Adding remote start to 2007 ctsv with 04 Colorado body.

[04colyZQ8]

I have a 04 Colorado with..
2007 ctsv pcm, manual transmission
2008 Colorado bcm
2008 Colorado anti theft module with chipped key.

I want to add remote start, but first thing I need to do is send a class 2 message
To the pcm to start.. hopefully without the chip key for the allotted time?

Plan is to modify the code in one of the existing modules to except a ground signal,
and send out a vpw message to start. If that fails I’ll just use a adrino with vpw board
To send the message. I also need two relays for ignition and accessories.

So for now to test I hot wired the truck And try to send vpw commands to the pcm.
Also I depress clutch to floor when trying

I have set the e67 pcm to have remote start enabled.
Remote start timmer 20 min
Backup timmer 10 min
Immo bypass remote start 0.50 seconds to receive valid start signal
Allow remote start with Immo module enabled

I cannot get it to start by sending what I think Is the vpw message to remote start

Only way I get it to start is by turning the key to run. Depress clutch

Send
>28 FF 40 06 08 02 OA
Clusters flashes off than on truck fires up!

Kinda cool it starts without me rotating the key to crank!

But for the life of my I can’t get it to run without the key in the ignition.

I tried sending first
>28 93 C0 02 87 AA
Which I think is the theft module to pcm fuel enabled message?

But that didn’t work either.


I think the 07 Monte Carlo has class 2 remote start, I really need a log of
class 2 remote start to see what to send to bypass the theft module
During the 20 min countdown.

Anyone have any info to help me?

[Tazzi]

The key is providing the immobilizer data to be able to start. So without the key, your engine computer will be indicating "Not okay to start".

[04colyZQ8]

The key is providing the immobilizer data to be able to start. So without the key, your engine computer will be indicating "Not okay to start".

Yeah but in a factory remote start application with class 2..

2007 Monte Carlo
2007 hhr
2007 uplander

The bcm must be sending a specific start messed that’s aloud to bypass the
Theft deterrent module during the 10-20 min timer.

That’s the message I need to know so I can try sending it to my pcm.

I don’t want to send the fuel continue password for the theft deterrent module because it shouldn’t be
Needed for remote start.

If anyone has a vehicle with class 2, and remote start I need a log of it lol!

[Tazzi]

Usually the best way here is comparing two exact vehicles except one with remote start, and one without.

Understanding the differences in the bins then allow understanding how to apply to your situation.

Even in the older vehicles, they will still pickup the unlock request from the keys, and the. Send off the “valid immo” information to allow remote start operating.

It will depend how your vehicles security is setup specifically, but I’d assume the BCM would still need to see valid unlock requests from a remote start request before passing on the immo details to allow ecu to successfully start.

[antus]

You'd hope so, but apparently immobilisers are not mandatory in the usa and you end up with the 'kia boyz' situation https://en.wikipedia.org/wiki/Kia_Challenge . I'd hope GM are better than that.

[04colyZQ8]

Usually the best way here is comparing two exact vehicles except one with remote start, and one without.

Understanding the differences in the bins then allow understanding how to apply to your situation.

Even in the older vehicles, they will still pickup the unlock request from the keys, and the. Send off the “valid immo” information to allow remote start operating.

It will depend how your vehicles security is setup specifically, but I’d assume the BCM would still need to see valid unlock requests from a remote start request before passing on the immo details to allow ecu to successfully start.

Excellent advice, your always helpful. I too have had success this way .. for my 2015 trax I did exactly that. Compared to one that had remote start and added those Booleans to my code, get ap3 key fob done!

Unfortunately GM rolled out remote start in 2004 Malibu, then uplander, hhr, in 05/06, a few select caddy's and in late 07 full size pickups. And by 2010 most vehicles you could add it. Especially if they used the new can biased denso bcm.

However they neglected the Colorado and h3 that ran to 2012, and 2010. Never updating the bcm to can, and never offered ap8, or ap3 extended range or remote start ready.

So I have to re-invent the wheel!

Only class 2 vehicle that I see that uses class 2 remote start is the uplander and that bcm is completely different:(. I the Monte Carlo might use a class 2 signal to start, but also uses gm lan, can.

[04colyZQ8]

The other issue is the bcm amd rcdlr are internal on the Colorado bcm, so I can’t interpret lock unlock commands, and also can’t swap in a different rcdlr from say a uplander.

Now most of the mid 2000s vehicles that had remote start use a simple rcdlr that is just an antenna with power ground, and serial data out. Anyone know what “serial data”

It’s not gm low speed lan, can, class 2 or uart, just says serial. Is it like db9 serial port? If so should have two wires rx, tx. I only see one wire? Love to sniff it’s signals.

[04colyZQ8]

I’m finding it interesting that it sends the Imma fuel enable password for remote start? Because the cars I’ve seen that use a theft module run off accessory 0 voltage which typically isn’t energized during remote starts, like my trax the cluster is dead so is the theft module? I think.

Anyway could be true. I know my trucks fuel continue password!

Non remote start goes like this ..
-Insert ignition key, completes pass-lock circuit, wakes up bcm
-rotate to acc , acc 0 voltage now hot waking up theft module,
And ignition 0 voltage passed through bcm to pcm pin 18

-rotate to ignition, acc 0 voltage and ignition 1 voltage now hot,
Bcm is only pass through just reads the voltage for ignition 1,
Doesn’t energize the relay, the voltage passes through the bcm,
To the main powertrain relay. This relay energizes pin 19 ignition 1,
Voltage on the pcm.

-rotate key to crank, acc 0 voltage off, ignition 1 remains on,
Bcm senses acc 1 voltage cut, sends start request via vpw

-theft module sends network all nodes wake up
-theft module sends fuel continue password to
Pcm
-pcm sends postive message back to theft module.
-bcm sends exact same start request again via vpw

-pcm checks it’s in park , neutral or clutch depressed,
If true energizes starter relay engine fires up!

[04colyZQ8]

If I replicate the starting sequence it won’t work. Fails for Immo. I think I’m not sending the commands fast enough? Prob needs to be done within 0.50 seconds! I can’t type that fast! Will need to code it I guess. Or try to change the 0.50 to 2

[ironduke]

If I replicate the starting sequence it won’t work. Fails for Immo. I think I’m not sending the commands fast enough? Prob needs to be done within 0.50 seconds! I can’t type that fast! Will need to code it I guess. Or try to change the 0.50 to 2

Are you just using a terminal program? If so you could try termite, there’s ‘function’ keys you can program that send a command with just a f key.. Then it’s just a matter of setting those up and pressing the those keys in the right sequence to send multiple commands..
I’ve done a bunch of looking thru logs of mine from way back and I haven’t found much of anything to help, sorry..