2010 JAGUAR XFR instrument cluster

7 Central locking - Radio Frequency (RF) receiver 8 Engine compartment lid - latch mechanism 9 Passive sounder 10 Battery backed sounder 11 Alarm indicator 12 Instrument cluster 13 Start control unit 14 Luggage compartment lid - latch mechanism 15 Door latch mechanism - LH (left-hand) rear 16 Door latch mechanism - RH (right-hand) rear 17 Door latch mechanism - RH front 18 Door latch mechanism - LH front 19 Door module - LH rear 20 Door module - RH rear 21 Door module - RH front 22 Door module - LH front 23 Intrusion detection module


Anti-Theft - Active System Operation

The active anti-theft system is available with three different levels of vehicle protection depending on market specification:
Hinged panel sensing
Hinged panel and intrusion sensing
Hinged panel, intrusion and inclination sensing.
The system is controlled by software in the CJB and RJB and indicates a trigger condition: Visually, using the direction indicators, and
Audibly, using the vehicle horn and either a passive or active sounder to indicate a trigger condition.

The passive sounder takes the form of an anti-theft disc horn located at the rear of the engine compartment on the LH side. The active sounder takes the form of a battery backed sounder located in the same position.

Depending on market specification, the battery backed sounder may be fitted with an inclination sensor. Both types of battery
backed sounder are visually identical and can only be identified by their part number. Both are also intelligent units, and
communicate to the CJB over a LIN (local interconnect network) bus connection.

Monitoring of the hinged panels is carried out using switches located in each door latch assembly, the engine-compartment-lid
latch assembly, and the luggage-compartment-lid latch assembly. The condition of the switches is monitored by the CJB.

Monitoring of front door lock status is carried out using switches located in the door latch mechanisms. The condition of the
switches is monitored by the front door modules and transmitted to the CJB over the medium speed CAN (controller area
network) bus.

Monitoring of the cabin interior is carried out using an intrusion detection module mounted behind the roof console. The
intrusion detection module comprises an ultrasonic sound wave sensor to determine if there is movement within the cabin.
Information from the intrusion detection module is communicated to the CJB over a LIN bus connection.
CAUTIONS:

The intrusion detection module electrical connections, particularly those to the sensors mounted in the roof console, are
very delicate and must be handled with care.


The intrusion detection module is an electro-statically sensitive part and should only be handled in an electro-statically
controlled environment.
When armed, the active anti-theft system can be triggered in one of the following ways:
A door ajar switch indicates a door has been opened.
The engine compartment lid or luggage compartment lid ajar switches indicate that either has been opened.
Either front door latch mechanism indicates a door has been unlocked.
The emergency key blade is used to open either the LH front door or luggage compartment.
The CJB or RJB are disconnected (this may result in only a partial trigger).
An attempt is made to start the engine without a valid signal from the Smart Key.
Refer to: Anti-Theft - Passive (419-01B Anti-Theft - Passive, Description and Operation).

The battery backed sounder is disconnected (partial trigger only).
The vehicle battery is disconnected on a vehicle fitted with a battery backed sounder (partial trigger only).
The inclination sensor detects a change in vehicle attitude.
The intrusion detection module detects movement within the cabin.



Door Modules Component Description

The door modules provide the interface between the door latch-motors, the door latch-switches and the CJB. The door modules
provide door switch status information and enable the door latch-motors on request from the CJB or the keyless vehicle
module.

Keyless Vehicle Module

The keyless vehicle module interfaces with the Central locking, Radio Frequency (RF) receiver and collects RF signal information
which is transmitted from the Smart Key. This information is translated into commands which are passed on the medium speed
CAN bus to the:

CJB,
RJB,
door modules, and
instrument cluster.
The keyless vehicle module also monitors:
2 interior antennae,
1 luggage compartment antenna,
a rear bumper antenna, and
4 door handle antennae if the passive entry system is fitted.

On vehicles with passive entry, the additional fast latch motors are controlled via the keyless vehicle module and the locking
status is passed to the CJB on the medium speed CAN bus.

Instrument Cluster

The instrument cluster controls the alarm indicator, and in conjunction with the ECM (engine control module), the engine
immobilization. The ECM controls the engine crank and fuel functions and the instrument cluster processes the valid
transponder information.

Alarm Indicator

The alarm indicator is a LED (light emitting diode) located in the body of the sunload/light sensor. When the ignition is off the
indicator gives a visual indication of the active anti-theft system to show if the alarm system is active or not active. Operation
of the alarm indicator is controlled by the instrument cluster which varies the flash rate of the LED to indicate the system
status of the alarm and the immobilization systems.

When the ignition is on, the indicator provides a visual indication of the status of the passive anti-theft (engine
immobilization) system. If the immobilization system is operating correctly, the LED will be illuminated for 3 seconds at
ignition on and then extinguish. If a fault exists in the immobilization system, the LED will be either permanently illuminated
or flashing for 60 seconds. This indicates that a fault exists and fault code has been recorded. After the 60 second period the
LED will flash at different frequencies which indicate the nature of the fault.
Refer to: Anti-Theft - Passive (419-01B Anti-Theft - Passive, Description and Operation).
Passive Anti-Theft Horn

The passive anti-theft horn is hardwired to the CJB which activates the horn when the alarm is triggered.

Battery Backed Sounder

Operation of the battery backed sounder is controlled by the CJB on the LIN bus. The sounder is also connected with a
permanent battery supply via the CJB. An integral, rechargeable battery powers the sounder if the battery power supply from
the CJB is interrupted.

Dependant on vehicle, a incitation sensor is incorporated into the battery backed sounder, to monitor vehicle attitude, see
Inclination Sensor.

Inclination Sensor

The CJB monitors the inclination sensor and will activate the alarm system if the vehicle is being raised.

Intrusion Detection Module

The intrusion detection module comprises an ultrasonic sound wave sensor which monitors the vehicle's interior.

The intrusion detection module is activated with volumetric mode which in turn is enabled when the vehicle is double locked.
The vehicle can be locked and alarmed with the module de-activated if a pet is to be left in the vehicle for example by single-

7 Low frequency antenna - front 8 Low frequency antenna - center 9 Low frequency antenna - rear 10 Radio frequency receiver 11 Start control module 12 CJB (central junction box) 13 Instrument cluster 14 Megafuse (250 amp)
System Operation

The passive start function prevents the vehicle from being started by unauthorized persons. It does this by immobilizing the
ignition, fuel and engine crank functions. The system is automatic and requires no input from the driver.

At the request of the CJB, the keyless vehicle module prompts each of the Low Frequency (LF) antennae to output a signal. When the Smart Key is in the vehicle cabin, it detects the LF signals and responds with a Radio Frequency (RF)
data-identification signal back to the keyless vehicle module via the RF receiver.

If the data received matches that stored in the keyless vehicle module it continues the passive start process by
communicating a 'Smart Key valid’ signal to the CJB via the medium speed CAN (controller area network) bus.

Once the CJB receives the authorization and confirms a response with an internal calculation, it passes the result to the
instrument cluster on the medium speed CAN bus.
Before the instrument cluster sends a mobilization signal to the ECMit will exchange encrypted data with: The electric steering lock mechanism to authorize unlocking the steering column.
The RJB to authorize fuel pump operation. Once the RJB receives the authorization and confirms the response with an internal calculation, it will enable the FPDM (fuel pump driver module).
The CJB to authorize the ignition status. If the drive selector is in the park position and the driver presses the brake
pedal and simultaneously presses the start/stop switch, the CJB interprets this as an engine crank request. Before the
engine crank request is allowed, the CJB compares a brake pressure signal received from the ABS module. The brake pressure signal is compared to an internally stored threshold value within the CJB. If the signal is greater than the
stored threshold value, a crank request signal is sent to the ECM on the high speed CAN bus.

Once these factors have been confirmed, and the vehicle is in 'Park', the engine can be started by pressing the brake pedal and
the Stop/Start button simultaneously.
NOTES:


If the keyless vehicle module fails to locate the Smart Key, the message 'SMART KEY NOT FOUND PLEASE INSERT IN
SLOT' will appear in the instrument cluster message center. When inserted the start control module will read the transponder
within the Smart Key. If the transponder identification is valid, authorization will be transmitted to the instrument cluster on
the LIN (local interconnect network) bus.


When the vehicle is delivered from the factory the passive start function is inhibited. In this condition the vehicle can
only be started by placing the Smart Key in the start control module. The system should be switched on during the Pre-Delivery
Inspection (PDI) using the Jaguar approved diagnostic system. For additional information, refer to the PDI Manual.

To ensure optimum long term reliability of the smart key the battery must be replaced with a brand new, unused battery. If a
used battery is installed the "SMART KEY BATTERY LOW" message may not be cleared. To avoid contamination of the contacts
the battery should be removed from its packaging and installed into the smart key while wearing gloves. To confirm that the
replacement battery is working correctly press the unlock button twice while holding the smart key outside the vehicle, then
enter the vehicle with the smart key, press the start button and confirm that the "SMART KEY BATTERY LOW" message is not
displayed.



Start Control Module Component Description

The start control module is used if the keyless vehicle module is unable to authorise the Smart Key.

If the keyless vehicle module is unable to identify the Smart Key, for example if the Smart Key battery voltage is low or there
is local RF interference, the transponder within the Smart Key can be read in the conventional manner. The driver will be
alerted to this by a chime and a message in the instrument cluster message center 'SMART KEY NOT FOUND PLEASE INSERT IN
SLOT'.

Once inserted the start control module will read the transponder within the Smart Key. If the transponder identification is
valid, authorization will be transmitted to the instrument cluster on the LIN bus.


NOTE: Inserting the Smart Key into the start control module will not charge the Smart Key battery. The battery is
non-chargeable and must be replaced if defective.

Anti-Theft - Passive (Description and Operation), Anti-Theft - Passive (Description and Operation).
Inspection and Verification

Anti-theft - Passive

The best method to confirm the correct operation of the Passive Anti-Theft System (PATS) is to check the LED (located in the
center of the instrument panel). The LED should illuminate solid for 3 seconds, when the ignition status is set to ON, and then
extinguish. This validates all PATS functions (i.e. the key transponder matches a stored key code, the challenge/response
sequence between the respective modules was successful resulting in the EMS being enabled).
Ignition fails to operate

Check that the smart key is located within the vehicle interior, and that it is the correct one for the vehicle.

Insert the smart key into the start control unit (located at out board side of driver instrument panel lower panel), this is an
alternative method to allow Ignition On/Engine Start.



Check that the start button circuit to the CJB is not open circuit or short circuit to power.

Check that the Low Speed CAN network is not malfunctioning, i.e. open circuit or short circuit. This would mean that the
remote keyless entry module, Central Junction Box (CJB) and instrument cluster would be unable to communicate.
Engine fails to crank

If a PATS fault is detected, the LED will flash for 60 seconds at 4Hz with a 50% duty cycle. At the end of this period, the LED
will flash a 2 digit code; this code is repeated 10 times. The meaning of these fault codes along with the frequency of flashing
is given in the accompanying table. As a general rule a fault code of 16 or less will cause the vehicle not to crank. Additionally,
the manufacturer approved diagnostic system should be used to check the instrument cluster, CJB & ECM for Diagnostic Trouble
Codes (DTCs).
One potential occurrence for failing to crank could be due to the P & N start switch (input to the ECM).
Check the Crank Request output from the CJB to ECM is not short circuit to ground or open circuit. www.JagDocs.com

Check the Starter Relay circuit.


NOTE: On petrol engine variants, due to Smart Start, both sides of Relay Coil are switched directly from ECM (If
conditions correct). On diesel engine variants the low side only is switched directly from the ECM.
Check that the Steering Column Lock correctly operates and the steering wheel can turn freely.

Check that the High Speed CAN network is not malfunctioning, i.e. the CAN circuit is open or short circuit. This would mean
that the instrument cluster and ECM would be unable to communicate resulting in no Challenge being performed to enable the
ECM. This would be supported by LED Flash Code 24, see PATS Fault Code Table.

Also check the CAN network between the ABS module and the CJB. The CJB uses the CAN_BrakePressureTMC signal to
determine if the brake pedal has been pressed in order to allow an engine crank. The CJB uses a value of 0x05, if the CJB sees
a value less than this, it will not enable the Crank Request Output.
Engine cranks but will not start

If the Engine is cranking it means that the ECM has passed the authorisation required with the Instrument Cluster. If this
authorisation failed, the ECM would not engage the starter relay. This could be confirmed by verifying the PATS LED prove out
(illuminated solid for 3 seconds) or by reading DTCs from the instrument cluster and ECM.

In this case, the fuel pump circuit should be verified. The Fuel Pump Delivery Module (FPDM), which is supplied via the RJB
(authentication required with the instrument cluster) and controlled by the ECM, supplies the fuel pump.
In all cases of suspected non-start issues, the most logical failure modes should be eliminated first. i.e.

1. Check all relevant supplies and grounds to the relevant modules listed herein.
2. Note any unusual behaviour from other systems/functionality.
3. Note any functions that are not operating as expected.
PATS Fault Codes

For the various PATS modes/faults listed in the table , the instrument cluster will store a DTC and indicate this to the customer
during the detection period defined in the 'when logged' column, by illuminating the indicator as described for 60 seconds and
then flashing the LED 10 times as appropriate. The indication will stop immediately the ignition status is set to OFF any time
during the fault indication sequence. Up to 4 DTCs could be stored per key read sequence (1-10 read attempts). No DTCs will be
stored until all retry attempts are complete. Only the highest priority fault code will be flashed.

To determine the fault code from the LED: The LED will flash initially ten times with 1.5 seconds between. The LED will remain
OFF for 2.5 seconds then flash a number of times with 0.5 seconds between (the number of times the LED flashes represents
the first digit of the code), the LED will remain OFF for 1.5 seconds then flash a number of times with 1.5 seconds between
(the number of times the LED flashes represents the second digit of the code).

The PATS LED will be commanded on as shown under 'indication'. Normal PATS operations are complete within 400ms of the
ignition switch transition from OFF to ON or START, worst case for ECM communication problems will be less than 2 seconds. If
PATS is not complete during the 2 seconds the ECM will terminate PATS and await the next ignition ON or START event. PATS
faults will be indicated via the LED as soon as possible and will terminate the LED prove out. At ignition OFF all previous
flashing will cease and the perimeter anti-theft system will control the LED when the vehicle is locked and armed.

PATS Fault Code Table


Mode of Operation/Fault

When Logged
Ignition
Status

DTC LED
Fault
Code

Indication Prove out N/A Transition
from OFF to
ON N/A N/A
3 Seconds of steady
illumination Perimeter Anti-theft Control N/A OFF -
Vehicle
locked and
armed N/A N/A
Off or 0.5Hz flashing
at 5% duty cycle ±
20% until Off Start Control Unit already programmed Key Insert Any B1B0105 N/A No Indication Start Control Unit status = invalid response Key Insert Any B1B0167 N/A No Indication Start Control Unit programming error Key Insert Any B1B0151 N/A No Indication Start Control Unit challenge response error Key Insert OFF B1B0162 N/A No Indication Key Programming timer expired or Key Auth Timer expired Key Insert Any B1B0187 N/A No Indication Transponder challenge response error Key Insert Any B1B0164 N/A No Indication Transponder keys stored below minimum number required B&A/Dealer Any B1B0100 N/A No Indication Transponder not programmed B&A/Dealer Any B1B0155 N/A No Indication If the instrument cluster sends a 'theft' key status
to the ECM or the ECM returns a status message
containing the data 'Disabled/Theft', the instrument
cluster will set this DTC EMS CAN
communication OFF to ON B1B3364 16
60 seconds of 4Hz
flashing at 50% duty
cycle followed by fault
code 16 flashing 10
times

During manufacturing a Target ID is transferred from
the ECM when requested by the instrument cluster. The instrument cluster stores this unique vehicle
number in EEPROM. If this ID fails to store in
EEPROM correctly, the instrument cluster will set this
DTC B&A/Dealer OFF to ON B1B3305 22
60 seconds of steady
indication followed by
fault code 22 flashing
10 times If the status message received from the ECM
contains the data challenge response error, the
instrument cluster will set this DTC Challenge/Response OFF to ON B1B3362 23
60 seconds of steady
indication followed by
fault code 23 flashing
10 times After the instrument cluster has transmitted its first
PATS idle message, it will start a 2 second timer
running. If the PATS sequence does not complete
(Cluster received the Enable msg) within this time period the instrument cluster will set this DTC Idle message
missing OFF to ON B1B3387 24
60 seconds of steady
indication followed by
fault code 24 flashing
10 times
1. If an obvious cause for an observed or reported concern is found, correct the cause (if possible) before proceeding to
the next step.
2. If the cause is not visually evident, verify the symptom and refer to the manufacturer approved diagnostic system.

NOTE: LHD (left-hand drive) vehicle shown 1 Electronic transmission selector 2 Instrument cluster 3 Passenger door module 4 Steering wheel switches 5 Rain/light sensor 6 Intrusion detection module 7 Passenger side rear door module

NOTE: LHD vehicle shown 1 CJB 2 ATC module 3 Passenger door module 4 Audio system control panel 5 Instrument cluster 6 RJB 7 RH blind spot monitoring module 8 Parking aid module 9 Keyless vehicle module 10 LH blind spot monitoring module 11 Driver's door module 12 Driver's seat module 13 Diagnostic socket COMPONENT LOCATION - MEDIUM SPEED CAN BUS
www.JagDocs.com