Ok, I went to test. First: both boxes are ERR-6645. Old Ecu tune ID: 9605
Replacement tune ID: 9625. The old one has Security mode YES, the replacement one has NO.
I did the suggested lesson 5 times, always the result was NO
 
Screenshot: This is again Google's fault, I've taken a screenshot of what you posted, I haven't posted a screenshot. I'm sorry again.
 
I read that the success of the ECM tutorial can fail due to a small deviation. I noticed that Nanocom had changed the Vin number of the replacement ECM to the same as the old ECM box. Is this the small error, should this field be reset?
 
Neither of those Tune ID's appear in my copy of the Land Rover GEMS Systems document, but that could simply be the copy I have. See pages 29 & 30 in the attached PDF. I wonder if they were "interim" or early production tunes, and should he been re-programmed by LR at the next service ?

Not sure if Nanocom always updates the VIN or not ? You would have to ask Blackbox in Cyprus.

The fact that you always get Security = No is showing the new ECU never receives the code from BECM. My suspicion is someone has been messing with the BECM & GEMS before you got the car (and messed it up) ??
 

Attachments

  • GEMS_Systems.pdf
    469.4 KB · Views: 120
Your conclusion may well be correct. Now there's a chance: The car that gave up the ECM box, which is now a replacement, the BeCM and lock and key are available from that car. Then they would possibly be compatible with each other...
 
I find out the extra wires or broken wires of the BeCM, in which connectors they are. One more note, due to multiple battery disconnects, the car's message center says: settings windows, sunroof etc, does this affect the tutorial?
 
I find out the extra wires or broken wires of the BeCM, in which connectors they are. One more note, due to multiple battery disconnects, the car's message center says: settings windows, sunroof etc, does this affect the tutorial?
The windows not set message is normal after a battery disconnect, it does not affect the tutorial.
 
I was thinking about the point where I had to turn the power off and on again. It takes some time for messages to appear in the message center. Is there a time limit for switching off and on...I also tried to act quickly regardless of the message. Some programs do not tolerate duplicates
 
I did say when doing the Security Learn on GEMS, to switch off for 30 seconds, but 10-20 is probably enough.

A couple of other ideas:

Option 1) After setting GEMS to learn mode, exit the Nanocom menus. Then switch ignition off & lock the car. Wait 30 seconds & unlock with FOB. Then switch on ignition to position 2 (i.e. dash warning light on). Then go to GEMS menus & see if the code has been learnt ?

Option 2) Same as option-1 above, but after the 30 second wait, switch ignition on and try to start the car. Now go to GEMS menus & see if the code has been learnt ? Maybe the BECM security code is only sent during starting the engine ?

FYI, There was a LR dealer only tech bulletin to enable dealers to program FFFF or 65535 into the GEMS using Testbook diagnostics to disable immobilisation. Given that your BECM has this, it makes me think someone tried to do the same.
 
Another thought. Check the wire from BECM C112 Pin-5 to GEMS C507 Pin-26 is not cut or shorted out. It should be a GB wire, i.e. green wire with black stripe.
 
I found diagram B1 in the car's papers, where a BeCM bypass has been made when starting the engine. Connector C177, pin 6 cut BeCm. Connector C257, pin 6, wire cut BeCm. These two pins 6 (color WR) are connected to each other past BeCm so that the ignition switch 3 position grounds the coil RL 16. (Start relay). I'll leave this connection alone.
 
I'll check later today. I saw an article on some site, someone had tested the motor on the floor connecting 4 ground wires -. then connected 2 power cables +. The engine had started. When installed in a car, no. It is probably about connector C509, pins 5, 9, 10 and 16 are grounded and 7 and 8 are positive pins. This might be worth looking into??
 
I'll check later today. I saw an article on some site, someone had tested the motor on the floor connecting 4 ground wires -. then connected 2 power cables +. The engine had started. When installed in a car, no. It is probably about connector C509, pins 5, 9, 10 and 16 are grounded and 7 and 8 are positive pins. This might be worth looking into??
Yes, but only if the ECU has had the immobilisation disabled.

In your case the original ECU has suspect ROM fault, but security seems to be working because you see "security = yes" in the diagnostics. However we do not know if security has been disabled and always shows yes !! or is actually working ?

The second ECU never learns the security for some reason. This could either be another bad ECU, or the GB wire from BECM is broken.
 
If both cars happen to have the same security code in the BECM, then it might work. After all it's only a 4-byte hex number that's sent across. Better to sort the wiring on your car.

If you know anyone with an oscilloscope, you could simply check if data is being sent across or not ?
 
Well, I've looked at BeCM where I saw extra wires. They are in connectors C112, C113, C257, C325 and C383. As far as I can see these changes apply to the doors and hatches and of course the starter motor C113 and C257.
C325 pin 3 right rear fog light wire cut.
The front door super lock wires have been cut. I didn't have much time for this now.
I'll continue this weekend
 
Sounds like someone bypassed all the BECM stuff to start the car. If it doesn't get the usual unlock, etc, it probably does not send any code to either ECU.

Maybe the original ECU fault is simply another bodge to make the car start without security, and the diagnostic info simply thinks the code has been received ?
 
I agree with you. Going to the 0605 error that worries me, can it be fixed by replacing the two chips in the rack from the available box or will it get crazier?
 

Similar threads