Changsha, Hunan, China · Mon–Fri 9:00–18:00 (UTC+8)
Smart Control Modules · Buyer Guide

PEPS Keyless Entry: Passive Entry and Push-to-Start for Trucks

How a truck unlocks and starts with the key still in the driver's pocket — and what an OEM buyer has to decide to spec it. This guide covers what a PEPS (passive entry passive start) module does, how the 125 kHz and 433.92 MHz link works, where RKE, PKE and PEPS differ, and whether to build it into the BCM or run a dedicated controller.

Buyer Guide ~10 min read
A smart-key fob and a PEPS electronic control module on a workbench, with a technician reaching for a commercial-truck cab door handle in the background.
A smart-key fob and PEPS controller for passive entry. When the driver touches the handle, the system checks the key and unlocks only after the right fob responds.

A driver walks up to the truck with both hands full, touches the door handle, and it unlocks. They climb in, press a button, and the engine starts. The key never leaves their pocket. That experience, familiar from the car park, is now specified on higher-trim commercial vehicles and on bus and coach programs where the cab feature list is a selling point. The module that makes it happen is the PEPS controller.

This guide is the version of the PEPS conversation we have with OEM engineering buyers during project scoping, written down. It assumes you know what a CAN bus and a BCM are, and that your program is weighing a keyless build, whether that is passive unlock on a higher-trim heavy truck, one-button start on a new-energy platform, or a full smart-key feature on a coach.

1. What a PEPS module does

PEPS stands for passive entry passive start. It is the controller that authenticates the smart-key fob without the driver pressing anything, works out where the fob is relative to the vehicle, and then authorises two things: unlocking the doors, and letting the start button crank the engine. Everything else in the keyless feature is built on those two authorisations.

The reason it is a dedicated job, rather than something the door-lock relay does on its own, is the security and localisation problem underneath it. The system has to prove the right key is present, prove it is in the right place (outside the door for entry, inside the cabin for start), and gate the engine behind a physical lock so a stolen vehicle cannot simply be driven away. On a commercial vehicle a PEPS controller is responsible for:

  • Passive entry. Challenging the fob through a low-frequency antenna when the driver touches a door handle, and publishing an unlock-permitted message once the fob answers correctly.
  • Smart-key authentication. Running the 125 kHz challenge and the 433.92 MHz coded response so only a paired fob is accepted, and holding the paired-key set in a learn-mode the program can update.
  • In-cabin localisation. Using several antennas to tell whether the fob is outside a door or inside the cabin, which is what keeps the engine from starting while the key is still on the pavement.
  • Push-to-start sequencing. Running the ACC, IGN and START outputs in order against a start-permission policy, with the brake or clutch interlock and the gear-in-park condition checked first.
  • Steering-column lock gating. Driving an ESCL (electronic steering-column lock) so the column physically locks when no authorised key is present and releases only on an authenticated start.
  • Alarm and reminder logic. Raising the key-left-in-cabin, key-not-detected and start-conditions-not-met warnings that a keyless feature needs to be safe to live with.

On the Youlai catalogue this role is filled two ways. The EBX‑964 PEPS core controller is a dedicated 24 V unit that owns the whole keyless stack on its own board, and the EBX‑2169 12 V BCM folds a full PEPS sub-system into a 178-pin body control module. Which one fits is the main sourcing decision, covered in section 4.

2. How passive entry and push-to-start work, step by step

A PEPS transaction is a challenge-and-response across two radio links. The low-frequency link goes out to the fob; the high-frequency link comes back. Understanding the sequence is what lets you write a sensible antenna plan and security policy later.

Step 1 — the driver touches the handle

The door-handle sense input — usually routed through the body BCM — tells the controller a hand is on a specific door. The PEPS module drives a 125 kHz challenge burst out of that door's low-frequency antenna. The burst carries the vehicle ID and a one-time session number, so a recording of an old challenge cannot be replayed.

Step 2 — the fob answers on the radio

The fob, carried in a pocket, demodulates the 125 kHz challenge, checks the vehicle ID against its paired ID, and transmits a 433.92 MHz response carrying the coded authentication payload. The PEPS controller's radio receiver captures that burst and authenticates it against the paired-key set. On a pass, the controller publishes an unlock-permitted message on CAN and the BCM drives the door-lock motor.

Step 3 — in-cabin localisation

Once the driver is seated, the controller runs a second challenge across several antennas to locate the fob. If the fob is inside the cabin, it asserts a fob-in-cabin state. This is the step that separates a full PEPS system from a simple passive unlock: the engine must not start unless the key is genuinely inside, not on the ground beside the door.

Step 4 — push-to-start

With the fob-in-cabin state set, the brake or clutch pedal pressed and the gear in neutral or park, a press on the start button runs the one-button-start sequencer. It releases the steering-column lock, drives ACC high, then IGN, then START to crank, and releases START on an engine-running confirmation. A second press shuts the engine down and re-locks the column. The whole policy — which conditions must pass before START is driven — is set by the program, not assumed by the box.

PEPS entry and start as a four-step sequence A clean four-card left-to-right sequence. Step 1: the driver touches the door handle and the PEPS controller sends a 125 kHz challenge from that door's low-frequency antenna. Step 2: the smart-key fob replies at 433.92 MHz and the authenticated response lets the body BCM unlock the door. Step 3: the PEPS controller checks whether the fob is inside the cabin. Step 4: if the key is inside and the start interlocks pass, the controller allows ACC, IGN and START. 1 Driver touches the handle The controller fires a 125 kHz challenge from that door's LF antenna, carrying a vehicle ID and a one-time code. 125 kHz LF challenge door handle + LF antenna 2 Fob answers on the radio The fob checks the vehicle ID and replies at 433.92 MHz, and the controller authenticates it; the BCM then unlocks. 433.92 MHz response smart-key fob + PEPS 3 In-cabin localisation A second challenge across several antennas locates the fob: inside the cabin, or still outside by the door? fob-in-cabin check PEPS controller 4 Push-to-start Fob inside, brake on and gear in park: the button runs ACC, then IGN, then START, and releases the steering-column lock. ACC · IGN · START PEPS + ESCL + start button
Read left to right: the doors unlock after the fob replies; push-to-start is allowed only after the key is confirmed inside the cabin.

3. RKE, PKE and PEPS are three levels, not three products

The single most common confusion at the start of a keyless requirement is treating RKE, PKE and PEPS as alternatives to choose between. They are layers. Each adds capability to the one before it, and the cost and the antenna count climb with each step. Knowing which layer the program actually needs is what stops you paying for push-to-start on a base-trim build, or promising passive start when the requirement only funded passive unlock.

Feature levelWhat the driver doesWhat it needs
RKE (remote keyless entry) Presses lock / unlock on the fob. A one-way 433.92 MHz receiver and a button fob. No low-frequency antennas. Often built into the BCM, as on the EBX‑2305.
PKE (passive keyless entry) Touches the handle; doors unlock with the fob in a pocket. Engine still started with a key or switch. Adds 125 kHz low-frequency antennas for the challenge, plus handle-sense inputs. The start column stays mechanical.
PEPS (passive entry passive start) Touches the handle to enter, presses a button to start. Fob never leaves the pocket. Adds in-cabin localisation, an ESCL, the push-button stack and the interlock policy. The full stack on the EBX‑964, or integrated on the EBX‑2169.

A useful way to place a requirement: ask what the driver does to start the engine. If they still turn a key, you are at PKE or below, and you do not need an ESCL or a start sequencer. If they press a button and the fob stays in a pocket, you are at full PEPS, and the localisation, the steering-column lock and the interlock policy all come with it. Most disappointed keyless projects scoped PKE hardware against a PEPS expectation, and discovered the gap when the start button was added late.

4. Integrated or dedicated: where the PEPS function lives

Once the program is genuinely at full PEPS, the sourcing decision is whether the PEPS function lives inside the body control module or on a controller of its own. The answer is set mostly by the system voltage and by what the main BCM already does.

ApproachBest fitReference module
Integrated — PEPS as a subset of a full-scope BCM A 12 V passenger or higher-trim commercial program that wants one ECU to own body loads, the RKE receiver and the full PEPS stack, removing the BCM-to-PEPS CAN traffic and the inter-box harness. EBX‑2169 — 12 V (9–16 VDC), ~50 functions across 7 groups, ~178 pins on 5 connectors, RF 433.92 MHz ASK/FSK.
Dedicated — a standalone PEPS core controller A 24 V commercial program whose main BCM is a pure-logic or fuse-relay-integrated unit with no smart-key stack, so PEPS is added as a separate controller reporting to the BCM over CAN. EBX‑964 — 24 V (18–32 VDC), 4 LF antenna pairs at 125 kHz, 433.92 MHz response, ESCL interface, push-button sequencer, IP53.

The integrated route is cleaner when one ECU can reasonably own the whole body-electronics group, because every function that shares the board stops needing a CAN message and a connector to talk to its neighbour. The EBX-2169 is built for exactly this: a 12 V full-scope BCM that carries the lighting, wiper, central-locking and PEPS logic together, with the 433.92 MHz receiver on the same board and the low-frequency antennas routed in through one of its five connectors.

The dedicated route is the right one when the main BCM was never designed for a smart key, which is common on 24 V commercial platforms where the BCM is a rugged logic or fuse-relay unit such as the EBX‑954. Bolting PEPS into that BCM would mean redesigning it; adding a dedicated controller such as the EBX-964 keeps the existing BCM and lets the PEPS unit own the four-antenna challenge, the response demodulator, the ESCL gating and the start sequencer on its own board. It reports to the body BCM over a single CAN link, with the protocol confirmed per program.

5. Where PEPS shows up on commercial vehicles

Keyless entry started as a passenger-car feature, but the requirement now lands on several commercial-vehicle programs, each for a slightly different reason. The reason matters, because it changes which layer you need and where the antennas go.

  • Higher-trim heavy trucks. On a long-haul tractor the keyless feature is a cab differentiator at the dealer level. A two-door cab needs fewer low-frequency antennas than a car, but the 24 V supply pushes most of these toward a dedicated controller alongside the existing rugged BCM.
  • Bus and coach. A long body changes the localisation problem: the cabin is large, and the driver area has to be told apart from the passenger space. This is where the antenna count and placement need the most thought rather than a copied car layout.
  • New-energy platforms. An electric or hybrid driveline adds a high-voltage power-up step to the start sequence, so the start authorisation has to coordinate with the powertrain side. The vehicle control unit owns that high-voltage sequencing; the PEPS controller authorises the request.
  • Service and fleet integration. A keyless vehicle that also reports to a fleet back-end may accept a tightly scoped remote door-unlock through the telematics box, while the PEPS controller remains the part that authenticates the physical key at the vehicle.

The common thread is that a commercial PEPS layout is rarely a copied passenger design. The voltage, the cab size and the powertrain all change the antenna plan and the start policy, which is why the requirement is worth writing down before the hardware is fixed.

6. How to write a PEPS specification a supplier can quote

A PEPS requirement a supplier can quote against, rather than guess at, covers six things. Skipping any one of them is what turns a quick quote into a round of questions.

  1. System voltage. 12 or 24 V nominal and the tolerance band. This is the first fork: 12 V points toward an integrated-BCM path, 24 V commercial usually toward a dedicated controller.
  2. Feature level. RKE, PKE or full PEPS with push-to-start. State it plainly, because it decides whether you need an ESCL, a start sequencer and in-cabin localisation at all.
  3. LF antenna plan. How many 125 kHz antennas and where they mount, which sets the localisation zones — one per door is typical, with cabin-interior antennas added on a long body.
  4. Start and security policy. Whether an ESCL steering-column lock is required, the interlock conditions (brake or clutch pressed, gear in neutral or park), and the alarm and reminder set the program wants.
  5. Vehicle interface. The CAN protocol to the body BCM, how the door-handle and gear-position signals arrive, and whether the smart-key learn-mode is triggered from the BCM diagnostic tool or a service command.
  6. Destination market. The country or region the vehicles run in, which fixes the radio type approval the 433.92 MHz path has to carry. Settle it early; it is the section most often left blank.

The decision buyers leave until last and regret is the antenna plan in point three. The localisation quality — telling outside-the-door from inside-the-cabin — depends on it, and re-working the antenna layout after the harness is drawn is expensive. Decide it with the start policy, not after.

7. What to look for in a PEPS supplier

A PEPS module owns the security boundary of the vehicle and depends on a radio that is subject to per-market approval, so the supplier questions that matter are about capability and honesty, not headline price.

  • Quality system in hand. Ask for the IATF 16949 certificate and what the PPAP package contains. Youlai manufactures under IATF 16949 with a PPAP package on program handoff. Treat any verbal "automotive grade" claim without a certificate number as marketing.
  • Smart-key and localisation experience. The four-antenna 125 kHz challenge, the in-cabin localisation and the ESCL handshake are not generic embedded work. A supplier that has shipped PEPS should discuss the antenna plan and the start-permission policy concretely rather than promising a blanket keyless feature.
  • Pairing and learn-mode. Ask how a new fob is paired in production and in service. A controller with an on-board learn-mode, triggered from the BCM diagnostic tool or a service command, avoids needing a PEPS-specific programmer in the field.
  • EMC and environmental capability. A unit running both a 125 kHz transmitter and a 433.92 MHz receiver is both an EMC source and a victim. Confirm in-house EMC pre-compliance and environmental testing rather than outsourced-only validation. Youlai validates in an in-house environmental laboratory with EMC pre-compliance equipment.
  • Region-specific approvals. The radio type approval for the destination market is available upon project requirement, confirmed per market on a project basis rather than blanket-claimed across the catalogue. An honest supplier separates what it holds in hand from what it runs per project.

Questions you will be asked at RFQ stage

  • MOQ and samples. A configurable variant of an existing EBX platform can usually move to samples quickly; a fob protocol or antenna plan unique to your program follows the firmware and approval timeline. Sample quantities are agreed per program.
  • Lead time. Driven mostly by the destination-market radio approval and the smart-key pairing integration, not by the hardware build itself.
  • PPAP timeline. The IATF 16949 PPAP package (drawings, BOM, control plan, FMEA, dimensional and test reports) is prepared on program handoff.
  • Customisation scope. Variants on an existing EBX platform — antenna count, CAN matrix, ESCL interface, start policy, connector — are routine, not an exception.

If you are scoping a keyless system, the most useful things to bring to a first conversation are your system voltage and your feature level from section 6 — whether you need full PEPS or only passive unlock, and how many antennas the cab calls for. That lets us map your requirement onto the EBX‑2169 integrated BCM or the EBX‑964 dedicated controller, or tell you honestly where a custom variant is needed. For how PEPS sits among the BCM, VCU, PMU and gateway, the Smart Control Modules technical guide covers the full module stack.

For drawings, an antenna-plan and start-policy review or a sample request against your vehicle program, please use the contact page or message +86 134 6767 4786 on WhatsApp. Typical reply within 24 hours during China business hours (UTC+8).

FAQ

What is the difference between RKE, PKE and PEPS, and which does my program need?

RKE, PKE and PEPS are three levels of one idea, not rival options. RKE is the button fob — the driver presses lock or unlock over a one-way 433.92 MHz link. PKE adds a 125 kHz challenge, so the doors open on a handle touch with the fob still pocketed, but the engine is started with a key or switch. PEPS adds push-to-start: an in-cabin localisation check and a start button behind a brake or clutch interlock, so the fob never comes out. Pick RKE for a base-trim cost target, PKE when passive unlock is the selling point, and PEPS for a top-trim one-button-start program.

Should PEPS be integrated into the BCM or run on a separate controller?

It comes down to system voltage and how much the main BCM already carries. On a 12 V program, folding PEPS into a full-scope BCM drops the BCM-to-PEPS CAN traffic and the box-to-box harness — the EBX-2169, for instance, runs the body-load logic, the RKE receiver and the PEPS sequencer on one 178-pin ECU at 9 to 16 VDC. On a 24 V program whose BCM is a pure-logic or fuse-relay unit with no smart-key stack, a dedicated controller is cleaner: the EBX-964 handles the 125 kHz challenge, the 433.92 MHz response, the ESCL gating and the push-button sequence on its own board at 18 to 32 VDC and reports to the BCM over CAN. Integrate when one ECU can own the whole body group; separate when PEPS is bolted onto a BCM never built for it.

How many LF antennas does a passive entry system need, and at what frequency?

Passive entry challenges the fob at 125 kHz and reads its reply at 433.92 MHz. The antenna count decides how precisely the controller can place the fob. One low-frequency antenna per door is the usual starting point — enough to tell outside-this-door from inside-the-cabin, the check that stops a start while the key is still on the pavement. A dedicated controller like the EBX-964 drives four differential 125 kHz antenna pairs for this. A two-door cab needs fewer; a long bus often adds cabin-interior antennas. Count, mounting points and zones are a per-vehicle decision, not a fixed catalogue number.

What do I need to send a supplier to quote a PEPS or keyless entry module?

Six things move a PEPS quote fastest: system voltage (12 or 24 V, which splits the integrated-BCM path from the dedicated-controller path); feature level (RKE, PKE or full PEPS); the 125 kHz antenna plan (how many and where, which sets the localisation zones); the start and security policy (ESCL column lock, brake or clutch interlock, gear-in-park); the vehicle interface (CAN protocol to the BCM, plus how the door-handle and gear signals arrive); and the destination market, which fixes the radio type approval the 433.92 MHz path must carry. With those, a supplier can map your requirement onto a platform like the EBX-2169 or EBX-964, or tell you where a custom variant is needed.

Get in Touch

Talk to Our OEM Project Team

Reply within 24 hours (UTC+8). Send drawings or specifications via WhatsApp or email.

When reaching out, please share with us: target vehicle / machine model, expected annual volume, and key technical requirements (CAN protocol, IP rating, working temperature, connector preference). Drawings welcome.