_Operation_218.

htm Page 1 of 3

Operation
Immobilisation System
The immobilisation system prevents unauthorised starting of the vehicle. The immobilisation ECU
is a secure interface between the ECM which cannot be copied or by-passed.

Immobilisation ECU
The ECU ensures that the vehicle is in a safe condition to start the engine. On vehicles with an
automatic transmission, the ECU prevents starter operation if the transmission selector lever is not
in park or neutral. A feed from the automatic transmission solenoid (C0024) is connected to pin 3
on the immobilisation ECU. The feed is only present when the selector lever is in either
park/neutral. If the selector lever is moved to any other position the feed to the immobilisation
ECU is removed and engine cranking will be disabled.

When the ignition is switched to position 0 (off) and the key is removed from the switch, the
immobilisation ECU becomes active and prevents unauthorised starter operation. Re-mobilisation
is achieved only by insertion of a valid vehicle key into the ignition switch and turning the switch
to position I (AUX).

Ignition Switch Transponder Coil and Key Transponder

The transponder coil is supplied with a modulated electric current from the immobilisation ECU.
When the key transponder is within 2 cm (0.78 in) from the coil, with the ignition switch in the
position I (AUX), an energy transfer from the coil to the transponder takes place, similar to the
transformer principle, at a frequency of 125 kHz. The ECU de-modulates and decodes the
received data and compares this with identification code data from the ECM. If the data is correct
the ECU allows starter operation.

When the key is inserted in the ignition switch, communications between the transponder and the
immobilisation ECU, via the transponder coil, occur as follows:

• A unique key identification number is passed to the ECU

• A random code is transmitted by the ECU to communicate with the key transponder
• An encrypted response to the random code is transmitted from the key transponder to the
ECU.

Programming - Vehicles Up to VIN 242163

The immobilisation ECU is programmed with vehicle specific data during manufacture. The key
transponders are supplied with the specific vehicle pre-programmed with the mechanical code for
that vehicle's lockset. The mechanical code is read at the factory before the keys are programmed
and the information is stored in a central database. The data is required to cut spare or replacement
keys.

The ECU is programmed during manufacture with data to support up to ten keys. The
programmed information is recorded against the VIN for that vehicle and stored in a central
database.

https://topix.landrover.jlrext.com/topix/service/archive/37046/_Operation_218.htm 28.02.2013
_Operation_218.htm Page 2 of 3

Replacement or spare keys will be ordered and delivered to the dealer already programmed with
the correct information specific to the particular vehicle and ready for use.

If a replacement immobilisation ECU is required it will be ordered and delivered to the dealer
programmed with the original information stored during manufacture. The ECM will not require
reprogramming because the replacement ECU will have the same identification code as before.
The ECM and the EWS-3D immobilisation ECU will however need have their rolling code
synchronised using T4.

If the ECM is replaced, the ECM will have to learn the identification code. This is achieved using
T4. When the immobilisation ECU receives the correct diagnostic message it will transmit the
identification code on a continual basis until the ignition is switched off. Simultaneously, the ECM
also receives a diagnostic command to learn the new code.

Programming - Vehicles From VIN 242164

The immobilisation ECU is programmed with vehicle specific data by Land Rover during vehicle
manufacture. This data is also stored in other ECU's on the vehicle. Non-sensitive data stored in
the immobilisation ECU can be retrieved using T4.

The ECU is programmed during manufacture with data to support up to 30 keys which can be
enabled with T4. Replacement or spare keys will be ordered and delivered to the dealer as a
disabled key. The dealer will use the previously described 'Learn Blank/New Keys' procedure for
enabling the new key. The key will be supplied with the correct key blade profile for the
applicable vehicle lockset.

If a replacement immobilisation ECU is required it will be ordered and delivered to the dealer as a
pre-programmed ECU. The ECM and the new immobilisation ECU will however need have their
rolling code synchronised using T4.

If the ECM is replaced, the new ECM will have to learn the identification code. This is achieved
using T4. When the immobilisation ECU receives the correct diagnostic message it will transmit
the identification code on a continual basis until the ignition is switched to position 0 (off).
Simultaneously, the ECM also receives a diagnostic command to learn the new code.

Starter Motor Protection

The immobilisation system incorporates a starter motor protection function. When the engine
speed exceeds a predetermined value, a starter relay inside the immobilisation ECU is disabled.
This relay is wired in series with the main starter motor solenoid and therefore when disabled it
cuts off the power supply to the starter motor. This prevents damage to the starter motor being
caused by a sticking ignition switch. The engine speed is derived from the instrument pack which
converts the speed from a CAN bus signal into a pulsed signal compatible with the immobilisation
ECU.

Diagnostics
A diagnostic socket allows the exchange of information between the immobilisation ECU and T4.
The diagnostic socket is located in the driver's footwell and is constructed to ISO standard. A
dedicated diagnostic bus is connected between the socket and the immobilisation ECU. The bus
allows the retrieval of diagnostic information and programming of certain functions to be
performed using T4.

https://topix.landrover.jlrext.com/topix/service/archive/37046/_Operation_218.htm 28.02.2013
_Operation_218.htm Page 3 of 3

The diagnostic bus protocol differs depending on the immobilisation system fitted to the vehicle as
follows:

• for vehicles up to VIN 242163 (EWS3-D system) the immobilisation ECU uses DS2
protocol
• for vehicles from VIN 242164 the immobilisation ECU uses Keyword 2000* protocol.

The immobilisation ECU monitors all inputs and outputs and if a fault is detected, a code for that
fault is stored in a fault log which can be retrieved using T4. The diagnostic interface is also used
for synchronising a replacement ECM to the existing immobilisation ECU and for enabling or
disabling new or current keys.

https://topix.landrover.jlrext.com/topix/service/archive/37046/_Operation_218.htm 28.02.2013