Part 3 of 3

SENTRY KEY IMMOBILIZER SYSTEM (SKIS)
The Sentry Key Immobilizer System (SKIS) is an immobilizer system designed to prevent unauthorized vehicle operation. The system consists of a Sentry Key Immobilizer Module (SKIM), ignition key(s) equipped with a transponder chip and engine controller. When the ignition switch is turned ON, the SKIM interrogates the ignition key. If the ignition key is "Valid" the SKIM sends a PCI Bus message to the engine controller indicating the presence of a valid ignition key. Upon receiving a "Valid" key signal the PCM will allow the engine to continue to operate.

SKIS Operation
When ignition power is supplied to the SKIM, the SKIM performs an internal self-test. After the self-test is completed, the SKIM energizes the antenna (this activates the transponder chip) and sends a challenge to the transponder chip. The transponder chip responds to the challenge by generating an encrypted response message using the following:

Secret Key - This an electronically stored value (identification number) that is unique to each SKIS. The secret key is stored in the SKIM, PCM and all ignition key transponders.

Challenge - This is a random number that is generated by the SKIM at each ignition key cycle.

The secret key and challenge are plugged into an algorithm that produces the encrypted response message. The transponder uses the crypto algorithm to receive, decode and respond to the message sent by SKIM. After responding to the coded message, the transponder sends a transponder I.D. message to the SKIM. The SKIM compares the transponder I.D. to the available valid key codes in SKIM memory (8 key maximum). After validating the key the SKIM sends a PCI Bus message called a "Seed Request" to the PCM then waits for a controller response. If the PCM does not respond, the SKIM will send the seed request again. After three failed attempts the SKIM will stop sending the seed request and store a trouble code. If the PCM sends a seed response, the SKIM sends a valid/invalid key message to the PCM. This is an encrypted message that is generated using the following:
VIN - Vehicle Identification Number
Seed - This is a random number that is generated by the PCM at each ignition key cycle.

The VIN and seed are plugged into a rolling code algorithm that encrypts the "valid/invalid key" message. The PCM uses the rolling code algorithm to receive, decode an respond to the valid/invalid key message sent by SKIM. After sending the valid/ invalid key message the SKIM waits 3.5 seconds for a PCM status message from the PCM. If the PCM does not respond with a valid key message to the SKIM, a fault is detected and a trouble code stored.

The SKIS incorporates a warning lamp located in the instrument cluster. The lamp is actuated when the SKIM sends a PCI Bus message to the instrument cluster requesting the lamp ON. The SKIM will request lamp operation for the following:
- bulb check at ignition ON
- to alert the vehicle operator to a SKIS malfunction

For all faults except transponder faults and VIN mismatch, the lamp remains on steady. In the event of a transponder fault the light flashes at the rate of 1 Hz (once per second). If a fault is present the lamp will remain ON or flashing for the complete ignition cycle. If a fault is stored in SKIM memory which prevents the system from operating properly, the PCM will allow the engine to start and run (for 2 seconds) up to six times. After the sixth attempt, the PCM disables the starter relay until the fault is corrected.

For additional information on the SKIS, refer to the appropriate "Powertrain Diagnostic Information".Testing and Inspection

POWER SUNROOF
The power sunroof in the 2000 Grand Cherokee is now controlled by the Body Control Module (BCM). After the ignition has been turned OFF, the power sunroof will remain operational for an additional 45 seconds. If the front doors are opened during this time, the BCM will remove power from the sunroof.

COMMUNICATION
The Programmable Communication Interface or PCI Bus is a single wire multiplexed network capable of supporting binary encoded messages shared between multiple modules. The PCI bus circuit is identified as D25 and is yellow with a violet tracer. Additional tracer colors may be added to the violet in order to distinguish between different module connections. The modules are wired in parallel. Connections are made in the harness using splices.

One splice called the Diagnostic Junction Port, serves as the "Hub" of the bus. The Diagnostic Junction Port provides an access point to isolate most of the modules on the bus in order to assist in diagnosing the circuit. The following modules are used on the WJ:
- Body Control Module
- Door Modules (Driver & Passenger)
- Airbag Control Module
- Controller Antilock Brake
- Powertrain Control Module
- Radio
- CD Changer
- Transmission Control Module
- Automatic Zone Control Module
- Sentry Key Immobilizer Module
- Memory and/or Heated Seats Module
- Electronic Vehicle Information Center
- Mechanical Instrument Cluster

Each module provides its own bias and termination in order to transmit and receive messages. The bus voltage is at zero volts when no modules are transmitting and is pulled up to about seven and a half volts when modules are transmitting.




The bus messages are transmitted at a rate averaging 10800 bits per second. Since there is only voltage present when the modules transmit and the message length is only about 500 milliseconds, it is ineffective to try and measure the bus activity with a conventional voltmeter. The preferred method is to use DRBIII (R) lab scope. The 12V square wave selection on the 20-volt scale provides a good view of the bus activity. Voltage on the bus should pulse between zero and about seven and a half volts. Refer to the figure for some typical displays.

The PCI Bus failure modes are broken down into two categories. Complete PCI Bus Communication Failure and individual module no response. Causes of complete PCI Bus Communication Failure include a short to ground or battery on the PCI circuit. Individual module no response can be caused by an open circuit at either the Diagnostic Junction Port or the module, or an open battery or ground circuit to the affected module.

Symptoms of a complete PCI Bus Communication Failure would include but are not limited to:
- All gauges on the MIC stay at zero
- All telltales on MIC illuminate
- MIC backlighting at full intensity
- Dashed lines in the EVIC ambient temperature display
- No response received from any module on the PCI bus
- No start (if equipped with Sentry Key Immobilizer)

Symptoms of Individual module failure could include any one or more of the above. The difference would be that at least one or more modules would respond to the DRBIII (R).




Diagnosis starts with symptom identification. If complete PCI Bus Communication Failure is suspected, begin by identifying which modules the vehicle is equipped with and then attempt to get a response from the modules with the DRBIII (R). If any modules are responding, the failure is not related to the total bus, but can be caused by one or more modules PCI circuit or power supply and ground circuits. The DRBIII (R) may display "BUS +/- SIGNAL OPEN" or "NO RESPONSE" to indicate a communication problem. These same messages will be displayed if the vehicle is not equipped with that particular module. The CCD error message is a default message used by the DRBIII (R) and in no way indicates whether or not the PCI bus is operational. The message is only an indication that a module is either not responding or the vehicle is not equipped. Refer to the application table for a list of standard and optional modules and their respective Diagnostic Junction Port pin assignments.

VEHICLE THEFT SECURITY SYSTEM
This passive system is designed to protect against vehicle theft. The Vehicle Theft Security System (VTSS) is part of the body control module, which monitors vehicle doors, liftgate, liftglass and the ignition for unauthorized operation. The alarm activates by sounding the horn, flashing the head-lamps, hazard lamps, and the VTSS indicator lamp. The VTSS does not prevent engine operation, this is done with the sentry key immobilizer module. Passive arming occurs upon normal vehicle exit by turning the ignition OFF, opening the driver's door, locking the doors with the power lock, and closing the driver's door or locking the doors with RKE. The indicator lamp on the dash will flash for 15 seconds, showing that arming is in progress. If no monitored systems are activated during this period, the system will arm and the indicator will flash at a slow rate. When something triggers the alarm, the system will signal the headlamps, park lamps, and horn for about 18 minutes.

For complaints about the Theft Alarm going OFF on it's own, use the DRBIII (R) and select "Theft Alarm", "VTSS" then "Monitor Display" and read the "Alarm Tripped By" status.

Tamper Alert - The VTSS tamper alert will sound the horn three times upon disarming to indicate a tamper condition has occurred.

Manual Override- The system will not arm if the doors are locked using the manual lock control (by hand) or if the locks are actuated by an inside occupant after the door is closed.

To verify the system, proceed as follows:
1. Open the driver's door.
2. Remove the ignition key (but keep it in hand).
3. Lock the doors with the power lock switch or the RKE.
4. Close the driver's door.

NOTE: AFTER THE DOORS ARE CLOSED, LOCKING THE DOORS WITH RKE WILL ALSO ARM THE SYSTEM.

NOTE: IF THE VTSS INDICATOR LAMP FLASHED, THE SYSTEM IS OPERATIONAL AND VERIFIED. IF NOT, THERE MAY BE A PROBLEM WITH THE SYSTEM.

Arming/Disarming - Active arming occurs when the remote keyless entry transmitter is used to lock the vehicle doors, whether the doors are open or closed. If one or more doors are open, the arming sequence is completed only after all doors are closed.

Passive disarming occurs upon normal vehicle entry (unlocking driver's door with the key). This disarming also will halt the alarm once it has been activated.

Active disarming occurs when the remote keyless entry transmitter is used to unlock the vehicle doors. This disarming also will halt the alarm once it has been activated.

System Self-Tests - NOTE: System self-tests can be entered only with the DRBIII (R).

NOTE: A POWERTRAIN CONTROL MODULE FROM A VEHICLE EQUIPPED WITH A VEHICLE THEFT SECURITY SYSTEM CANNOT BE USED IN A VEHICLE THAT IS NOT EQUIPPED WITH A VEHICLE THEFT SECURITY SYSTEM. IF THE VTSS INDICATOR LAMP COMES ON AFTER IGNITION ON AND STAYS ON, THE PCI BUS COMMUNICATION WITH THE POWERTRAIN CONTROL MODULE POSSIBLY HAS BEEN LOST.

WINDSHIELD WIPER & WASHER
Front Wiper
System Description
The front wiper system consists of the following features: lo-hi-speed, mist wipers, intermittent wipers, and wipe after wash. The front wiper system is only active when the ignition is in the run/acc position.

The BCM controls the front wiper system with one low-going output to a relay. With this output the BCM determines the motor wipe rate. This rate is a function of the intermittent wiper switch position and vehicle speed. The BCM times the delay after the wipers have parked. If the driver goes from a longer to a shorter delay interval, a wipe is done immediately. The speed sensitive delay is set based on the current speed of the vehicle. If the vehicle crosses above the speed threshold of 10 MPH (16 KPH) while the intermittent wiper delay is occurring, a smaller delay can be used. If the vehicle crosses below the speed threshold a longer delay should not be used until the current delay is completed.

In the lo-hi and mist state, the BCM constantly outputs an active control signal for a delay of zero. The multifunction switch controls the wiper high/ low relay wiper motor in the hi state. This is done with an additional output from the multifunction switch to a relay which selects the motor winding to be energized. The BCM does not distinguish between lo-hi-or mist positions. The mist position is a momentary input to the BCM which causes the wipers to operate at low speed as long as the mist input is present.

The BCM also monitors the front washer motor to perform wipe after wash. The BCM will perform 3 wipes after the wash input is released.

Since the front wiper system is an important safety feature, the BCM will support wiper operation in the event of a failed park input.

If BCM does not detect a change of state on the park input for 8 seconds with the wiper relay energized a Diagnostic Trouble Code will set in the BCM.

Once a failed park switch is detected, intermittent operation is disabled and the BCM will default to the low speed wiper state when the wiper switch is in the intermittent position. The wiper relay will be de-energized when the wiper mode switch is in the OFF position. For open and short states on the wiper mode switch, the wipers should default to OFF.

System Features
Speed Sensitive Intermittent Wipe Mode
There are 5 individual delay times with a minimum delay of 1/2 second to a maximum of 18 seconds. When the vehicle speed is under 10 MPH (16 KPH), the delay time is doubled providing a range of 1 second to 36 seconds.

Mist Wipe
The wiper operates as long as the wiper switch is in the mist position.

Park after Ignition OFF
Because the wiper relays are powered from the battery the BCM can run the wipers to park after the ignition is turned OFF.

Wipe after Wash
When the driver presses the wash button and then releases it, the wiper will continue to run for 3 additional wipe cycles.

The wiper system utilizes the BCM to control the ON/OFF relay for low wiper functions, intermittent wiper delay as the switch position changes, pulse wipe, wipe after wash mode, and wiper motor park functions. The BCM uses the vehicle speed input to double the usual delay time below 10 MPH (16 KPH).

Front/Rear Wiper And Washer Switches (Right Multi-function Switch Stalk)
The front windshield and rear liftglass wiper/ washer switches are located on the wiper multi-function switch stalk which is secured to the right side of the multi-function switch mounting housing on the steering column.

A knob on the end of the wiper multifunction switch stalk is rotated to select the desired front wiper speed (HIGH or LOW) or one of the five intermittent front wiper positions. The wiper stalk is pulled toward the driver to activate the windshield washer system. Both the front wiper and front washer motors will operate continuously for as long as the stalk is held in the momentary FRONT WASH position.

Another rotary switch on the wiper multi-function switch stalk is rotated to select the desired rear wiper speed (ON or DELAY). The wiper stalk is pushed toward the instrument panel to activate the rear liftglass washer system. Both the rear wiper and rear washer motors will operate continuously for as long as the stalk is held in the momentary REAR WASH position.

If any part of the right multi-function switch stalk is faulty or damaged, the entire wiper multi-function switch assembly must be replaced.

Rear Wiper System Control Circuits:

Rear Wiper System
Five circuits feed the rear wiper module. It has two high current circuits, battery (B+) and ground, that run the motor. The remaining three circuits are low current control circuits.

Two of these circuits come from the rear wiper switch ON the right multi-function switch stalk. These circuits are referred to as the rear wiper motor control circuit and the rear wiper motor intermittent control circuit. When the rear wiper switch is in the OFF position, both of these circuits are open and the wiper module parks or remains parked. When the rear wiper switch is in the Intermittent position, the intermittent control circuit is switched to ignition voltage, the motor control circuit is open and the wiper is in the intermittent modes. When the rear wiper switch is in the ON position, the intermittent control circuit is open and the motor control circuit is switched to ignition voltage and the wiper is in continuous wipe mode.

The third control circuit is the AJAR circuit. This circuit is fed by the flip-up glass ajar switch. When the flip-up glass is closed the ajar switch is open and the rear wiper module functions normally. When the flip-up glass is open, the ajar switch is closed and the circuit provides ground to the module. This ground signal indicates to the rear wiper module that it should park if operating or not allow operation if parked.

DIAGNOSTIC TROUBLE CODE (DTC) INFORMATION
Airbag Diagnostic Trouble Codes
ACM Accelerometer
ACM Firing Stored Energy
ACM Internal Diagnostic #1
ACM Logic Stored Energy/Reset
ACM Output Circuit
Cluster Message Mismatch
Driver Squib Circuit Open
Driver Squib Circuit Shorted
Driver Squib Short to Battery
Driver Squib Short to Ground
Loss of Ignition-Run only
Loss of Ignition - Run/Start
No Cluster Messages
No PCI Transmission
Passenger Squib Circuit Open
Passenger Squib Circuit Shorted
Passenger Squib Short to Battery
Passenger Squib Short to Ground
Safing Sensor
Warning Lamp Circuit Open

Audio Diagnostic Trouble Codes
All Output Shorted
AM Section
Cass Error
Cassette Corn Failure
Cassette Eject Failure
Cassette Loading Failure
Cassette Tape Tension High
Cassette Tape Tension Low
CD Changer Mechanical Failure
CD Changer Play Failure
CD Changer Power Supply Too High
CD Changer Read Failure
CD Changer Temperature High
CD Changer Temperature Low
CD Error
CD Mechanical Failure
CD Play Failure
CD Read Failure
CD Temperature High
CD Temperature Low
Front Output Short
FM Section
Improper Disk in CD
Improper Disk in CD Changer
Left Output Short
No Antenna Connection
No PCI Messages From CD Changer
Power Supply Too High
Radio Error
Rear Output Short
Right Output Short

Automatic Zone Control Diagnostic Trouble Codes
Active
Ambient Air Temp Failure
Blower Select SW Open
Blower Select SW Shorted
Cal Checksum Failure
Country Code Failure
Defective I/R Sensor
Driver Blend Door Not Responding
Driver Blend Door Range Too Large
Driver Blend Door Range Too Small
Engine Coolant Response Failure
Engine RPM Failure
IAT Response Failure
Mode Door Range Too Large
Mode Door Range Too Small
Mode Motor Not Responding
Mode Select SW Open
Mode Select SW Shorted
Pass Blend Door Not Responding
Pass Blend Door Range Too Large
Pass Blend Door Range Too Small
Recirc Door Range Too Large
Recirc Door Range Too Small
Recirc Motor Not Responding
Vehicle Speed Failure
Vehicle VIN Failure
VF Dimming Failure
Stored
Ambient Air Temp Failure
Blower Select SW Open
Blower Select SW Shorted
Cal Checksum Failure
Country Code Failure
Defective I/R Sensor
Driver Blend Door Not Responding
Driver Blend Door Range Too Large
Driver Blend Door Range Too Small
Engine Coolant Response Failure
Engine RPM Failure
IAT Response Failure
Mode Door Range Too Large
Mode Door Range Too Small
Mode Motor Not Responding
Mode Select SW Open
Mode Select SW Shorted
Pass Blend Door Not Responding
Pass Blend Door Range Too Large
Pass Blend Door Range Too Small
Recirc Door Range Too Large
Recirc Door Range Too Small
Recirc Motor Not Responding
Vehicle Speed Failure
Vehicle VIN Failure
VF Dimming Failure

Body Control Module Trouble Codes
Accessory (Sunroof) Delay Relay Shorted Hi
Ambient Temperature Sensor CKT Open
Ambient Temperature Sensor CKT Short To Ground
Battery IOD Disconnect at BCM
BCM EEPROM Checksum Error
BCM Flash Checksum Failure
Coolant Level Switch CKT Open
DDM Message Not Received
Dim Switch Open Circuit
Dim Switch Short To Ground
Fog Lamp Relay CKT Open
Fog Lamp Relay CKT Shorted Hi
Hazard Relay CKT Shorted Hi
Headlamp Switch Open Circuit
Headlamp Switch Short To Ground
High Beam Relay CKT Shorted Hi
Horn Relay CKT Shorted Hi
Lamp Fade Failure Short To Battery
Load Shed Failure Short To Battery
Low Beam Relay CKT Shorted Lo/Open
Low Beam Relay CKT Shorted Hi
MIC Message Not Received At BCM
Panel Lamp Driver Failure
Park Lamp Relay CKT Open
Park Lamp Relay Shorted Hi
PCM Message Not Received At BCM
PDM Message Not Received
Radio Dimming Shorted Hi
Rear Def Relay Open
Rear Def Relay Shorted Hi
Remote Radio Switch Short To Ground
Washer Fluid Sensor Failure
Wiper ON/OFF Relay Output Short High
Wiper ON/OFF Relay Output Short Low/Open
Wiper Park Failure
Wiper Switch MUX CKT Open
Wiper Switch MUX CKT Short To Ground

Door Module Diagnostic Trouble Codes
None

Electronic Vehicle Information Center Diagnostic Trouble Codes
Bus Message Missing
EVIC Internal Failures
Compass Test Failure

Memory System (And Heated Seat) Diagnostic Trouble Codes
Driver Seat Heat Output Open/Short To Battery
Driver Seat Heat Output Shorted To Ground
Driver Thermister Out Of Range High
Driver Thermister Out Of Range Low
Front Riser Sensor Out Of Range High
Front Riser Sensor Out Of Range Low
Horizontal Sensor Out Of Range High
Horizontal Sensor Out Of Range Low
Passenger Seat Heat Output Open/Short To Battery
Passenger Seat Heat Output Shorted
Passenger Thermister Out Of Range High
Passenger Thermister Out Of Range Low
Rear Riser Sensor Out Of Range High
Rear Riser Sensor Out Of Range Low
Recliner Sensor Out Of Range High
Recliner Sensor Out Of Range Low

Mechanical Instrument Cluster Trouble Codes
ABS Lamp CKT Short
ABS Lamp Open
ABS Messages Not Received by MIC
ACM Message Not Received by MIC
Airbag Lamp Driver Failure
Airbag Lamp Open
BCM Messages Not Received by MIC
Brake Lamp CKT Short
Brake Lamp Open
EATX Message Status
No PCI Bus Communication
PCM Message Not Received by MIC
SKIM Message Not Received by MIC

REQUIRED TOOLS AND EQUIPMENT
DRBIII (R) (diagnostic read-out box)
Jumper Wires
Ohmmeter
Voltmeter
Diagnostic Junction Port Tester #8339
Test Light
Miller Special Tool #8310