Mechanic Wiki: How to Program a Security Gateway Mitsubishi Pajero Sport Key with LAUNCH X431

Step-by-step guide to programming a 2021+ Mitsubishi Pajero Sport key using LAUNCH X431. Bypass the Security Gateway, retrieve code, and register keys.

Last Updated: June 16, 2026

Quick Answer: Programming a key for a 2021+ Mitsubishi Pajero Sport equipped with a Security Gateway requires a professional-grade scanner like the LAUNCH X431 that can bypass the encrypted CAN bus. The process involves connecting the tool, navigating to the Immobilizer menu, automatically retrieving the security code via VIN, and registering all keys (old and new) through on-screen prompts. You’ll need a compatible transponder blank key and an active Mitsubishi software subscription.

What Makes the Pajero Sport Key Programming Different?

If you’ve programmed keys for older Mitsubishi models using the traditional ignition-cycling method, you’re in for a surprise. Starting around 2019–2020 (and fully standard by 2021), the Pajero Sport received a Security Gateway module. This isn’t just a software update — it’s a physical gateway that sits between the OBD-II port and the vehicle’s critical ECUs, including the immobilizer.

The Security Gateway Problem

The Security Gateway encrypts all diagnostic communication. Plug in a generic code reader, and it might read engine data — but when you try to access the immobilizer, you’ll get a “Communication Failure” or “Security Access Denied” error. The gateway simply doesn’t trust the scanner unless it can authenticate properly.

Why Mitsubishi added it: Modern vehicles are vulnerable to relay attacks and ECU theft. The Security Gateway prevents unauthorized devices from reflashing the ECU or programming new keys without proper credentials. It’s a good security measure — but it makes DIY key programming much harder.

How the LAUNCH X431 Solves It

The LAUNCH X431 series (especially the V+ Pro, PAD VII, and X431 EURO PAD) includes pre‑loaded security protocols that perform a handshake with the Mitsubishi gateway. The scanner essentially says, “I’m a legitimate tool — let me in.” Most models bypass the gateway automatically when you choose the correct vehicle and system. No extra cables or pass‑through modules are needed for the Pajero Sport, though some early units required a software update.

According to feedback from automotive forums and technician networks, the LAUNCH X431 is one of the few aftermarket tools that can reliably handle this gateway without dealer-level subscriptions. That’s why it’s the go‑to choice for workshops that service late‑model Asian vehicles.

What You Need Before Starting

Hardware Essentials

LAUNCH X431 scanner — PAD VII, X431 V+ Pro, X431 EURO PAD, or equivalent. Older models like the X431 Diagun may not have the gateway bypass capability.
Blank transponder key — Must be the correct chip type. For Pajero Sport (2019+), you typically need a 4D-60 or G‑chip transponder. A plain metal blank won’t work.
OBD-II cable — The standard 16‑pin cable included with the LAUNCH unit.
Battery charger (recommended) — Programming can drain the battery. Connect a trickle charger or battery maintainer to keep voltage above 12.5V.

Software Requirements

Active Mitsubishi license on your LAUNCH account. The tool must have “Key Programming” or “Immobilizer” functions unlocked.
Latest firmware — Update the tablet over WiFi before you begin. An outdated database might not show the Immobilizer menu or might fail the gateway handshake.

Optional but Helpful

The original key’s ID code tag (a small white sticker or card) — it often contains the 4‑digit security code. Many LAUNCH tools can pull this automatically via VIN, but having the physical code saves time if the auto retrieval fails.

Step-by-Step Guide: Programming a Key with LAUNCH X431

Follow these steps in order. Do not skip any connection or menu — skipping can cause the programming to fail halfway.

Step 1: Prepare the Vehicle

Close all doors and the hood.
Insert the working key into the ignition.
Turn the ignition to the ON position — the dashboard lights should illuminate. Do not start the engine.
Connect a battery maintainer to the terminals if you have one.

Step 2: Connect the LAUNCH X431

Plug the OBD-II cable into the vehicle’s diagnostic port (located under the dashboard, driver’s side).
Connect the other end to the LAUNCH tablet.
Power on the tablet. The LAUNCH software should auto‑detect the connection.

Step 3: Enter the Diagnostic Menu

Tap Diagnosis on the home screen.
Select Mitsubishi (choose the correct region if prompted — Asia for most Pajero Sport models).
Select Pajero Sport. You may need to confirm the model year and engine type.

Step 4: Navigate to Immobilizer

From the system list, choose System Selection.
Look for Immobilizer or ETACS (Body Computer) . On some software versions, the immobilizer is listed under Special Functions.
The scanner will now perform a Security Gateway handshake. You’ll see a message like: “Vehicle equipped with Security Gateway. Proceed?” Tap Yes.

Step 5: Retrieve the Security Code

From the Immobilizer menu, select Special Functions > Key Registration (or Key Programming).
You’ll be prompted for a Security Code (PIN).
- Automatic: Tap “Auto Code Retrieval.” The X431 will scan the ECU and pull the code (usually a 4‑ or 5‑digit number). This works on most Pajero Sport models.
- Manual: If auto retrieval fails, look for the code on the white sticker that came with the spare key, or read it directly from the ETACS module behind the glove box using a flashlight.
Enter the code. A successful entry opens the programming menu.

Step 6: Register the Keys

The scanner will ask: “Number of keys to register?”
- Critical: Enter the total number of keys you want to work — that includes all existing working keys plus the new one(s).
- Example: you have 1 old key and 1 new blank key → enter 2.
- Warning: Entering “1” will erase all existing keys from the system, leaving only the one you program now.
Follow the on‑screen prompts:
- “Insert Key #1 and turn to ON.” — use the working key.
- Wait for “Learning OK” (usually 5–10 seconds).
- “Insert Key #2.” — use the new blank key.
- Wait for “Learning OK.”
The scanner displays “All Keys Registered.”

Step 7: Exit and Test

Tap Exit on the scanner.
Turn the ignition OFF and remove the key.
Wait 10 seconds.
Test each key: insert, turn to ON, then start the engine. Both should work.

Troubleshooting Common Errors

Error: “Security Gateway Communication Failure”

Likely cause: Outdated LAUNCH software or a mismatched region selection.
Fix: Update the tablet via WiFi to the latest firmware. Reboot the unit and try again. If it persists, ensure you selected the correct vehicle region (e.g., Asia vs. Europe).

Error: “Security Code Incorrect”

Likely cause: Wrong code entered, or the auto retrieval read a partial VIN.
Fix:
1. Try the “Manual Input” method using the code from the key tag.
2. Read the code directly from the ETACS module (located behind the glove box). It’s often printed on a small white sticker.
3. If neither works, you may need a paid online service to decode the PIN from the VIN. Some LAUNCH subscriptions include this service.

Error: “Learning Failed — Key Not Detected”

Likely cause: The new blank key lacks a transponder, or the battery in the remote fob is dead.
Fix:
1. Verify the blank is a genuine transponder key (4D‑60 or G‑chip). A standard hardware store blank won’t work.
2. Replace the battery in the new remote fob — even a new battery can be flat.
3. Hold the key closer to the ignition ring during programming.

Error: “Voltage Low”

Likely cause: Battery dropped below 12.0V during programming.
Fix: Connect a battery charger/maintainer to the terminals. Do not use a jump pack — it can introduce electrical noise that disrupts the ECU handshake.

Error: No “Key Programming” Menu

Likely cause: Software version is too old, or the Mitsubishi license is inactive.
Fix: Update the LAUNCH tablet and verify that your account has an active Mitsubishi key‑programming subscription. If you’re using a free trial, it may not include this function.

Post-Programming Best Practices

Don’t assume the job is done just because the engine starts. Take these steps to ensure everything is solid:

Test all remote functions — lock, unlock, panic alarm, and remote start (if equipped).
Perform a drive cycle — take the vehicle for a 5‑minute drive. This allows the ECU to finalize the key ID across all modules.
Scan for DTCs — use the LAUNCH X431 to check the ECU for any trouble codes. Clear any “Immobilizer Communication” history codes that may have been set during programming.

When to Call a Professional

Even with a capable tool like the LAUNCH X431, some situations require a higher level of access:

You have zero working keys. Without at least one registered key to start the vehicle, the scanner cannot initiate the programming session. You’ll need a bench unlock of the ECU or a dealer‑level J2534 pass‑through session.
The ECU or ETACS module was swapped from a different vehicle. Key registration alone won’t work — the module must be paired to the VIN via online authentication.
You keep getting Security Gateway errors after updating the software. Some late‑model Pajero Sport units (especially 2024+) may require an online subscription that the aftermarket LAUNCH cannot bypass.

For more details on how to handle a lost‑all‑keys scenario, check out our guide on [link to related guide on locksmith ECU bench programming].

Frequently Asked Questions

1. Can I program a LAUNCH X431 that I bought used?

Yes, as long as the previous owner unbound the device from their account. You’ll need to create your own LAUNCH account and purchase a new Mitsubishi key‑programming subscription. The hardware itself has no restrictions after the account is cleared.

2. Does the LAUNCH X431 work on a 2021 Mitsubishi Pajero Sport?

Absolutely. The LAUNCH X431 V+ Pro and PAD VII are among the few aftermarket tools that successfully bypass the Security Gateway on 2019–2024 Pajero Sport models, including the 2021. Just make sure your software is up to date.

3. How many keys can I program at once?

The system supports up to 4 keys per session. Remember to enter the total number of keys you want to keep active (including existing ones). If you have two old keys and one new blank, enter “3.”

4. Will this process erase my existing keys?

Only if you tell it to. When the scanner asks for the “Number of keys to register,” entering a smaller number will delete any keys you don’t list. For example, entering “1” while you have two existing keys will erase both of them.

5. Is the security code the same as the radio code?

No. The immobilizer security code (PIN) is stored in the ECU and is unique to the vehicle’s anti‑theft system. The radio code is a separate number used only for the audio unit. They are not interchangeable.

6. Do I need a special blank key?

Yes. The blank must contain a compatible transponder chip — typically a 4D-60 or G‑chip for the Pajero Sport. A plain metal key without the chip will not be recognized by the immobilizer. You can purchase these from automotive locksmiths or online suppliers that specialize in Mitsubishi keys.

7. What if the LAUNCH X431 doesn’t show a “Key Programming” menu?

This usually means your software version is too old or your subscription doesn’t include the Immobilizer function. Update the tablet over WiFi first. If the menu still doesn’t appear, contact LAUNCH support to verify your license.

8. Can I use an Autel scanner instead?

Yes, Autel scanners like the MK808 or Ultra also support Mitsubishi key programming and Security Gateway bypass. However, the menu structure differs — you’ll need to find the “Immobilizer” option under “Special Functions.” The LAUNCH X431 is often preferred for Asian vehicles because of its simpler one‑click bypass. For a comparison of the two platforms, see our article on [link to related guide on Autel vs. LAUNCH for Mitsubishi].

About the Author: Erwin Salarda is an Automotive Service Equipment Technician based in the Philippines, specializing in computerized automotive diagnostic equipment such as OBD scanners and wheel alignment systems. Since 2012, he has been actively providing technical support, equipment installation, troubleshooting, after-sales service, and hands-on training for automotive service equipment used by workshops and automotive professionals.

He has received specialized training from international suppliers and manufacturers, including Launch X431 in Shenzhen, China, Lawrence Engineering Company in Guangzhou, China, and 3Excel Wheel Alignment Company in Shenzhen, China. Through these trainings, he developed advanced expertise in automotive diagnostics, calibration, wheel alignment systems, and computerized automotive service technologies.

Erwin Salarda provides professional after-sales support and technical training for automotive diagnostic and wheel alignment equipment, helping clients maximize the performance and proper use of their tools and systems. His experience covers equipment setup, software updates, calibration procedures, troubleshooting, and operational guidance for automotive workshops and service centers.

With more than a decade of experience in the automotive equipment industry, Erwin Salarda continues to support automotive businesses by delivering reliable technical expertise and practical training solutions.

For inquiries and equipment purchases, please visit https://carlifterph.com/