2010 JAGUAR XFR key

Anti-Theft - Passive (Description and Operation), Anti-Theft - Passive (Description and Operation).
Inspection and Verification

Anti-theft - Passive

The best method to confirm the correct operation of the Passive Anti-Theft System (PATS) is to check the LED (located in the
center of the instrument panel). The LED should illuminate solid for 3 seconds, when the ignition status is set to ON, and then
extinguish. This validates all PATS functions (i.e. the key transponder matches a stored key code, the challenge/response
sequence between the respective modules was successful resulting in the EMS being enabled).
Ignition fails to operate

Check that the smart key is located within the vehicle interior, and that it is the correct one for the vehicle.

Insert the smart key into the start control unit (located at out board side of driver instrument panel lower panel), this is an
alternative method to allow Ignition On/Engine Start.



Check that the start button circuit to the CJB is not open circuit or short circuit to power.

Check that the Low Speed CAN network is not malfunctioning, i.e. open circuit or short circuit. This would mean that the
remote keyless entry module, Central Junction Box (CJB) and instrument cluster would be unable to communicate.
Engine fails to crank

If a PATS fault is detected, the LED will flash for 60 seconds at 4Hz with a 50% duty cycle. At the end of this period, the LED
will flash a 2 digit code; this code is repeated 10 times. The meaning of these fault codes along with the frequency of flashing
is given in the accompanying table. As a general rule a fault code of 16 or less will cause the vehicle not to crank. Additionally,
the manufacturer approved diagnostic system should be used to check the instrument cluster, CJB & ECM for Diagnostic Trouble
Codes (DTCs).
One potential occurrence for failing to crank could be due to the P & N start switch (input to the ECM).
Check the Crank Request output from the CJB to ECM is not short circuit to ground or open circuit. www.JagDocs.com

Check the Starter Relay circuit.


NOTE: On petrol engine variants, due to Smart Start, both sides of Relay Coil are switched directly from ECM (If
conditions correct). On diesel engine variants the low side only is switched directly from the ECM.
Check that the Steering Column Lock correctly operates and the steering wheel can turn freely.

Check that the High Speed CAN network is not malfunctioning, i.e. the CAN circuit is open or short circuit. This would mean
that the instrument cluster and ECM would be unable to communicate resulting in no Challenge being performed to enable the
ECM. This would be supported by LED Flash Code 24, see PATS Fault Code Table.

Also check the CAN network between the ABS module and the CJB. The CJB uses the CAN_BrakePressureTMC signal to
determine if the brake pedal has been pressed in order to allow an engine crank. The CJB uses a value of 0x05, if the CJB sees
a value less than this, it will not enable the Crank Request Output.
Engine cranks but will not start

If the Engine is cranking it means that the ECM has passed the authorisation required with the Instrument Cluster. If this
authorisation failed, the ECM would not engage the starter relay. This could be confirmed by verifying the PATS LED prove out
(illuminated solid for 3 seconds) or by reading DTCs from the instrument cluster and ECM.

In this case, the fuel pump circuit should be verified. The Fuel Pump Delivery Module (FPDM), which is supplied via the RJB
(authentication required with the instrument cluster) and controlled by the ECM, supplies the fuel pump.
In all cases of suspected non-start issues, the most logical failure modes should be eliminated first. i.e.

1. Check all relevant supplies and grounds to the relevant modules listed herein.
2. Note any unusual behaviour from other systems/functionality.
3. Note any functions that are not operating as expected.
PATS Fault Codes

For the various PATS modes/faults listed in the table , the instrument cluster will store a DTC and indicate this to the customer
during the detection period defined in the 'when logged' column, by illuminating the indicator as described for 60 seconds and
then flashing the LED 10 times as appropriate. The indication will stop immediately the ignition status is set to OFF any time
during the fault indication sequence. Up to 4 DTCs could be stored per key read sequence (1-10 read attempts). No DTCs will be
stored until all retry attempts are complete. Only the highest priority fault code will be flashed.

To determine the fault code from the LED: The LED will flash initially ten times with 1.5 seconds between. The LED will remain
OFF for 2.5 seconds then flash a number of times with 0.5 seconds between (the number of times the LED flashes represents
the first digit of the code), the LED will remain OFF for 1.5 seconds then flash a number of times with 1.5 seconds between
(the number of times the LED flashes represents the second digit of the code).

The PATS LED will be commanded on as shown under 'indication'. Normal PATS operations are complete within 400ms of the
ignition switch transition from OFF to ON or START, worst case for ECM communication problems will be less than 2 seconds. If
PATS is not complete during the 2 seconds the ECM will terminate PATS and await the next ignition ON or START event. PATS
faults will be indicated via the LED as soon as possible and will terminate the LED prove out. At ignition OFF all previous
flashing will cease and the perimeter anti-theft system will control the LED when the vehicle is locked and armed.

PATS Fault Code Table


Mode of Operation/Fault

When Logged
Ignition
Status

DTC LED
Fault
Code

Indication Prove out N/A Transition
from OFF to
ON N/A N/A
3 Seconds of steady
illumination Perimeter Anti-theft Control N/A OFF -
Vehicle
locked and
armed N/A N/A
Off or 0.5Hz flashing
at 5% duty cycle ±
20% until Off Start Control Unit already programmed Key Insert Any B1B0105 N/A No Indication Start Control Unit status = invalid response Key Insert Any B1B0167 N/A No Indication Start Control Unit programming error Key Insert Any B1B0151 N/A No Indication Start Control Unit challenge response error Key Insert OFF B1B0162 N/A No Indication Key Programming timer expired or Key Auth Timer expired Key Insert Any B1B0187 N/A No Indication Transponder challenge response error Key Insert Any B1B0164 N/A No Indication Transponder keys stored below minimum number required B&A/Dealer Any B1B0100 N/A No Indication Transponder not programmed B&A/Dealer Any B1B0155 N/A No Indication If the instrument cluster sends a 'theft' key status
to the ECM or the ECM returns a status message
containing the data 'Disabled/Theft', the instrument
cluster will set this DTC EMS CAN
communication OFF to ON B1B3364 16
60 seconds of 4Hz
flashing at 50% duty
cycle followed by fault
code 16 flashing 10
times

Symptom Possible Cause Action Vehicle’s current position
mark turns independently
Electrical harness open/short
circuit, dis-connected
Component failure
Vehicle on a turntable in a parking
building GO to Pinpoint Test E. Car current position not
stable
Electrical harness open/short
circuit, dis-connected
Component failure GO to Pinpoint Test F. Map display is incomplete
Map disc contaminated/damaged
Electrical harness open/short
circuit, dis-connected
Incorrect market map disc
Component failure GO to Pinpoint Test G. No navigation voice guidance
Voice guidance soft key set to OFF
position
Volume level set too low
Component failure GO to Pinpoint Test H. No response to pressing
navigation menu
Interruption during map disc
update
Electrical harness open/short
circuit, dis-connected
Incorrect Navigation Control
Module (NCM) installed
Incorrect car configuration data
received GO to Pinpoint Test I. 'NO DVD PLEASE INSERT MAP
DVD' message is displayed
A disc other than the map disc is
inserted Insert the correct map disc 'UNABLE TO READ DATA
CONSULT YOUR DEALER'
message is displayed
DVD player abnormality Check and install a new Navigation Control Module
(NCM) as required. Refer to the new
module/component installation note at top of DTC
Index. 'UNABLE TO READ DATA TEMPERATURE IS TOO HIGH'
message is displayed
Operating temperature has been
exceeded
Navigation Control Module (NCM)
internal temperature is high Move the vehicle to a cool location, and turn the
engine OFF. Wait for a while, then verify conditions
again. If the temperature around the Navigation
Control Module (NCM) is high, take measures to lower
temperature 'UNABLE TO READ DVD
CORRECTLY CHECK IF THE
DVD IS DAMAGED OR DIRTY'
message is displayed
Check map disc for contamination,
deformation, cracks, scratches or
non-genuine disc Clean the map disc and retest, replace the map disc 'UNABLE TO READ DATA
CHECK IF MAP DVD IS
CORRECT' message is displayed
Incorrect DVD map disc is inserted Insert a map disc with the correct part number Pinpoint Tests

NOTES:


If the control module or a component is suspect and the vehicle remains under manufacturer warranty, refer to the
Warranty Policy and Procedures manual (section B1.2), or determine if any prior approval Program is in operation, prior to the
installation of a new module/component.


Navigation Diagnostic Screen Access

1. With the vehicle at rest, place the ignition switch in either "ACC", "ON", or start the engine.
2.On the "Menu" screen, press the top center of the screen for more than three seconds.
3. Enter the PIN code, and then touch "OK". 660: Diagnosis Menu screen 661: System Check screen (DTC code
verification screen) 662: GPS Information screen.
4. The diagnostics screen will be displayed.

PINPOINT TEST A : POOR SATELLITE RECEPTION www.JagDocs.com

PINPOINT TEST H : NO NAVIGATION VOICE GUIDANCE TEST
CONDITIONS DETAILS/RESULTS/ACTIONS H1: CHECK ALL AUDIO OUTPUT SYSTEMS 1 Check audio output across all systems. Is there sound output across all systems? Yes
GO to H2. No
GO to H3. H2: CHECK VOICE GUIDANCE SOFT KEY 1 Check navigation screen menu, voice guidance soft key is not set to OFF position. Is the voice guidance soft key set to OFF position? Yes
Set the voice guidance soft key to ON position.
Re-check the system
No
GO to H3. H3: VOLUME LEVEL CHECK 1 Check the volume level is not set too low. Is the volume level set too low? Yes
Increase the volume level and re-test vehicle.
No
Refer to electrical circuit diagrams and check integrity of amplifier and speaker system wiring harness
and connectors.
GO to H4. H4: NAVIGATION VOICE ONLY NOT AUDIBLE
NOTE: Only the navigation voice cannot be heard. 1 Press the 'Navigation voice repeat' soft key. After the navigation voice repeat soft key is pressed, can voice still not be heard even though it has
become louder? Yes
Check and install a new Navigation Control Module (NCM) as required. Refer to the new
module/component installation note at top of DTC Index.
No
Operation is normal.
PINPOINT TEST I : NO RESPONSE TO PRESSING NAVIGATION MENU TEST
CONDITIONS DETAILS/RESULTS/ACTIONS I1: NO RESPONSE TO PRESSING NAVIGATION MENU
NOTE: 15 minutes are required for the program to update. If the engine is accidentally turned OFF, start the engine
again, and wait for 15 minutes. 1 Check that the engine was not turned 'OFF' during a navigation software update. Was the engine turned 'OFF' during a navigation software update? Yes
Check the correct map disc is inserted into the Navigation Control Module (NCM). Start the engine and
allow to idle for 15 minutesTurn the engine 'OFF', and then start the engine again.Verify that the
navigation screen displays. Navigation was in the program update mode.
No
GO to I3. I2: NO RESPONSE TO PRESSING NAVIGATION MENU 1 Check that the engine was not turned 'OFF' after inserting the new map disc. Was the engine turned 'OFF' after inserting the new map disc? Yes
Check the correct map disc is inserted into the Navigation Control Module (NCM). Start the engine and
allow to idle for 15 minutesTurn the engine 'OFF', and then start the engine again.
No
GO to I3. I3: NO RESPONSE TO PRESSING NAVIGATION MENU Has a fault been identified with the map disc?
Yes
Replace the map disc.
Re-check the system for 'Map display is incomplete'.
No
Check and install a new Navigation Control Module (NCM) as required. Refer to the new
module/component installation note at top of DTC Index.

NOTE: LHD vehicle shown 1 CJB 2 ATC module 3 Passenger door module 4 Audio system control panel 5 Instrument cluster 6 RJB 7 RH blind spot monitoring module 8 Parking aid module 9 Keyless vehicle module 10 LH blind spot monitoring module 11 Driver's door module 12 Driver's seat module 13 Diagnostic socket COMPONENT LOCATION - MEDIUM SPEED CAN BUS
www.JagDocs.com

Instrument cluster
High speed CAN
(controller area network) bus Receives data from other vehicle systems to provide
information to the driver. Also functions as the gateway for the bus systems. Instrument panel. Steering column
High speed CAN bus Controls the locking and unlocking of the steering
column. Upper steering column. Diagnostic socket
High speed CAN bus Allows the transfer of vehicle information using a
Jaguar approved diagnostic system or other diagnostic tool. In the lower instrument panel
on the driver's side, adjacent
to the start control module. RCM (restraints control module) High speed CAN bus Controls the deployment of the supplementary
restraint components. At rear of floor console. TCM (transmission
control module) High speed CAN bus Controls automatic transmission operation.
Inside the transmission and
accessible via the fluid pan. ECM (engine control
module) High speed CAN bus Controls engine management and fuel system
operation. Rear of the engine
compartment on the
bulkhead. ABS (anti-lock brake
system) High speed CAN bus Controls all aspects of the braking system
Rear of the engine
compartment on the
bulkhead. Headlamp leveling
module High speed CAN bus Controls the static dynamic headlamp leveling
function. In the lower instrument panel, behind the glovebox. Occupant classification
system control module (NAS only) High speed CAN bus Detects when a passenger is in the front passenger
seat and can determine their size and weight. Below the front passenger
seat. Adaptive damping
control module High speed CAN bus Controls the adjustment of the dampers.
Below the front passenger
seat. Electronic Parking Brake
(EPB) module High speed CAN bus Controls the application and release of the electronic
parking brake. In the luggage compartment,
above the RH (right-hand)
wheel arch. Pedestrian protection
module High speed CAN bus Controls and monitors the pedestrian protection system. LH (left-hand) 'A' pillar. Adaptive speed control
module High speed CAN bus Controls the vehicle's road speed in relation to other
vehicles when in speed control mode. Behind the instrument panel
on the driver's side. Electronic transmission
selector High speed CAN bus Allows the driver to electronically select the required
automatic transmission mode. Transmits driver
selections to the TCM. In the floor console. Jaguar Drive control
module High speed CAN bus Controls the Jaguar Drive function and communicates
with other system modules. Integral with the electronic
transmission selector
software in the floor console. CJB
Medium speed CAN bus Controls body functions and power distribution. On RH 'A' pillar. Diagnostic socket
Medium speed CAN bus Allows the transfer of vehicle information using a
Jaguar approved diagnostic system or other diagnostic tool. In the lower instrument panel
on the driver's side, adjacent
to the start control module. Passenger door module
Medium speed CAN bus Controls window and locking functions. In the front passenger door. Parking aid module
Medium speed CAN bus Controls the parking aid system.
In the LH side of the luggage compartment, adjacent to
the keyless vehicle module. www.JagDocs.com

Module Network System Function Vehicle Location
Driver's seat module Medium speed CAN Controls driver's seat positioning and also memory Below the driver's seat. bus functions of other personalized functions.
Instrument cluster Medium speed CAN Receives data from other systems to provide driver In the instrument panel. bus information.
Driver's door module Medium speed CAN Controls window and locking functions. In the driver's door. bus
ATC (automatic Medium speed CAN Contains controls for the heating and air On the end of the air
temperature control)
module bus conditioning systems.
conditioning evaporator and
blower assembly.
Information control Medium speed CAN Contains controls for the entertainment systems. In the instrument panel module bus
below the integrated control
panel.
Integrated control Medium speed CAN Contains controls for the entertainment systems and In the instrument panel. panel bus
gateway between audio system and other vehicle
systems.
Front seat climate Medium speed CAN Controls the temperature requirements of the driver Below the RH front seat. control module bus and passenger front seats.
LH blind spot Medium speed CAN Controls the operating parameters of the system and Behind the outer part of the monitoring module bus provides driver indications and fault monitoring.
rear bumper, rearward of the
rear wheel.
RH blind spot Medium speed CAN Controls the operating parameters of the system and Behind the outer part of the monitoring module bus provides driver indications and fault monitoring.
rear bumper, rearward of the
rear wheel.
Keyless vehicle module Medium speed CAN Allows the vehicle to be opened and closed without In the LH side of the luggage bus the use of a key.
compartment, adjacent to
the parking aid module.
RJB (rear junction box) Medium speed CAN Controls body functions and power distribution. RH of luggage compartment. bus
Tire pressure Medium speed CAN Monitors the vehicle tires to warn of deflation. Below the rear of the floor monitoring control
module bus console.
TCM K Bus Data transfer between TCM and diagnostic socket. NOTE: Only fitted to early build vehicles. Inside the transmission and
accessible by removal of the
fluid pan.
Driver's side rear door
module LIN (local
interconnect
network) Controls window and locking operation. In the driver's side rear door.
Passenger side rear
door module LIN Controls window and locking operation. In the passenger side rear
door.
Driver's door module LIN Memory/adjustment functions for seat, steering
column and mirrors and door security functions. In the driver's door.
Passenger front door
module LIN Memory/adjustment functions for seat, steering
column and mirrors and door security functions. In the passenger door.
Driver's door switches LIN Transmit driver selections to the driver's door
module. In the driver's door panel.
ECM LIN Receives a load signal from the generator. In the engine compartment
on the bulkhead.
Generator LIN Provide load signal to the ECM. On the LH side at the front of the engine.
Driver's seat module LIN Control position of driver's seat. Below the driver's seat on
the floor pan.
Driver's seat switches LIN Provide driver selection inputs to the driver's seat
module. On the outside of the trim
panel on the driver's seat.
Air quality sensor LIN Measures quality of air entering the vehicle interior. At the front of the vehicle,
behind the air intake grill.
Windshield (defrost)
stepper motor LIN Moves flaps within the heater assembly to direct air
flow to the windshield. On the heater assembly.
Face/feet stepper motor LIN Moves flaps within the heater assembly to direct air
flow to instrument panel vents and/or footwell. On the heater assembly.
LH temperature blend
stepper motor
RH temperature blend
stepper motor LIN Moves flaps within the heater assembly to control
temperature in LH side footwell.
LIN Moves flaps within the heater assembly to direct air
flow to RH side footwell. On the heater assembly.
On the heater assembly.
Electric booster heater LIN Controls operation of the electric booster heater. Inside the heater assembly.
LH outer face level vent LIN Controls the operation of the face level vent stepper In the instrument panel.
motor.
LH inner face level vent LIN Controls the operation of the face level vent stepper In the instrument panel.
motor.
RH inner face level vent LIN Controls operation of the face level vent stepper
motor.
RH outer face level vent LIN Controls operation of the face level vent stepper
motor. In the instrument panel.
In the instrument panel.
ATC module LIN Controls operation of the climate system functions. In the instrument panel.
Steering wheel audio
switches LIN Converts analogue signals from steering wheel
switches into digital messages. On the steering wheel.

Module Network System Function Vehicle Location
Steering wheel
clockspring LIN Passes digital messages from the steering wheel
audio switches to the instrument cluster. Behind the steering wheel,
on the upper steering
column.
Instrument cluster LIN Receives digital signals from other vehicle systems. On the driver's side of the
instrument panel.
Battery backed sounder LIN Activated by CJB when alarm trigger is received. In the LH side of the engine compartment, near the
bulkhead.
CJB LIN Controls body functions and power distribution. On the RH 'A' pillar.
RJB LIN Controls body functions and power distribution. On the RH of the luggage compartment.
Battery monitoring
system module

Intrusion detection
module LIN Monitors the condition and charge of the vehicle
battery.

LIN Detects movement in the vehicle interior and
activates the anti-theft system. On the vehicle battery
positive terminal in the
luggage compartment.
In the front overhead
console.
Rain/light sensor LIN Detects ambient light levels and moisture on the
windscreen for operation of the automatic
headlamps and wiper systems.
Start control module LIN Used to identify the Smart Key - component of the
keyless start system.
Rear view camera LIN Passes digital images data from the rear view
camera to the RJB On the inside of the
windshield behind the interior
rear view mirror.
In the lower instrument panel
on the driver's side.
In the luggage compartment
lid trim finisher.
Driver's window switch LIN Controls operation of the driver's window. In the driver's door trim
panel.
Electronic transmission
selector LIN Sends selector position to the TCM. In the floor console. TCM LIN Receives selector position information to control the Inside the transmission and


Information control
module

Media Oriented
System Transport
(MOST) transmission.

Contains controls for the entertainment system and
gateway between audio system and other vehicle
systems. accessible by removal of the
fluid pan.
In the instrument panel
below the integrated control
panel.
Integrated control
panel MOST Contains controls for the entertainment system. In the instrument panel.
Digital Audio Broadcast MOST Receives digital radio broadcasts. In the LH side of the luggage (DAB) receiver (SDARS
NAS only)
Bluetooth® phone
module compartment, above the
keyless vehicle module.
MOST Controls operation of the Bluetooth® phone system. Below the LH front seat, adjacent to the portable
audio module.
Amplifier/tuner MOST Provides amplification for the entertainment systems In the LH side of the luggage and reception of radio RF broadcasts.
Navigation computer MOST Reads map data from a DVD (digital versatile disc)
to calculate and display visual route guidance
information via the TSD and audible guidance via the
amplifier to the driver. compartment.
In the LH side of the luggage compartment.
Touch Screen Display
(TSD) MOST Provides the driver interface to the entertainment,
navigation and driver personalization functions. In the center of the
instrument panel.
TV tuner MOST Controls the reception of television signals and
audio/visual inputs.
Portable Audio Module MOST Controls the auxiliary inputs for additional audio
inputs via the portable audio interface. In the LH side of the luggage compartment.
Below the LH front seat, adjacent to the Bluetooth®
phone module.
MOST diagnostic
connector MOST Allows for diagnostic fault detection of the MOST
ring. Below the air ducting in the
floor console.
Refer to Communications Network section for further details.
Refer to: Communications Network (418-00 Module Communications Network, Description and Operation).