smaller reset larger         

Main Menu

All times are in GMT +12 :: The time is now 7:27 am.

Sub Menu

Article Data
Article Ref
Written By
Cindy Myers
Date Created
Thu, 22nd Sep 2016
Updated By
Cindy Myers
Date Modified
Tue, 30th Jun 2020

   Controller Authorization


What is Controller Authorization?

What controllers require authorization?

How do I authorize a controller?

Controller Authorization Help


What is Controller Authorization?

Prior to reading or flashing any controller, the EFILive software performs a security negotiation with the controller for permission to access the controller. In the past, the security negotiations were implemented using a simple challenge-response process.

In 2017 GM began modernizing and hardening their controllers' security negotiations which is now far more complex and virtually impossible to automate within the EFILive software. This means the end user must now concern themselves with the security negotiations prior to reading or flashing one of these new controllers.

  • It takes on average about five days to find the correct security code on a controller that use GM's previous security system.
  • It would take on average about 174,000 years to find the correct security code on a controller that use GM's new, hardened security system.
  • Over 1 trillion possible security codes exist and guessing the correct code used on a particular vehicle is virtually impossible.

EFILive software now has a controller-authorization module that helps you manage the data required to gain access to your controller.

What controllers require authorization?


How Do I Authorize a Controller?

The Controller Authorization.pdf details a complete set of operating documentation for the Controller Authorization process. The below information provides summarized instructions on how to process a controller auth-code request and complete the authorization requirements.

Software Requirements:

The controller authorization software enhancements are available in the following product versions:

  • EFILive V8.2.2.305 or later.
  • FlashScan V2 / AutoCal Firmware - V2.07.104 or later.

The latest software is available for download from the EFILive website here:

Generate Unauthorized Controller Auth-Code

  1. Attempt to read the controller to obtain the unauthorized controller auth-code. 
    1. The physical controller is validated against the selected controller ID when the read function commences to ensure only valid auth-codes are generated. 
    2. Where the controller ID does not match the physical controller, the read process will stop and users must select the correct controller type (or use Auto-Detect to continue).
    3. If the controller ID and the physical controller match, and an authorized auth-code has not yet been obtained, users will see the following error: $0552 Reading and flashing are not yet authorized for this controller.
  2. Navigate to the[F3: Tune] -> [F8: Authorization] menu in the V8 Scan and Tune software.
    1. If you attempted the failed read using FlashScan or AutoCal in pass-thru mode, your unauthorized controller auth-code will be automatically downloaded into the Controller Authorization screen.
    2. If your attempt to read the controller was performed using FlashScan/AutoCal via BBR, press [Synchronize] to move the necessary information from FlashScan/AutoCal to your PC.
  3. Highlight the entry you wish to have authorized and select [Copy] or [Copy Code].

  1. Place an order in the EFILive store or contact your tuner if they are managing this process for you.  For assistance on placing a controller auth-code order in the EFILive store click here.

Update Authorized Controller Auth-Code

When your controller auth-code provider or tuner contacts you with your authorized controller auth-code, you will need to:

  1. Copy the controller auth-code provided.
  2. Navigate to the [F3: Tune] -> [F8: Authorization] menu in the V8 Scan and Tune software.
  3. Click the [Paste] button to update the authorization details.  When the controller auth-code is pasted the icon should change from the locked padlock to a green tick.

  1. Click the [Synchronize] button to copy the updated details to your FlashScan or AutoCal device.  if a different FlashScan or AutoCal is being used for BBR, the user will need to highlight the correct record and click [Sync Selected Items].

Once the controller auth-code has been pasted into the [F8: Authorization] screen, and synchronized (if using stand-alone black box reading/flashing), the controller can be read or flashed using the standard EFILive read/flash processes.

If the controller auth-code was not correctly authorized after receiving the key the controller will reject the auth-code with error $0322: “A request was made by FlashScan or AutoCal and the controller was not able or ready to handle the request.” In that case you should contact the authorization code provider for assistance.

Controller Authorization Help

Incorrect Controller ID selection produces invalid Auth-Code response.

  1. Update your EFILive software.  V8.2.25 (Sep 19) or later software validates the physical controller against the selected controller ID to prevent mis-match.
  2. Remove the invalid auth-code response from:
    1. FlashScan/AutoCal: Delete the Remote.ska file off FlashScan/AutoCal using EFILive Explorer.
    2. V8 Scan and Tune: With V8 Scan and Tune closed, open the utility found in the "C:\Program Files (x86)\EFILive\V8\EFILive_CtrlAuth.exe" folder and delete the invalid auth-code, then save the file.
    Where AutoCal is used, it is likely that the invalid auth-code will be on both the end users' PC and the tuners' PC.  The invalid code MUST be removed from both PC's.
  3. Setup BBR for the correct controller type, or use Auto-Detect to re-read the controller using V8 Scan and Tune pass-thru reading.
  4. Email updated auth-code to along with the order details from your invalid auth-code for manual processing to avoid duplicate charges.

Related Articles 

Article Title Date Created Article Views
License Purchases & Activation Codes FAQ Fri, 13th May 2016 27533