Peugeot Forums banner

Version not compatible with hardware " Firmware update failure "

20K views 92 replies 23 participants last post by  jbf69  
#1 ·
Hello,

I recently bought 3008 2017, and when I tried to update software

I can't update in any way, I even tried with the license found here and connecting the unit to the smartphone's internet connection. I have tried many USB sticks from 16 , 32 and 256 GB , on it license number and formatted the USB stick to FAT32 .

i had two update available for me , i tried both together and same problem , i tried each one separately and same problem .

Downloaded software update via my peugeot app with VIN number


i connected car to internet and hotspot from mobile phone and same messaage " Version not compatible with hardware"


What should I do? :cry:

Thanks,
 
#36 · (Edited)
@rui.saraiva
I did it like you said, I downloaded newest version (21.08.90.52_NAC-r0) from link that you shared, and i extracted it to FAT32 usb on root, so that SWL folder is in root of usb device, and connected my car to internet wia hotspot(also tried with bluetooth tethering), but I still got error "Version not compatible with hardware" so that's why I asked for key.
But where I can download key for newest version? On Peugeot update they are providing key for 21.08.87.32_NAC-r1, and in filename of key which is like license_xxxxxxxxxxxxxxxxxxxx_yyyyyyyyyyyyyyyyyy.key yyyy characters are actually folder name which is in SWL folder, and those numbers are different for 21.08.87.32_NAC-r1 and 21.08.90.52_NAC-r0
Do you think that I can use key from Peugeot Update (for version 21.08.87.32_NAC-r1) but to rename it to license_xxxxxxxxxxxxxxxxxxxx_001315031666020829.key ?
 
#35 ·
@Changedforlife : Did you also download the license key ("license_xxxxxxxxxxxxxxxxxxxx_yyyyyyyyyyyyyyyyyy.key") and copy it to "\license" folder?

The Amazon CloudFront is a known CDN (Content Delivery Network). PSA/Stellantis started using it in late 2022 to share the firmware updates. Before that, they used their own very slow majestic-web.mpsa.com server.
 
#57 ·
Hello Rui,

may I ask you something, if you have formatted the usb stick to 32 Fat. Then there are 3 things that need to be copied SWL/License Key and Updateinfo.xml, right?

Bane was not sure whether the Updateinfo.xml should also be copied on the USB stick. And is it necessary to create a separate folder for the license key and put the key in there on the usbstick?
 
#32 · (Edited)
Don't use the MyPeugeot app or "Peugeot Update" software, they are still offering the old update 21.08.87.32_NAC-r1 that also has expired certificates (it's PSA/Stellantis, they can't do everything right at first).

Download from the cloudfront link directly -

Extract the .tar file update to a FAT32-formatted USB flash drive and that's it. You don't need the digital license/key (that is specific for that version AND for your car) if you connect your car to the internet - it could be an active and available Connected services subscription, a WiFi network, or tethering your phone (sharing mobile data over bluetooth).

EDIT:
In fact, because this latest version isn't in PUB status again, you might need to have the digital license/key on the USB flash drive:

Code:
{
  "updateType": "ovip-int-firmware-version",
  "updateVersion": "21.08.90.52_NAC-r0",
  "updateProvider": "CONTINENTAL",
  "updateId": "001315031666020829",
  "updateDate": "2025/01/08 14:08:27",
  "fileName": "PSA_ovip-int-firmware-version_21-08-90-52_NAC-r0_NAC_EUR_WAVE2.tar",
  "updateStatus": {
    "code": "AVC",
    "label": "En attente de validation fournisseur"
  }
}
 
#22 ·
And here is the news.

The update file was reuploaded today, it has again a PUB status, a new size, and, more importantly, a new certificate and the code is finally signed with it. It expires on 8 Nov 2026.

Code:
{
  "updateType": "ovip-int-firmware-version",
  "updateVersion": "21.08.90.52_NAC-r0",
  "updateProvider": "CONTINENTAL",
  "updateId": "001315031666020829",
  "updateDate": "2025/01/08 14:08:27",
  "updateStatus": {
    "code": "PUB",
    "label": "Publié"
  }
}
Code:
> curl --head https://ds4emloty3shq.cloudfront.net/CONTINENTAL/NAC_EU/ovip-int-firmware-version/PSA_ovip-int-firmware-version_21-08-90-52_NAC-r0_NAC_EUR_WAVE2.tar
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 2729062912
Connection: keep-alive
Date: Thu, 09 Jan 2025 15:57:00 GMT
Last-Modified: Thu, 09 Jan 2025 08:40:10 GMT
Code:
> openssl smime -in SWL/001315031666020829/MediaHeader/MediaVersion.ini -pk7out | openssl pkcs7 -print_certs -text | head
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3e:30:93:b5:e0:50:3a:43:c3:02:68:b1:06:c4:1d:fb:35:db:b7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=FR, L=Paris, O=PSA Peugeot Citroen, OU=Certificate Authorities, OU=(c) PSA Peugeot Citroen - For authorized use only, OU=0002 319187308, CN=PSA - OVIP - Code signing - G1
        Validity
            Not Before: Nov  8 18:27:06 2023 GMT
            Not After : Nov  8 18:27:06 2026 GMT
        Subject: C=FR, L=Paris, O=PSA Peugeot Citroen, OU=Open Vehicle Infotainment Platform, OU=(c) PSA Peugeot Citroen - For authorized use only, CN=Continental \/ NAC \/ 1
 
#21 ·
The same scripts that search for new updates daily to build up my site will also warn me of any file changes. That's why I know about the new 3 December file (it has a new certificate file, but they didn't sign the code with it...).

So any news will be posted here.
 
#13 ·
As I wrote, ALL NAC_EUR_WAVE2 firmware updates are using expired certificates - at the moment, It's impossible to install any of them.

As a rule of thumb, if the update has 2+ years old, it probably was signed with expired certificates.
So the exceptions are the last 2 firmware updates for the RCC Wave 3 (6_0421_23.3I29.1 / 6_0422_23.3I37.1) and NAC Wave 4 (44.07.05.22_NAC-r0 / 44.07.33.32_NAC-r0).

There are no new testing versions since 22.08.90.52_NAC-r0 and the easy fix is just sign the file with a new certificate (used in the above versions, for instance). But the NAC Wave 1 hasn't seen a firmware update since 2019 and it isn't expected they release one. That hardware revision is pretty much unsupported. Maybe it's the time for the Wave 2...
 
#11 ·
@cferreira : The license (that is unique to your infotainment system head unit and to the firmware version you're trying to install) and the signing certificate are 2 different things. Only PSA can fix the expired certificate problem by releasing a new update (it could be the same version) digitally signed with a valid certificate.

All versions of NAC Wave 2 (also Wave 1 and Wave 3) firmware are signed with expired certificates, so you can't install any of them.
 
#12 ·
@rui.saraiva I Was talking about trying to do a update not to the last update

"21.08.90.52_NAC-r0 17 Oct 2022 " id: 001315031666020829

but do the previus update :

21.08.87.32_NAC-r1 17 Feb 2021 id : 001315031613548831

and getting a license key to that with the link in i posted early replacing the placeholders with the uid of my unit ans the uid of the previus update 001315031666020829

But if is the "x:\SWL\xxxxxxxxxxxxxxxxxx\MediaHeader\MediaVersion.ini" that has been signed with a expired certificate all the previus updates will fail not only the last one
?
So until a new version or new files properly signed no one can update ?
 
#9 ·
@Ricardo.Rosa
You can install the European maps/cartography 28.0.0-r0 for the NAC Wave 2 without any problem.

Since 3 Nov 2024, it is impossible to install that firmware (or any other previous version), because it was digitally signed with a certificate that is now expired. The installation fails with the generic "Version not compatible with hardware" error.

Yesterday, PSA silently released a new update - it has the exact same bytes, but has an updated file, the certificate "SWL/001315031666020829/Certificates/PSA-OVIP-CS-G1.crt" - unfortunately they forgot to sign the "SWL/001315031666020829/MediaHeader/MediaVersion.ini" file with the updated certificate, so the installation still fails.

But at least they acknowledge the problem and are trying to fix it... :)
 
#10 ·
Hi, i have the same problem whith the firmware update

tried 2 diferent pens same result: "the update is not compatible with the hardware"

@rui.saraiva from exploring a bit the forum i notice that you have some know-how about this whe can download the lincence Key form :

https ://majestic-web.mpsa.com/mjf00-web/rest/LicenseDownload?mediaVersion=[UpdateMediaID]&uin=[MyUnitUID]

and use the version 21.08.87.32_NAC-r1 17 Feb 2021 001315031613548831 to update ?

Or probably will fail becouse of the exprired certificate ?

Ps: i have a 3008(Jan2019) ver: 21.07.16.32_NAC-r0 20 Apr 2018