smaller reset larger         

Main Menu

All times are in GMT +12 :: The time is now 9:00 pm.

Sub Menu

Article Data
Article Ref
Written By
Cindy Myers
Date Created
Thu, 22nd Sep 2016
Updated By
Cindy Myers
Date Modified
Wed, 14th Aug 2019

   Controller Authorization


What is Controller Authorization?

What controllers require authorization?

How do I authorize a controller?

Who can issue Controller Authorization Codes?


What is Controller Authorization?

Prior to reading or flashing any controller, the EFILive software performs a security negotiation with the controller for permission to access the controller. In the past, the security negotiations were implemented using a simple challenge-response process.

In 2017 GM began modernizing and hardening their controllers' security negotiations which is now far more complex and virtually impossible to automate within the EFILive software. This means the end user must now concern themselves with the security negotiations prior to reading or flashing one of these new controllers.

  • It takes on average about five days to find the correct security code on a controller that use GM's previous security system.
  • It would take on average about 174,000 years to find the correct security code on a controller that use GM's new, hardened security system.
  • Over 1 trillion possible security codes exist and guessing the correct code used on a particular vehicle is virtually impossible.

EFILive software now has a controller-authorization module that helps you manage the data required to gain access to your controller.

What controllers require authorization?


How Do I Authorize a Controller?

The Controller Authorization.pdf details a complete set of operating documentation for the Controller Authorization process. The below information provides summarized instructions on how to process a controller auth-code request and complete the authorization requirements.

Software Requirements:

The controller authorization software enhancements are available in the following product versions:

  • EFILive V8.2.2.305 or later.
  • FlashScan V2 / AutoCal Firmware - V2.07.104 or later.

The latest software is available for download from the EFILive website here:

Generate Unauthorized Controller Auth-Code

  1. Attempt to read the controller to obtain the unauthorized controller auth-code.  Because the authorized controller auth-code has not yet been obtained, reading will fail with the error message: $0552 Reading and flashing are not yet authorized for this controller.
  2. Navigate to the [F3: Tune] -> [F8: Authorization] menu in the V8 Scan and Tune software.
    1. If you attempted the failed read using FlashScan or AutoCal in pass-thru mode, your unauthorized controller auth-code will be automatically downloaded into the Controller Authorization screen.
    2. If your attempt to read the controller was performed using FlashScan/AutoCal via BBR, press [Synchronize] to move the necessary information from FlashScan/AutoCal to your PC.
  3. Highlight the entry you wish to have authorized and select [Copy] or [Copy Code].

  1. Place an order in the EFILive store or contact your tuner if they are managing this process for you.  For assistance on placing a controller auth-code order in the EFILive store click here.

DO NOT send FlashScan or AutoCal serial number or authentication code in lieu of the controller auth-code.  Controller authorization can only be generated by providing a controller auth-code.

Update Authorized Controller Auth-Code

When your controller auth-code provider or tuner contacts you with your authorized controller auth-code, you will need to:

  1. Copy the controller auth-code provided.
  2. Navigate to the [F3: Tune] -> [F8: Authorization] menu in the V8 Scan and Tune software.
  3. Click the [Paste] button to update the authorization details.  When the controller auth-code is pasted the icon should change from the locked padlock to a green tick.

  1. Click the [Synchronize] button to copy the updated details to your FlashScan or AutoCal device.  if a different FlashScan or AutoCal is being used for BBR, the user will need to highlight the correct record and click [Sync Selected Items].

Once the controller auth-code has been pasted into the [F8: Authorization] screen, and synchronized (if using stand-alone black box reading/flashing), the controller can be read or flashed using the standard EFILive read/flash processes.

If the controller auth-code was not correctly authorized after receiving the key the controller will reject the auth-code with error $0322: “A request was made by FlashScan or AutoCal and the controller was not able or ready to handle the request.” In that case you should contact the authorization code provider for assistance.

Who Can issue Controller Authorization Codes?

Controller Authorization can be obtained from:

EFILive Limited - Customers can log into their existing EFILive store account and purchase a Controller Authorization code.  Automated email responses containing the authorized auth-code will occur within 20 mins of correct order placement in most instances.

Wait4Me Performance can manually process auth-code requests.  Contact Wait4Me for pricing. 

Related Articles 

Article Title Date Created Article Views
License Purchases & Activation Codes FAQ Fri, 13th May 2016 13690