Skip to main content

GM Controller Authorization - Knowledgebase / V8 Scan and Tune Software - EFILive Service Desk

GM Controller Authorization

Authors list

Controller Authorization can now be managed automatically using the EFILive April Release Candidate software.

If you choose to update your software and firmware you no longer need to purchase a controller auth code.

Prior to reading or flashing any controller, the EFILive V8 Scan and Tune software performs a security negotiation with the controller for permission to access the controller. In the past, the security negotiations were implemented using a simple challenge-response process.   In 2017 GM began making their security negotiation very complex and virtually impossible to automate within the EFILive software. This means the end user must now concern themselves with the security negotiations prior to reading or flashing one of these new controllers.

Customers tuning 2017+ GM vehicles may need to purchase a Controller Authorization Code to negotiate controller security prior to reading or flashing their controller. Specifically the end user must provide the response (the key) to the controller’s challenge (the seed). The seed and key are managed by the dedicated Authorization module contained in the EFILive V8 Tune Tool.

What controllers require authorization?


Model Year









E82 All
E84 All
E92 2017+
E98 2017+

How Do I Authorize a Controller?

The Controller Authorization.pdf details a complete set of operating documentation for the Controller Authorization process.  The below information provides summarized instructions on how to process a controller auth-code request and complete the authorization requirements.

Generate Unauthorized Controller Auth-Code

  1. Attempt to read the controller to obtain the unauthorized controller auth-code.
    1. The physical controller is validated against the selected controller ID when the read function commences to ensure only valid auth-codes are generated.
    2. Where the controller ID does not match the physical controller, the read process will stop and users must select the correct controller type (or use Auto-Detect to continue).
    3. If the controller ID and the physical controller match, and an authorized auth-code has not yet been obtained, users will see the following error: $0552 Reading and flashing are not yet authorized for this controller.
  2. Navigate to the [F3: Tune] -> [F8: Authorization] menu in the V8 Scan and Tune software.
    1. If you attempted the failed read using FlashScan or AutoCal in pass-thru mode, your unauthorized controller auth-code will be automatically downloaded into the Controller Authorization screen.
    2. If your attempt to read the controller was performed using FlashScan/AutoCal via BBR, press [Synchronize] to move the necessary information from FlashScan/AutoCal to your PC.
  3. Highlight the entry you wish to have authorized and select [Copy] or [Copy Code].
  4. Place an order in the EFILive store or contact your tuner if they are managing this process for you.  For assistance on placing a controller auth-code order in the EFILive store click here.

Update Authorized Controller Auth-Code

When your controller auth-code provider or tuner contacts you with your authorized controller auth-code, you will need to:

  1. Copy the controller auth-code provided.
  2. Navigate to the  [F3: Tune] -> [F8: Authorization] menu in the V8 Scan and Tune software.
  3. Click the [Paste] button to update the authorization details.  When the controller auth-code is pasted the icon should change from the locked padlock to a green tick.
  4. Click the [Synchronize] button to copy the updated details to your FlashScan or AutoCal device.  if a different FlashScan or AutoCal is being used for BBR, the user will need to highlight the correct record and click [Sync Selected Items].
  5. Once the controller auth-code has been pasted into the [F8: Authorization] screen, and synchronized (if using stand-alone black box reading/flashing), the controller  can be read or flashed using the standard EFILive read/flash processes.
  6. If the controller auth-code was not correctly authorized after receiving the key the controller will reject the auth-code with error $0322: “A request was made by FlashScan or AutoCal and the controller was not able or ready to handle the request.” In that case you should contact the authorization code provider for assistance.

Controller Authorization Help

Incorrect Controller ID selection produces invalid Auth-Code response.

  1. Update your EFILive software to V8.2.25 (Sept 19) or later to validate the physical controller against the selected controller ID to prevent mismatch.
  2. Remove the invalid auth-code response from:
    1. FlashScan/AutoCal: Delete the Remote.ska file off FlashScan/AutoCal using EFILive Explorer.
    2. V8 Scan and Tune: With V8 Scan and Tune closed, open the utility found in the "C:\Program Files (x86)\EFILive\V8\EFILive_CtrlAuth.exe" folder and delete the invalid auth-code, then save the file.
      Where AutoCal is used, it is likely that the invalid auth-code will be on both the end users' PC and the tuners' PC.  The invalid code MUST be removed from both PC's.
  3. Setup BBR for the correct controller type, or use Auto-Detect to re-read the controller using V8 Scan and Tune pass-thru reading.
  4. Email updated auth-code to along with the order details from your invalid auth-code for manual processing to avoid duplicate charges.
Helpful Unhelpful

15 of 20 people found this page helpful

Add a comment

Please log in or register to submit a comment.

Need a password reminder?