Network, generic (extended)

U3033 Control Module Security Certificate Missing/Invalid

Check engine lightUsually off
EmissionsNot relevant
Drive cycleNot required
Limp modeNo

U3033 reports that a module's own security certificate is absent or fails validation, so the unit cannot prove its identity in signed or encrypted exchanges. Stellantis uses the code in the security gateway (SGW) and in connected radios. For 2020 Durango and Pacifica radios, case S2008000164 explains that the certificate is fetched once the car is online and that a stored entry may need as many as 40 key cycles before it disappears; no part is to be replaced. Later bulletins for Ram, Jeep Wagoneer, Grand Cherokee and Dodge Charger (08-322-25, 08-173-26, 9100701) name U3033-00/-01 in the SGW, state that it leaves the MIL off and fix it by reflashing the SGW when the over-the-air update failed. Bulletin 9100386 adds checks of connectivity and the Ethernet network and reloading the certificate store.

Likely causes

Certificate not yet downloaded because the vehicle had no connectivity
Gateway software setting the code erroneously, fixed by reflash
Over-the-air update not completed
Certificate store empty or holding a wrong certificate

Symptoms

  • Code active or stored and cannot be cleared, usually without MIL
  • Security gateway not answering the diagnostic tester
  • Message asking for an over-the-air update or a service visit

Repair estimate

DifficultyShop_onlyWorkshop job
Parts and labour€0–250
Time0.2–1.5 h

Typical range across vehicles; the real cost depends on what the testing finds.

Parts involved

control modulesecurity modulegateway module

Related codes

U3034U3035U3036

References: static.nhtsa.gov, static.nhtsa.gov, static.nhtsa.gov, static.nhtsa.gov.