1. About VFix Live SPA
VFix Live SPA is software for Volvo vehicles on the SPA platform that works via the OBD diagnostic port.
The program allows you to:
  • connect to the vehicle and read the VIN, part number, and serial number;
  • read/modify/write the CEM configuration;
  • obtain PIN codes from dumps and Wireshark files;
  • diagnose electronic units and work with DTCs;
  • work with HCM (headlight control modules);
  • read/erase/write keys;
  • perform service operations on individual vehicle units.
The program requires a stable internet connection. All operations must be performed sequentially.
⚠️ Important: Writing to vehicle electronic control units may cause the unit to malfunction or impair its operation. Before changing the configuration, it is recommended to save the original vehicle configuration to a file.
⚠️ Liability: All operations are performed by the user independently and at their own risk. The user is responsible for the correct execution of actions and any possible consequences. The administration and developers of VFix Live SPA are not responsible for damage to electronic components, vehicle malfunction, data loss, or any other consequences arising from using the program or performing the operations described in this manual.

Paid features are activated upon purchasing and activating a VIN Slot for a specific VIN. For one vehicle, a single VIN Slot ($80) is sufficient, which activates all paid features with no time or number of uses.
CEM identification, vehicle VIN reading (OBD2). Displaying information on the number of keys registered in the CEM. Free
Reading/saving CEM configuration Free
Writing configuration to CEM Paid
Bruteforce KEY PIN Free
Finding PINs from files Wireshark .pcapng Free
Obtaining a PIN from the Volvo-Fix server (if the PIN is available on the server) Paid
Calculating the PIN code from the CEM SPC5646C or SPC5748G dump Paid
Working with HCM Paid
Diagnostics Free
Reading keys. Writing a new or used key with a radio channel to the CEM unit. Deleting all keys from the CEM unit. Paid
Resetting the VCM Battery Counter Paid
Resetting the BCM/VDDM (ABS) configuration Free
To connect VTool to a SPA/CMA platform vehicle, an OBD to Ethernet adapter is required.
You can use Volvo VOE (Volvo OBD to Ethernet) Adapter 9513108 + UTP/FTP/STP cable to the LAN port
Either BMW ENET or another OBD Ethernet adapter
If your PC doesn't have an Ethernet port, you can use a USB Ethernet adapter.
2. Installing the program

2.1 Registration on the website

Before the first launch, you need to create an account.
  1. Open the registration page (Create new account).
  2. Please enter the required data.
  3. ClicRegister.

2.2 Downloading

After registering, VFix Live SPA will be available on the Download page. Download the VFix Live SPA.zip archive.

2.3 Installation and first launch

  1. Unzip the archive to a convenient folder.
  2. Launch VFix Live SPA.exe.
  3. Enter your email and password for your account.
  4. Press Login.
After successful authorization, the main program window will open.
3. Interface

1 - Connection panel

The following are displayed here:
  • Connect button;
  • Connection status indicator;
  • Connection latency (ping);
  • Current vehicle mode (Usage mode);
  • Battery voltage;
  • Battery charge level.
The main program window consists of several main areas

2 - Sections panel

3 - Account and settings

Allows you to switch between the main sections of the program.
Here you'll find:
  • Account information (VIN Slot view);
  • Help button;
  • Interface settings.

4 - Workspace

5 - Logging window

The contents of the selected section are displayed here.
The bottom of the window displays messages about the operations being performed and any errors that occur.
4. Connecting to a car
Before you begin:
  1. Connect the diagnostic cable to the vehicle's OBD connector.
  2. Make sure the cable is connected to the computer.
  3. Launch the program and log in.
  4. Press Connect button.
Upon successful connection, the program automatically reads information from the vehicle.
The logging window should display the message: INFO - Configuration read successfully from Car.
After connection, the program displays vehicle information, battery status, and the current vehicle mode.
We recommend waiting for a stable connection before performing any operations.
Optimal condition:
  • connection indicator — green;
  • ping <10 ms.
Do not start recording operations when the connection is unstable.
5. Working with licenses, VIN slots
VIN Slot is used to activate paid program functions for a specific vehicle..

5.1. Checking available VIN Slots

Click the account button in the lower left corner of the program. The window that opens displays:
  • Available VIN slots;
  • Activated VIN slots;
  • Information on how to use them.
You can also manage VIN Slot through your account page.

5.2. VIN Slot Activation

After connecting to a vehicle, the program detects its VIN. If the account has a free VIN slot, the "Activate extended functions for this VIN" button becomes available. Click it to link a free VIN slot to the current vehicle. Once activated, paid features become available for this VIN. Slots can be purchased on the volvo-fix website.

When you purchase a slot, it will appear as available.

5.3. VIN Slot Deactivation

Before successfully using the paid feature for the first time, you can deactivate it using the Deactivate extended functions for this VIN button. After successfully using the paid feature, VIN Slot deactivation is no longer possible.
⚠️ If a paid transaction was unsuccessful, but the system mistakenly counted it as used, please contact technical support at volvo.fix.service@gmail.com and provide the VIN and a description of the problem.
6. Working with CEM configuration
The configuration section allows you to read, save, modify, and write the CEM configuration. Before modifying the configuration, it is recommended to save the original configuration to a file (the first configuration read is also saved to the Configurations folder).

6.1 Reading the configuration

Click: Read from Car
The program reads the current CEM configuration. Reading is also performed automatically when connected to the vehicle.

6.2 Saving the configuration

To create a backup, click Save current car configuration to File. The configuration will be saved to a .bin file.
⚠️ Do not start changing the vehicle configuration until you have saved the original configuration to a file.

6.3 Loading configuration from file

Load from File — loads a previously saved configuration from a .bin file.

6.4. Initial configuration from the server

Load Initial Configuration from Server - loads the initial configuration for the current VIN, which was read by the program when the car was first connected.

6.5. Changing parameters

In the configuration table, only values ​​in the Value column can be changed.
To undo and redo changes, use the following functions:
  • Undo
  • Redo
You can also save the configuration table as PDF using Print as PDF.

6.6. Writing configuration to CEM

To upload configuration, click Write to Car
Writing the configuration requires the entered CEM PIN.
After confirmation:
  1. Wait for the operation to complete.
  2. Do not disconnect the diagnostic cable.
  3. Do not shut down the program.
  4. Wait for the upload to complete.
  5. Reconnect to the vehicle.
  6. Read the configuration again.
After reconnecting, the new values ​​should be displayed in the table.
If there is no PIN, the program will prompt you to go to the PIN section and enter it.
Before recording, the program will additionally ask you to confirm the correctness of the PIN.
⚠️ If ABS related parameters have been changed, after recording you need to go to the Service section and reset the ABS/VDDM/BCM configuration.
7. PIN page
The PIN section is used to obtain PIN codes for various vehicle modules. The PIN entry page contains fields for CEM, KEY, VCM, and VGM PINs.
Supported:
  • manual PIN entry;
  • getting a PIN from a dump;
  • getting a PIN from a server;
  • getting a PIN from a Wireshark recording;
  • KEY PIN brute-force testing.

Calculate PIN using dump

The program has a built-in calculator for finding the PIN code. The calculator supports files for: (CEM 2016-2018) Data-Flash SPC5646C 64KB for KEY PIN, and CODE FLASH for CEM PIN. For (CEM 2018-2022) with SPC5748G, you need to load the Code-Flash SPC5748G 6080KB dump for KEY PIN, and HSM_DATA 32KB for CEM PIN.
The procedure for calculating the KEY PIN code:
– Depending on which CEM block you are working with, open the Data-Flash SPC5646C* or Code-Flash SPC5748G file.
– Click the "Pin from Dump" button, the received PIN code will be automatically copied to the "PIN" program window.
* CEM units from 2016 to 2018 have two SPC5646C processors on the board. The PIN code is stored in the processor located closer to the center of the board.

Download PINs from Volvo-fix server

Loaded if there is a PIN on the server for a specific currently connected VIN

Get PIN from Wireshark .pcapng

Outputs the found PINs from the recorded packet exchange file.

Bruteforce

Available only for calculating the KEY PIN. Clicking this button starts the PIN search process. It stops when the PIN is found. In the worst case, the search takes approximately 500 hours across the entire space. In the best case, the first random combination will work. The process can be stopped and restarted at any time from the last combination. An internet connection is required to save progress.
8. Working with HCM (Headlamp Control Module)
The HCM section is designed to work with headlamp control modules (Headlamp Control Module) of Volvo SPA vehicles.
When installing a used HCM unit, keep in mind that the same unit can be programmed as either left (HCML) or right (HCMR). Therefore, before programming, it is essential to verify which side the installed unit is assigned to.
Important: When working with a used HCM, it is recommended to connect and program only one headlight at a time. The second headlight must be disconnected from the vehicle. This prevents the vehicle from simultaneously detecting two units of the same type—for example, two HCML or two HCMR.

Connecting and defining the HCM side

  1. Connect the diagnostic cable to the vehicle;
  2. Connect only one headlight with the HCM being installed;
  3. Disconnect the second headlight from the vehicle's electrical outlet. If the vehicle is already assembled and disconnecting the headlight is physically impossible, you can disconnect the fuses for the corresponding headlight;
  4. Connect to the car via the program;
  5. Check which block is detected by the program:
The correct result after installing two headlights:
Left headlight → HCML → 0x1BB3
Right headlight→ HCMR → 0x1BB4
The side a used unit identifies depends on its previous programming. For example, a unit physically installed in the left headlight may be identified as HCMR even though it was previously used on the right headlight of another vehicle.

Reading and writing HCM configuration

Next configuration operations are available in the HCM section:
Read HCM configuration - reads the current configuration from the HCML and HCMR blocks
Start programming - writes the configuration bytes entered into the program fields to the selected HCM.
Selecting a block to write to:
If only one HCM is defined in a vehicle, the configuration is written to that block. If both blocks are defined, selecting Left writes to the HCML, and selecting Right writes to the HCMR.
⚠️ Important recommendations
  • Do not connect both headlights simultaneously when initially configuring unknown used HCMs.
  • First, fully configure one HCM, then disconnect it and move on to the second.
  • Before flashing, be sure to check how the program identifies the HCM side.
  • If the HCM is installed on the left, it should be detected as HCML; if on the right, as HCMR.
  • To write the configuration, use the config string from the sticker on the corresponding headlight.
  • Do not attempt to program the HCM while the vehicle is simultaneously detecting two HCMs on the same side.
HCML Initial Configuration Bytes (Example)
For example, with the initial configuration for HCML 57-61-65-49-5F-0B-3A-12-01-67, to change it to HCMR, you need to select the right side in the drop-down list 2 (R). The last byte of the checksum will be calculated automatically.
Configuration bytes to write as HCMR
Identifying headlight as HCMR after programming.
9. Diagnostics
The "Diagnostics" section is designed for testing the vehicle's electronic control units (ECUs), reading diagnostic trouble codes (DTCs), viewing identification information, and generating a diagnostic report.
Important: Do not disconnect the diagnostic interface or turn off the ignition while performing diagnostic operations. Some operations are performed sequentially for multiple units and may take some time.

0. Settings

The default settings are shown in the figure. To read a larger number of errors, the bit mask is modified.

1. Refresh ECU list

Determines which units are available for diagnostics, including part/serial numbers and mileage. All units specified as mounted in the configuration will be in the ECU list. Those that responded will be available for reading and clearing DTCs. Units that did not respond will be grayed out. Mileage and part/serial numbers will be in the table.

2. Read/clearDTCs

Reading/clearing errors for all units. To read/clear errors for a specific unit, click on the unit in the ECU list and click the button from the drop-down list.
The ECU list will display the number of errors by block and a color indicating the severity of the most critical error. The All DTCs table will display a list of errors with a description and corresponding response mask. To filter the list by block, use the drop-down list after the Settings button.
Criticality is determined based on priority and the presence of a warning indicator.
Red color means the highest criticality of the error, orange – high, yellow – medium, blue – low, gray – information error (warning).

3. Configuration issues report

Creating a .pdf file displaying incorrect configuration parameters.

4. Print DTCs/ idents report.

Saving a report as a .pdf file with DTC of all blocks, part-serial numbers.
10. Service

10.1 Keys

SPA/CMA platform vehicles for different markets use the same antenna, part number 31346697. This means they can work with both 433MHz and 315MHz keys.
The software can program both new and used keys. Pre-resetting the used key is not required. After programming the key, the remote control buttons will also work.
All key operations require a completed KEY PIN from the CEM unit. To find the PIN, you can read the SPC5646C (CEM 2016-2018) or SPC5748G (CEM 2018-2022) processor. A list of read keys will be displayed to the right of the buttons.
How to write a key
  • Enter the PIN code to write the key in the KEY program window.
  • Place the key next to the antenna (the antenna is located in the cup holder in the center console).
  • Press the "Write Key" button.
Sometimes, original keys suddenly stop working (for example, due to a dead battery). In this case, you can try reprogramming the non-working key. If you're reprogramming a key that's already programmed to the vehicle, you must first erase all keys from the CEM unit (use the "Erase All Keys" button). After this procedure, you'll need to reprogram all keys to the vehicle.
The following cars are supported for working with keys:
– Volvo S60 2018-2022
– Volvo S90 2016-2022
– Volvo V60 2018-2022
– Volvo V90 2016-2022
– Volvo XC40 2017-2022
– Volvo XC60 2017-2022
– Volvo XC90 2016-2022
Note: For vehicles after 2022, the VGM unit PIN is additionally required for key programming.

10.2 Reset

Sending a reset command to the selected unit

10.3 VCM battery counter reset.

Requires a completed VCM PIN

10.4 Reset BCM / VDDM configuration

Resetting the ABS configuration. This is necessary when changing configuration parameters related to the ABS.