Security - Description & Operation Land Rover Freelander L314

Scheme 29

Scheme 30

GENERAL

This description covers all aspects of the vehicle locking and alarm system.

The vehicle locking and alarm system is controlled by the central control unit (27VT) located on the back of the passenger compartment fusebox below the fascia.

LOCKING & ALARM SYSTEM

The locking and alarm system comprises

1. Central Door Locking (CDL) Switch(es)
2. Door Switches
3. Roof Switch (3 Door Only)
4. Remote Handset (RF Transmitter)
5. RF Receiver
6. Driver's Door Key Barrel
7. Door Lock Actuators
8. Tail Door Switch
9. Tail Door Release Actuator
10. Bonnet Switch
11. Inertia Switch
12. Horn Or Bus
13. Alarm LED
14. Immobilization ECU
15. ABS ECU Speed Input
16. Volumetric Sensor

CENTRAL LOCKING

The vehicle can be locked and unlocked by three methods; CDL switch, vehicle key or remote handset.

CDL Switch

Each CDL switch allows the occupants to CDL lock the vehicle from inside without arming the alarm. Up to 2004 model year, the CDL switch on both 3 and 5 door models is located in the centre console. From 2004 model year, on 3 door models the CDL switch is located in the front of the cubby box and, on 5 door models, there are two CDL switches, one in the driver's door window switchpack and one in the front passenger's door window switchpack.

The CDL locked state can be removed by operation of a CDL switch, remote handset or by a key unlock operation in the driver's door key barrel. A CDL switch is inoperative if the inertia switch is tripped. If the inertia switch is tripped while the doors are CDL locked and the ignition is on, all doors will automatically unlock.

Key Locking

The vehicle can be CDL locked using the vehicle key in the driver's door key barrel. Turning the top of the key to the rear of the vehicle will CDL lock all doors. Turning the key a second time, within one second of the first turn, will superlock all doors.

Key Unlocking

Single point entry is a programmable feature and its selection affects how the vehicle responds to key unlock requests

1. Turning the top of the key once towards the front of a vehicle which is in a CDL state, with the alarm disarmed, will unlock all the doors irrespective of their existing lock status
2. Turning the top of the key once towards the front of a vehicle in a superlocked state without SPE selected and the alarm armed, will unlock all the doors irrespective of their existing lock status
3. Turning the top of the key once towards the front of a vehicle in a superlocked state with SPE selected and the alarm armed, will unlock the driver's door. The remaining doors will unlock to the CDL state and can be unlocked with a further key unlock operation

Remote Locking

On vehicles with superlocking selected the vehicle can be superlocked by pressing the lock button on the remote handset once. On vehicles with superlocking not selected (market option) the vehicle can be CDL locked by pressing the lock button on the remote handset once.

Remote Unlocking

With the vehicle CDL locked, pressing the unlock button on the remote handset once will unlock all doors.

If the vehicle is superlocked, pressing the unlock button once on the remote handset will only unlock the drivers door for SPE. The remaining door(s) will unlock to the CDL state. If the button is pressed a second time, the remaining door(s) will unlock.

Note. If the vehicle is superlocked and SPE has not been selected in the CCU, pressing the unlock button once on the remote handset will unlock all the doors.

Central Locking Notes

Locking or unlocking using the vehicle key or remote handset is prevented if the CCU senses that the ignition is 'on'. Using the key to lock the vehicle via the driver's key lock with the ignition 'on' will mechanically lock the driver's door.

Superlocking is prevented if the CCU senses that one or more doors are open. In this instance the CCU will attempt to CDL lock all doors.

Inertia Switch

The inertia switch is located on the bulkhead in the engine compartment. The switch is mounted vertically and has a reset button on its top surface, covered by a rubber boot.

If the inertia switch is tripped, with the ignition 'on' and the alarm disarmed, all the doors will be unlocked regardless of their locked state at that time. Further locking is disabled unless

1. The ignition is switched off and the driver's door is opened and closed.
2. The driver's door is opened and closed and the inertia switch is manually reset.

The inertia switch can be reset by depressing the button on the top of the switch.

Tail Door

The CCU also controls the tail door release. The tail door can only be opened if the vehicle is unlocked, the alarm is not armed and the vehicle is travelling at not more than 3 mph (5 km/h).

Slam Locking

The driver's door is designed to prevent slam locking. The remaining door(s) can be slam locked.

Latch Motor Protection

To protect the door lock latches from damage, the CCU will only allow eight changes of state of the locks in any sixteen second period or less. If eight changes of state occurs within the sixteen second period, the CCU will prevent further operation of the latch motors for a further sixteen second period. The CCU will always prevent further operation only when the latch motors are in an unlocked condition. If SPE is operational, the CCU will override the SPE function and all doors will unlock if eight operations is exceeded in the sixteen second period.

The alarm system will continue to operate during the latch motor protection period.

ALARM SYSTEM

The alarm system can be armed and disarmed using the vehicle key or the remote handset. The alarm system monitors the driver's door, passenger door(s), tail door, bonnet and roof (3 door models only) using perimetric sensing. It also monitors movement within the passenger compartment using volumetric sensing.

In certain countries, the alarm system is programmed not to arm under any circumstances.

Note. Hazard warning light confirmation of alarm arm or disarm is market programmable and therefore may not be operative on certain market variants.

PERIMETRIC SENSING

Perimetric sensing is invoked by the CCU to monitor entry to the vehicle after the alarm has been set. The panel open switches on the driver's door, passenger door(s), tail door, bonnet and roof (3 door only) are all monitored by the CCU.

If a panel is opened after the alarm has been set, the alarm will be triggered. The horn or BBUS will sound and the hazard warning lights will operate. On 3 door models, if the roof is off when the alarm is armed, further operation of the roof off switch will not trigger the alarm.

VOLUMETRIC SENSING

The volumetric sensor is located in a central position on the roof panel, behind the headlining. The volumetric sensor is a microwave sensor which monitors movement inside the vehicle to detect any possible intrusion. The vehicle can be armed with the volumetric sensor disabled to avoid accidental triggering of the alarm if a pet is in the vehicle for instance. The volumetric sensor is also inoperative if the CCU senses that a panel has been left open, with the exception of the bonnet.

A fifteen second delay is initiated after arming of the alarm before signals from the volumetric sensor are interpreted as an intrusion. This precaution is included in the CCU software to avoid accidental or nuisance triggering of the alarm.

If the alarm has been triggered, the CCU will ignore further volumetric sensor signals for the duration of the alarm sounding. The CCU will delay volumetric sensing for a further 15 seconds after the alarm has stopped sounding, unless ten triggers have been sensed by the volumetric sensor since the alarm was last armed.

The volumetric gain setting is controlled by the VIN stored in the CCU. The VIN informs the CCU of the vehicle body and roof type to avoid under or over sensitivity.

If battery supply voltage falls to below 9 Volts, the CCU will ignore inputs from the volumetric sensor.

ALARM - KEY OPERATION

Arming and disarming using the vehicle key in the driver's door key barrel will be ignored if the CCU senses that the ignition is 'on'. In certain markets the alarm system is programmed not to arm under any circumstances, in these cases key operation will only operate the door locking facility as described in Key Locking/Unlocking.

Note. Using the vehicle key in the driver door key barrel will not enable volumetric sensing.

Key Arm

The vehicle alarm can be fully armed by turning the top of the key to the rear of the vehicle once with all panels closed. The Vehicle will be CDL locked, the hazard warning lights will flash three times. The alarm LED will fast flash for ten seconds and then change to slow flash. Perimetric sensing will be activated.

The vehicle alarm can also be fully armed by turning the top of the key to the rear of the vehicle a second time, within one second of the first turn, with all the panels closed. The vehicle will be superlocked, the hazard warning lights will flash three times. The alarm LED will fast flash for ten seconds and then change to slow flash. Perimetric sensing will be activated.

Key Disarm

The vehicle can be disarmed by turning the top of the key towards the front of the vehicle. The vehicle will unlock all the doors, if the vehicle is being unlocked from the superlock state with SPE active, the driver's door will unlock, the remaining doors will enter the CDL state. Also the hazards will flash once and the alarm LED will extinguish.

ALARM REMOTE HANDSET OPERATION

In certain markets, the alarm system is programmed not to arm under any circumstances. In these cases the remote handset will only operate the door locking facility as described in remote handset lock/unlock.

Remote Handset Arm

The vehicle alarm can be fully armed by pressing the lock button on the remote handset once with all panels closed. The Vehicle will be superlocked, the hazard warning lights will flash three times. The alarm LED will fast flash for ten seconds and then change to slow flash. Perimetric and volumetric sensing will be activated.

Remote Handset Disarm

The vehicle can be fully disarmed by pressing the unlock button once on the remote handset. The hazard warning lights will flash once and the alarm LED will go off. Perimetric and volumetric sensing will be disabled.

PARTIAL ARMING

If one or more of the panels is left open, the CCU will attempt to partially arm as much of the vehicle as possible. If a failure of a panel open switch or wiring occurs, the CCU will partially arm the alarm in the same manner as if a panel is left open.

When the alarm is armed with one or more panels open, the CCU will sound a mislock warning from the horn or BBUS to tell the driver that a panel is open.

The mis-lock warning sound is market selectable and therefore may not be operative in specific markets. When the CCU enters a partially armed state, there is no hazard warning flasher operation, the alarm LED will be extinguished for 10 seconds and will then slow flash.

The CCU will partially alarm the vehicle according the priority of the panel left open. The panel priority is driver's door, passenger door(s), tail door and bonnet with the driver's door being the highest priority and the bonnet being the lowest.

Drivers Door

If the driver's door is open and a lock request is made, the CCU will CDL lock the closed doors, give a mislock sound, suspend superlocking and volumetric sensing and monitor the panel(s) left open. With the driver's door open CDL centre console switch lock requests are ignored.

Vehicle state changes

1. If the driver's door is open and a lower priority panel closes, the CCU will give a mis-lock sound and remain in the driver's door partial arm condition.
2. If the driver's door closes, the CCU will sound a mis-lock warning and remain in the driver's door partial arm condition. If the driver's door is opened, the alarm will be triggered.
3. If the driver's door closes and one or more lower priority panels are open and a lock request is made, the CCU will CDL lock the closed door(s) and enter the partial arm state of the panel open with the next highest priority.
4. If the driver's door closes and all other panels are closed and a lock request is made, the CCU will lock the doors and arm the alarm.

Passenger Door(s)

If one or more of the passenger doors are open and the driver's door is closed and a lock request is made, the CCU will CDL lock the closed door(s), suspend superlocking and volumetric sensing and monitor the panel(s) left open.

Vehicle state changes

1. If one or more passenger door(s) are open and a lower priority panel closes, the CCU will sound a mislock warning and remain in the passenger door partial arm condition.
2. If the passenger door(s) close(s) and one or more lower priority panels remain open, the CCU will sound a mis-lock warning and enter the partial arm condition of the panel with the next highest priority.
3. If the passenger door(s) close(s) and all other panels are closed, the CCU will arm the alarm door sense switches for the closed door(s).

If the tail door is open and all higher priority panels are closed and a lock request is made, the CCU will allow superlocking of the passenger and driver's doors, suspend volumetric sensing and monitor the panel(s) left open.

Vehicle state changes

1. If the tail door is open and the bonnet closes, the CCU will sound a mis-lock warning and remain in the tail door partial arm condition.
2. If the tail door closes and the bonnet remains open, the CCU will suspend operation of the tail door open actuator until the next unlock request is made and enter the bonnet partial arm condition.
3. If the tail door closes and the bonnet and all other panels are closed, the CCU will lock the doors and arm the alarm.

Bonnet

If the bonnet is open and all higher priority panels are closed and a lock request is made, the CCU will allow superlocking of the passenger and driver's doors and volumetric sensing and monitor the panel left open.

Vehicle state changes

1. If the bonnet closes and all other panels are closed, the CCU will enter the locked and armed condition.

MISLOCK WARNING

When the CCU enters a partial armed condition or the alarm is armed with the tail door window down, the CCU will sound a mis-lock warning. The mis-lock warning is market selectable. The mis-lock warning is sounded from either the vehicle horn for a period of 0.02 seconds or from the BBUS for a period of 0.1 seconds.

ALARM ACTIVATED

The audible and visual warnings are activated by the CCU when an alarm trigger is received by the CCU, is market selectable. The audible warning can be a constant tone from the horn for a period of 30 seconds or an intermittent tone from the horn for 30 seconds, with the horn sounding for 0.5 seconds and off for 0.5 seconds. The visual warning is flashing of the hazard warning lights for 30 seconds.

When a BBUS is fitted, all alarm and miss-lock warnings will be sounded via the BBUS.

ALARM RESET

When the alarm has been activated, it can be silenced, with the ignition 'off', by either disarming or repeat arming using the vehicle key or the remote handset.

BATTERY BACKED UP SOUNDER

The BBUS is market programmable and when fitted will provide security warnings: alarm sounder and mislock.

In the event of a tamper detection i.e. power loss to the BBUS, the sounder can only be silenced with reconnection of power to the BBUS and a disarm request followed by an arm request.

In the alarm armed condition the BBUS will sound if it detects a power supply/battery disconnection. If the alarm is not armed the BBUS can be disconnected without the device sounding. Therefore, to prevent the BBUS sounding inadvertently, before any work on the vehicle which requires battery disconnection is carried out, ensure the alarm is not armed.

It is recommended that the BBUS is changed after three years due to limits of battery life.

REMOTE HANDSET (RF TRANSMITTER)

Two remote handsets are supplied with each vehicle. Two buttons on the handset control the locking and unlocking and alarm arm and disarm functions remotely. The remote handset transmits a coded signal which is recognized by the RF receiver. If the handset battery is removed or changed, or the vehicle battery is disconnected, the synchronization of the handset and the RF receiver will be lost.

Remote Handset Re-synchronization

Re-synchronization can be achieved using the handset by operating either handset button five times in quick succession with the ignition off.

Remote Handset Battery Low Warning

If the remote handset battery voltage becomes low, when the handset transmits a signal to the CCU, it also transmits a low battery signal when the driver's door is opened. The CCU buzzer sounds a 10 second warning and the alarm LED flashes for 10 seconds to signify to the driver that the handset battery requires replacement. When the battery is replaced, the remote handset will require re-synchronization with the CCU.

Replacement Handset Programming

Remote handset replacements will require synchronizing. This is achieved using T4 scan tool (security diagnostics) to enter two bar code serial numbers, supplied on a label with the handset, into one of four code positions in the CCU.

DIAGNOSTICS

A diagnostic socket allows the exchange of information between the CCU and T4 scan tool. The diagnostic socket is located in the driver's footwell and is constructed to ISO standard. A dedicated diagnostic bus is connected between the socket and the CCU and allows the retrieval of diagnostic information and programming of certain functions to be performed using T4 scan tool.

The CCU monitors all inputs and outputs and if a fault is detected a code for that fault is stored in a fault log. The CCU has two fault logs for internal and external faults. The CCU is capable of detecting short or open circuits. The CCU will disable certain functions when faults are detected and reinstate functions when faults are corrected and the function is again requested.

Scheme 31

Scheme 32

The immobilization system is essentially a stand alone system with its own controlling ECU located centrally behind the fascia.

On late 2003 model year vehicles (from VIN 242164 onwards), the EWS3-D immobilization system was replaced. A new system was introduced which improved the process for adding or replacing keys, allowing the dealer to enable new keys using T4 scan tool. Apart from the immobilization ECU, the system retains similar components and functionality of the previous immobilization system. The system is not available as a replacement for vehicles fitted with an EWS3-D system.

IMMOBILIZATION SYSTEM

The immobilization system comprises

1. Immobilization ECU
2. Ignition Switch Transponder Coil (Ring Antenna)
3. Key Transponder
4. Ignition Switch
5. Instrument Pack
6. Engine Control Module (ECM)
7. Central Control Unit (CCU)
8. Park/Neutral Switch
9. Starter Motor

Immobilization System - General

The function of the immobilization system is to prevent unauthorized starting of the vehicle. The ECU operates in a secure interface which cannot be by-passed or copied. Re-mobilization is achieved through a transponder in the vehicle key which is energized by a transponder coil surrounding the ignition switch when the ignition is turned to 'AUX' position I. When energized, the transponder data is read by the immobilization ECU which will confirm the validity of the start request.

Scheme 33

The transponder coil is located in a black plastic housing which is located around the ignition key barrel. The coil is connected by two wires to the immobilization ECU.

The transponder coil passes electrical energy and data at a frequency of 125 kHz to a transponder in the vehicle key, up to a range of 20 mm (0.78 in) from the coil.

Key Transponder

Each vehicle is supplied with two vehicle keys and two separate RF transmitters. The RF transmitters are used to lock and arm the vehicle, and for the tail door window drop function. The key head contains the transponder used by the immobilization system.

Scheme 34

On vehicles up to VIN 242163 (EWS-3D System), each keyblade has an external waveform profile which is coded and recorded in a BMW Group database, therefore replacement keys are only available from franchised dealers/suppliers. The transponder contains a 128 byte EEPROM which is programmed with vehicle identification data which is checked by the immobilization ECU before re-mobilization is activated. The information programmed into the EEPROM cannot be overwritten.

On vehicles from VIN 242164, each keyblade has an external waveform profile which is coded and recorded in a Land Rover database. Replacement keys are supplied to the dealer with the correct keyblade waveform profile cut and the transponder programmed by Land Rover. The transponder contains a 256 byte EEPROM which is programmed with vehicle identification data which is checked by the immobilization ECU before re-mobilization is activated. The information programmed into the EEPROM cannot be overwritten.

Immobilization ECU

The immobilization ECU is the central component in the immobilization system and is located behind the fascia in a central position.

The immobilization ECU communicates with the CCU and is connected to the diagnostic socket enabling diagnostic procedures to be carried out.

There is no audible or visual indication to the driver of the condition of the immobilization system.

The immobilization ECU receives information from related systems on the vehicle and passes a coded signal to the ECM to allow starting if all starting parameters have been met. The information is decoded by the ECM which will allow the engine run if the information is correct. The information is on a rolling code system and both the ECU and the ECM will require synchronization if either component is renewed.

Depending on engine fitment, four different ECM's can be used on the vehicle. Each ECM communicates with the immobilization ECU using the same protocol.

The immobilization ECU also protects the starter motor from inadvertent operation. The ECU receives an engine speed signal from the ECM via the instrument pack. When the engine speed exceeds a predetermined value, the ECU prevents operation of the starter motor via an integral starter disable relay.

IMMOBILIZATION ECU & KEY ORDERING PROCEDURE - EWS-3D SYSTEM - UP TO VIN 242163 ONLY

The immobilization system is a highly secure system and to maintain security, the supply of spare/replacement keys and immobilization ECU's is restricted to BMW Group dealers only. Keys can be disabled to prevent use of an unauthorized key using T4 scan tool (immobilization diagnostic).

Key & ECU Ordering Procedure - All Markets (Except Japan)

Each dealer must adhere to the following procedure when ordering keys and/or immobilization ECU's.

1. The dealer receives a request from the customer for a spare/replacement key or a replacement immobilization ECU and key set
2. The dealer must request from the customer proof of ownership and Vehicle Identification Number (VIN). This may be in the form of a registration document for example. If proof of ownership cannot be supplied, the dealer must not proceed with ordering keys
3. The dealer must raise a Vehicle Off Road (VOR) order quoting the VIN and the part number of the part (s) required
4. The dealer must pass the VOR order to the corporate wholesaler, European distribution centre or importer on the Unipart parts ordering system before 12:45 pm for next day delivery
5. Unipart will validate the VIN and, if correct, will send an order to BMW GB on the Direct Factory Supplier (DFS) system before 1:00 pm for the same day delivery to Unipart. If Unipart find the VIN to be incorrect, they will contact the dealer to revalidate the VIN
6. BMW GB record the order and pass it to BMW AG in Dingolfing, Germany who interrogate their database to establish that the VIN is valid. From the database, BMW AG confirm that immobilization codes remain available
7. If no codes are available, the order is returned to BMW GB who inform Unipart that all available codes have been used and that a new immobilization ECU and key set is required. Unipart inform the corporate wholesaler, European distribution centre or importer on a parts information sheet that order has been rejected and reason for rejection. The corporate wholesaler, European distribution centre or importer inform the dealer who will advise the customer that a new immobilization ECU and key set is required. If customer agrees, then the ordering procedure is repeated from step 3
8. BMW AG will establish mechanical and electrical key configuration, update the database and create a bar code order form from which the spare/replacement key or immobilization ECU and key set is made
9. BMW AG will pass the completed order form to the BMW GB key cutting centre who use the bar code to produce the new keys or new immobilization ECU and key sets
10. BMW GB will despatch the part(s) to Unipart at circa 3:30 pm on the same day in order to get the parts on the Unipart overnight VOR delivery
11. In the UK market, Unipart will despatch the part(s) to the corporate wholesaler overnight to arrive circa 8:30 am next day. The corporate wholesaler will deliver the part(s) to the dealer at circa 12:00 pm on the same day
12. In ROW markets, Unipart will despatch the part(s) to the European distribution centre or importer next day to arrive by 12:00 pm the following day. The European distribution centre will deliver the part(s) overnight to arrive at the dealer at circa 8:30 am the following day. In importer markets, courier delivery times to the dealer can be typically 5/6 days for South America/Asia and 8/12 days for Australia

Replacement Key CCU Programming

A replacement key will arrive ready for use. The EWS-3D will recognize the first use of the key and will initiate the random rolling code from then on. T4 scan tool can also be used to enable or disable keys, if a key is lost for example.

IMMOBILIZATION ECU, KEY ORDERING & ENABLING PROCEDURE - NON NAS VEHICLES FROM VIN 242164 ONLY

The immobilization system is a highly secure system and to maintain security, the supply of spare/replacement keys and immobilization ECU's is restricted to Land Rover dealers only. Keys can be disabled, using T4 scan tool (immobilization diagnostic), to prevent use of an unauthorized key. Unlike the previous EWS3-D (up to VIN 242163) immobilization system, this system allows the key transponders and the immobilization ECU to be enabled by the Land Rover dealer. New ECU's and keys are supplied preprogrammed and can be enabled using T4 scan tool using a new or currently enabled key. The ECU is capable of storing up to 30 key identifications.

Each ECU has a unique code and this same code is also programmed to the key transponders, in the keys supplied with the vehicle, during programming at Land Rover. Each key transponder also has a unique identifier which is copied to the ECU when the ECU receives a valid code and a request to enable that key. When the vehicle leaves the production line, the ECU contains one unique code and two unique key identifiers.

The key identifiers are only recorded in the ECU if the keys are enabled to the vehicle. When Land Rover issue a new, replacement key, the key will contain the same unique code as the ECU, but will also have a unique identifier. The key identifier is transferred to the ECU when the key is enabled and stored in the next available key slot.

Key & ECU Ordering Procedure

Each dealer must adhere to the following procedure when ordering keys and/or immobilization ECU's.

1. The dealer receives a request from the customer for a spare/replacement immobilization ECU and key set
2. The dealer must request from the customer proof of ownership and Vehicle Identification Number (VIN). This may be in the form of a registration document for example If proof of ownership cannot be supplied, the dealer must not proceed with ordering keys
3. The dealer must raise a Vehicle Off Road (VOR) quoting the VIN and the part number of the part(s) required
4. The dealer must pass the VOR order to the corporate wholesaler, European distribution centre or importer on the Caterpillar parts ordering system before 12:00pm for next day delivery
5. Caterpillar will validate the VIN and, if correct, will send an order to Land Rover Solihull on the Direct Factory Supplier (DFS) system before 1:00pm for the same day delivery to Caterpillar. If Caterpillar find the VIN to be incorrect, they will contact the dealer to revalidate the VIN
6. Land Rover record the order and retrieve the vehicles security codes from the Electronic Data Warehouse (EDW). The cut and coded key or coded ECU is returned to Caterpillar for dispatch to the dealer
7. If no codes are available, the order is returned to Caterpillar who informs the dealer, wholesaler, European distribution centre or importer that all available codes have been used and that a new immobilization ECU and key set is required. The corporate wholesaler, European distribution centre or importer informs the dealer who will advise the customer that a new immobilization ECU and key set is required. If the customer agrees, then the ordering procedure is repeated from step 3
8. Land Rover will establish mechanical and electrical key configuration, update the database and produce the spare/replacement key or immobilization ECU.
9. Land Rover will dispatch the parts to Caterpillar circa 3:30pm on the same day in order to get the parts on the overnight VOR delivery
10. In the UK markets, Caterpillar will dispatch the parts to the dealer on the overnight delivery service
11. In the ROW markets, Caterpillar will dispatch the parts to the European distribution centre or importer the next day to arrive circa 12:00pm the following day. The European distribution centre will deliver the parts overnight to arrive at the dealer circa 8:30am the following day. In importer markets, courier delivery times to the dealer can be typically 5 to 6 days for America/Asia and 8 to 12 days for Australia.

Immobilization ECU Programming Procedure

Each Land Rover dealer must use the following procedure for replacement of the immobilization ECU

1. When an immobilization ECU requires replacement, the Land Rover dealer will order a 'preprogrammed' ECU from Land Rover. The dealer must request proof of ownership from the customer, which may be in the form of the vehicle registration document. If proof of ownership cannot be established, the dealer must not proceed with the ECU replacement.
2. The replacement ECU is supplied as a pre-programmed unit from Land Rover. Land Rover will pre-load the identities of the keys supplied with the vehicle from the factory before the ECU is despatched to the dealer. The ECU can be supplied with no key identities pre-loaded.
3. The ECU must be synchronized to the ECM so that immobilization can operate normally. If the ECU is supplied with no key identities pre-loaded, the dealer must 'teach' the new ECU the identities of the customers keys before re-synchronization can be attempted. If the key identities are pre-loaded into the ECU, the re-synchronization can be carried out without any further requirement to 'learn' keys.

Note. Once an ECU has been programmed to a specific vehicle, it cannot be used on another vehicle.

Key Programming Procedure

The new immobilization system (from VIN 242164) can be enabled using T4 scan tool. The diagnostic procedures allow the following

1. Identify Key Allocation Within The ECU
2. Learn Blank Keys Supplied By Land Rover
3. Disable Keys
4. Re-Enable A Previously Used (Disabled) Key.

The following procedures outline the processes required to achieve the above listed functions. T4 scan tool can only be used to perform these procedures and the on-screen instructions must be followed.

Identify Key Allocation

1. The immobilization ECU allows a maximum of 30 keys to be programmed for a vehicle. Each key has a unique identification which is determined by it's transponder. The identifications can be displayed on T4 scan tool in the 'Key Store' function.
2. On the T4 scan tool 'Immobilization Diagnostic' screen, select ' Vehicle Maintenance ' icon. Then select ' Key Store ' icon. The screen displayed shows the status of the 30 key slots in the ECU. The slots can be in one of three states: ENABLED - The slot contains a valid key identification which can be used to mobilize the vehicle. 'DISABLED' - The slot does not contain a key identification. DISABLED (USED) - The slot previously contained a key identification which has been deleted. This slot can be re-used. NOTE: On the 'Vehicle Maintenance' screen, there is an icon titled 'Identify Key'. If this icon is selected, the slot number of the key currently in the ignition switch is displayed.

Learn Blank New Keys

1. On the T4 scan tool 'Immobilization Diagnostic' screen, select ' Vehicle Maintenance ' icon. Then select ' Key Programming ' icon.
2. Read the information displayed on the Key Programming page and press the ' Continue ' icon at the bottom of the page to continue.
3. Insert the 'New' key into the ignition switch and turn the ignition to position I (AUX). Press ' Exit ' icon at the bottom of the page to continue.
4. Because the key inserted is a new key, it's identification is not stored in the ECU. A 'Key Invalid' message is displayed on the screen. Select the ' New Key ' icon at the bottom of the page.
5. If more than one key is to be enabled, select the ' Yes ' icon at the bottom of the page, otherwise select the ' No ' icon at the bottom of the screen.
6. Follow the on-screen instructions to clear any fault codes from the ECU. Press Continue ' icon at the bottom of the page to proceed. T4 scan tool will now give an option to clear the fault codes. Select the ' Yes ' icon at the bottom of the page to continue. NOTE: Fault codes can be generated during the key learning process.
7. Select the ' Continue ' icon at the bottom of the page to complete the key learning process.

Disable Keys

1. This process is used to disable one or more keys. The diagnostics will disable all current and enabled keys in the ECU with the exception of the key currently in the ignition switch. NOTE: Disabled keys will no longer be able to start the vehicle.
2. On the T4 scan tool 'Immobilization Diagnostic' screen, select the ' Vehicle Maintenance ' icon. Then select the ' Key Programming ' icon.
3. Read the information displayed on the Key Programming page and press the ' Continue ' icon at the bottom of the page to continue.
4. Make sure that the key in the ignition switch is an enabled key which will start the vehicle. Press the ' Continue ' icon at the bottom of the page to continue.
5. Select the ' Disable Keys ' icon; the 'Disable Keys' screen will appear. Press the ' Continue ' icon at the bottom of the page to continue. All keys, except the key in the ignition, will be disabled. To re-enable all other keys to be used with the vehicle using the following procedure.

Enable Previously Disabled Keys

1. This procedure is only applicable to keys which have previously been used on the vehicle. The procedure can be used for the following: Re-enable valid keys following a Key Disable procedure. Re-enable a key which was previously lost/not used by the customer and disabled. NOTE: Do not use this process to attempt to enable a new key issued direct from Land Rover.
2. On the T4 scan tool 'Immobilization Diagnostic' screen, select the ' Vehicle Maintenance ' icon. Then select 'the Key Programming ' icon.
3. Read the information displayed on the Key Programming page and press the ' Continue ' icon at the bottom of the page to continue.
4. Make sure that the key in the ignition switch is an enabled key which will start the vehicle, not the key which is to be re-enabled. Press the ' Continue ' icon at the bottom of the page to continue.
5. Select the ' Enable Keys ' icon; the 'Enable Keys' screen will appear. Press the ' Continue ' icon at the bottom of the page to continue.
6. Remove the key from the ignition switch. Insert the key to be re-enabled into the ignition switch and turn the ignition to position I (AUX). Press the ' Continue ' icon at the bottom of the page to continue.
7. If more than one key is to be enabled, select the ' Yes ' icon at the bottom of the page, if not, select the ' No ' icon.
8. Follow the on-screen instructions to clear any fault codes from the ECU. Press the ' Continue ' icon at the bottom of the page to proceed. T4 scan tool will now give an option to clear the fault codes. Select the ' Yes ' icon at the bottom of the page to continue.
9. Select the ' Continue ' icon at the bottom of the page to complete the key re-enable process.

The immobilization system prevents unauthorized starting of the vehicle. The immobilization ECU is a secure interface between the ECM which cannot be copied or by-passed.

The ECU ensures that the vehicle is in a safe condition to start the engine. On vehicles with an automatic transmission, the ECU prevents starter operation if the transmission selector lever is not in park or neutral. A feed from the automatic transmission solenoid (C0024) is connected to pin 3 on the immobilization ECU. The feed is only present when the selector lever is in either park/neutral. If the selector lever is moved to any other position the feed to the immobilization ECU is removed and engine cranking will be disabled.

When the ignition is switched to position 0 (off) and the key is removed from the switch, the immobilization ECU becomes active and prevents unauthorized starter operation. Re-mobilization is achieved only by insertion of a valid vehicle key into the ignition switch and turning the switch to position I (AUX).

Ignition Switch Transponder Coil & Key Transponder

The transponder coil is supplied with a modulated electric current from the immobilization ECU. When the key transponder is within 2 cm (0.78 in) from the coil, with the ignition switch in the position I (AUX), an energy transfer from the coil to the transponder takes place, similar to the transformer principle, at a frequency of 125 kHz. The ECU de-modulates and decodes the received data and compares this with identification code data from the ECM. If the data is correct the ECU allows starter operation.

When the key is inserted in the ignition switch, communications between the transponder and the immobilization ECU, via the transponder coil, occur as follows

1. A unique key identification number is passed to the ECU.
2. A random code is transmitted by the ECU to communicate with the key transponder.
3. An encrypted response to the random code is transmitted from the key transponder to the ECU.

Programming - Vehicles Up to VIN 242163

The immobilization ECU is programmed with vehicle specific data during manufacture. The key transponders are supplied with the specific vehicle pre-programmed with the mechanical code for that vehicle's lockset. The mechanical code is read at the factory before the keys are programmed and the information is stored in a central database. The data is required to cut spare or replacement keys.

The ECU is programmed during manufacture with data to support up to ten keys. The programmed information is recorded against the VIN for that vehicle and stored in a central database.

Replacement or spare keys will be ordered and delivered to the dealer already programmed with the correct information specific to the particular vehicle and ready for use.

If a replacement immobilization ECU is required it will be ordered and delivered to the dealer programmed with the original information stored during manufacture. The ECM will not require reprogramming because the replacement ECU will have the same identification code as before. The ECM and the EWS-3D immobilization ECU will however need have their rolling code synchronized using T4 scan tool.

If the ECM is replaced, the ECM will have to learn the identification code. This is achieved using T4 scan tool. When the immobilization ECU receives the correct diagnostic message it will transmit the identification code on a continual basis until the ignition is switched off. Simultaneously, the ECM also receives a diagnostic command to learn the new code.

Programming - Vehicles From VIN 242164

The immobilization ECU is programmed with vehicle specific data by Land Rover during vehicle manufacture. This data is also stored in other ECU's on the vehicle. Non-sensitive data stored in the immobilization ECU can be retrieved using T4 scan tool.

The ECU is programmed during manufacture with data to support up to 30 keys which can be enabled with T4 scan tool. Replacement or spare keys will be ordered and delivered to the dealer as a disabled key. The dealer will use the previously described 'Learn Blank/New Keys' procedure for enabling the new key. The key will be supplied with the correct key blade profile for the applicable vehicle lockset.

If a replacement immobilization ECU is required it will be ordered and delivered to the dealer as a pre-programmed ECU. The ECM and the new immobilization ECU will however need have their rolling code synchronized using T4 scan tool.

If the ECM is replaced, the new ECM will have to learn the identification code. This is achieved using T4 scan tool. When the immobilization ECU receives the correct diagnostic message it will transmit the identification code on a continual basis until the ignition is switched to position 0 (off). Simultaneously, the ECM also receives a diagnostic command to learn the new code.

Starter Motor Protection

The immobilization system incorporates a starter motor protection function. When the engine speed exceeds a predetermined value, a starter relay inside the immobilization ECU is disabled. This relay is wired in series with the main starter motor solenoid and therefore when disabled it cuts off the power supply to the starter motor. This prevents damage to the starter motor being caused by a sticking ignition switch. The engine speed is derived from the instrument pack which converts the speed from a CAN bus signal into a pulsed signal compatible with the immobilization ECU.

A diagnostic socket allows the exchange of information between the immobilization ECU and T4 scan tool. The diagnostic socket is located in the driver's footwell and is constructed to ISO standard. A dedicated diagnostic bus is connected between the socket and the immobilization ECU. The bus allows the retrieval of diagnostic information and programming of certain functions to be performed using T4 scan tool.

The diagnostic bus protocol differs depending on the immobilization system fitted to the vehicle as follows

1. For vehicles up to VIN 242163 (EWS3-D system) the immobilization ECU uses DS2 protocol.
2. For vehicles from VIN 242164 the immobilization ECU uses Keyword 2000* protocol.

The immobilization ECU monitors all inputs and outputs and if a fault is detected, a code for that fault is stored in a fault log which can be retrieved using T4 scan tool. The diagnostic interface is also used for synchronizing a replacement ECM to the existing immobilization ECU and for enabling or disabling new or current keys.