We updated the BODAS CB-ME, CL-API and FlashingReference with new features and improved usability for the unified basic solution for Machinery Regulation (MR) and Cyber Resilience Act (CRA) compliance.

Remark: The implementation the CRA basic security solution in your project is optional and depends on your Threat Assessment and Risk Analysis (TARA) - see myBODAS Community.

CB-ME (Packages _260619)

RC5-6/40 (V01.11.00), RC18-12/40 + RC27-18/40 (V03.12.00) & RC18-12E/40 + RC27-18E/40 (V01.05.00)

• CAN Channel UDS Request Handling: CB-ME now responds to UDS requests on a single CAN channel, utilizing the CAN ID and baud rate configured by the ASW through NVM shared configuration, regardless of whether the CB-ME hex file or CL-API hex file is flashed to the ECU.

• One-Shot Password Provisioning and Update via keyfile: A new security feature, one-shot operation, is now available for managing passwords via keyfile. When enabled, this mechanism permanently and irreversibly restricts any further password updates through the keyfile.

For further details, refer RC Customer Manual 40.s/ml300-bs (and all CRA patch workflows).

Limitations:

• This CB-ME is compatible with BSW 1.29-bs (workflows 40.ml290-bs, 40.ml290-bs.rts) or another basic security (-bs) patched version of the older workflows (-bs). However, One-Shot Password Provisioning and Update will not be available.

• This CB-ME is incompatible with BODAS Secure Sign 0.2.2, please update to BODAS Secure Sign 1.0.3

Flashing Reference for RC40-Family has been updated accordingly. The new version is availble in myRexorth --> 23_FlashingReference, please contact your Sales Representative or our Onboarding Team.

CL-API (Packages _260619)

RC5-6/40 (V01.11.00), RC18-12/40 + RC27-18/40 (V03.12.00)

• Signature and Certificate Support: Memory and linker file configurations have been updated to support signature and certificate implementation by the CLAPI application.

Documentation:

• The CL-API manual has been updated with additional description for clnvm_readBlock regarding NVM RAM mirror behavior during startup.

• The error codes provided to the callback cluds_registerErrorCallback() are described separately.

Thank you!

Get ready for a comprehensive update across the BODAS ecosystem new features, improved usability, and a unified basic solution for Machinery Regulation (MR) and Cyber Resilience Act (CRA) compliance.

• MR & CRA basic solution (-bs) across key components

• New BODAS Secure Sign tool for secure software signing

• Improved workflows, diagnostics, and flashing security

• Updated HelloWorld examples (myRexroth)

Remark: The implementation the basic security solution in your project is optional and depends on your Threat Assessment and Risk Analysis (TARA) - see myBODAS Community.

easyConfig / C-BSW

C-Workflows 40.sml290-bs

• Enhanced User Experience:

  1. Custom grouping of projects: group your projects for the better overview in the dashboard.

  2. Status messages: new way of displaying the status messages in the notification banner.

• HW Configuration - BDL: allows configuring the PR4 Analog Sensor

• Diagnostics - UDS/Error Management: added BSW DFCs in GUI for support of CRA secure logging

• Security: implemented address range limitations for upload and download services to bolster security.

• CAN - DBC Import: initial values of CAN Signals are also imported.

Migration & Compatibility: refer to the Release Notes in easyConfig or the Project Upgrade/Migration Possibilities document.

easyConfig / CODESYS-RTS

CODESYS IDE

• v3.5.21.40 - one IDE for all Rexroth Controllers 

• Forcing / Writing variables during monitoring is now supported

CODESYS-Workflows 40.sml290-bs.rts

• full feature scope as in C-Workflows

• the workflows older than 40.sml280.rts will be disabled on 30.06.2026- see: Disabling of older CODESYS workflows

Call for action: upgrade your projects to the latest workflows. Refer to the Release Notes in easyConfig or the How to migrate / upgrade the RTS / CODESYS projects to 40.sml290-bs.rts guide.

BODAS-service 4.5.4 (Runtime)

• RC/40:

  • Flashing of the keyFile hex, the signed software and the unlockFiles is available acc. to CRA basic solution

  • "Last config change" shown in the Device Info tab.

• EHS4:

  • User has to enter the password for flashing a device

• INV4:

  • A new device integrated in the Discovery App.

• Authoring tool (BODAS-service Editor 4.5.2)

  • The PDX files can be exported via GUI and CLI.

CB-ME (Packages _260402)

• Encrypted Flashing: Support for flashing of encrypted CB-ME, ASW, keyFile, and unlockFile to ensure the data confidentiality during transmission.

• Signature Verification: Support for signed binaries to verify the authenticity and integrity of software before flashing.

• Secure Access: Handling to manage secure access levels for diagnostic and programming sessions.

Flashing Reference for RC40-Family has been updated accordingly to get a new version, please contact your Sales Representative or our Support Team.

Important: To utilize all available features, use BSW 1.29-bs from workflows 40.sml290-bs(.rts) or a security-patched version of an older workflow, alongside with BODAS-service 4.5.4 and BODAS Secure Sign Tool.

BODAS Secure Sign Tool (0.2.2)

Remark: Signing the series software (hex-file) with the BODAS Secure Sign Tool is a requirement depending on whether your product is affected by the CRA/MR or your TARA requires it.

The BODAS Secure Sign CLI is a command-line tool that secures the firmware update process for BODAS embedded controllers. It ensures that:

• Only authorized firmware can be flashed onto controllers (code signing

• Only authorized users can produce signed firmware artifacts.

The tool manages the complete lifecycle from initial project setup through keyFile generation, firmware signing, user management, and root key rotation. 

Thank you!

• the BSW features are fully allied with the C-workflows

• there is one version of IDE v3.5.21 for all Codesys Rexroth Controllers

• Forcing / Writing variables during monitoring is now supported.

• Flashing from CODESYS IDE is possible

Therefore, we decided to disable the workflows older than 40.sml280.rts on 30.06.2026. Affected are: s151e.rts, ml190.rts, ml230.rts, s240.rts, s242.rts, ml232a.rts.

After 30.06.2026 you will NOT be able to:

• create new projects

• modify the current projects

• build any projects

We kindly ask you to migrate your projects to the latest workflows, see the Release Notes in easyConfig or the How to migrate / upgrade the RTS / CODESYS projects to 40.sml290-bs.rts guide.

Remark: The implementation the basic security solution in your project is optional and depends on your Threat Assessment and Risk Analysis (TARA) - see myBODAS Community.

If you need any assistance, our support team will be happy to help you.

1. You will first need a SingleKey ID to access myBODAS. Please refer the following link to create your SingleKey ID.

   Getting access to myBODAS

   Once your SingleKey ID is created, you can login to myBODAS using it.

   Note: We recommend using a clear name as your nickname (no pseudonymns), so that members can be easily identified within the group.

2. To access the Adaptive Ground Drive group, request the Adaptive Ground Drive access role, 'mbc_agdrive' by sending a short email to onboarding.BODAS@boschrexroth.de.

3. Once onboarding confirms and your access role is assigned, you will be able to access the Adaptive Ground Drive group and the download area in myBODAS.

   Hint: If you were already logged into myBODAS (after receiving confirmation from onboarding) please log out and log in again to ensure the changes take effect.

HelloWorld C and Codesys: CW5: 27.01 – 28.01: Registered participants : free spaces available

https://academy.boschrexroth.com/de_de/bodas-rc40-hello-world-programming-rc-series-40-in-c-en.html

https://academy.boschrexroth.com/de_de/programming-of-rc-controller-series-40-in-codesys-en.html

Simulink- TSP: CW5: 29.01 – 30.01: Registered participants : free spaces available

https://academy.boschrexroth.com/de_de/programming-of-series-40-rc-controllers-with-the-matlab-simulink-target-support-package.html

MASAR-TSP: CW6: 03.02 – 05.02: Registered participants : free spaces available

https://academy.boschrexroth.com/de_de/working-with-bodas-studio-masar.html

Get ready for a comprehensive update across the BODAS Ecosystem, delivering new features, stronger security, and a smoother user experience across your development workflow.

Below you will find the key highlights followed by detailed information for each product area.

Highlights

• C-Workflows 40.sml280: Introducing a configurable tester ID, improved DBC import handling, and several additional improvements and bug fixes.

• Codesys-Workflows 40.sml280.rts: Now synchronized with the latest sml280 fixes and packed with new features, including migration support.

• BODAS-service and Editor 4.5.2: Featuring a refined Dashboard Service App (including a Curve Widget) and updated EDS1, EHS4, and USS Apps.

• CB-ME and CL-API: Enhanced with dynamic CAN ID addressing and improved security for ECU Reset operations.

easyConfig / C-BSW

[C-Workflows 40.sml280]

1. Enhanced User Experience with easyConfig Dashboard:

• Direct Project Export: Export easyConfig project configurations as a ZIP file directly from the dashboard, eliminating the need to launch easyConfig.

• Improved Error Messages: Enhanced GUI error messages now provide more detailed information, including a direct link to the JSM ticket area.

• HW-Variant Consistency: Resolved inconsistencies with RC HW-Variant after importing project ZIP files with different HW-Variants.

2. Diagnostics – UDS: These DIDs are now available for the ASW usage.

• Configurable Tester ID: Added support for a configurable tester ID.

• COM Ethernet UDS Data Migration: Resolved an issue where COM Ethernet UDS data was not migrated correctly when transitioning from 40.sml260 to 40.sml270.

3. Security

• Implemented address range limitations for upload and download services to bolster security.

4. CAN

• DBC Message Merging: Enhanced the CAN message merging popup to better handle situations where message names are duplicated.

• Signal Group Information: Implemented an informational message to notify users when a Signal Group is not supported from the DBC.

Migration Resources

For a smooth transition, please refer to the detailed migration guides: Release Notes in easyConfig or the Project Upgrade/Migration Possibilities document.

easyConfig / CODESYS-RTS

[CODESYS-Workflows 40.sml280.rts]

1. Migration Wizard

• Supports workflow migration from from s242.rts / ml232a.rts to 40.sml280.rts, simplifying your project upgrades.

2. Communication Enhancements

• CAN FD Protocol: CAN FD protocol is now available.

• ISOBUS (J1939) Safety API: ISOBUS (J1939) Safety API support has been added.

• UDS Routines: New F000/F001 UDS routines are added.

3. BODAS Driver Library Sensors

• New BDL Sensors: PAL and DSA support added.

Migration Resources

For detailed upgrade support, refer to Release Notes in easyConfig or How to migrate / upgrade the RTS / CODESYS projects to 40.sml280.rts guide.

BODAS-service 4.5.2 (Runtime)

1. RC/40

• Refined RC40 Dashboard App with updated designs.

• Possibility to choose low CAN-Busload (approx. 33%) mode in the RC/40 Flashing App.

2. eLion

• Extended support for EDS1 device hardware numbers.

• Newly integrated Service Apps: EDS1, EOBC1, EDCC1.

• EDS1 Flashing App removed from runtime.

3. EHS4

• Updated Service App with 'Save to Report' and a new IOCBI dialog.

• Flashing App updated with an improved security DLL.

4. USS 12V and 24V

• A new DTC (Diagnostic Trouble Code) feature tab is now included for both Service Apps

BODAS-service Editor 4.5.2 (Authoring tool)

• Curve Widget now supports constant values.

• CLI now supports -lf (linked file) for bodas.bxmlmodel path and data folder path.
  See Readme_CLI.txt and Readme_GUI.txt in ...\ _win32-x64\for more details

Compatibility

• Standard and Dashboard Service Apps from BODAS-service Editor 4.5.2 are compatible with BODAS-service 4.5.2 and 4.5.0.

Important Limitation:

• Generation of Custom Apps is not possible in v4.5.2, for details, refer to Compatibility and Installation Charts_en-US.pdf or Explanation - Compatibility and Installation Charts BODAS-service 4.x.

CB-ME and CL-API (Packages _251121)

[CB-ME]

1. Dynamic CAN ID Addressing

• CB-ME now supports dynamic changes to tester ID and functional CAN ID addressing. These values are configurable via ASW shared UDS configuration parameters and will be utilized for subsequent communication.

• This feature is particularly beneficial for customers who utilize the BODAS-service instance within easyConfig but do not use the BODAS-service tool directly.

2. Bug Fixes

• Addressed unexpected enabling of CAN channels not in use when ASW is flashed onto the ECU.

• Execution of the ECU Reset service now requires successful Security Access at Customer Level 1 or 2 to ensure authorized control over the ECU.

[CL-API]

1. Bug Fixes

• Resolved NULL CLCAN Message Transmission issues.

• Fixed CAN FD Single Frame Data Truncation with a data length code (DLC) greater than 8 bytes.

2. Improvements: Improved CLAPI RAM Availability.

Thank you!

Highly networked and operating in harsh conditions, mobile machinery now demands Security-by-Design, continuous risk monitoring, and full-lifecycle protection, all while keeping costs under control.

Bosch Rexroth’s BODAS Ecosystem offers OEMs a clear and efficient path through CRA compliance, leveraging proven automotive security processes to support Security-by-Design, Threat Analysis & Risk Assessments (TARAs), Software Bill of Materials (SBOM) requirements, and deployment of state-of-the-art security measures across the entire lifecycle.

With integrated 24/7 incident monitoring, structured vulnerability handling, and secure OTA update capabilities, BODAS enables manufacturers to reliably meet CRA expectations while staying competitive.

Learn how early action, combined with BODAS’ modular, scalable, and future-ready platform, enables OEMs to turn CRA compliance into a strategic advantage and secure long-term market readiness: Cybersecurity: Why OEMs must act now

One of the most impactful changes:
On January 20, 2027, the new EU Machinery Regulation 2023/1230/EU (EU-MR) will replace the long-standing Machinery Directive 2006/42/EC.
For OEMs, this shift brings new obligations, particularly in functional safety, software, and autonomous machine operation.

Bosch Rexroth supports OEMs with an MR-ready BODAS Ecosystem, covering restraint system monitoring, autonomous machine supervision, cybersecurity, and compliant AI integration. Combined with expert Rexroth engineering support, manufacturers gain a holistic partner to achieve safe, secure, and regulation-ready machine designs.

Learn how BODAS accelerates compliance and simplifies your path to CE-conformity: Functional safety

Key EU regulations taking effect from 2025:

• Cyber Resilience Act (CRA): Introducing new cybersecurity obligations covering the entire product lifecycle, from development to decommissioning.

• Radio Equipment Directive (RED): Defining strict requirements for wireless systems such as Wi‑Fi, mobile networks, and Bluetooth.

• EU Machinery Regulation (MR): Replacing the current Machinery Directive (MD), introducing explicit IT security and software related safety requirements.

• Artificial Intelligence Act (AI Act): Regulating the use of AI within the EU and requiring transparent, traceable, and safe deployment of AI systems.

Bosch Rexroth, in close collaboration with the Bosch Group, already provides solutions that meet these increasing requirements across the full product lifecycle.

If you would like to dive deeper into these topics, please read the full article here: Cybersecurity Functional Safety and AI

Whether you're coding your next breakthrough application with our RC Controllers, integrating cutting-edge sensors, or refining your software with our advanced tools, the myBODAS Community is designed to be your ultimate resource.

But who are the hands, minds, and voices that bring this vibrant community to life? The robust digital platform you interact with – from our dynamic chat forum, comprehensive Knowledge Base, and extensive Download Space, to our efficient Ticket system and the intelligent GenAI search – is all powered by the dedication, insights, and continuous contributions of our Bosch Rexroth experts.

Join us in celebrating the people who make it all possible. Get to know the faces behind the solutions below!

Our myBODAS Experts

Frank

Role: Product and Community Manager of myBODAS
At Bosch Rexroth since: 2019
Key Tasks: Empowering Developers & Engineers through Digital Product Vision, Coordinating the Technical Support for our BODAS products, Administrating the myBODAS Digital Experience Platform

Sahiti

Role: Intern
At Bosch Rexroth: 2023 - 2025
Key Tasks: Contributing to the Knowledge Base. Actively monitors the chat forum for BODAS-related questions and solutions.

Oliver

Role: Customer Consultant
At Bosch Rexroth since: 2024
Key Tasks: Expert technical support for Bosch Rexroth RC40 control devices and BODAS Ecosystem (BODAS-Service, easyConfig,…)

Krisztián

Role: Customer Consultant
At Bosch Rexroth since: 2024
Key Tasks: Expert technical support for Bosch Rexroth RC40 control devices and BODAS Ecosystem (BODAS-Service, easyConfig,…)

Hasan

Role: Customer Consultant
At Bosch Rexroth since: 2024
Key Tasks: Expert technical support for Bosch Rexroth RC40 control devices and BODAS Ecosystem (BODAS-Service, easyConfig,…)

Your Journey with myBODAS

These are just some of the dedicated professionals who stand behind the myBODAS Community. Their expertise, combined with your valuable contributions, makes this platform a powerhouse for innovation.

Got a question? Need a solution? Our experts are here to help. Dive into the forum, search the Knowledge Base, or submit a ticket. Together, we move, you win!