@onedangts the offsets were locations within the official FM firmware. Problem is the firmware is encrypted, lol. Luckily, I found the right person who had the keys I needed and got it all to work! My factory GT bms is now reporting cell data to vesc. It's a beautiful day. Thank you for your efforts though!

So recently Avaspark released a product (avs RGB gen 3 gt) that can communicate with the factory BMS, and forward it's data to vesc. In this case I'm trying to use my gt BMS with a ubox 85. Unfortunately I think this only works if the bms hasn't been "bricked" or unplugged from the battery. However the developer of this board has also added a way to factory initialize the bms and "un-brick" it. However, it requires the factory authentication keys to be input in order to do so. I've been trying (unsuccessfully) to un-brick my BMS so that I can use it in this configuration, I was hoping that maybe someone here has the know how to be able to find the factory GT bms keys so that I can accomplish this. I found what I thought was them here, on this GitHub page.

https://github.com/Relys/vesc_pkg/blob/float-accessories/float_accessories/lib/bms.lisp#L4

But when I try those numbers it does not work, it looks to be wanting a hex address. Or a 16 character alphanumeric key.

If anyone is skilled enough to help me with this, I don't mind sending some money your way. I'm at a loss. Yes I could buy an aftermarket bms, but I really want this to work as I can forward cell data to the vesc this way without buying an expensive smart BMS, or just deal with being stuck with a "dumb" charge only BMS.

@onedangts the offsets were locations within the official FM firmware. Problem is the firmware is encrypted, lol. Luckily, I found the right person who had the keys I needed and got it all to work! My factory GT bms is now reporting cell data to vesc. It's a beautiful day. Thank you for your efforts though!

So recently Avaspark released a product (avs RGB gen 3 gt) that can communicate with the factory BMS, and forward it's data to vesc. In this case I'm trying to use my gt BMS with a ubox 85. Unfortunately I think this only works if the bms hasn't been "bricked" or unplugged from the battery. However the developer of this board has also added a way to factory initialize the bms and "un-brick" it. However, it requires the factory authentication keys to be input in order to do so. I've been trying (unsuccessfully) to un-brick my BMS so that I can use it in this configuration, I was hoping that maybe someone here has the know how to be able to find the factory GT bms keys so that I can accomplish this. I found what I thought was them here, on this GitHub page.

https://github.com/Relys/vesc_pkg/blob/float-accessories/float_accessories/lib/bms.lisp#L4

But when I try those numbers it does not work, it looks to be wanting a hex address. Or a 16 character alphanumeric key.

If anyone is skilled enough to help me with this, I don't mind sending some money your way. I'm at a loss. Yes I could buy an aftermarket bms, but I really want this to work as I can forward cell data to the vesc this way without buying an expensive smart BMS, or just deal with being stuck with a "dumb" charge only BMS.