameters (PCM) and critical communication between safety modules like the ABS and RCM. MS-CAN is used more for things inside the car like radio, climate, and lighting control.

In new cars (2013+), nearly every function and control goes over a CAN bus. They have four CAN buses (3x HS and 1x MS) because there is much more data flying around. Things on CAN would be your headlamp switch, drivers door switches, hazard lights, turn signal stalk, dimmer switches, seat adjustments, mirror adjustments, any button on your dash, you name it! I need to scan a 2013+ Ford to actually find out what modules there are!

The HS and MS-CAN buses are bridged together in the instrument panel cluster (IPC) so data can be shared between networks if required.

HS-CAN modules:

-PCM (Powertrain Control Module)

-ABS (Anti-lock Brake System, includes AdvanceTrac and Traction Control)

-RCM (Restraint Control Module, AKA airbags and seatbelts)

-AWD (All Wheel Drive module, if equipped)

-OCSM (Occupent Classification System Module, AKA Passenger Seat Sensors)

-PAM (Parking Aid Module)

-IPC (Instrument Panel Cluster)

-PSCM (Power Steering Control Module, Hydraulic PS only)

-SECM (Steering Effort Control Module, Electric PS only)

-CCM (Cruise Control Module)

-APIM (Accessory Protocol Interface Module AKA SYNC)

MS-CAN modules:

-SJB/BCM (Smart Junction Box/Body Control Module)

-HVAC (Heating, Ventilation & Air Conditioning module)

-ACM (Audio Control Module)

-DSP (Audio Digital Signal Processing Module)

-DSM (Driver Seat Module)

-DDM (Driver Door Module)

-RFA (Remote Function Actuator Module)

-DCSM (Dual Climate Controlled Seat Module)

-SDARS (Satellite Digital Audio Radio Service)

-FCIM (Front Controls Interface Module)

-FDIM (Front Display Interface Module)

-ILCM (Interior Lighting Control Module)

-HCM-2 (High Beam Control Module)

-SOD-R/L (Side Obstacle Detection Control Module AKA BLIS, a module for each side of the vehicle)

-IPC-MS (Instrument Panel Cluster)

-GPSM (Global Positioning System Module)

-APIM (Accessory Protocol Interface Module AKA SYNC)

There may be other modules on other cars or less modules on some cars. Here's a diagram from a 2011 that show all the modules connected to the CAN: http://revbase.com/B...adPdf?id=875110

How to modify your ELM327:

A bunch of us have cheap eBay ELM327 Clones. Stock they only connect to HS-CAN and will not be able to access MS-CAN. The newer STN1170 chips found in some scan tools already have support for MS-CAN (and GM single wire CAN), so you're set if you have one of those!

It's very simple to modify the device to allow use of MS-CAN features. You need a dual position, dual pole (DPDT) switch. Flipping the switch will direct either the HS- or MS-CAN terminal pair in the DLC to the input of the ELM327 chip.

Pt3_Throw.jpg

Instructions adapted from here: http://forscan.org/howto.html

Step 1: Crack open the clone or your ELM327 Device. Usually there are 4 screws under the sticker.

Step 2: Unplug the OBD-II connector and un-solder wires 6 and 14 (mark them so you know which is which).

Step 3: Solder 2 new wires to pins 6 and 14 (HS-CAN pair) on the OBD-II connector.

Step 4: Solder 2 new wires to pins 3 and 11 (MS-CAN pair) on the OBD-II connector.

Step 5: Solder the wires originally on pins 6 and 14 to the two middle poles on the switch.

Step 6: Solder the new wires on 6 and 14 to one side of the switch (be sure the polarity is correct. Pin 6 will match up with the one originally on pin 6)

Step 7: Solder the new wires on 3 and 11 to the other side of the switch. Be sure to keep pin 3 with the one originally on pin 6 for polarity purposes.

BE SURE NOT TO MIX UP MS-CAN AND HS-CAN AND OBSERVE POLARITY!!! Bad things happen if you do that. I used RED wires for HS-CAN and Black wires for MS-CAN.

A few diagrams of how it works:

Diagrams are showing the dash connector view, reverse for the scan tool view!

elm-mod.png

Ford_OBD2.png

Pictures of the process and final product:

My ELM327 motherboard:

image-3_zps43c08095.jpeg

Wires soldered onto the OBD-II connector:

photo2_zps33aaff97.jpg

Switch installed (oops forgot some heat shrink):

photo1_zps6e6ba79e.jpg

All in the little package waiting to be put back together, also the crappy hole I cut:

photo12_zpsf29dcfae.jpg

Finished product!:

photo32_zps5c345d89.jpg

HOW TO ACCESS MS-CAN VIA FORSCAN:

Now when you open FORScan it will ask you if you have an MS/HS CAN switch. SAY YES! You may have to delete your cars profile, close the program, re-open it, then connect again for it to ask you the question. Annoyingly I have to do this almost every time I use the program!

HSMSSwitch_question.jpg

Please feel free to PM me with any questions. I'll be happy to sell anyone one of these modified for $29 including shipping.

FORSCAN.org - Download it today. May be the best free software out there!

Once you get connected you can do everything you can do on OBDWiz and ScanXL (pretty much), but you can also run self test. Over both HS-CAN and MS-CAN, here are the modules/tests I can run (listing both HS and MS CAN modules):

ScreenShot2013-07-16at20419PM_zps5c527f26.png

Edited by Devin

Share this post


Link to post
Share on other sites

I use a windows VM. I use ScanXL, OBDWiz, and FORScan for everything. None of them work on mac lol.

You can use it with android as well with the Torque app, but I don't think that supports MSCAN.

Share this post


Link to post
Share on other sites

I use a windows VM. I use ScanXL, OBDWiz, and FORScan for everything. None of them work on mac lol.

You can use it with android as well with the Torque app, but I don't think that supports MSCAN.

VM's never worked well for PPC machines lol.

PowerPC.png

Share this post


Link to post
Share on other sites

LOL. Because the only thing that still uses PowerPC is the XBOX 360!

I also use the GoPointTech BT1 for my iPhone DashCommand app.

Share this post


Link to post
Share on other sites

LOL. Because the only thing that still uses PowerPC is the XBOX 360!

I also use the GoPointTech BT1 for my iPhone DashCommand app.

Not true. The Cell and the Wii and Wii U processors have PowerPC technology. And the CPU cores in the 360's Xenos chip are actually just a slightly tweaked version of the main core in the Cell. IBM sold the technology to Microsoft secretly while happily taking cash from Sony and Toshiba for Cell development.

Yeah, it wasn't a surprise PS4 has an AMD APU lol.

Anyway, this is nice work, Sam!

Share this post


Link to post
Share on other sites

Oops, forgot about the Wii.

The reason everyones going to x86 is because its easier for game developers and costs WAY less.

Thank you :)

Share this post


Link to post
Share on other sites

Added more pics.

I'll post screenshots of accessing MSCAN stuff when I get the chance.

Edited by breeves002

Share this post


Link to post
Share on other sites

So I got this connected to the car and found some of the other modules my car supports. One being the DSM or Drivers Seat module (controls the mirrors too). When I self tested it it moved my chair all around :P like a roller coaster! Also moved the mirrors too.

I notice when my girlfriend drives the car and I hit the "1" to go back to my seat and mirror setting, the drivers mirror never gets back perfectly. Now I know why! There is a sensor malfunction. Another warranty claim...

ScreenShot2013-07-16at20341PM_zps722819b7.png

Edited by breeves002

Share this post


Link to post
Share on other sites

Quite interesting to say the least

  • Like 1

Share this post


Link to post
Share on other sites

As I learn more about what diagnostic power MSCAN really has, or what you can do, I'll let everyone know.

The thing now though is reading trouble codes you may not have even known existed!

P.S. I figured out why I had the auto lamps short to ground code on the GEM in the 2000. When the GEM ran its self test the auto lamps switch was on 'auto', so it thought it was shorted to ground since when it runs the tests the light switch is supposed to be off.

Share this post


Link to post
Share on other sites

This is very cool. I'll have to look into this. Thanks for the info! :)

Share this post


Link to post
Share on other sites

This would have been useful back in the day... But now my car consists of EEC-IV and OBD-II Pre 96 system in the Thunderbird.

  • Like 1

Share this post


Link to post
Share on other sites

Yeah, anything pre-2004 this doesn't really help you with!

Share this post


Link to post
Share on other sites

Bet my 05 Would have loved that!

Share this post


Link to post
Share on other sites

I'm sure it would have! I want someone to test it on a gen 4.5 so I can see what modules go over both HS- and MS-CAN on them! Or if there even is MS-CAN on the gen 4.5's.

Share this post


Link to post
Share on other sites

Well can't do much with that. You won't get much further than trying to jam the module into the nonexistent OBD-II jack! LOL!

Share this post


Link to post
Share on other sites

Well can't do much with that. You won't get much further than trying to jam the module into the nonexistent OBD-II jack! LOL!

Dude, what I'm saying is that I plan on getting a new or at least a lot newer Ford. I am well aware that that this car is OBD 1. :lol: This is good info that I might be utilizing in the future.

  • Like 1

Share this post


Link to post
Share on other sites

Ooooh, well great! I hope to help you with the much newer car! Hope to see a 2010 SHO ;)

Share this post


Link to post
Share on other sites

Or how about a 2015 when they come out.... I hear a rumor about a redesign....

Share this post


Link to post
Share on other sites

Or how about a 2015 when they come out.... I hear a rumor about a redesign....

Yeah, on the Fusion CD4 platform, so it'll be even more cramped on the inside... :(

Share this post


Link to post
Share on other sites

Yeah, I'm not looking forwards to the redesign, but it is what it is. I am looking forward to the possibility of a 2.5/2.6/2.7/3.0 EcoBoost... They should make at least two of those and one will be a 4 cyl and one a 6 cyl. I've heard rumors that the 2.7 V6 will put out 320hp and 375ft-lb!!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×