Hello,

I have a no start / no crank issues with my security light flashing 1/6 so I know it is a PATS problem.... On this 2007 XLT where are the modules responsible for this security function located?

I know key ring transceiver is on the ignition and pretty sure the PCM is on the firewall under the hood but no idea where the EECV and PATS module are located. I checked for PATS module under the drivers dash and behind the passenger air bag but no luck. Maybe I am looking for the wrong thing.

Can anyone tell me where to find the security module or send picture? I only have one key and cannot start my truck for 3 days any help resolving this is appreciated.

 

The very first thing I would do Is check the basics, check each and every fuse under the hood and in the cab.

Make sure each fuse is not blown, and check that every fuse spot that is supposed to have a fuse has one of the correct amperage.

If the fuses are good connect a scanner and see if it will operate normally and communicate to pull and clear codes.

Post any codes you may find or let us know if it fails to communicate.


I am not sure if it is the same for the 2007, but Alldata shows for my 2002 the central security module is located behind the upper dash on the right hand side.

It looks like it can be accessed or viewed through the windshield once the upper dash trim is removed. ( the Black trim near defrost vents )

Again this information is for my 2002 I do not know if the same applies to the 2007.

The instructions from Alldata on my 2002 to get the Module out is as follows.

Disconnect the battery ground cable.
Remove the passenger air bag module.

Reposition the central security module.
1 Remove the three screws.
2 Pull the central security module straight out from the bracket.

Disconnect the two electrical connectors.

Remove the bracket from the central security module.

This information is for my 2002 also but the basics may apply to your truck.


Initial Inspection and Diagnostic Overview Information

Verify the customer concern by operating the system.
Visually inspect for obvious signs of electrical damage.
VISUAL INSPECTION CHART

Electrical
Battery Junction Box (BJB) fuse:
9 (20 A)
11 (50 A)
33 (15 A)
Central Junction Box (CJB) fuse 11 (7.5 A)
Wiring harness
Connector(s)
Circuitry
If the concern remains after the inspection, connect the diagnostic tool to the Data Link Connector (DLC) located beneath the instrument panel and select the vehicle to be tested from the diagnostic tool menu. If the diagnostic tool does not communicate with the vehicle:
check that the program card is correctly installed.
check the connections to the vehicle.
check the ignition switch position.
If diagnostic tool still does not communicate with the vehicle, refer to the diagnostic tool manual.
Carry out the DATA LINK DIAGNOSTICS test. If the diagnostic tool responds with:
CKT914, CKT915 or CKT70 = ALL ECUS NO RESP/NOT EQUIP, refer to Module Communications Network (Information Bus).
NO RESPONSE/NOT EQUIP for central security module, go to Pinpoint Test B. See: Pinpoint Tests
SYSTEM PASSED, retrieve and record the Continuous Diagnostic Trouble Codes (DTCs) , erase the continuous DTCs and carry out self-test diagnostics for the central security module.
If the DTCs retrieved are related to the concern, go to the Diagnostic Trouble Code (DTC) Index to continue diagnostics. See: Diagnostic Trouble Code Tests and Associated Procedures
If no DTCs related to the concern are retrieved, refer to the appropriate vehicle system to continue diagnostics.

 

Thank you for this detailed reply. I cannot wait until I get home from work to start this process. A couple of follow-up questions in the meantime...


Do you have any pics of this Central Security Module or its location, color or such to help me identify? Removing the upper dash seems scary but I am ready to try it.


What do you recommend for a scan tool / software. I assume I need a regular ODBII port scan tool... Is there something I can buy to hook up to a computer to code / tune? In future I will be disabling the PATS in a tune once I actually get running again.


Thanks so much for your reply and I will be posting back with my findings soon...

 

2007 Ranger has PATS inside the PCM(computer), no separate module, keyless entry is part of Smart Junction Box(SJB) in passenger kick panel.
Forced entry will flash the lights and sound the horn, it is an "alarm", but won't cut off starter or Fuel.

PATS is Passive Anti-Theft System, key word passive, it disables starter relay, fuel pump, and the big one, fuel injectors unless a "known" PATS key number is seen in ignition slot.
3 or 4 PATS keys are added to PATS when programmed at the factory and those keys are sent out with that vehicle.

Ring around the ignition key slot goes to PCM, for some reason PATS is not getting a good read of your unique ID inside the Key you are using.
Try another key
If you only have the one key then you will need a Mobile Locksmith, with Ford software on a laptop, to come out and add another 1 or 2 keys to your PATS setup.
Adding PATS keys can only be done in the vehicle, you can't take out computer to take it in to have keys added to PATS.

Longshot but............PCM relay in engine fuse box can get finicky, locate it and swap it with wiper or washer relay, some relay you won't need at this moment, then see if PATS startup works, replace relay if it does

If you have keyless entry press unlock and lock a few times, also Panic button, while it is unlikely the SJB would cause the issue the button pressing should reset it

And one more thing
2007 will have instrument cluster run by micro processor, and you can put it in Test/Engineering Mode, read here: https://www.ranger-forums.com/genera...st-mode-92759/

PATS does pass thru cluster, see if there are any codes or errors seen
In SJB fuse box PTC circuit breaker runs the ring around key slot
Fuses 9, 10, and 33 are also used

 

Once again thank you for the replies. I have solved the problem for the shirt term. Here is what I did.

I check all fuses in the Smart Junction Box and Power Distribution Box. All seemed well. I took my battery out to charge as it got low in previous days due to trying to reset security system. I unplugged the PCM /ECU / EECV or whatever names prescribed to the silver box under the hood, passenger side with 3 harnesses attached and partially inset into the firewall. Sorry no pic... I then cleaned both battery cables and the aux ground that I read so much about. I also took the key ring transceiver of and ignition cylinder out, checkes connections and cleaned the area.

Hours later I hooked my battery back up and realized it won't charge or hold voltage beyond 10.48v. I assume it is toast but no idea why or how. Unfortunately it was not enough to start the truck so I get my jump start pack and as soon as I hook up I hear the PCM start up along with the file pump etc... I jump in drivers seat and insert key and turn and sure enough the security lite goes out as it should and my truck starts. I do have an ABS light on bit thus a separate issue I assume.

Not sure what was wrong or what killed my battery but the fact that I have no more security system imposed no crank / start makes me happy. I am now off to buy a new battery and hoping there is not some parasitic drain or fault that will destroy this new battery. Hopefully life will remain normal.

I still want to tune / code off PATS in the near future. Hope this helps someone else in future.

Thanks to all.