Procedure 3: This procedure is to be performed while the ECU has the assembly plant device control
restrictions active.
1. Send a valid security access request message $03 while the device has assembly plant restrictions active
and verify $67 $03 $00 $00 response.
2. Repeat step 1 of this procedure and then send a security access request message with level $04. Verify
$7F $27 $22 response.
3. After performing steps 1 and 2 of this procedure, verify that the ECU keeps the assembly plant device
control restrictions active. This can be done by sending a device control command that is valid for the
assembly plant restrictions but invalid for service restrictions and verifying a positive response message.
Procedure 4: The steps in this procedure are to be performed sequentially. This procedure is to be started
when the ECU has the service device control restrictions active, the MEC = $00, and the vulnerability_flag (if
supported) not equal to $FF.
1. Send a valid security access request message with $Level = $03. Verify the proper positive response.
2. Send a valid security access request message $04 with a correct key and verify the proper positive
response message.
3. Verify that the device is now enforcing assembly plant device control restrictions by sending a device
control command that is valid for the assembly plant restrictions but invalid for service restrictions and
verifying a positive response message.
4. Send valid $3E message within P3
C
ms for 2 minutes (provided that the device control chosen can be
active for 2 minutes - if not, adjust as necessary) while maintaining the conditions which are valid for the
assembly plant restrictions and invalid for service restrictions. Verify that the ECU keeps the device control
active and does not send any device control limits exceeded $7F $AE $E3 $xx $yy reject messages.
5. Stop sending TesterPresent ($3E) messages. Verify that after P3
Cmax
ms without sending a $3E message
that the device reverts back to the service device control restrictions. This can be done by sending a
device control command that is valid for the assembly plant restrictions but invalid for service restrictions
and verifying the correct $7F $AE $E3 $xx $yy negative response message.
Procedure 5: 1. Send a valid device control request (mode $AE) and verify the proper positive response. Then send a valid
security access request message $03 and verify the negative response $7F $27 $22 (the negative
response is sent because device control is already active using service restrictions when the request is
received).