Symptoms of malfunction - anti-theft system
Important: The following steps must be completed before using the symptom tables.
1. Perform a diagnostic check on the vehicle's system to verify the following items are true.
- There are no fault codes.
- The controllers can communicate over a serial line.
2. View system operation to familiarize yourself with the functions of the system. See the following sections:
- Description and operation of the theft prevention system (CTD)
- Description and operation of the car theft prevention system (VTD)
Visual inspection / physical control
- Inspect aftermarket equipment that may interfere with the anti-theft system.
- Inspect easily accessible and visible parts of the system for obvious signs of damage or conditions that could lead to a malfunction.
Intermittent fault
Faulty electrical connections or wiring can cause intermittent faults. See Section 9A, "Checking body wiring systems for intermittent faults and contact problems».
List of symptoms
To perform symptom diagnosis, refer to the following list of symptom diagnosis procedures:
- Anti-theft system (CTD) - alarm mode not working
- Anti-theft system (CTD) - can't be turned off with the lock key
- The horn does not work in the alarm mode of the theft prevention system (CTD)
- Lights do not work in the anti-theft alarm mode (CTD)
Anti-theft system (CTD) - alarm mode not working
Step | Operation | Values | Yes | No |
1 |
Has the vehicle system diagnostic check been completed?
|
-
|
Go to Step 2
|
Check the vehicle with a diagnostic tool.
|
2 |
Do the entrance lights come on?
|
-
|
Go to Step 3
|
Jump to section "Entrance lights not working".
|
3 |
Is the LED blinking?
|
-
|
Go to Step 4
|
Go to section "Anti-theft indicator not working"
|
4 |
Does the LED change from blinking to solid?
|
-
|
Go to Step 5
|
|
5 |
Important: Make sure all doors are closed. The theft deterrent system will not activate automatically unless all doors are closed.
Does the LED start blinking slowly after about 30 seconds?
|
-
|
Go to Step 6
|
|
6 |
Are all functions of the alarm mode activated - parking lights flashing and an intermittent sound signal is emitted?
|
-
|
Go to Step 7
|
Go to Step 8
|
7 |
Disable the CTD system by inserting the door key into the driver's door lock cylinder and turning it to the unlock position, then attempt the same with the passenger's door lock cylinder.
Have all functions of the alarm mode ceased?
|
-
|
Go to section "Anti-theft system (CTD) - can't be turned off with the lock key"
|
|
8 |
Are any alarm functions activated?
|
-
|
Go to Step 1
|
|
9 |
Only an intermittent beep sounds?
|
-
|
Go to section "Lights do not work in the anti-theft alarm mode (CTD) "
|
Go to section "The horn does not work in the alarm mode of the theft prevention system (CTD) "
|
Anti-theft system (CTD) - can't be turned off with the lock key
Step | Operation | Values | Yes | No |
1 |
Has the vehicle system diagnostic check been completed?
|
-
|
Go to Step 2
|
Check the vehicle with a diagnostic tool.
|
2 |
Does the scan tool show ACTIVE (ACTIVELY), when the lock cylinders are held in the UNLOCK position (UNLOCK)?
|
-
|
Go to Step 3
|
|
3 |
Does the scan tool show INACTIVE (NOT ACTIVE), when both lock cylinders on the left and right doors are held in the UNLOCK position (UNLOCK)?
|
-
|
Go to Step 4
|
Go to Step 6
|
4 |
Check the body control part of the door lock switch signal circuit (BCM), for a break.
Has the cause been found and fixed?
|
-
|
Go to Step 12
|
Go to Step 5
|
5 |
Inspect the BCM harness connector for loose connections. See section 9A "Body Wiring System, Intermittent Faults and Contact Faults".
Has the cause of the problem been found and fixed?
|
-
|
Go to Step 6
|
|
6 |
Does the scan tool display an ACTIVE status (ACTIVE)?
|
-
|
Go to Step 8
|
Go to Step 7
|
7 |
Repair the open in the door lock switch signal circuit related to the appropriate door lock switch.
Has the repair been completed?
|
-
|
Go to Step 12
|
-
|
8 |
Does the scan tool display an ACTIVE status (ACTIVE)?
|
-
|
Go to Step 10
|
Go to Step 9
|
9 |
Repair the open in the ground circuit of the failed door lock switch.
Has the repair been completed?
|
-
|
Go to Step 12
|
-
|
10 |
Replace faulty door lock switch.
Has the replacement been completed?
|
-
|
Go to Step 12
|
-
|
11 |
Replace BCM.
Has the replacement been completed?
|
-
|
Go to Step 12
|
-
|
12 |
Has the cause been removed?
|
-
|
System OK
|
Check the vehicle with a diagnostic tool.
|
The horn does not work in the alarm mode of the theft prevention system (CTD)
Step | Operation | Values | Yes | No |
1 |
Has the vehicle system diagnostic check been completed?
|
-
|
Go to Step 2
|
Check the vehicle with a diagnostic tool.
|
2 |
Does the buzzer work?
|
-
|
Go to Step 3
|
|
3 |
Press the horn switch on the steering wheel. Does the buzzer work?
|
-
|
Go to Step 4
|
|
4 |
Does the buzzer work?
|
-
|
Go to Step 6
|
Go to Step 5
|
5 |
Test the horn relay control circuit for an open or short to battery voltage.
Has the cause been found and fixed?
|
-
|
Go to Step 8
|
|
6 |
Inspect the harness connector at the BCM for loose connections.
Has the cause been found and fixed?
|
-
|
Go to Step 8
|
Go to Step 7
|
7 |
Replace BCM.
Has the replacement been completed?
|
-
|
Go to Step 8
|
-
|
8 |
Operate the system to check if the problem has been fixed.
Has the cause been removed?
|
-
|
System OK
|
Go to Step 3
|
Lights do not work in the anti-theft alarm mode (CTD)
Step | Operation | Values | Yes | No |
1 |
Has the vehicle system diagnostic check been completed?
|
-
|
Go to Step 2
|
Check the vehicle with a diagnostic tool.
|
2 |
Do one of the following to activate the theft deterrent alarm mode (CTD).
Are all functions of the alarm mode activated - flashing lights and an intermittent sound signal?
|
-
|
Go to Step 3
|
|
3 |
Are the parking lights not working?
|
-
|
Check the serviceability of the parking lights, number plate lighting and rear lights.
|
Go to section "Anti-theft system (CTD) - alarm mode not working"
|
Anti-theft indicator not working
Step | Operation | Values | Yes | No |
1 |
Has the vehicle system diagnostic check been completed?
|
-
|
Go to Step 2
|
Check the vehicle with a diagnostic tool.
|
2 |
Does the anti-theft indicator light come on for about 5 seconds and then turn off?
|
-
|
Go to Step 3
|
|
3 |
Inspect the watch for contact problems.
Has the cause been found and fixed?
|
-
|
Go to Step 5
|
Go to Step 4
|
4 |
Replace watch.
Has the replacement been completed?
|
-
|
Go to Step 5
|
-
|
5 |
Operate the system to check if the problem has been fixed.
Has the cause been removed?
|
-
|
System OK
|
Go to Step 2
|
body controller (BCM) controls the shift lock solenoid by applying battery voltage to it. The BCM uses a self-regulating output driver to regulate the voltage supplied to the shift lock solenoid. The self-regulating output driver controls the voltage and current in the controlled circuit.
DTC B1000 33: Special Memory Malfunction
DTC B1000 34: ECM RAM Malfunction
DTC B1000 35: ECM ROM Malfunction
DTC B1000 36: ECM EEPROM Malfunction
The controller executes an internal fault detection routine upon receiving a power-on command. The only necessary condition is the presence of supply voltage and ground. This program is executed even if the voltage is outside the allowed operating range.
- An internal fault has been detected in the controller.
- Action Taken When the DTC Sets
- The controller disables all auxiliary inputs.
- The current fault code is cleared after the fault disappears.
- The DTC is cleared from the log when the ignition cycle counter in the controller reaches the reset threshold of 50 without recurring the fault.
- This DTC can be stored in the DTC log without affecting the functionality of the controller.
- If the DTC is only logged and not issued as a current DTC, do not replace the controller.
- If a DTC is received as both current and logged, replace the controller that generated the DTC.
If this DTC is received as current, replace the controller that generated this DTC.
Perform a post-repair diagnostic test when the repair is complete. See Section 9A, "Body Wiring Systems".
See also section "Replacing, configuring and programming the associated controller and the controller with a communication failure".
The anti-theft controller compares the VIN value stored there with the vehicle identification number value stored in the body controller. If the values do not match, this DTC is set.
The ignition switch is set to the ON position.
- The VIN check flag in the anti-theft controller is set "true".
- The theft deterrent controller has determined that the battery has been disconnected and then reconnected.
- The engine does not turn on.
- The theft deterrent controller sends a fuel inhibit command over the serial link to the ECM.
- The theft deterrent controller starts the VIN timer for a programmed amount of time, typically 10 minutes.
- The theft deterrent controller sends a command to the BCM to turn on the SECURITY indicator (PROTECTION).
- The theft deterrent controller clears the current DTC when the correct VIN information is received.
- This DTC can be cleared with a scan tool.
Perform a post-repair diagnostic check after completing the diagnostic procedure.
- Adding Keys
- Replacing, configuring and programming the associated controller and the controller with communication failure.
An internal fault is detected inside the controller. External circuits are not affected.
The only necessary condition is the presence of supply voltage and ground.
The controller has detected that the VIN is not programmed.
- The current fault code is cleared after the fault disappears.
- The fault code is cleared from the log when the ignition cycle counter in the controller reaches the reset threshold without recurring the fault.
Program the VIN information into the body controller (BCM).
Switch off the ignition, wait a few seconds and switch on the ignition.
Read DTCs from the BCM. DTC B1016 should change status to logged.
- If this DTC is received as current, replace the controller that generated this DTC.
Perform a post-repair diagnostic test when the repair is complete. See Section 9A, "Body Wiring Systems". See also section "Replacing, configuring and programming the associated controller and the controller with a communication failure".
While memorizing the code key, the immobilizer (RK3+) is in memory mode. DTC B3031 is set automatically as an indication that the system is in learning mode, and not as evidence of a malfunction. After the code key is memorized, the system exits the memorization mode and the fault code is deleted. If the immobilizer does not exit learn mode, DTC B3031 remains current and indicates a malfunction.
The car's anti-theft system is in learning mode.
DTC B3031 is issued each time the immobilizer goes into learning mode.
The security indicator lights up.
- The current DTC B3031 will be cleared after successfully exiting the learning mode.
- The DTC in the log will be cleared after 100 ignition cycles without a fault, or by using a scan tool to clear the DTCs.
Important: When performing a 10-minute or 30-minute re-learning procedure, all keys not learned at that time will be deleted and will no longer be recognized. It is necessary to perform the adding keys procedure with all keys or teach the customer how to perform the adding keys procedure if not all keys are available during the repair.
- Verify DTC B3060 is not set as current.
- If DTC B3060 is current, see "DTC B3060".
- Using a scan tool, verify that the parameter "Enable VTD password remembering" matters YES (YES).
- If the parameter "Enable VTD password remembering" does not matter YES, perform a 10 minute relearn procedure for the powerplant system. Cm. "Programming parts of the anti-theft system".
- Perform a 10-minute re-learn procedure for the anti-theft system (VTD). Cm. "Programming parts of the anti-theft system". The immobilizer should exit learning mode and DTC B3031 should clear.
- If the immobilizer does not exit the learning mode after programming, the immobilizer must be replaced.
Perform a post-repair diagnostic check after completing the diagnostic procedure.
- Adding Keys
- Replacing, configuring and programming the associated controller and the controller with communication failure.
When the ignition key is inserted into the ignition lock cylinder and the ignition is turned on, the transponder built into the key head is powered by the excitation coils located around the ignition lock cylinder. When voltage is applied, the transponder transmits a signal containing a unique value, which is received by the immobilizer (TPK3+). The immobilizer compares the received value with the value stored in the memory. The stored value is the stored key code. If the value is correct, the immobilizer transmits the engine start permission password via a serial communication line to the engine control controller (ECM). If either the unique transponder value or the calculated response value is incorrect, the immobilizer will send the engine start inhibit password to the ECM.
Ignition switch in Accessory position (Auxiliary) or Run (Job).
The immobilizer cannot get the transponder value from the ignition key.
Starting the car engine is prohibited.
The security indicator is on.
- The current DTC will be cleared when the immobilizer detects a valid transponder value from the ignition key.
- The DTC in the log will be cleared after 100 ignition cycles without a fault, or by using a scan tool to clear the DTCs.
Important: Multiple keys to this vehicle are required to ensure that this diagnostic procedure is performed correctly. If only one key is available during maintenance, contact the customer and ask him to provide the remaining keys for maintenance. If no other keys are available, a new spare key must be created.
- Inspect all available serviceable keys to the car.
- If any key does not fit the car, it should be replaced.
- While observing the DTCs with a scan tool, attempt to start the vehicle with each of the available keys. The car engine must be started with all available keys.
- If the engine cannot be started with only one key and the current DTC B3055 is set, the faulty key must be replaced.
- If the engine cannot be started with any of the available keys and the current DTC B3055 is set, the immobilizer must be replaced.
Perform a Post-Repair Diagnostic Check at the end of the diagnostic procedure
- Replacing keys
- Adding Keys
- Replacing, configuring and programming the associated controller and the controller with communication failure.
When the ignition key is inserted into the ignition lock cylinder and the ignition is turned on, the transponder built into the key head is powered by the excitation coils located around the ignition lock cylinder. When voltage is applied, the transponder transmits a signal containing a unique value, which is received by the immobilizer (PK3+). The immobilizer compares the received value with the value stored in the memory. The stored value is the stored key code. If the value is correct, the immobilizer transmits the engine start permission password via a serial communication line to the engine control controller (ECM). If either the unique transponder value or the calculated response value is incorrect, the immobilizer will send the engine start inhibit password to the ECM.
Ignition switch in Accessory position (Auxiliary) or Run (Job).
The transponder value received by the immobilizer is incorrect or not stored in the vehicle.
Starting the car engine is prohibited.
The security indicator is on.
- The current DTC will be cleared when the immobilizer detects a valid transponder value from the ignition key.
- The DTC in the log will be cleared after 100 ignition cycles without a fault, or by using a scan tool to clear the DTCs.
Important: Multiple keys to this vehicle are required to ensure that this diagnostic procedure is performed correctly. If only one key is available during maintenance, contact the customer and ask him to provide the remaining keys for maintenance. If no other keys are available, a new spare key must be generated.
- Perform the key replacement procedure.
- Try to start the car engine. The car engine must be started with all available keys.
- If any key fails to start the engine, the defective key must be replaced.
Perform a Post-Repair Diagnostic Check at the end of the diagnostic procedure
- Replacing keys
- Adding Keys
- Replacing, configuring and programming the associated controller and the controller with communication failure.
When the immobilizer (PK3+) is in code key learning or additional key learning mode, the immobilizer checks the current key to ensure that it is correctly configured as a valid key for the vehicle.
- Ignition switch in Accessory position (Auxiliary) or Run (Job).
- The immobilizer is in the mode of storing the code key or storing additional keys
The immobilizer has detected that the current key is not configured as a valid key for this vehicle.
The security indicator is on.
- The current DTC will be cleared when the immobilizer detects a properly configured key for that vehicle.
- The DTC in the log will be cleared after 100 ignition cycles without a fault, or by using a scan tool to clear the DTCs.
Important: Multiple keys to this vehicle are required to ensure that this diagnostic procedure is performed correctly. If only one key is available during maintenance, contact the customer and ask him to provide the remaining keys for maintenance. If no other keys are available, a new spare key must be created.
While observing the DTCs with a scan tool, attempt to start the vehicle with each of the available keys. The car engine must be started with all available keys.
- If the engine fails to start with any one key and the current DTC B3976 is set, the faulty key must be replaced.
Perform a Post-Repair Diagnostic Check at the end of the diagnostic procedure
- Replacing keys
- Adding Keys
- Replacing, configuring and programming the associated controller and the controller with communication failure.
When the ignition key is inserted into the ignition lock cylinder and the ignition is turned on, the transponder built into the key head is powered by the excitation coils located around the ignition lock cylinder. When voltage is applied, the transponder transmits a signal containing a unique value, which is received by the immobilizer (PK3+). The immobilizer compares the received value with the value stored in the memory. The stored value is the stored key code. If the value is correct, the immobilizer transmits the engine start permission password via a serial communication line to the engine control controller (ECM). If either the unique transponder value or the calculated response value is incorrect, the immobilizer will send the engine start inhibit password to the ECM.
- Ignition switch in Accessory position (Auxiliary) or Run (Job).
- A valid transponder value has been read.
- The transponder value is valid and matches the value stored in the immobilizer memory
Starting the car engine is prohibited.
The security indicator is on.
- The current DTC will be cleared when a valid transponder value is read and authenticated.
- The DTC in the log will be cleared after 100 ignition cycles without a fault, or by using a scan tool to clear the DTCs.
Replace the key with the suspected malfunction or malfunction. DTC B3935 should not set again and the vehicle should start.
- If DTC B3935 is returned after a key change, replace the immobilizer.
Perform a post-repair diagnostic check after completing the diagnostic procedure.
- Replacing keys
- Adding Keys
- Replacing, configuring and programming the associated controller and the controller with communication failure.
Swap detection failed for the vehicle.
The ignition switch is set to the ON position.
- The VIN check flag in the anti-theft controller is set "true".
- The theft deterrent controller has determined that the battery has been disconnected and then reconnected.
- The engine does not turn on.
- The theft deterrent controller sends a fuel inhibit command over the serial link to the ECM.
- The theft deterrent controller starts the VIN timer for a programmed amount of time, typically 10 minutes.
- The anti-theft controller sends to the instrument cluster (IPC) command to turn on the SECURITY indicator (PROTECTION).
- The theft deterrent controller clears the current DTC when the correct VIN information is received.
- This DTC can be cleared with a scan tool.
Perform a post-repair diagnostic check after completing the diagnostic procedure.
- Adding Keys
- Replacing, configuring and programming the associated controller and the controller with communication failure.
Controllers connected to the high and low speed GMLAN serial links monitor serial communications during normal vehicle operation. Between the controllers there is an exchange of operational information and commands. The controllers have pre-recorded information about what messages should be exchanged over the serial links in each virtual network. These messages are monitored and in addition certain regular messages are used by the receiving controller to determine the availability of the sending controller. Each message contains the identification number of the transmitting controller.
body controller (BCM) activates the serial line enable and auxiliary wake-up circuits for the serial line by applying voltage when the ignition switch is in the ACC, ON, or START position. Serial link enable circuit wakes up brake controller (EBCM) for bus communication, and an auxiliary serial line wake-up circuit wakes up the motor controller (ECM) and gearbox controller (TCM).
- The voltage in the system is 9 - 16 V.
- Serial communication is required for the vehicle power mode master to operate.
A monitored regular message indicating the availability of the transmitting controller was not received.
The controllers have never signaled, so certain subsystems will not work.
- The current fault code is cleared after the fault disappears.
- The DTC in the log is cleared when the ignition cycle counter in the controller reaches the reset threshold of 50 without recurring the fault.
- If there are several controllers with communication failure, select the one closest to the diagnostic socket (DLC).
- Some controllers lack internal protection for certain voltage outputs and may cause the battery positive voltage fuse or ignition voltage source to blow. If the input voltage fuse is blown but no short circuit is detected on this circuit, verify that the controllers do not have a voltage output circuit shorted to ground before replacing the controller.
- This diagnostic can be applied to any controller that needs to communicate on a high or low speed CAN serial link, provided the vehicle is equipped with the option that uses this controller.
Using the troubleshooting tips above, determine which controller is having a communication problem and what needs to be checked.
Ignition OFF, disconnect the harness connector at the controller that is not communicating.
Important: Only high speed CAN controllers have a serial line enable circuit OR an auxiliary serial line wakeup circuit. If the offending controller is missing one of these circuits, go to step 4.
- Ignition ON, verify the test lamp illuminates between the serial link enable circuit OR the serial link auxiliary wakeup circuit and ground.
- If the test lamp does not illuminate, repair the open or high resistance in the circuit. If there are no open circuits, replace the BCM.
- Ignition ON, test for a test lamp illuminated between all of the battery positive voltage circuits and ground.
- If the test lamp does not illuminate, repair the short to ground or open/high resistance in the circuit. If the circuit fuse is blown, also check the positive voltage outputs on the controller for a short to ground. If the circuits are OK, replace the failed controller.
- Test for a test lamp illuminated between all ignition voltage circuits and ground.
- If the test lamp does not illuminate, repair the short to ground or open/high resistance in the circuit. If the circuit fuse is blown, also check the positive voltage outputs on the controller for a short to ground. If the circuits are OK, replace the failed controller.
- Verify that the resistance between the controller ground circuits and ground is less than 1 ohm.
- If it is greater than 1 ohm, repair the open in the ground circuit.
- Determine if the controller with communication failure is using a low speed CAN serial link.
- If the controller only uses high speed GMLAN, replace the controller.
- Verify that the resistance on the low speed CAN serial link circuit between the offending controller and the controller issuing the DTC is less than 1 ohm.
- If resistance is greater than 1 ohm, test the low speed CAN serial link for an open or high resistance.
- If all circuits are OK, replace the controller with the communication problem.
Perform a post-repair diagnostic check after completing the diagnostic procedure. See Section 9A, "Body Wiring Systems".Replacing, configuring and programming the associated controller and the controller with communication failure.
Controllers connected to the high and low speed GMLAN serial links monitor serial communications during normal vehicle operation. Between the controllers there is an exchange of operational information and commands. The controllers have pre-recorded information about what messages should be exchanged over the serial links in each virtual network. These messages are monitored and in addition certain regular messages are used by the receiving controller to determine the availability of the sending controller. Each message contains the identification number of the transmitting controller.
body controller (BCM) activates the serial line enable and auxiliary wake-up circuits for the serial line by applying voltage when the ignition switch is in the ACC, ON, or START position.
- The voltage in the system is 9 - 16 V.
- Serial communication is required for the vehicle power mode master to operate.
A monitored regular message indicating the availability of the transmitting controller was not received.
The controllers have never signaled, so certain subsystems will not work.
- The current fault code is cleared after the fault disappears.
- The DTC is cleared from the log when the ignition cycle counter in the controller reaches the reset threshold of 50 without recurring the fault.
- Using the above list of DTC definitions, determine which of the controllers is out of communication.
- If there are several controllers with communication failure, select the one closest to the diagnostic socket (DLC).
- Some controllers lack internal protection for certain voltage outputs and may cause the battery positive voltage fuse or ignition voltage source to blow. If the input voltage fuse is blown but no short circuit is detected on this circuit, verify that the controllers do not have a voltage output circuit shorted to ground before replacing the controller.
- This diagnostic can be applied to any controller that needs to communicate over a high or low speed GMLAN serial link, provided the vehicle is equipped with the option that uses this controller.
Perform a post-repair diagnostic check after completing the diagnostic procedure. See Section 9A, "Body Wiring Systems".