TCU (TELEMATICS) bypass - force start?
Senior Member
Joined: Oct 2025
Posts: 418
Likes: 158
From: South Florida
The CCF modification has been added as a user runnable process now, before was engineering only, so coding the TCU out may be possible if they have diagnostics access at whatever shop you take the vehicle to.
Joined: Apr 2012
Posts: 25,835
Likes: 4,701
From: Summerville, South Carolina
If anyone needs help with this, I can help disable the TCU telematics without you having to tow your car anywhere.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Junior Member
Joined: Dec 2025
Posts: 1
Likes: 0
From: Van nuys
Need help
If anyone needs help with this, I can help disable the TCU telematics without you having to tow your car anywhere.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Junior Member
Joined: Jan 2026
Posts: 5
Likes: 0
If anyone needs help with this, I can help disable the TCU telematics without you having to tow your car anywhere.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Senior Member
Joined: Oct 2025
Posts: 418
Likes: 158
From: South Florida
It can be removed from the CCF and the car will functionally ignore it, as if it was built without a TCU. This is the current service repair for TCU2 cars that have failed TCU modules, as there are no replacements available or plans to have a replacement made in the future. Dealer level repair is to have the CCF modified to code out the TCU, car functions as normal except with no telematics access whatsoever. No JLR app support, no remote services, but does not affect other functions of the car.
Junior Member
Joined: Jan 2026
Posts: 5
Likes: 0
It can be removed from the CCF and the car will functionally ignore it, as if it was built without a TCU. This is the current service repair for TCU2 cars that have failed TCU modules, as there are no replacements available or plans to have a replacement made in the future. Dealer level repair is to have the CCF modified to code out the TCU, car functions as normal except with no telematics access whatsoever. No JLR app support, no remote services, but does not affect other functions of the car.
I imagine JLR will be in a really tough spot once 2G is sunset by telecom providers and these cars can no longer communicate with JLR's servers. They already had to fallback to 2G since 3G was sunset by ATT. Unless the cars are brought in ahead of time to code out the TCU or the TCUs are replaced with newer versions with updated modems (or disabled remotely with an update), the cars will be bricked en-masse. Truly a thoughtless design decision by JLR.
Senior Member
Joined: Oct 2025
Posts: 418
Likes: 158
From: South Florida
Thanks, that's really helpful and exciting to hear. IMO, the TCU is the worst part about these cars. Sketchy privacy implications, vector for hackers, and designed to brick the car with loss of communications.
I imagine JLR will be in a really tough spot once 2G is sunset by telecom providers and these cars can no longer communicate with JLR's servers. They already had to fallback to 2G since 3G was sunset by ATT. Unless the cars are brought in ahead of time to code out the TCU or the TCUs are replaced with newer versions with updated modems (or disabled remotely with an update), the cars will be bricked en-masse. Truly a thoughtless design decision by JLR.
I imagine JLR will be in a really tough spot once 2G is sunset by telecom providers and these cars can no longer communicate with JLR's servers. They already had to fallback to 2G since 3G was sunset by ATT. Unless the cars are brought in ahead of time to code out the TCU or the TCUs are replaced with newer versions with updated modems (or disabled remotely with an update), the cars will be bricked en-masse. Truly a thoughtless design decision by JLR.
Junior Member
Joined: Jan 2026
Posts: 5
Likes: 0
If there is any fault with the telematics system, the following messages are displayed on the Instrument
Cluster (IC) message center:
• 'SOS System Limited' - Displayed if call is possible but with limited service. For example, if there is anyfault with the microphone or the speaker (Diagnostic Trouble Code (DTC) present) or the back-up battery is depleted but the call can be placed and vehicle data transmitted.
• 'SOS System Not Available' - Displayed if Telematics Control Module (TCU) is unable to attempt a call. For example, if no network available or TCU has no Controller Area Network (CAN) network connectivity.
A DTC is set in the TCU in the event of 'SOS System Limited'.
SOS System Limited
This message is driven by DTCs, relating to hardware issues:
• External Global System for Mobile communication (GSM) antenna connection failure
• Global Positioning System (GPS) antenna connection failure
• Emergency call (eCall) switch connection failure
• Hardwired connection failure with Restraints Control Module (RCM)
• Microphone connection failure
• Global Navigation Satellite System (GNSS) signal receiver failure, TCU internal failure
• Speaker connection failure
• TCU back-up battery depleted.
SOS System Not Available
This message is driven by four possible scenarios:
• The TCU is disconnected or unresponsive
• Failed Emergency call (eCall) due to no cellular network coverage
• Failed eCall due to no eCall number provisioned
• Modem failure
Cluster (IC) message center:
• 'SOS System Limited' - Displayed if call is possible but with limited service. For example, if there is anyfault with the microphone or the speaker (Diagnostic Trouble Code (DTC) present) or the back-up battery is depleted but the call can be placed and vehicle data transmitted.
• 'SOS System Not Available' - Displayed if Telematics Control Module (TCU) is unable to attempt a call. For example, if no network available or TCU has no Controller Area Network (CAN) network connectivity.
A DTC is set in the TCU in the event of 'SOS System Limited'.
SOS System Limited
This message is driven by DTCs, relating to hardware issues:
• External Global System for Mobile communication (GSM) antenna connection failure
• Global Positioning System (GPS) antenna connection failure
• Emergency call (eCall) switch connection failure
• Hardwired connection failure with Restraints Control Module (RCM)
• Microphone connection failure
• Global Navigation Satellite System (GNSS) signal receiver failure, TCU internal failure
• Speaker connection failure
• TCU back-up battery depleted.
SOS System Not Available
This message is driven by four possible scenarios:
• The TCU is disconnected or unresponsive
• Failed Emergency call (eCall) due to no cellular network coverage
• Failed eCall due to no eCall number provisioned
• Modem failure
And, while perhaps undocumented, my hunch is that these vehicles periodically phone home to the eCall servers with a keepalive ping. In vehicles sold in markets without historically reliable networks, they may disable this behavior. Someone would need to use wireshark to MITM and monitor the network messages to get a good idea of exactly what is going on.
Senior Member
Joined: Oct 2025
Posts: 418
Likes: 158
From: South Florida
It cannot cause the car to be bricked if it can't call the server. That's not how it works at all. It does a drive authorization check when it verifies the keys, and as long as the TCU hasn't been placed into theft mode by a remote signal, or is missing completely, it allows the car to start. If you called and reported the car stolen, and the TCU was remotely locked into theft mode, you would obviously have a working TCU system to get to that point. If the TCU is damaged or antennas are not present, it cannot be put into locked mode, so stolen vehicle tracking/lockout is not possible.
Thieves pull the cables for the antennas off the TCU or at the shark fins to prevent the car being stopped or tracked, and they still can drive the car. If you pull the rest of the wires out of the TCU, so it can't be seen by the RFA/GWM/PCM, then the car will not start because it fails the local check.
Thieves pull the cables for the antennas off the TCU or at the shark fins to prevent the car being stopped or tracked, and they still can drive the car. If you pull the rest of the wires out of the TCU, so it can't be seen by the RFA/GWM/PCM, then the car will not start because it fails the local check.
Junior Member
Joined: Jan 2026
Posts: 5
Likes: 0
Thanks for the reply and the insights, I am still trying to understand this system as the available information is quite sparse online. I appreciate your patience as I make any dumb / incorrect comments. This is good stuff for the public to be able to understand, regardless.
The workshop manual I quoted (as seen here) states: "Failed Emergency call (eCall) due to no cellular network coverage." One example that might trigger this, entirely *locally*, is the failure to put the car into Transport Mode when jacking the vehicle up / putting it on a tow truck, if I understand correctly. If this is triggered, the car will go into SOS because it cannot make an eCall out after detecting motion while the ignition is off. Or, if someone attempts to make an eCall in their car after 2G is sunset, that might also cause SOS to initiate (again, if I understand this function correctly).
I do however understand now that the TCU being unable to connect to cell service will not trigger SOS on its own without an eCall request of some kind, which is a great thing and puts me more at ease!
Thanks again for all the insights you are providing, I really appreciate it.
It cannot cause the car to be bricked if it can't call the server. That's not how it works at all. It does a drive authorization check when it verifies the keys, and as long as the TCU hasn't been placed into theft mode by a remote signal, or is missing completely, it allows the car to start. If you called and reported the car stolen, and the TCU was remotely locked into theft mode, you would obviously have a working TCU system to get to that point. If the TCU is damaged or antennas are not present, it cannot be put into locked mode, so stolen vehicle tracking/lockout is not possible.
I do however understand now that the TCU being unable to connect to cell service will not trigger SOS on its own without an eCall request of some kind, which is a great thing and puts me more at ease!
Thanks again for all the insights you are providing, I really appreciate it.
Senior Member
Joined: Oct 2025
Posts: 418
Likes: 158
From: South Florida
That excerpt is just telling you how the different faults and warning messages are triggered. I'm a very senior level JLR tech, I'm happy to explain the system in as much or as little detail as you would like. I have a very good understanding of how and why it works, and I routinely troubleshoot them for not working how they should. A failed module (no communications with the others in the car) will stop it from starting, but that's the only failure that could leave you stuck.
Senior Member
Joined: Oct 2025
Posts: 418
Likes: 158
From: South Florida
Happy to help, I enjoy the technical side of things and am always looking to learn. If I can teach a little bit while I'm at it, I love to. My job now takes me through about 10 different dealers on a regular basis, and getting to help out on the most problematic cars, helping the techs get better at fixing them at the same time. I get to do less fixing than when I was an actual tech, so if I can help a few people out here as well, I'm all for it. These are cool cars and don't get the love they deserve, and sometimes get too much of a bad rap based on the British background.
Junior Member
Joined: Jan 2026
Posts: 5
Likes: 0
That excerpt is just telling you how the different faults and warning messages are triggered. I'm a very senior level JLR tech, I'm happy to explain the system in as much or as little detail as you would like. I have a very good understanding of how and why it works, and I routinely troubleshoot them for not working how they should. A failed module (no communications with the others in the car) will stop it from starting, but that's the only failure that could leave you stuck.
As much detail as possible would be super cool to have for the public's consumption.
I think I understand generally that the list there relates to how the faults are triggered. As you mentioned, there is no such line item for a TCU triggering either SOS-SL or SOS-NA while not being able to phone-home. But perhaps you could help me understand the behavior in the scenario I previously described, which I think would give me a more holistic understanding. 2G/3G is unavailable, the car is off, key not available. The car is put on a lift and motion is "detected" by the TCU (in this scenario the car was NOT put into Transport Mode). eCall subsequently fails. What happens next? Or, is it that the motion detection requires a cellular connection?
Last edited by frenchonionsoup; Jan 5, 2026 at 04:07 PM.
Senior Member
Joined: Oct 2025
Posts: 418
Likes: 158
From: South Florida
Tcu does not put itself into theft mode. The only way it can disable the car is via remote command, after the owner reports the car stolen and the telematics control center sends the theft lock command to the car. If the car does not have cell service, this would not reach and there would be no disabling of the car.
Junior Member
Joined: Jan 2026
Posts: 1
Likes: 0
From: Georgia
If anyone needs help with this, I can help disable the TCU telematics without you having to tow your car anywhere.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Junior Member
Joined: Apr 2026
Posts: 3
Likes: 0
From: Essone
If anyone needs help with this, I can help disable the TCU telematics without you having to tow your car anywhere.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Since I am based in Paris, France, I’m actually quite close to you. Could you tell me exactly how the deactivation process is done? If you know of a specialist here in France, or if you can recommend someone who does this remotely via a VCI interface, I’d appreciate it.
Also, what is the ballpark figure for this kind of job? I need to know if it’s more cost-effective to code it out or to keep trying to fix this oxidized hardware. Thanks!
Junior Member
Joined: Apr 2026
Posts: 1
Likes: 0
From: San Francisco
telematics module
If anyone needs help with this, I can help disable the TCU telematics without you having to tow your car anywhere.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.
Anyone needs help PM me or send me your contact info.
A used second hand TCU TELEMATICS will not work, vin number in TCU has to match the BCM vin number.