immobilizer KIA CARNIVAL 2007 Workshop Manual

MAIN SYMPTOMDIAGNOSTIC PROCEDURE ALSO CHECK FOR
Unable to start
(Engine does not turn
over) a.
Test the battery
b. Test the starter
c. Inhibitor switch (A/T) or clutch start switch (M/T)
Unable to start
(Incomplete
combustion) a.
Test the battery
b. Check the fuel pressure
c. Check the ignition circuit
d. Troubleshooting the immobilizer system (In case of
immobilizer lamp flashing) a.
DTC
b. Low compression
c. Intake air leaks
d. Slipped or broken timing belt
e. Contaminated fuel
Difficult to start a.
Test the battery
b. Check the fuel pressure
c. Check the ECTS and circuit (Check DTC)
d. Check the ignition circuit a.
DTC
b. Low compression
c. Intake air leaks
d. Contaminated fuel
e. Weak ignition spark
Poor idling
(Rough, unstable or
incorrect Idle) a.
Check the fuel pressure
b. Check the Injector
c. Check the long term fuel trim and short term fuel trim
(Refer to CUSTOMER DATASTREAM)
d. Check the idle speed control circuit (Check DTC)
e. Inspect and test the Throttle Body
f. Check the ECTS and circuit (Check DTC) a.
DTC
b. Low compression
c. Intake air leaks
d. Contaminated fuel
e. Weak ignition spark
Engine stall a.
Test the Battery
b. Check the fuel pressure
c. Check the idle speed control circuit (Check DTC)
d. Check the ignition circuit
e. Check the CKPS Circuit (Check DTC) a.
DTC
b. Intake air leaks
c. Contaminated fuel
d. Weak ignition spark
Poor driving
(Surge) a.
Check the fuel pressure
b. Inspect and test Throttle Body
c. Check the ignition circuit
d. Check the ECTS and Circuit (Check DTC)
e. Test the exhaust system for a possible restriction
f. Check the long term fuel trim and short term fuel trim
(Refer to CUSTOMER DATASTREAM) a.
DTC
b. Low compression
c. Intake air leaks
d. Contaminated fuel
e. Weak ignition spark
Knocking a.
Check the fuel pressure
b. Inspect the engine coolant
c. Inspect the radiator and the electric cooling fan
d. Check the spark plugs a.
DTC
b. Contaminated fuel
Poor fuel economy a.
Check customer's driving habits
a. Is A/C on full time or the defroster mode on?
b. Are tires at correct pressure?
c. Is excessively heavy load being carried?
d. Is acceleration too much, too often? a.
DTC
b. Low compression
c. Intake air leaks

28-y
29 -y
30 -y
31 -y
32 A/C Pressure Transducer signal input A/C Pressure Transducer (APT)
33 Sensor ground A/C Pressure Transducer (APT)
34 -y
35 -y
36 -y
37 -y
38 Battery voltage supply after main relay Main Relay
39 Battery voltage supply after main relay Main Relay
40 Battery voltage supply after main relay Main Relay
41 CAN [High] ABS/ESP Control Module
42 CAN [Low] ABS/ESP Control Module
43 Main Relay control output Main Relay
44 Intake Air Temperature Sensor signal input Intake Air Temperature Sensor (IATS)
45 Immobilizer communication line Immobilizer control module
46 -y
47 Mass Air Flow Sensor signal input Mass Air Flow Sensor (MAFS)
48 Sensor ground Accelerator Position Sensor (APS) #2
49 Accelerator Position Sensor #2 signal input Accelerator Position Sensor (APS) #2
50 -y
51 Cruise "SET" lamp control output Cruise "SET" Lamp
52 Vehicle speed signal input ABS/ESP Control Module (With ABS/ESP [Euro -
Ⅲ/Ⅳ])
Vehicle Speed Sensor (VSS) (Except Euro-
Ⅲ/Ⅳ)
53 Sensor ground Intake Air Temperature Sensor (IATS)
54 Accelerator Position Sensor #1 signal input Accelerator Position Sensor (APS) #1
55 Sensor ground Accelerator Position Sensor (APS) #1
56 -y
57 Sensor (+5V) Accelerator Position Sensor (APS) #2
58 Sensor (+5V) A/C Pressure Transducer (APT)
59 Sensor (+5V) Accelerator Position Sensor (APS) #1
60 -y
61 Engine speed signal output Cluster (Tachometer)
62 Fuel consumption signal output Trip Computer
63 Malfunction Indicator Lamp (MIL) control output Cluster (Malfunction Indicator Lamp)
64 A/C Compressor Relay control output A/C Compressor Relay
65 Cooling Fan [Low] control output Cooling Fan Relay [Low]
66 Cooling Fan [High] control output Cooling Fan Relay [High]
67 Variable Intake Solenoid Valve #2 control output Variable Intake Solenoid (VIS) Valve #2 [Intake
Manifold Side]

67Variable Intake Solenoid Valve #2 control output
Manifold Side]
68 Throttle Position Sensor signal (PWM) output ABS/ESP Control Module
69 Cruise "MAIN" lamp control output Cruise "MAIN" Lamp
70 Fuel Pump Relay control output Fuel Pump Relay
71 Variable Intake Solenoid Valve #1 control output Variable Intake Solenoid (VIS) Valve #1 Surge
Tank Side]
72 Immobilizer lamp control output Immobilizer Lamp
73 -y
74 -y
75 -y
76 -y
77 -y
78 Purge Control Solenoid Valve control output Purge Control Solenoid Valve (PCSV)
79 Wheel Speed Sensor [Low] signal input Wheel Speed Sensor (WSS)(Without ABS/ESP
[Euro -
Ⅲ/Ⅳ])
80 Wheel Speed Sensor [High] signal input Wheel Speed Sensor (WSS)(Without ABS/ESP
[Euro -
Ⅲ/Ⅳ])
CONNECTOR [C151- 2] Pin
No. Description
Connected to
1 ETC Motor [- ] control output ETC Motor (in ETC Module)
2 ETC Motor [+] control output ETC Motor (in ETC Module)
3 -y
4 CVVT Oil Temperature Sensor signal input CVVT Oil Temperature Sensor (OTS)
5 -y
6 -y
7 Engine Coolant Temperature Sensor signal input Engine Coolant Temperature Sensor (ECTS)
8 Manifold Absolute Pressure Sensor signal input Manifold Absolute Pressure Sensor (MAPS)
9 -y
10 -y
11 Reference voltage (+5V) Manifold Absolute Pressure Sensor (MAPS)
12 Battery voltage supply after ignition switch Ignition Switch
13 Reference voltage (+5V) Throttle Position Sensor (TPS) #2
14 Sensor ground Throttle Position Sensor (TPS) #1
15 Reference voltage (+5V) Camshaft Position Sensor (CMPS) [Bank 2]
16 Reference voltage (+5V) Throttle Position Sensor (TPS) #1
17 Sensor ground Camshaft Position Sensor (CMPS) [Bank 2]
18 Sensor ground Camshaft Position Sensor (CMPS) [Bank 1]
19 Ignition Coil (Cylinder #6) control output Ignition Coil (Cylinder #6)
20 -y
21 Crankshaft Position Sensor [High] signal input Crankshaft Position Sensor (CKPS)
22 -y
Knock Sensor (KS) [Bank 1], Knock Sensor (KS)

40Battery voltage supply after main
relay IG OFF
DCMax. 1.0 V
- 25mV
IG ON Battery Voltage12.37V
41 CAN [High] Recessive
Pulse2.0 ~ 3.0 V
2.4V
Dominant 2.75~4.5 V3.56V
42 CAN [Low] Recessive
Pulse2.0 ~ 3.0 V
2.42V
Dominant 0.5~2.25 V1.62V
43 Main Relay control output Relay ON
DCBattery Voltage
0.875V
Relay OFF Max. 1.0V12.47V
44 Intake Air Temperature Sensor
signal input Idle
Analog 0 ~ 5V 2.05V
45 Immobilizer communication line When
communicating after IG ON PulseHi: Min. 8.5V
11.87V
Lo: Max. 3.5V 875mV
46 - yy y y
47 Mass Air Flow Sensor signal
input
Idle
Pulse Hi: Vcc
4.97V
Lo: Max. 0.5V 70mV
48 Sensor ground IdleDCMax. 50 mV 22.52mV
49 Accelerator Position Sensor #2
signal input C.T
Analog 0.3 ~ 0.9V
0.38V
W.O.T 1.5 ~ 3.0V2V
50 - yy y y
51 Cruise "SET" lamp control output Cruise OFF
DCBattery Voltage
12.57V
Cruise ON Max. 1.0V- 25mV
52 Vehicle speed signal input Vehicle RunPulseHi: Min. 5.0V
11.07V
Lo: Max. 1.0V - 125mV
53 Sensor ground IdleDCMax. 50 mV 22.37mV
54 Accelerator Position Sensor #1
signal input C.T
Analog 0.3 ~ 0.9V
819mV
W.O.T 4.0 ~ 4.8V4.01V
55 Sensor ground IdleDCMax. 50mV 22.6mV
56 - yy y y
57 Reference voltage (+5V) IG OFF
DCMax. 0.5V
4.95V
IG ON 4.9 ~ 5.1V- 10mV
58 Reference voltage (+5V) IG OFF
DCMax. 0.5V
4.95V
IG ON 4.9 ~ 5.1V- 10mV
59 Reference voltage (+5V) IG OFF
DCMax. 0.5V
4.95V
IG ON 4.9 ~ 5.1V- 10mV
60 - yy y y
61 Engine speed signal output IdlePulseHi: Battery Voltage
13.57V
Lo: Max. 0.5V - 25mV
20 ~ 26Hz y
62 Fuel consumption signal output IdlePulseHi: Battery Voltage
13.57V
Lo: Max. 0.5V - 25mV
63 Malfunction Indicator Lamp (MIL)
control output Lamp OFF
DCHi: Battery Voltage
13.37V
Lamp ON Lo: Max. 2.0V- 25mV

64A/C Compressor Relay control
output A/C OFF
DCBattery Voltage
13.97V
A/C ON Max. 1.0V175mV
65 Cooling Fan [Low] control output Fan OFF
DCBattery Voltage
13.77V
Fan ON Max. 1.0V175mV
66 Cooling Fan [High] control output Fan OFF
DCBattery Voltage
13.57V
Fan ON Max. 1.0V- 25mV
67 Variable Intake Solenoid Valve
#2 control output Active
DCMax. 1.0 V
13.77
Inactive Battery Voltage- 25mV
68 Throttle Position Sensor signal
(PWM) output
Idle
PulseHi: Battery Voltage
13.37V
Lo: 0 ~ 0.5 V - 25mV
69 Cruise "MAIN" lamp control
output Cruise OFF
DCBattery Voltage
12.37V
Cruise ON Max. 1.0V- 25mV
70 Fuel Pump Relay control output Relay OFF
DCBattery Voltage
12.57V
Relay ON Max. 1.0V- 25mV
71 Variable Intake Solenoid Valve
#1 control output Active
DCMax. 1.0 V
175mV
Inactive Battery Voltage13.77V
72 Immobilizer lamp control output Lamp OFF
DCBattery Voltage
12.77V
Lamp ON Max. 1.0V- 25mV
73 - yy y y
74 - yy y y
75 - yy y y
76 - yy y y
77 - yy y y
78 Purge Control Solenoid Valve
control output Inactive
PulseHi: Battery Voltage
13.83V
Active Lo: Max. 1.0V31.54mV
79 Wheel Speed Sensor [Low]
signal input y
y y y
80 Wheel Speed Sensor [High]
signal input y
y y y
CONNECTOR [C151- 2] Pin
No. Description
ConditionType LevelTest Result
1 ETC Motor [- ] control output IdlePulseHi: Battery Voltage
14.07V
Lo: Max . 1.0V - 125mV
2 ETC Motor [+] control output IdlePulseHi: Battery Voltage
14.07V
Lo: Max . 1.0V - 325mV
3 - yy y y
4 CVVT Oil Temperature Sensor
signal input Idle
Analog 0 ~ 5.0V 282mV at 96°C
5 - yy y y
6 - yy y y
7 Engine Coolant Temperature
Sensor signal input Idle
Analog 0 ~ 5.0V 1.88V

Immobilizer System

2007 > 2.7L V6 GASOLINE >
DESCRIPTION
The immobilizer system will disable the vehicle unless the proper ignition key is used, in addition to the currently
available anti- theft systems such as car alarms, the immobilizer system aims to drastically reduce the rate of auto
theft.
1. SMARTRA type immobilizer
a. The SMARTRA system consists of a transponder located in the ignition key, an antenna coil, a SMARTRA unit,
an indicator light and the PCM(ECM).
b. The SMARTRA communicates to the PCM(ECM) (Engine Control Module) via a dedicated communications line.
Since the vehicle engine management system is able to control engine mobilization, it is the most suitable unit
to control the SMARTRA.
c. When the key is inserted in the ignition and turned to the ON position, the antenna coil sends power to the
transponder in the ignition key. The transponder then sends a coded signal back through the SMARTRA unit to
the PCM(ECM).
d. If the proper key has been used, the PCM(ECM) will energize the fuel supply system. The immobilizer indicator
light in the cluster will simultaneously come on for more than five seconds, indicating that the SMARTRA unit
has recognized the code sent by the transponder.
e. If the wrong key has been used and the code was not received or recognized by the PCM(ECM) the indicator
light will continue blinking for about five seconds until the ignition switch is turned OFF.
f. If it is necessary to rewrite the PCM(ECM) to learn a new key, the dealer needs the customer's vehicle, all its
keys and the Scan tool (pro) equipped with an immobilizer program card. Any key that is not learned during
rewriting will no longer start the engine.
g. The immobilizer system can store up to four key codes.
h. If the customer has lost his key, and cannot start the engine, contact motor service station.
COMPONENTS OPERATIONS
PCM (Power Train Control Module)
1. The PCM(ECM) carries out a check of the ignition key using a special encryption algorithm, which is programmed
into the transponder as well as the PCM(ECM) simultaneously. Only if the results are equal, the engine can be
started. The data of all transponders, which are valid for the vehicle, are stored in the PCM(ECM).

2007 > 2.7L V6 GASOLINE >
DIAGNOSIS OF IMMOBILIZER FAULTS
a.Communication between the PCM(ECM) and the SMARTRA.
b. Function of the SMARTRA and the transponder.
c. Data (stored in the PCM(ECM) related to the immobilizer function.
The following table shows the assignment of immobilizer related faults to each type:
Immobilizer Related Faults Fault typesDiagnostic codes
PCM(ECM) fault a.Non- Immobilizer- EMS connected to an Immobilizer P1610
Transponder key fault a.
Transponder not in password mode
b. Transponder transport data has been changed. P1674
(Transponder status error)
Transponder key fault a.Transponder programming error P1675
(Transponder programming error)
SMARTRA fault a.Invalid message from SMARTRA to PCM(ECM) P1676
(SMARTRA message error)
SMARTRA fault a.
No response from SMARTRA
b. Antenna coil error
c. Communication line error (Open/Short etc.)
d. Invalid message from SMARTRA to PCM(ECM) P1690
(SMARTRA no response)
Antenna coil fault a.Antenna coil open/short circuit P1691
(Antenna coil error)
Immobilizer indicator lamp
fault a.
Immobilizer indicator lamp error (Cluster) P1692
(Immobilizer lamp error)
Transponder key fault a.
Corrupted data from transponder
b. More than one transponder in the magnetic field
(Antenna coil)
c. No transponder (Key without transponder) in the
magnetic field (Antenna coil) P1693
(Transponder no response error/invalid response)
PCM(ECM) fault a.
Request from PCM(ECM) is invalid
(Protocol layer violation- Invalid request, check sum
error etc.) P1694
(PCM(ECM) message error)
PCM(ECM) internal
permanent memory
(EEPROM) fault a.
PCM(ECM) internal permanent memory (EEPROM)
fault
b. Invalid write operation to permanent memory
(EEPROM) P1695
(PCM(ECM) memory error)
Invalid key fault a.
Virgin transponder at PCM(ECM) status "Learnt"Learnt
(Invalid) Transponder at PCM(ECM) status
"Learnt"(Authentication fail) P1696
(Authentication fail)
Hi - Scan fault a.Hi - Scan message error P1697
Locked by timer a.
Exceeding the maximum limit of Twice IGN ON ( ⊇ 32
times) P1699
(Twice IG ON over trial)
IMMOBILIZER (SMARTRA) DTC LIST No. Fault code Monitor strategy description GasolineDiesel
1 P1674 Transponder status error O-
2 P1675 Transponder programming error OO

3P1676 SMARTRA message error OO
4 P1690 SMARTRA no response OO
5 P1691 Antenna coil error OO
6 P1692 Immobilizer lamp error OO
7 P1693 Transponder no response error / Invalid response OO
8 P1610 Non- Immobilizer- EMS connected to an immobilizer -O
9 P1694 EMS message error O-
10 P1695 EMS memory error O-
11 P1696 Authentication fail O-
12 P1697 HI- SCAN message error O-
13 P1699 Twice overtrial O-

2007 > 2.7L V6 GASOLINE >
TEACHING PROCEDURES
1.Key Teaching Procedure
Key teaching must be done after replacing an inoperative PCM(ECM) or when providing additional keys to the
vehicle owner.
The procedure starts with an PCM(ECM) request for vehicle specific data (PIN code: 6digits) from the tester. The
"virgin" PCM(ECM) stores the vehicle specific data and the key teaching can be started. The "learnt" PCM(ECM)
compares the vehicle specific data from the tester with the stored data. If the data are correct, the teaching can
proceed.
If incorrect vehicle specific data have been sent to the PCM(ECM) three times, the PCM(ECM) will reject the
request of key teaching for one hour. This time cannot be reduced by disconnecting the battery or any other
manipulation. After reconnecting the battery, the timer starts again for one hour.
The key teaching is done by ignition on with the key and additional tester commands. The PCM(ECM) stores the
relevant data in the EEPROM and in the transponder. Then the PCM(ECM) runs the authentication required for
confirmation of the teaching process. The successful programming is then confirmed by a message to the tester.
If the key is already known to the PCM(ECM) from a previous teaching, the authentication will be accepted and the
EEPROM data are updated. There is no changed transponder content (this is impossible for a learnt transponder).
The attempt to repeatedly teach a key, which has been taught already during the same teaching cycle, is
recognized by the PCM(ECM). This rejects the key and a message is sent to the tester.
The PCM(ECM) rejects invalid keys, which are presented for teaching. A message is sent to the tester. The key
can be invalid due to faults in the transponder or other reasons, which result from unsuccessful programming of
data. If the PCM(ECM) detects different authenticators of a transponder and an PCM(ECM), the key is considered
to be invalid.
The maximum number of taught keys is 4
If an error occurs during the Immobilizer Service Menu, the PCM(ECM) status remains unchanged and a specific
fault code is stored.
If the PCM(ECM) status and the key status do not match for teaching of keys, the tester procedure will be stopped
and a specific fault code will be stored at PCM(ECM).