Bosch MED17 on the 4.0 TFSI biturbo

Bosch MED17.1.1 / MED17.1.6 / MED17.1.62 — VAG 4.0 TFSI biturbo DI petrol V8 (EA824/EA825, "4.0T"). Torque-structure (drehmomentbasiert) gasoline-DI management: driver torque request drives a modeled airmass/charge target, then boost/fuel/spark.

Reference - updated 7 October 2026

The ECU hardware

Infineon TriCore 32-bit, little-endian (bi-endian silicon; VAG runs it little-endian). MED17.1.1 = TC1796 or TC1797 depending on build — this changes the read size: TC1796 = ~2 MB PFLASH, TC1797 = ~4 MB PFLASH, so DO NOT assume 4 MB, confirm from the actual dump. MED17.1.6 = TC1797 (~4 MB). MED17.1.62 = TC1793 (~4 MB). PFLASH holds bootloader + application code + calibration (mapped 0x80000000 cached / 0xA0000000 non-cached; small 16 KB boot sectors low, large 256 KB sectors high). Separate DFLASH (~64–128 KB, TC1796 = 128 KB) holds adaptations/immo/EEPROM-style data. VAG ECU part-number families 4G0906xxx / 4H0906xxx (C7/D4). Read protection via TriCore OCDS/JTAG password (community "Tprot") — separate from the write/checksum path.

Fuelling and load sensing

Petrol — gasoline direct injection (FSI/TFSI), twin IHI/BorgWarner turbochargers, hot-vee layout, single cam-driven HPFP feeding two rails at up to ~200 bar. No factory port injection (hard fuel ceiling). Primary load path is MED17's model-based charge determination (MAP/boost sensing + modeled airmass, "Füllungsmodell"), not hot-film-MAF-primary — MAF scaling is not the main tuning lever; charge/boost-target maps are.

How this ECU is read and flashed

Read/write is definition-driven and access-tiered. OBD (UDS over CAN, VAG SA2 seed-key auth): WRITE (reflash) of PFLASH is possible with a tool bootloader unlock; full READ is largely blocked by TriCore read-protection (Tprot/OCDS password), so OBD typically yields only a partial/limited read — many shops flash a pre-read known-stock of the exact box code over OBD instead of reading the car. BENCH: open the ECU and use the bench connector/pinout (MED17.1.6 IROM TC1797; MED17.1.1 sometimes needs a boot/'brown-wire' pin) for full PFLASH + DFLASH read/write. BOOT mode (TriCore BSL): required when read-protection blocks bench read/write — ground the internal boot pin (may need opening/soldering); immune to OBD/JTAG locks, gives a full dump/clone. Tools: KESS3/K-TAG, Autotuner, CMDFlash, Magic Flex, FoxFlash, KT200, PCMflash. IMMO/security: component protection (immo4/immo5, CS) is tied to the BCM2 — a virgin/immo-off or BCM2-sync is needed for an ECU swap/clone, and DFLASH carries the immo/adaptation data (a bench/boot clone MUST include it). SA2 governs OBD WRITE auth; the OCDS/Tprot password governs READ. ALWAYS take a true virgin backup (full PFLASH + DFLASH) via bench/boot FIRST, checksum-correct after edits, and bench-validate before OBD flashing.

Engine codes in this family

• CEUA / CEUC — S6/S7 C7 (420 PS)
• CGTA — RS6/RS7 C7 (560 PS)
• CRDB — RS6/RS7 Performance (605 PS)
• CWUB — RS6/RS7 Performance variant
• CWUC — S6/S7 (and S8) facelift (~450 PS)
• CTGE — 4.0T facelift (S8/A8 range)
• CTFA — RS6/RS7 facelift
• CEUB — S8 D4 (~520 PS)
• Platform siblings: Porsche Panamera/Cayenne Turbo, Audi Q7/Q8, Bentley (4.0T) — different box/cal; codes above are representative, VERIFY against the file's SW/box number

Staging - what each stage really gives

• stage1 - Software-only on stock hardware. Raise KFMIRL/LDRXN/KFLDIMX to a higher boost target within the stock IHI turbos and stock HPFP/injector flow, correct KFLMIOP + the level-2 torque monitor in lockstep, optimize timing/lambda, keep component-protection enrichment, optionally raise/remove vmax and open the exhaust flap. Typical: C7 RS6/RS7 560–605 PS -> ~680–700 PS / ~900–950 Nm; S6/S7/S8 (420–450 PS) -> ~520–560 PS. Needs 98/100 RON. Fuel delivery becomes the ceiling near ~700 PS.
• stage2 - Stage-1 cal + bolt-ons: downpipes / sport cats (or race pipes where legal), higher-flow intake, uprated intercooling/aux cooling, sometimes billet-wheel hybrid turbos on the stock frame. Re-map boost/timing/fueling for the reduced backpressure and better cooling, and RAISE the ZF 8HP (0C8) TCU input-torque limit — strongly recommended at this level. Typical: ~780–830 PS / ~1000–1200 Nm. Still fuel-limited at the very top on pump gas.
• stage3 - Hardware build: bigger/hybrid or full turbo-upgrade kit, ADDED fuel supply (upgraded HPFP and/or auxiliary/port injection, or E85 flex where the DI system can't flow enough), uprated TCU + torque-converter or a built ZF 8HP, and for sustained high power attention to bottom-end durability (rod bearings/conrods). Full re-map of the boost/fuel/torque structure. Typical: ~900–1000+ PS on race fuel/E85. The real limiters are FUEL DELIVERY, TRANSMISSION torque capacity and MECHANICAL durability, not the ECU maps.

Safety limits

• Knock/KR: ZERO sustained knock retard at WOT under log — a transient single-cell KR is tolerable, continuous KR means back off timing/boost immediately. This DI petrol V8 is knock-limited on pump fuel.
• Low-Speed Pre-Ignition (LSPI): boosted DI engines are LSPI-prone — high load with advanced timing at LOW rpm can trigger pre-ignition that holes a piston in one event. Keep low-rpm/high-load load AND timing conservative; do not chase aggressive off-boost/low-end torque. This is a distinct destroyer from ordinary knock.
• WOT lambda/AFR: keep commanded lambda ~0.80–0.85 (rich for knock + EGT margin); do NOT lean WOT toward stoich for 'efficiency' — leaning a boosted DI engine causes knock and melts pistons/turbines.
• EGT / pre-turbine temperature: keep pre-turbine EGT under ~950–980 C and LEAVE the component-protection over-temp enrichment / temperature-model derate intact — never delete it to chase leaner AFR numbers on the hot-vee turbos.
• Intake / charge-air temperature: keep IAT/charge-temp-based timing and load derate active. Heat-soak on a hot-vee twin-turbo V8 is significant; disabling temperature-model timing pull invites knock on hot restarts and sustained WOT.
• Rail pressure / fuel supply: HPFP ceiling ~200 bar and stock injector flow cap fueling around ~700 PS-class. Do not command load that outruns fuel delivery (top-end lean-out). Above this you MUST add fueling hardware (HPFP/aux/port/E85) — a HARD physical limit, not a map value.
• Boost / charge pressure: stay within the fitted turbos' compressor map and the MAP-sensor range; taper boost up top rather than holding peak. Overboost past sensor/turbo limits trips faults and risks the turbos; tune the boost controller to avoid overshoot.
• Transmission: on Audi S6/S7/S8/RS6/RS7 keep engine torque within the ZF 8HP (VAG 0C8) TCU input-torque limit or raise it via a TCU flash — exceeding it causes derate/slip and gearbox damage (the box, not a clutch, is the driveline limit). On Panamera 4.0T the PDK dual-clutch clamp is the limit instead.
• Rev limiter: raise only modestly and within valvetrain limits; no benefit past where the torque curve falls off.
• Component protection / cat & turbine over-temp maps: leave the protective enrichment and derate logic intact — it prevents catalyst and turbine destruction on sustained WOT.
• OPF/GPF (late Euro-6d 4.0T, e.g. some Panamera/Cayenne/A8 ~2017+): most C7 RS6/RS7 are pre-OPF, but where a gasoline particulate filter is fitted, deleting it is illegal (emissions) and changes the exhaust/backpressure model — account for it rather than blindly removing. (No diesel DPF exists on any 4.0T — it is petrol.)
• Mechanical durability at stage 3: the ECU can command load beyond the bottom end's comfort. The 4.0T has known rod-bearing wear at elevated sustained power; conrods/valvetrain and cooling/oiling set the real ceiling above ~800–900 PS, not the maps.

Every car using this platform (14)

Stock power and typical remap figures per car. Stage results assume a healthy engine on good fuel.

How confident is this?

Well established: the TriCore hardware family (TC1796/97/93, little-endian); CRC32 multipoint checksums that must be re-corrected (WinOLS or the flasher), with NO RSA signature on MED17.1.x; working from a definition first; OBD/bench/boot access levels that depend on Tprot; the Bosch torque-model lockstep (KFMIRL/KFLMIOP/LDRXN plus the level-2 monitor); staging power bands; the ZF 8HP (0C8) as the driveline limit on Audis; and the petrol safety set. These points agree across tuning-tool hardware listings, TriCore/checksum references, the s4wiki torque-model documentation and several RS6/RS7 tuners. Also worth knowing: flash size is not always 4 MB (TC1796 variants are about 2 MB, so check your read); engine load comes from MED17's model-based charge calculation (manifold pressure plus modelled air mass); ME7Tuner is an ME7 tool, not a MED17 one; the safety list includes LSPI, charge-air-temperature derating, OPF/GPF on late models, and rod-bearing/mechanical durability at stage 3; and the Panamera 4.0T uses a PDK gearbox (clutch clamping is the limit) rather than the ZF 8HP.