1. Attachments are working again! Check out this thread for more details and to report any other bugs.

No start due to P3106, ECM -> HV ECU communication failure?

Discussion in 'Generation 1 Prius Discussion' started by cowlove, Jul 14, 2010.

  1. cowlove

    cowlove New Member

    Joined:
    Jul 30, 2008
    5
    4
    0
    Location:
    Seattle
    Vehicle:
    2002 Prius
    The motor on my 2002 prius stopped while driving, and will not start. The car will not go into READY mode, but still allows slow operation on battery power. When powered up, the car usually makes one attempt to spin and start the motor, but there is no spark.

    The trouble code listed is P3106, listed as the HV ECU complaining about no communications from the ECM. I made sure the ECM is getting good power and DC signals according to the service manual, and then replaced it with another used module, but the problem persists. I'm now about to investigate the serial data link and wiring between the HV and the ECM, as well as speculatively replace the HV ECU. Good thing gen 1 computer modules are cheap and readily available on ebay. :)

    Has anyone heard of this specific failure? Does anyone have any hints for investigating the serial data bus? It looks like a pair of unidirectional RS422-like serial links, each over a shielded pair. HTE-/HTE+ and ETH-/ETH+. I was going to put a scope on the ETH pair and see if the ECM is even trying to speak to the HV ECU.

    Any other hints?
     
  2. bwilson4web

    bwilson4web BMW i3 and Model 3

    Joined:
    Nov 25, 2005
    27,159
    15,407
    0
    Location:
    Huntsville AL
    Vehicle:
    2018 Tesla Model 3
    Model:
    Prime Plus
    You are at risk of discharging the traction battery to such a low value that it will have to be recharged. This can be pretty ugly.
    Do not rule out a problem with the connector the HV ECU. It is located under the passenger side floor. Water, debris or corrosion might also lead to the symptom.
    We really need more codes and the options are limited:

    • Toyota Service Center - usually for +$100, they will do a one time code read. However, the quality of this service varies and one user has reported very poor results with a North Carolina dealer.
    • Graham Miniscanner - provides up to three stored codes per controller for the engine, HV ECU and battery ECU along with live data of over 50 data elements. I rent these for do-it-yourself projects.
    • Auto Enginuity - at $400 and your laptop, it isn't perfect but it reads all codes and many more data elements. It has problems with a few larger data fields but it is head and shoulders above over the counter scanners.
    • Techstream Lite - at $1,200-1,500, I haven't tested it but this is pretty pricy for a do-it-yourself.
    • Over-the-counter scanners - little more than expensive junk. They can handle one code, seldom know how to find the other controllers and are limited to the emissions mandated fields.
    Because it happened as one event, I suspect a broken wire or corroded connector but the ambiguity group is too large.

    Bob Wilson
     
  3. cowlove

    cowlove New Member

    Joined:
    Jul 30, 2008
    5
    4
    0
    Location:
    Seattle
    Vehicle:
    2002 Prius
    RE: discharged traction battery. Indeed. That was my first challenge. The motor quit at the exact top of a mountain pass, so the battery was nearly discharged to begin with. Limping off the freeway and a few days' worth of start attempts, tinkering, and moving it around the yard left it completely discharged.

    Luckily, I have a 36V->360V DC/DC converter that I'd cobbled together as part of a DIY plug-in conversion for this car. It's been on a back burner for a while, but I dusted it off and trickled an amp into the battery for a few hours, and it's good to go. Plus, moving the car around back behind the house after recharging the traction battery now officially counts as my first PHEV trip, eh?

    RE: scan tool recommendations and dealership diagnosis. Thank you for the advice. I did tow it to the dealer for analysis, and despite me explaining that I was going to tinker my way through this problem, and specifically requesting a printout of all available info, including sub codes, other ECU trouble codes, and freeze frame info, they only had the gross overview paperwork that reported P3106 when I went to pay and pick up the car. They claimed they could not retrieve the more detailed paperwork or records, but did offer to run a diagnosis again for another $100. I was very frustrated, took my car, and went home.

    RE: HV ECU connections- I'll do this. I had exposed the HV ECU in preparation for the replacement, and wiggled and inspected the connectors, but nothing jumped out as bad. I was so sure that it was a bad ECM that I didn't do much more diagnosis while I was waiting for the replacement ECM to arrive from ebay.

    The failure happened at the exact peak of a mountain pass, about when I let off the gas pedal. I figured the high-current ignition and injector circuitry in the ECM would have been at unusual peak thermal stress for the 10 minutes of max RPM abuse coming up the pass. Combined with the P3106 code, I was pretty certain the ECM was just dead.

    Anyway, I will keep you posted what I find. Thanks for the concise and expert advice!

    Jim
     
  4. cowlove

    cowlove New Member

    Joined:
    Jul 30, 2008
    5
    4
    0
    Location:
    Seattle
    Vehicle:
    2002 Prius
    Solved. WHEW!

    I spent a few days trying to figure out why multiple ECM's all failed to communicate. I put a scope on the serial communication lines, and although the HV ECU was chattering away at the ECM, the ETH+/ETH- lines were completely dead. Same thing with multiple replacement ECM's. I poured over the power supply and DC signal lines, looking for bad grounds, bad connections, everything.

    Turns out it was a bad fuel tank vapor pressure sensor that was shorting out the ECM's 5V sensor power supply wiring. (Pin VC on the ECM.) This irritated the ECM enough where it wouldn't even boot. Possibly some internal logic or processor in the ECM uses the same power supply, which is shoddy if it's true. Anyway, I disconnected the faulty sensor, and the car sprang to life.

    If the sensor Vcc is as critical to other ECU modules as it is to the ECM, checking for a healthy sensor power voltage (Typically pin "VC", specified as 4.5 to 5.5) should be a top step in troubleshooting any suspect ECU.
     
    3 people like this.
  5. bwilson4web

    bwilson4web BMW i3 and Model 3

    Joined:
    Nov 25, 2005
    27,159
    15,407
    0
    Location:
    Huntsville AL
    Vehicle:
    2018 Tesla Model 3
    Model:
    Prime Plus
    Did you pull the connector at the tank?
    I had not looked closely at the ECM but now I'm noticing the vapor pressure sensor has three lines:

    • VC - the one you found shorted
    • PTNK - feeds back to the ECM
    • E2 - appears to be shared with multiple sensor and E2 on the ECM
    Have you eliminated a wiring harness short to ground?

    Does it run with an error light and/or codes?

    Near as I can tell, it is the sensor that detects if the fuel cap is sealed. Any thought of just 'spoofing' the signal or do you plan to replace the sensor?

    Bob Wilson
     
  6. cowlove

    cowlove New Member

    Joined:
    Jul 30, 2008
    5
    4
    0
    Location:
    Seattle
    Vehicle:
    2002 Prius
    Yes, I disconnected the sensor at the tank. Line E2 is a sensor ground, shared by several sensors. The faulty pressure sensor basically shorts it and VC together, drawing VC down to about .2V.

    I'm driving it around disconnected for now, but I assume this will cause it to fail its ODB2 gastank pressure test cycle next time it runs it, so I will need to replace it before my car is due for its emissions inspection.

    I hadn't thought of spoofing it. I believe that particular emissions test cycle just sees if the gastank can draw (and hold) a vacuum, so just putting in a resistor that returns the approximate vacuum value on PTNK might work.

    Thanks for the spoofing idea. Anyone need 2 classic ECMs and 1 classic HV ECU, by the way?
     
  7. bwilson4web

    bwilson4web BMW i3 and Model 3

    Joined:
    Nov 25, 2005
    27,159
    15,407
    0
    Location:
    Huntsville AL
    Vehicle:
    2018 Tesla Model 3
    Model:
    Prime Plus
    That makes a lot of sense (pardon the pun)! I've long wondered how common-mode noise is avoided but now it looks like "BR" (brown) is the universal, signal reference ground.

    The manual says removed the fuel tank. If you do, please take lots of photos.

    Probably a pair of resistors. But I'm also thinking, 'short heating sensor near gas tank' . . . uh hummm.

    If you do get the failed sensor out, perhaps take a Dremel tool to it and see how the short happened? Any possibility of water leaking from the outside battery vent?

    What sort of prices?

    Bob Wilson
     
  8. cowlove

    cowlove New Member

    Joined:
    Jul 30, 2008
    5
    4
    0
    Location:
    Seattle
    Vehicle:
    2002 Prius
    I grounded the PTNK signal to simulate a good tank vacuum, and this stopped most of the DTC's, but when the car ran the OBD2 evap monitor routine, it failed with a P0450, and left the evap monitor marked incomplete. I'll need to either replace the sensor (ie: remove/replace tank- ugh) or spoof the signal (better) before next emissions check. :(

    Upon reading this link: (can't post link, search for "EVAP VSV Prius Hybrid13.pdf")

    ... I am not surprised grounding the signal did not work. The response expected from the gas tank pressure sensor is fairly sophisticated.

    The ECM applies intake vacuum to the tank, and watches for the pressure to drop from atmospheric pressure to 20mmHg within a certain time limit. Then it removes the vacuum and isolates the tank, and watches that the vacuum held in the tank does not rise too quickly.

    I will devote an hour or so to trying to mimic this response with a little RC delay circuit driven by the signal from the ECM that seals up the tank for this test. I'll post results under a new thread if this works. It could be a fairly useful general scheme for spoofing an ODB2 leakdown test using $1 in parts.
     
    1 person likes this.