Antitheft and Alarm Systems: Testing and Inspection
TEACHING PROCEDURESKey teaching procedures need to be done, by the dealer, after replacing a defective ECM (Electronic Control Module), or when providing additional key(s) to the vehicle owner.
Key teaching procedures start with an ECM request for vehicle specific data from the tester. The "virgin" ECM stores the vehicle specific data, and then the compares the data in the "learnt" ECM to the original data in the tester. If the data loaded correctly then key teaching can begin (See "virgin" vs "learnt" section below for related information.)
If vehicle specific data is incorrectly sent to the ECM three times, the ECM will reject the key teaching request for 1 full hour.
NOTE: The one-hour timer limitation cannot be reduced by any user actions For instance, if the battery is disconnected and reconnected during this period, the one-hour timer will restart.
Key teaching requires the ignition (w/key) on while a series of specific tester commands are run The ECM stores the relevant data in the EEPROM and in the transponder The ECM then runs an authentication process If the authentication process indicates that the teaching process was successful a confirmation signal is then sent to the tester.
NOTE: KIA recommends setting the User Password when the car is initially sold.
ADDITIONAL KEYS
- If the ECM recognizes a key from a previous key teaching process, the authentication will be accepted and the EEPROM data updated The transponder content will not be changed.
- Attempts to re-teach the ECM will reject a key, which has already been sent through the same teaching cycle. A notification message is then sent to the tester.
- The ECM can also recognize and reject invalid keys when they are presented for teaching Keys can be invalid due to faults in the transponder or other unsuccessfully programmed data. If the ECM detects different ECM and transponder authenticators, the key will be rejected
- The maximum number of keys that can be taught is 4.
FAULT CODES
- If an error occurs during Immobilizer Service, the ECM status remains unchanged and a fault code will display.
- If the ECM status and the key status do not match for teaching of keys, the tester procedure will be stopped and a specific fault code will be stored in the ECM.
USER PASSWORD TEACHING PROCEDURE
Dealer service representatives set user Passwords for "limp home" mode The owner of the vehicle can select a number with four digits.
User password teaching can only be accepted by "learnt" ECMs "virgin" vs "learnt".
Prior to initial teaching procedures the ECM user password is "virgin". Once the initial teaching procedure is successful, the status of the user password changes from "virgin" to "learnt".
User password teaching begins with the ignition turned on, using a valid key The user password, "virgin" is then sent by the tester. After a successful teaching procedure is run the user password changes from "virgin" to "learnt".
The "learnt" password can also be changed This can be accomplished if the user password is "learnt" and the tester sends either an authorization of access, which would be the old password, or the vehicle specific data. Once authorization is complete, the ECM requests the new user password. The status remains "learnt" and the new user password will be valid for the next "Limp Home" mode.
If incorrect user passwords or wrong specific data are sent to the ECM three (3) times, the ECM will reject further requests for pass word change, for one (1) hour.
NOTE: The one-hour timer limitation cannot be reduced by any user actions For instance if the battery is disconnected and reconnected during this period, the one-hour timer will restart.
Limp Home Function:
THE USER PASSWORD CAN BE IN THE STATUS
00. Not yet checked
System status is stored in the EEPROM. If incorrect data or non-plausible data is provided the ECM cannot check the status and the ECM sends 00.
01. Learned
The ECM has successfully learned the password.
02. Virgin
Password status, at end of the ECM production line, prior to final customer delivery.
04. Locked by timer
After 3 unsuccessful teaching, no inputs are accepted and the ECM is locked for one (1) hour.
05. Teaching not accepted
This status is set if, for example, the ECM is in neutral status.
1. LIMP HOME BY TESTER
The ECM provides a "limp home" function, for the immobilizer, which allows starting the engine in cases where the ECM detects a SMARTRA or transponder fault. Limp home mode is only possible if the user password (4 digits) has been programmed into the ECM prior to the fault. This 4 digit password can be selected by the vehicle owner and programmed into the ECM by the dealer service representative. The user password is sent to the ECM via the special tester menu.
Starting the engine. (Read completely prior to attempting vehicle start).
The ECM must be in "learnt" status and the user password must be correct to start the vehicle.
- If the "learnt" password is correct the ECM will be unlocked, and the engine started for a period of 30 seconds. Once the 30 seconds has elapsed the vehicle WILL NOT start.
- If the password, sent to the ECM, is incorrect, the "limp home" request will be rejected for a period of 1 hour.
NOTE: The one-hour timer limitation cannot be reduced by any user actions. For instance if the battery is disconnected and reconnected during this period, the one-hour timer will restart.
2. LIMP HOME BY IGNITION KEY
The "limp home" mode can also be activated using the ignition key. The user password can be input to the ECM by using a special ignition sequence (ON/OFF).
If the "learnt" password is correct the ECM will be unlocked, and the engine started for a period of 30 seconds. Once the 30 seconds has elapsed the vehicle WILL NOT start.
NOTE: After a new password has been input, the timer (30 sec.) will start again.
If the ignition is turned OFF for a period of 8 seconds, the ECM will once again be locked. To restart the vehicle after the 8 second period the user password will once again be required.
NOTE: KIA recommends setting the User Password when the car is initially sold. Auto-theft can easily occur since a secure user password has not been set allowing the vehicle limp to the wrong home.
DIAGNOSIS OF IMMOBILIZER FAULTS
- Communication between the ECM and the SMARTRA.
- Function of the SMARTRA and the transponder.
- Data (stored in the ECM) related to the immobilizer function.
There are four different faults that are assigned to the immobilizer system. Every fault is broken down into four different types (circuit malfunction, circuit range / performance problem, low input, high input) The following table shows the assignment of immobilizer related faults to each type.
REPLACEMENTS OF ECM
If the ECM fails or is defective, the unit must be replaced with a "virgin or "neutral' ECM All keys will have to be registered (taught) to the new ECM Keys not taught to the new ECM WILL NOT work with the ECM.
NOTE: The vehicle specific data will have to be left unchanged with regards to the unique programming for the transponder.
REPLACEMENT OF SMARTA
In the case of a defective SMARTA no special procedure is required Anew SMARTA device simply replaces the existing device Transponder-related data is not stored in this device.
NEUTRALIZING THE ECM
The ECM can be set to a "neutral state using a tester
Once a valid ignition key is inserted and started the ECM requests the vehicle specific data from the tester Communication messages are described in Neutral MODE.
After successfully receiving the data the ECM is neutralized
The ECM will remain locked Neither "limp home" mode nor the twice ignition" function will be accepted by the ECM
The key teaching follows procedures described for a "virgin" ECM Vehicle specific data must remain unchanged due to unique programming of the transponder. If data changes, new keys with a "virgin" transponder will be required.