Hyundai Tucson: TP Read Protocol

Hyundai Tucson - Fourth generation (NX4) - (2020-2023) - Workshop Manual / Body Electrical System / Immobilizer System / TP Read Protocol


The immobilizer system will disable the vehicle unless the proper ignition key is used, in addition to the currently available antitheft systems such as car alarms, the immobilizer system aims to drastically reduce the rate of auto theft.

  1. Transponder (TP) - IMMO ECU Communication

TP Read Protocol

TP Read Protocol

  1. IMMO_ECU after IGN on(or CPU Reset cancellation) is sent Challenge to TP and confirmed Serial Number and Signature.
  2. When response of input transponder is not correct, input is retry.
  3. When response of input transponder is correct, The data that calculate Encryption operation in the EEPROM program compared with received data from TP.

    When Codes is same, input is finished.

    If the codes are not same, input are continued until when codes are same.

  4. If IMMO_ECU EEPROM code is not programming, when correct transponder is inputted (C'RC Check OK), input is finished.
  5. After IGN1 on(CPU Reset cancellation), IMMO_ECU is reading the maximum 5times Transponder Code
  6. In the IGN1 ON&EMS_state=Lock state, when received ANKNOWLEDGE, TP is re-authenticated

  1. Transponder / IMMO ECU / EMS authentication

Components Operations

Components Operations

  1. Transponder (Built-in keys)

The transponder has an advanced encryption algorithm. During the key teaching procedure, the transponder will be programmed with vehicle specific data. The vehicle specific data are written into the transponder memory. The write procedure is once only; therefore, the contents of the transponder can never be modified or changed.

Master Folding Key Master Folding Key

Assistant Master Key Assistant Master Key

  1. Antenna Coil

The antenna coil (A) has the following functions..

  • The antenna coil supplies energy to the transponder.
  • The antenna coil receives signal from the transponder.
  • The antenna coil sends transponder signal to the IMMOBILIZER.

    It is located directly in front of the steering handle lock.


The IMMOBILIZER carries out communication with the built-in transponder in the ignition key. This wireless communication runs 011RF (Radio frequency of 125 kHz). The IMMOBILIZER is mounted behind of the crash pad close to center cross bar.

The RF signal from the transponder, received by the antenna coil, is converted into messages for serial communication by the IMMOBILIZER device. And. the received messages from the PCM(ECM) are converted into an RF signal, which is transmitted to the transponder by the antenna.

The IMMOBILIZER does not carry out the validity check of the transponder or the calculation of encryption algorithm. This device is only an advanced interface, which converts the RF data flow of the transponder into serial communication to the PCM(ECM) and vice versa.

  1. PCM (Power Train Control Module)

The PC'M(ECM) (A) carries out a check of the ignition key using a special encryption algorithm, which is programmed into the transponder as well as the PCM(ECM) simultaneously. Only if the results are equal, the engine can be started. The data of all transponders, which are valid for the vehicle, are stored in the PC'M(ECM).

ERN (Encrypted Randorm Number) value between EMS and encrypted smartra unit is checked and the validity of coded key is decided by EMS.

Immobilizer System - Adjustment


     Immobilizer System - Adjustment

    In the body electrical system, failure can be quickly diagnosed by using the vehicle diagnostic system (diagnostic tool). The diagnostic system (diagnostic tool) provides the following information. (1) Fault Code Searching : Checking fai

     Immobilizer System - Removal

    Removal Disconnect the negative (-) battery terminal. Remove the heater control unit. (Refer to Heating,Ventilation And Air Conditioning - "Heater Control Unit") Loosen the mounting bolt,nut,screw and remove the Integrated Body

     Auto Lighting Control System

    Description It's a system that uses illumination sensor to automatically turn ON the tail lamp and head lamp based on the change in surrounding environment's illumination condition. It activates when the vehicle enters/ exits tunnel, o


     Input shaft speed sensor- Installation

    Installation Check that the shaft is in the "N" position. Install the position sensor (A) and then lightly tighten the bolts. Install the position sensor "N" fixing SST(No.:09430-2Cl 10). Tighten position

     Engine Oil - Removal and Installation

    Disconnect the battery negative terminal.  Remove the engine room under cover. (Refer to Engine and Transaxle Assembly - "Engine Room Under Cover") Drain the coolant. (Refer to Cooling System - "Coolant") D