RF Communication Guide

Remote Key Fob Programming Guide

Master the art of programming remote key fobs for Jaguar and Land Rover vehicles. Learn RF synchronization, button learning, and troubleshooting techniques for all JLR remote systems.

5-10
Minutes
Programming Time
2
Frequencies
433/315 MHz
4-6
Buttons
Per Remote
98%
Rate
Success Rate
NAV

Understanding RF Remote Systems

Jaguar and Land Rover remote key fobs use Radio Frequency (RF) communication to control vehicle functions. Understanding how these systems work is essential for successful programming and troubleshooting.

How RF Remotes Work

When you press a button on the remote, it transmits an encrypted RF signal containing a unique rolling code. The vehicle's RFA (Remote Function Actuator) module receives this signal, validates the code, and executes the commanded function (lock, unlock, trunk release, etc.).

Remote Transmitter

  • RF chip with unique ID
  • Rolling code generator
  • Button matrix circuit
  • Antenna coil

RFA Module

  • RF receiver circuitry
  • Code validation logic
  • Memory storage (8 keys)
  • CAN bus interface

BCM Control

  • Door lock actuators
  • Lighting control
  • Alarm system
  • Mirror folding

RF Frequency Standards

EU
433 MHz
Europe, Middle East, Asia

Standard frequency for European market vehicles. Longer range (up to 50 meters) but can experience interference from industrial equipment.

Models: All EU-spec JLR vehicles 2000+
US
315 MHz
North America

FCC-approved frequency for US/Canada. Slightly shorter range (30-40 meters) but better interference rejection in urban environments.

Models: All US/Canada-spec JLR vehicles 2000+
Critical: Frequency Mismatch

A 433 MHz remote will NOT work on a 315 MHz vehicle and vice versa. Always verify the vehicle market specification before purchasing or programming a remote. Using the wrong frequency will result in zero range or complete failure to communicate.

KVM/RFA Module States: Locked vs Unlocked

Critical guide to understanding locked and unlocked module states and which programming methods work in each scenario

KVM Modules

Keyless Vehicle Module

What is KVM?

The Keyless Vehicle Module (KVM) controls keyless entry and passive entry passive start (PEPS) systems in 2010-2021 JLR vehicles. It manages PCF7953 chip key authentication.

Key Type: PCF7953 chip keys
Years: 2010-2021 models
Lock50 Keys: HW05 (433MHz), HW06 (315MHz)

RFA Modules

Remote Function Actuator

What is RFA?

The Remote Function Actuator (RFA) is the main keyless entry module in 2017-2025+ JLR vehicles. It processes NCF29A1 chip key signals and controls advanced UWB (Ultra-Wideband) security features.

Key Type: NCF29A1 chip keys
Years: 2017-2025+ models
Lock50 Keys: HW13 (433MHz), HW14 (315MHz)
Part Numbers: JPLA, K8D2, M9R3, J9C3

When KVM is LOCKED

Programming options for locked KVM modules (PCF7953 keys)

✓ What You CAN Do

SW36 Key Copy Function (C+ Packages)

When KVM is locked, you can use the SW36 key copy function to clone existing keys onto HW05 (433MHz) or HW06 (315MHz) Change ID keys.

Package Required: Lock50 C package or higher (Master Kit). Not available in A/B packages.

Key Copy via HW03C Adapter

Clone existing key data onto HW05/HW06 keys using the SW36 key copy duplicator function with HW03C adapter.

✗ What You CANNOT Do

Standard OBD Key Learning

When KVM is locked, you CANNOT use standard OBD key learning available in A/B packages. Only the SW36 key copy function (C+ packages) works with locked KVM.

KVM Unlock Not Supported

Lock50 does not currently support unlocking KVM modules. To erase keys from a locked KVM or enable standard OBD learning, the KVM would need to be made virgin using other methods (not Lock50), then keys can be relearned.

💡 Package Comparison:

  • A/B Packages: Standard OBD key learning (requires UNLOCKED KVM)
  • C package or higher: SW36 key copy function works with LOCKED or UNLOCKED KVM

When RFA is LOCKED

Programming options for locked RFA modules (NCF29A1 keys - JPLA, J9C3, K8D2, M9R3)

Key Copy Only - Limited OBD Access

✓ What Works:
  • SW36 Key Copy with HW03C: Clone existing keys onto HW13 (433MHz) or HW14 (315MHz) Change ID keys
  • Maintains Original ID: Copied keys keep the same ID as the source key
✗ OBD Limitation:

OBD key programming will ONLY work if the RFA was already unlocked at some point in the past. If the RFA has never been unlocked, OBD methods will fail on locked RFA modules.

🎯 EVA2 RFA Exception - Special Workaround

Even when RFA (EVA2 models) is locked, you can still add OEM keys using these special methods:

Method 1: Two Key Method

If you have 2 working OEM keys, you can add additional OEM keys to locked EVA2 RFA modules via OBD. This bypasses the lock requirement entirely.

Method 2: Service Mode

Use the Client's App Service Mode feature to enable adding OEM keys even when the EVA2 RFA is locked. This is a dealer-level function.

📌 Critical Note:

These EVA2 exception methods only work with genuine OEM keys. Lock50 Change ID keys (HW13/HW14) still require the RFA to be unlocked or use the SW36 key copy method.

When KVM/RFA is UNLOCKED

Full flexibility and all programming methods available

Unlocked KVM (PCF7953)

✓ Any 7953 Keys Work

Use any PCF7953 chip keys including OEM keys, aftermarket keys, or used keys from other vehicles. Program them directly via OBD with new IDs using A/B packages or higher.

✓ Full OBD Programming

Add spare keys, handle all-keys-lost scenarios, change key IDs as needed. Complete flexibility for all key programming operations with A/B packages or higher.

✓ Reuse Keys Across Vehicles

Buy used keys from other vehicles, unlock them with Lock50 HW04, and program them to different cars with new IDs.

Unlocked RFA (NCF29A1)

✓ OEM UWB and Non-UWB Keys

Add OEM UWB keys (HW21-HW26) or OEM Non-UWB keys (HW15-HW16, HW19-HW20) via OBD or adapter programming.

✓ Affordable HW17/HW18 Keys

For 2017+ RFA types (JPLA, K8D2, M9R3, J9C3), you can use cheaper HW17/HW18 Fixed ID Non-OEM keys. BUT UWB must be disabled first!

⚠️ UWB Disable Required for HW17/HW18

HW17/HW18 keys do NOT support UWB (Ultra-Wideband) technology. Use Lock50 to disable UWB in the vehicle configuration before programming these affordable keys.

Quick Reference: Module State vs Programming Methods

Module State Module Type Key Options Method
LOCKED KVM (7953) HW05/HW06 Change ID keys SW36 Key Copy Only (C+ packages)
LOCKED RFA (29A1) HW13/HW14 Change ID keys SW36 Key Copy with HW03C
LOCKED RFA EVA2 (29A1) OEM keys (2 key or Service Mode) OBD (Special Exception)
UNLOCKED KVM (7953) Any 7953 keys (OEM, aftermarket, used) OBD Direct Programming (A/B+ packages)
UNLOCKED RFA (29A1) UWB OEM UWB (HW21-26) or Non-UWB (HW15-16,19-20) OBD or Adapter Programming
UNLOCKED RFA (29A1) Non-UWB HW17/HW18 (UWB disabled required!) OBD after UWB disable

📝 Critical Notes:

  • Locked KVM: Only SW36 key copy works (C+ packages). Standard OBD learning (A/B packages) requires unlocked KVM. Lock50 cannot unlock KVM modules.
  • Locked RFA: OBD only works if RFA was previously unlocked. Otherwise, only SW36 key copy works.
  • EVA2 Exception: Can add OEM keys to locked EVA2 RFA if you have 2 keys or use Service Mode.

Need to Unlock Your KVM/RFA Module?

Get full flexibility for key programming by unlocking your modules with Lock50 HW04

Learn How to Unlock JLR Keys

RF Remote Button Fix Methods

Complete guide to restoring RF remote button functionality on Jaguar & Land Rover smart keys (2010-2025+)

Key & Hardware Compatibility

All methods work with either Lock50 keys OR your client's original keys. You can use any available key to deliver the RF remote control button fix.

PCF7953 Keys (2010-2021)

Lock50 Hardware: HW05 / HW06 readers
Client's Original Keys: Can be used directly
Programming Method: Key copy via OBD

NCF29A1 Keys (2017-2025+)

Lock50 Hardware: HW13 / HW14 readers
Client's Original Keys: Can be used directly
Programming Method: KVM/RFA adapters

Pro Tip:

You don't need to purchase new Lock50 keys! These methods work perfectly with your client's existing keys to restore RF remote button functionality. Use what you already have.

Before You Start

Manual methods do NOT work for smart keys after 2010. Use the Lock50 methods below to restore RF remote functionality.

When to use these methods:
Remote buttons not responding after key programming
RF remote works inconsistently or at short range
Rolling code sync issues after EEPROM work
Key programmed successfully but remote doesn't work
1

Method 1: Lock50 Reader + Rolling Code Sync

Lock50 JLR Master Tool

Lock50 JLR Master Tool

The Lock50 JLR Master Tool provides comprehensive diagnostic and programming capabilities for Jaguar Land Rover key systems.

Read key status (locked/unlocked)
Remote sync function
OBD-based rolling code sync
BCM module access
1

Read Key on Lock50 Reader

Reading JLR Key Status Unlocked or Locked

Check if key shows as unlocked or locked

  1. Place the key on the Lock50 reader
  2. Read the key data to check if it's unlocked
  3. If key shows as unlocked, proceed to next step
  4. If key is locked, you'll need to use Method 2
2

Press Remote Sync and Test

  1. In Lock50 software, click "Remote Sync" button
  2. Wait for the sync process to complete
  3. Test the remote buttons (lock, unlock, trunk)
  4. If remote works, you're done!
  5. If still not working, proceed to next step
3

OBD Rolling Code Sync via BCM

Rolling Code Sync Unlocked Key

Step 1: Start sync

Rolling Code Sync Writing

Step 2: Writing data

Rolling Code Sync Completed

Step 3: Complete

  1. Connect Lock50 to vehicle OBD port
  2. Launch OBD scan function
  3. Navigate to Modules → BCM (Body Control Module)
  4. Find "Rolling Code Sync" option
  5. Execute rolling code synchronization
  6. Test remote buttons again
✓ Success: This method resolves 90% of remote button issues for unlocked keys.
2

Method 2: Key Unlock + Key Copy Process

SW36 Key Copy Using to Fix Existing Keys or Lock50 Keys to Fix Non-Working RF Remote Buttons

SW36 Key Copy Function

Use the SW36 Key Copy function to fix existing keys or Lock50 keys when RF remote buttons are not working. This refreshes the RF remote data on the keys.

When to Use Method 2

If Method 1 doesn't work, the keys are likely locked and need to be unlocked on Lock50 HW04 reader first. Then follow the key copy process using your existing keys.

Understanding Key Lock States After Programming

Key Copy (SW36) keeps keys UNLOCKED:

  • When you use key copy functions like SW36, keys stay unlocked after the process
  • The key ID doesn't change during key copy - it's copying RF remote data only
  • Keys remain unlocked and ready for further operations

Adding New Key IDs causes keys to GET LOCKED:

  • When you learn keys with new IDs to a vehicle (RFA unlocked or EVA2 locked), keys get locked afterward
  • Whenever you add a new key ID to the car, the key will be automatically locked
  • You must unlock keys again with HW04 if you need to read/modify them later

💡 Pro Tip: You can buy used keys from other vehicles, unlock them with Lock50 HW04, and learn them to different cars with new IDs. This allows key reuse across multiple vehicles, but remember the key will be locked again after learning with a new ID.

1

Unlock Keys on Lock50 HW04 Reader

  1. Place your existing key on Lock50 HW04 reader
  2. Use the unlock function to unlock the key
  3. Repeat for all keys that need remote buttons fixed
  4. Verify keys show as "unlocked" status
2

Use Key Copy Process with Lock50 Keys or Client's Existing Keys

For PCF7953 Keys (2010-2021):

  1. Connect Lock50 to vehicle OBD port
  2. Select "Key Copy via OBD" function
  3. Follow prompts to copy data to your Lock50 key or client's existing key
  4. Complete the programming process
  5. Test remote buttons

For NCF29A1 Keys (2017-2025+):

  1. Remove KVM or RFA module from vehicle
  2. Connect appropriate adapter (KVM/RFA adapters)
  3. Use key copy function via adapter
  4. Program your Lock50 key or client's existing key
  5. Reinstall module and test remote
💡 Key Difference: Use either Lock50 keys or your client's existing keys in this process. This refreshes the RF remote data on the keys.
3

Test and Replace Module if Needed

  1. Test all remote functions (lock, unlock, trunk, panic)
  2. Test range - should work from 30+ meters
  3. If remote still doesn't work after both methods, the RFA or KVM module may be faulty
  4. Replace with new RFA or KVM module to fix remote issues permanently
⚠️ Hardware Failure: If remotes don't work after both methods, it indicates a failed RFA/KVM module requiring replacement.

Quick Troubleshooting Flow

Step 1: Check Key Status

Read key on Lock50 reader → Is it unlocked? If YES, try remote sync. If NO, proceed to unlock.

Step 2: Try Rolling Code Sync

Use Lock50 remote sync button OR OBD scan → BCM → Rolling Code Sync.

Step 3: Unlock + Key Copy

Unlock keys on HW04 reader → Use key copy with YOUR existing keys (not HW13/14) → Via OBD for 7953 or adapters for 29A1.

Step 4: Module Replacement

If still no remote function after above steps → Replace RFA or KVM module (hardware failure).

Success Rate

These methods have a 95% success rate when performed correctly. Module replacement resolves the remaining 5% of cases with hardware failures.

Troubleshooting Remote Issues

Solve common remote programming and functionality problems with these proven diagnostic steps.

Remote Not Responding After Programming

Buttons don't trigger any vehicle response

Check Battery First
  • Replace with fresh CR2032 battery (verify 3.0V+ with multimeter)
  • Ensure correct polarity (+ side facing up in most remotes)
  • Clean battery contacts with isopropyl alcohol if corroded
Verify Frequency Match
  • Check remote label for frequency (433 or 315 MHz)
  • Confirm vehicle market spec matches remote frequency
  • If mismatch, you need correct frequency remote - no workaround exists
Re-sync Rolling Code
  • Press any button 10-15 times rapidly while standing next to vehicle
  • This forces rolling code counter to resync with RFA module
  • Try locking doors with key/interior button, then test remote again
Reprogram Remote
  • Delete remote from RFA module completely
  • Wait 60 seconds for module to clear memory
  • Reprogram from scratch using diagnostic tool method

Remote Works But Very Short Range

Must be within 5-10 meters instead of normal 30+ meters

Common Causes & Solutions
A
Weak Battery (Most Common)

Battery voltage drops under load, reducing transmit power

Fix: Replace battery even if it measures 3.0V - load testing often reveals weakness. Use quality brand (Panasonic, Energizer, Duracell).
B
Damaged Antenna in Remote

Internal coil antenna broken or disconnected from circuit board

Fix: Open remote case carefully, inspect antenna coil (thin wire loop around perimeter). If damaged, remote must be replaced.
C
RFA Antenna Issue (Vehicle Side)

Receiver antenna in vehicle damaged or connector loose

Fix: Test with another remote. If all remotes have short range, check RFA antenna connector behind bumper or in rear quarter panel.
D
Interference from Aftermarket Accessories

Remote start systems, alarms, or trackers can interfere with RF signals

Fix: Temporarily disconnect aftermarket devices one by one to identify interference source. May require re-routing wiring or filtering.
Range Test Procedure

Test remote in an open parking lot away from buildings. This eliminates RF reflection/interference variables. Normal range should be 30-50 meters (433 MHz) or 25-40 meters (315 MHz). If range is still short in open area, issue is with remote or vehicle, not environment.

Remote Works Intermittently

Sometimes works, sometimes doesn't - unpredictable

Hardware Issues
  • Worn Buttons: Carbon contacts on button pads degrade over time. Clean with alcohol or replace button pad.
  • Loose Battery: Battery moves in holder, causing intermittent power. Add small foam pad to secure battery.
  • Cold Solder Joints: Circuit board connections crack from thermal cycling. Requires re-soldering or remote replacement.
Software/Module Issues
  • RFA Module Fault: Check for fault codes in RFA module. May require module reset or replacement.
  • CAN Bus Interference: Other modules sending high traffic can cause message collisions. Update all module software.
  • Low Vehicle Battery: Voltage drops below 12V affect RFA reception. Charge/replace vehicle battery first.

Passive Entry / Keyless Not Working After Programming

Remote buttons work but keyless functions don't work

Common Symptoms This Fixes
  • Remote works but keyless doesn't: Unlock/lock buttons work, but doors don't auto-unlock on approach and push-button start requires emergency start
  • Push-button start works but passive entry doesn't: Engine starts normally, but doors don't auto-unlock when you approach with the key in your pocket
  • Partial keyless functionality: Some keyless features work while others don't after key programming
Keyless Function Initialization Procedure

After programming a new key, the PEPS (Passive Entry Passive Start) system needs to "see" the key perform a proper unlock/entry sequence to initialize keyless functions. Follow these steps:

1
Lock Vehicle and Remove All Keys

Press the lock button on the remote to lock the car, then walk away with all keys (make sure no keys are left inside the vehicle).

2
Approach Vehicle with Key

Walk back to the vehicle carrying one of the programmed keys in your pocket or hand.

3
Unlock Using Appropriate Method

Choose the method based on your vehicle's features:

If Vehicle Has Keyless Entry:

Touch or pull the door handle WITHOUT pressing any buttons on the remote. The door should unlock passively (keyless entry). This initializes the PEPS system.

If Vehicle Does NOT Have Keyless Entry:

Press the unlock button on the remote to open the door. This will still initialize the push-button start function.

4
Test Push-Button Start

Enter the vehicle, press the brake pedal, and press the START/STOP button. The engine should start normally. The keyless start function is now initialized and should work going forward.

Why This Works

After programming a new key, the PEPS system needs to detect a complete authentication cycle - detecting the key's presence outside the vehicle, unlocking, and then detecting the key inside the vehicle. This "training cycle" initializes the keyless start authorization. Without this cycle, the system may require emergency start procedures even though the key is properly programmed.

If Keyless Still Doesn't Work

If the keyless functions still don't work after the initialization procedure, you may need to perform a Rolling Code Synchronisation via OBD diagnostics:

  1. Connect diagnostic tool to vehicle OBD port
  2. Navigate to Modules → BCM (Body Control Module)
  3. Select "Rolling Code Synchronisation" function
  4. This updates secret encryption keys from BCM to door modules
  5. Retest keyless functions after synchronization completes

Quick Troubleshooting Reference

Symptom Most Likely Cause Quick Fix
Complete failure Dead battery or wrong frequency Replace battery, verify 433/315 MHz match
Short range only Weak battery Replace with fresh CR2032
Intermittent operation Worn button contacts Clean buttons or replace remote
One button doesn't work Button not learned during programming Reprogram remote, learn all buttons
Works sometimes, not others Rolling code out of sync Press button 15 times next to vehicle
All remotes stopped working RFA module failure or vehicle battery low Check vehicle battery, scan for RFA codes

Still Need Help?

Our technical support team can provide remote diagnostics and advanced troubleshooting for complex remote issues.

Program Remote Key Fobs in Minutes

Get the JLR Key Tool and program unlimited remotes for all Jaguar and Land Rover models with professional results.

5min
Programming Time
98%
Success Rate
Unlimited Use
1 Year Warranty
Free Shipping
Expert Support
30-Day Returns

Why Choose JLR Key Tool?

The only complete key programming solution trusted by professional locksmiths and auto technicians worldwide.

Works on all 2010-2024 JLR models
Lifetime software updates included
No monthly subscriptions or fees
24/7 technical support available