Audio, Video & Electronics Post questions, reviews, and other general info about the G's Nav, sound system, satellite radio or aftermarket stereos

Infiniti/Nissan Nav system Hardware Hacking Thread

Thread Tools
 
Search this Thread
 
Old Oct 8, 2018 | 04:42 PM
  #1  
sev1980's Avatar
sev1980
Thread Starter
Registered Member
 
Joined: Mar 2016
Posts: 91
Likes: 17
Infiniti/Nissan Nav system Hardware Hacking Thread

Thanks to the lack of support from infiniti (useless as usual). And after chasing Apple's tail for months, and getting nowhere with the incessant bluetooth issues. I've decided to do my best to take matters in my own hands and try to find a fix for the constant bluetooth issues the Nissan/Infiniti infotainment systems have. There is very limited information on there and I'm starting this thread as a highly technical place for like minded individuals to meet and reverse engineer/understand how this infotainment system works.

I've taken the nav unit apart in my 2010 EX35 and found a bunch of information through research not only at looking at the chips on the unit but also hex editing the update files on the nav update DVDs to glean more info. I'm not a hardware hacker but I try to be technical. My hopes is to have others join in and help that know more about real time OS's and hardware so we can get to the bottom of this.

Here's what I know so far:

https://fccid.io/ANATEL/01148-14-047...CA47462651/PDF

The units are designed by XANAVI which is a subsidiary of Clarion. Seems that these units were designed around the 2008-2009 timeframe based on FCC filings.
They have a R7770 CPU made by Renesas. Runs around 400mhz and has a GPU. Looks like it uses an instruction set compatible with Hitcachi SH-4

Link to Renesas for CPU Info:
https://www.renesas.com/us/en/soluti...oc/sh7770.html

From what I can tell there is 1GB of DDR ram on the main board.

They run VxWorks as their real time OS.

The bluetooth units are made by ALPS electronics and they use a specific module that's designed by clarion only for this unit. Part number is UGZZ5-611B or C

The XANAVI part number on this unit is HGZ0024 (bluetooth 1.2) and HGZ0025 (Bluetooth 2.0), both are pin compatible.
HGZ0024 manual from clarion

https://fccid.io/SJ2HGZ0024/Users-Manual/manual-1071901

HGZ0025 Manual from Clarion:


More to come as I keep digging. If anyone cares to jump in and help, lets talk!
Reply
Old Oct 8, 2018 | 04:46 PM
  #2  
sev1980's Avatar
sev1980
Thread Starter
Registered Member
 
Joined: Mar 2016
Posts: 91
Likes: 17
Been doing a bunch of research, and looks like there is a newer bluetooth module used on these units that supports bluetooth 2.0.

My 2010 EX has the HGZ0024 bluetooth unit which seems to be bluetooth 1.2. The found that there is a HGZ0025 module that clarion's documentation says is bluetooth 2.0. My guess is that the later nav units (2013+) use this module and that's why we dont hear of people with later infinitis having the same problems. Going to do some more digging. I'd like to get my hands one one of these modules but in order to do so I'd have to find a newer unit in the junkyard or such. Sadly my local boneyard had a 2013 and a 2015 infiniti in it but at the time I didnt think to rip out the head unit. Which was literally just sitting there.

This is all just a guess at this point My thought is if we can just transplant the bluetooth module to our car, there shouldn't be a need for any programming or coding, since nothing in the head unit changes except for the bluetooth module. Just a theory for now. More as I discover more.

Unfortunately I haven't been able to find any newer bluetooth firmware past e0450 for our units. So maybe trying to score a newer module might be the way to go.
Reply
Old Nov 13, 2018 | 10:19 PM
  #3  
sev1980's Avatar
sev1980
Thread Starter
Registered Member
 
Joined: Mar 2016
Posts: 91
Likes: 17
scored another nav unit from a 2012 g37 at the junk yard. Took it apart. Looks like it has the same BT module mine does. Going to see if i can use this as my test platform, vs messing up the unit in my ex35

I also did some research and I noticed that later model G37 owners dont seem to have the same issues as we do. Turns out their units have an updated blueototh module that supports bluetooth 2.0 + EDR

Here is that part. It looks like it is interchangeable with the ones in our unit. The next step is to try to get my hands on one.


https://fccid.io/SJ20608137/Users-Manual/manual-1632017
Reply
Old Nov 14, 2018 | 09:52 AM
  #4  
Baadnewsburr's Avatar
Baadnewsburr
Super Moderator
iTrader: (3)
 
Joined: Oct 2014
Posts: 1,784
Likes: 320
From: Toronto
Interesting. Would love to hear about pre-2010 units too especially if the Bluetooth module can be swapped to enable audio streaming instead of just Handsfree.
Reply
Old Nov 14, 2018 | 01:47 PM
  #5  
sev1980's Avatar
sev1980
Thread Starter
Registered Member
 
Joined: Mar 2016
Posts: 91
Likes: 17
Originally Posted by sev1980
scored another nav unit from a 2012 g37 at the junk yard. Took it apart. Looks like it has the same BT module mine does. Going to see if i can use this as my test platform, vs messing up the unit in my ex35

I also did some research and I noticed that later model G37 owners dont seem to have the same issues as we do. Turns out their units have an updated blueototh module that supports bluetooth 2.0 + EDR

Here is that part. It looks like it is interchangeable with the ones in our unit. The next step is to try to get my hands on one.


https://fccid.io/SJ20608137/Users-Manual/manual-1632017
After more research, the bluetooth module might not be interchangeable with our units. It looks like the pinout is similar but the way audio is output to the unit is different. The old one uses a SIO bus (never heard of it) but the newer modules output PCM. Maybe it's just a matter of symantics in the documentation. Not sure at this point.

Can anyone with a 2013+ G37 that has nav help me by getting the firmware version listed? That should be an easy way to tell. I can give you instructions on how to check.
Reply
Old Nov 14, 2018 | 02:37 PM
  #6  
ILM-NC G37S's Avatar
ILM-NC G37S
Registered Member
10 Year Member
iTrader: (3)
 
Joined: Apr 2014
Posts: 4,863
Likes: 1,616
From: NC
Is this the info you need?
2014 Q60 NAV
Reply
Old Nov 14, 2018 | 02:39 PM
  #7  
sev1980's Avatar
sev1980
Thread Starter
Registered Member
 
Joined: Mar 2016
Posts: 91
Likes: 17
yes that is exactly it!

looks like it is totally different. Could you also send the unit firmware version? Looks like you are not from the US?
Reply
Old Nov 14, 2018 | 02:53 PM
  #8  
ILM-NC G37S's Avatar
ILM-NC G37S
Registered Member
10 Year Member
iTrader: (3)
 
Joined: Apr 2014
Posts: 4,863
Likes: 1,616
From: NC
I am in the US. JDM switch assembly. This?
Reply
Old Nov 14, 2018 | 02:55 PM
  #9  
sev1980's Avatar
sev1980
Thread Starter
Registered Member
 
Joined: Mar 2016
Posts: 91
Likes: 17
thats it! Thanks. Looks like it might be a completely different setup between the two units. I wonder what the hardware changes are.... hmm...

the firmware version on mine is x1ucblahblah..
Reply
Old Nov 14, 2018 | 02:56 PM
  #10  
sev1980's Avatar
sev1980
Thread Starter
Registered Member
 
Joined: Mar 2016
Posts: 91
Likes: 17
Originally Posted by Hashim
Interesting. Would love to hear about pre-2010 units too especially if the Bluetooth module can be swapped to enable audio streaming instead of just Handsfree.
probably not likely as in addition to the hardware, you'd need to have many software changes to support streaming. Would be really cool if possible though.
Reply
Old Nov 14, 2018 | 03:03 PM
  #11  
ILM-NC G37S's Avatar
ILM-NC G37S
Registered Member
10 Year Member
iTrader: (3)
 
Joined: Apr 2014
Posts: 4,863
Likes: 1,616
From: NC
Everything is going to be in the software which is locked down tighter than Fort Knox. Many have tried to unlock that hard drive and figure out how to make modifications- mainly access the R35/GT-R theme. I wanted the advanced TPMS. Last I checked those projects died.
Reply
Old Nov 14, 2018 | 04:41 PM
  #12  
sev1980's Avatar
sev1980
Thread Starter
Registered Member
 
Joined: Mar 2016
Posts: 91
Likes: 17
from what i understand the HD has been unlocked. I just want to fix the damn bluetooth.

Anythign is possible with enough time, money and persistence. I'm not saying I'm the one to do it but if you get enough resources to do it, it is possible.

I've had pretty good success contributing to a project reverse engineering Chrysler stuff that no one said is possible, so I dont think this is any different.
Reply
Old Nov 14, 2018 | 05:03 PM
  #13  
ILM-NC G37S's Avatar
ILM-NC G37S
Registered Member
10 Year Member
iTrader: (3)
 
Joined: Apr 2014
Posts: 4,863
Likes: 1,616
From: NC
Lots of luck getting your BT issue resolved. I don't use it so I can not help there. Please keep us updated, though.
Reply
Old Nov 16, 2018 | 09:21 AM
  #14  
AdamBritt's Avatar
AdamBritt
Registered Member
5 Year Member
Liked
Loved
Community Favorite
iTrader: (1)
 
Joined: Sep 2017
Posts: 248
Likes: 50
Originally Posted by ILM-NC G37S
Everything is going to be in the software which is locked down tighter than Fort Knox. Many have tried to unlock that hard drive and figure out how to make modifications- mainly access the R35/GT-R theme. I wanted the advanced TPMS. Last I checked those projects died.
As in, use the GT-R theme on the display in other vehicles? That's interesting, but I'm having a hard time finding anything about that in a quick Google search.

Good luck in your project, sev. Subscribing to this since it's an interesting subject. I hope you can figure something out since the older Bluetooth really sucks.
Reply
Old Nov 16, 2018 | 10:19 AM
  #15  
rotarymike's Avatar
rotarymike
Moderator in Moderation
5 Year Member
Liked
Loved
Community Favorite
iTrader: (5)
 
Joined: Feb 2017
Posts: 2,948
Likes: 598
From: Charleston
The newer Bluetooth ain’t that great either. About 50% of the time it connects but won’t communicate or control my iPhone. I don’t have any android devices to try it on. 2013 sedan with nav.

I know where a 2011 unit is in a salvage yard.
Reply



All times are GMT -4. The time now is 03:06 PM.