2010 JAGUAR XFR brake

Anti-Theft - Passive - Anti-Theft - Passive - Overview
Description and Operation

Overview Published: 11-May-2011

The PATS (passive anti-theft system) prevents the vehicle's engine from being started by unauthorized persons.

Engine starting is prevented by inhibiting the fuel, engine (spark, injectors and crank) and ignition systems from operating.
This is achieved by using a uniquely coded Smart Key and an encoded data exchange between multiple control modules.
The system is automatic and requires no input from the driver.

The engine start system is initiated when the encoded data between the Smart Key and vehicle control modules is verified.
The engine can then be started when the drive selector is in the 'Park' position, and the start/stop switch and the brake pedal
are pressed simultaneously.

Published: 22-Apr-2013
Anti-Theft - Passive - Anti-Theft - Passive - System Operation and
Component Description
Description and Operation

Control Diagram

NOTE: A = Hardwired; D = High speed CAN; N = Medium speed CAN; O = LIN bus



Item Description 1 Battery 2 Drive selector 3 RJB (rear junction box) 4 ABS (anti-lock brake system) 5 ECM (engine control module) 6 Keyless vehicle module

7 Low frequency antenna - front 8 Low frequency antenna - center 9 Low frequency antenna - rear 10 Radio frequency receiver 11 Start control module 12 CJB (central junction box) 13 Instrument cluster 14 Megafuse (250 amp)
System Operation

The passive start function prevents the vehicle from being started by unauthorized persons. It does this by immobilizing the
ignition, fuel and engine crank functions. The system is automatic and requires no input from the driver.

At the request of the CJB, the keyless vehicle module prompts each of the Low Frequency (LF) antennae to output a signal. When the Smart Key is in the vehicle cabin, it detects the LF signals and responds with a Radio Frequency (RF)
data-identification signal back to the keyless vehicle module via the RF receiver.

If the data received matches that stored in the keyless vehicle module it continues the passive start process by
communicating a 'Smart Key valid’ signal to the CJB via the medium speed CAN (controller area network) bus.

Once the CJB receives the authorization and confirms a response with an internal calculation, it passes the result to the
instrument cluster on the medium speed CAN bus.
Before the instrument cluster sends a mobilization signal to the ECMit will exchange encrypted data with: The electric steering lock mechanism to authorize unlocking the steering column.
The RJB to authorize fuel pump operation. Once the RJB receives the authorization and confirms the response with an internal calculation, it will enable the FPDM (fuel pump driver module).
The CJB to authorize the ignition status. If the drive selector is in the park position and the driver presses the brake
pedal and simultaneously presses the start/stop switch, the CJB interprets this as an engine crank request. Before the
engine crank request is allowed, the CJB compares a brake pressure signal received from the ABS module. The brake pressure signal is compared to an internally stored threshold value within the CJB. If the signal is greater than the
stored threshold value, a crank request signal is sent to the ECM on the high speed CAN bus.

Once these factors have been confirmed, and the vehicle is in 'Park', the engine can be started by pressing the brake pedal and
the Stop/Start button simultaneously.
NOTES:


If the keyless vehicle module fails to locate the Smart Key, the message 'SMART KEY NOT FOUND PLEASE INSERT IN
SLOT' will appear in the instrument cluster message center. When inserted the start control module will read the transponder
within the Smart Key. If the transponder identification is valid, authorization will be transmitted to the instrument cluster on
the LIN (local interconnect network) bus.


When the vehicle is delivered from the factory the passive start function is inhibited. In this condition the vehicle can
only be started by placing the Smart Key in the start control module. The system should be switched on during the Pre-Delivery
Inspection (PDI) using the Jaguar approved diagnostic system. For additional information, refer to the PDI Manual.

To ensure optimum long term reliability of the smart key the battery must be replaced with a brand new, unused battery. If a
used battery is installed the "SMART KEY BATTERY LOW" message may not be cleared. To avoid contamination of the contacts
the battery should be removed from its packaging and installed into the smart key while wearing gloves. To confirm that the
replacement battery is working correctly press the unlock button twice while holding the smart key outside the vehicle, then
enter the vehicle with the smart key, press the start button and confirm that the "SMART KEY BATTERY LOW" message is not
displayed.



Start Control Module Component Description

The start control module is used if the keyless vehicle module is unable to authorise the Smart Key.

If the keyless vehicle module is unable to identify the Smart Key, for example if the Smart Key battery voltage is low or there
is local RF interference, the transponder within the Smart Key can be read in the conventional manner. The driver will be
alerted to this by a chime and a message in the instrument cluster message center 'SMART KEY NOT FOUND PLEASE INSERT IN
SLOT'.

Once inserted the start control module will read the transponder within the Smart Key. If the transponder identification is
valid, authorization will be transmitted to the instrument cluster on the LIN bus.


NOTE: Inserting the Smart Key into the start control module will not charge the Smart Key battery. The battery is
non-chargeable and must be replaced if defective.

Check the Starter Relay circuit.


NOTE: On petrol engine variants, due to Smart Start, both sides of Relay Coil are switched directly from ECM (If
conditions correct). On diesel engine variants the low side only is switched directly from the ECM.
Check that the Steering Column Lock correctly operates and the steering wheel can turn freely.

Check that the High Speed CAN network is not malfunctioning, i.e. the CAN circuit is open or short circuit. This would mean
that the instrument cluster and ECM would be unable to communicate resulting in no Challenge being performed to enable the
ECM. This would be supported by LED Flash Code 24, see PATS Fault Code Table.

Also check the CAN network between the ABS module and the CJB. The CJB uses the CAN_BrakePressureTMC signal to
determine if the brake pedal has been pressed in order to allow an engine crank. The CJB uses a value of 0x05, if the CJB sees
a value less than this, it will not enable the Crank Request Output.
Engine cranks but will not start

If the Engine is cranking it means that the ECM has passed the authorisation required with the Instrument Cluster. If this
authorisation failed, the ECM would not engage the starter relay. This could be confirmed by verifying the PATS LED prove out
(illuminated solid for 3 seconds) or by reading DTCs from the instrument cluster and ECM.

In this case, the fuel pump circuit should be verified. The Fuel Pump Delivery Module (FPDM), which is supplied via the RJB
(authentication required with the instrument cluster) and controlled by the ECM, supplies the fuel pump.
In all cases of suspected non-start issues, the most logical failure modes should be eliminated first. i.e.

1. Check all relevant supplies and grounds to the relevant modules listed herein.
2. Note any unusual behaviour from other systems/functionality.
3. Note any functions that are not operating as expected.
PATS Fault Codes

For the various PATS modes/faults listed in the table , the instrument cluster will store a DTC and indicate this to the customer
during the detection period defined in the 'when logged' column, by illuminating the indicator as described for 60 seconds and
then flashing the LED 10 times as appropriate. The indication will stop immediately the ignition status is set to OFF any time
during the fault indication sequence. Up to 4 DTCs could be stored per key read sequence (1-10 read attempts). No DTCs will be
stored until all retry attempts are complete. Only the highest priority fault code will be flashed.

To determine the fault code from the LED: The LED will flash initially ten times with 1.5 seconds between. The LED will remain
OFF for 2.5 seconds then flash a number of times with 0.5 seconds between (the number of times the LED flashes represents
the first digit of the code), the LED will remain OFF for 1.5 seconds then flash a number of times with 1.5 seconds between
(the number of times the LED flashes represents the second digit of the code).

The PATS LED will be commanded on as shown under 'indication'. Normal PATS operations are complete within 400ms of the
ignition switch transition from OFF to ON or START, worst case for ECM communication problems will be less than 2 seconds. If
PATS is not complete during the 2 seconds the ECM will terminate PATS and await the next ignition ON or START event. PATS
faults will be indicated via the LED as soon as possible and will terminate the LED prove out. At ignition OFF all previous
flashing will cease and the perimeter anti-theft system will control the LED when the vehicle is locked and armed.

PATS Fault Code Table


Mode of Operation/Fault

When Logged
Ignition
Status

DTC LED
Fault
Code

Indication Prove out N/A Transition
from OFF to
ON N/A N/A
3 Seconds of steady
illumination Perimeter Anti-theft Control N/A OFF -
Vehicle
locked and
armed N/A N/A
Off or 0.5Hz flashing
at 5% duty cycle ±
20% until Off Start Control Unit already programmed Key Insert Any B1B0105 N/A No Indication Start Control Unit status = invalid response Key Insert Any B1B0167 N/A No Indication Start Control Unit programming error Key Insert Any B1B0151 N/A No Indication Start Control Unit challenge response error Key Insert OFF B1B0162 N/A No Indication Key Programming timer expired or Key Auth Timer expired Key Insert Any B1B0187 N/A No Indication Transponder challenge response error Key Insert Any B1B0164 N/A No Indication Transponder keys stored below minimum number required B&A/Dealer Any B1B0100 N/A No Indication Transponder not programmed B&A/Dealer Any B1B0155 N/A No Indication If the instrument cluster sends a 'theft' key status
to the ECM or the ECM returns a status message
containing the data 'Disabled/Theft', the instrument
cluster will set this DTC EMS CAN
communication OFF to ON B1B3364 16
60 seconds of 4Hz
flashing at 50% duty
cycle followed by fault
code 16 flashing 10
times

PINPOINT TEST B : MAP DISC WILL NOT INSERT/EJECT
NOTE: Ensure the parking brake is applied, and ignition status is set to Auxiliary or ON. TEST
CONDITIONS DETAILS/RESULTS/ACTIONS B1: CHECK NAVIGATION DISC SLOT SHUTTER 1 Check the navigation map disc slot shutter is open. Is the navigation map disc slot shutter is open? Yes
GO to B2. No
Open the map disc slot shutter.
GO to B2. B2: CHECK NAVIGATION MAP DISC WILL INSERT/EJECT 1 Check that it is possible to insert/eject navigation map disc. Is it possible to insert/eject navigation map disc? Yes
Operation is normal.
No
Refer to the electrical circuit diagrams and check power supply and ground connections to the Navigation
Control Module (NCM). If power supply and ground connections are good, install a new Navigation Control
Module (NCM) as required. Refer to the new module/component installation note at top of DTC Index.
PINPOINT TEST C : BLACK SCREEN (NAVIGATION MAP SCREEN DOES NOT DISPLAY)
NOTE: Ensure the parking brake is applied, and ignition status is set to Auxiliary or ON. TEST
CONDITIONS DETAILS/RESULTS/ACTIONS C1: CHECK SCREEN SAVER FUNCTION 1 Check the screen saver function operation. Does the screen saver function operate? Yes
Press the display panel button.GO to C2. No
GO to C2. C2: CHECK DISPLAY BACKLIGHT 1 Check the display backlight operation. Does the display backlight operate? Yes
Refer to the electrical circuit diagrams and check the GVIF cable between Navigation Control Module
(NCM) and HLDF screen is properly connected.
If the GVIF cable between Navigation Control Module (NCM) and HLDF screen is properly connected, check
and install a new GVIF cable as required. Refer to the new module/component installation note at top of
DTC Index.
If the GVIF cable between Navigation Control Module (NCM) and HLDF screen is properly connected and
NOT damaged, check and install a new Navigation Control Module (NCM) as required. Refer to the new
module/component installation note at top of DTC Index.
Re-check the system.
No
Check the HLDF display.
Re-check the system.
PINPOINT TEST D : NAVIGATION MAP SCREEN COLOUR IS ABNORMAL TEST
CONDITIONS DETAILS/RESULTS/ACTIONS D1: COLOUR BAR CHECK 1 Carry out the display diagnostics 'colour bar check' (PIN code 660). Are the results of the display diagnostics 'colour bar check' normal? Yes
Check the HLDF display.
Re-check the system.
No
Check the condition of the map disc for dirt or scratches.
Refer to the electrical circuit diagrams and check the GVIF cable between Navigation Control Module
(NCM) and HLDF screen is properly connected.
If the GVIF cable between Navigation Control Module (NCM) and HLDF screen is properly connected, check
and install a new GVIF cable as required. Refer to the new module/component installation note at top of
DTC Index.
If the GVIF cable between Navigation Control Module (NCM) and HLDF screen is properly connected and
NOT damaged, check and install a new Navigation Control Module (NCM) as required. Refer to the new

TEST
CONDITIONS DETAILS/RESULTS/ACTIONS E1: VEHICLES CURRENT POSITION MARK TURNS INDEPENDENTLY 1 Determine if the ignition status was turned to Auxiliary or On, while the vehicle was in motion with steering turned such as after an engine stall. Was ignition status set to Auxiliary or On?
Yes
The angular speed of the vehicle at the time of the ignition status change will be logged as the standard
value. To re-set the standard value, turn ignition status to 'OFF' then to 'Auxiliary' or 'On' with the
vehicle stationary.
Re-test the vehicle.
No
Check and install a new Navigation Control Module (NCM) as required. Refer to the new module/component installation note at top of DTC Index.
PINPOINT TEST F : CAR CURRENT POSITION NOT STABLE TEST
CONDITIONS DETAILS/RESULTS/ACTIONS F1: SYSTEM CHECK FOR DTCS 1 Check the system for DTCs which may be logged. Are any system DTCs logged? Yes
Carry out repair actions to correct the DTCs logged.
Re-check the system for car current position not stable.
No
GO to F2. F2: VEHICLE SPEED INPUT CHECK 1 Select Vehicle Sensor from the navigation diagnostic menu screen (PIN code 660), check Current speed. The current speed must match the speedometer. From the Vehicle Sensor screen, does the current speed must match the speedometer? Yes
GO to F3. No
Carry out MOST ring circuit checks.
Check the Anti-Lock Brake System Module for related DTCs and refer to the relevant DTC Index.
Carry out network integrity tests using the manufacturer approved diagnostic system. Refer to electrical
circuit diagrams and check CAN circuits if required. Repair wiring harness as required. F3: CHECK NUMBER OF SATELLITES 1 From the navigation diagnostic GPS information screen (PIN code 662), check the number of satellites displayed. Is the number of satellites displayed on the screen 0? Yes
Carry out pinpoint test A "Poor Satellite Reception"
No
GO to F4. F4: CHECK IF SYMPTOMS ARE OCCURRING IN PARTICULAR LOCATIONS 1 Confirm if the 'car current position not stable' symptom is occurring in particular locations. Is the 'car current position not stable' symptom occurring in particular locations? Yes
Signal reflections from buildings or a particular location may be responsible.
No
Carry out pinpoint test A "Poor Satellite Reception"
PINPOINT TEST G : MAP DISPLAY IS INCOMPLETE TEST
CONDITIONS DETAILS/RESULTS/ACTIONS G1: SYSTEM CHECK FOR DTCS 1 Check the system for DTCs which may be logged. Are any system DTCs logged? Yes
Carry out repair actions to correct the DTCs logged.
Re-check the system for 'Map display is incomplete'.
No
GO to G2. G2: CHECK MAP DISC 1 Check map disc for contamination, deformation, cracks, scratches or non-genuine disc and correct market. module/component installation note at top of DTC Index.
Re-check the system.

Tire Pressure Monitoring System (TPMS) control module 15 Entertainment system control module 16 Climate seat module COMPONENT LOCATION - HIGH SPEED CAN BUS



Item Description NOTE: LHD vehicle shown 1 ECM - V8 shown 2 Headlamp leveling control module 3 Occupant classification system control module 4 Adaptive damping control module 5 Instrument cluster 6 Electronic transmission selector 7 Electronic Parking Brake (EPB) module 8 RCM (restraints control module)

10 Diagnostic socket 11 Pedestrian protection control module 12 Electric steering column lock 13 TCM 14 ABS (anti-lock brake system) module COMPONENT LOCATION - MOST



Item Description NOTE: LHD vehicle shown 1 Touch Screen Display (TSD) 2 Integrated audio module 3 Entertainment system control module 4 Digital Audio Broadcast (DAB)/Satellite Digital Audio Radio System (SDARS) 5 Multimedia module