BMW All Keys Lost:
What Actually Needs to Happen.

All keys are lost. The vehicle sits. The usual response is to call a locksmith, who quotes for a new key — sometimes R3,000, sometimes R8,000, sometimes more. What most customers don't know is that the locksmith quote is not the complete picture. On a BMW with a CAS or FEM system, making a new key when all keys are lost is not a key-cutting problem. It's a security system engineering problem.

The hardware — the key blade, the transponder, the physical remote — is the easy part. The hard part is the cryptographic handshake between the key, the CAS (or FEM/BDC), and the DME. Without the correct data in the correct place, the new key will be cut, the remote will be programmed, and the engine still will not start.

How BMW immobiliser pairing actually works

On BMW E-series vehicles, the Car Access System (CAS) is the security hub. The CAS holds the master keys' learned data and the ISN — the Immobiliser Serial Number — which is a unique value shared between the CAS and the DME. The DME checks this value on every start attempt. If the DME's ISN doesn't match the CAS's ISN, the starter fires but the engine will not run.

On F-series vehicles, the FEM (Front Electronic Module) or BDC (Body Domain Controller) replaces the CAS. The principle is the same — the ISN is shared between the FEM/BDC and the DME — but the hardware and access methods are different, and the encryption is significantly stronger.

When all keys are lost, the normal "add a key" workflow doesn't apply. You cannot add a key to a system that has no authenticated session. You need to access the CAS or FEM/BDC at the EEPROM level, read the existing security data, and use that data to programme a new key and re-synchronise the ISN.

E-series: CAS EEPROM approach

On E-series BMW (E46, E90, E60, E87, X5 E70 etc.), the CAS can usually be accessed via EEPROM. The CAS module is removed, the EEPROM chip is read via programmer, and the key data is extracted. From this data, a new transponder can be prepared, written with the correct values, and a new key can be programmed into the CAS via OBD or bench.

The ISN is simultaneously extracted from the CAS EEPROM and verified against the DME. If the DME has been replaced previously — common on high-mileage vehicles — the DME EEPROM may also need to be read to confirm the ISN matches. A mismatch here is why many "successful" key programming jobs still don't start the engine.

Step 1: Read CAS EEPROM
✓  CAS removed, EEPROM read via programmer
✓  ISN extracted: XXXXXXXXXXXXXXXX
✓  Key data structure identified

Step 2: Verify DME ISN
✓  DME EEPROM read
✓  ISN matches CAS — no DME intervention needed

Step 3: Prepare new transponder
✓  Transponder written with correct data
✓  New key programmed into CAS via OBD

Step 4: Test
✓  Engine starts — IMMO off
✓  Remote functions coded
✓  Job complete

F-series: FEM/BDC — significantly more complex

On F-series BMW (F30, F10, F20, X5 F15 etc.), the FEM or BDC is soldered to the vehicle body and is considerably harder to access. The encryption used in F-series key management is stronger, and the key programming process requires either online access to BMW's server (dealer-only) or offline EEPROM-level work on the FEM/BDC itself.

EEPROM access on a FEM/BDC requires either desoldering the memory chip or using an in-circuit programmer with the correct pinout. This is bench work — it is not done in the vehicle. The FEM/BDC is removed, the EEPROM is accessed, the relevant data is extracted, and the process continues from there.

Year and hardware revision matter significantly here. Late F-series and G-series vehicles use encrypted EEPROM and FBS4 (Fleet Backend System 4) immobiliser protocols. This is outside current tooling for most independent workshops and requires manufacturer access. DAC will confirm feasibility based on VIN and year before any work is agreed.

What you need to provide

For an all-keys-lost BMW job, the information that determines what's possible and what it will cost:

• VIN — full 17-digit VIN. Platform, year, and CAS/FEM type are derived from this.
• Series and year — E-series, F-series, or G-series. Year determines encryption level.
• Any service history — was the ECU or CAS/FEM ever replaced? If so, by whom?
• Proof of ownership — licence disc, registration papers, ID. IMMO-off and all-keys-lost work requires proof of ownership and a signed agreement. No exceptions.

Send the VIN before removing anything

Every all-keys-lost BMW job starts with a feasibility check. Send the VIN and year via WhatsApp. DAC will confirm the platform, whether the job is viable, what the process involves, and what documentation is required. No surprises. No courier costs on a job that can't be done.

The work is nationwide. The module comes to the bench. If it's feasible, it gets done correctly — ISN verified, new key prepared, vehicle starts and drives.