Test

Diagnostic Specification
BSRF_0000003273_00_5_0
PSA
Editor: Maxime PIERRE

Version: 5.0 as of 2018-09-05, completed
Template: CANdelaPSATemplate_ODX_Reference 8.0
Audience: Development, Manufacturing, Service, Supplier, After-Market
Generated by Vector CANdelaStudio, Reportgenerator 8.5.2100, 2018-09-27

Authors:
Name Shortcut Company, Division Contact Info

Arustei Sergiu E520727 Alten
Constantin-Catalin E472710 ALTEN - PSA
IRIMITA
Maxime PIERRE MP PSA (ALTEN)
Revision History:
Version Author Date, Tool Status Modification Reason

1.0 MP 2017-05-30 draft Created by copy of TO
10:33:50+02:00 BSRF_UDS2_0000003271_0
CANdelaStudio 8.5 0_1_0.
SP 2 Admin Do not contains functionnal
parameters, adaptation of
CANdelaPSATemplate_ODX_
Reference_0000002901_02_5
_0.cddt
2.0 E47271 2018-03-16 completed Template updated to

0 10:50:18+02:00 CANdelaPSATemplate_ODX_
CANdelaStudio 8.5 Reference 7.0
SP 2 Standard Type organ MSG updated to
BSRF_UDS2 V2.0
RC:
_RID 0x0600 and 0x0601
added
RDBI/WDBI :
_DIDs 0x0101, 0x0102,
0x0103, 0x0104, 0x0105,
0x2103, 0x2105 added
SA :
_security sessions 0x05, 0x06,
0x07 and 0x08 added
3.0 E47271 2018-06-18 completed Type Organ updated to BSRF
0 18:14:39+03:00 V3.0 (the first version taked in
CANdelaStudio 8.5 account by the supplier)
SP 2 Standard
RC :
_RID 0x0600 : parameters
DIAG_REQ_TEST_ECALL_L
ED, CANCEL_ACALL,
READ_ECALL_BUTTON_FLA
G and
RESET_BBUTTON_FLAG
added; parameter
CANCEL_BCALL deleted
_RID 0x0602 : parameter
VAR_CODING_INSTAL added
RDBI :
_DID 0xD401 : parameters
TRACABILITY_UIN,
TRACABILITY_IMEI,
2
TRACABILITY_IMSI,
TRACABILITY_ICCID_P1,
TRACABILITY_ICCID_P2 and
TRACABILITY_ICCID_P3
added
_DID 0xD402 : parameter
NUM_UNEXPECT_REBOOT
added
RDBI / WDBI:
_DID 0x0101 : parameter
SWM_SERVICE_ACT
updated to version 2 ;
parameter
LC_TIMEOUT_BEF_SLEEP
added
_DID 0x0103 deleted (all the
parameters inside were
deleted)
_DID 0x0104 : parameters
BSRF_BRAND_CFG,
CONNECT_WIFI_AP_DEV
and
CONNECT_TELECOM_SPY
added
BRO_RDS_ACT,
BRO_FM_FOLLOW_ME,
BRO_TA_ACT,
BRO_FM_THRESHOLD,
BRO_AM_THRESHOLD,
BRO_DAB_THRESHOLD and
BRO_WSH_CONF updated to
version 2; parameters
BRO_DAB_FOLLOWING and
BRO_FM2_ACT_PASSIVE
added
ECALL_MAN_CAN_ACT,
ECALL_REG_ATTEMPTS,
ECALL_CANCEL_TIME,
ECALL_CCFT, ECALL_CCFT,
ECALL_TEST_NUMBER,
ECALL_NUMBER,
ECALL_FEEDBACK_TEST_N
UMBER,
ECALL_MANUAL_ACT,
ECALL_SMS_FALLBACK_N,
ECALL_AUTO_DIAL_ATT,
ECALL_DIAL_DURATION,
ECALL_MAN_DIAL_ATT ,
ECALL_P_TEST_REG_T,
ECALL_TEST_END_DIST,
XCALL_EELF_TRANSFER,
XCALL_AUTO_ANSWER_T,
AUTOMATIC_ECALL_ACTIV
E and
XCALL_AUTO_ANSWER_T
added
ACALL_MESS_ATTEMPT,
3
ACALL_BACK_TIME,
ACALL_DIAL_DURATION,
ACALL_MESS_TRAN_TIME,
ACALL_UNAV_REQ_TIME,
ACALL_REGISTRAT_TIME,
ACALL_CANCELLATION_TIM
E and ACALL_NUMBER
added
_DID 0x2100 : parameter
F6Q_MDS_XCALL_BCALL_A
CT_000 deleted; parameters
F7Z_MDS_ECALL_TYPE_EM
ERG_PR_000 and
F85_MDS_ACALL_TYPE_PR
_000 added
4.0 E52072 2018-07-23 completed Type Organ updated to BSRF
7 13:51:10+03:00 V4.0
CANdelaStudio 8.5
SP 2 Standard RDBI / WDBI:
MDS_ECALL_TYPE_EMERG
_PO and
MDS_ACALL_TYPE_PO
added
modified name
of parameter
MDS_BRO_FM_BAND_PO to
MDS_BRO_FM_BAND_ACT_
PO
updated bite
positions after the type organ
V4.0
5.0 E47271 2018-09-05 completed Type Organ updated to

0 10:18:52+03:00 BSRF_UDS2 V5.0
CANdelaStudio 8.5
SP 2 Standard RC :
_RID 0600 : parameters
READ_ECALL_BUTTON_FLA
G, RESET_BBUTTON_FLAG,
PLAY_PROMPT and
DIAG_REQ_TEST_ECALL_L
ED deleted; parameters
TEST_ECALL_LED,
RESET_ECALL_PUSH_FLAG
,
RESET_ACALL_PUSH_FLAG
and
TEST_DYSFUNCTION_LED
added
_RID 0602 : parameters
VAR_CODING_INSTAL
deleted
_RID 0701 added
RDBI :
_DID D402 : correction of the
name and qualifier of the DID
_DID D403 : parameters
ACALL_PUSH_FLAG and
4
ECALL_PUSH_FLAG added
_DIDs F013, F014 and F015
added
RDBI / WDBI :
_DID 0101 : default values
added for all the parameters
_DID 0102 : parameters
GNSS_TICKS_REVOL,
GNSS_VHL_WIDTH and
GNSS_WHEEL_DIAMETER :
default values added
_DID 0103 : parameter
BSRF_BRAND_CFG : default
value added
_DID 0104 : parameter
CONNECT_TELECOM_SPY
deleted
ECALL_MESSAGE_URL,
ECALL_MESS_TRANS_TIM,
ECALL_TPS_REG_TIME,
ECALL_UNAV_REQ_TIME,
ECALL_TEST_NUM_2,
PUBLIC_TPS_ECALL_NUM,
PRIVA_TPS_ECALL_NUM,
ECALL_LOG_TRANS_CONF
and ECALL_MESS_ATTEMPT
added; parameters
ECALL_SMS_FALLBACK_N,
ECALL_FEEDBACK_TEST_N
UMBER, ECALL_NUMBER,
ECALL_TEST_NUMBER,
ECALL_TRANS_INTER,
ECALL_TRANS_ATTEMPTS,
XCALL_EELF_TRANSFER
and
AUTOMATIC_ECALL_ACTIV
E: default values added
_DID 0107: parameter
ACALL_MESSAGE_URL
added; parameters
ACALL_MESS_ATTEMPT,
ACALL_BACK_TIME,
ACALL_DIAL_DURATION,
ACALL_MESS_TRAN_TIME,
ACALL_UNAV_REQ_TIME,
ACALL_REGISTRAT_TIME,
ACALL_CANCELLATION_TIM
E and ACALL_NUMBER :
default values added
_DID 0108 : paramter
SMS_OUT_ENCODING
added
LINK_STATUS_DELAY,
ECU_TRANSCEIVER_CONF,
ETHERNET_BR_NODE_ALO
NE, INCREMENT_OF_CLINK
and UNREACHEABLE_LINK
added
5
_DID 2101 : all the parameters
were coded as ENUM
according with the HNET
information and default values
added
_DID F190 added
WDBI :
_DID 2101 : NRC 78 deleted
SA :
_Security sessions 09 and 0A
added
Table of Contents
1 Document Conventions.............................................................................................................11
2 Abstract......................................................................................................................................12
3 Overview....................................................................................................................................13
4 Communication Parameter.......................................................................................................14
5 Diagnostic Content....................................................................................................................16
5.1 Base Variant (BaseVariant)..................................................................................................16
5.1.1 Sessions (Sessions).............................................................................................................................16
5.1.1.1 ProgrammingSession (PRGS) ($02) (ProgrammingSession_PRGS).....................................16
5.1.1.2 defaultSession (DS) ($01) (defaultSession_DS)...................................................................16
5.1.1.3 extendedDiagnosticSession (EXTDS) ($03) (extendedDiagnosticSession_EXTDS).....16
5.1.1.4 distantVehicleAccessSession (DVAS) ($50) (distantVehicleAccessSession_DVAS)...17
5.1.2 Security Access (SecurityAccess)..................................................................................................17
5.1.2.1 Programming Request Seed (PRSD) ($01) (Programming_Request_Seed_PRSD)............17
5.1.2.2 Programming Request Seed (PRSD) Key ($02)
(Programming_Request_Seed_PRSD_Key)......................................................................................18
5.1.2.3 Variant Coding Request Seed (VCRSD) ($03) (Variant_Coding_Request_Seed_VCRSD)
..........................................................................................................................................................................19
5.1.2.4 Variant Coding Request Seed (VCRSD) Key ($04)
(Variant_Coding_Request_Seed_VCRSD_Key)............................................................................19
5.1.2.5 Unlocking Control Request Seed (UCRSD) ($05)
(Unlocking_Control_Request_Seed_UCRSD)...............................................................................20
5.1.2.6 Unlocking Control Request Seed (UCRSD) Key ($06)
(Unlocking_Control_Request_Seed_UCRSD_Key).....................................................................21
5.1.2.7 Unlocking Engineering Control Request Seed (UECRSD) ($07)
(Unlocking_Engineering_Control_Request_Seed_UECRSD)................................................21
5.1.2.8 Unlocking Engineering Control Request Seed (UECRSD) Key ($08)
(Unlocking_Engineering_Control_Request_Seed_UECRSD_Key)......................................22
5.1.2.9 Unlocking eSA Control Request Seed (eSACRSD) ($09)
(Unlocking_eSA_Control_Request_Seed_eSACRSD)................................................................23
6
5.1.2.10 Unlocking eSA Control Request Seed (eSACRSD) Key ($0A)
(Unlocking_eSA_Control_Request_Seed_eSACRSD_Key).......................................................24
5.1.3 Ecu Reset (EcuReset)..........................................................................................................................24
5.1.3.1 hardReset (HR) ($01) (hardReset_HR)......................................................................................25
5.1.3.2 keyOffOnReset (KOFFONR) ($02) (keyOffOnReset_KOFFONR)..........................................25
5.1.3.3 softReset (SR) ($03) (softReset_SR)........................................................................................25
5.1.4 Identification Parameters (Identification_Parameters)......................................................25
5.1.4.1 Power Latch Flag State (PLFS) ($0100) (Power_Latch_Flag_State_PLFS).....................26
5.1.4.2 Size Of ECU Serial Number Data Identifier (SOECUSNDID) ($0D01)
(Size_Of_ECU_Serial_Number_Data_Identifier_SOECUSNDID)........................................26
5.1.4.3 Variant coding possibilities ($2100) (Variant_coding_possibilities).........................27
5.1.4.4 Variant coding programmed ($2101) (Variant_coding_programmed)...............................28
5.1.4.5 Size For Multi DID (SFMDID) ($C002) (Size_For_Multi_DID_SFMDID).........................30
5.1.4.6 eCALL_RegulationXSofWareIdentificationNumber (eCALL_RxSWIN) ($F013)
(eCALL_RegulationXSofWareIdentificationNumber_eCALL_RxSWIN)............................31
5.1.4.7 OTA_RegulationXSofWareIdentificationNumber (OTA_RxSWIN) ($F014)
(OTA_RegulationXSofWareIdentificationNumber_OTA_RxSWIN)......................................31
5.1.4.8 MASCOM Key Status (DMKEYS) ($F015) (MASCOM_Key_Status_DMKEYS)......................32
5.1.4.9 Authentification Zone (ZA) ($F080) (Authentification_Zone_ZA)..................................32
5.1.4.10 Identification Zone for Downloadable ECU (ZI) ($F0FE)
(Identification_Zone_for_Downloadable_ECU_ZI)..............................................................34
5.1.4.11 Boot Software Identification Data Identifier (BSIDID) ($F180)
(Boot_Software_Identification_Data_Identifier_BSIDID)...........................................35
5.1.4.12 Active Diagnostic Session Data Identifier (ADSDID) ($F186)
(Active_Diagnostic_Session_Data_Identifier_ADSDID)..................................................35
5.1.4.13 ECU Manufacturing Date Data Identifier (ECUMDDID) ($F18B)
(ECU_Manufacturing_Date_Data_Identifier_ECUMDDID)....................................................36
5.1.4.14 ECU Serial Number Data Identifier (ECUSNDID) ($F18C)
(ECU_Serial_Number_Data_Identifier_ECUSNDID)................................................................37
5.1.4.15 VIN Data Identifier (VINDID) ($F190) (VIN_Data_Identifier_VINDID)......................37
5.1.5 Engineering Datas (Engineering_Datas).....................................................................................38
5.1.5.1 CAL_Fct_LIFECYCLE ($0101) (CAL_Fct_LIFECYCLE).........................................................38
5.1.5.2 CAL_Fct_POSITIONING ($0102) (CAL_Fct_POSITIONING)................................................41
5.1.5.3 CAL_Fct_CONNECT ($0104) (CAL_Fct_CONNECT)................................................................42
5.1.5.4 CAL_Fct_BROADCAST ($0105) (CAL_Fct_BROADCAST)......................................................43
5.1.5.5 CAL_Fct_ECALL_TYPE_EMERG_PR ($0106) (CAL_Fct_ECALL_TYPE_EMERG_PR)......44
5.1.5.6 CAL_Fct_ACALL_TYPE_PR ($0107) (CAL_Fct_ACALL_TYPE_PR)....................................46
5.1.5.7 CAL_Fct_CONNECTED_SERVICES ($0108) (CAL_Fct_CONNECTED_SERVICES)............48
5.1.5.8 CAL_Fct_ETHERNET ($0109) (CAL_Fct_ETHERNET)............................................................48
5.1.5.9 DATA_Fct_GNSS ($D400) (DATA_Fct_GNSS)..........................................................................50
5.1.5.10 DATA_Fct_TRACABILITY ($D401) (DATA_Fct_TRACABILITY).......................................50
5.1.5.11 DATA_Fct_EM ($D402) (DATA_Fct_EM)..................................................................................51
5.1.5.12 DATA_Fct_xCall ($D403) (DATA_Fct_xCall)........................................................................51
7
5.1.6 Fault Memory (FaultMemory)...........................................................................................................52
5.1.7 Upload/Download (DataTransfer)..................................................................................................53
5.1.8 Routine Control (Routine_Control)..............................................................................................55
5.1.8.1 Powerlatch Information Positioning (PIP) ($0400)
(Powerlatch_Information_Positioning_PIP)..........................................................................55
5.1.8.2 XCALL_DRIVING ($0600) (XCALL_DRIVING).........................................................................56
5.1.8.3 GNSS_DRIVING ($0601) (GNSS_DRIVING)..............................................................................58
5.1.8.4 DIAG_INSTALL ($0602) (DIAG_INSTALL)...............................................................................59
5.1.8.5 MASCOM Test (MTEST) ($0701) (MASCOM_Test_MTEST).....................................................60
5.1.8.6 erase Memory (EM) ($FF00) (erase_Memory_EM)...................................................................61
5.1.8.7 check Memory (CM) ($FF04) (check_Memory_CM)..................................................................62
5.1.9 Tester Present (TesterPresent)......................................................................................................63
5.2 BSRF (BSRF)..............................................................................................................................63
5.2.1 Sessions (Sessions).............................................................................................................................63
5.2.1.1 ProgrammingSession (PRGS) ($02) (ProgrammingSession_PRGS).....................................63
5.2.1.2 defaultSession (DS) ($01) (defaultSession_DS)...................................................................64
5.2.1.3 extendedDiagnosticSession (EXTDS) ($03) (extendedDiagnosticSession_EXTDS).....64
5.2.1.4 distantVehicleAccessSession (DVAS) ($50) (distantVehicleAccessSession_DVAS)...64
5.2.2 Security Access (SecurityAccess)..................................................................................................65
5.2.2.1 Programming Request Seed (PRSD) ($01) (Programming_Request_Seed_PRSD)............65
(Programming_Request_Seed_PRSD_Key)......................................................................................65
5.2.2.3 Variant Coding Request Seed (VCRSD) ($03) (Variant_Coding_Request_Seed_VCRSD)
..........................................................................................................................................................................66
(Variant_Coding_Request_Seed_VCRSD_Key)............................................................................67
(Unlocking_Control_Request_Seed_UCRSD)...............................................................................68
(Unlocking_Control_Request_Seed_UCRSD_Key).....................................................................68
(Unlocking_Engineering_Control_Request_Seed_UECRSD)................................................69
(Unlocking_Engineering_Control_Request_Seed_UECRSD_Key)......................................70
(Unlocking_eSA_Control_Request_Seed_eSACRSD)................................................................71
(Unlocking_eSA_Control_Request_Seed_eSACRSD_Key).......................................................71
5.2.3 Ecu Reset (EcuReset)..........................................................................................................................72
5.2.3.1 hardReset (HR) ($01) (hardReset_HR)......................................................................................72
5.2.3.2 keyOffOnReset (KOFFONR) ($02) (keyOffOnReset_KOFFONR)..........................................73
5.2.3.3 softReset (SR) ($03) (softReset_SR)........................................................................................73
5.2.4 Identification Parameters (Identification_Parameters)......................................................73
5.2.4.1 Power Latch Flag State (PLFS) ($0100) (Power_Latch_Flag_State_PLFS).....................73
8
(Size_Of_ECU_Serial_Number_Data_Identifier_SOECUSNDID)........................................74
5.2.4.3 Variant coding possibilities ($2100) (Variant_coding_possibilities).........................74
5.2.4.4 Variant coding programmed ($2101) (Variant_coding_programmed)...............................76
5.2.4.5 Size For Multi DID (SFMDID) ($C002) (Size_For_Multi_DID_SFMDID).........................78
(eCALL_RegulationXSofWareIdentificationNumber_eCALL_RxSWIN)............................78
(OTA_RegulationXSofWareIdentificationNumber_OTA_RxSWIN)......................................79
5.2.4.8 MASCOM Key Status (DMKEYS) ($F015) (MASCOM_Key_Status_DMKEYS)......................79
5.2.4.9 Authentification Zone (ZA) ($F080) (Authentification_Zone_ZA)..................................80
(Identification_Zone_for_Downloadable_ECU_ZI)..............................................................81
(Boot_Software_Identification_Data_Identifier_BSIDID)...........................................83
(Active_Diagnostic_Session_Data_Identifier_ADSDID)..................................................83
(ECU_Manufacturing_Date_Data_Identifier_ECUMDDID)....................................................84
(ECU_Serial_Number_Data_Identifier_ECUSNDID)................................................................84
5.2.4.15 VIN Data Identifier (VINDID) ($F190) (VIN_Data_Identifier_VINDID)......................85
5.2.5 Engineering Datas (Engineering_Datas).....................................................................................85
5.2.5.1 CAL_Fct_LIFECYCLE ($0101) (CAL_Fct_LIFECYCLE).........................................................86
5.2.5.2 CAL_Fct_POSITIONING ($0102) (CAL_Fct_POSITIONING)................................................88
5.2.5.3 CAL_Fct_CONNECT ($0104) (CAL_Fct_CONNECT)................................................................89
5.2.5.4 CAL_Fct_BROADCAST ($0105) (CAL_Fct_BROADCAST)......................................................90
5.2.5.5 CAL_Fct_ECALL_TYPE_EMERG_PR ($0106) (CAL_Fct_ECALL_TYPE_EMERG_PR)......92
5.2.5.6 CAL_Fct_ACALL_TYPE_PR ($0107) (CAL_Fct_ACALL_TYPE_PR)....................................94
5.2.5.7 CAL_Fct_CONNECTED_SERVICES ($0108) (CAL_Fct_CONNECTED_SERVICES)............95
5.2.5.8 CAL_Fct_ETHERNET ($0109) (CAL_Fct_ETHERNET)............................................................96
5.2.5.9 DATA_Fct_GNSS ($D400) (DATA_Fct_GNSS)..........................................................................97
5.2.5.10 DATA_Fct_TRACABILITY ($D401) (DATA_Fct_TRACABILITY).......................................98
5.2.5.11 DATA_Fct_EM ($D402) (DATA_Fct_EM)..................................................................................98
5.2.5.12 DATA_Fct_xCall ($D403) (DATA_Fct_xCall)........................................................................99
5.2.6 Fault Memory (FaultMemory)...........................................................................................................99
5.2.7 Upload/Download (DataTransfer)................................................................................................101
5.2.8 Routine Control (Routine_Control)............................................................................................103
(Powerlatch_Information_Positioning_PIP)........................................................................103
5.2.8.2 XCALL_DRIVING ($0600) (XCALL_DRIVING).......................................................................104
5.2.8.3 GNSS_DRIVING ($0601) (GNSS_DRIVING)............................................................................106
5.2.8.4 DIAG_INSTALL ($0602) (DIAG_INSTALL).............................................................................107
9
5.2.8.5 MASCOM Test (MTEST) ($0701) (MASCOM_Test_MTEST)...................................................108
5.2.8.6 erase Memory (EM) ($FF00) (erase_Memory_EM).................................................................109
5.2.8.7 check Memory (CM) ($FF04) (check_Memory_CM)................................................................110
5.2.9 Tester Present (TesterPresent).....................................................................................................111
6 State Dependency of Service Execution.................................................................................112

6.1 Base Variant.................................................................................................................................112
6.1.1 Session.......................................................................................................................................................112
6.1.2 SecurityAccess..........................................................................................................................................115
6.2 BSRF.............................................................................................................................................119
6.2.1 Session.......................................................................................................................................................119
6.2.2 SecurityAccess.........................................................................................................................................122
7 Data Types...............................................................................................................................126
7.1 Multiplexer...................................................................................................................................143
7.1.1 Routine_Table_FF04_Routine_Response (Routine_Table_FF04_Routine_Response). .143
7.1.2 Table of DIDs of context (TABLE_DID_CONTEXT)..........................................................................143
7.1.3 Table_0701_RoutinePosRep (Table_0701_RoutinePosRep)..................................................147
8 Protocol Services.....................................................................................................................148
8.1 Overview.......................................................................................................................................148
8.2 ($10) DiagnosticSessionControl (DSC) (DSC).........................................................................148
8.3 ($11) ECUReset (ER) (ER).......................................................................................................149
8.4 ($14) ClearDiagnosticInformation (CDTCI) (CDTCI)..........................................................149
8.5 ($19) ReadDtcInformation - Report DTC by status mask (RDTCBSM) (RDI_RDTCBSM)150
8.6 ($19) ReadDtcInformation - Report DTC snapshot record by DTC number
(RDI_RDTCSRBDTCN).....................................................................................................................151
8.7 ($19) ReadDtcInformation - Report number of DTC by status mask (RNODTCBSM)
(RDI_RNODTCBSM).........................................................................................................................151
8.8 ($22) ReadDataByIdentifier (RDBI) (RDBI)..........................................................................152
8.9 ($27) SecurityAccess (SA) (SA_RS).........................................................................................153
8.10 ($2E) WriteDataByIdentifier (WDBI) (WDBI).....................................................................153
8.11 ($31) RoutineControl - Request routine results (RC_RRR)..................................................154
8.12 ($31) RoutineControl - Start routine (RC_STR)...................................................................155
8.13 ($34) Request Download (_34_Request_Download).....................................................155
8.14 ($36) Transfer Data (_36_Transfer_Data).....................................................................156
8.15 ($37) Request Transfer Exit (_37_Request_Transfer_Exit)....................................156
8.16 ($3E) TesterPresent (TP) (TP)...............................................................................................157
9 Negative Responses.................................................................................................................158
10 Service Index.........................................................................................................................163
10
11 Index......................................................................................................................................165
11
2 Document Conventions
- only activated Diagnostic Instances are exported;
- only Protocol Services and Data Types that are used in activated Diagnostic Instances are exported;
- Audience settings of Diagnostic Instances are not exported (but the Audience for which the export has
been filtered is indicated at the document's title page);
- attributes of individual objects and State Transitions of Services are exported in an overview table;
- service addressing is only indicated if it differs from the addressing of the Protocol Service;
- the table of Negative Response Codes (NRC) in Diagnostic Instances is only exported if it differs from
the NRCs listed in the negative response of the protocol service;
- export of Job Containers and Variant Coding Keys depends on the manufacturer;
- fd = data fixed in the template ("fixed data").
The chapter "Diagnostic Content" only describes data transmitted. It references each used Protocol
Service. All used Protocol Services are listed in the chapter "Protocol Services".
The count of data bytes in the chapter "Diagnostic Content" starts at zero (0). Within a data byte, the
count of bits also starts at zero (0) (LSB - least significant bit) independent from the order of data bit
transportation.
The count of data bytes in the chapter "Protocol Services" starts - corresponding with the standardized
specifications - at one (#1).
3
12
4 Abstract
This new PSA template "CANdelaPSATemplate_ODX_Reference" 0000002901_01 v5.0 is based on the norms:
- ISO 14229-1:2013 (UDS services and parameters),
- SAE J1979: AUG2014 (OBD services),
- SAE J1979DA : JUN2014 (OBD parameters).
13
6 Overview
ECU
BSRF_0000003273_00_5_0 (BSRF_0000003273_00_5_0)
The Template covers the following aspects of Diagnostic functionality:
• The requirements for the basic PSA diagnostic services to be implemented are specified in the
"CANdelaPSATemplate_ODX_Reference is based". The Template contains the basic functionalities defined for PSA servers.
• The services contained in the mandatory diagnostic instances have to be supported by every server.
• With the remaining services the supplier may choose whether his server supports these Services or not.
• A supplier may also add his own Diagnostic Instances to add functionality specific for his ECU.
WARNING: With this template, don't use old PDX files (from old MEDIALEC database) designed for old servers developments.
Maximum Number of IDs

Specification of the maximum number of identifiers which can be sent by a request. This property has an
effect on those protocol services only, which may combine several identifier in one request.
Maximum number of IDs that may be combined: 5
Variants
Base Variant (locked) (BaseVariant)
Overview extended variants:

Name Pattern
BSRF (BSRF)
7
8 Communication Parameter
UDS_CAN_HS_CPS:
Supported services: Sessions/Control, Security Access/SecurityAccess, Ecu Reset/ECUReset,
Identification Parameters/Read, Identification Parameters/Write, Engineering Datas/Read, Engineering
Datas/Write, Fault Memory/Clear, Fault Memory/Read (Number of DTC By StatusMask), Fault
Memory/Read (by Mask), Fault Memory/Read (DTC Snapshot Data by DTC Number), Fault
Memory/Read (Report Extended Data Record By DTC Number), Fault Memory/Read Supported DTC,
Fault Memory/Report DTC Fault Detection Counter, Fault Memory/reportDTCWithPermanentStatus,
Upload/Download/Request Download, Upload/Download/Request Upload, Upload/Download/Transfer
Data, Upload/Download/Request Transfer Exit, Routine Control/Start, Routine Control/Stop, Routine
Control/Results, Routine Dynamic Results/Start, Routine Dynamic Results/Results, Routine Dynamic
Results/Stop, IO Control by DID/Return Control, IO Control by DID/Reset, IO Control by DID/Freeze, IO
Control by DID/Set, Tester Present/Send, Link Control/Link Control, Control DTC
Setting/ControlDTCSetting, Communication Control/Control, Onboard Monitoring Test Results for Specific
Monitored Systems ($06)/Request OnBoard Monitoring Test Results - Read Data
Name Category Value Description

Bus Type Communication HSCAN Type of transport media
(BusType)
Functional Request Communication 0x7FF The request PSA CAN identifier for functional
CAN-ID requests.
(ReqCanIdFunc)
Request CAN-ID Communication 0x77C The request CAN identifier for physical requests.
(ReqCanId) The hex value not only describes the identifier
but also the priority of the message. The higher
the number, the lower the priority.
Response CAN-ID Communication 0x67C The response CAN identifier for physical
(ResCanId) responses.The response for functional requests
is sent via the physical path.
Transport Protocol Communication ISO15765 Type of used Transport Protocol (e.g. ISO15765)
14
Type
(TransportProto
colType)
Baudrate Communication 500000 Bus Speed of the used transport media.
(Baudrate) Caution, the Bus Speed has to be set identical in
all ECUs connected to one subnet.
Addressing Scheme Communication Normal Addressing Scheme used for physical requests
(AddrScheme) and responses.
CAN-ID Type Communication 11-Bit CAN-ID Type used for physical requests and
(CanIdType) responses
FillerByteHandling Communication false Enables use of fill bytes; if "true", fill bytes are
(FillerByteHand used, otherwise DLC may be smaller than 8.
ling)
CANFrameFillerByt Communication 0x00 Fill byte used for filling CAN frames to eight byte
e length.
(CANFrameFiller
Byte)
Max Length of TP Communication 4095
Message
(MaxLengthTpMes
sage)
P2Client Timing 250 Timeout for the client to wait after the successful
(P2Client) transmission of a request message for the start
of incoming response messages. In UDS this is
the timeout for the default session.
P2Server Timing 200 Performance requirement for the server to start
(P2Server) with the response message after the reception
of a request message. In UDS this is the timeout
for the default session.The tester will also
require the P2Server timeout, since in UDS
service "DiagnosticSessionControl"returns the
P2Server and P2*Server timeouts – the tester
has to calculate the offset manually and has to
add it to the returned P2Server and P2*Server
timeouts.
P2*Client Timing 250 Enhanced timeout for the client to wait after the
(P2ExClient) reception of a negative response message with
response code 78 hex for the start of incoming
response messages. In UDS this is the timeout
for the default session.
P2*Server Timing 200 Performance requirement for the server to start
(P2ExServer) with the response message after the
transmission of a negative response message
with response code 78 hex (enhanced response
timing). In UDS this is the timeout for the default
session.
S3Client Timing 4000 Time between functionally addressed Tester
(S3Client) Present request messages transmitted by the
client to keep a diagnostic session other than
the defaultSession active in multiple servers
(functional communication) or maximum time
between physically transmitted request
messages to a single server (physical
communication).
S3Server Timing 5000 Time for the server to keep a diagnostic session
(S3Server) other than the defaultSession active while not
receiving any diagnostic request message
P3ClientPhys Timing 100 Minimum time for the client to wait after the
15
(P3ClientPhys) successful transmission of a physically
addressed request message (indicated via
N_USData.con) with no response required
before it can transmit the next physically
addressed request message.
Minimum value = P2Server
STmin (StMin) Timing 0 (Separation Time) defines the minimum time gap
between consecutive frames.Values from 0x00
to 0x7F (0 – 127) are absolute
milliseconds.Values from 0xF1 to 0xF9 are even
100 micro seconds.Every other value range is
reserved and should not be used.
Blocksize Communication 0 The Blocksize parameter indicates, how many
(Blocksize) consecutive frames shall be sent in a
transmission before a flow control frame is sent.
The number 0 tells the sender, that no more flow
controls should disrupt the sending of the
remaining flow controls
Timeout As Timing 1000 Time for transmission of frame, sender side
(TimeoutAs)
Timeout Ar Timing 1000 Time for transmission of frame, receiver side
(TimeoutAr)
Timeout Bs Timing 1000 Time until reception of next flow control
(TimeoutBs)
Time Br (TimeBr) Timing 200 Time for next transmission of flow control
Time Cs (TimeCs) Timing 200 Time until next transmission of consecutive
frame
Timeout Cr Timing 1000 Time until reception of next consecutive frame
(TimeoutCr)
9
10 Diagnostic Content
10.1 Base Variant (BaseVariant)
No changes documented.
10.1.1 Sessions (Sessions)

This Diagnostic Class is describing the use case of the Session Management.
- This service permit to change active session in the server.
- See requirements §5.1.1.5, §5.1.1.6 and §5.1.2.1 in DC_TI_702_TS "UDS Generic Mechanisms".
10.1.1.1 ProgrammingSession (PRGS) ($02) (ProgrammingSession_PRGS)

Requirements associated to this session (PRGS) are described in the DC_TI_705 "TS Reprogrammation ECU".
This optional session (PRGS) enables all services required to flash the memory of a server by the repairman (Aftersales workshop
or Factories).
Subfunction: DiagnosticSessionType ($02)

Service Protocol Service Request Pos.Resp.
Control (Control) ($10) DiagnosticSessionControl (DSC) (DSC), see 10 02 50 02 fd
page 154.
Control
Response code Error text Description
0x12 sub-functionNotSupported (SFNS) see page 164
0x13 incorrectMessageLengthOrInvalidFormat see page 164
16
(IMLOIF)
0x22 conditionsNotCorrect (CNC) see page 165
10.1.1.2 defaultSession (DS) ($01) (defaultSession_DS)

The mandatory defaultSession (DS) is the session by default of server and it does not need to maintain communication to keep the
session active.

page 154.
Control
(IMLOIF)
10.1.1.3 extendedDiagnosticSession (EXTDS) ($03) (extendedDiagnosticSession_EXTDS)

This mandatory session ( EXTDS ) authorizes or not , access to diagnostic services when the repairman is near the vehicle
(Aftersales workshop or Factories).

page 154.
Control
(IMLOIF)
10.1.1.4 distantVehicleAccessSession (DVAS) ($50)

(distantVehicleAccessSession_DVAS)
This mandatory session (DVAS), authorize or not, the access to the diagnostic services when the repairman is not in the presence
of the vehicle (Télédiag).

page 154.
Control
(IMLOIF)
10.1.2 Security Access (SecurityAccess)

This diagnostic class contains the services related to security access
17
10.1.2.1 Programming Request Seed (PRSD) ($01) (Programming_Request_Seed_PRSD)
PRSD: Seed request for programming
Subfunction: Type ($01)

SecurityAccess ($27) SecurityAccess (SA) (SA_RS), see page 159. 27 01 xx 67 01 zz
(SecurityAccess)
see (1)
(1) SecurityAccess
The purpose of this service is to provide a means to access data and/or diagnostic services, which have restricted
access for security, emissions, or safety reasons.
A typical example of the use of this service is as follows:
- client requests a “Seed”
- server sends a “Seed” (random seed)
- client sends the “Key” (appropriate for the Seed received)
- server responds that the “Key” was valid and that it will unlock itself
Requirements associated to this service are described in DC_TI_702_TS UDS Generic Mechanisms paragraph
5.1.2.3. and DC_TI_705_TS Reprogrammation ECU.
Key (xx)
no data assigned
Seed (zz)
Byte Bit Name Conversion
0 Programming Request Seed1 Hex 1 Byte
(Programming_Request_Seed1)
SecurityAccess
(IMLOIF)
0x24 requestSequenceError (RSS) see page 165
0x35 invalidkey (IK) see page 165
0x37 requiredTimeDelayNotExpired (RTDNE) see page 166
0x7E sub-functionNotSupportedInActiveSession see page 166
(SFNSIAS)
0x7F serviceNotSupportedInActiveSession see page 166
(SNSIAS)

(Programming_Request_Seed_PRSD_Key)
PRSD: Sending the key for programming

(SecurityAccess)
18
see (2)
(2) SecurityAccess
Key (xx)
0 Programming Request Seed Key1 Hex 1 Byte
(Programming_Request_Seed_Key1)
Seed (zz)
no data assigned
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.2.3 Variant Coding Request Seed (VCRSD) ($03)

(Variant_Coding_Request_Seed_VCRSD)
VCRSD: Seed request for variant coding (Télécodage).

(SecurityAccess)
Key (xx)
no data assigned
Seed (zz)
0 Variant Coding Request Seed1 Hex 1 Byte
19
(Variant_Coding_Request_Seed1)
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Variant_Coding_Request_Seed_VCRSD_Key)
VCRSD: Sending the key for variant coding (Télécodage).

(SecurityAccess)
Key (xx)
0 Variant Coding Request Seed Key1 Hex 1 Byte
(Variant_Coding_Request_Seed_Ke
y1)
y2)
y3)
y4)
Seed (zz)
no data assigned
SecurityAccess
(IMLOIF)
20
(SFNSIAS)
(SNSIAS)

(Unlocking_Control_Request_Seed_UCRSD)
(SecurityAccess)
Key (xx)
no data assigned
Seed (zz)
0 Unlocking Control Request Seed1 Hex 1 Byte
(Unlocking_Control_Request_Seed
1)
2)
3)
4)
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Unlocking_Control_Request_Seed_UCRSD_Key)
21
(SecurityAccess)
Key (xx)
0 Unlocking Control Request Seed Key1 Hex 1 Byte
_Key1)
_Key2)
_Key3)
_Key4)
Seed (zz)
no data assigned
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Unlocking_Engineering_Control_Request_Seed_UECRSD)
(SecurityAccess)
Key (xx)
no data assigned
Seed (zz)
0 Unlocking Engineering Control Request Hex 1 Byte
Seed1
(Unlocking_Engineering_Control_
Request_Seed1)
Seed2
Request_Seed2)
22
Seed3
Request_Seed3)
Seed4
Request_Seed4)
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Unlocking_Engineering_Control_Request_Seed_UECRSD_Key)
(SecurityAccess)
Key (xx)
Seed Key1
Request_Seed_Key1)
Seed Key2
Request_Seed_Key2)
Seed Key3
Request_Seed_Key3)
Seed Key4
Request_Seed_Key4)
Seed (zz)
no data assigned
SecurityAccess
23
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Unlocking_eSA_Control_Request_Seed_eSACRSD)
See 02013_18_00051 for more informations.

(SecurityAccess)
Key (xx)
no data assigned
Seed (zz)
0 Unlocking eSA Control Request Seed1 Hex 1 Byte
(Unlocking_eSA_Control_Request_
Seed1)
See 02013_18_00051
Seed2)
See 02013_18_00051
Seed3)
See 02013_18_00051
Seed4)
See 02013_18_00051
SecurityAccess
(IMLOIF)
(SFNSIAS)
24
(SNSIAS)

(Unlocking_eSA_Control_Request_Seed_eSACRSD_Key)
Subfunction: Type ($0A)

SecurityAccess ($27) SecurityAccess (SA) (SA_RS), see page 159. 27 0A xx 67 0A zz
(SecurityAccess)
Key (xx)
0 Unlocking eSA Control Request Seed Hex 1 Byte
Key1
Seed_Key1)
See 02013_18_00051
Key2
Seed_Key2)
See 02013_18_00051
Key3
Seed_Key3)
See 02013_18_00051
Key4
Seed_Key4)
See 02013_18_00051
Seed (zz)
no data assigned
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.3 Ecu Reset (EcuReset)

This diagnostic class contains the ECUReset functionality.
The supplier shall precise the time to execute each type of reset below. Because the whole reset will be potentially used in factory
(Impacts PSA Methods).
25
10.1.3.1 hardReset (HR) ($01) (hardReset_HR)
HR: This value identifies a "hard reset" condition which simulates the power-on / startup sequence typically performed after an ECU
has been previously disconnected from its power supply (i.e. battery). The volatile memory (Internal RAM, External RAM and the
Protected RAM) is re-initialized to pre-determined values.

ECUReset (ECUReset) ($11) ECUReset (ER) (ER), see page 155. 11 01 51 01
ECUReset
(IMLOIF)
0x33 securityAccessDenied (SAD) see page 165
10.1.3.2 keyOffOnReset (KOFFONR) ($02) (keyOffOnReset_KOFFONR)

KOFFONR: This value (0x02) identifies a condition similar to the driver turning the ignition key off and back on. This reset condition
should simulate a key-off-on sequence (i.e. interrupting the switched power supply).

ECUReset
(IMLOIF)
10.1.3.3 softReset (SR) ($03) (softReset_SR)

SR: This mandatory value (0x03) identifies a "soft reset" condition, which causes the server to immediately restart the application
program if applicable.

ECUReset
(IMLOIF)
10.1.4 Identification Parameters (Identification_Parameters)

This diagnostic class contains the generic parameters supported by all servers (functionnal request possible).
- The parameters of the tracability are exploited by the supplier factory (ECU serial number, date,...) or PSA factory (PSA Part-
Numbers, ...) and AfterSale tools.
- The main management of PSA Authentification/Identification parameters are defined in the DC_TI_706 technical specification.
26
- etc...
10.1.4.1 Power Latch Flag State (PLFS) ($0100) (Power_Latch_Flag_State_PLFS)

PLFS: Requirements associated to this parameter are described in DC_TI_707 "TS Electronic integration and putting ECUs into
operation".
Identifier: Identifier ($0100)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 01 00 62 01 00 zz
- Test system sends functional 158.
request
- ECU implements functional positive
response
(Default values: see Protocol Services -
Overview -)
DataRecord (zz)
0 PowerLatchFlagState_PLFS ENUM_8Bits_NotRealized_Realized
(PowerLatchFlagState_PLFS), see
(3)
(3) PowerLatchFlagState_PLFS
PLFS: See requirements §5.4.4 in DC_TI_707 "TS Electronic integration and putting ECUs into operation" for this
generic parameter.
Read
(IMLOIF)
0x14 response too long (RTL) see page 164
0x31 requestOutOfRange (ROOR) see page 165

(Size_Of_ECU_Serial_Number_Data_Identifier_SOECUSNDID)
SOECUSNDID: See requierements §5.2.1.3.1 in DC_TI_702 'TS UDS Generic Mechanisms paragraph".
This generic parameter should indicate the size of serial number from 0xF18C ECUSNDID.
Identifier: Identifier ($0D01)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 0D 01 62 0D 01 zz
request
response
Overview -)
DataRecord (zz)
0 SizeOfECUSerialNumberDataIdentifier UNM_8Bits
(SOECUSNDID)
(SizeOfECUSerialNumberDataIdent
ifier_SOECUSNDID), see (4)
(4) SizeOfECUSerialNumberDataIdentifier (SOECUSNDID)
27
SOECUSNDID: This generic parameter should indicate the size of serial number from $F18C ECUSNDID. See
requierements §5.2.1.3.1 in DC_TI_702 'TS UDS Generic Mechanisms paragraph".
Read
(IMLOIF)
10.1.4.3 Variant coding possibilities ($2100) (Variant_coding_possibilities)

see (5) 158.
- Test system sends functional
request
response
Overview -)
(5) Read
Requirements associated to this service are described in specification DC_TI_703_TS UDS Configuration
(paragraph 5.1.1).
DataRecord (zz)
0 ID_TLC (ID_TLC) Default: 0x00, Hex 1 Byte
1 - 12 New Bit Field (New_Bit_Field) HEX_96Bits
0-8 MDS BRO FM BAND ACT PO HEXADECIMAL_9_1(1)
(MDS_BRO_FM_BAND_ACT_PO)
[VariantCoding] SIRIUS XM ACTIVATION
(US) Possible
9 RESERVED (RESERVED) 0x01, HEXADECIMAL_1_1(2)
10 MDS BROADCAST FM2 ANTENN PO HEXADECIMAL_1_1(2)
(MDS_BROADCAST_FM2_ANTENN_PO)
11 MDS BRO RAD XM BAND ACT PO HEXADECIMAL_1_1(2)
(MDS_BRO_RAD_XM_BAND_ACT_PO)
[VariantCoding] DEEMPHASIS
PARAMETER (EUROPE VS US) Possible
12 MDS BRO CDR BAND ACT PO HEXADECIMAL_1_1(2)
(MDS_BRO_CDR_BAND_ACT_PO), see
(6)
13 - 14 MDS BRO FM DEEPHASIS PO HEXADECIMAL_2_1(1)
(MDS_BRO_FM_DEEPHASIS_PO), see
(7)
15 - 23 MDS BRO AM BAND ACT PO HEXADECIMAL_9_1(1)
(MDS_BRO_AM_BAND_ACT_PO), see (8)
24 - 25 MDS BRO PRESET BANK PO HEXADECIMAL_2_1(1)
(MDS_BRO_PRESET_BANK_PO)
[VariantCoding] AUTOSTORE
ACTIVATION Possible
26 - 28 MDS BRO HANDOVER PO HEXADECIMAL_3_1(1)
28
(MDS_BRO_HANDOVER_PO), see (9)
29 MDS BRO HDR BAND ACT PO HEXADECIMAL_1_1(1)
(MDS_BRO_HDR_BAND_ACT_PO)
[VariantCoding] HDR ACTIVATION (US)
Possible
30 - 39 MDS XCALL VEHICLE PROPUL PO HEXADECIMAL_10_1(1)
(MDS_XCALL_VEHICLE_PROPUL_PO)
[VariantCoding] ENERGY USED
(GASOLINE / DIESEL...) Possible
40 MDS BRO DRM BAND ACT PO HEXADECIMAL_1_1(1)
(MDS_BRO_DRM_BAND_ACT_PO)
[VariantCoding] DRM ACTIVATION (INDIA
RUSSIA) Possible
41 - 55 MDS XCALL VEHICLE TYPE PO HEXADECIMAL_15_1(1)
(MDS_XCALL_VEHICLE_TYPE_PO), see
(10)
56 - 63 MDS BRO DIGITAL BAND ACT PO HEXADECIMAL_8_1(1)
(MDS_BRO_DIGITAL_BAND_ACT_PO),
see (11)
64 - 79 MDS ECALL TYPE EMERG PO HEX_16Bits (v1)
(MDS_ECALL_TYPE_EMERG_PO)
80 - 95 MDS ACALL TYPE PO HEX_16Bits (v1)
(MDS_ACALL_TYPE_PO)
13 Number of coding HEX_8Bits (v1) 1(1)
(Number_of_coding)
(6) MDS BRO CDR BAND ACT PO
[VariantCoding] CDR ACTIVATION (CHINA)
Possible
(7) MDS BRO FM DEEPHASIS PO
[VariantCoding] DEEMPHASIS PARAMETER (EUROPE VS US)
Possible
(8) MDS BRO AM BAND ACT PO
[VariantCoding] AM RADIO ACTIVATION AND FREQUENCY RANGE SELECTION Possible
(9) MDS BRO HANDOVER PO
[VariantCoding] HANDOVER CONFIGURATION (JUMP FM / DAB) Possible
(10) MDS XCALL VEHICLE TYPE PO
[VariantCoding] CATEGORY OF VEHICLE (PASSENGER CAR / LIGHT CARGO VEHICLE...) Possible
(11) MDS BRO DIGITAL BAND ACT PO
[VariantCoding] DIGITAL RADIO ACTIVATION AND AREA SELECTION Possible
Read
(IMLOIF)
10.1.4.4 Variant coding programmed ($2101) (Variant_coding_programmed)

see (12) 158.
Write (Write) ($2E) WriteDataByIdentifier (WDBI) (WDBI), see page 2E 21 01 zz 6E 21 01
29
see (13) 160.
(12) Read
(paragraph 5.1.1).
(13) Write
(paragraph 5.1.1). Security Access to be used for data writing is specific for variant coding and different from the one
used for reprogramming.
DataRecord (zz)
0 ID_TLC_UDS (ID_TLC_UDS) 0x00, NewIdentity 8
0-8 MDS _BRO FM BAND ACT _000_1 Default: 0x04 (TBL4_87.5 - 108.0 kHz (A:100k)
(F6S_MDS_BRO_FM_BAND_ACT_000), Europe / Arabia = Africa / Asia +China),
see (14) ENUM_9bits_2
10 MDS _BROADCAST FM2 Default: 0x01 (2 connected antenna (internal +
ANTENN_000_1 external)), ENUM_1bit_4
(F8Z_MDS_BROADCAST_FM2_ANTENN_0
00), see (15)
11 MDS _BRO RAD XM BAND ACT Default: 0x00 (Disable), ENUM_1bit_3
_000_1
(F6Z_MDS_BRO_RAD_XM_BAND_ACT_00
0)
(US)
12 MDS _BRO CDR BAND ACT _000_1 Default: 0x00 (Disable), ENUM_1bit_2
(F6X_MDS_BRO_CDR_BAND_ACT_000)
[VariantCoding] CDR ACTIVATION
(CHINA)
13 - 14 MDS _BRO FM DEEMPHASIS _000_1 Default: 0x00 (50 us (except US)), ENUM_2bits_1
(F6U_MDS_BRO_FM_DEEMPHASIS_000)
PARAMETER (EUROPE VS US)
15 - 23 MDS _BRO AM BAND ACT _000_1 Default: 0x03 (TBL3_531 - 1629 kHz (A:9k) MW :
(F6T_MDS_BRO_AM_BAND_ACT_000), Europe (MW only)), ENUM_9bits_1
see (16)
24 - 25 MDS _BRO PRESET BANK _000_1 Default: 0x00 (24 Mixed preset list AM/FM/DAB or
(F6V_MDS_BRO_PRESET_BANK_000) AM/FM (except China)), ENUM_2bits
ACTIVATION
26 - 28 MDS _BRO HANDOVER _000_1 Default: 0x02 (Jump without synchronization),
(F6P_MDS_BRO_HANDOVER_000) ENUM_3bits
[VariantCoding] HANDOVER
CONFIGURATION (JUMP FM / DAB)
29 MDS _BRO HDR BAND ACT _000_1 Default: 0x00 (Disable), ENUM_1bit_1
(F6W_MDS_BRO_HDR_BAND_ACT_000)
30 - 39 MDS _XCALL VEHICLE Default: 0x00 (Undefined), ENUM_10bits
PROPUL_000_1
(F70_MDS_XCALL_VEHICLE_PROPUL_0
00)
(GASOLINE / DIESEL...)
30
40 MDS _BRO DRM BAND ACT _000_1 Default: 0x00 (Disable), ENUM_1bit
(F6Y_MDS_BRO_DRM_BAND_ACT_000)
RUSSIA)
41 - 55 MDS _XCALL VEHICLE TYPE _000_1 Default: 0x00 (Undefined), ENUM_15bits
(F71_MDS_XCALL_VEHICLE_TYPE_000
), see (17)
56 - 63 MDS _BRO DIGITAL BAND ACT_000_1 Default: 0x01 (Europe), ENUM_8bits
(F6R_MDS_BRO_DIGITAL_BAND_ACT_0
00)
[VariantCoding] DIGITAL RADIO
ACTIVATION AND AREA SELECTION
64 - 79 MDS _ECALL TYPE EMERG PR Default: 0xFFFF (Deactivated), ENUM_16bits_1
_000_1
(F7Z_MDS_ECALL_TYPE_EMERG_PR_00
0)
[VariantCoding] TYPE OF EMERGENCY
CALL DEFINE BY COUNTRY
80 - 95 MDS _ACALL TYPE PR _000_1 Default: 0xFFFF (Deactivated), ENUM_16bits
(F85_MDS_ACALL_TYPE_PR_000)
[VariantCoding] TYPE OF ASSISTANCE
CALL
(14) MDS _BRO FM BAND ACT _000_1
[VariantCoding] FM RADIO ACTIVATION AND FREQUENCY RANGE SELECTION
(15) MDS _BROADCAST FM2 ANTENN_000_1
[VariantCoding] ACTIVATION OR DEACTIVATION OF THE FM2 ANTENNA
(16) MDS _BRO AM BAND ACT _000_1
[VariantCoding] AM RADIO ACTIVATION AND FREQUENCY RANGE SELECTION
(17) MDS _XCALL VEHICLE TYPE _000_1
[VariantCoding] CATEGORY OF VEHICLE (PASSENGER CAR / LIGHT CARGO VEHICLE...)
Read
(IMLOIF)
Write
0x11 serviceNotSupported (SNS) see page 164
(IMLOIF)
0x72 generalProgrammingFailure (GPF) see page 166
(SNSIAS)
10.1.4.5 Size For Multi DID (SFMDID) ($C002) (Size_For_Multi_DID_SFMDID)

SFMDID: This generic parameter indicate the buffer size of diag communication ( x Bytes max ?).
Identifier: Identifier ($C002)

31
Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 C0 02 62 C0 02 zz
request
response
Overview -)
DataRecord (zz)
0-1 SIZE multi DID (SFMDID) UNM_16Bits
(SIZE_multi_DID_SFMDID), see (18)
(18) SIZE multi DID (SFMDID)
SFMDID: See requierements §5.2.1.3.9 int the DC_TI_702. This generic parameter indicate the buffer size of diag
communication ( x Bytes max ?).
Read
(IMLOIF)

(eCALL_RegulationXSofWareIdentificationNumber_eCALL_RxSWIN)
eCALL_RxSWIN: Regulation PE112 for ecall function. >>> BSRF + BTA
Identifier: Identifier ($F013)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 F0 13 62 F0 13 zz
request
response
Overview -)
DataRecord (zz)
0 - 15 eCALL Homologation Reference Default: ????????????????,
(eCALL_RxSWIN) ASCII_128Bits_eCALL_RxSWIN_1
(eCALL_Homologation_Reference_e
CALL_RxSWIN)
eCALL_RxSWIN: eCALL Homologation
Reference.
Read
(IMLOIF)
32
(OTA_RegulationXSofWareIdentificationNumber_OTA_RxSWIN)
OTA_RxSWIN: Regulation for OTA function.
Reqest Functionnal .>>> IVI + BSRF + BTA + SDCM

request
response
Overview -)
DataRecord (zz)
0 - 15 OTA Homologation Reference Default: ????????????????,
(OTA_RxSWIN) ASCII_128Bits_OTA_RxSWIN_1
(OTA_Homologation_Reference_OTA
_RxSWIN)
OTA_RxSWIN: OTA Homologation
Reference
Read
(IMLOIF)
10.1.4.8 MASCOM Key Status (DMKEYS) ($F015) (MASCOM_Key_Status_DMKEYS)

See requirements: 02013_18_00051 for more information ( VSM or BSRF DID_PSK_STATE ).

request
response
Overview -)
DataRecord (zz)
0-3 Operation ID (Operation_ID) Default: 4294967295, HEX_32Bits_1
See 02013_18_00051
4 Day (Day) Default: 1, BCD_8bits_Date_day
See 02013_18_00051
5 Month (Month) Default: 1, BCD_8bits_Date_month
See 02013_18_00051
6 Year (Year) Default: 1, BCD_8bits_Date_year
See 02013_18_00051
33
7 Hour (Hour) Default: 1, BCD_8bits_Hour_1
See 02013_18_00051
8 Minute (Minute) Default: 1, BCD_8bits_Minute_1
See 02013_18_00051
Read
(IMLOIF)
10.1.4.9 Authentification Zone (ZA) ($F080) (Authentification_Zone_ZA)

ZA: The rules of "Zone Authentification" management are defined by the PSA project for each ECU (MCxx departments).
The rules are definied in the CSEO_CLCO08_0628 for ECU Powertrain and Chassiis (Internal document / MCDV department).
For ECU Body, the rules are defined by MSCI department.
See DC_TI_705 and DC_TI_706 for PSA download procedure.

request
response
Overview -)
DataRecord (zz)
0-4 Functionnal Plan Number (FPN) BCD_40Bits_PSA Part Number Format
(Functionnal_Plan_Number_FPN)
PSA Part Number defined and rules by
PSA project (MCxx).
5-6 PSA Supplier Code ZA ENUM_16Bits_PSA Supplier Code
(PSA_Supplier_Code_ZA), see (19)
7 - 11 Product Number (FPRN) BCD_40Bits_PSA Part Number Format
(Product_Number_FPRN)
PSA project (MCxx).
12 Software evolution index - High-order Default: 0xFF, Hex 1 Byte
(MSB)
(Software_evolution_index_High_
order_MSB)
Only use if ECU is not downloading (DID
$F0FE not present).
13 Software evolution index - Low-order Default: 0xFF, Hex 1 Byte
(LSB)
(Software_evolution_index_Low_o
rder_LSB)
$F0FE not present).
14 Reserved - High-order (MSB) 0xFF, Hex 1 Byte
(Reserved_High_order_MSB)
Not used.
34
15 Reserved - Low-order (LSB) 0xFF, Hex 1 Byte
(Reserved_Low_order_LSB)
Not used.
16 Diag Frame Evolution Index (DFEI) Default: 0xFF (Not used), Diag Frame Evolution
(Diag_Frame_Evolution_Index_DFE Index_1byte
I)
17 No. of Parameters Associated to the Default: 0x01 (Codification ISO 15031-6, 1
Faults parameter associated at default ), Number of
(No_of_Parameters_Associated_to associated parameters at default (1 byte)
_the_Faults)
18 - 21 Reserved (Reserved), see (20) 0xFFFFFFFF, HexDump (4 Byte)
(19) PSA Supplier Code ZA

Supplier code defined by PSA project MCxx (PSA Internal document: AEEV_MTS07_0040).
(20) Reserved
Not used. Old Diagnostic messaging Number (ECU Body Domain only). See reference available in PSA data
base (D2 Center).
Read
(IMLOIF)

(Identification_Zone_for_Downloadable_ECU_ZI)
ZI: The rules of "Zone Identification" management are defined by the PSA project (MCxx) for each ECU.
For ECU Powertrain and Chassiis, the rules are definied in the CSEO_CLCO08_0628 (Internal document / MCDV department).
For ECU Body, the rules are defined by MSCI department for each ECU.
Identifier: Identifier ($F0FE)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 F0 FE 62 F0 FE zz
request
response
Overview -)
DataRecord (zz)
0-1 (reserved)
2-3 (reserved)
4 PSA Supplier Code ZI PSA SupplierCode ENUM 8bits
(PSA_Supplier_Code_ZI), see (21)
5 Code system du calculateur SYSTEM - HEX 1 byte
(Code_system_du_calculateur)
6 ECU manufacturing day Default: 1, BCD_8bits_Date_day
(ECUMDDID_DAY)
(ECU_manufacturing_day_ECUMDDID
_DAY)
7 ECU manufacturing month Default: 1, BCD_8bits_Date_month
(ECUMDDID_MONTH)
35
(ECU_manufacturing_month_ECUMDD
ID_MONTH)
8 ECU manufacturing year Default: 1, BCD_8bits_Date_year
(ECUMDDID_YEAR)
(ECU_manufacturing_year_ECUMDDI
D_YEAR)
9 Application (Application) Hex 1 Byte
Identifies the type of application
10 Software Version Hex 1 Byte
(Software_Version)
Identifies the software or calibration
version
11 - 12 Software Edition Hex 2 Bytes
(Software_Edition), see (22)
13 Download Date Day Default: 1, BCD_8bits_Date_day
(Download_Date_Day)
14 Download Date Month Default: 1, BCD_8bits_Date_month
(Download_Date_Month)
15 Download Date Year Default: 1, BCD_8bits_Date_year
(Download_Date_Year)
16 Downloading site ENUM_8Bits_Data_Site_1
(Downloading_site)
17 - 19 Downloading Tool Signature (DTS) ENUM_24Bits_Tool_signature_1
(Downloading_Tool_Signature_DTS
)
20 Downloading Number (DS) Hex 1 Byte
(Downloading_Number_DS)
21 - 23 Software Reference (".ulp" or ".cal" file PSA ULP or CAL Number (3 bytes)
number) in BCD
(Software_Reference_ulp_or_cal_
file_number_in_BCD), see (23)
(21) PSA Supplier Code ZI
Defined by PSA project (MCxx: PSA Internal document: AEEV_MTS07_0040).
(22) Software Edition
Modification state of the software or of the calibration of the ECU
(23) Software Reference (".ulp" or ".cal" file number) in BCD
Reference of file ".ULP" or ".CAL" define by PSA procject (MCxx).
Read
(IMLOIF)

(Boot_Software_Identification_Data_Identifier_BSIDID)
BSIDID: The boot sofware is not programming by PSA client (diag tool). This DID is not mandatory (User Option with supplier).
Requirements associated to this service are described in DC_TI_702_TS UDS Generic Mechanisms paragraph 5.2.1.3.3.

158.
36
see (24)
request
response
Overview -)
(24) Read
BSIDID: The boot sofware is not programming by PSA client (diag tool). This DID is not mandatory (User Option with
supplier).
5.2.1.3.3.
DataRecord (zz)
0 NumberOfModule (NOM) Default: 0x01 (1), UNM_8Bits(1)
(NumberOfModule_NOM)
NOM
1 - 10 BootSoftwareIdentificationNumber BCD_80Bits_PSA Part Number Format_1
(BSIN)
(BootSoftwareIdentificationNumb
er_BSIN), see (25)
11 BootVersion (BV) (BootVersion_BV) Default: 255, HEX_8Bits
BV
12 BootEdition (BE) (BootEdition_BE) Default: 255, HEX_8Bits
BE
(25) BootSoftwareIdentificationNumber (BSIN)
This PSA P/N for Boot SW identification is not mandatory.
PSA P/N defined and rules by PSA project (MCxx).
If not used, default value is 01.

(Active_Diagnostic_Session_Data_Identifier_ADSDID)
ADSDID: Requirements associated to this service are described in DC_TI_702_TS UDS Generic Mechanisms paragraph 5.2.1.3.2.

request
response
Overview -)
DataRecord (zz)
0 diagnosticSessionType (LEV_DS_) VV_PSAdiagnosticSessionType_1
(diagnosticSessionType_LEV_DS)
ADSDID
Read
(IMLOIF)
37

(ECU_Manufacturing_Date_Data_Identifier_ECUMDDID)
ECUMDDID: The date of manufacture is returned to the client on 3 bytes in the direction Day, Month, Year.
See pargraph 5.2.1.3.1 in the DC_TI_702.
Identifier: Identifier ($F18B)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 F1 8B 62 F1 8B zz
request
response
Overview -)
DataRecord (zz)
(ECUMDDID_DAY)
_DAY)
ECUMDDID_DAY
(ECUMDDID_MONTH)
ID_MONTH)
ECUMDDID_MONTH
(ECUMDDID_YEAR)
D_YEAR)
ECUMDDID_YEAR
Read
(IMLOIF)

(ECU_Serial_Number_Data_Identifier_ECUSNDID)
ECUSNDID: This value shall be used to reference the ECU (Server) serial number.
This factory supplier serial number size should be less than or equals 20 characters (ASCII) to remain compatible with PSA
database (factory and after-sales). ASCII characters " & < > | " not autorized and default value " ? ". See pargraph 5.2.1.3.1 in the
DC_TI_702.
Identifier: Identifier ($F18C)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 F1 8C 62 F1 8C zz
request
response
38
Overview -)
DataRecord (zz)
0 - [0..31] ECUSerialNumber ASCII_ECUSerialNumber
(ECUSerialNumber), see (26)
(26) ECUSerialNumber
20 max with ASCII characters " & < > | " not autorized and default value " ? ".
Read
(IMLOIF)
10.1.4.15 VIN Data Identifier (VINDID) ($F190) (VIN_Data_Identifier_VINDID)

See requirements described in the DC_TI_704 "OBD" and §5.2.1.3.7.on DC_TI_702_TS "UDS". A vehicle identification number is
writed by manufacturer client (F190: VIN DataIdentifier) in the Body Control Module. Regulatory Format ASCII 17 Bytes and Defaut
value [?]. This operation is made at the PSA terminal factory. The same reading of the VIN data must be displayed with regulatory
tool for inspection in Engine Control Module (Mode 09 / CMM) or PSA manufacturer client for maintenance in Body Control Module
(F190: VIN DataIdentifier / BSI ).

see (27) 158.
request
response
Overview -)
Write (Write) ($2E) WriteDataByIdentifier (WDBI) (WDBI), see page 2E F1 90 zz 6E F1 90
see (28) 160.
(27) Read
See requirements described in §5.1.9.4 on DC_TI_704 "OBD" and §5.2.1.3.7.on DC_TI_702_TS "UDS". A vehicle
identification number is writed by manufacturer client (F190: VIN DataIdentifier) in the Body Control Module.
Regulatory Format ASCII 17 Bytes and Defaut value [?]. This operation is made at the PSA terminal factory. The
same reading of the VIN data must be displayed with regulatory tool for inspection in Engine Control Module (Mode
09 / CMM) or PSA manufacturer client for maintenance in Body Control Module (F190: VIN DataIdentifier / BSI ).
(28) Write
DataRecord (zz)
0 - 16 VehicleInformationNumber (VIN) DIDF802_F190_INTPY02_VIN_1
(VehicleInformationNumber_VIN),
see (29)
(29) VehicleInformationNumber (VIN)
VIN: Defaut value [?]. See DC_TI_704 "OBD" and §5.2.1.3.7.on DC_TI_702 "UDS".
39
10.1.5 Engineering Datas (Engineering_Datas)
This diagnostic class contains the specific datas supported by the server (Physical request only).
This datas are defined by PSA manufacturer or supplier (Example: Specific datas for Engine Control Module).
10.1.5.1 CAL_Fct_LIFECYCLE ($0101) (CAL_Fct_LIFECYCLE)

request
response
Overview -)
160.
Data (zz)
0-1 SWM_PMA_ALL_TIME_P1_1 Default: 0x00, HEXADECIMAL_16_1
(SWM_PMA_ALL_TIME_P1)
[Data] Park mode activated: Time of the
profile 1 (min)
profile 2 (min)
profile 3 (min)
profile 4 (min)
8-9 SWM_PMA_INAC_TIME_P1_1 Default: 0x00, HEXADECIMAL_16_1
(SWM_PMA_INAC_TIME_P1)
[Data] Park mode activated: Time in
inactive mode 1 (min)
10 - 11 SWM_PMA_INAC_TIME_P2_1 Default: 0x00, HEXADECIMAL_16_1
16 SWM_PMA_SWM_TIME_P1_1 Default: 0x00, HEXADECIMAL_8_1
(SWM_PMA_SWM_TIME_P1), see (30)
40
20 - 21 SWM_PMD_ALL_TIME_P1_1 Default: 0x02D0, HEXADECIMAL_16_1
(SWM_PMD_ALL_TIME_P1)
[Data] Park mode deactivated: Time of the
profile 1 (min)
22 - 23 SWM_PMD_ALL_TIME_P2_1 Default: 0x7BC0, HEXADECIMAL_16_1
profile 2 (min)
24 - 25 SWM_PMD_ALL_TIME_P3_1 Default: 0x00, HEXADECIMAL_16_1
profile 3 (min)
profile 4 (min)
28 - 29 SWM_PMD_INAC_TIME_P1_1 Default: 0x00, HEXADECIMAL_16_1
(SWM_PMD_INAC_TIME_P1)
[Data] Park mode deactivated: Time in
30 - 31 SWM_PMD_INAC_TIME_P2_1 Default: 0x05A0, HEXADECIMAL_16_1
36 SWM_PMD_SWM_TIME_P1_1 Default: 0x00, HEXADECIMAL_8_1
(SWM_PMD_SWM_TIME_P1), see (34)
40 New Bit Field (New_Bit_Field) Address And Length Format Identifier
0-5 (reserved)
6 SWM_SERVICE_ACT_2 Default: 0x01 (Enable), ENUM_1_33
(SWM_SERVICE_ACT), see (38)
7 PARK_MODE_LOCK_ACT_1 Default: 0x00 (Forced), ENUM_1_32
(PARK_MODE_LOCK_ACT), see (39)
41 THER_MITI_HYST_RAP_1 Default: 0x55, HEXADECIMAL_8_1
(THER_MITI_HYST_RAP)
[Data] Hysteresis value for the RAP
42 THER_MITI_TEMP_RAP1_1 Default: 0x5A, HEXADECIMAL_8_1
41
(THER_MITI_TEMP_RAP1)
[Data] Mitigation state 1
43 THER_MITI_TEMP_RAP2_1 Default: 0x5F, HEXADECIMAL_8_1
44 THER_MITI_TEMP_RAP3_1 Default: 0x64, HEXADECIMAL_8_1
46 - 47 LC_TIMEOUT_BEF_SLEEP_1 Default: 0x05, HEXADECIMAL_16_1(1)
(LC_TIMEOUT_BEF_SLEEP), see (40)
(30) SWM_PMA_SWM_TIME_P1_1
[Data] Park mode activated: Accessibly time on the cellular network 1 (min)
(34) SWM_PMD_SWM_TIME_P1_1
[Data] Park mode deactivated: Accessibly time on the cellular network 1 (min
(38) SWM_SERVICE_ACT_2
[Data] Activation or deactivation of the Service Watcher Mode services (BSRF is waked-up when the vehicle is
OFF)
(39) PARK_MODE_LOCK_ACT_1
[Data] Parc mode is lock before the reception in plant or after sales
(40) LC_TIMEOUT_BEF_SLEEP_1
[Data] Time out in “before sleep state” before ‘inactive state” for all application (min)
Read
(IMLOIF)
Write
(IMLOIF)
42
(SFNSIAS)
(SNSIAS)
10.1.5.2 CAL_Fct_POSITIONING ($0102) (CAL_Fct_POSITIONING)

request
response
Overview -)
160.
Data (zz)
0 New Bit Field 7 (New_Bit_Field_7) Address And Length Format Identifier
0-3 GNSS_DATA_RATE_1 Default: 0x0A, HEXADECIMAL_4_Hertz_2
(GNSS_DATA_RATE)
[Data] Data output rate of GNSS receiver
4-7 GNSS_MIN_ELEVATION_1 Default: 0x05, HEXADECIMAL_4_Hertz_2
(GNSS_MIN_ELEVATION), see (41)
1 GNSS_TICKS_REVOL_1 Default: 0x62, HEXADECIMAL_8_1
(GNSS_TICKS_REVOL)
[Data] Number of ticks per circumference
2-3 GNSS_VHL_WIDTH_1 Default: 0x00, HEXADECIMAL_16_1
(GNSS_VHL_WIDTH)
[Data] Width between rear wheel
4-5 GNSS_WHEEL_DIAMETER_1 Default: 0x00, HEXADECIMAL_16_1
(GNSS_WHEEL_DIAMETER)
[Data] Diameter of the wheel
(41) GNSS_MIN_ELEVATION_1
[Data] Minimum elevation (cut-off angle) of navigation spacecraft
Read
(IMLOIF)
Write
(IMLOIF)
43
(SFNSIAS)
(SNSIAS)
10.1.5.3 CAL_Fct_CONNECT ($0104) (CAL_Fct_CONNECT)

request
response
Overview -)
160.
Data (zz)
0-3 CONNECT_WIFI_AP_DEV_1 Default: 0x09, HEXADECIMAL_4_3
(CONNECT_WIFI_AP_DEV)
[Data] Maximum number of Wifi Device
AP
4-6 BSRF_BRAND_CFG_1 Default: 0x00 (Undefined), ENUM_3_3
(BSRF_BRAND_CFG)
[Data] Brand of the vehicle
7 CONNECT_WIFI_ACT_1 Default: 0x00 (Enable), ENUM_1_30
(CONNECT_WIFI_ACT)
[Data] Activation or deactivation of the Wifi
Service
Read
(IMLOIF)
Write
(IMLOIF)
(SFNSIAS)
(SNSIAS)
44
10.1.5.4 CAL_Fct_BROADCAST ($0105) (CAL_Fct_BROADCAST)
request
response
Overview -)
160.
Data (zz)
0-3 BRO_FM_FOLLOW_ME_2 Default: 0x02 (Normal mode), ENUM_4_1(1)
(BRO_FM_FOLLOW_ME)
[Data] FM follow me configuration
(parasite filter)
4-7 (reserved)
0 BRO_RDS_ACT_2 (BRO_RDS_ACT) Default: 0x01 (Enable), ENUM_1_33
[Data] Activation or deactivation of the
RDS
1 BRO_TA_ACT_2 (BRO_TA_ACT), see Default: 0x01 (Enable), ENUM_1_33
(42)
2-4 BRO_DAB_THRESHOLD_2 Default: 0x02 (High), ENUM_3_2 3
(BRO_DAB_THRESHOLD)
[Data] DAB quality criteria selection
5-7 BRO_FM_THRESHOLD_2 Default: 0x02 (High), ENUM_3_2 3
(BRO_FM_THRESHOLD)
[Data] FM quality criteria selection
0-2 BRO_AM_THRESHOLD_2 Default: 0x02 (High), ENUM_3_2 3
(BRO_AM_THRESHOLD)
[Data] AM quality criteria selection
3 BRO_DAB_ANNOUC_ACT_2 Default: 0x01 (Enable), ENUM_1_33
(BRO_DAB_ANNOUC_ACT)
DAB Announcement
0 BRO_FM2_ACT_PASSIVE_1 Default: 0x01 (Enable), ENUM_1_33
(BRO_FM2_ACT_PASSIVE)
[Data] FM2 active or passive
1 BRO_DAB_FOLLOWING_1 Default: 0x00 (Disable), ENUM_1_33
(BRO_DAB_FOLLOWING)
[Data] DAB follow me configuration
2-7 BRO_WSH_CONF_2 (BRO_WSH_CONF) Default: 0x00 (WSH deactivate), ENUM_6_1
[Data] FM sensibility parameter choice
(42) BRO_TA_ACT_2
[Data] Activation or deactivation of the Traffic Announcement
45
Read
(IMLOIF)
Write
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.5.5 CAL_Fct_ECALL_TYPE_EMERG_PR ($0106) (CAL_Fct_ECALL_TYPE_EMERG_PR)

request
response
Overview -)
160.
Data (zz)
0 New Bit Field 1 (New_Bit_Field_1) Hex 1 Byte
0 (reserved)
1 AUTOMATIC_ECALL_ACTIVE_1 Default: 0x01 (Enable), ENUM_1_33
(AUTOMATIC_ECALL_ACTIVE)
[Data] Activation or Deactivation of
Automatic Ecall
2 ECALL_MAN_CAN_ACT_2 Default: 0x01 (Enable), ENUM_1_33
(ECALL_MAN_CAN_ACT)
[Data] Parameter to enable a manual
eCall cancellation
3 ECALL_MANUAL_ACT_2 Default: 0x01 (Enable), ENUM_1_33
(ECALL_MANUAL_ACT)
[Data] Parameter to enable the manual
eCall
4-7 ECALL_REG_ATTEMPTS_1 Default: 0x03, HEXADECIMAL_4_Hertz_2(1)
(ECALL_REG_ATTEMPTS), see (43)
46
0 (reserved)
1-3 XCALL_EELF_TRANSFER_2 Default: 0x01 (AUTO), ENUM_3_2(1)
(XCALL_EELF_TRANSFER), see (44)
4-7 ECALL_TRANS_ATTEMPTS_1 Default: 0x0A, HEXADECIMAL_4_Hertz_2(2)
(ECALL_TRANS_ATTEMPTS)
[Data] SMS transmission attempts
2 ECALL_TRANS_INTER_1 Default: 0x3C, HEXADECIMAL_8_1(3)
(ECALL_TRANS_INTER), see (45)
3 ECALL_CANCEL_TIME_1 Default: 0x04, HEXADECIMAL_8_1
(ECALL_CANCEL_TIME)
[Data] Manual eCall cancellation time
4-5 ECALL_CCFT_1 (ECALL_CCFT), see Default: 0x3C, HEXADECIMAL_16_1
(46)
6 - 21 ECALL_TEST_NUMBER_2 Default: 112 , ASCII_128_1
(ECALL_TEST_NUMBER)
[Data] Phone Number call during TEST
MODE
22 - 37 ECALL_NUMBER_1 (ECALL_NUMBER) Default: 112 , ASCII_128_1
[Data] Emergency call phone number
38 - 77 ECALL_FEEDBACK_TEST_NUMBER_1 Default: 0123456789 ,
(ECALL_FEEDBACK_TEST_NUMBER) ASCII_320_1
[Data] Feedback Number reach during
TEST MODE
78 - 93 ECALL_SMS_FALLBACK_N_1 Default: 0123456789 , ASCII_128_1
(ECALL_SMS_FALLBACK_N), see (47)
94 ECALL_AUTO_DIAL_ATT_1 Default: 0x0A, HEXADECIMAL_8_1
(ECALL_AUTO_DIAL_ATT)
[Data] Number of radial attempt
95 ECALL_DIAL_DURATION_1 Default: 0x05, HEXADECIMAL_8_1
(ECALL_DIAL_DURATION)
[Data] Maximum initial dial duration time
96 ECALL_MAN_DIAL_ATT_1 Default: 0x0A, HEXADECIMAL_8_1
(ECALL_MAN_DIAL_ATT)
[Data] Number of manual radial attempt
97 ECALL_P_TEST_REG_T_1 Default: 0x78, HEXADECIMAL_8_1
(ECALL_P_TEST_REG_T), see (48)
98 - 99 ECALL_TEST_END_DIST_1 Default: 0x012C, HEXADECIMAL_16_1
(ECALL_TEST_END_DIST)
[Data] Distance to interrupt Russian test
mode
100 - 101 XCALL_AUTO_ANSWER_T_1 Default: 0x14, HEXADECIMAL_16_1
(XCALL_AUTO_ANSWER_T)
[Data] Waiting for call back duration time
102 - 229 ECALL_MESSAGE_URL_1 Default: http://
(ECALL_MESSAGE_URL) , ASCII_1024_1
[Data] Base URL used for HTTP queries
230 ECALL_MESS_TRANS_TIM_1 Default: 0x0A, HEXADECIMAL_8_1(2)
(ECALL_MESS_TRANS_TIM)
[Data] Duration for transmission of call
message
231 ECALL_TPS_REG_TIME_1 Default: 0x02, HEXADECIMAL_8_1(2)
(ECALL_TPS_REG_TIME)
[Data] Ecall TPS Network registration time
232 ECALL_UNAV_REQ_TIME_1 Default: 0x05, HEXADECIMAL_8_1(2)
47
(ECALL_UNAV_REQ_TIME), see (49)
233 - 248 PUBLIC_TPS_ECALL_NUM_1 Default: 0123456789 , ASCII_128_1(2)
(PUBLIC_TPS_ECALL_NUM)
[Data] Phone number for public TPS ecall
operations
249 - 264 PRIVA_TPS_ECALL_NUM_1 Default: 0123456789 , ASCII_128_1(2)
(PRIVA_TPS_ECALL_NUM)
[Data] Phone number for private TPS ecall
operations
265 - 280 ECALL_TEST_NUM_2_1 Default: 0123456789 , ASCII_128_1
(ECALL_TEST_NUM_2)
[Data] Phone number for test ecall
operations
0-1 (reserved)
2-3 ECALL_LOG_TRANS_CONF_1 Default: 0x01 (Automatic Ecall only), ENUM_2_11
(ECALL_LOG_TRANS_CONF)
[Data] ECALL_LOG_TRANS_CONF
4-7 ECALL_MESS_ATTEMPT_1 Default: 0x03, HEXADECIMAL_4_Hertz_2(3)
(ECALL_MESS_ATTEMPT)
[Data] Ecall TPS message sending
attempts
(43) ECALL_REG_ATTEMPTS_1
[Data] Parameter to set up the number of register attempt in case of network registration failure
(44) XCALL_EELF_TRANSFER_2
[Data] Parameter defining which event eCall log file to send to PSA server according to te type of the trigger
(45) ECALL_TRANS_INTER_1
[Data] SMS transmission interval after MSD failed transmission
(46) ECALL_CCFT_1
[Data] Setting of automatic call termination counter (60 min)
(47) ECALL_SMS_FALLBACK_N_1
[Data] Phone number used to send the MSD data by SMS in case of MSD transmission failure
(48) ECALL_P_TEST_REG_T_1
[Data] Time to be registered after the self test result transmission
(49) ECALL_UNAV_REQ_TIME_1
[Data] Minimum duration to follow between two voice prompts announcing that the service is unavailable.
Read
(IMLOIF)
Write
(IMLOIF)
48
(SFNSIAS)
(SNSIAS)
10.1.5.6 CAL_Fct_ACALL_TYPE_PR ($0107) (CAL_Fct_ACALL_TYPE_PR)

request
response
Overview -)
160.
Data (zz)
0-3 (reserved)
4-7 ACALL_MESS_ATTEMPT_1 Default: 0x03, HEXADECIMAL_4_Hertz_2(2)
(ACALL_MESS_ATTEMPT)
[Data] Acall message sending attempts
1 ACALL_BACK_TIME_1 Default: 0x0A, HEXADECIMAL_8_1(3)
(ACALL_BACK_TIME)
[Data] Call back time for the call center
2 ACALL_DIAL_DURATION_1 Default: 0x02, HEXADECIMAL_8_1(3)
(ACALL_DIAL_DURATION)
[Data] Dial duration
3 ACALL_MESS_TRAN_TIME_1 Default: 0x1E, HEXADECIMAL_8_1(3)
(ACALL_MESS_TRAN_TIME)
message
4 ACALL_UNAV_REQ_TIME_1 Default: 0x05, HEXADECIMAL_8_1(3)
(ACALL_UNAV_REQ_TIME), see (50)
5 ACALL_REGISTRAT_TIME_1 Default: 0x05, HEXADECIMAL_8_1(3)
(ACALL_REGISTRAT_TIME)
[Data] Acall Network registration time
6 ACALL_CANCELLATION_TIME_1 Default: 0x00, HEXADECIMAL_8_1(4)
(ACALL_CANCELLATION_TIME)
[Data] Cancellation time for aCall
7 - 22 ACALL_NUMBER_1 (ACALL_NUMBER) Default: 0123456789 , ASCII_128_1(1)
[Data] Localised phone number
23 - 150 ACALL_MESSAGE_URL_1 Default: http://
(ACALL_MESSAGE_URL) , ASCII_1024_1
(50) ACALL_UNAV_REQ_TIME_1
[Data] Time during the “service unavailable” shall not be played
Read
49
(IMLOIF)
Write
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.5.7 CAL_Fct_CONNECTED_SERVICES ($0108) (CAL_Fct_CONNECTED_SERVICES)

request
response
Overview -)
160.
Data (zz)
0-5 (reserved)
6-7 SMS_OUT_ENCODING_1 Default: 0x00 (ENCODING_GSM_7BIT),
(SMS_OUT_ENCODING), see (51) ENUM_2_12
(51) SMS_OUT_ENCODING_1
[Data] Data coding scheme of an outgoing Short Message sent by the TCU.
Read
(IMLOIF)
Write
(IMLOIF)
50
(SFNSIAS)
(SNSIAS)
10.1.5.8 CAL_Fct_ETHERNET ($0109) (CAL_Fct_ETHERNET)

request
response
Overview -)
160.
Data (zz)
0 LINK_STATUS_DELAY_1 Default: 0x05, HEXADECIMAL_8_1(2)
(LINK_STATUS_DELAY)
[Data] Delay to count the link fails of the
ETHERNET network
1-2 New Bit Field 4 (New_Bit_Field_4) Hex 2 Bytes
0 (reserved)
1-2 ETHERNET_BR_NODE_ALONE_1 Default: 0x00 (False), ENUM_2_13
(ETHERNET_BR_NODE_ALONE)
[Data] Link and the communication on the
ETHERNET network
3 ECU_TRANSCEIVER_CONF_1 Default: 0x00 (Slave), ENUM_1_34
(ECU_TRANSCEIVER_CONF)
[Data] transceiver configuration
4 - 15 UNREACHEABLE_LINK_1 Default: 0x0190, HEXADECIMAL_12_1
(UNREACHEABLE_LINK)
[Data] Timer to count the link fails of the
ETHERNET network
3-4 New Bit Field (New_Bit_Field) Hex 2 Bytes
0-3 (reserved)
4 - 15 INCREMENT_OF_CLINK_1 Default: 0x33, HEXADECIMAL_12_1(1)
(INCREMENT_OF_CLINK)
[Data] INCREMENT_OF_CLINK
Read
(IMLOIF)
51
Write
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.5.9 DATA_Fct_GNSS ($D400) (DATA_Fct_GNSS)

Identifier: Identifier ($D400)
Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 D4 00 62 D4 00 zz
request
response
Overview -)
Data (zz)
0 GNSS_CUR_SAT_VIEW_1 HEXADECIMAL_8_1
(GNSS_CUR_SAT_VIEW)
[Data] Number of current satelitte
1 GNSS_MAX_SAT_VIEW_1 HEXADECIMAL_8_1
(GNSS_MAX_SAT_VIEW)
[Data] Number of max satelitte
Read
(IMLOIF)
10.1.5.10 DATA_Fct_TRACABILITY ($D401) (DATA_Fct_TRACABILITY)

request
response
Overview -)
Data (zz)
52
0 - 19 TRACABILITY_UIN_1 ASCII_160_1
(TRACABILITY_UIN)
[Data] UIN of the BSRF
20 - 34 TRACABILITY_IMEI_1 ASCII_120_1
(TRACABILITY_IMEI)
[Data] IMEI of the BSRF
35 - 49 TRACABILITY_IMSI_1 ASCII_120_1
(TRACABILITY_IMSI)
[Data] IMSI of the BSRF
50 - 69 TRACABILITY_ICCID_P1_1 ASCII_160_1
(TRACABILITY_ICCID_P1)
[Data] ICCID Profile 1 of the SIM
Read
(IMLOIF)
10.1.5.11 DATA_Fct_EM ($D402) (DATA_Fct_EM)

request
response
Overview -)
Data (zz)
0 NUM_UNEXPECT_REBOOT_1 HEXADECIMAL_8_1(3)
(NUM_UNEXPECT_REBOOT)
[Data] Number of unexpect reboot
Read
(IMLOIF)
10.1.5.12 DATA_Fct_xCall ($D403) (DATA_Fct_xCall)

53
request
response
Overview -)
Data (zz)
0-5 (reserved)
6 ACALL_PUSH_FLAG_2 ENUM_1_35
(ACALL_PUSH_FLAG)
[Data] Read aCall button flag
7 ECALL_PUSH_FLAG_2 ENUM_1_35
(ECALL_PUSH_FLAG)
[Data] Read eCall button flag
Read
(IMLOIF)
10.1.6 Fault Memory (FaultMemory)

Allows the manufacturer client to clear diagnostic information or to request diagnostic information from the server (including DTCs,
captured data, permanent DTCs, etc.). See requirements §5.1.4 "Stored Data Transmission functional unit" in DC_TI_702 "UDS
Generic Mechanisms".

Clear (Clear) ($14) ClearDiagnosticInformation (CDTCI) (CDTCI), 14 vv 54
see page 155.
Read (Number of DTC By ($19) ReadDtcInformation - Report number of DTC by 19 01 yy 59 01 yy fd
StatusMask) status mask (RNODTCBSM) (RDI_RNODTCBSM), see ww
(Read_Number_of_DTC_By_St page 157.
atusMask)
Read (by Mask) ($19) ReadDtcInformation - Report DTC by status 19 02 yy 59 02 yy *[ zz
(Read_by_Mask) mask (RDTCBSM) (RDI_RDTCBSM), see page 156. xx ]
Read (DTC Snapshot Data by ($19) ReadDtcInformation - Report DTC snapshot 19 04 zz fd 59 04 zz xx
DTC Number) record by DTC number (RDI_RDTCSRBDTCN), see *[ uu ]
(Read_DTC_Snapshot_Data_b page 157.
y_DTC_Number)
GroupOfDtc (vv)
All groups.
Supports individual DTCs: yes.
DtcStatusMask (yy)
0 DTC Statusbyte (HEX_8Bits_2) HEX_8Bits_DTC_Statusbyte
0 Test failed (ENUM_1Bits) ENUM_1Bits_testFailed_TF
54
1 Test failed this monitoring cycle ENUM_1Bits_testFailedThisOperationCycle_TFT
(ENUM_1Bits_1) OC
2 Pending DTC (Pending_DTC) ENUM_1Bits_pendingDTC_PDTC
3 Confirmed DTC (ENUM_1Bits_3) ENUM_1Bits_confirmedDTC_CDTC
4 Test not completed since last clear ENUM_1Bits_testNotCompletedSinceLastClear_
(ENUM_1Bits_4) TNCSLC
5 Test failed since last clear ENUM_1Bits_testFailedSinceLastClear_TFSLC
(ENUM_1Bits_5)
6 Test not completed this monitoring cycle ENUM_1Bits_testNotCompletedThisOperationCy
(ENUM_1Bits_6) cle_TNCTOC
7 Warning indicator requested ENUM_1Bits_warningIndicatorRequested_WIR
(ENUM_1Bits_7)
DTCCount (ww)
0 DTCCount 1 (DTCCount) Hex 1 Byte
1 DTCCount 2 (_0_DTCCount) Hex 1 Byte
DTC Table (zz)

no data assigned
DtcStatusMask Response (xx)

(ENUM_1Bits_1) OC
(ENUM_1Bits_5)
(ENUM_1Bits_7)
SnapshotRecords (uu)
0 DTCSnapshotRecordNumber_4 Default: 1, HEX_8Bits (v1) 1
(DTCSSRN), see (52)
1 NB_ITER_DLF_EPF_PR_RDTCI_19_RD NumberOfIdentifiers
TCSSBDTC_04 1
(NB_ITER_DLF_EPF_PR_RDTCI_19_RD
TCSSBDTC_04_1)
DTCSSRNI
2-* DLF_EPF_PR_RDTCI_19_RDTCSSBDT DLF_EPF_PR_RDTCI_19_RDTCSSBDTC_04
C_04
(DLF_EPF_PR_RDTCI_19_RDTCSSBDTC
_04)
(52) DTCSnapshotRecordNumber_4
55
DTCSSRN: Indicate the number of a DTCSnapshot (context) frame records associated with DTC that we want
read.
Clear
(IMLOIF)
(SNSIAS)
10.1.7 Upload/Download (DataTransfer)

Requirements associated for this PSA generic procedure are described in the DC_TI_705 "TS Reprogrammation ECU".
The optional session (PRGS) enables all services required to flash the memory of a server by the repairman (Aftersales workshop
or Factories).

Request Download ($34) Request Download 34 zz 74 yy
(Request_Download) (_34_Request_Download), see page 162.
Transfer Data ($36) Transfer Data (_36_Transfer_Data), see 36 vv 76 uu
(Transfer_Data) page 162.
Request Transfer Exit ($37) Request Transfer Exit 37 77
(Request_Transfer_Exit) (_37_Request_Transfer_Exit), see page 163.
Transfer Request Parameters Download (zz)

0 dataFormatIdentifier(DFI) (DFI), see DFI_ENUM_8Bits
(53)
1 RD Bitfield (RD_Bitfield) HexDump Field 1 Byte
0-3 memoryAddress_ALFID_MA 0x01, NewIdentity 1
(memoryAddress_ALFID_MA)
4-7 memorySize_ALFID_MS 0x01, NewIdentity 1
(memorySize_ALFID_MS)
2 memoryAddress_MA 0x00, NewIdentity
(memoryAddress_MA)
3 memorySize_MS (memorySize_MS) 0x00, NewIdentity
(53) dataFormatIdentifier(DFI)
The parameter DataFormatIdentifier is used to define the logical marker of data to download or the compression
method and the encryption method of the data to send.
Transfer Response Parameters Download (yy)

0 RDPR Bitfield (RDPR_Bitfield) HexDump Field 1 Byte
0-3 RESERVE_2 (RESERVE_2) 0x00, NewIdentity 1
4-7 LFID (LFID) 0x01, NewIdentity 1
1 MNROB (MNROB) 0x00, NewIdentity
Data RQ (vv)
0 BlockSequenceCounter_2 (BSC), see HEX_8Bits
(54)
1- Request TransferData EPF_STRUCT_TRPR
[1..4093] (Request_TransferData)
56
(54) BlockSequenceCounter_2
BlockSequenceCounter is a cyclic running counter which allows us to follow the catenation of consecutive TD
PR (uu)
(55)
1- Response TransferData EPF_STRUCT_TRPR
[1..4093] (Response_TransferData)
Request Download
(IMLOIF)
0x70 uploadDownloadNotAccepted (UDNA) see page 166
(SFNSIAS)
(SNSIAS)
Transfer Data
(IMLOIF)
0x21 busyRepeatRequest (BRR) see page 164
0x71 transferDataSuspended (TDS) see page 166
0x73 wrongBlockSequenceCounter (WBSC) see page 166
(SFNSIAS)
0x92 voltageTooHigh (VTH) see page 168
0x93 voltageTooLow (VTL) see page 168
Request Transfer Exit

(SFNSIAS)
10.1.8 Routine Control (Routine_Control)

This diagnostic class contains Routines
57
(Powerlatch_Information_Positioning_PIP)
PIP: Requirements associated to this routine are described in DC_TI_707 "TS Electronic integration and putting ECUs into
operation".
Identifier: RID ($0400)

Start (Start) ($31) RoutineControl - Start routine (RC_STR), see 31 01 04 00 71 01 04 00 zz
page 161. ww
Results (Results) ($31) RoutineControl - Request routine results 31 03 04 00 71 03 04 00 zz
(RC_RRR), see page 160. yy
Input Parameters Start Routine (ww)

no data assigned
Routine Output Parameters (zz)

0 RoutineStatusRecord 01_02 routineInfo(01-02)_ENUM 8bits
(RoutineStatusRecord_01_02), see
(56)
(56) RoutineStatusRecord 01_02
PIP: See requirements §5.4.4 in DC_TI_707 for this generic routine.
Input Parameters Routine Results (yy)

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
Results
(IMLOIF)
(SFNSIAS)
58
(SNSIAS)
10.1.8.2 XCALL_DRIVING ($0600) (XCALL_DRIVING)

page 161. ww

0 CANCEL_ACALL_1 (CANCEL_ACALL) ENUM_1_33
[Data] Diag command to cancel a aCall
procedure
1 CANCEL_ECALL_1 (CANCEL_ECALL) ENUM_1_30(1)
[Data] Command to cancel a eCall
procedure
2 CON_ECALL_TEST_NUMB_1 ENUM_1_30(1)
(CON_ECALL_TEST_NUMB)
[Data] Command to configure the test
number
3 ECALL_LOG_LIST_SIZE_1 ENUM_1_30(1)
(ECALL_LOG_LIST_SIZE), see (57)
4 ENTER_TEST_ECALL_1 ENUM_1_30(1)
(ENTER_TEST_ECALL)
[Data] Command to enter a diagnostic test
ecall procedure
5 EXIT_TEST_ECALL_1 ENUM_1_30(1)
(EXIT_TEST_ECALL)
[Data] Command to exit a diagnostic test
ecall procedure
6 MAN_SIM_PROFILE_SWAP_1 ENUM_1_30(1)
(MAN_SIM_PROFILE_SWAP)
[Data] Manage Swap SIM profil
7 SIM_PROFILE_SWAP_1 ENUM_1_30(1)
(SIM_PROFILE_SWAP)
[Data] Swap SIM profil
0 SET_ROLLOVER_ANGLE_1 ENUM_1_30
(SET_ROLLOVER_ANGLE)
[Data] Set the rollover angle
1-2 INHIBIT_OTHER_SERVIC_1 ENUM_2_9
(INHIBIT_OTHER_SERVIC)
[Data] Command to desactivate all other
service than xCall
3 INHIBIT_XCALL_1 (INHIBIT_XCALL) ENUM_1_30
[Data] Command to desactivate the xCall
feature
4-5 (reserved)
6 READ_DATA_ECALL_LOG_1 ENUM_1_30(1)
(READ_DATA_ECALL_LOG)
59
[Data] Command to read the content of
data eCall log file
7 READ_EVENT_ECALL_LOG_1 ENUM_1_30(1)
(READ_EVENT_ECALL_LOG)
event eCall log file
0-3 (reserved)
4 TEST_ECALL_LED_1 ENUM_1_33(2)
(TEST_ECALL_LED)
[Data] Diag command to switch on
the eCall state LED
5 RESET_ECALL_PUSH_FLAG_1 ENUM_1_33(2)
(RESET_ECALL_PUSH_FLAG)
[Data] RC to reset eCall button flag
6 RESET_ACALL_PUSH_FLAG_1 ENUM_1_33(2)
(RESET_ACALL_PUSH_FLAG)
7 TEST_DYSFUNCTION_LED_1 ENUM_1_33(2)
(TEST_DYSFUNCTION_LED)
the dysfunction LED
(57) ECALL_LOG_LIST_SIZE_1
[Data] Command to read the size of the list of Data eCall log file

0 RoutineStatusRecord EtatRoutine 4_2 ENUM_8Bits (v5)
(RSR_ER_4)
Indique l'état réel de la routine

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
Results
(IMLOIF)
60
(SFNSIAS)
(SNSIAS)
10.1.8.3 GNSS_DRIVING ($0601) (GNSS_DRIVING)

page 161. ww

0-5 (reserved)
6 PERF_GNSS_COLD_START_1 ENUM_1_30(1)
(PERF_GNSS_COLD_START)
[Data] Erase GNSS data
7 MAX_SAT_VISIBLE_RES_1 ENUM_1_30(1)
(MAX_SAT_VISIBLE_RES)
[Data] Reset of number of max satellite

(RSR_ER_4)

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
61
Results
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.8.4 DIAG_INSTALL ($0602) (DIAG_INSTALL)

page 161. ww

no data assigned

(RSR_ER_4)

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
Results
62
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.8.5 MASCOM Test (MTEST) ($0701) (MASCOM_Test_MTEST)

See requirements: 02013_18_00051 for more information ( BSRF UDS_TEST_MASCOM ).

page 161. ww

no data assigned

0 Table_0701_RoutinePosRep RoutineStatusRecord 01_02_03_4
(Table_0701_RoutinePosRep)
1 Table_0701_RoutinePosRep_ROW Table_0701_RoutinePosRep
(Table_0701_RoutinePosRep_ROW)
See 02013_18_00051

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
Results
63
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.8.6 erase Memory (EM) ($FF00) (erase_Memory_EM)

StartRoutine
Identifier: RID ($FF00)

Start (Start) ($31) RoutineControl - Start routine (RC_STR), see 31 01 FF 00 71 01 FF 00
see (58) page 161. ww zz
Results (Results) ($31) RoutineControl - Request routine results 31 03 FF 00 71 03 FF 00
see (59) (RC_RRR), see page 160. yy zz
(58) Start
Requirements associated to this service are described in DC_TI_705_TS Reprogrammation ECU in paragraph
5.1.9.Erasing Flash.
(59) Results

0 routineControlOptionRecord FF00 routineControlOption(81-82)_ENUM(8bits)
(routineControlOptionRecord_FF0
0)
1-2 RCEOR_SGN_OTL (RCEOR_SGN_OTL) 0xF05A, HEX 2 bytes Unsigned

0 routineInfo FF00 (routineInfo_FF00) ENUM_8bits_routineInfo(01-02)_1

no data assigned
Start
(IMLOIF)
64
(SFNSIAS)
(SNSIAS)
Results
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.8.7 check Memory (CM) ($FF04) (check_Memory_CM)

(60) Start
5.1.12.Programmation checking.
(61) Results

no data assigned

0 routineInfo FF04 (routineInfo_FF04) ENUM 8bits_routineInfo(01_02_03)_1
1 routineStatusRecord Routine_Table_FF04_Routine_Response
(routineStatusRecord)

no data assigned
Start
(IMLOIF)
65
(SFNSIAS)
(SNSIAS)
Results
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.1.9 Tester Present (TesterPresent)

See requirements §5.1.1.9 and §5.1.2.5 in the DC_TI_702 "TS UDS Generic Mechanisms".
This service is used to keep one or multiple servers (Functional Request) in a current diagnostic session.
If the client sends $3E $80 (SPRMIB=true), no positive(s) response(s) will be sent by serveur(s).

Send (Send) ($3E) TesterPresent (TP) (TP), see page 163. 3E 00 7E 00
10.2 BSRF (BSRF)

No changes documented.
10.2.1 Sessions (Sessions)

This Diagnostic Class is describing the use case of the Session Management.
- This service permit to change active session in the server.
- See requirements §5.1.1.5, §5.1.1.6 and §5.1.2.1 in DC_TI_702_TS "UDS Generic Mechanisms".
10.2.1.1 ProgrammingSession (PRGS) ($02) (ProgrammingSession_PRGS)

Requirements associated to this session (PRGS) are described in the DC_TI_705 "TS Reprogrammation ECU".
This optional session (PRGS) enables all services required to flash the memory of a server by the repairman (Aftersales workshop
or Factories).

page 154.
Control
(IMLOIF)
66
10.2.1.2 defaultSession (DS) ($01) (defaultSession_DS)
The mandatory defaultSession (DS) is the session by default of server and it does not need to maintain communication to keep the
session active.

page 154.
Control
(IMLOIF)
10.2.1.3 extendedDiagnosticSession (EXTDS) ($03) (extendedDiagnosticSession_EXTDS)

This mandatory session ( EXTDS ) authorizes or not , access to diagnostic services when the repairman is near the vehicle
(Aftersales workshop or Factories).

page 154.
Control
(IMLOIF)
10.2.1.4 distantVehicleAccessSession (DVAS) ($50)

(distantVehicleAccessSession_DVAS)
This mandatory session (DVAS), authorize or not, the access to the diagnostic services when the repairman is not in the presence
of the vehicle (Télédiag).

page 154.
Control
(IMLOIF)
10.2.2 Security Access (SecurityAccess)

This diagnostic class contains the services related to security access
67
10.2.2.1 Programming Request Seed (PRSD) ($01) (Programming_Request_Seed_PRSD)
PRSD: Seed request for programming

(SecurityAccess)
see (62)
(62) SecurityAccess
Key (xx)
no data assigned
Seed (zz)
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Programming_Request_Seed_PRSD_Key)
PRSD: Sending the key for programming

(SecurityAccess)
68
see (63)
(63) SecurityAccess
Key (xx)
Seed (zz)
no data assigned
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.2.3 Variant Coding Request Seed (VCRSD) ($03)

(Variant_Coding_Request_Seed_VCRSD)
VCRSD: Seed request for variant coding (Télécodage).

(SecurityAccess)
Key (xx)
no data assigned
Seed (zz)
69
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Variant_Coding_Request_Seed_VCRSD_Key)
VCRSD: Sending the key for variant coding (Télécodage).

(SecurityAccess)
Key (xx)
y1)
y2)
y3)
y4)
Seed (zz)
no data assigned
SecurityAccess
(IMLOIF)
70
(SFNSIAS)
(SNSIAS)

(Unlocking_Control_Request_Seed_UCRSD)
(SecurityAccess)
Key (xx)
no data assigned
Seed (zz)
1)
2)
3)
4)
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Unlocking_Control_Request_Seed_UCRSD_Key)
71
(SecurityAccess)
Key (xx)
_Key1)
_Key2)
_Key3)
_Key4)
Seed (zz)
no data assigned
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Unlocking_Engineering_Control_Request_Seed_UECRSD)
(SecurityAccess)
Key (xx)
no data assigned
Seed (zz)
Seed1
Request_Seed1)
Seed2
Request_Seed2)
72
Seed3
Request_Seed3)
Seed4
Request_Seed4)
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Unlocking_Engineering_Control_Request_Seed_UECRSD_Key)
(SecurityAccess)
Key (xx)
Seed Key1
Request_Seed_Key1)
Seed Key2
Request_Seed_Key2)
Seed Key3
Request_Seed_Key3)
Seed Key4
Request_Seed_Key4)
Seed (zz)
no data assigned
SecurityAccess
73
(IMLOIF)
(SFNSIAS)
(SNSIAS)

(Unlocking_eSA_Control_Request_Seed_eSACRSD)

(SecurityAccess)
Key (xx)
no data assigned
Seed (zz)
Seed1)
See 02013_18_00051
Seed2)
See 02013_18_00051
Seed3)
See 02013_18_00051
Seed4)
See 02013_18_00051
SecurityAccess
(IMLOIF)
(SFNSIAS)
74
(SNSIAS)

(Unlocking_eSA_Control_Request_Seed_eSACRSD_Key)
Subfunction: Type ($0A)

SecurityAccess ($27) SecurityAccess (SA) (SA_RS), see page 159. 27 0A xx 67 0A zz
(SecurityAccess)
Key (xx)
Key1
Seed_Key1)
See 02013_18_00051
Key2
Seed_Key2)
See 02013_18_00051
Key3
Seed_Key3)
See 02013_18_00051
Key4
Seed_Key4)
See 02013_18_00051
Seed (zz)
no data assigned
SecurityAccess
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.3 Ecu Reset (EcuReset)

This diagnostic class contains the ECUReset functionality.
The supplier shall precise the time to execute each type of reset below. Because the whole reset will be potentially used in factory
(Impacts PSA Methods).
75
10.2.3.1 hardReset (HR) ($01) (hardReset_HR)
HR: This value identifies a "hard reset" condition which simulates the power-on / startup sequence typically performed after an ECU
has been previously disconnected from its power supply (i.e. battery). The volatile memory (Internal RAM, External RAM and the
Protected RAM) is re-initialized to pre-determined values.

ECUReset
(IMLOIF)
10.2.3.2 keyOffOnReset (KOFFONR) ($02) (keyOffOnReset_KOFFONR)

KOFFONR: This value (0x02) identifies a condition similar to the driver turning the ignition key off and back on. This reset condition
should simulate a key-off-on sequence (i.e. interrupting the switched power supply).

ECUReset
(IMLOIF)
10.2.3.3 softReset (SR) ($03) (softReset_SR)

SR: This mandatory value (0x03) identifies a "soft reset" condition, which causes the server to immediately restart the application
program if applicable.

ECUReset
(IMLOIF)
10.2.4 Identification Parameters (Identification_Parameters)

This diagnostic class contains the generic parameters supported by all servers (functionnal request possible).
- The parameters of the tracability are exploited by the supplier factory (ECU serial number, date,...) or PSA factory (PSA Part-
Numbers, ...) and AfterSale tools.
- The main management of PSA Authentification/Identification parameters are defined in the DC_TI_706 technical specification.
76
- etc...
10.2.4.1 Power Latch Flag State (PLFS) ($0100) (Power_Latch_Flag_State_PLFS)

PLFS: Requirements associated to this parameter are described in DC_TI_707 "TS Electronic integration and putting ECUs into
operation".

request
response
Overview -)
DataRecord (zz)
0 PowerLatchFlagState_PLFS ENUM_8Bits_NotRealized_Realized
(PowerLatchFlagState_PLFS), see
(64)
(64) PowerLatchFlagState_PLFS
PLFS: See requirements §5.4.4 in DC_TI_707 "TS Electronic integration and putting ECUs into operation" for this
generic parameter.
Read
(IMLOIF)

(Size_Of_ECU_Serial_Number_Data_Identifier_SOECUSNDID)
SOECUSNDID: See requierements §5.2.1.3.1 in DC_TI_702 'TS UDS Generic Mechanisms paragraph".
This generic parameter should indicate the size of serial number from 0xF18C ECUSNDID.
Identifier: Identifier ($0D01)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 0D 01 62 0D 01 zz
request
response
Overview -)
DataRecord (zz)
0 SizeOfECUSerialNumberDataIdentifier UNM_8Bits
(SOECUSNDID)
(SizeOfECUSerialNumberDataIdent
ifier_SOECUSNDID), see (65)
(65) SizeOfECUSerialNumberDataIdentifier (SOECUSNDID)
77
SOECUSNDID: This generic parameter should indicate the size of serial number from $F18C ECUSNDID. See
requierements §5.2.1.3.1 in DC_TI_702 'TS UDS Generic Mechanisms paragraph".
Read
(IMLOIF)
10.2.4.3 Variant coding possibilities ($2100) (Variant_coding_possibilities)

see (66) 158.
request
response
Overview -)
(66) Read
(paragraph 5.1.1).
DataRecord (zz)
0 ID_TLC (ID_TLC) Default: 0x00, Hex 1 Byte
0-8 MDS BRO FM BAND ACT PO HEXADECIMAL_9_1(1)
(MDS_BRO_FM_BAND_ACT_PO)
(US) Possible
10 MDS BROADCAST FM2 ANTENN PO HEXADECIMAL_1_1(2)
(MDS_BROADCAST_FM2_ANTENN_PO)
11 MDS BRO RAD XM BAND ACT PO HEXADECIMAL_1_1(2)
(MDS_BRO_RAD_XM_BAND_ACT_PO)
PARAMETER (EUROPE VS US) Possible
12 MDS BRO CDR BAND ACT PO HEXADECIMAL_1_1(2)
(MDS_BRO_CDR_BAND_ACT_PO), see
(67)
13 - 14 MDS BRO FM DEEPHASIS PO HEXADECIMAL_2_1(1)
(MDS_BRO_FM_DEEPHASIS_PO), see
(68)
15 - 23 MDS BRO AM BAND ACT PO HEXADECIMAL_9_1(1)
(MDS_BRO_AM_BAND_ACT_PO), see
(69)
24 - 25 MDS BRO PRESET BANK PO HEXADECIMAL_2_1(1)
(MDS_BRO_PRESET_BANK_PO)
ACTIVATION Possible
26 - 28 MDS BRO HANDOVER PO HEXADECIMAL_3_1(1)
78
(MDS_BRO_HANDOVER_PO), see (70)
29 MDS BRO HDR BAND ACT PO HEXADECIMAL_1_1(1)
(MDS_BRO_HDR_BAND_ACT_PO)
Possible
30 - 39 MDS XCALL VEHICLE PROPUL PO HEXADECIMAL_10_1(1)
(MDS_XCALL_VEHICLE_PROPUL_PO)
(GASOLINE / DIESEL...) Possible
40 MDS BRO DRM BAND ACT PO HEXADECIMAL_1_1(1)
(MDS_BRO_DRM_BAND_ACT_PO)
RUSSIA) Possible
41 - 55 MDS XCALL VEHICLE TYPE PO HEXADECIMAL_15_1(1)
(MDS_XCALL_VEHICLE_TYPE_PO), see
(71)
56 - 63 MDS BRO DIGITAL BAND ACT PO HEXADECIMAL_8_1(1)
(MDS_BRO_DIGITAL_BAND_ACT_PO),
see (72)
64 - 79 MDS ECALL TYPE EMERG PO HEX_16Bits (v1)
(MDS_ECALL_TYPE_EMERG_PO)
80 - 95 MDS ACALL TYPE PO HEX_16Bits (v1)
(MDS_ACALL_TYPE_PO)
13 Number of coding HEX_8Bits (v1) 1(1)
(Number_of_coding)
(67) MDS BRO CDR BAND ACT PO
[VariantCoding] CDR ACTIVATION (CHINA)
Possible
(68) MDS BRO FM DEEPHASIS PO
[VariantCoding] DEEMPHASIS PARAMETER (EUROPE VS US)
Possible
(69) MDS BRO AM BAND ACT PO
[VariantCoding] AM RADIO ACTIVATION AND FREQUENCY RANGE SELECTION Possible
(70) MDS BRO HANDOVER PO
[VariantCoding] HANDOVER CONFIGURATION (JUMP FM / DAB) Possible
(71) MDS XCALL VEHICLE TYPE PO
[VariantCoding] CATEGORY OF VEHICLE (PASSENGER CAR / LIGHT CARGO VEHICLE...) Possible
(72) MDS BRO DIGITAL BAND ACT PO
[VariantCoding] DIGITAL RADIO ACTIVATION AND AREA SELECTION Possible
Read
(IMLOIF)
10.2.4.4 Variant coding programmed ($2101) (Variant_coding_programmed)

see (73) 158.
79
see (74) 160.
(73) Read
(paragraph 5.1.1).
(74) Write
(paragraph 5.1.1). Security Access to be used for data writing is specific for variant coding and different from the one
used for reprogramming.
DataRecord (zz)
0 ID_TLC_UDS (ID_TLC_UDS) 0x00, NewIdentity 8
0-8 MDS _BRO FM BAND ACT _000_1 Default: 0x04 (TBL4_87.5 - 108.0 kHz (A:100k)
(F6S_MDS_BRO_FM_BAND_ACT_000), Europe / Arabia = Africa / Asia +China),
see (75) ENUM_9bits_2
10 MDS _BROADCAST FM2 Default: 0x01 (2 connected antenna (internal +
ANTENN_000_1 external)), ENUM_1bit_4
(F8Z_MDS_BROADCAST_FM2_ANTENN_0
00), see (76)
11 MDS _BRO RAD XM BAND ACT Default: 0x00 (Disable), ENUM_1bit_3
_000_1
(F6Z_MDS_BRO_RAD_XM_BAND_ACT_00
0)
(US)
12 MDS _BRO CDR BAND ACT _000_1 Default: 0x00 (Disable), ENUM_1bit_2
(F6X_MDS_BRO_CDR_BAND_ACT_000)
[VariantCoding] CDR ACTIVATION
(CHINA)
13 - 14 MDS _BRO FM DEEMPHASIS _000_1 Default: 0x00 (50 us (except US)), ENUM_2bits_1
(F6U_MDS_BRO_FM_DEEMPHASIS_000)
PARAMETER (EUROPE VS US)
15 - 23 MDS _BRO AM BAND ACT _000_1 Default: 0x03 (TBL3_531 - 1629 kHz (A:9k) MW :
(F6T_MDS_BRO_AM_BAND_ACT_000), Europe (MW only)), ENUM_9bits_1
see (77)
24 - 25 MDS _BRO PRESET BANK _000_1 Default: 0x00 (24 Mixed preset list AM/FM/DAB or
(F6V_MDS_BRO_PRESET_BANK_000) AM/FM (except China)), ENUM_2bits
ACTIVATION
26 - 28 MDS _BRO HANDOVER _000_1 Default: 0x02 (Jump without synchronization),
(F6P_MDS_BRO_HANDOVER_000) ENUM_3bits
[VariantCoding] HANDOVER
CONFIGURATION (JUMP FM / DAB)
29 MDS _BRO HDR BAND ACT _000_1 Default: 0x00 (Disable), ENUM_1bit_1
(F6W_MDS_BRO_HDR_BAND_ACT_000)
30 - 39 MDS _XCALL VEHICLE Default: 0x00 (Undefined), ENUM_10bits
PROPUL_000_1
(F70_MDS_XCALL_VEHICLE_PROPUL_0
00)
(GASOLINE / DIESEL...)
80
40 MDS _BRO DRM BAND ACT _000_1 Default: 0x00 (Disable), ENUM_1bit
(F6Y_MDS_BRO_DRM_BAND_ACT_000)
RUSSIA)
41 - 55 MDS _XCALL VEHICLE TYPE _000_1 Default: 0x00 (Undefined), ENUM_15bits
(F71_MDS_XCALL_VEHICLE_TYPE_000
), see (78)
56 - 63 MDS _BRO DIGITAL BAND ACT_000_1 Default: 0x01 (Europe), ENUM_8bits
(F6R_MDS_BRO_DIGITAL_BAND_ACT_0
00)
[VariantCoding] DIGITAL RADIO
ACTIVATION AND AREA SELECTION
64 - 79 MDS _ECALL TYPE EMERG PR Default: 0xFFFF (Deactivated), ENUM_16bits_1
_000_1
(F7Z_MDS_ECALL_TYPE_EMERG_PR_00
0)
[VariantCoding] TYPE OF EMERGENCY
CALL DEFINE BY COUNTRY
80 - 95 MDS _ACALL TYPE PR _000_1 Default: 0xFFFF (Deactivated), ENUM_16bits
(F85_MDS_ACALL_TYPE_PR_000)
[VariantCoding] TYPE OF ASSISTANCE
CALL
(75) MDS _BRO FM BAND ACT _000_1
[VariantCoding] FM RADIO ACTIVATION AND FREQUENCY RANGE SELECTION
(76) MDS _BROADCAST FM2 ANTENN_000_1
[VariantCoding] ACTIVATION OR DEACTIVATION OF THE FM2 ANTENNA
(77) MDS _BRO AM BAND ACT _000_1
[VariantCoding] AM RADIO ACTIVATION AND FREQUENCY RANGE SELECTION
(78) MDS _XCALL VEHICLE TYPE _000_1
[VariantCoding] CATEGORY OF VEHICLE (PASSENGER CAR / LIGHT CARGO VEHICLE...)
Read
(IMLOIF)
Write
(IMLOIF)
(SNSIAS)
10.2.4.5 Size For Multi DID (SFMDID) ($C002) (Size_For_Multi_DID_SFMDID)

SFMDID: This generic parameter indicate the buffer size of diag communication ( x Bytes max ?).
Identifier: Identifier ($C002)

81
Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 C0 02 62 C0 02 zz
request
response
Overview -)
DataRecord (zz)
0-1 SIZE multi DID (SFMDID) UNM_16Bits
(SIZE_multi_DID_SFMDID), see (79)
(79) SIZE multi DID (SFMDID)
SFMDID: See requierements §5.2.1.3.9 int the DC_TI_702. This generic parameter indicate the buffer size of diag
communication ( x Bytes max ?).
Read
(IMLOIF)

(eCALL_RegulationXSofWareIdentificationNumber_eCALL_RxSWIN)
eCALL_RxSWIN: Regulation PE112 for ecall function. >>> BSRF + BTA

request
response
Overview -)
DataRecord (zz)
0 - 15 eCALL Homologation Reference Default: ????????????????,
(eCALL_RxSWIN) ASCII_128Bits_eCALL_RxSWIN_1
(eCALL_Homologation_Reference_e
CALL_RxSWIN)
eCALL_RxSWIN: eCALL Homologation
Reference.
Read
(IMLOIF)
82
(OTA_RegulationXSofWareIdentificationNumber_OTA_RxSWIN)
OTA_RxSWIN: Regulation for OTA function.
Reqest Functionnal .>>> IVI + BSRF + BTA + SDCM

request
response
Overview -)
DataRecord (zz)
0 - 15 OTA Homologation Reference Default: ????????????????,
(OTA_RxSWIN) ASCII_128Bits_OTA_RxSWIN_1
(OTA_Homologation_Reference_OTA
_RxSWIN)
Reference
Read
(IMLOIF)
10.2.4.8 MASCOM Key Status (DMKEYS) ($F015) (MASCOM_Key_Status_DMKEYS)

See requirements: 02013_18_00051 for more information ( VSM or BSRF DID_PSK_STATE ).

request
response
Overview -)
DataRecord (zz)
0-3 Operation ID (Operation_ID) Default: 4294967295, HEX_32Bits_1
See 02013_18_00051
4 Day (Day) Default: 1, BCD_8bits_Date_day
See 02013_18_00051
5 Month (Month) Default: 1, BCD_8bits_Date_month
See 02013_18_00051
6 Year (Year) Default: 1, BCD_8bits_Date_year
See 02013_18_00051
83
7 Hour (Hour) Default: 1, BCD_8bits_Hour_1
See 02013_18_00051
8 Minute (Minute) Default: 1, BCD_8bits_Minute_1
See 02013_18_00051
Read
(IMLOIF)
10.2.4.9 Authentification Zone (ZA) ($F080) (Authentification_Zone_ZA)

ZA: The rules of "Zone Authentification" management are defined by the PSA project for each ECU (MCxx departments).
The rules are definied in the CSEO_CLCO08_0628 for ECU Powertrain and Chassiis (Internal document / MCDV department).
For ECU Body, the rules are defined by MSCI department.

request
response
Overview -)
DataRecord (zz)
0-4 Functionnal Plan Number (FPN) BCD_40Bits_PSA Part Number Format
(Functionnal_Plan_Number_FPN)
PSA project (MCxx).
5-6 PSA Supplier Code ZA ENUM_16Bits_PSA Supplier Code
(PSA_Supplier_Code_ZA), see (80)
7 - 11 Product Number (FPRN) BCD_40Bits_PSA Part Number Format
(Product_Number_FPRN)
PSA project (MCxx).
12 Software evolution index - High-order Default: 0xFF, Hex 1 Byte
(MSB)
(Software_evolution_index_High_
order_MSB)
$F0FE not present).
13 Software evolution index - Low-order Default: 0xFF, Hex 1 Byte
(LSB)
(Software_evolution_index_Low_o
rder_LSB)
$F0FE not present).
14 Reserved - High-order (MSB) 0xFF, Hex 1 Byte
(Reserved_High_order_MSB)
Not used.
84
15 Reserved - Low-order (LSB) 0xFF, Hex 1 Byte
(Reserved_Low_order_LSB)
Not used.
16 Diag Frame Evolution Index (DFEI) Default: 0xFF (Not used), Diag Frame Evolution
(Diag_Frame_Evolution_Index_DFE Index_1byte
I)
17 No. of Parameters Associated to the Default: 0x01 (Codification ISO 15031-6, 1
Faults parameter associated at default ), Number of
(No_of_Parameters_Associated_to associated parameters at default (1 byte)
_the_Faults)
18 - 21 Reserved (Reserved), see (81) 0xFFFFFFFF, HexDump (4 Byte)
(80) PSA Supplier Code ZA

Supplier code defined by PSA project MCxx (PSA Internal document: AEEV_MTS07_0040).
(81) Reserved
Not used. Old Diagnostic messaging Number (ECU Body Domain only). See reference available in PSA data
base (D2 Center).
Read
(IMLOIF)

(Identification_Zone_for_Downloadable_ECU_ZI)
ZI: The rules of "Zone Identification" management are defined by the PSA project (MCxx) for each ECU.
For ECU Powertrain and Chassiis, the rules are definied in the CSEO_CLCO08_0628 (Internal document / MCDV department).
For ECU Body, the rules are defined by MSCI department for each ECU.
Identifier: Identifier ($F0FE)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 F0 FE 62 F0 FE zz
request
response
Overview -)
DataRecord (zz)
0-1 (reserved)
2-3 (reserved)
4 PSA Supplier Code ZI PSA SupplierCode ENUM 8bits
(PSA_Supplier_Code_ZI), see (82)
5 Code system du calculateur SYSTEM - HEX 1 byte
(Code_system_du_calculateur)
(ECUMDDID_DAY)
_DAY)
(ECUMDDID_MONTH)
85
ID_MONTH)
(ECUMDDID_YEAR)
D_YEAR)
9 Application (Application) Hex 1 Byte
Identifies the type of application
10 Software Version Hex 1 Byte
(Software_Version)
Identifies the software or calibration
version
11 - 12 Software Edition Hex 2 Bytes
(Software_Edition), see (83)
13 Download Date Day Default: 1, BCD_8bits_Date_day
(Download_Date_Day)
14 Download Date Month Default: 1, BCD_8bits_Date_month
(Download_Date_Month)
15 Download Date Year Default: 1, BCD_8bits_Date_year
(Download_Date_Year)
16 Downloading site ENUM_8Bits_Data_Site_1
(Downloading_site)
17 - 19 Downloading Tool Signature (DTS) ENUM_24Bits_Tool_signature_1
(Downloading_Tool_Signature_DTS
)
20 Downloading Number (DS) Hex 1 Byte
(Downloading_Number_DS)
21 - 23 Software Reference (".ulp" or ".cal" file PSA ULP or CAL Number (3 bytes)
number) in BCD
(Software_Reference_ulp_or_cal_
file_number_in_BCD), see (84)
(82) PSA Supplier Code ZI
Defined by PSA project (MCxx: PSA Internal document: AEEV_MTS07_0040).
(83) Software Edition
Modification state of the software or of the calibration of the ECU
(84) Software Reference (".ulp" or ".cal" file number) in BCD
Reference of file ".ULP" or ".CAL" define by PSA procject (MCxx).
Read
(IMLOIF)

(Boot_Software_Identification_Data_Identifier_BSIDID)
BSIDID: The boot sofware is not programming by PSA client (diag tool). This DID is not mandatory (User Option with supplier).
Requirements associated to this service are described in DC_TI_702_TS UDS Generic Mechanisms paragraph 5.2.1.3.3.

158.
86
see (85)
request
response
Overview -)
(85) Read
BSIDID: The boot sofware is not programming by PSA client (diag tool). This DID is not mandatory (User Option with
supplier).
5.2.1.3.3.
DataRecord (zz)
0 NumberOfModule (NOM) Default: 0x01 (1), UNM_8Bits(1)
(NumberOfModule_NOM)
NOM
1 - 10 BootSoftwareIdentificationNumber BCD_80Bits_PSA Part Number Format_1
(BSIN)
(BootSoftwareIdentificationNumb
er_BSIN), see (86)
11 BootVersion (BV) (BootVersion_BV) Default: 255, HEX_8Bits
BV
12 BootEdition (BE) (BootEdition_BE) Default: 255, HEX_8Bits
BE
(86) BootSoftwareIdentificationNumber (BSIN)
This PSA P/N for Boot SW identification is not mandatory.
PSA P/N defined and rules by PSA project (MCxx).
If not used, default value is 01.

(Active_Diagnostic_Session_Data_Identifier_ADSDID)
ADSDID: Requirements associated to this service are described in DC_TI_702_TS UDS Generic Mechanisms paragraph 5.2.1.3.2.

request
response
Overview -)
DataRecord (zz)
0 diagnosticSessionType (LEV_DS_) VV_PSAdiagnosticSessionType_1
(diagnosticSessionType_LEV_DS)
ADSDID
Read
(IMLOIF)
87

(ECU_Manufacturing_Date_Data_Identifier_ECUMDDID)
ECUMDDID: The date of manufacture is returned to the client on 3 bytes in the direction Day, Month, Year.
See pargraph 5.2.1.3.1 in the DC_TI_702.
Identifier: Identifier ($F18B)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 F1 8B 62 F1 8B zz
request
response
Overview -)
DataRecord (zz)
(ECUMDDID_DAY)
_DAY)
ECUMDDID_DAY
(ECUMDDID_MONTH)
ID_MONTH)
ECUMDDID_MONTH
(ECUMDDID_YEAR)
D_YEAR)
ECUMDDID_YEAR
Read
(IMLOIF)

(ECU_Serial_Number_Data_Identifier_ECUSNDID)
ECUSNDID: This value shall be used to reference the ECU (Server) serial number.
This factory supplier serial number size should be less than or equals 20 characters (ASCII) to remain compatible with PSA
database (factory and after-sales). ASCII characters " & < > | " not autorized and default value " ? ". See pargraph 5.2.1.3.1 in the
DC_TI_702.
Identifier: Identifier ($F18C)

Read (Read) ($22) ReadDataByIdentifier (RDBI) (RDBI), see page 22 F1 8C 62 F1 8C zz
request
response
88
Overview -)
DataRecord (zz)
0 - [0..31] ECUSerialNumber ASCII_ECUSerialNumber
(ECUSerialNumber), see (87)
(87) ECUSerialNumber
20 max with ASCII characters " & < > | " not autorized and default value " ? ".
Read
(IMLOIF)
10.2.4.15 VIN Data Identifier (VINDID) ($F190) (VIN_Data_Identifier_VINDID)

See requirements described in the DC_TI_704 "OBD" and §5.2.1.3.7.on DC_TI_702_TS "UDS". A vehicle identification number is
writed by manufacturer client (F190: VIN DataIdentifier) in the Body Control Module. Regulatory Format ASCII 17 Bytes and Defaut
value [?]. This operation is made at the PSA terminal factory. The same reading of the VIN data must be displayed with regulatory
tool for inspection in Engine Control Module (Mode 09 / CMM) or PSA manufacturer client for maintenance in Body Control Module
(F190: VIN DataIdentifier / BSI ).

see (88) 158.
request
response
Overview -)
Write (Write) ($2E) WriteDataByIdentifier (WDBI) (WDBI), see page 2E F1 90 zz 6E F1 90
see (89) 160.
(88) Read
(89) Write
DataRecord (zz)
0 - 16 VehicleInformationNumber (VIN) DIDF802_F190_INTPY02_VIN_1
(VehicleInformationNumber_VIN),
see (90)
(90) VehicleInformationNumber (VIN)
VIN: Defaut value [?]. See DC_TI_704 "OBD" and §5.2.1.3.7.on DC_TI_702 "UDS".
89
10.2.5 Engineering Datas (Engineering_Datas)
This diagnostic class contains the specific datas supported by the server (Physical request only).
This datas are defined by PSA manufacturer or supplier (Example: Specific datas for Engine Control Module).
10.2.5.1 CAL_Fct_LIFECYCLE ($0101) (CAL_Fct_LIFECYCLE)

request
response
Overview -)
160.
Data (zz)
profile 1 (min)
profile 2 (min)
profile 3 (min)
profile 4 (min)
8-9 SWM_PMA_INAC_TIME_P1_1 Default: 0x00, HEXADECIMAL_16_1
90
20 - 21 SWM_PMD_ALL_TIME_P1_1 Default: 0x02D0, HEXADECIMAL_16_1
profile 1 (min)
22 - 23 SWM_PMD_ALL_TIME_P2_1 Default: 0x7BC0, HEXADECIMAL_16_1
profile 2 (min)
profile 3 (min)
profile 4 (min)
30 - 31 SWM_PMD_INAC_TIME_P2_1 Default: 0x05A0, HEXADECIMAL_16_1
0-5 (reserved)
6 SWM_SERVICE_ACT_2 Default: 0x01 (Enable), ENUM_1_33
(SWM_SERVICE_ACT), see (99)
7 PARK_MODE_LOCK_ACT_1 Default: 0x00 (Forced), ENUM_1_32
(PARK_MODE_LOCK_ACT), see (100)
41 THER_MITI_HYST_RAP_1 Default: 0x55, HEXADECIMAL_8_1
(THER_MITI_HYST_RAP)
[Data] Hysteresis value for the RAP
42 THER_MITI_TEMP_RAP1_1 Default: 0x5A, HEXADECIMAL_8_1
91
43 THER_MITI_TEMP_RAP2_1 Default: 0x5F, HEXADECIMAL_8_1
46 - 47 LC_TIMEOUT_BEF_SLEEP_1 Default: 0x05, HEXADECIMAL_16_1(1)
(LC_TIMEOUT_BEF_SLEEP), see (101)
(99) SWM_SERVICE_ACT_2
[Data] Activation or deactivation of the Service Watcher Mode services (BSRF is waked-up when the vehicle is
OFF)
(100) PARK_MODE_LOCK_ACT_1
[Data] Parc mode is lock before the reception in plant or after sales
(101) LC_TIMEOUT_BEF_SLEEP_1
[Data] Time out in “before sleep state” before ‘inactive state” for all application (min)
Read
(IMLOIF)
Write
(IMLOIF)
92
(SFNSIAS)
(SNSIAS)
10.2.5.2 CAL_Fct_POSITIONING ($0102) (CAL_Fct_POSITIONING)

request
response
Overview -)
160.
Data (zz)
0-3 GNSS_DATA_RATE_1 Default: 0x0A, HEXADECIMAL_4_Hertz_2
(GNSS_DATA_RATE)
[Data] Data output rate of GNSS receiver
4-7 GNSS_MIN_ELEVATION_1 Default: 0x05, HEXADECIMAL_4_Hertz_2
(GNSS_MIN_ELEVATION), see (102)
1 GNSS_TICKS_REVOL_1 Default: 0x62, HEXADECIMAL_8_1
(GNSS_TICKS_REVOL)
[Data] Number of ticks per circumference
2-3 GNSS_VHL_WIDTH_1 Default: 0x00, HEXADECIMAL_16_1
(GNSS_VHL_WIDTH)
[Data] Width between rear wheel
4-5 GNSS_WHEEL_DIAMETER_1 Default: 0x00, HEXADECIMAL_16_1
(GNSS_WHEEL_DIAMETER)
[Data] Diameter of the wheel
(102) GNSS_MIN_ELEVATION_1
[Data] Minimum elevation (cut-off angle) of navigation spacecraft
Read
(IMLOIF)
Write
(IMLOIF)
93
(SFNSIAS)
(SNSIAS)
10.2.5.3 CAL_Fct_CONNECT ($0104) (CAL_Fct_CONNECT)

request
response
Overview -)
160.
Data (zz)
0-3 CONNECT_WIFI_AP_DEV_1 Default: 0x09, HEXADECIMAL_4_3
(CONNECT_WIFI_AP_DEV)
[Data] Maximum number of Wifi Device
AP
4-6 BSRF_BRAND_CFG_1 Default: 0x00 (Undefined), ENUM_3_3
(BSRF_BRAND_CFG)
[Data] Brand of the vehicle
7 CONNECT_WIFI_ACT_1 Default: 0x00 (Enable), ENUM_1_30
(CONNECT_WIFI_ACT)
[Data] Activation or deactivation of the Wifi
Service
Read
(IMLOIF)
Write
(IMLOIF)
(SFNSIAS)
(SNSIAS)
94
10.2.5.4 CAL_Fct_BROADCAST ($0105) (CAL_Fct_BROADCAST)
request
response
Overview -)
160.
Data (zz)
0-3 BRO_FM_FOLLOW_ME_2 Default: 0x02 (Normal mode), ENUM_4_1(1)
(BRO_FM_FOLLOW_ME)
[Data] FM follow me configuration
(parasite filter)
4-7 (reserved)
0 BRO_RDS_ACT_2 (BRO_RDS_ACT) Default: 0x01 (Enable), ENUM_1_33
RDS
1 BRO_TA_ACT_2 (BRO_TA_ACT), see Default: 0x01 (Enable), ENUM_1_33
(103)
2-4 BRO_DAB_THRESHOLD_2 Default: 0x02 (High), ENUM_3_2 3
(BRO_DAB_THRESHOLD)
[Data] DAB quality criteria selection
5-7 BRO_FM_THRESHOLD_2 Default: 0x02 (High), ENUM_3_2 3
(BRO_FM_THRESHOLD)
[Data] FM quality criteria selection
0-2 BRO_AM_THRESHOLD_2 Default: 0x02 (High), ENUM_3_2 3
(BRO_AM_THRESHOLD)
[Data] AM quality criteria selection
3 BRO_DAB_ANNOUC_ACT_2 Default: 0x01 (Enable), ENUM_1_33
(BRO_DAB_ANNOUC_ACT)
DAB Announcement
0 BRO_FM2_ACT_PASSIVE_1 Default: 0x01 (Enable), ENUM_1_33
(BRO_FM2_ACT_PASSIVE)
[Data] FM2 active or passive
1 BRO_DAB_FOLLOWING_1 Default: 0x00 (Disable), ENUM_1_33
(BRO_DAB_FOLLOWING)
[Data] DAB follow me configuration
2-7 BRO_WSH_CONF_2 (BRO_WSH_CONF) Default: 0x00 (WSH deactivate), ENUM_6_1
[Data] FM sensibility parameter choice
(103) BRO_TA_ACT_2
[Data] Activation or deactivation of the Traffic Announcement
95
Read
(IMLOIF)
Write
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.5.5 CAL_Fct_ECALL_TYPE_EMERG_PR ($0106) (CAL_Fct_ECALL_TYPE_EMERG_PR)

request
response
Overview -)
160.
Data (zz)
0 (reserved)
1 AUTOMATIC_ECALL_ACTIVE_1 Default: 0x01 (Enable), ENUM_1_33
(AUTOMATIC_ECALL_ACTIVE)
[Data] Activation or Deactivation of
Automatic Ecall
2 ECALL_MAN_CAN_ACT_2 Default: 0x01 (Enable), ENUM_1_33
(ECALL_MAN_CAN_ACT)
[Data] Parameter to enable a manual
eCall cancellation
3 ECALL_MANUAL_ACT_2 Default: 0x01 (Enable), ENUM_1_33
(ECALL_MANUAL_ACT)
[Data] Parameter to enable the manual
eCall
4-7 ECALL_REG_ATTEMPTS_1 Default: 0x03, HEXADECIMAL_4_Hertz_2(1)
(ECALL_REG_ATTEMPTS), see (104)
96
0 (reserved)
1-3 XCALL_EELF_TRANSFER_2 Default: 0x01 (AUTO), ENUM_3_2(1)
(XCALL_EELF_TRANSFER), see (105)
4-7 ECALL_TRANS_ATTEMPTS_1 Default: 0x0A, HEXADECIMAL_4_Hertz_2(2)
(ECALL_TRANS_ATTEMPTS)
[Data] SMS transmission attempts
2 ECALL_TRANS_INTER_1 Default: 0x3C, HEXADECIMAL_8_1(3)
(ECALL_TRANS_INTER), see (106)
3 ECALL_CANCEL_TIME_1 Default: 0x04, HEXADECIMAL_8_1
(ECALL_CANCEL_TIME)
[Data] Manual eCall cancellation time
4-5 ECALL_CCFT_1 (ECALL_CCFT), see Default: 0x3C, HEXADECIMAL_16_1
(107)
6 - 21 ECALL_TEST_NUMBER_2 Default: 112 , ASCII_128_1
(ECALL_TEST_NUMBER)
[Data] Phone Number call during TEST
MODE
22 - 37 ECALL_NUMBER_1 (ECALL_NUMBER) Default: 112 , ASCII_128_1
[Data] Emergency call phone number
38 - 77 ECALL_FEEDBACK_TEST_NUMBER_1 Default: 0123456789 ,
(ECALL_FEEDBACK_TEST_NUMBER) ASCII_320_1
[Data] Feedback Number reach during
TEST MODE
78 - 93 ECALL_SMS_FALLBACK_N_1 Default: 0123456789 , ASCII_128_1
(ECALL_SMS_FALLBACK_N), see (108)
94 ECALL_AUTO_DIAL_ATT_1 Default: 0x0A, HEXADECIMAL_8_1
(ECALL_AUTO_DIAL_ATT)
[Data] Number of radial attempt
95 ECALL_DIAL_DURATION_1 Default: 0x05, HEXADECIMAL_8_1
(ECALL_DIAL_DURATION)
[Data] Maximum initial dial duration time
96 ECALL_MAN_DIAL_ATT_1 Default: 0x0A, HEXADECIMAL_8_1
(ECALL_MAN_DIAL_ATT)
[Data] Number of manual radial attempt
97 ECALL_P_TEST_REG_T_1 Default: 0x78, HEXADECIMAL_8_1
(ECALL_P_TEST_REG_T), see (109)
98 - 99 ECALL_TEST_END_DIST_1 Default: 0x012C, HEXADECIMAL_16_1
(ECALL_TEST_END_DIST)
[Data] Distance to interrupt Russian test
mode
100 - 101 XCALL_AUTO_ANSWER_T_1 Default: 0x14, HEXADECIMAL_16_1
(XCALL_AUTO_ANSWER_T)
[Data] Waiting for call back duration time
102 - 229 ECALL_MESSAGE_URL_1 Default: http://
(ECALL_MESSAGE_URL) , ASCII_1024_1
230 ECALL_MESS_TRANS_TIM_1 Default: 0x0A, HEXADECIMAL_8_1(2)
(ECALL_MESS_TRANS_TIM)
message
231 ECALL_TPS_REG_TIME_1 Default: 0x02, HEXADECIMAL_8_1(2)
(ECALL_TPS_REG_TIME)
[Data] Ecall TPS Network registration time
232 ECALL_UNAV_REQ_TIME_1 Default: 0x05, HEXADECIMAL_8_1(2)
97
(ECALL_UNAV_REQ_TIME), see (110)
233 - 248 PUBLIC_TPS_ECALL_NUM_1 Default: 0123456789 , ASCII_128_1(2)
(PUBLIC_TPS_ECALL_NUM)
[Data] Phone number for public TPS ecall
operations
249 - 264 PRIVA_TPS_ECALL_NUM_1 Default: 0123456789 , ASCII_128_1(2)
(PRIVA_TPS_ECALL_NUM)
[Data] Phone number for private TPS ecall
operations
265 - 280 ECALL_TEST_NUM_2_1 Default: 0123456789 , ASCII_128_1
(ECALL_TEST_NUM_2)
[Data] Phone number for test ecall
operations
0-1 (reserved)
2-3 ECALL_LOG_TRANS_CONF_1 Default: 0x01 (Automatic Ecall only), ENUM_2_11
(ECALL_LOG_TRANS_CONF)
[Data] ECALL_LOG_TRANS_CONF
4-7 ECALL_MESS_ATTEMPT_1 Default: 0x03, HEXADECIMAL_4_Hertz_2(3)
(ECALL_MESS_ATTEMPT)
[Data] Ecall TPS message sending
attempts
(104) ECALL_REG_ATTEMPTS_1
[Data] Parameter to set up the number of register attempt in case of network registration failure
(105) XCALL_EELF_TRANSFER_2
[Data] Parameter defining which event eCall log file to send to PSA server according to te type of the trigger
(106) ECALL_TRANS_INTER_1
[Data] SMS transmission interval after MSD failed transmission
(107) ECALL_CCFT_1
[Data] Setting of automatic call termination counter (60 min)
(108) ECALL_SMS_FALLBACK_N_1
[Data] Phone number used to send the MSD data by SMS in case of MSD transmission failure
(109) ECALL_P_TEST_REG_T_1
[Data] Time to be registered after the self test result transmission
(110) ECALL_UNAV_REQ_TIME_1
[Data] Minimum duration to follow between two voice prompts announcing that the service is unavailable.
Read
(IMLOIF)
Write
(IMLOIF)
98
(SFNSIAS)
(SNSIAS)
10.2.5.6 CAL_Fct_ACALL_TYPE_PR ($0107) (CAL_Fct_ACALL_TYPE_PR)

request
response
Overview -)
160.
Data (zz)
0-3 (reserved)
4-7 ACALL_MESS_ATTEMPT_1 Default: 0x03, HEXADECIMAL_4_Hertz_2(2)
(ACALL_MESS_ATTEMPT)
[Data] Acall message sending attempts
1 ACALL_BACK_TIME_1 Default: 0x0A, HEXADECIMAL_8_1(3)
(ACALL_BACK_TIME)
[Data] Call back time for the call center
2 ACALL_DIAL_DURATION_1 Default: 0x02, HEXADECIMAL_8_1(3)
(ACALL_DIAL_DURATION)
[Data] Dial duration
3 ACALL_MESS_TRAN_TIME_1 Default: 0x1E, HEXADECIMAL_8_1(3)
(ACALL_MESS_TRAN_TIME)
message
4 ACALL_UNAV_REQ_TIME_1 Default: 0x05, HEXADECIMAL_8_1(3)
(ACALL_UNAV_REQ_TIME), see (111)
5 ACALL_REGISTRAT_TIME_1 Default: 0x05, HEXADECIMAL_8_1(3)
(ACALL_REGISTRAT_TIME)
[Data] Acall Network registration time
6 ACALL_CANCELLATION_TIME_1 Default: 0x00, HEXADECIMAL_8_1(4)
(ACALL_CANCELLATION_TIME)
[Data] Cancellation time for aCall
7 - 22 ACALL_NUMBER_1 (ACALL_NUMBER) Default: 0123456789 , ASCII_128_1(1)
[Data] Localised phone number
23 - 150 ACALL_MESSAGE_URL_1 Default: http://
(ACALL_MESSAGE_URL) , ASCII_1024_1
(111) ACALL_UNAV_REQ_TIME_1
[Data] Time during the “service unavailable” shall not be played
Read
99
(IMLOIF)
Write
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.5.7 CAL_Fct_CONNECTED_SERVICES ($0108) (CAL_Fct_CONNECTED_SERVICES)

request
response
Overview -)
160.
Data (zz)
0-5 (reserved)
6-7 SMS_OUT_ENCODING_1 Default: 0x00 (ENCODING_GSM_7BIT),
(SMS_OUT_ENCODING), see (112) ENUM_2_12
(112) SMS_OUT_ENCODING_1
[Data] Data coding scheme of an outgoing Short Message sent by the TCU.
Read
(IMLOIF)
Write
(IMLOIF)
100
(SFNSIAS)
(SNSIAS)
10.2.5.8 CAL_Fct_ETHERNET ($0109) (CAL_Fct_ETHERNET)

request
response
Overview -)
160.
Data (zz)
0 LINK_STATUS_DELAY_1 Default: 0x05, HEXADECIMAL_8_1(2)
(LINK_STATUS_DELAY)
[Data] Delay to count the link fails of the
ETHERNET network
1-2 New Bit Field 4 (New_Bit_Field_4) Hex 2 Bytes
0 (reserved)
1-2 ETHERNET_BR_NODE_ALONE_1 Default: 0x00 (False), ENUM_2_13
(ETHERNET_BR_NODE_ALONE)
[Data] Link and the communication on the
ETHERNET network
3 ECU_TRANSCEIVER_CONF_1 Default: 0x00 (Slave), ENUM_1_34
(ECU_TRANSCEIVER_CONF)
[Data] transceiver configuration
4 - 15 UNREACHEABLE_LINK_1 Default: 0x0190, HEXADECIMAL_12_1
(UNREACHEABLE_LINK)
[Data] Timer to count the link fails of the
ETHERNET network
3-4 New Bit Field (New_Bit_Field) Hex 2 Bytes
0-3 (reserved)
4 - 15 INCREMENT_OF_CLINK_1 Default: 0x33, HEXADECIMAL_12_1(1)
(INCREMENT_OF_CLINK)
[Data] INCREMENT_OF_CLINK
Read
(IMLOIF)
101
Write
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.5.9 DATA_Fct_GNSS ($D400) (DATA_Fct_GNSS)

request
response
Overview -)
Data (zz)
0 GNSS_CUR_SAT_VIEW_1 HEXADECIMAL_8_1
(GNSS_CUR_SAT_VIEW)
[Data] Number of current satelitte
1 GNSS_MAX_SAT_VIEW_1 HEXADECIMAL_8_1
(GNSS_MAX_SAT_VIEW)
[Data] Number of max satelitte
Read
(IMLOIF)
10.2.5.10 DATA_Fct_TRACABILITY ($D401) (DATA_Fct_TRACABILITY)

request
response
Overview -)
Data (zz)
102
0 - 19 TRACABILITY_UIN_1 ASCII_160_1
(TRACABILITY_UIN)
[Data] UIN of the BSRF
20 - 34 TRACABILITY_IMEI_1 ASCII_120_1
(TRACABILITY_IMEI)
[Data] IMEI of the BSRF
35 - 49 TRACABILITY_IMSI_1 ASCII_120_1
(TRACABILITY_IMSI)
[Data] IMSI of the BSRF
Read
(IMLOIF)
10.2.5.11 DATA_Fct_EM ($D402) (DATA_Fct_EM)

request
response
Overview -)
Data (zz)
0 NUM_UNEXPECT_REBOOT_1 HEXADECIMAL_8_1(3)
(NUM_UNEXPECT_REBOOT)
[Data] Number of unexpect reboot
Read
(IMLOIF)
10.2.5.12 DATA_Fct_xCall ($D403) (DATA_Fct_xCall)

103
request
response
Overview -)
Data (zz)
0-5 (reserved)
6 ACALL_PUSH_FLAG_2 ENUM_1_35
(ACALL_PUSH_FLAG)
[Data] Read aCall button flag
7 ECALL_PUSH_FLAG_2 ENUM_1_35
(ECALL_PUSH_FLAG)
[Data] Read eCall button flag
Read
(IMLOIF)
10.2.6 Fault Memory (FaultMemory)

Allows the manufacturer client to clear diagnostic information or to request diagnostic information from the server (including DTCs,
captured data, permanent DTCs, etc.). See requirements §5.1.4 "Stored Data Transmission functional unit" in DC_TI_702 "UDS
Generic Mechanisms".

Clear (Clear) ($14) ClearDiagnosticInformation (CDTCI) (CDTCI), 14 vv 54
see page 155.
Read (Number of DTC By ($19) ReadDtcInformation - Report number of DTC by 19 01 yy 59 01 yy fd
StatusMask) status mask (RNODTCBSM) (RDI_RNODTCBSM), see ww
(Read_Number_of_DTC_By_St page 157.
atusMask)
Read (by Mask) ($19) ReadDtcInformation - Report DTC by status 19 02 yy 59 02 yy *[ zz
(Read_by_Mask) mask (RDTCBSM) (RDI_RDTCBSM), see page 156. xx ]
Read (DTC Snapshot Data by ($19) ReadDtcInformation - Report DTC snapshot 19 04 zz fd 59 04 zz xx
DTC Number) record by DTC number (RDI_RDTCSRBDTCN), see *[ uu ]
(Read_DTC_Snapshot_Data_b page 157.
y_DTC_Number)
GroupOfDtc (vv)
All groups.
Supports individual DTCs: yes.
DtcStatusMask (yy)
104
(ENUM_1Bits_1) OC
(ENUM_1Bits_5)
(ENUM_1Bits_7)
DTCCount (ww)
0 DTCCount 1 (DTCCount) Hex 1 Byte
1 DTCCount 2 (_0_DTCCount) Hex 1 Byte
DTC Table (zz)

no data assigned
DtcStatusMask Response (xx)

(ENUM_1Bits_1) OC
(ENUM_1Bits_5)
(ENUM_1Bits_7)
SnapshotRecords (uu)
0 DTCSnapshotRecordNumber_4 Default: 1, HEX_8Bits (v1) 1
(DTCSSRN), see (113)
1 NB_ITER_DLF_EPF_PR_RDTCI_19_RD NumberOfIdentifiers
TCSSBDTC_04 1
(NB_ITER_DLF_EPF_PR_RDTCI_19_RD
TCSSBDTC_04_1)
DTCSSRNI
2-* DLF_EPF_PR_RDTCI_19_RDTCSSBDT DLF_EPF_PR_RDTCI_19_RDTCSSBDTC_04
C_04
(DLF_EPF_PR_RDTCI_19_RDTCSSBDTC
_04)
(113) DTCSnapshotRecordNumber_4
105
DTCSSRN: Indicate the number of a DTCSnapshot (context) frame records associated with DTC that we want
read.
Clear
(IMLOIF)
(SNSIAS)
10.2.7 Upload/Download (DataTransfer)

Requirements associated for this PSA generic procedure are described in the DC_TI_705 "TS Reprogrammation ECU".
The optional session (PRGS) enables all services required to flash the memory of a server by the repairman (Aftersales workshop
or Factories).

Request Download ($34) Request Download 34 zz 74 yy
(Request_Download) (_34_Request_Download), see page 162.
Transfer Data ($36) Transfer Data (_36_Transfer_Data), see 36 vv 76 uu
(Transfer_Data) page 162.
Request Transfer Exit ($37) Request Transfer Exit 37 77
(Request_Transfer_Exit) (_37_Request_Transfer_Exit), see page 163.
Transfer Request Parameters Download (zz)

0 dataFormatIdentifier(DFI) (DFI), see DFI_ENUM_8Bits
(114)
1 RD Bitfield (RD_Bitfield) HexDump Field 1 Byte
0-3 memoryAddress_ALFID_MA 0x01, NewIdentity 1
(memoryAddress_ALFID_MA)
4-7 memorySize_ALFID_MS 0x01, NewIdentity 1
(memorySize_ALFID_MS)
2 memoryAddress_MA 0x00, NewIdentity
(memoryAddress_MA)
3 memorySize_MS (memorySize_MS) 0x00, NewIdentity
(114) dataFormatIdentifier(DFI)
The parameter DataFormatIdentifier is used to define the logical marker of data to download or the compression
method and the encryption method of the data to send.
Transfer Response Parameters Download (yy)

0 RDPR Bitfield (RDPR_Bitfield) HexDump Field 1 Byte
0-3 RESERVE_2 (RESERVE_2) 0x00, NewIdentity 1
4-7 LFID (LFID) 0x01, NewIdentity 1
1 MNROB (MNROB) 0x00, NewIdentity
Data RQ (vv)
(115)
1- Request TransferData EPF_STRUCT_TRPR
[1..4093] (Request_TransferData)
106
PR (uu)
(116)
1- Response TransferData EPF_STRUCT_TRPR
[1..4093] (Response_TransferData)
Request Download
(IMLOIF)
0x70 uploadDownloadNotAccepted (UDNA) see page 166
(SFNSIAS)
(SNSIAS)
Transfer Data
(IMLOIF)
(SFNSIAS)
Request Transfer Exit

(SFNSIAS)
10.2.8 Routine Control (Routine_Control)

This diagnostic class contains Routines
107
(Powerlatch_Information_Positioning_PIP)
PIP: Requirements associated to this routine are described in DC_TI_707 "TS Electronic integration and putting ECUs into
operation".

page 161. ww

no data assigned

0 RoutineStatusRecord 01_02 routineInfo(01-02)_ENUM 8bits
(RoutineStatusRecord_01_02), see
(117)
(117) RoutineStatusRecord 01_02
PIP: See requirements §5.4.4 in DC_TI_707 for this generic routine.

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
Results
(IMLOIF)
(SFNSIAS)
108
(SNSIAS)
10.2.8.2 XCALL_DRIVING ($0600) (XCALL_DRIVING)

page 161. ww

0 CANCEL_ACALL_1 (CANCEL_ACALL) ENUM_1_33
[Data] Diag command to cancel a aCall
procedure
1 CANCEL_ECALL_1 (CANCEL_ECALL) ENUM_1_30(1)
[Data] Command to cancel a eCall
procedure
2 CON_ECALL_TEST_NUMB_1 ENUM_1_30(1)
(CON_ECALL_TEST_NUMB)
[Data] Command to configure the test
number
3 ECALL_LOG_LIST_SIZE_1 ENUM_1_30(1)
(ECALL_LOG_LIST_SIZE), see (118)
4 ENTER_TEST_ECALL_1 ENUM_1_30(1)
(ENTER_TEST_ECALL)
[Data] Command to enter a diagnostic test
ecall procedure
5 EXIT_TEST_ECALL_1 ENUM_1_30(1)
(EXIT_TEST_ECALL)
[Data] Command to exit a diagnostic test
ecall procedure
6 MAN_SIM_PROFILE_SWAP_1 ENUM_1_30(1)
(MAN_SIM_PROFILE_SWAP)
[Data] Manage Swap SIM profil
7 SIM_PROFILE_SWAP_1 ENUM_1_30(1)
(SIM_PROFILE_SWAP)
[Data] Swap SIM profil
0 SET_ROLLOVER_ANGLE_1 ENUM_1_30
(SET_ROLLOVER_ANGLE)
[Data] Set the rollover angle
1-2 INHIBIT_OTHER_SERVIC_1 ENUM_2_9
(INHIBIT_OTHER_SERVIC)
[Data] Command to desactivate all other
service than xCall
3 INHIBIT_XCALL_1 (INHIBIT_XCALL) ENUM_1_30
[Data] Command to desactivate the xCall
feature
4-5 (reserved)
6 READ_DATA_ECALL_LOG_1 ENUM_1_30(1)
(READ_DATA_ECALL_LOG)
109
data eCall log file
7 READ_EVENT_ECALL_LOG_1 ENUM_1_30(1)
(READ_EVENT_ECALL_LOG)
event eCall log file
0-3 (reserved)
4 TEST_ECALL_LED_1 ENUM_1_33(2)
(TEST_ECALL_LED)
the eCall state LED
5 RESET_ECALL_PUSH_FLAG_1 ENUM_1_33(2)
(RESET_ECALL_PUSH_FLAG)
6 RESET_ACALL_PUSH_FLAG_1 ENUM_1_33(2)
(RESET_ACALL_PUSH_FLAG)
7 TEST_DYSFUNCTION_LED_1 ENUM_1_33(2)
(TEST_DYSFUNCTION_LED)
the dysfunction LED
(118) ECALL_LOG_LIST_SIZE_1
[Data] Command to read the size of the list of Data eCall log file

(RSR_ER_4)

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
Results
(IMLOIF)
110
(SFNSIAS)
(SNSIAS)
10.2.8.3 GNSS_DRIVING ($0601) (GNSS_DRIVING)

page 161. ww

0-5 (reserved)
6 PERF_GNSS_COLD_START_1 ENUM_1_30(1)
(PERF_GNSS_COLD_START)
[Data] Erase GNSS data
7 MAX_SAT_VISIBLE_RES_1 ENUM_1_30(1)
(MAX_SAT_VISIBLE_RES)
[Data] Reset of number of max satellite

(RSR_ER_4)

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
111
Results
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.8.4 DIAG_INSTALL ($0602) (DIAG_INSTALL)

page 161. ww

no data assigned

(RSR_ER_4)

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
Results
112
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.8.5 MASCOM Test (MTEST) ($0701) (MASCOM_Test_MTEST)

See requirements: 02013_18_00051 for more information ( BSRF UDS_TEST_MASCOM ).

page 161. ww

no data assigned

0 Table_0701_RoutinePosRep RoutineStatusRecord 01_02_03_4
1 Table_0701_RoutinePosRep_ROW Table_0701_RoutinePosRep
(Table_0701_RoutinePosRep_ROW)
See 02013_18_00051

no data assigned
Start
(IMLOIF)
(SFNSIAS)
(SNSIAS)
Results
113
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.8.6 erase Memory (EM) ($FF00) (erase_Memory_EM)

StartRoutine

(119) Start
(120) Results

0 routineControlOptionRecord FF00 routineControlOption(81-82)_ENUM(8bits)
(routineControlOptionRecord_FF0
0)
1-2 RCEOR_SGN_OTL (RCEOR_SGN_OTL) 0xF05A, HEX 2 bytes Unsigned

0 routineInfo FF00 (routineInfo_FF00) ENUM_8bits_routineInfo(01-02)_1

no data assigned
Start
(IMLOIF)
114
(SFNSIAS)
(SNSIAS)
Results
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.8.7 check Memory (CM) ($FF04) (check_Memory_CM)

(121) Start
(122) Results

no data assigned

0 routineInfo FF04 (routineInfo_FF04) ENUM 8bits_routineInfo(01_02_03)_1
1 routineStatusRecord Routine_Table_FF04_Routine_Response
(routineStatusRecord)

no data assigned
Start
(IMLOIF)
115
(SFNSIAS)
(SNSIAS)
Results
(IMLOIF)
(SFNSIAS)
(SNSIAS)
10.2.9 Tester Present (TesterPresent)

If the client sends $3E $80 (SPRMIB=true), no positive(s) response(s) will be sent by serveur(s).

Send (Send) ($3E) TesterPresent (TP) (TP), see page 163. 3E 00 7E 00
11
12 State Dependency of Service Execution
The table cells define whether the service/job may be executed and the state the ECU will reach after the
execution of the service/job:
"(no)": the service/job must not be executed;
"(yes)": the service/job may be executed, no transition.
116
12.1 Base Variant
12.1.1 Session
Semantics: session
NRC: 0x7E sub-functionNotSupportedInActiveSession (SFNSIAS)
Service/Job Prefix defaultSession ProgrammingS extendedDiagn distantVehicle

(DS) ession (PRGS) osticSession AccessSession
(EXTDS) (DVAS)
Sessions/*/Control 10 LL (mixed) (mixed) (mixed) (mixed)
- ProgrammingSession (PRGS) 10 02 ProgrammingSe ProgrammingSe ProgrammingSe ProgrammingSe
ssion (PRGS) ssion (PRGS) ssion (PRGS) ssion (PRGS)
- defaultSession (DS) 10 01 defaultSession defaultSession defaultSession defaultSession
(DS) (DS) (DS) (DS)
- extendedDiagnosticSession 10 03 extendedDiagno extendedDiagno extendedDiagno extendedDiagno
(EXTDS) sticSession sticSession sticSession sticSession
(EXTDS) (EXTDS) (EXTDS) (EXTDS)
- distantVehicleAccessSession 10 50 distantVehicleAc distantVehicleAc distantVehicleAc distantVehicleAc
(DVAS) cessSession cessSession cessSession cessSession
(DVAS) (DVAS) (DVAS) (DVAS)
Security 27 LL xx (no) (mixed) (mixed) (no)
Access/*/SecurityAccess
- Programming Request Seed 27 01 xx (no) (yes) (no) (no)
(PRSD)
(PRSD) Key
- Variant Coding Request Seed 27 03 xx (no) (no) (yes) (no)
(VCRSD)
(VCRSD) Key
- Unlocking Control Request 27 05 xx (no) (no) (yes) (no)
Seed (UCRSD)
Seed (UCRSD) Key
- Unlocking Engineering Control 27 07 xx (no) (no) (yes) (no)
Request Seed (UECRSD)
Request Seed (UECRSD) Key
- Unlocking eSA Control Request 27 09 xx (no) (no) (yes) (no)
Seed (eSACRSD)
117
- Unlocking eSA Control Request 27 0A xx (no) (no) (yes) (no)
Seed (eSACRSD) Key
Ecu Reset/*/ECUReset 11 LL (no) (no) (yes) (no)
- hardReset (HR) 11 01 (no) (no) (yes) (no)
- keyOffOnReset (KOFFONR) 11 02 (no) (no) (yes) (no)
- softReset (SR) 11 03 (no) (no) (yes) (no)
Identification 22 LL (yes) (mixed) (yes) (mixed)
Parameters/*/Read
- Power Latch Flag State (PLFS) 22 01 00 (yes) (yes) (yes) (yes)
- Size Of ECU Serial Number 22 0D 01 (yes) (yes) (yes) (yes)
Data Identifier (SOECUSNDID)
- Variant coding possibilities 22 21 00 (yes) (yes) (yes) (yes)
- Variant coding programmed 22 21 01 (yes) (no) (yes) (no)
- Size For Multi DID (SFMDID) 22 C0 02 (yes) (yes) (yes) (yes)
- 22 F0 13 (yes) (no) (yes) (yes)
eCALL_RegulationXSofWareIdent
ificationNumber
(eCALL_RxSWIN)
- 22 F0 14 (yes) (no) (yes) (yes)
OTA_RegulationXSofWareIdentifi
cationNumber (OTA_RxSWIN)
- MASCOM Key Status 22 F0 15 (yes) (no) (yes) (yes)
(DMKEYS)
- Authentification Zone (ZA) 22 F0 80 (yes) (yes) (yes) (yes)
- Identification Zone for 22 F0 FE (yes) (yes) (yes) (yes)
Downloadable ECU (ZI)
- Boot Software Identification 22 F1 80 (yes) (yes) (yes) (yes)
Data Identifier (BSIDID)
- Active Diagnostic Session Data 22 F1 86 (yes) (yes) (yes) (yes)
Identifier (ADSDID)
- ECU Manufacturing Date Data 22 F1 8B (yes) (yes) (yes) (yes)
Identifier (ECUMDDID)
- ECU Serial Number Data 22 F1 8C (yes) (yes) (yes) (yes)
Identifier (ECUSNDID)
- VIN Data Identifier (VINDID) 22 F1 90 (yes) (no) (yes) (yes)
Identification 2E LL zz (no) (no) (yes) (no)
Parameters/*/Write
- Variant coding programmed 2E 21 01 (no) (no) (yes) (no)
zz
- VIN Data Identifier (VINDID) 2E F1 90 (no) (no) (yes) (no)
zz
Engineering Datas/*/Read 22 LL (yes) (no) (yes) (yes)
- CAL_Fct_LIFECYCLE 22 01 01 (yes) (no) (yes) (yes)
- CAL_Fct_POSITIONING 22 01 02 (yes) (no) (yes) (yes)
- CAL_Fct_CONNECT 22 01 04 (yes) (no) (yes) (yes)
- CAL_Fct_BROADCAST 22 01 05 (yes) (no) (yes) (yes)
- 22 01 06 (yes) (no) (yes) (yes)
CAL_Fct_ECALL_TYPE_EMERG
_PR
- CAL_Fct_ACALL_TYPE_PR 22 01 07 (yes) (no) (yes) (yes)
- 22 01 08 (yes) (no) (yes) (yes)
CAL_Fct_CONNECTED_SERVIC
ES
- CAL_Fct_ETHERNET 22 01 09 (yes) (no) (yes) (yes)
- DATA_Fct_GNSS 22 D4 00 (yes) (no) (yes) (yes)
- DATA_Fct_TRACABILITY 22 D4 01 (yes) (no) (yes) (yes)
118
- DATA_Fct_EM 22 D4 02 (yes) (no) (yes) (yes)
- DATA_Fct_xCall 22 D4 03 (yes) (no) (yes) (yes)
Engineering Datas/*/Write 2E LL zz (no) (no) (yes) (no)
- CAL_Fct_LIFECYCLE 2E 01 01 (no) (no) (yes) (no)
zz
- CAL_Fct_POSITIONING 2E 01 02 (no) (no) (yes) (no)
zz
- CAL_Fct_CONNECT 2E 01 04 (no) (no) (yes) (no)
zz
- CAL_Fct_BROADCAST 2E 01 05 (no) (no) (yes) (no)
zz
- 2E 01 06 (no) (no) (yes) (no)
CAL_Fct_ECALL_TYPE_EMERG zz
_PR
- CAL_Fct_ACALL_TYPE_PR 2E 01 07 (no) (no) (yes) (no)
zz
- 2E 01 08 (no) (no) (yes) (no)
CAL_Fct_CONNECTED_SERVIC zz
ES
- CAL_Fct_ETHERNET 2E 01 09 (no) (no) (yes) (no)
zz
Fault Memory/Clear 14 vv (yes) (no) (yes) (no)
- Fault Memory 14 vv (yes) (no) (yes) (no)
Fault Memory/Read 19 01 yy (yes) (no) (yes) (yes)
(Number of DTC By
StatusMask)
- Fault Memory 19 01 yy (yes) (no) (yes) (yes)
Fault Memory/Read (by 19 02 yy (yes) (yes) (yes) (yes)
Mask)
- Fault Memory 19 02 yy (yes) (yes) (yes) (yes)
Fault Memory/Read (DTC 19 04 zz (yes) (no) (yes) (yes)
Snapshot Data by DTC fd
Number)
- Fault Memory 19 04 zz (yes) (no) (yes) (yes)
fd
Upload/Download/Request 34 zz (no) (yes) (no) (no)
Download
- Upload/Download 34 zz (no) (yes) (no) (no)
Upload/Download/Transfer 36 vv (no) (yes) (no) (no)
Data
- Upload/Download 36 vv (no) (yes) (no) (no)
Upload/Download/Request 37 (no) (yes) (no) (no)
Transfer Exit
- Upload/Download 37 (no) (yes) (no) (no)
Routine Control/*/Start 31 01 LL (no) (no) (yes) (mixed)
ww
- Powerlatch Information 31 01 04 (no) (no) (yes) (no)
Positioning (PIP) 00 ww
- XCALL_DRIVING 31 01 06 (no) (no) (yes) (no)
00 ww
- GNSS_DRIVING 31 01 06 (no) (no) (yes) (no)
01 ww
- DIAG_INSTALL 31 01 06 (no) (no) (yes) (no)
02 ww
- MASCOM Test (MTEST) 31 01 07 (no) (no) (yes) (no)
119
01 ww
- erase Memory (EM) 31 01 FF (no) (no) (yes) (yes)
00 ww
- check Memory (CM) 31 01 FF (no) (no) (yes) (yes)
04 ww
Routine Control/*/Results 31 03 LL (no) (no) (yes) (mixed)
yy
Positioning (PIP) 00 yy
00 yy
01 yy
02 yy
01 yy
00 yy
04 yy
Tester Present/Send 3E 00 (yes) (yes) (yes) (yes)
- Tester Present 3E 00 (yes) (yes) (yes) (yes)
12.1.2 SecurityAccess
Semantics: security
NRC: 0x33 securityAccessDenied (SAD)
Service/Job Prefix Locked Level_Re Level_Var Level_RG Level_Unl Level_Unl

program iantCodin BPyrotec ockingCo ockingEn
ming g(Télécod hnic ntrol gineering
age) Control
Sessions/*/Control 10 LL (yes) (mixed) (mixed) (mixed) (mixed) (mixed)
- ProgrammingSession (PRGS) 10 02 (yes) (yes) (yes) (yes) (yes) (yes)
- defaultSession (DS) 10 01 (yes) Locked Locked Locked Locked Locked
- extendedDiagnosticSession 10 03 (yes) Locked Locked Locked Locked Locked
(EXTDS)
- distantVehicleAccessSession 10 50 (yes) (yes) (yes) (yes) (yes) (yes)
(DVAS)
Security 27 LL xx (mixed) (mixed) (yes) (yes) (yes) (yes)
- Programming Request Seed 27 01 xx (yes) (yes) (yes) (yes) (yes) (yes)
(PRSD)
- Programming Request Seed 27 02 xx Level_Rep (no) (yes) (yes) (yes) (yes)
(PRSD) Key rogrammin
g
- Variant Coding Request Seed 27 03 xx (yes) (yes) (yes) (yes) (yes) (yes)
(VCRSD)
- Variant Coding Request Seed 27 04 xx Level_Vari (no) (yes) (yes) (yes) (yes)
120
(VCRSD) Key antCoding
(Télécoda
ge)
- Unlocking Control Request 27 05 xx (yes) (yes) (yes) (yes) (yes) (yes)
Seed (UCRSD)
- Unlocking Control Request 27 06 xx Level_Unl (yes) (yes) (yes) (yes) (yes)
Seed (UCRSD) Key ockingCon
trol
- Unlocking Engineering Control 27 07 xx (yes) (yes) (yes) (yes) (yes) (yes)
- Unlocking Engineering Control 27 08 xx Level_Unl (yes) (yes) (yes) (yes) (yes)
Request Seed (UECRSD) Key ockingEng
ineeringCo
ntrol
- Unlocking eSA Control Request 27 09 xx (yes) (yes) (yes) (yes) (yes) (yes)
Seed (eSACRSD)
- Unlocking eSA Control Request 27 0A xx (yes) (yes) (yes) (yes) (yes) (yes)
Seed (eSACRSD) Key
Ecu Reset/*/ECUReset 11 LL (yes) (yes) (yes) (yes) (yes) (yes)
- hardReset (HR) 11 01 (yes) (yes) (yes) (yes) (yes) (yes)
- keyOffOnReset (KOFFONR) 11 02 (yes) (yes) (yes) (yes) (yes) (yes)
- softReset (SR) 11 03 (yes) (yes) (yes) (yes) (yes) (yes)
Identification 22 LL (yes) (yes) (yes) (yes) (yes) (yes)
Parameters/*/Read
- Power Latch Flag State (PLFS) 22 01 00 (yes) (yes) (yes) (yes) (yes) (yes)
- Size Of ECU Serial Number 22 0D 01 (yes) (yes) (yes) (yes) (yes) (yes)
- Variant coding possibilities 22 21 00 (yes) (yes) (yes) (yes) (yes) (yes)
- Variant coding programmed 22 21 01 (yes) (yes) (yes) (yes) (yes) (yes)
- Size For Multi DID (SFMDID) 22 C0 02 (yes) (yes) (yes) (yes) (yes) (yes)
- 22 F0 13 (yes) (yes) (yes) (yes) (yes) (yes)
ificationNumber
(eCALL_RxSWIN)
- MASCOM Key Status 22 F0 15 (yes) (yes) (yes) (yes) (yes) (yes)
(DMKEYS)
- Authentification Zone (ZA) 22 F0 80 (yes) (yes) (yes) (yes) (yes) (yes)
- Identification Zone for 22 F0 FE (yes) (yes) (yes) (yes) (yes) (yes)
- Boot Software Identification 22 F1 80 (yes) (yes) (yes) (yes) (yes) (yes)
- Active Diagnostic Session Data 22 F1 86 (yes) (yes) (yes) (yes) (yes) (yes)
Identifier (ADSDID)
- ECU Manufacturing Date Data 22 F1 8B (yes) (yes) (yes) (yes) (yes) (yes)
- ECU Serial Number Data 22 F1 8C (yes) (yes) (yes) (yes) (yes) (yes)
- VIN Data Identifier (VINDID) 22 F1 90 (yes) (yes) (yes) (yes) (yes) (yes)
Identification 2E LL zz (yes) (yes) (yes) (yes) (yes) (yes)
Parameters/*/Write
- Variant coding programmed 2E 21 01 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- VIN Data Identifier (VINDID) 2E F1 90 (yes) (yes) (yes) (yes) (yes) (yes)
zz
121
Engineering Datas/*/Read 22 LL (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_LIFECYCLE 22 01 01 (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_POSITIONING 22 01 02 (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_CONNECT 22 01 04 (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_BROADCAST 22 01 05 (yes) (yes) (yes) (yes) (yes) (yes)
- 22 01 06 (yes) (yes) (yes) (yes) (yes) (yes)
_PR
- CAL_Fct_ACALL_TYPE_PR 22 01 07 (yes) (yes) (yes) (yes) (yes) (yes)
ES
- CAL_Fct_ETHERNET 22 01 09 (yes) (yes) (yes) (yes) (yes) (yes)
- DATA_Fct_GNSS 22 D4 00 (yes) (yes) (yes) (yes) (yes) (yes)
- DATA_Fct_TRACABILITY 22 D4 01 (yes) (yes) (yes) (yes) (yes) (yes)
- DATA_Fct_EM 22 D4 02 (yes) (yes) (yes) (yes) (yes) (yes)
- DATA_Fct_xCall 22 D4 03 (yes) (yes) (yes) (yes) (yes) (yes)
Engineering Datas/*/Write 2E LL zz (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_LIFECYCLE 2E 01 01 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- CAL_Fct_POSITIONING 2E 01 02 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- CAL_Fct_CONNECT 2E 01 04 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- CAL_Fct_BROADCAST 2E 01 05 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- 2E 01 06 (yes) (yes) (yes) (yes) (yes) (yes)
_PR
- CAL_Fct_ACALL_TYPE_PR 2E 01 07 (yes) (yes) (yes) (yes) (yes) (yes)
zz
ES
- CAL_Fct_ETHERNET 2E 01 09 (yes) (yes) (yes) (yes) (yes) (yes)
zz
Fault Memory/Clear 14 vv (yes) (yes) (yes) (yes) (yes) (yes)
- Fault Memory 14 vv (yes) (yes) (yes) (yes) (yes) (yes)
Fault Memory/Read 19 01 yy (yes) (yes) (yes) (yes) (yes) (yes)
(Number of DTC By
StatusMask)
- Fault Memory 19 01 yy (yes) (yes) (yes) (yes) (yes) (yes)
Fault Memory/Read (by 19 02 yy (yes) (yes) (yes) (yes) (yes) (yes)
Mask)
Fault Memory/Read (DTC 19 04 zz (yes) (yes) (yes) (yes) (yes) (yes)
Number)
- Fault Memory 19 04 zz (yes) (yes) (yes) (yes) (yes) (yes)
fd
Upload/Download/Request 34 zz (yes) (yes) (yes) (yes) (yes) (yes)
Download
- Upload/Download 34 zz (yes) (yes) (yes) (yes) (yes) (yes)
Upload/Download/Transfer 36 vv (yes) (yes) (yes) (yes) (yes) (yes)
Data
122
- Upload/Download 36 vv (yes) (yes) (yes) (yes) (yes) (yes)
Upload/Download/Request 37 (yes) (yes) (yes) (yes) (yes) (yes)
Transfer Exit
- Upload/Download 37 (yes) (yes) (yes) (yes) (yes) (yes)
Routine Control/*/Start 31 01 LL (yes) (yes) (yes) (yes) (yes) (yes)
ww
- Powerlatch Information 31 01 04 (yes) (yes) (yes) (yes) (yes) (yes)
- XCALL_DRIVING 31 01 06 (yes) (yes) (yes) (yes) (yes) (yes)
00 ww
- GNSS_DRIVING 31 01 06 (yes) (yes) (yes) (yes) (yes) (yes)
01 ww
- DIAG_INSTALL 31 01 06 (yes) (yes) (yes) (yes) (yes) (yes)
02 ww
- MASCOM Test (MTEST) 31 01 07 (yes) (yes) (yes) (yes) (yes) (yes)
01 ww
- erase Memory (EM) 31 01 FF (yes) (yes) (yes) (yes) (yes) (yes)
00 ww
- check Memory (CM) 31 01 FF (yes) (yes) (yes) (yes) (yes) (yes)
04 ww
Routine Control/*/Results 31 03 LL (yes) (yes) (yes) (yes) (yes) (yes)
yy
00 yy
01 yy
02 yy
01 yy
00 yy
04 yy
Tester Present/Send 3E 00 (yes) (yes) (yes) (yes) (yes) (yes)
- Tester Present 3E 00 (yes) (yes) (yes) (yes) (yes) (yes)
123
12.2 BSRF
12.2.1 Session
Semantics: session
NRC: 0x7E sub-functionNotSupportedInActiveSession (SFNSIAS)
Service/Job Prefix defaultSession ProgrammingS extendedDiagn distantVehicle

(DS) ession (PRGS) osticSession AccessSession
(EXTDS) (DVAS)
Sessions/*/Control 10 LL (mixed) (mixed) (mixed) (mixed)
- ProgrammingSession (PRGS) 10 02 ProgrammingSe ProgrammingSe ProgrammingSe ProgrammingSe
ssion (PRGS) ssion (PRGS) ssion (PRGS) ssion (PRGS)
- defaultSession (DS) 10 01 defaultSession defaultSession defaultSession defaultSession
(DS) (DS) (DS) (DS)
- extendedDiagnosticSession 10 03 extendedDiagno extendedDiagno extendedDiagno extendedDiagno
(EXTDS) sticSession sticSession sticSession sticSession
(EXTDS) (EXTDS) (EXTDS) (EXTDS)
- distantVehicleAccessSession 10 50 distantVehicleAc distantVehicleAc distantVehicleAc distantVehicleAc
(DVAS) cessSession cessSession cessSession cessSession
(DVAS) (DVAS) (DVAS) (DVAS)
Security 27 LL xx (no) (mixed) (mixed) (no)
(PRSD)
(PRSD) Key
(VCRSD)
(VCRSD) Key
Seed (UCRSD)
Seed (UCRSD) Key
Request Seed (UECRSD) Key
- Unlocking eSA Control Request 27 09 xx (no) (no) (yes) (no)
Seed (eSACRSD)
124
- Unlocking eSA Control Request 27 0A xx (no) (no) (yes) (no)
Seed (eSACRSD) Key
Ecu Reset/*/ECUReset 11 LL (no) (no) (yes) (no)
- hardReset (HR) 11 01 (no) (no) (yes) (no)
- keyOffOnReset (KOFFONR) 11 02 (no) (no) (yes) (no)
- softReset (SR) 11 03 (no) (no) (yes) (no)
Identification 22 LL (yes) (mixed) (yes) (mixed)
Parameters/*/Read
- Power Latch Flag State (PLFS) 22 01 00 (yes) (yes) (yes) (yes)
- Size Of ECU Serial Number 22 0D 01 (yes) (yes) (yes) (yes)
- Variant coding possibilities 22 21 00 (yes) (yes) (yes) (yes)
- Variant coding programmed 22 21 01 (yes) (no) (yes) (no)
- Size For Multi DID (SFMDID) 22 C0 02 (yes) (yes) (yes) (yes)
- 22 F0 13 (yes) (no) (yes) (yes)
ificationNumber
(eCALL_RxSWIN)
- 22 F0 14 (yes) (no) (yes) (yes)
- MASCOM Key Status 22 F0 15 (yes) (no) (yes) (yes)
(DMKEYS)
- Authentification Zone (ZA) 22 F0 80 (yes) (yes) (yes) (yes)
- Identification Zone for 22 F0 FE (yes) (yes) (yes) (yes)
- Boot Software Identification 22 F1 80 (yes) (yes) (yes) (yes)
- Active Diagnostic Session Data 22 F1 86 (yes) (yes) (yes) (yes)
Identifier (ADSDID)
- ECU Manufacturing Date Data 22 F1 8B (yes) (yes) (yes) (yes)
- ECU Serial Number Data 22 F1 8C (yes) (yes) (yes) (yes)
- VIN Data Identifier (VINDID) 22 F1 90 (yes) (no) (yes) (yes)
Identification 2E LL zz (no) (no) (yes) (no)
Parameters/*/Write
- Variant coding programmed 2E 21 01 (no) (no) (yes) (no)
zz
- VIN Data Identifier (VINDID) 2E F1 90 (no) (no) (yes) (no)
zz
Engineering Datas/*/Read 22 LL (yes) (no) (yes) (yes)
- CAL_Fct_LIFECYCLE 22 01 01 (yes) (no) (yes) (yes)
- CAL_Fct_POSITIONING 22 01 02 (yes) (no) (yes) (yes)
- CAL_Fct_CONNECT 22 01 04 (yes) (no) (yes) (yes)
- CAL_Fct_BROADCAST 22 01 05 (yes) (no) (yes) (yes)
- 22 01 06 (yes) (no) (yes) (yes)
_PR
- CAL_Fct_ACALL_TYPE_PR 22 01 07 (yes) (no) (yes) (yes)
- 22 01 08 (yes) (no) (yes) (yes)
ES
- CAL_Fct_ETHERNET 22 01 09 (yes) (no) (yes) (yes)
- DATA_Fct_GNSS 22 D4 00 (yes) (no) (yes) (yes)
- DATA_Fct_TRACABILITY 22 D4 01 (yes) (no) (yes) (yes)
125
- DATA_Fct_EM 22 D4 02 (yes) (no) (yes) (yes)
- DATA_Fct_xCall 22 D4 03 (yes) (no) (yes) (yes)
Engineering Datas/*/Write 2E LL zz (no) (no) (yes) (no)
- CAL_Fct_LIFECYCLE 2E 01 01 (no) (no) (yes) (no)
zz
- CAL_Fct_POSITIONING 2E 01 02 (no) (no) (yes) (no)
zz
- CAL_Fct_CONNECT 2E 01 04 (no) (no) (yes) (no)
zz
- CAL_Fct_BROADCAST 2E 01 05 (no) (no) (yes) (no)
zz
- 2E 01 06 (no) (no) (yes) (no)
_PR
- CAL_Fct_ACALL_TYPE_PR 2E 01 07 (no) (no) (yes) (no)
zz
- 2E 01 08 (no) (no) (yes) (no)
ES
- CAL_Fct_ETHERNET 2E 01 09 (no) (no) (yes) (no)
zz
Fault Memory/Clear 14 vv (yes) (no) (yes) (no)
- Fault Memory 14 vv (yes) (no) (yes) (no)
Fault Memory/Read 19 01 yy (yes) (no) (yes) (yes)
(Number of DTC By
StatusMask)
- Fault Memory 19 01 yy (yes) (no) (yes) (yes)
Fault Memory/Read (by 19 02 yy (yes) (yes) (yes) (yes)
Mask)
- Fault Memory 19 02 yy (yes) (yes) (yes) (yes)
Fault Memory/Read (DTC 19 04 zz (yes) (no) (yes) (yes)
Number)
- Fault Memory 19 04 zz (yes) (no) (yes) (yes)
fd
Upload/Download/Request 34 zz (no) (yes) (no) (no)
Download
- Upload/Download 34 zz (no) (yes) (no) (no)
Upload/Download/Transfer 36 vv (no) (yes) (no) (no)
Data
- Upload/Download 36 vv (no) (yes) (no) (no)
Upload/Download/Request 37 (no) (yes) (no) (no)
Transfer Exit
- Upload/Download 37 (no) (yes) (no) (no)
Routine Control/*/Start 31 01 LL (no) (no) (yes) (mixed)
ww
00 ww
01 ww
02 ww
126
01 ww
00 ww
04 ww
Routine Control/*/Results 31 03 LL (no) (no) (yes) (mixed)
yy
00 yy
01 yy
02 yy
01 yy
00 yy
04 yy
Tester Present/Send 3E 00 (yes) (yes) (yes) (yes)
- Tester Present 3E 00 (yes) (yes) (yes) (yes)
12.2.2 SecurityAccess
Semantics: security
NRC: 0x33 securityAccessDenied (SAD)
Service/Job Prefix Locked Level_Re Level_Var Level_RG Level_Unl Level_Unl

program iantCodin BPyrotec ockingCo ockingEn
ming g(Télécod hnic ntrol gineering
age) Control
Sessions/*/Control 10 LL (yes) (mixed) (mixed) (mixed) (mixed) (mixed)
- ProgrammingSession (PRGS) 10 02 (yes) (yes) (yes) (yes) (yes) (yes)
- defaultSession (DS) 10 01 (yes) Locked Locked Locked Locked Locked
- extendedDiagnosticSession 10 03 (yes) Locked Locked Locked Locked Locked
(EXTDS)
- distantVehicleAccessSession 10 50 (yes) (yes) (yes) (yes) (yes) (yes)
(DVAS)
Security 27 LL xx (mixed) (mixed) (yes) (yes) (yes) (yes)
- Programming Request Seed 27 01 xx (yes) (yes) (yes) (yes) (yes) (yes)
(PRSD)
- Programming Request Seed 27 02 xx Level_Rep (no) (yes) (yes) (yes) (yes)
(PRSD) Key rogrammin
g
- Variant Coding Request Seed 27 03 xx (yes) (yes) (yes) (yes) (yes) (yes)
(VCRSD)
- Variant Coding Request Seed 27 04 xx Level_Vari (no) (yes) (yes) (yes) (yes)
127
(VCRSD) Key antCoding
(Télécoda
ge)
- Unlocking Control Request 27 05 xx (yes) (yes) (yes) (yes) (yes) (yes)
Seed (UCRSD)
- Unlocking Control Request 27 06 xx Level_Unl (yes) (yes) (yes) (yes) (yes)
Seed (UCRSD) Key ockingCon
trol
- Unlocking Engineering Control 27 07 xx (yes) (yes) (yes) (yes) (yes) (yes)
- Unlocking Engineering Control 27 08 xx Level_Unl (yes) (yes) (yes) (yes) (yes)
Request Seed (UECRSD) Key ockingEng
ineeringCo
ntrol
- Unlocking eSA Control Request 27 09 xx (yes) (yes) (yes) (yes) (yes) (yes)
Seed (eSACRSD)
- Unlocking eSA Control Request 27 0A xx (yes) (yes) (yes) (yes) (yes) (yes)
Seed (eSACRSD) Key
Ecu Reset/*/ECUReset 11 LL (yes) (yes) (yes) (yes) (yes) (yes)
- hardReset (HR) 11 01 (yes) (yes) (yes) (yes) (yes) (yes)
- keyOffOnReset (KOFFONR) 11 02 (yes) (yes) (yes) (yes) (yes) (yes)
- softReset (SR) 11 03 (yes) (yes) (yes) (yes) (yes) (yes)
Identification 22 LL (yes) (yes) (yes) (yes) (yes) (yes)
Parameters/*/Read
- Power Latch Flag State (PLFS) 22 01 00 (yes) (yes) (yes) (yes) (yes) (yes)
- Size Of ECU Serial Number 22 0D 01 (yes) (yes) (yes) (yes) (yes) (yes)
- Variant coding possibilities 22 21 00 (yes) (yes) (yes) (yes) (yes) (yes)
- Variant coding programmed 22 21 01 (yes) (yes) (yes) (yes) (yes) (yes)
- Size For Multi DID (SFMDID) 22 C0 02 (yes) (yes) (yes) (yes) (yes) (yes)
ificationNumber
(eCALL_RxSWIN)
- MASCOM Key Status 22 F0 15 (yes) (yes) (yes) (yes) (yes) (yes)
(DMKEYS)
- Authentification Zone (ZA) 22 F0 80 (yes) (yes) (yes) (yes) (yes) (yes)
- Identification Zone for 22 F0 FE (yes) (yes) (yes) (yes) (yes) (yes)
- Boot Software Identification 22 F1 80 (yes) (yes) (yes) (yes) (yes) (yes)
- Active Diagnostic Session Data 22 F1 86 (yes) (yes) (yes) (yes) (yes) (yes)
Identifier (ADSDID)
- ECU Manufacturing Date Data 22 F1 8B (yes) (yes) (yes) (yes) (yes) (yes)
- ECU Serial Number Data 22 F1 8C (yes) (yes) (yes) (yes) (yes) (yes)
- VIN Data Identifier (VINDID) 22 F1 90 (yes) (yes) (yes) (yes) (yes) (yes)
Identification 2E LL zz (yes) (yes) (yes) (yes) (yes) (yes)
Parameters/*/Write
- Variant coding programmed 2E 21 01 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- VIN Data Identifier (VINDID) 2E F1 90 (yes) (yes) (yes) (yes) (yes) (yes)
zz
128
Engineering Datas/*/Read 22 LL (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_LIFECYCLE 22 01 01 (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_POSITIONING 22 01 02 (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_CONNECT 22 01 04 (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_BROADCAST 22 01 05 (yes) (yes) (yes) (yes) (yes) (yes)
_PR
- CAL_Fct_ACALL_TYPE_PR 22 01 07 (yes) (yes) (yes) (yes) (yes) (yes)
ES
- CAL_Fct_ETHERNET 22 01 09 (yes) (yes) (yes) (yes) (yes) (yes)
- DATA_Fct_GNSS 22 D4 00 (yes) (yes) (yes) (yes) (yes) (yes)
- DATA_Fct_TRACABILITY 22 D4 01 (yes) (yes) (yes) (yes) (yes) (yes)
- DATA_Fct_EM 22 D4 02 (yes) (yes) (yes) (yes) (yes) (yes)
- DATA_Fct_xCall 22 D4 03 (yes) (yes) (yes) (yes) (yes) (yes)
Engineering Datas/*/Write 2E LL zz (yes) (yes) (yes) (yes) (yes) (yes)
- CAL_Fct_LIFECYCLE 2E 01 01 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- CAL_Fct_POSITIONING 2E 01 02 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- CAL_Fct_CONNECT 2E 01 04 (yes) (yes) (yes) (yes) (yes) (yes)
zz
- CAL_Fct_BROADCAST 2E 01 05 (yes) (yes) (yes) (yes) (yes) (yes)
zz
_PR
- CAL_Fct_ACALL_TYPE_PR 2E 01 07 (yes) (yes) (yes) (yes) (yes) (yes)
zz
ES
- CAL_Fct_ETHERNET 2E 01 09 (yes) (yes) (yes) (yes) (yes) (yes)
zz
Fault Memory/Clear 14 vv (yes) (yes) (yes) (yes) (yes) (yes)
- Fault Memory 14 vv (yes) (yes) (yes) (yes) (yes) (yes)
Fault Memory/Read 19 01 yy (yes) (yes) (yes) (yes) (yes) (yes)
(Number of DTC By
StatusMask)
Fault Memory/Read (by 19 02 yy (yes) (yes) (yes) (yes) (yes) (yes)
Mask)
Fault Memory/Read (DTC 19 04 zz (yes) (yes) (yes) (yes) (yes) (yes)
Number)
- Fault Memory 19 04 zz (yes) (yes) (yes) (yes) (yes) (yes)
fd
Upload/Download/Request 34 zz (yes) (yes) (yes) (yes) (yes) (yes)
Download
- Upload/Download 34 zz (yes) (yes) (yes) (yes) (yes) (yes)
Upload/Download/Transfer 36 vv (yes) (yes) (yes) (yes) (yes) (yes)
Data
129
- Upload/Download 36 vv (yes) (yes) (yes) (yes) (yes) (yes)
Upload/Download/Request 37 (yes) (yes) (yes) (yes) (yes) (yes)
Transfer Exit
- Upload/Download 37 (yes) (yes) (yes) (yes) (yes) (yes)
Routine Control/*/Start 31 01 LL (yes) (yes) (yes) (yes) (yes) (yes)
ww
00 ww
01 ww
02 ww
01 ww
00 ww
04 ww
Routine Control/*/Results 31 03 LL (yes) (yes) (yes) (yes) (yes) (yes)
yy
00 yy
01 yy
02 yy
01 yy
00 yy
04 yy
Tester Present/Send 3E 00 (yes) (yes) (yes) (yes) (yes) (yes)
- Tester Present 3E 00 (yes) (yes) (yes) (yes) (yes) (yes)
13
14 Data Types
Data Type Conversion
Address And Length Format 1 Byte
Identifier (ENUM_8Bits) [0x01] Memory Size 0; Memory Address 1
[0x02] Memory Size 0; Memory Address 2
130
ASCII_1024_1 128 Byte; Field [128] Element(s) à 1 Byte; Ascii; no sizeinfo
(ASCII_1024Bits)
ASCII_120_1 (ASCII_120Bits) 15 Byte; Field [15] Element(s) à 1 Byte; Ascii; no sizeinfo
ASCII_128_1(1) 16 Byte; Field [16] Element(s) à 1 Byte; Ascii; no sizeinfo
(ASCII_128Bits_1)
ASCII_128_1(2) 16 Byte; Field [16] Element(s) à 1 Byte; Ascii; no sizeinfo
(ASCII_128Bits_2)
ASCII_128Bits_eCALL_RxSWIN_1 16 Byte; Field [16] Element(s) à 1 Byte; Ascii; no sizeinfo
(ASCII_128Bits_eCALL_RxSWIN
_1)
eCALL_RxSWIN: eCall Homologation
Reference. Defaut value $3F replace
each character if not available.
ASCII_128Bits_OTA_RxSWIN_1 16 Byte; Field [16] Element(s) à 1 Byte; Ascii; no sizeinfo
(ASCII_128Bits_OTA_RxSWIN_1
)
Reference. Defaut value $3F replace
each character if not available.
ASCII_8Bits_ECU Serial Number 1 Byte; Ascii
ECUSN (ASCII_8Bits)
The data type ASCII_8Bits_ECU Serial
Number ECUSN' was set to read-only
when variant 'Base Variant' has been
locked.
ASCII_8Bits_VIN_1 1 Byte; Ascii
(ASCII_8Bits_1)
VIN: if not programmed or not available,
the default data shall consist of $3F [?]
(interrogation mark / ASCII value) and
replace each character.
ASCII_ECUSerialNumber Iterator [1..32] Byte; Number of Iterations: [1..32]
(ASCII_ECUSerialNumber) Data Objects:
The data type ASCII_ECUSerialNumber' [0:0] ECUSerialNumber_ASCII, Default: ?, ASCII_8Bits_ECU Serial Number
was set to read-only when variant 'Base ECUSN
Variant' has been locked.
BCD_40Bits_PSA Part Number 5 Byte; Field [5] Element(s) à 1 Byte; Bcd; no sizeinfo
Format (BCD_40Bits)
PSA Part Number Format of a type 96
xxx xxx 8x
This paramater provide PSA database in
factory and after-sales (Nomenclature)
BCD_80Bits_PSA Part Number 10 Byte; Field [10] Element(s) à 1 Byte; Bcd; no sizeinfo
Format_1
(BCD_80Bits_PSA_Part_Number
_Format_1)
PSA Part Number Format of a type 96
xxx xxx 8x
This paramater provide PSA database in
factory and after-sales (Nomenclature)
BCD_8bits_Date_day 1 Byte; Bcd
(BCD_8Bits)
BCD_8bits_Date_month 1 Byte; Bcd
(BCD_8Bits_2)
BCD_8bits_Date_year 1 Byte; Bcd
131
(BCD_8Bits_1)
BCD_8bits_Hour_1 1 Byte; Bcd
(BCD_8Bits_3)
BCD_8bits_Minute_1 1 Byte; Bcd
(BCD_8Bits_4)
DFI_ENUM_8Bits 1 Byte
(ENUM_8Bits_42) [0x81] Loading calibration
The data type DFI_ENUM_8Bits' was set [0x82] Loading global (calibration AND software)
to read-only when variant 'Base Variant' [0x83] Log Zone Writing (History field)
has been locked. [0x88] Key Appli writing
Invalid values:
[0x00] No signal
[0x01..0x80] Invalid signal
[0x89] Undefined
[0x8A..0xFF] Invalid signal
Diag Frame Evolution Index_1byte 1 Byte
(ENUM_8Bits_57) [0x00] Indice OR
The data type Diag Frame Evolution [0x01] Indice A
Index_1byte' was set to read-only when [0x02] Indice B
variant 'Base Variant' has been locked. [0x03] Indice C
[0x04] Indice D
[0x05] Indice E
[0x06] Indice F
[0x07] Indice G
[0x08] Indice H
[0x09] Indice I
[0x0A] Indice J
[0x0B] Indice K
[0x0C] Indice L
[0x0D] Indice M
[0x0E] Indice N
[0x0F] Indice O
[0x10] Indice P
[0x11] Indice Q
[0x12] Indice R
[0x13] Indice S
[0x14] Indice T
[0x15] Indice U
[0x16] Indice V
[0x17] Indice W
[0x18] Indice X
[0x19] Indice Y
[0x1A] Indice Z
[0xFF] Not used
DID_CTX_5 (ENUM_16Bits_3) 2 Byte; HighLow (Motorola)
DID list of snapshot parameters. To [0xF090] EcuHardware
replace with real DID implemented as [0xF091] LocalConfig
snapshot parameters. [0xF092] Wiring
Warning : use the same structure than [0xF093] SystemConfig
the one used at $22 service. Invalid values:
For example you will find 4 DIDs for
[0x00..0xFF] Undefined
flexray network only (to suppress for
other networks). [0x0D00..0x14FF] Undefined
The data type DID_CTX_5' was set to [0x1900..0x20FF] Undefined
read-only when variant 'Base Variant' [0x2900..0xD3FF] Undefined
has been locked. [0xE800..0xF08F] Undefined
[0xF094..0xFFFF] No signal
DIDF802_F190_INTPY02_VIN_1 Packet [17] Byte
(DIDF802_F190_INTPY02_VIN_1 Data Objects:
) [0:0] World Manufacturer Identifier_1, Default: ?, ASCII_8Bits_VIN_1
132
- VIN_WMI_1
VIN: if not programmed or not available,
the default data shall consist of $3F [?]
[1:0] World Manufacturer Identifier_2, Default: ?, ASCII_8Bits_VIN_1
(interrogation mark / ASCII value) and
- VIN_WMI_2
replace each character. [2:0] World Manufacturer Identifier_3, Default: ?, ASCII_8Bits_VIN_1
- VIN_WMI_3
[3:0] Vehicle Description Number_1, Default: ?, ASCII_8Bits_VIN_1
- VIN_VDS_1
- VIN_VDS_2
- VIN_VDS_3
- VIN_VDS_4
- VIN_VDS_5
- VIN_VDS_6
[9:0] Vehicle Identification Section_1, Default: ?, ASCII_8Bits_VIN_1
- VIN_VIS_1
- VIN_VIS_2
- VIN_VIS_3
- VIN_VIS_4
- VIN_VIS_5
- VIN_VIS_6
- VIN_VIS_7
- VIN_VIS_8
DLF_EPF_PR_RDTCI_19_RDTCSS Iterator [0..*] Byte
BDTC_04 Data Objects:
(DLF_EPF_PR_RDTCI_19_RDTCSS [0:0] Table of DIDs of context, DID_CTX_5
BDTC_04) [2:0] TABLE_DID_CONTEXT_ROW, Table of DIDs of context
The data type
DLF_EPF_PR_RDTCI_19_RDTCSSBD
TC_04' was set to read-only when
variant 'Base Variant' has been locked.
DTC Groups (ENUM_24Bits) 3 Byte; HighLow (Motorola)
[0x00] Emission-related systems
[0x100000] Powertrain group
[0x400000] Chassis group
[0x800000] Body group
[0xC00000] Network communication group
[0xFFFFFF] All groups
ENUM 1 Byte
8bits_routineInfo(01_02_03)_1 [0x01] Routine in progress
(ENUM_8Bits_50) [0x02] Routine finished OK
Routine status with 01, 02, 03 states. [0x03] Routine finished NOK
Invalid values:
[0x00] Undefined
ENUM_10bits (ENUM_10Bits) 10 Bit
[0x00] Undefined
[0x01] Gasoline Tank
[0x02] Diesel Tank
[0x03] Compressed Natural Gas
133
[0x04] Liquid Propane Gas
[0x05] Electric Energy Storage (exceeding 42 V and 100 A/h)
[0x06] Hydrogen Storage
[0x07] Gasoline Tank + Electric Energy Storage
[0x08] Diesel Tank + Electric Energy Storage
Invalid values:
[0x09..0x03FF] Invalid signal
ENUM_15bits (ENUM_15Bits) 15 Bit
[0x00] Undefined
[0x01] Passenger vehicles (Category M1)
[0x02] Buses vehicles (Category M2)
[0x03] Buses vehicles (Category M3)
[0x04] Light trucks (Category N1)
[0x05] Cargo vehicles (Category N2)
[0x06] Cargo vehicles (Category N3)
[0x07] Motor cycles (Category L1e)
[0x0A] Motor cycles (Category L4e)
[0x0B] Motor cycles (Category L5e)
[0x0C] Motor cycles (Category L6e)
[0x0D] Motor cycles (Category L7e)
Invalid values:
[0x0E..0x7FFF] Invalid signal
ENUM_16bits (ENUM_16Bits_4) 2 Byte; HighLow (Motorola)
[0xFEFF] ECALL_TYPE_9
[0xFF7F] ECALL_TYPE_8
[0xFFBF] ECALL_TYPE_7
[0xFFDF] ECALL_TYPE_6
[0xFFEF] ECALL_TYPE_5
[0xFFF7] ECALL_TYPE_4
[0xFFFB] ECALL_TYPE_3
[0xFFFD] ECALL_TYPE_2
[0xFFFE] ECALL_TYPE_1
[0xFFFF] Deactivated
ENUM_16bits_1 2 Byte; HighLow (Motorola)
(ENUM_16Bits_5) [0xFEFF] ECALL_TYPE_9
[0xFF7F] ECALL_TYPE_8
[0xFFBF] ECALL_TYPE_7
[0xFFDF] ECALL_TYPE_6
[0xFFEF] ECALL_TYPE_5
[0xFFF7] ECALL_TYPE_4
[0xFFFB] ECALL_TYPE_3 (TPS)
[0xFFFD] ECALL_TYPE_2 (ERA Glonass Russia Regulation)
[0xFFFE] ECALL_TYPE_1 (PE112 Reglementation EU)
[0xFFFF] Deactivated
ENUM_16Bits_PSA Supplier Code 2 Byte; HighLow (Motorola)
(ENUM_16Bits) [0x00] ANEO
0xXX <Supplier> name [0x01] PSA
The data type ENUM_16Bits_PSA [0x02] MAGNETTI MARELLI
Supplier Code' was set to read-only [0x03] BOSCH
when variant 'Base Variant' has been [0x04] SIEMENS
locked. [0x05] SAGEM
[0x06] VALEO
[0x07] ZF
[0x08] BENDIX
[0x09] TEVES
[0x0A] LUCAS
[0x0B] HELLA
[0x0C] BITRON
134
[0x0D] CONTINENTAL / VDO
[0x0E] AUTOLIV
[0x0F] TRW
[0x10] TEMIC
[0x11] HEULIEZ
[0x12] TEXTON
[0x13] DELPHI
[0x14] PHILIPS
[0x15] CLARION
[0x16] WEBASTO
[0x17] EBERSPACHER
[0x18] ITT
[0x19] BEHR
[0x1A] DAV
[0x1B] BRC
[0x1C] HPI
[0x1D] EATON
[0x1E] SC2N
[0x1F] MARWAL / TI AUTOMOTIVE
[0x20] INALFA
[0x21] JTEKT / SMI
[0x23] CTS
[0x24] KOSTAL
[0x25] CONTROL DEVICES
[0x26] VISTEON
[0x27] FICOSA
[0x28] BROSE
[0x29] NIPPON SEKI
[0x2A] AUTOMOTIVE LIGHTING
[0x2B] PANASONIC
[0x2C] JCAE
[0x2D] FAURECIA
[0x2E] BORG
[0x2F] STABILUS
[0x30] AISIN WARNER
[0x31] MGI
[0x33] METASYSTEM
[0x35] ARVIN MERITOR
[0x36] DENSO
[0x37] WABCO
[0x38] DURA
[0x39] HARMANBECKER - JBL
[0x3A] WAGON
[0x3B] PIONEER
[0x3C] YAZAKI
[0x3D] FIAMM
[0x3E] HITGT
[0x3F] CATEM
[0x40] HISENSE
[0x42] S& DAEWOO
[0x43] DENON
[0x44] MARQUARDT
[0x45] HUF
[0x46] GENTEX
[0x47] TYCOO
[0x48] PAULSTRA
[0x49] FAMAR
[0x4A] MTA
[0x4B] VISIOCORP
[0x4C] LEGGET&PLATT
[0x4D] KONGSBERG
135
[0x4E] HANGSBERG
[0x4F] SANYO
[0x50] COBRA
[0x51] SONCEBOZ
[0x52] LEAR
[0x53] CASCO
[0x54] EPCOS
[0x55] ACCEL
[0x56] NAVTEQ
[0x57] TAKATA
[0x58] DEFOND
[0x59] VIMERCATI
[0x5A] INERGY
[0x5B] MAGNA STEYR
[0x5C] MITSUBISHI MOTORS (MMC)
[0x5D] SANDEN
[0x5E] HIROSE
[0x5F] XIAMENTTE
[0x60] BOUYGUES TELECOM
[0x61] XIGUANG
[0x62] LITHIUM ENRGY JAPAN
[0x63] CHASSIS BRAKES INTERNATIONAL
[0x64] WITTE
[0x65] TOM TOM
[0x66] ARKAMYS
[0x67] NUANCE
[0x68] LEONI WIRING SYSTEMS FRAN
[0x69] GETRAG
[0x6A] KAMCOM
[0x6B] LG ELECTONICS INC
[0x6C] SOJADIS
[0x6D] KYB
[0x6E] HUWAEI
ENUM_1_30 (ENUM_1Bits_361) 1 Bit
[0x00] Enable
[0x01] Disable
ENUM_1_30(1) 1 Bit
(ENUM_1Bits_362) [0x00] Enable
[0x01] Disable
[0x00] Forced
[0x01] Automatic
[0x00] Disable
[0x01] Enable
ENUM_1_33(2) 1 Bit
(ENUM_1Bits_371) [0x00] Disable
[0x01] Enable
[0x00] Slave
[0x01] Master
[0x00] Button pressed
[0x01] Button released
ENUM_1bit (ENUM_1Bits_365) 1 Bit
[0x00] Disable
[0x01] Enable
ENUM_1bit_1 (ENUM_1Bits_366) 1 Bit
[0x00] Disable
136
[0x01] Enable
[0x00] Disable
[0x01] Enable
[0x00] Disable
[0x01] Enable
[0x00] 1 antenna connected (internal)
[0x01] 2 connected antenna (internal + external)
ENUM_1bit_FLEXRAY 1 Bit
(ENUM_1Bits_358) [0x00] if the fault event is not the cause of the DTC
The data type ENUM_1bit_FLEXRAY' [0x01] if the fault event is the cause of the DTC
was set to read-only when variant 'Base
ENUM_1Bits_confirmedDTC_CDTC 1 Bit
(ENUM_1Bits_3) [0x00] false
ENUM_1Bits_3 0b0 "false" 0b1 "true" [0x01] true
ENUM_1Bits_pendingDTC_PDTC 1 Bit
(ENUM_1Bits_8) [0x00] false
ENUM_1Bits_testFailed_TF 1 Bit
(ENUM_1Bits) [0x00] false
ENUM_1Bits 0b0 "false" 0b1 "true" [0x01] true
ENUM_1Bits_testFailedSinceLastCl 1 Bit
ear_TFSLC (ENUM_1Bits_5) [0x00] false
ENUM_1Bits_5 [0x01] true
0b0 "false" 0b1 "true"
ENUM_1Bits_testFailedThisOperatio 1 Bit
nCycle_TFTOC (ENUM_1Bits_1) [0x00] false
ENUM_1Bits_1 [0x01] true
ENUM_1Bits_testNotCompletedSinc 1 Bit
eLastClear_TNCSLC [0x00] false
(ENUM_1Bits_4) [0x01] true
ENUM_1Bits_4
ENUM_1Bits_testNotCompletedThis 1 Bit
OperationCycle_TNCTOC [0x00] false
(ENUM_1Bits_6) [0x01] true
ENUM_1Bits_6
ENUM_1Bits_warningIndicatorRequ 1 Bit
ested_WIR (ENUM_1Bits_7) [0x00] false
ENUM_24Bits_Tool_signature_1 3 Byte; HighLow (Motorola)
(ENUM_24Bits_Tool_signature [0x020000] ODISSEE assembly tool
_1) [0x030000] XFlasher tool
[0x100000..0x1FFFFF] Supplier network
[0x200000..0x2FFFFF] Others cars manufacturers
[0x300000..0xFFFFFF] PSA network
[0x00] Disable
[0x01] Automatic Ecall only
[0x02] All Ecall
Invalid values:
[0x03] Invalid signal
[0x00] ENCODING_GSM_7BIT
[0x01] ENCODING_DATA_8BIT
[0x02] ENCODING_UCS2_16BIT
137
Invalid values:
[0x00] False
[0x03] True
Invalid values:
ENUM_2_9 (ENUM_2Bits) 2 Bit
[0x00] Enable
[0x01] Disable
[0x02] Stop
Invalid values:
ENUM_2bits (ENUM_2Bits_1) 2 Bit
[0x00] 24 Mixed preset list AM/FM/DAB or AM/FM (except China)
[0x01] Autostore (China mode) (3x8)
Invalid values:
ENUM_2bits_1 (ENUM_2Bits_2) 2 Bit
[0x00] 50 us (except US)
[0x01] 75 us (US)
Invalid values:
ENUM_3_2 3 (ENUM_3Bits_5) 3 Bit
[0x00] Low
[0x01] Medium
[0x02] High
Invalid values:
ENUM_3_2(1) (ENUM_3Bits_2) 3 Bit
[0x00] OFF
[0x01] AUTO
[0x02] AUTO_MANU
Invalid values:
[0x03..0x07] Undefined
[0x00] Undefined
[0x01] Peugeot
[0x02] Citroën
[0x03] DS
[0x04] Opel
[0x05] Vauxhall
Invalid values:
ENUM_3bits (ENUM_3Bits_6) 3 Bit
[0x00] Jump disable
[0x01] Jump synchronization waiting
[0x02] Jump without synchronization
Invalid values:
ENUM_4_1(1) (ENUM_4Bits_3) 4 Bit
[0x00] Disable
[0x01] Smouth mode
[0x02] Normal mode
[0x03] Agressive mode
Invalid values:
[0x04..0x0F] Invalid signal
ENUM_6_1 (ENUM_6Bits) 6 Bit
[0x00] WSH deactivate
138
[0x01] Mono Smooth
[0x02] Mono Normal
[0x03] Mono Aggressive
[0x04] Bi Smooth
[0x05] Bi Normal
[0x06] Bi Aggressive
Invalid values:
[0x07..0x3F] Invalid signal
ENUM_8bits (ENUM_8Bits_138) 1 Byte
[0x00] Disable
[0x01] Europe
[0x02] Korea
[0x03] China
[0x04] New Zealand
[0x05] Australia
Invalid values:
[0x06..0xFF] Invalid signal
ENUM_8Bits (v49) 1 Byte
(ENUM_8Bits_88) [0x00] Pas de problème/ No problem
Invalid values:
[0x01..0xFF] Invalid signal
ENUM_8Bits (v5) 1 Byte
(ENUM_8Bits_134) [0x01] Routine en cours
[0x02] Routine terminée OK
[0x03] Routine terminée NON OK
[0x04] Routine arrêtée
Invalid values:
[0x00] Undefined
ENUM_8Bits_Data_Site_1 1 Byte
(ENUM_8Bits_Data_Site_1) [0x00] Terminal Factory programming
0xXX: <SiteType> Programming [0xFB] Independent Operator programming
[0xFC] Engineering programming
[0xFD] After Sales programming
[0xFE] Supplier programming
ENUM_8Bits_NotRealized_Realize 1 Byte
d (ENUM_8Bits_70) [0x00] Not Realized
0x00: Not Realized 0xFF: Realized [0xFF] Realized
0xFE Invalid Invalid values:
[0x01..0xFE] Invalid signal
ENUM_8bits_routineInfo(01-02)_1 1 Byte
(ENUM_8Bits_135) [0x01] Routine in progress
Routine with 01, 02 states. [0x02] Routine finished OK
ENUM_8Bits_UDS_TEST_MASCO 1 Byte
M_Errors_1 [0x01] E_MASCOM_TEST_AUTH_FAILURE
(ENUM_8Bits_UDS_TEST_MASCOM [0x02] E_MASCOM_TEST_ORDER_FAILURE
_Errors_1)
See 02013_18_00051.
UDS_TEST_MASCOM shall return the
detailed status of the operation in its
response message.
ENUM_9bits_1 (ENUM_9Bits) 9 Bit
[0x00] Disable
[0x01] TBL1_153 - 279 kHz (A:3k) LW : Europe (LW only) / Iraq, Iran,
Morocco
[0x02] TBL2_531 - 1602 kHz (A:9k) MW : Japan / Poland, Romania, Iran
[0x03] TBL3_531 - 1629 kHz (A:9k) MW : Europe (MW only)
[0x04] TBL4_531 - 1701 kHz (A:9k) MW : Arabia + Africa / Asia + China
[0x05] TBL5_530 - 1710 kHz (A:10k) MW : US / Amlat
139
[0x06] TBL1 + TBL2 : LW + MV Europe
Invalid values:
ENUM_9bits_2 (ENUM_9Bits_1) 9 Bit
[0x00] Disable
[0x01] TBL1_76.0 - 95.0 kHz (A:100k) Japan
[0x02] TBL2_76.0 - 108.0 kHz (A:100k) Japan extended
[0x03] TBL3_76.0 - 108.0 kHz (A:200k) US extended
[0x04] TBL4_87.5 - 108.0 kHz (A:100k) Europe / Arabia = Africa / Asia +China
[0x05] TBL5_87.5 - 108.0 kHz (A:250k) Laos, Thailand
[0x06] TBL6_87.9 - 108.0 kHz (A:100k) Botswana, Kuwait, Malawi, Nigeria,
Bolivia
[0x07] TBL7_87.9 - 108.0 kHz (A:200k) US / Amlat
Invalid values:
EPF_STRUCT_TRPR Iterator [0..4093] Byte; Number of Iterations: [0..4093]
(EPF_STRUCT_TRPR) Data Objects:
The data type EPF_STRUCT_TRPR' [0:0] RECVALi_4, UNM_8Bits
was set to read-only when variant 'Base - Value Hexadecimale
FormatIdentifier 1 Byte
(ENUM_8Bits_37) [0x00] SAE J2012-DA: DTC format reported by the server as defined in ISO
This "DTCFormatIdentifier" byte 15031-6
parameter value defines the format of a [0x04] SAE J2012-DA: DTC format reported by the server as defined in ISO
DTC reported by the server. 27145-2
Invalid values:
Hex 1 Byte (HEX_8Bits_13) 1 Byte; Hex
Hex 2 Bytes (HEX_16Bits) 2 Byte; Field [2] Element(s) à 1 Byte; no sizeinfo; Hex
The data type Hex 2 Bytes' was set to
read-only when variant 'Base Variant'
has been locked.
HEX 2 bytes Unsigned 2 Byte; Hex; HighLow (Motorola)
(HEX_16Bits_1)
HEX_16Bits (v1) 2 Byte; HighLow (Motorola)
(HEX_16Bits_18)
HEX_32Bits_1 (HEX_32Bits_1) 4 Byte; HighLow (Motorola)
HEX_8Bits (HEX_8Bits) 1 Byte
HEX_8Bits (v1) 1 1 Byte
(HEX_8Bits_11)
The data type HEX_8Bits (v1) 1' was set
to read-only when variant 'Base Variant'
has been locked.
HEX_8Bits (v1) 1(1) 1 Byte
(HEX_8Bits_v1_1_1)
HEX_8Bits_DTC_Statusbyte 1 Byte; Hex
(HEX_8Bits_18)
HEX_96Bits (HEX_96Bits) 12 Byte; Field [12] Element(s) à 1 Byte; no sizeinfo; Hex
HEXADECIMAL_10_1(1) 10 Bit; Hex
(HEX_10Bits_1)
HEXADECIMAL_12_1 12 Bit; Hex
(HEX_12Bits)
(HEX_12Bits_1)
(HEX_15Bits_1)
140
HEXADECIMAL_16_1 2 Byte; Hex; HighLow (Motorola)
(HEX_16Bits_2)
HEXADECIMAL_16_1(1) 2 Byte; Hex; HighLow (Motorola)
(HEX_16Bits_3)
(HEX_1Bits_5)
(HEX_1Bits_6)
(HEX_2Bits_5)
(HEX_3Bits_2)
HEXADECIMAL_4_3 4 Bit; Hex
(HEX_4Bits_4) Invalid values:
[0x0C..0x0F] Invalid signal
HEXADECIMAL_4_Hertz_2 4 Bit; Hex; Hz
(HEX_4Bits_Hz)
HEXADECIMAL_4_Hertz_2(1) 4 Bit; Hex
(HEX_4Bits_1)
(HEX_4Bits_2)
(HEX_4Bits_6)
HEXADECIMAL_8_1 1 Byte; Hex
(HEX_8Bits_41)
HEXADECIMAL_8_1(1) 1 Byte; Hex
(HEX_8Bits_36)
The data type 'HEXADECIMAL_8_1(1)'
(HEX_8Bits_50)
(HEX_8Bits_44)
(HEX_8Bits_47)
(HEX_9Bits_1)
HexDump (1 Byte) 1 Byte; Hex
(HEX_8Bits_14)
HexDump (4 Byte) (HEX_32Bits) 4 Byte; Hex; HighLow (Motorola)
The data type HexDump (4 Byte)' was
set to read-only when variant 'Base
HexDump Field 1 Byte 1 Byte; Field [1] Element(s) à 1 Byte; no sizeinfo; Hex
(HEX_8Bits_12)
The data type HexDump Field 1 Byte'
NewIdentity (HEX_8Bits_8) 1 Byte; Hex
The data type NewIdentity' was set to
has been locked.
NewIdentity 1 (HEX_4Bits) 4 Bit; Hex
The data type NewIdentity 1' was set to
141
has been locked.
NewIdentity 8 (HEX_8Bits_20) 1 Byte; Hex
The data type 'NewIdentity 8' was set to
has been locked.
Number of associated parameters at 1 Byte
default (1 byte) (ENUM_8Bits_58) [0x01] Codification ISO 15031-6, 1 parameter associated at default
The data type Number of associated [0x02] Codification ISO 15031-6, 2 parameter associated at default
parameters at default (1 byte)' was set to [0x03] Codification Iso 15031-6, 3 parameter associated at default
read-only when variant 'Base Variant' [0x40] Codification Body, no parameter associated at default
has been locked. [0x41] Codification Body, 1 parameter associated at default
[0x42] Codification Body, 2 parameter associated at default
[0x43] Codification Body, 3 parameter associated at default
[0x80] Codification PSA, no parameter associated at default
[0x81] Codification PSA.1 parameter associated at default
[0x82] Codification PSA, 2 parameter associated at default
[0x83] Codification PSA, 3 parameter associated at default
[0xC0] No codification
NumberOfIdentifiers 1 Byte
(HEX_8Bits_19)
The data type NumberOfIdentifiers' was
set to read-only when variant 'Base
PSA SupplierCode ENUM 8bits 1 Byte
(ENUM_8Bits_54) [0x00] ANEO
The data type PSA SupplierCode ENUM [0x01] PSA
8bits' was set to read-only when variant [0x02] MAGNETTI MARELLI
'Base Variant' has been locked. [0x03] BOSCH
[0x04] SIEMENS
[0x05] SAGEM
[0x06] VALEO
[0x07] ZF
[0x08] BENDIX
[0x09] TEVES
[0x0A] LUCAS
[0x0B] HELLA
[0x0C] BITRON
[0x0D] CONTINENTAL / VDO
[0x0E] AUTOLIV
[0x0F] TRW
[0x10] TEMIC
[0x11] HEULIEZ
[0x12] TEXTON
[0x13] DELPHI
[0x14] PHILIPS
[0x15] CLARION
[0x16] WEBASTO
[0x17] EBERSPACHER
[0x18] ITT
[0x19] BEHR
[0x1A] DAV
[0x1B] BRC
[0x1C] HPI
[0x1D] EATON
[0x1E] SC2N
[0x1F] MARWAL / TI AUTOMOTIVE
[0x20] INALFA
[0x21] JTEKT / SMI
[0x23] CTS
[0x24] KOSTAL
[0x25] CONTROL DEVICES
142
[0x26] VISTEON
[0x27] FICOSA
[0x28] BROSE
[0x29] NIPPON SEKI
[0x2A] AUTOMOTIVE LIGHTING
[0x2B] PANASONIC
[0x2C] JCAE
[0x2D] FAURECIA
[0x2E] BORG
[0x2F] STABILUS
[0x30] AISIN WARNER
[0x31] MGI
[0x33] METASYSTEM
[0x35] ARVIN MERITOR
[0x36] DENSO
[0x37] WABCO
[0x38] DURA
[0x39] HARMANBECKER - JBL
[0x3A] WAGON
[0x3B] PIONEER
[0x3C] YAZAKI
[0x3D] FIAMM
[0x3E] HITGT
[0x3F] CATEM
[0x40] HISENSE
[0x42] S& DAEWOO
[0x43] DENON
[0x44] MARQUARDT
[0x45] HUF
[0x46] GENTEX
[0x47] TYCOO
[0x48] PAULSTRA
[0x49] FAMAR
[0x4A] MTA
[0x4B] VISIOCORP
[0x4C] LEGGET&PLATT
[0x4D] KONGSBERG
[0x4E] HANGSBERG
[0x4F] SANYO
[0x50] COBRA
[0x51] SONCEBOZ
[0x52] LEAR
[0x53] CASCO
[0x54] EPCOS
[0x55] ACCEL
[0x56] NAVTEQ
[0x57] TAKATA
[0x58] DEFOND
[0x59] VIMERCATI
[0x5A] INERGY
[0x5B] MAGNA STEYR
[0x5C] MITSUBISHI MOTORS (MMC)
[0x5D] SANDEN
[0x5E] HIROSE
[0x5F] XIAMENTTE
[0x60] BOUYGUES TELECOM
[0x61] XIGUANG
[0x62] LITHIUM ENRGY JAPAN
[0x63] CHASSIS BRAKES INTERNATIONAL
[0x64] WITTE
[0x65] TOM TOM
143
[0x66] ARKAMYS
[0x67] NUANCE
[0x68] LEONI WIRING SYSTEMS FRAN
[0x69] GETRAG
[0x6A] KAMCOM
[0x6B] LG ELECTONICS INC
[0x6C] SOJADIS
[0x6D] KYB
[0x6E] HUWAEI
PSA ULP or CAL Number (3 bytes) 3 Byte; Bcd; HighLow (Motorola)
(BCD_24Bits)
Routine_Table_FF04_Routine_Resp Multiplexer [0..1] Byte, see page 149
onse
(Routine_Table_FF04_Routine
_Response)
routineControlOption(81- 1 Byte
82)_ENUM(8bits) [0x81] Calibration part
(ENUM_8Bits_63) [0x82] Global part (Calibration AND software)
routineInfo(01-02)_ENUM 8bits 1 Byte
Generic routine status with 01, 02 states. [0x02] Routine finished OK
The data type routineInfo(01-02)_ENUM
8bits' was set to read-only when variant
'Base Variant' has been locked.
RoutineStatusRecord 01_02_03_4 1 Byte
Generic routine status with 01, 02, 03 [0x02] Routine finished OK
states. [0x03] Routine finished NOK
Invalid values:
[0x00] Undefined
routineStatusRecord(04,08,10)_ENU 1 Byte
M_8Bits (ENUM_8Bits_51) [0x04] Calibration NOK
[0x08] Software NOK
[0x10] Writing error
[0x40] ACT NOK
Invalid values:
[0x09..0x0F] Undefined
[0x11..0x3F] Undefined
[0x41] No signal
SYSTEM - HEX 1 byte 1 Byte
(ENUM_8Bits_55) [0x2D] TBMU HY4P
The data type SYSTEM - HEX 1 byte' [0xA7] AR2S Valéo (STT2)
was set to read-only when variant 'Base [0xA8] BTMU (Calc.Surveillance Batterie)
Variant' has been locked. [0xAB] BSI TOP99 SAGEM
[0xAC] BSI TOP2000 SAGEM
[0xAD] BSI LIGHT 2000 VALEO
[0xAE] BSI LIGHT 2001 VALEO
[0xAF] BSI LIGHT 2003 SIEMENS
[0xB0] BSI 2004 ET BSI 2004 EV JCAE
[0xB1] BSI LIGHT 2001 SIEMENS
[0xB2] BSI 2004 ET BSI 2004 EV VALEO
[0xB3] BSI 2010
[0xB4] BSM 2010
[0xB5] BSOPT
[0xB6] BTT
[0xB7] BTC
[0xB8] BSR
144
[0xB9] RADIO
[0xBA] CAFR
[0xBB] BPV
[0xBC] BEBA
[0xBD] BLVV
[0xBE] HCU1 Gen1
[0xBF] DMTC
[0xC0] AIRBAG AB9 BOSCH
[0xC1] AIRBAG AUTOLIV
[0xC2] BDCP TEMIC
[0xC3] AIRBAG AB10 BOSCH
[0xC4] RBG
[0xC5] TBMU Gen1
[0xC6] BSP
[0xC7] BSE
[0xC9] MDPLC
[0xCA] BCM
[0xCB] HCU2 Gen1
[0xCC] BCC
[0xCD] HCU1 HY4P
[0xCE] HCU2 HY4P
[0xCF] AUDIOTEL
[0xD0] ADML
[0xD6] AMPLI PHILIPS
[0xD7] AMPLI HARMAN BECKER JBL
[0xD8] AMPLI
[0xDD] CDPL / CVM
[0xDE] CDPL KOSTAL
[0xDF] CDPL BOSCH
[0xE0] AAS VALEO
[0xE1] AAS BOSCH
[0xE2] AAS METASYSTEM
[0xE3] AAS
[0xE4] SAM
[0xE8] ARTIV
[0xE9] ACC
[0xEC] MATRICE DE POINTS
[0xED] EMF
[0xEF] AIRBAG géné4 TEMIC
[0xF0] RT3 CAN MAGNETI MARELLI
[0xF1] RT3evCAN MAGNETI MARELLI
[0xF2] NG4 HARMAN BECKER
[0xF3] RNEG HARMAN BECKER
[0xF4] MDS
[0xF5] BTEL
[0xF7] VTH
[0xF8] CMB X6 JCAE
[0xF9] CMB X7 NIPPON SEIKI
[0xFA] CMB A58 MAGNETI MARELLI
[0xFB] CMB A51-A55 VDO
[0xFC] CMB
Table of DIDs of context Multiplexer [1..2] Byte, see page 149
(TABLE_DID_CONTEXT)
The data type Table of DIDs of context'
Table_0701_RoutinePosRep Multiplexer [0..1] Byte, see page 153
See 02013_18_00051
( UDS_TEST_MASCOM )
145
UNM_16Bits (UNM_16Bits) 2 Byte; HighLow (Motorola)
The data type UNM_16Bits' was set to y = x ; Lower limit (phys): 0; Upper limit (phys): 65535;
has been locked.
UNM_16Bits_Milliseconde 2 Byte; HighLow (Motorola)
(UNM_16Bits_ms) y = x ms; Lower limit (phys): 0 ms; Upper limit (phys): 65535 ms;
UNM_16Bits_Milliseconde_1 2 Byte; HighLow (Motorola)

(UNM_16Bits_ms_1) y = 10x ms; Lower limit (phys): 0 ms; Upper limit (phys): 655350 ms;
UNM_8Bits (UNM_8Bits) 1 Byte

The data type UNM_8Bits' was set to y = x ; Lower limit (phys): 0; Upper limit (phys): 255;
has been locked.
UNM_8Bits(1) (UNM_8Bits_1) 1 Byte
0 to 255, Factor 1 y = x ; Lower limit (phys): 0; Upper limit (phys): 255;
VV_PSAdataIdentifier_6 2 Byte; HighLow (Motorola)

(RecordDataIdentifier) [0x0100] Powerlatch flag state
PSA valid/invalid ranges with rules from [0x0101..0x0CFF] Specific - To be defined by the function manager (To be
DC_TI_702 and ISO 14229-1:2013 defined by the function manager)
(Annex C / DID parameter definitions). [0x0D00] Factory data (Process byte)
[0x0D01] Specific - Shared (Reserved) (Shared (Reserved))
[0x1100] CPU Load of device
[0x1500..0x18FF] Secured - To be defined by the function manager (To be
defined by the function manager)
[0x1900..0x20FF] Secured - Shared (Reserved) (Shared (Reserved))
[0x2100..0x28FF] Mixed - To be defined by the function manager (To be
defined by the function manager)
[0x2901] BodySecuredCodingTraceability(W/R)
[0xC000] SecuredCodingTraceability (SCT)
[0xC002] Size for multi DID
[0xCF00..0xD3FF] No secure (Shared (Reserved))
[0xD400..0xE7FF] No secure (To be defined by the function manager)
[0xE800..0xEFFF] Ident. context groups (Identificationof the context groups
linked to the fault codes (Reserved))
[0xF010] ECUCalibrationVerificationNumber (ECU_CVN)
[0xF011] ECUName (ECUNM)
[0xF012] ECU Calibration Identification (ECU CALID)
[0xF013] eCALL_RxSWIN
[0xF014] OTA_RxSWIN
[0xF015] MASCOM Key Status (DMKEYS) (VSM or BSRF DID_PSK_STATE)
[0xF080] Authentication Zone PSA (ZA)
[0xF08A..0xF08E] CAN Counters (For only engineering)
[0xF08F] EMC Standardization Label (EMCSL)
[0xF090] EcuHardware
[0xF091] LocalConfig
[0xF092] Wiring
[0xF093] SystemConfig
[0xF0FE] Identification Zone PSA (ZI (Present if ECU download))
[0xF180] BootSoftwareIdentificationDataIdentifier
[0xF186] ActiveDiagnosticSessionDataIdentifier
[0xF18A] SystemSupplierIdentifierDataIdentifier
[0xF18B] ECUManufacturingDateDataIdentifier
[0xF18C] ECUSerialNumberDataIdentifier
[0xF190] VINDataIdentifier
[0xF192..0xF195] SupplierReserved (ISO Definition)
[0xF196] exhaustRegulationOrTypeApprovalNumberDataIdentifier
(EUROTANDID) (ISO 14229-1 definition)
[0xF1F0..0xF1FF] IdentificationOptionSystemSupplierSpecific (Reserved for
146
Supplier)
[0xF400..0xF41B] OBDPids (OBDPID) (OBDPID)
[0xF41C] OBD supported (OBDSUP)
[0xF41D..0xF4FF] OBDPids (OBDPID) (OBDPID)
[0xF800..0xF8FF] OBDInfoTypes (OBDINFTP) (OBDINFTP)
[0xF900..0xF9FF] TachographDataIdenfier (ISO 16844-7)
[0xFA06] Number of Deployment Loop Table Records and status
[0xFD00..0xFEFF] SystemSupplierSpecific
[0xFF00] UDSVersionDataIdentifier
Invalid values:
[0x00..0xFF] Invalid signal (ISOSAEReserved)
[0x0D02..0x10FF] Invalid signal (Shared specific (Reserved))
[0x2900] Invalid signal (Mixed - Shared (Reserved))
[0x2902..0x3CFF] Invalid signal (Mixed - Shared (Reserved))
[0x3D00..0xA5FF] Invalid signal (Reserved for PSA manufacturer)
[0xA600..0xA7FF] Invalid signal (ReservedForLegislativeUse)
[0xA800..0xACFF] Invalid signal (Reserved for PSA manufacturer)
[0xAD00..0xAFFF] Invalid signal (ReservedForLegislativeUse)
[0xB000..0xB1FF] Invalid signal (Reserved for PSA manufacturer)
[0xB200..0xBFFF] Invalid signal (ReservedForLegislativeUse)
[0xC300..0xCEFF] Invalid signal (ReservedForLegislativeUse)
[0xF000..0xF00F] Invalid signal
(NetworkConfigurationDataForTractorTrailerApplicationDataID)
[0xF016..0xF07F] Invalid signal (Reserved by PSA (Administrator))
[0xF081..0xF089] Invalid signal (Reserved by PSA (Administrator))
[0xF094..0xF0FD] Invalid signal (Reserved by PSA (Administrator))
[0xF0FF] Invalid signal (Reserved by PSA (Administrator))
[0xF100..0xF17F] Invalid signal
(IdentificationOptionVehicleManufacturerSpecificDataIdentifier)
[0xF181..0xF185] Invalid signal (ISOSAEReservedStandardized)
[0xF187..0xF189] Invalid signal (ISOSAEReservedStandardized)
[0xF18D..0xF18F] Invalid signal (ISOSAEReservedStandardized)
[0xF191] Invalid signal (ISOSAEReservedStandardized)
[0xF197..0xF1EF] Invalid signal (ISOSAEReservedStandardized)
[0xF200..0xF3FF] Invalid signal (ISOSAEReservedStandardized)
[0xF500..0xF7FF] Invalid signal (OBDReservedStandardized)
[0xFA00..0xFA05] Invalid signal (AirbagDeployementDataIdentifier)
[0xFA07..0xFA0F] Invalid signal (AirbagDeployementDataIdentifier)
[0xFA10..0xFCFF] Invalid signal (ISOSAEReservedStandardized)
[0xFF01..0xFFFF] Invalid signal (ISOSAEReserved)
VV_PSAdiagnosticSessionType_1 1 Byte
(VV_PSAdiagnosticSessionTyp [0x01] defaultSession (DS) (DS)
e_1) [0x02] ProgrammingSession (PRGS) (PRGS)
PSA valid/invalid ranges with rules from [0x03] extendedDiagnosticSession (EXTDS) (EXTDS)
DC_TI_702 and ISO 14229-1:2013 (§9.2 [0x04] safetySystemDiagnosticSession (SSDS) (SSDS: Reserved for ISO
DSC (0x10) service / table 25)). 26021)
[0x40..0x4F] PSAReserved (PSARESRVD)
[0x50] distantVehicleAccessSession (DVAS) (DVAS: Télédiagnostic)
[0x60..0x7E] systemSupplierSpecific (SSS) (SSS: Reserved for supplier
(Plant,...))
Invalid values:
[0x00] Invalid signal (ISOSAEReserved)
[0x05..0x3F] Invalid signal (ISOSAEReserved)
[0x51..0x5F] Invalid signal (DVAS: Reserved for others distant access
session (Télédiag,...))
[0x7F] Invalid signal (ISOSAEReserved)
VV_PSAresetType_1 1 Byte
(VV_PSAresetType_1) [0x01] hardReset (HR)
PSA valid/invalid ranges with rules from [0x02] keyOffOnReset (KOFFONR)
DC_TI_702 and ISO14229-1: 2013 (§9.3 [0x03] softReset (SR)
table 34). [0x60..0x7E] systemSupplierSpecific (SSS) (To be defined by/with the
147
supplier.)
Invalid values:
[0x04] Invalid signal (enableRapidPowerShutDown (ERPSD))
[0x05] Invalid signal (disableRapidPowerShutDown (DRPSD))
[0x06..0x3F] Invalid signal (ISOSAEReserved)
[0x40..0x5F] Invalid signal (vehicleManufacturerSpecific (VMS))
VV_PSAroutineIDentifier_2 2 Byte; HighLow (Motorola)
(VV_PSAroutineIDentifier_2) [0x0100..0x01FF] TachographTestIds (TACHORI_) (Reserved for
PSA valid/invalid ranges with rules from Tachograph)
DC_TI_702 and ISO 14229-1:2013 [0x0200..0x02FF] RIDEngineering (vehicleManufacturerSpecific)
(Annex F / RID definition). [0x0301] ResetCPULoad (RESET_CPU_LOAD_0301)
[0x0400] PowerlatchInformationPositioning (ASSEMBLY_0400) (Shared
(Reserved))
[0x0401..0x04FF] RIDAssembly (ASSEMBLY) (Assembly)
[0x0600..0x06FF] RIDSecured (SECURED) (PSA RID Secured)
[0x0700] MASCOM Key Programming (MKEYP) (VSM_UDS_PSK_RUN)
[0x0701] MASCOM Test (MTEST) (BSRF_UDS_TEST_MASCOM)
[0xDD00..0xDDFF] RIDNoSecured (NO_SECURED)
[0xDE00] Parameterization of the T(Raj_STmin)
[0xDE01] MASCOM Key Status (VSM_UDS_PSK_STATE)
[0xDF00..0xDF21] RIDNoSecured (NO_SECURED)
[0xDF22] InUsePerformanceRatioreading (IUPR)
[0xDF23..0xDFDF] RIDNoSecured (NO_SECURED)
[0xDFE0] Profils of mission datas reading (IDEA)
[0xDFE1..0xDFFF] RIDNoSecured (NO_SECURED)
[0xE200] DeployLoopRoutineID (DLRI) (ExecuteSPL (EXEC_SPL_E200))
[0xE201] DeployLoopRoutineID (DLRI)
[0xF000..0xFEFF] systemSupplierSpecific (SSS_) (Reserved Supplier)
[0xFF00] EraseMemory (EM_)
[0xFF04] CheckMemory (CM__FF04) (checkMemory (Proposition to be
validated by ISO) memory check after a download)
Invalid values:
[0x00..0xFF] Invalid signal (ISOSAEReserved)
[0x0300] Invalid signal (Mandatory for all UCE implementing the Secured
coding)
[0x0302..0x03FF] Invalid signal (Reserved)
[0x0500..0x05FF] Invalid signal (Assembly common (Reserved))
[0x0702..0x07FF] Invalid signal (Secure common (Reserved))
[0x0800..0xDCFF] Invalid signal (Reserved by PSA)
[0xDE02..0xDEFF] Invalid signal (Vehicle shared (Reserved))
[0xE000..0xE1FF] Invalid signal (OBDTestIds(OBDRI_))
[0xE202..0xE2FF] Invalid signal (SafetySystemRoutineIDs (SASRI_))
[0xE300..0xEFFF] Invalid signal (ISOSAEReserved)
[0xFF01] Invalid signal (checkProgammingDependencies (CPD_))
[0xFF02] Invalid signal (eraseMirrorMemoryDTCs (EMMDTC_))
[0xFF03] Invalid signal (ISOSAEReserved)
[0xFF05..0xFFFF] Invalid signal (ISOSAEReserved)
VV_PSAsecurityAccessType_2 1 Byte
(VV_PSAsecurityAccessType_2 [0x01] requestSeed (RSD) (Progamming)
) [0x02] sendKey (SK) (Programming)
PSA valid/invalid ranges with rules from [0x03] requestSeed (RSD) (Variant coding )
DC_TI_702 and ISO 14229-1:2013 (§9.4 [0x04] sendKey (SK) (Variant coding )
/ Table 42). [0x05] requestSeed (RSD) (Unlocking a control )
[0x06] sendKey (SK) (Unlocking a control )
[0x07] requestSeed (RSD) (Unlocking an engineering control )
[0x08] sendKey (SK) (Unlocking an engineering control)
[0x09] requestSeed (RSD)
[0x0A] sendKey (SK)
[0x5F] requestSeed (RSD) (RBG Pyrotechnic ISO 26021 - 2)
148
[0x60] sendKey (SK) (RBG Pyrotechnic ISO 26021 - 2)
[0x61..0x7E] systemSupplierSpecific (SSS) (Reserved for Supplier)
Invalid values:
[0x0B..0x42] Invalid signal (VehicleManufacturerSpecific (VMS))
[0x43..0x5E] Invalid signal (ISOSAEReserved)
14.1 Multiplexer
14.1.1 Routine_Table_FF04_Routine_Response (Routine_Table_FF04_Routine_Response)

(Default)
0x01 - Routine in progress
0x02 - Routine finished OK
0x03 - Routine finished NOK

0 RSR_NOK_FF04 (RSR_NOK_FF04) routineStatusRecord(04,08,10)_ENUM_8Bits
14.1.2 Table of DIDs of context (TABLE_DID_CONTEXT)

(Default)
0-1 BitField_EcuHardware Hex 2 Bytes
(BitField_EcuHardware)
0 SanityCheck_Flexray ENUM_1bit_FLEXRAY
(SanityCheck_Flexray), see (1)
1 Bist_Flexray (Bist_Flexray), see (2) ENUM_1bit_FLEXRAY
2 ExceedBounds_Flexray ENUM_1bit_FLEXRAY
(ExceedBounds_Flexray), see (3)
3 Overtemp_Flexray ENUM_1bit_FLEXRAY
(Overtemp_Flexray), see (4)
4 Undervoltage_Flexray ENUM_1bit_FLEXRAY
(Undervoltage_Flexray), see (5)
5 TxenPermanent_Flexray ENUM_1bit_FLEXRAY
(TxenPermanent_Flexray), see (6)
6 SoftwareAccess_Flexray ENUM_1bit_FLEXRAY
(SoftwareAccess_Flexray), see (7)
7 E_ACCESS (E_ACCESS), see (8) ENUM_1bit_FLEXRAY
8 FRTRCV_E_FR_NO_TRCV_CONTROL ENUM_1bit_FLEXRAY
(FRTRCV_E_FR_NO_TRCV_CONTROL),
see (9)
9 TxConflict_Flexray ENUM_1bit_FLEXRAY
(TxConflict_Flexray), see (10)
10 - 15 (reserved)
(1) SanityCheck_Flexray
Hardware Fault - Sanity Check
GEN-FlexRay-ST-MGT-0370(0)
(2) Bist_Flexray
Hardware Fault - Built-in Self-Test
(3) ExceedBounds_Flexray
149
Hardware Fault- Exceed Bounds
(4) Overtemp_Flexray
Hardware Fault -Bus Driver Over-Temperature
(5) Undervoltage_Flexray
Hardware Fault-Bus Driver Under-Voltage
(6) TxenPermanent_Flexray
Hardware Fault -Bus Driver TxEN permanent state
(7) SoftwareAccess_Flexray
Hardware Fault-Communication stack
(8) E_ACCESS
Hardware Fault -CC access
§7.2.4 Software stack error detection (Table 4)
(9) FRTRCV_E_FR_NO_TRCV_CONTROL
Hardware Fault -Bus Driver access
(10) TxConflict_Flexray
Hardware Fault- TxConflict
0xF090 - EcuHardware
0-1 BitField_EcuHardware Hex 2 Bytes
(BitField_EcuHardware)
0 SanityCheck_Flexray ENUM_1bit_FLEXRAY
(SanityCheck_Flexray), see (11)
1 Bist_Flexray (Bist_Flexray), see ENUM_1bit_FLEXRAY
(12)
2 ExceedBounds_Flexray ENUM_1bit_FLEXRAY
(ExceedBounds_Flexray), see (13)
3 Overtemp_Flexray ENUM_1bit_FLEXRAY
(Overtemp_Flexray), see (14)
4 Undervoltage_Flexray ENUM_1bit_FLEXRAY
(Undervoltage_Flexray), see (15)
5 TxenPermanent_Flexray ENUM_1bit_FLEXRAY
(TxenPermanent_Flexray), see (16)
6 SoftwareAccess_Flexray ENUM_1bit_FLEXRAY
(SoftwareAccess_Flexray), see
(17)
7 E_ACCESS (E_ACCESS), see (18) ENUM_1bit_FLEXRAY
8 FRTRCV_E_FR_NO_TRCV_CONTROL ENUM_1bit_FLEXRAY
(FRTRCV_E_FR_NO_TRCV_CONTROL),
see (19)
9 TxConflict_Flexray ENUM_1bit_FLEXRAY
(TxConflict_Flexray), see (20)
10 - 15 (reserved)
(11) SanityCheck_Flexray
Hardware Fault - Sanity Check
(12) Bist_Flexray
150
Hardware Fault - Built-in Self-Test
(13) ExceedBounds_Flexray
Hardware Fault- Exceed Bounds
(14) Overtemp_Flexray
Hardware Fault -Bus Driver Over-Temperature
(15) Undervoltage_Flexray
Hardware Fault-Bus Driver Under-Voltage
(16) TxenPermanent_Flexray
Hardware Fault -Bus Driver TxEN permanent state
(17) SoftwareAccess_Flexray
Hardware Fault-Communication stack
(18) E_ACCESS
Hardware Fault -CC access
(19) FRTRCV_E_FR_NO_TRCV_CONTROL
Hardware Fault -Bus Driver access
(20) TxConflict_Flexray
Hardware Fault- TxConflict
0xF091 - LocalConfig
0 BitField_Local_Config Hex 1 Byte
(BitField_Local_Config)
0 PlatestTx_Flexray ENUM_1bit_FLEXRAY
(PlatestTx_Flexray), see (21)
1 PDUR_E_INIT_FAILED ENUM_1bit_FLEXRAY
(PDUR_E_INIT_FAILED), see (22)
2 FRIF_E_JLE_SYNC ENUM_1bit_FLEXRAY
(FRIF_E_JLE_SYNC), see (23)
3-7 (reserved)
(21) PlatestTx_Flexray
Local Config Fault - pLatestTx
(22) PDUR_E_INIT_FAILED
Local Config Fault - PDU-Router initialization
(23) FRIF_E_JLE_SYNC
Local Config Fault - joblist synchronization
0xF092 - Wiring
0 BitField_Wiring (BitField_Wiring) Hex 1 Byte
0 MissingTerm_Flexray ENUM_1bit_FLEXRAY
(MissingTerm_Flexray), see (24)
1 Nit_Flexray (Nit_Flexray), see (25) ENUM_1bit_FLEXRAY
2 SyntaxTx_Flexray ENUM_1bit_FLEXRAY
151
(SyntaxTx_Flexray), see (26)
3 BoundaryTx_Flexray ENUM_1bit_FLEXRAY
(BoundaryTx_Flexray), see (27)
4 BoundaryRx_Flexray ENUM_1bit_FLEXRAY
(BoundaryRx_Flexray), see (28)
5 Busfailure_Flexray ENUM_1bit_FLEXRAY
(Busfailure_Flexray), see (29)
6 FRSM_E_CLUSTER_STARTUP ENUM_1bit_FLEXRAY
(FRSM_E_CLUSTER_STARTUP), see
(30)
7 (reserved)
(24) MissingTerm_Flexray
Wiring Fault -Missing Term
(25) Nit_Flexray
Wiring Fault -Network Idle Time
(26) SyntaxTx_Flexray
Wiring Fault - Tx Syntax Error
(27) BoundaryTx_Flexray
Wiring Fault - Tx Boundary Violation
(28) BoundaryRx_Flexray
Wiring Fault - Rx Boundary Violation
(29) Busfailure_Flexray
Wiring Fault - Bus Failure
(30) FRSM_E_CLUSTER_STARTUP
Wiring Fault - cluster restart
0xF093 - SystemConfig
0 BitField_System_Config Hex 1 Byte
(BitField_System_Config)
0 SyncFrameOverflow_Flexray ENUM_1bit_FLEXRAY
(SyncFrameOverflow_Flexray), see
(31)
1 ContentTx_Flexray ENUM_1bit_FLEXRAY
(ContentTx_Flexray), see (32)
2 NullFrameRx_Flexray ENUM_1bit_FLEXRAY
(NullFrameRx_Flexray), see (33)
3 PDUR_E_PDU_INSTANCE_LOST ENUM_1bit_FLEXRAY
(PDUR_E_PDU_INSTANCE_LOST), see
(34)
4-7 (reserved)
(31) SyncFrameOverflow_Flexray
System Config Fault-synchronization frame Overflow
(32) ContentTx_Flexray
System Config Fault-Tx Content error
152
(33) NullFrameRx_Flexray
System Config Fault-Rx Null Frame
(34) PDUR_E_PDU_INSTANCE_LOST
System Config Fault- PDU Lost
14.1.3 Table_0701_RoutinePosRep (Table_0701_RoutinePosRep)

(Default)
0x01 - Routine in progress

0 ImmoUDSGen_NoProblem_RoutineStatu ENUM_8Bits (v49)
s_4
(ImmoUDSGen_NoProblem_RoutineSt
atus)
No problem generic status.
0x02 - Routine finished OK

0 ImmoUDSGen_NoProblem_RoutineStatu ENUM_8Bits (v49)
s_4
(ImmoUDSGen_NoProblem_RoutineSt
atus)
No problem generic status.
0x03 - Routine finished NOK

0 UDS_TEST_MASCOM_NOK_RoutineSta ENUM_8Bits_UDS_TEST_MASCOM_Errors_1
tus
(UDS_TEST_MASCOM_NOK_RoutineSta
tus)
See 02013_18_00051
( UDS_TEST_MASCOM status ).
15
16 Protocol Services
16.1 Overview
The following table lists all Protocol Services which are used in the document. The default addressing
method and the default response behavior is marked by "X". If there are services in the Diagnostic
Instances which differ from the default values, then this is marked here by "(*)" and described within the
corresponding Diagnostic Instance.
SID Name phys func phys func SPRMIB SPRMIB multi periodic required
req req pos pos phys func req
resp resp req
$10 DiagnosticSessionControl (DSC) X X X X 0/1 0/1 X
$11 ECUReset (ER) X X X X 0/1 0/1 X
$14 ClearDiagnosticInformation (CDTCI) X X X X X
$19 ReadDtcInformation - Report DTC by status X X X X
mask (RDTCBSM)
$19 ReadDtcInformation - Report DTC snapshot X X X X
record by DTC number
$19 ReadDtcInformation - Report number of DTC X X X X
by status mask (RNODTCBSM)
153
$22 ReadDataByIdentifier (RDBI) X (*) X (*) X
$27 SecurityAccess (SA) X X 0/1 0/1
$2E WriteDataByIdentifier (WDBI) X X
$31 RoutineControl - Request routine results X X 0/1 0/1
$31 RoutineControl - Start routine X X 0/1 0/1
$34 Request Download X X
$36 Transfer Data X X
$37 Request Transfer Exit X X
$3E TesterPresent (TP) X X X X 0/1 0/1 X
phys/func req = Test system sends physical/functional request

phys/func pos resp = ECU implements physical/functional positive response
SPRMIB phys/func test system shall set the SPRMIB (Suppress Positive Message Indication Bit) in the
req = physical/functional request:
1 = always (SPRMIB is always 1); 0/1 = user-defined (SPRMIB may be 0 or 1); 0 = never
(SPRMIB is always 0)
multi = ECU sends complete response split up into multiple diagnostic messages
periodic = ECU sends responses periodically
required = there is at least one service in a required, activated diagnostic instance within Common
Diagnostics
16.2 ($10) DiagnosticSessionControl (DSC) (DSC)

See requirements §5.1.1.5, §5.1.1.6 and §5.1.2.1 in DC_TI_702_TS "UDS Generic Mechanisms".
Telediag ($50): The server must prohibit the execution of a diag request required by a distant ask, if it presents a
potential risk for the safety of the materials and yhe peoples.
The DiagnosticSessionControl (DSC) service is used to enable different session in the server(s).
Request:
Byte Name Cvt Value
#1 SID-RQ M $10
#2 Has 'Suppress Positive Response Message Indication Bit' M VV_PSAdiagnosticSessionType_1,
diagnosticSessionType LEV_DS_ see page 147
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $50
#2 diagnosticSessionType (LEV_DS_) M VV_PSAdiagnosticSessionType_1,
see page 147
#3-4 P2Server_Max, Conversion: UNM_16Bits_Milliseconde U (fd)
#5-6 P2*Server_Max, Conversion: UNM_16Bits_Milliseconde_1 U (fd)
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $10
#3 NRC_DSC M
Negative Response Codes:

(IMLOIF)
154
0x83 engineIsRunning (EIR) see page 167
0x88 vehicleSpeedTooHigh (VSTH) see page 167
16.3 ($11) ECUReset (ER) (ER)

Requirements associated to this service are described in §5.1.2.2 of the DC_TI_702 "TS UDS Generic
Mechanisms".
- This service requests the server to effectively perform an ECUReset based on the content of the resetType
parameter value embedded in the ECUReset request message in Extended Diagnostic Session. After a successful
ECUReset, the server shall activate the defaultSession.
- Remark : Reset after downloading is not launched with a diagnostic service (Reset is automatic when the session
changes from programming to default session).
Request:
Byte Name Cvt Value
#1 SID-RQ M $11
#2 Has 'Suppress Positive Response Message Indication Bit' M VV_PSAresetType_1, see page
resetType (RT) 147
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $51
#2 resetType (RT) M VV_PSAresetType_1, see page
147
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $11
#3 NRC_ER M

(IMLOIF)
16.4 ($14) ClearDiagnosticInformation (CDTCI) (CDTCI)

Requirements associated to this service are described in §5.1.4.1 of the DC_TI_702 "TS "UDS Generic
Mechanisms".
Request:
Byte Name Cvt Value
#1 SID-RQ M $14
#2-4 groupOfDTC M
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $54
155
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $14
#3 NRC_CDTCI M

(IMLOIF)
16.5 ($19) ReadDtcInformation - Report DTC by status mask (RDTCBSM) (RDI_RDTCBSM)

The client can retrieve a list of DTCs, which sastisfy a client defined status mask by sending a request with the sub-
function byte set to RDTCBSM. This su-function allows the client to request the server to report all DTCs that are
"test failed" or "confirmed" or etc...The response to this request contains the DTCAM, wihich provides an indication
of DTC status bits that are supported by the server. The client shall exploited this DTCAM parameter for
management of the requests messages.
Request:
Byte Name Cvt Value
#1 SID-RQ M $19
#2 ReportDtcByStatusMask M $02
#3 DtcStatusMask M
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $59
#2 ReportDtcByStatusMask M $02
#3 DTCAvailabilityMask M
ListOfDTC=[ M Number of Iterations: [0..*]
#4 DTC
: StatusOfDtc
: :
: DTC
#4+a StatusOfDtc
]
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $19
#3 NRC_RDTCI M

(IMLOIF)
156
16.6 ($19) ReadDtcInformation - Report DTC snapshot record by DTC number
(RDI_RDTCSRBDTCN)
The sub-function RDTCSRBDTCN enables to retrieve DTCSnapshot record(s) (associated contexts) associated with
a client defined DTC number and DTCSnapshot record number.The DTCsnapshot are environment parameters
(physical units) memorized as from trouble detection. They provide a troubleshooting aid by indicating the
circumstances of trouble occurrence.
Request:
Byte Name Cvt Value
#1 SID-RQ M $19
#2 ReportDTCSnapshotRecordByDTCNumber M $04
#3-5 DTCMaskRecord M
#6 RecordNumber, Conversion: HexDump (1 Byte) M (fd) $FF
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $59
#2 ReportDTCSnapshotRecordByDTCNumber M $04
#3-5 DTC M
#6 StatusOfDTC M
ListOfDTC=[ M Number of Iterations: [0..*]
#7 Data
: :
#7+a Data
]
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $19
#3 NRC_RDTCI M

(IMLOIF)
16.7 ($19) ReadDtcInformation - Report number of DTC by status mask (RNODTCBSM)

(RDI_RNODTCBSM)
RNODTCBSM: A client can retrieve a count of the number of DTCs matching a client defined status mask by
sending a request for this service. The response to this request contains the DTCAM, wihich provides an indication
of DTC status bits that are supported by the server. The client shall exploited this DTCAM parameter for
management of the requests messages.
Request:
Byte Name Cvt Value
#1 SID-RQ M $19
#2 reportNumberOfDTCByStatusMask (RNODTCBSM) M $01
#3 DTCStatusMask M
157
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $59
#2 reportNumberOfDTCByStatusMask (RNODTCBSM) M $01
#3 DTCStatusAvailabilityMask M
#4 FormatIdentifier, Conversion: FormatIdentifier M (fd)
#5-6 DTCCount M
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $19
#3 NRC_RDTCI M

(IMLOIF)
16.8 ($22) ReadDataByIdentifier (RDBI) (RDBI)

Requirements associated to this service are described in §5.1.3.1 ot the DC_TI_702 "TS UDS Generic
Mechanisms".The ReadDataByIdentifier service allows the client to request data record values from the server
identified by one or more dataIdentifiers (DID).
In a request several different identifiers might be combined, in the response these identifiers are sent
together with the belonging data respectively (*)
Request:
Byte Name Cvt Value
#1 SID-RQ M $22
#2-3 Identifier (Byteorder: HighLow (Motorola))(*) M VV_PSAdataIdentifier_6, see page
146
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $62
#2-3 Identifier (Byteorder: HighLow (Motorola))(*) M VV_PSAdataIdentifier_6, see page
146
#4-4+a DataRecord M
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $22
#3 NRC_RDBI M

158
(IMLOIF)
16.9 ($27) SecurityAccess (SA) (SA_RS)

Request:
Byte Name Cvt Value
#1 SID-RQ M $27
#2 Has 'Suppress Positive Response Message Indication Bit' M VV_PSAsecurityAccessType_2,
Type see page 148
#3-3+a Key U
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $67
#2 Type M VV_PSAsecurityAccessType_2,
see page 148
#3-3+a SecuritySeed U
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $27
#3 NRC_SA M

(IMLOIF)
0x36 exceedNumberOfAttempts (ENOA) see page 166
159
16.10 ($2E) WriteDataByIdentifier (WDBI) (WDBI)
The WriteDataByIdentifier service allows the client to write information into the server at an internal location specified
by the provided data identifier.
Requirements associated to this service are described in §5.1.3.3 on DC_TI_702_TS UDS Generic Mechanisms.
Request:
Byte Name Cvt Value
#1 SID-RQ M $2E
#2-3 Identifier (Byteorder: HighLow (Motorola)) M VV_PSAdataIdentifier_6, see page
146
#4-4+a DataRecord M
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $6E
#2-3 Identifier (Byteorder: HighLow (Motorola)) M VV_PSAdataIdentifier_6, see page
146
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $2E
#3 NRC_WDBI M

(IMLOIF)
16.11 ($31) RoutineControl - Request routine results (RC_RRR)

Request:
Byte Name Cvt Value
#1 SID-RQ M $31
#2 Has 'Suppress Positive Response Message Indication Bit' M $03
RoutineControlType
#3-4 Identifier (Byteorder: HighLow (Motorola)) M VV_PSAroutineIDentifier_2, see
page 148
#5-5+a Routine Input Parameters U
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $71
#2 RoutineControlType M $03
#3-4 RoutineIdentifier (Byteorder: HighLow (Motorola)) M VV_PSAroutineIDentifier_2, see
page 148
#5-5+a RoutineStatusRecord -
160
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $31
#3 NRC_RC M

(IMLOIF)
16.12 ($31) RoutineControl - Start routine (RC_STR)

Request:
Byte Name Cvt Value
#1 SID-RQ M $31
RoutineControlType
#3-4 routineIdentifier (Byteorder: HighLow (Motorola)) M VV_PSAroutineIDentifier_2, see
page 148
#5-5+a Routine Input Parameters U
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $71
#2 routineControlType M $01
#3-4 routineIdentifier (Byteorder: HighLow (Motorola)) M VV_PSAroutineIDentifier_2, see
page 148
#5-5+a RoutineStatusRecord -
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $31
#3 NRC_RC M

(IMLOIF)
161
16.13 ($34) Request Download (_34_Request_Download)

Request:
Byte Name Cvt Value
#1 Request Service Id M $34
#2-2+a Data M
Positive Response:
Byte Name Cvt Value
#1 Response Service Id M $74
#2-2+a Data M
Negative Response:
Byte Name Cvt Value
#1 Negative Response Service Identifier M $7F
#2 Request Service Identifier M $34
#3 NRC_RD M

(IMLOIF)
16.14 ($36) Transfer Data (_36_Transfer_Data)

Request:
Byte Name Cvt Value
#2-2+a Data RQ M
Positive Response:
Byte Name Cvt Value
#2-2+a PR M
Negative Response:
Byte Name Cvt Value
#3 NRC_TD M

(IMLOIF)
162
16.15 ($37) Request Transfer Exit (_37_Request_Transfer_Exit)

Request:
Byte Name Cvt Value
Positive Response:
Byte Name Cvt Value
Negative Response:
Byte Name Cvt Value
#3 NRC_RTE M

16.16 ($3E) TesterPresent (TP) (TP)

If the client sends $3E $80, this specific message cannot "block" the server(s).
Request:
Byte Name Cvt Value
#1 SID-RQ M $3E
zeroSubFunction
Positive Response:
Byte Name Cvt Value
#1 SID-PR M $7E
#2 zeroSubFunction M $00
Negative Response:
Byte Name Cvt Value
#1 SID-NR M $7F
#2 SIDRQ-NR M $3E
#3 NRC_TP M

(IMLOIF)
163
17
18 Negative Responses
If the control unit cannot process a received request, it will answer with one of the following negative
response codes (depending on the type of the error). Specific negative response codes are defined at
each service individually.
Supported Negative Response Codes:

0x10 generalReject (GR) GR: This response code indicates that the
requested action has been resjected by the server.
0x11 serviceNotSupported (SNS) SNS: This response code indicates that the
requested action will not be taken because the
server does not support the requested service.
The server shall send this response code in case
the client has sent a request message with a
service identifier, which is either unknown or not
supported by the server. Therefore this negative
response code is not shown in the list of negative
response codes to be supported for a diagnostic
service, because this negative response code is not
applicable for supported services.
0x12 sub-functionNotSupported (SFNS) SFNS:This response code indicates that the
server does not support the service specific
parameters of the request message.
The server shall send this response code in case
the client has sent a request message with a known
and supported service identifier but with "sub
function“ which is either unknown or not supported.
0x13 incorrectMessageLengthOrInvalidFormat IMLOIF: This response code indicates that the
(IMLOIF) requested action will not be taken because the
length of the received request message does not
match the prescribed length for the specified
service or the format of the parameters do not
match the prescribed format for the specified
service.
0x14 response too long (RTL) RTL: This response code shall be reported by the
server if the response to be generated exceeds the
maximum number of bytes available by the
underlying network layer. This could occur if the
response message exceeds the maximum size
allowed by the underlying transport protocol or if the
response message exceeds the server buffer size
allocated for that purpose.
EXAMPLE: This problem may occur when several
DIDs at a time are requested and the combination
of all DIDs in the response exceeds the limit of the
underlying transport protocol.
0x21 busyRepeatRequest (BRR) BRR: This response code indicates that the server
is temporarily too busy to perform the requested
operation. In this circumstance the tool shall
perform repetition of the "identical request
message" or "another request message". The
repetition of the request shall be delayed by a time
specified in the respective implementation
documents.
Example: In a multi-client environment the
diagnostic request of one client might be blocked
164
temporarily by a NRC $21 while a different client
finishes a diagnostic task.
NOTE: If the server is able to perform the
diagnostic task but needs additional time to finish
the task and prepare the response, the NRC $78
shall be used instead of NRC $21.
This response code is in general supported by each
diagnostic service, as not otherwise stated in the
data link specific implementation document,
therefore it is not listed in the list of applicable
response codes of the diagnostic services.
0x22 conditionsNotCorrect (CNC) CNC: This response code indicates that the
server prerequisite conditions are not met.The 0x22
Negative Response Code "ConditionsNotCorrect"
should be replaced by a more detailed negative
response code 0x81 to 0xFE, if the information is
available. In this range, if the request is rejected
due to several invalid conditions, the priority will be
given to the lowest of these NRCs.
0x24 requestSequenceError (RSS) RSS: This response code indicates that the
server expects a different sequence of request
messages or message as sent by the tool. This
may occur when sequence sensitive requests are
issued in the wrong order.
0x25 noResponseFromSubnetComponent NRFSC: The server received the request but it
(NRFSC) cannot execute the request because another server
(of its sub-network) needed for this action did not
respond.
0x26 failurePreventsExecutionOfRequestedActio FPEORA: This response code indicates that the
n (FPEORA) requested action will not be taken because a failure
condition, identified by a DTC (with at least one
DTC status bit for TestFailed, Pending, Confirmed
or TestFailedSinceLastClear set to 1), has occurred
and that this failure condition prevents the server
from performing the requested action...
0x31 requestOutOfRange (ROOR) ROOR: This response code indicates that the
server has detected that the request message
contains a parameter which attempts to substitute a
value beyond its range of authority (e.g. attempting
to substitute a data byte of 111 when the data is
only defined to 100), or which attempts to access a
dataIdentifier/routineIdentifer that is not supported
or not supported in active session.
This response code shall be implemented for all
services, which allow the tool to read data, write
data or adjust functions by data in the server.
0x33 securityAccessDenied (SAD) SAD: This response code indicates that the
server's security strategy has not been satisfied by
the client.
The server shall send this response code if one of
the following cases occur:
the client has sent a request message which
requires an unlocked server.
0x35 invalidkey (IK) IK: Send if an expected 'sendKey' sub-function
value is received and the value of the key does not
165
match the server's internally stored/calculated key.
0x36 exceedNumberOfAttempts (ENOA) ENOA: Exceeding of the number of unsuccessful
unlocking attempts.
0x37 requiredTimeDelayNotExpired (RTDNE) RTDNE: This response code indicates that the
client's latest attempt to gain security access was
initiated before the server's required timeout period
had elapsed.
0x70 uploadDownloadNotAccepted (UDNA) UDNA: This response code indicates that an
attempt to upload download to a server's memory
cannot be accomplished due to some fault
conditions.
0x71 transferDataSuspended (TDS) TDS: This response code indicates that a data
transfer operation was halted due to some fault.
The active transferData sequence shall be aborted.
0x72 generalProgrammingFailure (GPF) GPF: This response code indicates that the server
detected an error when erasing or programming a
memory location in the permanent memory device
(e.g. Flash Memory).
0x73 wrongBlockSequenceCounter (WBSC) WBSC: This response code indicates that the
server detected an error in the sequence of
blockSequenceCounter values. Note that the
repetition of a TransferData request message with a
blockSequenceCounter equal to the one included in
the previous TransferData request message shall
be accepted by the server.
0x78 requestCorrectlyReceived- RCRRP: This response code indicates that the
ResponsePending (RCRRP) request message was received correctly, and that
all parameters in the request message were valid,
but the action to be performed is not yet completed
and the server is not yet ready to receive another
request. As soon as the requested service has been
completed, the server shall send a positive
response message or negative response message
with a response code different from this.
The negative response message with this response
code may be repeated by the server until the
requested service is completed and the final
response message is sent.
When this response code is used, the server shall
always send a final response (positive or negative)
independent of the
suppressPosRspMsgIndicationBit value.
0x7E sub-functionNotSupportedInActiveSession SFNSIAS: This response code indicates that the
(SFNSIAS) requested action will not be taken because the ECU
does not support the requested sub-function in the
session currently active.
This response code shall be supported by each
diagnostic service with a sub-function parameter, if
not otherwise stated in the data link specific
implementation document, therefore it is not listed
in the list of applicable response codes of the
diagnostic services.
0x7F serviceNotSupportedInActiveSession SNSIAS: This response code indicates that the
(SNSIAS) requested action will not be taken because the
server does not support the requested service in
the session currently active.
This response code is in general supported by each
diagnostic service, as not otherwise stated in the
166
data link specific implementation document,
therefore it is not listed in the list of applicable
response codes of the diagnostic services.
0x81 rpmTooHigh (RPMTH) RPMTH: This response code indicates that the
server prerequisite condition for RPM is not met
(current RPM is above a pre-programmed
maximum threshold).
0x82 rpmTooLow (RPMTL) RPMTL: This response code indicates that the
server prerequisite condition for RPM is not met
(current RPM is below a pre-programmed minimum
threshold).
0x83 engineIsRunning (EIR) EIR: This is required for those actuator tests which
cannot be actuated while the Engine is running.
This is different from RPM too high negative
response, and needs to be allowed.
0x84 engineIsNotRunning (EINR) EINR: This is required for those actuator tests
which cannot be actuated unless the Engine is
running. This is different from RPM too low negative
response, and needs to be allowed.
0x85 engineRunTimeTooLow (ERTTL) ERTTL: This response code indicates that the
server prerequisite condition for engine run time is
not met (current engine run time is below a pre-
programmed limit).
0x86 temperatureTooHigh (TEMPTH) TEMPTH: This response code indicates that the
server prerequisite condition for temperature is not
met (current temperature is above a pre-
programmed maximum threshold).
0x87 temperatureTooLow (TEMPTL) TEMPTL: This response code indicates that the
server prerequisite condition for temperature is not
met (current temperature is below a pre-
programmed minimum threshold).
0x88 vehicleSpeedTooHigh (VSTH) VSTH: This response code indicates that the
server prerequisite condition for vehicle speed is
not met (current Vehicle Speed is above a pre-
0x89 vehicleSpeedTooLow (VSTL) VSTL: This response code indicates that the
server prerequisite condition for vehicle speed is
not met (current Vehicle Speed is below a pre-
0x8A throttle/PedalTooHigh (TPTH) TPTH: This response code indicates that the
server prerequisite condition for throttle/pedal
position is not met (current TP/APP is above a pre-
0x8B throttle/PedalTooLow (TPTL) TPTL: This response code indicates that the
server prerequisite condition for throttle/pedal
position is not met (current TP/APP is below a pre-
0x8C transmissionRangeNotInNeutral (TRNIN) TRNIN: This response code indicates that the
167
server prerequisite condition for being in neutral is
not met (current transmission range is not in
neutral).
0x8D transmissionRangeNotInGear (TRNIG) TRNIG: This response code indicates that the
server prerequisite condition for being in gear is not
met (current transmission range is not in gear).
0x8F brakeSwitch(es)NotClosed (BSNC) BSNC: For safety reasons, this is required for
certain tests before it begins, and must be
maintained for the entire duration of the test.
0x90 shifterLeverNotInPark (SLNIP) SLNIP: For safety reasons, this is required for
certain tests before it begins, and must be
maintained for the entire duration of the test.
0x91 torqueConverterClutchLocked (TCCL) TCCL: This response code indicates that the
server prerequisite condition for torque converter
clutch is not met (current Torque Converter Clutch
status above a pre-programmed limit or locked).
0x92 voltageTooHigh (VTH) VTH: This response code indicates that the
server prerequisite condition for voltage at the
primary pin of the server is not met (current voltage
is above a pre-programmed maximum threshold).
0x93 voltageTooLow (VTL) VTL: This response code indicates that the
server prerequisite condition for voltage at the
primary pin of the server is not met (current voltage
is below a pre-programmed maximum threshold).
Negative Response Codes for unsupported services:

19
20 Service Index
$10 $01 Control - defaultSession (DS) 17, 67
$10 $02 Control - ProgrammingSession (PRGS) 16, 66
$10 $03 Control - extendedDiagnosticSession (EXTDS) 17, 67
$10 $50 Control - distantVehicleAccessSession (DVAS) 17, 67
$11 $01 ECUReset - hardReset (HR) 26, 76
$11 $02 ECUReset - keyOffOnReset (KOFFONR) 26, 76
$11 $03 ECUReset - softReset (SR) 26, 76
$14 Clear - Fault Memory 54, 104
$19 $01 Read (Number of DTC By StatusMask) - Fault Memory 54, 104
$19 $02 Read (by Mask) - Fault Memory 54, 104
$19 $04 Read (DTC Snapshot Data by DTC Number) - Fault Memory 54, 104
$22 $0100 Read - Power Latch Flag State (PLFS) 27, 77
$22 $0101 Read - CAL_Fct_LIFECYCLE 40, 90
$22 $0102 Read - CAL_Fct_POSITIONING 43, 93
$22 $0104 Read - CAL_Fct_CONNECT 44, 94
$22 $0105 Read - CAL_Fct_BROADCAST 45, 95
$22 $0106 Read - CAL_Fct_ECALL_TYPE_EMERG_PR 46, 96
$22 $0107 Read - CAL_Fct_ACALL_TYPE_PR 49, 99
$22 $0108 Read - CAL_Fct_CONNECTED_SERVICES 50, 100
$22 $0109 Read - CAL_Fct_ETHERNET 51, 101
$22 $0D01 Read - Size Of ECU Serial Number Data Identifier (SOECUSNDID) 27, 77
$22 $2100 Read - Variant coding possibilities 28, 78
168
$22 $2101 Read - Variant coding programmed 29, 79
$22 $C002 Read - Size For Multi DID (SFMDID) 32, 82
$22 $D400 Read - DATA_Fct_GNSS 52, 102
$22 $D401 Read - DATA_Fct_TRACABILITY 52, 102
$22 $D402 Read - DATA_Fct_EM 53, 103
$22 $D403 Read - DATA_Fct_xCall 54, 104
$22 $F013 Read - eCALL_RegulationXSofWareIdentificationNumber (eCALL_RxSWIN) 32, 82
$22 $F014 Read - OTA_RegulationXSofWareIdentificationNumber (OTA_RxSWIN) 33, 83
$22 $F015 Read - MASCOM Key Status (DMKEYS) 33, 83
$22 $F080 Read - Authentification Zone (ZA) 34, 84
$22 $F0FE Read - Identification Zone for Downloadable ECU (ZI) 35, 85
$22 $F180 Read - Boot Software Identification Data Identifier (BSIDID) 36, 86
$22 $F186 Read - Active Diagnostic Session Data Identifier (ADSDID) 37, 87
$22 $F18B Read - ECU Manufacturing Date Data Identifier (ECUMDDID) 38, 88
$22 $F18C Read - ECU Serial Number Data Identifier (ECUSNDID) 38, 88
$22 $F190 Read - VIN Data Identifier (VINDID) 39, 89
$27 $01 SecurityAccess - Programming Request Seed (PRSD) 18, 68
$27 $02 SecurityAccess - Programming Request Seed (PRSD) Key 18, 68
$27 $03 SecurityAccess - Variant Coding Request Seed (VCRSD) 19, 69
$27 $04 SecurityAccess - Variant Coding Request Seed (VCRSD) Key 20, 70
$27 $05 SecurityAccess - Unlocking Control Request Seed (UCRSD) 21, 71
$27 $06 SecurityAccess - Unlocking Control Request Seed (UCRSD) Key 21, 71
$27 $07 SecurityAccess - Unlocking Engineering Control Request Seed (UECRSD) 22, 72
$27 $08 SecurityAccess - Unlocking Engineering Control Request Seed (UECRSD) Key 23, 73
$27 $09 SecurityAccess - Unlocking eSA Control Request Seed (eSACRSD) 24, 74
$27 $0A SecurityAccess - Unlocking eSA Control Request Seed (eSACRSD) Key 25, 75
$2E $0101 Write - CAL_Fct_LIFECYCLE 40, 90
$2E $0102 Write - CAL_Fct_POSITIONING 43, 93
$2E $0104 Write - CAL_Fct_CONNECT 44, 94
$2E $0105 Write - CAL_Fct_BROADCAST 45, 95
$2E $0106 Write - CAL_Fct_ECALL_TYPE_EMERG_PR 46, 96
$2E $0107 Write - CAL_Fct_ACALL_TYPE_PR 49, 99
$2E $0108 Write - CAL_Fct_CONNECTED_SERVICES 50, 100
$2E $0109 Write - CAL_Fct_ETHERNET 51, 101
$2E $2101 Write - Variant coding programmed 29, 79
$2E $F190 Write - VIN Data Identifier (VINDID) 39, 89
$31 $01 $0400 Start - Powerlatch Information Positioning (PIP) 58, 108
$31 $01 $0600 Start - XCALL_DRIVING 59, 109
$31 $01 $0601 Start - GNSS_DRIVING 61, 111
$31 $01 $0602 Start - DIAG_INSTALL 62, 112
$31 $01 $0701 Start - MASCOM Test (MTEST) 63, 113
$31 $01 $FF00 Start - erase Memory (EM) 64, 114
$31 $01 $FF04 Start - check Memory (CM) 65, 115
$31 $03 $0400 Results - Powerlatch Information Positioning (PIP) 58, 108
$31 $03 $0600 Results - XCALL_DRIVING 59, 109
$31 $03 $0601 Results - GNSS_DRIVING 61, 111
$31 $03 $0602 Results - DIAG_INSTALL 62, 112
$31 $03 $0701 Results - MASCOM Test (MTEST) 63, 113
$31 $03 $FF00 Results - erase Memory (EM) 64, 114
$31 $03 $FF04 Results - check Memory (CM) 65, 115
$34 Request Download - Upload/Download 56, 106
$36 Transfer Data - Upload/Download 56, 106
$37 Request Transfer Exit - Upload/Download 56, 106
$3E $00 Send - Tester Present 66, 116
21
169
22 Index
($10) DiagnosticSessionControl (DSC) Communication Parameter 15
Protocol Service 154 Application
($11) ECUReset (ER) Data Object 36, 86
Protocol Service 155 ASCII_1024_1
($14) ClearDiagnosticInformation (CDTCI) Data Type 131
Protocol Service 155 ASCII_120_1
($19) ReadDtcInformation - Report DTC by Data Type 131
status mask (RDTCBSM) ASCII_128_1
Protocol Service 156 Data Type 131
($19) ReadDtcInformation - Report DTC ASCII_128_1(1)
snapshot record by DTC number Data Type 131
Protocol Service 157 ASCII_128_1(2)
($19) ReadDtcInformation - Report number of Data Type 131
DTC by status mask (RNODTCBSM) ASCII_128Bits_eCALL_RxSWIN_1
($22) ReadDataByIdentifier (RDBI) ASCII_128Bits_OTA_RxSWIN_1
($27) SecurityAccess (SA) ASCII_160_1
($2E) WriteDataByIdentifier (WDBI) ASCII_320_1
($31) RoutineControl - Request routine results ASCII_8Bits_ECU Serial Number ECUSN
($31) RoutineControl - Start routine ASCII_8Bits_VIN_1
($34) Request Download ASCII_ECUSerialNumber
($36) Transfer Data Authentification Zone (ZA)
Protocol Service 162 Diagnostic Instance 34, 84
($37) Request Transfer Exit AUTOMATIC_ECALL_ACTIVE_1
Protocol Service 163 Data Object 46, 96
($3E) TesterPresent (TP) Base Variant
Protocol Service 163 Variant 16
ACALL_BACK_TIME_1 Baudrate
Data Object 49, 99 Communication Parameter 15
ACALL_CANCELLATION_TIME_1 BCD_40Bits_PSA Part Number Format
Data Object 49, 99 Data Type 131
ACALL_DIAL_DURATION_1 BCD_80Bits_PSA Part Number Format_1
ACALL_MESS_ATTEMPT_1 BCD_8bits_Date_day
ACALL_MESS_TRAN_TIME_1 BCD_8bits_Date_month
ACALL_MESSAGE_URL_1 BCD_8bits_Date_year
ACALL_NUMBER_1 BCD_8bits_Hour_1
ACALL_PUSH_FLAG_2 BCD_8bits_Minute_1
ACALL_REGISTRAT_TIME_1 Bist_Flexray
Data Object 49, 99 Data Object 149, 150
ACALL_UNAV_REQ_TIME_1 BitField_EcuHardware
Active Diagnostic Session Data Identifier BitField_Local_Config
(ADSDID) Data Object 151
Diagnostic Instance 37, 87 BitField_System_Config
Address And Length Format Identifier Data Object 152
Data Type 130 BitField_Wiring
Addressing Scheme Data Object 151
170
BlockSequenceCounter_2 CAL_Fct_POSITIONING
Data Object 56, 57, 106, 107 Diagnostic Instance 43, 93
Blocksize CAN-ID Type
Communication Parameter 16 Communication Parameter 15
Boot Software Identification Data Identifier CANCEL_ACALL_1
(BSIDID) Data Object 59, 109
Diagnostic Instance 36, 86 CANCEL_ECALL_1
BootEdition (BE) Data Object 59, 109
Data Object 37, 87 CANFrameFillerByte
BootSoftwareIdentificationNumber (BSIN) Communication Parameter 15
Data Object 37, 87 check Memory (CM)
BootVersion (BV) Diagnostic Instance 65, 115
Data Object 37, 87 Clear
BoundaryRx_Flexray Service 54, 104
Data Object 152 Code system du calculateur
BoundaryTx_Flexray Data Object 35, 85
Data Object 152 CON_ECALL_TEST_NUMB_1
BRO_AM_THRESHOLD_2 Data Object 59, 109
Data Object 45, 95 Confirmed DTC
BRO_DAB_ANNOUC_ACT_2 Data Object 55, 55, 105, 105
Data Object 45, 95 CONNECT_WIFI_ACT_1
BRO_DAB_FOLLOWING_1 Data Object 44, 94
Data Object 45, 95 CONNECT_WIFI_AP_DEV_1
BRO_DAB_THRESHOLD_2 Data Object 44, 94
Data Object 45, 95 ContentTx_Flexray
BRO_FM2_ACT_PASSIVE_1 Data Object 152
Data Object 45, 95 Control
BRO_FM_FOLLOW_ME_2 Service 16, 17, 17, 17, 66, 67, 67, 67
Data Object 45, 95 DATA_Fct_EM
BRO_FM_THRESHOLD_2 Diagnostic Instance 53, 103
Data Object 45, 95 DATA_Fct_GNSS
BRO_RDS_ACT_2 Diagnostic Instance 52, 102
Data Object 45, 95 DATA_Fct_TRACABILITY
BRO_TA_ACT_2 Diagnostic Instance 52, 102
Data Object 45, 95 DATA_Fct_xCall
BRO_WSH_CONF_2 Diagnostic Instance 53, 103
Data Object 45, 95 dataFormatIdentifier(DFI)
BSRF Data Object 56, 106
Variant 66 Day
BSRF_0000003273_00_5_0 Data Object 33, 83
ECU 14 defaultSession (DS)
BSRF_BRAND_CFG_1 Diagnostic Instance 17, 67
Data Object 44, 94 DFI_ENUM_8Bits
Bus Type Data Type 132
Communication Parameter 14 Diag Frame Evolution Index (DFEI)
Busfailure_Flexray Data Object 35, 85
Data Object 152 Diag Frame Evolution Index_1byte
CAL_Fct_ACALL_TYPE_PR Data Type 132
Diagnostic Instance 49, 99 DIAG_INSTALL
CAL_Fct_BROADCAST Diagnostic Instance 62, 112
Diagnostic Instance 45, 95 diagnosticSessionType (LEV_DS_)
CAL_Fct_CONNECT Data Object 37, 87
Diagnostic Instance 44, 94 DID_CTX_5
CAL_Fct_CONNECTED_SERVICES Data Type 132
Diagnostic Instance 50, 100 DIDF802_F190_INTPY02_VIN_1
CAL_Fct_ECALL_TYPE_EMERG_PR Data Type 132
Diagnostic Instance 46, 96 distantVehicleAccessSession (DVAS)
CAL_Fct_ETHERNET Diagnostic Instance 17, 67
Diagnostic Instance 51, 101 DLF_EPF_PR_RDTCI_19_RDTCSSBDTC_04
CAL_Fct_LIFECYCLE Data Type 133
Diagnostic Instance 40, 90 Data Object 55, 105
171
Download Date Day eCALL_RegulationXSofWareIdentificationNumb
Data Object 36, 86 er (eCALL_RxSWIN)
Download Date Month Diagnostic Instance 32, 82
Data Object 36, 86 ECALL_SMS_FALLBACK_N_1
Download Date Year Data Object 47, 97
Data Object 36, 86 ECALL_TEST_END_DIST_1
Downloading Number (DS) Data Object 47, 97
Data Object 36, 86 ECALL_TEST_NUM_2_1
Downloading site Data Object 48, 98
Data Object 36, 86 ECALL_TEST_NUMBER_2
Downloading Tool Signature (DTS) Data Object 47, 97
Data Object 36, 86 ECALL_TPS_REG_TIME_1
DTC Groups Data Object 47, 97
Data Type 133 ECALL_TRANS_ATTEMPTS_1
DTC Statusbyte Data Object 47, 97
Data Object 54, 55, 104, 105 ECALL_TRANS_INTER_1
DTCCount 1 Data Object 47, 97
Data Object 55, 105 ECALL_UNAV_REQ_TIME_1
DTCCount 2 Data Object 47, 97
Data Object 55, 105 ECU Manufacturing Date Data Identifier
DTCSnapshotRecordNumber_4 (ECUMDDID)
Data Object 55, 105 Diagnostic Instance 38, 88
E_ACCESS ECU manufacturing day (ECUMDDID_DAY)
Data Object 149, 150 Data Object 35, 38, 85, 88
eCALL Homologation Reference ECU manufacturing month
(eCALL_RxSWIN) (ECUMDDID_MONTH)
ECALL_AUTO_DIAL_ATT_1 ECU manufacturing year (ECUMDDID_YEAR)
ECALL_CANCEL_TIME_1 Ecu Reset
Data Object 47, 97 Diagnostic Class 75, 25
ECALL_CCFT_1 ECU Serial Number Data Identifier (ECUSNDID)
ECALL_DIAL_DURATION_1 ECU_TRANSCEIVER_CONF_1
ECALL_FEEDBACK_TEST_NUMBER_1 ECUReset
Data Object 47, 97 Service 26, 26, 26, 76, 76, 76
ECALL_LOG_LIST_SIZE_1 ECUSerialNumber
ECALL_LOG_TRANS_CONF_1 Engineering Datas
Data Object 48, 98 Diagnostic Class 90, 40
ECALL_MAN_CAN_ACT_2 ENTER_TEST_ECALL_1
ECALL_MAN_DIAL_ATT_1 ENUM 8bits_routineInfo(01_02_03)_1
ECALL_MANUAL_ACT_2 ENUM_10bits
ECALL_MESS_ATTEMPT_1 ENUM_15bits
ECALL_MESS_TRANS_TIM_1 ENUM_16bits
ECALL_MESSAGE_URL_1 ENUM_16bits_1
ECALL_NUMBER_1 ENUM_16Bits_PSA Supplier Code
ECALL_P_TEST_REG_T_1 ENUM_1_30
ECALL_PUSH_FLAG_2 ENUM_1_30(1)
ECALL_REG_ATTEMPTS_1 ENUM_1_32
172
ENUM_1_33 ENUM_4_1(1)
Data Type 136 Data Type 138
ENUM_1_33(2) ENUM_6_1
ENUM_1_34 ENUM_8bits
ENUM_1_35 ENUM_8Bits (v49)
ENUM_1bit ENUM_8Bits (v5)
ENUM_1bit_1 ENUM_8Bits_Data_Site_1
ENUM_1bit_2 ENUM_8Bits_NotRealized_Realized
ENUM_1bit_3 ENUM_8bits_routineInfo(01-02)_1
ENUM_1bit_4 ENUM_8Bits_UDS_TEST_MASCOM_Errors_1
ENUM_1bit_FLEXRAY ENUM_9bits_1
ENUM_1Bits_confirmedDTC_CDTC ENUM_9bits_2
ENUM_1Bits_pendingDTC_PDTC EPF_STRUCT_TRPR
ENUM_1Bits_testFailed_TF erase Memory (EM)
Data Type 137 Diagnostic Instance 64, 114
ENUM_1Bits_testFailedSinceLastClear_TFSLC ETHERNET_BR_NODE_ALONE_1
Data Type 137 Data Object 51, 101
ENUM_1Bits_testFailedThisOperationCycle_TF ExceedBounds_Flexray
TOC Data Object 149, 150
Data Type 137 EXIT_TEST_ECALL_1
ENUM_1Bits_testNotCompletedSinceLastClear Data Object 59, 109
_TNCSLC extendedDiagnosticSession (EXTDS)
Data Type 137 Diagnostic Instance 17, 67
ENUM_1Bits_testNotCompletedThisOperationC Fault Memory
ycle_TNCTOC Diagnostic Instance 54, 104
Data Type 137 FillerByteHandling
ENUM_1Bits_warningIndicatorRequested_WIR Communication Parameter 15
Data Type 137 FormatIdentifier
ENUM_24Bits_Tool_signature_1 Data Type 140
Data Type 137 FRIF_E_JLE_SYNC
ENUM_2_11 Data Object 151
Data Type 137 FRSM_E_CLUSTER_STARTUP
ENUM_2_12 Data Object 152
Data Type 137 FRTRCV_E_FR_NO_TRCV_CONTROL
ENUM_2_13 Data Object 149, 150
Data Type 138 Functional Request CAN-ID
ENUM_2_9 Communication Parameter 14
Data Type 138 Functionnal Plan Number (FPN)
ENUM_2bits Data Object 34, 84
Data Type 138 GNSS_CUR_SAT_VIEW_1
ENUM_2bits_1 Data Object 52, 102
Data Type 138 GNSS_DATA_RATE_1
ENUM_3_2 3 Data Object 43, 93
Data Type 138 GNSS_DRIVING
ENUM_3_2(1) Diagnostic Instance 61, 111
Data Type 138 GNSS_MAX_SAT_VIEW_1
ENUM_3_3 Data Object 52, 102
Data Type 138 GNSS_MIN_ELEVATION_1
ENUM_3bits Data Object 43, 93
Data Type 138 GNSS_TICKS_REVOL_1
173
Data Object 43, 93 HEXADECIMAL_8_1(2)
GNSS_VHL_WIDTH_1 Data Type 141
GNSS_WHEEL_DIAMETER_1 Data Type 141
hardReset (HR) Data Type 141
Diagnostic Instance 26, 76 HEXADECIMAL_9_1(1)
Hex 1 Byte Data Type 141
Data Type 140 HexDump (1 Byte)
Hex 2 Bytes Data Type 141
Data Type 140 HexDump (4 Byte)
HEX 2 bytes Unsigned Data Type 141
Data Type 140 HexDump Field 1 Byte
HEX_16Bits (v1) Data Type 141
Data Type 140 Hour
HEX_32Bits_1 Data Object 34, 84
Data Type 140 ID_TLC
HEX_8Bits Data Object 28, 78
Data Type 140 ID_TLC_UDS
HEX_8Bits (v1) 1 Data Object 30, 80
Data Type 140 Identification Parameters
HEX_8Bits (v1) 1(1) Diagnostic Class 76, 26
Data Type 140 Identification Zone for Downloadable ECU (ZI)
HEX_8Bits_DTC_Statusbyte Diagnostic Instance 35, 85
Data Type 140 ImmoUDSGen_NoProblem_RoutineStatus_4
HEX_96Bits Data Object 153, 153
Data Type 140 INCREMENT_OF_CLINK_1
HEXADECIMAL_10_1(1) Data Object 51, 101
Data Type 140 INHIBIT_OTHER_SERVIC_1
HEXADECIMAL_12_1 Data Object 59, 109
Data Type 140 INHIBIT_XCALL_1
Data Type 140 keyOffOnReset (KOFFONR)
HEXADECIMAL_15_1(1) Diagnostic Instance 26, 76
Data Type 140 LC_TIMEOUT_BEF_SLEEP_1
Data Type 141 LFID
Data Type 141 LINK_STATUS_DELAY_1
Data Type 141 MAN_SIM_PROFILE_SWAP_1
Data Type 141 MASCOM Key Status (DMKEYS)
Data Type 141 MASCOM Test (MTEST)
Data Type 141 Max Length of TP Message
HEXADECIMAL_4_3 Communication Parameter 15
Data Type 141 MAX_SAT_VISIBLE_RES_1
HEXADECIMAL_4_Hertz_2 Data Object 61, 111
Data Type 141 MDS _ACALL TYPE PR _000_1
HEXADECIMAL_4_Hertz_2(1) Data Object 31, 81
Data Type 141 MDS _BRO AM BAND ACT _000_1
Data Type 141 MDS _BRO CDR BAND ACT _000_1
Data Type 141 MDS _BRO DIGITAL BAND ACT_000_1
Data Type 141 MDS _BRO DRM BAND ACT _000_1
Data Type 141 MDS _BRO FM BAND ACT _000_1
174
Data Object 30, 80 MNROB
MDS _BRO FM DEEMPHASIS _000_1 Data Object 56, 106
Data Object 30, 80 Month
MDS _BRO HANDOVER _000_1 Data Object 33, 83
Data Object 30, 80 NB_ITER_DLF_EPF_PR_RDTCI_19_RDTCSS
MDS _BRO HDR BAND ACT _000_1 BDTC_04 1
MDS _BRO PRESET BANK _000_1 New Bit Field
Data Object 30, 80 Data Object 28, 30, 44, 45, 50, 61, 41, 51,
MDS _BRO RAD XM BAND ACT _000_1 54, 60, 78, 80, 91, 94, 95, 100, 101, 104, 110,
Data Object 30, 80 111
MDS _BROADCAST FM2 ANTENN_000_1 New Bit Field 1
MDS _ECALL TYPE EMERG PR _000_1 New Bit Field 10
MDS _XCALL VEHICLE PROPUL_000_1 New Bit Field 2
MDS _XCALL VEHICLE TYPE _000_1 New Bit Field 3
MDS BRO HDR BAND ACT PO New Bit Field 4
MDS ACALL TYPE PO New Bit Field 7
MDS BRO AM BAND ACT PO New Bit Field 8
MDS BRO CDR BAND ACT PO New Bit Field 9
MDS BRO DIGITAL BAND ACT PO NewIdentity
MDS BRO DRM BAND ACT PO NewIdentity 1
MDS BRO FM BAND ACT PO NewIdentity 8
MDS BRO FM DEEPHASIS PO Nit_Flexray
Data Object 28, 78 Data Object 151
MDS BRO HANDOVER PO No. of Parameters Associated to the Faults
MDS BRO PRESET BANK PO NullFrameRx_Flexray
MDS BRO RAD XM BAND ACT PO NUM_UNEXPECT_REBOOT_1
MDS BROADCAST FM2 ANTENN PO Number of associated parameters at default (1
Data Object 28, 78 byte)
MDS ECALL TYPE EMERG PO Data Type 142
Data Object 29, 79 Number of coding
MDS XCALL VEHICLE PROPUL PO Data Object 29, 79
Data Object 29, 79 NumberOfIdentifiers
MDS XCALL VEHICLE TYPE PO Data Type 142
Data Object 29, 79 NumberOfModule (NOM)
memoryAddress_ALFID_MA Data Object 37, 87
Data Object 56, 106 Operation ID
memoryAddress_MA Data Object 33, 83
Data Object 56, 106 OTA Homologation Reference (OTA_RxSWIN)
memorySize_ALFID_MS Data Object 33, 83
Data Object 56, 106 OTA_RegulationXSofWareIdentificationNumber
memorySize_MS (OTA_RxSWIN)
Minute Overtemp_Flexray
MissingTerm_Flexray P2*Client
Data Object 151 Communication Parameter 15
175
P2*Server Data Object 48, 98
Communication Parameter 15 RCEOR_SGN_OTL
P2Client Data Object 64, 114
Communication Parameter 15 RD Bitfield
P2Server Data Object 56, 106
Communication Parameter 15 RDPR Bitfield
P3ClientPhys Data Object 56, 106
Communication Parameter 15 Read
PARK_MODE_LOCK_ACT_1 Service 27, 27, 28, 29, 32, 32, 33, 33, 34,
Data Object 41, 91 35, 36, 37, 38, 38, 39, 40, 43, 44, 45, 46, 49, 50,
PDUR_E_INIT_FAILED 51, 52, 52, 53, 54, 77, 77, 78, 79, 82, 82, 83, 83,
Data Object 151 84, 85, 86, 87, 88, 88, 89, 90, 93, 94, 95, 96, 99,
PDUR_E_PDU_INSTANCE_LOST 100, 101, 102, 102, 103, 104
Data Object 152 Read (by Mask)
Pending DTC Service 54, 104
Data Object 55, 55, 105, 105 Read (DTC Snapshot Data by DTC Number)
PERF_GNSS_COLD_START_1 Service 54, 104
Data Object 61, 111 Read (Number of DTC By StatusMask)
PlatestTx_Flexray Service 54, 104
Data Object 151 READ_DATA_ECALL_LOG_1
Power Latch Flag State (PLFS) Data Object 59, 109
Diagnostic Instance 27, 77 READ_EVENT_ECALL_LOG_1
Powerlatch Information Positioning (PIP) Data Object 60, 110
Diagnostic Instance 58, 108 Request CAN-ID
PowerLatchFlagState_PLFS Communication Parameter 14
Data Object 27, 77 Request Download
PRIVA_TPS_ECALL_NUM_1 Service 56, 106
Data Object 48, 98 Request Transfer Exit
Product Number (FPRN) Service 56, 106
Data Object 34, 84 Request TransferData
Programming Request Seed (PRSD) Data Object 56, 106
Diagnostic Instance 18, 68 RESERVE_2
Programming Request Seed (PRSD) Key Data Object 56, 106
Diagnostic Instance 18, 68 RESERVED
Programming Request Seed Key1 Data Object 28, 30, 35, 78, 80, 85
Data Object 19, 69 Reserved - High-order (MSB)
Programming Request Seed Key2 Data Object 34, 84
Data Object 19, 69 Reserved - Low-order (LSB)
Data Object 19, 69 RESET_ACALL_PUSH_FLAG_1
Data Object 19, 69 RESET_ECALL_PUSH_FLAG_1
Programming Request Seed1 Data Object 60, 110
Data Object 18, 68 Response CAN-ID
Programming Request Seed2 Communication Parameter 14
Data Object 18, 68 Response TransferData
Programming Request Seed3 Data Object 57, 107
Data Object 18, 68 Results
Programming Request Seed4 Service 58, 59, 61, 62, 63, 64, 65, 108, 109,
Data Object 18, 68 111, 112, 113, 114, 115
ProgrammingSession (PRGS) Routine Control
Diagnostic Instance 16, 66 Diagnostic Class 107, 57
PSA Supplier Code ZA Routine_Table_FF04_Routine_Response
PSA Supplier Code ZI routineControlOption(81-82)_ENUM(8bits)
PSA SupplierCode ENUM 8bits routineControlOptionRecord FF00
PSA ULP or CAL Number (3 bytes) routineInfo FF00
PUBLIC_TPS_ECALL_NUM_1 routineInfo FF04
176
routineInfo(01-02)_ENUM 8bits SoftwareAccess_Flexray
routineStatusRecord Start
Data Object 65, 115 Service 58, 59, 61, 62, 63, 64, 65, 108, 109,
RoutineStatusRecord 01_02 111, 112, 113, 114, 115
Data Object 58, 108 STmin
RoutineStatusRecord 01_02_03_4 Communication Parameter 16
Data Type 144 SWM_PMA_ALL_TIME_P1_1
RoutineStatusRecord EtatRoutine 4_2 Data Object 40, 90
Data Object 61, 62, 60, 110, 111, 112 SWM_PMA_ALL_TIME_P2_1
routineStatusRecord(04,08,10)_ENUM_8Bits Data Object 40, 90
Data Type 144 SWM_PMA_ALL_TIME_P3_1
RSR_NOK_FF04 Data Object 40, 90
Data Object 149 SWM_PMA_ALL_TIME_P4_1
S3Client Data Object 40, 90
Communication Parameter 15 SWM_PMA_INAC_TIME_P1_1
S3Server Data Object 40, 90
Communication Parameter 15 SWM_PMA_INAC_TIME_P2_1
SanityCheck_Flexray Data Object 40, 90
Data Object 149, 150 SWM_PMA_INAC_TIME_P3_1
Security Access Data Object 40, 90
Diagnostic Class 67, 17 SWM_PMA_INAC_TIME_P4_1
SecurityAccess Data Object 40, 90
State Group 120, 127 SWM_PMA_SWM_TIME_P1_1
Service 18, 18, 19, 20, 21, 21, 22, 23, 24, Data Object 40, 90
25, 68, 68, 69, 70, 71, 71, 72, 73, 74, 75 SWM_PMA_SWM_TIME_P2_1
Send Data Object 40, 90
Service 66, 116 SWM_PMA_SWM_TIME_P3_1
Session Data Object 41, 91
State Group 117, 124 SWM_PMA_SWM_TIME_P4_1
Sessions Data Object 41, 91
Diagnostic Class 66, 16 SWM_PMD_ALL_TIME_P1_1
SET_ROLLOVER_ANGLE_1 Data Object 41, 91
Data Object 59, 109 SWM_PMD_ALL_TIME_P2_1
SIM_PROFILE_SWAP_1 Data Object 41, 91
Data Object 59, 109 SWM_PMD_ALL_TIME_P3_1
Size For Multi DID (SFMDID) Data Object 41, 91
Diagnostic Instance 31, 81 SWM_PMD_ALL_TIME_P4_1
SIZE multi DID (SFMDID) Data Object 41, 91
Data Object 32, 82 SWM_PMD_INAC_TIME_P1_1
Size Of ECU Serial Number Data Identifier Data Object 41, 91
(SOECUSNDID) SWM_PMD_INAC_TIME_P2_1
Diagnostic Instance 27, 77 Data Object 41, 91
SizeOfECUSerialNumberDataIdentifier SWM_PMD_INAC_TIME_P3_1
(SOECUSNDID) Data Object 41, 91
Data Object 27, 77 SWM_PMD_INAC_TIME_P4_1
SMS_OUT_ENCODING_1 Data Object 41, 91
Data Object 50, 100 SWM_PMD_SWM_TIME_P1_1
softReset (SR) Data Object 41, 91
Diagnostic Instance 26, 76 SWM_PMD_SWM_TIME_P2_1
Software Edition Data Object 41, 91
Software evolution index - High-order (MSB) Data Object 41, 91
Software evolution index - Low-order (LSB) Data Object 41, 91
Data Object 34, 84 SWM_SERVICE_ACT_2
Software Reference (".ulp" or ".cal" file number) Data Object 41, 91
in BCD SyncFrameOverflow_Flexray
Software Version SyntaxTx_Flexray
177
Data Object 151 Service 56, 106
SYSTEM - HEX 1 byte Transport Protocol Type
Data Type 144 Communication Parameter 14
Table of DIDs of context TxConflict_Flexray
Table_0701_RoutinePosRep TxenPermanent_Flexray
Data Object 63, 113 UDS_TEST_MASCOM_NOK_RoutineStatus
Table_0701_RoutinePosRep_ROW Data Object 153
Data Object 63, 113 Undervoltage_Flexray
Test failed Data Object 149, 150
Data Object 54, 55, 104, 105 Unlocking Control Request Seed (UCRSD)
Test failed since last clear Diagnostic Instance 21, 71
Data Object 55, 55, 105, 105 Unlocking Control Request Seed (UCRSD) Key
Test failed this monitoring cycle Diagnostic Instance 21, 71
Data Object 55, 55, 105, 105 Unlocking Control Request Seed Key1
Test not completed since last clear Data Object 22, 72
Test not completed this monitoring cycle Data Object 22, 72
TEST_DYSFUNCTION_LED_1 Data Object 22, 72
Data Object 60, 110 Unlocking Control Request Seed Key4
TEST_ECALL_LED_1 Data Object 22, 72
Data Object 60, 110 Unlocking Control Request Seed1
Tester Present Data Object 21, 71
Diagnostic Instance 66, 116 Unlocking Control Request Seed2
THER_MITI_HYST_RAP_1 Data Object 21, 71
THER_MITI_TEMP_RAP1_1 Data Object 21, 71
THER_MITI_TEMP_RAP2_1 Data Object 21, 71
Data Object 42, 92 Unlocking Engineering Control Request Seed
THER_MITI_TEMP_RAP3_1 (UECRSD)
THER_MITI_TEMP_RAP4_1 Unlocking Engineering Control Request Seed
Data Object 42, 92 (UECRSD) Key
Time Br Diagnostic Instance 23, 73
Communication Parameter 16 Unlocking Engineering Control Request Seed
Time Cs Key1
Communication Parameter 16 Data Object 23, 73
Timeout Ar Unlocking Engineering Control Request Seed
Communication Parameter 16 Key2
Timeout As Data Object 23, 73
Communication Parameter 16 Unlocking Engineering Control Request Seed
Timeout Bs Key3
Communication Parameter 16 Data Object 23, 73
Timeout Cr Unlocking Engineering Control Request Seed
Communication Parameter 16 Key4
TRACABILITY_ICCID_P1_1 Data Object 23, 73
Data Object 53, 103 Unlocking Engineering Control Request Seed1
TRACABILITY_IMEI_1 Data Object 23, 73
TRACABILITY_IMSI_1 Data Object 23, 73
Data Object 53, 103 Unlocking eSA Control Request Seed
TRACABILITY_UIN_1 (eSACRSD)
Transfer Data
178
Unlocking eSA Control Request Seed VV_PSAdataIdentifier_6
(eSACRSD) Key Data Type 146
Diagnostic Instance 25, 75 VV_PSAdiagnosticSessionType_1
Unlocking eSA Control Request Seed Key1 Data Type 147
Data Object 25, 75 VV_PSAresetType_1
Data Object 25, 75 VV_PSAroutineIDentifier_2
Data Object 25, 75 VV_PSAsecurityAccessType_2
Data Object 25, 75 Warning indicator requested
Unlocking eSA Control Request Seed1 Data Object 55, 55, 105, 105
Data Object 24, 74 Write
Unlocking eSA Control Request Seed2 Service 29, 39, 40, 43, 44, 45, 46, 49, 50,
Data Object 24, 74 51, 79, 89, 90, 93, 94, 95, 96, 99, 100, 101
Unlocking eSA Control Request Seed3 XCALL_AUTO_ANSWER_T_1
Unlocking eSA Control Request Seed4 XCALL_DRIVING
UNM_16Bits XCALL_EELF_TRANSFER_2
UNM_16Bits_Milliseconde Year
UNM_16Bits_Milliseconde_1
Data Type 146
UNM_8Bits
Data Type 146
UNM_8Bits(1)
Data Type 146
UNREACHEABLE_LINK_1
Data Object 51, 101
Upload/Download
Diagnostic Instance 56, 106
Variant coding possibilities
Variant coding programmed
Variant Coding Request Seed (VCRSD)
Variant Coding Request Seed (VCRSD) Key
Variant Coding Request Seed Key1
Data Object 20, 70
Data Object 20, 70
Data Object 20, 70
Data Object 20, 70
Variant Coding Request Seed1
Data Object 19, 69
Data Object 20, 70
Data Object 20, 70
Data Object 20, 70
VehicleInformationNumber (VIN)
Data Object 39, 89
VIN Data Identifier (VINDID)
179

Test

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Test

Uploaded by

Copyright:

Available Formats

Diagnostic Specification

Editor: Maxime PIERRE

Generated by Vector CANdelaStudio, Reportgenerator 8.5.2100, 2018-09-27

Name Shortcut Company, Division Contact Info

Version Author Date, Tool Status Modification Reason

2.0 E47271 2018-03-16 completed Template updated to

5.0 E47271 2018-09-05 completed Type Organ updated to

6 State Dependency of Service Execution.................................................................................112

- fd = data fixed in the template ("fixed data").

Maximum Number of IDs

Overview extended variants:

Name Category Value Description

10.1.1 Sessions (Sessions)

10.1.1.1 ProgrammingSession (PRGS) ($02) (ProgrammingSession_PRGS)

Subfunction: DiagnosticSessionType ($02)

10.1.1.2 defaultSession (DS) ($01) (defaultSession_DS)

Subfunction: DiagnosticSessionType ($01)

10.1.1.3 extendedDiagnosticSession (EXTDS) ($03) (extendedDiagnosticSession_EXTDS)

Subfunction: DiagnosticSessionType ($03)

10.1.1.4 distantVehicleAccessSession (DVAS) ($50)

Subfunction: DiagnosticSessionType ($50)

10.1.2 Security Access (SecurityAccess)

Subfunction: Type ($01)

10.1.2.2 Programming Request Seed (PRSD) Key ($02)

Subfunction: Type ($02)

10.1.2.3 Variant Coding Request Seed (VCRSD) ($03)

Subfunction: Type ($03)

10.1.2.4 Variant Coding Request Seed (VCRSD) Key ($04)

Subfunction: Type ($04)

10.1.2.5 Unlocking Control Request Seed (UCRSD) ($05)

10.1.2.6 Unlocking Control Request Seed (UCRSD) Key ($06)

10.1.2.7 Unlocking Engineering Control Request Seed (UECRSD) ($07)

10.1.2.8 Unlocking Engineering Control Request Seed (UECRSD) Key ($08)

10.1.2.9 Unlocking eSA Control Request Seed (eSACRSD) ($09)

Subfunction: Type ($09)

10.1.2.10 Unlocking eSA Control Request Seed (eSACRSD) Key ($0A)

Subfunction: Type ($0A)

10.1.3 Ecu Reset (EcuReset)

Subfunction: Type ($01)

10.1.3.2 keyOffOnReset (KOFFONR) ($02) (keyOffOnReset_KOFFONR)

Subfunction: Type ($02)

10.1.3.3 softReset (SR) ($03) (softReset_SR)

Subfunction: Type ($03)

10.1.4 Identification Parameters (Identification_Parameters)

10.1.4.1 Power Latch Flag State (PLFS) ($0100) (Power_Latch_Flag_State_PLFS)

Identifier: Identifier ($0100)

10.1.4.2 Size Of ECU Serial Number Data Identifier (SOECUSNDID) ($0D01)

Identifier: Identifier ($0D01)

10.1.4.3 Variant coding possibilities ($2100) (Variant_coding_possibilities)

10.1.4.4 Variant coding programmed ($2101) (Variant_coding_programmed)

10.1.4.5 Size For Multi DID (SFMDID) ($C002) (Size_For_Multi_DID_SFMDID)

Identifier: Identifier ($C002)

10.1.4.6 eCALL_RegulationXSofWareIdentificationNumber (eCALL_RxSWIN) ($F013)

Identifier: Identifier ($F013)

Identifier: Identifier ($F014)

10.1.4.8 MASCOM Key Status (DMKEYS) ($F015) (MASCOM_Key_Status_DMKEYS)

Identifier: Identifier ($F015)

10.1.4.9 Authentification Zone (ZA) ($F080) (Authentification_Zone_ZA)

Identifier: Identifier ($F080)

(19) PSA Supplier Code ZA

10.1.4.10 Identification Zone for Downloadable ECU (ZI) ($F0FE)

Identifier: Identifier ($F0FE)