XJ XJ6 / XJ8 / XJR ( X350 & X358 ) 2003 - 2009

XJ8 Stuck in Security mode no crank

Thread Tools
 
Search this Thread
 
  #1  
Old 11-15-2023, 12:28 PM
Jeff Homsher's Avatar
Junior Member
Thread Starter
Join Date: Jul 2018
Location: St. Louis mo
Posts: 4
Likes: 0
Received 0 Likes on 0 Posts
Default XJ8 Stuck in Security mode no crank

I'm going to apologize up front, this is the first time I've ever posted on a blog so I pray I don't screw it up and/or deviate from protocol.

I own a restoration and repair shop in St. Louis Mo called It's Alive Automotive. We specialize in Jaguars and currently have over 30 classic Jaguars at the shop (mostly XKEs but some XKs and MKIIs as well). We buy, sell, and restore Jaguars and have an XKE Jaguar jig that weighs over 10,000lbs to assembly floors and weld XKEs back together correctly.. We know Jaguars well; however, we are much less familiar with the late model Jaguars.

Recently a great customer of ours brought in his 2002 XJ8 for detailing and installation of LED lights in the HVAC control module. We had previously installed LED lights in the dash (no issues). This time was different. At the end of the day we reconnected the battery and the car would not crank. We noticed that the security light was lit. All of the lights, the radio and the gauges do work when the key is on, but the car will not crank.

The Jaguar Dealer refuses to work on the vehicle. We located a local lock smith that was familiar with the issue. He tried both keys, replaced the BCM, replaced the Security module, pulled the battery and shorted the cables to reset the systems......nothing. The lock smith states that he's tried everything and he believes that the problem is the "ring around the ignition switch" is not receiving power. He worked on the car on and off for a few weeks and the car still will not crank. Please note that all the original modules have been installed back in the car as they were originally.

I'm at a loss as to how to proceed. Our unfortunate customer has rented a car for over 4 weeks now (the XJ is his only car) and while he's been very patient, we have to bring this to resolution. I've offered to buy the car from him (likely using our insurance) but he loves the vehicle and wants it back on the road. He's also fine with the security system being permanently disabled. By they way I'm a touch worried that all the work that's been performed on the car could have resulted in some collateral damage? Argh

I suppose I'm looking for an expert on the Jaguar security systems. Someone that can methodically step us through the process of testing and resolving.

Any and all assistance is greatly appreciated.

Jeff Homsher Owner of It's Alive Automotive 314 348 5774 Jeff@ItsAliveAuto.com

Thank you all in advance!!!!
 
  #2  
Old 11-15-2023, 01:19 PM
JagV8's Avatar
Veteran Member
Join Date: May 2009
Location: Yorkshire, England
Posts: 26,764
Received 4,530 Likes on 3,940 Posts
Default

What OBD codes do you have?

With key out, does the PATS light flash (er, 2Hz or so)?

When you try to start does that light go out? Or, if you wait, start to flash a code (count the flashes)?
 
  #3  
Old 11-15-2023, 01:55 PM
meirion1's Avatar
Veteran Member
Join Date: Nov 2009
Location: The beautiful Mornington Peninsula in OZ
Posts: 3,008
Received 751 Likes on 631 Posts
Default

It's 2002 but is it an x350?
 
  #4  
Old 11-16-2023, 04:44 AM
Fraser Mitchell's Avatar
Veteran Member
Join Date: Dec 2009
Location: Crewe, England
Posts: 9,408
Received 2,451 Likes on 1,949 Posts
Default

I don't think this car is an X350. Jaguar only started selling these in the UK in 2003, my first one was in this first year.
I expect the car is a late X308.
 
  #5  
Old 11-16-2023, 06:33 AM
Jeff Homsher's Avatar
Junior Member
Thread Starter
Join Date: Jul 2018
Location: St. Louis mo
Posts: 4
Likes: 0
Received 0 Likes on 0 Posts
Default Codes

Thank you for the replies. We found multiple codes:
P1260 Security Input
U1041 SCP vehicle speed
U2012 ABS CAN Bus error
B1595 Ign Switch Illegal input
B2368 steering column Switch out of Range
9507H /3815
9352H/37714
9446H/37958

The steering column switch and the Ignition switch input codes appear to be consistent with the Lock/Key experts conclusion that the cause is the "ring" not receiving power?

I'll have to check on the light and see if it flashes

Jeff
 
  #6  
Old 11-16-2023, 08:49 AM
Jeff Homsher's Avatar
Junior Member
Thread Starter
Join Date: Jul 2018
Location: St. Louis mo
Posts: 4
Likes: 0
Received 0 Likes on 0 Posts
Default

The PATS light is no longer on. Not sure why. I don't believe it was flashing prior to know going out. I believe it was on all the time
 
  #7  
Old 11-16-2023, 09:14 AM
clubairth1's Avatar
Veteran Member
Join Date: May 2009
Location: home
Posts: 9,166
Received 2,365 Likes on 1,863 Posts
Default

What diagnostic tools are you using?
Are you familiar with the factory Jaguar SDD system?
I am afraid that will be required?
Any chance another shop might have a working SDD system?
.
.
.
 
  #8  
Old 11-20-2023, 10:54 AM
OldKarz's Avatar
Senior Member
Join Date: Apr 2019
Location: Ontario
Posts: 474
Received 117 Likes on 98 Posts
Default

This is for an XJ350 2003 and up. Some may apply to your vehicle. The Park/Neutral switch may not be being made properly as in the first thing to check below:Anti-Theft - Passive
The best method to confirm the correct operation of PATS is to check the LED (located in the center
of the instrument panel). The LED should illuminate solid for 3 seconds when the key is turned to the
run position and then extinguish. This validates the PATS functions (the key transponder matches the
key code stored, the challenge/response sequence between the instrument cluster (IC) and the
engine control module (ECM) was successful resulting in the ECM being enabled).
The ECM will disable the fuel injectors, ignition coils, fuel pump drive and starter if any of the
following conditions apply, a theft signal has been received from the IC (the key has not been
authenticated), a challenge code has been transmitted to the IC but no response code has been
received, a challenge code has been transmitted to the IC and an incorrect response received.
If any of the above cases apply, the ECM will log DTC P1260. This DTC is further defined by sub-codes.
The sub-codes are accessed through mode 12 (freeze frame data). Additionally the IC will log DTC's if
the failure was a result of the key read.
Engine fails to crank
If a PATS fault is detected, the LED will flash for 60 seconds at 4Hz with a 50% duty cycle. At the end
of this period, the LED will flash a 2 digit code, this code is repeated 10 times. The meaning of this
code along with the frequency of flashing is given in the accompanying table (as a general rule a fault
code of 16 or less will cause the vehicle not to crank. Additionally, the Jaguar Approved Diagnostic
System should be used to check the DTC stored in the IC.
The most regular occurrence for failing to crank is due to the park and neutral switches (gearshift not
in park or neutral). The start circuit is as follows, low side of relay coil (Switched directly from the
instrument cluster, if conditions correct), high side of relay of coil (from ignition start position
through gearbox rotary start switches to relay).
Another likely cause maybe the CAN network is malfunctioning, (the CAN circuit is open/short). This
means that the IC and ECM would be unable to communicate resulting in no challenge being
performed to enable the ECM.
On US manual vehicles the addition of a clutch switch has been included in the starting circuit, this
switch takes place of the park/neutral switch (auto transmission). The switch activates at end of
travel (clutch fully depressed).
Engine cranks but will not start
If the engine is cranking it means that the ECM is enabled with respect to the PATS. If PATS was
disabled the ECM would not engage the starter. This could be confirmed by verifying the PATS LED
prove out (illuminated solid for 3 seconds) or by reading DTC's from the IC and ECM. In this case, the
fuel pump circuit should be verified. A fuel pump module, which is controlled by the ECM supplies
the fuel pump. In all cases of suspected PATS non-start issues, the most logical failure modes should
be eliminated first. Check all relevant supplies and grounds to the IC and ECM, check that the starter
relay has a permanent 12v supply, check that the relay has a 12v supply and ground across the coil
whilst the ignition is in the crank position.
PATS Fault Codes
For the various PATS modes/faults listed in the table , the IC will store a DTC and indicate this to the
customer during the detection peroid defined in the 'when logged' column, by illuminating the
indicator as described for 60 seconds and then flashing the LED 10 times as appropriate. The
indication will stop immediately the ignition is turned to off any time during the fault indication
sequence. Up to 4 DTC's could be stored per key read (1-!0 read attempts). No DTC's will be stored
until all retry attempts are complete. Only the highest priority fault code will be flashed.
The PATS LED will be commanded on as shown under 'indication'. Normal PATS operations are
complete within 400ms of the ignition switch transition from off to run or start, worst case for ECM
communication problems will be less than 2 seconds. If PATS is not complete during the 2 seconds
the ECM will terminate PATS and await the next ignition run/start event. PATS faults will be indicated
via the LED as soon as possible and will terminate the LED prove out. At key off all previous flashing
will cease and the perimeter anti theft system will control the LED when the vehicle is locked and
armed.
Mode of Operation/Fault When Logged
Ignition
Switch
Position
DTC
LED
Fault
Code
Indication
Prove out N/A
Off to
Run/Start
N/A N/A
3 Seconds of steady
illumination
Perimeter Anti theft Control N/A Off N/A N/A
Off or 0.5Hz, 5% duty
cycle until off
Transceiver not connected Key Read Run/Start B1681 11
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
code flashing 10 times
Key problem. No code
received from Key
Key Read Run/Start B1600 13
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
code flashing 10 times
Key/Transceiver problem,
partial code received,
Key Read Run/Start B1602 14
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
checksum error code flashing 10 times
Key code not stored in
memory(also due to having 8
key codes already stored in
memory)/ signature
mismatch
Ke
Read/Diagnostic
Test
Run/Start B1601 15
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
code flashing 10 times
Problem with CAN link - ECM
disabled. ECM system status
CAN message missing
ECM CAN
Comm's
Run/Start
U2511
U1900
16
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
code flashing 10 times
Following part replacement the following codes maybe applicable, these are not normal customer
mode fault codes.
Mode of Operation/Fault When Logged
Ignition
Switch
Position
DTC
LED
Fault
Code
Indication
Following new key
programming Jaguar Approved
Diagnostic System application,
2 keys have not been cycled in
the ignition
B and A/Dealer Run/Start B1213 21
60 seconds of
steady indication
followed by fault
code flashing 10
times
PATS reset application not
performed after part IPK
replacement
B and A/Dealer Run/Start B2141 22
60 seconds of
steady indication
followed by fault
code flashing 10
times
PATS reset application not
performed after part ECM
replacement
Challenge/Response Run/Start U2510 23
60 seconds of
steady indication
followed by fault
code flashing 10
times
1 . If an obvious cause for an observed or reported concern is found, correct the cause (if possible)
before proceeding to the next step.
2 . If the cause is not visually evident, verify the symptom and refer to the Jaguar Approved
Diagnostic System.

 
  #9  
Old 06-06-2024, 09:03 AM
Kangaroo's Avatar
Junior Member
Join Date: Jun 2024
Posts: 2
Received 0 Likes on 0 Posts
Default

Originally Posted by OldKarz
This is for an XJ350 2003 and up. Some may apply to your vehicle. The Park/Neutral switch may not be being made properly as in the first thing to check below:Anti-Theft - Passive
The best method to confirm the correct operation of PATS is to check the LED (located in the center
of the instrument panel). The LED should illuminate solid for 3 seconds when the key is turned to the
run position and then extinguish. This validates the PATS functions (the key transponder matches the
key code stored, the challenge/response sequence between the instrument cluster (IC) and the
engine control module (ECM) was successful resulting in the ECM being enabled).
The ECM will disable the fuel injectors, ignition coils, fuel pump drive and starter if any of the
following conditions apply, a theft signal has been received from the IC (the key has not been
authenticated), a challenge code has been transmitted to the IC but no response code has been
received, a challenge code has been transmitted to the IC and an incorrect response received.
If any of the above cases apply, the ECM will log DTC P1260. This DTC is further defined by sub-codes.
The sub-codes are accessed through mode 12 (freeze frame data). Additionally the IC will log DTC's if
the failure was a result of the key read.
Engine fails to crank
If a PATS fault is detected, the LED will flash for 60 seconds at 4Hz with a 50% duty cycle. At the end
of this period, the LED will flash a 2 digit code, this code is repeated 10 times. The meaning of this
code along with the frequency of flashing is given in the accompanying table (as a general rule a fault
code of 16 or less will cause the vehicle not to crank. Additionally, the Jaguar Approved Diagnostic
System should be used to check the DTC stored in the IC.
The most regular occurrence for failing to crank is due to the park and neutral switches (gearshift not
in park or neutral). The start circuit is as follows, low side of relay coil (Switched directly from the
instrument cluster, if conditions correct), high side of relay of coil (from ignition start position
through gearbox rotary start switches to relay).
Another likely cause maybe the CAN network is malfunctioning, (the CAN circuit is open/short). This
means that the IC and ECM would be unable to communicate resulting in no challenge being
performed to enable the ECM.
On US manual vehicles the addition of a clutch switch has been included in the starting circuit, this
switch takes place of the park/neutral switch (auto transmission). The switch activates at end of
travel (clutch fully depressed).
Engine cranks but will not start
If the engine is cranking it means that the ECM is enabled with respect to the PATS. If PATS was
disabled the ECM would not engage the starter. This could be confirmed by verifying the PATS LED
prove out (illuminated solid for 3 seconds) or by reading DTC's from the IC and ECM. In this case, the
fuel pump circuit should be verified. A fuel pump module, which is controlled by the ECM supplies
the fuel pump. In all cases of suspected PATS non-start issues, the most logical failure modes should
be eliminated first. Check all relevant supplies and grounds to the IC and ECM, check that the starter
relay has a permanent 12v supply, check that the relay has a 12v supply and ground across the coil
whilst the ignition is in the crank position.
PATS Fault Codes
For the various PATS modes/faults listed in the table , the IC will store a DTC and indicate this to the
customer during the detection peroid defined in the 'when logged' column, by illuminating the
indicator as described for 60 seconds and then flashing the LED 10 times as appropriate. The
indication will stop immediately the ignition is turned to off any time during the fault indication
sequence. Up to 4 DTC's could be stored per key read (1-!0 read attempts). No DTC's will be stored
until all retry attempts are complete. Only the highest priority fault code will be flashed.
The PATS LED will be commanded on as shown under 'indication'. Normal PATS operations are
complete within 400ms of the ignition switch transition from off to run or start, worst case for ECM
communication problems will be less than 2 seconds. If PATS is not complete during the 2 seconds
the ECM will terminate PATS and await the next ignition run/start event. PATS faults will be indicated
via the LED as soon as possible and will terminate the LED prove out. At key off all previous flashing
will cease and the perimeter anti theft system will control the LED when the vehicle is locked and
armed.
Mode of Operation/Fault When Logged
Ignition
Switch
Position
DTC
LED
Fault
Code
Indication
Prove out N/A
Off to
Run/Start
N/A N/A
3 Seconds of steady
illumination
Perimeter Anti theft Control N/A Off N/A N/A
Off or 0.5Hz, 5% duty
cycle until off
Transceiver not connected Key Read Run/Start B1681 11
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
code flashing 10 times
Key problem. No code
received from Key
Key Read Run/Start B1600 13
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
code flashing 10 times
Key/Transceiver problem,
partial code received,
Key Read Run/Start B1602 14
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
checksum error code flashing 10 times
Key code not stored in
memory(also due to having 8
key codes already stored in
memory)/ signature
mismatch
Ke
Read/Diagnostic
Test
Run/Start B1601 15
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
code flashing 10 times
Problem with CAN link - ECM
disabled. ECM system status
CAN message missing
ECM CAN
Comm's
Run/Start
U2511
U1900
16
60 seconds off 4Hz
flashing at 50% duty
cyle followed by fault
code flashing 10 times
Following part replacement the following codes maybe applicable, these are not normal customer
mode fault codes.
Mode of Operation/Fault When Logged
Ignition
Switch
Position
DTC
LED
Fault
Code
Indication
Following new key
programming Jaguar Approved
Diagnostic System application,
2 keys have not been cycled in
the ignition
B and A/Dealer Run/Start B1213 21
60 seconds of
steady indication
followed by fault
code flashing 10
times
PATS reset application not
performed after part IPK
replacement
B and A/Dealer Run/Start B2141 22
60 seconds of
steady indication
followed by fault
code flashing 10
times
PATS reset application not
performed after part ECM
replacement
Challenge/Response Run/Start U2510 23
60 seconds of
steady indication
followed by fault
code flashing 10
times
1 . If an obvious cause for an observed or reported concern is found, correct the cause (if possible)
before proceeding to the next step.
2 . If the cause is not visually evident, verify the symptom and refer to the Jaguar Approved
Diagnostic System.
Hello, I am having a similar problem with an x358, the car sat with the battery on for a long period of time, first time charged it it was not good anymore, changed it, no crank, checked the fuses and relays all fine, I got the PATS code 11, which you mentioned is related to the key, when I insert the key it moves the steering wheel and makes that sound that is related to reading the key(and unlocking the steering wheel). Since the car sat outside for a long period of time should I take a look first at the ground points?(I checked the ones in front behind the headlights, but not those under the car) I also put a code reader and I have these codes:
B1352 - Key inserted recognition circuit defective
B1681 - PAT alarm transponder signal not detected
B1213 - Fewer than 2 keys programmed
U2521 - Communication with ABS control unit malfunction
Any help is much appreciated!
 
  #10  
Old 06-06-2024, 11:10 AM
OldKarz's Avatar
Senior Member
Join Date: Apr 2019
Location: Ontario
Posts: 474
Received 117 Likes on 98 Posts
Default

Your U2521 may be an indicator of what is going wrong. The CAN bus passes through the ABS connector/internals an can prevent com between ECM and IP. That communication is needed for PATS verification and functioning. Check the ABS connector is clean and seated properly as a first try.
 
The following users liked this post:
Kangaroo (06-06-2024)
  #11  
Old 06-06-2024, 11:34 AM
Kangaroo's Avatar
Junior Member
Join Date: Jun 2024
Posts: 2
Received 0 Likes on 0 Posts
Default

Originally Posted by OldKarz
Your U2521 may be an indicator of what is going wrong. The CAN bus passes through the ABS connector/internals an can prevent com between ECM and IP. That communication is needed for PATS verification and functioning. Check the ABS connector is clean and seated properly as a first try.
Thank you so much! Regarding the code B1213, I have only one key and the guys at the shop tried to reprogram it, although it said clearly that you need 2 keys for this procedure, now I am afraid even if the culprit is the ABS connector and we fix it can the error B1213 cause me a "no crank" problem? (on the dashboard the only light from the PATS was code 11)
 
  #12  
Old 06-06-2024, 12:19 PM
OldKarz's Avatar
Senior Member
Join Date: Apr 2019
Location: Ontario
Posts: 474
Received 117 Likes on 98 Posts
Default

I would think that the B1213 code is more informational than problematic. However I do not know for sure. The first key would have been programmed fully to the car and the utility knows a second has not been done.
The B1681 comes from the signals not being sent and received as expected. It is sent on the SCP bus to the IP which in turn sends it along the CAN buss to the ECM. The ABS may be causing the loss of the transfer - or not. Just a lot of guessing without SDD style diagnosis.
 
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
TheBdog
X-Type ( X400 )
2
07-05-2023 09:49 PM
LarWarrior42
X-Type ( X400 )
5
06-18-2023 11:21 PM
Mantei885
XJ XJ8 / XJR ( X308 )
42
11-04-2021 12:41 AM
HNM
XJ XJ8 / XJR ( X308 )
0
10-03-2019 09:46 PM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 


Quick Reply: XJ8 Stuck in Security mode no crank



All times are GMT -5. The time now is 12:29 AM.