When the module is the fault, not the key

Toyota & Lexus Smart Key ECU Programming in Fort Worth (2026)

Updated July 31, 2026· Reviewed by ALOA Master Automotive Locksmith (MAL), Fort Worth field-service review standard

A dead Smart Key ECU looks exactly like a dead key: push-start light flashing, no crank, no response from either fob. Replacing the key does nothing. This Fort Worth guide covers the Toyota and Lexus certification ECU, immobilizer box, G-chip and H-chip eras, used-module VIN marriage, and how a credentialed operator decides between resetting a module and replacing it.

Toyota and Lexus Smart Key ECU module programming being performed on a vehicle in Fort Worth, Texas

TL;DR — Toyota and Lexus module work in one screen

Most "my Toyota key stopped working" calls in Fort Worth are key problems. A meaningful minority are not. When the Smart Key ECU — the certification ECU, sometimes called the ID code box — fails, the symptoms are nearly identical to a dead key, and replacing the key fixes nothing.

Here is the short version:

  • The fob does not start your car. It authenticates to the Smart Key ECU. The Smart Key ECU authorizes the engine ECM and the steering lock. Break any link in that chain and you get the same dashboard behavior.
  • Two fobs failing on the same day is a module signature, not a key signature. Independent transponders do not die in pairs.
  • Chip era governs everything. Toyota's 4C era, the G-chip era (roughly 2004–2010), and the H-chip era (roughly 2010 forward) are not cross-compatible, and the blades look nearly identical.
  • Used modules are married to a VIN. On many model years the certification ECU, the engine ECM, and the steering lock ECU are a matched set. A salvage-yard module is not a drop-in part.
  • Reset beats replace when it is available. A module that can be returned to a virgin state and re-registered costs materially less than a new module plus VIN programming.

As of July 2026, realistic Fort Worth ranges for this family of work sit in the $150–$400 ignition and diagnostic band for repair-level module work, and in the $350–$800 European/advanced band when a module has to be replaced and re-married. Straight key work is separate: a transponder key runs $120–$200, a smart/proximity key $220–$500, and a lost fob $180–$450. Full detail lives on our module programming and car key replacement cost pages.

What the Smart Key ECU actually is

On a push-button-start Toyota or Lexus, there is no mechanical key turning a cylinder to complete a circuit. Instead there is a small network of components that has to agree before the starter will engage:

  1. The fob — a low-frequency receiver and a UHF transmitter with an encrypted rolling identity.
  2. Cabin and door antennas — typically six to eight low-frequency antennas that flood specific zones so the vehicle can determine whether the fob is outside the driver's door, inside the cabin, or in the cargo area.
  3. The Smart Key ECU / certification ECU — the arbiter. It challenges the fob, validates the response, checks the ID against its registered key list, and issues permission.
  4. The steering lock ECU (ELV) — on many models a separate module that physically releases the column lock only after the certification ECU says so.
  5. The engine ECM — receives the immobilizer release and permits fuel and spark.

Physically the Smart Key ECU is usually a palm-sized module behind the lower dash, above the driver's kick panel, or behind the glove box depending on platform. It is not the same thing as the "immobilizer amplifier" or antenna ring — that is the coil around the ignition switch on older key-turn Toyotas.

The practical consequence of this architecture: the fob is the least important component in the chain. It is a credential. The module is the lock. Most consumers, and unfortunately a fair number of low-credential operators, treat the credential as the whole system.

Why a dead Smart Key ECU mimics a dead key

Here is the failure mode that costs Fort Worth drivers the most money.

The certification ECU develops an internal fault — corroded solder joints from a water intrusion at the cowl, a failed voltage regulator after a jump-start event, or degradation from years of Texas cabin heat cycling. The module stops responding on the body CAN network.

What the driver sees:

  • Press the start button: the push-start indicator flashes or the dash shows a key-not-detected style warning.
  • Neither fob works. Not the daily fob, not the spare in the kitchen drawer.
  • The emergency mechanical blade still unlocks the driver's door, because that is a purely mechanical path.
  • Sometimes the steering wheel stays locked, because the steering lock ECU never received release permission.

That symptom set is indistinguishable from a dead key to anyone not scanning the vehicle. It is also indistinguishable from a dead 12V battery in some cases, which is why a competent operator loads the battery first — a Toyota below roughly 11.5 volts under load will produce immobilizer symptoms that vanish the moment voltage is restored.

The tell is the multiplicity. If you have two independently manufactured transponders, both of which worked last week, and both stop working simultaneously, probability does not favor the keys. Our no key detected / immobilizer page walks through the same triage in more detail, and push-button start problems covers the start-button-specific variants.

The single most expensive mistake I see on Toyota calls is somebody selling a customer two brand-new smart keys for a car whose certification ECU is already dead. Now the customer has spent real money, the car still will not start, and they think locksmiths are crooks. Scan first. If both existing fobs fail identically and the battery is good, you are looking at a module until you prove otherwise.

— a NASTF-registered Fort Worth automotive locksmith, ALOA Master Automotive Locksmith (MAL) credential, DFW metroplex (anonymized)

The chip eras: 4C, G, and H

Toyota and Lexus transponder cryptography changed twice in ways that matter enormously at the counter.

4C era (roughly late 1990s to mid 2000s). Fixed-code transponders, relatively simple cloning, widely supported by inexpensive tools. Camry, Corolla, 4Runner, Tacoma, and Sienna of this vintage. Key blanks are cheap and plentiful.

G chip era (roughly 2004 to 2010). Introduced a rolling-code element. Keys are physically stamped with a G on the blade shoulder or key head. This is where do-it-yourself attempts start failing: a G-era vehicle rejects a 4C key even though the blade profile is identical and the key will cut and turn perfectly.

H chip era (roughly 2010 forward). A substantially stronger 128-bit algorithm, stamped H. H-era vehicles include the bulk of the modern Camry, Corolla, RAV4, Highlander, Tundra, Tacoma, and the Lexus ES, RX, GX, and IS lines. H-chip all-keys-lost work requires OEM-level security data access — this is the point at which the job stops being a key-cutting job and becomes a credentialed security-data job.

There is a fourth practical category that is not a chip at all: proximity smart keys, which carry the transponder function plus the low-frequency proximity handshake. These are what the Smart Key ECU is built around.

Why this matters for module work: the chip era determines whether the module can be reset, what registration procedure applies, and how long the security timer runs. An operator who cannot tell you which era your vehicle is in before dispatch is not going to have the right procedure loaded when they arrive.

EraApprox. yearsKey markingModule involvedTypical Fort Worth job class
4C transponderlate 1990s–mid 2000snone / 4CImmobilizer ECU (ID box)Transponder key $120–$200
G chip~2004–2010G stampedImmobilizer ECU / early cert ECUTransponder key $120–$200
H chip~2010–presentH stampedCertification ECUTransponder key $120–$200; smart key $220–$500
Smart / proximity~2007–presentno blade markingSmart Key ECU + antennas + ELVSmart key $220–$500; module work $350–$800
Module replacement (any era)Cert ECU + ECM + ELV set$350–$800 advanced band

Reset versus replace: the decision that sets your price

When a certification ECU is confirmed faulty, there are three paths, and they are not equally priced.

Path 1 — Reset and re-register. On a number of Toyota and Lexus platforms, an immobilizer or smart-code reset procedure exists that clears the registered key list and returns the module to an accept-new-keys state. This is the same family of procedure used for all-keys-lost work where the module itself is healthy. It is the cheapest outcome because there is no part cost — you are paying for credentialed access and time. This is where Toyota's notorious 16-minute security timer lives: several reset and registration sequences deliberately stall for sixteen minutes before completing, specifically to make brute-force attempts impractical. It cannot be skipped. Budget for it.

Path 2 — Virgin replacement module. A new, never-married module is installed and programmed to the VIN, then all keys and the steering lock are re-registered. Highest parts cost, cleanest outcome, and the path a dealership will almost always choose.

Path 3 — Used donor module. A salvage-yard certification ECU is sourced and either bench-reset to virgin or married to the new vehicle. This is the path customers ask about most and the one that fails most often, because on many model years the certification ECU is paired to the engine ECM and the steering lock ECU as a matched set. Pull one from a donor car and you have a component that already believes it belongs to a different VIN. Depending on year, the fix is either a bench reset — which requires opening the module and working at the chip level — or replacing the entire matched set, which erases the savings that motivated the used part in the first place.

The honest guidance: ask before you buy the part. A credentialed operator can tell you from your VIN whether your platform supports a used donor module. Buying a $90 eBay module for a platform that requires a matched set is how a $400 job becomes a $900 job.

Lexus-specific notes

Lexus shares Toyota's architecture but skews harder toward smart-key platforms and adds a few wrinkles:

  • Earlier proximity adoption. Lexus was pushing smart access years before it filtered down to Toyota's volume models, so a mid-2000s Lexus is more likely to be a smart-key car than a same-year Toyota.
  • More antennas, more failure points. Larger cabins and more zones mean more low-frequency antennas, and a single failed antenna produces intermittent, position-dependent symptoms — the fob works from the driver's seat but not the passenger seat, or works in the cabin but will not open the trunk.
  • Steering lock ECU faults are more common on several Lexus platforms, and a failed ELV produces a no-crank with a locked column that reads as an immobilizer fault to anyone not scanning.

Model-specific walkthroughs live on our Lexus key programming page, and if you are working through a specific SUV, the Lexus GX 460 key replacement guide covers that platform end to end. Toyota truck and SUV owners will find the same treatment in our Toyota 4Runner key replacement guide.

All keys lost with a suspect module

This is the hardest version of the job, and it is where verification matters most.

When there is no working key and the module is under suspicion, the operator has to disentangle two possible faults with no known-good credential to test against. The sequence a credentialed operator follows:

  1. Verify ownership before anything else. Vehicle title or current registration, plus a government-issued photo ID whose name matches. This gets recorded on the invoice. The FTC's guidance on hiring a locksmith treats identity verification as a baseline expectation, and any operator who generates a key to a vehicle without it is a problem regardless of price.
  2. Load-test the 12V battery. Low voltage produces false immobilizer faults constantly.
  3. Scan the body and immobilizer networks. Confirm whether the certification ECU is present and communicating at all. A module that does not answer on the bus is a very different job than one that answers and reports an unregistered key.
  4. Check antenna circuits. A silent module with healthy antennas versus a live module with a dead antenna are opposite diagnoses.
  5. Only then decide between key generation, module reset, or module replacement.

Our Toyota all keys lost page covers the key-side of that procedure in depth, and the general all keys lost page covers the cross-brand version.

According to NHTSA's material on vehicle anti-theft systems, immobilizer architectures exist precisely to make unauthorized key generation difficult — which is the same property that makes legitimate all-keys-lost work slow and credential-gated. The wait is the security working.

What this costs in Fort Worth, honestly

Numbers you can hold an operator to, as of July 2026:

  • Transponder key (non-proximity): $120–$200
  • Smart / proximity key: $220–$500
  • Lost fob replacement: $180–$450
  • Extra fob added to an existing working system: around $65
  • Ignition-related repair and diagnostic-class module work: $150–$400
  • Full certification ECU replacement and re-marriage (advanced band): $350–$800
  • Vehicle lockout, no key work: $75–$200

Dealership pricing for the equivalent module jobs generally runs materially higher, and adds a tow when there is no working key — a mobile operator comes to the vehicle, so the tow line item disappears entirely. AAA's annual driving-cost research is a useful reference point for what the downtime around a multi-day dealer appointment actually costs once you price in a rental.

Verification checklist before you book

Six things to confirm on the phone. All six are answerable in under two minutes by a real operator:

  1. They ask for your year, model, and whether it is push-button start before quoting — not after.
  2. They can tell you whether your vehicle is G-chip, H-chip, or smart-key era.
  3. They state that they will scan before selling you a key, and that diagnosis is a separate step from key generation.
  4. They quote a flat-rate range in writing before dispatch, not a "starting at" teaser.
  5. They confirm Texas DPS Private Security Program licensing — Texas locksmiths are licensed through the Department of Public Safety's Private Security Program, and any operator citing a different agency is not describing Texas law.
  6. They confirm NASTF Vehicle Security Professional registration for OEM security-data access. The NASTF VSP program is the legitimate path to the data required for H-chip and smart-key work.

The Associated Locksmiths of America maintains the certification ladder — Master Automotive Locksmith is the tier at which certification-ECU-level work sits. It is not entry-level.

Getting it done

Fort Worth Car Keys is a mobile-only operation covering Fort Worth and the surrounding metroplex, seven days a week from 8AM to 8PM. Call 817-842-1256 or email contact@fortworthcarkeys.com. We come to the vehicle — driveway, workplace parking lot, or the side of the road — which is the entire point when the car cannot be driven to a service bay.

Related reading and service detail: Toyota brand page, Lexus brand page, module programming, smart key replacement, emergency car locksmith, and our Fort Worth service area.

Frequently Asked Questions

What is a Toyota Smart Key ECU and what does it actually do?

The Smart Key ECU, also called the certification ECU or ID code box, is the module that authenticates your key before the vehicle will crank. It holds the registered key IDs, talks to the door and cabin antennas that detect a proximity fob, and passes a permission signal to the engine ECM and the steering lock. Your fob does not start the car by itself. It only proves identity to the Smart Key ECU, and the Smart Key ECU is what releases the immobilizer.

How do I tell whether my key is dead or the Smart Key ECU is dead?

The clearest tell is behavior across multiple keys. If both fobs fail identically, the emergency mechanical blade in the door works, and the security indicator behaves abnormally such as staying solid or flashing rapidly instead of the normal slow blink, the fault is far more likely in the module or its antennas than in two keys that failed on the same day. A credentialed operator scans the body and immobilizer networks before recommending any key. Two fobs dying simultaneously is rare. A single module failing is common.

What is the difference between a G chip and an H chip Toyota key?

They are two generations of transponder cryptography. G chip keys, roughly 2004 through 2010 on many models, are marked with a G stamped on the blade shoulder or the key head. H chip keys, roughly 2010 forward, use a stronger 128 bit rolling algorithm and are marked with an H. They are not interchangeable. An H chip vehicle will not accept a G key, and a physically identical looking blade from a parts bin is one of the most common reasons a do it yourself key attempt fails.

Can a used Smart Key ECU from a salvage yard be programmed to my car?

Sometimes, but it is the hardest version of this job and it is frequently not worth the savings. Many Toyota and Lexus certification ECUs pair to the engine ECM and the steering lock ECU as a matched set, and a used module arrives already married to a different VIN. Depending on model year the module must be reset to a virgin state on the bench, or the whole set has to be replaced together. A credentialed operator will tell you before dispatch whether your specific model year supports a used donor module.

How long does Toyota or Lexus module programming take on site in Fort Worth?

Diagnosis is typically 30 to 60 minutes. Key registration after a module is in place commonly runs 30 to 90 minutes because Toyota builds a mandatory security wait into several immobilizer procedures, most famously the 16 minute timer that runs during certain reset and registration sequences. Full module replacement with re-registration of all keys and the steering lock generally lands between 2 and 4 hours on site. Anyone promising a 20 minute Toyota all keys lost with module work involved is over promising.

Do I need proof of ownership for a Toyota or Lexus all keys lost job?

Yes. A legitimate operator will ask for the vehicle title or current registration together with a government issued photo ID whose name matches, and will record that verification on the invoice. This is standard practice for any locksmith accessing OEM security data, and it is the single fastest way to tell a real credentialed operator from someone who is going to drill your ignition. If nobody asks who you are before they generate a key to your car, that is the wrong operator.

Is mobile module programming as good as the Toyota dealership?

For key registration, immobilizer resets, and most certification ECU work, yes. The same OEM security data is reached through the same registry credentialing that a dealer technician uses, and the work happens in your driveway rather than after a tow. The dealer is the better path when the module fault overlaps an open recall or campaign, when the vehicle needs other warranty work anyway, or on a very new platform where independent tool support has not caught up yet.

References

  1. NASTF Vehicle Security Professional (VSP) Registry — National Automotive Service Task Force credentialing for OEM security-data access.
  2. Associated Locksmiths of America (ALOA) — Trade association governing the Master Automotive Locksmith credential.
  3. NHTSA — Anti-Theft Systems — Federal guidance on immobilizer and anti-theft architecture.
  4. FTC Consumer Advice — Hiring a Locksmith — Verifying locksmith legitimacy before service.
  5. FTC — Business Guidance — Federal Trade Commission guidance on advertising and pricing disclosure.
  6. AAA — Your Driving Costs — Annual vehicle ownership and downtime cost research.
  7. IIHS — Vehicle Theft and Anti-Theft Technology — Insurance Institute for Highway Safety research on immobilizer effectiveness.

Need a Car Locksmith in Fort Worth?

Don't spend an hour comparing — call and we'll give you a firm price on the phone, dispatch in 20–40 minutes, and solve it on-site.

Call Now Text Us