Manage ECM passwords

Important notes / prerequisites

• Connect to the ECM before opening MLS functions.
• Available authorization levels depend on the connected module. Guidanz does not display unsupported levels.
• ECM passwords control authorization domains. A module can be connected and readable while protected actions remain locked.

ECM password hierarchy

ECM password levels are organized under Multi-Level Security (MLS). Master is the parent level for Adjust and Reset; OEM, OEM2, and GHG Vehicle Speed Limiter are separate authorization levels.

Review authorization status

1. Connect to the engine or equipment.
2. Open the toolbar three-dot menu.
3. Select Manage Passwords.
4. Review the authorization levels shown in ECU Password Status.

Depending on the module, levels can include Master, Adjust, Reset, OEM, OEM2, and GHG Vehicle Speed Limiter. A level may show Password set, Password not set, Locked, or Unlocked.

Unlock a protected authorization level

1. From the toolbar three-dot menu, select Manage Passwords.
2. Select the locked authorization level.
3. Enter the password when prompted.
4. Continue with the protected task.

Unlocking changes the authorization state for the current connected session. Ending the session through Exit Session locks authorization levels that have passwords configured again.

Set, change, or remove a device password

1. From the toolbar three-dot menu, select Manage Passwords.
2. Select the authorization level you need to manage.
3. If no password is configured, follow the Add Device Password flow.
4. If a password already exists, authenticate and follow the Change Device Password flow.

The device-password rule shown in the current Guidanz workflow is 6 alphanumeric characters and cannot be all zeros. Removing a password through the change flow leaves that authorization level open until another password is configured.

Master prerequisites

Master can be a prerequisite for other authorization levels. For example, Adjust or Reset may show Set Master password first or Unlock Master domain first. This does not necessarily mean that the authorization level is unsupported.

Multiple modules and password mismatches

On a multi-module engine, Guidanz attempts to unlock each module for the requested authorization level. If the parent module accepts the password but a child module does not, Guidanz can report a password mismatch and present Fix Device Passwords. Use that workflow to synchronize the child-module passwords to the parent module when authorized. Do not independently change child-module passwords when the mismatch workflow is available.

Engine Settings may report either ECM Master or Adjustment passwords are not valid or The passwords for some modules do not match the parent module. The second message indicates the password-mismatch path.

Password removal services

When the required authorization is not available, Guidanz may provide authorized Intapp or Intapp-OEM password-removal services. These services require confirmation, consume an appropriate Intapp unit, and use a key-cycle/write process.

• Intapp removes Master, Adjust, and Reset passwords.
• Intapp-OEM removes OEM and OEM2 passwords.

Removing Master also affects the dependent Adjust and Reset password configuration.

Practical workflow

If you only need to perform a protected task, unlock the required authorization level instead of changing or removing its password.

DTK Mobile differences